fbb44c4c6e650ed4a3154c28e96520f5_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

fbb44c4c6e650ed4a3154c28e96520f5_JaffaCakes118
Size

2.0MB
MD5

fbb44c4c6e650ed4a3154c28e96520f5
SHA1

ce54af5d6fff92b04367fd59f6d854865636a8a3
SHA256

447707e7418b45c1ff4ebd1f003d371be6792298db5a087583d45cd25b8c3c97
SHA512

b170872e74b81714d20e0d5c037686908b5245cf734f3d2bf1afb5061a018dbe8e5c6371e3247c9636b258aa752a897a25e75eb92a21ba8b1ead27d0c777c136
SSDEEP

49152:Fgebq192d0hdQ/vYK4rCyTXwcuDtdMYfqsEsWgXeomYc1hHoG:SebqDUXYJGyjwcuDtc2WgXfaQG

Score

3^/10

Malware Config

Signatures

Unsigned PE 11 IoCs

Checks for missing Authenticode signature.

resource
fbb44c4c6e650ed4a3154c28e96520f5_JaffaCakes118
unpack001/$PLUGINSDIR/AnimGif.dll
unpack001/$PLUGINSDIR/KillProcDLL.dll
unpack001/$PLUGINSDIR/LangDLL.dll
unpack001/$PLUGINSDIR/System.dll
unpack001/$PLUGINSDIR/nsDialogs.dll
unpack001/$PLUGINSDIR/nsExec.dll
unpack001/ATL80.dll
unpack001/EndProcess.exe
unpack001/GUIBase.dll
unpack001/flash.exe

NSIS installer 2 IoCs

installer

resource	yara_rule
sample	nsis_installer_1
sample	nsis_installer_2

Files

fbb44c4c6e650ed4a3154c28e96520f5_JaffaCakes118
.exe windows:4 windows x86 arch:x86

099c0646ea7282d232219f8807883be0

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CompareFileTime
SearchPathA
GetShortPathNameA
GetFullPathNameA
MoveFileA
SetCurrentDirectoryA
GetFileAttributesA
GetLastError
CreateDirectoryA
SetFileAttributesA
Sleep
GetTickCount
CreateFileA
GetFileSize
GetModuleFileNameA
GetCurrentProcess
CopyFileA
ExitProcess
SetFileTime
GetTempPathA
GetCommandLineA
SetErrorMode
LoadLibraryA
lstrcpynA
GetDiskFreeSpaceA
GlobalUnlock
GlobalLock
CreateThread
CreateProcessA
RemoveDirectoryA
GetTempFileNameA
lstrlenA
lstrcatA
GetSystemDirectoryA
GetVersion
CloseHandle
lstrcmpiA
lstrcmpA
ExpandEnvironmentStringsA
GlobalFree
GlobalAlloc
WaitForSingleObject
GetExitCodeProcess
GetModuleHandleA
LoadLibraryExA
GetProcAddress
FreeLibrary
MultiByteToWideChar
WritePrivateProfileStringA
GetPrivateProfileStringA
WriteFile
ReadFile
MulDiv
SetFilePointer
FindClose
FindNextFileA
FindFirstFileA
DeleteFileA
GetWindowsDirectoryA

user32

EndDialog
ScreenToClient
GetWindowRect
EnableMenuItem
GetSystemMenu
SetClassLongA
IsWindowEnabled
SetWindowPos
GetSysColor
GetWindowLongA
SetCursor
LoadCursorA
CheckDlgButton
GetMessagePos
LoadBitmapA
CallWindowProcA
IsWindowVisible
CloseClipboard
SetClipboardData
EmptyClipboard
RegisterClassA
TrackPopupMenu
AppendMenuA
CreatePopupMenu
GetSystemMetrics
SetDlgItemTextA
GetDlgItemTextA
MessageBoxIndirectA
CharPrevA
DispatchMessageA
PeekMessageA
DestroyWindow
CreateDialogParamA
SetTimer
SetWindowTextA
PostQuitMessage
SetForegroundWindow
wsprintfA
SendMessageTimeoutA
FindWindowExA
SystemParametersInfoA
CreateWindowExA
GetClassInfoA
DialogBoxParamA
CharNextA
OpenClipboard
ExitWindowsEx
IsWindow
GetDlgItem
SetWindowLongA
LoadImageA
GetDC
EnableWindow
InvalidateRect
SendMessageA
DefWindowProcA
BeginPaint
GetClientRect
FillRect
DrawTextA
EndPaint
ShowWindow

gdi32

SetBkColor
GetDeviceCaps
DeleteObject
CreateBrushIndirect
CreateFontIndirectA
SetBkMode
SetTextColor
SelectObject

shell32

SHGetPathFromIDListA
SHBrowseForFolderA
SHGetFileInfoA
ShellExecuteA
SHFileOperationA
SHGetSpecialFolderLocation

advapi32

RegQueryValueExA
RegSetValueExA
RegEnumKeyA
RegEnumValueA
RegOpenKeyExA
RegDeleteKeyA
RegDeleteValueA
RegCloseKey
RegCreateKeyExA

comctl32

ImageList_AddMasked
ImageList_Destroy
ord17
ImageList_Create

ole32

CoTaskMemFree
OleInitialize
OleUninitialize
CoCreateInstance

version

GetFileVersionInfoSizeA
GetFileVersionInfoA
VerQueryValueA

Sections

.text
Size: 23KB - Virtual size: 22KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 107KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ndata
Size: - Virtual size: 96KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 46KB - Virtual size: 45KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
$PLUGINSDIR/AnimGif.dll
.dll windows:4 windows x86 arch:x86

b4b71331b921e2f441a2b05306cd7dae

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

CreateFileA
ReadFile
lstrcmpiA
SetFilePointer
CloseHandle
TerminateThread
CreateThread
Sleep
lstrcpyA
GlobalFree

user32

ValidateRect
FillRect
InvalidateRgn
GetDC
ReleaseDC
CallWindowProcA
GetSysColor
FindWindowExA
IsWindowVisible
GetClientRect
IsWindow
GetWindowLongA
SetWindowLongA
RedrawWindow
SetRect

gdi32

FillRgn
CreateDIBitmap
CreateCompatibleDC
CreateSolidBrush
GetPixel
DeleteDC
StretchBlt
CreateRectRgn
SetDIBitsToDevice
DeleteObject
SetRectRgn
CombineRgn
SelectObject

msvcrt

strtoul
strchr
??2@YAPAXI@Z
__dllonexit
_onexit
??3@YAXPAX@Z

Exports

Exports

play
stop

Sections

.text
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 224B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 382B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$PLUGINSDIR/KillProcDLL.dll
.dll windows:4 windows x86 arch:x86

153027ec3b10bcea606b777657dd3402

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetVersionExA
TerminateProcess
OpenProcess
LoadLibraryA
CloseHandle
GetProcAddress
FreeLibrary
GlobalFree
lstrcpyA
DisableThreadLibraryCalls

msvcrt

strcmp
_strupr
toupper
strlen
free
_initterm
malloc
_adjust_fdiv
strcpy
_itoa

Exports

Exports

KillProc

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 172B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$PLUGINSDIR/LangDLL.dll
.dll windows:4 windows x86 arch:x86

9b6b6a7858e17fb0b17e1c1428330343

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GlobalFree
GetACP
lstrlenA
lstrcmpA
lstrcpynA
GetModuleHandleA
MulDiv
lstrcpyA
GlobalAlloc

user32

SetWindowTextA
SetDlgItemTextA
SendDlgItemMessageA
EndDialog
DialogBoxParamA
LoadIconA
SendMessageA
ShowWindow
GetDC

gdi32

CreateFontIndirectA
GetDeviceCaps
DeleteObject

Exports

Exports

LangDialog

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 697B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 352B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 320B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$PLUGINSDIR/System.dll
.dll windows:4 windows x86 arch:x86

2017f2acbdaa42ab3e4adeb8b4c37e7b

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GlobalAlloc
GlobalFree
GlobalSize
GetLastError
lstrcpyA
lstrcpynA
FreeLibrary
lstrcatA
GetProcAddress
LoadLibraryA
GetModuleHandleA
MultiByteToWideChar
lstrlenA
WideCharToMultiByte
VirtualAlloc
VirtualProtect

user32

wsprintfA

ole32

StringFromGUID2
CLSIDFromString

Exports

Exports

Alloc
Call
Copy
Free
Get
Int64Op
Store

Sections

.text
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 784B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 100B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1024B - Virtual size: 520B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$PLUGINSDIR/modern-header.bmp
$PLUGINSDIR/modern-wizard.bmp
$PLUGINSDIR/nsDialogs.dll
.dll windows:4 windows x86 arch:x86

1e2884056e655f2b7bc5a904e352fc80

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

lstrcpyA
GetFileAttributesA
lstrcmpiA
MulDiv
lstrlenA
HeapFree
GetCurrentDirectoryA
HeapAlloc
HeapReAlloc
GlobalFree
lstrcpynA
GlobalAlloc
GetProcessHeap
SetCurrentDirectoryA

user32

GetPropA
DestroyWindow
CallWindowProcA
SetCursor
LoadCursorA
RemovePropA
CharPrevA
GetWindowLongA
DrawTextA
GetWindowTextA
GetDlgItem
SetWindowLongA
SetWindowPos
CreateDialogParamA
MapWindowPoints
GetWindowRect
SetPropA
CreateWindowExA
IsWindow
SetTimer
KillTimer
DispatchMessageA
TranslateMessage
GetMessageA
IsDialogMessageA
ShowWindow
wsprintfA
MapDialogRect
GetClientRect
CharNextA
SendMessageA
DrawFocusRect

gdi32

SetTextColor

shell32

SHBrowseForFolderA
SHGetPathFromIDListA

comdlg32

GetSaveFileNameA
GetOpenFileNameA
CommDlgExtendedError

ole32

CoTaskMemFree

Exports

Exports

Create
CreateControl
CreateItem
CreateTimer
GetUserData
KillTimer
OnBack
OnChange
OnClick
OnNotify
SelectFileDialog
SelectFolderDialog
SetRTL
SetUserData
Show

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 152B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 572B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$PLUGINSDIR/nsExec.dll
.dll windows:4 windows x86 arch:x86

d83f71e61ee459ee63ca3e829966a9dc

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetExitCodeProcess
WaitForSingleObject
Sleep
TerminateProcess
lstrcpyA
lstrcpynA
GlobalReAlloc
GlobalUnlock
GlobalSize
ReadFile
PeekNamedPipe
GetTickCount
CreateProcessA
GetStartupInfoA
CreatePipe
GetVersionExA
GetModuleHandleA
DeleteFileA
lstrcmpiA
lstrlenA
lstrcatA
CloseHandle
UnmapViewOfFile
MapViewOfFile
CreateFileMappingA
CreateFileA
CopyFileA
GetTempFileNameA
GlobalFree
GlobalAlloc
GetModuleFileNameA
ExitProcess
GetCommandLineA
GetProcAddress
GlobalLock
GetCurrentProcess

user32

SendMessageA
OemToCharBuffA
CharNextA
wsprintfA
CharPrevA
FindWindowExA

advapi32

InitializeSecurityDescriptor
SetSecurityDescriptorDacl

Exports

Exports

Exec
ExecToLog
ExecToStack

Sections

.text
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 410B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$_18_/npwangwang.dll
.dll windows:4 windows x86 arch:x86

25b99571280d7a11c07012a898bcdf6b

Code Sign

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

15/06/2007, 00:00

Not After

14/06/2012, 23:59

Subject

CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04/12/2003, 00:00

Not After

03/12/2013, 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

59:d7:21:95:2a:a2:09:ee:3e:7b:d3:82:4f:7f:b6:e4
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Not Before

22/04/2010, 00:00

Not After

17/05/2011, 23:59

Subject

CN=Alibaba (China) Co. Ltd.,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Alibaba (China) Co. Ltd.,L=HangZhou,ST=ZheJiang,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

65:52:26:e1:b2:2e:18:e1:59:0f:29:85:ac:22:e7:5c
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

21/05/2009, 00:00

Not After

20/05/2019, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

52:f7:2b:5d:ff:5a:23:13:0d:83:d5:a7:38:a4:44:e3:59:43:31:ab
Signer

Actual PE Digest

52:f7:2b:5d:ff:5a:23:13:0d:83:d5:a7:38:a4:44:e3:59:43:31:ab

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

d:\WorkCode\NP\npww\release\npww.pdb

Imports

kernel32

WideCharToMultiByte
HeapFree
GetProcessHeap
lstrlenA
FlushFileBuffers
CloseHandle
CreateFileA
MultiByteToWideChar
GetLastError
InterlockedDecrement
GetLocaleInfoA
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
SetStdHandle
InitializeCriticalSection
GetCurrentThreadId
GetCommandLineA
GetVersionExA
HeapAlloc
RtlUnwind
RaiseException
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetProcAddress
GetModuleHandleA
ExitProcess
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
Sleep
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
DeleteCriticalSection
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
HeapDestroy
HeapCreate
VirtualFree
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
LeaveCriticalSection
EnterCriticalSection
VirtualAlloc
HeapReAlloc
WriteFile
HeapSize
SetFilePointer
GetConsoleCP
GetConsoleMode
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
LoadLibraryA

user32

SetWindowLongA
EndPaint
BeginPaint
DefWindowProcA

advapi32

RegOpenKeyExA
RegCloseKey
RegQueryValueExA

ole32

CoCreateInstance
CoInitialize
CoUninitialize

oleaut32

SysAllocString
VariantClear
SysFreeString

Exports

Exports

NP_GetEntryPoints
NP_Initialize
NP_Shutdown

Sections

.text
Size: 60KB - Virtual size: 56KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 16KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$_18_/npwangwang.dll.new
.dll windows:4 windows x86 arch:x86

25b99571280d7a11c07012a898bcdf6b

Code Sign

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

15/06/2007, 00:00

Not After

14/06/2012, 23:59

Subject

CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04/12/2003, 00:00

Not After

03/12/2013, 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

59:d7:21:95:2a:a2:09:ee:3e:7b:d3:82:4f:7f:b6:e4
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Not Before

22/04/2010, 00:00

Not After

17/05/2011, 23:59

Subject

CN=Alibaba (China) Co. Ltd.,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Alibaba (China) Co. Ltd.,L=HangZhou,ST=ZheJiang,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

65:52:26:e1:b2:2e:18:e1:59:0f:29:85:ac:22:e7:5c
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

21/05/2009, 00:00

Not After

20/05/2019, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

52:f7:2b:5d:ff:5a:23:13:0d:83:d5:a7:38:a4:44:e3:59:43:31:ab
Signer

Actual PE Digest

52:f7:2b:5d:ff:5a:23:13:0d:83:d5:a7:38:a4:44:e3:59:43:31:ab

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

d:\WorkCode\NP\npww\release\npww.pdb

Imports

kernel32

WideCharToMultiByte
HeapFree
GetProcessHeap
lstrlenA
FlushFileBuffers
CloseHandle
CreateFileA
MultiByteToWideChar
GetLastError
InterlockedDecrement
GetLocaleInfoA
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
SetStdHandle
InitializeCriticalSection
GetCurrentThreadId
GetCommandLineA
GetVersionExA
HeapAlloc
RtlUnwind
RaiseException
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetProcAddress
GetModuleHandleA
ExitProcess
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
Sleep
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
DeleteCriticalSection
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
HeapDestroy
HeapCreate
VirtualFree
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
LeaveCriticalSection
EnterCriticalSection
VirtualAlloc
HeapReAlloc
WriteFile
HeapSize
SetFilePointer
GetConsoleCP
GetConsoleMode
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
LoadLibraryA

user32

SetWindowLongA
EndPaint
BeginPaint
DefWindowProcA

advapi32

RegOpenKeyExA
RegCloseKey
RegQueryValueExA

ole32

CoCreateInstance
CoInitialize
CoUninitialize

oleaut32

SysAllocString
VariantClear
SysFreeString

Exports

Exports

NP_GetEntryPoints
NP_Initialize
NP_Shutdown

Sections

.text
Size: 60KB - Virtual size: 56KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 16KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$_19_/npwangwang.dll
.dll windows:4 windows x86 arch:x86

25b99571280d7a11c07012a898bcdf6b

Code Sign

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

15/06/2007, 00:00

Not After

14/06/2012, 23:59

Subject

CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04/12/2003, 00:00

Not After

03/12/2013, 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

59:d7:21:95:2a:a2:09:ee:3e:7b:d3:82:4f:7f:b6:e4
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Not Before

22/04/2010, 00:00

Not After

17/05/2011, 23:59

Subject

CN=Alibaba (China) Co. Ltd.,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Alibaba (China) Co. Ltd.,L=HangZhou,ST=ZheJiang,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

65:52:26:e1:b2:2e:18:e1:59:0f:29:85:ac:22:e7:5c
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

21/05/2009, 00:00

Not After

20/05/2019, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

52:f7:2b:5d:ff:5a:23:13:0d:83:d5:a7:38:a4:44:e3:59:43:31:ab
Signer

Actual PE Digest

52:f7:2b:5d:ff:5a:23:13:0d:83:d5:a7:38:a4:44:e3:59:43:31:ab

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

d:\WorkCode\NP\npww\release\npww.pdb

Imports

kernel32

WideCharToMultiByte
HeapFree
GetProcessHeap
lstrlenA
FlushFileBuffers
CloseHandle
CreateFileA
MultiByteToWideChar
GetLastError
InterlockedDecrement
GetLocaleInfoA
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
SetStdHandle
InitializeCriticalSection
GetCurrentThreadId
GetCommandLineA
GetVersionExA
HeapAlloc
RtlUnwind
RaiseException
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetProcAddress
GetModuleHandleA
ExitProcess
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
Sleep
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
DeleteCriticalSection
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
HeapDestroy
HeapCreate
VirtualFree
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
LeaveCriticalSection
EnterCriticalSection
VirtualAlloc
HeapReAlloc
WriteFile
HeapSize
SetFilePointer
GetConsoleCP
GetConsoleMode
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
LoadLibraryA

user32

SetWindowLongA
EndPaint
BeginPaint
DefWindowProcA

advapi32

RegOpenKeyExA
RegCloseKey
RegQueryValueExA

ole32

CoCreateInstance
CoInitialize
CoUninitialize

oleaut32

SysAllocString
VariantClear
SysFreeString

Exports

Exports

NP_GetEntryPoints
NP_Initialize
NP_Shutdown

Sections

.text
Size: 60KB - Virtual size: 56KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 16KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$_19_/npwangwang.dll.new
.dll windows:4 windows x86 arch:x86

25b99571280d7a11c07012a898bcdf6b

Code Sign

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

15/06/2007, 00:00

Not After

14/06/2012, 23:59

Subject

CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04/12/2003, 00:00

Not After

03/12/2013, 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

59:d7:21:95:2a:a2:09:ee:3e:7b:d3:82:4f:7f:b6:e4
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Not Before

22/04/2010, 00:00

Not After

17/05/2011, 23:59

Subject

CN=Alibaba (China) Co. Ltd.,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Alibaba (China) Co. Ltd.,L=HangZhou,ST=ZheJiang,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

65:52:26:e1:b2:2e:18:e1:59:0f:29:85:ac:22:e7:5c
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

21/05/2009, 00:00

Not After

20/05/2019, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

52:f7:2b:5d:ff:5a:23:13:0d:83:d5:a7:38:a4:44:e3:59:43:31:ab
Signer

Actual PE Digest

52:f7:2b:5d:ff:5a:23:13:0d:83:d5:a7:38:a4:44:e3:59:43:31:ab

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

d:\WorkCode\NP\npww\release\npww.pdb

Imports

kernel32

WideCharToMultiByte
HeapFree
GetProcessHeap
lstrlenA
FlushFileBuffers
CloseHandle
CreateFileA
MultiByteToWideChar
GetLastError
InterlockedDecrement
GetLocaleInfoA
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
SetStdHandle
InitializeCriticalSection
GetCurrentThreadId
GetCommandLineA
GetVersionExA
HeapAlloc
RtlUnwind
RaiseException
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetProcAddress
GetModuleHandleA
ExitProcess
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
Sleep
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
DeleteCriticalSection
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
HeapDestroy
HeapCreate
VirtualFree
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
LeaveCriticalSection
EnterCriticalSection
VirtualAlloc
HeapReAlloc
WriteFile
HeapSize
SetFilePointer
GetConsoleCP
GetConsoleMode
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
LoadLibraryA

user32

SetWindowLongA
EndPaint
BeginPaint
DefWindowProcA

advapi32

RegOpenKeyExA
RegCloseKey
RegQueryValueExA

ole32

CoCreateInstance
CoInitialize
CoUninitialize

oleaut32

SysAllocString
VariantClear
SysFreeString

Exports

Exports

NP_GetEntryPoints
NP_Initialize
NP_Shutdown

Sections

.text
Size: 60KB - Virtual size: 56KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 16KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
ATL80.dll
.dll windows:4 windows x86 arch:x86

00c6e566e88c3d07ddc376fe4ce83c5f

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

atl80.i386.pdb

Imports

kernel32

RaiseException
EnterCriticalSection
LeaveCriticalSection
GetCurrentThreadId
FindClose
FindFirstFileW
CompareStringW
GetSystemDirectoryW
GetLongPathNameW
GetModuleFileNameW
GetProcAddress
GetModuleHandleW
lstrlenW
InitializeCriticalSection
DeleteCriticalSection
GetLastError
DisableThreadLibraryCalls
DebugBreak
OutputDebugStringA
GetVersionExA
InterlockedIncrement
InterlockedDecrement
lstrcmpiW
FreeLibrary
MultiByteToWideChar
SizeofResource
LoadResource
FindResourceW
LoadLibraryExW
CloseHandle
ReadFile
GetFileSize
CreateFileW
WideCharToMultiByte
WaitForSingleObject
GlobalAlloc
FindResourceA
MulDiv
FlushInstructionCache
GetCurrentProcess
lstrcmpW
GlobalUnlock
GlobalLock
SetLastError
GlobalFree
GlobalHandle
LockResource
lstrcmpA
GetModuleHandleA
GetTickCount
InterlockedExchange
GetACP
GetLocaleInfoA
GetThreadLocale
InterlockedCompareExchange
HeapFree
GetProcessHeap
HeapAlloc
LoadLibraryA
IsProcessorFeaturePresent
VirtualFree
VirtualAlloc
HeapSize
HeapReAlloc
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RtlUnwind
LocalAlloc

Exports

Exports

AtlAdvise
AtlAxAttachControl
AtlAxCreateControl
AtlAxCreateControlEx
AtlAxCreateControlLic
AtlAxCreateControlLicEx
AtlAxCreateDialogA
AtlAxCreateDialogW
AtlAxDialogBoxA
AtlAxDialogBoxW
AtlAxGetControl
AtlAxGetHost
AtlAxWinInit
AtlCallTermFunc
AtlComModuleGetClassObject
AtlComModuleRegisterClassObjects
AtlComModuleRegisterServer
AtlComModuleRevokeClassObjects
AtlComModuleUnregisterServer
AtlComPtrAssign
AtlComQIPtrAssign
AtlCreateRegistrar
AtlCreateTargetDC
AtlDevModeW2A
AtlFreeMarshalStream
AtlGetObjectSourceInterface
AtlGetVersion
AtlHiMetricToPixel
AtlIPersistPropertyBag_Load
AtlIPersistPropertyBag_Save
AtlIPersistStreamInit_Load
AtlIPersistStreamInit_Save
AtlInternalQueryInterface
AtlLoadTypeLib
AtlMarshalPtrInProc
AtlModuleAddTermFunc
AtlPixelToHiMetric
AtlRegisterClassCategoriesHelper
AtlRegisterTypeLib
AtlSetErrorInfo
AtlUnRegisterTypeLib
AtlUnadvise
AtlUnmarshalPtr
AtlUpdateRegistryFromResourceD
AtlWaitWithMessageLoop
AtlWinModuleAddCreateWndData
AtlWinModuleExtractCreateWndData
AtlWinModuleInit
AtlWinModuleRegisterClassExA
AtlWinModuleRegisterClassExW
AtlWinModuleRegisterWndClassInfoA
AtlWinModuleRegisterWndClassInfoW
AtlWinModuleTerm

Sections

.text
Size: 57KB - Virtual size: 57KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
AVTransBiz.dll
.dll windows:4 windows x86 arch:x86

06c938b1fbcf089ab057d7fbcd97c6c6

Code Sign

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

15/06/2007, 00:00

Not After

14/06/2012, 23:59

Subject

CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04/12/2003, 00:00

Not After

03/12/2013, 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

59:d7:21:95:2a:a2:09:ee:3e:7b:d3:82:4f:7f:b6:e4
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Not Before

22/04/2010, 00:00

Not After

17/05/2011, 23:59

Subject

CN=Alibaba (China) Co. Ltd.,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Alibaba (China) Co. Ltd.,L=HangZhou,ST=ZheJiang,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

65:52:26:e1:b2:2e:18:e1:59:0f:29:85:ac:22:e7:5c
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

21/05/2009, 00:00

Not After

20/05/2019, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

09:83:7c:e7:bd:5d:46:47:81:4b:f5:2a:f3:b5:b1:94:25:6b:5f:ed
Signer

Actual PE Digest

09:83:7c:e7:bd:5d:46:47:81:4b:f5:2a:f3:b5:b1:94:25:6b:5f:ed

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

E:\AliWWAutoPackage\Trunk\SourceCode\IMClient-RV\symbol\Release\AVTransBiz.pdb

Imports

ws2_32

inet_addr
htonl
htons
ntohs
ntohl

wwutils

?IMCU_IsWorkBench@@YAHXZ

kernel32

GetCurrentProcessId
InitializeCriticalSection
DeleteCriticalSection
InterlockedIncrement
InterlockedDecrement
lstrlenW
EnterCriticalSection
LeaveCriticalSection
GetModuleFileNameW
SizeofResource
LockResource
LoadResource
FindResourceW
FindResourceExW
GetLastError
Sleep
InterlockedCompareExchange
GetProcAddress
GetSystemTimeAsFileTime
FreeLibrary
WideCharToMultiByte
MultiByteToWideChar
lstrlenA
GetTickCount
RaiseException
GetCurrentThreadId
QueryPerformanceCounter
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetProcessHeap
HeapSize
HeapReAlloc
GetVersionExA
HeapDestroy
HeapAlloc
GetThreadLocale
GetLocaleInfoA
GetACP
InterlockedExchange
LoadLibraryW
HeapFree

user32

UnregisterClassA

ole32

CoCreateInstance

oleaut32

LoadTypeLi
SysAllocString
LoadRegTypeLi
SysStringLen
SysFreeString

p2pbiz

?GetP2PUserMgr@@YAPAVIP2PUserMgr@@XZ

ww_network2

?WW_Bind@@YAXPB_WW4P2P_DLL_VERSION@@@Z
?WW_Unbind@@YAXPB_W@Z
?WW_GetClient@@YAPAVCBaseClient@@PB_WW4P2P_DLL_VERSION@@@Z
?WW_FreeClient@@YAXPAPAVCBaseClient@@@Z
?WW_RefreshNatAddress@@YA_NXZ
?WW_GetLocalUPort@@YAHXZ
?WW_GetMapPort@@YAHXZ
?WW_GetNatAddr@@YA_NAAUtag_AddrParam@@@Z
?WW_FilterStrategy@@YA_NPB_WPAUtag_Strategy@@AAH@Z
?WW_ReserveStrategy@@YAXPAUtag_Strategy@@H@Z
?WW_GetLocalPort@@YAHXZ
?WW_GetLocalAddr@@YAKXZ
?WW_GetStrategy@@YA_NPB_WPAUtag_Strategy@@AAH@Z
?WW_GetStrategyMaxCount@@YAHXZ

atl80

ord64
ord15
ord32
ord58
ord31
ord30

msvcr80

memset
__clean_type_info_names_internal
?_type_info_dtor_internal_method@type_info@@QAEXXZ
_crt_debugger_hook
??3@YAXPAX@Z
__CxxFrameHandler3
_purecall
??_V@YAXPAX@Z
??2@YAPAXI@Z
_CxxThrowException
free
??_U@YAPAXI@Z
??1exception@std@@UAE@XZ
__CppXcptFilter
??0exception@std@@QAE@XZ
memcpy_s
_invalid_parameter_noinfo
memmove_s
??0exception@std@@QAE@ABV01@@Z
_recalloc
wcsrchr
calloc
wcsncat_s
??8type_info@@QBE_NABV0@@Z
strncpy
memcpy
_except_handler4_common
_unlock
__dllonexit
_encode_pointer
_lock
_onexit
_decode_pointer
?terminate@@YAXXZ
_malloc_crt
_encoded_null
_initterm
_initterm_e
_amsg_exit
_adjust_fdiv

msvcp80

??4?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV01@ABV01@@Z
??1?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@XZ
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@XZ
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBD@Z
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@PB_W@Z
??0?$basic_ostringstream@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@H@Z
??$?6_WU?$char_traits@_W@std@@V?$allocator@_W@1@@std@@YAAAV?$basic_ostream@_WU?$char_traits@_W@std@@@0@AAV10@ABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@0@@Z
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@H@Z
?str@?$basic_ostringstream@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBE?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@2@XZ
?str@?$basic_ostringstream@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEXABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@2@@Z
??4?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV01@PB_W@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@ABV01@@Z
??_D?$basic_ostringstream@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEXXZ

rvcore

queue_timer_task
GetRvCore

rpcrt4

UuidCreate

Exports

Exports

DllCanUnloadNow
DllGetClassObject

Sections

.text
Size: 68KB - Virtual size: 64KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 24KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 12KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
AddedMsgMgr.dll
.dll regsvr32 windows:4 windows x86 arch:x86

39b2f406b71def3fa0af8eaeaa88fcf6

Code Sign

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

15/06/2007, 00:00

Not After

14/06/2012, 23:59

Subject

CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04/12/2003, 00:00

Not After

03/12/2013, 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

59:d7:21:95:2a:a2:09:ee:3e:7b:d3:82:4f:7f:b6:e4
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Not Before

22/04/2010, 00:00

Not After

17/05/2011, 23:59

Subject

CN=Alibaba (China) Co. Ltd.,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Alibaba (China) Co. Ltd.,L=HangZhou,ST=ZheJiang,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

65:52:26:e1:b2:2e:18:e1:59:0f:29:85:ac:22:e7:5c
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

21/05/2009, 00:00

Not After

20/05/2019, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

a2:3a:d1:08:95:2c:00:fe:8c:f9:ea:46:a0:ae:f8:e3:d1:76:4e:5d
Signer

Actual PE Digest

a2:3a:d1:08:95:2c:00:fe:8c:f9:ea:46:a0:ae:f8:e3:d1:76:4e:5d

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

E:\AliWWAutoPackage\Trunk\SourceCode\IMClient-RV\symbol\Release\AddedMsgMgr.pdb

Imports

guibase

?ShowUIComponent@CUIEventBase@@UAGJJ@Z
?IsUIComponentVisible@CUIEventBase@@UAGJPAF@Z
?SetResourceData@CUIEventBase@@UAGJPA_W0@Z
?GetUIComponentSkinID@CUIEventBase@@UAGJPAJ@Z
?SetUIComponentSkinID@CUIEventBase@@UAGJJ@Z
?SetUIComponentPosition@CUIEventBase@@UAGJPAUHWND__@@JJJJJ@Z
?BringUIComponentToTop@CUIEventBase@@UAGJH@Z
?GetUIComponentGetRect@CUIEventBase@@UAGJPAJ000@Z
?RegisterSKinObject@CUIEventBase@@UAGJXZ
?UnRegisterSKinObject@CUIEventBase@@UAGJXZ
?AnimateComponent@CUIEventBase@@UAGJKK@Z
?ReLoadResource@CUIEventBase@@MAGJXZ
?LoadUIComponent@CUIEventBase@@UAGJV?$intrusive_ptr@VIUIComponent@@@boost@@@Z
?ChangeSkinColor@CUIEventBase@@UAGXK@Z
?ChangeSkinTexture@CUIEventBase@@UAGXPA_W@Z
?DispatchEvent@CUIEventBase@@MAGJPAVIUIComponent@@JPAUHWND__@@IJPAJPAH@Z
??1CUICallHelper@@QAE@XZ
?get_Hwnd@CUICallHelper@@QAEPAUHWND__@@XZ
??0CUICallHelper@@QAE@V?$intrusive_ptr@VIUIComponent@@@boost@@@Z
?put_Visible@CUICallHelper@@QAEX_N@Z
?DestroyUIComponent@CUIEventBase@@QAGXXZ
?UIMessageBox@CUICallHelper@@QAEHPB_W0I@Z
??0CUICallHelper@@QAE@PAVIUIComponent@@@Z
?LoadUIComponent@CUIEventBase@@UAGJPA_W0V?$intrusive_ptr@VIUIComponent@@@boost@@@Z
?GetSkinID@CUIEventBase@@UAGJXZ
?TrackMouseLeave@CUIDefaultEventPoint@@UAGJPAH@Z
?GetEventPointCount@CUIDefaultEventPoint@@UAGJPAJ@Z
CreateXParam
?GetEventCount@CUIDefaultEventPoint@@UAGJPAJ@Z
?ClearExternnalEventPoint@CUIDefaultEventPoint@@UAGJXZ
?UnRegisterExternalEventPoint@CUIDefaultEventPoint@@UAGJPAVIUIEventPoint@@@Z
?RegisterExternalEventPoint@CUIDefaultEventPoint@@UAGJPAVIUIEventPoint@@@Z
?ClearEvent@CUIDefaultEventPoint@@UAGJXZ
?UnRegisterEvent@CUIDefaultEventPoint@@UAGJIP6GJPAVIUIComponent@@IIJPAXPAH@Z@Z
?RegisterEvent@CUIDefaultEventPoint@@UAGJIP6GJPAVIUIComponent@@IIJPAXPAH@ZJ1@Z
?QueryInterface@CUIEventBase@@UAGJPA_WPAPAX@Z
??0CUIEventBase@@QAE@PA_W0@Z
??1CUIEventBase@@QAE@XZ
?OnResetSkin@CUIEventBase@@UAGJJ@Z

wwutils

??1CBusMsgHandlerBase@@UAE@XZ
?OnMsg@CBusMsgHandlerBase@@QAEJPA_W0PAUIUnknown@@1PAF@Z
?IMAddContact_ShowAddContactDlg@@YAJV_bstr_t@@_JW4IMAddedAuthFlag_T@@00H@Z
?IMContactManager_Add2BlackList@@YAJV_bstr_t@@@Z
?IMAddContact_ShowAddContactAddedDlg@@YAJV_bstr_t@@_JF0H@Z
?IMContactManager_Agree@@YAJV_bstr_t@@_J@Z
??0CBusMsgHandlerBase@@QAE@_N@Z
?IMCU_GetConfig@@YA?AVCComBSTR@ATL@@V12@@Z
?GetReportUrl@CSafeReport@@SAXABV_bstr_t@@000AAV2@@Z
?IMCU_SetConfig@@YAJVCComBSTR@ATL@@0@Z

kernel32

InterlockedDecrement
SetThreadLocale
GetThreadLocale
SizeofResource
LockResource
LoadResource
FindResourceW
FindResourceExW
HeapFree
GetProcessHeap
Sleep
InterlockedCompareExchange
GetProcAddress
LoadLibraryW
FreeLibrary
GetModuleFileNameW
lstrlenW
CloseHandle
GetLastError
CreateProcessW
FindClose
FindFirstFileW
lstrlenA
RaiseException
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
MultiByteToWideChar
GetLocaleInfoA
InterlockedIncrement
DeleteCriticalSection
InitializeCriticalSection
LeaveCriticalSection
EnterCriticalSection
GetACP
InterlockedExchange
HeapSize
HeapReAlloc
HeapAlloc
HeapDestroy
GetVersionExA

user32

ScreenToClient
SystemParametersInfoW
IsWindow
FlashWindow
UnregisterClassA
GetCursorPos

advapi32

RegEnumKeyExW
RegQueryValueExW
RegOpenKeyExW
RegCloseKey

shell32

ShellExecuteW

ole32

CoCreateInstance

oleaut32

SysFreeString
VariantClear
SysAllocString
SysStringByteLen
SysStringLen
VariantInit
VariantChangeType
LoadRegTypeLi
LoadTypeLi
BSTR_UserFree
SysAllocStringByteLen
BSTR_UserUnmarshal
BSTR_UserSize
BSTR_UserMarshal

atl80

ord15
ord18
ord22
ord64
ord23
ord61
ord32
ord58
ord31
ord30

shlwapi

PathFileExistsW

msvcp80

?c_str@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEPBDXZ
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBD@Z

rvcore

GetRvCore

msvcr80

_adjust_fdiv
_amsg_exit
_initterm_e
_initterm
_encoded_null
_malloc_crt
?terminate@@YAXXZ
_decode_pointer
_onexit
__CppXcptFilter
_encode_pointer
__dllonexit
_unlock
_except_handler4_common
malloc
_wtol
memset
__RTDynamicCast
_time64
?_type_info_dtor_internal_method@type_info@@QAEXXZ
_crt_debugger_hook
_lock
__clean_type_info_names_internal
wcsncat_s
calloc
??3@YAXPAX@Z
_CxxThrowException
__CxxFrameHandler3
_recalloc
wcsrchr
memcpy_s
??1exception@std@@UAE@XZ
??0exception@std@@QAE@ABQBD@Z
?what@exception@std@@UBEPBDXZ
??0exception@std@@QAE@XZ
??2@YAPAXI@Z
??_V@YAXPAX@Z
_wcsicmp
wcsstr
_wcslwr_s
_vscwprintf
vswprintf_s
??0exception@std@@QAE@ABV01@@Z
_localtime64_s
_invalid_parameter_noinfo
memmove_s
??8type_info@@QBE_NABV0@@Z
free

wwparams

?size@CIMTextMessageVector@@QBEHXZ
??1CIMTextMessageVectorPtr@@UAE@XZ
?begin@CIMTextMessageVector@@QAE?AV?$_Vector_iterator@VCIMTextMessagePtr@@V?$allocator@VCIMTextMessagePtr@@@std@@@std@@XZ
?end@CIMTextMessageVector@@QAE?AV?$_Vector_iterator@VCIMTextMessagePtr@@V?$allocator@VCIMTextMessagePtr@@@std@@@std@@XZ
??CCIMTextMessageVectorPtr@@QBEPAVCIMTextMessageVector@@XZ
??0CIMTextMessageVectorPtr@@QAE@PAUIUnknown@@@Z
??0CIMTextMessageVectorPtr@@QAE@XZ
??CCIMTextMessagePtr@@QBEPAVCIMTextMessage@@XZ
??1CIMTextMessagePtr@@UAE@XZ
??0CIMTextMessagePtr@@QAE@XZ
??0CIMTextMessagePtr@@QAE@ABV0@@Z
??4CIMTextMessagePtr@@QAEPAVCIMTextMessage@@ABV0@@Z

rpcrt4

NdrOleFree
NdrDllGetClassObject
NdrDllCanUnloadNow
NdrCStdStubBuffer_Release
NdrCStdStubBuffer2_Release
NdrDllRegisterProxy
NdrDllUnregisterProxy
NdrOleAllocate
IUnknown_QueryInterface_Proxy
IUnknown_AddRef_Proxy
IUnknown_Release_Proxy
NdrStubForwardingFunction
NdrStubCall2
CStdStubBuffer_QueryInterface
CStdStubBuffer_AddRef
CStdStubBuffer_Connect
CStdStubBuffer_Disconnect
CStdStubBuffer_Invoke
CStdStubBuffer_IsIIDSupported
CStdStubBuffer_CountRefs
CStdStubBuffer_DebugServerQueryInterface
CStdStubBuffer_DebugServerRelease

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 76KB - Virtual size: 73KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.orpc
Size: 4KB - Virtual size: 576B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 32KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 12KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
AliAppLoader.exe
.exe windows:5 windows x86 arch:x86

60f5a272fc9c80bcb834df5d0bbce8cc

Code Sign

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

15/06/2007, 00:00

Not After

14/06/2012, 23:59

Subject

CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04/12/2003, 00:00

Not After

03/12/2013, 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

59:d7:21:95:2a:a2:09:ee:3e:7b:d3:82:4f:7f:b6:e4
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Not Before

22/04/2010, 00:00

Not After

17/05/2011, 23:59

Subject

CN=Alibaba (China) Co. Ltd.,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Alibaba (China) Co. Ltd.,L=HangZhou,ST=ZheJiang,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

65:52:26:e1:b2:2e:18:e1:59:0f:29:85:ac:22:e7:5c
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

21/05/2009, 00:00

Not After

20/05/2019, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

f7:f5:61:5b:f9:aa:6c:96:d5:de:7d:c5:d1:89:5c:4a:d0:1c:2b:c9
Signer

Actual PE Digest

f7:f5:61:5b:f9:aa:6c:96:d5:de:7d:c5:d1:89:5c:4a:d0:1c:2b:c9

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

D:\119_bran\IMClient-RV\symbol\Release\AliAppLoader.pdb

Imports

comctl32

InitCommonControlsEx

kernel32

CloseHandle
GetExitCodeProcess
WaitForSingleObject
CreateProcessW
TerminateProcess
GetCurrentProcess
GetCurrentThreadId
GetCurrentProcessId
Sleep
InterlockedCompareExchange
GetProcAddress
LoadLibraryW
FreeLibrary
lstrlenW
RaiseException
InitializeCriticalSection
DeleteCriticalSection
GetLastError
lstrcmpiW
GetModuleHandleW
CreateThread
CreateEventW
SetUnhandledExceptionFilter
InterlockedDecrement
SetEvent
MultiByteToWideChar
LoadLibraryExW
OpenProcess
GetCommandLineW
SetPriorityClass
IsDebuggerPresent
InterlockedExchange
EnterCriticalSection
LeaveCriticalSection
VirtualFree
LCMapStringW
IsValidCodePage
GetOEMCP
FlushFileBuffers
CreateFileA
WriteConsoleW
GetConsoleOutputCP
GetModuleFileNameW
FindFirstFileW
FindClose
FindResourceExW
FindResourceW
LoadResource
LockResource
SizeofResource
InterlockedIncrement
WriteConsoleA
SetStdHandle
GetConsoleMode
GetConsoleCP
SetFilePointer
GetLocaleInfoA
GetACP
GetCPInfo
SetLastError
TlsFree
TlsSetValue
TlsAlloc
TlsGetValue
GetStartupInfoW
ExitThread
GetSystemTimeAsFileTime
GetStringTypeW
GetStringTypeA
WideCharToMultiByte
LCMapStringA
GetModuleHandleA
GetTickCount
QueryPerformanceCounter
GetStartupInfoA
GetFileType
SetHandleCount
GetEnvironmentStringsW
FreeEnvironmentStringsW
InitializeCriticalSectionAndSpinCount
LoadLibraryA
GetModuleFileNameA
GetStdHandle
WriteFile
HeapCreate
HeapDestroy
HeapAlloc
HeapFree
HeapReAlloc
HeapSize
GetProcessHeap
RtlUnwind
UnhandledExceptionFilter
ExitProcess
VirtualAlloc

user32

MessageBoxW
GetActiveWindow
CharNextW
CharUpperW
PostQuitMessage
KillTimer
PostThreadMessageW
DispatchMessageW
TranslateMessage
GetMessageW
SetTimer

advapi32

RegDeleteValueW
RegEnumKeyExW
RegQueryInfoKeyW
RegSetValueExW
RegOpenKeyExW
RegCreateKeyExW
RegCloseKey
RegDeleteKeyW

shell32

ShellExecuteW

ole32

CoTaskMemAlloc
CoTaskMemRealloc
CoRevokeClassObject
CoRegisterClassObject
CoTaskMemFree
OleInitialize
OleUninitialize
CoCreateInstance
CoFreeUnusedLibraries
StringFromGUID2

oleaut32

LoadRegTypeLi
VarUI4FromStr
RegisterTypeLi
UnRegisterTypeLi
LoadTypeLi
SysAllocString
SysStringLen
SysFreeString

shlwapi

PathRemoveFileSpecW

rpcrt4

NdrStubForwardingFunction
IUnknown_Release_Proxy
NdrCStdStubBuffer2_Release
NdrOleAllocate
NdrOleFree
IUnknown_QueryInterface_Proxy
IUnknown_AddRef_Proxy
NdrStubCall2

gdiplus

GdiplusStartup
GdiplusShutdown

Sections

.text
Size: 114KB - Virtual size: 114KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.orpc
Size: 512B - Virtual size: 45B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 31KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 6KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 44KB - Virtual size: 44KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
AliIM.exe
.exe windows:4 windows x86 arch:x86

2e871c12b42ec6efc0e780763ed0b0cc

Code Sign

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

15/06/2007, 00:00

Not After

14/06/2012, 23:59

Subject

CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04/12/2003, 00:00

Not After

03/12/2013, 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

59:d7:21:95:2a:a2:09:ee:3e:7b:d3:82:4f:7f:b6:e4
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Not Before

22/04/2010, 00:00

Not After

17/05/2011, 23:59

Subject

CN=Alibaba (China) Co. Ltd.,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Alibaba (China) Co. Ltd.,L=HangZhou,ST=ZheJiang,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

65:52:26:e1:b2:2e:18:e1:59:0f:29:85:ac:22:e7:5c
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

21/05/2009, 00:00

Not After

20/05/2019, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

55:c9:93:49:af:ca:95:03:a8:ca:5e:f1:78:6e:3e:39:40:81:8c:6f
Signer

Actual PE Digest

55:c9:93:49:af:ca:95:03:a8:ca:5e:f1:78:6e:3e:39:40:81:8c:6f

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

E:\AliWWAutoPackage\Trunk\SourceCode\IMClient-RV\symbol\Release\AliIM.pdb

Imports

comctl32

InitCommonControlsEx

netapi32

Netbios

guibase

UIGlobalProperty

kernel32

lstrlenA
CreateFileW
LeaveCriticalSection
GetVersionExW
GetFileSize
MultiByteToWideChar
ReadFile
GetModuleHandleW
CloseHandle
GetSystemDefaultLangID
GetProcessHeap
HeapFree
InitializeCriticalSection
InterlockedCompareExchange
Sleep
GetModuleFileNameW
lstrlenW
lstrcmpiW
InterlockedIncrement
InterlockedDecrement
FindFirstFileW
FindClose
CreateProcessW
WaitForSingleObject
GetProcAddress
SetUnhandledExceptionFilter
GetCurrentThreadId
FreeLibrary
MoveFileExW
CopyFileW
QueryPerformanceCounter
IsDebuggerPresent
UnhandledExceptionFilter
TerminateProcess
GetStartupInfoW
LoadLibraryW
SizeofResource
FindResourceExW
LoadResource
GetCurrentProcessId
FindResourceW
LockResource
LoadLibraryExW
GetLastError
DeleteCriticalSection
RaiseException
GetCurrentProcess
GetExitCodeProcess
EnterCriticalSection
GetTickCount
GetThreadLocale
GetLocaleInfoA
GetACP
InterlockedExchange
HeapSize
HeapReAlloc
HeapAlloc
HeapDestroy
GetVersionExA
GetSystemTimeAsFileTime
FindNextFileW

user32

MessageBoxW
UnregisterClassA
GetActiveWindow
CharNextW
FindWindowW

advapi32

RegQueryValueExW
AllocateAndInitializeSid
RegEnumKeyExW
RegSetValueExW
GetTokenInformation
OpenProcessToken
RegDeleteKeyW
RegCloseKey
RegQueryInfoKeyW
RegCreateKeyExW
RegDeleteValueW
RegOpenKeyExW
EqualSid
FreeSid

shell32

SHCreateDirectoryExW
ShellExecuteW

ole32

CoTaskMemRealloc
OleInitialize
OleRun
CoCreateInstance
OleUninitialize
CoTaskMemFree
CoTaskMemAlloc

oleaut32

SysAllocStringByteLen
SysFreeString
SysStringByteLen
VariantClear
SysStringLen
VarUI4FromStr
SysAllocString

atl80

ord64

shlwapi

SHDeleteKeyW
PathFileExistsW

gdiplus

GdiplusStartup
GdiplusShutdown

msvcp80

??Y?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV01@ABV01@@Z
??Y?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV01@PB_W@Z
??A?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAA_WI@Z
?empty@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBE_NXZ
??$?M_WU?$char_traits@_W@std@@V?$allocator@_W@1@@std@@YA_NABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@0@0@Z
??$?H_WU?$char_traits@_W@std@@V?$allocator@_W@1@@std@@YA?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@0@ABV10@0@Z
??$?H_WU?$char_traits@_W@std@@V?$allocator@_W@1@@std@@YA?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@0@ABV10@PB_W@Z
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@XZ
??$?8_WU?$char_traits@_W@std@@V?$allocator@_W@1@@std@@YA_NABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@0@PB_W@Z
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@PB_W@Z
??4?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV01@PB_W@Z
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@ABV01@@Z
??1?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@XZ
??4?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV01@ABV01@@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??Y?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@PBD@Z
?c_str@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEPBDXZ
?length@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIXZ
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBD@Z

rvcore

EnableMsgBus
create_main_thread_window
GetRvCore

msvcr80

_configthreadlocale
_initterm_e
_initterm
_wcmdln
exit
_XcptFilter
_controlfp_s
_invoke_watson
_exit
_cexit
__wgetmainargs
_amsg_exit
?terminate@@YAXXZ
_decode_pointer
_onexit
_lock
?_type_info_dtor_internal_method@type_info@@QAEXXZ
_crt_debugger_hook
_except_handler4_common
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
??3@YAXPAX@Z
wcschr
wcsrchr
wcsncpy_s
strlen
memmove_s
memset
??0exception@std@@QAE@ABQBD@Z
??1exception@std@@UAE@XZ
_vscwprintf
??0exception@std@@QAE@XZ
_invalid_parameter_noinfo
vswprintf_s
memcpy
memcmp
??0exception@std@@QAE@ABV01@@Z
_wputenv_s
calloc
_recalloc
?what@exception@std@@UBEPBDXZ
sprintf_s
malloc
??_V@YAXPAX@Z
free
wcsncat_s
??2@YAPAXI@Z
_wsplitpath
memcpy_s
wcslen
_wcslwr
_ultow
wcscat
wcscpy
_wgetenv
wcscmp
wcsstr
_encode_pointer
__CxxFrameHandler3
_CxxThrowException
_unlock
__dllonexit
__setusermatherr

updateassist

IsServiceRunning
Update
CheckUpdate
RunService
Deploy
RegService
GetDefaultAppID

Sections

.text
Size: 124KB - Virtual size: 120KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 28KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 44KB - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
AliIMIntroduce.gif
.gif
AliIM_Assistant.exe
.exe windows:4 windows x86 arch:x86

8cdb7c4233cfdf91ea0ada156b1afade

Code Sign

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

15/06/2007, 00:00

Not After

14/06/2012, 23:59

Subject

CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04/12/2003, 00:00

Not After

03/12/2013, 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

59:d7:21:95:2a:a2:09:ee:3e:7b:d3:82:4f:7f:b6:e4
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Not Before

22/04/2010, 00:00

Not After

17/05/2011, 23:59

Subject

CN=Alibaba (China) Co. Ltd.,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Alibaba (China) Co. Ltd.,L=HangZhou,ST=ZheJiang,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

65:52:26:e1:b2:2e:18:e1:59:0f:29:85:ac:22:e7:5c
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

21/05/2009, 00:00

Not After

20/05/2019, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

31:55:77:95:ae:0b:57:0a:56:bc:c1:7d:95:c6:91:73:25:d1:de:4b
Signer

Actual PE Digest

31:55:77:95:ae:0b:57:0a:56:bc:c1:7d:95:c6:91:73:25:d1:de:4b

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

e:\IMClient\modules\x3\Release\x3.pdb

Imports

kernel32

GetProcAddress
GetExitCodeProcess
LoadLibraryW
FreeLibrary
CreateProcessW
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
GetVersionExW
GetModuleFileNameW
WaitForSingleObject
CloseHandle
QueryPerformanceCounter
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetStartupInfoW
InterlockedCompareExchange
Sleep
InterlockedExchange
GetSystemTimeAsFileTime

user32

GetDesktopWindow
MessageBoxW

advapi32

CheckTokenMembership
AllocateAndInitializeSid
FreeSid

shell32

ShellExecuteW

ole32

CoUninitialize
CoInitialize

msvcr80

memmove_s
isspace
_CxxThrowException
__CxxFrameHandler3
_controlfp_s
_invoke_watson
_except_handler4_common
_crt_debugger_hook
?_type_info_dtor_internal_method@type_info@@QAEXXZ
?terminate@@YAXXZ
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_configthreadlocale
_initterm_e
_initterm
_wcmdln
exit
_XcptFilter
_exit
_cexit
__wgetmainargs
_amsg_exit
_decode_pointer
_onexit
_lock
_encode_pointer
__dllonexit
_unlock
??0bad_cast@std@@QAE@ABV01@@Z
_purecall
??0exception@std@@QAE@XZ
??8type_info@@QBE_NABV0@@Z
??1exception@std@@UAE@XZ
swprintf_s
??0exception@std@@QAE@ABQBD@Z
??1bad_cast@std@@UAE@XZ
??2@YAPAXI@Z
??0bad_cast@std@@QAE@PBD@Z
??0exception@std@@QAE@ABV01@@Z
?what@exception@std@@UBEPBDXZ
_invalid_parameter_noinfo
??3@YAXPAX@Z
memset

msvcp80

?allocate@?$allocator@D@std@@QAEPADI@Z
?begin@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV?$_String_const_iterator@DU?$char_traits@D@std@@V?$allocator@D@2@@2@XZ
?end@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV?$_String_const_iterator@DU?$char_traits@D@std@@V?$allocator@D@2@@2@XZ
??$?HDU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@DABV10@@Z
??Y?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@D@Z
?insert@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@IPBD@Z
??$?HDU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@ABV10@D@Z
?erase@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE?AV?$_String_iterator@DU?$char_traits@D@std@@V?$allocator@D@2@@2@V32@@Z
?find@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDII@Z
?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB
?_Init@locale@std@@CAPAV_Locimp@12@XZ
?_Getgloballocale@locale@std@@CAPAV_Locimp@12@XZ
??1locale@std@@QAE@XZ
?out@?$codecvt@_WDH@std@@QBEHAAHPB_W1AAPB_WPAD3AAPAD@Z
?in@?$codecvt@_WDH@std@@QBEHAAHPBD1AAPBDPA_W3AAPA_W@Z
??0_Lockit@std@@QAE@H@Z
?id@?$codecvt@_WDH@std@@2V0locale@2@A
??1_Lockit@std@@QAE@XZ
?_Id_cnt@id@locale@std@@0HA
?_Getcat@?$codecvt@_WDH@std@@SAIPAPBVfacet@locale@2@@Z
?_Incref@facet@locale@std@@QAEXXZ
?facet_Register@facet@locale@std@@CAXPAV123@@Z
??_7?$codecvt@_WDH@std@@6B@
??_7codecvt_base@std@@6B@
??_7facet@locale@std@@6B@
??0?$codecvt@_WDH@std@@QAE@I@Z
??Y?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@ABV01@@Z
??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@ABV01@@Z
?replace@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV12@V?$_String_iterator@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@2@0ABV12@@Z
??4?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV01@ABV01@@Z
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@ABV01@@Z
?end@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE?AV?$_String_iterator@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@2@XZ
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??$?HDU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@ABV10@PBD@Z
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@XZ
??$?HDU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@PBDABV10@@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z
??$?HDU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@ABV10@0@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBD@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
?deallocate@?$allocator@D@std@@QAEXPADI@Z
??$?MDU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@0@Z
?_Tidy@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@IAEX_NI@Z
?swap@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEXAAV12@@Z
?reserve@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEXI@Z
?begin@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE?AV?$_String_iterator@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@2@XZ
?swap@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXAAV12@@Z
??1?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@XZ
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@PB_W@Z
?append@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV12@I_W@Z
??$?8DU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@0@Z
?rbegin@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV?$reverse_iterator@V?$_String_const_iterator@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@2@XZ
?resize@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXI@Z
?_Getfacet@locale@std@@QBEPBVfacet@12@I@Z
?substr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV12@II@Z
??$?8DU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@PBD@Z
?end@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE?AV?$_String_iterator@DU?$char_traits@D@std@@V?$allocator@D@2@@2@XZ
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBD@Z
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ABV12@@Z
?_Tidy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@IAEX_NI@Z
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ID@Z
?reserve@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXI@Z
?replace@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@V?$_String_iterator@DU?$char_traits@D@std@@V?$allocator@D@2@@2@0ABV12@@Z
?begin@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE?AV?$_String_iterator@DU?$char_traits@D@std@@V?$allocator@D@2@@2@XZ

Sections

.text
Size: 84KB - Virtual size: 81KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 32KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 52KB - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
AliLogHelper.exe
.exe windows:4 windows x86 arch:x86

71f65fab7ced7734d12e84c7c4878807

Code Sign

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

15/06/2007, 00:00

Not After

14/06/2012, 23:59

Subject

CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04/12/2003, 00:00

Not After

03/12/2013, 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

59:d7:21:95:2a:a2:09:ee:3e:7b:d3:82:4f:7f:b6:e4
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Not Before

22/04/2010, 00:00

Not After

17/05/2011, 23:59

Subject

CN=Alibaba (China) Co. Ltd.,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Alibaba (China) Co. Ltd.,L=HangZhou,ST=ZheJiang,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

65:52:26:e1:b2:2e:18:e1:59:0f:29:85:ac:22:e7:5c
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

21/05/2009, 00:00

Not After

20/05/2019, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

9f:55:41:48:27:41:4d:96:9f:71:5e:dc:4c:2f:cf:86:74:14:a7:68
Signer

Actual PE Digest

9f:55:41:48:27:41:4d:96:9f:71:5e:dc:4c:2f:cf:86:74:14:a7:68

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

E:\AliWWAutoPackage\Trunk\SourceCode\IMClient-RV\symbol\Release\AliLogHelper.pdb

Imports

kernel32

LoadResource
lstrlenA
LockResource
GetModuleFileNameW
GetLastError
SizeofResource
FindResourceW
FindResourceExW
MultiByteToWideChar
WideCharToMultiByte
lstrlenW
GetProcessHeap
InterlockedIncrement
InterlockedDecrement
HeapFree
WaitForSingleObject
CreateMutexW
GetPrivateProfileIntW
GetPrivateProfileStringW
DeleteFileW
DeleteFileA
SetLastError
GetFullPathNameW
FindFirstFileW
CloseHandle
FindNextFileW
FindClose
LoadLibraryW
GetProcAddress
FreeLibrary
InterlockedCompareExchange
Sleep
CreateEventA
WaitForMultipleObjects
SetEvent
ReleaseMutex
DuplicateHandle
LoadLibraryA
SleepEx
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetStartupInfoW
HeapSize
HeapReAlloc
HeapAlloc
HeapDestroy
DeleteCriticalSection
InitializeCriticalSection
LeaveCriticalSection
EnterCriticalSection
RaiseException
GetVersionExA
GetThreadLocale
GetLocaleInfoA
GetACP
InterlockedExchange
GetExitCodeThread
TerminateThread
ReadFile
PeekNamedPipe
GetFileType
GetStdHandle
ExpandEnvironmentStringsA
FormatMessageA
CreateMutexA

ole32

CoInitialize
OleRun
CoCreateInstance
CoUninitialize

oleaut32

VariantClear
SysAllocStringByteLen
SysStringLen
SysAllocString
SysFreeString

msvcp80

?erase@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV12@II@Z
?assign@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV12@PB_W0@Z
?assign@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV12@PB_W@Z
??Y?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV01@_W@Z
??Y?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV01@PB_W@Z
??Y?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV01@ABV01@@Z
??$?HDU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@ABV10@PBD@Z
?clear@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXXZ
??Y?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@ABV01@@Z
??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@PBD@Z
??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@ABV01@@Z
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBDI@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??4?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV01@PB_W@Z
??4?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV01@ABV01@@Z
??$?M_WU?$char_traits@_W@std@@V?$allocator@_W@1@@std@@YA_NABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@0@0@Z
??1?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@XZ
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@ABV01@@Z
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@PB_W@Z
?npos@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@2IB
??$?MDU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@0@Z
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@XZ
?compare@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEHPBD@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBD@Z
??$?HDU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@ABV10@0@Z
??A?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAA_WI@Z

wininet

InternetQueryOptionW

msvcr80

wcscpy_s
wcsncat_s
memset
_CxxThrowException
_unlock
__dllonexit
_encode_pointer
_lock
_onexit
_decode_pointer
?terminate@@YAXXZ
_amsg_exit
__wgetmainargs
_cexit
_exit
_XcptFilter
exit
_wcmdln
_initterm
_initterm_e
_configthreadlocale
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler4_common
_crt_debugger_hook
?_type_info_dtor_internal_method@type_info@@QAEXXZ
_invoke_watson
swprintf_s
_fstat64
__CxxFrameHandler3
_gmtime64
_errno
fputc
sprintf
fputs
fgets
strncmp
memchr
_strtoi64
isspace
isdigit
fseek
strncpy
atoi
tolower
sscanf
memmove
strstr
strtoul
fwrite
strchr
isxdigit
strtol
__iob_func
fopen
fread
fclose
strrchr
_stat64
_time64
memcpy
malloc
realloc
_wcsicmp
_wsplitpath_s
??0exception@std@@QAE@ABV01@@Z
??0exception@std@@QAE@XZ
??1exception@std@@UAE@XZ
_beginthreadex
_invalid_parameter_noinfo
wcslen
??_V@YAXPAX@Z
free
??2@YAPAXI@Z
calloc
wcscspn
wcsspn
wcsrchr
wcsstr
_recalloc
wcscpy
_wcsupr_s
wcscmp
memmove_s
memcpy_s
_wtoi
??3@YAXPAX@Z
_lseeki64
fflush
_controlfp_s
getenv
isalnum
isalpha
strerror
__sys_nerr
_strdup
_stricmp
_strnicmp
_close
_fileno
_open
_read
wcschr

ws2_32

gethostbyname
socket
connect
setsockopt
getsockopt
htons
bind
ntohs
getsockname
send
recv
WSAGetLastError
closesocket
WSACleanup
WSASetLastError
recvfrom
accept
listen
__WSAFDIsSet
select
ioctlsocket
sendto
WSAStartup

wldap32

ord32
ord79
ord200
ord33
ord301
ord27
ord41
ord46
ord30
ord26
ord50
ord60
ord143
ord211
ord22
ord35

user32

UnregisterClassA

Sections

.text
Size: 156KB - Virtual size: 153KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 36KB - Virtual size: 34KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 48KB - Virtual size: 44KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
AliPluginErrRpt.exe
.exe windows:4 windows x86 arch:x86

25ba9241fc557aca979032f438bc128e

Code Sign

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

15/06/2007, 00:00

Not After

14/06/2012, 23:59

Subject

CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04/12/2003, 00:00

Not After

03/12/2013, 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

59:d7:21:95:2a:a2:09:ee:3e:7b:d3:82:4f:7f:b6:e4
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Not Before

22/04/2010, 00:00

Not After

17/05/2011, 23:59

Subject

CN=Alibaba (China) Co. Ltd.,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Alibaba (China) Co. Ltd.,L=HangZhou,ST=ZheJiang,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

65:52:26:e1:b2:2e:18:e1:59:0f:29:85:ac:22:e7:5c
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

21/05/2009, 00:00

Not After

20/05/2019, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

29:6b:5e:93:c0:b1:12:98:92:7b:66:a6:06:fe:be:f6:8d:cd:b5:5c
Signer

Actual PE Digest

29:6b:5e:93:c0:b1:12:98:92:7b:66:a6:06:fe:be:f6:8d:cd:b5:5c

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

E:\AliWWAutoPackage\Trunk\SourceCode\IMClient-RV\symbol\Release\AliPluginErrRpt.pdb

Imports

kernel32

Sleep
InterlockedCompareExchange
lstrlenW
CreateFileW
FreeLibrary
ReadFile
WriteFile
GetProcAddress
LoadLibraryW
SetFilePointer
InterlockedDecrement
GetModuleFileNameW
GetFileSize
FindResourceW
GetLastError
WideCharToMultiByte
SizeofResource
LockResource
DeleteFileW
CreateDirectoryW
CreateMutexW
LoadResource
WaitForSingleObject
MultiByteToWideChar
ReleaseMutex
FindResourceExW
CloseHandle
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
LeaveCriticalSection
EnterCriticalSection
RaiseException
DeleteCriticalSection
HeapDestroy
GetVersionExA
GetThreadLocale
GetLocaleInfoA
GetACP
InterlockedExchange
HeapFree
HeapReAlloc
HeapSize
GetProcessHeap
InitializeCriticalSection
HeapAlloc

ole32

OleRun
CoCreateInstance
CoInitialize
CoUninitialize

oleaut32

VariantClear
SysFreeString
SysStringLen
SysStringByteLen
SysAllocStringByteLen
SysAllocString

shlwapi

PathFileExistsW

msvcp80

?eq_int_type@?$char_traits@D@std@@SA_NABH0@Z
?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEXXZ
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@XZ
?width@ios_base@std@@QAEHH@Z
?width@ios_base@std@@QBEHXZ
?length@?$char_traits@D@std@@SAIPBD@Z
?_Xlen@_String_base@std@@SAXXZ
?flags@ios_base@std@@QBEHXZ
?rdbuf@?$basic_ios@DU?$char_traits@D@std@@@std@@QBEPAV?$basic_streambuf@DU?$char_traits@D@std@@@2@XZ
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEXXZ
?c_str@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEPBDXZ
?good@ios_base@std@@QBE_NXZ
?eof@?$char_traits@D@std@@SAHXZ
?_Xran@_String_base@std@@SAXXZ
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBD@Z
?uncaught_exception@std@@YA_NXZ
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z
?tie@?$basic_ios@DU?$char_traits@D@std@@@std@@QBEPAV?$basic_ostream@DU?$char_traits@D@std@@@2@XZ
?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEXXZ
?cout@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHPBDH@Z
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHD@Z
?fill@?$basic_ios@DU?$char_traits@D@std@@@std@@QBEDXZ

wininet

InternetOpenW
InternetCloseHandle
InternetReadFile
InternetOpenUrlW

msvcr80

calloc
memmove_s
wcsncat_s
??0exception@std@@QAE@XZ
wcsftime
_localtime64_s
_open_osfhandle
_time64
_fdopen
fclose
wcsstr
free
??_V@YAXPAX@Z
_vscwprintf
_invalid_parameter_noinfo
_wtoi
vswprintf_s
??0exception@std@@QAE@ABQBD@Z
fabs
??1exception@std@@UAE@XZ
?what@exception@std@@UBEPBDXZ
??0exception@std@@QAE@ABV01@@Z
??2@YAPAXI@Z
_wtoi64
wcslen
wcscmp
memset
_CxxThrowException
_unlock
__dllonexit
_encode_pointer
_lock
_onexit
_decode_pointer
_amsg_exit
__wgetmainargs
_cexit
_exit
_XcptFilter
exit
__winitenv
_initterm
_initterm_e
_configthreadlocale
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler4_common
_crt_debugger_hook
?terminate@@YAXXZ
?_type_info_dtor_internal_method@type_info@@QAEXXZ
_invoke_watson
_controlfp_s
memcpy_s
strlen
_recalloc
strchr
iswspace
??3@YAXPAX@Z
wcsrchr
__CxxFrameHandler3

user32

UnregisterClassA

Sections

.text
Size: 64KB - Virtual size: 62KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 20KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
AliTalk.exe
.exe windows:4 windows x86 arch:x86

99aefcadf8c6ae70614fa4501343753f

Code Sign

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

15/06/2007, 00:00

Not After

14/06/2012, 23:59

Subject

CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04/12/2003, 00:00

Not After

03/12/2013, 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

59:d7:21:95:2a:a2:09:ee:3e:7b:d3:82:4f:7f:b6:e4
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Not Before

22/04/2010, 00:00

Not After

17/05/2011, 23:59

Subject

CN=Alibaba (China) Co. Ltd.,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Alibaba (China) Co. Ltd.,L=HangZhou,ST=ZheJiang,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

65:52:26:e1:b2:2e:18:e1:59:0f:29:85:ac:22:e7:5c
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

21/05/2009, 00:00

Not After

20/05/2019, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

ab:86:5a:f9:1c:a3:41:2a:6b:e2:47:d4:94:93:98:e4:7f:33:be:ae
Signer

Actual PE Digest

ab:86:5a:f9:1c:a3:41:2a:6b:e2:47:d4:94:93:98:e4:7f:33:be:ae

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

d:\workcode\myt_trunk\modules\fakealitalk\release\AliTalk.pdb

Imports

kernel32

CreateProcessW
GetModuleFileNameW
GetLastError
Sleep
GetCurrentThreadId
GetSystemTimeAsFileTime
GetTickCount
QueryPerformanceCounter
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetStartupInfoW
InterlockedCompareExchange
InterlockedExchange
GetProcessHeap
HeapSize
HeapReAlloc
HeapFree
HeapAlloc
HeapDestroy
GetCurrentProcessId

wintrust

WinVerifyTrust

msvcr80

_adjust_fdiv
__p__commode
__p__fmode
_encode_pointer
__set_app_type
__setusermatherr
__dllonexit
_lock
_onexit
_decode_pointer
?terminate@@YAXXZ
?_type_info_dtor_internal_method@type_info@@QAEXXZ
_crt_debugger_hook
_except_handler4_common
_invoke_watson
_controlfp_s
_configthreadlocale
_initterm_e
_initterm
_wcmdln
exit
_XcptFilter
_exit
_cexit
__wgetmainargs
_amsg_exit
wcslen
memcpy_s
wprintf_s
memset
wcsrchr
??3@YAXPAX@Z
_CxxThrowException
_unlock
__CxxFrameHandler3

Sections

.text
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 1000B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 40KB - Virtual size: 39KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
AudioVideoMgr.dll
.dll windows:4 windows x86 arch:x86

5c71e3ae3b9a2ba1576fb58913b3d086

Code Sign

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

15/06/2007, 00:00

Not After

14/06/2012, 23:59

Subject

CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04/12/2003, 00:00

Not After

03/12/2013, 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

59:d7:21:95:2a:a2:09:ee:3e:7b:d3:82:4f:7f:b6:e4
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Not Before

22/04/2010, 00:00

Not After

17/05/2011, 23:59

Subject

CN=Alibaba (China) Co. Ltd.,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Alibaba (China) Co. Ltd.,L=HangZhou,ST=ZheJiang,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

65:52:26:e1:b2:2e:18:e1:59:0f:29:85:ac:22:e7:5c
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

21/05/2009, 00:00

Not After

20/05/2019, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

6e:12:a7:50:52:01:56:f7:ec:46:f0:76:f7:11:e1:7f:99:62:6f:61
Signer

Actual PE Digest

6e:12:a7:50:52:01:56:f7:ec:46:f0:76:f7:11:e1:7f:99:62:6f:61

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

E:\AliWWAutoPackage\Trunk\SourceCode\IMClient-RV\symbol\Release\AudioVideoMgr.pdb

Imports

guibase

?UnRegisterExternalEventPoint@CUIDefaultEventPoint@@UAGJPAVIUIEventPoint@@@Z
?ClearExternnalEventPoint@CUIDefaultEventPoint@@UAGJXZ
?GetEventCount@CUIDefaultEventPoint@@UAGJPAJ@Z
?GetEventPointCount@CUIDefaultEventPoint@@UAGJPAJ@Z
?TrackMouseLeave@CUIDefaultEventPoint@@UAGJPAH@Z
?GetSkinID@CUIEventBase@@UAGJXZ
?LoadUIComponent@CUIEventBase@@UAGJPA_W0V?$intrusive_ptr@VIUIComponent@@@boost@@@Z
?LoadUIComponent@CUIEventBase@@UAGJV?$intrusive_ptr@VIUIComponent@@@boost@@@Z
?ShowUIComponent@CUIEventBase@@UAGJJ@Z
?IsUIComponentVisible@CUIEventBase@@UAGJPAF@Z
?SetResourceData@CUIEventBase@@UAGJPA_W0@Z
?GetUIComponentSkinID@CUIEventBase@@UAGJPAJ@Z
?SetUIComponentSkinID@CUIEventBase@@UAGJJ@Z
?SetUIComponentPosition@CUIEventBase@@UAGJPAUHWND__@@JJJJJ@Z
?BringUIComponentToTop@CUIEventBase@@UAGJH@Z
?GetUIComponentGetRect@CUIEventBase@@UAGJPAJ000@Z
?RegisterSKinObject@CUIEventBase@@UAGJXZ
?UnRegisterSKinObject@CUIEventBase@@UAGJXZ
?AnimateComponent@CUIEventBase@@UAGJKK@Z
?ReLoadResource@CUIEventBase@@MAGJXZ
?OnResetSkin@CUIEventBase@@UAGJJ@Z
?ChangeSkinColor@CUIEventBase@@UAGXK@Z
?ChangeSkinTexture@CUIEventBase@@UAGXPA_W@Z
?RegisterExternalEventPoint@CUIDefaultEventPoint@@UAGJPAVIUIEventPoint@@@Z
?DispatchEvent@CUIEventBase@@MAGJPAVIUIComponent@@JPAUHWND__@@IJPAJPAH@Z
??1CUICallHelper@@QAE@XZ
?get_Hwnd@CUICallHelper@@QAEPAUHWND__@@XZ
??0CUICallHelper@@QAE@PAVIUIComponent@@@Z
?GetUIComponent@CUIEventBase@@QAGAAV?$intrusive_ptr@VIUIComponent@@@boost@@XZ
GetUICoreInstance
?DestroyUIComponent@CUIEventBase@@QAGXXZ
?UIMessageBox@CUICallHelper@@QAEHPB_W0I@Z
?put_Caption@CUICallHelper@@QAEXV_bstr_t@@@Z
?put_Visible@CUICallHelper@@QAEX_N@Z
??0CUICallHelper@@QAE@V?$intrusive_ptr@VIUIComponent@@@boost@@@Z
??1CDialogHelper@@QAE@XZ
?DoModal@CDialogHelper@@QAEHPAVIUIEventPoint@@J@Z
??0CDialogHelper@@QAE@PAVIUIComponent@@PA_W1@Z
??0CUIEventBase@@QAE@XZ
?GetPluginManager@CUIHelper@@QAEPAVIUIPluginManager@@XZ
??0CUIHelper@@QAE@XZ
?UIPropertyInterface@CUICallHelper@@QAEPAVIUIProperty@@XZ
?GetScreenRect@CUICallHelper@@QAEJAAUtagRECT@@@Z
?UpdateWindow@CUICallHelper@@QAEJXZ
?put_Enable@CUICallHelper@@QAEX_N@Z
?IsValid@CUICallHelper@@QAEHXZ
?ClearEvent@CUIDefaultEventPoint@@UAGJXZ
?UnRegisterEvent@CUIDefaultEventPoint@@UAGJIP6GJPAVIUIComponent@@IIJPAXPAH@Z@Z
?RegisterEvent@CUIDefaultEventPoint@@UAGJIP6GJPAVIUIComponent@@IIJPAXPAH@ZJ1@Z
?QueryInterface@CUIEventBase@@UAGJPA_WPAPAX@Z
??0CUIEventBase@@QAE@PA_W0@Z
CreateXParam
??1CUIEventBase@@QAE@XZ

wwutils

??1SearchContactsUtils@@UAE@XZ
?finditembyname@CContactListViewHelper@@QAE?AV?$intrusive_ptr@VISuperListItem@@@boost@@V23@ABV?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@W4_CMListNodeType_T@CM_LIST_NODE@@PAJH@Z
?SeleteItem@CContactListViewPtr@@QAEHV?$intrusive_ptr@VISuperListItem@@@boost@@@Z
?CreateSelectedItemEnum@CContactListViewPtr@@QAEPAVISuperListItemEnum@@XZ
?RecalcLayout@CContactListViewPtr@@QAEXXZ
?Init@SearchContactsUtils@@QAE_NPAVIUIComponent@@PAVISearchContacts@@ABV?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@2ABUSearchContactsFlag@@_N4@Z
?SetNotFoundString@SearchContactsUtils@@QAEX_NABV?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@@Z
?GetContacts@SearchContactsUtils@@QAEJW4SEARCH_TYPE@1@PAPAV?$set@USearchContact_t@@USCFctor@@V?$allocator@USearchContact_t@@@std@@@std@@@Z
?IMCU_GetConfig@@YA?AVCComBSTR@ATL@@V12@@Z
??0CContactListViewHelper@@QAE@PAVIUIComponent@@H@Z
?SetExcludes@CContactListViewHelper@@QAEXABV?$set@V?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@U?$less@V?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@@std@@V?$allocator@V?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@@4@@std@@@Z
??0SearchContactsUtils@@QAE@XZ
?IMContactManager_showinvisible@@YAHXZ
?IMContactManager_getusercomparemode@@YA?AW4IMUserSortMode_T@@XZ
?BuildContactTree@CContactListViewHelper@@QAEJW4_SuperListViewType@@W4ContactListTabModeEnumType_T@CM_LIST_NODE@@W4IMGroupSortMode_T@@W4IMUserSortMode_T@@H@Z
??1CContactListViewHelper@@QAE@XZ
?HandleEditCmd@SearchContactsUtils@@QAEJAAU_UIEventSender@@ABU_UICommandEventArgs@@@Z
?IMCU_GetPortrait@@YA?AVCComBSTR@ATL@@W4PortraitType_T@@@Z
?IMCU_GetName@@YA?AV_bstr_t@@XZ
?IMCU_GetCurrentUserID@@YAJPAPA_W@Z
?IMContactManager_GetDispName@@YAJV_bstr_t@@AAV1@@Z
?IMContactManager_isInBlack@@YAHPA_W@Z
??0CBusMsgHandlerBase@@QAE@_N@Z
?OnMsg@CBusMsgHandlerBase@@QAEJPA_W0PAUIUnknown@@1PAF@Z
??1CBusMsgHandlerBase@@UAE@XZ
?IMCM_GetPortraitEx@@YA?AVCComBSTR@ATL@@ABV12@W4PortraitType_T@@W4PortraitFormat_T@@HHH@Z
?SetGroupNodeType@CContactListViewHelper@@QAEXW4_CMListNodeType_T@CM_LIST_NODE@@@Z

kernel32

SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetThreadLocale
GetLocaleInfoA
GetACP
InterlockedExchange
HeapSize
HeapReAlloc
HeapAlloc
HeapDestroy
GetVersionExA
QueryPerformanceCounter
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
IsDebuggerPresent
RaiseException
lstrcmpiW
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSection
DeleteCriticalSection
SizeofResource
LockResource
LoadResource
FindResourceW
FindResourceExW
InterlockedIncrement
HeapFree
GetProcessHeap
InterlockedDecrement
lstrlenW
GetModuleFileNameW
GetTickCount
SetLastError
MultiByteToWideChar
WideCharToMultiByte
Sleep
InterlockedCompareExchange
GetProcAddress
LoadLibraryW
FreeLibrary
GetPrivateProfileIntW
lstrlenA
GetLastError
LoadLibraryExW

user32

SetTimer
SendMessageW
UnregisterClassA
IsWindow
EnumChildWindows
DefWindowProcW
CallWindowProcW
SetWindowLongW
GetCursorPos
ScreenToClient
GetActiveWindow
DestroyWindow
SetActiveWindow
PostMessageW
GetSystemMetrics
SetFocus
LoadIconW
KillTimer
SystemParametersInfoW

shell32

SHCreateDirectoryExW

ole32

StringFromGUID2
CoCreateInstance
OleRun
CoCreateGuid

oleaut32

VariantChangeType
VariantInit
VariantCopy
LoadTypeLi
LoadRegTypeLi
SysStringLen
SysStringByteLen
SysAllocStringByteLen
SysAllocString
VariantClear
SysFreeString
SysAllocStringLen

atl80

ord30
ord31
ord58
ord32
ord64
ord15

shlwapi

PathFileExistsW

msvcp80

?c_str@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEPBDXZ
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBD@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z

rvcore

GetRvCore

msvcr80

_malloc_crt
_decode_pointer
_onexit
_lock
_encode_pointer
__dllonexit
_unlock
?terminate@@YAXXZ
_except_handler4_common
malloc
memset
??8type_info@@QBE_NABV0@@Z
_wtol
calloc
fclose
_wfopen
fputws
fflush
wcsncat_s
_time64
_localtime64_s
wcsrchr
_wsplitpath
_encoded_null
free
_recalloc
__RTDynamicCast
_invalid_parameter_noinfo
??0exception@std@@QAE@ABV01@@Z
_purecall
vswprintf_s
??1exception@std@@UAE@XZ
_vscwprintf
wcsstr
__CxxFrameHandler3
??2@YAPAXI@Z
memmove_s
_CxxThrowException
memcpy_s
??3@YAXPAX@Z
??0exception@std@@QAE@ABQBD@Z
?what@exception@std@@UBEPBDXZ
__CppXcptFilter
?_type_info_dtor_internal_method@type_info@@QAEXXZ
_crt_debugger_hook
__clean_type_info_names_internal
_initterm
_adjust_fdiv
??_V@YAXPAX@Z
??0exception@std@@QAE@XZ
_amsg_exit
_wcsicmp
_initterm_e

Exports

Exports

??0IETSDK@@QAE@ABV0@@Z
??0IETSDK@@QAE@XZ
??0IETSDKMgr@@QAE@ABV0@@Z
??0IETSDKMgr@@QAE@XZ
??0IETSDKSink@@QAE@ABV0@@Z
??0IETSDKSink@@QAE@XZ
??4IETSDK@@QAEAAV0@ABV0@@Z
??4IETSDKMgr@@QAEAAV0@ABV0@@Z
??4IETSDKSink@@QAEAAV0@ABV0@@Z
??_7IETSDK@@6B@
??_7IETSDKMgr@@6B@
??_7IETSDKSink@@6B@
DllCanUnloadNow
DllGetClassObject

Sections

.text
Size: 248KB - Virtual size: 246KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 80KB - Virtual size: 78KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 60KB - Virtual size: 58KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 28KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
CommonDlg.dll
.dll regsvr32 windows:4 windows x86 arch:x86

c3937869a5bb9fadc5f91262447b0c3e

Code Sign

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

15/06/2007, 00:00

Not After

14/06/2012, 23:59

Subject

CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04/12/2003, 00:00

Not After

03/12/2013, 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

59:d7:21:95:2a:a2:09:ee:3e:7b:d3:82:4f:7f:b6:e4
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Not Before

22/04/2010, 00:00

Not After

17/05/2011, 23:59

Subject

CN=Alibaba (China) Co. Ltd.,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Alibaba (China) Co. Ltd.,L=HangZhou,ST=ZheJiang,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

65:52:26:e1:b2:2e:18:e1:59:0f:29:85:ac:22:e7:5c
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

21/05/2009, 00:00

Not After

20/05/2019, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

31:70:9b:89:78:ef:35:8f:65:ca:d5:c5:b0:d3:08:58:81:b2:80:aa
Signer

Actual PE Digest

31:70:9b:89:78:ef:35:8f:65:ca:d5:c5:b0:d3:08:58:81:b2:80:aa

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

E:\AliWWAutoPackage\Trunk\SourceCode\IMClient-RV\symbol\Release\CommonDlg.pdb

Imports

wwutils

?AddRegisterMessage@CBusMsgHandlerBase@@QAEJPB_WP81@AEXABV_bstr_t@@V?$_com_ptr_t@V?$_com_IIID@UIUnknown@@$1?_GUID_00000000_0000_0000_c000_000000000046@@3U__s_GUID@@B@@@@2PAF@ZW4HandlerEntryType@1@_N6@Z
?RecalcLayout@CContactListViewPtr@@QAEXXZ
?HandleEditCmd@SearchContactsUtils@@QAEJAAU_UIEventSender@@ABU_UICommandEventArgs@@@Z
?IMCM_GetPortraitEx@@YA?AVCComBSTR@ATL@@ABV12@W4PortraitType_T@@W4PortraitFormat_T@@HHH@Z
?IMCM_GetStatusImg@@YA?AVCComBSTR@ATL@@ABV12@W4PortraitType_T@@@Z
??1SearchContactsUtils@@UAE@XZ
?GetItem@CContactListViewPtr@@QAEPAVISuperListItem@@V?$intrusive_ptr@VISuperListItem@@@boost@@JH@Z
?ItemCount@CContactListViewPtr@@QAEJV?$intrusive_ptr@VISuperListItem@@@boost@@@Z
??0SearchContactsUtils@@QAE@XZ
??1CContactListViewPtr@@QAE@XZ
??0CContactListViewPtr@@QAE@V?$intrusive_ptr@VIUIComponent@@@boost@@@Z
?IMCM_GetContactNTYInfo@@YAHPA_WAAVCContactNtyIcons@@@Z
?IMContactManager_isInBlack@@YAHPA_W@Z
?AddItem@CContactListViewPtr@@QAEJV?$intrusive_ptr@VISuperListItem@@@boost@@0@Z
??0CContactListViewPtr@@QAE@PAVIUIComponent@@@Z
?RemoveAllItems@CContactListViewPtr@@QAEXPAVISuperListItem@@@Z
??1CContactListViewHelper@@QAE@XZ
?finditembyname@CContactListViewHelper@@QAE?AV?$intrusive_ptr@VISuperListItem@@@boost@@V23@ABV?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@W4_CMListNodeType_T@CM_LIST_NODE@@PAJH@Z
??0CContactListViewHelper@@QAE@V?$intrusive_ptr@VIUIComponent@@@boost@@H@Z
?Init@SearchContactsUtils@@QAE_NPAVIUIComponent@@PAVISearchContacts@@ABV?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@2ABUSearchContactsFlag@@_N4@Z
?IMContactManager_GetUserVerifyInfo@@YAJV_bstr_t@@J@Z
?IMContactManager_GetGroup@@YAJ_JPAPAUIIMGroup@@@Z
?ThreadStatisticsForWebChat2@@YAXHV_bstr_t@@000@Z
?IMContactManager_GetGroupName@@YAJ_JAAV_bstr_t@@@Z
?RemoveAllRegisteredMessage@CBusMsgHandlerBase@@QAEJXZ
?IMContactManager_Agree@@YAJV_bstr_t@@_J@Z
?IMAddContact_ShowAddContactDlg@@YAJV_bstr_t@@_JW4IMAddedAuthFlag_T@@00H@Z
?IMContactManager_Refuse@@YAJV_bstr_t@@_J0_N@Z
?IMContactManager_Add2BlackList@@YAJV_bstr_t@@@Z
?IMCM_GetParentGroupNameList@@YAHPA_W0AAV_bstr_t@@@Z
?IMContactManager_MoveContact@@YAJV_bstr_t@@_J@Z
?IMCU_SetConfig@@YAJVCComBSTR@ATL@@0@Z
?IMContactManager_GetUser@@YAJPA_WPAPAUIIMUser@@H@Z
?IMCU_GetCurrentUserID@@YAJPAPA_W@Z
?IMCM_GetPortrait@@YA?AVCComBSTR@ATL@@ABV12@W4PortraitType_T@@W4PortraitFormat_T@@HH@Z
?IMContactManager_GetDispName@@YAJV_bstr_t@@AAV1@@Z
?IMCU_GetConfig@@YA?AVCComBSTR@ATL@@V12@@Z
?AddRegisterMessage@CBusMsgHandlerBase@@QAEJPB_WP81@AEXABV_bstr_t@@V?$_com_ptr_t@V?$_com_IIID@UIUnknown@@$1?_GUID_00000000_0000_0000_c000_000000000046@@3U__s_GUID@@B@@@@@ZW4HandlerEntryType@1@_N5@Z
??0CBusMsgHandlerBase@@QAE@_N@Z
?IMCM_GetAllGroupNameList@@YAH_JPA_WAAV_bstr_t@@@Z
?OnMsg@CBusMsgHandlerBase@@QAEJPA_W0PAUIUnknown@@1PAF@Z
??1CBusMsgHandlerBase@@UAE@XZ

protocol

?SetKey@CDesEncrypt@@QAE?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@ABV23@@Z
?Encrypt@CDesEncrypt@@QAE?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@ABV23@0@Z
??1CDesEncrypt@@QAE@XZ

guibase

?get_Enable@CUICallHelper@@QAE_NXZ
?GetScreenRect@CUICallHelper@@QAEJAAUtagRECT@@@Z
?UpdateWindow@CUICallHelper@@QAEJXZ
GetUICoreInstance
?get_Visible@CUICallHelper@@QAE_NXZ
?UIMessageBox@CUICallHelper@@SAHPAUHWND__@@PB_W1I@Z
?GetProperty@CUICallHelper@@QAEJPA_WAAUtagVARIANT@@@Z
?put_Left@CUICallHelper@@QAEXJ@Z
?put_Top@CUICallHelper@@QAEXJ@Z
?put_Height@CUICallHelper@@QAEXJ@Z
?DestroyUIComponent@CUIEventBase@@QAGXXZ
?UIMessageBox@CUICallHelper@@QAEHPB_W0I@Z
?SetProperty@CUICallHelper@@QAEJPA_WABUtagVARIANT@@@Z
MakeAbsoluteResPath
?put_Width@CUICallHelper@@QAEXJ@Z
?Update@CUICallHelper@@QAEJH@Z
?IsValid@CUICallHelper@@QAEHXZ
?get_Left@CUICallHelper@@QAEJXZ
?get_Top@CUICallHelper@@QAEJXZ
?get_Width@CUICallHelper@@QAEJXZ
?get_Height@CUICallHelper@@QAEJXZ
?put_Visible@CUICallHelper@@QAEX_N@Z
?GetUIComponent@CUIEventBase@@QAGAAV?$intrusive_ptr@VIUIComponent@@@boost@@XZ
??0CDialogHelper@@QAE@PAVIUIComponent@@PA_W1@Z
?DoModal@CDialogHelper@@QAEHPAVIUIEventPoint@@J@Z
??1CDialogHelper@@QAE@XZ
??0CUIEventBase@@QAE@XZ
?get_Hwnd@CUICallHelper@@QAEPAUHWND__@@XZ
??0CUICallHelper@@QAE@PAVIUIComponent@@@Z
?UIEventPointInterface@CUICallHelper@@QAEPAVIUIEventPoint@@XZ
?put_Enable@CUICallHelper@@QAEX_N@Z
?get_Caption@CUICallHelper@@QAE?AV_bstr_t@@XZ
CreateXParam
??1CUIEventBase@@QAE@XZ
?EndDialog@CDialogHelper@@SAJPAVIUIComponent@@H@Z
??0CUIEventBase@@QAE@PA_W0@Z
?QueryInterface@CUIEventBase@@UAGJPA_WPAPAX@Z
?RegisterEvent@CUIDefaultEventPoint@@UAGJIP6GJPAVIUIComponent@@IIJPAXPAH@ZJ1@Z
?UnRegisterEvent@CUIDefaultEventPoint@@UAGJIP6GJPAVIUIComponent@@IIJPAXPAH@Z@Z
?ClearEvent@CUIDefaultEventPoint@@UAGJXZ
?RegisterExternalEventPoint@CUIDefaultEventPoint@@UAGJPAVIUIEventPoint@@@Z
?UnRegisterExternalEventPoint@CUIDefaultEventPoint@@UAGJPAVIUIEventPoint@@@Z
?ClearExternnalEventPoint@CUIDefaultEventPoint@@UAGJXZ
?DispatchEvent@CUIEventBase@@MAGJPAVIUIComponent@@JPAUHWND__@@IJPAJPAH@Z
?GetEventCount@CUIDefaultEventPoint@@UAGJPAJ@Z
?GetEventPointCount@CUIDefaultEventPoint@@UAGJPAJ@Z
?TrackMouseLeave@CUIDefaultEventPoint@@UAGJPAH@Z
?GetSkinID@CUIEventBase@@UAGJXZ
?LoadUIComponent@CUIEventBase@@UAGJPA_W0V?$intrusive_ptr@VIUIComponent@@@boost@@@Z
?LoadUIComponent@CUIEventBase@@UAGJV?$intrusive_ptr@VIUIComponent@@@boost@@@Z
?ShowUIComponent@CUIEventBase@@UAGJJ@Z
?IsUIComponentVisible@CUIEventBase@@UAGJPAF@Z
?SetResourceData@CUIEventBase@@UAGJPA_W0@Z
?GetUIComponentSkinID@CUIEventBase@@UAGJPAJ@Z
?SetUIComponentSkinID@CUIEventBase@@UAGJJ@Z
?SetUIComponentPosition@CUIEventBase@@UAGJPAUHWND__@@JJJJJ@Z
?BringUIComponentToTop@CUIEventBase@@UAGJH@Z
?GetUIComponentGetRect@CUIEventBase@@UAGJPAJ000@Z
?RegisterSKinObject@CUIEventBase@@UAGJXZ
?UnRegisterSKinObject@CUIEventBase@@UAGJXZ
?AnimateComponent@CUIEventBase@@UAGJKK@Z
?ReLoadResource@CUIEventBase@@MAGJXZ
?OnResetSkin@CUIEventBase@@UAGJJ@Z
?ChangeSkinColor@CUIEventBase@@UAGXK@Z
?ChangeSkinTexture@CUIEventBase@@UAGXPA_W@Z
?LoadUIComponent2@CUIHelper@@QAE?AV?$intrusive_ptr@VIUIComponent@@@boost@@JPA_W0V23@V?$intrusive_ptr@VIUIEventPoint@@@3@@Z
??0CUIHelper@@QAE@XZ
??1CUICallHelper@@QAE@XZ
?put_Caption@CUICallHelper@@QAEXV_bstr_t@@@Z
??0CUICallHelper@@QAE@V?$intrusive_ptr@VIUIComponent@@@boost@@@Z

kernel32

GlobalDeleteAtom
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
RaiseException
FindNextFileW
GlobalAddAtomW
RemoveDirectoryW
lstrcmpiW
FreeLibrary
LoadLibraryW
GetProcAddress
InterlockedCompareExchange
GetSystemTime
Sleep
FindFirstFileW
DeleteFileW
InterlockedExchange
GetACP
GetLocaleInfoA
GetVersionExA
HeapDestroy
HeapAlloc
HeapReAlloc
HeapSize
GetLastError
EnterCriticalSection
LeaveCriticalSection
SizeofResource
LockResource
LoadResource
FindResourceW
FindResourceExW
InterlockedIncrement
MultiByteToWideChar
HeapFree
GetProcessHeap
WideCharToMultiByte
lstrlenW
InterlockedDecrement
InitializeCriticalSection
DeleteCriticalSection
GetModuleFileNameW
SetThreadLocale
GetThreadLocale
lstrlenA
FindClose
FileTimeToSystemTime

user32

UnregisterHotKey
LoadIconW
GetForegroundWindow
FlashWindowEx
SetWindowPos
SetParent
SetFocus
PtInRect
ReleaseDC
GetWindowDC
ShowWindow
FlashWindow
SendMessageW
PostMessageW
GetActiveWindow
GetCursorPos
ScreenToClient
SystemParametersInfoW
InvalidateRect
UpdateWindow
IsWindow
GetSystemMetrics
ClientToScreen
MessageBoxW
UnregisterClassA
RegisterHotKey

gdi32

GetDeviceCaps
DeleteDC

shell32

SHCreateDirectoryExW
ShellExecuteW

ole32

CoCreateInstance

oleaut32

SysAllocStringLen
LoadTypeLi
LoadRegTypeLi
VariantChangeType
VariantInit
SysStringLen
SysAllocString
VariantCopy
VariantClear
SysFreeString
SysStringByteLen
SysAllocStringByteLen

atl80

ord30
ord61
ord23
ord64
ord22
ord18
ord15
ord31
ord58
ord32

shlwapi

PathFileExistsW

msvcp80

??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
?c_str@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEPBDXZ
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBD@Z
?reserve@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXI@Z
??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@ABV01@@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@II@Z
??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@PBD@Z
?data@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEPBDXZ
?size@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIXZ
?replace@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@IIABV12@@Z
?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB
?find@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDI@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z

rvcore

GetRvCore
queue_work_task
queue_timerex_task
GetUACCore

msvcr80

_wtol
wcschr
_time64
_wcsnicmp
memcmp
__RTDynamicCast
_recalloc
calloc
free
??0exception@std@@QAE@ABV01@@Z
_invalid_parameter_noinfo
_purecall
memset
_wtoi
??0exception@std@@QAE@XZ
?what@exception@std@@UBEPBDXZ
__CxxFrameHandler3
??0exception@std@@QAE@ABQBD@Z
_onexit
wcslen
vswprintf_s
_vscwprintf
_wcslwr_s
wcsstr
_wcsicmp
wcscmp
iswspace
??_V@YAXPAX@Z
??2@YAPAXI@Z
memmove_s
_CxxThrowException
memcpy_s
_lock
_encode_pointer
__dllonexit
??3@YAXPAX@Z
_decode_pointer
?terminate@@YAXXZ
??8type_info@@QBE_NABV0@@Z
wcsrchr
_malloc_crt
_encoded_null
_initterm
_initterm_e
_amsg_exit
_adjust_fdiv
__CppXcptFilter
?_type_info_dtor_internal_method@type_info@@QAEXXZ
_crt_debugger_hook
__clean_type_info_names_internal
??1exception@std@@UAE@XZ
_mktime64
_unlock
_except_handler4_common
_itow
wcsncat_s
wcsnlen
wcsncpy_s
strlen
_vscprintf
vsprintf_s
malloc

wwparams

??0IMSubUserVectorPtr@@QAE@XZ
??BIMSubUserVectorPtr@@QBEPAUIUnknown@@XZ
??0IMSubUserVectorPtr@@QAE@ABV0@@Z
??CIMSubUserVectorPtr@@QBEPAVIMSubUserVector@@XZ
?size@IMSubUserVector@@QBEHXZ
??CIMSubUserPtr@@QBEPAVIMSubUser@@XZ
??AIMSubUserVector@@QAEAAVIMSubUserPtr@@H@Z
??DIMSubUserVectorPtr@@QBEAAVIMSubUserVector@@XZ
??0IMSubUserPtr@@QAE@ABV0@@Z
??4IMSubUserPtr@@QAEPAVIMSubUser@@ABV0@@Z
??1IMSubUserPtr@@UAE@XZ
??1IMSubUserVectorPtr@@UAE@XZ
??0IMSubGroupVectorPtr@@QAE@XZ
??BIMSubGroupVectorPtr@@QBEPAUIUnknown@@XZ
??CIMSubGroupVectorPtr@@QBEPAVIMSubGroupVector@@XZ
?size@IMSubGroupVector@@QBEHXZ
??DIMSubGroupVectorPtr@@QBEAAVIMSubGroupVector@@XZ
??AIMSubGroupVector@@QAEAAVIMSubGroupPtr@@H@Z
??CIMSubGroupPtr@@QBEPAVIMSubGroup@@XZ
??1IMSubGroupVectorPtr@@UAE@XZ
??1CIMTextMessageVectorPtr@@UAE@XZ
??1CIMTextMessagePtr@@UAE@XZ
??BCIMTextMessageVectorPtr@@QBEPAUIUnknown@@XZ
?push_back@CIMTextMessageVector@@QAEXABVCIMTextMessagePtr@@@Z
??CCIMTextMessageVectorPtr@@QBEPAVCIMTextMessageVector@@XZ
??CCIMTextMessagePtr@@QBEPAVCIMTextMessage@@XZ
??0CIMTextMessagePtr@@QAE@XZ
??0CIMTextMessageVectorPtr@@QAE@XZ

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 216KB - Virtual size: 214KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 104KB - Virtual size: 102KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 56KB - Virtual size: 52KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 36KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
ContactInfoAdapter.dll
.dll windows:4 windows x86 arch:x86

364672b6b609bcb74b9b21e5cd03f6e5

Code Sign

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

15/06/2007, 00:00

Not After

14/06/2012, 23:59

Subject

CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04/12/2003, 00:00

Not After

03/12/2013, 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

59:d7:21:95:2a:a2:09:ee:3e:7b:d3:82:4f:7f:b6:e4
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Not Before

22/04/2010, 00:00

Not After

17/05/2011, 23:59

Subject

CN=Alibaba (China) Co. Ltd.,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Alibaba (China) Co. Ltd.,L=HangZhou,ST=ZheJiang,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

65:52:26:e1:b2:2e:18:e1:59:0f:29:85:ac:22:e7:5c
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

21/05/2009, 00:00

Not After

20/05/2019, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

83:c1:a5:75:46:d4:ef:99:50:b9:1c:07:11:d1:51:c5:35:91:7f:70
Signer

Actual PE Digest

83:c1:a5:75:46:d4:ef:99:50:b9:1c:07:11:d1:51:c5:35:91:7f:70

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

E:\AliWWAutoPackage\Trunk\SourceCode\IMClient-RV\symbol\Release\ContactInfoAdapter.pdb

Imports

guibase

?QueryInterface@CUIEventBase@@UAGJPA_WPAPAX@Z
?ChangeSkinColor@CUIEventBase@@UAGXK@Z
?ChangeSkinTexture@CUIEventBase@@UAGXPA_W@Z
?DispatchEvent@CUIEventBase@@MAGJPAVIUIComponent@@JPAUHWND__@@IJPAJPAH@Z
?DestroyUIComponent@CUIEventBase@@QAGXXZ
??1CUIEventBase@@QAE@XZ
?RegisterEvent@CUIDefaultEventPoint@@UAGJIP6GJPAVIUIComponent@@IIJPAXPAH@ZJ1@Z
?UnRegisterEvent@CUIDefaultEventPoint@@UAGJIP6GJPAVIUIComponent@@IIJPAXPAH@Z@Z
?ClearEvent@CUIDefaultEventPoint@@UAGJXZ
?RegisterExternalEventPoint@CUIDefaultEventPoint@@UAGJPAVIUIEventPoint@@@Z
?UnRegisterExternalEventPoint@CUIDefaultEventPoint@@UAGJPAVIUIEventPoint@@@Z
?ClearExternnalEventPoint@CUIDefaultEventPoint@@UAGJXZ
?GetEventCount@CUIDefaultEventPoint@@UAGJPAJ@Z
?GetEventPointCount@CUIDefaultEventPoint@@UAGJPAJ@Z
?TrackMouseLeave@CUIDefaultEventPoint@@UAGJPAH@Z
?GetSkinID@CUIEventBase@@UAGJXZ
?LoadUIComponent@CUIEventBase@@UAGJPA_W0V?$intrusive_ptr@VIUIComponent@@@boost@@@Z
?LoadUIComponent@CUIEventBase@@UAGJV?$intrusive_ptr@VIUIComponent@@@boost@@@Z
?put_Width@CUICallHelper@@QAEXJ@Z
??1CUICallHelper@@QAE@XZ
?put_Height@CUICallHelper@@QAEXJ@Z
?get_Width@CUICallHelper@@QAEJXZ
?get_Height@CUICallHelper@@QAEJXZ
?put_Left@CUICallHelper@@QAEXJ@Z
?put_Top@CUICallHelper@@QAEXJ@Z
?get_Hwnd@CUICallHelper@@QAEPAUHWND__@@XZ
??0CUIEventBase@@QAE@XZ
??0CUIEventBase@@QAE@PA_W0@Z
CreateXParam
?GetUIComponent@CUIEventBase@@QAGAAV?$intrusive_ptr@VIUIComponent@@@boost@@XZ
?get_Left@CUICallHelper@@QAEJXZ
?get_Top@CUICallHelper@@QAEJXZ
?put_Caption@CUICallHelper@@QAEXV_bstr_t@@@Z
?get_Caption@CUICallHelper@@QAE?AV_bstr_t@@XZ
?CreateComponent@CUIHelper@@QAE?AV?$intrusive_ptr@VIUIComponent@@@boost@@PA_WPAVIUIComponent@@PAUIXParam@@@Z
??0CUIHelper@@QAE@XZ
?put_Visible@CUICallHelper@@QAEX_N@Z
?get_ID@CUICallHelper@@QAE?AV_bstr_t@@XZ
?Update@CUICallHelper@@QAEJH@Z
??0CUICallHelper@@QAE@PAVIUIComponent@@@Z
?put_Enable@CUICallHelper@@QAEX_N@Z
?UIMessageBox@CUICallHelper@@QAEHPB_W0I@Z
?get_Enable@CUICallHelper@@QAE_NXZ
MakeAbsoluteResPath
?IsValid@CUICallHelper@@QAEHXZ
?GetRect@CUICallHelper@@QAEJAAUtagRECT@@@Z
?SetProperty@CUICallHelper@@QAEJPA_WABUtagVARIANT@@@Z
?LoadUIComponent2@CUIHelper@@QAE?AV?$intrusive_ptr@VIUIComponent@@@boost@@JPA_W0V23@V?$intrusive_ptr@VIUIEventPoint@@@3@@Z
?Execute@CUICallHelper@@QAEJIPAUIXParam@@@Z
?GetScreenRect@CUICallHelper@@QAEJAAUtagRECT@@@Z
?OnResetSkin@CUIEventBase@@UAGJJ@Z
?ReLoadResource@CUIEventBase@@MAGJXZ
?AnimateComponent@CUIEventBase@@UAGJKK@Z
?UnRegisterSKinObject@CUIEventBase@@UAGJXZ
?RegisterSKinObject@CUIEventBase@@UAGJXZ
?GetUIComponentGetRect@CUIEventBase@@UAGJPAJ000@Z
?BringUIComponentToTop@CUIEventBase@@UAGJH@Z
?SetUIComponentPosition@CUIEventBase@@UAGJPAUHWND__@@JJJJJ@Z
?SetUIComponentSkinID@CUIEventBase@@UAGJJ@Z
?GetUIComponentSkinID@CUIEventBase@@UAGJPAJ@Z
?SetResourceData@CUIEventBase@@UAGJPA_W0@Z
?IsUIComponentVisible@CUIEventBase@@UAGJPAF@Z
??0CUICallHelper@@QAE@V?$intrusive_ptr@VIUIComponent@@@boost@@@Z
?ShowUIComponent@CUIEventBase@@UAGJJ@Z

wwutils

?IMCM_GetTBVIPIconPath@@YA?AV?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@ABV12@W4IMVIPICONSize_T@@@Z
?IMCM_GetUserTBVIPIconInfo@@YAHV_bstr_t@@AAUTBVIPIconInfo@ALICONTACTMANAGER@@@Z
?IMContactManager_MoveContact@@YAJV_bstr_t@@_J@Z
?IMCM_GetAllGroupNameList@@YAH_JPA_WAAV_bstr_t@@@Z
?IMCM_GetSelfTBVIPIconInfo@@YAHAAUTBVIPIconInfo@ALICONTACTMANAGER@@@Z
?IMContactManager_RenameContact@@YAJV_bstr_t@@0@Z
?IMCM_GetPortrait@@YA?AVCComBSTR@ATL@@ABV12@W4PortraitType_T@@W4PortraitFormat_T@@HH@Z
?IMContactManager_GetDispName@@YAJV_bstr_t@@AAV1@@Z
?IMContactManager_isInStranger@@YAHPA_W@Z
?IMContactManager_isContact@@YAHPA_W@Z
?IMCU_SetConfig@@YAJVCComBSTR@ATL@@0@Z
?AddRegisterMessage@CBusMsgHandlerBase@@QAEJPB_WP81@AEXABV_bstr_t@@V?$_com_ptr_t@V?$_com_IIID@UIUnknown@@$1?_GUID_00000000_0000_0000_c000_000000000046@@3U__s_GUID@@B@@@@2PAF@ZW4HandlerEntryType@1@_N6@Z
?AddRegisterMessage@CBusMsgHandlerBase@@QAEJPB_WP81@AEXABV_bstr_t@@V?$_com_ptr_t@V?$_com_IIID@UIUnknown@@$1?_GUID_00000000_0000_0000_c000_000000000046@@3U__s_GUID@@B@@@@@ZW4HandlerEntryType@1@_N5@Z
??0CBusMsgHandlerBase@@QAE@_N@Z
?IMCU_GetCurrentUserID@@YAJPAPA_W@Z
?IMCU_GetConfig@@YA?AVCComBSTR@ATL@@V12@@Z
?OnMsg@CBusMsgHandlerBase@@QAEJPA_W0PAUIUnknown@@1PAF@Z
??1CBusMsgHandlerBase@@UAE@XZ
?IMCM_GetParentGroupNameList@@YAHPA_W0AAV_bstr_t@@@Z

protocol

??0CImRspUpdateUdbprofile@@QAE@XZ
??1CImRspUpdateUdbprofile@@QAE@XZ
?UnpackData@CImRspGetDegree@@QAE?AW4PACKRETCODE@@AAV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@ABV34@@Z
?UnpackData@CImRspUpdateUdbprofile@@QAE?AW4PACKRETCODE@@AAV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@ABV34@@Z
??1CImReqGetcntmemo@@QAE@XZ
?UnpackData@CImRspGetcntmemo@@QAE?AW4PACKRETCODE@@AAV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@ABV34@@Z
?UnpackData@CImRspChgcntmemo@@QAE?AW4PACKRETCODE@@AAV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@ABV34@@Z
?SetContactId@CImReqGetcntmemo@@QAE_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
?UnpackData@CImRspUserudbprofile@@QAE?AW4PACKRETCODE@@AAV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@ABV34@@Z
??0CImRspGetcntmemo@@QAE@XZ
??1CImRspGetcntmemo@@QAE@XZ
??0CImReqGetDegree@@QAE@XZ
??1CImReqChgcntmemo@@QAE@XZ
??1CImReqGetDegree@@QAE@XZ
?SetContactId@CImReqChgcntmemo@@QAE_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
?SetUid@CImReqGetDegree@@QAE_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
?SetMemo@CImReqChgcntmemo@@QAE_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
??0CImRspGetDegree@@QAE@XZ
??0CImRspChgcntmemo@@QAE@XZ
??1CImRspGetDegree@@QAE@XZ
??0CImReqUserudbprofile@@QAE@XZ
??1CImRspChgcntmemo@@QAE@XZ
??1CImReqUserudbprofile@@QAE@XZ
?SetUid@CImReqUserudbprofile@@QAE_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
??0CImRspUserudbprofile@@QAE@XZ
??1CImRspUserudbprofile@@QAE@XZ
?PackData@CImReqGetDegree@@QAEXAAV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@ABV23@@Z
?PackData@CImReqUpdateUdbprofile@@QAEXAAV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@ABV23@@Z
??0CImReqUpdateUdbprofile@@QAE@XZ
?PackData@CImReqUserudbprofile@@QAEXAAV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@ABV23@@Z
?PackData@CImReqGetcntmemo@@QAEXAAV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@ABV23@@Z
??1CImReqUpdateUdbprofile@@QAE@XZ
?SetProfilelist@CImReqUpdateUdbprofile@@QAE_NABV?$map@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V12@U?$less@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@2@V?$allocator@U?$pair@$$CBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V12@@std@@@2@@std@@@Z
?PackData@CImReqChgcntmemo@@QAEXAAV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@ABV23@@Z
??0CImReqGetcntmemo@@QAE@XZ
??0CImReqChgcntmemo@@QAE@XZ

urlmon

URLDownloadToCacheFileW

pcre

pcre_exec
pcre_compile

kernel32

HeapAlloc
HeapDestroy
GetVersionExA
GetThreadLocale
GetLocaleInfoA
GetACP
InterlockedExchange
lstrlenA
FindClose
CreateThread
CopyFileW
CreateDirectoryW
TerminateThread
GetLastError
WaitForSingleObject
CloseHandle
WideCharToMultiByte
MultiByteToWideChar
RaiseException
HeapSize
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
QueryPerformanceCounter
GetModuleFileNameW
FindResourceExW
InterlockedCompareExchange
Sleep
LoadResource
LockResource
SizeofResource
FindResourceW
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
CreateProcessW
FindFirstFileW
HeapReAlloc
GetProcessHeap
lstrlenW
HeapFree
FreeLibrary
GetProcAddress
LoadLibraryW
InterlockedDecrement
InterlockedIncrement
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSection

user32

GetDlgCtrlID
ClientToScreen
GetClientRect
CreateWindowExW
GetParent
WindowFromPoint
GetCapture
DestroyWindow
SetScrollPos
GetScrollInfo
SetScrollInfo
ShowScrollBar
SetWindowLongW
GetWindowLongW
IsWindow
UpdateWindow
GetCursorPos
UnregisterClassA
PtInRect
InvalidateRect
IsChild
GetFocus
SendMessageW
PostMessageW
GetSystemMetrics

advapi32

RegOpenKeyExW
RegEnumKeyExW
RegCloseKey
RegQueryValueExW

shell32

ShellExecuteW
SHCreateDirectoryExW

ole32

CoCreateInstance
CoInitialize
CoUninitialize
OleRun

oleaut32

SystemTimeToVariantTime
VariantTimeToSystemTime
VariantCopy
VarBstrCmp
SysAllocStringLen
VariantChangeType
VariantClear
VariantInit
SysFreeString
LoadTypeLi
LoadRegTypeLi
SysAllocStringByteLen
SysStringByteLen
SysStringLen
SysAllocString

atl80

ord15
ord58
ord31
ord30
ord64
ord32

shlwapi

PathFileExistsW

msvcp80

?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@ABV01@@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
?_Xran@_String_base@std@@SAXXZ
?_Xlen@_String_base@std@@SAXXZ
?swap@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXAAV12@@Z
??$?8DU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@PBD@Z
??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@PBD@Z
?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEXXZ
??$?MDU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@0@Z
?length@?$char_traits@D@std@@SAIPBD@Z
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHD@Z
??0?$basic_ofstream@DU?$char_traits@D@std@@@std@@QAE@PBDHH@Z
?close@?$basic_ofstream@DU?$char_traits@D@std@@@std@@QAEXXZ
?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEXXZ
?uncaught_exception@std@@YA_NXZ
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEXXZ
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@XZ
??_D?$basic_ofstream@DU?$char_traits@D@std@@@std@@QAEXXZ
?endl@std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@1@AAV21@@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBD@Z
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHPBDH@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAV01@AAV01@@Z@Z

rvcore

GetRvCore
GetUACCore

msvcr80

??0exception@std@@QAE@ABQBD@Z
memcpy_s
??_V@YAXPAX@Z
wcsncat_s
calloc
wcsrchr
memmove_s
??0exception@std@@QAE@XZ
free
wcslen
memset
_recalloc
??3@YAXPAX@Z
memcmp
??0exception@std@@QAE@ABV01@@Z
??1exception@std@@UAE@XZ
_purecall
?what@exception@std@@UBEPBDXZ
??2@YAPAXI@Z
_wtol
_invalid_parameter_noinfo
__clean_type_info_names_internal
wcscmp
wcsspn
wcscspn
wcspbrk
_vscwprintf
vswprintf_s
wcschr
_wtoi
wprintf
_wtoi64
_beginthreadex
strchr
strlen
wcsstr
printf
_wsplitpath
__RTDynamicCast
_wcsnicmp
_wcslwr_s
iswspace
??8type_info@@QBE_NABV0@@Z
_localtime64_s
_ismbcspace
_mbsinc
malloc
__CxxFrameHandler3
_CxxThrowException
_crt_debugger_hook
?_type_info_dtor_internal_method@type_info@@QAEXXZ
_except_handler4_common
__CppXcptFilter
_adjust_fdiv
_amsg_exit
_initterm_e
_initterm
_encoded_null
_malloc_crt
?terminate@@YAXXZ
_decode_pointer
_onexit
_lock
_encode_pointer
_unlock
__dllonexit
_wcsicmp

wwparams

??CIMSubGroupVectorPtr@@QBEPAVIMSubGroupVector@@XZ
??1IMSubGroupVectorPtr@@UAE@XZ
??DIMSubGroupVectorPtr@@QBEAAVIMSubGroupVector@@XZ
??CIMSubGroupPtr@@QBEPAVIMSubGroup@@XZ
??0IMSubGroupVectorPtr@@QAE@XZ
??AIMSubGroupVector@@QAEAAVIMSubGroupPtr@@H@Z
?size@IMSubGroupVector@@QBEHXZ
??BIMSubGroupVectorPtr@@QBEPAUIUnknown@@XZ

Exports

Exports

DllCanUnloadNow
DllGetClassObject

Sections

.text
Size: 296KB - Virtual size: 292KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 168KB - Virtual size: 167KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 44KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
ContactMgr.dll
.dll windows:4 windows x86 arch:x86

1c8fe4bcde0c75481150b753eb752714

Code Sign

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

15/06/2007, 00:00

Not After

14/06/2012, 23:59

Subject

CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04/12/2003, 00:00

Not After

03/12/2013, 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

59:d7:21:95:2a:a2:09:ee:3e:7b:d3:82:4f:7f:b6:e4
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Not Before

22/04/2010, 00:00

Not After

17/05/2011, 23:59

Subject

CN=Alibaba (China) Co. Ltd.,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Alibaba (China) Co. Ltd.,L=HangZhou,ST=ZheJiang,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

65:52:26:e1:b2:2e:18:e1:59:0f:29:85:ac:22:e7:5c
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

21/05/2009, 00:00

Not After

20/05/2019, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

d6:40:68:ad:7e:d7:76:99:8e:4c:aa:36:b6:77:57:42:5b:c9:26:57
Signer

Actual PE Digest

d6:40:68:ad:7e:d7:76:99:8e:4c:aa:36:b6:77:57:42:5b:c9:26:57

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

E:\AliWWAutoPackage\Trunk\SourceCode\IMClient-RV\symbol\Release\ContactMgr.pdb

Imports

guibase

?RegisterExternalEventPoint@CUIDefaultEventPoint@@UAGJPAVIUIEventPoint@@@Z
?UnRegisterExternalEventPoint@CUIDefaultEventPoint@@UAGJPAVIUIEventPoint@@@Z
?ClearExternnalEventPoint@CUIDefaultEventPoint@@UAGJXZ
?GetEventCount@CUIDefaultEventPoint@@UAGJPAJ@Z
?GetEventPointCount@CUIDefaultEventPoint@@UAGJPAJ@Z
?TrackMouseLeave@CUIDefaultEventPoint@@UAGJPAH@Z
?GetSkinID@CUIEventBase@@UAGJXZ
?LoadUIComponent@CUIEventBase@@UAGJPA_W0V?$intrusive_ptr@VIUIComponent@@@boost@@@Z
?LoadUIComponent@CUIEventBase@@UAGJV?$intrusive_ptr@VIUIComponent@@@boost@@@Z
?ShowUIComponent@CUIEventBase@@UAGJJ@Z
?IsUIComponentVisible@CUIEventBase@@UAGJPAF@Z
?SetResourceData@CUIEventBase@@UAGJPA_W0@Z
?GetUIComponentSkinID@CUIEventBase@@UAGJPAJ@Z
?SetUIComponentSkinID@CUIEventBase@@UAGJJ@Z
?SetUIComponentPosition@CUIEventBase@@UAGJPAUHWND__@@JJJJJ@Z
?BringUIComponentToTop@CUIEventBase@@UAGJH@Z
?GetUIComponentGetRect@CUIEventBase@@UAGJPAJ000@Z
?RegisterSKinObject@CUIEventBase@@UAGJXZ
?ClearEvent@CUIDefaultEventPoint@@UAGJXZ
?AnimateComponent@CUIEventBase@@UAGJKK@Z
?ReLoadResource@CUIEventBase@@MAGJXZ
?OnResetSkin@CUIEventBase@@UAGJJ@Z
?ChangeSkinColor@CUIEventBase@@UAGXK@Z
?ChangeSkinTexture@CUIEventBase@@UAGXPA_W@Z
?DispatchEvent@CUIEventBase@@MAGJPAVIUIComponent@@JPAUHWND__@@IJPAJPAH@Z
??0CUICallHelper@@QAE@PAVIUIComponent@@@Z
?put_Visible@CUICallHelper@@QAEX_N@Z
??0CUICallHelper@@QAE@V?$intrusive_ptr@VIUIComponent@@@boost@@@Z
?UIComponentInterface@CUICallHelper@@QAEPAVIUIComponent@@XZ
?SetProperty@CUICallHelper@@QAEJPA_WABUtagVARIANT@@@Z
?IsValid@CUICallHelper@@QAEHXZ
?UIMessageBox@CUICallHelper@@SAHPAVIUIComponent@@PB_W1I@Z
?DestroyUIComponent@CUIEventBase@@QAGXXZ
?get_Height@CUICallHelper@@QAEJXZ
?get_Width@CUICallHelper@@QAEJXZ
?get_Hwnd@CUICallHelper@@QAEPAUHWND__@@XZ
?UnRegisterEvent@CUIDefaultEventPoint@@UAGJIP6GJPAVIUIComponent@@IIJPAXPAH@Z@Z
?RegisterEvent@CUIDefaultEventPoint@@UAGJIP6GJPAVIUIComponent@@IIJPAXPAH@ZJ1@Z
??1CUICallHelper@@QAE@XZ
?QueryInterface@CUIEventBase@@UAGJPA_WPAPAX@Z
??0CUIEventBase@@QAE@PA_W0@Z
??1CUIEventBase@@QAE@XZ
CreateXParam
?UnRegisterSKinObject@CUIEventBase@@UAGJXZ

wwutils

?IMContactManager_RemoveFromBlackList@@YAJV_bstr_t@@@Z
?IMContactManager_Add2BlackList@@YAJV_bstr_t@@@Z
?IMContactManager_RemoveContact@@YAJ_JV_bstr_t@@@Z
?AddRegisterMessage@CBusMsgHandlerBase@@QAEJPB_WP81@AEXXZW4HandlerEntryType@1@_N3@Z
?AddRegisterMessage@CBusMsgHandlerBase@@QAEJPB_WP81@AEXABV_bstr_t@@V?$_com_ptr_t@V?$_com_IIID@UIUnknown@@$1?_GUID_00000000_0000_0000_c000_000000000046@@3U__s_GUID@@B@@@@2PAF@ZW4HandlerEntryType@1@_N6@Z
?IMContactManager_isContact@@YAHPA_W@Z
?IMContactManager_isInBlack@@YAHPA_W@Z
?IMContactManager_isonline@@YAHW4IMPredefinedStatus_T@@@Z
?RemoveAllRegisteredMessage@CBusMsgHandlerBase@@QAEJXZ
??0CBusMsgHandlerBase@@QAE@_N@Z
?OnMsg@CBusMsgHandlerBase@@QAEJPA_W0PAUIUnknown@@1PAF@Z
??1CBusMsgHandlerBase@@UAE@XZ
?IMContactManager_GetDispName@@YAJV_bstr_t@@AAV1@@Z

protocol

??1CCascRspGetcntlist@@QAE@XZ
??0CCascReqGetcntlist@@QAE@XZ
??1CCascReqGetcntlist@@QAE@XZ
?PackData@CCascReqGetcntlist@@QAEXAAV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@ABV23@@Z
??0CCascRspGetcntlist@@QAE@XZ
?UnpackData@CCascRspGetcntlist@@QAE?AW4PACKRETCODE@@AAV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@ABV34@@Z

kernel32

SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
InterlockedCompareExchange
Sleep
GetThreadLocale
GetLocaleInfoA
GetACP
InterlockedExchange
HeapSize
HeapReAlloc
GetLastError
EnterCriticalSection
LeaveCriticalSection
SizeofResource
LockResource
LoadResource
FindResourceW
FindResourceExW
HeapFree
GetProcessHeap
InterlockedIncrement
InterlockedDecrement
MultiByteToWideChar
lstrlenA
InitializeCriticalSection
DeleteCriticalSection
lstrlenW
GetModuleFileNameW
RaiseException
HeapAlloc
HeapDestroy
GetVersionExA
IsDebuggerPresent
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime

user32

SendMessageW
KillTimer
SetTimer
LoadIconW
UnregisterClassA

ole32

CoCreateInstance

oleaut32

LoadTypeLi
LoadRegTypeLi
VariantChangeType
VariantInit
SysStringByteLen
SysAllocStringByteLen
VariantClear
SysStringLen
SysAllocString
SysFreeString

atl80

ord15
ord32
ord61
ord23
ord64
ord31
ord58

msvcp80

?c_str@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBEPB_WXZ
??1?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@XZ
?size@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIXZ
?data@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEPBDXZ
?_Xlen@_String_base@std@@SAXXZ
?_Xran@_String_base@std@@SAXXZ
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBD@Z
??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@ABV01@@Z
?c_str@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEPBDXZ
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@PB_W@Z

rvcore

queue_work_task
GetRvCore

msvcr80

malloc
_adjust_fdiv
__CppXcptFilter
??8type_info@@QBE_NABV0@@Z
_crt_debugger_hook
__clean_type_info_names_internal
__dllonexit
_encode_pointer
_wtoi64
_wcsicmp
_time64
__RTDynamicCast
wcsftime
_localtime64_s
_except_handler4_common
_unlock
_malloc_crt
_encoded_null
_initterm
_initterm_e
?_type_info_dtor_internal_method@type_info@@QAEXXZ
_amsg_exit
?terminate@@YAXXZ
_decode_pointer
_onexit
??3@YAXPAX@Z
wcsncmp
_wcsnicmp
wcstol
iswdigit
memcpy_s
_CxxThrowException
memmove_s
_wcslwr_s
_vscwprintf
vswprintf_s
_mktime64
??1exception@std@@UAE@XZ
??0exception@std@@QAE@ABQBD@Z
__CxxFrameHandler3
?what@exception@std@@UBEPBDXZ
??0exception@std@@QAE@XZ
??2@YAPAXI@Z
??_V@YAXPAX@Z
_wtoi
_invalid_parameter_noinfo
??0exception@std@@QAE@ABV01@@Z
free
calloc
_recalloc
memset
_purecall
_lock

Exports

Exports

DllCanUnloadNow
DllGetClassObject

Sections

.text
Size: 160KB - Virtual size: 158KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 44KB - Virtual size: 43KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 16KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
CrashDumper.exe
.exe windows:4 windows x86 arch:x86

58814f6d9b8722489a96667641c7cf74

Code Sign

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

15/06/2007, 00:00

Not After

14/06/2012, 23:59

Subject

CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04/12/2003, 00:00

Not After

03/12/2013, 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

59:d7:21:95:2a:a2:09:ee:3e:7b:d3:82:4f:7f:b6:e4
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Not Before

22/04/2010, 00:00

Not After

17/05/2011, 23:59

Subject

CN=Alibaba (China) Co. Ltd.,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Alibaba (China) Co. Ltd.,L=HangZhou,ST=ZheJiang,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

65:52:26:e1:b2:2e:18:e1:59:0f:29:85:ac:22:e7:5c
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

21/05/2009, 00:00

Not After

20/05/2019, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

71:32:71:73:66:56:d9:d2:9f:10:cc:d3:0d:0a:96:71:57:07:9b:fd
Signer

Actual PE Digest

71:32:71:73:66:56:d9:d2:9f:10:cc:d3:0d:0a:96:71:57:07:9b:fd

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

e:\Development\AliWangWang\Source\20100919_v6.50.05T_beta3\modules\CrashDumper\CrashDumper\Release\CrashDumper.pdb

Imports

kernel32

LoadLibraryExA
LockResource
FindResourceExA
GetFileAttributesExA
CloseHandle
CreateFileA
ReadFile
GetFileSize
MapViewOfFileEx
CreateFileMappingA
UnmapViewOfFile
FileTimeToSystemTime
FileTimeToLocalFileTime
GetTickCount
WriteFile
GetProcAddress
LoadLibraryA
OpenProcess
CopyFileA
CompareStringA
CreateProcessA
GetPrivateProfileStringA
GetPrivateProfileIntA
GetCommandLineA
lstrcpyA
lstrcpynA
InterlockedExchange
CompareStringW
GetVersionExA
FindClose
FindNextFileA
FindFirstFileA
DeleteFileA
FileTimeToDosDateTime
GetFileTime
SetFilePointer
GetFileInformationByHandle
GetFileAttributesA
GetFileType
MapViewOfFile
DuplicateHandle
SystemTimeToFileTime
GetLocalTime
LCMapStringW
LCMapStringA
IsValidCodePage
GetOEMCP
GetCPInfo
MultiByteToWideChar
Sleep
FindResourceA
GetStdHandle
TlsFree
TlsSetValue
TlsAlloc
TlsGetValue
GetStartupInfoA
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
VirtualQuery
GetSystemInfo
VirtualProtect
RtlUnwind
ExitProcess
GetThreadLocale
GetLocaleInfoA
GetACP
VirtualAlloc
VirtualFree
IsProcessorFeaturePresent
InterlockedCompareExchange
GetProcessHeap
HeapSize
HeapReAlloc
HeapFree
HeapAlloc
HeapDestroy
GetStringTypeA
GetStringTypeW
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
GetTimeZoneInformation
GetLocaleInfoW
GetUserDefaultLCID
EnumSystemLocalesA
IsValidLocale
LoadResource
SizeofResource
FreeLibrary
GetConsoleCP
GetConsoleMode
SetEnvironmentVariableA
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
FlushFileBuffers
GetCurrentThreadId
GetCurrentProcess
FlushInstructionCache
DeleteCriticalSection
SetLastError
IsDBCSLeadByte
lstrcmpiA
lstrlenA
InterlockedDecrement
InterlockedIncrement
GetLastError
lstrlenW
WideCharToMultiByte
InitializeCriticalSection
LeaveCriticalSection
EnterCriticalSection
RaiseException
GetModuleFileNameA
HeapCreate
GetModuleHandleA

user32

ReleaseCapture
GetFocus
GetSysColor
LoadIconA
EnableWindow
SetActiveWindow
GetCapture
EndPaint
BeginPaint
GetCursorPos
SetCursor
DrawFocusRect
FillRect
PtInRect
CallWindowProcA
GetDlgCtrlID
SetCapture
IsWindowEnabled
InvalidateRect
UpdateWindow
ScreenToClient
SetRectEmpty
GetClassNameA
CreateCursor
OffsetRect
ReleaseDC
GetDC
PostQuitMessage
DrawTextA
IsDialogMessageA
SetDlgItemTextA
IsDlgButtonChecked
CheckDlgButton
GetWindowTextA
CreateWindowExA
MessageBoxA
GetDesktopWindow
GetWindowTextLengthA
SetWindowTextA
GetActiveWindow
DialogBoxParamA
IsWindow
GetDlgItem
SendMessageA
DefWindowProcA
CreateDialogParamA
DestroyWindow
DestroyCursor
CharNextA
PeekMessageA
GetMessageA
TranslateMessage
DispatchMessageA
ShowWindow
SetWindowLongA
GetWindow
GetWindowRect
SystemParametersInfoA
GetClientRect
MapWindowPoints
SetWindowPos
GetParent
GetWindowLongA
EndDialog
SetFocus
UnregisterClassA

gdi32

SelectObject
CreateFontIndirectA
GetStockObject
CreateFontA
DeleteObject
SetBkMode
GetObjectA
SetTextColor

advapi32

RegQueryInfoKeyA
RegOpenKeyExA
RegCreateKeyExA
RegCloseKey
RegDeleteValueA
RegDeleteKeyA
RegEnumKeyExA
RegQueryValueExA
RegEnumValueA
RegSetValueExA

shell32

ShellExecuteA
ExtractIconExA

ole32

CoInitialize
CoTaskMemFree
CoCreateInstance
CoTaskMemRealloc
CoTaskMemAlloc
CoUninitialize
CoCreateGuid

oleaut32

VarUI4FromStr

shlwapi

PathRemoveBackslashA
PathRemoveFileSpecA
PathAppendA
PathStripPathA
PathFindExtensionA
PathAddBackslashA
PathCanonicalizeA
PathIsRelativeA
PathFileExistsA

comctl32

InitCommonControlsEx
_TrackMouseEvent

dbghelp

MakeSureDirectoryPathExists
MiniDumpWriteDump
MiniDumpReadDumpStream

wininet

InternetWriteFile
InternetCrackUrlA
HttpAddRequestHeadersA
InternetConnectA
HttpOpenRequestA
InternetOpenA
HttpEndRequestA
InternetSetOptionA
HttpSendRequestExA
InternetErrorDlg
InternetCloseHandle

Sections

.text
Size: 228KB - Virtual size: 226KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 48KB - Virtual size: 47KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 20KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
CustomEmotionMgr.dll
.dll windows:4 windows x86 arch:x86

8ae1b381c8b7ccc374506b8dba318e83

Code Sign

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

15/06/2007, 00:00

Not After

14/06/2012, 23:59

Subject

CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04/12/2003, 00:00

Not After

03/12/2013, 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

59:d7:21:95:2a:a2:09:ee:3e:7b:d3:82:4f:7f:b6:e4
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Not Before

22/04/2010, 00:00

Not After

17/05/2011, 23:59

Subject

CN=Alibaba (China) Co. Ltd.,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Alibaba (China) Co. Ltd.,L=HangZhou,ST=ZheJiang,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

65:52:26:e1:b2:2e:18:e1:59:0f:29:85:ac:22:e7:5c
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

21/05/2009, 00:00

Not After

20/05/2019, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

7f:9c:cf:5b:b1:b1:c4:82:fc:ac:82:08:76:47:37:66:f1:92:3b:9f
Signer

Actual PE Digest

7f:9c:cf:5b:b1:b1:c4:82:fc:ac:82:08:76:47:37:66:f1:92:3b:9f

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

E:\AliWWAutoPackage\Trunk\SourceCode\IMClient-RV\symbol\Release\CustomEmotionMgr.pdb

Imports

guibase

?SetResourceData@CUIEventBase@@UAGJPA_W0@Z
?get_Hwnd@CUICallHelper@@QAEPAUHWND__@@XZ
?put_TextColor@CUICallHelper@@QAEXJ@Z
?DestroyUIComponent@CUIEventBase@@QAGXXZ
?GetUIComponentSkinID@CUIEventBase@@UAGJPAJ@Z
??0CUICallHelper@@QAE@V?$intrusive_ptr@VIUIComponent@@@boost@@@Z
?SetUIComponentSkinID@CUIEventBase@@UAGJJ@Z
?get_TextColor@CUICallHelper@@QAEJXZ
?SetUIComponentPosition@CUIEventBase@@UAGJPAUHWND__@@JJJJJ@Z
?BringUIComponentToTop@CUIEventBase@@UAGJH@Z
?GetUIComponentGetRect@CUIEventBase@@UAGJPAJ000@Z
?put_Enable@CUICallHelper@@QAEX_N@Z
?RegisterSKinObject@CUIEventBase@@UAGJXZ
?GetRect@CUICallHelper@@QAEJAAUtagRECT@@@Z
?UnRegisterSKinObject@CUIEventBase@@UAGJXZ
??1CUICallHelper@@QAE@XZ
?AnimateComponent@CUIEventBase@@UAGJKK@Z
?ReLoadResource@CUIEventBase@@MAGJXZ
?OnResetSkin@CUIEventBase@@UAGJJ@Z
?ChangeSkinColor@CUIEventBase@@UAGXK@Z
?ChangeSkinTexture@CUIEventBase@@UAGXPA_W@Z
??1CUIEventBase@@QAE@XZ
?QueryInterface@CUIEventBase@@UAGJPA_WPAPAX@Z
?RegisterEvent@CUIDefaultEventPoint@@UAGJIP6GJPAVIUIComponent@@IIJPAXPAH@ZJ1@Z
?DispatchEvent@CUIEventBase@@MAGJPAVIUIComponent@@JPAUHWND__@@IJPAJPAH@Z
?ClearEvent@CUIDefaultEventPoint@@UAGJXZ
?RegisterExternalEventPoint@CUIDefaultEventPoint@@UAGJPAVIUIEventPoint@@@Z
?UnRegisterExternalEventPoint@CUIDefaultEventPoint@@UAGJPAVIUIEventPoint@@@Z
?ClearExternnalEventPoint@CUIDefaultEventPoint@@UAGJXZ
?GetEventCount@CUIDefaultEventPoint@@UAGJPAJ@Z
??0CUIEventBase@@QAE@PA_W0@Z
?put_Visible@CUICallHelper@@QAEX_N@Z
GetUICoreInstance
?Update@CUICallHelper@@QAEJH@Z
??1CDialogHelper@@QAE@XZ
?UpdateWindow@CUICallHelper@@QAEJXZ
?UIMessageBox@CUICallHelper@@QAEHPB_W0I@Z
??0CUICallHelper@@QAE@PAVIUIComponent@@@Z
?Execute@CUICallHelper@@QAEJIPAUIXParam@@@Z
?get_Enable@CUICallHelper@@QAE_NXZ
??0CDialogHelper@@QAE@PAVIUIComponent@@PA_W1@Z
?DoModal@CDialogHelper@@QAEHPAVIUIEventPoint@@J@Z
CreateXParam
?LoadUIComponent2@CUIHelper@@QAE?AV?$intrusive_ptr@VIUIComponent@@@boost@@JPA_W0V23@V?$intrusive_ptr@VIUIEventPoint@@@3@@Z
??0CUIHelper@@QAE@XZ
?IsValid@CUICallHelper@@QAEHXZ
?EndDialog@CDialogHelper@@SAJPAVIUIComponent@@H@Z
?get_Caption@CUICallHelper@@QAE?AV_bstr_t@@XZ
?IsUIComponentVisible@CUIEventBase@@UAGJPAF@Z
?ShowUIComponent@CUIEventBase@@UAGJJ@Z
?put_Caption@CUICallHelper@@QAEXV_bstr_t@@@Z
?LoadUIComponent@CUIEventBase@@UAGJV?$intrusive_ptr@VIUIComponent@@@boost@@@Z
?SetProperty@CUICallHelper@@QAEJPA_WABUtagVARIANT@@@Z
?LoadUIComponent@CUIEventBase@@UAGJPA_W0V?$intrusive_ptr@VIUIComponent@@@boost@@@Z
?GetProperty@CUICallHelper@@QAEJPA_WAAUtagVARIANT@@@Z
?GetSkinID@CUIEventBase@@UAGJXZ
?TrackMouseLeave@CUIDefaultEventPoint@@UAGJPAH@Z
?GetEventPointCount@CUIDefaultEventPoint@@UAGJPAJ@Z
?UnRegisterEvent@CUIDefaultEventPoint@@UAGJIP6GJPAVIUIComponent@@IIJPAXPAH@Z@Z

wwutils

?IMCU_GetCurrentUserID@@YAJPAPA_W@Z
??0CBusMsgHandlerBase@@QAE@_N@Z
?OnMsg@CBusMsgHandlerBase@@QAEJPA_W0PAUIUnknown@@1PAF@Z
?AddRegisterMessage@CBusMsgHandlerBase@@QAEJPB_WP81@AEXABV_bstr_t@@V?$_com_ptr_t@V?$_com_IIID@UIUnknown@@$1?_GUID_00000000_0000_0000_c000_000000000046@@3U__s_GUID@@B@@@@2PAF@ZW4HandlerEntryType@1@_N6@Z
?IMCU_SetConfig@@YAJVCComBSTR@ATL@@0@Z
?IMCU_GetConfig@@YA?AVCComBSTR@ATL@@V12@@Z
??1CBusMsgHandlerBase@@UAE@XZ

kernel32

LockResource
InterlockedIncrement
LoadResource
InterlockedDecrement
FindResourceExW
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
HeapFree
GetProcessHeap
WaitForSingleObject
GetVersionExW
TerminateThread
CloseHandle
InterlockedCompareExchange
MultiByteToWideChar
GetCurrentProcess
FlushInstructionCache
FreeLibrary
CopyFileW
GetProcAddress
Sleep
LoadLibraryW
RaiseException
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
lstrlenA
GetLastError
VirtualAlloc
VirtualFree
IsProcessorFeaturePresent
LoadLibraryA
GetThreadLocale
GetLocaleInfoA
GetACP
InterlockedExchange
GetVersionExA
HeapSize
HeapReAlloc
HeapAlloc
HeapDestroy
GetModuleFileNameW
FindResourceW
SizeofResource
lstrlenW

user32

UnregisterClassA
EndPaint
BeginPaint
GetWindowLongW
GetDC
SendMessageW
ReleaseDC
DrawTextW
GetSystemMetrics
SetFocus
InflateRect
InvalidateRect
UpdateWindow
GetActiveWindow
PtInRect
ScreenToClient
GetCursorPos
FlashWindow
SetWindowLongW
PostMessageW
ClientToScreen
GetClientRect
CreateWindowExW
IsWindow
DestroyWindow
GetParent

gdi32

ExtTextOutW
SetBkColor
DeleteDC

comdlg32

CommDlgExtendedError
GetOpenFileNameW
GetSaveFileNameW

shell32

DragFinish
DragQueryFileW
SHCreateDirectoryExW

ole32

CoCreateInstance

oleaut32

SysAllocStringLen
SysStringLen
SysAllocString
SysFreeString
SysStringByteLen
SysAllocStringByteLen
VariantChangeType
LoadTypeLi
LoadRegTypeLi
VariantClear
VariantInit

atl80

ord31
ord44
ord43
ord32
ord58
ord64
ord15

shlwapi

PathFileExistsW

msvcp80

??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z
??1?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@XZ
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@PB_W@Z
?find_first_not_of@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBEIPB_WI@Z
?npos@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@2IB
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBD@Z

rvcore

GetRvCore

msvcr80

wcsspn
wcsstr
__clean_type_info_names_internal
_crt_debugger_hook
?_type_info_dtor_internal_method@type_info@@QAEXXZ
_except_handler4_common
memcpy
_beginthreadex
wcsncpy_s
?what@exception@std@@UBEPBDXZ
wcslen
free
??2@YAPAXI@Z
wcscmp
??0exception@std@@QAE@ABQBD@Z
memcpy_s
memset
__CppXcptFilter
_adjust_fdiv
_amsg_exit
_initterm_e
_initterm
_encoded_null
_malloc_crt
?terminate@@YAXXZ
_decode_pointer
_onexit
_lock
_encode_pointer
__dllonexit
_unlock
_CxxThrowException
__CxxFrameHandler3
malloc
vswprintf_s
_vscwprintf
_wcslwr_s
wcsrchr
wcscspn
??3@YAXPAX@Z
memmove_s
memcmp
??_V@YAXPAX@Z
_wcsicmp
??0exception@std@@QAE@ABV01@@Z
_purecall
??8type_info@@QBE_NABV0@@Z
_invalid_parameter_noinfo
??1exception@std@@UAE@XZ
??0exception@std@@QAE@XZ
iswspace
wcsncat_s

Exports

Exports

DllCanUnloadNow
DllGetClassObject

Sections

.text
Size: 88KB - Virtual size: 86KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 44KB - Virtual size: 42KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 16KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
EmotionConfig.dll
.dll windows:4 windows x86 arch:x86

7db3be75e761d4ad149f6b4e0e19457b

Code Sign

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

15/06/2007, 00:00

Not After

14/06/2012, 23:59

Subject

CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04/12/2003, 00:00

Not After

03/12/2013, 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

59:d7:21:95:2a:a2:09:ee:3e:7b:d3:82:4f:7f:b6:e4
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Not Before

22/04/2010, 00:00

Not After

17/05/2011, 23:59

Subject

CN=Alibaba (China) Co. Ltd.,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Alibaba (China) Co. Ltd.,L=HangZhou,ST=ZheJiang,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

65:52:26:e1:b2:2e:18:e1:59:0f:29:85:ac:22:e7:5c
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

21/05/2009, 00:00

Not After

20/05/2019, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

4c:a1:cf:76:62:d7:5f:03:87:c1:86:0c:e6:a2:cb:bb:1e:c1:ff:70
Signer

Actual PE Digest

4c:a1:cf:76:62:d7:5f:03:87:c1:86:0c:e6:a2:cb:bb:1e:c1:ff:70

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

E:\AliWWAutoPackage\Trunk\SourceCode\IMClient-RV\symbol\Release\EmotionConfig.pdb

Imports

guibase

?SetProperty@CUICallHelper@@QAEJPA_WABUtagVARIANT@@@Z
?ChangeSkinColor@CUIEventBase@@UAGXK@Z
?ChangeSkinTexture@CUIEventBase@@UAGXPA_W@Z
??1CUIEventBase@@QAE@XZ
?EndDialog@CDialogHelper@@SAJPAVIUIComponent@@H@Z
?QueryInterface@CUIEventBase@@UAGJPA_WPAPAX@Z
?GetUIComponent@CUIEventBase@@QAGAAV?$intrusive_ptr@VIUIComponent@@@boost@@XZ
?RegisterEvent@CUIDefaultEventPoint@@UAGJIP6GJPAVIUIComponent@@IIJPAXPAH@ZJ1@Z
?UnRegisterEvent@CUIDefaultEventPoint@@UAGJIP6GJPAVIUIComponent@@IIJPAXPAH@Z@Z
?ClearEvent@CUIDefaultEventPoint@@UAGJXZ
?RegisterExternalEventPoint@CUIDefaultEventPoint@@UAGJPAVIUIEventPoint@@@Z
?UnRegisterExternalEventPoint@CUIDefaultEventPoint@@UAGJPAVIUIEventPoint@@@Z
?ClearExternnalEventPoint@CUIDefaultEventPoint@@UAGJXZ
CreateXParam
?GetEventCount@CUIDefaultEventPoint@@UAGJPAJ@Z
?GetEventPointCount@CUIDefaultEventPoint@@UAGJPAJ@Z
??0CUICallHelper@@QAE@PAVIUIComponent@@@Z
?TrackMouseLeave@CUIDefaultEventPoint@@UAGJPAH@Z
??1CUICallHelper@@QAE@XZ
?GetSkinID@CUIEventBase@@UAGJXZ
?OnResetSkin@CUIEventBase@@UAGJJ@Z
?LoadUIComponent@CUIEventBase@@UAGJV?$intrusive_ptr@VIUIComponent@@@boost@@@Z
?ShowUIComponent@CUIEventBase@@UAGJJ@Z
?IsUIComponentVisible@CUIEventBase@@UAGJPAF@Z
?SetResourceData@CUIEventBase@@UAGJPA_W0@Z
?GetUIComponentSkinID@CUIEventBase@@UAGJPAJ@Z
?SetUIComponentSkinID@CUIEventBase@@UAGJJ@Z
?SetUIComponentPosition@CUIEventBase@@UAGJPAUHWND__@@JJJJJ@Z
?DispatchEvent@CUIEventBase@@MAGJPAVIUIComponent@@JPAUHWND__@@IJPAJPAH@Z
??0CUIEventBase@@QAE@PA_W0@Z
?BringUIComponentToTop@CUIEventBase@@UAGJH@Z
?GetUIComponentGetRect@CUIEventBase@@UAGJPAJ000@Z
?RegisterSKinObject@CUIEventBase@@UAGJXZ
?UnRegisterSKinObject@CUIEventBase@@UAGJXZ
GetUICoreInstance
?AnimateComponent@CUIEventBase@@UAGJKK@Z
?get_Hwnd@CUICallHelper@@QAEPAUHWND__@@XZ
?ReLoadResource@CUIEventBase@@MAGJXZ
??0CUICallHelper@@QAE@V?$intrusive_ptr@VIUIComponent@@@boost@@@Z
?DoModal@CDialogHelper@@QAEHPAVIUIEventPoint@@J@Z
??1CDialogHelper@@QAE@XZ
??0CDialogHelper@@QAE@PAUHWND__@@PA_W1@Z
?LoadUIComponent@CUIEventBase@@UAGJPA_W0V?$intrusive_ptr@VIUIComponent@@@boost@@@Z

wwutils

?IMCU_GetCurrentUserID@@YAJPAPA_W@Z

kernel32

LeaveCriticalSection
InterlockedIncrement
DeleteCriticalSection
InitializeCriticalSection
GetProcessHeap
lstrlenA
SetFilePointer
GetLastError
GlobalAlloc
lstrcpyW
GetFileAttributesExW
CreateFileW
Sleep
lstrlenW
WriteFile
InterlockedCompareExchange
CreateDirectoryW
CloseHandle
GetModuleFileNameW
GetFileSize
GlobalLock
ReadFile
GlobalSize
FileTimeToSystemTime
GlobalUnlock
GlobalFree
SetEndOfFile
CopyFileW
DeleteFileW
FindResourceW
FindFirstFileW
FindClose
SetLastError
FindNextFileW
WaitForSingleObject
SizeofResource
FreeLibrary
LockResource
LoadResource
GetFullPathNameW
CreateThread
FindResourceExW
ResumeThread
GetProcAddress
LoadLibraryW
MultiByteToWideChar
HeapFree
RaiseException
HeapDestroy
HeapAlloc
HeapReAlloc
HeapSize
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
InterlockedExchange
GetVersionExA
InterlockedDecrement
EnterCriticalSection

user32

GetWindowRect
PostMessageW
UnregisterClassA
InvalidateRect
IsWindow

shell32

SHCreateDirectoryExW

ole32

CreateStreamOnHGlobal
CoCreateInstance

oleaut32

SysAllocStringByteLen
SysAllocString
VariantClear
SysStringLen
SysStringByteLen
SysFreeString

atl80

ord32
ord15
ord64

shlwapi

PathFileExistsW
PathAppendW

msvcp80

??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBD@Z

rvcore

GetRvCore

gdiplus

GdipDeleteBrush
GdipGetImageWidth
GdipGetImageHeight
GdipSaveImageToStream
GdipDrawImageRectRect
GdipCloneBrush
GdipCreateBitmapFromScan0
GdipGetImageThumbnail
GdipGetImageGraphicsContext
GdipFillRectangleI
GdipCreateSolidFill
GdipSaveImageToFile
GdipDisposeImage
GdipDeleteGraphics
GdipAlloc
GdipGetImageEncodersSize
GdipCloneImage
GdipFree
GdipGetImageEncoders
GdipGetImageType
GdipLoadImageFromFile

msvcr80

fread
fseek
ftell
fclose
_wfopen
__clean_type_info_names_internal
strlen
malloc
??0exception@std@@QAE@XZ
calloc
_wsplitpath
_invalid_parameter_noinfo
?_type_info_dtor_internal_method@type_info@@QAEXXZ
_crt_debugger_hook
_except_handler4_common
__CppXcptFilter
_adjust_fdiv
_amsg_exit
_initterm_e
_initterm
_encoded_null
_malloc_crt
?terminate@@YAXXZ
_decode_pointer
vswprintf_s
_onexit
_lock
_encode_pointer
__dllonexit
_unlock
_CxxThrowException
__CxxFrameHandler3
wcscmp
free
wcsstr
??3@YAXPAX@Z
??_V@YAXPAX@Z
memmove_s
_recalloc
??2@YAPAXI@Z
memcpy_s
wcslen
memset
_mktime64
_wcsicmp
??0exception@std@@QAE@ABV01@@Z
_purecall
iswspace
??1exception@std@@UAE@XZ
wcscpy_s
wcsrchr
??8type_info@@QBE_NABV0@@Z
_wcslwr_s
strcmp
wcschr
??0exception@std@@QAE@ABQBD@Z
memcpy
_vscwprintf
?what@exception@std@@UBEPBDXZ
wcsncat_s

urlmon

URLDownloadToCacheFileW

Exports

Exports

DllCanUnloadNow
DllGetClassObject

Sections

.text
Size: 92KB - Virtual size: 88KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 36KB - Virtual size: 34KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
EndProcess.exe
.exe windows:4 windows x86 arch:x86

60202b68e58ea740f88a770785bee279

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

e:\AliWWAutoPackage\Trunk\SourceCode\modules\WangWangPostInstall\release\EndProcess.pdb

Imports

kernel32

LoadResource
LocalFree
GetCommandLineW
WideCharToMultiByte
InterlockedCompareExchange
InterlockedExchange
MultiByteToWideChar
InterlockedIncrement
InterlockedDecrement
Sleep
InitializeCriticalSection
DeleteCriticalSection
FindResourceW
LeaveCriticalSection
RaiseException
GetVersionExA
HeapDestroy
HeapAlloc
HeapFree
HeapReAlloc
HeapSize
GetProcessHeap
CompareStringW
CompareStringA
FindResourceExW
SizeofResource
GetModuleFileNameW
EnterCriticalSection
LockResource
SetEndOfFile
CreateFileW
CreateFileA
GetLocaleInfoW
WriteConsoleW
GetStartupInfoW
GetSystemTimeAsFileTime
GetLastError
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
LCMapStringA
LCMapStringW
GetCPInfo
RtlUnwind
GetStringTypeA
GetStringTypeW
GetProcAddress
GetModuleHandleA
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineA
SetHandleCount
GetFileType
GetStartupInfoA
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
GetCurrentThreadId
HeapCreate
VirtualFree
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
SetFilePointer
GetConsoleCP
GetConsoleMode
GetACP
GetOEMCP
IsValidCodePage
GetTimeZoneInformation
ReadFile
VirtualAlloc
FlushFileBuffers
CloseHandle
GetLocaleInfoA
GetUserDefaultLCID
EnumSystemLocalesA
IsValidLocale
LoadLibraryA
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
SetEnvironmentVariableA

user32

UnregisterClassA

advapi32

GetEffectiveRightsFromAclW
SetEntriesInAclW
SetNamedSecurityInfoW
GetNamedSecurityInfoW

shell32

CommandLineToArgvW

shlwapi

PathRemoveFileSpecW
StrCmpIW

Sections

.text
Size: 112KB - Virtual size: 110KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 176B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
GUIBase.dll
.dll windows:4 windows x86 arch:x86

fe36d83e695cb1011c2042405205d2f8

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

E:\AliWWAutoPackage\Trunk\SourceCode\revolution_min\symbol\Release\GUIBase.pdb

Imports

kernel32

QueryPerformanceCounter
HeapFree
GetProcessHeap
LoadLibraryW
WriteFile
FlushFileBuffers
WideCharToMultiByte
lstrcpyW
GetFileSize
ReadFile
DeleteFileW
GetPrivateProfileIntW
GetPrivateProfileStringW
FindFirstFileW
FindNextFileW
FindClose
GetSystemTimeAsFileTime
GetCurrentProcessId
QueryPerformanceFrequency
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
lstrlenA
VirtualAlloc
VirtualFree
IsProcessorFeaturePresent
LoadLibraryA
GetThreadLocale
GetLocaleInfoA
GetACP
InterlockedExchange
GetVersionExA
HeapSize
HeapReAlloc
HeapAlloc
HeapDestroy
GetTempPathW
GetVersionExW
Sleep
InterlockedCompareExchange
GetProcAddress
GetCurrentThreadId
SetLastError
FlushInstructionCache
GetCurrentProcess
lstrcmpW
GetFileTime
CloseHandle
SetFileTime
CreateFileW
GetModuleHandleW
LeaveCriticalSection
EnterCriticalSection
FindResourceW
lstrlenW
InitializeCriticalSection
RaiseException
FreeLibrary
DeleteCriticalSection
lstrcmpiW
GetModuleFileNameW
GetLastError
MultiByteToWideChar
LoadLibraryExW
InterlockedIncrement
InterlockedDecrement
FindResourceExW
LoadResource
LockResource
SizeofResource
GetTickCount

user32

SetWindowPos
CharNextW
LoadCursorW
ArrangeIconicWindows
GetScrollRange
OpenClipboard
GetWindowRect
ValidateRect
BringWindowToTop
UnregisterClassA
ChildWindowFromPoint
MapWindowPoints
UnionRect
SystemParametersInfoW
ScrollWindow
InvalidateRgn
GetScrollInfo
ValidateRgn
ScrollWindowEx
GetWindowPlacement
GetWindow
SetScrollInfo
ShowWindow
SetScrollPos
SetWindowPlacement
IsDialogMessageW
SetTimer
MessageBoxW
InvalidateRect
wsprintfW
GetClientRect
SendMessageW
GetDC
ReleaseDC
IsWindow
DestroyWindow
SetCursor
GetCursorPos
ScreenToClient
PtInRect
ClientToScreen
OffsetRect
CreateWindowExW
GetParent
CopyRect
IsWindowVisible
SetWindowTextW
SetWindowRgn
EndPaint
KillTimer
ChildWindowFromPointEx
GetWindowTextW
IsWindowEnabled
GetTopWindow
GetWindowThreadProcessId
GetWindowTextLengthW
GetWindowDC
EnableWindow
IsIconic
GetWindowLongW
SetScrollRange
FlashWindow
ShowOwnedPopups
GetMenu
SetWindowLongW
RedrawWindow
ShowScrollBar
GetDCEx
InflateRect
EnableScrollBar
AdjustWindowRectEx
LockWindowUpdate
GetWindowRgn
BeginPaint
GetNextDlgTabItem
GetKeyState
SetForegroundWindow
FlashWindowEx
PostMessageW
GetActiveWindow
DispatchMessageW
TranslateMessage
GetMessageW
PeekMessageW
AnimateWindow
WindowFromPoint
ReleaseCapture
SetLayeredWindowAttributes
EndDeferWindowPos
DeferWindowPos
BeginDeferWindowPos
CharLowerBuffW
GetDesktopWindow
LoadImageW
DrawTextW
CallWindowProcW
DefWindowProcW
GetClassInfoExW
RegisterClassExW
GetDlgItem
SetClipboardViewer
GetScrollPos
ShowWindowAsync
GetUpdateRgn
SetParent
SetFocus
MoveWindow
GetClassNameW
GetUpdateRect
SetCapture
IsChild
UpdateWindow
IsZoomed
SetActiveWindow
GetLastActivePopup
IsWindowUnicode

gdi32

SetBkMode
SetTextColor
GetStockObject
SetBkColor
ExtTextOutW
RestoreDC
GetCurrentObject
CreateRoundRectRgn
CreatePen
RoundRect
ExtSelectClipRgn
SaveDC
OffsetRgn
CombineRgn
CreateRectRgn
GetObjectW
DeleteObject
DeleteDC
SelectObject
CreateCompatibleBitmap
BitBlt
OffsetViewportOrgEx
CreateCompatibleDC

advapi32

RegDeleteKeyW
RegEnumKeyExW
RegQueryInfoKeyW
RegCloseKey
RegOpenKeyExW
RegSetValueExW
RegDeleteValueW
RegCreateKeyExW

shell32

SHFileOperationW
SHCreateDirectoryExW

ole32

CoTaskMemRealloc
CoTaskMemAlloc
CoCreateInstance
CoCreateGuid
OleRun
CoTaskMemFree

oleaut32

GetErrorInfo
VarCmp
SysAllocStringLen
SysStringLen
VarUI4FromStr
VariantCopy
VariantInit
VariantChangeType
SysAllocStringByteLen
SysStringByteLen
VarBstrCmp
VariantClear
SysAllocString
SysFreeString

shlwapi

PathFileExistsW

comctl32

_TrackMouseEvent

msvcp80

??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBD@Z
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
?close@?$basic_ofstream@DU?$char_traits@D@std@@@std@@QAEXXZ
??0?$basic_ofstream@DU?$char_traits@D@std@@@std@@QAE@PB_WHH@Z
?write@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@PBDH@Z
??_D?$basic_ofstream@DU?$char_traits@D@std@@@std@@QAEXXZ

rvcore

GetRvCore

gdiplus

GdipFillRectangleI
GdipFillRegion
GdipGetDC
GdipCreateLineBrushFromRectWithAngleI
GdipCloneImage
GdipCreateBitmapFromScan0
GdipSetImageAttributesColorMatrix
GdipGetImageGraphicsContext
GdipDisposeImage
GdipAlloc
GdipFree
GdipCreateSolidFill
GdipCloneBrush
GdipDeleteBrush
GdipDeleteRegion
GdipCreateRegionHrgn
GdipSetClipRegion
GdipDeleteGraphics
GdipCreateFromHDC
GdipDrawImageRectRectI
GdipDrawImagePointRectI
GdipDisposeImageAttributes
GdipCreateImageAttributes
GdipGetImageHeight
GdipGetImageWidth
GdipDrawImagePointsRectI
GdipCombineRegionRectI
GdipSetEmpty
GdipDrawImageRectI
GdipSetImageAttributesWrapMode

msvcr80

_encoded_null
_malloc_crt
_decode_pointer
_onexit
_lock
_encode_pointer
__dllonexit
_unlock
?terminate@@YAXXZ
_CxxThrowException
__CxxFrameHandler3
wcscpy
_filelength
strlen
calloc
_wsplitpath
_wfopen
wcsncat_s
wcsrchr
_wcsnicmp
fclose
fwrite
swscanf
swprintf_s
__RTDynamicCast
strncpy
fread
ftell
fseek
wcschr
_initterm
_itow
_wsplitpath_s
memcpy
wcscpy_s
_vswprintf_c_l
iswspace
malloc
free
_recalloc
wcsncpy_s
memset
vswprintf_s
_vscwprintf
wcscmp
_purecall
_wcslwr_s
_wcsicmp
?what@exception@std@@UBEPBDXZ
??0exception@std@@QAE@ABQBD@Z
memmove_s
wcsstr
??_V@YAXPAX@Z
memcpy_s
wcslen
??0exception@std@@QAE@ABV01@@Z
_invalid_parameter_noinfo
??2@YAPAXI@Z
??1exception@std@@UAE@XZ
??0exception@std@@QAE@XZ
??3@YAXPAX@Z
_initterm_e
_amsg_exit
__clean_type_info_names_internal
_adjust_fdiv
__CppXcptFilter
_except_handler4_common
?_type_info_dtor_internal_method@type_info@@QAEXXZ
_crt_debugger_hook
wcsncpy

Sections

.text
Size: 364KB - Virtual size: 361KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 228KB - Virtual size: 226KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 40KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
WWApplication.dll
.dll windows:4 windows x86 arch:x86

e9a04a758634cc61d1e7844f9d592b3b

Code Sign

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

15/06/2007, 00:00

Not After

14/06/2012, 23:59

Subject

CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04/12/2003, 00:00

Not After

03/12/2013, 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

59:d7:21:95:2a:a2:09:ee:3e:7b:d3:82:4f:7f:b6:e4
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Not Before

22/04/2010, 00:00

Not After

17/05/2011, 23:59

Subject

CN=Alibaba (China) Co. Ltd.,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Alibaba (China) Co. Ltd.,L=HangZhou,ST=ZheJiang,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

65:52:26:e1:b2:2e:18:e1:59:0f:29:85:ac:22:e7:5c
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

21/05/2009, 00:00

Not After

20/05/2019, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

60:d5:9b:27:31:5e:7d:96:b6:31:33:b2:c0:3a:95:78:44:1d:ab:fe
Signer

Actual PE Digest

60:d5:9b:27:31:5e:7d:96:b6:31:33:b2:c0:3a:95:78:44:1d:ab:fe

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

E:\AliWWAutoPackage\Trunk\SourceCode\IMClient-RV\symbol\Release\WWApplication.pdb

Imports

guibase

?LoadUIComponent@CUIEventBase@@UAGJV?$intrusive_ptr@VIUIComponent@@@boost@@@Z
?ShowUIComponent@CUIEventBase@@UAGJJ@Z
?IsUIComponentVisible@CUIEventBase@@UAGJPAF@Z
?SetResourceData@CUIEventBase@@UAGJPA_W0@Z
?GetUIComponentSkinID@CUIEventBase@@UAGJPAJ@Z
?SetUIComponentSkinID@CUIEventBase@@UAGJJ@Z
?SetUIComponentPosition@CUIEventBase@@UAGJPAUHWND__@@JJJJJ@Z
?BringUIComponentToTop@CUIEventBase@@UAGJH@Z
?GetUIComponentGetRect@CUIEventBase@@UAGJPAJ000@Z
?RegisterSKinObject@CUIEventBase@@UAGJXZ
?UnRegisterSKinObject@CUIEventBase@@UAGJXZ
?AnimateComponent@CUIEventBase@@UAGJKK@Z
?ReLoadResource@CUIEventBase@@MAGJXZ
?OnResetSkin@CUIEventBase@@UAGJJ@Z
?ChangeSkinColor@CUIEventBase@@UAGXK@Z
?ChangeSkinTexture@CUIEventBase@@UAGXPA_W@Z
??1CUICallHelper@@QAE@XZ
?get_Hwnd@CUICallHelper@@QAEPAUHWND__@@XZ
??0CUICallHelper@@QAE@V?$intrusive_ptr@VIUIComponent@@@boost@@@Z
?UIPropertyInterface@CUICallHelper@@QAEPAVIUIProperty@@XZ
??0CUIEventBase@@QAE@XZ
?UIMessageBox@CUICallHelper@@QAEHPB_W0I@Z
??0CUICallHelper@@QAE@PAVIUIComponent@@@Z
?UpdateWindow@CUICallHelper@@QAEJXZ
?put_Caption@CUICallHelper@@QAEXV_bstr_t@@@Z
?EndDialog@CDialogHelper@@SAJPAVIUIComponent@@H@Z
?SetProperty@CUICallHelper@@QAEJPA_WABUtagVARIANT@@@Z
CreateXParam
?GenBinXml@@YAHXZ
CreateXMLResourceArchive
?UIMessageBox@CUICallHelper@@SAHPAUHWND__@@PB_W1I@Z
?LoadUIComponent2@CUIHelper@@QAE?AV?$intrusive_ptr@VIUIComponent@@@boost@@JPA_W0V23@V?$intrusive_ptr@VIUIEventPoint@@@3@@Z
??0CUIHelper@@QAE@XZ
?GetSkinManager@CUIHelper@@QAEPAVIUISkinManager@@XZ
??1CStaticEvent@@QAE@XZ
??0CStaticEvent@@QAE@XZ
?AddRef@CStaticEvent@@UAGKXZ
?Release@CStaticEvent@@UAGKXZ
?IsValid@CUICallHelper@@QAEHXZ
?GetPluginManager@CUIHelper@@QAEPAVIUIPluginManager@@XZ
?get_SkinID@CUICallHelper@@QAEJXZ
?GetUIComponent@CUIEventBase@@QAGAAV?$intrusive_ptr@VIUIComponent@@@boost@@XZ
?put_Visible@CUICallHelper@@QAEX_N@Z
?put_Top@CUICallHelper@@QAEXJ@Z
?put_Width@CUICallHelper@@QAEXJ@Z
?get_Width@CUICallHelper@@QAEJXZ
?put_Height@CUICallHelper@@QAEXJ@Z
?get_Height@CUICallHelper@@QAEJXZ
?get_Top@CUICallHelper@@QAEJXZ
?put_Left@CUICallHelper@@QAEXJ@Z
?UIEventPointInterface@CUICallHelper@@QAEPAVIUIEventPoint@@XZ
?Detach@CUIControlPtr@@QAEXXZ
?Attach@CUIControlPtr@@QAEXAAV?$intrusive_ptr@VIUIComponent@@@boost@@ABV_bstr_t@@@Z
?IsValid@CUIControlPtr@@QAE_NXZ
?UnloadUIComponent@CUIEventBase@@QAGXXZ
?DestroyUIComponent@CUIEventBase@@QAGXXZ
?LoadUIComponent@CUIEventBase@@UAGJPA_W0V?$intrusive_ptr@VIUIComponent@@@boost@@@Z
??1CUIControlPtr@@QAE@XZ
??0CUIControlPtr@@QAE@XZ
??BCUIControlPtr@@QAE_NXZ
??7CUIControlPtr@@QAE_NXZ
?DispatchEvent@CUIDataExchange@@UAGJPAVIUIComponent@@JPAUHWND__@@IJPAJPAH@Z
?Update@CUICallHelper@@QAEJH@Z
?put_Enable@CUICallHelper@@QAEX_N@Z
??1CDialogHelper@@QAE@XZ
?DoModal@CDialogHelper@@QAEHPAVIUIEventPoint@@J@Z
??0CDialogHelper@@QAE@PAVIUIComponent@@PA_W1@Z
?ReLoadImageFile@CUIHelper@@QAEJJPA_W@Z
?GetRect@CUICallHelper@@QAEJAAUtagRECT@@@Z
??BCUIControlPtr@@QAEAAV?$intrusive_ptr@VIUIComponent@@@boost@@XZ
??0CUIControlPtr@@QAE@ABV0@@Z
?UIComponentInterface@CUICallHelper@@QAEPAVIUIComponent@@XZ
?SetProperty@CUICallHelper@@QAEJIABUtagVARIANT@@@Z
?get_Left@CUICallHelper@@QAEJXZ
?MoveTip@CSimpleToolTip@@QAEXXZ
?ShowTip@CSimpleToolTip@@QAE_NPB_WHH0HH@Z
?UnShowTip@CSimpleToolTip@@QAEXXZ
??0CDialogHelper@@QAE@PAUHWND__@@PA_W1@Z
?get_Caption@CUICallHelper@@QAE?AV_bstr_t@@XZ
??0CSimpleToolTip@@QAE@PB_WPAUHWND__@@H_N@Z
?ProcessWindowMessage@CSimpleToolTip@@UAEHPAUHWND__@@IIJAAJK@Z
?GetWindowProc@?$CWindowImplBaseT@V?$CToolTipCtrlT@VCWindow@ATL@@@WTL@@V?$CWinTraits@$0FGAAAAAA@$0A@@ATL@@@ATL@@UAEP6GJPAUHWND__@@IIJ@ZXZ
?OnFinalMessage@CSimpleToolTip@@MAEXPAUHWND__@@@Z
??1CSimpleToolTip@@UAE@XZ
?IsShow@CSimpleToolTip@@QAEHXZ
?GetScreenRect@CUICallHelper@@QAEJAAUtagRECT@@@Z
MakeAbsoluteResPath
?get_Visible@CUICallHelper@@QAE_NXZ
?ResetSizeRect@CUICallHelper@@QAEJXZ
?Execute@CUICallHelper@@QAEJIPAUIXParam@@@Z
GetTempResFolder
GetTempResFile
MakeAbsoluteThemePath
RemoveGUIResTempPath
FromXmlFileEx
MakeAbsolutePath
?UIMessageBox@CUICallHelper@@SAHPAVIUIComponent@@PB_W1I@Z
?SetImage@CResImageObject@@QAEPAVBitmap@Gdiplus@@ABV_bstr_t@@_N1@Z
?ReleaseResource@CResImageObject@@QAEXXZ
?GetImage@CResImageObject@@QAEPAVBitmap@Gdiplus@@XZ
??CCUIControlPtr@@QAEAAV?$intrusive_ptr@VIUIComponent@@@boost@@XZ
?PushMsg@CUIMessageFilter@@QAEXI@Z
?SetTarget@CUIMessageFilter@@QAEJV?$intrusive_ptr@VIUIEventPoint@@@boost@@@Z
?LoadUIComponent@CUIHelper@@QAE?AV?$intrusive_ptr@VIUIComponent@@@boost@@JPA_W0PAVIUIComponent@@PAVIUIEventPoint@@@Z
?_CreateInstance@CResImageObject@@SGPAV1@XZ
?CreateComponentQI@CUIHelper@@QAE?AV?$intrusive_ptr@VIUIComponent@@@boost@@PA_WPAVIUIComponent@@PAUIXParam@@@Z
?CreateComponent@CUIHelper@@QAE?AV?$intrusive_ptr@VIUIComponent@@@boost@@PA_WPAVIUIComponent@@PAUIXParam@@@Z
?get@CUIControlPtr@@QAEPAVIUIComponent@@XZ
??1CUIMessageFilter@@QAE@XZ
?GetTarget@CUIMessageFilter@@QAE?AV?$intrusive_ptr@VIUIEventPoint@@@boost@@XZ
??0CUIMessageFilter@@QAE@XZ
?GetSkinID@CUIEventBase@@UAGJXZ
?TrackMouseLeave@CUIDefaultEventPoint@@UAGJPAH@Z
?GetEventPointCount@CUIDefaultEventPoint@@UAGJPAJ@Z
?GetEventCount@CUIDefaultEventPoint@@UAGJPAJ@Z
?DispatchEvent@CUIEventBase@@MAGJPAVIUIComponent@@JPAUHWND__@@IJPAJPAH@Z
?ClearExternnalEventPoint@CUIDefaultEventPoint@@UAGJXZ
?UnRegisterExternalEventPoint@CUIDefaultEventPoint@@UAGJPAVIUIEventPoint@@@Z
?RegisterExternalEventPoint@CUIDefaultEventPoint@@UAGJPAVIUIEventPoint@@@Z
?ClearEvent@CUIDefaultEventPoint@@UAGJXZ
?UnRegisterEvent@CUIDefaultEventPoint@@UAGJIP6GJPAVIUIComponent@@IIJPAXPAH@Z@Z
?RegisterEvent@CUIDefaultEventPoint@@UAGJIP6GJPAVIUIComponent@@IIJPAXPAH@ZJ1@Z
?QueryInterface@CUIEventBase@@UAGJPA_WPAPAX@Z
??0CUIEventBase@@QAE@PA_W0@Z
GetUICoreInstance
?GetUIComponent@CUIControlPtr@@QAEAAV?$intrusive_ptr@VIUIComponent@@@boost@@XZ
??1CUIEventBase@@QAE@XZ

guicore

GetUICore

wininet

InternetSetCookieW

winmm

mixerGetLineInfoW
mixerGetNumDevs
mixerOpen
mixerClose

wwutils

?IMCM_GetShowMainTabOrNot@@YAHXZ
?IMContactManager_GetSelfSignature@@YAJPAPAUIXParam@@@Z
?IMT_GetTribeName@@YA?AV?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@ABV12@@Z
?IMContactManager_isInUnsafeStranger@@YAHPA_W@Z
?IMCM_GetActivityLevel@@YAJXZ
?SDKBrowserUrl@@YAJABV?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@@Z
?IMCU_IsEhelpAccount@@YAHXZ
?IMContactManager_SetCurrentSelfSignature@@YAJJ@Z
?IMContactManager_GetLocalSvrTime@@YA_JXZ
?IMCU_GetCurrentSiteID@@YAJPAPA_W@Z
?G_StartDllRecycle@@YAXABK@Z
?IMContactManager_GetSelfStatus@@YAJPAW4IMPredefinedStatus_T@@@Z
?IMContactManager_GetCurrentIndexSelfSignature@@YAJXZ
?IMCM_GetOnLineFirst@@YAHXZ
?IMT_GetPortraitPath@@YA?AV?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@ABV12@W4PortraitType_T@@@Z
?IMContactManager_SelfIsOnline@@YAHXZ
?IMCM_SetOnLineFirst@@YAHH@Z
?IMCU_GetName@@YA?AV_bstr_t@@XZ
?IMCM_IsShowSignature@@YAHXZ
?IMCM_SetShowSignature@@YAHH@Z
?AddRegisterMessage@CBusMsgHandlerBase@@QAEJPB_WP81@AEXABV_bstr_t@@V?$_com_ptr_t@V?$_com_IIID@UIUnknown@@$1?_GUID_00000000_0000_0000_c000_000000000046@@3U__s_GUID@@B@@@@@ZW4HandlerEntryType@1@_N5@Z
?IMCM_OpenUrlForBrowser@@YAXABV?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@@Z
?IMCU_GetRecentTraderLimitMax@@YAJXZ
?Point2Item@CContactListViewPtr@@QAEPAVISuperListItem@@UtagPOINT@@H@Z
?IMCU_GetStatusImgByStatus@@YA?AVCComBSTR@ATL@@W4IMPredefinedStatus_T@@@Z
?AddRegisterMessage@CBusMsgHandlerBase@@QAEJPB_WP81@AEXXZW4HandlerEntryType@1@_N3@Z
?IMContactManager_ChangeSelfStatus@@YAJW4IMPredefinedStatus_T@@@Z
?IMCM_SetShowCustPortrait@@YAJH@Z
?IMTM_GetXMLItem@@YA?AV?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@ABV12@V12@H@Z
?RemoveRegisteredMessage@CBusMsgHandlerBase@@QAEJPB_W@Z
?ConfigContactStatusImage@CContactListViewHelper@@QAE?AV?$intrusive_ptr@VISuperListItem@@@boost@@ABV?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@_J@Z
?ConfigContactTextColor@CContactListViewHelper@@QAE?AV?$intrusive_ptr@VISuperListItem@@@boost@@ABV?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@_J@Z
?FindUserPosition@CContactListViewHelper@@QAEJV?$intrusive_ptr@VISuperListItem@@@boost@@V?$CComPtr@UIIMUser@@@ATL@@W4IMUserSortMode_T@@@Z
?IMCM_GetUserNotifyImageInfo@@YAHV_bstr_t@@AAUNotifyImageInfo@ALICONTACTMANAGER@@@Z
?ConfigContactPortrait@CContactListViewHelper@@QAE?AV?$intrusive_ptr@VISuperListItem@@@boost@@ABV?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@_J@Z
?IMCM_GetUserOperatorIconInfo@@YAHV_bstr_t@@AAUOperatorIconInfo@ALICONTACTMANAGER@@@Z
?ConfigContactStatusImage@CContactListViewHelper@@QAEHV?$intrusive_ptr@VISuperListItem@@@boost@@@Z
?ConfigContactTextColor@CContactListViewHelper@@QAEHV?$intrusive_ptr@VISuperListItem@@@boost@@@Z
?ConfigContactPortrait@CContactListViewHelper@@QAEHV?$intrusive_ptr@VISuperListItem@@@boost@@@Z
?ConfigContactDisplayName@CContactListViewHelper@@QAE?AV?$intrusive_ptr@VISuperListItem@@@boost@@ABV?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@_J@Z
?IMCM_GetSmsChildNames@@YAH_JAAV?$list@V?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@V?$allocator@V?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@@std@@@std@@H@Z
?ConfigContactNtyImages@CContactListViewHelper@@QAE?AV?$intrusive_ptr@VISuperListItem@@@boost@@ABV?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@_J@Z
?ConfigContactNtyImages@CContactListViewHelper@@QAEHV?$intrusive_ptr@VISuperListItem@@@boost@@@Z
?ConfigContactNotify@CContactListViewHelper@@QAE?AV?$intrusive_ptr@VISuperListItem@@@boost@@ABV?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@_J@Z
?InvalidateItem@CContactListViewPtr@@QAEXV?$intrusive_ptr@VISuperListItem@@@boost@@H@Z
?IMContactManager_isBoundMobile@@YAHPA_W@Z
?IMContactManager_AddGroup@@YAJ_J0V_bstr_t@@@Z
?IMContactManager_RenameGroup@@YAJ_JV_bstr_t@@@Z
?IMContactManager_RemoveContact@@YAJ_JV_bstr_t@@@Z
?IMContactManager_GetStatus@@YAJABVCComBSTR@ATL@@PAW4IMPredefinedStatus_T@@@Z
?IMContactManager_isonline@@YAHW4IMPredefinedStatus_T@@@Z
?IMCM_GetChildNames@@YAH_JAAV?$list@V?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@V?$allocator@V?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@@std@@@std@@H@Z
?IMContactManager_SetImportance@@YAJVCComBSTR@ATL@@J@Z
?IMContactManager_GetImportance@@YAJV_bstr_t@@@Z
?IMContactManager_Add2BlackList@@YAJV_bstr_t@@@Z
?IMContactManager_RemoveFromRecent@@YAJV_bstr_t@@@Z
?IMContactManager_RemoveFromUnknown@@YAJV_bstr_t@@@Z
?IMCM_GetPortrait@@YA?AVCComBSTR@ATL@@ABV12@W4PortraitType_T@@W4PortraitFormat_T@@HH@Z
?py_lookup@@YAXABV?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@AAV12@@Z
?IMCM_OpenUserSpace@@YAHV_bstr_t@@0@Z
?IMCM_IsTrader@@YAHV_bstr_t@@@Z
?IMCU_GetRecentLimitCnt@@YAJXZ
?IMCU_GetStrangerLimitCnt@@YAJXZ
?RemoveItem2@CContactListViewPtr@@QAEXV?$intrusive_ptr@VISuperListItem@@@boost@@H@Z
?finditembyptr@CContactListViewHelper@@QAEJV?$intrusive_ptr@VISuperListItem@@@boost@@0@Z
?ResortUserList@CContactListViewHelper@@QAEJV?$intrusive_ptr@VISuperListItem@@@boost@@W4IMUserSortMode_T@@@Z
?ConfigTreeContactsPortraits@CContactListViewHelper@@QAEHV?$intrusive_ptr@VISuperListItem@@@boost@@@Z
?IMCM_GetMultiSendFlag@@YAHXZ
?IMContactManager_GetTotalCount@@YAJ_J@Z
?IMContactManager_GetOnlineCount@@YAJ_J@Z
?AddRegisterMessage@CBusMsgHandlerBase@@QAEJPB_WP81@AEXABV_bstr_t@@V?$_com_ptr_t@V?$_com_IIID@UIUnknown@@$1?_GUID_00000000_0000_0000_c000_000000000046@@3U__s_GUID@@B@@@@2PAF@ZW4HandlerEntryType@1@_N6@Z
?AddUser2Group@CContactListViewHelper@@QAE?AV?$intrusive_ptr@VISuperListItem@@@boost@@V23@V?$CComPtr@UIIMUser@@@ATL@@W4_SuperListViewType@@W4IMUserSortMode_T@@HH@Z
?EnsureVisible@CContactListViewPtr@@QAEJV?$intrusive_ptr@VISuperListItem@@@boost@@@Z
?deletegroupitem@CContactListViewHelper@@QAEX_J@Z
?IMAddContact_ShowAddContactAddDlg@@YAJV_bstr_t@@0F0@Z
?IMCM_OpenAddedMsgMgrDlg@@YAJV_bstr_t@@@Z
?IMAddContact_ShowAddContactAddedDlg@@YAJV_bstr_t@@_JF0H@Z
?ConfigContactDisplayName@CContactListViewHelper@@QAEHV?$intrusive_ptr@VISuperListItem@@@boost@@@Z
?AddUser2GroupEx@CContactListViewHelper@@QAEHV?$intrusive_ptr@VISuperListItem@@@boost@@V?$CComPtr@UIIMUser@@@ATL@@0W4_SuperListViewType@@W4IMUserSortMode_T@@@Z
?_removechild@CContactListViewHelper@@QAEHV?$intrusive_ptr@VISuperListItem@@@boost@@@Z
?RemoveItem@CContactListViewPtr@@QAEXV?$intrusive_ptr@VISuperListItem@@@boost@@@Z
?FindGroupPosition@CContactListViewHelper@@QAEJV?$intrusive_ptr@VISuperListItem@@@boost@@V?$CComPtr@UIIMGroup@@@ATL@@W4IMGroupSortMode_T@@@Z
?InsertItem@CContactListViewPtr@@QAEJV?$intrusive_ptr@VISuperListItem@@@boost@@0J@Z
?IsAlertAutoImportDB@@YAHXZ
?IMContactManager_MoveGroup@@YAJ_J0@Z
?IMContactManager_isEServiceTeammate@@YAHPA_W@Z
?IMCU_isActivated@@YAHXZ
?IMContactManager_RemoveFromBlackList@@YAJV_bstr_t@@@Z
?IMAddContact_ShowAddContactDlg@@YAJV_bstr_t@@_JW4IMAddedAuthFlag_T@@00H@Z
?IMContactManager_RenameContact@@YAJV_bstr_t@@0@Z
?IMContactManager_MoveContact@@YAJV_bstr_t@@_J@Z
?IMContactManager_RemoveGroup@@YAJ_J@Z
?CreateNewGroupItem@CContactListViewHelper@@QAE?AV?$intrusive_ptr@VISuperListItem@@@boost@@ABVCComBSTR@ATL@@_J@Z
?SeleteItem@CContactListViewPtr@@QAEHV?$intrusive_ptr@VISuperListItem@@@boost@@@Z
?ShowLabelEdit@CContactListViewPtr@@QAEHV?$intrusive_ptr@VISuperListItem@@@boost@@@Z
?SwitchViewMode@CContactListViewHelper@@QAEJW4_SuperListViewType@@@Z
?IMContactManager_showinvisible@@YAHXZ
?BuildContactTree@CContactListViewHelper@@QAEJW4_SuperListViewType@@W4ContactListTabModeEnumType_T@CM_LIST_NODE@@W4IMGroupSortMode_T@@W4IMUserSortMode_T@@H@Z
?IMContactManager_GetUser@@YAJPA_WPAPAUIIMUser@@H@Z
?IMContactManager_GetUserPGID@@YAJPA_WPA_J@Z
?groupid2item@CContactListViewHelper@@QAE?AV?$intrusive_ptr@VISuperListItem@@@boost@@_J@Z
?finditembyname@CContactListViewHelper@@QAE?AV?$intrusive_ptr@VISuperListItem@@@boost@@V23@ABV?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@W4_CMListNodeType_T@CM_LIST_NODE@@PAJH@Z
?IMContactManager_getusercomparemode@@YA?AW4IMUserSortMode_T@@XZ
?adjustitem@CContactListViewHelper@@QAEXV?$intrusive_ptr@VISuperListItem@@@boost@@0V?$CComPtr@UIIMUser@@@ATL@@W4IMUserSortMode_T@@@Z
?GetItemRect@CContactListViewPtr@@QAEHV?$intrusive_ptr@VISuperListItem@@@boost@@AAUtagRECT@@@Z
?IMContactManager_isInBlack@@YAHPA_W@Z
?IMCU_IsWorkBench@@YAHXZ
?IMContactManager_isContact@@YAHPA_W@Z
?IMCU_UpdatePortrait@@YAJXZ
?IMCM_GetViewMode@@YA?AW4_SuperListViewType@@XZ
?CreateSelectedItemEnum@CContactListViewPtr@@QAEPAVISuperListItemEnum@@XZ
??0CContactListViewHelper@@QAE@PAVIUIComponent@@H@Z
?IMContactManager_isLogicalGroup@@YAH_J@Z
?findgroupitem@CContactListViewHelper@@QAE?AV?$intrusive_ptr@VISuperListItem@@@boost@@V23@_JH@Z
?IMContactManager_GetGroup@@YAJ_JPAPAUIIMGroup@@@Z
?RemoveAll@CContactListViewHelper@@QAEXPAVISuperListItem@@@Z
?BuildUserList@CContactListViewHelper@@QAEJV?$intrusive_ptr@VISuperListItem@@@boost@@V?$CComPtr@UIIMGroup@@@ATL@@W4_SuperListViewType@@W4IMUserSortMode_T@@H@Z
?IMCU_GetConfig@@YA?AVCComBSTR@ATL@@V12@@Z
?DumpGroupExpandingInfo@CContactListViewHelper@@QAEXV?$intrusive_ptr@VISuperListItem@@@boost@@W4ContactListTabModeEnumType_T@CM_LIST_NODE@@@Z
?IMCM_SetOnlineOnly@@YAHH@Z
?ExpandAllChildItem@CContactListViewHelper@@QAEXV?$intrusive_ptr@VISuperListItem@@@boost@@H@Z
?RemoveAllRegisteredMessage@CBusMsgHandlerBase@@QAEJXZ
??0CContactListViewHelper@@QAE@V?$intrusive_ptr@VIUIComponent@@@boost@@H@Z
?IMContactManager_getgroupcomparemode@@YA?AW4IMGroupSortMode_T@@XZ
?ResortGroupList@CContactListViewHelper@@QAEJV?$intrusive_ptr@VISuperListItem@@@boost@@W4IMGroupSortMode_T@@@Z
??1CContactListViewHelper@@QAE@XZ
?IMCM_GetOnLineOnly@@YAHXZ
?IMCU_GetLastReminderID@@YAK_N@Z
?IMCU_SetConfig@@YAJVCComBSTR@ATL@@0@Z
?GetSingleSelectedItem@CContactListViewPtr@@QAEPAVISuperListItem@@H@Z
?GetContacts@SearchContactsUtils@@QAEJW4SEARCH_TYPE@1@PAPAV?$set@USearchContact_t@@USCFctor@@V?$allocator@USearchContact_t@@@std@@@std@@@Z
?IMContactManager_GetCurrentSelfSignatureLoop@@YAJPAH@Z
?HandleEditCmd@SearchContactsUtils@@QAEJAAU_UIEventSender@@ABU_UICommandEventArgs@@@Z
?GetCaption@SearchContactsUtils@@QBE?AV?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@XZ
?InitEdit@SearchContactsUtils@@QAEXXZ
?IMContactManager_GetCurrentSelfSignature@@YAJAAV?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@H@Z
?IMContactManager_SetCurrentSelfSignatureLoop@@YAJHJ@Z
?IMCM_GetCurOperatorIconInfo@@YAHAAUOperatorIconInfo@ALICONTACTMANAGER@@@Z
?IMCU_GetStatusImg@@YA?AVCComBSTR@ATL@@XZ
?IMCU_IsShowAdBanner@@YAHXZ
?DestroyExtraWnds@SearchContactsUtils@@QAEXXZ
?IMCU_SetName@@YA?AV_bstr_t@@ABV1@@Z
?IMContactManager_GetDispName@@YAJV_bstr_t@@AAV1@@Z
?RecalcLayout@CContactListViewPtr@@QAEXXZ
?AddItem@CContactListViewPtr@@QAEJV?$intrusive_ptr@VISuperListItem@@@boost@@0@Z
??0CBusMsgHandlerBase@@QAE@_N@Z
?RemoveAllItems@CContactListViewPtr@@QAEXPAVISuperListItem@@@Z
?OnMsg@CBusMsgHandlerBase@@QAEJPA_W0PAUIUnknown@@1PAF@Z
??1CBusMsgHandlerBase@@UAE@XZ
??0CContactListViewPtr@@QAE@PAVIUIComponent@@@Z
?ItemCount@CContactListViewPtr@@QAEJV?$intrusive_ptr@VISuperListItem@@@boost@@@Z
?GetItem@CContactListViewPtr@@QAEPAVISuperListItem@@V?$intrusive_ptr@VISuperListItem@@@boost@@JH@Z
??1CContactListViewPtr@@QAE@XZ
?IMCU_GetCurrentUserID@@YAJPAPA_W@Z
?IMCU_GetPortrait@@YA?AVCComBSTR@ATL@@W4PortraitType_T@@@Z
?IMContactManager_GetCurrentSelfSignatureByIndex@@YAJAAV?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@J@Z
?IMContactManager_isMobileOnline@@YAHPA_W@Z
?IMCU_IsEServiceLogin@@YAHXZ
?SetNotFoundString@SearchContactsUtils@@QAEX_NABV?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@@Z
?Init@SearchContactsUtils@@QAE_NPAVIUIComponent@@PAVISearchContacts@@ABV?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@2ABUSearchContactsFlag@@_N4@Z
?IMCM_GetOperatorIconPath@@YA?AV?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@ABV12@@Z
??1SearchContactsUtils@@UAE@XZ
?IMCU_GetSearchSiteID@@YA?AVCComBSTR@ATL@@XZ
??0SearchContactsUtils@@QAE@XZ
?IMContactManager_SetSelfSignature@@YAJPAUIXParam@@@Z
?IMCM_GetShowCustPortrait@@YAHXZ

protocol

?Decrypt@CDesEncrypt@@QAE?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@ABV23@0@Z
?SetKey@CDesEncrypt@@QAE?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@ABV23@@Z
?Encrypt@CDesEncrypt@@QAE?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@ABV23@0@Z
?UnpackData@CImRspDeepLogintribe@@QAE?AW4PACKRETCODE@@AAV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@ABV34@@Z
?UnpackData@CImRspCloseTribe@@QAE?AW4PACKRETCODE@@AAV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@ABV34@@Z
?UnpackData@CImRspAskJointribe@@QAE?AW4PACKRETCODE@@AAV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@ABV34@@Z
?UnpackData@CImNtfTribemsg@@QAE?AW4PACKRETCODE@@AAV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@ABV34@@Z
??1CImRspDeepLogintribe@@QAE@XZ
??0CImRspDeepLogintribe@@QAE@XZ
??1CImRspCloseTribe@@QAE@XZ
??0CImRspCloseTribe@@QAE@XZ
??1CImRspAskJointribe@@QAE@XZ
??0CImRspAskJointribe@@QAE@XZ
??1CImNtfTribemsg@@QAE@XZ
??0CImNtfTribemsg@@QAE@XZ
?UnpackData@CImNtfAskJointribe@@QAE?AW4PACKRETCODE@@AAV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@ABV34@@Z
?UnpackData@CImRspExamAskjointribe@@QAE?AW4PACKRETCODE@@AAV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@ABV34@@Z
?UnpackData@CImNtfTribeSysmsg@@QAE?AW4PACKRETCODE@@AAV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@ABV34@@Z
?UnpackData@CImRspVisitTribe@@QAE?AW4PACKRETCODE@@AAV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@ABV34@@Z
?UnpackData@CImRspQuitTribe@@QAE?AW4PACKRETCODE@@AAV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@ABV34@@Z
?UnpackData@CImRspOninviteJointribe@@QAE?AW4PACKRETCODE@@AAV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@ABV34@@Z
?UnpackData@CImNtfNeedAuthcode@@QAE?AW4PACKRETCODE@@AAV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@ABV34@@Z
?UnpackData@CImRspRecommendTribe@@QAE?AW4PACKRETCODE@@AAV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@ABV34@@Z
?UnpackData@CImRspAuthRecommend@@QAE?AW4PACKRETCODE@@AAV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@ABV34@@Z
?UnpackData@CImNtfRecommendTribe@@QAE?AW4PACKRETCODE@@AAV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@ABV34@@Z
??1CImNtfAskJointribe@@QAE@XZ
??0CImRspAuthRecommend@@QAE@XZ
??0CImNtfAskJointribe@@QAE@XZ
??1CImRspExamAskjointribe@@QAE@XZ
??0CImRspExamAskjointribe@@QAE@XZ
??1CImNtfTribeSysmsg@@QAE@XZ
??0CImNtfTribeSysmsg@@QAE@XZ
??1CImRspVisitTribe@@QAE@XZ
??0CImRspVisitTribe@@QAE@XZ
??1CImRspQuitTribe@@QAE@XZ
??0CImRspQuitTribe@@QAE@XZ
??1CImRspOninviteJointribe@@QAE@XZ
??0CImRspOninviteJointribe@@QAE@XZ
??1CImNtfNeedAuthcode@@QAE@XZ
??0CImNtfNeedAuthcode@@QAE@XZ
??1CImRspRecommendTribe@@QAE@XZ
??0CImRspRecommendTribe@@QAE@XZ
??1CImRspAuthRecommend@@QAE@XZ
??1CDesEncrypt@@QAE@XZ
??0CImNtfRecommendTribe@@QAE@XZ
??1CImNtfRecommendTribe@@QAE@XZ

psapi

GetProcessMemoryInfo

kernel32

LoadLibraryA
InterlockedExchange
LocalAlloc
GetVersionExA
HeapDestroy
HeapAlloc
GetSystemTimeAsFileTime
QueryPerformanceCounter
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
VirtualAlloc
VirtualFree
IsProcessorFeaturePresent
GetThreadLocale
GetLocaleInfoA
GetACP
HeapSize
HeapFree
InterlockedIncrement
FindResourceExW
FindResourceW
LoadResource
LockResource
SizeofResource
LeaveCriticalSection
EnterCriticalSection
GetProcessHeap
Sleep
InterlockedCompareExchange
GetProcAddress
LoadLibraryW
FreeLibrary
GetModuleFileNameW
RaiseException
CreateDirectoryW
GetTickCount
GetCurrentThreadId
GetSystemTime
GlobalMemoryStatus
CopyFileW
GlobalSize
GlobalFree
lstrcpyW
GetFileSize
ReadFile
SetFilePointer
WriteFile
WaitForSingleObject
MapViewOfFile
UnmapViewOfFile
ReleaseMutex
OpenEventW
SetEvent
CreateFileW
CreateThread
ResumeThread
RemoveDirectoryW
GetFullPathNameW
SetLastError
FindNextFileW
GetCurrentProcessId
OpenProcess
SetProcessWorkingSetSize
GetFileAttributesW
GlobalAlloc
GlobalLock
GlobalUnlock
GetCurrentProcess
FlushInstructionCache
GetVersionExW
GetLocalTime
GetTimeFormatW
GetFileAttributesExW
FileTimeToSystemTime
GetCommandLineW
DeleteFileW
DeleteCriticalSection
HeapReAlloc
InitializeCriticalSection
GetModuleHandleW
lstrlenA
MultiByteToWideChar
lstrlenW
WideCharToMultiByte
FindFirstFileW
FindClose
CreateProcessW
GetLastError
CloseHandle
InterlockedDecrement

user32

KillTimer
SetTimer
ClientToScreen
IsZoomed
IsIconic
UnregisterClassA
SetWindowTextW
PeekMessageW
GetMessageW
DispatchMessageW
DestroyWindow
SetActiveWindow
SetRect
GetWindowTextW
RegisterWindowMessageW
IsWindowVisible
GetWindowLongW
SetLayeredWindowAttributes
DestroyIcon
GetDoubleClickTime
ShowWindow
GetWindowThreadProcessId
AttachThreadInput
SetForegroundWindow
BringWindowToTop
LoadIconW
SetWindowPos
GetParent
GetWindowRect
OpenClipboard
EmptyClipboard
SetClipboardData
CloseClipboard
SetWindowLongW
GetFocus
FindWindowExW
WindowFromPoint
SendMessageW
GetDlgCtrlID
SetFocus
GetActiveWindow
GetSystemMetrics
GetCursorPos
SystemParametersInfoW
PtInRect
ScreenToClient
CopyRect
MessageBoxW
PostMessageW
IsWindow
InvalidateRect
IsChild
GetKeyState
GetClassNameW
GetForegroundWindow

comdlg32

GetOpenFileNameW
GetSaveFileNameW

advapi32

RegEnumKeyExW
RegQueryValueExW
RegOpenKeyExW
RegDeleteValueW
RegCloseKey

shell32

SHCreateDirectoryExW
Shell_NotifyIconW
ShellExecuteW

ole32

CoCreateInstance
StringFromGUID2
CreateStreamOnHGlobal
OleRun
CoCreateGuid

oleaut32

SysAllocString
SysAllocStringByteLen
SysStringByteLen
SysStringLen
SafeArrayCreateVector
SafeArrayAccessData
SafeArrayUnaccessData
SysAllocStringLen
VarBstrCmp
VariantChangeType
VariantInit
VariantCopy
LoadTypeLi
LoadRegTypeLi
VariantClear
SysFreeString

wwsdk

?_CreateInstance@CWWPanelSlot@@SAPAV1@XZ

atl80

ord30
ord31
ord43
ord44
ord15
ord64
ord32
ord58

shlwapi

PathFileExistsW
UrlGetPartW

msvcp80

?substr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV12@II@Z
??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@ABV01@@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBDI@Z
??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@PBD@Z
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@PB_W@Z
??1?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@XZ
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@ABV01@@Z
?end@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBE?AV?$_String_const_iterator@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@2@XZ
??0?$_String_val@DV?$allocator@D@std@@@std@@QAE@ABV01@@Z
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@V?$_String_const_iterator@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@1@0@Z
?append@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV12@V?$_String_const_iterator@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@2@0@Z
?reserve@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEXI@Z
??Y?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV01@_W@Z
??$?HDU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@PBDABV10@@Z
??4?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV01@ABV01@@Z
?assign@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV12@PB_WI@Z
??0?$basic_ostringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@H@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@H@Z
?str@?$basic_ostringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@2@XZ
??_D?$basic_ostringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXXZ
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHD@Z
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHPBDH@Z
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEXXZ
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@XZ
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@XZ
?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEXXZ
?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEXXZ
??$?M_WU?$char_traits@_W@std@@V?$allocator@_W@1@@std@@YA_NABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@0@0@Z
?_Xlen@_String_base@std@@SAXXZ
?fail@ios_base@std@@QBE_NXZ
?_Xran@_String_base@std@@SAXXZ
?length@?$char_traits@_W@std@@SAIPB_W@Z
?width@ios_base@std@@QBEHXZ
?flags@ios_base@std@@QBEHXZ
?sputc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QAEG_W@Z
?eq_int_type@?$char_traits@_W@std@@SA_NABG0@Z
?sputn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QAEHPB_WH@Z
?width@ios_base@std@@QAEHH@Z
?setstate@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QAEXH_N@Z
?uncaught_exception@std@@YA_NXZ
?_Osfx@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEXXZ
?good@ios_base@std@@QBE_NXZ
?tie@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QBEPAV?$basic_ostream@_WU?$char_traits@_W@std@@@2@XZ
?flush@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV12@XZ
?_Unlock@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QAEXXZ
?rdbuf@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QBEPAV?$basic_streambuf@_WU?$char_traits@_W@std@@@2@XZ
?_Lock@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QAEXXZ
??5?$basic_istream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@AAK@Z
??Bios_base@std@@QBEPAXXZ
?get@?$basic_istream@_WU?$char_traits@_W@std@@@std@@QAEGXZ
?eof@?$char_traits@_W@std@@SAGXZ
??0?$basic_stringstream@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@H@Z
?unsetf@ios_base@std@@QAEXH@Z
?precision@ios_base@std@@QAEHH@Z
??_D?$basic_stringstream@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEXXZ
??Y?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@PBD@Z
?c_str@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBEPB_WXZ
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
?data@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEPBDXZ
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@II@Z
?reserve@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXI@Z
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBD@Z
??A?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAADI@Z
?find@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDI@Z
?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB
?replace@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@IIABV12@@Z
?size@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIXZ
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBD@Z
?c_str@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEPBDXZ
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
?begin@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBE?AV?$_String_const_iterator@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@2@XZ

rvcore

queue_timer_task
queue_gui_task
gui_hwnd
GetRvCore
queue_timerex_task
queue_work_task
GetUACCore

gdiplus

GdipLoadImageFromFile
GdipFree
GdipDisposeImage
GdipCreateHICONFromBitmap
GdipSaveImageToStream
GdipCreateBitmapFromFile
GdipCreateBitmapFromFileICM
GdipGetImageHeight
GdipCloneImage
GdipGetImageEncoders
GdipGetImageEncodersSize
GdipAlloc

wwparams

??1CIMTextMessageVectorPtr@@UAE@XZ
??0CIMTextMessageVectorPtr@@QAE@XZ
?push_back@CIMTextMessageVector@@QAEXABVCIMTextMessagePtr@@@Z
??9CIMTextMessageVectorPtr@@QBE_NPAVCIMTextMessageVector@@@Z
??0CMessagesInfoVectorPtr@@QAE@PAUIUnknown@@@Z
??0CMessagesInfoVectorPtr@@QAE@ABV0@@Z
??0CIMTextMessageVectorPtr@@QAE@PAUIUnknown@@@Z
??CCIMTextMessageVectorPtr@@QBEPAVCIMTextMessageVector@@XZ
?size@CIMTextMessageVector@@QBEHXZ
??DCIMTextMessageVectorPtr@@QBEAAVCIMTextMessageVector@@XZ
??ACIMTextMessageVector@@QAEAAVCIMTextMessagePtr@@H@Z
??CCMessagesInfoVectorPtr@@QBEPAVCMessagesInfoVector@@XZ
?size@CMessagesInfoVector@@QBEHXZ
??CCMessagesInfoPtr@@QBEPAVCMessagesInfo@@XZ
??DCMessagesInfoVectorPtr@@QBEAAVCMessagesInfoVector@@XZ
??ACMessagesInfoVector@@QAEAAVCMessagesInfoPtr@@H@Z
??1CMessagesInfoVectorPtr@@UAE@XZ
??0IMRecentTraderUserVectorPtr@@QAE@PAUIUnknown@@@Z
??CIMRecentTraderUserVectorPtr@@QBEPAVIMRecentTraderUserVector@@XZ
?size@IMRecentTraderUserVector@@QBEHXZ
??CIMRecentTraderUserPtr@@QBEPAVIMRecentTraderUser@@XZ
??DIMRecentTraderUserVectorPtr@@QBEAAVIMRecentTraderUserVector@@XZ
??AIMRecentTraderUserVector@@QAEAAVIMRecentTraderUserPtr@@H@Z
??1IMRecentTraderUserVectorPtr@@UAE@XZ
??0LocalAddContactVectorPtr@@QAE@PAUIUnknown@@@Z
?size@LocalAddContactVector@@QBEHXZ
??DLocalAddContactVectorPtr@@QBEAAVLocalAddContactVector@@XZ
??ALocalAddContactVector@@QAEAAVLocalAddContactPtr@@H@Z
??0LocalAddContactVectorPtr@@QAE@XZ
??CLocalAddContactPtr@@QBEPAVLocalAddContact@@XZ
??0LocalAddContactPtr@@QAE@XZ
??1CIMTextMessagePtr@@UAE@XZ
??BCIMTextMessagePtr@@QBEPAUIUnknown@@XZ
??CCIMTextMessagePtr@@QBEPAVCIMTextMessage@@XZ
??0CIMTextMessagePtr@@QAE@XZ
??1LocalAddContactVectorPtr@@UAE@XZ
??BLocalAddContactVectorPtr@@QBEPAUIUnknown@@XZ
??1LocalAddContactPtr@@UAE@XZ
?push_back@LocalAddContactVector@@QAEXABVLocalAddContactPtr@@@Z
??CLocalAddContactVectorPtr@@QBEPAVLocalAddContactVector@@XZ

msvcr80

??3@YAXPAX@Z
wcsrchr
memcpy_s
_CxxThrowException
??2@YAPAXI@Z
??_V@YAXPAX@Z
??1exception@std@@UAE@XZ
??0exception@std@@QAE@ABQBD@Z
__CxxFrameHandler3
?what@exception@std@@UBEPBDXZ
??0exception@std@@QAE@XZ
wcscmp
_wcsicmp
wcsstr
_wcslwr_s
wcslen
_purecall
_invalid_parameter_noinfo
memmove_s
wcsncat_s
_recalloc
memset
_vscwprintf
vswprintf_s
strlen
free
calloc
strchr
_vscprintf
vsprintf_s
memcmp
__RTDynamicCast
iswspace
_wtoi
_wcsnicmp
_mbsstr
_time64
_mktime64
wcsftime
_localtime64_s
_wtol
wcsncmp
wcstol
iswdigit
malloc
wcscpy_s
wcsncpy_s
wcsspn
wcscspn
strcpy
??8type_info@@QBE_NABV0@@Z
towlower
memcpy
wcschr
abs
wcsnlen
wcspbrk
rename
rand
srand
strcmp
_wsplitpath
fwrite
fread
fclose
_wfopen
_beginthreadex
_CIpow
sprintf_s
atoi
??1bad_cast@std@@UAE@XZ
??0bad_cast@std@@QAE@ABV01@@Z
??0bad_cast@std@@QAE@PBD@Z
wcstoul
sprintf
iswxdigit
_unlock
__dllonexit
_encode_pointer
_lock
_onexit
_decode_pointer
_except_handler4_common
?terminate@@YAXXZ
_malloc_crt
_encoded_null
_initterm
_initterm_e
_amsg_exit
_adjust_fdiv
__CppXcptFilter
?_type_info_dtor_internal_method@type_info@@QAEXXZ
_crt_debugger_hook
__clean_type_info_names_internal
??0exception@std@@QAE@ABV01@@Z

updateassist

Deploy
Cancel
DeleteFeature
IsServiceRunning
RunService
GetDefaultAppID
GetFeatureName
Update
GetProgress

rpcrt4

UuidCreate

Exports

Exports

DllCanUnloadNow
DllGetClassObject

Sections

.text
Size: 1.1MB - Virtual size: 1.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 424KB - Virtual size: 420KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 40KB - Virtual size: 45KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 76KB - Virtual size: 75KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 172KB - Virtual size: 170KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
WWCmd.exe
.exe windows:4 windows x86 arch:x86

bba94b3c8b285214cb6dec45347f5b1e

Code Sign

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

15/06/2007, 00:00

Not After

14/06/2012, 23:59

Subject

CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04/12/2003, 00:00

Not After

03/12/2013, 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

59:d7:21:95:2a:a2:09:ee:3e:7b:d3:82:4f:7f:b6:e4
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Not Before

22/04/2010, 00:00

Not After

17/05/2011, 23:59

Subject

CN=Alibaba (China) Co. Ltd.,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Alibaba (China) Co. Ltd.,L=HangZhou,ST=ZheJiang,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

65:52:26:e1:b2:2e:18:e1:59:0f:29:85:ac:22:e7:5c
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

21/05/2009, 00:00

Not After

20/05/2019, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

32:a2:4f:d2:af:3a:84:27:37:fc:26:3a:19:1a:3b:37:33:9d:f0:53
Signer

Actual PE Digest

32:a2:4f:d2:af:3a:84:27:37:fc:26:3a:19:1a:3b:37:33:9d:f0:53

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

E:\AliWWAutoPackage\Trunk\SourceCode\IMClient-RV\symbol\Release\WWCmd.pdb

Imports

kernel32

HeapFree
SizeofResource
InterlockedIncrement
LockResource
InterlockedDecrement
LoadResource
HeapReAlloc
GetSystemTimeAsFileTime
GetCurrentProcessId
FindResourceW
QueryPerformanceCounter
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCommandLineW
SetEvent
Sleep
GetModuleHandleW
GetCurrentThreadId
GetModuleFileNameW
WaitForSingleObject
CloseHandle
GetCurrentProcess
TerminateProcess
GetStartupInfoW
InterlockedCompareExchange
InterlockedExchange
GetVersionExA
GetProcessHeap
CreateThread
CreateEventW
RaiseException
InitializeCriticalSection
FindResourceExW
DeleteCriticalSection
GetTickCount
LeaveCriticalSection
EnterCriticalSection
HeapAlloc
HeapDestroy
HeapSize

user32

TranslateMessage
UnregisterClassA
CharUpperW
DispatchMessageW
PostThreadMessageW
GetMessageW
CharNextW

advapi32

RegOpenCurrentUser
RegOpenKeyW
RegCreateKeyW
RegSetValueExW
RegSetValueW
RegFlushKey
RegCloseKey

ole32

CoInitialize
CoCreateInstance
CoUninitialize

atl80

ord20
ord23
ord64
ord18
ord22
ord61
ord17

shlwapi

SHDeleteKeyW

msvcr80

_wcslwr_s
wcslen
memcpy_s
memmove_s
memset
wcscmp
?terminate@@YAXXZ
_unlock
__dllonexit
_encode_pointer
_lock
_onexit
_decode_pointer
_amsg_exit
__wgetmainargs
_cexit
_exit
_XcptFilter
exit
_wcmdln
_initterm
_initterm_e
_configthreadlocale
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler4_common
_crt_debugger_hook
?_type_info_dtor_internal_method@type_info@@QAEXXZ
_invoke_watson
_controlfp_s
??3@YAXPAX@Z
_CxxThrowException
free
__CxxFrameHandler3

Sections

.text
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
WangWang.exe
.exe windows:4 windows x86 arch:x86

99aefcadf8c6ae70614fa4501343753f

Code Sign

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

15/06/2007, 00:00

Not After

14/06/2012, 23:59

Subject

CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04/12/2003, 00:00

Not After

03/12/2013, 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

59:d7:21:95:2a:a2:09:ee:3e:7b:d3:82:4f:7f:b6:e4
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Not Before

22/04/2010, 00:00

Not After

17/05/2011, 23:59

Subject

CN=Alibaba (China) Co. Ltd.,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Alibaba (China) Co. Ltd.,L=HangZhou,ST=ZheJiang,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

65:52:26:e1:b2:2e:18:e1:59:0f:29:85:ac:22:e7:5c
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

21/05/2009, 00:00

Not After

20/05/2019, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

ab:86:5a:f9:1c:a3:41:2a:6b:e2:47:d4:94:93:98:e4:7f:33:be:ae
Signer

Actual PE Digest

ab:86:5a:f9:1c:a3:41:2a:6b:e2:47:d4:94:93:98:e4:7f:33:be:ae

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

d:\workcode\myt_trunk\modules\fakealitalk\release\AliTalk.pdb

Imports

kernel32

CreateProcessW
GetModuleFileNameW
GetLastError
Sleep
GetCurrentThreadId
GetSystemTimeAsFileTime
GetTickCount
QueryPerformanceCounter
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetStartupInfoW
InterlockedCompareExchange
InterlockedExchange
GetProcessHeap
HeapSize
HeapReAlloc
HeapFree
HeapAlloc
HeapDestroy
GetCurrentProcessId

wintrust

WinVerifyTrust

msvcr80

_adjust_fdiv
__p__commode
__p__fmode
_encode_pointer
__set_app_type
__setusermatherr
__dllonexit
_lock
_onexit
_decode_pointer
?terminate@@YAXXZ
?_type_info_dtor_internal_method@type_info@@QAEXXZ
_crt_debugger_hook
_except_handler4_common
_invoke_watson
_controlfp_s
_configthreadlocale
_initterm_e
_initterm
_wcmdln
exit
_XcptFilter
_exit
_cexit
__wgetmainargs
_amsg_exit
wcslen
memcpy_s
wprintf_s
memset
wcsrchr
??3@YAXPAX@Z
_CxxThrowException
_unlock
__CxxFrameHandler3

Sections

.text
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 1000B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 40KB - Virtual size: 39KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
configurations/ContextMode.xml
configurations/LoginSites.xml
configurations/staticconfig.xml
dumphelp.txt
flash.exe
.exe windows:4 windows x86 arch:x86

8d691eed9206c0d1a9a9755517703603

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetTempFileNameA
GetTempPathA
DeleteFileA
InterlockedDecrement
GetModuleFileNameA
GetComputerNameA
InterlockedExchange
MultiByteToWideChar
GetLastError
lstrlenA
GetOEMCP
InterlockedIncrement
SetEndOfFile
LoadLibraryA
CopyFileA
FlushFileBuffers
SetStdHandle
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
GetSystemTimeAsFileTime
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
HeapCreate
VirtualFree
ExitProcess
Sleep
CloseHandle
SetFilePointer
GetFileType
WideCharToMultiByte
FindResourceExA
FindResourceA
LoadResource
LockResource
CreateFileA
SizeofResource
GetStdHandle
SetHandleCount
ReadFile
GetConsoleMode
GetConsoleCP
WriteFile
GetCurrentThreadId
GetCPInfo
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetStartupInfoA
GetCommandLineA
SetLastError
TlsFree
TlsSetValue
TlsAlloc
TlsGetValue
GetACP
GetLocaleInfoA
GetThreadLocale
GetVersionExA
RaiseException
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSection
DeleteCriticalSection
HeapDestroy
HeapAlloc
HeapFree
HeapReAlloc
HeapSize
GetProcessHeap
RtlUnwind
VirtualAlloc
GetProcAddress
GetModuleHandleA
IsValidCodePage

user32

SetCursor
EndPaint
UnregisterClassA
DrawTextA
GetClientRect
BeginPaint
DialogBoxParamA
DestroyWindow
DefWindowProcA
PostQuitMessage
SetWindowPos
GetWindowRect
LoadStringA
CreateWindowExA
SetTimer
GetWindowLongA
GetDC
EqualRect
UpdateLayeredWindow
SetWindowLongA
GetCursorPos
SetCapture
EndDialog
MoveWindow
GetWindowDC
ReleaseDC
ReleaseCapture
LoadAcceleratorsA
GetMessageA
TranslateAcceleratorA
TranslateMessage
DispatchMessageA
PostMessageA
LoadIconA
LoadCursorA
RegisterClassExA

gdi32

CreateDIBSection
SelectObject
GetDeviceCaps
DeleteDC
DeleteObject
CreateCompatibleDC

ole32

OleUninitialize
OleInitialize
OleDraw
OleRun
CoCreateInstance
OleSetContainedObject
OleCreate

oleaut32

VariantClear
VariantChangeType
VariantCopy
VariantInit
SysFreeString
SysStringLen
SysAllocString
GetErrorInfo

pdh

PdhCollectQueryData
PdhAddCounterA
PdhOpenQueryA
PdhCloseQuery
PdhRemoveCounter

Sections

.text
Size: 88KB - Virtual size: 87KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 20KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
npwangwang.dll
.dll windows:4 windows x86 arch:x86

25b99571280d7a11c07012a898bcdf6b

Code Sign

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

15/06/2007, 00:00

Not After

14/06/2012, 23:59

Subject

CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04/12/2003, 00:00

Not After

03/12/2013, 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

59:d7:21:95:2a:a2:09:ee:3e:7b:d3:82:4f:7f:b6:e4
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Not Before

22/04/2010, 00:00

Not After

17/05/2011, 23:59

Subject

CN=Alibaba (China) Co. Ltd.,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Alibaba (China) Co. Ltd.,L=HangZhou,ST=ZheJiang,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

65:52:26:e1:b2:2e:18:e1:59:0f:29:85:ac:22:e7:5c
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

21/05/2009, 00:00

Not After

20/05/2019, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

52:f7:2b:5d:ff:5a:23:13:0d:83:d5:a7:38:a4:44:e3:59:43:31:ab
Signer

Actual PE Digest

52:f7:2b:5d:ff:5a:23:13:0d:83:d5:a7:38:a4:44:e3:59:43:31:ab

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

d:\WorkCode\NP\npww\release\npww.pdb

Imports

kernel32

WideCharToMultiByte
HeapFree
GetProcessHeap
lstrlenA
FlushFileBuffers
CloseHandle
CreateFileA
MultiByteToWideChar
GetLastError
InterlockedDecrement
GetLocaleInfoA
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
SetStdHandle
InitializeCriticalSection
GetCurrentThreadId
GetCommandLineA
GetVersionExA
HeapAlloc
RtlUnwind
RaiseException
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetProcAddress
GetModuleHandleA
ExitProcess
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
Sleep
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
DeleteCriticalSection
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
HeapDestroy
HeapCreate
VirtualFree
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
LeaveCriticalSection
EnterCriticalSection
VirtualAlloc
HeapReAlloc
WriteFile
HeapSize
SetFilePointer
GetConsoleCP
GetConsoleMode
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
LoadLibraryA

user32

SetWindowLongA
EndPaint
BeginPaint
DefWindowProcA

advapi32

RegOpenKeyExA
RegCloseKey
RegQueryValueExA

ole32

CoCreateInstance
CoInitialize
CoUninitialize

oleaut32

SysAllocString
VariantClear
SysFreeString

Exports

Exports

NP_GetEntryPoints
NP_Initialize
NP_Shutdown

Sections

.text
Size: 60KB - Virtual size: 56KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 16KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
taojianghu.ico
wwst32.exe
.exe windows:4 windows x86 arch:x86

3ef4787543bf9c82bc3790d1788a911a

Code Sign

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

15/06/2007, 00:00

Not After

14/06/2012, 23:59

Subject

CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04/12/2003, 00:00

Not After

03/12/2013, 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

59:d7:21:95:2a:a2:09:ee:3e:7b:d3:82:4f:7f:b6:e4
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Not Before

22/04/2010, 00:00

Not After

17/05/2011, 23:59

Subject

CN=Alibaba (China) Co. Ltd.,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Alibaba (China) Co. Ltd.,L=HangZhou,ST=ZheJiang,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

65:52:26:e1:b2:2e:18:e1:59:0f:29:85:ac:22:e7:5c
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

21/05/2009, 00:00

Not After

20/05/2019, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

48:6e:d6:5c:c8:f0:68:1c:15:df:db:ca:b7:fa:da:20:80:db:1b:40
Signer

Actual PE Digest

48:6e:d6:5c:c8:f0:68:1c:15:df:db:ca:b7:fa:da:20:80:db:1b:40

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

E:\Development\AliWangWang\Source\20100919_v6.50.05T_beta3\IMClient-RV\symbol\Release\wwst32.pdb

Imports

kernel32

GetModuleHandleW
GetModuleFileNameW
GetModuleFileNameA
GetProcAddress
GetVersionExW
GetCurrentProcess
LoadLibraryW
LocalFree
FreeLibrary
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
GetStartupInfoW
InterlockedCompareExchange
Sleep
InterlockedExchange
GetSystemTimeAsFileTime

advapi32

RegSetValueExA
RegOpenKeyExW
RegDeleteValueW
RegCloseKey

shell32

CommandLineToArgvW
ShellExecuteExW

shlwapi

PathRemoveFileSpecA
PathFileExistsW
PathRemoveFileSpecW
StrCatBuffA
StrCatBuffW
StrCmpIW
StrCatW
StrCpyW
StrCmpNW

msvcr80

wcslen
strlen
wcscat_s
wcscpy_s
memset
_amsg_exit
__wgetmainargs
_cexit
_controlfp_s
_XcptFilter
exit
_wcmdln
_initterm
_initterm_e
_configthreadlocale
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
_encode_pointer
__set_app_type
_crt_debugger_hook
?terminate@@YAXXZ
_unlock
__dllonexit
_lock
_onexit
_decode_pointer
_except_handler4_common
_invoke_watson
_exit

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 920B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 428B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
wwst64.exe
.exe windows:4 windows x64 arch:x64

f115420e57ce32a295df00b861bc3254

Code Sign

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

15/06/2007, 00:00

Not After

14/06/2012, 23:59

Subject

CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04/12/2003, 00:00

Not After

03/12/2013, 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

59:d7:21:95:2a:a2:09:ee:3e:7b:d3:82:4f:7f:b6:e4
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Not Before

22/04/2010, 00:00

Not After

17/05/2011, 23:59

Subject

CN=Alibaba (China) Co. Ltd.,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Alibaba (China) Co. Ltd.,L=HangZhou,ST=ZheJiang,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

65:52:26:e1:b2:2e:18:e1:59:0f:29:85:ac:22:e7:5c
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

21/05/2009, 00:00

Not After

20/05/2019, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

2c:df:56:9c:90:f2:32:91:34:35:a7:6d:c5:b5:a0:77:15:67:b9:d7
Signer

Actual PE Digest

2c:df:56:9c:90:f2:32:91:34:35:a7:6d:c5:b5:a0:77:15:67:b9:d7

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

E:\Development\AliWangWang\Source\20100919_v6.50.05T_beta3\IMClient-RV\symbol\Release\wwst64.pdb

Imports

kernel32

FreeLibrary
LoadLibraryW
LocalFree
GetVersionExW
GetProcAddress
GetModuleFileNameW
GetModuleFileNameA
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
GetStartupInfoW
Sleep
GetSystemTimeAsFileTime

advapi32

RegDeleteValueW
RegCloseKey
RegSetValueExA
RegOpenKeyExW

shell32

ShellExecuteExW
CommandLineToArgvW

shlwapi

StrCpyW
StrCatBuffW
PathRemoveFileSpecA
PathRemoveFileSpecW
StrCatBuffA
StrCmpNW
StrCatW
StrCmpIW

msvcr80

wcscpy_s
wcslen
strlen
_amsg_exit
__wgetmainargs
__C_specific_handler
memset
_exit
_cexit
exit
_wcmdln
_initterm
_initterm_e
_configthreadlocale
__setusermatherr
_commode
_fmode
_encode_pointer
__set_app_type
__crt_debugger_hook
?terminate@@YAXXZ
_unlock
__dllonexit
_lock
_onexit
_decode_pointer
wcscat_s
_XcptFilter

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 512B - Virtual size: 276B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 432B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

099c0646ea7282d232219f8807883be0

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

shell32

advapi32

comctl32

ole32

version

Sections

.text Size: 23KB - Virtual size: 22KB

.rdata Size: 4KB - Virtual size: 4KB

.data Size: 1024B - Virtual size: 107KB

.ndata Size: - Virtual size: 96KB

.rsrc Size: 46KB - Virtual size: 45KB

b4b71331b921e2f441a2b05306cd7dae

Headers

File Characteristics

Imports

kernel32

user32

gdi32

msvcrt

Exports

Exports

Sections

.text Size: 5KB - Virtual size: 4KB

.rdata Size: 1KB - Virtual size: 1KB

.data Size: 512B - Virtual size: 224B

.CRT Size: 512B - Virtual size: 4B

.reloc Size: 512B - Virtual size: 382B

153027ec3b10bcea606b777657dd3402

Headers

File Characteristics

Imports

kernel32

msvcrt

Exports

Exports

Sections

.text Size: 2KB - Virtual size: 2KB

.reloc Size: 512B - Virtual size: 172B

9b6b6a7858e17fb0b17e1c1428330343

Headers

File Characteristics

Imports

kernel32

user32

gdi32

Exports

Exports

Sections

.text Size: 2KB - Virtual size: 1KB

.rdata Size: 1024B - Virtual size: 697B

.data Size: 512B - Virtual size: 3KB

.rsrc Size: 512B - Virtual size: 352B

.reloc Size: 512B - Virtual size: 320B

2017f2acbdaa42ab3e4adeb8b4c37e7b

Headers

File Characteristics

Imports

kernel32

user32

ole32

Exports

Exports

Sections

.text Size: 7KB - Virtual size: 7KB

.rdata Size: 1024B - Virtual size: 784B

.data Size: 512B - Virtual size: 100B

.reloc Size: 1024B - Virtual size: 520B

.text
Size: 23KB - Virtual size: 22KB

.rdata
Size: 4KB - Virtual size: 4KB

.data
Size: 1024B - Virtual size: 107KB

.ndata
Size: - Virtual size: 96KB

.rsrc
Size: 46KB - Virtual size: 45KB

.text
Size: 5KB - Virtual size: 4KB

.rdata
Size: 1KB - Virtual size: 1KB

.data
Size: 512B - Virtual size: 224B

.CRT
Size: 512B - Virtual size: 4B

.reloc
Size: 512B - Virtual size: 382B

.text
Size: 2KB - Virtual size: 2KB

.reloc
Size: 512B - Virtual size: 172B

.text
Size: 2KB - Virtual size: 1KB

.rdata
Size: 1024B - Virtual size: 697B

.data
Size: 512B - Virtual size: 3KB

.rsrc
Size: 512B - Virtual size: 352B

.reloc
Size: 512B - Virtual size: 320B

.text
Size: 7KB - Virtual size: 7KB

.rdata
Size: 1024B - Virtual size: 784B

.data
Size: 512B - Virtual size: 100B

.reloc
Size: 1024B - Virtual size: 520B

.text
Size: 4KB - Virtual size: 4KB

.rdata
Size: 2KB - Virtual size: 1KB

.data
Size: 512B - Virtual size: 4KB

.rsrc
Size: 512B - Virtual size: 152B

.reloc
Size: 1024B - Virtual size: 572B

.text
Size: 3KB - Virtual size: 2KB

.rdata
Size: 1KB - Virtual size: 1KB

.data
Size: 512B - Virtual size: 1KB

.reloc
Size: 512B - Virtual size: 410B

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Certificate

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

59:d7:21:95:2a:a2:09:ee:3e:7b:d3:82:4f:7f:b6:e4
Certificate

65:52:26:e1:b2:2e:18:e1:59:0f:29:85:ac:22:e7:5c
Certificate

52:f7:2b:5d:ff:5a:23:13:0d:83:d5:a7:38:a4:44:e3:59:43:31:ab
Signer

.text
Size: 60KB - Virtual size: 56KB

.rdata
Size: 16KB - Virtual size: 12KB

.data
Size: 8KB - Virtual size: 12KB

.rsrc
Size: 4KB - Virtual size: 1KB

.reloc
Size: 8KB - Virtual size: 6KB

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Certificate

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate