release[.]zip | Triage

Sharing

Copy URL

Twitter E-mail

General

Target

release.zip
Size

63.3MB
MD5

8534256c98a5a5396e91f0f21b4247c6
SHA1

4ce05ac24471022e15e0c93b46d56a08a86ce31a
SHA256

becbc54754933c1ed670f50a19fbf6debab9257cbeb7a7afdca4d41d449ddfab
SHA512

3b8d1671b5663f37a68b58b2ea10aabb89ddab1661bec1d59a59099a26a535c598f9fb5be03cf3ef64a8c2934b584bcc1b8c5c9507831643953b7c09a95c38b1
SSDEEP

1572864:bFhhkRv4/JGzxYjrZa0bcRPAaq9PFwH1guxTBJlc5G:pDki0OrZaVlAaq9dWJxTPlc5G

Score

3^/10

Malware Config

Signatures

Unsigned PE 5 IoCs

Checks for missing Authenticode signature.

resource
unpack001/release/BYPASS_protected.exe
unpack002/ui/AndroidEmulatorEn.exe
unpack002/ui/plugins/TP3Helper.exe
unpack002/ui/plugins/Updater32.exe
unpack002/ui/pluginsen/Updater32.exe

Files

release.zip
.zip
release/BYPASS_protected.exe
.exe windows:4 windows x64 arch:x64

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE

Sections

Size: 181KB - Virtual size: 492KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

Size: 223B - Virtual size: 84KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 13KB - Virtual size: 56KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Size: 19KB - Virtual size: 33KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Size: 10KB - Virtual size: 46KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Size: - Virtual size: 5KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 518B - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 34B - Virtual size: 112B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 22B - Virtual size: 104B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 9KB - Virtual size: 66KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 499B - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Size: 44KB - Virtual size: 117KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Size: 4KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Size: 11KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Size: 2KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Size: 580B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Size: 31KB - Virtual size: 132KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Size: 1KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.imports
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 66KB - Virtual size: 66KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.themida
Size: - Virtual size: 5.7MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.boot
Size: 3.2MB - Virtual size: 3.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
release/kill_Gameloop.bat
release/kill_browser.bat
release/ui.zip
.zip
ui/AEngine.dll
.dll windows:6 windows x86 arch:x86

587f6e23eaa7cfa7afe34ad8e98200da

Code Sign

0e:33:12:30:52:5a:25:a7:f8:10:e5:34:88:b0:aa:40
Certificate

Issuer

CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

25-11-2020 00:00

Not After

22-02-2024 23:59

Subject

CN=Tencent Technology(Shenzhen) Company Limited,O=Tencent Technology(Shenzhen) Company Limited,L=Shenzhen,ST=Guangdong Province,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

0f:a8:49:06:15:d7:00:a0:be:21:76:fd:c5:ec:6d:bd
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

11-02-2011 12:00

Not After

10-02-2026 12:00

Subject

CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

22-10-2013 12:00

Not After

22-10-2028 12:00

Subject

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0e:a7:f6:86:bc:40:35:4a:70:f2:c2:97:c1:31:5e:f6
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

25-11-2020 00:00

Not After

22-02-2024 23:59

Subject

CN=Tencent Technology(Shenzhen) Company Limited,O=Tencent Technology(Shenzhen) Company Limited,L=Shenzhen,ST=Guangdong Province,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

0a:7a:4a:88:9e:c9:99:42:90:06:63:38:4d:86:97:9d
Certificate

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Not Before

29-03-2022 00:00

Not After

14-03-2033 23:59

Subject

CN=DigiCert Timestamp 2022 - 2,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

23-03-2022 00:00

Not After

22-03-2037 23:59

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

49:87:9d:04:ac:9d:00:b7:e1:99:fc:59:45:d6:31:24:17:12:9a:00:97:fd:aa:dc:48:c1:9d:8c:58:be:35:1d
Signer

Actual PE Digest

49:87:9d:04:ac:9d:00:b7:e1:99:fc:59:45:d6:31:24:17:12:9a:00:97:fd:aa:dc:48:c1:9d:8c:58:be:35:1d

Digest Algorithm

sha256

PE Digest Matches

true

33:0f:5d:2f:cb:20:98:fb:0c:bd:f3:6a:a6:ae:cf:5e:35:0c:df:59
Signer

Actual PE Digest

33:0f:5d:2f:cb:20:98:fb:0c:bd:f3:6a:a6:ae:cf:5e:35:0c:df:59

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

E:\workplace\AndroidEmulator\UI_Release_Packet_New\Basic\Client\Output\Binfinal\AndroidEmulator\AEngine.pdb

Imports

ws2_32

listen
gethostbyname
bind
socket
closesocket
send
recv
setsockopt
connect
accept
ntohl
ntohs
htonl
htons

gdi32

BitBlt
CreateDIBSection
CreateCompatibleDC
DeleteDC
DeleteObject
ChoosePixelFormat
SetPixelFormat
SelectObject

msvcp140

?read@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV12@PAD_J@Z
?write@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@PBD_J@Z
_Xtime_get_ticks
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@G@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAVios_base@1@AAV21@@Z@Z
??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UAE@XZ
??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEXABVlocale@2@@Z
?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEPAV12@PAD_J@Z
?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ
?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ
?setw@std@@YA?AU?$_Smanip@_J@1@_J@Z
?_Getcoll@_Locinfo@std@@QBE?AU_Collvec@@XZ
??0facet@locale@std@@IAE@I@Z
??1facet@locale@std@@MAE@XZ
?tolower@?$ctype@D@std@@QBEDD@Z
?tolower@?$ctype@D@std@@QBEPBDPADPBD@Z
?_Getcat@?$ctype@D@std@@SAIPAPBVfacet@locale@2@PBV42@@Z
_Strcoll
?id@?$collate@D@std@@2V0locale@2@A
?id@?$ctype@D@std@@2V0locale@2@A
?_Xregex_error@std@@YAXW4error_type@regex_constants@1@@Z
_Strxfrm
??1?$basic_istream@_WU?$char_traits@_W@std@@@std@@UAE@XZ
?imbue@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAEXABVlocale@2@@Z
?sync@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAEHXZ
?setbuf@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAEPAV12@PA_W_J@Z
?xsputn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAE_JPB_W_J@Z
?xsgetn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAE_JPA_W_J@Z
?_Xbad_alloc@std@@YAXXZ
?uflow@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAEGXZ
?showmanyc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAE_JXZ
?_Unlock@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UAEXXZ
?_Lock@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UAEXXZ
??1?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UAE@XZ
??1?$basic_ios@_WU?$char_traits@_W@std@@@std@@UAE@XZ
??0?$basic_istream@_WU?$char_traits@_W@std@@@std@@QAE@PAV?$basic_streambuf@_WU?$char_traits@_W@std@@@1@_N@Z
??0?$basic_ios@_WU?$char_traits@_W@std@@@std@@IAE@XZ
??0?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IAE@XZ
?sgetc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QAEGXZ
?sbumpc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QAEGXZ
?setstate@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QAEXH_N@Z
?snextc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QAEGXZ
?_Ipfx@?$basic_istream@_WU?$char_traits@_W@std@@@std@@QAE_N_N@Z
?always_noconv@codecvt_base@std@@QBE_NXZ
??1?$basic_istream@DU?$char_traits@D@std@@@std@@UAE@XZ
??0?$basic_istream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPBD_J@Z
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPAD_J@Z
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JXZ
?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXXZ
?sbumpc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHXZ
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAE@XZ
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAE@XZ
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IAE@XZ
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UAE@XZ
?out@?$codecvt@DDU_Mbstatet@@@std@@QBEHAAU_Mbstatet@@PBD1AAPBDPAD3AAPAD@Z
?in@?$codecvt@DDU_Mbstatet@@@std@@QBEHAAU_Mbstatet@@PBD1AAPBDPAD3AAPAD@Z
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
?unshift@?$codecvt@DDU_Mbstatet@@@std@@QBEHAAU_Mbstatet@@PAD1AAPAD@Z
?getloc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QBE?AVlocale@2@XZ
?sgetc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHXZ
?_Getcat@?$codecvt@DDU_Mbstatet@@@std@@SAIPAPBVfacet@locale@2@PBV42@@Z
?_Fiopen@std@@YAPAU_iobuf@@PB_WHH@Z
?id@?$codecvt@DDU_Mbstatet@@@std@@2V0locale@2@A
?_BADOFF@std@@3_JB
??0_Locinfo@std@@QAE@PBD@Z
??1_Locinfo@std@@QAE@XZ
?_Getctype@_Locinfo@std@@QBE?AU_Ctypevec@@XZ
?_Getcvt@_Locinfo@std@@QBE?AU_Cvtvec@@XZ
??0ctype_base@std@@QAE@I@Z
??1ctype_base@std@@UAE@XZ
_Query_perf_counter
_Toupper
_Tolower
?_Xinvalid_argument@std@@YAXPBD@Z
?_Getgloballocale@locale@std@@CAPAV_Locimp@12@XZ
??0_Lockit@std@@QAE@H@Z
??1_Lockit@std@@QAE@XZ
_Query_perf_frequency
??Bid@locale@std@@QAEIXZ
?_Xout_of_range@std@@YAXPBD@Z
?_Xbad_function_call@std@@YAXXZ
?_Xlength_error@std@@YAXPBD@Z
?_Throw_C_error@std@@YAXH@Z
_Mtx_destroy_in_situ
_Mtx_lock
_Mtx_init_in_situ
_Mtx_unlock
?_Incref@facet@locale@std@@UAEXXZ
?_Decref@facet@locale@std@@UAEPAV_Facet_base@3@XZ
?_New_Locimp@_Locimp@locale@std@@CAPAV123@ABV123@@Z
?_Addfac@_Locimp@locale@std@@AAEXPAVfacet@23@I@Z
?out@?$codecvt@_WDU_Mbstatet@@@std@@QBEHAAU_Mbstatet@@PB_W1AAPB_WPAD3AAPAD@Z
??0?$codecvt@_WDU_Mbstatet@@@std@@QAE@I@Z
??1?$codecvt@_WDU_Mbstatet@@@std@@MAE@XZ
??4?$_Yarn@D@std@@QAEAAV01@PBD@Z
?id@?$codecvt@_WDU_Mbstatet@@@std@@2V0locale@2@A
?_Init@locale@std@@CAPAV_Locimp@12@_N@Z

kernel32

InitializeSListHead
GetSystemTimeAsFileTime
IsProcessorFeaturePresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
WaitForSingleObjectEx
LoadLibraryExA
InterlockedCompareExchange
InterlockedIncrement
InterlockedExchange
FlushFileBuffers
lstrlenA
CopyFileA
SwitchToThread
GetModuleHandleExW
ResetEvent
GetUserGeoID
GetSystemDefaultLangID
GetGeoInfoW
QueueUserWorkItem
CreateMutexA
FormatMessageW
GetACP
GlobalFree
PeekNamedPipe
GetEnvironmentVariableW
CreatePipe
SetHandleInformation
OutputDebugStringA
GetSystemDirectoryW
SetEnvironmentVariableW
GetPrivateProfileStringA
SetThreadPriority
TryEnterCriticalSection
IsDebuggerPresent
DebugBreak
OpenThread
GetCurrentProcessId
CreateFileMappingA
UnregisterWaitEx
RegisterWaitForSingleObject
GlobalUnlock
GlobalLock
CreateThread
SetEvent
GlobalSize
CreateEventW
ReleaseMutex
GetVersionExW
GetVolumeInformationA
CreateMutexW
GetTempPathW
GetModuleFileNameA
ConnectNamedPipe
CreateEventA
LocalFree
GetOverlappedResult
CreateFileA
DisconnectNamedPipe
WaitForMultipleObjects
CreateNamedPipeA
CancelIo
QueryPerformanceCounter
QueryPerformanceFrequency
GetModuleHandleA
InitializeCriticalSection
LeaveCriticalSection
EnterCriticalSection
SystemTimeToFileTime
SetFileTime
CreateDirectoryW
GetSystemTime
GetTimeZoneInformation
GetLocaleInfoW
GetUserDefaultUILanguage
GetExitCodeProcess
CopyFileW
MoveFileExW
Process32FirstW
Process32NextW
CreateToolhelp32Snapshot
OpenProcess
WaitForSingleObject
TerminateProcess
QueryInformationJobObject
GlobalMemoryStatusEx
GetSystemInfo
OutputDebugStringW
GetSystemPowerStatus
LoadLibraryA
MapViewOfFile
CreateFileMappingW
GetFileSize
UnmapViewOfFile
SetLastError
VirtualQuery
SetThreadContext
FlushInstructionCache
GetThreadContext
GetCurrentThread
SuspendThread
VirtualAlloc
VirtualProtect
CreateProcessW
SizeofResource
HeapFree
GetCommandLineW
GetPrivateProfileIntW
GetModuleFileNameW
InitializeCriticalSectionEx
GetPrivateProfileSectionW
GetFileAttributesW
HeapSize
GetPrivateProfileStringW
Sleep
GetLastError
LockResource
DeleteFileW
HeapReAlloc
RaiseException
FindResourceExW
LoadResource
FindResourceW
HeapAlloc
DecodePointer
HeapDestroy
GetProcAddress
DeleteCriticalSection
GetProcessHeap
GetModuleHandleW
ReadFile
GetLogicalDrives
FindFirstFileW
FindNextFileW
GetCurrentProcess
WriteFile
DeviceIoControl
SetFilePointer
FindClose
CreateFileW
MultiByteToWideChar
GetFileAttributesExW
GetDiskFreeSpaceExW
CloseHandle
GetCurrentDirectoryW
SetCurrentDirectoryW
WideCharToMultiByte
GetTickCount
GetDriveTypeW
GetCurrentThreadId
LoadLibraryW
GetLocalTime
FreeLibrary
MoveFileW
ResumeThread
LocalFileTimeToFileTime

user32

GetForegroundWindow
SetFocus
RegisterRawInputDevices
TranslateMessage
GetClipboardData
LoadCursorW
SetCapture
SetCursor
CreateWindowExW
ActivateKeyboardLayout
KillTimer
PostQuitMessage
GetParent
ReleaseCapture
GetRawInputData
ShowCursor
SetCursorPos
PostMessageA
SetWindowPos
GetWindowRect
PostMessageW
GetKeyState
GetCursorPos
GetKeyboardState
MapVirtualKeyExW
GetKeyboardLayout
ToUnicodeEx
LoadKeyboardLayoutA
RegisterClassW
CloseClipboard
ClientToScreen
SetTimer
DispatchMessageW
OpenClipboard
ChangeDisplaySettingsW
RegisterDeviceNotificationW
IsWindow
ShowWindow
DestroyCursor
GetSystemMetrics
GetMessageW
LoadImageW
UnloadKeyboardLayout
DefWindowProcW
EnumDisplayDevicesA
DestroyWindow
GetDC
CreateWindowExA
EnumDisplayDevicesW
EnumDisplaySettingsW
RegisterClassExA
ReleaseDC
wsprintfW
GetClientRect
GetClipCursor
ClipCursor
GetWindowThreadProcessId
ScreenToClient
IsClipboardFormatAvailable

advapi32

RegQueryValueExW
RegOpenKeyExW
RegSetValueExW
RegCreateKeyExW
RegCloseKey
RegEnumKeyExW
OpenServiceW
RegOpenKeyExA
QueryServiceStatus
StartServiceW
QueryServiceConfigW
ChangeServiceConfigW
RegSetValueExA
RegDeleteValueW
GetSecurityDescriptorSacl
SetSecurityDescriptorDacl
SetSecurityDescriptorSacl
InitializeSecurityDescriptor
ConvertStringSecurityDescriptorToSecurityDescriptorW
RegQueryInfoKeyW
RegEnumValueW
OpenSCManagerW
RegQueryValueExA
CloseServiceHandle

ole32

CoUninitialize
CoCreateInstance
CoInitialize
CoCreateGuid

shell32

SHGetSpecialFolderPathW
CommandLineToArgvW
SHCreateDirectoryExW
SHGetFolderPathW

oleaut32

VariantClear
SysStringLen
VariantInit

shlwapi

PathFileExistsA
StrCmpW
PathRemoveFileSpecA
PathStripPathW
PathAppendW
PathAppendA
PathGetDriveNumberW
wnsprintfW
PathFileExistsW
PathRemoveFileSpecW

d3d9

Direct3DCreate9

powrprof

PowerWriteDCValueIndex
PowerWriteACValueIndex
PowerReadDCValue
PowerReadACValue
PowerGetActiveScheme
PowerSetActiveScheme

opengl32

wglMakeCurrent
glGetIntegerv
glReadBuffer
glReadPixels
glGetString
wglDeleteContext
wglCreateContext
wglGetProcAddress

imm32

ImmReleaseContext
ImmGetContext
ImmAssociateContext
ImmSetCompositionWindow
ImmGetCompositionStringW

setupapi

SetupDiDestroyDeviceInfoList
SetupDiOpenDevRegKey
SetupDiEnumDeviceInfo
SetupDiGetDeviceRegistryPropertyW
SetupDiGetClassDevsW

libaow

_AOWStopEngine@4
_AOWRegisterLogcatMonitor@16
_AOWStartEngine@20
_AOWSetProperty@8
_AOWSetShareDir@4
_AOWSetProductRegKeyPath@4
_AOWSetReportDataCallback@8
_AOWUnregisterLogcatMonitor@4
_AOWForwardVBoxIPToLocalHost@4
_AOWRemoveUninstalledApkDirs@0
_AOWSetRootDir@4
_AOWGetBootProgress@0
_AOWSetDefaultProperty@8
_AOWSetMainWindow@4
_AOWGetBootProgressEvent@0
_AOWSetCPUCores@4
_AOWWriteAndroidFile@12
_AOWReadAndroidFile@12
_AOWGetSessionKey@8
_AOWFreeFileBuffer@4
_AOWRemoveUninstalledApkDirsNow@0
_AOWCreateSnapshot@8
_AOWSceneNotify@8
_AOWProcessLinuxInput@12
_AOWUsingLinuxInput@0
_AOWSetPersistProperty@8
_AOWSetBootProgressNotify@4
_AOWSetBootProgressTag@8
_AOWCreateInstanceMutex@4

rpcrt4

RpcStringFreeA
UuidToStringA
UuidCreate

winmm

timeEndPeriod
timeGetTime
timeBeginPeriod

gdiplus

GdipBitmapLockBits
GdipFree
GdipDisposeImage
GdipAlloc
GdipBitmapUnlockBits
GdipCloneImage
GdipGetImageHeight
GdipCreateBitmapFromFile
GdipGetFontSize
GdipDeleteFont
GdipDeleteStringFormat
GdipDeleteGraphics
GdipGetImageGraphicsContext
GdipCloneBrush
GdipGetPathWorldBounds
GdiplusStartup
GdiplusShutdown
GdipAddPathArcI
GdipSetPathGradientCenterColor
GdipCreatePathGradientFromPath
GdipAddPathLineI
GdipGetPathGradientPointCount
GdipSetStringFormatAlign
GdipGetImageWidth
GdipSetPathGradientFocusScales
GdipSetPathGradientSurroundColorsWithCount
GdipCreateStringFormat
GdipDeleteFontFamily
GdipCreateBitmapFromScan0
GdipAddPathString
GdipCreateFontFamilyFromName
GdipDeleteBrush
GdipDeletePath
GdipSetSmoothingMode
GdipCreatePath
GdipCreateFont
GdipCreateSolidFill
GdipGetFontStyle
GdipResetPath
GdipFillPath

psapi

GetProcessMemoryInfo
GetPerformanceInfo

vcruntime140

__std_exception_destroy
memmove
__std_exception_copy
_purecall
__std_terminate
memchr
wcsrchr
wcsstr
strstr
strchr
wcschr
_CxxThrowException
__std_type_info_destroy_list
_except_handler4_common
__vcrt_InitializeCriticalSectionEx
__RTDynamicCast
memset
memcpy
__CxxFrameHandler3

api-ms-win-crt-string-l1-1-0

wcsnlen
toupper
wmemcpy_s
isdigit
_wcslwr_s
strnlen
wcsncmp
strcpy_s
strpbrk
_wcsupr_s
_wcsdup
tolower
_wcsnicmp
wcsncpy_s
wcscat_s
strncpy_s
wcsncat_s
_strnicmp
wcscpy_s
strncpy
_wcsicmp

api-ms-win-crt-stdio-l1-1-0

fgetpos
setvbuf
fgetc
fflush
ungetc
fsetpos
_fseeki64
_wfopen
fwrite
fgets
__stdio_common_vsnwprintf_s
__stdio_common_vfprintf
__stdio_common_vfwprintf
_get_stream_buffer_pointers
__stdio_common_vswprintf_s
__stdio_common_vswscanf
ftell
__stdio_common_vsprintf_s
fseek
__stdio_common_vsscanf
_close
_read
fread
_write
__acrt_iob_func
__stdio_common_vsprintf
__stdio_common_vsnprintf_s
fclose
fputc
__stdio_common_vswprintf
fopen

api-ms-win-crt-math-l1-1-0

_libm_sse2_asin_precise
_libm_sse2_acos_precise
_dtest
_libm_sse2_atan_precise
ceil
_libm_sse2_cos_precise
_libm_sse2_sin_precise
_libm_sse2_sqrt_precise
_dsign
_libm_sse2_tan_precise
_except1

api-ms-win-crt-convert-l1-1-0

_wtoi
wcstol
strtoul
_strtoi64
_strtoui64
atof
_wtof
_itow
strtoull
strtoll
strtol
atoi
strtod

api-ms-win-crt-filesystem-l1-1-0

_lock_file
_unlock_file
_waccess_s
_wsplitpath_s

api-ms-win-crt-runtime-l1-1-0

perror
exit
_beginthreadex
terminate
_wassert
strerror
_errno
_invalid_parameter_noinfo
_initterm_e
_initterm
_endthreadex
_seh_filter_dll
_configure_narrow_argv
_cexit
_crt_atexit
_execute_onexit_table
_invalid_parameter_noinfo_noreturn
_register_onexit_function
_initialize_onexit_table
_initialize_narrow_environment

api-ms-win-crt-locale-l1-1-0

localeconv

api-ms-win-crt-heap-l1-1-0

malloc
realloc
calloc
_recalloc
free
_callnewh

api-ms-win-crt-utility-l1-1-0

ldiv
srand
rand

api-ms-win-crt-time-l1-1-0

_time64

api-ms-win-crt-environment-l1-1-0

_putenv

beacon_sdk

?Report@BeaconClient@@SAXABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@ABV?$map@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V12@U?$less@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@2@V?$allocator@U?$pair@$$CBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V12@@std@@@2@@3@W4RequestPriority@Beacon@@@Z

Exports

Exports

AEngine_AOWCreateInstanceMutex
AEngine_AOWCreateSnapshot
AEngine_AddPortForward
AEngine_AllocGameController
AEngine_AllocGameMode
AEngine_AndroidEnvBoot1
AEngine_CalcApkCutEocdMd5
AEngine_CheckGamepadConnected
AEngine_ClearAppData
AEngine_CopyRunApkFile
AEngine_CreateEngine
AEngine_CreateEngineEx
AEngine_CreateScreenReocrdObject
AEngine_DestroyEngine
AEngine_EnableExtension
AEngine_EnableGameController
AEngine_EnableSgameKeyMapping
AEngine_ExecuteShell
AEngine_FlushDisplayIcon
AEngine_ForwardFullScreenMouseMove
AEngine_FreeGameConfig
AEngine_FreeGameController
AEngine_FreeGameMode
AEngine_FreeMemory
AEngine_GetAndroidKey
AEngine_GetAppQueueCount
AEngine_GetBridgeConfig
AEngine_GetCpuCount
AEngine_GetCurrentApp
AEngine_GetDPI
AEngine_GetDeviceManufacturer
AEngine_GetDeviceModel
AEngine_GetEnableGLESv3
AEngine_GetExitFullScreenKey
AEngine_GetFxaaQuality
AEngine_GetGLESv3Support
AEngine_GetGameConfig
AEngine_GetGameConfigSupportFeatureVersion
AEngine_GetGameContentScale
AEngine_GetGameControllerName
AEngine_GetGameFPSLevel
AEngine_GetGameRenderQuality
AEngine_GetGamepadDeviceId
AEngine_GetGamepadDeviceName
AEngine_GetGpsLocation
AEngine_GetGraphicsCardEnabled
AEngine_GetIMEI
AEngine_GetInstalledAppList
AEngine_GetKeyTipAscii
AEngine_GetLocalShaderCacheEnabled
AEngine_GetMemSize
AEngine_GetOpenIDAndNickName
AEngine_GetOpenIDAndNickName2
AEngine_GetPhoneNumber
AEngine_GetQIMEI
AEngine_GetRenderOptimizeEnabled
AEngine_GetRenderOptimizeMinRootfsVersion
AEngine_GetRenderWindow
AEngine_GetRenderer
AEngine_GetResolution
AEngine_GetRotation
AEngine_GetShaderCacheEnabled
AEngine_GetSharedFolder
AEngine_GetSharedFolderEnable
AEngine_GetShowFPS
AEngine_GetSimCountryISO
AEngine_GetSimOperator
AEngine_GetSysBootProperty
AEngine_GetVSyncEnabled
AEngine_GetVTStatus
AEngine_GetWindowLocation
AEngine_InstallApp
AEngine_IsAppInstalled
AEngine_IsGameControllerSupported
AEngine_IsGameNeedTextures
AEngine_IsGamepadConnected
AEngine_IsRenderOptimizeSupported
AEngine_IsRenderWindowShowed
AEngine_IsUsingAOW
AEngine_Percent2Window
AEngine_QueryGameHwScoreConfig
AEngine_QueryHwScore
AEngine_RemountSdcard
AEngine_SendKey
AEngine_SendShake
AEngine_SetBootProgressNotify
AEngine_SetBootProgressTag
AEngine_SetCpuCount
AEngine_SetDPI
AEngine_SetDeviceManufacturer
AEngine_SetDeviceModel
AEngine_SetEnableGLESv3
AEngine_SetFxaaQuality
AEngine_SetGameConfig
AEngine_SetGameContentScale
AEngine_SetGameFPSLevel
AEngine_SetGameRenderQuality
AEngine_SetGpsLocation
AEngine_SetGraphicsCardEnabled
AEngine_SetLiveWatermarkVisible
AEngine_SetLocalShaderCacheEnabled
AEngine_SetMemSize
AEngine_SetMonitorActivityChange
AEngine_SetMonitorAppPkgName
AEngine_SetMonitorGamepadInput
AEngine_SetNetworkProxy
AEngine_SetPhoneNumber
AEngine_SetProperty
AEngine_SetRenderOptimizeEnabled
AEngine_SetRenderer
AEngine_SetResolution
AEngine_SetRotation
AEngine_SetShaderCacheEnabled
AEngine_SetSharedFolder
AEngine_SetSharedFolderEnable
AEngine_SetShowAppRules
AEngine_SetShowFPS
AEngine_SetSimCountryISO
AEngine_SetSimOperator
AEngine_SetStartEngineProgress
AEngine_SetTipsTransparent
AEngine_SetVSyncEnabled
AEngine_SetWatermarkVisible
AEngine_SetWindowLocation
AEngine_ShowRenderWindow
AEngine_ShowVolumeControl
AEngine_StartApp
AEngine_StartAppWithIntentParam
AEngine_StartAppWithLogin
AEngine_StartEngine
AEngine_StopApp
AEngine_StopEngine
AEngine_UninstallApp
AEngine_UninstallAppPending
AEngine_Window2Percent
AEngine_startActivityViewUri

Sections

.text
Size: 1.5MB - Virtual size: 1.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 879KB - Virtual size: 879KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 91KB - Virtual size: 96KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.gfids
Size: 512B - Virtual size: 72B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tls
Size: 512B - Virtual size: 9B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

_RDATA
Size: 512B - Virtual size: 292B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 36KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tvm0
Size: 559KB - Virtual size: 560KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 79KB - Virtual size: 80KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
ui/AndroidEmulatorEn.exe
.exe windows:4 windows x86 arch:x86

d7401947d3623a2199a2114d62923cd5

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

CloseServiceHandle
CreateServiceA
DeleteService
OpenSCManagerA
OpenServiceA
RegCloseKey
RegCreateKeyExA
RegSetValueExA
RegisterServiceCtrlHandlerA
SetServiceStatus
StartServiceA
StartServiceCtrlDispatcherA

kernel32

ExitProcess
FindClose
FindFirstFileA
FindNextFileA
FlushFileBuffers
GetCommandLineA
GetCurrentDirectoryA
GetDriveTypeA
GetFileAttributesA
CloseHandle
GetFileTime
GetLastError
GetModuleFileNameA
GetModuleHandleA
GetProcAddress
GetStartupInfoA
GetTempPathA
GetVersionExA
GetWindowsDirectoryA
CopyFileA
InterlockedIncrement
LoadLibraryA
CreateFileA
ReadFile
ReleaseMutex
SetEndOfFile
SetFileAttributesA
SetFilePointer
SetFileTime
CreateMutexA
SetUnhandledExceptionFilter
Sleep
TlsAlloc
TlsGetValue
TlsSetValue
CreateProcessA
WaitForSingleObject
WriteFile

msvcrt

_assert
_cexit
_fileno
_fmode
_fpreset
_iob
_setmode
__getmainargs
abort
atexit
fprintf
free
__p__environ
malloc
memcpy
memset
rand
signal
srand
strcat
strcmp
strcpy
time
__set_app_type

Sections

.text
Size: 30KB - Virtual size: 29KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 556B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 548B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 403KB - Virtual size: 402KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
ui/Start_G_En.bat
ui/aow_drv.sys
.sys windows:5 windows x86 arch:x86

cd561a37a6e3e1c369ed1c1bed44724c

Code Sign

61:1c:b2:8a:00:00:00:00:00:26
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

15-04-2011 19:41

Not After

15-04-2021 19:51

Subject

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0e:33:12:30:52:5a:25:a7:f8:10:e5:34:88:b0:aa:40
Certificate

Issuer

CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

25-11-2020 00:00

Not After

22-02-2024 23:59

Subject

CN=Tencent Technology(Shenzhen) Company Limited,O=Tencent Technology(Shenzhen) Company Limited,L=Shenzhen,ST=Guangdong Province,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

0f:a8:49:06:15:d7:00:a0:be:21:76:fd:c5:ec:6d:bd
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

11-02-2011 12:00

Not After

10-02-2026 12:00

Subject

CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

22-10-2013 12:00

Not After

22-10-2028 12:00

Subject

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:1c:b2:8a:00:00:00:00:00:26
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

15-04-2011 19:41

Not After

15-04-2021 19:51

Subject

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0e:a7:f6:86:bc:40:35:4a:70:f2:c2:97:c1:31:5e:f6
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

25-11-2020 00:00

Not After

22-02-2024 23:59

Subject

CN=Tencent Technology(Shenzhen) Company Limited,O=Tencent Technology(Shenzhen) Company Limited,L=Shenzhen,ST=Guangdong Province,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:dd
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01-01-2021 00:00

Not After

06-01-2031 00:00

Subject

CN=DigiCert Timestamp 2021,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

07-01-2016 12:00

Not After

07-01-2031 12:00

Subject

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

82:3f:55:26:5f:8d:b7:70:2b:f4:12:f3:5b:ad:77:18:96:2d:4b:a0:03:0a:01:54:7d:1a:84:58:eb:0d:3f:8a
Signer

Actual PE Digest

82:3f:55:26:5f:8d:b7:70:2b:f4:12:f3:5b:ad:77:18:96:2d:4b:a0:03:0a:01:54:7d:1a:84:58:eb:0d:3f:8a

Digest Algorithm

sha256

PE Digest Matches

true

b1:29:da:29:3f:22:60:94:14:6d:3f:85:1c:ef:45:7d:c2:9c:a6:53
Signer

Actual PE Digest

b1:29:da:29:3f:22:60:94:14:6d:3f:85:1c:ef:45:7d:c2:9c:a6:53

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_FORCE_INTEGRITY

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

E:\workplace\AndroidEmulator\UI_Release_Packet_New\Basic\Client\AEngine\aow\Release\aow_drv.pdb

Imports

ntoskrnl.exe

KeDelayExecutionThread
ZwWaitForSingleObject
ZwCreateFile
ZwQueryDirectoryFile
PsGetCurrentThreadId
ZwOpenFile
ZwQueryInformationFile
ZwWriteFile
IoFileObjectType
ZwClose
ObReferenceObjectByHandle
ObfDereferenceObject
IoQueryFileDosDeviceName
DbgPrint
PsCreateSystemThread
ZwConnectPort
ZwCreateEvent
KeInitializeEvent
LpcPortObjectType
LpcRequestPort
ZwSetEvent
ZwCreateSection
ZwFsControlFile
ZwCancelIoFile
ZwWaitForMultipleObjects
RtlUnicodeStringToAnsiString
ZwSetValueKey
ZwQueryValueKey
RtlxUnicodeStringToAnsiSize
NlsMbOemCodePageTag
ZwOpenKey
_stricmp
_wcsicmp
MmIsAddressValid
PsSetCreateProcessNotifyRoutine
IofCompleteRequest
KeWaitForSingleObject
KeSetEvent
IoCreateFile
IoFreeMdl
KeGetCurrentThread
IoAllocateMdl
RtlAnsiStringToUnicodeString
ExInitializeNPagedLookasideList
ExfInterlockedRemoveHeadList
InterlockedPopEntrySList
ExSystemTimeToLocalTime
PsTerminateSystemThread
_vsnprintf
RtlTimeToTimeFields
PsThreadType
PsGetCurrentProcessId
KeWaitForMultipleObjects
ExDeleteNPagedLookasideList
InterlockedPushEntrySList
PsGetProcessPeb
PsLookupProcessByProcessId
ExGetPreviousMode
ZwQuerySystemInformation
KeUnstackDetachProcess
IoGetCurrentProcess
PsGetProcessId
KeStackAttachProcess
ProbeForRead
KeQuerySystemTime
ObOpenObjectByPointer
MmSectionObjectType
IoThreadToProcess
PsProcessType
PsGetProcessImageFileName
KeInitializeApc
KeInsertQueueApc
PsGetThreadId
ZwQueryInformationProcess
ZwTerminateProcess
ZwQueryInformationThread
PsLookupThreadByThreadId
RtlxAnsiStringToUnicodeSize
MmProbeAndLockPages
isspace
_wcsnicmp
isdigit
isupper
RtlGetVersion
MmUserProbeAddress
ExAcquireResourceExclusiveLite
KeLeaveCriticalRegion
ZwMapViewOfSection
MmHighestUserAddress
RtlSetBits
RtlInitializeBitMap
KeEnterCriticalRegion
MmMapViewInSystemSpace
strncpy
ZwUnmapViewOfSection
RtlAreBitsSet
ExAcquireResourceSharedLite
ExReleaseResourceLite
RtlClearAllBits
MmUnmapViewInSystemSpace
ExDeleteResourceLite
ExInitializeResourceLite
RtlFindNextForwardRunClear
RtlClearBits
KeInitializeMutex
MmFreeMappingAddress
KeReleaseMutex
MmMapLockedPagesWithReservedMapping
MmAllocateMappingAddress
MmUnmapReservedMapping
MmUnlockPages
strchr
MmGetSystemRoutineAddress
atoi
_snprintf
ZwFreeVirtualMemory
ZwSetInformationThread
RtlRandom
ZwAllocateVirtualMemory
ZwSetTimer
ZwCreateTimer
ZwCancelTimer
sprintf
strncmp
memmove
ExEventObjectType
MmUnmapLockedPages
IoDeleteSymbolicLink
PsRemoveCreateThreadNotifyRoutine
PsIsSystemThread
IoDeleteDevice
PsSetCreateThreadNotifyRoutine
MmMapLockedPagesSpecifyCache
ZwSetInformationProcess
IoCreateSymbolicLink
IoCreateDevice
ExSetTimerResolution
strrchr
ZwOpenEvent
PsSetContextThread
PsGetContextThread
_itoa
RtlCaptureContext
ProbeForWrite
ZwYieldExecution
strstr
qsort
ZwSetInformationFile
swprintf
RtlInitUnicodeString
ZwReadFile
RtlTimeToSecondsSince1970
ExFreePoolWithTag
ExAllocatePoolWithTag
RtlSecondsSince1970ToTime
_except_handler3
memset
memcpy
_allmul
_alldiv
_aulldiv
_alldvrm
_aulldvrm
_allrem

hal

KfLowerIrql
KfRaiseIrql
KeGetCurrentIrql
ExAcquireFastMutex
ExReleaseFastMutex
KeQueryPerformanceCounter

Sections

.text
Size: 580KB - Virtual size: 580KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 69KB - Virtual size: 69KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

INIT
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 840B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.tvm0
Size: 188KB - Virtual size: 192KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 32KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
ui/aow_drv_x64.sys
.sys windows:5 windows x64 arch:x64

85f43652bf90bbcc634c2979bd78339d

Code Sign

61:1c:b2:8a:00:00:00:00:00:26
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

15-04-2011 19:41

Not After

15-04-2021 19:51

Subject

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0e:33:12:30:52:5a:25:a7:f8:10:e5:34:88:b0:aa:40
Certificate

Issuer

CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

25-11-2020 00:00

Not After

22-02-2024 23:59

Subject

CN=Tencent Technology(Shenzhen) Company Limited,O=Tencent Technology(Shenzhen) Company Limited,L=Shenzhen,ST=Guangdong Province,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

0f:a8:49:06:15:d7:00:a0:be:21:76:fd:c5:ec:6d:bd
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

11-02-2011 12:00

Not After

10-02-2026 12:00

Subject

CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

22-10-2013 12:00

Not After

22-10-2028 12:00

Subject

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:1c:b2:8a:00:00:00:00:00:26
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

15-04-2011 19:41

Not After

15-04-2021 19:51

Subject

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0e:a7:f6:86:bc:40:35:4a:70:f2:c2:97:c1:31:5e:f6
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

25-11-2020 00:00

Not After

22-02-2024 23:59

Subject

CN=Tencent Technology(Shenzhen) Company Limited,O=Tencent Technology(Shenzhen) Company Limited,L=Shenzhen,ST=Guangdong Province,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:dd
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01-01-2021 00:00

Not After

06-01-2031 00:00

Subject

CN=DigiCert Timestamp 2021,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

07-01-2016 12:00

Not After

07-01-2031 12:00

Subject

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

50:7a:04:31:f4:a9:55:da:65:aa:cc:3e:78:25:d6:99:4b:7f:e8:7e:3a:52:00:95:09:2e:67:80:de:12:62:85
Signer

Actual PE Digest

50:7a:04:31:f4:a9:55:da:65:aa:cc:3e:78:25:d6:99:4b:7f:e8:7e:3a:52:00:95:09:2e:67:80:de:12:62:85

Digest Algorithm

sha256

PE Digest Matches

true

a6:13:52:99:b8:04:65:f1:7c:c9:d9:02:e2:39:f5:ec:7e:37:2f:0e
Signer

Actual PE Digest

a6:13:52:99:b8:04:65:f1:7c:c9:d9:02:e2:39:f5:ec:7e:37:2f:0e

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_FORCE_INTEGRITY

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

E:\workplace\AndroidEmulator\UI_Release_Packet_New\Basic\Client\AEngine\aow\Release\aow_drv_x64.pdb

Imports

ntoskrnl.exe

ExFreePoolWithTag
RtlTimeToSecondsSince1970
ZwReadFile
RtlInitUnicodeString
swprintf
ZwSetInformationFile
KeDelayExecutionThread
ZwWaitForSingleObject
ZwCreateFile
ZwQueryDirectoryFile
PsGetCurrentThreadId
ZwOpenFile
ZwQueryInformationFile
ZwWriteFile
IoFileObjectType
ZwClose
ObReferenceObjectByHandle
ObfDereferenceObject
IoQueryFileDosDeviceName
DbgPrint
PsCreateSystemThread
ZwConnectPort
ZwCreateEvent
ExReleaseFastMutex
ExAcquireFastMutex
KeInitializeEvent
LpcPortObjectType
LpcRequestPort
ZwSetEvent
ZwCreateSection
ZwFsControlFile
ZwCancelIoFile
ZwWaitForMultipleObjects
RtlUnicodeStringToAnsiString
ZwSetValueKey
ZwQueryValueKey
RtlxUnicodeStringToAnsiSize
NlsMbOemCodePageTag
ZwOpenKey
_stricmp
MmIsAddressValid
PsSetCreateProcessNotifyRoutine
IofCompleteRequest
KeWaitForSingleObject
KeSetEvent
IoCreateFile
IoFreeMdl
IoAllocateMdl
RtlAnsiStringToUnicodeString
ExInitializeNPagedLookasideList
ExpInterlockedPushEntrySList
ExpInterlockedPopEntrySList
ExSystemTimeToLocalTime
PsTerminateSystemThread
_vsnprintf
ExQueryDepthSList
RtlTimeToTimeFields
PsThreadType
ExInterlockedRemoveHeadList
PsGetCurrentProcessId
KeWaitForMultipleObjects
ExDeleteNPagedLookasideList
PsGetProcessPeb
PsLookupProcessByProcessId
ExGetPreviousMode
ZwQuerySystemInformation
KeUnstackDetachProcess
IoGetCurrentProcess
ExAllocatePoolWithTag
ZwQueryInformationProcess
PsGetProcessId
KeStackAttachProcess
ProbeForRead
ObOpenObjectByPointer
MmSectionObjectType
_wcsicmp
IoThreadToProcess
PsProcessType
PsGetProcessImageFileName
KeInitializeApc
KeInsertQueueApc
PsGetThreadId
ZwTerminateProcess
ZwQueryInformationThread
PsLookupThreadByThreadId
RtlxAnsiStringToUnicodeSize
MmProbeAndLockPages
isspace
_wcsnicmp
isdigit
isupper
RtlGetVersion
MmUserProbeAddress
ExAcquireResourceExclusiveLite
KeLeaveCriticalRegion
ZwMapViewOfSection
MmHighestUserAddress
RtlSetBits
RtlInitializeBitMap
KeEnterCriticalRegion
MmMapViewInSystemSpace
strncpy
ZwUnmapViewOfSection
RtlAreBitsSet
ExAcquireResourceSharedLite
ExReleaseResourceLite
RtlClearAllBits
MmUnmapViewInSystemSpace
ExDeleteResourceLite
ExInitializeResourceLite
RtlFindNextForwardRunClear
RtlClearBits
KeInitializeMutex
MmFreeMappingAddress
KeReleaseMutex
MmMapLockedPagesWithReservedMapping
MmAllocateMappingAddress
MmUnmapReservedMapping
MmUnlockPages
strchr
MmGetSystemRoutineAddress
atoi
_snprintf
ZwFreeVirtualMemory
ZwSetInformationThread
RtlRandom
ZwAllocateVirtualMemory
ZwSetTimer
ZwCreateTimer
ZwCancelTimer
sprintf
strncmp
ExEventObjectType
MmUnmapLockedPages
IoDeleteSymbolicLink
PsRemoveCreateThreadNotifyRoutine
PsIsSystemThread
IoDeleteDevice
PsSetCreateThreadNotifyRoutine
MmMapLockedPagesSpecifyCache
ZwSetInformationProcess
IoCreateSymbolicLink
IoCreateDevice
ExSetTimerResolution
strrchr
ZwOpenEvent
_itoa
RtlCaptureContext
ProbeForWrite
ZwYieldExecution
strstr
qsort
RtlSecondsSince1970ToTime
__C_specific_handler

hal

KeQueryPerformanceCounter

Sections

.text
Size: 694KB - Virtual size: 693KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 151KB - Virtual size: 150KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 21KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 38KB - Virtual size: 38KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

INIT
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 840B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 17KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.tvm0
Size: 416KB - Virtual size: 416KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
ui/aow_drv_x64_ev.sys
.sys windows:5 windows x64 arch:x64

85f43652bf90bbcc634c2979bd78339d

Code Sign

0c:1b:b3:43:f6:86:63:ce:2f:2f:47:2d:af:a7:9a:15
Certificate

Issuer

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01-06-2020 00:00

Not After

09-08-2023 12:00

Subject

SERIALNUMBER=9144030071526726XG,CN=Tencent Technology(Shenzhen) Company Limited,O=Tencent Technology(Shenzhen) Company Limited,L=Shenzhen,ST=Guangdong Province,C=CN,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.1=#13085368656e7a68656e,1.3.6.1.4.1.311.60.2.1.2=#13124775616e67646f6e672050726f76696e6365,1.3.6.1.4.1.311.60.2.1.3=#1302434e

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

03:f1:b4:e1:5f:3a:82:f1:14:96:78:b3:d7:d8:47:5c
Certificate

Issuer

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

18-04-2012 12:00

Not After

18-04-2027 12:00

Subject

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:dd
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01-01-2021 00:00

Not After

06-01-2031 00:00

Subject

CN=DigiCert Timestamp 2021,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

07-01-2016 12:00

Not After

07-01-2031 12:00

Subject

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

33:00:00:00:43:3a:68:18:9e:33:90:29:87:00:00:00:00:00:43
Certificate

Issuer

CN=Microsoft Windows Third Party Component CA 2014,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

15-12-2020 22:25

Not After

02-12-2021 22:25

Subject

CN=Microsoft Windows Hardware Compatibility Publisher,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

33:00:00:00:0d:69:0d:5d:78:93:d0:76:df:00:00:00:00:00:0d
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

15-10-2014 20:31

Not After

15-10-2029 20:41

Subject

CN=Microsoft Windows Third Party Component CA 2014,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

50:7a:04:31:f4:a9:55:da:65:aa:cc:3e:78:25:d6:99:4b:7f:e8:7e:3a:52:00:95:09:2e:67:80:de:12:62:85
Signer

Actual PE Digest

50:7a:04:31:f4:a9:55:da:65:aa:cc:3e:78:25:d6:99:4b:7f:e8:7e:3a:52:00:95:09:2e:67:80:de:12:62:85

Digest Algorithm

sha256

PE Digest Matches

true

50:7a:04:31:f4:a9:55:da:65:aa:cc:3e:78:25:d6:99:4b:7f:e8:7e:3a:52:00:95:09:2e:67:80:de:12:62:85
Signer

Actual PE Digest

50:7a:04:31:f4:a9:55:da:65:aa:cc:3e:78:25:d6:99:4b:7f:e8:7e:3a:52:00:95:09:2e:67:80:de:12:62:85

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_FORCE_INTEGRITY

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

E:\workplace\AndroidEmulator\UI_Release_Packet_New\Basic\Client\AEngine\aow\Release\aow_drv_x64.pdb

Imports

ntoskrnl.exe

ExFreePoolWithTag
RtlTimeToSecondsSince1970
ZwReadFile
RtlInitUnicodeString
swprintf
ZwSetInformationFile
KeDelayExecutionThread
ZwWaitForSingleObject
ZwCreateFile
ZwQueryDirectoryFile
PsGetCurrentThreadId
ZwOpenFile
ZwQueryInformationFile
ZwWriteFile
IoFileObjectType
ZwClose
ObReferenceObjectByHandle
ObfDereferenceObject
IoQueryFileDosDeviceName
DbgPrint
PsCreateSystemThread
ZwConnectPort
ZwCreateEvent
ExReleaseFastMutex
ExAcquireFastMutex
KeInitializeEvent
LpcPortObjectType
LpcRequestPort
ZwSetEvent
ZwCreateSection
ZwFsControlFile
ZwCancelIoFile
ZwWaitForMultipleObjects
RtlUnicodeStringToAnsiString
ZwSetValueKey
ZwQueryValueKey
RtlxUnicodeStringToAnsiSize
NlsMbOemCodePageTag
ZwOpenKey
_stricmp
MmIsAddressValid
PsSetCreateProcessNotifyRoutine
IofCompleteRequest
KeWaitForSingleObject
KeSetEvent
IoCreateFile
IoFreeMdl
IoAllocateMdl
RtlAnsiStringToUnicodeString
ExInitializeNPagedLookasideList
ExpInterlockedPushEntrySList
ExpInterlockedPopEntrySList
ExSystemTimeToLocalTime
PsTerminateSystemThread
_vsnprintf
ExQueryDepthSList
RtlTimeToTimeFields
PsThreadType
ExInterlockedRemoveHeadList
PsGetCurrentProcessId
KeWaitForMultipleObjects
ExDeleteNPagedLookasideList
PsGetProcessPeb
PsLookupProcessByProcessId
ExGetPreviousMode
ZwQuerySystemInformation
KeUnstackDetachProcess
IoGetCurrentProcess
ExAllocatePoolWithTag
ZwQueryInformationProcess
PsGetProcessId
KeStackAttachProcess
ProbeForRead
ObOpenObjectByPointer
MmSectionObjectType
_wcsicmp
IoThreadToProcess
PsProcessType
PsGetProcessImageFileName
KeInitializeApc
KeInsertQueueApc
PsGetThreadId
ZwTerminateProcess
ZwQueryInformationThread
PsLookupThreadByThreadId
RtlxAnsiStringToUnicodeSize
MmProbeAndLockPages
isspace
_wcsnicmp
isdigit
isupper
RtlGetVersion
MmUserProbeAddress
ExAcquireResourceExclusiveLite
KeLeaveCriticalRegion
ZwMapViewOfSection
MmHighestUserAddress
RtlSetBits
RtlInitializeBitMap
KeEnterCriticalRegion
MmMapViewInSystemSpace
strncpy
ZwUnmapViewOfSection
RtlAreBitsSet
ExAcquireResourceSharedLite
ExReleaseResourceLite
RtlClearAllBits
MmUnmapViewInSystemSpace
ExDeleteResourceLite
ExInitializeResourceLite
RtlFindNextForwardRunClear
RtlClearBits
KeInitializeMutex
MmFreeMappingAddress
KeReleaseMutex
MmMapLockedPagesWithReservedMapping
MmAllocateMappingAddress
MmUnmapReservedMapping
MmUnlockPages
strchr
MmGetSystemRoutineAddress
atoi
_snprintf
ZwFreeVirtualMemory
ZwSetInformationThread
RtlRandom
ZwAllocateVirtualMemory
ZwSetTimer
ZwCreateTimer
ZwCancelTimer
sprintf
strncmp
ExEventObjectType
MmUnmapLockedPages
IoDeleteSymbolicLink
PsRemoveCreateThreadNotifyRoutine
PsIsSystemThread
IoDeleteDevice
PsSetCreateThreadNotifyRoutine
MmMapLockedPagesSpecifyCache
ZwSetInformationProcess
IoCreateSymbolicLink
IoCreateDevice
ExSetTimerResolution
strrchr
ZwOpenEvent
_itoa
RtlCaptureContext
ProbeForWrite
ZwYieldExecution
strstr
qsort
RtlSecondsSince1970ToTime
__C_specific_handler

hal

KeQueryPerformanceCounter

Sections

.text
Size: 694KB - Virtual size: 693KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 151KB - Virtual size: 150KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 21KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 38KB - Virtual size: 38KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

INIT
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 840B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 17KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.tvm0
Size: 416KB - Virtual size: 416KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
ui/aow_exe.exe
.sys windows:5 windows x86 arch:x86

63368eb7364c1321a2cf6e5542cf0a2b

Code Sign

0e:33:12:30:52:5a:25:a7:f8:10:e5:34:88:b0:aa:40
Certificate

Issuer

CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

25-11-2020 00:00

Not After

22-02-2024 23:59

Subject

CN=Tencent Technology(Shenzhen) Company Limited,O=Tencent Technology(Shenzhen) Company Limited,L=Shenzhen,ST=Guangdong Province,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

0f:a8:49:06:15:d7:00:a0:be:21:76:fd:c5:ec:6d:bd
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

11-02-2011 12:00

Not After

10-02-2026 12:00

Subject

CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

22-10-2013 12:00

Not After

22-10-2028 12:00

Subject

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0e:a7:f6:86:bc:40:35:4a:70:f2:c2:97:c1:31:5e:f6
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

25-11-2020 00:00

Not After

22-02-2024 23:59

Subject

CN=Tencent Technology(Shenzhen) Company Limited,O=Tencent Technology(Shenzhen) Company Limited,L=Shenzhen,ST=Guangdong Province,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:dd
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01-01-2021 00:00

Not After

06-01-2031 00:00

Subject

CN=DigiCert Timestamp 2021,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

07-01-2016 12:00

Not After

07-01-2031 12:00

Subject

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

82:51:d4:4a:47:61:6a:fe:13:a5:2d:4b:79:fc:fd:1b:16:aa:e2:4f:ca:77:ad:b0:68:55:c3:eb:f6:1c:a1:cd
Signer

Actual PE Digest

82:51:d4:4a:47:61:6a:fe:13:a5:2d:4b:79:fc:fd:1b:16:aa:e2:4f:ca:77:ad:b0:68:55:c3:eb:f6:1c:a1:cd

Digest Algorithm

sha256

PE Digest Matches

true

1e:61:a9:eb:1a:76:54:7f:76:ff:91:95:71:62:cb:80:c6:22:22:b5
Signer

Actual PE Digest

1e:61:a9:eb:1a:76:54:7f:76:ff:91:95:71:62:cb:80:c6:22:22:b5

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

E:\workplace\AndroidEmulator\UI_Release_Packet_New\Basic\Client\AEngine\aow\Release\aow_exe.pdb

Imports

ntdll

ZwResumeThread
swprintf
ZwGetContextThread
RtlGetVersion
ZwQuerySystemInformation
ZwReadVirtualMemory
ZwSetInformationFile
ZwSuspendThread
ZwQueryInformationProcess
RtlImageNtHeader
ZwQueryInformationFile
ZwQueryInformationThread
ZwWriteFile
ZwReadFile
RtlFreeHeap
RtlInitUnicodeString
ZwWaitForSingleObject
ZwCreateFile
RtlAllocateHeap
NtDelayExecution
RtlCreateUserThread
NtSetEvent
RtlEnterCriticalSection
NtDeviceIoControlFile
NtWaitForSingleObject
NtCreateFile
RtlDeleteCriticalSection
NtCreateEvent
RtlLeaveCriticalSection
RtlInitializeCriticalSection
NtResetEvent
ZwCreateEvent
ZwFsControlFile
ZwCancelIoFile
ZwCreateNamedPipeFile
ZwFlushBuffersFile
ZwWaitForMultipleObjects
RtlSetLastWin32Error
RtlNtStatusToDosError
_snprintf
_vsnprintf
strrchr
NtFreeVirtualMemory
NtAllocateVirtualMemory
NtProtectVirtualMemory
NtQuerySystemInformation
NtQueryInformationThread
RtlRaiseException
NtFsControlFile
NtWriteVirtualMemory
NtQueryInformationProcess
strncpy
NtSetInformationThread
NtOpenThread
NtClose
RtlRandom
NtQueryPerformanceCounter
NtCreateNamedPipeFile
NtQueryVirtualMemory
NtOpenFile
NtTerminateThread
NtCreateThread
NtTerminateProcess
strstr
LdrGetProcedureAddress
LdrGetDllHandle
NtCreateProcess
RtlAddVectoredExceptionHandler
NtGetContextThread
RtlExitUserThread
sprintf
sscanf
RtlAnsiStringToUnicodeString
NtSetContextThread
NtYieldExecution
RtlInitAnsiString
RtlPcToFileHeader
strchr
RtlTimeToTimeFields
NtResumeThread
NtSuspendThread
strncmp
RtlFreeUnicodeString
memset
memcpy
_allmul
_chkstk
_alldiv

Exports

Exports

GetModuleHandle64
GetProcAddress64
GetThreadContext64
GetWow64Statck
ReadProcessMemory64
SetLastErrorFromX64Call
SetThreadContext64
VirtualAllocEx64
VirtualFreeEx64
VirtualProtectEx64
VirtualQueryEx64
WriteProcessMemory64
X64Call
_CloseHandle@4
_CreatePipe@16
_GetCurrentProcessorNumber@0
_GetExitCodeProcess@8
_GetExitCodeThread@8
_GetLocalTime@4
_GetStdHandle@4
_GetThreadContext@8
_GetThreadPriority@4
_GetTickCount@0
_InterlockedCompareExchange@12
_InterlockedDecrement@4
_InterlockedExchange@8
_InterlockedIncrement@4
_PeekNamedPipe@24
_RaiseException@16
_ReadProcessMemory@20
_SetFilePointer@16
_SetThreadAffinityMask@8
_SetThreadPriority@8
_VirtualAlloc@16
_VirtualAllocEx@20
_VirtualFree@12
_VirtualFreeEx@16
_VirtualProtect@16
_VirtualQuery@12
_WriteFile@20
_WriteProcessMemory@20

Sections

.text
Size: 191KB - Virtual size: 190KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 13KB - Virtual size: 60KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 9B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
ui/confgemu.conf
ui/libaow.dll
.dll windows:5 windows x86 arch:x86

0f1eaf09b49ace2332f227d0ef9bf8f4

Code Sign

0e:33:12:30:52:5a:25:a7:f8:10:e5:34:88:b0:aa:40
Certificate

Issuer

CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

25-11-2020 00:00

Not After

22-02-2024 23:59

Subject

CN=Tencent Technology(Shenzhen) Company Limited,O=Tencent Technology(Shenzhen) Company Limited,L=Shenzhen,ST=Guangdong Province,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

0f:a8:49:06:15:d7:00:a0:be:21:76:fd:c5:ec:6d:bd
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

11-02-2011 12:00

Not After

10-02-2026 12:00

Subject

CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

22-10-2013 12:00

Not After

22-10-2028 12:00

Subject

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0e:a7:f6:86:bc:40:35:4a:70:f2:c2:97:c1:31:5e:f6
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

25-11-2020 00:00

Not After

22-02-2024 23:59

Subject

CN=Tencent Technology(Shenzhen) Company Limited,O=Tencent Technology(Shenzhen) Company Limited,L=Shenzhen,ST=Guangdong Province,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:dd
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01-01-2021 00:00

Not After

06-01-2031 00:00

Subject

CN=DigiCert Timestamp 2021,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

07-01-2016 12:00

Not After

07-01-2031 12:00

Subject

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

91:f9:b8:da:57:95:10:8a:e9:a2:40:cd:c5:8e:ba:83:74:65:99:6e:b9:b3:cc:c1:1d:c6:e8:4e:9b:cb:20:9d
Signer

Actual PE Digest

91:f9:b8:da:57:95:10:8a:e9:a2:40:cd:c5:8e:ba:83:74:65:99:6e:b9:b3:cc:c1:1d:c6:e8:4e:9b:cb:20:9d

Digest Algorithm

sha256

PE Digest Matches

true

d9:14:14:1d:b2:27:76:24:35:17:d7:7c:50:0c:7a:fc:23:68:7f:df
Signer

Actual PE Digest

d9:14:14:1d:b2:27:76:24:35:17:d7:7c:50:0c:7a:fc:23:68:7f:df

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

E:\workplace\AndroidEmulator\UI_Release_Packet_New\Basic\Client\AEngine\aow\Release\libaow.pdb

Imports

wininet

DeleteUrlCacheEntryW

urlmon

URLDownloadToFileW

kernel32

GetPrivateProfileIntW
GetModuleFileNameA
GetPrivateProfileSectionA
FindFirstFileW
GetCurrentProcess
CreateProcessA
FindClose
RemoveDirectoryW
IsDebuggerPresent
FindNextFileW
DeleteFileW
CreateProcessW
TerminateThread
FreeLibrary
CreateDirectoryW
LoadLibraryW
CopyFileW
GetFileAttributesW
CreateFileW
GetCurrentDirectoryW
Process32FirstW
Process32NextW
CreateToolhelp32Snapshot
GetTickCount
InitializeCriticalSection
OpenProcess
LeaveCriticalSection
GetTempPathW
EnterCriticalSection
QueueUserWorkItem
GetUserDefaultUILanguage
DeleteCriticalSection
MapViewOfFile
UnmapViewOfFile
InterlockedIncrement
InterlockedDecrement
SetEvent
GetCurrentThread
WideCharToMultiByte
InitializeCriticalSectionAndSpinCount
lstrlenW
SetThreadPriority
GetModuleFileNameW
lstrcmpiW
ExitProcess
GetCommandLineW
CreateMutexW
SearchPathW
SetInformationJobObject
CreateJobObjectW
SetHandleInformation
VirtualQueryEx
AssignProcessToJobObject
GetExitCodeProcess
TerminateProcess
FindFirstFileA
GetLocalTime
AddVectoredExceptionHandler
SetCurrentDirectoryW
FindNextFileA
GetModuleHandleA
OutputDebugStringA
TerminateJobObject
GetTempPathA
DeleteFileA
GlobalMemoryStatus
GetSystemTimeAsFileTime
GetComputerNameExA
UnregisterWait
WaitForSingleObjectEx
CreateEventA
RegisterWaitForSingleObject
UnregisterWaitEx
ReleaseMutex
GetSystemDirectoryW
LocalAlloc
LocalFree
GetPrivateProfileStringW
InterlockedCompareExchange
CancelIo
GetProcessHeap
WaitForMultipleObjects
CreateEventW
GetProcAddress
FlushFileBuffers
GetOverlappedResult
ReadFile
WriteFile
CreateNamedPipeW
GetModuleHandleW
ConnectNamedPipe
IsProcessorFeaturePresent
WaitNamedPipeA
CreateFileA
InterlockedExchange
GetCurrentProcessId
GetCurrentThreadId
Sleep
CreateThread
CloseHandle
GetLastError
WaitForSingleObject
HeapSize
HeapReAlloc
HeapFree
HeapAlloc
HeapDestroy
QueryPerformanceCounter
SetUnhandledExceptionFilter
UnhandledExceptionFilter
CreateFileMappingW
EncodePointer
DecodePointer

user32

wsprintfA
MessageBoxW
wsprintfW

advapi32

RegOpenKeyExW
CloseServiceHandle
OpenProcessToken
DeleteService
OpenSCManagerW
OpenServiceW
LookupPrivilegeValueW
RegSetValueExW
RegCloseKey
QueryServiceConfigW
AdjustTokenPrivileges
ControlService
QueryServiceStatusEx
ChangeServiceConfigW
StartServiceW
CreateServiceW

shell32

ShellExecuteW
CommandLineToArgvW

ole32

CoUninitialize
CoCreateInstance
CoInitialize
PropVariantClear
CoTaskMemFree
CoTaskMemAlloc
CLSIDFromString

msvcp100

?_Xout_of_range@std@@YAXPBD@Z
?_Orphan_all@_Container_base0@std@@QAEXXZ
?_Xlength_error@std@@YAXPBD@Z

ws2_32

getpeername
recv
sendto
setsockopt
ioctlsocket
gethostname
connect
inet_ntoa
shutdown
getsockname
htons
WSAGetLastError
select
getaddrinfo
inet_addr
bind
socket
freeaddrinfo
closesocket
gethostbyaddr
gethostbyname
send
getsockopt
listen
accept
WSACreateEvent
WSAEventSelect
WSAEnumNetworkEvents
WSACloseEvent
recvfrom
WSACleanup
WSAStartup

shlwapi

PathRemoveFileSpecA
PathAppendA
PathAppendW
PathFileExistsW
StrStrIW
PathStripPathW
StrStrIA
wnsprintfW
PathRemoveFileSpecW

msvcr100

wcsncat_s
_snwprintf_s
wcsncpy_s
memset
memcpy
_CxxThrowException
atof
_CIsin
_CIcos
_CIsqrt
rand
strncpy
__clean_type_info_names_internal
__CxxFrameHandler3
_except_handler4_common
?_type_info_dtor_internal_method@type_info@@QAEXXZ
?terminate@@YAXXZ
_crt_debugger_hook
__CppXcptFilter
_amsg_exit
_initterm_e
_initterm
_encoded_null
_malloc_crt
_onexit
_lock
__dllonexit
fwrite
strcpy_s
fprintf
fopen
wcsstr
fgets
_vswprintf_c_l
_errno
system
_snprintf
??_V@YAXPAX@Z
_purecall
??3@YAXPAX@Z
??2@YAPAXI@Z
_vswprintf
_vsnprintf
?what@exception@std@@UBEPBDXZ
??1exception@std@@UAE@XZ
??0exception@std@@QAE@ABQBD@Z
??0exception@std@@QAE@ABV01@@Z
memmove
wcscpy_s
free
malloc
memchr
vsprintf_s
printf
memmove_s
_wcsicmp
_vscwprintf
_wcsnicmp
_wfopen
vswprintf_s
fread
memcpy_s
ftell
fseek
fclose
strchr
atoi
calloc
wcsncpy
_beginthreadex
wcsrchr
_recalloc
wcschr
fscanf
sprintf
sscanf
wcstoul
_wtoi
strerror
strstr
__iob_func
fflush
_unlock

psapi

GetModuleFileNameExW

version

VerQueryValueW
GetFileVersionInfoW
GetFileVersionInfoSizeW

dsound

ord3
ord7

winmm

timeBeginPeriod
waveOutClose
waveInClose
waveInMessage
waveInStart
waveInStop
waveOutPrepareHeader
waveOutGetNumDevs
waveInGetDevCapsA
waveOutOpen
waveInUnprepareHeader
waveOutUnprepareHeader
waveOutGetDevCapsA
timeEndPeriod
waveInGetNumDevs
waveOutMessage
waveInAddBuffer
waveInOpen
waveInPrepareHeader
waveOutReset
waveInReset
waveOutWrite

rpcrt4

UuidToStringW
RpcStringFreeW

iphlpapi

IcmpSendEcho
IcmpCloseHandle
GetIpForwardTable
GetNetworkParams
IcmpCreateFile
GetAdaptersInfo

ntdll

ZwReplyWaitReceivePort
ZwCreateSection
ZwCompleteConnectPort
NtAllocateVirtualMemory
NtResumeThread
RtlCreateUserProcess
NtWriteVirtualMemory
RtlFreeUnicodeString
RtlDestroyProcessParameters
ZwSetEvent
RtlDosPathNameToNtPathName_U
ZwAcceptConnectPort
ZwCreateEvent
ZwCreatePort
ZwConnectPort
ZwRequestPort
NtResetEvent
RtlInitializeCriticalSection
ZwWaitForSingleObject
RtlCreateProcessParameters
RtlInitUnicodeString
NtCreateEvent
RtlDeleteCriticalSection
NtSetEvent
RtlEnterCriticalSection
NtDeviceIoControlFile
NtWaitForSingleObject
NtCreateFile
RtlLeaveCriticalSection

imagehlp

MapAndLoad
UnMapAndLoad

Exports

Exports

??0_Mutex@std@@QAE@W4_Uninitialized@1@@Z
??4_Init_locks@std@@QAEAAV01@ABV01@@Z
_AOWAddApkFile@8
_AOWCopyFileByInode@16
_AOWCreateInstanceMutex@4
_AOWCreateInstanceMutexWait@8
_AOWCreateLinuxInput@0
_AOWCreateSnapshot@8
_AOWDestryLinuxInput@0
_AOWDumpLinuxThread@8
_AOWDumpWin32Thread@8
_AOWDumpWin32ThreadTimer@12
_AOWEnableVirtpipeSharedMemory@4
_AOWEnableWin32ThreadSyscallLog@12
_AOWForwardVBoxIPToLocalHost@4
_AOWFreeFileBuffer@4
_AOWGetAndroidFileSize@8
_AOWGetBootProgress@0
_AOWGetBootProgressEvent@0
_AOWGetRootDir@4
_AOWGetSessionKey@8
_AOWGetShareDir@4
_AOWOpenLinuxDirectory@4
_AOWOpenLinuxFile@4
_AOWOpenLinuxFileByInode@8
_AOWOpenLinuxInode@4
_AOWOpenLinuxInodeByInode@8
_AOWPipeAccept@4
_AOWPipeClose@4
_AOWPipeConnect@12
_AOWPipeListen@12
_AOWPipeRead@12
_AOWPipeWrite@12
_AOWProcessLinuxInput@12
_AOWReadAndroidFile@12
_AOWReadLinuxDirectory@12
_AOWRegisterLogcatMonitor@16
_AOWRemoveUninstalledApkDirs@0
_AOWRemoveUninstalledApkDirsNow@0
_AOWRestartEngine@0
_AOWSceneNotify@8
_AOWSetBootProgressNotify@4
_AOWSetBootProgressTag@8
_AOWSetCPUCores@4
_AOWSetDataDir@4
_AOWSetDebugMode@4
_AOWSetDefaultProperty@8
_AOWSetLogLevel@4
_AOWSetMainWindow@4
_AOWSetPersistProperty@8
_AOWSetProductRegKeyPath@4
_AOWSetProperty@8
_AOWSetReportDataCallback@8
_AOWSetRootDir@4
_AOWSetSdcardDir@4
_AOWSetShareDir@4
_AOWStartEngine@20
_AOWStopEngine@4
_AOWUnisntallDriver@0
_AOWUnregisterLogcatMonitor@4
_AOWUsingLinuxInput@0
_AOWUsingPipe@0
_AOWWriteAndroidFile@12

Sections

.text
Size: 175KB - Virtual size: 175KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 38KB - Virtual size: 38KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tvm0
Size: 112KB - Virtual size: 112KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 11KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
ui/libx264-148.dll
.dll windows:4 windows x86 arch:x86

9afc0ee5634d041bd231da18c629c901

Code Sign

0e:33:12:30:52:5a:25:a7:f8:10:e5:34:88:b0:aa:40
Certificate

Issuer

CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

25-11-2020 00:00

Not After

22-02-2024 23:59

Subject

CN=Tencent Technology(Shenzhen) Company Limited,O=Tencent Technology(Shenzhen) Company Limited,L=Shenzhen,ST=Guangdong Province,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

0f:a8:49:06:15:d7:00:a0:be:21:76:fd:c5:ec:6d:bd
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

11-02-2011 12:00

Not After

10-02-2026 12:00

Subject

CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

22-10-2013 12:00

Not After

22-10-2028 12:00

Subject

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0e:a7:f6:86:bc:40:35:4a:70:f2:c2:97:c1:31:5e:f6
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

25-11-2020 00:00

Not After

22-02-2024 23:59

Subject

CN=Tencent Technology(Shenzhen) Company Limited,O=Tencent Technology(Shenzhen) Company Limited,L=Shenzhen,ST=Guangdong Province,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:dd
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01-01-2021 00:00

Not After

06-01-2031 00:00

Subject

CN=DigiCert Timestamp 2021,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

07-01-2016 12:00

Not After

07-01-2031 12:00

Subject

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

52:e6:55:62:40:2c:41:1a:af:9f:55:fb:db:2b:c9:0e:31:aa:0c:0c:b8:25:19:3c:fc:6b:17:e3:6d:df:a1:5a
Signer

Actual PE Digest

52:e6:55:62:40:2c:41:1a:af:9f:55:fb:db:2b:c9:0e:31:aa:0c:0c:b8:25:19:3c:fc:6b:17:e3:6d:df:a1:5a

Digest Algorithm

sha256

PE Digest Matches

true

30:21:9a:2b:07:78:50:ce:24:99:14:77:e5:75:c6:fa:7e:0a:d5:68
Signer

Actual PE Digest

30:21:9a:2b:07:78:50:ce:24:99:14:77:e5:75:c6:fa:7e:0a:d5:68

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

CloseHandle
CreateEventW
CreateSemaphoreW
DeleteCriticalSection
EnterCriticalSection
FreeLibrary
GetConsoleMode
GetCurrentProcess
GetCurrentThread
GetLastError
GetModuleHandleA
GetModuleHandleW
GetProcAddress
GetProcessAffinityMask
GetStdHandle
InitializeCriticalSection
InitializeCriticalSectionAndSpinCount
InterlockedCompareExchange
InterlockedExchange
IsDBCSLeadByteEx
LeaveCriticalSection
LoadLibraryA
MultiByteToWideChar
ReleaseSemaphore
SetEvent
SetThreadPriority
Sleep
TlsGetValue
VirtualProtect
VirtualQuery
WaitForSingleObject
WaitNamedPipeW
WideCharToMultiByte
WriteConsoleW

msvcrt

_ftime
_strdup
__dllonexit
__lc_codepage
__mb_cur_max
_assert
_beginthreadex
_errno
_filelengthi64
_fstati64
_iob
_stricmp
_strnicmp
_wfopen
_winmajor
_wrename
_wstati64
_wunlink
abort
calloc
ceil
exp
fclose
fflush
fgetpos
fputc
fread
free
fsetpos
fwrite
getenv
localeconv
log
log10
malloc
memcpy
memmove
memset
pow
sscanf
strcat
strchr
strcmp
strcpy
strcspn
strlen
strncmp
strpbrk
strstr
strtok
strtol
vfprintf
wcslen

Exports

Exports

_get_output_format
x264_adaptive_quant_frame
x264_add16x16_idct8_avx
x264_add16x16_idct8_mmx
x264_add16x16_idct8_sse2
x264_add16x16_idct_avx
x264_add16x16_idct_avx2
x264_add16x16_idct_dc_avx
x264_add16x16_idct_dc_avx2
x264_add16x16_idct_dc_mmx2
x264_add16x16_idct_dc_sse2
x264_add16x16_idct_dc_ssse3
x264_add16x16_idct_mmx
x264_add16x16_idct_sse2
x264_add4x4_idct_avx
x264_add4x4_idct_mmx
x264_add4x4_idct_sse4
x264_add8x8_idct8_avx
x264_add8x8_idct8_avx.skip_prologue
x264_add8x8_idct8_mmx
x264_add8x8_idct8_mmx.skip_prologue
x264_add8x8_idct8_sse2
x264_add8x8_idct8_sse2.skip_prologue
x264_add8x8_idct_avx
x264_add8x8_idct_avx.skip_prologue
x264_add8x8_idct_avx2
x264_add8x8_idct_avx2.skip_prologue
x264_add8x8_idct_dc_mmx2
x264_add8x8_idct_dc_ssse3
x264_add8x8_idct_mmx
x264_add8x8_idct_sse2
x264_add8x8_idct_sse2.skip_prologue
x264_analyse_free_costs
x264_analyse_init_costs
x264_analyse_weight_frame
x264_bit_depth
x264_bitstream_init
x264_cabac_block_residual_8x8_rd_c
x264_cabac_block_residual_c
x264_cabac_block_residual_rd_c
x264_cabac_context_init
x264_cabac_contexts
x264_cabac_encode_bypass_asm
x264_cabac_encode_bypass_bmi2
x264_cabac_encode_bypass_c
x264_cabac_encode_decision_asm
x264_cabac_encode_decision_bmi2
x264_cabac_encode_decision_c
x264_cabac_encode_flush
x264_cabac_encode_init
x264_cabac_encode_init_core
x264_cabac_encode_terminal_asm
x264_cabac_encode_terminal_c
x264_cabac_encode_ue_bypass
x264_cabac_entropy
x264_cabac_init
x264_cabac_mb_skip
x264_cabac_range_lps
x264_cabac_renorm_shift
x264_cabac_size_unary
x264_cabac_transition
x264_cabac_transition_unary
x264_cache_mv_func_table
x264_cache_mvd_func_table
x264_cache_ref_func_table
x264_cavlc_init
x264_chroma_format
x264_chroma_inter_body_avx
x264_chroma_inter_body_mmx2
x264_chroma_inter_body_sse2
x264_chroma_intra_body_avx
x264_chroma_intra_body_mmx2
x264_chroma_intra_body_sse2
x264_coeff0_token
x264_coeff_abs_level_m1_offset
x264_coeff_flag_offset_chroma_422_dc
x264_coeff_last15_mmx2
x264_coeff_last15_sse2
x264_coeff_last15_sse2_lzcnt
x264_coeff_last16_mmx2
x264_coeff_last16_sse2
x264_coeff_last16_sse2_lzcnt
x264_coeff_last4_mmx2
x264_coeff_last4_mmx2_lzcnt
x264_coeff_last64_avx2_lzcnt
x264_coeff_last64_mmx2
x264_coeff_last64_sse2
x264_coeff_last64_sse2_lzcnt
x264_coeff_last8_mmx2
x264_coeff_last8_mmx2_lzcnt
x264_coeff_level_run15_avx2_lzcnt
x264_coeff_level_run15_mmx2
x264_coeff_level_run15_sse2
x264_coeff_level_run15_sse2_lzcnt
x264_coeff_level_run15_ssse3
x264_coeff_level_run15_ssse3_lzcnt
x264_coeff_level_run16_avx2_lzcnt
x264_coeff_level_run16_mmx2
x264_coeff_level_run16_sse2
x264_coeff_level_run16_sse2_lzcnt
x264_coeff_level_run16_ssse3
x264_coeff_level_run16_ssse3_lzcnt
x264_coeff_level_run4_mmx2
x264_coeff_level_run4_mmx2_lzcnt
x264_coeff_level_run4_ssse3
x264_coeff_level_run4_ssse3_lzcnt
x264_coeff_level_run8_mmx2
x264_coeff_level_run8_mmx2_lzcnt
x264_coeff_level_run8_ssse3
x264_coeff_level_run8_ssse3_lzcnt
x264_coeff_token
x264_copy_column8
x264_count_cat_m1
x264_cpu_cpuid
x264_cpu_cpuid_test
x264_cpu_detect
x264_cpu_emms
x264_cpu_names
x264_cpu_num_processors
x264_cpu_sfence
x264_cpu_xgetbv
x264_cqm_delete
x264_cqm_init
x264_cqm_parse_file
x264_dct2x4dc_mmx2
x264_dct4_weight2_tab
x264_dct4_weight_tab
x264_dct4x4dc_mmx2
x264_dct8_mmx
x264_dct8_weight2_tab
x264_dct8_weight_tab
x264_dct_init
x264_deblock_h_chroma_422_avx
x264_deblock_h_chroma_422_intra_avx
x264_deblock_h_chroma_422_intra_mmx2
x264_deblock_h_chroma_422_intra_sse2
x264_deblock_h_chroma_422_mmx2
x264_deblock_h_chroma_422_sse2
x264_deblock_h_chroma_avx
x264_deblock_h_chroma_intra_avx
x264_deblock_h_chroma_intra_mbaff_mmx2
x264_deblock_h_chroma_intra_mmx2
x264_deblock_h_chroma_intra_sse2
x264_deblock_h_chroma_mbaff_mmx2
x264_deblock_h_chroma_mbaff_sse2
x264_deblock_h_chroma_mmx2
x264_deblock_h_chroma_sse2
x264_deblock_h_luma_avx
x264_deblock_h_luma_intra_avx
x264_deblock_h_luma_intra_mmx2
x264_deblock_h_luma_intra_sse2
x264_deblock_h_luma_mmx2
x264_deblock_h_luma_sse2
x264_deblock_init
x264_deblock_strength_avx
x264_deblock_strength_avx2
x264_deblock_strength_mmx2
x264_deblock_strength_sse2
x264_deblock_strength_ssse3
x264_deblock_v8_luma_intra_mmx2
x264_deblock_v8_luma_mmx2
x264_deblock_v_chroma_avx
x264_deblock_v_chroma_intra_avx
x264_deblock_v_chroma_intra_mmx2
x264_deblock_v_chroma_intra_sse2
x264_deblock_v_chroma_mmx2
x264_deblock_v_chroma_sse2
x264_deblock_v_luma_avx
x264_deblock_v_luma_intra_avx
x264_deblock_v_luma_intra_sse2
x264_deblock_v_luma_sse2
x264_decimate_score15_mmx2
x264_decimate_score15_sse2
x264_decimate_score15_ssse3
x264_decimate_score16_mmx2
x264_decimate_score16_sse2
x264_decimate_score16_ssse3
x264_decimate_score64_avx2
x264_decimate_score64_mmx2
x264_decimate_score64_sse2
x264_decimate_score64_ssse3
x264_decimate_table4
x264_decimate_table8
x264_deinterleave_shufd
x264_denoise_dct_avx
x264_denoise_dct_avx2
x264_denoise_dct_mmx
x264_denoise_dct_sse2
x264_denoise_dct_ssse3
x264_dequant_4x4_avx
x264_dequant_4x4_avx2
x264_dequant_4x4_flat16_avx2
x264_dequant_4x4_flat16_mmx
x264_dequant_4x4_flat16_sse2
x264_dequant_4x4_mmx
x264_dequant_4x4_sse2
x264_dequant_4x4_xop
x264_dequant_4x4dc_avx
x264_dequant_4x4dc_avx2
x264_dequant_4x4dc_mmx2
x264_dequant_4x4dc_sse2
x264_dequant_8x8_avx
x264_dequant_8x8_avx2
x264_dequant_8x8_flat16_avx2
x264_dequant_8x8_flat16_mmx
x264_dequant_8x8_flat16_sse2
x264_dequant_8x8_mmx
x264_dequant_8x8_sse2
x264_dequant_8x8_xop
x264_encoder_close
x264_encoder_delayed_frames
x264_encoder_encode
x264_encoder_headers
x264_encoder_intra_refresh
x264_encoder_invalidate_reference
x264_encoder_maximum_delayed_frames
x264_encoder_open_148
x264_encoder_parameters
x264_encoder_reconfig
x264_encoder_reconfig_apply
x264_exp2_lut
x264_expand_border_mbpair
x264_field_vsad
x264_filler_write
x264_fopen
x264_frame_cond_broadcast
x264_frame_cond_wait
x264_frame_copy_picture
x264_frame_deblock_row
x264_frame_delete
x264_frame_delete_list
x264_frame_expand_border
x264_frame_expand_border_chroma
x264_frame_expand_border_filtered
x264_frame_expand_border_lowres
x264_frame_expand_border_mod16
x264_frame_filter
x264_frame_init_lowres
x264_frame_init_lowres_core_avx
x264_frame_init_lowres_core_avx2
x264_frame_init_lowres_core_cache32_mmx2
x264_frame_init_lowres_core_mmx2
x264_frame_init_lowres_core_sse2
x264_frame_init_lowres_core_ssse3
x264_frame_init_lowres_core_xop
x264_frame_new_slice
x264_frame_pop
x264_frame_pop_blank_unused
x264_frame_pop_unused
x264_frame_push
x264_frame_push_blank_unused
x264_frame_push_unused
x264_frame_shift
x264_frame_unshift
x264_free
x264_hadamard_ac_2x2max_mmx2
x264_hadamard_ac_4x4_mmx2
x264_hadamard_ac_8x8_avx
x264_hadamard_ac_8x8_avx2
x264_hadamard_ac_8x8_mmx2
x264_hadamard_ac_8x8_sse2
x264_hadamard_ac_8x8_sse4
x264_hadamard_ac_8x8_ssse3
x264_hadamard_ac_8x8_ssse3_atom
x264_hadamard_ac_8x8_xop
x264_hadamard_load
x264_hpel_filter_c_avx
x264_hpel_filter_c_avx2
x264_hpel_filter_c_mmx2
x264_hpel_filter_c_sse2
x264_hpel_filter_c_ssse3
x264_hpel_filter_h_avx
x264_hpel_filter_h_avx2
x264_hpel_filter_h_mmx2
x264_hpel_filter_h_sse2
x264_hpel_filter_h_ssse3
x264_hpel_filter_v_avx
x264_hpel_filter_v_avx2
x264_hpel_filter_v_mmx2
x264_hpel_filter_v_sse2
x264_hpel_filter_v_ssse3
x264_hpel_ref0
x264_hpel_ref1
x264_hrd_fullness
x264_hsub_mul
x264_idct4x4dc_mmx
x264_idct8_mmx
x264_idct_dequant_2x4_dc_avx
x264_idct_dequant_2x4_dc_sse2
x264_idct_dequant_2x4_dconly_avx
x264_idct_dequant_2x4_dconly_sse2
x264_integral_init4h_avx2
x264_integral_init4h_sse4
x264_integral_init4v_avx2
x264_integral_init4v_mmx
x264_integral_init4v_sse2
x264_integral_init4v_ssse3
x264_integral_init8h_avx
x264_integral_init8h_avx2
x264_integral_init8h_sse4
x264_integral_init8v_avx2
x264_integral_init8v_mmx
x264_integral_init8v_sse2
x264_intra_sa8d_x3_8x8
x264_intra_sa8d_x3_8x8_mmx2
x264_intra_sad_x3_16x16
x264_intra_sad_x3_16x16_avx2
x264_intra_sad_x3_16x16_mmx2
x264_intra_sad_x3_16x16_sse2
x264_intra_sad_x3_16x16_ssse3
x264_intra_sad_x3_4x4
x264_intra_sad_x3_4x4_mmx2
x264_intra_sad_x3_8x16c
x264_intra_sad_x3_8x16c_mmx2
x264_intra_sad_x3_8x16c_sse2
x264_intra_sad_x3_8x8
x264_intra_sad_x3_8x8_mmx2
x264_intra_sad_x3_8x8c
x264_intra_sad_x3_8x8c_avx2
x264_intra_sad_x3_8x8c_mmx2
x264_intra_sad_x3_8x8c_ssse3
x264_intra_sad_x9_4x4_avx
x264_intra_sad_x9_4x4_sse4
x264_intra_sad_x9_4x4_ssse3
x264_intra_sad_x9_8x8_avx
x264_intra_sad_x9_8x8_avx2
x264_intra_sad_x9_8x8_sse4
x264_intra_sad_x9_8x8_ssse3
x264_intra_satd_x3_16x16
x264_intra_satd_x3_16x16_mmx2
x264_intra_satd_x3_16x16_ssse3
x264_intra_satd_x3_4x4
x264_intra_satd_x3_4x4_mmx2
x264_intra_satd_x3_4x4_ssse3
x264_intra_satd_x3_8x16c
x264_intra_satd_x3_8x16c_avx
x264_intra_satd_x3_8x16c_mmx2
x264_intra_satd_x3_8x16c_sse2
x264_intra_satd_x3_8x16c_sse4
x264_intra_satd_x3_8x16c_ssse3
x264_intra_satd_x3_8x16c_xop
x264_intra_satd_x3_8x8c
x264_intra_satd_x3_8x8c_mmx2
x264_intra_satd_x3_8x8c_ssse3
x264_intra_satd_x9_4x4_avx
x264_intra_satd_x9_4x4_sse4
x264_intra_satd_x9_4x4_ssse3
x264_intra_satd_x9_4x4_xop
x264_is_pipe
x264_iter_kludge
x264_lambda2_tab
x264_lambda_tab
x264_last_coeff_flag_offset
x264_last_coeff_flag_offset_8x8
x264_level_token
x264_levels
x264_load_deinterleave_chroma_fdec_mmx
x264_load_deinterleave_chroma_fdec_sse2
x264_load_deinterleave_chroma_fdec_ssse3
x264_load_deinterleave_chroma_fenc_mmx
x264_load_deinterleave_chroma_fenc_sse2
x264_load_deinterleave_chroma_fenc_ssse3
x264_log
x264_log2_lut
x264_log2_lz_lut
x264_lookahead_delete
x264_lookahead_get_frames
x264_lookahead_init
x264_lookahead_is_empty
x264_lookahead_put_frame
x264_macroblock_analyse
x264_macroblock_bipred_init
x264_macroblock_cache_allocate
x264_macroblock_cache_free
x264_macroblock_cache_load_interlaced
x264_macroblock_cache_load_progressive
x264_macroblock_cache_save
x264_macroblock_deblock
x264_macroblock_deblock_strength
x264_macroblock_encode
x264_macroblock_encode_p4x4
x264_macroblock_encode_p8x8
x264_macroblock_probe_skip
x264_macroblock_slice_init
x264_macroblock_thread_allocate
x264_macroblock_thread_free
x264_macroblock_thread_init
x264_macroblock_tree_read
x264_macroblock_write_cabac
x264_macroblock_write_cavlc
x264_malloc
x264_mb_encode_chroma
x264_mb_mc
x264_mb_mc_8x8
x264_mb_predict_mv
x264_mb_predict_mv_16x16
x264_mb_predict_mv_direct16x16
x264_mb_predict_mv_pskip
x264_mb_predict_mv_ref16x16
x264_mbtree_fix8_pack_avx2
x264_mbtree_fix8_pack_ssse3
x264_mbtree_fix8_unpack_avx2
x264_mbtree_fix8_unpack_ssse3
x264_mbtree_propagate_cost_avx
x264_mbtree_propagate_cost_avx2
x264_mbtree_propagate_cost_fma4
x264_mbtree_propagate_cost_sse2
x264_mbtree_propagate_list_internal_avx
x264_mbtree_propagate_list_internal_ssse3
x264_mc_chroma_avx
x264_mc_chroma_avx2
x264_mc_chroma_mmx2
x264_mc_chroma_sse2
x264_mc_chroma_ssse3
x264_mc_chroma_ssse3_cache64
x264_mc_copy_w16_aligned_sse
x264_mc_copy_w16_mmx
x264_mc_copy_w16_sse
x264_mc_copy_w4_mmx
x264_mc_copy_w8_mmx
x264_mc_init
x264_mc_init_mmx
x264_mc_offsetadd_w12_mmx2
x264_mc_offsetadd_w12_sse2
x264_mc_offsetadd_w16_mmx2
x264_mc_offsetadd_w16_sse2
x264_mc_offsetadd_w20_mmx2
x264_mc_offsetadd_w20_sse2
x264_mc_offsetadd_w4_mmx2
x264_mc_offsetadd_w8_mmx2
x264_mc_offsetsub_w12_mmx2
x264_mc_offsetsub_w12_sse2
x264_mc_offsetsub_w16_mmx2
x264_mc_offsetsub_w16_sse2
x264_mc_offsetsub_w20_mmx2
x264_mc_offsetsub_w20_sse2
x264_mc_offsetsub_w4_mmx2
x264_mc_offsetsub_w8_mmx2
x264_mc_weight_w12_mmx2
x264_mc_weight_w16_avx2
x264_mc_weight_w16_mmx2
x264_mc_weight_w16_sse2
x264_mc_weight_w16_ssse3
x264_mc_weight_w20_avx2
x264_mc_weight_w20_mmx2
x264_mc_weight_w20_sse2
x264_mc_weight_w20_ssse3
x264_mc_weight_w4_mmx2
x264_mc_weight_w4_ssse3
x264_mc_weight_w8_avx2
x264_mc_weight_w8_mmx2
x264_mc_weight_w8_sse2
x264_mc_weight_w8_ssse3
x264_mdate
x264_me_refine_bidir_rd
x264_me_refine_bidir_satd
x264_me_refine_qpel
x264_me_refine_qpel_rd
x264_me_refine_qpel_refdupe
x264_me_search_ref
x264_memcpy_aligned_mmx
x264_memcpy_aligned_sse
x264_memzero_aligned_avx
x264_memzero_aligned_mmx
x264_memzero_aligned_sse
x264_nal_encode
x264_nal_escape_mmx2
x264_nal_escape_sse2
x264_noise_reduction_update
x264_optimize_chroma_2x2_dc_avx
x264_optimize_chroma_2x2_dc_sse2
x264_optimize_chroma_2x2_dc_sse4
x264_optimize_chroma_2x2_dc_ssse3
x264_param2string
x264_param_apply_fastfirstpass
x264_param_apply_profile
x264_param_default
x264_param_default_preset
x264_param_parse
x264_pb_0
x264_pb_01
x264_pb_1
x264_pb_3
x264_pb_a1
x264_pb_shuf8x8c
x264_pb_unpackbd1
x264_pb_unpackbd2
x264_pd_1
x264_pd_1024
x264_pd_32
x264_pd_ffff
x264_picture_alloc
x264_picture_clean
x264_picture_init
x264_pixel_ads1_avx
x264_pixel_ads1_avx2
x264_pixel_ads1_mmx2
x264_pixel_ads1_sse2
x264_pixel_ads1_ssse3
x264_pixel_ads2_avx

Sections

.text
Size: 1.1MB - Virtual size: 1.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 40KB - Virtual size: 39KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rodata
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

/4
Size: 512B - Virtual size: 184B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 494KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 42KB - Virtual size: 42KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 32B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 852B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 17KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/14
Size: 512B - Virtual size: 160B

IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/29
Size: 512B - Virtual size: 184B

IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/45
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/57
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/71
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/83
Size: 512B - Virtual size: 236B

IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/96
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/107
Size: 512B - Virtual size: 312B

IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
ui/plugins/GameService.dll
.dll windows:5 windows x86 arch:x86

915e5139c9b8969faa46641c169c82e1

Code Sign

0e:33:12:30:52:5a:25:a7:f8:10:e5:34:88:b0:aa:40
Certificate

Issuer

CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

25-11-2020 00:00

Not After

22-02-2024 23:59

Subject

CN=Tencent Technology(Shenzhen) Company Limited,O=Tencent Technology(Shenzhen) Company Limited,L=Shenzhen,ST=Guangdong Province,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

0f:a8:49:06:15:d7:00:a0:be:21:76:fd:c5:ec:6d:bd
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

11-02-2011 12:00

Not After

10-02-2026 12:00

Subject

CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

22-10-2013 12:00

Not After

22-10-2028 12:00

Subject

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0e:a7:f6:86:bc:40:35:4a:70:f2:c2:97:c1:31:5e:f6
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

25-11-2020 00:00

Not After

22-02-2024 23:59

Subject

CN=Tencent Technology(Shenzhen) Company Limited,O=Tencent Technology(Shenzhen) Company Limited,L=Shenzhen,ST=Guangdong Province,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:dd
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01-01-2021 00:00

Not After

06-01-2031 00:00

Subject

CN=DigiCert Timestamp 2021,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

07-01-2016 12:00

Not After

07-01-2031 12:00

Subject

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

32:05:6e:e0:3f:a7:8d:72:36:48:c4:e9:2c:34:01:6e:2a:f1:09:a4:58:23:e5:b4:5d:9e:ca:7d:5e:d4:2a:76
Signer

Actual PE Digest

32:05:6e:e0:3f:a7:8d:72:36:48:c4:e9:2c:34:01:6e:2a:f1:09:a4:58:23:e5:b4:5d:9e:ca:7d:5e:d4:2a:76

Digest Algorithm

sha256

PE Digest Matches

true

41:ea:33:62:b5:87:af:2b:6a:58:ed:9d:30:ce:f0:24:cc:d9:fc:cb
Signer

Actual PE Digest

41:ea:33:62:b5:87:af:2b:6a:58:ed:9d:30:ce:f0:24:cc:d9:fc:cb

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

d:\Build\GameService\work\output\Win32\Release\GameService.pdb

Imports

shlwapi

PathFindFileNameW

ntdll

NtOpenProcess
NtWriteVirtualMemory
NtQuerySystemInformation
NtQueryInformationThread
NtClose
NtQueryVirtualMemory
RtlUnwind
NtReadVirtualMemory

kernel32

CreateTimerQueue
WriteFile
DeleteFileW
TerminateProcess
CreateEventW
Module32Next
Module32First
GetSystemDirectoryA
GetWindowsDirectoryA
FindFirstFileA
GetDriveTypeA
FindNextFileA
FindFirstVolumeA
FindClose
GetVolumePathNamesForVolumeNameA
FindNextVolumeA
FindVolumeClose
GetDiskFreeSpaceExA
GetFileInformationByHandle
WriteProcessMemory
Wow64DisableWow64FsRedirection
GetModuleHandleExW
Wow64RevertWow64FsRedirection
ReadProcessMemory
GetExitCodeProcess
QueryDosDeviceW
GetLogicalDriveStringsW
GetFileAttributesExA
LocalAlloc
Module32FirstW
Module32NextW
GetNativeSystemInfo
OpenThread
VirtualQueryEx
GetModuleFileNameA
LoadLibraryExA
FormatMessageA
ResumeThread
IsWow64Process
CreateFileMappingW
GetFileAttributesExW
SystemTimeToFileTime
GetSystemTime
TerminateThread
DeleteTimerQueueTimer
InitializeCriticalSectionAndSpinCount
TlsFree
FormatMessageW
GetStdHandle
GetCommandLineW
GetSystemTimeAsFileTime
DeleteFiber
QueryPerformanceCounter
GlobalMemoryStatus
ConvertFiberToThread
GetConsoleMode
ReadConsoleA
CreateTimerQueueTimer
SetConsoleMode
CreateFileA
WideCharToMultiByte
MultiByteToWideChar
QueryFullProcessImageNameW
OpenProcess
GetCurrentProcess
GetProcessHeap
HeapAlloc
HeapFree
Sleep
TlsGetValue
DeleteCriticalSection
InterlockedExchangeAdd
TlsAlloc
GetLastError
GetCurrentThreadId
InitializeCriticalSection
LeaveCriticalSection
EnterCriticalSection
TlsSetValue
InterlockedExchange
SetFilePointer
DuplicateHandle
InterlockedIncrement
CreateThread
InterlockedCompareExchange
GetProcessTimes
GetSystemInfo
MapViewOfFile
IsBadReadPtr
OpenFileMappingA
FreeLibrary
GetModuleHandleW
GetCurrentProcessId
ExitProcess
GetFileSize
CreateFileMappingA
GetWindowsDirectoryW
GetCurrentDirectoryW
LoadLibraryW
CloseHandle
UnmapViewOfFile
GetSystemDirectoryW
GetVersionExW
GetFileAttributesW
CreateFileW
GetEnvironmentVariableW
GetModuleFileNameW
VirtualFree
SetLastError
VirtualProtect
IsBadWritePtr
ReadFile
GetProcAddress
GetTickCount
LoadLibraryA
GetModuleHandleA
VirtualAlloc
OutputDebugStringA
FreeEnvironmentStringsW
OutputDebugStringW
HeapReAlloc
GetModuleHandleExA
Process32FirstW
Process32NextW
CreateToolhelp32Snapshot
ReleaseMutex
WaitForSingleObject
LocalFree
ReadConsoleW
CreateMutexW
UnregisterWaitEx
QueryDepthSList
InterlockedPopEntrySList
GetThreadTimes
UnregisterWait
RegisterWaitForSingleObject
SetThreadAffinityMask
GetProcessAffinityMask
GetNumaHighestNodeNumber
ChangeTimerQueueTimer
GetLogicalProcessorInformation
SwitchToThread
SignalObjectAndWait
GetCommandLineA
GetEnvironmentStringsW
GetOEMCP
IsValidCodePage
DecodePointer
EncodePointer
GetCPInfo
GetTimeZoneInformation
FindFirstFileExA
InterlockedFlushSList
InterlockedPushEntrySList
SetThreadContext
GetThreadContext
GetThreadPriority
SuspendThread
Thread32First
Thread32Next
HeapSize
HeapQueryInformation
HeapCreate
HeapDestroy
InitializeSListHead
TryEnterCriticalSection
GetFileType
EnumSystemLocalesW
SetThreadPriority
ReleaseSemaphore
WaitForSingleObjectEx
CreateSemaphoreA
RaiseException
GetFullPathNameW
GetVersionExA
SetErrorMode
LoadLibraryExW
SetHandleInformation
GetHandleInformation
GetConsoleOutputCP
GetConsoleCP
SetEvent
CreateEventA
GetSystemTimeAdjustment
CreateDirectoryW
CancelIo
SetNamedPipeHandleState
WaitNamedPipeA
CreateNamedPipeA
DeviceIoControl
WaitForMultipleObjects
CreatePipe
PeekNamedPipe
GetVersion
ResetEvent
GetOverlappedResult
CreateProcessW
ConnectNamedPipe
ExpandEnvironmentStringsW
SetEndOfFile
FlushViewOfFile
QueryPerformanceFrequency
CreateHardLinkA
FindFirstFileW
Process32First
GetConsoleScreenBufferInfo
FindNextFileW
RemoveDirectoryW
SetFileTime
SetEnvironmentVariableW
GetFullPathNameA
CreateHardLinkW
GetVolumePathNameW
GetCurrentDirectoryA
SetCurrentDirectoryA
SetFileAttributesW
GetFileAttributesA
MoveFileExA
GetDiskFreeSpaceExW
DeleteFileA
Process32Next
SetFileAttributesA
SetCurrentDirectoryW
MoveFileExW
RemoveDirectoryA
SetEnvironmentVariableA
CreateDirectoryA
GenerateConsoleCtrlEvent
GetLocaleInfoA
GetACP
CreateMutexA
OpenMutexW
OpenFileMappingW
VirtualQuery
QueueUserAPC
GetPrivateProfileStringW
SleepEx
GetLocalTime
IsDebuggerPresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsProcessorFeaturePresent
CreateProcessA
GetTempPathW
SetConsoleCtrlHandler
ExitThread
FreeLibraryAndExitThread
SetStdHandle
GetDriveTypeW
SystemTimeToTzSpecificLocalTime
FileTimeToSystemTime
ReadConsoleInputW
GetNumberOfConsoleInputEvents
PeekConsoleInputA
ReadConsoleInputA
HeapCompact
WriteConsoleW
LockFileEx
UnlockFileEx
SetFilePointerEx
FlushFileBuffers
GetStringTypeW
GetCurrentThread
HeapValidate
GetStartupInfoW
GetDateFormatW
GetTimeFormatW
CompareStringW
LCMapStringW
GetLocaleInfoW
IsValidLocale
GetUserDefaultLCID

user32

GetWindowRect
MessageBoxW
GetWindowThreadProcessId
GetDesktopWindow
MessageBoxA
FindWindowExA
IsWindow
LoadCursorW
CreateWindowExA
RegisterClassW
RegisterClassExW
CreateWindowExW
SetWindowPos
IsWindowVisible
DestroyWindow
GetWindow
DefWindowProcW
GetProcessWindowStation
GetUserObjectInformationW
GetDC
ReleaseDC

gdi32

GetObjectA
DeleteObject
DeleteDC
GetDeviceCaps
GetDIBits
CreateCompatibleDC
CreateCompatibleBitmap
BitBlt
SelectObject
CreateDCA

advapi32

CryptDestroyKey
CryptGetHashParam
GetUserNameW
RegCloseKey
RegQueryInfoKeyW
RegDeleteKeyW
RegQueryValueW
RegFlushKey
CryptAcquireContextA
LookupPrivilegeValueA
CryptGenRandom
CryptEnumProvidersW
CryptSignHashW
CryptDestroyHash
CryptCreateHash
CryptDecrypt
CryptExportKey
CryptGetUserKey
CryptGetProvParam
CryptSetHashParam
CryptReleaseContext
CryptAcquireContextW
ReportEventW
RegisterEventSourceW
DeregisterEventSource
SetSecurityDescriptorDacl
AccessCheck
SetSecurityDescriptorOwner
AllocateAndInitializeSid
IsValidSecurityDescriptor
OpenProcessToken
FreeSid
InitializeSecurityDescriptor
InitializeAcl
DuplicateToken
GetLengthSid
AddAccessAllowedAce
SetSecurityDescriptorGroup
RegQueryValueExA
RegOpenKeyExA
AdjustTokenPrivileges
RegSetValueW
RegQueryValueExW
RegEnumValueW
RegDeleteValueW
RegConnectRegistryW
RegCreateKeyW
RegOpenKeyExW
RegLoadKeyW
RegQueryInfoKeyA
RegSetValueExW
RegEnumKeyExW
RegSaveKeyW
RegCreateKeyExW
CryptHashData

shell32

CommandLineToArgvW

ole32

CoUninitialize
CoInitialize
CoCreateInstance
CreateStreamOnHGlobal
ProgIDFromCLSID
CoInitializeEx

ws2_32

getsockopt
inet_addr
ntohl
shutdown
htons
recv
WSASetLastError
WSAEventSelect
closesocket
connect
setsockopt
socket
WSASocketW
WSAWaitForMultipleEvents
gethostbyname
freeaddrinfo
getaddrinfo
WSAStartup
WSACleanup
send
WSAGetLastError
WSACloseEvent
WSACreateEvent
recvfrom
WSAEnumNetworkEvents
sendto
WSCGetProviderPath
WSAEnumProtocolsW
htonl
inet_ntoa

psapi

GetModuleBaseNameW
GetModuleFileNameExW
EnumProcesses
GetModuleFileNameExA
EnumProcessModules

d3d11

D3D11CreateDevice

wininet

InternetConnectA
HttpSendRequestA
InternetCloseHandle
InternetOpenA
HttpOpenRequestA
InternetReadFile

crypt32

CertEnumCertificatesInStore
CertFindCertificateInStore
CertDuplicateCertificateContext
CertFreeCertificateContext
CertGetCertificateContextProperty
CertCloseStore
CertOpenStore

oleaut32

GetErrorInfo
SysStringLen
SysAllocStringLen
SysFreeString
VariantChangeType
VariantInit
VariantClear

Sections

.text
Size: 4.5MB - Virtual size: 4.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1.6MB - Virtual size: 1.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 10.8MB - Virtual size: 10.9MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 101B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.gfids
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tvm0
Size: 6.1MB - Virtual size: 6.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 237KB - Virtual size: 256KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.pdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_MEM_READ
ui/plugins/TP3Helper.exe
.exe windows:4 windows x86 arch:x86

d7401947d3623a2199a2114d62923cd5

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

CloseServiceHandle
CreateServiceA
DeleteService
OpenSCManagerA
OpenServiceA
RegCloseKey
RegCreateKeyExA
RegSetValueExA
RegisterServiceCtrlHandlerA
SetServiceStatus
StartServiceA
StartServiceCtrlDispatcherA

kernel32

ExitProcess
FindClose
FindFirstFileA
FindNextFileA
FlushFileBuffers
GetCommandLineA
GetCurrentDirectoryA
GetDriveTypeA
GetFileAttributesA
CloseHandle
GetFileTime
GetLastError
GetModuleFileNameA
GetModuleHandleA
GetProcAddress
GetStartupInfoA
GetTempPathA
GetVersionExA
GetWindowsDirectoryA
CopyFileA
InterlockedIncrement
LoadLibraryA
CreateFileA
ReadFile
ReleaseMutex
SetEndOfFile
SetFileAttributesA
SetFilePointer
SetFileTime
CreateMutexA
SetUnhandledExceptionFilter
Sleep
TlsAlloc
TlsGetValue
TlsSetValue
CreateProcessA
WaitForSingleObject
WriteFile

msvcrt

_assert
_cexit
_fileno
_fmode
_fpreset
_iob
_setmode
__getmainargs
abort
atexit
fprintf
free
__p__environ
malloc
memcpy
memset
rand
signal
srand
strcat
strcmp
strcpy
time
__set_app_type

Sections

.text
Size: 30KB - Virtual size: 29KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 556B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 548B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1009KB - Virtual size: 1008KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
ui/plugins/TSSCom.dll
.dll windows:5 windows x86 arch:x86

2229fa20efb14a7d8c67d6d6107a0f62

Code Sign

0e:33:12:30:52:5a:25:a7:f8:10:e5:34:88:b0:aa:40
Certificate

Issuer

CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

25-11-2020 00:00

Not After

22-02-2024 23:59

Subject

CN=Tencent Technology(Shenzhen) Company Limited,O=Tencent Technology(Shenzhen) Company Limited,L=Shenzhen,ST=Guangdong Province,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

0f:a8:49:06:15:d7:00:a0:be:21:76:fd:c5:ec:6d:bd
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

11-02-2011 12:00

Not After

10-02-2026 12:00

Subject

CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

22-10-2013 12:00

Not After

22-10-2028 12:00

Subject

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0e:a7:f6:86:bc:40:35:4a:70:f2:c2:97:c1:31:5e:f6
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

25-11-2020 00:00

Not After

22-02-2024 23:59

Subject

CN=Tencent Technology(Shenzhen) Company Limited,O=Tencent Technology(Shenzhen) Company Limited,L=Shenzhen,ST=Guangdong Province,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:dd
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01-01-2021 00:00

Not After

06-01-2031 00:00

Subject

CN=DigiCert Timestamp 2021,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

07-01-2016 12:00

Not After

07-01-2031 12:00

Subject

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

9e:7b:00:17:5f:9b:d5:2f:b3:7b:c1:14:18:cf:de:33:6f:f4:83:3f:14:27:99:4b:8f:65:68:17:34:5a:96:64
Signer

Actual PE Digest

9e:7b:00:17:5f:9b:d5:2f:b3:7b:c1:14:18:cf:de:33:6f:f4:83:3f:14:27:99:4b:8f:65:68:17:34:5a:96:64

Digest Algorithm

sha256

PE Digest Matches

true

46:57:14:3f:17:72:2b:66:63:9c:6c:f9:16:27:31:89:f9:c6:26:6a
Signer

Actual PE Digest

46:57:14:3f:17:72:2b:66:63:9c:6c:f9:16:27:31:89:f9:c6:26:6a

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

C:\jenkins\workspace\tsscom_master\tools\tsscom\Release\tsscom.pdb

Imports

kernel32

IsBadReadPtr
LoadLibraryA
GetProcAddress
GetModuleHandleA
FreeLibrary
WaitForSingleObject
CloseHandle
GetModuleFileNameW
OpenProcess
MultiByteToWideChar
GetModuleHandleExA
GetModuleHandleW
GetTickCount
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSection
DeleteCriticalSection
CreateThread
SetEndOfFile
HeapSize
WriteConsoleW
CreateFileW
SetStdHandle
SetEnvironmentVariableA
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
GetCommandLineA
GetOEMCP
IsValidCodePage
FindNextFileA
FindFirstFileExA
FindClose
GetProcessHeap
WideCharToMultiByte
EncodePointer
DecodePointer
SetLastError
InitializeCriticalSectionAndSpinCount
CreateEventW
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetSystemTimeAsFileTime
CompareStringW
LCMapStringW
GetLocaleInfoW
GetStringTypeW
GetCPInfo
SetEvent
ResetEvent
WaitForSingleObjectEx
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
IsDebuggerPresent
GetStartupInfoW
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
InitializeSListHead
RaiseException
RtlUnwind
GetLastError
LoadLibraryExW
InterlockedFlushSList
ReadFile
HeapAlloc
HeapReAlloc
HeapFree
ExitProcess
GetModuleHandleExW
GetModuleFileNameA
SetFilePointerEx
GetConsoleMode
ReadConsoleW
GetStdHandle
GetFileType
GetACP
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
DeleteFileW
GetTimeZoneInformation
FlushFileBuffers
WriteFile
GetConsoleCP

psapi

GetModuleFileNameExA

gdiplus

GdipCloneImage
GdipAlloc
GdipCreateBitmapFromHBITMAP
GdipDisposeImage
GdipFree
GdipSaveImageToStream
GdiplusShutdown
GdiplusStartup

ws2_32

WSAStartup
inet_addr
socket
gethostbyname
sendto
WSAGetLastError
htonl
closesocket
htons

Sections

.text
Size: 216KB - Virtual size: 216KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 63KB - Virtual size: 63KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.gfids
Size: 512B - Virtual size: 500B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tls
Size: 512B - Virtual size: 9B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tvm0
Size: 856KB - Virtual size: 860KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 11KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
ui/plugins/TStats.dll
.dll windows:5 windows x86 arch:x86

fee7b5bd3fa84bb45d7cec75a429434b

Code Sign

0e:33:12:30:52:5a:25:a7:f8:10:e5:34:88:b0:aa:40
Certificate

Issuer

CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

25-11-2020 00:00

Not After

22-02-2024 23:59

Subject

CN=Tencent Technology(Shenzhen) Company Limited,O=Tencent Technology(Shenzhen) Company Limited,L=Shenzhen,ST=Guangdong Province,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

0f:a8:49:06:15:d7:00:a0:be:21:76:fd:c5:ec:6d:bd
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

11-02-2011 12:00

Not After

10-02-2026 12:00

Subject

CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

22-10-2013 12:00

Not After

22-10-2028 12:00

Subject

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0e:a7:f6:86:bc:40:35:4a:70:f2:c2:97:c1:31:5e:f6
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

25-11-2020 00:00

Not After

22-02-2024 23:59

Subject

CN=Tencent Technology(Shenzhen) Company Limited,O=Tencent Technology(Shenzhen) Company Limited,L=Shenzhen,ST=Guangdong Province,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:dd
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01-01-2021 00:00

Not After

06-01-2031 00:00

Subject

CN=DigiCert Timestamp 2021,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

07-01-2016 12:00

Not After

07-01-2031 12:00

Subject

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

57:d8:34:33:8b:d6:8e:93:5d:43:af:c9:e5:46:5f:45:68:13:e6:f5:31:71:37:31:06:fb:f0:e7:25:94:98:82
Signer

Actual PE Digest

57:d8:34:33:8b:d6:8e:93:5d:43:af:c9:e5:46:5f:45:68:13:e6:f5:31:71:37:31:06:fb:f0:e7:25:94:98:82

Digest Algorithm

sha256

PE Digest Matches

true

f0:6d:00:f7:3c:6d:b0:c8:a4:cc:44:8b:27:74:7a:1c:28:16:66:49
Signer

Actual PE Digest

f0:6d:00:f7:3c:6d:b0:c8:a4:cc:44:8b:27:74:7a:1c:28:16:66:49

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

C:\Jenkins\workspace\tstats-trunk\output\Win32\Release\tstats.pdb

Imports

kernel32

UnregisterWaitEx
DisableThreadLibraryCalls
InterlockedExchange
InterlockedCompareExchange
Sleep
GetLastError
CloseHandle
SetLastError
UnmapViewOfFile
CreateFileMappingA
MapViewOfFile
GetModuleHandleA
MultiByteToWideChar
GetProcAddress
WideCharToMultiByte
ResumeThread
TerminateThread
WaitForSingleObjectEx
QueueUserAPC
LoadLibraryA
FreeLibrary
GetSystemTimeAsFileTime
GetModuleFileNameW
LoadLibraryW
GetModuleHandleW
GetTickCount
ExpandEnvironmentStringsA
SetErrorMode
GetVolumeInformationA
GetLogicalDriveStringsA
VirtualFree
GetCurrentProcess
VirtualAlloc
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
ReadFile
SetFilePointer
CreateFileA
WriteFile
SetEndOfFile
FindClose
CreateFileW
SwitchToThread
GetFileSize
CreateDirectoryA
GetPrivateProfileIntA
GetPrivateProfileStringA
GetSystemDirectoryW
DeviceIoControl
GetVersionExW
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSection
DeleteCriticalSection
GetStdHandle
CreatePipe
PeekNamedPipe
DuplicateHandle
GetSystemDirectoryA
CreateProcessA
IsBadReadPtr
GetExitCodeProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
IsProcessorFeaturePresent
SetEvent
CreateEventW
IsDebuggerPresent
GetStartupInfoW
InitializeSListHead
EncodePointer
DecodePointer
RaiseException
QueryPerformanceFrequency
SetFilePointerEx
TryEnterCriticalSection
GetCPInfo
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetCurrentThread
CompareStringW
LCMapStringW
GetLocaleInfoW
GetStringTypeW
WaitForSingleObject
CreateThread
InterlockedPushEntrySList
InterlockedFlushSList
LoadLibraryExW
RtlUnwind
ExitThread
FreeLibraryAndExitThread
GetModuleHandleExW
GetFileType
FileTimeToSystemTime
ExitProcess
GetModuleFileNameA
HeapAlloc
HeapFree
SetEnvironmentVariableA
HeapReAlloc
GetACP
GetTimeZoneInformation
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
FlushFileBuffers
GetConsoleCP
GetConsoleMode
SetStdHandle
FindFirstFileExA
FindNextFileA
IsValidCodePage
GetOEMCP
GetCommandLineA
GetCommandLineW
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetProcessHeap
WriteConsoleW
HeapSize
CreateTimerQueue
SignalObjectAndWait
SetThreadPriority
GetThreadPriority
GetLogicalProcessorInformation
CreateTimerQueueTimer
ChangeTimerQueueTimer
DeleteTimerQueueTimer
GetNumaHighestNodeNumber
GetProcessAffinityMask
SetThreadAffinityMask
RegisterWaitForSingleObject
UnregisterWait
GetThreadTimes
VirtualProtect
ReleaseSemaphore
InterlockedPopEntrySList
QueryDepthSList

ws2_32

closesocket
gethostbyname
WSAStartup
htonl
WSAGetLastError
sendto
htons
socket
inet_addr

netapi32

Netbios

shlwapi

PathAppendW
StrStrIA

iphlpapi

GetAdaptersAddresses

advapi32

RegQueryValueExW
RegQueryValueExA
RegOpenKeyExA
RegCloseKey
RegOpenKeyExW

shell32

SHGetFolderPathA

Sections

.text
Size: 824KB - Virtual size: 823KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 162KB - Virtual size: 162KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 23KB - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.gfids
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tls
Size: 512B - Virtual size: 9B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.QMGuid
Size: 512B - Virtual size: 20B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tvm0
Size: 1.1MB - Virtual size: 1.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 36KB - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
ui/plugins/TesMonDrvDll.dll
.dll windows:5 windows x86 arch:x86

092fa38052305ce7a1bc5488a5a4d2ab

Code Sign

0e:33:12:30:52:5a:25:a7:f8:10:e5:34:88:b0:aa:40
Certificate

Issuer

CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

25-11-2020 00:00

Not After

22-02-2024 23:59

Subject

CN=Tencent Technology(Shenzhen) Company Limited,O=Tencent Technology(Shenzhen) Company Limited,L=Shenzhen,ST=Guangdong Province,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

0f:a8:49:06:15:d7:00:a0:be:21:76:fd:c5:ec:6d:bd
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

11-02-2011 12:00

Not After

10-02-2026 12:00

Subject

CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

22-10-2013 12:00

Not After

22-10-2028 12:00

Subject

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0e:a7:f6:86:bc:40:35:4a:70:f2:c2:97:c1:31:5e:f6
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

25-11-2020 00:00

Not After

22-02-2024 23:59

Subject

CN=Tencent Technology(Shenzhen) Company Limited,O=Tencent Technology(Shenzhen) Company Limited,L=Shenzhen,ST=Guangdong Province,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:dd
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01-01-2021 00:00

Not After

06-01-2031 00:00

Subject

CN=DigiCert Timestamp 2021,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

07-01-2016 12:00

Not After

07-01-2031 12:00

Subject

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

3c:31:ed:1d:ff:53:bb:82:93:63:a3:14:d2:66:51:9e:af:a5:e7:8e:88:35:87:df:c2:d3:a2:56:96:1d:53:c2
Signer

Actual PE Digest

3c:31:ed:1d:ff:53:bb:82:93:63:a3:14:d2:66:51:9e:af:a5:e7:8e:88:35:87:df:c2:d3:a2:56:96:1d:53:c2

Digest Algorithm

sha256

PE Digest Matches

true

10:c7:9d:d6:66:e2:95:67:a1:68:a0:70:68:c1:f2:ac:2a:3a:28:a3
Signer

Actual PE Digest

10:c7:9d:d6:66:e2:95:67:a1:68:a0:70:68:c1:f2:ac:2a:3a:28:a3

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

C:\Jenkins\workspace\tesmon-lib-branch\TesMonLib\lib\TesMonDrvDll.pdb

Imports

advapi32

RegOpenKeyExA
LookupPrivilegeValueA
AdjustTokenPrivileges
CreateServiceW
CloseServiceHandle
RegCloseKey
RegFlushKey
OpenSCManagerA
ChangeServiceConfigW
OpenProcessToken
RegCreateKeyExA
StartServiceA
RegQueryValueExA
RegSetValueExA
OpenServiceW

iphlpapi

GetIfEntry
GetIpNetTable
GetIpForwardTable
GetAdaptersInfo
GetAdaptersAddresses

kernel32

GetVersionExA
GetTempPathA
GetLocalTime
CreateMutexW
CreateProcessW
WaitForSingleObject
SetEvent
GetWindowsDirectoryA
WriteFile
OpenProcess
Sleep
CreateEventA
GetFileAttributesW
GetSystemDirectoryA
CreateFileW
InterlockedExchange
OpenEventA
DeviceIoControl
ReleaseMutex
CreateThread
InitializeCriticalSection
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
QueryPerformanceCounter
GetModuleHandleW
GetCurrentThread
CreateMutexA
CreateToolhelp32Snapshot
SetFilePointer
SetEndOfFile
GetPrivateProfileIntA
CreateDirectoryA
GetPrivateProfileStringA
PeekNamedPipe
FreeLibrary
IsBadReadPtr
GetExitCodeProcess
CreateProcessA
GetStdHandle
CreatePipe
DuplicateHandle
GetProcessHeap
Process32Next
MultiByteToWideChar
GetModuleFileNameW
WideCharToMultiByte
GetSystemDirectoryW
Process32First
CloseHandle
GetModuleFileNameA
LoadLibraryA
ReadFile
GetFileAttributesA
GetFileSize
CreateFileA
GetTickCount
GetCurrentProcess
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
SetStdHandle
GetLocaleInfoW
InitializeCriticalSectionAndSpinCount
GetProcAddress
GetModuleHandleA
GetLastError
GetCurrentProcessId
IsValidLocale
EnumSystemLocalesA
GetLocaleInfoA
GetUserDefaultLCID
GetStringTypeW
GetStringTypeA
HeapSize
FlushFileBuffers
LCMapStringW
LCMapStringA
HeapReAlloc
VirtualAlloc
GetConsoleMode
GetConsoleCP
RtlUnwind
VirtualFree
HeapDestroy
HeapCreate
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetCurrentThreadId
GetCommandLineA
GetSystemTimeAsFileTime
HeapFree
HeapAlloc
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
InterlockedDecrement
RaiseException
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
ExitProcess
SetHandleCount
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW

netapi32

Netbios

shell32

SHGetFolderPathA

shlwapi

PathAppendA

user32

wsprintfA

version

GetFileVersionInfoW
GetFileVersionInfoSizeW
VerQueryValueW

ws2_32

socket
closesocket
WSAStartup
bind
getsockopt
recv
setsockopt
inet_addr
htons
WSAGetLastError
select
send
connect
ioctlsocket
inet_ntoa
gethostbyname

Exports

Exports

CreateITMDrvObj
ICreateITMDrvObj
ReleaseITMDrvObj

Sections

.text
Size: 272KB - Virtual size: 272KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 31KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 7KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.QMGuid
Size: 512B - Virtual size: 20B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 944B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tvm0
Size: 380KB - Virtual size: 380KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 10.2MB - Virtual size: 10.2MB

IMAGE_SCN_MEM_READ

.edata2
Size: 512B - Virtual size: 144B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata2
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc2
Size: 1024B - Virtual size: 944B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ui/plugins/UniSecDistDll_x86.dll
.dll windows:5 windows x86 arch:x86

7f692f3ba23032bc3d5326bb8fed51cd

Code Sign

0e:33:12:30:52:5a:25:a7:f8:10:e5:34:88:b0:aa:40
Certificate

Issuer

CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

25-11-2020 00:00

Not After

22-02-2024 23:59

Subject

CN=Tencent Technology(Shenzhen) Company Limited,O=Tencent Technology(Shenzhen) Company Limited,L=Shenzhen,ST=Guangdong Province,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

0f:a8:49:06:15:d7:00:a0:be:21:76:fd:c5:ec:6d:bd
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

11-02-2011 12:00

Not After

10-02-2026 12:00

Subject

CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

22-10-2013 12:00

Not After

22-10-2028 12:00

Subject

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0e:a7:f6:86:bc:40:35:4a:70:f2:c2:97:c1:31:5e:f6
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

25-11-2020 00:00

Not After

22-02-2024 23:59

Subject

CN=Tencent Technology(Shenzhen) Company Limited,O=Tencent Technology(Shenzhen) Company Limited,L=Shenzhen,ST=Guangdong Province,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:dd
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01-01-2021 00:00

Not After

06-01-2031 00:00

Subject

CN=DigiCert Timestamp 2021,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

07-01-2016 12:00

Not After

07-01-2031 12:00

Subject

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

8e:70:7d:3c:bf:8e:8b:35:8c:aa:4f:cb:cb:dc:72:dd:9a:84:e0:92:da:8b:65:5d:30:07:a7:2e:21:76:ed:5e
Signer

Actual PE Digest

8e:70:7d:3c:bf:8e:8b:35:8c:aa:4f:cb:cb:dc:72:dd:9a:84:e0:92:da:8b:65:5d:30:07:a7:2e:21:76:ed:5e

Digest Algorithm

sha256

PE Digest Matches

true

6d:53:27:a9:7d:d3:6f:81:ec:41:b9:86:04:27:aa:4b:57:d1:e9:36
Signer

Actual PE Digest

6d:53:27:a9:7d:d3:6f:81:ec:41:b9:86:04:27:aa:4b:57:d1:e9:36

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

d:\Jenkins\workspace\UniSec_Fairy_Lib_trunk\code\trunk\Ring3\Project\UniSecDrvlib\output\vc9\UniSecDistDll_x86.pdb

Imports

kernel32

GetWindowsDirectoryW
GetCurrentProcessId
GetSystemTime
GetVolumeInformationW
CreateThread
InterlockedIncrement
InterlockedExchangeAdd
GetModuleHandleA
GetModuleHandleExW
HeapAlloc
HeapFree
GetProcessHeap
VirtualProtect
CreateEventW
DeleteFileW
IsBadCodePtr
VirtualQuery
OpenProcess
VirtualAlloc
WideCharToMultiByte
MultiByteToWideChar
CreateFileA
GetFileAttributesW
DeleteFileA
SetEvent
ResetEvent
WaitForMultipleObjects
GetLocalTime
GetCurrentThread
InterlockedDecrement
SetThreadPriority
GlobalMemoryStatusEx
SuspendThread
ResumeThread
GetVersionExW
GetTempPathA
DeviceIoControl
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetCommandLineA
ExitThread
RaiseException
RtlUnwind
GetCPInfo
LCMapStringA
LCMapStringW
GetStringTypeW
GetStdHandle
GetModuleFileNameA
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
HeapSize
TerminateThread
GetACP
GetOEMCP
IsValidCodePage
HeapCreate
HeapDestroy
CloseHandle
HeapReAlloc
SetHandleCount
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetTimeZoneInformation
GetConsoleCP
GetConsoleMode
GetStringTypeA
SetConsoleCtrlHandler
GetUserDefaultLCID
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale
GetLocaleInfoW
InitializeCriticalSectionAndSpinCount
SetFilePointer
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
FlushFileBuffers
SetEndOfFile
CompareStringA
CompareStringW
SetEnvironmentVariableA
SleepEx
PeekNamedPipe
ExpandEnvironmentStringsA
FormatMessageA
VerifyVersionInfoA
VerSetConditionMask
GetSystemDirectoryA
FlushConsoleInputBuffer
GetVersion
GlobalMemoryStatus
SetConsoleMode
ReadConsoleInputA
GetFileAttributesA
GetFileInformationByHandle
FindFirstFileA
GetDriveTypeA
FileTimeToLocalFileTime
FileTimeToSystemTime
FindClose
GetSystemDirectoryW
InitializeCriticalSection
WriteFile
GetSystemTimeAsFileTime
GetModuleHandleW
WaitForSingleObject
GetCurrentProcess
MoveFileExW
SystemTimeToFileTime
FreeLibrary
CreateMutexW
ReleaseMutex
GetCurrentThreadId
DeleteCriticalSection
GetUserDefaultUILanguage
SetNamedPipeHandleState
GetSystemInfo
LoadLibraryA
EnterCriticalSection
SetLastError
GetLastError
CreateFileW
ReadFile
LeaveCriticalSection
VirtualFree
CopyFileW
GetFileSize
GetFullPathNameA
GetCurrentDirectoryA
LockResource
GetProcAddress
SizeofResource
LoadLibraryW
LoadResource
FindResourceW
QueryPerformanceFrequency
InterlockedExchange
GetModuleFileNameW
Sleep
InterlockedCompareExchange
QueryPerformanceCounter
ExitProcess
GetTickCount

psapi

GetModuleInformation

version

GetFileVersionInfoSizeW
VerQueryValueW
GetFileVersionInfoW

user32

GetProcessWindowStation
GetUserObjectInformationW
GetDC
ReleaseDC
GetDesktopWindow
MapVirtualKeyW
GetRawInputData
IsIconic
PostMessageW
GetForegroundWindow
GetCursorInfo
GetSystemMetrics
DispatchMessageW
MessageBoxA
GetMessageW
SetTimer
GetWindowThreadProcessId

gdi32

SetTextColor
CreateFontA
SelectObject
SetTextAlign
TextOutA

advapi32

LookupPrivilegeValueW
OpenProcessToken
GetSecurityDescriptorDacl
ControlService
BuildExplicitAccessWithNameW
SetEntriesInAclW
StartServiceW
ChangeServiceConfig2W
QueryServiceObjectSecurity
SetSecurityDescriptorDacl
InitializeSecurityDescriptor
SetServiceObjectSecurity
DeleteService
CreateServiceW
RegSetValueExW
RegCloseKey
QueryServiceStatusEx
RegCreateKeyW
OpenServiceW
OpenSCManagerW
CloseServiceHandle
AdjustTokenPrivileges
AllocateAndInitializeSid
FreeSid
CheckTokenMembership
ChangeServiceConfigW
RegQueryValueExW
RegOpenKeyExW
DeregisterEventSource
ReportEventA
RegisterEventSourceA
OpenThreadToken

ws2_32

gethostname
ioctlsocket
getaddrinfo
freeaddrinfo
listen
accept
recvfrom
sendto
connect
closesocket
getpeername
getsockopt
htons
bind
ntohs
getsockname
setsockopt
WSAIoctl
socket
select
__WSAFDIsSet
WSASetLastError
send
recv
WSAGetLastError
WSAStartup
WSACleanup
shutdown
htonl
getservbyname
gethostbyname

wldap32

ord22
ord211
ord217
ord143
ord50
ord26
ord30
ord200
ord32
ord35
ord79
ord60
ord46
ord41
ord27
ord301
ord33

Sections

.text
Size: 1.3MB - Virtual size: 1.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 246KB - Virtual size: 245KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 75KB - Virtual size: 99KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 280B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tvm0
Size: 375KB - Virtual size: 376KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc1
Size: 29.2MB - Virtual size: 29.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 64KB - Virtual size: 64KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
ui/plugins/Updater32.exe
.exe windows:4 windows x86 arch:x86

d7401947d3623a2199a2114d62923cd5

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

CloseServiceHandle
CreateServiceA
DeleteService
OpenSCManagerA
OpenServiceA
RegCloseKey
RegCreateKeyExA
RegSetValueExA
RegisterServiceCtrlHandlerA
SetServiceStatus
StartServiceA
StartServiceCtrlDispatcherA

kernel32

ExitProcess
FindClose
FindFirstFileA
FindNextFileA
FlushFileBuffers
GetCommandLineA
GetCurrentDirectoryA
GetDriveTypeA
GetFileAttributesA
CloseHandle
GetFileTime
GetLastError
GetModuleFileNameA
GetModuleHandleA
GetProcAddress
GetStartupInfoA
GetTempPathA
GetVersionExA
GetWindowsDirectoryA
CopyFileA
InterlockedIncrement
LoadLibraryA
CreateFileA
ReadFile
ReleaseMutex
SetEndOfFile
SetFileAttributesA
SetFilePointer
SetFileTime
CreateMutexA
SetUnhandledExceptionFilter
Sleep
TlsAlloc
TlsGetValue
TlsSetValue
CreateProcessA
WaitForSingleObject
WriteFile

msvcrt

_assert
_cexit
_fileno
_fmode
_fpreset
_iob
_setmode
__getmainargs
abort
atexit
fprintf
free
__p__environ
malloc
memcpy
memset
rand
signal
srand
strcat
strcmp
strcpy
time
__set_app_type

Sections

.text
Size: 30KB - Virtual size: 29KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 556B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 548B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
ui/plugins/ace-trace.dll
.dll windows:5 windows x86 arch:x86

ec2c27639914b73ba9f0dbd47159f625

Code Sign

0e:33:12:30:52:5a:25:a7:f8:10:e5:34:88:b0:aa:40
Certificate

Issuer

CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

25-11-2020 00:00

Not After

22-02-2024 23:59

Subject

CN=Tencent Technology(Shenzhen) Company Limited,O=Tencent Technology(Shenzhen) Company Limited,L=Shenzhen,ST=Guangdong Province,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

0f:a8:49:06:15:d7:00:a0:be:21:76:fd:c5:ec:6d:bd
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

11-02-2011 12:00

Not After

10-02-2026 12:00

Subject

CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

22-10-2013 12:00

Not After

22-10-2028 12:00

Subject

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0e:a7:f6:86:bc:40:35:4a:70:f2:c2:97:c1:31:5e:f6
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

25-11-2020 00:00

Not After

22-02-2024 23:59

Subject

CN=Tencent Technology(Shenzhen) Company Limited,O=Tencent Technology(Shenzhen) Company Limited,L=Shenzhen,ST=Guangdong Province,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:dd
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01-01-2021 00:00

Not After

06-01-2031 00:00

Subject

CN=DigiCert Timestamp 2021,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

07-01-2016 12:00

Not After

07-01-2031 12:00

Subject

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

7a:34:d4:3b:87:6e:a4:32:31:11:c8:c9:be:b1:3a:7c:c0:d1:5d:ed:32:cb:cd:23:27:23:60:25:d8:68:77:12
Signer

Actual PE Digest

7a:34:d4:3b:87:6e:a4:32:31:11:c8:c9:be:b1:3a:7c:c0:d1:5d:ed:32:cb:cd:23:27:23:60:25:d8:68:77:12

Digest Algorithm

sha256

PE Digest Matches

true

11:1e:a3:99:d3:63:20:91:b3:e2:41:79:29:b2:04:ac:2e:8d:c4:b6
Signer

Actual PE Digest

11:1e:a3:99:d3:63:20:91:b3:e2:41:79:29:b2:04:ac:2e:8d:c4:b6

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

D:\Build\ACETrace\work\output\Win32\Release\ACE-Trace.pdb

Imports

version

GetFileVersionInfoA
VerQueryValueA
GetFileVersionInfoSizeA

shlwapi

UrlEscapeA

dbghelp

MiniDumpWriteDump
SymInitialize
StackWalk
SymFunctionTableAccess
SymGetModuleBase

ws2_32

htonl
gethostname
sendto
recvfrom
listen
accept
freeaddrinfo
getaddrinfo
WSAIoctl
ntohs
getsockname
getpeername
WSASetLastError
__WSAFDIsSet
WSACleanup
bind
closesocket
gethostbyname
select
WSAStartup
send
socket
connect
recv
getsockopt
htons
ioctlsocket
setsockopt
WSAGetLastError
getservbyname
shutdown

netapi32

Netbios

wldap32

ord32
ord217
ord46
ord301
ord200
ord30
ord79
ord35
ord33
ord143
ord27
ord26
ord22
ord41
ord50
ord60
ord211

psapi

GetModuleInformation
GetModuleBaseNameA

kernel32

OutputDebugStringW
SetStdHandle
GetFullPathNameW
GetCurrentDirectoryW
GetFileAttributesExW
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
GetACP
GetConsoleCP
ReadConsoleW
GetTimeZoneInformation
WriteConsoleW
SetConsoleMode
ReadConsoleInputA
GetConsoleMode
IsDebuggerPresent
IsProcessorFeaturePresent
SetConsoleCtrlHandler
FileTimeToSystemTime
SystemTimeToTzSpecificLocalTime
GetDriveTypeW
GetModuleHandleExW
FreeLibraryAndExitThread
ExitThread
RaiseException
InterlockedFlushSList
RtlUnwind
GetCPInfo
GetStringTypeW
GetLocaleInfoW
LCMapStringW
CompareStringW
TlsSetValue
TlsGetValue
UnhandledExceptionFilter
DecodePointer
InitializeCriticalSectionAndSpinCount
SetLastError
TerminateProcess
WaitForSingleObject
ResumeThread
GetLastError
CloseHandle
ExitProcess
ReadProcessMemory
VirtualProtect
VirtualFree
GetCurrentProcess
InterlockedCompareExchange
VirtualAlloc
GetCurrentThreadId
SuspendThread
GetCurrentThread
GetThreadContext
FlushInstructionCache
SetThreadContext
VirtualQuery
WriteFile
GetFileSize
GetProcAddress
GetModuleHandleW
FreeLibrary
WaitForSingleObjectEx
ReadFile
CreateFileW
CreateFileA
GetSystemDirectoryW
GetModuleHandleA
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
ReleaseSemaphore
InitializeCriticalSection
SetEvent
ResetEvent
CreateSemaphoreA
CreateEventA
GetModuleFileNameA
SetEndOfFile
CreateToolhelp32Snapshot
GetFileAttributesA
Process32NextW
Process32FirstW
GetSystemInfo
Module32FirstW
SetFilePointerEx
GetCurrentProcessId
Module32NextW
IsBadReadPtr
FlushFileBuffers
OutputDebugStringA
DeleteFileA
GetTickCount
FindFirstFileA
FindNextFileA
ExpandEnvironmentStringsA
FindClose
Sleep
DebugBreak
InterlockedExchangeAdd
LoadLibraryW
CreateThread
CreateDirectoryA
GetPrivateProfileIntA
GetPrivateProfileStringA
GetModuleFileNameW
MultiByteToWideChar
LoadLibraryA
AddVectoredExceptionHandler
SetUnhandledExceptionFilter
RtlCaptureContext
TlsAlloc
TlsFree
DeleteFileW
GetWindowsDirectoryA
GlobalMemoryStatusEx
HeapCreate
HeapFree
HeapSetInformation
HeapAlloc
GetProcessHeap
FormatMessageA
SleepEx
WaitForMultipleObjects
GetFileType
GetStdHandle
PeekNamedPipe
VerSetConditionMask
GetSystemDirectoryA
VerifyVersionInfoA
CreateMutexA
ReleaseMutex
HeapReAlloc
FlushConsoleInputBuffer
GetVersion
QueryPerformanceCounter
GlobalMemoryStatus
FindFirstFileExA
IsValidCodePage
GetOEMCP
GetCommandLineA
GetCommandLineW
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableA
HeapSize
GetStartupInfoW
GetSystemTimeAsFileTime
InitializeSListHead
WideCharToMultiByte
LoadLibraryExW
InterlockedExchange
EncodePointer

user32

EnumDisplayDevicesA
GetUserObjectInformationW
GetProcessWindowStation
GetDesktopWindow
MessageBoxA
GetSystemMetrics

advapi32

ReportEventA
DeregisterEventSource
RegSetValueExA
RegCloseKey
RegQueryValueExA
RegOpenKeyExA
RegisterEventSourceA

Exports

Exports

init_bugtrace
init_bugtrace_with_userinfo
init_bugtrace_with_userinfo_new
set_user_stream
set_wegamex

Sections

.text
Size: 1.1MB - Virtual size: 1.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 302KB - Virtual size: 302KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 96KB - Virtual size: 112KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.gfids
Size: 512B - Virtual size: 456B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tvm0
Size: 161KB - Virtual size: 164KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 62KB - Virtual size: 64KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
ui/pluginsen/GameService.dll
.dll windows:5 windows x86 arch:x86

19383ba8de553c208435f7519288831a

Code Sign

0e:33:12:30:52:5a:25:a7:f8:10:e5:34:88:b0:aa:40
Certificate

Issuer

CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

25-11-2020 00:00

Not After

22-02-2024 23:59

Subject

CN=Tencent Technology(Shenzhen) Company Limited,O=Tencent Technology(Shenzhen) Company Limited,L=Shenzhen,ST=Guangdong Province,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

0f:a8:49:06:15:d7:00:a0:be:21:76:fd:c5:ec:6d:bd
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

11-02-2011 12:00

Not After

10-02-2026 12:00

Subject

CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

22-10-2013 12:00

Not After

22-10-2028 12:00

Subject

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0e:a7:f6:86:bc:40:35:4a:70:f2:c2:97:c1:31:5e:f6
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

25-11-2020 00:00

Not After

22-02-2024 23:59

Subject

CN=Tencent Technology(Shenzhen) Company Limited,O=Tencent Technology(Shenzhen) Company Limited,L=Shenzhen,ST=Guangdong Province,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:dd
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01-01-2021 00:00

Not After

06-01-2031 00:00

Subject

CN=DigiCert Timestamp 2021,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

07-01-2016 12:00

Not After

07-01-2031 12:00

Subject

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

9c:ff:c5:33:57:8d:c4:97:42:1b:ef:99:bb:16:a2:db:75:9f:48:62:c7:6a:db:55:de:66:59:36:16:c7:6f:40
Signer

Actual PE Digest

9c:ff:c5:33:57:8d:c4:97:42:1b:ef:99:bb:16:a2:db:75:9f:48:62:c7:6a:db:55:de:66:59:36:16:c7:6f:40

Digest Algorithm

sha256

PE Digest Matches

true

86:6c:ba:05:06:94:e2:c7:8a:c6:c9:f3:57:30:a7:3b:33:73:64:56
Signer

Actual PE Digest

86:6c:ba:05:06:94:e2:c7:8a:c6:c9:f3:57:30:a7:3b:33:73:64:56

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

d:\Build\GameService\work\output\Win32\Release\GameService.pdb

Imports

shlwapi

PathFindFileNameW

ntdll

NtQuerySystemInformation
RtlUnwind
NtWriteVirtualMemory
NtReadVirtualMemory

kernel32

Module32Next
Module32First
GetSystemDirectoryA
GetWindowsDirectoryA
GetFileAttributesExA
LocalAlloc
Module32FirstW
Module32NextW
LoadLibraryExA
FormatMessageA
ResumeThread
InitializeCriticalSectionAndSpinCount
TlsFree
FormatMessageW
GetStdHandle
GetFileType
GetModuleHandleExW
GetSystemTimeAsFileTime
DeleteFiber
QueryPerformanceCounter
GlobalMemoryStatus
ConvertFiberToThread
GetConsoleMode
ReadConsoleA
CreateEventW
SetConsoleMode
OpenThread
SetThreadContext
GetThreadContext
TerminateProcess
VirtualQuery
DeleteFileW
WriteFile
GetModuleFileNameA
DuplicateHandle
TerminateThread
InterlockedIncrement
CreateThread
InterlockedCompareExchange
GetSystemInfo
GetModuleHandleExA
Process32FirstW
Process32NextW
CreateToolhelp32Snapshot
ReleaseMutex
WaitForSingleObject
LocalFree
CreateMutexW
GetCommandLineW
CreateFileA
WideCharToMultiByte
MultiByteToWideChar
OpenProcess
GetCurrentProcess
Sleep
TlsGetValue
DeleteCriticalSection
InterlockedExchangeAdd
TlsAlloc
GetLastError
GetCurrentThreadId
InitializeCriticalSection
LeaveCriticalSection
EnterCriticalSection
TlsSetValue
InterlockedExchange
SetFilePointer
MapViewOfFile
IsBadReadPtr
OpenFileMappingA
FreeLibrary
GetModuleHandleW
GetCurrentProcessId
ExitProcess
GetFileSize
CreateFileMappingA
GetWindowsDirectoryW
GetCurrentDirectoryW
LoadLibraryW
CloseHandle
UnmapViewOfFile
GetSystemDirectoryW
GetVersionExW
GetFileAttributesW
CreateFileW
GetEnvironmentVariableW
GetModuleFileNameW
VirtualFree
SetLastError
GetThreadPriority
SuspendThread
VirtualProtect
IsBadWritePtr
ReadFile
GetVersionExA
GetProcAddress
GetTickCount
LoadLibraryA
CreateTimerQueue
UnregisterWaitEx
QueryDepthSList
InterlockedPopEntrySList
GetThreadTimes
UnregisterWait
RegisterWaitForSingleObject
SetThreadAffinityMask
GetProcessAffinityMask
GetNumaHighestNodeNumber
DeleteTimerQueueTimer
ChangeTimerQueueTimer
CreateTimerQueueTimer
GetLogicalProcessorInformation
Thread32First
Thread32Next
GetModuleHandleA
VirtualAlloc
InterlockedPushEntrySList
InterlockedFlushSList
FindFirstFileExA
GetCommandLineA
ReadConsoleW
SetThreadPriority
SwitchToThread
ReleaseSemaphore
WaitForSingleObjectEx
CreateSemaphoreA
RaiseException
HeapFree
HeapAlloc
GetProcessHeap
GetFullPathNameW
HeapCreate
SetErrorMode
LoadLibraryExW
SetHandleInformation
GetHandleInformation
GetConsoleOutputCP
GetConsoleCP
GetFileInformationByHandle
SetEvent
CreateEventA
GetSystemTimeAdjustment
CreateDirectoryW
CancelIo
SetNamedPipeHandleState
WaitNamedPipeA
CreateNamedPipeA
DeviceIoControl
WaitForMultipleObjects
CreatePipe
PeekNamedPipe
GetVersion
ResetEvent
GetOverlappedResult
CreateProcessW
ConnectNamedPipe
GetExitCodeProcess
ExpandEnvironmentStringsW
SetEndOfFile
FlushViewOfFile
QueryPerformanceFrequency
CreateHardLinkA
FindFirstFileW
Process32First
FindFirstFileA
GetConsoleScreenBufferInfo
FindNextFileW
RemoveDirectoryW
SetFileTime
SetEnvironmentVariableW
FindNextFileA
GetFullPathNameA
CreateHardLinkW
FindClose
GetVolumePathNameW
GetCurrentDirectoryA
SetCurrentDirectoryA
SetFileAttributesW
GetFileAttributesA
GetFileAttributesExW
MoveFileExA
GetDiskFreeSpaceExW
DeleteFileA
Process32Next
SetFileAttributesA
SetCurrentDirectoryW
MoveFileExW
RemoveDirectoryA
SetEnvironmentVariableA
CreateDirectoryA
GetProcessTimes
GenerateConsoleCtrlEvent
GetLocaleInfoA
GetACP
CreateMutexA
OpenMutexW
OpenFileMappingW
CreateFileMappingW
QueueUserAPC
GetPrivateProfileStringW
SleepEx
GetLocalTime
SystemTimeToFileTime
IsDebuggerPresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsProcessorFeaturePresent
CreateProcessA
GetTempPathW
SetConsoleCtrlHandler
ExitThread
FreeLibraryAndExitThread
SetStdHandle
GetDriveTypeW
SystemTimeToTzSpecificLocalTime
FileTimeToSystemTime
ReadConsoleInputW
GetNumberOfConsoleInputEvents
PeekConsoleInputA
ReadConsoleInputA
HeapCompact
WriteConsoleW
LockFileEx
UnlockFileEx
SetFilePointerEx
FlushFileBuffers
GetStringTypeW
GetCurrentThread
HeapValidate
GetStartupInfoW
GetDateFormatW
GetTimeFormatW
CompareStringW
LCMapStringW
GetLocaleInfoW
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
GetTimeZoneInformation
GetCPInfo
EncodePointer
DecodePointer
IsValidCodePage
GetOEMCP
GetEnvironmentStringsW
FreeEnvironmentStringsW
OutputDebugStringA
OutputDebugStringW
HeapReAlloc
HeapSize
HeapQueryInformation
InitializeSListHead
TryEnterCriticalSection
SignalObjectAndWait

user32

GetWindowThreadProcessId
MessageBoxW
GetDesktopWindow
GetSystemMetrics
GetAncestor
GetForegroundWindow
GetWindowLongA
GetWindowTextA
FindWindowExA
GetCursorInfo
GetClassNameA
IsWindowVisible
GetWindowRect
MessageBoxA
LoadCursorW
CreateWindowExA
ReleaseDC
GetDC
SetWindowDisplayAffinity
RegisterClassW
RegisterClassExW
CreateWindowExW
SetWindowPos
DestroyWindow
GetWindow
GetUserObjectInformationW
GetProcessWindowStation
DefWindowProcW

gdi32

CreateCompatibleDC
GetDIBits
DeleteObject
CreateDCA
GetObjectA
SelectObject
CreateCompatibleBitmap
GetDeviceCaps
BitBlt
DeleteDC

advapi32

InitializeSecurityDescriptor
RegCloseKey
RegQueryInfoKeyW
RegDeleteKeyW
RegQueryValueW
RegFlushKey
RegCreateKeyExW
RegSaveKeyW
RegEnumKeyExW
RegSetValueExW
RegQueryInfoKeyA
RegLoadKeyW
RegOpenKeyExW
RegCreateKeyW
CryptGenRandom
CryptEnumProvidersW
CryptSignHashW
CryptDestroyHash
CryptCreateHash
CryptDecrypt
CryptExportKey
CryptGetUserKey
CryptGetProvParam
CryptSetHashParam
CryptDestroyKey
CryptReleaseContext
CryptAcquireContextW
ReportEventW
RegisterEventSourceW
DeregisterEventSource
SetSecurityDescriptorDacl
AccessCheck
SetSecurityDescriptorOwner
AllocateAndInitializeSid
IsValidSecurityDescriptor
OpenProcessToken
FreeSid
GetUserNameW
InitializeAcl
DuplicateToken
GetLengthSid
AddAccessAllowedAce
SetSecurityDescriptorGroup
RegQueryValueExA
RegOpenKeyExA
RegConnectRegistryW
RegDeleteValueW
RegEnumValueW
RegQueryValueExW
RegSetValueW
AdjustTokenPrivileges
LookupPrivilegeValueA
CryptAcquireContextA

shell32

CommandLineToArgvW

ws2_32

inet_addr
getsockopt
gethostbyname
WSAStartup
WSACleanup
WSAGetLastError
getaddrinfo
WSACloseEvent
freeaddrinfo
recv
send
WSASetLastError
closesocket
connect
htonl
ntohl
shutdown
setsockopt
socket
WSACreateEvent
WSASocketW
WSAEventSelect
WSAWaitForMultipleEvents
WSAEnumProtocolsW
inet_ntoa
WSCGetProviderPath
sendto
WSAEnumNetworkEvents
recvfrom
htons

psapi

GetModuleFileNameExA

crypt32

CertFreeCertificateContext
CertDuplicateCertificateContext
CertFindCertificateInStore
CertEnumCertificatesInStore
CertCloseStore
CertOpenStore
CertGetCertificateContextProperty

ole32

CoCreateInstance
CoUninitialize
ProgIDFromCLSID
CoInitializeEx

oleaut32

VariantInit
VariantChangeType
VariantClear
SysStringLen
GetErrorInfo
SysFreeString
SysAllocStringLen

Sections

.text
Size: 3.4MB - Virtual size: 3.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1.5MB - Virtual size: 1.5MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 10.8MB - Virtual size: 10.9MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 85B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.gfids
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tvm0
Size: 11.3MB - Virtual size: 11.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 193KB - Virtual size: 196KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.pdata
Size: 1024B - Virtual size: 980B

IMAGE_SCN_MEM_READ

.idata
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 55B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ui/pluginsen/TP3Helper.exe
.exe windows:5 windows x86 arch:x86

48bef0d30439e4a51f8b2f5dfe8c8910

Code Sign

0e:33:12:30:52:5a:25:a7:f8:10:e5:34:88:b0:aa:40
Certificate

Issuer

CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

25-11-2020 00:00

Not After

22-02-2024 23:59

Subject

CN=Tencent Technology(Shenzhen) Company Limited,O=Tencent Technology(Shenzhen) Company Limited,L=Shenzhen,ST=Guangdong Province,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

0f:a8:49:06:15:d7:00:a0:be:21:76:fd:c5:ec:6d:bd
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

11-02-2011 12:00

Not After

10-02-2026 12:00

Subject

CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

22-10-2013 12:00

Not After

22-10-2028 12:00

Subject

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0e:a7:f6:86:bc:40:35:4a:70:f2:c2:97:c1:31:5e:f6
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

25-11-2020 00:00

Not After

22-02-2024 23:59

Subject

CN=Tencent Technology(Shenzhen) Company Limited,O=Tencent Technology(Shenzhen) Company Limited,L=Shenzhen,ST=Guangdong Province,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:dd
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01-01-2021 00:00

Not After

06-01-2031 00:00

Subject

CN=DigiCert Timestamp 2021,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

07-01-2016 12:00

Not After

07-01-2031 12:00

Subject

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

11:15:a4:d5:0f:ec:23:54:0d:06:39:34:f2:c0:a6:77:c0:53:bd:cb:48:66:b8:f9:56:6e:5f:23:c5:71:bb:08
Signer

Actual PE Digest

11:15:a4:d5:0f:ec:23:54:0d:06:39:34:f2:c0:a6:77:c0:53:bd:cb:48:66:b8:f9:56:6e:5f:23:c5:71:bb:08

Digest Algorithm

sha256

PE Digest Matches

true

8f:39:3f:32:e0:aa:79:fd:d7:1b:1d:b1:51:54:b5:26:ae:20:fb:83
Signer

Actual PE Digest

8f:39:3f:32:e0:aa:79:fd:d7:1b:1d:b1:51:54:b5:26:ae:20:fb:83

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Jenkins\workspace\tp3helper-trunk\output\x86\Release\TP3Helper.pdb

Imports

kernel32

EnumSystemLocalesW
IsValidLocale
GetTimeFormatW
GetDateFormatW
GetACP
ExitProcess
GetStdHandle
GetFileType
SetStdHandle
QueryPerformanceFrequency
HeapQueryInformation
GetModuleHandleExW
SetFilePointerEx
ExitThread
CreateThread
GetCommandLineA
VirtualQuery
VirtualAlloc
GetSystemInfo
RtlUnwind
GetCPInfo
LCMapStringW
GetStringTypeW
OutputDebugStringW
GetConsoleMode
ReadConsoleW
GetTimeZoneInformation
GetConsoleCP
FindFirstFileExW
IsValidCodePage
GetOEMCP
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableA
GetStartupInfoW
IsDebuggerPresent
InitializeSListHead
GetSystemTimeAsFileTime
QueryPerformanceCounter
WaitForSingleObjectEx
ResetEvent
IsProcessorFeaturePresent
TerminateProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetUserDefaultLCID
FindResourceExW
GetWindowsDirectoryW
SearchPathW
GetProfileIntW
GetTickCount
Sleep
GetTempPathW
GetTempFileNameW
SystemTimeToTzSpecificLocalTime
GetFileTime
GetFileSizeEx
GetFileAttributesExW
FileTimeToLocalFileTime
SetErrorMode
VirtualProtect
FileTimeToSystemTime
GlobalGetAtomNameW
lstrcmpiW
GetCurrentProcess
DuplicateHandle
WriteFile
UnlockFile
SetFilePointer
SetEndOfFile
ReadFile
LockFile
GetVolumeInformationW
GetFullPathNameW
FlushFileBuffers
FindClose
GetFileSize
GetFileAttributesW
CreateFileW
VerifyVersionInfoW
VerSetConditionMask
DeleteFileW
GlobalFlags
GetUserDefaultUILanguage
GetSystemDefaultUILanguage
GetLocaleInfoW
CompareStringW
GetCurrentDirectoryW
LocalReAlloc
LocalAlloc
GlobalHandle
GlobalReAlloc
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
InitializeCriticalSection
GlobalFindAtomW
GetSystemDirectoryW
EncodePointer
GlobalAddAtomW
ResumeThread
SetThreadPriority
CreateEventW
WaitForSingleObject
SetEvent
WritePrivateProfileStringW
GetPrivateProfileStringW
GetPrivateProfileIntW
LoadLibraryA
GetProcAddress
GetModuleHandleW
GetModuleHandleA
OutputDebugStringA
lstrcpyW
WideCharToMultiByte
lstrcmpW
lstrcmpA
GlobalDeleteAtom
LoadLibraryExW
FreeLibrary
GetVersionExW
GetCurrentThreadId
GetCurrentThread
FormatMessageW
LocalFree
GlobalFree
GlobalUnlock
GlobalSize
SetLastError
GetCommandLineW
MulDiv
Process32NextW
Module32FirstW
CloseHandle
Process32FirstW
GetCurrentProcessId
CreateToolhelp32Snapshot
LoadLibraryW
GetModuleFileNameW
GetProcessHeap
DecodePointer
HeapAlloc
RaiseException
HeapReAlloc
HeapSize
HeapFree
FindNextFileW
FindFirstFileW
MultiByteToWideChar
DeleteCriticalSection
CopyFileW
SizeofResource
FreeResource
LockResource
LoadResource
FindResourceW
GlobalLock
GlobalAlloc
InterlockedExchange
InitializeCriticalSectionAndSpinCount
GetLastError
EnterCriticalSection
LeaveCriticalSection
FreeLibraryAndExitThread
WriteConsoleW

user32

EmptyClipboard
SetClipboardData
CloseClipboard
OpenClipboard
MonitorFromPoint
SetParent
EnumDisplayMonitors
SetRectEmpty
IntersectRect
RealChildWindowFromPoint
DeleteMenu
CopyImage
WindowFromPoint
ReleaseCapture
SetCapture
WaitMessage
LoadCursorW
GetMonitorInfoW
MonitorFromWindow
WinHelpW
GetScrollInfo
SetScrollInfo
GetTopWindow
GetClassNameW
GetClassLongW
PtInRect
EqualRect
CopyRect
AdjustWindowRectEx
RemovePropW
GetPropW
SetPropW
ShowScrollBar
GetScrollRange
SetScrollRange
GetScrollPos
SetScrollPos
ScrollWindow
SetForegroundWindow
GetForegroundWindow
UpdateWindow
TrackPopupMenu
SetMenu
GetMenu
GetCapture
IsIconic
EndDeferWindowPos
DeferWindowPos
BeginDeferWindowPos
SetWindowPlacement
GetWindowPlacement
IsChild
IsMenu
CreateWindowExW
GetClassInfoExW
GetClassInfoW
RegisterClassW
CallWindowProcW
DefWindowProcW
GetMessageTime
GetMessagePos
ScreenToClient
DestroyIcon
EndPaint
BeginPaint
ReleaseDC
GetWindowDC
GetDC
TabbedTextOutW
GrayStringW
DrawTextExW
DrawTextW
IsDialogMessageW
GetWindow
SetWindowLongW
GetWindowTextLengthW
GetWindowTextW
SetWindowTextW
SetFocus
GetDlgCtrlID
SetMenuDefaultItem
CheckDlgButton
SetWindowPos
MoveWindow
ShowWindow
GetLastActivePopup
GetWindowThreadProcessId
MessageBoxW
SetCursor
ShowOwnedPopups
CallNextHookEx
SetWindowsHookExW
GetCursorPos
ValidateRect
ModifyMenuW
DestroyAcceleratorTable
SetClassLongW
UnregisterClassW
LoadIconW
SendMessageW
SystemParametersInfoW
SetWindowRgn
GetKeyState
PeekMessageW
DispatchMessageW
TranslateMessage
GetMessageW
LoadBitmapW
SetMenuItemInfoW
GetMenuCheckMarkDimensions
SetMenuItemBitmaps
EnableMenuItem
CheckMenuItem
GetDesktopWindow
GetWindowLongW
SetActiveWindow
IsWindowEnabled
LoadImageW
TrackMouseEvent
IsZoomed
CharUpperW
GetAsyncKeyState
LoadMenuW
GetSystemMenu
MessageBeep
NotifyWinEvent
SetCursorPos
SetRect
UnionRect
BringWindowToTop
CreatePopupMenu
LockWindowUpdate
GetActiveWindow
GetNextDlgTabItem
DestroyMenu
EnableScrollBar
GetDoubleClickTime
GetIconInfo
CopyIcon
GetMenuItemInfoW
ClientToScreen
GetMenuDefaultItem
SetTimer
GetKeyboardState
GetClientRect
SetLayeredWindowAttributes
InvalidateRect
KillTimer
EnableWindow
GetMenuStringW
GetMenuState
GetSubMenu
GetMenuItemID
GetMenuItemCount
InsertMenuW
AppendMenuW
RemoveMenu
UnhookWindowsHookEx
PostMessageW
PostQuitMessage
RegisterWindowMessageW
DrawEdge
DrawFrameControl
IsWindowVisible
GetFocus
GetSystemMetrics
DrawStateW
RedrawWindow
GetWindowRect
MapWindowPoints
GetSysColor
GetSysColorBrush
DrawFocusRect
FillRect
InflateRect
OffsetRect
IsRectEmpty
GetParent
DrawIconEx
IsWindow
DestroyWindow
CreateDialogIndirectParamW
EndDialog
GetDlgItem
GetUpdateRect
SendDlgItemMessageA
MapDialogRect
LoadAcceleratorsW
TranslateAcceleratorW
InsertMenuItemW
UnpackDDElParam
ReuseDDElParam
ToUnicodeEx
GetKeyboardLayout
InvertRect
HideCaret
DrawIcon
GetWindowRgn
DestroyCursor
CreateMenu
GetComboBoxInfo
TranslateMDISysAccel
DefMDIChildProcW
DefFrameProcW
DrawMenuBar
MapVirtualKeyExW
IsCharLowerW
GetNextDlgGroupItem
PostThreadMessageW
IsClipboardFormatAvailable
FrameRect
UpdateLayeredWindow
CharUpperBuffW
RegisterClipboardFormatW
SubtractRect
GetKeyNameTextW
CopyAcceleratorTableW
CreateAcceleratorTableW
MapVirtualKeyW

gdi32

GetBkColor
GetTextColor
GetTextExtentPoint32W
PatBlt
ExtTextOutW
CreatePolygonRgn
Polygon
Polyline
GetTextMetricsW
CreateBitmap
BitBlt
CreatePen
CreatePatternBrush
Escape
ExcludeClipRect
GetClipBox
GetObjectType
GetPixel
GetStockObject
GetViewportExtEx
GetWindowExtEx
IntersectClipRect
LineTo
PtVisible
RectVisible
RestoreDC
SaveDC
SelectClipRgn
ExtSelectClipRgn
SelectPalette
SetBkColor
SetBkMode
SetMapMode
SetLayout
GetLayout
SetPolyFillMode
SetROP2
SetTextColor
SetTextAlign
MoveToEx
Ellipse
SetViewportExtEx
SetViewportOrgEx
SetWindowExtEx
SetWindowOrgEx
OffsetViewportOrgEx
OffsetWindowOrgEx
ScaleViewportExtEx
ScaleWindowExtEx
CreateFontIndirectW
SetRectRgn
DPtoLP
CreateDIBitmap
EnumFontFamiliesW
GetTextCharsetInfo
RealizePalette
SetPixel
StretchBlt
CreateRoundRectRgn
Rectangle
GetRgnBox
OffsetRgn
RoundRect
CreatePalette
GetPaletteEntries
GetNearestPaletteIndex
GetSystemPaletteEntries
EnumFontFamiliesExW
ExtFloodFill
SetPaletteEntries
FillRgn
FrameRgn
GetBoundsRect
PtInRegion
GetViewportOrgEx
LPtoDP
GetWindowOrgEx
SetPixelV
GetTextFaceW
CreateSolidBrush
CreateRectRgnIndirect
CreateEllipticRgn
CreateDCW
CopyMetaFileW
CombineRgn
CreateRectRgn
GetDeviceCaps
CreateCompatibleBitmap
CreateDIBSection
GetObjectW
CreateCompatibleDC
SetDIBColorTable
SelectObject
DeleteDC
TextOutW
CreateHatchBrush
DeleteObject

msimg32

TransparentBlt
AlphaBlend

winspool.drv

DocumentPropertiesW
OpenPrinterW
ClosePrinter

advapi32

RegSetValueExW
RegEnumKeyExW
RegEnumValueW
RegQueryValueW
RegEnumKeyW
RegCloseKey
RegDeleteValueW
RegDeleteKeyW
RegCreateKeyExW
RegQueryValueExW
RegOpenKeyExW

shell32

DragQueryFileW
SHGetMalloc
SHGetPathFromIDListW
SHGetSpecialFolderLocation
SHBrowseForFolderW
SHGetDesktopFolder
ShellExecuteW
DragFinish
CommandLineToArgvW
SHGetFileInfoW
SHAppBarMessage

comctl32

InitCommonControlsEx

shlwapi

PathFindFileNameW
PathIsUNCW
PathStripToRootW
StrFormatKBSizeW
PathFindExtensionW
PathRemoveFileSpecW

uxtheme

CloseThemeData
GetThemeSysColor
IsAppThemed
IsThemeBackgroundPartiallyTransparent
GetThemePartSize
OpenThemeData
DrawThemeBackground
GetThemeColor
GetCurrentThemeName
DrawThemeText
DrawThemeParentBackground
GetWindowTheme

ole32

CoInitializeEx
OleCreateMenuDescriptor
OleDestroyMenuDescriptor
OleTranslateAccelerator
IsAccelerator
OleLockRunning
RevokeDragDrop
RegisterDragDrop
CoLockObjectExternal
OleGetClipboard
DoDragDrop
CoDisconnectObject
CoInitialize
CoCreateInstance
CoCreateGuid
CoUninitialize
ReleaseStgMedium
OleDuplicateData
CoTaskMemFree
CoTaskMemAlloc
CreateStreamOnHGlobal

oleaut32

LoadTypeLi
SysStringLen
SystemTimeToVariantTime
VariantTimeToSystemTime
VariantChangeType
VariantCopy
VarBstrFromDate
VariantClear
VariantInit
SysAllocStringLen
SysFreeString
SysAllocString

gdiplus

GdipDrawImageRectI
GdipCreateBitmapFromHBITMAP
GdipDrawString
GdipSetStringFormatAlign
GdipDeleteStringFormat
GdipCreateStringFormat
GdipDeleteBrush
GdipCreateSolidFill
GdipDeleteFont
GdipCreateFontFromLogfontW
GdipSetInterpolationMode
GdipSetSmoothingMode
GdipCreateFromHDC
GdipCreateBitmapFromStream
GdiplusStartup
GdipGetImagePixelFormat
GdipGetImageHeight
GdipGetImageWidth
GdipGetImagePaletteSize
GdipGetImagePalette
GdipBitmapLockBits
GdiplusShutdown
GdipDrawImageI
GdipDeleteGraphics
GdipGetImageGraphicsContext
GdipDisposeImage
GdipFree
GdipAlloc
GdipCloneImage
GdipCreateBitmapFromScan0
GdipBitmapUnlockBits

oleacc

AccessibleObjectFromWindow
LresultFromObject
CreateStdAccessibleObject

imm32

ImmGetContext
ImmGetOpenStatus
ImmReleaseContext

winmm

PlaySoundW

Sections

.text
Size: 1.6MB - Virtual size: 1.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 363KB - Virtual size: 362KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 26KB - Virtual size: 51KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.gfids
Size: 107KB - Virtual size: 106KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.giats
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tls
Size: 512B - Virtual size: 9B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1.6MB - Virtual size: 1.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 129KB - Virtual size: 128KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
ui/pluginsen/TSSCom.dll
.dll windows:5 windows x86 arch:x86

2229fa20efb14a7d8c67d6d6107a0f62

Code Sign

0e:33:12:30:52:5a:25:a7:f8:10:e5:34:88:b0:aa:40
Certificate

Issuer

CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

25-11-2020 00:00

Not After

22-02-2024 23:59

Subject

CN=Tencent Technology(Shenzhen) Company Limited,O=Tencent Technology(Shenzhen) Company Limited,L=Shenzhen,ST=Guangdong Province,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

0f:a8:49:06:15:d7:00:a0:be:21:76:fd:c5:ec:6d:bd
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

11-02-2011 12:00

Not After

10-02-2026 12:00

Subject

CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

22-10-2013 12:00

Not After

22-10-2028 12:00

Subject

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0e:a7:f6:86:bc:40:35:4a:70:f2:c2:97:c1:31:5e:f6
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

25-11-2020 00:00

Not After

22-02-2024 23:59

Subject

CN=Tencent Technology(Shenzhen) Company Limited,O=Tencent Technology(Shenzhen) Company Limited,L=Shenzhen,ST=Guangdong Province,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:dd
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01-01-2021 00:00

Not After

06-01-2031 00:00

Subject

CN=DigiCert Timestamp 2021,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

07-01-2016 12:00

Not After

07-01-2031 12:00

Subject

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

c3:aa:11:d5:d8:28:84:46:c3:e2:ca:b1:f4:bf:aa:5b:ca:17:b2:95:26:c8:05:28:a2:7e:fe:48:af:3e:96:bf
Signer

Actual PE Digest

c3:aa:11:d5:d8:28:84:46:c3:e2:ca:b1:f4:bf:aa:5b:ca:17:b2:95:26:c8:05:28:a2:7e:fe:48:af:3e:96:bf

Digest Algorithm

sha256

PE Digest Matches

true

a7:58:b1:e8:2d:5f:4b:ec:76:8f:a1:5c:e7:a8:70:d9:e7:4b:44:bb
Signer

Actual PE Digest

a7:58:b1:e8:2d:5f:4b:ec:76:8f:a1:5c:e7:a8:70:d9:e7:4b:44:bb

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

C:\jenkins\workspace\tsscom_master\tools\tsscom\Release\tsscom.pdb

Imports

kernel32

IsBadReadPtr
LoadLibraryA
GetProcAddress
GetModuleHandleA
FreeLibrary
WaitForSingleObject
CloseHandle
GetModuleFileNameW
OpenProcess
MultiByteToWideChar
GetModuleHandleExA
GetModuleHandleW
GetTickCount
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSection
DeleteCriticalSection
CreateThread
SetEndOfFile
HeapSize
WriteConsoleW
CreateFileW
SetStdHandle
SetEnvironmentVariableA
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
GetCommandLineA
GetOEMCP
IsValidCodePage
FindNextFileA
FindFirstFileExA
FindClose
GetProcessHeap
WideCharToMultiByte
EncodePointer
DecodePointer
SetLastError
InitializeCriticalSectionAndSpinCount
CreateEventW
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetSystemTimeAsFileTime
CompareStringW
LCMapStringW
GetLocaleInfoW
GetStringTypeW
GetCPInfo
SetEvent
ResetEvent
WaitForSingleObjectEx
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
IsDebuggerPresent
GetStartupInfoW
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
InitializeSListHead
RaiseException
RtlUnwind
GetLastError
LoadLibraryExW
InterlockedFlushSList
ReadFile
HeapAlloc
HeapReAlloc
HeapFree
ExitProcess
GetModuleHandleExW
GetModuleFileNameA
SetFilePointerEx
GetConsoleMode
ReadConsoleW
GetStdHandle
GetFileType
GetACP
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
DeleteFileW
GetTimeZoneInformation
FlushFileBuffers
WriteFile
GetConsoleCP

psapi

GetModuleFileNameExA

gdiplus

GdipCloneImage
GdipAlloc
GdipCreateBitmapFromHBITMAP
GdipDisposeImage
GdipFree
GdipSaveImageToStream
GdiplusShutdown
GdiplusStartup

ws2_32

WSAStartup
inet_addr
socket
gethostbyname
sendto
WSAGetLastError
htonl
closesocket
htons

Sections

.text
Size: 213KB - Virtual size: 213KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 63KB - Virtual size: 63KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.gfids
Size: 512B - Virtual size: 500B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tls
Size: 512B - Virtual size: 9B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tvm0
Size: 426KB - Virtual size: 428KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 11KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
ui/pluginsen/UniSecDistDll_x86.dll
.dll windows:5 windows x86 arch:x86

edd486293e79218bc3bdb22f47561e46

Code Sign

0e:33:12:30:52:5a:25:a7:f8:10:e5:34:88:b0:aa:40
Certificate

Issuer

CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

25-11-2020 00:00

Not After

22-02-2024 23:59

Subject

CN=Tencent Technology(Shenzhen) Company Limited,O=Tencent Technology(Shenzhen) Company Limited,L=Shenzhen,ST=Guangdong Province,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

0f:a8:49:06:15:d7:00:a0:be:21:76:fd:c5:ec:6d:bd
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

11-02-2011 12:00

Not After

10-02-2026 12:00

Subject

CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

22-10-2013 12:00

Not After

22-10-2028 12:00

Subject

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0e:a7:f6:86:bc:40:35:4a:70:f2:c2:97:c1:31:5e:f6
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

25-11-2020 00:00

Not After

22-02-2024 23:59

Subject

CN=Tencent Technology(Shenzhen) Company Limited,O=Tencent Technology(Shenzhen) Company Limited,L=Shenzhen,ST=Guangdong Province,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:dd
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01-01-2021 00:00

Not After

06-01-2031 00:00

Subject

CN=DigiCert Timestamp 2021,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

07-01-2016 12:00

Not After

07-01-2031 12:00

Subject

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:57:99:a5:45:8f:8e:43:8a:f7:dc:ef:79:b4:54:f3:ca:09:53:a3:27:e7:c8:ca:08:58:68:a9:b8:48:e3:5c
Signer

Actual PE Digest

61:57:99:a5:45:8f:8e:43:8a:f7:dc:ef:79:b4:54:f3:ca:09:53:a3:27:e7:c8:ca:08:58:68:a9:b8:48:e3:5c

Digest Algorithm

sha256

PE Digest Matches

true

cf:b5:a0:ca:e8:24:f5:77:b2:1a:8c:ab:2a:86:44:c8:f1:cf:21:ef
Signer

Actual PE Digest

cf:b5:a0:ca:e8:24:f5:77:b2:1a:8c:ab:2a:86:44:c8:f1:cf:21:ef

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

d:\Jenkins\workspace\UniSec_Fairy_Lib_trunk\code\trunk\Ring3\Project\UniSecDrvlib\output\vc9\UniSecDistDll_x86.pdb

Imports

kernel32

GetUserDefaultUILanguage
DeleteCriticalSection
GetCurrentThreadId
ReleaseMutex
CloseHandle
GetWindowsDirectoryW
GetCurrentProcessId
GetSystemTime
GetVolumeInformationW
CreateThread
InterlockedIncrement
InterlockedExchangeAdd
GetModuleHandleA
HeapAlloc
HeapFree
GetProcessHeap
VirtualProtect
CreateEventW
IsBadCodePtr
VirtualAlloc
WideCharToMultiByte
MultiByteToWideChar
SetEvent
ResetEvent
WaitForMultipleObjects
CreateFileA
GetFileAttributesW
DeleteFileW
DeleteFileA
GetLocalTime
GetModuleHandleExW
InterlockedDecrement
GetVersionExW
GetTempPathA
DeviceIoControl
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetCommandLineA
GetSystemTimeAsFileTime
ExitThread
RaiseException
RtlUnwind
GetCPInfo
LCMapStringA
LCMapStringW
GetStringTypeW
GetStdHandle
GetModuleFileNameA
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
GetModuleHandleW
ExitProcess
GetACP
GetOEMCP
SetNamedPipeHandleState
HeapCreate
HeapDestroy
VirtualFree
HeapReAlloc
SetHandleCount
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetTimeZoneInformation
GetConsoleCP
GetConsoleMode
GetStringTypeA
SetConsoleCtrlHandler
GetUserDefaultLCID
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale
GetLocaleInfoW
InitializeCriticalSectionAndSpinCount
SetFilePointer
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
FlushFileBuffers
SetEndOfFile
CompareStringA
CompareStringW
SetEnvironmentVariableA
SleepEx
PeekNamedPipe
ExpandEnvironmentStringsA
FormatMessageA
VerifyVersionInfoA
VerSetConditionMask
GetSystemDirectoryA
FlushConsoleInputBuffer
GetVersion
GlobalMemoryStatus
SetConsoleMode
ReadConsoleInputA
GetFileAttributesA
GetFileInformationByHandle
FindFirstFileA
GetDriveTypeA
FileTimeToLocalFileTime
FileTimeToSystemTime
FindClose
WaitForSingleObject
GetCurrentProcess
MoveFileExW
SystemTimeToFileTime
FreeLibrary
CreateMutexW
GetFileSize
GetSystemInfo
LoadLibraryA
EnterCriticalSection
SetLastError
GetLastError
CreateFileW
GetModuleFileNameW
ReadFile
LeaveCriticalSection
CopyFileW
GetSystemDirectoryW
InitializeCriticalSection
IsValidCodePage
WriteFile
GetFullPathNameA
GetCurrentDirectoryA
LockResource
GetProcAddress
SizeofResource
LoadLibraryW
LoadResource
FindResourceW
QueryPerformanceFrequency
InterlockedExchange
Sleep
InterlockedCompareExchange
QueryPerformanceCounter
HeapSize
GetTickCount

psapi

GetModuleInformation

version

VerQueryValueW
GetFileVersionInfoW
GetFileVersionInfoSizeW

user32

GetUserObjectInformationW
GetDesktopWindow
ReleaseDC
MapVirtualKeyW
GetDC
GetProcessWindowStation
IsIconic
PostMessageW
GetRawInputData
GetForegroundWindow
MessageBoxA
GetWindowThreadProcessId
GetSystemMetrics
GetCursorInfo

gdi32

SetTextColor
CreateFontA
SelectObject
SetTextAlign
TextOutA

advapi32

GetSecurityDescriptorDacl
BuildExplicitAccessWithNameW
SetEntriesInAclW
StartServiceW
ChangeServiceConfig2W
QueryServiceObjectSecurity
SetSecurityDescriptorDacl
InitializeSecurityDescriptor
SetServiceObjectSecurity
DeleteService
CreateServiceW
RegSetValueExW
RegCloseKey
QueryServiceStatusEx
RegCreateKeyW
OpenServiceW
OpenSCManagerW
CloseServiceHandle
OpenProcessToken
LookupPrivilegeValueW
AdjustTokenPrivileges
ChangeServiceConfigW
DeregisterEventSource
ReportEventA
RegisterEventSourceA
ControlService

ws2_32

gethostname
ioctlsocket
getaddrinfo
freeaddrinfo
listen
accept
recvfrom
sendto
connect
closesocket
getpeername
getsockopt
htons
bind
ntohs
getsockname
setsockopt
WSAIoctl
socket
select
__WSAFDIsSet
WSASetLastError
send
recv
WSAGetLastError
WSAStartup
WSACleanup
shutdown
htonl
getservbyname
gethostbyname

wldap32

ord22
ord211
ord217
ord143
ord50
ord26
ord30
ord200
ord32
ord35
ord79
ord60
ord46
ord41
ord27
ord301
ord33

Sections

.text
Size: 1.2MB - Virtual size: 1.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 243KB - Virtual size: 243KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 75KB - Virtual size: 99KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 280B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tvm0
Size: 334KB - Virtual size: 336KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc1
Size: 16.9MB - Virtual size: 16.9MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 62KB - Virtual size: 64KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
ui/pluginsen/Updater32.exe
.exe windows:4 windows x86 arch:x86

d7401947d3623a2199a2114d62923cd5

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

CloseServiceHandle
CreateServiceA
DeleteService
OpenSCManagerA
OpenServiceA
RegCloseKey
RegCreateKeyExA
RegSetValueExA
RegisterServiceCtrlHandlerA
SetServiceStatus
StartServiceA
StartServiceCtrlDispatcherA

kernel32

ExitProcess
FindClose
FindFirstFileA
FindNextFileA
FlushFileBuffers
GetCommandLineA
GetCurrentDirectoryA
GetDriveTypeA
GetFileAttributesA
CloseHandle
GetFileTime
GetLastError
GetModuleFileNameA
GetModuleHandleA
GetProcAddress
GetStartupInfoA
GetTempPathA
GetVersionExA
GetWindowsDirectoryA
CopyFileA
InterlockedIncrement
LoadLibraryA
CreateFileA
ReadFile
ReleaseMutex
SetEndOfFile
SetFileAttributesA
SetFilePointer
SetFileTime
CreateMutexA
SetUnhandledExceptionFilter
Sleep
TlsAlloc
TlsGetValue
TlsSetValue
CreateProcessA
WaitForSingleObject
WriteFile

msvcrt

_assert
_cexit
_fileno
_fmode
_fpreset
_iob
_setmode
__getmainargs
abort
atexit
fprintf
free
__p__environ
malloc
memcpy
memset
rand
signal
srand
strcat
strcmp
strcpy
time
__set_app_type

Sections

.text
Size: 30KB - Virtual size: 29KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 556B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 548B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
ui/pluginsen/ace-trace.dll
.dll windows:5 windows x86 arch:x86

0c7ef1e02a4cdf6a435990231cc66b53

Code Sign

0e:33:12:30:52:5a:25:a7:f8:10:e5:34:88:b0:aa:40
Certificate

Issuer

CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

25-11-2020 00:00

Not After

22-02-2024 23:59

Subject

CN=Tencent Technology(Shenzhen) Company Limited,O=Tencent Technology(Shenzhen) Company Limited,L=Shenzhen,ST=Guangdong Province,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

0f:a8:49:06:15:d7:00:a0:be:21:76:fd:c5:ec:6d:bd
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

11-02-2011 12:00

Not After

10-02-2026 12:00

Subject

CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

22-10-2013 12:00

Not After

22-10-2028 12:00

Subject

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0e:a7:f6:86:bc:40:35:4a:70:f2:c2:97:c1:31:5e:f6
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

25-11-2020 00:00

Not After

22-02-2024 23:59

Subject

CN=Tencent Technology(Shenzhen) Company Limited,O=Tencent Technology(Shenzhen) Company Limited,L=Shenzhen,ST=Guangdong Province,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:dd
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01-01-2021 00:00

Not After

06-01-2031 00:00

Subject

CN=DigiCert Timestamp 2021,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

07-01-2016 12:00

Not After

07-01-2031 12:00

Subject

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

ff:f6:7e:9c:04:3e:bc:ba:80:4a:07:f0:b5:f2:2d:eb:c3:c3:7f:14:bd:b4:dc:44:69:74:51:7a:86:e3:6b:3a
Signer

Actual PE Digest

ff:f6:7e:9c:04:3e:bc:ba:80:4a:07:f0:b5:f2:2d:eb:c3:c3:7f:14:bd:b4:dc:44:69:74:51:7a:86:e3:6b:3a

Digest Algorithm

sha256

PE Digest Matches

true

79:f9:c1:33:dd:b0:2e:8a:ab:eb:0e:9f:36:ec:01:46:ff:1e:8c:40
Signer

Actual PE Digest

79:f9:c1:33:dd:b0:2e:8a:ab:eb:0e:9f:36:ec:01:46:ff:1e:8c:40

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

D:\Build\ACETrace\work\output\Win32\Release\ace-trace.pdb

Imports

version

GetFileVersionInfoA
VerQueryValueA
GetFileVersionInfoSizeA

shlwapi

UrlEscapeA

dbghelp

MiniDumpWriteDump
SymInitialize
StackWalk
SymFunctionTableAccess
SymGetModuleBase

ws2_32

htonl
gethostname
sendto
recvfrom
listen
accept
freeaddrinfo
getaddrinfo
WSAIoctl
ntohs
getsockname
getpeername
WSASetLastError
__WSAFDIsSet
WSACleanup
bind
closesocket
gethostbyname
select
WSAStartup
send
socket
connect
recv
getsockopt
htons
ioctlsocket
setsockopt
WSAGetLastError
getservbyname
shutdown

netapi32

Netbios

wldap32

ord32
ord217
ord46
ord301
ord200
ord30
ord79
ord35
ord33
ord143
ord27
ord26
ord22
ord41
ord50
ord60
ord211

psapi

GetModuleInformation
GetModuleBaseNameA

kernel32

OutputDebugStringW
SetStdHandle
GetFullPathNameW
GetCurrentDirectoryW
GetFileAttributesExW
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
GetACP
GetConsoleCP
ReadConsoleW
GetTimeZoneInformation
WriteConsoleW
SetConsoleMode
ReadConsoleInputA
GetConsoleMode
IsDebuggerPresent
IsProcessorFeaturePresent
SetConsoleCtrlHandler
FileTimeToSystemTime
SystemTimeToTzSpecificLocalTime
GetDriveTypeW
GetModuleHandleExW
FreeLibraryAndExitThread
ExitThread
RaiseException
InterlockedFlushSList
RtlUnwind
GetCPInfo
GetStringTypeW
GetLocaleInfoW
LCMapStringW
CompareStringW
TlsSetValue
TlsGetValue
UnhandledExceptionFilter
DecodePointer
InitializeCriticalSectionAndSpinCount
SetLastError
TerminateProcess
WaitForSingleObject
ResumeThread
GetLastError
CloseHandle
ExitProcess
ReadProcessMemory
VirtualProtect
VirtualFree
GetCurrentProcess
InterlockedCompareExchange
VirtualAlloc
GetCurrentThreadId
SuspendThread
GetCurrentThread
GetThreadContext
FlushInstructionCache
SetThreadContext
VirtualQuery
WriteFile
GetFileSize
GetProcAddress
GetModuleHandleW
WaitForSingleObjectEx
LoadLibraryExW
ReadFile
CreateFileW
CreateFileA
GetSystemDirectoryW
GetModuleHandleA
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
ReleaseSemaphore
InitializeCriticalSection
SetEvent
ResetEvent
CreateSemaphoreA
CreateEventA
GetModuleFileNameA
SetEndOfFile
CreateToolhelp32Snapshot
GetFileAttributesA
Process32NextW
Process32FirstW
GetSystemInfo
Module32FirstW
SetFilePointerEx
GetCurrentProcessId
Module32NextW
IsBadReadPtr
FlushFileBuffers
OutputDebugStringA
DeleteFileA
GetTickCount
FindFirstFileA
FindNextFileA
ExpandEnvironmentStringsA
FindClose
Sleep
InterlockedExchange
InterlockedExchangeAdd
LoadLibraryW
CreateThread
CreateDirectoryA
GetPrivateProfileIntA
GetPrivateProfileStringA
GetModuleFileNameW
MultiByteToWideChar
LoadLibraryA
AddVectoredExceptionHandler
SetUnhandledExceptionFilter
RtlCaptureContext
TlsAlloc
TlsFree
GetWindowsDirectoryA
GlobalMemoryStatusEx
HeapCreate
HeapFree
HeapSetInformation
HeapAlloc
GetProcessHeap
FormatMessageA
SleepEx
WaitForMultipleObjects
GetFileType
GetStdHandle
PeekNamedPipe
VerSetConditionMask
GetSystemDirectoryA
VerifyVersionInfoA
CreateMutexA
ReleaseMutex
HeapReAlloc
FlushConsoleInputBuffer
GetVersion
QueryPerformanceCounter
GlobalMemoryStatus
FindFirstFileExA
IsValidCodePage
GetOEMCP
GetCommandLineA
GetCommandLineW
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableA
HeapSize
GetStartupInfoW
GetSystemTimeAsFileTime
InitializeSListHead
WideCharToMultiByte
FreeLibrary
DebugBreak
EncodePointer

user32

EnumDisplayDevicesA
GetUserObjectInformationW
GetProcessWindowStation
GetDesktopWindow
MessageBoxA
GetSystemMetrics

advapi32

ReportEventA
DeregisterEventSource
RegSetValueExA
RegCloseKey
RegQueryValueExA
RegOpenKeyExA
RegisterEventSourceA

Exports

Exports

init_bugtrace
init_bugtrace_with_userinfo
init_bugtrace_with_userinfo_new
set_wegamex

Sections

.text
Size: 1.1MB - Virtual size: 1.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 303KB - Virtual size: 303KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 96KB - Virtual size: 112KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.gfids
Size: 512B - Virtual size: 456B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tvm0
Size: 70KB - Virtual size: 72KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 62KB - Virtual size: 64KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
ui/pluginsen/tp3helper.dat
ui/tx_lsp/QMProxyAccLsp.dll
.dll windows:5 windows x86 arch:x86

4afc711edd30a25e84490d63b76425ff

Code Sign

0e:33:12:30:52:5a:25:a7:f8:10:e5:34:88:b0:aa:40
Certificate

Issuer

CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

25-11-2020 00:00

Not After

22-02-2024 23:59

Subject

CN=Tencent Technology(Shenzhen) Company Limited,O=Tencent Technology(Shenzhen) Company Limited,L=Shenzhen,ST=Guangdong Province,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

0f:a8:49:06:15:d7:00:a0:be:21:76:fd:c5:ec:6d:bd
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

11-02-2011 12:00

Not After

10-02-2026 12:00

Subject

CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

22-10-2013 12:00

Not After

22-10-2028 12:00

Subject

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0e:a7:f6:86:bc:40:35:4a:70:f2:c2:97:c1:31:5e:f6
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

25-11-2020 00:00

Not After

22-02-2024 23:59

Subject

CN=Tencent Technology(Shenzhen) Company Limited,O=Tencent Technology(Shenzhen) Company Limited,L=Shenzhen,ST=Guangdong Province,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:dd
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01-01-2021 00:00

Not After

06-01-2031 00:00

Subject

CN=DigiCert Timestamp 2021,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

07-01-2016 12:00

Not After

07-01-2031 12:00

Subject

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

98:e2:e6:5e:88:d1:c0:48:44:a9:43:a3:b8:32:dd:88:71:88:69:b5:db:56:07:57:ca:29:e1:1b:b0:ab:f4:86
Signer

Actual PE Digest

98:e2:e6:5e:88:d1:c0:48:44:a9:43:a3:b8:32:dd:88:71:88:69:b5:db:56:07:57:ca:29:e1:1b:b0:ab:f4:86

Digest Algorithm

sha256

PE Digest Matches

true

ed:98:db:db:65:31:6d:db:85:db:48:49:09:08:af:4e:fc:a7:50:2d
Signer

Actual PE Digest

ed:98:db:db:65:31:6d:db:85:db:48:49:09:08:af:4e:fc:a7:50:2d

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

E:\TXPCGJ\Git\ProxyAccelerator\AbroadSDK_master\Basic\Output\BinFinal\QMProxyAccLsp.pdb

Imports

kernel32

OpenFileMappingW
UnmapViewOfFile
GlobalFree
GlobalAlloc
GetModuleFileNameW
LoadLibraryW
GetProcAddress
FreeLibrary
CreateEventW
WaitForMultipleObjects
CreateThread
ExpandEnvironmentStringsW
InterlockedIncrement
MapViewOfFile
InterlockedExchange
WriteConsoleW
MultiByteToWideChar
WideCharToMultiByte
DeleteCriticalSection
DecodePointer
RaiseException
InitializeCriticalSectionAndSpinCount
CloseHandle
TerminateThread
WaitForSingleObject
SetEvent
GetProcessHeap
HeapAlloc
FlushFileBuffers
SetFilePointerEx
GetConsoleMode
GetConsoleCP
WriteFile
SetStdHandle
GetStringTypeW
HeapFree
HeapReAlloc
HeapSize
HeapDestroy
OutputDebugStringW
GetLastError
GetCurrentThreadId
LocalFree
LocalAlloc
InterlockedDecrement
FreeEnvironmentStringsW
IsDebuggerPresent
EnterCriticalSection
LeaveCriticalSection
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
GetStartupInfoW
GetModuleHandleW
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
InitializeSListHead
EncodePointer
InterlockedFlushSList
SetLastError
RtlUnwind
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
LoadLibraryExW
ExitProcess
GetModuleHandleExW
GetModuleFileNameA
GetACP
GetStdHandle
GetFileType
LCMapStringW
FindClose
FindFirstFileExA
FindNextFileA
IsValidCodePage
GetOEMCP
GetCPInfo
GetCommandLineA
GetCommandLineW
GetEnvironmentStringsW
CreateFileW

shlwapi

PathStripPathW
StrCmpIW
PathRemoveFileSpecW
PathAppendW
PathFileExistsW

crypt32

CryptQueryObject
CryptMsgGetParam
CryptMsgClose
CertCloseStore
CertFindCertificateInStore
CertGetNameStringW
CertFreeCertificateContext

ws2_32

WSCGetProviderPath
WSCEnumProtocols

Exports

Exports

WSPStartup

Sections

.text
Size: 78KB - Virtual size: 77KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 29KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.gfids
Size: 512B - Virtual size: 272B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
ui/tx_lsp/QMProxyAccLsp4.dll
.dll windows:5 windows x86 arch:x86

d85b17ed717555c41724a0d0e45e2a1e

Code Sign

0e:33:12:30:52:5a:25:a7:f8:10:e5:34:88:b0:aa:40
Certificate

Issuer

CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

25-11-2020 00:00

Not After

22-02-2024 23:59

Subject

CN=Tencent Technology(Shenzhen) Company Limited,O=Tencent Technology(Shenzhen) Company Limited,L=Shenzhen,ST=Guangdong Province,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

0f:a8:49:06:15:d7:00:a0:be:21:76:fd:c5:ec:6d:bd
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

11-02-2011 12:00

Not After

10-02-2026 12:00

Subject

CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

22-10-2013 12:00

Not After

22-10-2028 12:00

Subject

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0e:a7:f6:86:bc:40:35:4a:70:f2:c2:97:c1:31:5e:f6
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

25-11-2020 00:00

Not After

22-02-2024 23:59

Subject

CN=Tencent Technology(Shenzhen) Company Limited,O=Tencent Technology(Shenzhen) Company Limited,L=Shenzhen,ST=Guangdong Province,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:dd
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01-01-2021 00:00

Not After

06-01-2031 00:00

Subject

CN=DigiCert Timestamp 2021,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

07-01-2016 12:00

Not After

07-01-2031 12:00

Subject

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

a1:cb:0a:5b:73:f6:4d:4d:36:1f:7c:b4:5b:19:18:81:5e:02:99:36:e6:d1:a1:b6:d2:3e:5a:7a:73:36:b5:4e
Signer

Actual PE Digest

a1:cb:0a:5b:73:f6:4d:4d:36:1f:7c:b4:5b:19:18:81:5e:02:99:36:e6:d1:a1:b6:d2:3e:5a:7a:73:36:b5:4e

Digest Algorithm

sha256

PE Digest Matches

true

26:3a:58:4b:39:50:97:20:bd:1c:fc:e5:31:ef:ec:34:66:c3:b7:9d
Signer

Actual PE Digest

26:3a:58:4b:39:50:97:20:bd:1c:fc:e5:31:ef:ec:34:66:c3:b7:9d

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

E:\TXPCGJ\Git\ProxyAccelerator\AbroadSDK_master\Basic\Output\BinFinal\QMProxyAccLsp4.pdb

Imports

kernel32

VirtualProtect
LoadLibraryW
SetUnhandledExceptionFilter
GetModuleFileNameW
OutputDebugStringW
GetPrivateProfileIntW
GetPrivateProfileStringW
InterlockedIncrement
InterlockedDecrement
LocalFree
GetVersionExW
LocalAlloc
CreateFileMappingW
MapViewOfFile
OpenFileMappingW
UnmapViewOfFile
CreateThread
CreateWaitableTimerW
SetWaitableTimer
CreateMutexW
GetSystemTimeAsFileTime
FileTimeToLocalFileTime
ResumeThread
SizeofResource
LockResource
LoadResource
FindResourceW
FindResourceExW
WideCharToMultiByte
QueryPerformanceFrequency
QueryPerformanceCounter
VirtualQuery
FindClose
LoadLibraryA
ExpandEnvironmentStringsW
GetLocalTime
OutputDebugStringA
GetFileSize
SetFilePointer
DeleteFileW
GetFileSizeEx
MoveFileW
MultiByteToWideChar
OpenEventW
InterlockedExchangeAdd
ResetEvent
CreateEventA
HeapCreate
FreeLibrary
GetSystemInfo
GetModuleHandleExA
CreateIoCompletionPort
IsBadReadPtr
PostQueuedCompletionStatus
WaitForMultipleObjectsEx
TerminateThread
GetQueuedCompletionStatus
GetModuleFileNameA
CancelWaitableTimer
GetCurrentProcess
GlobalFree
GetFileAttributesExA
InitializeCriticalSectionAndSpinCount
RaiseException
DecodePointer
FlushInstructionCache
VirtualAlloc
GetThreadContext
SetThreadContext
SetEndOfFile
WriteConsoleW
SetStdHandle
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
GetCommandLineA
GetOEMCP
IsValidCodePage
FindNextFileA
GetCurrentProcessId
GetCurrentThreadId
CreateFileW
WaitForMultipleObjects
GetTickCount
SetLastError
GetLastError
Sleep
EnterCriticalSection
LeaveCriticalSection
GetTickCount64
CloseHandle
WaitForSingleObject
SetEvent
CreateEventW
FindFirstFileExA
ReadConsoleW
SetFilePointerEx
ReadFile
GetConsoleMode
GetConsoleCP
FlushFileBuffers
GetFileType
GetStdHandle
GetACP
EnumSystemLocalesW
GetUserDefaultLCID
GetProcAddress
GetModuleHandleW
SetThreadPriority
WriteFile
IsValidLocale
ExitProcess
GetModuleHandleExW
FreeLibraryAndExitThread
ExitThread
LoadLibraryExW
InterlockedFlushSList
RtlUnwind
InitializeSListHead
GetStartupInfoW
IsProcessorFeaturePresent
TerminateProcess
UnhandledExceptionFilter
GetCPInfo
GetStringTypeW
GetLocaleInfoW
LCMapStringW
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
EncodePointer
IsDebuggerPresent
DeleteCriticalSection
InitializeCriticalSection
HeapReAlloc
HeapSize
HeapDestroy
SwitchToThread
InterlockedExchange
InterlockedCompareExchange
HeapFree
GetProcessHeap
GlobalAlloc
HeapAlloc

user32

MessageBoxW
SendMessageTimeoutW
IsWindow

advapi32

IsValidSid
GetLengthSid
InitializeAcl
AddAccessAllowedAce
InitializeSecurityDescriptor
SetSecurityDescriptorDacl
ConvertStringSecurityDescriptorToSecurityDescriptorW
GetSecurityDescriptorSacl
SetSecurityDescriptorSacl
ConvertStringSidToSidW

shell32

SHGetSpecialFolderPathW

shlwapi

PathAppendA
PathFileExistsA
PathFindFileNameW
PathStripPathW
PathFileExistsW
PathAppendW
PathRemoveFileSpecW
StrCmpIW

iphlpapi

GetIpForwardTable
GetAdaptersInfo
GetTcpTable

psapi

GetModuleInformation

ws2_32

ioctlsocket
htonl
htons
ntohl
ntohs
inet_addr
getsockname
bind
WSAStartup
WSACleanup
WSCGetProviderPath
shutdown
WSASetLastError
WSAGetLastError
WSASocketW
WSASend
WSASendTo
WSARecv
WSARecvFrom
WSACancelBlockingCall
send
listen
WSCEnumProtocols
closesocket
WSACreateEvent
WSACloseEvent
WSASetEvent
socket
setsockopt
WSAIoctl
recvfrom
WSAWaitForMultipleEvents

crypt32

CertGetNameStringW
CertFindCertificateInStore
CertCloseStore
CryptMsgClose
CertFreeCertificateContext
CryptQueryObject
CryptMsgGetParam

Exports

Exports

WSPHook
WSPStartup

Sections

.text
Size: 400KB - Virtual size: 399KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 120KB - Virtual size: 120KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 7KB - Virtual size: 301KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.gfids
Size: 512B - Virtual size: 488B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 27KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
ui/tx_lsp/TGBAssistPlugin.dll
.dll windows:5 windows x86 arch:x86

ade19e04f8bccfc9a08f4d8aef7763f1

Code Sign

0e:33:12:30:52:5a:25:a7:f8:10:e5:34:88:b0:aa:40
Certificate

Issuer

CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

25-11-2020 00:00

Not After

22-02-2024 23:59

Subject

CN=Tencent Technology(Shenzhen) Company Limited,O=Tencent Technology(Shenzhen) Company Limited,L=Shenzhen,ST=Guangdong Province,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

0f:a8:49:06:15:d7:00:a0:be:21:76:fd:c5:ec:6d:bd
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

11-02-2011 12:00

Not After

10-02-2026 12:00

Subject

CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

22-10-2013 12:00

Not After

22-10-2028 12:00

Subject

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0e:a7:f6:86:bc:40:35:4a:70:f2:c2:97:c1:31:5e:f6
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

25-11-2020 00:00

Not After

22-02-2024 23:59

Subject

CN=Tencent Technology(Shenzhen) Company Limited,O=Tencent Technology(Shenzhen) Company Limited,L=Shenzhen,ST=Guangdong Province,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:dd
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01-01-2021 00:00

Not After

06-01-2031 00:00

Subject

CN=DigiCert Timestamp 2021,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

07-01-2016 12:00

Not After

07-01-2031 12:00

Subject

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:a6:2c:ba:50:01:1b:7e:f0:13:9b:8b:33:93:bc:a0:f7:6e:20:05:14:67:49:c7:c8:3a:22:22:13:b3:b3:f6
Signer

Actual PE Digest

61:a6:2c:ba:50:01:1b:7e:f0:13:9b:8b:33:93:bc:a0:f7:6e:20:05:14:67:49:c7:c8:3a:22:22:13:b3:b3:f6

Digest Algorithm

sha256

PE Digest Matches

true

9e:b1:5d:23:7f:02:9e:e7:05:aa:a9:33:3f:4c:63:84:cf:3d:e4:64
Signer

Actual PE Digest

9e:b1:5d:23:7f:02:9e:e7:05:aa:a9:33:3f:4c:63:84:cf:3d:e4:64

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

F:\GitSdk\AbroadSDK\Basic\Output\BinFinal\TGBAssistPlugin.pdb

Imports

iphlpapi

GetIpForwardTable

ws2_32

htonl
setsockopt
htons
closesocket
__WSAFDIsSet
accept
gethostbyname
socket
getpeername
inet_ntop
getaddrinfo
WSAEventSelect
WSASetEvent
WSACreateEvent
WSARecv
WSAGetOverlappedResult
WSASend
WSAResetEvent
WSAEnumNetworkEvents
WSAConnect
WSACloseEvent
WSACleanup
WSAStartup
GetAddrInfoW
FreeAddrInfoW
WSASetLastError
WSASendTo
WSASocketW
WSARecvFrom
recv
send
select
connect
ioctlsocket
WSAGetLastError
WSCDeinstallProvider
WSCWriteProviderOrder
WSCInstallProvider
WSCEnumProtocols
ntohs
ntohl
sendto
inet_addr
inet_ntoa
recvfrom
bind
listen

kernel32

FlushFileBuffers
ReadConsoleW
GetStdHandle
SetFilePointerEx
GetConsoleMode
GetConsoleCP
GetACP
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
ExitProcess
GetFileType
GetModuleHandleExW
FreeLibraryAndExitThread
ExitThread
LoadLibraryExW
RtlUnwind
InterlockedFlushSList
WaitForSingleObject
CloseHandle
Sleep
EnterCriticalSection
LeaveCriticalSection
GetModuleFileNameW
InitializeCriticalSection
DeleteCriticalSection
HeapDestroy
HeapSize
HeapReAlloc
HeapFree
HeapAlloc
GetProcessHeap
SizeofResource
LockResource
LoadResource
FindResourceW
FindResourceExW
InitializeCriticalSectionAndSpinCount
lstrcpynW
WideCharToMultiByte
MultiByteToWideChar
GetLastError
RaiseException
DecodePointer
GetLocalTime
GetCurrentThreadId
GetCurrentProcessId
GetSystemDirectoryW
CreateProcessW
GlobalAlloc
GlobalFree
ExpandEnvironmentStringsW
LoadLibraryW
SetEvent
CreateFileW
GetFileSize
WriteFile
SetFilePointer
SetStdHandle
GetFileSizeEx
MoveFileW
GetTickCount
CreateEventW
ResetEvent
TerminateThread
CreateWaitableTimerW
SetWaitableTimer
WaitForMultipleObjects
CancelWaitableTimer
QueryPerformanceFrequency
QueryPerformanceCounter
GetSystemInfo
CreateIoCompletionPort
GetQueuedCompletionStatus
InterlockedExchangeAdd
GetPrivateProfileStringA
InterlockedCompareExchange
InterlockedExchange
SwitchToThread
GetModuleHandleExA
GetFileAttributesExA
InterlockedDecrement
InterlockedIncrement
UnmapViewOfFile
CreateThread
GetModuleFileNameA
DeleteFileA
MapViewOfFile
OpenFileMappingW
CreateFileMappingW
LocalFree
LocalAlloc
GetVersionExW
UnhandledExceptionFilter
IsBadReadPtr
WritePrivateProfileStringW
GetPrivateProfileStringW
IsBadWritePtr
GetSystemDefaultLangID
GetProcAddress
GetModuleHandleW
ReadFile
ExpandEnvironmentStringsA
SetEndOfFile
CreateFileA
FreeLibrary
GetCurrentProcess
DeviceIoControl
FindClose
CreateDirectoryA
GetPrivateProfileIntA
HeapCreate
InitializeSListHead
GetStartupInfoW
IsProcessorFeaturePresent
TerminateProcess
SetUnhandledExceptionFilter
GetCPInfo
GetLocaleInfoW
LCMapStringW
GetSystemTimeAsFileTime
TlsFree
TlsSetValue
FindFirstFileExA
FindNextFileA
IsValidCodePage
GetOEMCP
GetCommandLineA
GetCommandLineW
GetEnvironmentStringsW
FreeEnvironmentStringsW
WriteConsoleW
DeleteFileW
TlsGetValue
TlsAlloc
SetLastError
EncodePointer
GetStringTypeW
OutputDebugStringW
IsDebuggerPresent

user32

UnregisterClassW
PeekMessageW
DispatchMessageW
MsgWaitForMultipleObjects
RegisterClassExW
CreateWindowExW
DestroyWindow
DefWindowProcW
SetTimer
KillTimer
SendMessageW
PostMessageW

advapi32

RegEnumKeyExA
RegOpenKeyExW
RegQueryValueExW
InitializeSecurityDescriptor
ConvertStringSidToSidW
IsValidSid
GetLengthSid
InitializeAcl
AddAccessAllowedAce
SetSecurityDescriptorDacl
ConvertStringSecurityDescriptorToSecurityDescriptorW
GetSecurityDescriptorSacl
SetSecurityDescriptorSacl
RegQueryValueExA
RegCloseKey
RegOpenKeyExA

shell32

SHGetFolderPathA

ole32

CoUninitialize
CoCreateInstance
CoInitialize
CoCreateGuid

shlwapi

PathFileExistsW
PathAppendA
PathFileExistsA
StrCmpIW
PathAppendW
PathRemoveFileSpecW

version

GetFileVersionInfoSizeW
GetFileVersionInfoW
VerQueryValueW

rpcrt4

UuidCreate

netapi32

Netbios

Exports

Exports

PluginCreate
PluginDestory
SetLineInfo

Sections

.text
Size: 629KB - Virtual size: 628KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 170KB - Virtual size: 169KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 11KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.gfids
Size: 1024B - Virtual size: 988B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

qmnet
Size: 512B - Virtual size: 32B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 28KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

Headers

File Characteristics

Sections

Size: 181KB - Virtual size: 492KB

Size: 223B - Virtual size: 84KB

Size: 13KB - Virtual size: 56KB

Size: 19KB - Virtual size: 33KB

Size: 10KB - Virtual size: 46KB

Size: - Virtual size: 5KB

Size: 518B - Virtual size: 7KB

Size: 34B - Virtual size: 112B

Size: 22B - Virtual size: 104B

Size: 9KB - Virtual size: 66KB

Size: 499B - Virtual size: 2KB

Size: 44KB - Virtual size: 117KB

Size: 4KB - Virtual size: 18KB

Size: 11KB - Virtual size: 22KB

Size: 2KB - Virtual size: 10KB

Size: 580B - Virtual size: 1KB

Size: 31KB - Virtual size: 132KB

Size: 1KB - Virtual size: 5KB

.imports Size: 1024B - Virtual size: 4KB

.tls Size: 512B - Virtual size: 4KB

.rsrc Size: 66KB - Virtual size: 66KB

.themida Size: - Virtual size: 5.7MB

.boot Size: 3.2MB - Virtual size: 3.2MB

587f6e23eaa7cfa7afe34ad8e98200da

Code Sign

0e:33:12:30:52:5a:25:a7:f8:10:e5:34:88:b0:aa:40Certificate

Extended Key Usages

Key Usages

0f:a8:49:06:15:d7:00:a0:be:21:76:fd:c5:ec:6d:bdCertificate

Extended Key Usages

Key Usages

04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08Certificate

Extended Key Usages

Key Usages

0e:a7:f6:86:bc:40:35:4a:70:f2:c2:97:c1:31:5e:f6Certificate

Extended Key Usages

Key Usages

0a:7a:4a:88:9e:c9:99:42:90:06:63:38:4d:86:97:9dCertificate

Extended Key Usages

Key Usages

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5bCertificate

Extended Key Usages

Key Usages

49:87:9d:04:ac:9d:00:b7:e1:99:fc:59:45:d6:31:24:17:12:9a:00:97:fd:aa:dc:48:c1:9d:8c:58:be:35:1dSigner

33:0f:5d:2f:cb:20:98:fb:0c:bd:f3:6a:a6:ae:cf:5e:35:0c:df:59Signer

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

ws2_32

gdi32

msvcp140

kernel32

user32

advapi32

ole32

shell32

oleaut32

shlwapi

d3d9

powrprof

opengl32

imm32

setupapi

libaow

rpcrt4

winmm

gdiplus

psapi

vcruntime140

api-ms-win-crt-string-l1-1-0

.imports
Size: 1024B - Virtual size: 4KB

.tls
Size: 512B - Virtual size: 4KB

.rsrc
Size: 66KB - Virtual size: 66KB

.themida
Size: - Virtual size: 5.7MB

.boot
Size: 3.2MB - Virtual size: 3.2MB

0e:33:12:30:52:5a:25:a7:f8:10:e5:34:88:b0:aa:40
Certificate

0f:a8:49:06:15:d7:00:a0:be:21:76:fd:c5:ec:6d:bd
Certificate

04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08
Certificate

0e:a7:f6:86:bc:40:35:4a:70:f2:c2:97:c1:31:5e:f6
Certificate

0a:7a:4a:88:9e:c9:99:42:90:06:63:38:4d:86:97:9d
Certificate

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

49:87:9d:04:ac:9d:00:b7:e1:99:fc:59:45:d6:31:24:17:12:9a:00:97:fd:aa:dc:48:c1:9d:8c:58:be:35:1d
Signer

33:0f:5d:2f:cb:20:98:fb:0c:bd:f3:6a:a6:ae:cf:5e:35:0c:df:59
Signer

.text
Size: 1.5MB - Virtual size: 1.5MB

.rdata
Size: 879KB - Virtual size: 879KB

.data
Size: 91KB - Virtual size: 96KB

.gfids
Size: 512B - Virtual size: 72B

.tls
Size: 512B - Virtual size: 9B

_RDATA
Size: 512B - Virtual size: 292B

.rsrc
Size: 36KB - Virtual size: 36KB

.tvm0
Size: 559KB - Virtual size: 560KB

.reloc
Size: 79KB - Virtual size: 80KB

.text
Size: 30KB - Virtual size: 29KB

.data
Size: 1024B - Virtual size: 556B

.bss
Size: - Virtual size: 548B

.idata
Size: 2KB - Virtual size: 2KB

.rsrc
Size: 403KB - Virtual size: 402KB

61:1c:b2:8a:00:00:00:00:00:26
Certificate

0e:33:12:30:52:5a:25:a7:f8:10:e5:34:88:b0:aa:40
Certificate

0f:a8:49:06:15:d7:00:a0:be:21:76:fd:c5:ec:6d:bd
Certificate

04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08
Certificate

61:1c:b2:8a:00:00:00:00:00:26
Certificate

0e:a7:f6:86:bc:40:35:4a:70:f2:c2:97:c1:31:5e:f6
Certificate

0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:dd
Certificate

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

82:3f:55:26:5f:8d:b7:70:2b:f4:12:f3:5b:ad:77:18:96:2d:4b:a0:03:0a:01:54:7d:1a:84:58:eb:0d:3f:8a
Signer

b1:29:da:29:3f:22:60:94:14:6d:3f:85:1c:ef:45:7d:c2:9c:a6:53
Signer