Root4[.]3-Office16[.]zip

Sharing

Copy URL Twitter E-mail

General

Target

Root4.3-Office16.zip
Size

81.1MB
MD5

86480961576c489b0850e2d4ad75d069
SHA1

079fd1d76120c57c7c123b2cf0510d78ed1e7ec0
SHA256

3367b1fd4766f052cf15c890524f6aaf0831b36c95807e9bf4ddffeed1b8e0c4
SHA512

e35c39fcee2ead15da3845f55b15e87fba0dd4df3db7ad45127221e0abc36278500db26ffdaa5426e8942be9749901a0888e4888cbced7a0ba429fa8dd3f6dd3
SSDEEP

1572864:usJKLrcqsaTdoDgIut2S5/QpOUJakzOUY0T18P/juD6kEIZzW3qd1dIVp5hBwyW:NJsALaB2NuoSZ9UJakzOaTe/jubZS6Ff

Score

3^/10

Malware Config

Signatures

Unsigned PE 6 IoCs

Checks for missing Authenticode signature.

resource
unpack001/mscss7cm_en.dub
unpack001/mscss7cm_es.dub
unpack001/mscss7cm_fr.dub
unpack001/mscss7wre_en.dub
unpack001/mscss7wre_es.dub
unpack001/mscss7wre_fr.dub

Files

Root4.3-Office16.zip
.zip
Custom.propdesc
.xml
ExcelCombinedFloatieModel.bin
ExcelCtxUICellLayoutModel.bin
ExcelCtxUICellModel.bin
ExcelCtxUIFormulaBarModel.bin
ExcelFloatieTextModel.bin
ExcelFloatieXLEditTextModel.bin
ExcelInterProviderRanker.bin
GRAPH.ICO
Graph.exe.manifest
InstallerMainShell.tlb
Interceptor.tlb
MANIFEST.XML
.xml office
MSO0127.ACL
MSOCRRES.ORP
MSZIP.DIC
.dll windows:6 windows x64 arch:x64

Code Sign

33:00:00:05:00:27:d6:32:6f:43:73:7b:87:00:00:00:00:05:00
Certificate

Issuer

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

16/02/2023, 20:11

Not After

31/01/2024, 20:11

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0c:52:4c:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

06/07/2010, 20:40

Not After

06/07/2025, 20:50

Subject

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

33:00:00:03:3e:63:3a:86:bf:41:73:d7:e0:00:00:00:00:03:3e
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

16/02/2023, 20:10

Not After

31/01/2024, 20:10

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08/07/2011, 20:59

Not After

08/07/2026, 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

c5:9d:84:be:2e:46:91:67:f5:97:f1:4a:11:72:d0:2d:8b:3d:82:bf:82:7b:c1:ac:0b:98:1c:91:f0:63:60:60
Signer

Actual PE Digest

c5:9d:84:be:2e:46:91:67:f5:97:f1:4a:11:72:d0:2d:8b:3d:82:bf:82:7b:c1:ac:0b:98:1c:91:f0:63:60:60

Digest Algorithm

sha256

PE Digest Matches

true

c5:9d:84:be:2e:46:91:67:f5:97:f1:4a:11:72:d0:2d:8b:3d:82:bf:82:7b:c1:ac:0b:98:1c:91:f0:63:60:60
Signer

Actual PE Digest

c5:9d:84:be:2e:46:91:67:f5:97:f1:4a:11:72:d0:2d:8b:3d:82:bf:82:7b:c1:ac:0b:98:1c:91:f0:63:60:60

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Sections

.rdata
Size: 512B - Virtual size: 268B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 4.4MB - Virtual size: 4.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
OFFSYM.TTF
OFFSYMB.TTF
OFFSYMK.TTF
OFFSYML.TTF
OFFSYMSB.TTF
OFFSYMSL.TTF
OFFSYMT.TTF
OFFSYMXB.TTF
OFFSYMXL.TTF
ONENOTE.VisualElementsManifest.xml
OUTLFLTR.DAT
.dll windows:4 windows x86 arch:x86

Code Sign

33:00:00:00:af:53:47:77:6c:1b:f1:a3:02:00:00:00:00:00:af
Certificate

Issuer

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

03/05/2016, 17:13

Not After

03/08/2017, 17:13

Subject

CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:31C5-30BA-7C91,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

33:00:00:01:0a:2c:79:ae:d7:79:7b:a6:ac:00:01:00:00:01:0a
Certificate

Issuer

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

04/06/2015, 17:42

Not After

04/09/2016, 17:42

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:33:26:1a:00:00:00:00:00:31
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

31/08/2010, 22:19

Not After

31/08/2020, 22:29

Subject

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:16:68:34:00:00:00:00:00:1c
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

03/04/2007, 12:53

Not After

03/04/2021, 13:03

Subject

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

5c:fe:98:5e:73:83:ae:32:42:17:cd:33:6c:ed:c4:e8:ce:98:54:40
Signer

Actual PE Digest

5c:fe:98:5e:73:83:ae:32:42:17:cd:33:6c:ed:c4:e8:ce:98:54:40

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.rsrc
Size: 3.4MB - Virtual size: 3.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 8B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
OutlookExplorerTellMeZeroTermCommandModel.bin
PowerPointCombinedFloatieModel.bin
PowerPointInterProviderRanker.bin
Resources.pri
STSLIST.DLL
.dll windows:6 windows x64 arch:x64

4506c3159f08b258438eb5eee9c97ffd

Code Sign

33:00:00:05:57:cf:90:dd:c7:d1:c0:88:8c:00:00:00:00:05:57
Certificate

Issuer

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

19/10/2023, 19:51

Not After

16/10/2024, 19:51

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0c:52:4c:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

06/07/2010, 20:40

Not After

06/07/2025, 20:50

Subject

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

33:00:00:03:a5:41:11:e8:f0:7f:be:0b:75:00:00:00:00:03:a5
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

19/10/2023, 19:51

Not After

16/10/2024, 19:51

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08/07/2011, 20:59

Not After

08/07/2026, 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

19:93:37:22:20:f6:67:08:22:0b:d8:e3:32:36:b2:02:0c:77:c3:d5:e7:d4:1c:70:84:c6:2e:18:e0:88:38:4a
Signer

Actual PE Digest

19:93:37:22:20:f6:67:08:22:0b:d8:e3:32:36:b2:02:0c:77:c3:d5:e7:d4:1c:70:84:c6:2e:18:e0:88:38:4a

Digest Algorithm

sha256

PE Digest Matches

true

19:93:37:22:20:f6:67:08:22:0b:d8:e3:32:36:b2:02:0c:77:c3:d5:e7:d4:1c:70:84:c6:2e:18:e0:88:38:4a
Signer

Actual PE Digest

19:93:37:22:20:f6:67:08:22:0b:d8:e3:32:36:b2:02:0c:77:c3:d5:e7:d4:1c:70:84:c6:2e:18:e0:88:38:4a

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

d:\dbs\el\omr\target\x64\ship\list\x-none\stslist.pdb

Imports

advapi32

RegDeleteKeyW
RegCloseKey
RegQueryInfoKeyW
RegEnumKeyExW
RegOpenKeyExW
RegSetValueExW
RegCreateKeyExW
RegDeleteValueW
RegQueryValueW
RegQueryValueExW
RegOpenKeyExA
CryptDestroyHash
CryptReleaseContext
CryptAcquireContextW
CryptCreateHash
CryptHashData
CryptGetHashParam
ReportEventW
RegisterEventSourceW
DeregisterEventSource
OpenProcessToken
GetTokenInformation
GetSidSubAuthority
GetSidSubAuthorityCount
RegGetValueW
RegEnumValueW
EventUnregister
EventWriteTransfer
EventRegister
RegQueryValueExA

kernel32

TlsFree
TlsSetValue
TlsGetValue
GlobalSize
SystemTimeToTzSpecificLocalTime
GetVersion
GetVersionExW
LocaleNameToLCID
GetDateFormatW
GetSystemDefaultLangID
GetUserDefaultLangID
EnumCalendarInfoA
GetTimeFormatW
GetCurrencyFormatW
GetNumberFormatW
IsDBCSLeadByte
GetStringTypeExW
LocalFree
GetSystemInfo
VirtualProtect
VirtualQuery
LoadLibraryExA
ExpandEnvironmentStringsA
GetModuleHandleExW
TlsAlloc
GetProcessHeap
HeapAlloc
HeapFree
CreateWaitableTimerW
SetWaitableTimer
CancelWaitableTimer
UnmapViewOfFile
MapViewOfFile
CreateFileMappingW
GetFileSizeEx
ReadFile
GetFileSize
ExitThread
ResumeThread
SetThreadPriority
CreateThread
SetEvent
WaitForMultipleObjects
CreateEventA
ResetEvent
Sleep
GetTickCount
SetThreadLocale
WriteFile
GetFileAttributesW
FindClose
FindFirstFileW
WideCharToMultiByte
GetCPInfo
WaitForSingleObject
SetFileAttributesW
CloseHandle
RemoveDirectoryW
DeleteFileW
GetFileAttributesExW
GetTempPathW
CreateDirectoryW
GetLocaleInfoW
LCMapStringW
CopyFileW
DeleteAtom
GetLocalTime
GetSystemDefaultUILanguage
LockResource
GetCurrentProcess
K32GetModuleFileNameExW
FindAtomW
AddAtomW
GlobalAlloc
GlobalLock
GlobalUnlock
MulDiv
GetACP
GetUserDefaultLCID
FindResourceW
LoadResource
SizeofResource
MultiByteToWideChar
lstrcmpiW
EncodePointer
GetSystemDefaultLCID
InitializeCriticalSection
GetModuleHandleW
GetProcAddress
LoadLibraryExW
FreeLibrary
GetCurrentThreadId
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
DecodePointer
LoadLibraryW
RaiseException
GetLastError
QueryActCtxW
DeactivateActCtx
InitializeCriticalSectionEx
FindActCtxSectionStringW
GetModuleFileNameW
OutputDebugStringA
GlobalFree
SetLastError
GetSystemTimeAsFileTime
GetCurrentProcessId
QueryPerformanceCounter
IsProcessorFeaturePresent
TerminateProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
SleepConditionVariableSRW
WakeAllConditionVariable
AcquireSRWLockExclusive
ReleaseSRWLockExclusive
GetCurrentThread
VirtualFree
VirtualAlloc
FlushInstructionCache
InterlockedPushEntrySList
InterlockedPopEntrySList
InitializeSListHead
OutputDebugStringW
IsDebuggerPresent
CreateActCtxW
ActivateActCtx

gdi32

GetBitmapBits
Rectangle
OffsetRgn
GetRgnBox
GetRandomRgn
CreateEllipticRgn
SetPixel
CreatePen
CreateBitmap
FrameRgn
PaintRgn
Arc
Ellipse
Polyline
LineTo
MoveToEx
PatBlt
SetBrushOrgEx
CreateBitmapIndirect
SetBkMode
GdiComment
SetRectRgn
CreatePenIndirect
ExtCreatePen
CreateBrushIndirect
CreateSolidBrush
CreateHalftonePalette
IntersectClipRect
GetClipBox
GetOutlineTextMetricsW
GetStockObject
GetPaletteEntries
GetNearestPaletteIndex
GetNearestColor
RealizePalette
SelectPalette
GetObjectType
SelectClipRgn
ExcludeClipRect
GetClipRgn
GetFontLanguageInfo
BitBlt
RectInRegion
CreateRectRgn
GetTextColor
GetBkColor
GetTextAlign
SetBkColor
SetTextColor
GetObjectW
GetTextFaceW
CreateFontIndirectW
SetTextAlign
DeleteObject
StretchBlt
CreateCompatibleBitmap
SetViewportExtEx
GetViewportExtEx
GetViewportOrgEx
GetWindowExtEx
GetWindowOrgEx
GetMapMode
CreateMetaFileW
SetWindowExtEx
CloseMetaFile
DeleteMetaFile
CreateRectRgnIndirect
CreateDCW
LPtoDP
SaveDC
SetWindowOrgEx
SetViewportOrgEx
GetDeviceCaps
DeleteDC
RestoreDC
GetTextMetricsW
SetMapMode
SelectObject
CreateFontIndirectA
CreateCompatibleDC

ole32

CoInitialize
StringFromCLSID
CLSIDFromString
CoCreateGuid
CoDisconnectObject
CLSIDFromProgID
CreateStreamOnHGlobal
GetHGlobalFromStream
OleRegGetMiscStatus
CreateOleAdviseHolder
OleRegGetUserType
OleRegEnumVerbs
CoFreeLibrary
CoLoadLibrary
CoTaskMemAlloc
CoTaskMemRealloc
CoTaskMemFree
CoGetMalloc
CoCreateInstance
OleInitialize
CoUninitialize
CreateDataAdviseHolder
ProgIDFromCLSID
StringFromGUID2

oleaut32

SysStringByteLen
VariantCopyInd
OleCreatePropertyFrame
VariantChangeTypeEx
SafeArrayGetLBound
SafeArrayGetUBound
VarCmp
VarUdateFromDate
VarBstrCmp
SafeArrayGetElement
VariantCopy
VarBstrCat
SafeArrayAccessData
SafeArrayUnaccessData
GetErrorInfo
SysAllocStringByteLen
SafeArrayCreate
SysReAllocStringLen
VariantTimeToSystemTime
SystemTimeToVariantTime
GetAltMonthNames
SafeArrayUnlock
SafeArrayLock
SafeArrayGetDim
VarDateFromUdate
LHashValOfNameSys
SafeArrayGetElemsize
SysFreeString
SysAllocStringLen
SafeArrayDestroy
SafeArrayPutElement
VarBstrFromDate
SafeArrayCreateVector
VariantChangeType
VariantInit
SysAllocString
VariantClear
LoadTypeLi
LoadRegTypeLi
SysStringLen
VarUI4FromStr
CreateErrorInfo
SetErrorInfo

msimg32

AlphaBlend
TransparentBlt

vcruntime140

__std_type_info_destroy_list
memcpy
_CxxThrowException
__RTDynamicCast
__current_exception
memmove
memset
__std_terminate
memcmp
__std_exception_destroy
__std_exception_copy
wcsrchr
wcschr
_purecall
__C_specific_handler
wcsstr
__current_exception_context

vcruntime140_1

__CxxFrameHandler4

msvcp140

?_Xlength_error@std@@YAXPEBD@Z
?_Xout_of_range@std@@YAXPEBD@Z
?_Xbad_alloc@std@@YAXXZ

api-ms-win-crt-heap-l1-1-0

free
malloc
realloc
calloc
_recalloc

api-ms-win-crt-string-l1-1-0

_wcsicmp
wcsncpy_s
wcscpy_s
strncpy_s
_stricmp
wcscmp
wcscspn
wcsncat_s

api-ms-win-crt-runtime-l1-1-0

_clearfp
_errno
_initialize_narrow_environment
_controlfp_s
_invalid_parameter_noinfo
_statusfp
terminate
_initterm
_initterm_e
_seh_filter_dll
_configure_narrow_argv
_invalid_parameter_noinfo_noreturn
_initialize_onexit_table
_register_onexit_function
_execute_onexit_table
_crt_atexit
_cexit

api-ms-win-crt-stdio-l1-1-0

__stdio_common_vsnwprintf_s
__stdio_common_vswprintf
__stdio_common_vswprintf_s
__stdio_common_vsnprintf_s

api-ms-win-crt-convert-l1-1-0

wcstol
_wtol
atof
_wtoi
_gcvt_s

api-ms-win-crt-math-l1-1-0

pow
ceil
floor
sqrt
_finite

api-ms-win-crt-utility-l1-1-0

rand
srand

api-ms-win-crt-time-l1-1-0

_time64

api-ms-win-crt-locale-l1-1-0

__initialize_lconv_for_unsigned_char

Exports

Exports

DllCanUnloadNow
DllGetClassObject

Sections

.text
Size: 2.5MB - Virtual size: 2.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 726KB - Virtual size: 726KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 172KB - Virtual size: 175KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 91KB - Virtual size: 91KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.didat
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rtext
Size: 512B - Virtual size: 152B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 309KB - Virtual size: 308KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 59KB - Virtual size: 59KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
TellMeRuntime.dll
.dll windows:6 windows x64 arch:x64

d39b5c35cdc251b84e8b432ba7316251

Code Sign

33:00:00:05:57:cf:90:dd:c7:d1:c0:88:8c:00:00:00:00:05:57
Certificate

Issuer

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

19/10/2023, 19:51

Not After

16/10/2024, 19:51

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0c:52:4c:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

06/07/2010, 20:40

Not After

06/07/2025, 20:50

Subject

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

33:00:00:03:a5:41:11:e8:f0:7f:be:0b:75:00:00:00:00:03:a5
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

19/10/2023, 19:51

Not After

16/10/2024, 19:51

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08/07/2011, 20:59

Not After

08/07/2026, 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

b7:ee:84:00:87:36:9c:17:be:3c:f3:3c:96:1f:d3:90:8c:40:89:c5:b8:e9:16:b2:46:33:d3:0b:60:54:14:a4
Signer

Actual PE Digest

b7:ee:84:00:87:36:9c:17:be:3c:f3:3c:96:1f:d3:90:8c:40:89:c5:b8:e9:16:b2:46:33:d3:0b:60:54:14:a4

Digest Algorithm

sha256

PE Digest Matches

true

b7:ee:84:00:87:36:9c:17:be:3c:f3:3c:96:1f:d3:90:8c:40:89:c5:b8:e9:16:b2:46:33:d3:0b:60:54:14:a4
Signer

Actual PE Digest

b7:ee:84:00:87:36:9c:17:be:3c:f3:3c:96:1f:d3:90:8c:40:89:c5:b8:e9:16:b2:46:33:d3:0b:60:54:14:a4

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

d:\dbs\el\omr\target\x64\ship\ucicomp\x-none\TellMeRuntime.pdb

Imports

vcruntime140_1

__CxxFrameHandler4

vcruntime140

__std_terminate
memmove
__std_exception_copy
_CxxThrowException
memset
__std_type_info_destroy_list
__current_exception_context
__current_exception
__C_specific_handler
wcschr
_purecall
__std_exception_destroy
memcpy

msvcp140

?_Xbad_alloc@std@@YAXXZ
?_Xlength_error@std@@YAXPEBD@Z
?_Xbad_function_call@std@@YAXXZ
?_Xout_of_range@std@@YAXPEBD@Z

api-ms-win-crt-heap-l1-1-0

free
_callnewh
malloc

api-ms-win-crt-runtime-l1-1-0

_initterm
_errno
_initterm_e
terminate
_cexit
_crt_atexit
_execute_onexit_table
_register_onexit_function
_initialize_onexit_table
_initialize_narrow_environment
_configure_narrow_argv
_seh_filter_dll
_invalid_parameter_noinfo_noreturn
_invalid_parameter_noinfo

api-ms-win-crt-string-l1-1-0

wcsncmp
wmemmove_s
wcscat_s
wcscpy_s
wcsncpy_s
wcscmp

api-ms-win-crt-utility-l1-1-0

bsearch_s

api-ms-win-crt-stdio-l1-1-0

__stdio_common_vswscanf
__stdio_common_vswprintf_s

api-ms-win-crt-convert-l1-1-0

_wcstod_l
_wcstol_l

api-ms-win-crt-locale-l1-1-0

_create_locale

kernel32

RtlVirtualUnwind
LeaveCriticalSection
EnterCriticalSection
GetLastError
InitializeCriticalSectionEx
SetLastError
DeleteCriticalSection
GetLocalTime
UnhandledExceptionFilter
GetCurrentThreadId
SetUnhandledExceptionFilter
GetCurrentProcess
RtlLookupFunctionEntry
TerminateProcess
IsProcessorFeaturePresent
GetCurrentProcessId
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
CreateFileW
CreateFileMappingW
RtlCaptureContext
CloseHandle
UnmapViewOfFile
GetFileSizeEx
MapViewOfFileEx
QueryPerformanceCounter

ole32

CLSIDFromString

oleaut32

VariantClear

api-ms-win-crt-math-l1-1-0

sqrt
pow
log
fmod
ceilf

Exports

Exports

LoadResourceFromByteArray
LoadResourceFromFile
LoadResourceFromHandle

Sections

.text
Size: 292KB - Virtual size: 292KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 85KB - Virtual size: 84KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 9KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
UCRTBASE.DLL
.dll windows:10 windows x64 arch:x64

1d85fb9ce80726bda08caf2946ef5f93

Code Sign

33:00:00:04:3a:75:e5:2f:9e:0b:29:98:1e:00:00:00:00:04:3a
Certificate

Issuer

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

02/09/2021, 18:25

Not After

01/09/2022, 18:25

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0c:52:4c:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

06/07/2010, 20:40

Not After

06/07/2025, 20:50

Subject

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

2b:28:89:d9:fa:dd:ce:38:d3:8a:37:15:ce:05:48:97:ff:11:98:3d:29:ac:cb:5d:ae:6a:45:0f:e8:9a:23:43
Signer

Actual PE Digest

2b:28:89:d9:fa:dd:ce:38:d3:8a:37:15:ce:05:48:97:ff:11:98:3d:29:ac:cb:5d:ae:6a:45:0f:e8:9a:23:43

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

ucrtbase.pdb

Imports

api-ms-win-core-errorhandling-l1-1-0

SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetLastError
SetErrorMode
SetLastError
RaiseException

api-ms-win-core-heap-l1-1-0

HeapCompact
HeapReAlloc
HeapSize
HeapQueryInformation
HeapAlloc
HeapWalk
HeapValidate
GetProcessHeap
HeapFree

api-ms-win-core-processthreads-l1-1-0

GetCurrentProcessId
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
GetStartupInfoW
GetCurrentProcess
GetCurrentThread
GetExitCodeProcess
GetCurrentThreadId
CreateThread
ExitProcess
CreateProcessW
ResumeThread
ExitThread
TerminateProcess

api-ms-win-core-libraryloader-l1-1-0

FreeLibraryAndExitThread
GetProcAddress
FreeLibrary
GetModuleHandleW
GetModuleHandleExW
LoadLibraryExW
GetModuleFileNameW

api-ms-win-core-synch-l1-1-0

WaitForSingleObject
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
LeaveCriticalSection
EnterCriticalSection

api-ms-win-core-debug-l1-1-0

OutputDebugStringW
IsDebuggerPresent

api-ms-win-core-processenvironment-l1-1-0

GetCommandLineW
FreeEnvironmentStringsW
SetEnvironmentVariableW
SetCurrentDirectoryW
GetEnvironmentStringsW
GetCurrentDirectoryW
SetStdHandle
GetStdHandle
GetCommandLineA

api-ms-win-core-file-l1-1-0

GetFullPathNameW
SetFilePointerEx
GetFileType
CreateFileW
FindNextFileW
FindFirstFileExW
GetFileInformationByHandle
GetFileSizeEx
GetDriveTypeW
FindClose
SetFileAttributesW
GetFileAttributesExW
CreateDirectoryW
GetDiskFreeSpaceW
GetLogicalDrives
RemoveDirectoryW
SetFileTime
DeleteFileW
WriteFile
LockFileEx
UnlockFileEx
FlushFileBuffers
SetEndOfFile
ReadFile

api-ms-win-core-string-l1-1-0

GetStringTypeW
WideCharToMultiByte
MultiByteToWideChar
CompareStringW

api-ms-win-core-fibers-l1-1-0

FlsAlloc
FlsGetValue
FlsFree
FlsSetValue

api-ms-win-core-file-l1-2-0

GetTempPathW

api-ms-win-core-localization-l1-2-0

LCMapStringW
IsValidCodePage
GetACP
GetOEMCP
GetLocaleInfoW
GetUserDefaultLCID
GetCPInfo
IsValidLocale
EnumSystemLocalesW

api-ms-win-core-datetime-l1-1-0

GetDateFormatW
GetTimeFormatW

api-ms-win-core-sysinfo-l1-1-0

SetLocalTime
GetSystemInfo
GetSystemTimeAsFileTime
GetLocalTime

api-ms-win-core-rtlsupport-l1-1-0

RtlCaptureContext
RtlVirtualUnwind
RtlUnwindEx
RtlUnwind
RtlPcToFileHeader
RtlLookupFunctionEntry

api-ms-win-core-processthreads-l1-1-1

IsProcessorFeaturePresent

api-ms-win-core-console-l1-1-0

ReadConsoleInputW
SetConsoleCtrlHandler
WriteConsoleW
GetConsoleCP
SetConsoleMode
PeekConsoleInputA
GetConsoleOutputCP
GetNumberOfConsoleInputEvents
ReadConsoleW
GetConsoleMode

api-ms-win-core-handle-l1-1-0

CloseHandle
DuplicateHandle

api-ms-win-core-namedpipe-l1-1-0

PeekNamedPipe
CreatePipe

api-ms-win-core-timezone-l1-1-0

SystemTimeToFileTime
SystemTimeToTzSpecificLocalTime
FileTimeToSystemTime
TzSpecificLocalTimeToSystemTime
GetTimeZoneInformation

api-ms-win-core-file-l2-1-0

MoveFileExW

api-ms-win-core-synch-l1-2-0

Sleep

api-ms-win-core-profile-l1-1-0

QueryPerformanceCounter
QueryPerformanceFrequency

api-ms-win-core-memory-l1-1-0

VirtualAlloc
VirtualProtect
VirtualQuery

api-ms-win-core-util-l1-1-0

Beep
EncodePointer

api-ms-win-core-interlocked-l1-1-0

InterlockedPushEntrySList
InterlockedFlushSList

Exports

Exports

_Cbuild
_Cmulcc
_Cmulcr
_CreateFrameInfo
_CxxThrowException
_Exit
_FCbuild
_FCmulcc
_FCmulcr
_FindAndUnlinkFrame
_GetImageBase
_GetThrowImageBase
_Getdays
_Getmonths
_Gettnames
_IsExceptionObjectToBeDestroyed
_LCbuild
_LCmulcc
_LCmulcr
_SetImageBase
_SetThrowImageBase
_SetWinRTOutOfMemoryExceptionCallback
_Strftime
_W_Getdays
_W_Getmonths
_W_Gettnames
_Wcsftime
__AdjustPointer
__BuildCatchObject
__BuildCatchObjectHelper
__C_specific_handler
__C_specific_handler_noexcept
__CxxDetectRethrow
__CxxExceptionFilter
__CxxFrameHandler
__CxxFrameHandler2
__CxxFrameHandler3
__CxxFrameHandler4
__CxxQueryExceptionSize
__CxxRegisterExceptionObject
__CxxUnregisterExceptionObject
__DestructExceptionObject
__FrameUnwindFilter
__GetPlatformExceptionInfo
__NLG_Dispatch2
__NLG_Return2
__RTCastToVoid
__RTDynamicCast
__RTtypeid
__TypeMatch
___lc_codepage_func
___lc_collate_cp_func
___lc_locale_name_func
___mb_cur_max_func
___mb_cur_max_l_func
__acrt_iob_func
__conio_common_vcprintf
__conio_common_vcprintf_p
__conio_common_vcprintf_s
__conio_common_vcscanf
__conio_common_vcwprintf
__conio_common_vcwprintf_p
__conio_common_vcwprintf_s
__conio_common_vcwscanf
__current_exception
__current_exception_context
__daylight
__dcrt_get_wide_environment_from_os
__dcrt_initial_narrow_environment
__doserrno
__dstbias
__fpe_flt_rounds
__fpecode
__initialize_lconv_for_unsigned_char
__intrinsic_setjmp
__intrinsic_setjmpex
__isascii
__iscsym
__iscsymf
__iswcsym
__iswcsymf
__p___argc
__p___argv
__p___wargv
__p__acmdln
__p__commode
__p__environ
__p__fmode
__p__mbcasemap
__p__mbctype
__p__pgmptr
__p__wcmdln
__p__wenviron
__p__wpgmptr
__pctype_func
__processing_throw
__pwctype_func
__pxcptinfoptrs
__report_gsfailure
__setusermatherr
__std_exception_copy
__std_exception_destroy
__std_terminate
__std_type_info_compare
__std_type_info_destroy_list
__std_type_info_hash
__std_type_info_name
__stdio_common_vfprintf
__stdio_common_vfprintf_p
__stdio_common_vfprintf_s
__stdio_common_vfscanf
__stdio_common_vfwprintf
__stdio_common_vfwprintf_p
__stdio_common_vfwprintf_s
__stdio_common_vfwscanf
__stdio_common_vsnprintf_s
__stdio_common_vsnwprintf_s
__stdio_common_vsprintf
__stdio_common_vsprintf_p
__stdio_common_vsprintf_s
__stdio_common_vsscanf
__stdio_common_vswprintf
__stdio_common_vswprintf_p
__stdio_common_vswprintf_s
__stdio_common_vswscanf
__strncnt
__sys_errlist
__sys_nerr
__threadhandle
__threadid
__timezone
__toascii
__tzname
__unDName
__unDNameEx
__uncaught_exception
__uncaught_exceptions
__wcserror
__wcserror_s
__wcsncnt
_abs64
_access
_access_s
_aligned_free
_aligned_malloc
_aligned_msize
_aligned_offset_malloc
_aligned_offset_realloc
_aligned_offset_recalloc
_aligned_realloc
_aligned_recalloc
_assert
_atodbl
_atodbl_l
_atof_l
_atoflt
_atoflt_l
_atoi64
_atoi64_l
_atoi_l
_atol_l
_atoldbl
_atoldbl_l
_atoll_l
_beep
_beginthread
_beginthreadex
_byteswap_uint64
_byteswap_ulong
_byteswap_ushort
_c_exit
_cabs
_callnewh
_calloc_base
_cexit
_cgets
_cgets_s
_cgetws
_cgetws_s
_chdir
_chdrive
_chgsign
_chgsignf
_chmod
_chsize
_chsize_s
_clearfp
_close
_commit
_configthreadlocale
_configure_narrow_argv
_configure_wide_argv
_control87
_controlfp
_controlfp_s
_copysign
_copysignf
_cputs
_cputws
_creat
_create_locale
_crt_at_quick_exit
_crt_atexit
_ctime32
_ctime32_s
_ctime64
_ctime64_s
_cwait
_d_int
_dclass
_dexp
_difftime32
_difftime64
_dlog
_dnorm
_dpcomp
_dpoly
_dscale
_dsign
_dsin
_dtest
_dunscale
_dup
_dup2
_dupenv_s
_ecvt
_ecvt_s
_endthread
_endthreadex
_eof
_errno
_except1
_execl
_execle
_execlp
_execlpe
_execute_onexit_table
_execv
_execve
_execvp
_execvpe
_exit
_expand
_fclose_nolock
_fcloseall
_fcvt
_fcvt_s
_fd_int
_fdclass
_fdexp
_fdlog
_fdnorm
_fdopen
_fdpcomp
_fdpoly
_fdscale
_fdsign
_fdsin
_fdtest
_fdunscale
_fflush_nolock
_fgetc_nolock
_fgetchar
_fgetwc_nolock
_fgetwchar
_filelength
_filelengthi64
_fileno
_findclose
_findfirst32
_findfirst32i64
_findfirst64
_findfirst64i32
_findnext32
_findnext32i64
_findnext64
_findnext64i32
_finite
_finitef
_flushall
_fpclass
_fpclassf
_fpieee_flt
_fpreset
_fputc_nolock
_fputchar
_fputwc_nolock
_fputwchar
_fread_nolock
_fread_nolock_s
_free_base
_free_locale
_fseek_nolock
_fseeki64
_fseeki64_nolock
_fsopen
_fstat32
_fstat32i64
_fstat64
_fstat64i32
_ftell_nolock
_ftelli64
_ftelli64_nolock
_ftime32
_ftime32_s
_ftime64
_ftime64_s
_fullpath
_futime32
_futime64
_fwrite_nolock
_gcvt
_gcvt_s
_get_FMA3_enable
_get_current_locale
_get_daylight
_get_doserrno
_get_dstbias
_get_errno
_get_fmode
_get_heap_handle
_get_initial_narrow_environment
_get_initial_wide_environment
_get_invalid_parameter_handler
_get_narrow_winmain_command_line
_get_osfhandle
_get_pgmptr
_get_printf_count_output
_get_purecall_handler
_get_stream_buffer_pointers
_get_terminate
_get_thread_local_invalid_parameter_handler
_get_timezone
_get_tzname
_get_unexpected
_get_wide_winmain_command_line
_get_wpgmptr
_getc_nolock
_getch
_getch_nolock
_getche
_getche_nolock
_getcwd
_getdcwd
_getdiskfree
_getdllprocaddr
_getdrive
_getdrives
_getmaxstdio
_getmbcp
_getpid
_getsystime
_getw
_getwc_nolock
_getwch
_getwch_nolock
_getwche
_getwche_nolock
_getws
_getws_s
_gmtime32
_gmtime32_s
_gmtime64
_gmtime64_s
_heapchk
_heapmin
_heapwalk
_hypot
_hypotf
_i64toa
_i64toa_s
_i64tow
_i64tow_s
_initialize_narrow_environment
_initialize_onexit_table
_initialize_wide_environment
_initterm
_initterm_e
_invalid_parameter_noinfo
_invalid_parameter_noinfo_noreturn
_invoke_watson
_is_exception_typeof
_isalnum_l
_isalpha_l
_isatty
_isblank_l
_iscntrl_l
_isctype
_isctype_l
_isdigit_l
_isgraph_l
_isleadbyte_l
_islower_l
_ismbbalnum
_ismbbalnum_l
_ismbbalpha
_ismbbalpha_l
_ismbbblank
_ismbbblank_l
_ismbbgraph
_ismbbgraph_l
_ismbbkalnum
_ismbbkalnum_l
_ismbbkana
_ismbbkana_l
_ismbbkprint
_ismbbkprint_l
_ismbbkpunct
_ismbbkpunct_l
_ismbblead
_ismbblead_l
_ismbbprint
_ismbbprint_l
_ismbbpunct
_ismbbpunct_l
_ismbbtrail
_ismbbtrail_l
_ismbcalnum
_ismbcalnum_l
_ismbcalpha
_ismbcalpha_l
_ismbcblank
_ismbcblank_l
_ismbcdigit
_ismbcdigit_l
_ismbcgraph
_ismbcgraph_l
_ismbchira
_ismbchira_l
_ismbckata
_ismbckata_l
_ismbcl0
_ismbcl0_l
_ismbcl1
_ismbcl1_l
_ismbcl2
_ismbcl2_l
_ismbclegal
_ismbclegal_l
_ismbclower
_ismbclower_l
_ismbcprint
_ismbcprint_l
_ismbcpunct
_ismbcpunct_l
_ismbcspace
_ismbcspace_l
_ismbcsymbol
_ismbcsymbol_l
_ismbcupper
_ismbcupper_l
_ismbslead
_ismbslead_l
_ismbstrail
_ismbstrail_l
_isnan
_isnanf
_isprint_l
_ispunct_l
_isspace_l
_isupper_l
_iswalnum_l
_iswalpha_l
_iswblank_l
_iswcntrl_l
_iswcsym_l
_iswcsymf_l
_iswctype_l
_iswdigit_l
_iswgraph_l
_iswlower_l
_iswprint_l
_iswpunct_l
_iswspace_l
_iswupper_l
_iswxdigit_l
_isxdigit_l
_itoa
_itoa_s
_itow
_itow_s
_j0
_j1
_jn
_kbhit
_ld_int
_ldclass
_ldexp
_ldlog
_ldpcomp
_ldpoly
_ldscale
_ldsign
_ldsin
_ldtest
_ldunscale
_lfind
_lfind_s
_loaddll
_local_unwind

Sections

.text
Size: 780KB - Virtual size: 777KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 236KB - Virtual size: 235KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 52KB - Virtual size: 50KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
VCCORLIB140_APP.DLL
.dll windows:6 windows x64 arch:x64

d83358d1708f2252f92437461e0568de

Code Sign

33:00:00:00:d3:8b:9b:c4:ce:d8:ab:21:3c:00:00:00:00:00:d3
Certificate

Issuer

CN=Microsoft Windows Phone Production PCA 2012,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

12/09/2017, 18:57

Not After

12/09/2018, 18:57

Subject

CN=Windows Phone,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

33:00:00:00:0b:fc:f9:8e:58:4c:15:50:bf:00:00:00:00:00:0b
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

24/07/2012, 22:23

Not After

24/07/2027, 22:33

Subject

CN=Microsoft Windows Phone Production PCA 2012,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

e8:af:b2:db:10:2e:c4:88:af:b6:27:ac:c3:e3:ee:e0:08:5e:72:58:07:4f:91:c3:0c:d5:2f:b9:8d:80:2e:bd
Signer

Actual PE Digest

e8:af:b2:db:10:2e:c4:88:af:b6:27:ac:c3:e3:ee:e0:08:5e:72:58:07:4f:91:c3:0c:d5:2f:b9:8d:80:2e:bd

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_APPCONTAINER
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

vccorlib140_app.amd64.pdb

Imports

vcruntime140_app

_SetWinRTOutOfMemoryExceptionCallback
__C_specific_handler
__std_exception_copy
memmove
_CxxThrowException
__std_type_info_destroy_list
memcpy
__GetPlatformExceptionInfo
__std_terminate
__CxxFrameHandler3
_purecall
__std_exception_destroy
memset

api-ms-win-crt-stdio-l1-1-0

__acrt_iob_func
__stdio_common_vfprintf
__stdio_common_vswprintf_s

api-ms-win-crt-runtime-l1-1-0

_seh_filter_dll
_configure_narrow_argv
_initialize_narrow_environment
_initialize_onexit_table
_register_onexit_function
_execute_onexit_table
_crt_atexit
terminate
_invalid_parameter_noinfo_noreturn
_initterm
_invoke_watson
_cexit
_initterm_e

api-ms-win-crt-heap-l1-1-0

_callnewh
free
_aligned_free
malloc
_aligned_offset_malloc

api-ms-win-crt-string-l1-1-0

wcscpy_s

msvcp140_app

?_Xlength_error@std@@YAXPEBD@Z

api-ms-win-core-winrt-string-l1-1-0

WindowsCreateString
WindowsDuplicateString
WindowsStringHasEmbeddedNull
WindowsGetStringRawBuffer
WindowsDeleteString
WindowsGetStringLen
WindowsCompareStringOrdinal
WindowsCreateStringReference
WindowsIsStringEmpty

api-ms-win-core-com-l1-1-1

CoTaskMemAlloc
CoTaskMemFree
CoGetContextToken
CoGetObjectContext
CoGetInterfaceAndReleaseStream
CoMarshalInterThreadInterfaceInStream
CoGetApartmentType
CoCreateFreeThreadedMarshaler

api-ms-win-core-winrt-error-l1-1-1

RoOriginateLanguageException
RoTransformError
GetRestrictedErrorInfo
RoOriginateError
SetRestrictedErrorInfo

api-ms-win-core-errorhandling-l1-1-1

RaiseException
GetLastError

api-ms-win-core-synch-l1-2-0

DeleteCriticalSection
InitializeCriticalSectionEx
InitializeSRWLock
ReleaseSRWLockExclusive
LeaveCriticalSection
AcquireSRWLockExclusive
ReleaseSRWLockShared
AcquireSRWLockShared
EnterCriticalSection
TryAcquireSRWLockShared

oleaut32

SysFreeString
SysAllocStringLen

api-ms-win-core-localization-l1-2-1

FormatMessageW

api-ms-win-core-heap-l1-2-0

HeapAlloc
HeapFree
GetProcessHeap

api-ms-win-core-debug-l1-1-1

OutputDebugStringW

api-ms-win-core-util-l1-1-0

DecodePointer

api-ms-win-core-winrt-l1-1-0

RoGetApartmentIdentifier
RoInitialize
RoUnregisterForApartmentShutdown
RoGetActivationFactory
RoRegisterForApartmentShutdown
RoUninitialize

api-ms-win-core-profile-l1-1-0

QueryPerformanceCounter

api-ms-win-core-processthreads-l1-1-2

GetCurrentProcessId
GetCurrentThreadId

api-ms-win-core-sysinfo-l1-2-1

GetSystemTimeAsFileTime

api-ms-win-core-libraryloader-l1-2-0

DisableThreadLibraryCalls

api-ms-win-core-interlocked-l1-2-0

InitializeSListHead

Exports

Exports

?<Dispose>@Exception@Platform@@UE$AAAXXZ
?<Dispose>@String@Platform@@UE$AAAXXZ
?<Dispose>@Type@Platform@@UE$AAAXXZ
??0AccessDeniedException@Platform@@QE$AAA@PE$AAVString@1@@Z
??0AccessDeniedException@Platform@@QE$AAA@XZ
??0Attribute@Metadata@Platform@@QE$AAA@XZ
??0Boolean@Platform@@QEAA@_N@Z
??0COMException@Platform@@QE$AAA@H@Z
??0COMException@Platform@@QE$AAA@HPE$AAVString@1@@Z
??0ChangedStateException@Platform@@QE$AAA@PE$AAVString@1@@Z
??0ChangedStateException@Platform@@QE$AAA@XZ
??0ClassNotRegisteredException@Platform@@QE$AAA@PE$AAVString@1@@Z
??0ClassNotRegisteredException@Platform@@QE$AAA@XZ
??0Delegate@Platform@@QE$AAA@XZ
??0DisconnectedException@Platform@@QE$AAA@PE$AAVString@1@@Z
??0DisconnectedException@Platform@@QE$AAA@XZ
??0Enum@Platform@@QE$AAA@XZ
??0Exception@Platform@@QE$AAA@H@Z
??0Exception@Platform@@QE$AAA@HPE$AAVString@1@@Z
??0FailureException@Platform@@QE$AAA@PE$AAVString@1@@Z
??0FailureException@Platform@@QE$AAA@XZ
??0GridLength@Xaml@UI@Windows@@QEAA@NW4GridUnitType@123@@Z
??0IntPtr@Platform@@QEAA@H@Z
??0IntPtr@Platform@@QEAA@PEAX@Z
??0InvalidArgumentException@Platform@@QE$AAA@PE$AAVString@1@@Z
??0InvalidArgumentException@Platform@@QE$AAA@XZ
??0InvalidCastException@Platform@@QE$AAA@PE$AAVString@1@@Z
??0InvalidCastException@Platform@@QE$AAA@XZ
??0MTAThreadAttribute@Platform@@QE$AAA@XZ
??0NotImplementedException@Platform@@QE$AAA@PE$AAVString@1@@Z
??0NotImplementedException@Platform@@QE$AAA@XZ
??0NullReferenceException@Platform@@QE$AAA@PE$AAVString@1@@Z
??0NullReferenceException@Platform@@QE$AAA@XZ
??0Object@Platform@@QE$AAA@XZ
??0ObjectDisposedException@Platform@@QE$AAA@PE$AAVString@1@@Z
??0ObjectDisposedException@Platform@@QE$AAA@XZ
??0OnePhaseConstructedAttribute@CompilerServices@Runtime@Platform@@QE$AAA@XZ
??0OperationCanceledException@Platform@@QE$AAA@PE$AAVString@1@@Z
??0OperationCanceledException@Platform@@QE$AAA@XZ
??0OutOfBoundsException@Platform@@QE$AAA@PE$AAVString@1@@Z
??0OutOfBoundsException@Platform@@QE$AAA@XZ
??0OutOfMemoryException@Platform@@QE$AAA@PE$AAVString@1@@Z
??0OutOfMemoryException@Platform@@QE$AAA@XZ
??0Rect@Foundation@Windows@@QEAA@VPoint@12@0@Z
??0Rect@Foundation@Windows@@QEAA@VPoint@12@VSize@12@@Z
??0RepeatBehavior@Animation@Media@Xaml@UI@Windows@@QEAA@N@Z
??0STAThreadAttribute@Platform@@QE$AAA@XZ
??0SizeT@Platform@@QEAA@H@Z
??0SizeT@Platform@@QEAA@PEAX@Z
??0Type@Platform@@QE$AAA@PE$AAVObject@1@@Z
??0Type@Platform@@QE$AAA@VIntPtr@1@@Z
??0Type@Platform@@QE$AAA@VTypeName@Interop@Xaml@UI@Windows@@@Z
??0ValueType@Platform@@QE$AAA@XZ
??0WrongThreadException@Platform@@QE$AAA@PE$AAVString@1@@Z
??0WrongThreadException@Platform@@QE$AAA@XZ
??0char16@default@@QEAA@_W@Z
??0float32@default@@QEAA@M@Z
??0float64@default@@QEAA@N@Z
??0int16@default@@QEAA@F@Z
??0int32@default@@QEAA@H@Z
??0int64@default@@QEAA@_J@Z
??0int8@default@@QEAA@C@Z
??0uint16@default@@QEAA@G@Z
??0uint32@default@@QEAA@I@Z
??0uint64@default@@QEAA@_K@Z
??0uint8@default@@QEAA@E@Z
??BIntPtr@Platform@@SA?AV01@H@Z
??BIntPtr@Platform@@SA?AV01@PEAX@Z
??BIntPtr@Platform@@SAPEAXV01@@Z
??BType@Platform@@SA?AVTypeName@Interop@Xaml@UI@Windows@@PE$AAV01@@Z
??BType@Platform@@SAPE$AAV01@VTypeName@Interop@Xaml@UI@Windows@@@Z
??DMatrix3D@Media3D@Media@Xaml@UI@Windows@@SA?AV012345@V012345@0@Z
??GDuration@Xaml@UI@Windows@@SA?AV0123@V0123@0@Z
??HDuration@Xaml@UI@Windows@@SA?AV0123@V0123@0@Z
??MDuration@Xaml@UI@Windows@@SA_NV0123@0@Z
??NDuration@Xaml@UI@Windows@@SA_NV0123@0@Z
??ODuration@Xaml@UI@Windows@@SA_NV0123@0@Z
??PDuration@Xaml@UI@Windows@@SA_NV0123@0@Z
?AlignedAllocate@Heap@Details@Platform@@SAPEAX_K00@Z
?AlignedAllocate@Heap@Details@Platform@@SAPEAX_K0@Z
?AlignedAllocateException@Heap@Details@Platform@@SAPEAX_K00@Z
?AlignedAllocateException@Heap@Details@Platform@@SAPEAX_K0@Z
?AlignedFree@Heap@Details@Platform@@SAXPEAX@Z
?AlignedFreeException@Heap@Details@Platform@@SAXPEAX@Z
?Allocate@Heap@Details@Platform@@SAPEAX_K0@Z
?Allocate@Heap@Details@Platform@@SAPEAX_K@Z
?AllocateException@Heap@Details@Platform@@SAPEAX_K0@Z
?AllocateException@Heap@Details@Platform@@SAPEAX_K@Z
?Compare@Duration@Xaml@UI@Windows@@SAHV1234@0@Z
?Contains@Rect@Foundation@Windows@@QEAA_NVPoint@23@@Z
?CreateException@Exception@Platform@@SAPE$AAV12@H@Z
?CreateException@Exception@Platform@@SAPE$AAV12@HPE$AAVString@2@@Z
?CreateValue@Details@Platform@@YAPE$AAVObject@2@W4TypeCode@2@PEBX@Z
?EnableFactoryCache@@YAXXZ
?EnumerateAllocatedObjects@Heap@Details@Platform@@SAXPE$AAVHeapEntryHandler@23@@Z
?Equals@Attribute@Metadata@Platform@@QE$AAA_NPE$AAVObject@3@@Z
?Equals@Boolean@Platform@@QEAA_NPE$AAVObject@2@@Z
?Equals@Delegate@Platform@@QE$AAA_NPE$AAVObject@2@@Z
?Equals@Enum@Platform@@QE$AAA_NPE$AAVObject@2@@Z
?Equals@Exception@Platform@@UE$AAA_NPE$AAVObject@2@@Z
?Equals@MTAThreadAttribute@Platform@@QE$AAA_NPE$AAVObject@2@@Z
?Equals@Object@Platform@@QE$AAA_NPE$AAV12@@Z
?Equals@OnePhaseConstructedAttribute@CompilerServices@Runtime@Platform@@QE$AAA_NPE$AAVObject@4@@Z
?Equals@STAThreadAttribute@Platform@@QE$AAA_NPE$AAVObject@2@@Z
?Equals@Type@Platform@@UE$AAA_NPE$AAVObject@2@@Z
?Equals@ValueType@Platform@@QE$AAA_NPE$AAVObject@2@@Z
?Equals@char16@default@@QEAA_NPE$AAVObject@Platform@@@Z
?Equals@float32@default@@QEAA_NPE$AAVObject@Platform@@@Z
?Equals@float64@default@@QEAA_NPE$AAVObject@Platform@@@Z
?Equals@int16@default@@QEAA_NPE$AAVObject@Platform@@@Z
?Equals@int32@default@@QEAA_NPE$AAVObject@Platform@@@Z
?Equals@int64@default@@QEAA_NPE$AAVObject@Platform@@@Z
?Equals@int8@default@@QEAA_NPE$AAVObject@Platform@@@Z
?Equals@uint16@default@@QEAA_NPE$AAVObject@Platform@@@Z
?Equals@uint32@default@@QEAA_NPE$AAVObject@Platform@@@Z
?Equals@uint64@default@@QEAA_NPE$AAVObject@Platform@@@Z
?Equals@uint8@default@@QEAA_NPE$AAVObject@Platform@@@Z
?EventSourceAdd@Details@Platform@@YA?AVEventRegistrationToken@Foundation@Windows@@PEAPEAXPEAUEventLock@12@PE$AAVDelegate@2@@Z
?EventSourceGetTargetArray@Details@Platform@@YAPEAXPEAXPEAUEventLock@12@@Z
?EventSourceGetTargetArrayEvent@Details@Platform@@YAPEAXPEAXIPEBXPEA_J@Z
?EventSourceGetTargetArraySize@Details@Platform@@YAIPEAX@Z
?EventSourceInitialize@Details@Platform@@YAXPEAPEAX@Z
?EventSourceRemove@Details@Platform@@YAXPEAPEAXPEAUEventLock@12@VEventRegistrationToken@Foundation@Windows@@@Z
?EventSourceUninitialize@Details@Platform@@YAXPEAPEAX@Z
?FlushFactoryCache@@YAXXZ
?Free@Heap@Details@Platform@@SAXPEAX@Z
?FreeException@Heap@Details@Platform@@SAXPEAX@Z
?GetActivationFactory@Details@Platform@@YAJPEAVModuleBase@1WRL@Microsoft@@PEAUHSTRING__@@PEAPEAUIActivationFactory@@@Z
?GetActivationFactoryByPCWSTR@@YAJPEAXAEAVGuid@Platform@@PEAPEAX@Z
?GetCmdArguments@Details@Platform@@YAPEAPEA_WPEAH@Z
?GetHashCode@Attribute@Metadata@Platform@@QE$AAAHXZ
?GetHashCode@Boolean@Platform@@QEAAHXZ
?GetHashCode@Delegate@Platform@@QE$AAAHXZ
?GetHashCode@Enum@Platform@@QE$AAAHXZ
?GetHashCode@Exception@Platform@@UE$AAAHXZ
?GetHashCode@Guid@Platform@@QEAAHXZ
?GetHashCode@MTAThreadAttribute@Platform@@QE$AAAHXZ
?GetHashCode@Object@Platform@@QE$AAAHXZ
?GetHashCode@OnePhaseConstructedAttribute@CompilerServices@Runtime@Platform@@QE$AAAHXZ
?GetHashCode@STAThreadAttribute@Platform@@QE$AAAHXZ
?GetHashCode@Type@Platform@@UE$AAAHXZ
?GetHashCode@ValueType@Platform@@QE$AAAHXZ
?GetHashCode@char16@default@@QEAAHXZ
?GetHashCode@float32@default@@QEAAHXZ
?GetHashCode@float64@default@@QEAAHXZ
?GetHashCode@int16@default@@QEAAHXZ
?GetHashCode@int32@default@@QEAAHXZ
?GetHashCode@int64@default@@QEAAHXZ
?GetHashCode@int8@default@@QEAAHXZ
?GetHashCode@uint16@default@@QEAAHXZ
?GetHashCode@uint32@default@@QEAAHXZ
?GetHashCode@uint64@default@@QEAAHXZ
?GetHashCode@uint8@default@@QEAAHXZ
?GetIBoxArrayVtable@Details@Platform@@YAPEAXPEAX@Z
?GetIBoxVtable@Details@Platform@@YAPEAXPEAX@Z
?GetIidsFn@@YAJHPEAKPEBU__s_GUID@@PEAPEAVGuid@Platform@@@Z
?GetObjectContext@Details@Platform@@YAPEAUIUnknown@@XZ
?GetProxyImpl@Details@Platform@@YAJPEAUIUnknown@@AEBU_GUID@@0PEAPEAU3@@Z
?GetType@Boolean@Platform@@QEAAPE$AAVType@2@XZ
?GetType@Guid@Platform@@QEAAPE$AAVType@2@XZ
?GetType@Object@Platform@@QE$AAAPE$AAVType@2@XZ
?GetType@char16@default@@QEAAPE$AAVType@Platform@@XZ
?GetType@float32@default@@QEAAPE$AAVType@Platform@@XZ
?GetType@float64@default@@QEAAPE$AAVType@Platform@@XZ
?GetType@int16@default@@QEAAPE$AAVType@Platform@@XZ
?GetType@int32@default@@QEAAPE$AAVType@Platform@@XZ
?GetType@int64@default@@QEAAPE$AAVType@Platform@@XZ
?GetType@int8@default@@QEAAPE$AAVType@Platform@@XZ
?GetType@uint16@default@@QEAAPE$AAVType@Platform@@XZ
?GetType@uint32@default@@QEAAPE$AAVType@Platform@@XZ
?GetType@uint64@default@@QEAAPE$AAVType@Platform@@XZ
?GetType@uint8@default@@QEAAPE$AAVType@Platform@@XZ
?GetTypeCode@Type@Platform@@SA?AW4TypeCode@2@PE$AAV12@@Z
?GetWeakReference@Details@Platform@@YAPEAU__abi_IUnknown@@QE$ADVObject@2@@Z
?InitControlBlock@ControlBlock@Details@Platform@@AEAAXPEAX_N11@Z
?InitializeData@Details@Platform@@YAJH@Z
?Intersect@Rect@Foundation@Windows@@QEAAXV123@@Z
?IntersectsWith@Rect@Foundation@Windows@@QEAA_NV123@@Z
?Invert@Matrix3D@Media3D@Media@Xaml@UI@Windows@@QEAAXXZ
?ReCreateException@Exception@Platform@@SAPE$AAV12@H@Z
?ReferenceEquals@Object@Platform@@SA_NPE$AAV12@0@Z
?ReferenceEquals@Object@Platform@@SA_NPE$AAVString@2@0@Z
?RegisterFactories@Details@Platform@@YAPE$AAVObject@2@PEAPEAVModuleBase@1WRL@Microsoft@@PEAPEAU__abi_Module@@P6AXXZ@Z
?ReleaseInContextImpl@Details@Platform@@YAJPEAUIUnknown@@0@Z
?ReleaseTarget@ControlBlock@Details@Platform@@AEAAXXZ
?ResolveWeakReference@Details@Platform@@YAPE$AAVObject@2@AEBU_GUID@@PEAPEAU__abi_IUnknown@@@Z
?RunApplicationServer@Details@Platform@@YAXPEAPEAVModuleBase@1WRL@Microsoft@@PEAPEAU__abi_Module@@PEB_W@Z
?RunServer@Details@Platform@@YAXPEAPEAVModuleBase@1WRL@Microsoft@@PEAPEAU__abi_Module@@PEB_W@Z
?TerminateModule@Details@Platform@@YA_NPEAVModuleBase@1WRL@Microsoft@@@Z
?ToInt32@IntPtr@Platform@@QEAAHXZ
?ToString@Attribute@Metadata@Platform@@QE$AAAPE$AAVString@3@XZ
?ToString@Boolean@Platform@@QEAAPE$AAVString@2@XZ
?ToString@Delegate@Platform@@QE$AAAPE$AAVString@2@XZ
?ToString@Enum@Platform@@QE$AAAPE$AAVString@2@XZ
?ToString@Exception@Platform@@UE$AAAPE$AAVString@2@XZ
?ToString@Guid@Platform@@QEAAPE$AAVString@2@XZ
?ToString@MTAThreadAttribute@Platform@@QE$AAAPE$AAVString@2@XZ
?ToString@OnePhaseConstructedAttribute@CompilerServices@Runtime@Platform@@QE$AAAPE$AAVString@4@XZ
?ToString@STAThreadAttribute@Platform@@QE$AAAPE$AAVString@2@XZ
?ToString@Type@Platform@@UE$AAAPE$AAVString@2@XZ
?ToString@ValueType@Platform@@QE$AAAPE$AAVString@2@XZ
?ToString@char16@default@@QEAAPE$AAVString@Platform@@XZ
?ToString@float32@default@@QEAAPE$AAVString@Platform@@XZ
?ToString@float64@default@@QEAAPE$AAVString@Platform@@XZ
?ToString@int16@default@@QEAAPE$AAVString@Platform@@XZ
?ToString@int32@default@@QEAAPE$AAVString@Platform@@XZ
?ToString@int64@default@@QEAAPE$AAVString@Platform@@XZ
?ToString@int8@default@@QEAAPE$AAVString@Platform@@XZ
?ToString@uint16@default@@QEAAPE$AAVString@Platform@@XZ
?ToString@uint32@default@@QEAAPE$AAVString@Platform@@XZ
?ToString@uint64@default@@QEAAPE$AAVString@Platform@@XZ
?ToString@uint8@default@@QEAAPE$AAVString@Platform@@XZ
?UninitializeData@Details@Platform@@YAXH@Z
?Union@Rect@Foundation@Windows@@QEAAXV123@@Z
?Union@Rect@Foundation@Windows@@QEAAXVPoint@23@@Z
?WriteLine@Console@Details@Platform@@SAXPE$AAVObject@3@@Z
?WriteLine@Console@Details@Platform@@SAXPE$AAVString@3@@Z
?WriteLine@Console@Details@Platform@@SAXXZ
?__abi_FailFast@@YAXXZ
?__abi_ObjectToString@__abi_details@@YAPE$AAVString@Platform@@PE$AAVObject@3@_N@Z
?__abi_Resolve@ControlBlock@Details@Platform@@UEAAJAEAVGuid@3@PEAPEAU__abi_IInspectable@@@Z
?__abi_WinRTraiseAccessDeniedException@@YAXXZ
?__abi_WinRTraiseCOMException@@YAXJ@Z
?__abi_WinRTraiseChangedStateException@@YAXXZ
?__abi_WinRTraiseClassNotRegisteredException@@YAXXZ
?__abi_WinRTraiseDisconnectedException@@YAXXZ
?__abi_WinRTraiseFailureException@@YAXXZ
?__abi_WinRTraiseInvalidArgumentException@@YAXXZ
?__abi_WinRTraiseInvalidCastException@@YAXXZ
?__abi_WinRTraiseNotImplementedException@@YAXXZ
?__abi_WinRTraiseNullReferenceException@@YAXXZ
?__abi_WinRTraiseObjectDisposedException@@YAXXZ
?__abi_WinRTraiseOperationCanceledException@@YAXXZ
?__abi_WinRTraiseOutOfBoundsException@@YAXXZ
?__abi_WinRTraiseOutOfMemoryException@@YAXXZ
?__abi_WinRTraiseWrongThreadException@@YAXXZ
?__abi_cast_Object_to_String@__abi_details@@YAPE$AAVString@Platform@@_NPE$AAVObject@3@@Z
?__abi_cast_String_to_Object@__abi_details@@YAPE$AAVObject@Platform@@PE$AAVString@3@@Z
?__abi_make_type_id@@YAPE$AAVType@Platform@@AEBU__abi_type_descriptor@@@Z
?__abi_translateCurrentException@@YAJ_N@Z
?__getActivationFactoryByHSTRING@@YAJPEAUHSTRING__@@AEAVGuid@Platform@@PEAPEAX@Z
?get@Bottom@Rect@Foundation@Windows@@QEAAMXZ
?get@BreakOnAllocationId@Heap@Details@Platform@@SAHXZ
?get@BreakOnFreeId@Heap@Details@Platform@@SAHXZ
?get@CurrentAllocationId@Heap@Details@Platform@@SAHXZ
?get@Empty@Rect@Foundation@Windows@@SA?AV234@XZ
?get@Empty@Size@Foundation@Windows@@SA?AV234@XZ
?get@FullName@Type@Platform@@QE$AAAPE$AAVString@3@XZ
?get@HasInverse@Matrix3D@Media3D@Media@Xaml@UI@Windows@@QEAA_NXZ
?get@Message@Exception@Platform@@QE$AAAPE$AAVString@3@XZ
?get@ObjectCount@Heap@Details@Platform@@SAHXZ
?get@Right@Rect@Foundation@Windows@@QEAAMXZ
?get@TrackingLevel@Heap@Details@Platform@@SA?AW4HeapAllocationTrackingLevel@34@XZ
?set@BreakOnAllocationId@Heap@Details@Platform@@SAXH@Z
?set@BreakOnFreeId@Heap@Details@Platform@@SAXH@Z
?set@TrackingLevel@Heap@Details@Platform@@SAXW4HeapAllocationTrackingLevel@34@@Z

Sections

.text
Size: 174KB - Virtual size: 174KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 145KB - Virtual size: 145KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
VCRUNTIME140_APP.DLL
.dll windows:6 windows x64 arch:x64

c33ed74d88f3c03ce8dce4ab589dd28e

Code Sign

33:00:00:00:d3:8b:9b:c4:ce:d8:ab:21:3c:00:00:00:00:00:d3
Certificate

Issuer

CN=Microsoft Windows Phone Production PCA 2012,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

12/09/2017, 18:57

Not After

12/09/2018, 18:57

Subject

CN=Windows Phone,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

33:00:00:00:0b:fc:f9:8e:58:4c:15:50:bf:00:00:00:00:00:0b
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

24/07/2012, 22:23

Not After

24/07/2027, 22:33

Subject

CN=Microsoft Windows Phone Production PCA 2012,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

5c:50:eb:90:0b:d1:8b:20:5c:13:8b:76:72:be:d9:2c:7b:14:63:66:3f:4c:0f:59:66:fa:56:c0:f3:20:19:0b
Signer

Actual PE Digest

5c:50:eb:90:0b:d1:8b:20:5c:13:8b:76:72:be:d9:2c:7b:14:63:66:3f:4c:0f:59:66:fa:56:c0:f3:20:19:0b

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_APPCONTAINER
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

vcruntime140_app.amd64.pdb

Imports

api-ms-win-crt-runtime-l1-1-0

abort
terminate

api-ms-win-crt-string-l1-1-0

strcpy_s

api-ms-win-crt-heap-l1-1-0

_malloc_base
_free_base
malloc
free
_calloc_base

api-ms-win-crt-stdio-l1-1-0

__stdio_common_vsprintf_s

api-ms-win-crt-convert-l1-1-0

atol

api-ms-win-core-rtlsupport-l1-2-0

RtlLookupFunctionEntry
RtlPcToFileHeader
RtlUnwindEx

api-ms-win-core-util-l1-1-0

EncodePointer

api-ms-win-core-errorhandling-l1-1-1

SetLastError
RaiseException
GetLastError

api-ms-win-core-interlocked-l1-2-0

InterlockedFlushSList
InterlockedPushEntrySList

api-ms-win-core-synch-l1-2-0

LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSectionEx

api-ms-win-core-fibers-l1-1-1

FlsGetValue
FlsSetValue
FlsFree
FlsAlloc

api-ms-win-core-profile-l1-1-0

QueryPerformanceCounter

api-ms-win-core-processthreads-l1-1-2

GetCurrentProcessId
GetCurrentThreadId

api-ms-win-core-sysinfo-l1-2-1

GetSystemTimeAsFileTime

Exports

Exports

_CreateFrameInfo
_CxxThrowException
_FindAndUnlinkFrame
_IsExceptionObjectToBeDestroyed
_SetWinRTOutOfMemoryExceptionCallback
__AdjustPointer
__BuildCatchObject
__BuildCatchObjectHelper
__C_specific_handler
__C_specific_handler_noexcept
__CxxDetectRethrow
__CxxExceptionFilter
__CxxFrameHandler
__CxxFrameHandler2
__CxxFrameHandler3
__CxxQueryExceptionSize
__CxxRegisterExceptionObject
__CxxUnregisterExceptionObject
__DestructExceptionObject
__FrameUnwindFilter
__GetPlatformExceptionInfo
__NLG_Dispatch2
__NLG_Return2
__RTCastToVoid
__RTDynamicCast
__RTtypeid
__TypeMatch
__current_exception
__current_exception_context
__intrinsic_setjmp
__intrinsic_setjmpex
__processing_throw
__report_gsfailure
__std_exception_copy
__std_exception_destroy
__std_terminate
__std_type_info_compare
__std_type_info_destroy_list
__std_type_info_hash
__std_type_info_name
__telemetry_main_invoke_trigger
__telemetry_main_return_trigger
__unDName
__unDNameEx
__uncaught_exception
__uncaught_exceptions
__vcrt_GetModuleFileNameW
__vcrt_GetModuleHandleW
__vcrt_InitializeCriticalSectionEx
__vcrt_LoadLibraryExW
_get_purecall_handler
_get_unexpected
_is_exception_typeof
_local_unwind
_purecall
_set_purecall_handler
_set_se_translator
longjmp
memchr
memcmp
memcpy
memmove
memset
set_unexpected
strchr
strrchr
strstr
unexpected
wcschr
wcsrchr
wcsstr

Sections

.text
Size: 49KB - Virtual size: 49KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 364B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
VISSHE.DLL
.dll windows:6 windows x64 arch:x64

fc7de67444897d113bca03e0634e85c7

Code Sign

33:00:00:05:56:c9:20:2b:1f:74:32:5d:2d:00:00:00:00:05:56
Certificate

Issuer

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

19/10/2023, 19:51

Not After

16/10/2024, 19:51

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0c:52:4c:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

06/07/2010, 20:40

Not After

06/07/2025, 20:50

Subject

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

33:00:00:03:a4:cb:e3:56:b8:cb:7f:e4:27:00:00:00:00:03:a4
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

19/10/2023, 19:51

Not After

16/10/2024, 19:51

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08/07/2011, 20:59

Not After

08/07/2026, 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

74:1f:50:4b:fc:a9:a3:02:24:b2:9e:3b:d9:0a:c1:0d:76:d8:c5:7f:76:6d:a6:0f:f8:2a:70:30:6e:b2:98:71
Signer

Actual PE Digest

74:1f:50:4b:fc:a9:a3:02:24:b2:9e:3b:d9:0a:c1:0d:76:d8:c5:7f:76:6d:a6:0f:f8:2a:70:30:6e:b2:98:71

Digest Algorithm

sha256

PE Digest Matches

true

74:1f:50:4b:fc:a9:a3:02:24:b2:9e:3b:d9:0a:c1:0d:76:d8:c5:7f:76:6d:a6:0f:f8:2a:70:30:6e:b2:98:71
Signer

Actual PE Digest

74:1f:50:4b:fc:a9:a3:02:24:b2:9e:3b:d9:0a:c1:0d:76:d8:c5:7f:76:6d:a6:0f:f8:2a:70:30:6e:b2:98:71

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

d:\dbs\el\omr\target\x64\ship\visio\x-none\visshe.pdb

Imports

kernel32

LoadResource
SizeofResource
FindResourceW
lstrcmpiW
HeapFree
HeapAlloc
GetProcessHeap
GetCurrentThreadId
LoadLibraryExA
VirtualQuery
VirtualProtect
DisableThreadLibraryCalls
InitializeSListHead
GetSystemTimeAsFileTime
GetCurrentProcessId
QueryPerformanceCounter
IsProcessorFeaturePresent
TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
RtlVirtualUnwind
RtlLookupFunctionEntry
LeaveCriticalSection
EnterCriticalSection
RaiseException
EncodePointer
GetSystemDefaultLangID
GetUserDefaultLangID
GetUserDefaultUILanguage
GetSystemDefaultUILanguage
LocaleNameToLCID
GetACP
MultiByteToWideChar
CompareStringW
LoadLibraryExW
GetProcAddress
GetModuleHandleW
FreeLibrary
FindNextFileW
FindFirstFileW
FindClose
GetSystemDefaultLCID
GlobalFree
GlobalLock
GlobalUnlock
GlobalAlloc
GetFileAttributesW
QueryActCtxW
FindActCtxSectionStringW
DeactivateActCtx
ActivateActCtx
CreateActCtxW
LoadLibraryW
GetModuleHandleExW
GetModuleFileNameW
OutputDebugStringA
DeleteCriticalSection
InitializeCriticalSectionEx
SetLastError
GetLastError
DecodePointer
RtlCaptureContext
SleepConditionVariableSRW
WakeAllConditionVariable
AcquireSRWLockExclusive
ReleaseSRWLockExclusive
VirtualFree
VirtualAlloc
GetSystemInfo
lstrcmpW
OutputDebugStringW
IsDebuggerPresent

oleaut32

SysStringLen
VarUI4FromStr
SysAllocStringLen
SysFreeString
SysAllocString

ole32

CreateStreamOnHGlobal
PropVariantClear
StgOpenStorage
StgIsStorageFile
CoTaskMemAlloc
CoTaskMemFree
CoTaskMemRealloc
CoCreateInstance

advapi32

RegCloseKey
RegGetValueW
RegCreateKeyExW
RegDeleteKeyW
RegDeleteValueW
RegEnumKeyExW
RegQueryInfoKeyW
RegSetValueExW
RegQueryValueExW
ReportEventW
RegisterEventSourceW
DeregisterEventSource
RegOpenKeyExW

gdi32

PlayMetaFile
GetPaletteEntries
GetDeviceCaps
DeleteMetaFile
SelectPalette
CreateCompatibleDC
GetStockObject
DeleteObject
SelectObject
SetMapMode
SetMetaFileBitsEx
DeleteEnhMetaFile
GetEnhMetaFileHeader
PlayEnhMetaFile
CreateDIBSection
SetViewportExtEx
SetViewportOrgEx
SetWindowExtEx
SetWindowOrgEx
DeleteDC
SetEnhMetaFileBits

vcruntime140

__std_type_info_destroy_list
__current_exception_context
__current_exception
__std_terminate
_purecall
memset
memmove
_CxxThrowException
__C_specific_handler
memcpy
__std_exception_copy
__std_exception_destroy
wcsstr

vcruntime140_1

__CxxFrameHandler4

msvcp140

?_Xlength_error@std@@YAXPEBD@Z
?_Xbad_alloc@std@@YAXXZ
?_Xout_of_range@std@@YAXPEBD@Z
?_Xbad_function_call@std@@YAXXZ

api-ms-win-crt-heap-l1-1-0

_callnewh
free
malloc
_recalloc

api-ms-win-crt-runtime-l1-1-0

_invalid_parameter_noinfo
_initialize_onexit_table
_cexit
_initialize_narrow_environment
_configure_narrow_argv
_seh_filter_dll
terminate
_initterm_e
_initterm
_crt_atexit
_execute_onexit_table
_invalid_parameter_noinfo_noreturn
_register_onexit_function
_errno

api-ms-win-crt-string-l1-1-0

wcsncmp
wcsncpy_s

api-ms-win-crt-convert-l1-1-0

wcstol
_wtoi

api-ms-win-crt-stdio-l1-1-0

__stdio_common_vswprintf_s
__stdio_common_vsnwprintf_s

api-ms-win-crt-math-l1-1-0

ceilf

Exports

Exports

DllCanUnloadNow
DllGetClassObject

Sections

.text
Size: 74KB - Virtual size: 74KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 175KB - Virtual size: 175KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.didat
Size: 512B - Virtual size: 136B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
VVIEWDWG.DLL
.dll windows:6 windows x64 arch:x64

b2b9e5dc460569a5dc5ff5bd01154470

Code Sign

33:00:00:05:57:cf:90:dd:c7:d1:c0:88:8c:00:00:00:00:05:57
Certificate

Issuer

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

19/10/2023, 19:51

Not After

16/10/2024, 19:51

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0c:52:4c:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

06/07/2010, 20:40

Not After

06/07/2025, 20:50

Subject

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

33:00:00:03:a5:41:11:e8:f0:7f:be:0b:75:00:00:00:00:03:a5
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

19/10/2023, 19:51

Not After

16/10/2024, 19:51

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08/07/2011, 20:59

Not After

08/07/2026, 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

15:e4:54:7d:8e:da:63:91:4d:f4:1f:25:bf:da:8b:68:b5:65:05:1a:96:7d:ba:0d:ee:25:f0:31:df:dc:e6:3b
Signer

Actual PE Digest

15:e4:54:7d:8e:da:63:91:4d:f4:1f:25:bf:da:8b:68:b5:65:05:1a:96:7d:ba:0d:ee:25:f0:31:df:dc:e6:3b

Digest Algorithm

sha256

PE Digest Matches

true

15:e4:54:7d:8e:da:63:91:4d:f4:1f:25:bf:da:8b:68:b5:65:05:1a:96:7d:ba:0d:ee:25:f0:31:df:dc:e6:3b
Signer

Actual PE Digest

15:e4:54:7d:8e:da:63:91:4d:f4:1f:25:bf:da:8b:68:b5:65:05:1a:96:7d:ba:0d:ee:25:f0:31:df:dc:e6:3b

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

d:\dbs\el\omr\target\x64\ship\visiomisc\x-none\vviewdwg.pdb

Imports

mfc140u

ord1501
ord1504
ord2340
ord6505
ord12030
ord14225
ord324
ord14278
ord3143
ord4696
ord1665
ord1669
ord1668
ord3756
ord4656
ord6320
ord2475
ord3828
ord6313
ord13674
ord2270
ord2346
ord296
ord1033
ord2344
ord1039
ord1492
ord265
ord8900
ord9941
ord7922
ord5227
ord7450
ord7461
ord7460
ord5062
ord5229
ord5083
ord5555
ord5339
ord9041
ord5552
ord5363
ord5080
ord2360
ord6614
ord983
ord6122
ord14289
ord6123
ord14290
ord6121
ord14288
ord7719
ord12212
ord14088
ord11665
ord11664
ord2011
ord7668
ord12625
ord13949
ord3949
ord4011
ord9089
ord14216
ord7650
ord14210
ord12223
ord12222
ord2439
ord5183
ord8023
ord7716
ord4445
ord12544
ord12606
ord10124
ord11929
ord8084
ord1450
ord7393
ord8167
ord11901
ord11933
ord7920
ord2350
ord2266
ord2161
ord1489
ord11921
ord2336
ord2234
ord473
ord266
ord2371
ord2338
ord2372
ord2369
ord2212
ord2327
ord5706
ord2171
ord3731
ord1040
ord12240
ord323
ord12087
ord4946
ord8162
ord12631
ord12546
ord7813
ord2473
ord3825
ord438
ord1086
ord2909
ord290
ord3728
ord286
ord280
ord5674
ord1641
ord5709
ord2921
ord285
ord1491

kernel32

RtlLookupFunctionEntry
RtlCaptureContext
SleepConditionVariableSRW
WakeAllConditionVariable
AcquireSRWLockExclusive
ReleaseSRWLockExclusive
lstrcmpiA
GetModuleFileNameA
GetFileType
CreateFileW
CloseHandle
WriteFile
SetFilePointer
ReadFile
GetFileTime
GetFileSize
CreateActCtxW
ActivateActCtx
HeapFree
SetLastError
GetLocalTime
OutputDebugStringA
GetModuleFileNameW
FindActCtxSectionStringW
InitializeCriticalSectionEx
DeactivateActCtx
QueryActCtxW
GetLastError
RtlVirtualUnwind
LoadLibraryW
HeapAlloc
DecodePointer
LocalFree
DeleteCriticalSection
GetProcessHeap
LocalLock
LocalAlloc
GetTimeFormatW
GetDateFormatW
LocalUnlock
MultiByteToWideChar
WideCharToMultiByte
EnterCriticalSection
LeaveCriticalSection
GetCPInfo
GetACP
Sleep
SizeofResource
lstrlenW
LoadResource
FindResourceW
lstrcmpiW
GetCurrentThreadId
FileTimeToSystemTime
GlobalAlloc
RaiseException
FileTimeToLocalFileTime
GlobalLock
GlobalUnlock
MulDiv
EncodePointer
GetProcAddress
GetModuleHandleW
FreeLibrary
LoadLibraryExW
LoadLibraryExA
IsDebuggerPresent
OutputDebugStringW
InitializeSListHead
InterlockedPopEntrySList
InterlockedPushEntrySList
GetCurrentProcess
FlushInstructionCache
VirtualAlloc
VirtualFree
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
InitOnceComplete
InitOnceBeginInitialize
GetSystemInfo
VirtualProtect
VirtualQuery
GetFileAttributesW
GetStdHandle
GetWindowsDirectoryW
WriteConsoleW
FindClose
SystemTimeToFileTime
CompareStringW
IsValidCodePage
GetCurrentDirectoryA
SearchPathA
GetModuleHandleA
FindFirstFileW
SetErrorMode
FlushFileBuffers
IsDBCSLeadByteEx
GetLocaleInfoA
GetVersionExW
SetEndOfFile
CreateFileMappingW
MapViewOfFile
UnmapViewOfFile
InitializeCriticalSection
LocalFileTimeToFileTime
GetModuleHandleExW
GetSystemDefaultLangID

oleaut32

VariantCopy
LoadTypeLi
LoadRegTypeLi
VarBstrCmp
GetActiveObject
VariantTimeToSystemTime
SystemTimeToVariantTime
VarUI4FromStr
VarBstrCat
SysStringLen
SysAllocStringLen
VariantInit
SysFreeString
SysStringByteLen
VariantClear
SysAllocString
SysAllocStringByteLen
VariantChangeType

ole32

StringFromCLSID
CoTaskMemFree
OleIsRunning
CoTaskMemAlloc
CoGetMalloc
ProgIDFromCLSID
OleRegGetUserType
OleCreateDefaultHandler
CreateOleAdviseHolder
CreateDataAdviseHolder
OleRegGetMiscStatus
OleRegEnumVerbs
CoTaskMemRealloc
CoCreateInstance
CoCreateGuid

advapi32

RegQueryValueExW
RegCloseKey
RegDeleteValueW
RegSetValueExW
RegEnumKeyExW
GetUserNameW
RegEnumValueW
RegGetValueW
RegCreateKeyExW
RegDeleteKeyW
RegQueryInfoKeyW
ReportEventW
RegisterEventSourceW
DeregisterEventSource
RegOpenKeyExW

gdi32

CreateDCW
GetCharacterPlacementW
GetFontLanguageInfo
GetFontData
EnumFontFamiliesExW
CreateFontIndirectW
GetNearestPaletteIndex
CreatePalette
CloseMetaFile
SetMapMode
DeleteObject
LPtoDP
RestoreDC
SelectClipRgn
DeleteMetaFile
CreateMetaFileW
CreateCompatibleDC
DeleteDC
TextOutW
ExtCreatePen
FillPath
EndPath
BeginPath
SetTextAlign
SetTextColor
SetROP2
SetPolyFillMode
SetPixel
SetBkMode
GetTextExtentPoint32W
GetBkColor
GetROP2
CreatePen
CreateHatchBrush
GetTextMetricsW
GetTextExtentPoint32A
GetGlyphOutlineW
CreateFontIndirectA
CreateSolidBrush
SetViewportOrgEx
GetDeviceCaps
SetViewportExtEx
SetWindowExtEx
CreateRectRgnIndirect
GetStockObject
SetWindowOrgEx
SelectObject
SaveDC
MoveToEx
Polygon
LineTo
Polyline

vcruntime140_1

__CxxFrameHandler4

vcruntime140

__std_exception_copy
__std_terminate
_purecall
__std_exception_destroy
__C_specific_handler
strstr
wcschr
wcsrchr
wcsstr
memmove
memset
memcpy
strrchr
memcmp
strchr
__RTDynamicCast
__current_exception
__current_exception_context
__std_type_info_destroy_list
_CxxThrowException

msvcp140

?__ExceptionPtrDestroy@@YAXPEAX@Z
_Mtx_lock
?__ExceptionPtrCurrentException@@YAXPEAX@Z
?__ExceptionPtrRethrow@@YAXPEBX@Z
_Mtx_init_in_situ
_Cnd_wait
_Mtx_unlock
_Cnd_destroy_in_situ
_Cnd_broadcast
_Query_perf_frequency
_Thrd_sleep
_Query_perf_counter
_Xtime_get_ticks
?eof@ios_base@std@@QEBA_NXZ
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAA@XZ
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAA@XZ
?eback@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ
?gptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ
?pbase@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ
?pptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ
?egptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ
?gbump@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXH@Z
?setg@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXPEAD00@Z
?epptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ
_Mtx_destroy_in_situ
?setp@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXPEAD0@Z
?setp@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXPEAD00@Z
?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAPEADXZ
?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXXZ
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UEAA@XZ
?clear@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IEAA@XZ
??0?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
??1?$basic_istream@DU?$char_traits@D@std@@@std@@UEAA@XZ
?get@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@PEAD_JD@Z
?_Throw_Cpp_error@std@@YAXH@Z
?ignore@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@_JH@Z
?read@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@PEAD_J@Z
?gcount@?$basic_istream@DU?$char_traits@D@std@@@std@@QEBA_JXZ
?seekg@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@V?$fpos@U_Mbstatet@@@2@@Z
?tellg@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA?AV?$fpos@U_Mbstatet@@@2@XZ
?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAXAEBVlocale@2@@Z
?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ
?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAPEAV12@PEAD_J@Z
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEBD_J@Z
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEAD_J@Z
?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JXZ
?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ
?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ
?pbump@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXH@Z
?_Xbad_function_call@std@@YAXXZ
?__ExceptionPtrCopy@@YAXPEAXPEBX@Z
_Cnd_init_in_situ
?__ExceptionPtrCreate@@YAXPEAX@Z
??0task_continuation_context@Concurrency@@AEAA@XZ
?_CallInContext@_ContextCallback@details@Concurrency@@QEBAXV?$function@$$A6AXXZ@std@@_N@Z
?_Reset@_ContextCallback@details@Concurrency@@AEAAXXZ
?_Capture@_ContextCallback@details@Concurrency@@AEAAXXZ
?ReportUnhandledError@_ExceptionHolder@details@Concurrency@@AEAAXXZ
?_Release_chore@details@Concurrency@@YAXPEAU_Threadpool_chore@12@@Z
?_LogScheduleTask@_TaskEventLogger@details@Concurrency@@QEAAX_N@Z
?_LogCancelTask@_TaskEventLogger@details@Concurrency@@QEAAXXZ
?_LogTaskCompleted@_TaskEventLogger@details@Concurrency@@QEAAXXZ
?_LogTaskExecutionCompleted@_TaskEventLogger@details@Concurrency@@QEAAXXZ
?_LogWorkItemStarted@_TaskEventLogger@details@Concurrency@@QEAAXXZ
?_LogWorkItemCompleted@_TaskEventLogger@details@Concurrency@@QEAAXXZ
?_Schedule_chore@details@Concurrency@@YAHPEAU_Threadpool_chore@12@@Z
?_ReportUnobservedException@details@Concurrency@@YAXXZ
?GetCurrentThreadId@platform@details@Concurrency@@YAJXZ
?_Xbad_alloc@std@@YAXXZ
?_Xlength_error@std@@YAXPEBD@Z

api-ms-win-crt-heap-l1-1-0

free
realloc
malloc
_recalloc
calloc

api-ms-win-crt-stdio-l1-1-0

__stdio_common_vsnprintf_s
_getcwd
__stdio_common_vswscanf
__acrt_iob_func
__stdio_common_vfprintf
__stdio_common_vsprintf_s
fseek
_wfopen
fwrite
fread
__stdio_common_vsscanf
__stdio_common_vsnwprintf_s
fopen
__stdio_common_vswprintf_s
fclose
__stdio_common_vsprintf
fgetc
fgets

api-ms-win-crt-filesystem-l1-1-0

_wstat64i32
_access
_waccess
_wsplitpath_s
_wsplitpath

api-ms-win-crt-string-l1-1-0

isxdigit
strtok
wcsnlen
_strupr
wcsncmp
strcat_s
wcscpy_s
isdigit
strcpy_s
isalnum
isalpha
iswlower
wcscmp
wcsncpy_s
strncmp
toupper
isspace
_wcsnicmp
strncpy_s
_stricmp
strncat_s
strcmp
iswdigit
_strnicmp
wcscat_s
wcsncat_s
iswalnum
wcspbrk
_wcsicmp
wcscspn
wcstok
strnlen

api-ms-win-crt-runtime-l1-1-0

_invalid_parameter_noinfo_noreturn
_initterm
_initterm_e
terminate
_errno
_invalid_parameter_noinfo
_initialize_narrow_environment
__fpe_flt_rounds
abort
_seh_filter_dll
_cexit
_crt_atexit
_execute_onexit_table
_register_onexit_function
_initialize_onexit_table
exit
_configure_narrow_argv

api-ms-win-crt-convert-l1-1-0

strtod
strtol
atof
wcstol
atoi
atol
strtoul

api-ms-win-crt-time-l1-1-0

_ctime64
_time64
_mktime64
wcsftime
_ftime64
_localtime64_s

api-ms-win-crt-utility-l1-1-0

srand
qsort
bsearch
rand

api-ms-win-crt-environment-l1-1-0

getenv
_wgetenv

api-ms-win-crt-math-l1-1-0

acos
floor
tan
_logb
ldexp
frexp
log10
sqrt
sin
cos
atan2
pow
modf
hypot
atan
ceilf
fmod
ceil
asin

api-ms-win-crt-multibyte-l1-1-0

_mbsrchr

api-ms-win-crt-locale-l1-1-0

_wsetlocale
__initialize_lconv_for_unsigned_char

Exports

Exports

DllCanUnloadNow
DllGetClassObject

Sections

.text
Size: 5.0MB - Virtual size: 5.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2.2MB - Virtual size: 2.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 204KB - Virtual size: 211KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 210KB - Virtual size: 210KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.didat
Size: 512B - Virtual size: 424B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 192KB - Virtual size: 191KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
VVIEWER.DLL
.dll regsvr32 windows:6 windows x64 arch:x64

ad1a89589b19ba957971868e08d426ca

Code Sign

33:00:00:05:57:cf:90:dd:c7:d1:c0:88:8c:00:00:00:00:05:57
Certificate

Issuer

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

19/10/2023, 19:51

Not After

16/10/2024, 19:51

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0c:52:4c:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

06/07/2010, 20:40

Not After

06/07/2025, 20:50

Subject

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

33:00:00:03:a5:41:11:e8:f0:7f:be:0b:75:00:00:00:00:03:a5
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

19/10/2023, 19:51

Not After

16/10/2024, 19:51

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08/07/2011, 20:59

Not After

08/07/2026, 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

f2:80:94:7c:0c:a8:f8:61:32:da:11:a7:ab:98:a5:52:b4:12:79:cc:19:b7:f8:82:05:7b:71:6f:02:ad:e8:63
Signer

Actual PE Digest

f2:80:94:7c:0c:a8:f8:61:32:da:11:a7:ab:98:a5:52:b4:12:79:cc:19:b7:f8:82:05:7b:71:6f:02:ad:e8:63

Digest Algorithm

sha256

PE Digest Matches

true

f2:80:94:7c:0c:a8:f8:61:32:da:11:a7:ab:98:a5:52:b4:12:79:cc:19:b7:f8:82:05:7b:71:6f:02:ad:e8:63
Signer

Actual PE Digest

f2:80:94:7c:0c:a8:f8:61:32:da:11:a7:ab:98:a5:52:b4:12:79:cc:19:b7:f8:82:05:7b:71:6f:02:ad:e8:63

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

d:\dbs\el\omr\target\x64\ship\visiomisc\x-none\vviewer.pdb

Imports

advapi32

GetUserNameW
RegOpenKeyExW
RegQueryValueExW
RegCloseKey
RegDeleteKeyW
RegQueryInfoKeyW
RegEnumKeyExW
RegSetValueExW
RegCreateKeyExW
RegDeleteValueW
ReportEventW
RegisterEventSourceW
DeregisterEventSource
RegGetValueW
GetTokenInformation
IsValidSid
GetSidSubAuthorityCount
GetSidSubAuthority
RegEnumValueW
RegDeleteTreeW
RegEnumValueA
RegDeleteValueA
EventUnregister
EventRegister
EventSetInformation
EventWriteTransfer
RegNotifyChangeKeyValue
RegGetValueA
OpenProcessToken
ConvertSidToStringSidW
CredFree
CredEnumerateW
CredDeleteW
CredWriteW
RegOpenKeyExA
CreateWellKnownSid
RevertToSelf
OpenThreadToken
GetLengthSid
CopySid
InitializeAcl
AddAccessAllowedAce
AllocateAndInitializeSid
FreeSid
InitializeSecurityDescriptor
SetSecurityDescriptorDacl
GetSecurityDescriptorDacl
ConvertStringSecurityDescriptorToSecurityDescriptorW
ConvertSidToStringSidA
EqualSid
GetNamedSecurityInfoW
SetEntriesInAclW
SetNamedSecurityInfoW
GetAclInformation
GetAce

d2d1

ord1

d3d10_1

D3D10CreateDevice1

dwrite

DWriteCreateFactory

dxgi

CreateDXGIFactory1

gdi32

GetWinMetaFileBits
SetWinMetaFileBits
AddFontResourceExW
CopyEnhMetaFileW
CreateEnhMetaFileA
CreateSolidBrush
CreatePen
SelectObject
Rectangle
DeleteObject
SetTextColor
SetBkColor
GetDeviceCaps
SetBkMode
Polygon
GetTextExtentPoint32W
DeleteDC
GetObjectW
GetStockObject
BitBlt
CreateCompatibleBitmap
CreateCompatibleDC
CreateFontIndirectW
GetBkColor
ExtTextOutW
SetViewportOrgEx
CreateBrushIndirect
MoveToEx
LineTo
IntersectClipRect
GetTextMetricsW
CreateICW
CreateRectRgn
FillRgn
GetClipBox
GetDCOrgEx
CreatePalette
SelectPalette
RealizePalette
GetObjectType
SetROP2
DeleteMetaFile
CloseMetaFile
RestoreDC
SetWindowOrgEx
SetMapMode
SaveDC
LPtoDP
CreateDCW
SetWindowExtEx
CreateMetaFileW
CreateRectRgnIndirect
GetFontData
GetTextFaceW
GetTextCharsetInfo
GetCurrentObject
EnumFontFamiliesExW
GetGlyphIndicesW
GetOutlineTextMetricsW
GetTextAlign
GetCharWidthW
GetTextExtentPointW
CreateBitmap
CreateEllipticRgn
CreatePenIndirect
ExtCreatePen
CreateHalftonePalette
ExtCreateRegion
CreatePatternBrush
CreatePolyPolygonRgn
CreatePolygonRgn
CreateDIBPatternBrushPt
CreateRoundRectRgn
CreateEllipticRgnIndirect
CreateHatchBrush
CreateColorSpaceW
CreateDIBitmap
CreateBitmapIndirect
CreateDIBSection
ResetDCW
DeleteColorSpace
SetAbortProc
CombineRgn
SetColorSpace
SetWorldTransform
UnrealizeObject
GetROP2
EndPage
StartDocW
GetRgnBox
SetTextCharacterExtra
PtVisible
SetDCPenColor
RoundRect
GetMapMode
SetTextAlign
GdiComment
Escape
GetCharWidthI
GetRandomRgn
ExtSelectClipRgn
GetBrushOrgEx
GetCharABCWidthsFloatW
InvertRgn
GetSystemPaletteUse
EnumObjects
GetGlyphOutlineW
PtInRegion
SetStretchBltMode
Ellipse
ResizePalette
ExcludeClipRect
RectInRegion
SetDCBrushColor
GetTextColor
SetDIBits
GetViewportExtEx
GetTextExtentExPointI
GetCharABCWidthsW
SetColorAdjustment
GetTextExtentPointI
SetTextJustification
SelectClipRgn
SetDIBitsToDevice
SetPaletteEntries
DrawEscape
GetCharABCWidthsI
GetMetaRgn
GetRegionData
SetMapperFlags
PolyPolygon
ExtEscape
TextOutW
GetBoundsRect
OffsetRgn
GetPixel
GetSystemPaletteEntries
PolyTextOutW
ColorCorrectPalette
SetPolyFillMode
EqualRgn
SetBitmapDimensionEx
CheckColorsInGamut
GetWindowOrgEx
GetDIBits
MaskBlt
GetTextExtentExPointA
GetDeviceGammaRamp
ExtFloodFill
AnimatePalette
SelectClipPath
GetDCBrushColor
OffsetClipRgn
GetNearestPaletteIndex
SetICMProfileW
GetFontLanguageInfo
GetTextCharset
SetLayout
SetSystemPaletteUse
UpdateColors
StretchDIBits
GetCharWidth32W
PaintRgn
Chord
PlgBlt
GetPaletteEntries
SetICMMode
EndDoc
GetStretchBltMode
GetBitmapDimensionEx
GetCharWidthFloatW
GetColorAdjustment
EnumICMProfilesW
SetMetaRgn
GetCharacterPlacementW
AbortDoc
GetClipRgn
GetTextCharacterExtra
FrameRgn
StretchBlt
GetLayout
PatBlt
SetPixel
GetAspectRatioFilterEx
GetTextExtentExPointW
SetBoundsRect
RectVisible
GetLogColorSpaceW
GetBkMode
SetDIBColorTable
GetKerningPairsW
GetDIBColorTable
GetDCPenColor
GetTextExtentPoint32A
SetDeviceGammaRamp
StartPage
GetWindowExtEx
Pie
ExtTextOutA
GetFontUnicodeRanges
GetICMProfileW
ColorMatchToTarget
GetPolyFillMode
SetRectRgn
SetBrushOrgEx
CancelDC
GetNearestColor
DeleteEnhMetaFile
GetViewportOrgEx
GetWorldTransform
GetMetaFileBitsEx
GetEnhMetaFileBits
SetGraphicsMode
ModifyWorldTransform
OffsetWindowOrgEx
SetMetaFileBitsEx
EnumMetaFile
SetEnhMetaFileBits
CloseEnhMetaFile
CreateEnhMetaFileW
GetEnhMetaFileHeader
RemoveFontResourceExW

kernel32

SetLastError
GetModuleHandleExW
OutputDebugStringA
GetModuleFileNameW
FindActCtxSectionStringW
InitializeCriticalSectionEx
DeactivateActCtx
QueryActCtxW
GetLastError
LoadLibraryW
DecodePointer
DeleteCriticalSection
FreeLibrary
LoadLibraryExW
GetProcAddress
GetModuleHandleW
SizeofResource
LockResource
LoadResource
FindResourceW
MulDiv
GetCurrentThreadId
EnterCriticalSection
LeaveCriticalSection
MultiByteToWideChar
GlobalAlloc
GlobalLock
GlobalUnlock
RaiseException
lstrcmpW
HeapSize
HeapReAlloc
HeapFree
HeapAlloc
GetProcessHeap
HeapDestroy
GetTickCount64
FindResourceExW
GlobalFree
GlobalHandle
GetVersionExA
DeleteFileW
WideCharToMultiByte
lstrcmpiW
FormatMessageW
LocaleNameToLCID
GetUserDefaultUILanguage
DisableThreadLibraryCalls
EncodePointer
CloseHandle
WaitForSingleObjectEx
GetUserDefaultLocaleName
IsValidCodePage
GetSystemTime
SystemTimeToFileTime
FileTimeToSystemTime
GetStringTypeExW
GetCPInfoExW
OpenProcess
GetCurrentProcess
GetProcessTimes
GetSystemTimeAsFileTime
TerminateProcess
GetModuleFileNameA
GetShortPathNameA
K32GetModuleFileNameExW
VerSetConditionMask
VerifyVersionInfoW
IsWow64Process
GetCurrentProcessId
QueryDepthSList
CreateEventExW
TryEnterCriticalSection
InitializeSListHead
InterlockedPushEntrySList
InterlockedPopEntrySList
RtlCaptureStackBackTrace
GetCalendarInfoEx
GetLocaleInfoEx
GetLocalTime
EnumCalendarInfoExEx
CompareStringEx
GetDateFormatEx
EnumDateFormatsExEx
EnumTimeFormatsEx
EnumSystemLocalesEx
LCIDToLocaleName
GetSystemDefaultLocaleName
GetThreadUILanguage
GlobalMemoryStatusEx
GetVersionExW
InitializeSRWLock
AcquireSRWLockExclusive
ReleaseSRWLockExclusive
AcquireSRWLockShared
ReleaseSRWLockShared
CreateFileW
DeviceIoControl
FormatMessageA
LocalFree
GetSystemDirectoryW
GetFileAttributesW
LoadLibraryExA
ReadFile
UnmapViewOfFile
ResolveLocaleName
GetLocaleInfoW
GetUserPreferredUILanguages
GetACP
IsValidLocale
SystemTimeToTzSpecificLocalTime
GetFileSizeEx
WriteFile
InitializeCriticalSection
FindClose
FindFirstFileExW
CreateActCtxW
ResetEvent
SetEvent
GetFileAttributesExW
OpenEventW
ReleaseMutex
CreateMutexExW
OpenMutexW
CreateSemaphoreExW
ReleaseSemaphore
CreateEventW
WaitForSingleObject
CreateThread
WaitForMultipleObjectsEx
WakeConditionVariable
WakeAllConditionVariable
SleepConditionVariableSRW
CloseThreadpoolTimer
SetThreadpoolTimer
WaitForThreadpoolTimerCallbacks
CreateThreadpoolTimer
CloseThreadpoolWait
SetThreadpoolWait
WaitForThreadpoolWaitCallbacks
CreateThreadpoolWait
CreateThreadpoolWork
SubmitThreadpoolWork
QueryPerformanceCounter
QueryPerformanceFrequency
GetFileTime
SetEndOfFile
SetFilePointerEx
GetTempPathW
SetFileTime
GetOverlappedResult
FlushFileBuffers
CancelIoEx
CreateDirectoryW
SetFileAttributesW
GetFileType
SetFileInformationByHandle
GetTempFileNameW
GetProcessAffinityMask
CreateWaitableTimerW
SetWaitableTimerEx
CancelWaitableTimer
GetEnvironmentVariableW
GetLongPathNameW
GetFinalPathNameByHandleW
GetTickCount
InitOnceExecuteOnce
Sleep
FindFirstFileW
K32GetModuleInformation
GetCurrentThread
K32EnumProcessModulesEx
RtlLookupFunctionEntry
RtlVirtualUnwind
SuspendThread
ResumeThread
OpenThread
GetThreadContext
GetModuleHandleA
VirtualProtect
VirtualFree
VirtualAlloc
FlushInstructionCache
SetThreadContext
VirtualQuery
TryAcquireSRWLockExclusive
SwitchToThread
MapViewOfFile
WerRegisterMemoryBlock
WerUnregisterMemoryBlock
QueryFullProcessImageNameW
CreateIoCompletionPort
PostQueuedCompletionStatus
GetThreadIOPendingFlag
GetQueuedCompletionStatus
FlsFree
FlsSetValue
FlsGetValue
FlsAlloc
IsDebuggerPresent
CreateMemoryResourceNotification
GetSystemPowerStatus
IsSystemResumeAutomatic
OutputDebugStringW
RtlCaptureContext
OpenEventA
CreateEventA
OpenMutexA
CreateMutexA
OpenSemaphoreA
CreateSemaphoreA
OpenFileMappingA
CreateFileMappingA
LocalAlloc
GetStringTypeW
MoveFileExW
RemoveDirectoryW
TryAcquireSRWLockShared
GetSystemDefaultLangID
TlsAlloc
GetSystemInfo
TlsFree
TlsSetValue
TlsGetValue
ReleaseActCtx
GetCurrentDirectoryW
HeapCreate
IsProcessorFeaturePresent
K32GetProcessMemoryInfo
ActivateActCtx
FindNextFileW
GetUserDefaultLangID
SetCurrentDirectoryW
GetOEMCP
GlobalSize
GetDateFormatW
GetTimeFormatW
GetCurrencyFormatW
LCMapStringW
CompareStringW
GetThreadLocale
UnhandledExceptionFilter
SetUnhandledExceptionFilter
InitOnceBeginInitialize
InitOnceComplete
GetFileInformationByHandleEx

ole32

CoGetTreatAsClass
OleLoad
ReadClassStg
PropVariantCopy
CreateILockBytesOnHGlobal
PropVariantClear
StgOpenStorage
StgOpenStorageOnILockBytes
StgCreateDocfileOnILockBytes
IIDFromString
StringFromCLSID
CoCreateFreeThreadedMarshaler
GetConvertStg
CoCreateGuid
CoCreateInstance
WriteFmtUserTypeStg
WriteClassStg
CoUninitialize
CoInitializeEx
ReadClassStm
FreePropVariantArray
CreateDataCache
OleSaveToStream
WriteClassStm
OleRegEnumVerbs
OleRegGetUserType
CreateOleAdviseHolder
OleRegGetMiscStatus
CreateDataAdviseHolder
CoTaskMemRealloc
ReleaseStgMedium
CoDisconnectObject
RevokeDragDrop
RegisterDragDrop
OleInitialize
OleUninitialize
CLSIDFromString
CLSIDFromProgID
CoGetClassObject
OleLockRunning
StringFromGUID2
CoTaskMemAlloc
CreateStreamOnHGlobal
CoTaskMemFree

oleaut32

SafeArrayGetElement
OleCreatePictureIndirect
SysFreeString
SysAllocString
SysStringLen
SysAllocStringLen
VarBstrCat
LoadRegTypeLi
LoadTypeLi
VariantClear
VariantInit
OleCreateFontIndirect
SysAllocStringByteLen
SystemTimeToVariantTime
VarBstrCmp
SysReAllocStringLen
OleTranslateColor
VarUI4FromStr
RegisterTypeLi
UnRegisterTypeLi
OleCreatePropertyFrame
VariantChangeType
SafeArrayCreateVector
SafeArrayAccessData
SafeArrayUnaccessData
SafeArrayDestroy
VariantTimeToSystemTime
SysStringByteLen
SafeArrayGetUBound
SafeArrayGetDim
SafeArrayGetLBound
VariantChangeTypeEx
SafeArrayCreate

rpcrt4

UuidCreate

winspool.drv

DeviceCapabilitiesW
OpenPrinterW
DocumentPropertiesW
ord203
ClosePrinter

wtsapi32

WTSUnRegisterSessionNotification
WTSRegisterSessionNotification

vcruntime140_1

__CxxFrameHandler4

vcruntime140

__std_type_info_destroy_list
__C_specific_handler_noexcept
memchr
__current_exception_context
__current_exception
memcmp
memcpy
__RTDynamicCast
_CxxThrowException
memmove
memset
strrchr
strchr
__std_type_info_compare
wcschr
__std_terminate
wcsrchr
wcsstr
_purecall
__std_exception_destroy
__std_exception_copy
__C_specific_handler

msvcp140

?_LogTaskCompleted@_TaskEventLogger@details@Concurrency@@QEAAXXZ
?_LogTaskExecutionCompleted@_TaskEventLogger@details@Concurrency@@QEAAXXZ
?__ExceptionPtrAssign@@YAXPEAXPEBX@Z
?_LogCancelTask@_TaskEventLogger@details@Concurrency@@QEAAXXZ
_Cnd_unregister_at_thread_exit
_Thrd_hardware_concurrency
?_LogScheduleTask@_TaskEventLogger@details@Concurrency@@QEAAX_N@Z
?_LogWorkItemCompleted@_TaskEventLogger@details@Concurrency@@QEAAXXZ
?cin@std@@3V?$basic_istream@DU?$char_traits@D@std@@@1@A
??0task_continuation_context@Concurrency@@AEAA@XZ
?_ReportUnobservedException@details@Concurrency@@YAXXZ
?ReportUnhandledError@_ExceptionHolder@details@Concurrency@@AEAAXXZ
?_CallInContext@_ContextCallback@details@Concurrency@@QEBAXV?$function@$$A6AXXZ@std@@_N@Z
?_Reset@_ContextCallback@details@Concurrency@@AEAAXXZ
?_Capture@_ContextCallback@details@Concurrency@@AEAAXXZ
?GetCurrentThreadId@platform@details@Concurrency@@YAJXZ
?_Schedule_chore@details@Concurrency@@YAHPEAU_Threadpool_chore@12@@Z
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@N@Z
?precision@ios_base@std@@QEAA_J_J@Z
?get_new_handler@std@@YAP6AXXZXZ
?_LogWorkItemStarted@_TaskEventLogger@details@Concurrency@@QEAAXXZ
?_Release_chore@details@Concurrency@@YAXPEAU_Threadpool_chore@12@@Z
_Cnd_register_at_thread_exit
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@J@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@P6AAEAV01@AEAV01@@Z@Z
?widen@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBADD@Z
?put@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@D@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@PEBX@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@K@Z
_Thrd_yield
_Mtx_trylock
?tolower@?$ctype@D@std@@QEBAPEBDPEADPEBD@Z
_Strcoll
_Strxfrm
?id@?$collate@D@std@@2V0locale@2@A
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@I@Z
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@_K@Z
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@P6AAEAVios_base@1@AEAV21@@Z@Z
?snextc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QEAAGXZ
?sbumpc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QEAAGXZ
?sgetc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QEAAGXZ
??0?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
?snextc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ
??1?$basic_istream@DU?$char_traits@D@std@@@std@@UEAA@XZ
??Bios_base@std@@QEBA_NXZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@I@Z
?cout@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A
_Cnd_signal
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@_N@Z
?__ExceptionPtrToBool@@YA_NPEBX@Z
_Cnd_wait
?_Winerror_map@std@@YAHH@Z
?widen@?$ctype@_W@std@@QEBA_WD@Z
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@K@Z
??0?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAA@PEAV?$basic_streambuf@_WU?$char_traits@_W@std@@@1@_N@Z
??1?$basic_ostream@_WU?$char_traits@_W@std@@@std@@UEAA@XZ
?put@?$time_put@_WV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@QEBA?AV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@2@V32@AEAVios_base@2@_WPEBUtm@@PEB_W4@Z
?get@?$time_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@QEBA?AV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@2@V32@0AEAVios_base@2@AEAHPEAUtm@@PEB_W4@Z
?_Ipfx@?$basic_istream@_WU?$char_traits@_W@std@@@std@@QEAA_N_N@Z
?_Getcat@?$time_put@_WV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z
?_Getcat@?$time_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z
?id@?$time_put@_WV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@2V0locale@2@A
?id@?$time_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@2V0locale@2@A
?fail@ios_base@std@@QEBA_NXZ
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@H@Z
_Cnd_timedwait
_Mtx_current_owns
_Cnd_broadcast
_Cnd_destroy_in_situ
_Cnd_init_in_situ
?tolower@?$ctype@_W@std@@QEBAPEB_WPEA_WPEB_W@Z
?_Xregex_error@std@@YAXW4error_type@regex_constants@1@@Z
?tolower@?$ctype@_W@std@@QEBA_W_W@Z
?_Getcoll@_Locinfo@std@@QEBA?AU_Collvec@@XZ
_Wcscoll
_Wcsxfrm
?id@?$collate@_W@std@@2V0locale@2@A
?id@?$ctype@_W@std@@2V0locale@2@A
?is@?$ctype@_W@std@@QEBA_NF_W@Z
?_Xlength_error@std@@YAXPEBD@Z
?_Xbad_alloc@std@@YAXXZ
?_Xout_of_range@std@@YAXPEBD@Z
_Mbrtowc
?_Xbad_function_call@std@@YAXXZ
?_Getcvt@_Locinfo@std@@QEBA?AU_Cvtvec@@XZ
??1?$basic_ios@_WU?$char_traits@_W@std@@@std@@UEAA@XZ
??1?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UEAA@XZ
??1?$basic_iostream@_WU?$char_traits@_W@std@@@std@@UEAA@XZ
?sputc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QEAAG_W@Z
?uncaught_exceptions@std@@YAHXZ
?good@ios_base@std@@QEBA_NXZ
?_Unlock@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UEAAXXZ
?_Lock@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UEAAXXZ
?sync@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAAHXZ
?showmanyc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAA_JXZ
?uflow@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAAGXZ
?xsgetn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAA_JPEA_W_J@Z
?xsputn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAA_JPEB_W_J@Z
?setbuf@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAAPEAV12@PEA_W_J@Z
?imbue@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAAXAEBVlocale@2@@Z
?_Osfx@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAXXZ
?flush@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV12@XZ
?setstate@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QEAAXH_N@Z
??0?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEAA@XZ
??0?$basic_ios@_WU?$char_traits@_W@std@@@std@@IEAA@XZ
??0?$basic_iostream@_WU?$char_traits@_W@std@@@std@@QEAA@PEAV?$basic_streambuf@_WU?$char_traits@_W@std@@@1@@Z
?_Incref@facet@locale@std@@UEAAXXZ
??1_Locinfo@std@@QEAA@XZ
??1_Lockit@std@@QEAA@XZ
??0_Locinfo@std@@QEAA@PEBD@Z
??0_Lockit@std@@QEAA@H@Z
?_Gettrue@_Locinfo@std@@QEBAPEBDXZ
?_Getfalse@_Locinfo@std@@QEBAPEBDXZ
?_Getlconv@_Locinfo@std@@QEBAPEBUlconv@@XZ
?_Decref@facet@locale@std@@UEAAPEAV_Facet_base@3@XZ
??1facet@locale@std@@MEAA@XZ
??0facet@locale@std@@IEAA@_K@Z
?_Getgloballocale@locale@std@@CAPEAV_Locimp@12@XZ
?id@?$numpunct@_W@std@@2V0locale@2@A
??Bid@locale@std@@QEAA_KXZ
?_Init@locale@std@@CAPEAV_Locimp@12@_N@Z
_Thrd_id
?_Throw_Cpp_error@std@@YAXH@Z
_Mtx_init_in_situ
_Mtx_destroy_in_situ
_Mtx_lock
_Mtx_unlock
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UEAA@XZ
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAA@XZ
?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAXAEBVlocale@2@@Z
?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ
?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAPEAV12@PEAD_J@Z
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEBD_J@Z
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEAD_J@Z
?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JXZ
?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ
?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ
??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UEAA@XZ
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHD@Z
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAXXZ
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@XZ
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAA_JPEBD_J@Z
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAA@XZ
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IEAA@XZ
??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
?__ExceptionPtrRethrow@@YAXPEBX@Z
?__ExceptionPtrDestroy@@YAXPEAX@Z
?__ExceptionPtrCopy@@YAXPEAXPEBX@Z
?setw@std@@YA?AU?$_Smanip@_J@1@_J@Z
?setf@ios_base@std@@QEAAHH@Z
??1?$basic_iostream@DU?$char_traits@D@std@@@std@@UEAA@XZ
??0?$basic_iostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@P6AAEAVios_base@1@AEAV21@@Z@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@J@Z
_Query_perf_counter
_Query_perf_frequency
_Thrd_sleep
_Xtime_get_ticks
?sputn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QEAA_JPEB_W_J@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@G@Z
?getloc@ios_base@std@@QEBA?AVlocale@2@XZ
?_Getcat@?$ctype@D@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z
?id@?$ctype@D@std@@2V0locale@2@A
?_Syserror_map@std@@YAPEBDH@Z
?id@?$numpunct@D@std@@2V0locale@2@A
?tolower@?$ctype@D@std@@QEBADD@Z
?id@?$time_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@2V0locale@2@A
?sgetc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ
?sbumpc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ
?_Ipfx@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA_N_N@Z
?_Getcat@?$time_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@H@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@_J@Z
?put@?$time_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QEBA?AV?$ostreambuf_iterator@DU?$char_traits@D@std@@@2@V32@AEAVios_base@2@DPEBUtm@@PEBD3@Z
?_Random_device@std@@YAIXZ
?_Xinvalid_argument@std@@YAXPEBD@Z
?__ExceptionPtrCurrentException@@YAXPEAX@Z
?__ExceptionPtrCreate@@YAXPEAX@Z
?__ExceptionPtrCopyException@@YAXPEAXPEBX1@Z
?_Getcat@?$ctype@_W@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z

msvcp140_atomic_wait

__std_atomic_notify_all_direct
__std_atomic_wait_direct

api-ms-win-crt-heap-l1-1-0

_recalloc
free
realloc
malloc
calloc

api-ms-win-crt-runtime-l1-1-0

_initialize_narrow_environment
_configure_narrow_argv
_seh_filter_dll
_initialize_onexit_table
_initterm
_crt_atexit
_cexit
_register_onexit_function
_initterm_e
_invalid_parameter_noinfo
_errno
_invalid_parameter_noinfo_noreturn
_set_controlfp
_controlfp_s
terminate
_resetstkoflw
_clearfp
_execute_onexit_table
abort

api-ms-win-crt-string-l1-1-0

wcstok_s
wcscmp
wcsnlen
isblank
wcscat_s
wcscpy_s
_stricmp
toupper
isxdigit
wcsncat_s
_wcsicmp
iswdigit
_wcslwr
towupper
strnlen
wcsncmp
iswctype
wmemcpy_s
_wcsnicmp
isdigit
strcmp
wcsncpy_s
strncat_s
wcstok
tolower
strncpy_s
wmemmove_s
iswalpha
_wcsupr
isalnum
isspace
_towupper_l
iswspace
towlower

api-ms-win-crt-stdio-l1-1-0

__stdio_common_vsprintf_s
__stdio_common_vswprintf
__stdio_common_vsnwprintf_s
__stdio_common_vswprintf_s
__stdio_common_vsnprintf_s
__stdio_common_vswscanf
__stdio_common_vsscanf
__stdio_common_vsprintf

api-ms-win-crt-convert-l1-1-0

_wtoi64
strtod
_wcstod_l
_wcstoi64
wcstoul
_ui64tow_s
strtoull
mbstowcs_s
wcstol
wcstod
_ltow_s
_wtol
wctomb_s
_wtoi
strtoll
_fcvt
_wcstoui64
_ui64toa_s
_i64tow_s
_itow_s
wcstombs_s
strtol
_ultow_s
atoi

api-ms-win-crt-math-l1-1-0

expf
floorf
log10
logf
hypot
powf
_isnan
cosf
ceilf
floor
atan2
cos
sin
sqrt
modf
atan2f
tanf
asinf
_fdsign
_dsign
_ldsign
acosf
_ldclass
_hypotf
_dclass
sqrtf
tan
ceil
copysign
asin
acos
fmodf
roundf
round
sinf
_fdclass
_hypot
pow
fmod
exp

api-ms-win-crt-locale-l1-1-0

localeconv
__initialize_lconv_for_unsigned_char
_create_locale
_free_locale

api-ms-win-crt-time-l1-1-0

_time64
_mktime64
_gmtime64_s
_localtime64_s

api-ms-win-crt-filesystem-l1-1-0

_wsplitpath_s

api-ms-win-crt-utility-l1-1-0

qsort
rand
bsearch
srand

usp10

ScriptItemize

Exports

Exports

?LsAssert@Ptls6@@YAXH@Z
?LsCreateContext@Ptls6@@YAJPEBUlscontextinfo@1@PEAPEAUlscontext@1@@Z
?LsCreateLine@Ptls6@@YAJPEAUlscontext@1@PEAUlsparaclient@1@PEBUlspap@1@JPEBUlslinerestr@1@PEBUlsbreakrecline@1@PEAPEAU61@PEAUlslinfo@1@PEAPEAVCLsLine@1@@Z
?LsCreateLineGivenBreak@Ptls6@@YAJPEAUlscontext@1@PEAUlsparaclient@1@PEBUlspap@1@JPEBUlslinerestr@1@PEBUlsbreakrecline@1@JPEAPEAU61@PEAUlslinfo@1@PEAPEAVCLsLine@1@@Z
?LsDestroyBreakRecord@Ptls6@@YAJPEAUlscontext@1@PEAUlsbreakrecline@1@@Z
?LsDestroyContext@Ptls6@@YAJPEAUlscontext@1@@Z
?LsDestroyLine@Ptls6@@YAJPEAUlscontext@1@PEAVCLsLine@1@@Z
?LsDisplayLine@Ptls6@@YAJPEAVCLsLine@1@PEBUtagLSPOINT@1@IPEBUtagLSRECT@1@@Z
?LsDisplaySubline@Ptls6@@YAJPEAVILsSubline@1@HPEBUtagLSPOINT@1@IPEBUtagLSRECT@1@@Z
?LsDuplicateBreakRecord@Ptls6@@YAJPEAUlscontext@1@PEBUlsbreakrecline@1@PEAPEAU31@@Z
?LsEnumLine@Ptls6@@YAJPEAVCLsLine@1@HHPEBUtagLSPOINT@1@@Z
?LsEnumSubline@Ptls6@@YAJPEBVILsSubline@1@HHPEBUtagLSPOINT@1@@Z
?LsFindMasterSubline@Ptls6@@YAJPEAVCLsLine@1@Ulsspan_struct@1@PEAUtagLSPOINTUV@1@PEAPEAVILsSubline@1@@Z
?LsGetHihLsimethods@Ptls6@@YAJPEAUlsimethods@1@@Z
?LsGetMinMaxDurUntilHardBreak@Ptls6@@YAJPEAUlscontext@1@PEAUlsparaclient@1@PEBUlspap@1@JPEBUlslinerestr@1@PEBUlsbreakrecline@1@HPEAPEAU61@PEAUlslinfo@1@PEAPEAVCLsLine@1@PEAJ888@Z
?LsGetObjectName@Ptls6@@YA?AVLSNAMEEXP@1@PEBVCLsDnode@1@@Z
?LsGetReverseLsimethods@Ptls6@@YAJPEAUlsimethods@1@@Z
?LsGetStretchabilityForLine@Ptls6@@YAJPEAVCLsLine@1@PEAJ1@Z
?LsGetTatenakayokoLsimethods@Ptls6@@YAJPEAUlsimethods@1@@Z
?LsLwMultDivR@Ptls6@@YAJJJJ@Z
?LsModifyLineHeight@Ptls6@@YAJPEAUlscontext@1@PEAVCLsLine@1@JJJJ@Z
?LsNotReached@Ptls6@@YAXXZ
?LsPointUV2FromPointUV1@Ptls6@@YAJKPEBUtagLSPOINTUV@1@0KPEAU21@@Z
?LsPointXYFromPointUV@Ptls6@@YAJPEBUtagLSPOINT@1@KPEBUtagLSPOINTUV@1@PEAU21@@Z
?LsQueryEnumAutonum@Ptls6@@YAJPEAVCLsObject@1@PEAPEAVILsSubline@1@@Z
?LsQueryEnumBorderDnode@Ptls6@@YAJPEAVCLsDnode@1@PEAUlsqednodeborderinfo@1@@Z
?LsQueryEnumDnode@Ptls6@@YAJPEAVCLsDnode@1@PEAUlsqednodeinfo@1@@Z
?LsQueryEnumFrontierDnode@Ptls6@@YAJPEAVCLsDnode@1@PEAUlsqednodefrontierinfo@1@@Z
?LsQueryEnumHih@Ptls6@@YAJPEAVCLsObject@1@PEAUlsqeryhihinfo@1@@Z
?LsQueryEnumLine@Ptls6@@YAJPEAVCLsLine@1@PEAUlsqelineinfo@1@@Z
?LsQueryEnumPenDnode@Ptls6@@YAJPEAVCLsDnode@1@PEAUlsqednodepeninfo@1@@Z
?LsQueryEnumRealDnode@Ptls6@@YAJPEAVCLsDnode@1@PEAUlsqednoderealinfo@1@@Z
?LsQueryEnumReverse@Ptls6@@YAJPEAVCLsObject@1@PEAUlsqeryreverseinfo@1@@Z
?LsQueryEnumTatenakayoko@Ptls6@@YAJPEAVCLsObject@1@PEAUlsqetatenakinfo@1@@Z
?LsQueryLineCpPpoint@Ptls6@@YAJPEAVCLsLine@1@JJPEAUlsqsubinfo@1@PEAJPEAUlstextcell@1@@Z
?LsQueryLineDown@Ptls6@@YAJPEAVCLsLine@1@JHJJPEAHPEAUlsqsubinfo@1@PEAJPEAUlstextcell@1@@Z
?LsQueryLineDup@Ptls6@@YAJPEAVCLsLine@1@PEAUlslinearea@1@@Z
?LsQueryLineMaxDepth@Ptls6@@YAJPEAVCLsLine@1@PEAJ@Z
?LsQueryLinePointPcp@Ptls6@@YAJPEAVCLsLine@1@PEBUtagLSPOINTUV@1@JPEAUlsqsubinfo@1@PEAJPEAUlstextcell@1@@Z
?LsQueryLineUp@Ptls6@@YAJPEAVCLsLine@1@JHJJPEAHPEAUlsqsubinfo@1@PEAJPEAUlstextcell@1@@Z
?LsQueryLineVisibleRectangle@Ptls6@@YAJPEAVCLsLine@1@PEAKPEAUtagLSRECT@1@@Z
?LsQuerySpanInfo@Ptls6@@YAJPEAVCLsLine@1@Ulsspan_struct@1@HJPEAUtagLSPOINTUV@1@PEAKPEAJ44444444444444444PEAUtagLSRECT@1@@Z
?LsQuerySpanTotalRelativeOffset@Ptls6@@YAJPEAVCLsLine@1@Ulsspan_struct@1@PEAUtagLSOFFSET@1@@Z
?LsQueryTextCellDetails@Ptls6@@YAJPEAVCLsLine@1@PEAUlscelldetails@1@JJJPEA_WPEAG3PEAJPEAUtagLSOFFSET@1@PEAK@Z
?LsSetDebugFlags@Ptls6@@YAJPEAUlscontext@1@K@Z
?LsTransformRectangle@Ptls6@@YAXKPEBUtagLSRECT@1@KPEBUtagLSPOINTUV@1@PEAU21@@Z
?LsUpdateBreakRecord@Ptls6@@YAJPEAUlscontext@1@PEAUlsbreakrecline@1@JJJJPEAH@Z
?LsdnDistribute@Ptls6@@YAJPEAVCLsDnode@1@0J@Z
?LsdnFinishByCurrentPosition@Ptls6@@YAJPEAVCLsDnode@1@PEAVILsObjectFormattingSession@1@PEAVCLsObject@1@AEBUOBJDIM@1@H@Z
?LsdnFinishSimple@Ptls6@@YAJPEAVCLsDnode@1@JPEAVCLsObject@1@PEBUOBJDIM@1@H@Z
?LsdnFinishWordRegular@Ptls6@@YAJPEAVCLsDnode@1@JPEAUlsrun@1@PEBUlschp@1@PEAVCLsObject@1@PEBUOBJDIM@1@HHH@Z
?LsdnFinishWordRegularAddAdvancePen@Ptls6@@YAJPEAVCLsDnode@1@JPEAUlsrun@1@PEBUlschp@1@PEAVCLsObject@1@PEBUOBJDIM@1@JJJHHH@Z
?LsdnGetDup@Ptls6@@YAJPEAVCLsDnode@1@PEAJ@Z
?LsdnModifyParaEnding@Ptls6@@YAJPEAVCLsDnode@1@W4_lskeop@1@@Z
?LsdnQueryPenNode@Ptls6@@YAJPEAVCLsDnode@1@PEAJ11@Z
?LsdnResetObjDim@Ptls6@@YAJPEAVCLsDnode@1@PEBUOBJDIM@1@@Z
?LsdnResetPenNode@Ptls6@@YAJPEAVCLsDnode@1@JJJ@Z
?LsdnSetAbsBaseLine@Ptls6@@YAJPEAVCLsDnode@1@J@Z
?LsdnSetRigidDup@Ptls6@@YAJPEAVCLsDnode@1@J@Z
?LssbDistributeInSubline@Ptls6@@YAJPEAVILsSubline@1@J@Z
?LssbFDoneDisplay@Ptls6@@YAJPEAVILsSubline@1@PEAH@Z
?LssbFDonePresSubline@Ptls6@@YAJPEAVILsSubline@1@PEAH@Z
?LssbGetDupSubline@Ptls6@@YAJPEBVILsSubline@1@PEAKPEAJ@Z
?LssbGetDurTrailInSubline@Ptls6@@YAJPEAVILsSubline@1@PEAJ@Z
?LssbGetDurTrailWithPensInSubline@Ptls6@@YAJPEAVILsSubline@1@PEAJ@Z
?LssbGetNumberDnodesInSubline@Ptls6@@YAJPEAVILsSubline@1@PEAJ@Z
?LssbGetObjDimSubline@Ptls6@@YAJPEBVILsSubline@1@PEAKPEAUOBJDIM@1@@Z
?LssbGetPlsrunsFromSubline@Ptls6@@YAJPEAVILsSubline@1@JPEAPEAUlsrun@1@@Z
?LssbGetVisibleDcpInSubline@Ptls6@@YAJPEAVILsSubline@1@PEAJ@Z
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 9.7MB - Virtual size: 9.7MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 6.6MB - Virtual size: 6.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 435KB - Virtual size: 467KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 420KB - Virtual size: 420KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.didat
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.detourc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

_RDATA
Size: 512B - Virtual size: 48B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 405KB - Virtual size: 405KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 168KB - Virtual size: 168KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
WEBSANDBOX.DLL
.dll regsvr32 windows:6 windows x64 arch:x64

9c41b3f238a27352bf822463f80d7bf4

Code Sign

33:00:00:05:57:cf:90:dd:c7:d1:c0:88:8c:00:00:00:00:05:57
Certificate

Issuer

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

19/10/2023, 19:51

Not After

16/10/2024, 19:51

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0c:52:4c:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

06/07/2010, 20:40

Not After

06/07/2025, 20:50

Subject

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

33:00:00:03:a5:41:11:e8:f0:7f:be:0b:75:00:00:00:00:03:a5
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

19/10/2023, 19:51

Not After

16/10/2024, 19:51

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08/07/2011, 20:59

Not After

08/07/2026, 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

03:ac:57:66:13:13:b0:ee:b0:34:84:45:cd:b5:f6:94:f7:e6:7d:77:8b:da:ef:ee:59:55:c8:34:11:0d:7c:d7
Signer

Actual PE Digest

03:ac:57:66:13:13:b0:ee:b0:34:84:45:cd:b5:f6:94:f7:e6:7d:77:8b:da:ef:ee:59:55:c8:34:11:0d:7c:d7

Digest Algorithm

sha256

PE Digest Matches

true

03:ac:57:66:13:13:b0:ee:b0:34:84:45:cd:b5:f6:94:f7:e6:7d:77:8b:da:ef:ee:59:55:c8:34:11:0d:7c:d7
Signer

Actual PE Digest

03:ac:57:66:13:13:b0:ee:b0:34:84:45:cd:b5:f6:94:f7:e6:7d:77:8b:da:ef:ee:59:55:c8:34:11:0d:7c:d7

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

d:\dbs\el\omr\target\x64\ship\osfclient\x-none\WebSandbox.pdb

Imports

kernel32

DeleteFileW
Sleep
GetTickCount64
GetSystemTimeAsFileTime
MultiByteToWideChar
WideCharToMultiByte
GetCurrentProcess
CreateDirectoryW
VerSetConditionMask
VerifyVersionInfoW
GlobalMemoryStatusEx
CreateMutexW
OpenMutexW
GetEnvironmentVariableW
GetFileAttributesExW
CreateFileMappingW
UnmapViewOfFile
LoadLibraryExA
GetModuleHandleW
IsDebuggerPresent
OutputDebugStringW
FindClose
LCIDToLocaleName
MapViewOfFile
ReleaseSemaphore
CreateSemaphoreExW
GetLocaleInfoEx
TlsFree
FlsFree
TlsAlloc
GetProcessHeap
GetProcAddress
HeapAlloc
HeapFree
WaitForSingleObjectEx
SetEvent
CloseHandle
ResetEvent
CreateEventExW
GetCurrentThreadId
LeaveCriticalSection
EnterCriticalSection
EncodePointer
GetSystemTimes
K32GetProcessImageFileNameW
GetExitCodeProcess
DuplicateHandle
UpdateProcThreadAttribute
InitializeProcThreadAttributeList
RaiseException
DeleteCriticalSection
DecodePointer
LoadLibraryW
GetLastError
QueryActCtxW
DeactivateActCtx
InitializeCriticalSectionEx
FindActCtxSectionStringW
GetModuleFileNameW
OutputDebugStringA
GetModuleHandleExW
SetLastError
ActivateActCtx
CreateFileW
CreateActCtxW
VirtualQuery
VirtualProtect
GetSystemInfo
GetFileInformationByHandleEx
AreFileApisANSI
FindNextFileW
FindFirstFileW
FormatMessageA
InitOnceComplete
InitOnceBeginInitialize
InitializeSListHead
GetCurrentProcessId
QueryPerformanceCounter
SleepConditionVariableSRW
WakeAllConditionVariable
IsProcessorFeaturePresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
SetThreadPriority
GetThreadPriority
SleepEx
CreateEventW
FreeLibrary
LoadLibraryExW
ReleaseMutex
CreateMutexExW
HeapReAlloc
LocalFree
LocalAlloc
CopyFileW
InitializeSRWLock
AcquireSRWLockExclusive
ReleaseSRWLockExclusive
AcquireSRWLockShared
ReleaseSRWLockShared
CancelWaitableTimer
SetWaitableTimer
CreateWaitableTimerW
WaitForMultipleObjectsEx
HeapSize
HeapDestroy
SizeofResource
LockResource
LoadResource
FindResourceExW
FindResourceW
GetFileSizeEx
ReadFile
FindFirstFileExW
OpenFileMappingW
OpenProcess
K32GetProcessMemoryInfo
GetProcessTimes
CreateToolhelp32Snapshot
Process32FirstW
Process32NextW
TerminateProcess
WaitForSingleObject
GetCurrentThread

gdi32

CreateSolidBrush
DeleteObject

advapi32

RegOpenKeyExA
EventWriteTransfer
GetSidSubAuthorityCount
GetSidSubAuthority
RegCreateKeyExW
ConvertStringSecurityDescriptorToSecurityDescriptorW
DuplicateTokenEx
ConvertStringSidToSidW
SetTokenInformation
GetLengthSid
SetThreadToken
RegQueryInfoKeyW
RegEnumValueW
CreateProcessAsUserW
GetAclInformation
GetAce
RegSetValueExW
GetNamedSecurityInfoW
SetEntriesInAclW
SetNamedSecurityInfoW
DeleteAce
GetSecurityDescriptorSacl
EventRegister
GetTokenInformation
OpenProcessToken
DeregisterEventSource
RegOpenKeyExW
RegisterEventSourceW
ReportEventW
RegQueryValueExW
RegCloseKey
EventUnregister

ole32

CreateStreamOnHGlobal
CoTaskMemFree
IIDFromString
IsAccelerator
CoReleaseMarshalData
CoMarshalInterface
CoCreateInstance
CoCreateGuid
CoDisconnectObject
GetRunningObjectTable
CreateItemMoniker
CoGetClassObject
CoTaskMemAlloc
CoCreateFreeThreadedMarshaler
CoUnmarshalInterface
CoRegisterPSClsid
StringFromGUID2

oleaut32

SysAllocStringLen
SysFreeString
VariantInit
VariantClear
SysAllocString
SafeArrayAccessData
SafeArrayUnaccessData
SysStringByteLen
SafeArrayGetDim
SafeArrayGetElemsize
SafeArrayGetLBound
SafeArrayGetUBound
SafeArrayCreate
VariantCopy
SysAllocStringByteLen
LoadRegTypeLi
LoadTypeLi
SafeArrayDestroy
SafeArrayUnlock
VarBstrCat
SafeArrayPtrOfIndex
SafeArrayCreateVector
SafeArrayGetElement
VariantCopyInd
SafeArrayPutElement
SafeArrayRedim
SafeArrayCopy
SafeArrayGetVartype
VarBstrCmp
SafeArrayLock
SysStringLen

osfshared

?OnNotifyError@OsfActivationTelemetry@@SAXPEBUIOsfSolutionReference@@J_N@Z
?GetCorrelationId@OsfTelemetry@@SAJPEA_WH@Z
?GetSQMAppInfo@OsfTelemetry@@SAJPEBUIOsfSolutionReference@@PEBUIOsfControlInstanceTelemetryData@@AEAK2AEAW4OsfStoreType@@@Z
?CreateLaunchProperties@MSO@SDX@@YA?AV?$shared_ptr@UIExtensionLaunchProperties@SDK@SDX@@@std@@XZ
?FOsfSupportsMultiHost@@YA_NXZ
?GetCurrentHostContext@OsfAppControlHostContext@@SA?AV?$TCntPtr@$$CBVOsfAppControlHostContext@@@Mso@@XZ
?GetHostType@OsfAppControlHostContext@@QEBA?AW4OsfHost@@XZ
?SetOsfHostType@ServiceManager@@QEAAXW4OsfHost@@@Z
?Create@Context@OsfTelemetry@@SA?AV?$TCntPtr@UContext@OsfTelemetry@@@Mso@@XZ
?OnActivationStarted@AppLoadTimeHelper@OsfTelemetry@@SAXAEBUTelemetryParams@2@PEAUContext@2@@Z
?OnCreateControlStarted@OsfActivationTelemetry@@SAXPEBUIOsfSolutionReference@@KW4OsfStoreType@@PEB_W@Z
?GetIsColdBoot@AppLoadTimeHelper@OsfTelemetry@@SA_NW4_RemoterType@@@Z
?SetIsAppCommand@OsfActivationTelemetry@@SAXPEBUIOsfSolutionReference@@@Z
?SetAppCommandContext@AppLoadTimeHelper@OsfTelemetry@@SAXPEAUContext@2@W4Enum@CommandActionType@Osf@@@Z
?CallTelemetrySuccessAPI@OsfTelemetry@@SAJPEAUIOsfSolutionManifest@@PEBUOsfControlInitState@@@Z
?CallSQMSuccessAPI@OsfTelemetry@@SAJPEBUIOsfSolutionReference@@PEBUIOsfControlInstanceTelemetryData@@@Z
?OnSandboxCreationDone@AppLoadTimeHelper@OsfTelemetry@@SAXPEBUContext@2@PEB_W_N@Z
?CallTelemetryUsageAPI@OsfTelemetry@@SAJPEB_WH@Z
?OnIEPreloadFinished@OsfActivationTelemetry@@SAXPEBUIOsfSolutionReference@@@Z
?GetAppCommandNoUIControlWindow@Osf@@YAJ_NPEAPEAUHWND__@@@Z
?GetFlightingStatusEx@Osf@@YA_NW4OsfFlightingId@1@@Z
?GetOsfHostType@ServiceManager@@QEBA?AW4OsfHost@@XZ
?GetScrubbedUrl@OsfActivationTelemetry@@SAJAEAVCComBSTR@ATL@@PEB_WW4MsoUrlComponentFlags@@@Z
?LogNotificationUX@OsfTelemetry@@SAJPEBUSqmAppInfo@@PEB_W@Z
?HrGetSharedWV2DataFolder@Osf@@YAJPEBUIOfficeIdentity@Authentication@Mso@@W4DPI_AWARENESS@@AEAV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z
?OnActivationDone@AppLoadTimeHelper@OsfTelemetry@@SAXPEAUContext@2@JPEB_W@Z
?GetServiceManager@ServiceManager@@SAPEAV1@XZ
?EnsureServiceManager@ServiceManager@@SAPEAV1@XZ
?ShutdownServiceManager@ServiceManager@@SAXXZ
?GetServiceManager@ServiceManager@@SAPEAV1@W4OsfHost@@@Z
?OnPageLoadEnd@OsfActivationTelemetry@@SAXPEBUIOsfSolutionReference@@@Z
?CallTelemetryErrorAPI@OsfTelemetry@@SAJHQEAUSOLUTION_EVENT_PARAM@TelemetryAPI@@@Z
?OnDocumentClosing@OsfActivationTelemetry@@SAXPEBUIOsfSolutionReference@@@Z
?DestroyAppCommandNoUIWindow@Osf@@YAJXZ

vcruntime140_1

__CxxFrameHandler4

vcruntime140

__current_exception
wcsstr
memcmp
memchr
__std_exception_copy
__std_type_info_destroy_list
__RTDynamicCast
memset
__current_exception_context
memmove
_CxxThrowException
memcpy
__C_specific_handler
strchr
__std_type_info_compare
__std_terminate
_purecall
__std_exception_destroy

msvcp140

??0facet@locale@std@@IEAA@_K@Z
?_Decref@facet@locale@std@@UEAAPEAV_Facet_base@3@XZ
?_Incref@facet@locale@std@@UEAAXXZ
??Bid@locale@std@@QEAA_KXZ
?_Getcoll@_Locinfo@std@@QEBA?AU_Collvec@@XZ
??1_Locinfo@std@@QEAA@XZ
??0_Locinfo@std@@QEAA@PEBD@Z
?_Xout_of_range@std@@YAXPEBD@Z
?_Xbad_function_call@std@@YAXXZ
_Lock_shared_ptr_spin_lock
_Unlock_shared_ptr_spin_lock
??Bios_base@std@@QEBA_NXZ
??0?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEAA@XZ
??1?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UEAA@XZ
?sbumpc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QEAAGXZ
?sgetc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QEAAGXZ
?snextc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QEAAGXZ
??1?$basic_ios@_WU?$char_traits@_W@std@@@std@@UEAA@XZ
?setstate@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QEAAXH_N@Z
??0?$basic_ios@_WU?$char_traits@_W@std@@@std@@IEAA@XZ
?_Ipfx@?$basic_istream@_WU?$char_traits@_W@std@@@std@@QEAA_N_N@Z
??0?$basic_iostream@_WU?$char_traits@_W@std@@@std@@QEAA@PEAV?$basic_streambuf@_WU?$char_traits@_W@std@@@1@@Z
??1?$basic_iostream@_WU?$char_traits@_W@std@@@std@@UEAA@XZ
?imbue@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAAXAEBVlocale@2@@Z
?setbuf@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAAPEAV12@PEA_W_J@Z
?xsputn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAA_JPEB_W_J@Z
?xsgetn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAA_JPEA_W_J@Z
?showmanyc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAA_JXZ
?sync@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAAHXZ
?_Lock@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UEAAXXZ
?_Unlock@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UEAAXXZ
?uflow@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAAGXZ
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@P6AAEAVios_base@1@AEAV21@@Z@Z
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@_K@Z
?_Syserror_map@std@@YAPEBDH@Z
?_Winerror_map@std@@YAHH@Z
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAA@XZ
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAA@XZ
?sbumpc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ
?sgetc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ
?snextc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UEAA@XZ
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IEAA@XZ
?_Ipfx@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA_N_N@Z
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JXZ
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEAD_J@Z
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEBD_J@Z
??7ios_base@std@@QEBA_NXZ
?exceptions@ios_base@std@@QEAAXH@Z
??1?$basic_istream@DU?$char_traits@D@std@@@std@@UEAA@XZ
?always_noconv@codecvt_base@std@@QEBA_NXZ
?_Fiopen@std@@YAPEAU_iobuf@@PEBDHH@Z
?id@?$codecvt@DDU_Mbstatet@@@std@@2V0locale@2@A
?_Getcat@?$codecvt@DDU_Mbstatet@@@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z
?widen@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBADD@Z
?unshift@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEAD1AEAPEAD@Z
?getloc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEBA?AVlocale@2@XZ
?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXXZ
?in@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAD3AEAPEAD@Z
?out@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAD3AEAPEAD@Z
??0?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
?good@ios_base@std@@QEBA_NXZ
?uncaught_exceptions@std@@YAHXZ
?getloc@ios_base@std@@QEBA?AVlocale@2@XZ
?sputc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QEAAG_W@Z
?widen@?$ctype@_W@std@@QEBA_WD@Z
?_Osfx@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAXXZ
?flush@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV12@XZ
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@H@Z
?__ExceptionPtrRethrow@@YAXPEBX@Z
?__ExceptionPtrToBool@@YA_NPEBX@Z
_Cnd_init_in_situ
_Cnd_destroy_in_situ
_Cnd_broadcast
_Cnd_register_at_thread_exit
_Cnd_wait
_Cnd_unregister_at_thread_exit
?__ExceptionPtrAssign@@YAXPEAXPEBX@Z
?_Xinvalid_argument@std@@YAXPEBD@Z
_Cnd_timedwait
_Mtx_current_owns
?sputn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QEAA_JPEB_W_J@Z
?in@?$codecvt@_WDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEA_W3AEAPEA_W@Z
??1?$basic_istream@_WU?$char_traits@_W@std@@@std@@UEAA@XZ
??1?$codecvt@_WDU_Mbstatet@@@std@@MEAA@XZ
??0?$codecvt@_WDU_Mbstatet@@@std@@QEAA@_K@Z
?out@?$codecvt@_WDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEB_W1AEAPEB_WPEAD3AEAPEAD@Z
?unshift@?$codecvt@_WDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEAD1AEAPEAD@Z
?_Fiopen@std@@YAPEAU_iobuf@@PEB_WHH@Z
?id@?$codecvt@_WDU_Mbstatet@@@std@@2V0locale@2@A
?_Getcat@?$codecvt@_WDU_Mbstatet@@@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z
?_New_Locimp@_Locimp@locale@std@@CAPEAV123@AEBV123@@Z
?_Addfac@_Locimp@locale@std@@AEAAXPEAVfacet@23@_K@Z
??4?$_Yarn@D@std@@QEAAAEAV01@PEBD@Z
?getloc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QEBA?AVlocale@2@XZ
?_Init@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEAAXXZ
??0?$basic_istream@_WU?$char_traits@_W@std@@@std@@QEAA@PEAV?$basic_streambuf@_WU?$char_traits@_W@std@@@1@_N@Z
?imbue@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QEAA?AVlocale@2@AEBV32@@Z
?is@?$ctype@_W@std@@QEBA_NF_W@Z
?tolower@?$ctype@_W@std@@QEBA_W_W@Z
?tolower@?$ctype@_W@std@@QEBAPEB_WPEA_WPEB_W@Z
?_Getcat@?$ctype@_W@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z
?_Xregex_error@std@@YAXW4error_type@regex_constants@1@@Z
?id@?$collate@_W@std@@2V0locale@2@A
?id@?$ctype@_W@std@@2V0locale@2@A
?_Getgloballocale@locale@std@@CAPEAV_Locimp@12@XZ
?_Init@locale@std@@CAPEAV_Locimp@12@_N@Z
_Wcscoll
??1_Lockit@std@@QEAA@XZ
??0_Lockit@std@@QEAA@H@Z
_Xtime_get_ticks
_Thrd_sleep
_Query_perf_frequency
_Query_perf_counter
_Thrd_id
_Mtx_init_in_situ
_Mtx_destroy_in_situ
_Mtx_unlock
_Mtx_lock
?_Throw_Cpp_error@std@@YAXH@Z
?__ExceptionPtrCopyException@@YAXPEAXPEBX1@Z
?__ExceptionPtrCreate@@YAXPEAX@Z
?__ExceptionPtrCurrentException@@YAXPEAX@Z
?__ExceptionPtrDestroy@@YAXPEAX@Z
?__ExceptionPtrCopy@@YAXPEAXPEBX@Z
?_Xlength_error@std@@YAXPEBD@Z
?_Xbad_alloc@std@@YAXXZ
??1facet@locale@std@@MEAA@XZ
_Wcsxfrm

api-ms-win-crt-heap-l1-1-0

free
realloc
malloc

api-ms-win-crt-runtime-l1-1-0

_cexit
_invalid_parameter_noinfo_noreturn
_errno
_crt_atexit
_invalid_parameter_noinfo
abort
terminate
_execute_onexit_table
_register_onexit_function
_initialize_onexit_table
_initterm
_initterm_e
_seh_filter_dll
_configure_narrow_argv
_initialize_narrow_environment

api-ms-win-crt-stdio-l1-1-0

ungetc
fflush
setvbuf
fsetpos
_fseeki64
fgetpos
fwrite
fread
_get_stream_buffer_pointers
fgetc
ungetwc
fputwc
fgetwc
__stdio_common_vsnwprintf_s
__stdio_common_vswprintf_s
fputc
__stdio_common_vswprintf
fclose

api-ms-win-crt-math-l1-1-0

pow
ceilf

api-ms-win-crt-string-l1-1-0

towupper
wcsncmp
wcsncpy_s
_wcsnicmp
strncpy_s
wcscpy_s
wcscmp
_wcsicmp
wcscat_s
strcmp
wmemcpy_s
towlower
isdigit
tolower

api-ms-win-crt-convert-l1-1-0

wcstoul
_wtoi
_ui64tow_s
_itow_s
wcstol

api-ms-win-crt-time-l1-1-0

_mktime64

api-ms-win-crt-filesystem-l1-1-0

_unlock_file
_lock_file

api-ms-win-crt-locale-l1-1-0

___lc_codepage_func
__initialize_lconv_for_unsigned_char

Exports

Exports

?CreateCacheForPreinstalledApps@@YAXXZ
?GetOsfIntlDllInstance@@YAPEAUHINSTANCE__@@XZ
?OSFInitialize@@YAJW4OsfHost@@PEAUIOfficeSolutionFrameworkHost@@PEAPEAUIOfficeSolutionFramework@@@Z
?OSFLoadString@@YAHIPEA_WH@Z
DllCanUnloadNow
DllInstall
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 1.7MB - Virtual size: 1.7MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 551KB - Virtual size: 550KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 243KB - Virtual size: 247KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 69KB - Virtual size: 68KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.didat
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 75KB - Virtual size: 74KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 22KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
WebView2Host.dll
.dll windows:6 windows x64 arch:x64

5f5947eb76f1a5acbcafb65b9a98508b

Code Sign

33:00:00:03:af:30:40:0e:4c:a3:4d:05:41:00:00:00:00:03:af
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

16/11/2023, 19:09

Not After

14/11/2024, 19:09

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08/07/2011, 20:59

Not After

08/07/2026, 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:a8:54:bc:eb:cd:ee:e3:31:2d:1c:d5:72:ea:bb:bf:29:09:1e:32:2b:a6:e4:65:01:fb:2d:e6:b1:13:49:f5
Signer

Actual PE Digest

61:a8:54:bc:eb:cd:ee:e3:31:2d:1c:d5:72:ea:bb:bf:29:09:1e:32:2b:a6:e4:65:01:fb:2d:e6:b1:13:49:f5

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

D:\a\_work\1\b\src\RelWithDebInfo\WebView2Host.pdb

Imports

kernel32

GetProcessHeap
HeapFree
GetModuleHandleW
LoadLibraryW
FreeLibrary
LoadLibraryExW
DisableThreadLibraryCalls
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
TerminateProcess
GetProcAddress
GetModuleFileNameW
OutputDebugStringW
OutputDebugStringA
CloseHandle
CreateFileW
GetFileAttributesW
GetEnvironmentVariableW
GetLastError
GetCurrentProcess
IsProcessorFeaturePresent
GetStartupInfoW
SetUnhandledExceptionFilter
UnhandledExceptionFilter
IsDebuggerPresent
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
SleepConditionVariableSRW
WakeAllConditionVariable
AcquireSRWLockExclusive
ReleaseSRWLockExclusive
InitializeSListHead

shell32

SHGetKnownFolderPath

ole32

CoTaskMemAlloc
CoTaskMemFree

advapi32

RegCloseKey
RegQueryValueExW
RegOpenKeyExW
EventUnregister
EventWriteTransfer
EventSetInformation
EventRegister
RegGetValueW

msvcp140

?_Getcvt@_Locinfo@std@@QEBA?AU_Cvtvec@@XZ
_Mbrtowc
?_Syserror_map@std@@YAPEBDH@Z
?_W_Getdays@_Locinfo@std@@QEBAPEBGXZ
?_W_Getmonths@_Locinfo@std@@QEBAPEBGXZ
?_Throw_Cpp_error@std@@YAXH@Z
_Mtx_unlock
_Mtx_lock
?_Xlength_error@std@@YAXPEBD@Z
_Mtx_destroy_in_situ
_Mtx_init_in_situ
?_Xout_of_range@std@@YAXPEBD@Z
?_Xbad_alloc@std@@YAXXZ

vcruntime140

__std_type_info_destroy_list
__current_exception_context
__current_exception
__C_specific_handler
memset
memmove
memcpy
_CxxThrowException
__std_exception_destroy
__std_exception_copy
__std_terminate
_purecall
wcsrchr

vcruntime140_1

__CxxFrameHandler4

api-ms-win-crt-runtime-l1-1-0

_initterm_e
_initialize_onexit_table
_initialize_narrow_environment
_configure_narrow_argv
_seh_filter_dll
terminate
_initterm
_cexit
_crt_at_quick_exit
_register_onexit_function
_invalid_parameter_noinfo_noreturn
_execute_onexit_table
_crt_atexit

api-ms-win-crt-heap-l1-1-0

malloc
_callnewh
free
calloc

api-ms-win-crt-string-l1-1-0

_wcsicmp
wcscmp
wcslen

api-ms-win-crt-convert-l1-1-0

wcstol
_ultow_s

Exports

Exports

CompareOfficeWebView2BrowserVersions
ConfigureOfficeWebView2UserDataDirectory
CreateOfficeWebView2Environment
CreateOfficeWebView2EnvironmentOptions
GetOfficeWebView2BrowserVersion

Sections

.text
Size: 29KB - Virtual size: 29KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 34KB - Virtual size: 33KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

minATL
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 520B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
WebView2Loader.dll
.dll windows:5 windows x64 arch:x64

aaa8a1994a594e4746a652eda600aebf

Code Sign

33:00:00:03:3c:2b:0a:49:d9:d2:91:7e:ac:00:00:00:00:03:3c
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

16/02/2023, 20:10

Not After

31/01/2024, 20:10

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08/07/2011, 20:59

Not After

08/07/2026, 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

ee:04:ab:e6:fb:32:cc:28:0e:ef:3a:13:39:6c:18:a8:32:3d:be:6c:15:97:af:64:9a:3f:01:92:f9:3f:2f:bf
Signer

Actual PE Digest

ee:04:ab:e6:fb:32:cc:28:0e:ef:3a:13:39:6c:18:a8:32:3d:be:6c:15:97:af:64:9a:3f:01:92:f9:3f:2f:bf

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

D:\a\_work\e\src\out\Release_x64\WebView2Loader.dll.pdb

Imports

kernel32

CloseHandle
CreateEventW
CreateFileW
DeleteCriticalSection
EncodePointer
EnterCriticalSection
ExitProcess
FindClose
FindFirstFileExW
FindNextFileW
FlsAlloc
FlsFree
FlsGetValue
FlsSetValue
FlushFileBuffers
FreeEnvironmentStringsW
FreeLibrary
GetACP
GetCPInfo
GetCommandLineA
GetCommandLineW
GetConsoleMode
GetConsoleOutputCP
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetEnvironmentStringsW
GetEnvironmentVariableW
GetFileAttributesW
GetFileType
GetLastError
GetModuleFileNameW
GetModuleHandleExW
GetModuleHandleW
GetOEMCP
GetProcAddress
GetProcessHeap
GetStartupInfoW
GetStdHandle
GetStringTypeW
GetSystemInfo
GetSystemTimeAsFileTime
HeapAlloc
HeapFree
HeapReAlloc
HeapSize
InitializeCriticalSectionAndSpinCount
InitializeSListHead
InterlockedFlushSList
IsDebuggerPresent
IsProcessorFeaturePresent
IsValidCodePage
LCMapStringW
LeaveCriticalSection
LoadLibraryExA
LoadLibraryExW
LoadLibraryW
MultiByteToWideChar
OutputDebugStringA
OutputDebugStringW
QueryPerformanceCounter
RaiseException
ResetEvent
RtlCaptureContext
RtlLookupFunctionEntry
RtlPcToFileHeader
RtlUnwind
RtlUnwindEx
RtlVirtualUnwind
SetEvent
SetFilePointerEx
SetLastError
SetStdHandle
SetUnhandledExceptionFilter
TerminateProcess
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
UnhandledExceptionFilter
VirtualProtect
VirtualQuery
WaitForSingleObjectEx
WideCharToMultiByte
WriteConsoleW
WriteFile

Exports

Exports

CompareBrowserVersions
CreateCoreWebView2Environment
CreateCoreWebView2EnvironmentWithOptions
GetAvailableCoreWebView2BrowserVersionString

Sections

.text
Size: 82KB - Virtual size: 81KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 45KB - Virtual size: 44KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.00cfg
Size: 512B - Virtual size: 56B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.gxfg
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.retplne
Size: 512B - Virtual size: 140B

.tls
Size: 512B - Virtual size: 9B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

_RDATA
Size: 512B - Virtual size: 348B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
WordCombinedFloatieModel.bin
WordInterProviderRanker.bin
Wordcnv.dll
.dll windows:6 windows x64 arch:x64

c2e471753eb1450e34f0b72ff7d2a098

Code Sign

33:00:00:05:57:cf:90:dd:c7:d1:c0:88:8c:00:00:00:00:05:57
Certificate

Issuer

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

19/10/2023, 19:51

Not After

16/10/2024, 19:51

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0c:52:4c:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

06/07/2010, 20:40

Not After

06/07/2025, 20:50

Subject

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

33:00:00:03:a5:41:11:e8:f0:7f:be:0b:75:00:00:00:00:03:a5
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

19/10/2023, 19:51

Not After

16/10/2024, 19:51

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08/07/2011, 20:59

Not After

08/07/2026, 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

e2:39:7e:d5:5e:44:06:21:e5:ba:63:8d:ac:63:4a:79:ef:8a:ed:38:ee:87:32:61:e4:cd:81:cf:e3:e2:2c:b8
Signer

Actual PE Digest

e2:39:7e:d5:5e:44:06:21:e5:ba:63:8d:ac:63:4a:79:ef:8a:ed:38:ee:87:32:61:e4:cd:81:cf:e3:e2:2c:b8

Digest Algorithm

sha256

PE Digest Matches

true

e2:39:7e:d5:5e:44:06:21:e5:ba:63:8d:ac:63:4a:79:ef:8a:ed:38:ee:87:32:61:e4:cd:81:cf:e3:e2:2c:b8
Signer

Actual PE Digest

e2:39:7e:d5:5e:44:06:21:e5:ba:63:8d:ac:63:4a:79:ef:8a:ed:38:ee:87:32:61:e4:cd:81:cf:e3:e2:2c:b8

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

d:\dbs\el\omr\target\x64\ship\word\x-none\wordcnv.pdb

Imports

advapi32

RegQueryValueExW
ReportEventW
RegisterEventSourceW
RegOpenKeyExW
RegCloseKey
DeregisterEventSource
EventRegister
EventUnregister
EventWriteTransfer
RegGetValueW
RegOpenKeyExA

gdi32

DeleteObject
GetClipBox
GetEnhMetaFileHeader
GetObjectType
GetMetaFileBitsEx
DeleteMetaFile
CopyMetaFileW
CopyEnhMetaFileW
DeleteEnhMetaFile
SetMetaFileBitsEx
GetEnhMetaFileBits
SetEnhMetaFileBits
GetBitmapDimensionEx
GetObjectW
SetTextAlign
SetWindowOrgEx
SetViewportOrgEx
SetWindowExtEx
MoveToEx
LineTo
SaveDC
RestoreDC
IntersectClipRect
SetLayout
GetLayout
GetTextFaceW
GetFontData
GetAspectRatioFilterEx
GetOutlineTextMetricsW
GetTextCharacterExtra
GetKerningPairsW
GetKerningPairsA
GetCharABCWidthsW
GetCharABCWidthsI
GetGlyphIndicesW
GetGlyphOutlineW
SetTextColor
GetTextColor
GetTextAlign
GetTextCharsetInfo
SelectClipRgn
GetClipRgn
ExtSelectClipRgn
ExcludeClipRect
PolylineTo
PolyBezierTo
SetMapMode
GetMapMode
SetGraphicsMode
GetWindowOrgEx
GetViewportOrgEx
GetWindowExtEx
GetViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
LPtoDP
DPtoLP
GetWorldTransform
SetWorldTransform
GetBkColor
GetBkMode
SetBkMode
SetBkColor
GetROP2
SetROP2
Rectangle
RoundRect
Polygon
Polyline
Ellipse
ExtTextOutW
PatBlt
GetBrushOrgEx
SetBrushOrgEx
PlayMetaFileRecord
BeginPath
EndPath
StrokeAndFillPath
StrokePath
CreateCompatibleDC
CreateRectRgn
GetCurrentObject
GetGraphicsMode
GetStretchBltMode
GetDCPenColor
GetDCBrushColor
GetPolyFillMode
GetRegionData
SetStretchBltMode
SetTextCharacterExtra
SetDCPenColor
SetDCBrushColor
SetPolyFillMode
CreateDIBitmap
SetDIBits
CreateDIBSection
StartPage
EndPage
CreateBitmap
CreateCompatibleBitmap
GetDeviceCaps
CreatePen
GetStockObject
CreateSolidBrush
CreatePatternBrush
GetPath
CloseFigure
FillPath
DeleteDC
BitBlt
StretchBlt
FillRgn
GetTextMetricsW
SetRectRgn
PtInRegion
RectInRegion
CombineRgn
OffsetRgn
EqualRgn
SetWinMetaFileBits
ExtEscape
GetBitmapBits
EnumMetaFile
CreateEnhMetaFileW
CloseEnhMetaFile
EnumEnhMetaFile
EndDoc
SelectPalette
CreateFontIndirectW
ExtCreateRegion
CreateRectRgnIndirect
GetNearestColor
CreateBitmapIndirect
SetBitmapDimensionEx
SelectObject
GetRgnBox

gdiplus

GdipDrawRectangleI
GdipDrawLineI
GdipDrawPath
GdipFillPath
GdipAddPathLineI
GdipAddPathArcI
GdipDeletePath
GdipGetPointCount
GdipCreatePath
GdipStartPathFigure
GdipFillRectangle
GdipSetPenDashStyle
GdipSetPenDashArray
GdipGetPathGradientPointCount
GdipSetPathGradientSurroundColorsWithCount
GdipClosePathFigure
GdipSetPathGradientCenterColor
GdipSetPathGradientCenterPointI
GdipSetPathGradientGammaCorrection
GdipSetPathGradientWrapMode
GdipCreatePathGradientFromPath
GdipAddPathRectangleI
GdipSetLineGammaCorrection
GdipSetLineWrapMode
GdipCreateLineBrushI
GdipCreateSolidFill
GdipDrawCurve2I
GdipCreatePen1
GdipSetSmoothingMode
GdipSetPageUnit
GdipDeleteGraphics
GdipCreateFromHDC
GdipDeletePen
GdipCloneBrush
GdipAlloc
GdipDeleteBrush
GdipFree
GdipAddPathBezierI

kernel32

GetFileAttributesW
LoadLibraryExA
SetEnvironmentVariableW
Sleep
LoadLibraryExW
SetCurrentDirectoryW
FlushFileBuffers
GetFileTime
FreeLibrary
GlobalHandle
LocalFileTimeToFileTime
GetFullPathNameW
GetSystemDirectoryW
GetWindowsDirectoryW
GetLogicalDrives
GetVolumeInformationW
VirtualQuery
VirtualProtect
GetSystemInfo
InitOnceComplete
InitOnceBeginInitialize
IsDebuggerPresent
InitializeSListHead
QueryPerformanceCounter
SleepConditionVariableSRW
WakeAllConditionVariable
IsProcessorFeaturePresent
TerminateProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
DeviceIoControl
LocalFree
GetModuleHandleW
GetEnvironmentVariableW
GetCurrentProcess
GlobalLock
GlobalSize
GlobalUnlock
DecodePointer
SystemTimeToFileTime
EncodePointer
GetLastError
TlsAlloc
FlsFree
TlsFree
FlsGetValue
TlsGetValue
TlsSetValue
SetLastError
CloseHandle
GetCurrentThreadId
WaitForSingleObjectEx
CreateEventExW
ResetEvent
SetEvent
GetFileAttributesExW
SetFilePointerEx
ReadFile
GetFileSizeEx
SetEndOfFile
WriteFile
GetTempPathW
GetCurrentProcessId
FindFirstFileExW
FindClose
FindNextFileW
GetCurrentDirectoryW
SearchPathW
MulDiv
CreateActCtxW
ActivateActCtx
HeapFree
GetModuleHandleExW
OutputDebugStringA
GetModuleFileNameW
FindActCtxSectionStringW
DeactivateActCtx
QueryActCtxW
LoadLibraryW
HeapAlloc
GetProcAddress
GetProcessHeap
DeleteCriticalSection
GetStringTypeExW
RaiseException
GetTickCount64
CreateDirectoryW
WideCharToMultiByte
GetSystemTime
GetSystemTimeAsFileTime
FileTimeToSystemTime
SystemTimeToTzSpecificLocalTime
LCIDToLocaleName
IsValidCodePage
InitializeCriticalSectionEx
EnterCriticalSection
LeaveCriticalSection
LocaleNameToLCID
EnumUILanguagesW
CompareFileTime
TzSpecificLocalTimeToSystemTime
DeleteFileW
SetFileAttributesW
MoveFileExW
ReleaseSRWLockExclusive
AcquireSRWLockExclusive
GetLocalTime
NormalizeString
GlobalAlloc
GlobalFree
GetDiskFreeSpaceW
SetErrorMode
GetFileType
GlobalFlags
GlobalReAlloc
GetDriveTypeW

ole32

CoCreateInstance
ReadClassStg
CoTaskMemFree
CoInitializeEx
CoCreateGuid
StringFromGUID2
CoTaskMemAlloc
StringFromCLSID
StgCreateDocfileOnILockBytes
CoUninitialize
WriteClassStm
WriteClassStg
CLSIDFromString
StgOpenStorageOnILockBytes
GetHGlobalFromStream
CreateILockBytesOnHGlobal
OleSave
ReadClassStm
OleSaveToStream
ProgIDFromCLSID
WriteFmtUserTypeStg
CreateBindCtx
CoGetMalloc
OleConvertOLESTREAMToIStorage
IIDFromString
OleCreateDefaultHandler
GetConvertStg
OleConvertIStorageToOLESTREAMEx
OleConvertIStorageToOLESTREAM
OleIsRunning
CreateFileMoniker
CreateItemMoniker
ReadFmtUserTypeStg
OleGetClipboard
CreateGenericComposite
CreateStreamOnHGlobal

oart

ord59990
ord16074
ord28165
ord6639
ord8270
ord45320
ord1819
ord10047
ord37558
ord30225
ord63705
ord18290
ord51693
ord53381
ord17330
ord39184
ord17988
ord16092
ord44118
ord50107
ord40286
ord28548
ord1536
ord45456
ord52671
ord23171
ord4278
ord27051
ord38519
ord60140
ord47714
ord20741
ord40503
ord47531
ord931
ord39292
ord46577
ord21048
ord801
ord5557
ord10743
ord42690
ord57057
ord28156
ord47927
ord9949
ord20786
ord18716
ord45019
ord1827
ord41873
ord50491
ord31335
ord28697
ord43485
ord29627
ord50999
ord27508
ord64676
ord31420
ord42619
ord10369
ord59378
ord50620
ord7087
ord44553
ord24579
ord11031
ord24375
ord1870
ord27505
ord51942
ord29431
ord22228
ord25937
ord2843
ord30966
ord15843
ord23662
ord26590
ord44212
ord65257
ord37123
ord7897
ord20343
ord18027
ord38568
ord57425
ord41781
ord45965
ord51136
ord50523
ord12426
ord47434
ord3375
ord60741
ord20354
ord56862
ord54170
ord22786
ord63102
ord32268
ord40359
ord64753
ord64956
ord53431
ord43276
ord54649
ord26372
ord26736
ord59629
ord46196
ord41487
ord45781
ord7661
ord43610
ord15269
ord48534
ord21417
ord65474
ord34221
ord42843
ord63183
ord26110
ord2357
ord36548
ord13990
ord34769
ord33306
ord15928
ord19002
ord8060
ord38367
ord4871
ord38767
ord42461
ord19672
ord52345
ord2400
ord17894
ord4053
ord52144
ord45265
ord32494
ord39180
ord21547
ord56116
ord26038
ord25329
ord18971
ord28654
ord25932
ord1172
ord65226
ord35038
ord12275
ord10468
ord1821
ord33993
ord39301
ord24448
ord47230
ord30036
ord62825
ord54513
ord30151
ord64774
ord60961
ord16439
ord38898
ord17646
ord8184
ord7806
ord25233
ord33208
ord56479
ord57689
ord17782
ord32973
ord40568
ord63806
ord27668
ord1647
ord54091
ord918
ord61126
ord20132
ord1390
ord25007
ord11276
ord64441
ord37591
ord16661
ord64010
ord37004
ord28927
ord61927
ord29807
ord36203
ord40853
ord47885
ord38857
ord40137
ord7599
ord26466
ord38336
ord51040
ord55848
ord44434
ord22434
ord32503
ord11345
ord27677
ord23394
ord8285
ord15456
ord105
ord61871
ord62175
ord7894
ord61607
ord30570
ord4248
ord53803
ord56641
ord35711
ord35846
ord19690
ord4431
ord24357
ord56801
ord18169
ord49367
ord57630
ord43986
ord38232
ord34945
ord33623
ord25742
ord36335
ord50867
ord27663
ord63616
ord19660
ord58059
ord31667
ord13782
ord36906
ord2949
ord35454
ord3631
ord47990
ord2820
ord54478
ord59174
ord45524
ord26823
ord38823
ord12614
ord19085
ord61313
ord9957
ord17684
ord7979
ord2774
ord25040
ord53327
ord3050
ord6592
ord40344
ord18319
ord61227
ord24744
ord43763
ord57675
ord63326
ord44256
ord8300
ord58467
ord1447
ord20404
ord56266
ord64469
ord9901
ord43968
ord41605
ord60219
ord63956
ord64311
ord13111
ord53759
ord50641
ord24872
ord23392
ord61288
ord58817
ord25507
ord16307
ord16882
ord17090
ord33572
ord63010
ord41717
ord45858
ord42117
ord11097
ord30959
ord28365
ord22456
ord27625
ord45020
ord60274
ord49698
ord11314
ord2669
ord32174
ord2479
ord27117
ord33738
ord1076
ord22528
ord13534
ord28339
ord32392
ord2513
ord48868
ord21555
ord2727
ord36560
ord57963
ord207
ord53419
ord2124
ord44239
ord47324
ord32576
ord60999
ord659
ord1658
ord36856
ord5817
ord4811
ord47567
ord57638
ord24646
ord21924
ord46595
ord65135
ord64716
ord24873
ord24561
ord52139
ord63205
ord12500
ord47860
ord41933
ord35840
ord47368
ord19392
ord16657
ord64594
ord60047
ord1256
ord63799
ord61633
ord56056
ord47658
ord44091
ord17001
ord45635
ord1437
ord19970
ord48993
ord23264
ord18889
ord1449
ord48251
ord8368
ord61579
ord63385
ord4940
ord51987
ord1982
ord15454
ord38064
ord38755
ord42679
ord56922
ord49689
ord46453
ord3417
ord27169
ord54714
ord8221
ord65409
ord51107
ord14048
ord53873
ord2412
ord25670
ord5193
ord20227
ord57243
ord59760
ord59986
ord46287
ord48030
ord17046
ord63170
ord10293
ord10508
ord41147
ord55230
ord19731
ord13904
ord11216
ord54916
ord11896
ord45919
ord60764
ord39871
ord54193
ord55097
ord58395
ord15449
ord44815
ord7058
ord5730
ord59693
ord26343
ord28521
ord54794
ord40795
ord25203
ord21264
ord20795
ord59516
ord26132
ord59624
ord18103
ord29846
ord1242
ord21950
ord48937
ord20958
ord34280
ord8660
ord10224
ord11330
ord23558
ord6003
ord34729
ord49771
ord38616
ord42785
ord13506
ord45665
ord60937
ord42248
ord42857
ord9805
ord15951
ord27745
ord24286
ord43467
ord61196
ord28215
ord48366
ord63152
ord40770
ord36571
ord47107
ord915
ord39477
ord22147
ord63331
ord7270
ord17201
ord41112
ord19500
ord16681
ord34671
ord44257
ord3966
ord53478
ord12080
ord53109
ord31692
ord26221
ord20259
ord31628
ord265
ord50387
ord9302
ord6402
ord7959
ord53030
ord26934
ord14385
ord33681

oleaut32

SetErrorInfo
VarR8FromR4
SysAllocStringLen
VariantInit
SysStringByteLen
SysFreeString
SysReAllocString
VariantChangeType
SysAllocString
VariantClear
SysStringLen

vcruntime140_1

__CxxFrameHandler4

vcruntime140

_CxxThrowException
memcpy
__C_specific_handler_noexcept
memcmp
__std_type_info_compare
__C_specific_handler
wcschr
wcsstr
wcsrchr
__current_exception
__current_exception_context
__std_type_info_destroy_list
memmove
__std_terminate
_purecall
__std_exception_destroy
__std_exception_copy
memset

msvcp140

?_Random_device@std@@YAIXZ
_Thrd_id
?_Xinvalid_argument@std@@YAXPEBD@Z
?_Xbad_alloc@std@@YAXXZ
?_Xlength_error@std@@YAXPEBD@Z
_Query_perf_counter
_Query_perf_frequency
_Thrd_sleep
_Xtime_get_ticks
?_Xbad_function_call@std@@YAXXZ
?_Throw_Cpp_error@std@@YAXH@Z
_Mtx_init_in_situ
_Mtx_destroy_in_situ
_Mtx_lock
_Mtx_unlock
?__ExceptionPtrCreate@@YAXPEAX@Z
?__ExceptionPtrCurrentException@@YAXPEAX@Z
?__ExceptionPtrCopy@@YAXPEAXPEBX@Z
?__ExceptionPtrDestroy@@YAXPEAX@Z
?_Xout_of_range@std@@YAXPEBD@Z

api-ms-win-crt-heap-l1-1-0

malloc
free

api-ms-win-crt-runtime-l1-1-0

_initterm_e
_seh_filter_dll
_configure_narrow_argv
terminate
_errno
_invalid_parameter_noinfo
_initialize_narrow_environment
abort
_initialize_onexit_table
_register_onexit_function
_execute_onexit_table
_invalid_parameter_noinfo_noreturn
_initterm
_crt_atexit
_cexit

api-ms-win-crt-string-l1-1-0

wcsncpy_s
wcsncat_s
strncpy_s
wcscmp
strcmp
strncmp

api-ms-win-crt-math-l1-1-0

floorf
floor
exp
cosf
cos
fmodf
ceil
atan2
log
pow
fmod
powf
sqrt
sinf
ceilf
sin
tan

api-ms-win-crt-stdio-l1-1-0

__stdio_common_vsnwprintf_s
__stdio_common_vswprintf_s
__stdio_common_vswprintf

api-ms-win-crt-utility-l1-1-0

srand

api-ms-win-crt-convert-l1-1-0

_wtoi
atof
wcstoul
wcstol
_ecvt_s

api-ms-win-crt-locale-l1-1-0

__initialize_lconv_for_unsigned_char

Exports

Exports

BiffToMetro
DllMain
ForeignToRtf32
InitConverter32
IsFormatCorrect32
RegisterApp
RtfToForeign32
SetAppVer
UninitConverter

Sections

.text
Size: 13.4MB - Virtual size: 13.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2.2MB - Virtual size: 2.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 321KB - Virtual size: 403KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 433KB - Virtual size: 432KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.didat
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 620KB - Virtual size: 619KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 82KB - Virtual size: 82KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Wordcnvpxy.cnv
.dll regsvr32 windows:6 windows x64 arch:x64

04beef1cb3f40c73f0c492a42dc21fd6

Code Sign

33:00:00:05:56:c9:20:2b:1f:74:32:5d:2d:00:00:00:00:05:56
Certificate

Issuer

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

19/10/2023, 19:51

Not After

16/10/2024, 19:51

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0c:52:4c:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

06/07/2010, 20:40

Not After

06/07/2025, 20:50

Subject

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

33:00:00:03:a4:cb:e3:56:b8:cb:7f:e4:27:00:00:00:00:03:a4
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

19/10/2023, 19:51

Not After

16/10/2024, 19:51

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08/07/2011, 20:59

Not After

08/07/2026, 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

9c:96:a7:ab:67:4d:51:21:e7:9f:f2:17:96:91:74:55:0e:72:e5:40:fc:3d:86:fa:c8:8d:bc:8e:6e:b0:7a:ce
Signer

Actual PE Digest

9c:96:a7:ab:67:4d:51:21:e7:9f:f2:17:96:91:74:55:0e:72:e5:40:fc:3d:86:fa:c8:8d:bc:8e:6e:b0:7a:ce

Digest Algorithm

sha256

PE Digest Matches

true

9c:96:a7:ab:67:4d:51:21:e7:9f:f2:17:96:91:74:55:0e:72:e5:40:fc:3d:86:fa:c8:8d:bc:8e:6e:b0:7a:ce
Signer

Actual PE Digest

9c:96:a7:ab:67:4d:51:21:e7:9f:f2:17:96:91:74:55:0e:72:e5:40:fc:3d:86:fa:c8:8d:bc:8e:6e:b0:7a:ce

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

d:\dbs\el\omr\target\x64\ship\word\x-none\wordcnvpxy.pdb

Imports

kernel32

CloseHandle
GlobalLock
GlobalUnlock
GlobalReAlloc
CreateActCtxW
ActivateActCtx
HeapFree
SetLastError
GetModuleHandleExW
GlobalFree
FindActCtxSectionStringW
DeactivateActCtx
QueryActCtxW
GetLastError
LoadLibraryW
HeapAlloc
GetProcAddress
GetProcessHeap
RtlLookupFunctionEntry
GlobalAlloc
DisableThreadLibraryCalls
MultiByteToWideChar
CreateFileW
GetModuleFileNameW
ReadFile
OutputDebugStringA
LoadLibraryExA
FreeLibrary
VirtualQuery
VirtualProtect
GetSystemInfo
RaiseException
GetModuleHandleW
IsDebuggerPresent
InitializeSListHead
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
IsProcessorFeaturePresent
TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
RtlVirtualUnwind
RtlCaptureContext

advapi32

DeregisterEventSource
RegCloseKey
RegOpenKeyExW
RegisterEventSourceW
RegQueryValueExW
ReportEventW

rpcrt4

CStdStubBuffer_CountRefs
NdrDllUnregisterProxy
NdrDllRegisterProxy
NdrDllGetClassObject
NdrDllCanUnloadNow
NdrCStdStubBuffer_Release
CStdStubBuffer_Invoke
IUnknown_AddRef_Proxy
CStdStubBuffer_Disconnect
IUnknown_QueryInterface_Proxy
CStdStubBuffer_QueryInterface
NdrOleAllocate
CStdStubBuffer_DebugServerRelease
CStdStubBuffer_AddRef
NdrOleFree
IUnknown_Release_Proxy
CStdStubBuffer_DebugServerQueryInterface
CStdStubBuffer_Connect
CStdStubBuffer_IsIIDSupported

ole32

HWND_UserMarshal
CoUninitialize
StgIsStorageFile
StgOpenStorage
CoInitializeEx
HWND_UserSize
HWND_UserFree
HWND_UserUnmarshal
CoCreateInstance

oleaut32

SysFreeString
SysAllocString
BSTR_UserMarshal
BSTR_UserUnmarshal
BSTR_UserFree
BSTR_UserSize

vcruntime140_1

__CxxFrameHandler4

vcruntime140

__std_exception_destroy
__std_exception_copy
memmove
_CxxThrowException
__std_type_info_destroy_list
__C_specific_handler
__std_terminate
memcpy
memset

api-ms-win-crt-string-l1-1-0

_wcsicmp
strncpy_s

api-ms-win-crt-stdio-l1-1-0

__stdio_common_vswprintf_s

api-ms-win-crt-runtime-l1-1-0

_initialize_narrow_environment
_configure_narrow_argv
_cexit
_seh_filter_dll
_initterm_e
_execute_onexit_table
_initialize_onexit_table
_initterm

api-ms-win-crt-heap-l1-1-0

free
malloc
_callnewh

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer
ForeignToRtf32
InitConverter32
IsFormatCorrect32
RegisterApp
RtfToForeign32
UninitConverter

Sections

.text
Size: 15KB - Virtual size: 15KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.orpc
Size: 512B - Virtual size: 44B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.didat
Size: 512B - Virtual size: 32B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 220B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Wordcnvr.dll
.dll windows:6 windows x64 arch:x64

Code Sign

33:00:00:05:57:cf:90:dd:c7:d1:c0:88:8c:00:00:00:00:05:57
Certificate

Issuer

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

19/10/2023, 19:51

Not After

16/10/2024, 19:51

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0c:52:4c:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

06/07/2010, 20:40

Not After

06/07/2025, 20:50

Subject

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

33:00:00:03:a5:41:11:e8:f0:7f:be:0b:75:00:00:00:00:03:a5
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

19/10/2023, 19:51

Not After

16/10/2024, 19:51

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08/07/2011, 20:59

Not After

08/07/2026, 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

24:cb:ba:f1:c2:bd:f6:26:72:4f:4c:b8:b2:ca:9f:23:6d:8e:27:7f:6e:54:e4:3e:b3:7f:2e:76:a3:6b:dd:0e
Signer

Actual PE Digest

24:cb:ba:f1:c2:bd:f6:26:72:4f:4c:b8:b2:ca:9f:23:6d:8e:27:7f:6e:54:e4:3e:b3:7f:2e:76:a3:6b:dd:0e

Digest Algorithm

sha256

PE Digest Matches

true

24:cb:ba:f1:c2:bd:f6:26:72:4f:4c:b8:b2:ca:9f:23:6d:8e:27:7f:6e:54:e4:3e:b3:7f:2e:76:a3:6b:dd:0e
Signer

Actual PE Digest

24:cb:ba:f1:c2:bd:f6:26:72:4f:4c:b8:b2:ca:9f:23:6d:8e:27:7f:6e:54:e4:3e:b3:7f:2e:76:a3:6b:dd:0e

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Sections

.rdata
Size: 512B - Virtual size: 272B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 966KB - Virtual size: 966KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
XLINTL32.COMMON.DLL
.dll windows:6 windows x64 arch:x64

Code Sign

33:00:00:05:56:c9:20:2b:1f:74:32:5d:2d:00:00:00:00:05:56
Certificate

Issuer

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

19/10/2023, 19:51

Not After

16/10/2024, 19:51

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0c:52:4c:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

06/07/2010, 20:40

Not After

06/07/2025, 20:50

Subject

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

33:00:00:03:a4:cb:e3:56:b8:cb:7f:e4:27:00:00:00:00:03:a4
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

19/10/2023, 19:51

Not After

16/10/2024, 19:51

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08/07/2011, 20:59

Not After

08/07/2026, 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

cd:95:e8:d3:b8:9f:17:71:28:74:89:89:71:30:09:fe:7e:15:87:c1:07:79:de:6e:23:6a:25:2b:84:06:d7:ce
Signer

Actual PE Digest

cd:95:e8:d3:b8:9f:17:71:28:74:89:89:71:30:09:fe:7e:15:87:c1:07:79:de:6e:23:6a:25:2b:84:06:d7:ce

Digest Algorithm

sha256

PE Digest Matches

true

cd:95:e8:d3:b8:9f:17:71:28:74:89:89:71:30:09:fe:7e:15:87:c1:07:79:de:6e:23:6a:25:2b:84:06:d7:ce
Signer

Actual PE Digest

cd:95:e8:d3:b8:9f:17:71:28:74:89:89:71:30:09:fe:7e:15:87:c1:07:79:de:6e:23:6a:25:2b:84:06:d7:ce

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Sections

.text
Size: 512B - Virtual size: 272B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 15.4MB - Virtual size: 15.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
excelcnv.exe.manifest
flat_officeFontsPreview.ttf
lpklegal.txt
mscss7cm_en.dub
.dll windows:6 windows x64 arch:x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Sections

.rdata
Size: 512B - Virtual size: 272B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
mscss7cm_es.dub
.dll windows:6 windows x64 arch:x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Sections

.rdata
Size: 512B - Virtual size: 272B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
mscss7cm_fr.dub
.dll windows:6 windows x64 arch:x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Sections

.rdata
Size: 512B - Virtual size: 272B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
mscss7wre_en.dub
.dll windows:6 windows x64 arch:x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Sections

.rdata
Size: 512B - Virtual size: 276B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 100KB - Virtual size: 99KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
mscss7wre_es.dub
.dll windows:6 windows x64 arch:x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Sections

.rdata
Size: 512B - Virtual size: 276B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
mscss7wre_fr.dub
.dll windows:6 windows x64 arch:x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Sections

.rdata
Size: 512B - Virtual size: 276B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
msoasb.exe.manifest
msoutilstat.etw.man
pkeyconfig-office.xrm-ms
sdxhelper.exe.manifest
v8jsi.dll
.dll windows:5 windows x64 arch:x64

21c9e878afd6d775eeb4f2012bc27dbc

Code Sign

33:00:00:05:56:c9:20:2b:1f:74:32:5d:2d:00:00:00:00:05:56
Certificate

Issuer

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

19/10/2023, 19:51

Not After

16/10/2024, 19:51

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0c:52:4c:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

06/07/2010, 20:40

Not After

06/07/2025, 20:50

Subject

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

33:00:00:03:a4:cb:e3:56:b8:cb:7f:e4:27:00:00:00:00:03:a4
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

19/10/2023, 19:51

Not After

16/10/2024, 19:51

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08/07/2011, 20:59

Not After

08/07/2026, 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

8d:79:26:bc:75:ac:5a:75:17:aa:0d:a8:40:20:38:d5:ae:89:e6:c7:8d:91:48:52:82:be:bd:6b:40:f2:96:3a
Signer

Actual PE Digest

8d:79:26:bc:75:ac:5a:75:17:aa:0d:a8:40:20:38:d5:ae:89:e6:c7:8d:91:48:52:82:be:bd:6b:40:f2:96:3a

Digest Algorithm

sha256

PE Digest Matches

true

8d:79:26:bc:75:ac:5a:75:17:aa:0d:a8:40:20:38:d5:ae:89:e6:c7:8d:91:48:52:82:be:bd:6b:40:f2:96:3a
Signer

Actual PE Digest

8d:79:26:bc:75:ac:5a:75:17:aa:0d:a8:40:20:38:d5:ae:89:e6:c7:8d:91:48:52:82:be:bd:6b:40:f2:96:3a

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

D:\a\_work\1\s\build\v8\out\win32\x64\Release\v8jsi.dll.pdb

Imports

advapi32

EventRegister
EventUnregister
EventSetInformation
EventWriteTransfer

ws2_32

WSACleanup
closesocket
bind
WSAStartup
setsockopt
htons
WSAGetLastError
WSASend
WSASocketW
WSARecv
listen
ioctlsocket

kernel32

DisableThreadLibraryCalls
IsProcessorFeaturePresent
UnhandledExceptionFilter
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
GetLocaleInfoEx
InitOnceComplete
InitOnceBeginInitialize
InitOnceExecuteOnce
CloseHandle
GetLastError
PostQueuedCompletionStatus
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
SetEvent
WaitForSingleObject
WaitForMultipleObjects
QueueUserAPC
TerminateThread
TlsAlloc
TlsFree
LocalFree
FormatMessageA
VerSetConditionMask
SetLastError
CreateIoCompletionPort
GetQueuedCompletionStatus
CancelIoEx
InitializeCriticalSectionAndSpinCount
SleepEx
CreateEventW
SetWaitableTimer
TlsGetValue
TlsSetValue
VerifyVersionInfoW
MultiByteToWideChar
GetThreadContext
ResumeThread
SuspendThread
DuplicateHandle
SleepConditionVariableSRW
WakeAllConditionVariable
WakeConditionVariable
InitializeConditionVariable
CreateSemaphoreA
ReleaseSemaphore
GetNativeSystemInfo
GetModuleFileNameW
SetUnhandledExceptionFilter
RtlCaptureStackBackTrace
LoadLibraryExW
RtlDeleteFunctionTable
RtlAddFunctionTable
QueryThreadCycleTime
GetThreadPriority
SetThreadPriority
QueryPerformanceFrequency
QueryPerformanceCounter
WideCharToMultiByte
GetTimeZoneInformation
LoadLibraryW
GetProcAddress
GetModuleHandleW
UnmapViewOfFile
MapViewOfFileEx
MapViewOfFile
VirtualQuery
VirtualFree
VirtualProtect
VirtualAlloc
GetSystemTimeAsFileTime
GetSystemInfo
GetCurrentThreadId
GetCurrentThread
TerminateProcess
GetCurrentProcessId
GetCurrentProcess
Sleep
CreateWaitableTimerExW
OutputDebugStringA
IsDebuggerPresent
GetTempFileNameA
GetTempPathA
GetFileType
DeleteFileA
GetStdHandle
TryEnterCriticalSection
InitializeCriticalSection
TryAcquireSRWLockShared
TryAcquireSRWLockExclusive
AcquireSRWLockShared
AcquireSRWLockExclusive
ReleaseSRWLockShared
ReleaseSRWLockExclusive
InitializeSListHead

msvcp140

??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@H@Z
?__ExceptionPtrCreate@@YAXPEAX@Z
?__ExceptionPtrDestroy@@YAXPEAX@Z
?__ExceptionPtrCopy@@YAXPEAXPEBX@Z
?__ExceptionPtrAssign@@YAXPEAXPEBX@Z
?__ExceptionPtrCurrentException@@YAXPEAX@Z
?__ExceptionPtrRethrow@@YAXPEBX@Z
?__ExceptionPtrCopyException@@YAXPEAXPEBX1@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@_K@Z
_Lock_shared_ptr_spin_lock
_Unlock_shared_ptr_spin_lock
?_Raise_handler@std@@3P6AXAEBVexception@stdext@@@ZEA
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@P6AAEAVios_base@1@AEAV21@@Z@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@I@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@K@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@_J@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@PEBX@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@N@Z
??0_Lockit@std@@QEAA@H@Z
??1_Lockit@std@@QEAA@XZ
??Bid@locale@std@@QEAA_KXZ
?_Getgloballocale@locale@std@@CAPEAV_Locimp@12@XZ
?always_noconv@codecvt_base@std@@QEBA_NXZ
?in@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAD3AEAPEAD@Z
?out@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAD3AEAPEAD@Z
?unshift@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEAD1AEAPEAD@Z
?_Getcat@?$codecvt@DDU_Mbstatet@@@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z
?getloc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEBA?AVlocale@2@XZ
?_Gninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAPEADXZ
?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXXZ
?_Fiopen@std@@YAPEAU_iobuf@@PEBDHH@Z
?id@?$codecvt@DDU_Mbstatet@@@std@@2V0locale@2@A
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@F@Z
?setprecision@std@@YA?AU?$_Smanip@_J@1@_J@Z
?setw@std@@YA?AU?$_Smanip@_J@1@_J@Z
?write@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@PEBD_J@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@_N@Z
?cout@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A
?cerr@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A
?rdbuf@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAPEAV?$basic_streambuf@DU?$char_traits@D@std@@@2@PEAV32@@Z
?seekpos@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA?AV?$fpos@U_Mbstatet@@@2@V32@H@Z
?seekoff@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA?AV?$fpos@U_Mbstatet@@@2@_JHH@Z
?underflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ
?pbackfail@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHH@Z
??0?$basic_ios@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z
?copyfmt@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAAEAV12@AEBV12@@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@M@Z
?sbumpc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ
?sgetc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ
?snextc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ
?_Ipfx@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA_N_N@Z
??0?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
??1?$basic_istream@DU?$char_traits@D@std@@@std@@UEAA@XZ
?_Xoverflow_error@std@@YAXPEBD@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@G@Z
?_Xinvalid_argument@std@@YAXPEBD@Z
?widen@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBADD@Z
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IEAA@XZ
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAXXZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@P6AAEAV01@AEAV01@@Z@Z
?put@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@D@Z
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@XZ
??0?$basic_iostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z
??1?$basic_iostream@DU?$char_traits@D@std@@@std@@UEAA@XZ
?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAXAEBVlocale@2@@Z
?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ
?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAPEAV12@PEAD_J@Z
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEBD_J@Z
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEAD_J@Z
?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JXZ
?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ
?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ
_Xtime_get_ticks
_Cnd_init_in_situ
_Cnd_destroy_in_situ
_Cnd_wait
_Cnd_broadcast
?_Syserror_map@std@@YAPEBDH@Z
?_Winerror_map@std@@YAHH@Z
?_Random_device@std@@YAIXZ
_Thrd_detach
_Cnd_do_broadcast_at_thread_exit
?rdbuf@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBAPEAV?$basic_streambuf@DU?$char_traits@D@std@@@2@XZ
??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
?tie@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBAPEAV?$basic_ostream@DU?$char_traits@D@std@@@2@XZ
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UEAA@XZ
?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAPEADXZ
?setp@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXPEAD00@Z
?setp@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXPEAD0@Z
?epptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ
?setg@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXPEAD00@Z
?gbump@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXH@Z
?egptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ
?pptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ
?pbase@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ
?gptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ
?eback@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAA_JPEBD_J@Z
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHD@Z
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAA@XZ
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAA@XZ
?width@ios_base@std@@QEAA_J_J@Z
?width@ios_base@std@@QEBA_JXZ
?flags@ios_base@std@@QEBAHXZ
?good@ios_base@std@@QEBA_NXZ
?_Throw_Cpp_error@std@@YAXH@Z
_Mtx_unlock
??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UEAA@XZ
?_Xbad_alloc@std@@YAXXZ
?_Xlength_error@std@@YAXPEBD@Z
?_Xout_of_range@std@@YAXPEBD@Z
?uncaught_exceptions@std@@YAHXZ
_Mtx_lock
_Mtx_destroy_in_situ
_Mtx_init_in_situ
?_Xbad_function_call@std@@YAXXZ
?fill@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBADXZ

mswsock

GetAcceptExSockaddrs
AcceptEx

vcruntime140

__current_exception
strchr
__current_exception_context
memcmp
memchr
memset
__std_type_info_compare
__std_type_info_destroy_list
__C_specific_handler
_purecall
memmove
memcpy
__std_terminate
__std_exception_copy
__std_exception_destroy
_CxxThrowException

vcruntime140_1

__CxxFrameHandler4

api-ms-win-crt-runtime-l1-1-0

abort
_get_pgmptr
_beginthreadex
_invoke_watson
_seh_filter_dll
_configure_narrow_argv
_initialize_narrow_environment
_initialize_onexit_table
_register_onexit_function
_invalid_parameter_noinfo_noreturn
_execute_onexit_table
_crt_atexit
_exit
terminate
_cexit
_initterm_e
_initterm
raise
exit
_errno

api-ms-win-crt-heap-l1-1-0

free
malloc
realloc
_callnewh
_aligned_free
_msize
_aligned_malloc
calloc

api-ms-win-crt-math-l1-1-0

sqrt
lrint
ldexp
ceil
sqrtf
fmod
floor
round
scalbn
_fdclass
exp
nearbyint
trunc
nearbyintf
powf
truncf
pow
ceilf
modff
nextafterf
nextafter
floorf
modf
_dsign
_dclass
log10
copysign
_fdsign

api-ms-win-crt-stdio-l1-1-0

__acrt_iob_func
fflush
__stdio_common_vfprintf
__stdio_common_vsprintf
fread
fsetpos
_fseeki64
_wfopen_s
__stdio_common_vsnprintf_s
_get_stream_buffer_pointers
fclose
fgetc
fwrite
ferror
_fileno
setvbuf
_write
__stdio_common_vsprintf_s
fopen
fgetpos
ungetc
rewind
ftell
fseek
fputc

api-ms-win-crt-string-l1-1-0

_strdup
strncpy_s
isprint
isdigit
strcmp
strncmp

api-ms-win-crt-time-l1-1-0

_localtime64_s
_tzset

api-ms-win-crt-filesystem-l1-1-0

_lock_file
_unlock_file

api-ms-win-crt-convert-l1-1-0

strtoul
strtol
strtoull
strtof
strtoll
strtod

api-ms-win-crt-utility-l1-1-0

rand_s

dbghelp

StackWalk64
SymSetOptions
SymFunctionTableAccess64
SymGetModuleBase64
SymGetLineFromAddr64
SymInitialize
SymGetSearchPathW
SymSetSearchPathW
SymFromAddr

winmm

timeGetTime

Exports

Exports

?makeV8Runtime@v8runtime@@YA?AV?$unique_ptr@VRuntime@jsi@facebook@@U?$default_delete@VRuntime@jsi@facebook@@@std@@@std@@$$QEAUV8RuntimeArgs@1@@Z
?openInspector@v8runtime@@YAXAEAVRuntime@jsi@facebook@@@Z
?openInspectors_toberemoved@v8runtime@@YAXXZ
CrashForExceptionInNonABICompliantCodeRange
jsr_close_napi_env_scope
jsr_collect_garbage
jsr_config_enable_gc_api
jsr_config_enable_inspector
jsr_config_set_inspector_break_on_start
jsr_config_set_inspector_port
jsr_config_set_inspector_runtime_name
jsr_config_set_script_cache
jsr_config_set_task_runner
jsr_create_config
jsr_create_prepared_script
jsr_create_runtime
jsr_delete_config
jsr_delete_prepared_script
jsr_delete_runtime
jsr_drain_microtasks
jsr_get_and_clear_last_unhandled_promise_rejection
jsr_get_description
jsr_has_unhandled_promise_rejection
jsr_is_inspectable
jsr_open_napi_env_scope
jsr_prepared_script_run
jsr_run_script
jsr_runtime_get_node_api_env
napi_add_finalizer
napi_adjust_external_memory
napi_call_function
napi_check_object_type_tag
napi_close_escapable_handle_scope
napi_close_handle_scope
napi_coerce_to_bool
napi_coerce_to_number
napi_coerce_to_object
napi_coerce_to_string
napi_create_array
napi_create_array_with_length
napi_create_arraybuffer
napi_create_bigint_int64
napi_create_bigint_uint64
napi_create_bigint_words
napi_create_dataview
napi_create_date
napi_create_double
napi_create_error
napi_create_external
napi_create_external_arraybuffer
napi_create_function
napi_create_int32
napi_create_int64
napi_create_object
napi_create_promise
napi_create_range_error
napi_create_reference
napi_create_string_latin1
napi_create_string_utf16
napi_create_string_utf8
napi_create_symbol
napi_create_type_error
napi_create_typedarray
napi_create_uint32
napi_define_class
napi_define_properties
napi_delete_element
napi_delete_property
napi_delete_reference
napi_detach_arraybuffer
napi_escape_handle
napi_get_all_property_names
napi_get_and_clear_last_exception
napi_get_array_length
napi_get_arraybuffer_info
napi_get_boolean
napi_get_cb_info
napi_get_dataview_info
napi_get_date_value
napi_get_element
napi_get_global
napi_get_instance_data
napi_get_last_error_info
napi_get_named_property
napi_get_new_target
napi_get_null
napi_get_property
napi_get_property_names
napi_get_prototype
napi_get_reference_value
napi_get_typedarray_info
napi_get_undefined
napi_get_value_bigint_int64
napi_get_value_bigint_uint64
napi_get_value_bigint_words
napi_get_value_bool
napi_get_value_double
napi_get_value_external
napi_get_value_int32
napi_get_value_int64
napi_get_value_string_latin1
napi_get_value_string_utf16
napi_get_value_string_utf8
napi_get_value_uint32
napi_get_version
napi_has_element
napi_has_named_property
napi_has_own_property
napi_has_property
napi_instanceof
napi_is_array
napi_is_arraybuffer
napi_is_dataview
napi_is_date
napi_is_detached_arraybuffer
napi_is_error
napi_is_exception_pending
napi_is_promise
napi_is_typedarray
napi_new_instance
napi_object_freeze
napi_object_seal
napi_open_escapable_handle_scope
napi_open_handle_scope
napi_reference_ref
napi_reference_unref
napi_reject_deferred
napi_remove_wrap
napi_resolve_deferred
napi_run_script
napi_set_element
napi_set_instance_data
napi_set_named_property
napi_set_property
napi_strict_equals
napi_throw
napi_throw_error
napi_throw_range_error
napi_throw_type_error
napi_type_tag_object
napi_typeof
napi_unwrap
napi_wrap
v8_config_enable_multithreading

Sections

.text
Size: 16.2MB - Virtual size: 16.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2.1MB - Virtual size: 2.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 178KB - Virtual size: 388KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 740KB - Virtual size: 739KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 1016B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 44KB - Virtual size: 43KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
vccorlib140.dll
.dll windows:6 windows x64 arch:x64

d5ec94ca50152cc1e7188b825074fef2

Code Sign

33:00:00:00:f7:80:de:c4:94:54:79:46:07:00:00:00:00:00:f7
Certificate

Issuer

CN=Microsoft Windows Third Party Component CA 2013,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

19/10/2023, 19:43

Not After

16/10/2024, 19:43

Subject

CN=Microsoft Windows Software Compatibility Publisher,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

33:00:00:00:14:9d:fb:c3:1f:1f:63:c3:10:00:00:00:00:00:14
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

01/05/2013, 20:44

Not After

01/05/2028, 20:54

Subject

CN=Microsoft Windows Third Party Component CA 2013,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

33:00:00:03:a4:cb:e3:56:b8:cb:7f:e4:27:00:00:00:00:03:a4
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

19/10/2023, 19:51

Not After

16/10/2024, 19:51

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08/07/2011, 20:59

Not After

08/07/2026, 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

47:2d:92:bb:02:56:1b:9f:fc:58:1a:5a:39:ce:00:82:45:fc:b1:3c:83:31:c9:3d:43:48:45:36:eb:d4:84:0f
Signer

Actual PE Digest

47:2d:92:bb:02:56:1b:9f:fc:58:1a:5a:39:ce:00:82:45:fc:b1:3c:83:31:c9:3d:43:48:45:36:eb:d4:84:0f

Digest Algorithm

sha256

PE Digest Matches

true

47:2d:92:bb:02:56:1b:9f:fc:58:1a:5a:39:ce:00:82:45:fc:b1:3c:83:31:c9:3d:43:48:45:36:eb:d4:84:0f
Signer

Actual PE Digest

47:2d:92:bb:02:56:1b:9f:fc:58:1a:5a:39:ce:00:82:45:fc:b1:3c:83:31:c9:3d:43:48:45:36:eb:d4:84:0f

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

D:\a\_work\1\s\binaries\amd64ret\bin\amd64\vccorlib140.amd64.pdb

Imports

kernel32

RaiseException
ReleaseSRWLockExclusive
AcquireSRWLockExclusive
ReleaseSRWLockShared
AcquireSRWLockShared
FormatMessageW
GetProcAddress
LoadLibraryExW
HeapFree
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionEx
GetLastError
OutputDebugStringW
HeapAlloc
DeleteCriticalSection
GetProcessHeap
CreateEventExW
WaitForMultipleObjectsEx
SetEvent
CloseHandle
DecodePointer
InitializeSRWLock
TryAcquireSRWLockShared
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
IsDebuggerPresent
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
DisableThreadLibraryCalls
InitializeSListHead

vcruntime140_1

__CxxFrameHandler4

vcruntime140

memset
_CxxThrowException
__C_specific_handler
memmove
__std_type_info_destroy_list
_purecall
__current_exception_context
__current_exception
_SetWinRTOutOfMemoryExceptionCallback
__GetPlatformExceptionInfo
__std_exception_copy
__std_exception_destroy
__std_terminate
memcpy

api-ms-win-crt-stdio-l1-1-0

__acrt_iob_func
__stdio_common_vfprintf
__stdio_common_vswprintf_s

api-ms-win-crt-runtime-l1-1-0

_invoke_watson
__p___wargv
__p___argc
_invalid_parameter_noinfo_noreturn
terminate
_seh_filter_dll
_configure_narrow_argv
_initialize_narrow_environment
_initialize_onexit_table
_configure_wide_argv
_register_onexit_function
_execute_onexit_table
_initterm_e
_initterm
_cexit
_crt_atexit

api-ms-win-crt-heap-l1-1-0

_aligned_offset_malloc
_aligned_free
free
_callnewh
malloc

api-ms-win-crt-string-l1-1-0

wcscpy_s

msvcp140

?_Xlength_error@std@@YAXPEBD@Z

ole32

CoTaskMemAlloc
CoGetApartmentType
CoMarshalInterThreadInterfaceInStream
CoAddRefServerProcess
CoGetContextToken
CoGetInterfaceAndReleaseStream
CoCreateFreeThreadedMarshaler
CoTaskMemFree
CoReleaseServerProcess
CoGetObjectContext

oleaut32

SysAllocStringLen
SysFreeString

api-ms-win-core-winrt-string-l1-1-0

WindowsGetStringLen
WindowsGetStringRawBuffer
WindowsCreateStringReference
WindowsDeleteString
WindowsCompareStringOrdinal
WindowsIsStringEmpty
WindowsDuplicateString
WindowsStringHasEmbeddedNull
WindowsCreateString

api-ms-win-core-winrt-error-l1-1-0

SetRestrictedErrorInfo
RoOriginateError
GetRestrictedErrorInfo
RoTransformError

api-ms-win-core-winrt-l1-1-0

RoRegisterForApartmentShutdown
RoGetActivationFactory
RoUnregisterForApartmentShutdown
RoGetApartmentIdentifier
RoInitialize
RoUninitialize
RoRevokeActivationFactories
RoRegisterActivationFactories

api-ms-win-crt-math-l1-1-0

ceilf

Exports

Exports

?<Dispose>@Exception@Platform@@UE$AAAXXZ
?<Dispose>@String@Platform@@UE$AAAXXZ
?<Dispose>@Type@Platform@@UE$AAAXXZ
??0AccessDeniedException@Platform@@QE$AAA@PE$AAVString@1@@Z
??0AccessDeniedException@Platform@@QE$AAA@XZ
??0Attribute@Metadata@Platform@@QE$AAA@XZ
??0Boolean@Platform@@QEAA@_N@Z
??0COMException@Platform@@QE$AAA@H@Z
??0COMException@Platform@@QE$AAA@HPE$AAVString@1@@Z
??0ChangedStateException@Platform@@QE$AAA@PE$AAVString@1@@Z
??0ChangedStateException@Platform@@QE$AAA@XZ
??0ClassNotRegisteredException@Platform@@QE$AAA@PE$AAVString@1@@Z
??0ClassNotRegisteredException@Platform@@QE$AAA@XZ
??0Delegate@Platform@@QE$AAA@XZ
??0DisconnectedException@Platform@@QE$AAA@PE$AAVString@1@@Z
??0DisconnectedException@Platform@@QE$AAA@XZ
??0Enum@Platform@@QE$AAA@XZ
??0Exception@Platform@@QE$AAA@H@Z
??0Exception@Platform@@QE$AAA@HPE$AAVString@1@@Z
??0FailureException@Platform@@QE$AAA@PE$AAVString@1@@Z
??0FailureException@Platform@@QE$AAA@XZ
??0GridLength@Xaml@UI@Windows@@QEAA@NW4GridUnitType@123@@Z
??0IntPtr@Platform@@QEAA@H@Z
??0IntPtr@Platform@@QEAA@PEAX@Z
??0InvalidArgumentException@Platform@@QE$AAA@PE$AAVString@1@@Z
??0InvalidArgumentException@Platform@@QE$AAA@XZ
??0InvalidCastException@Platform@@QE$AAA@PE$AAVString@1@@Z
??0InvalidCastException@Platform@@QE$AAA@XZ
??0MTAThreadAttribute@Platform@@QE$AAA@XZ
??0NotImplementedException@Platform@@QE$AAA@PE$AAVString@1@@Z
??0NotImplementedException@Platform@@QE$AAA@XZ
??0NullReferenceException@Platform@@QE$AAA@PE$AAVString@1@@Z
??0NullReferenceException@Platform@@QE$AAA@XZ
??0Object@Platform@@QE$AAA@XZ
??0ObjectDisposedException@Platform@@QE$AAA@PE$AAVString@1@@Z
??0ObjectDisposedException@Platform@@QE$AAA@XZ
??0OnePhaseConstructedAttribute@CompilerServices@Runtime@Platform@@QE$AAA@XZ
??0OperationCanceledException@Platform@@QE$AAA@PE$AAVString@1@@Z
??0OperationCanceledException@Platform@@QE$AAA@XZ
??0OutOfBoundsException@Platform@@QE$AAA@PE$AAVString@1@@Z
??0OutOfBoundsException@Platform@@QE$AAA@XZ
??0OutOfMemoryException@Platform@@QE$AAA@PE$AAVString@1@@Z
??0OutOfMemoryException@Platform@@QE$AAA@XZ
??0Rect@Foundation@Windows@@QEAA@VPoint@12@0@Z
??0Rect@Foundation@Windows@@QEAA@VPoint@12@VSize@12@@Z
??0RepeatBehavior@Animation@Media@Xaml@UI@Windows@@QEAA@N@Z
??0STAThreadAttribute@Platform@@QE$AAA@XZ
??0SizeT@Platform@@QEAA@H@Z
??0SizeT@Platform@@QEAA@PEAX@Z
??0Type@Platform@@QE$AAA@PE$AAVObject@1@@Z
??0Type@Platform@@QE$AAA@VIntPtr@1@@Z
??0Type@Platform@@QE$AAA@VTypeName@Interop@Xaml@UI@Windows@@@Z
??0ValueType@Platform@@QE$AAA@XZ
??0WrongThreadException@Platform@@QE$AAA@PE$AAVString@1@@Z
??0WrongThreadException@Platform@@QE$AAA@XZ
??0char16@default@@QEAA@_W@Z
??0float32@default@@QEAA@M@Z
??0float64@default@@QEAA@N@Z
??0int16@default@@QEAA@F@Z
??0int32@default@@QEAA@H@Z
??0int64@default@@QEAA@_J@Z
??0int8@default@@QEAA@C@Z
??0uint16@default@@QEAA@G@Z
??0uint32@default@@QEAA@I@Z
??0uint64@default@@QEAA@_K@Z
??0uint8@default@@QEAA@E@Z
??BIntPtr@Platform@@SA?AV01@H@Z
??BIntPtr@Platform@@SA?AV01@PEAX@Z
??BIntPtr@Platform@@SAPEAXV01@@Z
??BType@Platform@@SA?AVTypeName@Interop@Xaml@UI@Windows@@PE$AAV01@@Z
??BType@Platform@@SAPE$AAV01@VTypeName@Interop@Xaml@UI@Windows@@@Z
??DMatrix3D@Media3D@Media@Xaml@UI@Windows@@SA?AV012345@V012345@0@Z
??GDuration@Xaml@UI@Windows@@SA?AV0123@V0123@0@Z
??HDuration@Xaml@UI@Windows@@SA?AV0123@V0123@0@Z
??MDuration@Xaml@UI@Windows@@SA_NV0123@0@Z
??NDuration@Xaml@UI@Windows@@SA_NV0123@0@Z
??ODuration@Xaml@UI@Windows@@SA_NV0123@0@Z
??PDuration@Xaml@UI@Windows@@SA_NV0123@0@Z
?AlignedAllocate@Heap@Details@Platform@@SAPEAX_K00@Z
?AlignedAllocate@Heap@Details@Platform@@SAPEAX_K0@Z
?AlignedAllocateException@Heap@Details@Platform@@SAPEAX_K00@Z
?AlignedAllocateException@Heap@Details@Platform@@SAPEAX_K0@Z
?AlignedFree@Heap@Details@Platform@@SAXPEAX@Z
?AlignedFreeException@Heap@Details@Platform@@SAXPEAX@Z
?Allocate@Heap@Details@Platform@@SAPEAX_K0@Z
?Allocate@Heap@Details@Platform@@SAPEAX_K@Z
?AllocateException@Heap@Details@Platform@@SAPEAX_K0@Z
?AllocateException@Heap@Details@Platform@@SAPEAX_K@Z
?Compare@Duration@Xaml@UI@Windows@@SAHV1234@0@Z
?Contains@Rect@Foundation@Windows@@QEAA_NVPoint@23@@Z
?CreateException@Exception@Platform@@SAPE$AAV12@H@Z
?CreateException@Exception@Platform@@SAPE$AAV12@HPE$AAVString@2@@Z
?CreateValue@Details@Platform@@YAPE$AAVObject@2@W4TypeCode@2@PEBX@Z
?EnableFactoryCache@@YAXXZ
?EnumerateAllocatedObjects@Heap@Details@Platform@@SAXPE$AAVHeapEntryHandler@23@@Z
?Equals@Attribute@Metadata@Platform@@QE$AAA_NPE$AAVObject@3@@Z
?Equals@Boolean@Platform@@QEAA_NPE$AAVObject@2@@Z
?Equals@Delegate@Platform@@QE$AAA_NPE$AAVObject@2@@Z
?Equals@Enum@Platform@@QE$AAA_NPE$AAVObject@2@@Z
?Equals@Exception@Platform@@UE$AAA_NPE$AAVObject@2@@Z
?Equals@MTAThreadAttribute@Platform@@QE$AAA_NPE$AAVObject@2@@Z
?Equals@Object@Platform@@QE$AAA_NPE$AAV12@@Z
?Equals@OnePhaseConstructedAttribute@CompilerServices@Runtime@Platform@@QE$AAA_NPE$AAVObject@4@@Z
?Equals@STAThreadAttribute@Platform@@QE$AAA_NPE$AAVObject@2@@Z
?Equals@Type@Platform@@UE$AAA_NPE$AAVObject@2@@Z
?Equals@ValueType@Platform@@QE$AAA_NPE$AAVObject@2@@Z
?Equals@char16@default@@QEAA_NPE$AAVObject@Platform@@@Z
?Equals@float32@default@@QEAA_NPE$AAVObject@Platform@@@Z
?Equals@float64@default@@QEAA_NPE$AAVObject@Platform@@@Z
?Equals@int16@default@@QEAA_NPE$AAVObject@Platform@@@Z
?Equals@int32@default@@QEAA_NPE$AAVObject@Platform@@@Z
?Equals@int64@default@@QEAA_NPE$AAVObject@Platform@@@Z
?Equals@int8@default@@QEAA_NPE$AAVObject@Platform@@@Z
?Equals@uint16@default@@QEAA_NPE$AAVObject@Platform@@@Z
?Equals@uint32@default@@QEAA_NPE$AAVObject@Platform@@@Z
?Equals@uint64@default@@QEAA_NPE$AAVObject@Platform@@@Z
?Equals@uint8@default@@QEAA_NPE$AAVObject@Platform@@@Z
?EventSourceAdd@Details@Platform@@YA?AVEventRegistrationToken@Foundation@Windows@@PEAPEAXPEAUEventLock@12@PE$AAVDelegate@2@@Z
?EventSourceGetTargetArray@Details@Platform@@YAPEAXPEAXPEAUEventLock@12@@Z
?EventSourceGetTargetArrayEvent@Details@Platform@@YAPEAXPEAXIPEBXPEA_J@Z
?EventSourceGetTargetArraySize@Details@Platform@@YAIPEAX@Z
?EventSourceInitialize@Details@Platform@@YAXPEAPEAX@Z
?EventSourceRemove@Details@Platform@@YAXPEAPEAXPEAUEventLock@12@VEventRegistrationToken@Foundation@Windows@@@Z
?EventSourceUninitialize@Details@Platform@@YAXPEAPEAX@Z
?FlushFactoryCache@@YAXXZ
?Free@Heap@Details@Platform@@SAXPEAX@Z
?FreeException@Heap@Details@Platform@@SAXPEAX@Z
?GetActivationFactory@Details@Platform@@YAJPEAVModuleBase@1WRL@Microsoft@@PEAUHSTRING__@@PEAPEAUIActivationFactory@@@Z
?GetActivationFactoryByPCWSTR@@YAJPEAXAEAVGuid@Platform@@PEAPEAX@Z
?GetCmdArguments@Details@Platform@@YAPEAPEA_WPEAH@Z
?GetHashCode@Attribute@Metadata@Platform@@QE$AAAHXZ
?GetHashCode@Boolean@Platform@@QEAAHXZ
?GetHashCode@Delegate@Platform@@QE$AAAHXZ
?GetHashCode@Enum@Platform@@QE$AAAHXZ
?GetHashCode@Exception@Platform@@UE$AAAHXZ
?GetHashCode@Guid@Platform@@QEAAHXZ
?GetHashCode@MTAThreadAttribute@Platform@@QE$AAAHXZ
?GetHashCode@Object@Platform@@QE$AAAHXZ
?GetHashCode@OnePhaseConstructedAttribute@CompilerServices@Runtime@Platform@@QE$AAAHXZ
?GetHashCode@STAThreadAttribute@Platform@@QE$AAAHXZ
?GetHashCode@Type@Platform@@UE$AAAHXZ
?GetHashCode@ValueType@Platform@@QE$AAAHXZ
?GetHashCode@char16@default@@QEAAHXZ
?GetHashCode@float32@default@@QEAAHXZ
?GetHashCode@float64@default@@QEAAHXZ
?GetHashCode@int16@default@@QEAAHXZ
?GetHashCode@int32@default@@QEAAHXZ
?GetHashCode@int64@default@@QEAAHXZ
?GetHashCode@int8@default@@QEAAHXZ
?GetHashCode@uint16@default@@QEAAHXZ
?GetHashCode@uint32@default@@QEAAHXZ
?GetHashCode@uint64@default@@QEAAHXZ
?GetHashCode@uint8@default@@QEAAHXZ
?GetIBoxArrayVtable@Details@Platform@@YAPEAXPEAX@Z
?GetIBoxVtable@Details@Platform@@YAPEAXPEAX@Z
?GetIidsFn@@YAJHPEAKPEBU__s_GUID@@PEAPEAVGuid@Platform@@@Z
?GetObjectContext@Details@Platform@@YAPEAUIUnknown@@XZ
?GetProxyImpl@Details@Platform@@YAJPEAUIUnknown@@AEBU_GUID@@0PEAPEAU3@@Z
?GetType@Boolean@Platform@@QEAAPE$AAVType@2@XZ
?GetType@Guid@Platform@@QEAAPE$AAVType@2@XZ
?GetType@Object@Platform@@QE$AAAPE$AAVType@2@XZ
?GetType@char16@default@@QEAAPE$AAVType@Platform@@XZ
?GetType@float32@default@@QEAAPE$AAVType@Platform@@XZ
?GetType@float64@default@@QEAAPE$AAVType@Platform@@XZ
?GetType@int16@default@@QEAAPE$AAVType@Platform@@XZ
?GetType@int32@default@@QEAAPE$AAVType@Platform@@XZ
?GetType@int64@default@@QEAAPE$AAVType@Platform@@XZ
?GetType@int8@default@@QEAAPE$AAVType@Platform@@XZ
?GetType@uint16@default@@QEAAPE$AAVType@Platform@@XZ
?GetType@uint32@default@@QEAAPE$AAVType@Platform@@XZ
?GetType@uint64@default@@QEAAPE$AAVType@Platform@@XZ
?GetType@uint8@default@@QEAAPE$AAVType@Platform@@XZ
?GetTypeCode@Type@Platform@@SA?AW4TypeCode@2@PE$AAV12@@Z
?GetWeakReference@Details@Platform@@YAPEAU__abi_IUnknown@@QE$ADVObject@2@@Z
?InitControlBlock@ControlBlock@Details@Platform@@AEAAXPEAX_N11@Z
?InitializeData@Details@Platform@@YAJH@Z
?Intersect@Rect@Foundation@Windows@@QEAAXV123@@Z
?IntersectsWith@Rect@Foundation@Windows@@QEAA_NV123@@Z
?Invert@Matrix3D@Media3D@Media@Xaml@UI@Windows@@QEAAXXZ
?ReCreateException@Exception@Platform@@SAPE$AAV12@H@Z
?ReferenceEquals@Object@Platform@@SA_NPE$AAV12@0@Z
?ReferenceEquals@Object@Platform@@SA_NPE$AAVString@2@0@Z
?RegisterFactories@Details@Platform@@YAPE$AAVObject@2@PEAPEAVModuleBase@1WRL@Microsoft@@PEAPEAU__abi_Module@@P6AXXZ@Z
?ReleaseInContextImpl@Details@Platform@@YAJPEAUIUnknown@@0@Z
?ReleaseTarget@ControlBlock@Details@Platform@@AEAAXXZ
?ResolveWeakReference@Details@Platform@@YAPE$AAVObject@2@AEBU_GUID@@PEAPEAU__abi_IUnknown@@@Z
?RunApplicationServer@Details@Platform@@YAXPEAPEAVModuleBase@1WRL@Microsoft@@PEAPEAU__abi_Module@@PEB_W@Z
?RunServer@Details@Platform@@YAXPEAPEAVModuleBase@1WRL@Microsoft@@PEAPEAU__abi_Module@@PEB_W@Z
?TerminateModule@Details@Platform@@YA_NPEAVModuleBase@1WRL@Microsoft@@@Z
?ToInt32@IntPtr@Platform@@QEAAHXZ
?ToString@Attribute@Metadata@Platform@@QE$AAAPE$AAVString@3@XZ
?ToString@Boolean@Platform@@QEAAPE$AAVString@2@XZ
?ToString@Delegate@Platform@@QE$AAAPE$AAVString@2@XZ
?ToString@Enum@Platform@@QE$AAAPE$AAVString@2@XZ
?ToString@Exception@Platform@@UE$AAAPE$AAVString@2@XZ
?ToString@Guid@Platform@@QEAAPE$AAVString@2@XZ
?ToString@MTAThreadAttribute@Platform@@QE$AAAPE$AAVString@2@XZ
?ToString@OnePhaseConstructedAttribute@CompilerServices@Runtime@Platform@@QE$AAAPE$AAVString@4@XZ
?ToString@STAThreadAttribute@Platform@@QE$AAAPE$AAVString@2@XZ
?ToString@Type@Platform@@UE$AAAPE$AAVString@2@XZ
?ToString@ValueType@Platform@@QE$AAAPE$AAVString@2@XZ
?ToString@char16@default@@QEAAPE$AAVString@Platform@@XZ
?ToString@float32@default@@QEAAPE$AAVString@Platform@@XZ
?ToString@float64@default@@QEAAPE$AAVString@Platform@@XZ
?ToString@int16@default@@QEAAPE$AAVString@Platform@@XZ
?ToString@int32@default@@QEAAPE$AAVString@Platform@@XZ
?ToString@int64@default@@QEAAPE$AAVString@Platform@@XZ
?ToString@int8@default@@QEAAPE$AAVString@Platform@@XZ
?ToString@uint16@default@@QEAAPE$AAVString@Platform@@XZ
?ToString@uint32@default@@QEAAPE$AAVString@Platform@@XZ
?ToString@uint64@default@@QEAAPE$AAVString@Platform@@XZ
?ToString@uint8@default@@QEAAPE$AAVString@Platform@@XZ
?UninitializeData@Details@Platform@@YAXH@Z
?Union@Rect@Foundation@Windows@@QEAAXV123@@Z
?Union@Rect@Foundation@Windows@@QEAAXVPoint@23@@Z
?WriteLine@Console@Details@Platform@@SAXPE$AAVObject@3@@Z
?WriteLine@Console@Details@Platform@@SAXPE$AAVString@3@@Z
?WriteLine@Console@Details@Platform@@SAXXZ
?__abi_FailFast@@YAXXZ
?__abi_ObjectToString@__abi_details@@YAPE$AAVString@Platform@@PE$AAVObject@3@_N@Z
?__abi_Resolve@ControlBlock@Details@Platform@@UEAAJAEAVGuid@3@PEAPEAU__abi_IInspectable@@@Z
?__abi_WinRTraiseAccessDeniedException@@YAXXZ
?__abi_WinRTraiseCOMException@@YAXJ@Z
?__abi_WinRTraiseChangedStateException@@YAXXZ
?__abi_WinRTraiseClassNotRegisteredException@@YAXXZ
?__abi_WinRTraiseDisconnectedException@@YAXXZ
?__abi_WinRTraiseFailureException@@YAXXZ
?__abi_WinRTraiseInvalidArgumentException@@YAXXZ
?__abi_WinRTraiseInvalidCastException@@YAXXZ
?__abi_WinRTraiseNotImplementedException@@YAXXZ
?__abi_WinRTraiseNullReferenceException@@YAXXZ
?__abi_WinRTraiseObjectDisposedException@@YAXXZ
?__abi_WinRTraiseOperationCanceledException@@YAXXZ
?__abi_WinRTraiseOutOfBoundsException@@YAXXZ
?__abi_WinRTraiseOutOfMemoryException@@YAXXZ
?__abi_WinRTraiseWrongThreadException@@YAXXZ
?__abi_cast_Object_to_String@__abi_details@@YAPE$AAVString@Platform@@_NPE$AAVObject@3@@Z
?__abi_cast_String_to_Object@__abi_details@@YAPE$AAVObject@Platform@@PE$AAVString@3@@Z
?__abi_make_type_id@@YAPE$AAVType@Platform@@AEBU__abi_type_descriptor@@@Z
?__abi_translateCurrentException@@YAJ_N@Z
?__getActivationFactoryByHSTRING@@YAJPEAUHSTRING__@@AEAVGuid@Platform@@PEAPEAX@Z
?get@Bottom@Rect@Foundation@Windows@@QEAAMXZ
?get@BreakOnAllocationId@Heap@Details@Platform@@SAHXZ
?get@BreakOnFreeId@Heap@Details@Platform@@SAHXZ
?get@CurrentAllocationId@Heap@Details@Platform@@SAHXZ
?get@Empty@Rect@Foundation@Windows@@SA?AV234@XZ
?get@Empty@Size@Foundation@Windows@@SA?AV234@XZ
?get@FullName@Type@Platform@@QE$AAAPE$AAVString@3@XZ
?get@HasInverse@Matrix3D@Media3D@Media@Xaml@UI@Windows@@QEAA_NXZ
?get@Message@Exception@Platform@@QE$AAAPE$AAVString@3@XZ
?get@ObjectCount@Heap@Details@Platform@@SAHXZ
?get@Right@Rect@Foundation@Windows@@QEAAMXZ
?get@TrackingLevel@Heap@Details@Platform@@SA?AW4HeapAllocationTrackingLevel@34@XZ
?set@BreakOnAllocationId@Heap@Details@Platform@@SAXH@Z
?set@BreakOnFreeId@Heap@Details@Platform@@SAXH@Z
?set@TrackingLevel@Heap@Details@Platform@@SAXW4HeapAllocationTrackingLevel@34@@Z

Sections

.text
Size: 161KB - Virtual size: 161KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 100KB - Virtual size: 99KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 41KB - Virtual size: 42KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 976B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
vcruntime140.dll
.dll windows:6 windows x64 arch:x64

7f07fd94e5bb907093556781cc464017

Code Sign

33:00:00:00:f8:ae:a0:bd:67:8b:63:ac:eb:00:00:00:00:00:f8
Certificate

Issuer

CN=Microsoft Windows Third Party Component CA 2013,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

19/10/2023, 19:43

Not After

16/10/2024, 19:43

Subject

CN=Microsoft Windows Software Compatibility Publisher,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

33:00:00:00:14:9d:fb:c3:1f:1f:63:c3:10:00:00:00:00:00:14
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

01/05/2013, 20:44

Not After

01/05/2028, 20:54

Subject

CN=Microsoft Windows Third Party Component CA 2013,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

33:00:00:03:a5:41:11:e8:f0:7f:be:0b:75:00:00:00:00:03:a5
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

19/10/2023, 19:51

Not After

16/10/2024, 19:51

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08/07/2011, 20:59

Not After

08/07/2026, 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

1a:10:bc:7c:70:3a:63:1e:59:62:cd:e6:a1:79:12:c0:c4:d6:01:d7:92:6a:f3:49:92:51:74:e7:92:fb:3d:a0
Signer

Actual PE Digest

1a:10:bc:7c:70:3a:63:1e:59:62:cd:e6:a1:79:12:c0:c4:d6:01:d7:92:6a:f3:49:92:51:74:e7:92:fb:3d:a0

Digest Algorithm

sha256

PE Digest Matches

true

1a:10:bc:7c:70:3a:63:1e:59:62:cd:e6:a1:79:12:c0:c4:d6:01:d7:92:6a:f3:49:92:51:74:e7:92:fb:3d:a0
Signer

Actual PE Digest

1a:10:bc:7c:70:3a:63:1e:59:62:cd:e6:a1:79:12:c0:c4:d6:01:d7:92:6a:f3:49:92:51:74:e7:92:fb:3d:a0

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

D:\a\_work\1\s\binaries\amd64ret\bin\amd64\\vcruntime140.amd64.pdb

Imports

api-ms-win-crt-runtime-l1-1-0

terminate
abort

api-ms-win-crt-heap-l1-1-0

calloc
malloc
free

api-ms-win-crt-string-l1-1-0

strcpy_s
strncmp
wcsncmp

api-ms-win-crt-stdio-l1-1-0

__stdio_common_vsprintf
__stdio_common_vsprintf_s

api-ms-win-crt-convert-l1-1-0

atol

kernel32

GetLastError
IsProcessorFeaturePresent
TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
RtlVirtualUnwind
RtlCaptureContext
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
RtlLookupFunctionEntry
RtlUnwindEx
GetModuleHandleW
GetModuleFileNameW
RtlUnwind
EncodePointer
RaiseException
RtlPcToFileHeader
InterlockedPushEntrySList
InterlockedFlushSList
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
GetProcAddress
SetLastError
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
LoadLibraryExW

Exports

Exports

_CreateFrameInfo
_CxxThrowException
_FindAndUnlinkFrame
_IsExceptionObjectToBeDestroyed
_SetWinRTOutOfMemoryExceptionCallback
__AdjustPointer
__BuildCatchObject
__BuildCatchObjectHelper
__C_specific_handler
__C_specific_handler_noexcept
__CxxDetectRethrow
__CxxExceptionFilter
__CxxFrameHandler
__CxxFrameHandler2
__CxxFrameHandler3
__CxxQueryExceptionSize
__CxxRegisterExceptionObject
__CxxUnregisterExceptionObject
__DestructExceptionObject
__FrameUnwindFilter
__GetPlatformExceptionInfo
__NLG_Dispatch2
__NLG_Return2
__RTCastToVoid
__RTDynamicCast
__RTtypeid
__TypeMatch
__current_exception
__current_exception_context
__intrinsic_setjmp
__intrinsic_setjmpex
__processing_throw
__report_gsfailure
__std_exception_copy
__std_exception_destroy
__std_terminate
__std_type_info_compare
__std_type_info_destroy_list
__std_type_info_hash
__std_type_info_name
__telemetry_main_invoke_trigger
__telemetry_main_return_trigger
__unDName
__unDNameEx
__uncaught_exception
__uncaught_exceptions
__vcrt_GetModuleFileNameW
__vcrt_GetModuleHandleW
__vcrt_InitializeCriticalSectionEx
__vcrt_LoadLibraryExW
_get_purecall_handler
_get_unexpected
_is_exception_typeof
_local_unwind
_purecall
_set_purecall_handler
_set_se_translator
longjmp
memchr
memcmp
memcpy
memmove
memset
set_unexpected
strchr
strrchr
strstr
unexpected
wcschr
wcsrchr
wcsstr

Sections

.text
Size: 68KB - Virtual size: 67KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

fothk
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 17KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

_RDATA
Size: 512B - Virtual size: 504B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 976B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 732B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
vcruntime140_1.dll
.dll windows:6 windows x64 arch:x64

72707e942878aac770fcc118ce3ec1c9

Code Sign

33:00:00:00:f8:ae:a0:bd:67:8b:63:ac:eb:00:00:00:00:00:f8
Certificate

Issuer

CN=Microsoft Windows Third Party Component CA 2013,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

19/10/2023, 19:43

Not After

16/10/2024, 19:43

Subject

CN=Microsoft Windows Software Compatibility Publisher,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

33:00:00:00:14:9d:fb:c3:1f:1f:63:c3:10:00:00:00:00:00:14
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

01/05/2013, 20:44

Not After

01/05/2028, 20:54

Subject

CN=Microsoft Windows Third Party Component CA 2013,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

33:00:00:03:a5:41:11:e8:f0:7f:be:0b:75:00:00:00:00:03:a5
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

19/10/2023, 19:51

Not After

16/10/2024, 19:51

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08/07/2011, 20:59

Not After

08/07/2026, 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

85:09:23:9c:92:b6:1d:1e:e6:9b:12:ba:3e:b3:d7:ed:7b:08:8e:83:76:bd:0b:8a:b6:25:44:ba:71:da:0e:7a
Signer

Actual PE Digest

85:09:23:9c:92:b6:1d:1e:e6:9b:12:ba:3e:b3:d7:ed:7b:08:8e:83:76:bd:0b:8a:b6:25:44:ba:71:da:0e:7a

Digest Algorithm

sha256

PE Digest Matches

true

85:09:23:9c:92:b6:1d:1e:e6:9b:12:ba:3e:b3:d7:ed:7b:08:8e:83:76:bd:0b:8a:b6:25:44:ba:71:da:0e:7a
Signer

Actual PE Digest

85:09:23:9c:92:b6:1d:1e:e6:9b:12:ba:3e:b3:d7:ed:7b:08:8e:83:76:bd:0b:8a:b6:25:44:ba:71:da:0e:7a

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

D:\a\_work\1\s\binaries\amd64ret\bin\amd64\\vcruntime140_1.amd64.pdb

Imports

api-ms-win-crt-runtime-l1-1-0

terminate
abort

api-ms-win-crt-heap-l1-1-0

malloc
calloc
free

api-ms-win-crt-string-l1-1-0

strcpy_s
wcsncmp

vcruntime140

memcpy
__processing_throw
__C_specific_handler
memmove
__current_exception

kernel32

IsProcessorFeaturePresent
TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
RtlVirtualUnwind
RtlCaptureContext
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
RtlUnwindEx
RtlLookupFunctionEntry
LoadLibraryExW
GetProcAddress
FreeLibrary
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
InitializeCriticalSectionAndSpinCount
EncodePointer
RaiseException
RtlPcToFileHeader
GetLastError
DeleteCriticalSection
SetLastError

Exports

Exports

__CxxFrameHandler4
__NLG_Dispatch2
__NLG_Return2

Sections

.text
Size: 15KB - Virtual size: 14KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 984B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 324B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

Code Sign

33:00:00:05:00:27:d6:32:6f:43:73:7b:87:00:00:00:00:05:00Certificate

Extended Key Usages

61:0c:52:4c:00:00:00:00:00:03Certificate

Key Usages

33:00:00:03:3e:63:3a:86:bf:41:73:d7:e0:00:00:00:00:03:3eCertificate

Extended Key Usages

61:0e:90:d2:00:00:00:00:00:03Certificate

Key Usages

c5:9d:84:be:2e:46:91:67:f5:97:f1:4a:11:72:d0:2d:8b:3d:82:bf:82:7b:c1:ac:0b:98:1c:91:f0:63:60:60Signer

c5:9d:84:be:2e:46:91:67:f5:97:f1:4a:11:72:d0:2d:8b:3d:82:bf:82:7b:c1:ac:0b:98:1c:91:f0:63:60:60Signer

Headers

DLL Characteristics

File Characteristics

Sections

.rdata Size: 512B - Virtual size: 268B

.rsrc Size: 4.4MB - Virtual size: 4.4MB

Code Sign

33:00:00:00:af:53:47:77:6c:1b:f1:a3:02:00:00:00:00:00:afCertificate

Extended Key Usages

33:00:00:01:0a:2c:79:ae:d7:79:7b:a6:ac:00:01:00:00:01:0aCertificate

Extended Key Usages

61:33:26:1a:00:00:00:00:00:31Certificate

Key Usages

61:16:68:34:00:00:00:00:00:1cCertificate

Extended Key Usages

Key Usages

5c:fe:98:5e:73:83:ae:32:42:17:cd:33:6c:ed:c4:e8:ce:98:54:40Signer

Headers

DLL Characteristics

File Characteristics

Sections

.rsrc Size: 3.4MB - Virtual size: 3.4MB

.reloc Size: 512B - Virtual size: 8B

4506c3159f08b258438eb5eee9c97ffd

Code Sign

33:00:00:05:57:cf:90:dd:c7:d1:c0:88:8c:00:00:00:00:05:57Certificate

Extended Key Usages

61:0c:52:4c:00:00:00:00:00:03Certificate

Key Usages

33:00:00:03:a5:41:11:e8:f0:7f:be:0b:75:00:00:00:00:03:a5Certificate

Extended Key Usages

61:0e:90:d2:00:00:00:00:00:03Certificate

Key Usages

19:93:37:22:20:f6:67:08:22:0b:d8:e3:32:36:b2:02:0c:77:c3:d5:e7:d4:1c:70:84:c6:2e:18:e0:88:38:4aSigner

19:93:37:22:20:f6:67:08:22:0b:d8:e3:32:36:b2:02:0c:77:c3:d5:e7:d4:1c:70:84:c6:2e:18:e0:88:38:4aSigner

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

advapi32

kernel32

gdi32

ole32

oleaut32

msimg32

vcruntime140

vcruntime140_1

msvcp140

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-convert-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-utility-l1-1-0

api-ms-win-crt-time-l1-1-0

api-ms-win-crt-locale-l1-1-0

Exports

Exports

Sections

.text Size: 2.5MB - Virtual size: 2.5MB

.rdata Size: 726KB - Virtual size: 726KB

.data Size: 172KB - Virtual size: 175KB

33:00:00:05:00:27:d6:32:6f:43:73:7b:87:00:00:00:00:05:00
Certificate

61:0c:52:4c:00:00:00:00:00:03
Certificate

33:00:00:03:3e:63:3a:86:bf:41:73:d7:e0:00:00:00:00:03:3e
Certificate

61:0e:90:d2:00:00:00:00:00:03
Certificate

c5:9d:84:be:2e:46:91:67:f5:97:f1:4a:11:72:d0:2d:8b:3d:82:bf:82:7b:c1:ac:0b:98:1c:91:f0:63:60:60
Signer

c5:9d:84:be:2e:46:91:67:f5:97:f1:4a:11:72:d0:2d:8b:3d:82:bf:82:7b:c1:ac:0b:98:1c:91:f0:63:60:60
Signer

.rdata
Size: 512B - Virtual size: 268B

.rsrc
Size: 4.4MB - Virtual size: 4.4MB

33:00:00:00:af:53:47:77:6c:1b:f1:a3:02:00:00:00:00:00:af
Certificate

33:00:00:01:0a:2c:79:ae:d7:79:7b:a6:ac:00:01:00:00:01:0a
Certificate

61:33:26:1a:00:00:00:00:00:31
Certificate

61:16:68:34:00:00:00:00:00:1c
Certificate

5c:fe:98:5e:73:83:ae:32:42:17:cd:33:6c:ed:c4:e8:ce:98:54:40
Signer

.rsrc
Size: 3.4MB - Virtual size: 3.4MB

.reloc
Size: 512B - Virtual size: 8B

33:00:00:05:57:cf:90:dd:c7:d1:c0:88:8c:00:00:00:00:05:57
Certificate

61:0c:52:4c:00:00:00:00:00:03
Certificate

33:00:00:03:a5:41:11:e8:f0:7f:be:0b:75:00:00:00:00:03:a5
Certificate

61:0e:90:d2:00:00:00:00:00:03
Certificate

19:93:37:22:20:f6:67:08:22:0b:d8:e3:32:36:b2:02:0c:77:c3:d5:e7:d4:1c:70:84:c6:2e:18:e0:88:38:4a
Signer

19:93:37:22:20:f6:67:08:22:0b:d8:e3:32:36:b2:02:0c:77:c3:d5:e7:d4:1c:70:84:c6:2e:18:e0:88:38:4a
Signer

.text
Size: 2.5MB - Virtual size: 2.5MB

.rdata
Size: 726KB - Virtual size: 726KB

.data
Size: 172KB - Virtual size: 175KB

.pdata
Size: 91KB - Virtual size: 91KB

.didat
Size: 5KB - Virtual size: 5KB

.rtext
Size: 512B - Virtual size: 152B

.rsrc
Size: 309KB - Virtual size: 308KB

.reloc
Size: 59KB - Virtual size: 59KB

33:00:00:05:57:cf:90:dd:c7:d1:c0:88:8c:00:00:00:00:05:57
Certificate

61:0c:52:4c:00:00:00:00:00:03
Certificate

33:00:00:03:a5:41:11:e8:f0:7f:be:0b:75:00:00:00:00:03:a5
Certificate

61:0e:90:d2:00:00:00:00:00:03
Certificate

b7:ee:84:00:87:36:9c:17:be:3c:f3:3c:96:1f:d3:90:8c:40:89:c5:b8:e9:16:b2:46:33:d3:0b:60:54:14:a4
Signer

b7:ee:84:00:87:36:9c:17:be:3c:f3:3c:96:1f:d3:90:8c:40:89:c5:b8:e9:16:b2:46:33:d3:0b:60:54:14:a4
Signer

.text
Size: 292KB - Virtual size: 292KB

.rdata
Size: 85KB - Virtual size: 84KB

.data
Size: 9KB - Virtual size: 25KB

.pdata
Size: 10KB - Virtual size: 10KB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 1KB - Virtual size: 1KB

33:00:00:04:3a:75:e5:2f:9e:0b:29:98:1e:00:00:00:00:04:3a
Certificate

61:0c:52:4c:00:00:00:00:00:03
Certificate

2b:28:89:d9:fa:dd:ce:38:d3:8a:37:15:ce:05:48:97:ff:11:98:3d:29:ac:cb:5d:ae:6a:45:0f:e8:9a:23:43
Signer