show_setup[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

show_setup.exe
Size

3.5MB
MD5

75349c34c6bd9eef0a69b14c2d96109a
SHA1

738c37cfcc174544475679b540f989f6eab96b30
SHA256

94d5b2e89f0a659c24a3586b36739da4ebb31e740e3e83eb82712cc8df526a83
SHA512

a0112aecc517a02e2900affcbe08d879138da958804577f80f9a29c002b82147469ecfc9a3efab77d448ce7d65e9fa8f9357b9b2df4b7f7b0ca96b8dcb49faa5
SSDEEP

98304:dOzenjYt2SDrbe7KI86froYtAoXYbYa5fL:IzenbCaK76fro0XYM2

Score

5^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

upx

resource	yara_rule
static1/unpack001/show.exe	upx

Unsigned PE 12 IoCs

Checks for missing Authenticode signature.

resource
unpack001/SDL.dll
unpack001/avcodec-51.dll
unpack001/avformat-51.dll
unpack001/avutil-49.dll
unpack001/convert.exe
unpack001/ffplay.exe
unpack001/flvtool2.exe
unpack001/postproc-51.dll
unpack001/pthreadGC2.dll
unpack001/show.exe
unpack002/out.upx
unpack001/swscale-0.dll

NSIS installer 1 IoCs

installer

resource	yara_rule
sample	nsis_installer_1

Files

show_setup.exe
.exe windows:4 windows x86 arch:x86

55f3dfd13c0557d3e32bcbc604441dd3

Code Sign

01
Certificate

Issuer

CN=Thawte Premium Server CA,OU=Certification Services Division,O=Thawte Consulting cc,L=Cape Town,ST=Western Cape,C=ZA,1.2.840.113549.1.9.1=#0c197072656d69756d2d736572766572407468617774652e636f6d

Not Before

01/08/1996, 00:00

Not After

31/12/2020, 23:59

Subject

CN=Thawte Premium Server CA,OU=Certification Services Division,O=Thawte Consulting cc,L=Cape Town,ST=Western Cape,C=ZA,1.2.840.113549.1.9.1=#0c197072656d69756d2d736572766572407468617774652e636f6d

0a
Certificate

Issuer

CN=Thawte Premium Server CA,OU=Certification Services Division,O=Thawte Consulting cc,L=Cape Town,ST=Western Cape,C=ZA,1.2.840.113549.1.9.1=#0c197072656d69756d2d736572766572407468617774652e636f6d

Not Before

06/08/2003, 00:00

Not After

05/08/2013, 23:59

Subject

CN=Thawte Code Signing CA,O=Thawte Consulting (Pty) Ltd.,C=ZA

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04/12/2003, 00:00

Not After

03/12/2013, 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

35:19:8a:09:f8:df:1a:89:a8:00:16:d1:4d:27:25:99
Certificate

Issuer

CN=Thawte Code Signing CA,O=Thawte Consulting (Pty) Ltd.,C=ZA

Not Before

14/12/2006, 09:28

Not After

14/12/2007, 09:28

Subject

CN=PopFolder,OU=Software Development Department,O=PopFolder,L=KyoungGi-do,ST=Gwangmyeong-si\ ,C=KR

Extended Key Usages

ExtKeyUsageCodeSigning
ExtKeyUsageMicrosoftCommercialCodeSigning

0d:e9:2b:f0:d4:d8:29:88:18:32:05:09:5e:9a:76:88
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

04/12/2003, 00:00

Not After

03/12/2008, 23:59

Subject

CN=VeriSign Time Stamping Services Signer,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

Signer

Actual PE Digest

Digest Algorithm

PE Digest Matches

false

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetFileTime
CompareFileTime
SearchPathA
GetShortPathNameA
GetFullPathNameA
MoveFileA
SetCurrentDirectoryA
GetFileAttributesA
GetLastError
CreateDirectoryA
SetFileAttributesA
Sleep
CreateFileA
GetFileSize
GetModuleFileNameA
GetTickCount
GetCurrentProcess
CloseHandle
ExitProcess
GetWindowsDirectoryA
GetTempPathA
GetCommandLineA
LoadLibraryA
lstrcpynA
GetDiskFreeSpaceA
GlobalUnlock
GlobalLock
CreateThread
CreateProcessA
RemoveDirectoryA
GetTempFileNameA
lstrlenA
lstrcatA
GetSystemDirectoryA
lstrcmpiA
lstrcmpA
ExpandEnvironmentStringsA
GlobalFree
GlobalAlloc
WaitForSingleObject
GetExitCodeProcess
SetErrorMode
GetModuleHandleA
LoadLibraryExA
GetProcAddress
FreeLibrary
MultiByteToWideChar
WritePrivateProfileStringA
GetPrivateProfileStringA
WriteFile
ReadFile
MulDiv
SetFilePointer
FindClose
FindNextFileA
FindFirstFileA
DeleteFileA
CopyFileA

user32

EndDialog
ScreenToClient
GetWindowRect
EnableMenuItem
GetSystemMenu
SetClassLongA
IsWindowEnabled
SetWindowPos
GetSysColor
GetWindowLongA
SetCursor
LoadCursorA
CheckDlgButton
GetMessagePos
LoadBitmapA
CallWindowProcA
IsWindowVisible
CloseClipboard
SetClipboardData
EmptyClipboard
RegisterClassA
TrackPopupMenu
AppendMenuA
CreatePopupMenu
GetSystemMetrics
SetDlgItemTextA
GetDlgItemTextA
MessageBoxIndirectA
CharPrevA
DispatchMessageA
PeekMessageA
CreateDialogParamA
DestroyWindow
SetTimer
SetWindowTextA
PostQuitMessage
SetForegroundWindow
wsprintfA
SendMessageTimeoutA
FindWindowExA
SystemParametersInfoA
CreateWindowExA
GetClassInfoA
DialogBoxParamA
CharNextA
OpenClipboard
ExitWindowsEx
IsWindow
GetDlgItem
SetWindowLongA
LoadImageA
GetDC
EnableWindow
InvalidateRect
SendMessageA
DefWindowProcA
BeginPaint
GetClientRect
FillRect
DrawTextA
EndPaint
ShowWindow

gdi32

SetBkColor
GetDeviceCaps
DeleteObject
CreateBrushIndirect
CreateFontIndirectA
SetBkMode
SetTextColor
SelectObject

shell32

SHGetPathFromIDListA
SHBrowseForFolderA
SHGetFileInfoA
ShellExecuteA
SHFileOperationA
SHGetSpecialFolderLocation

advapi32

RegQueryValueExA
RegSetValueExA
RegEnumKeyA
RegEnumValueA
RegOpenKeyExA
RegDeleteKeyA
RegDeleteValueA
RegCloseKey
RegCreateKeyExA

comctl32

ImageList_AddMasked
ImageList_Destroy
ord17
ImageList_Create

ole32

CoTaskMemFree
OleInitialize
OleUninitialize
CoCreateInstance

version

GetFileVersionInfoSizeA
GetFileVersionInfoA
VerQueryValueA

Sections

.text
Size: 22KB - Virtual size: 22KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 107KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ndata
Size: - Virtual size: 36KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
COPYING
License.txt
SDL.dll
.dll windows:4 windows x86 arch:x86

e046ce41267987ef4ccfabb239186c31

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

winmm

timeKillEvent
timeEndPeriod
timeSetEvent
timeBeginPeriod
timeGetTime
mciSendCommandA
mciGetErrorStringA
joyGetNumDevs
joyGetPosEx
joyGetDevCapsA
waveOutGetErrorTextA
waveOutOpen
waveOutPrepareHeader
waveOutClose
waveOutUnprepareHeader
waveOutWrite

kernel32

LoadLibraryA
CreateEventA
SetEnvironmentVariableA
GetVersionExA
CreateFileA
SetErrorMode
SetFilePointer
ReadFile
WriteFile
GetDriveTypeA
GetModuleHandleA
GetLocaleInfoA
GetACP
MultiByteToWideChar
FormatMessageA
GetLastError
CreateMutexA
ReleaseMutex
CreateThread
GetCurrentThreadId
TerminateThread
QueryPerformanceCounter
Sleep
GetProcAddress
FreeLibrary
ReleaseSemaphore
CreateSemaphoreA
CloseHandle
WaitForSingleObject
GetCurrentThread
SetThreadPriority
GetEnvironmentVariableA
DisableThreadLibraryCalls

user32

GetClientRect
AdjustWindowRect
GetWindowRect
ToUnicode
RegisterClassA
LoadImageA
SetTimer
PostMessageA
KillTimer
WindowFromPoint
PtInRect
MapWindowPoints
UnregisterClassA
GetClassInfoA
ToAsciiEx
DestroyCursor
GetCursor
CreateCursor
SetClassLongA
CreateIconFromResourceEx
SetWindowTextA
ClientToScreen
ClipCursor
SetCursor
BeginPaint
EndPaint
PostQuitMessage
SetCursorPos
SetFocus
TranslateMessage
MapVirtualKeyA
MsgWaitForMultipleObjects
GetParent
GetForegroundWindow
ScreenToClient
SetCapture
ReleaseCapture
GetDesktopWindow
InvalidateRect
DestroyIcon
ChangeDisplaySettingsA
IsZoomed
GetMenu
AdjustWindowRectEx
GetSystemMetrics
SetWindowPos
SetForegroundWindow
GetDC
ReleaseDC
EnumDisplaySettingsA
DestroyWindow
GetWindowLongA
SetWindowLongA
CreateWindowExA
ShowWindow
MapVirtualKeyExA
GetKeyboardState
GetKeyboardLayoutNameA
LoadKeyboardLayoutA
GetKeyboardLayout
PeekMessageA
DispatchMessageA
GetMessageA
GetKeyState
DefWindowProcA
CallWindowProcA
GetCursorPos

gdi32

CreateCompatibleBitmap
CreateDIBSection
DeleteDC
BitBlt
SelectObject
CreateCompatibleDC
GetDIBits
SetDIBColorTable
RealizePalette
SetPaletteEntries
GetDeviceGammaRamp
SetDeviceGammaRamp
GetDeviceCaps
DeleteObject
GetSystemPaletteEntries
SelectPalette
SwapBuffers
ChoosePixelFormat
SetPixelFormat
DescribePixelFormat
CreatePalette

advapi32

RegQueryValueExA
RegOpenKeyExA
RegCloseKey

msvcrt

fprintf
sscanf
realloc
qsort
_ftol
free
atoi
malloc
strncmp
signal
raise
_CIpow
strchr
_stricmp
ftell
fseek
fread
fwrite
_strrev
_pctype
_isctype
__mb_cur_max
fclose
_strlwr
_ltoa
_ultoa
_beginthreadex
_endthreadex
atof
strstr
_initterm
_adjust_fdiv
_iob

Exports

Exports

SDL_AddTimer
SDL_AllocRW
SDL_AudioDriverName
SDL_AudioInit
SDL_AudioQuit
SDL_BuildAudioCVT
SDL_CDClose
SDL_CDEject
SDL_CDName
SDL_CDNumDrives
SDL_CDOpen
SDL_CDPause
SDL_CDPlay
SDL_CDPlayTracks
SDL_CDResume
SDL_CDStatus
SDL_CDStop
SDL_ClearError
SDL_CloseAudio
SDL_CondBroadcast
SDL_CondSignal
SDL_CondWait
SDL_CondWaitTimeout
SDL_ConvertAudio
SDL_ConvertSurface
SDL_CreateCond
SDL_CreateCursor
SDL_CreateMutex
SDL_CreateRGBSurface
SDL_CreateRGBSurfaceFrom
SDL_CreateSemaphore
SDL_CreateThread
SDL_CreateYUVOverlay
SDL_Delay
SDL_DestroyCond
SDL_DestroyMutex
SDL_DestroySemaphore
SDL_DisplayFormat
SDL_DisplayFormatAlpha
SDL_DisplayYUVOverlay
SDL_EnableKeyRepeat
SDL_EnableUNICODE
SDL_Error
SDL_EventState
SDL_FillRect
SDL_Flip
SDL_FreeCursor
SDL_FreeRW
SDL_FreeSurface
SDL_FreeWAV
SDL_FreeYUVOverlay
SDL_GL_GetAttribute
SDL_GL_GetProcAddress
SDL_GL_LoadLibrary
SDL_GL_Lock
SDL_GL_SetAttribute
SDL_GL_SwapBuffers
SDL_GL_Unlock
SDL_GL_UpdateRects
SDL_GetAppState
SDL_GetAudioStatus
SDL_GetClipRect
SDL_GetCursor
SDL_GetError
SDL_GetEventFilter
SDL_GetGammaRamp
SDL_GetKeyName
SDL_GetKeyRepeat
SDL_GetKeyState
SDL_GetModState
SDL_GetMouseState
SDL_GetRGB
SDL_GetRGBA
SDL_GetRelativeMouseState
SDL_GetThreadID
SDL_GetTicks
SDL_GetVideoInfo
SDL_GetVideoSurface
SDL_GetWMInfo
SDL_Has3DNow
SDL_Has3DNowExt
SDL_HasAltiVec
SDL_HasMMX
SDL_HasMMXExt
SDL_HasRDTSC
SDL_HasSSE
SDL_HasSSE2
SDL_Init
SDL_InitSubSystem
SDL_JoystickClose
SDL_JoystickEventState
SDL_JoystickGetAxis
SDL_JoystickGetBall
SDL_JoystickGetButton
SDL_JoystickGetHat
SDL_JoystickIndex
SDL_JoystickName
SDL_JoystickNumAxes
SDL_JoystickNumBalls
SDL_JoystickNumButtons
SDL_JoystickNumHats
SDL_JoystickOpen
SDL_JoystickOpened
SDL_JoystickUpdate
SDL_KillThread
SDL_Linked_Version
SDL_ListModes
SDL_LoadBMP_RW
SDL_LoadFunction
SDL_LoadObject
SDL_LoadWAV_RW
SDL_LockAudio
SDL_LockSurface
SDL_LockYUVOverlay
SDL_LowerBlit
SDL_MapRGB
SDL_MapRGBA
SDL_MixAudio
SDL_NumJoysticks
SDL_OpenAudio
SDL_PauseAudio
SDL_PeepEvents
SDL_PollEvent
SDL_PumpEvents
SDL_PushEvent
SDL_Quit
SDL_QuitSubSystem
SDL_RWFromConstMem
SDL_RWFromFP
SDL_RWFromFile
SDL_RWFromMem
SDL_ReadBE16
SDL_ReadBE32
SDL_ReadBE64
SDL_ReadLE16
SDL_ReadLE32
SDL_ReadLE64
SDL_RegisterApp
SDL_RemoveTimer
SDL_SaveBMP_RW
SDL_SemPost
SDL_SemTryWait
SDL_SemValue
SDL_SemWait
SDL_SemWaitTimeout
SDL_SetAlpha
SDL_SetClipRect
SDL_SetColorKey
SDL_SetColors
SDL_SetCursor
SDL_SetError
SDL_SetEventFilter
SDL_SetGamma
SDL_SetGammaRamp
SDL_SetModState
SDL_SetModuleHandle
SDL_SetPalette
SDL_SetTimer
SDL_SetVideoMode
SDL_ShowCursor
SDL_SoftStretch
SDL_ThreadID
SDL_UnloadObject
SDL_UnlockAudio
SDL_UnlockSurface
SDL_UnlockYUVOverlay
SDL_UnregisterApp
SDL_UpdateRect
SDL_UpdateRects
SDL_UpperBlit
SDL_VideoDriverName
SDL_VideoInit
SDL_VideoModeOK
SDL_VideoQuit
SDL_WM_GetCaption
SDL_WM_GrabInput
SDL_WM_IconifyWindow
SDL_WM_SetCaption
SDL_WM_SetIcon
SDL_WM_ToggleFullScreen
SDL_WaitEvent
SDL_WaitThread
SDL_WarpMouse
SDL_WasInit
SDL_WriteBE16
SDL_WriteBE32
SDL_WriteBE64
SDL_WriteLE16
SDL_WriteLE32
SDL_WriteLE64
SDL_getenv
SDL_iconv
SDL_iconv_close
SDL_iconv_open
SDL_iconv_string
SDL_lltoa
SDL_mutexP
SDL_mutexV
SDL_putenv
SDL_revcpy
SDL_snprintf
SDL_strdup
SDL_strlcat
SDL_strlcpy
SDL_strtoull
SDL_ulltoa
SDL_vsnprintf

Sections

.text
Size: 192KB - Virtual size: 190KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 20KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 20KB - Virtual size: 47KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 792B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 12KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
avcodec-51.dll
.dll windows:4 windows x86 arch:x86

246f04d00eccdefe5e4010a8d0a19087

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Imports

kernel32

AddAtomA
CloseHandle
CreateThread
FindAtomA
GetAtomNameA
GetCurrentProcess
GetProcessAffinityMask
Sleep
WaitForSingleObject

msvcrt

_close
_open
_strdup
_tempnam
_unlink
_write
__dllonexit
__mb_cur_max
_assert
_errno
_iob
_isctype
_pctype
_setjmp
_snprintf
_vsnprintf
abort
acos
asin
atan
atoi
calloc
ceil
cos
cosh
exit
exp
fclose
fflush
fgetc
floor
fopen
fprintf
fread
free
frexp
fscanf
fseek
ftell
fwrite
ldexp
log
log10
longjmp
malloc
memcpy
memmove
memset
perror
pow
printf
putchar
puts
qsort
rand
realloc
rename
signal
sin
sinh
sprintf
sqrt
srand
sscanf
strcat
strchr
strcmp
strcpy
strcspn
strlen
strncpy
strpbrk
strstr
strtod
strtol
tan
tanh
tolower
toupper
vfprintf
vsprintf

avutil-49

av_crc
av_crc04C11DB7
av_crc07
av_crc8005
av_crc_init
av_d2q
av_div_q
av_evaluate_lls
av_free
av_freep
av_init_lls
av_log
av_log_level
av_malloc
av_mallocz
av_realloc
av_reduce
av_rescale_q
av_solve_lls
av_update_lls
av_vlog
ff_gcd
ff_log2_tab
ff_sqrt_tab
lzo1x_decode
av_log_level
av_crc04C11DB7
av_crc04C11DB7
av_crc8005
av_crc8005
av_crc8005
av_crc8005
av_crc8005
av_crc8005
av_crc07
av_crc07
av_crc07
av_crc07
ff_log2_tab
ff_log2_tab
ff_log2_tab
ff_log2_tab
ff_log2_tab
ff_log2_tab
ff_log2_tab
ff_log2_tab
ff_log2_tab
ff_log2_tab
ff_log2_tab
ff_log2_tab
ff_log2_tab
ff_log2_tab
ff_log2_tab
ff_log2_tab
ff_log2_tab
ff_log2_tab
ff_log2_tab
ff_log2_tab
ff_log2_tab
ff_log2_tab
ff_log2_tab
ff_log2_tab
ff_log2_tab
ff_log2_tab
ff_log2_tab
ff_log2_tab
ff_log2_tab
ff_log2_tab
ff_log2_tab
ff_log2_tab
ff_log2_tab
ff_log2_tab
ff_log2_tab
ff_log2_tab
ff_log2_tab
ff_log2_tab
ff_log2_tab
ff_log2_tab
ff_log2_tab
ff_log2_tab
ff_log2_tab
ff_log2_tab
ff_log2_tab
ff_log2_tab
ff_log2_tab
ff_log2_tab
ff_log2_tab
ff_log2_tab
ff_log2_tab
ff_log2_tab
ff_log2_tab
ff_log2_tab
ff_log2_tab
ff_log2_tab
ff_log2_tab
ff_log2_tab
ff_log2_tab
ff_log2_tab
ff_log2_tab
ff_log2_tab
ff_log2_tab
ff_log2_tab
ff_log2_tab
ff_log2_tab
ff_log2_tab
ff_log2_tab
ff_log2_tab
ff_log2_tab
ff_log2_tab
ff_log2_tab
ff_log2_tab
ff_log2_tab
ff_log2_tab
ff_log2_tab
ff_log2_tab
ff_log2_tab
ff_log2_tab
ff_log2_tab
ff_log2_tab
ff_log2_tab
ff_log2_tab
ff_log2_tab
ff_log2_tab
ff_log2_tab
ff_log2_tab
ff_log2_tab
ff_log2_tab
ff_log2_tab
ff_log2_tab
ff_log2_tab
ff_log2_tab
ff_log2_tab
ff_log2_tab
ff_log2_tab
ff_log2_tab
ff_log2_tab
ff_log2_tab
ff_log2_tab
ff_log2_tab
ff_log2_tab
ff_log2_tab
ff_log2_tab
ff_log2_tab
ff_log2_tab
ff_log2_tab
ff_log2_tab
ff_log2_tab
ff_log2_tab
ff_log2_tab
ff_log2_tab
ff_log2_tab
ff_log2_tab
ff_log2_tab
ff_log2_tab
ff_log2_tab
ff_log2_tab
ff_log2_tab
ff_log2_tab
ff_log2_tab
ff_log2_tab
ff_log2_tab
ff_log2_tab
ff_log2_tab
ff_log2_tab
ff_log2_tab
ff_log2_tab
ff_log2_tab
ff_log2_tab
ff_log2_tab
ff_log2_tab
ff_log2_tab
ff_log2_tab
ff_log2_tab
ff_log2_tab
ff_log2_tab
ff_log2_tab
ff_log2_tab
ff_log2_tab
ff_log2_tab
ff_log2_tab
ff_log2_tab
ff_log2_tab
ff_log2_tab
ff_log2_tab
ff_log2_tab
ff_log2_tab
ff_log2_tab
ff_log2_tab
ff_log2_tab
ff_log2_tab
ff_log2_tab
ff_sqrt_tab
ff_sqrt_tab
ff_sqrt_tab
ff_sqrt_tab
ff_sqrt_tab

Exports

Exports

AACQuantize
AACQuantizeEnd
AACQuantizeInit
ABR_iteration_loop
ATHformula
ATHformula_GB
AddVbrFrame
AnalyzeSamples
AudioSpecificConfig2
BitAllocation
BitSearch
BitrateIndex
BitstreamReadHeaders
BitstreamWriteEndOfSequence
BitstreamWriteGroupOfVopHeader
BitstreamWriteUserData
BitstreamWriteVolHeader
BitstreamWriteVopHeader
CBR_iteration_loop
CRC_update_lookup
CRC_writeheader
CalcAvgEnrg
CalcBits
CheckCandidate16no4v
CheckVbrTag
CloseBitStream
CodeCoeffInter_CalcBits
CodeCoeffIntra_CalcBits
CopyPredInfo
DCT4_32
DCT_common_init
DCtab_chrom
DCtab_lum
DST4_32
D_ACELP_decode_2t
D_ACELP_decode_4t
D_ACELP_phase_dispersion
D_DTX_activity_update
D_DTX_exe
D_DTX_exit
D_DTX_init
D_DTX_reset
D_DTX_rx_handler
D_GAIN_adaptive_codebook_excitation
D_GAIN_adaptive_control
D_GAIN_decode
D_GAIN_find_voice_factor
D_GAIN_init
D_GAIN_lag_concealment
D_GAIN_lag_concealment_init
D_GAIN_pitch_sharpening
D_IF_decode
D_IF_exit
D_IF_homing_frame_test
D_IF_homing_frame_test_first
D_IF_init
D_IF_mms_conversion
D_IF_reset
D_LPC_a_weight
D_LPC_int_isp_find
D_LPC_isf_2s3s_decode
D_LPC_isf_2s5s_decode
D_LPC_isf_extrapolation
D_LPC_isf_isp_conversion
D_LPC_isf_noise_d
D_LPC_isp_a_conversion
D_MAIN_close
D_MAIN_decode
D_MAIN_init
D_MAIN_reset
D_ROM_cdown_unusable
D_ROM_cdown_usable
D_ROM_cos
D_ROM_dico1_isf
D_ROM_dico1_isf_noise
D_ROM_dico21_isf
D_ROM_dico21_isf_36b
D_ROM_dico22_isf
D_ROM_dico22_isf_36b
D_ROM_dico23_isf
D_ROM_dico23_isf_36b
D_ROM_dico24_isf
D_ROM_dico25_isf
D_ROM_dico2_isf
D_ROM_dico2_isf_noise
D_ROM_dico3_isf_noise
D_ROM_dico4_isf_noise
D_ROM_dico5_isf_noise
D_ROM_fir_6k_7k
D_ROM_fir_7k
D_ROM_fir_down
D_ROM_fir_up
D_ROM_hp_gain
D_ROM_inter4_2
D_ROM_interpol_frac
D_ROM_isf
D_ROM_isp
D_ROM_isqrt
D_ROM_log2
D_ROM_mean_isf
D_ROM_mean_isf_noise
D_ROM_pdown_unusable
D_ROM_pdown_usable
D_ROM_ph_imp_low
D_ROM_ph_imp_mid
D_ROM_pow2
D_ROM_qua_gain6b
D_ROM_qua_gain7b
D_UTIL_bp_6k_7k
D_UTIL_dec_synthesis
D_UTIL_dot_product12
D_UTIL_hp400_12k8
D_UTIL_interpol
D_UTIL_inverse_sqrt
D_UTIL_l_extract
D_UTIL_log2
D_UTIL_mpy_32
D_UTIL_mpy_32_16
D_UTIL_norm_l
D_UTIL_norm_s
D_UTIL_normalised_inverse_sqrt
D_UTIL_pow2
D_UTIL_preemph
D_UTIL_random
D_UTIL_saturate
D_UTIL_signal_down_scale
D_UTIL_signal_up_scale
DecoderMMS
Decoder_Interface_Decode
Decoder_Interface_exit
Decoder_Interface_init
Decoder_Interface_reset
E_ACELP_2t
E_ACELP_4t
E_ACELP_Gain2_Q_init
E_ACELP_codebook_target_update
E_ACELP_gains_quantise
E_ACELP_xh_corr
E_ACELP_xy1_corr
E_ACELP_xy2_corr
E_DTX_buffer
E_DTX_exe
E_DTX_exit
E_DTX_init
E_DTX_pitch_tone_detection
E_DTX_reset
E_DTX_tx_handler
E_DTX_vad
E_DTX_vad_exit
E_DTX_vad_init
E_DTX_vad_reset
E_GAIN_adaptive_codebook_excitation
E_GAIN_clip_init
E_GAIN_clip_isf_test
E_GAIN_clip_pit_test
E_GAIN_clip_test
E_GAIN_closed_loop_search
E_GAIN_f_pitch_sharpening
E_GAIN_lp_decim2
E_GAIN_olag_median
E_GAIN_open_loop_search
E_GAIN_pitch_sharpening
E_GAIN_voice_factor
E_IF_encode
E_IF_exit
E_IF_homing_coding
E_IF_homing_frame_test
E_IF_init
E_LPC_a_isp_conversion
E_LPC_a_weight
E_LPC_f_int_isp_find
E_LPC_f_isp_a_conversion
E_LPC_int_isp_find
E_LPC_isf_2s3s_quantise
E_LPC_isf_2s5s_decode
E_LPC_isf_2s5s_quantise
E_LPC_isf_isp_conversion
E_LPC_isf_sub_vq
E_LPC_isp_a_conversion
E_LPC_isp_isf_conversion
E_LPC_lag_wind
E_LPC_lev_dur
E_MAIN_close
E_MAIN_encode
E_MAIN_init
E_MAIN_reset
E_ROM_cdown_unusable
E_ROM_cdown_usable
E_ROM_corrweight
E_ROM_cos
E_ROM_dico1_isf
E_ROM_dico1_isf_noise
E_ROM_dico21_isf
E_ROM_dico21_isf_36b
E_ROM_dico22_isf
E_ROM_dico22_isf_36b
E_ROM_dico23_isf
E_ROM_dico23_isf_36b
E_ROM_dico24_isf
E_ROM_dico25_isf
E_ROM_dico2_isf
E_ROM_dico2_isf_noise
E_ROM_dico3_isf_noise
E_ROM_dico4_isf_noise
E_ROM_dico5_isf_noise
E_ROM_en_adjust
E_ROM_f_interpol_frac
E_ROM_f_mean_isf
E_ROM_fir_6k_7k
E_ROM_fir_down
E_ROM_fir_ipol
E_ROM_fir_up
E_ROM_grid
E_ROM_hamming_cos
E_ROM_hp_gain
E_ROM_inter4_1
E_ROM_inter4_2
E_ROM_interpol_frac
E_ROM_isf
E_ROM_isp
E_ROM_isqrt
E_ROM_lag_window
E_ROM_log2
E_ROM_mean_isf
E_ROM_mean_isf_noise
E_ROM_pdown_unusable
E_ROM_pdown_usable
E_ROM_pow2
E_ROM_qua_gain6b
E_ROM_qua_gain7b
E_ROM_tipos
E_UTIL_autocorr
E_UTIL_convolve
E_UTIL_decim_12k8
E_UTIL_deemph
E_UTIL_dot_product12
E_UTIL_enc_synthesis
E_UTIL_f_convolve
E_UTIL_f_preemph
E_UTIL_hp50_12k8
E_UTIL_l_extract
E_UTIL_log2_32
E_UTIL_mpy_32_16
E_UTIL_norm_l
E_UTIL_norm_s
E_UTIL_normalised_inverse_sqrt
E_UTIL_pow2
E_UTIL_preemph
E_UTIL_random
E_UTIL_residu
E_UTIL_saturate
E_UTIL_saturate_31
E_UTIL_signal_down_scale
E_UTIL_signal_up_scale
E_UTIL_synthesis
Encoder_Interface_Encode
Encoder_Interface_exit
Encoder_Interface_init
FilterBank
FilterBankEnd
FilterBankInit
FindNearestBitrate
FullRefine_Fast
GASpecificConfig
GMEanalysis
GetAlbumGain
GetChannelInfo
GetMaxPredSfb
GetSRIndex
GetTitleGain
GetVbrTag
GlobalMotionEst
GlobalMotionEstRefine
HuffmanEnd
HuffmanInit
IFilterBank
InitGainAnalysis
InitVbrTag
IsVbrTag
L3psycho_anal
L3psycho_anal_ns
LtpEncode
LtpEnd
LtpInit
LtpReconstruct
LtpUpdate
MBCoding
MBCodingBVOP
MBFieldTest
MBFieldTest_c
MBFieldTest_mmx
MBFrameToField
MBMotionCompensation
MBMotionCompensationBVOP
MBPrediction
MBTransQuantInter
MBTransQuantInterBVOP
MBTransQuantIntra
MEanalysis
MPV_common_end
MPV_common_init
MPV_common_init_mmx
MPV_decode_defaults
MPV_decode_mb
MPV_encode_end
MPV_encode_init
MPV_encode_picture
MPV_frame_end
MPV_frame_start
MSEncode
MSReconstruct
MaxBitrate
MaxBitresSize
MaxPredSfb
MinBitrate
ModeDecision_BVOP_RD
MotionEstimateSMP
MotionEstimation
MotionEstimationBVOP
NeAACDecAudioSpecificConfig
NeAACDecClose
NeAACDecDecode
NeAACDecDecode2
NeAACDecGetCapabilities
NeAACDecGetCurrentConfiguration
NeAACDecGetErrorMessage
NeAACDecInit
NeAACDecInit2
NeAACDecOpen
NeAACDecPostSeekReset
NeAACDecSetConfiguration
NoiselessBitCount
OpenBitStream
OutputBits
PredCalcPrediction
PredInit
PutBit
PutLameVBR
PutVbrTag
ResetSampleFrequency
ResvAdjust
ResvFrameBegin
ResvFrameEnd
ResvMaxBits
SMPMotionEstimationBVOP
SmpFrqIndex
SortBookNumbers
SortForGrouping
Speech_Decode_Frame
Speech_Decode_Frame_exit
Speech_Decode_Frame_init
Speech_Decode_Frame_reset
Speech_Encode_Frame
Speech_Encode_Frame_exit
Speech_Encode_Frame_init
Speech_Encode_Frame_reset
TMNMVtab0
TMNMVtab1
TMNMVtab2
TnsDecodeFilterOnly
TnsEncode
TnsEncodeFilterOnly
TnsInit
UpdateMusicCRC
VBR_iteration_loop
VBR_noise_shaping
WriteBitstream
WriteScalefactors
_analysis_output
_analysis_output_always
_best
_book_maptype1_quantvals
_book_unquantize
_dist_code
_float32_pack
_float32_unpack
_floor_P
_ilog
_length_code
_make_words
_mapping_P
_residue_P
_tr_align
_tr_flush_block
_tr_init
_tr_stored_block
_tr_tally
_ve_envelope_clear
_ve_envelope_init
_ve_envelope_mark
_ve_envelope_search
_ve_envelope_shift
_vi_gpsy_free
_vi_psy_free
_vorbis_apply_window
_vorbis_block_alloc
_vorbis_block_ripcord
_vorbis_window_get
_vp_ampmax_decay
_vp_couple
_vp_global_free
_vp_global_look
_vp_noise_normalize
_vp_noise_normalize_sort
_vp_noisemask
_vp_offset_and_mix
_vp_psy_clear
_vp_psy_init
_vp_quantize_couple_memo
_vp_quantize_couple_sort
_vp_remove_floor
_vp_tonemask
a52_bit_allocate
a52_bitstream_get_bh
a52_bitstream_get_bh_2
a52_bitstream_set_ptr
a52_block
a52_downmix
a52_downmix_coeff
a52_downmix_init
a52_dynrng
a52_frame
a52_free
a52_imdct_256
a52_imdct_512
a52_imdct_init
a52_init
a52_samples
a52_syncinfo
a52_upmix
aac_decoder
aac_parser
aasc_decoder
abgr_to_yv12
abgr_to_yv12_c
abgri_to_yv12
abgri_to_yv12_c
ac3_common_init
ac3_encoder
ac3_parametric_bit_allocation
ac3_parser
add_acdc
add_dummy_byte
add_noise
add_pixels_clamped_mmx
adj43asm
adler32
adler32_combine
adpcm_4xm_decoder
adpcm_4xm_encoder
adpcm_adx_decoder
adpcm_adx_encoder
adpcm_ct_decoder
adpcm_ct_encoder
adpcm_ea_decoder
adpcm_ea_encoder
adpcm_g726_decoder
adpcm_g726_encoder
adpcm_ima_dk3_decoder
adpcm_ima_dk3_encoder
adpcm_ima_dk4_decoder
adpcm_ima_dk4_encoder
adpcm_ima_qt_decoder
adpcm_ima_qt_encoder
adpcm_ima_smjpeg_decoder
adpcm_ima_smjpeg_encoder
adpcm_ima_wav_decoder
adpcm_ima_wav_encoder
adpcm_ima_ws_decoder
adpcm_ima_ws_encoder
adpcm_ms_decoder
adpcm_ms_encoder
adpcm_sbpro_2_decoder
adpcm_sbpro_2_encoder
adpcm_sbpro_3_decoder
adpcm_sbpro_3_encoder
adpcm_sbpro_4_decoder
adpcm_sbpro_4_encoder
adpcm_swf_decoder
adpcm_swf_encoder
adpcm_xa_decoder
adpcm_xa_encoder
adpcm_yamaha_decoder
adpcm_yamaha_encoder
adts_frame
alac_decoder
align_put_bits
alloc_tables
amr_nb_decoder
amr_nb_encoder
amr_wb_decoder
amr_wb_encoder
analysis_noisy
apply_abr_preset
apply_preset
argb_to_yv12
argb_to_yv12_c
argbi_to_yv12
argbi_to_yv12_c
asv1_decoder

Sections

.text
Size: 4.3MB - Virtual size: 4.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rodata
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1.2MB - Virtual size: 1.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 902KB - Virtual size: 901KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 982KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 75KB - Virtual size: 74KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 97KB - Virtual size: 96KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
avformat-51.dll
.dll windows:4 windows x86 arch:x86

3254282d8a8a7a382681c2db455ab2a4

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Imports

kernel32

AddAtomA
FindAtomA
GetAtomNameA

msvcrt

_close
_open
_read
_setmode
_write
__dllonexit
__mb_cur_max
_assert
_errno
_ftime
_isctype
_lseeki64
_pctype
_snprintf
_stricmp
_vsnprintf
abort
atoi
fflush
fprintf
fputc
free
fwrite
gmtime
localtime
malloc
memchr
memcpy
memmove
memset
mktime
puts
realloc
sscanf
strchr
strcmp
strcpy
strlen
strncmp
strncpy
strrchr
strstr
strtod
strtol
strtoul
time
toupper

avifil32

AVIFileExit
AVIFileGetStream
AVIFileInfoA
AVIFileInit
AVIFileOpenA
AVIFileRelease
AVIStreamInfoA
AVIStreamRead
AVIStreamReadFormat
AVIStreamRelease

avcodec-51

av_fast_realloc
av_get_bits_per_sample
av_opt_set_defaults
av_parser_close
av_parser_init
av_parser_parse
av_xiphlacing
avcodec_alloc_context
avcodec_close
avcodec_decode_audio
avcodec_decode_video
avcodec_find_decoder
avcodec_find_encoder
avcodec_get_chroma_sub_sample
avcodec_init
avcodec_open
avcodec_pix_fmt_to_codec_tag
avcodec_register_all
avcodec_string
avpicture_get_size
ff_frame_rate_tab
mpa_decode_header
uncompress
ff_frame_rate_tab
ff_frame_rate_tab

avutil-49

av_adler32_update
av_aes_crypt
av_aes_init
av_aes_size
av_crc
av_crc04C11DB7
av_d2q
av_dbl2ext
av_dbl2int
av_ext2dbl
av_fifo_drain
av_fifo_free
av_fifo_generic_read
av_fifo_init
av_fifo_read
av_fifo_realloc
av_fifo_size
av_fifo_write
av_free
av_freep
av_int2dbl
av_int2flt
av_log
av_malloc
av_mallocz
av_realloc
av_reduce
av_rescale
av_rescale_q
av_rescale_rnd
av_strdup
av_tree_find
av_tree_insert
ff_gcd
ff_log2_tab
ff_log2_tab
ff_log2_tab
ff_log2_tab
ff_log2_tab
ff_log2_tab
ff_log2_tab
ff_log2_tab
ff_log2_tab
av_crc04C11DB7
av_crc04C11DB7
av_crc04C11DB7
av_crc04C11DB7
av_aes_size

Exports

Exports

__dynarray_add
aac_demuxer
ac3_demuxer
ac3_muxer
adts_muxer
aiff_demuxer
aiff_muxer
amr_demuxer
amr_muxer
asf_demuxer
asf_muxer
asf_stream_muxer
au_demuxer
au_muxer
av_add_index_entry
av_alloc_format_context
av_close_input_file
av_codec_get_id
av_codec_get_tag
av_destruct_packet
av_destruct_packet_nofree
av_dup_packet
av_filename_number_test
av_find_default_stream_index
av_find_input_format
av_find_stream_info
av_gen_search
av_get_frame_filename
av_get_packet
av_gettime
av_guess_codec
av_guess_image2_codec
av_hex_dump
av_index_search_timestamp
av_interleave_packet_per_dts
av_interleaved_write_frame
av_new_packet
av_new_stream
av_open_input_file
av_open_input_stream
av_pkt_dump
av_probe_input_format
av_read_frame
av_read_packet
av_read_pause
av_read_play
av_register_all
av_register_input_format
av_register_output_format
av_seek_frame
av_seek_frame_binary
av_set_parameters
av_set_pts_info
av_update_cur_dts
av_write_frame
av_write_header
av_write_trailer
avi_demuxer
avi_muxer
avisynth_demuxer
avs_demuxer
brktimegm
codec_bmp_tags
codec_get_bmp_id
codec_get_bmp_tag
codec_get_id
codec_get_tag
codec_get_wav_id
codec_get_wav_tag
codec_wav_tags
crc_muxer
daud_demuxer
dsicin_demuxer
dts_demuxer
dump_format
dv_assemble_frame
dv_delete_mux
dv_demuxer
dv_get_packet
dv_init_demux
dv_init_mux
dv_muxer
dv_offset_reset
dv_produce_packet
ea_demuxer
end_tag
ff_mov_iso639_to_lang
ff_mov_lang_to_iso639
ff_mov_obj_type
ff_parse_specific_params
ff_qt_default_palette_16
ff_qt_default_palette_256
ff_qt_default_palette_4
ffm_demuxer
ffm_muxer
ffm_nopts
file_protocol
find_info_tag
first_iformat
first_oformat
first_protocol
flac_codec
flac_demuxer
flac_muxer
flic_demuxer
flv_demuxer
flv_muxer
fourxm_demuxer
frame_hook_add
frame_hook_process
frame_hook_release
framecrc_muxer
get_be16
get_be24
get_be32
get_be64
get_buffer
get_byte
get_checksum
get_le16
get_le24
get_le32
get_le64
get_partial_buffer
get_strz
get_wav_header
gif_demuxer
gif_muxer
guess_format
guess_stream_format
gxf_demuxer
gxf_muxer
h261_demuxer
h261_muxer
h263_demuxer
h263_muxer
h264_demuxer
h264_muxer
idcin_demuxer
image2_demuxer
image2_muxer
image2pipe_demuxer
image2pipe_muxer
ingenient_demuxer
init_checksum
init_put_byte
ipmovie_demuxer
localtime_r
m4v_demuxer
m4v_muxer
match_ext
matroska_demuxer
mjpeg_demuxer
mjpeg_muxer
mktimegm
mm_demuxer
mmf_demuxer
mmf_muxer
mov_demuxer
mov_muxer
mp2_muxer
mp3_demuxer
mp3_muxer
mp4_muxer
mpc_demuxer
mpeg1system_muxer
mpeg1vcd_muxer
mpeg1video_muxer
mpeg2dvd_muxer
mpeg2svcd_muxer
mpeg2video_muxer
mpeg2vob_muxer
mpegps_demuxer
mpegts_demuxer
mpegts_muxer
mpegts_parse_close
mpegts_parse_open
mpegts_parse_packet
mpegvideo_demuxer
mpjpeg_muxer
mtv_demuxer
mxf_demuxer
nsv_demuxer
null_muxer
nut_demuxer
nuv_demuxer
ogg_demuxer
ogg_muxer
ogg_packet_clear
ogg_page_bos
ogg_page_checksum_set
ogg_page_continued
ogg_page_eos
ogg_page_granulepos
ogg_page_packets
ogg_page_pageno
ogg_page_serialno
ogg_page_version
ogg_stream_clear
ogg_stream_destroy
ogg_stream_eos
ogg_stream_flush
ogg_stream_init
ogg_stream_packetin
ogg_stream_packetout
ogg_stream_packetpeek
ogg_stream_pagein
ogg_stream_pageout
ogg_stream_reset
ogg_stream_reset_serialno
ogg_sync_buffer
ogg_sync_clear
ogg_sync_destroy
ogg_sync_init
ogg_sync_pageout
ogg_sync_pageseek
ogg_sync_reset
ogg_sync_wrote
ogm_audio_codec
ogm_old_codec
ogm_video_codec
parse_date
parse_frame_rate
parse_image_size
pcm_alaw_demuxer
pcm_alaw_muxer
pcm_mulaw_demuxer
pcm_mulaw_muxer
pcm_read_seek
pcm_s16be_demuxer
pcm_s16be_muxer
pcm_s16le_demuxer
pcm_s16le_muxer
pcm_s8_demuxer
pcm_s8_muxer
pcm_u16be_demuxer
pcm_u16be_muxer
pcm_u16le_demuxer
pcm_u16le_muxer
pcm_u8_demuxer
pcm_u8_muxer
pipe_protocol
psp_muxer
pstrcat
pstrcpy
put_be16
put_be24
put_be32
put_be64
put_bmp_header
put_buffer
put_byte
put_flush_packet
put_le16
put_le24
put_le32
put_le64
put_strz
put_tag
put_wav_header
rawvideo_demuxer
rawvideo_muxer
register_protocol
rm_demuxer
rm_muxer
roq_demuxer
segafilm_demuxer
shorten_demuxer
smacker_demuxer
small_strptime
sol_demuxer
sp_pos_cmp
sp_pts_cmp
start_tag
str_demuxer
stristart
strstart
swf_demuxer
swf_muxer
tg2_muxer
tgp_muxer
theora_codec
tiertexseq_demuxer
tta_demuxer
url_close
url_close_buf
url_close_dyn_buf
url_exist
url_fclose
url_fdopen
url_feof
url_ferror
url_fget_max_packet_size
url_fgetc
url_fgets
url_fileno
url_filesize
url_fopen
url_fprintf
url_fseek
url_fsize
url_fskip
url_ftell
url_get_filename
url_get_max_packet_size
url_interrupt_cb
url_open
url_open_buf
url_open_dyn_buf
url_open_dyn_packet_buf
url_read
url_seek
url_set_interrupt_cb
url_setbufsize
url_split
url_write
vc1_demuxer
vmd_demuxer
voc_codec_tags
voc_demuxer
voc_get_packet
voc_magic
voc_muxer
vorbis_codec
vorbis_comment
wav_codec_get_id
wav_demuxer
wav_muxer
wc3_demuxer
wsaud_demuxer
wsvqa_demuxer
wv_demuxer
yuv4mpegpipe_demuxer
yuv4mpegpipe_muxer

Sections

.text
Size: 342KB - Virtual size: 342KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 73KB - Virtual size: 72KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 288B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
avutil-49.dll
.dll windows:4 windows x86 arch:x86

23683054d85302ed634c5984d7870c8c

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Imports

kernel32

AddAtomA
FindAtomA
GetAtomNameA

msvcrt

__dllonexit
_assert
_errno
_iob
abort
fflush
fprintf
free
frexp
ldexp
log
malloc
memcpy
memset
realloc
sqrt
strchr
strlen
vfprintf

Exports

Exports

av_add_q
av_adler32_update
av_aes_crypt
av_aes_init
av_aes_size
av_crc
av_crc04C11DB7
av_crc07
av_crc8005
av_crcEDB88320
av_crc_init
av_d2q
av_dbl2ext
av_dbl2int
av_div_q
av_evaluate_lls
av_ext2dbl
av_fifo_drain
av_fifo_free
av_fifo_generic_read
av_fifo_init
av_fifo_read
av_fifo_realloc
av_fifo_size
av_fifo_write
av_flt2int
av_free
av_freep
av_init_lls
av_init_random
av_int2dbl
av_int2flt
av_log
av_log_default_callback
av_log_get_level
av_log_level
av_log_set_callback
av_log_set_level
av_malloc
av_mallocz
av_md5_final
av_md5_init
av_md5_size
av_md5_sum
av_md5_update
av_mul_q
av_random_generate_untempered_numbers
av_realloc
av_reduce
av_rescale
av_rescale_q
av_rescale_rnd
av_solve_lls
av_strdup
av_sub_q
av_tree_destroy
av_tree_find
av_tree_insert
av_update_lls
av_vlog
ff_gcd
ff_log2_tab
ff_sqrt_tab
lzo1x_decode

Sections

.text
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 64B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1024B - Virtual size: 1008B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 8KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 1024B - Virtual size: 628B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 464B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
convert.exe
.exe windows:4 windows x86 arch:x86

b95020edd4d5be846dd80e66d98643e8

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

swscale-0

sws_freeContext
sws_getContext
sws_scale

kernel32

AddAtomA
ExitProcess
FindAtomA
GetAtomNameA
SetUnhandledExceptionFilter
Sleep

msvcrt

_getch
_kbhit
__getmainargs
__p__environ
__p__fmode
__set_app_type
_assert
_cexit
_filbuf
_iob
_onexit
_setmode
_snprintf
abort
atexit
atof
atoi
exit
fclose
fflush
fopen
fprintf
fputc
fputs
fread
free
fseek
ftell
fwrite
localtime
log
malloc
memcpy
memset
perror
printf
putchar
puts
signal
sscanf
strchr
strcmp
strcpy
strtod
strtok
strtol
time
toupper

avcodec-51

audio_resample
audio_resample_close
audio_resample_init
av_bitstream_filter_filter
av_bitstream_filter_init
av_fast_realloc
av_free_static
av_get_double
av_get_pict_type_char
av_opt_show
av_parser_change
av_resample_compensate
av_set_double
av_set_string
avcodec_alloc_context
avcodec_build
avcodec_close
avcodec_decode_audio2
avcodec_decode_subtitle
avcodec_decode_video
avcodec_encode_audio
avcodec_encode_subtitle
avcodec_encode_video
avcodec_find_decoder
avcodec_find_encoder
avcodec_get_frame_defaults
avcodec_get_pix_fmt
avcodec_open
avpicture_alloc
avpicture_deinterlace
avpicture_fill
avpicture_get_size
first_avcodec
img_copy
img_crop
img_pad
first_avcodec
first_avcodec
first_avcodec
first_avcodec
first_avcodec
first_avcodec
first_avcodec
first_avcodec
first_avcodec
first_avcodec
first_avcodec

avformat-51

av_alloc_format_context
av_close_input_file
av_destruct_packet
av_destruct_packet_nofree
av_filename_number_test
av_find_input_format
av_find_stream_info
av_gettime
av_guess_codec
av_interleaved_write_frame
av_new_stream
av_open_input_file
av_pkt_dump
av_read_frame
av_register_all
av_seek_frame
av_set_parameters
av_write_header
av_write_trailer
dump_format
ffm_nopts
first_iformat
first_oformat
first_protocol
frame_hook_add
frame_hook_process
guess_format
parse_date
parse_frame_rate
parse_image_size
pstrcat
pstrcpy
strstart
url_exist
url_fclose
url_fopen
url_ftell
url_set_interrupt_cb
first_oformat
first_iformat
first_protocol
ffm_nopts
ffm_nopts
ffm_nopts
ffm_nopts
ffm_nopts
ffm_nopts
ffm_nopts
ffm_nopts
ffm_nopts
ffm_nopts
ffm_nopts
ffm_nopts
ffm_nopts
ffm_nopts
ffm_nopts
ffm_nopts
ffm_nopts
ffm_nopts
ffm_nopts
ffm_nopts
ffm_nopts
ffm_nopts
ffm_nopts
ffm_nopts
ffm_nopts
ffm_nopts
ffm_nopts
ffm_nopts
ffm_nopts
ffm_nopts
ffm_nopts
ffm_nopts
ffm_nopts
ffm_nopts
ffm_nopts
ffm_nopts
ffm_nopts
ffm_nopts
ffm_nopts
ffm_nopts
ffm_nopts
ffm_nopts
ffm_nopts
ffm_nopts

avutil-49

av_d2q
av_fifo_free
av_fifo_init
av_fifo_read
av_fifo_size
av_fifo_write
av_free
av_freep
av_log
av_log_level
av_malloc
av_mallocz
av_realloc
av_rescale
av_rescale_q
av_strdup
av_sub_q
av_log_level
av_log_level
av_log_level
av_log_level
av_log_level
av_log_level
av_log_level
av_log_level
av_log_level
av_log_level
av_log_level
av_log_level
av_log_level
av_log_level
av_log_level
av_log_level
av_log_level
av_log_level
av_log_level
av_log_level
av_log_level
av_log_level
av_log_level
av_log_level
av_log_level
av_log_level

Sections

.text
Size: 49KB - Virtual size: 48KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 272B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ffplay.exe
.exe windows:4 windows x86 arch:x86

631479b5845a3fcf6c29727ff81ad22c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

swscale-0

sws_getContext
sws_scale

avcodec-51

avcodec_alloc_frame
avcodec_close
avcodec_decode_audio
avcodec_decode_subtitle
avcodec_decode_video
avcodec_find_decoder
avcodec_flush_buffers
avcodec_open
avcodec_thread_init

avformat-51

av_close_input_file
av_destruct_packet_nofree
av_dup_packet
av_find_input_format
av_find_stream_info
av_gettime
av_open_input_file
av_read_frame
av_read_play
av_register_all
av_seek_frame
dump_format
parse_date
pstrcat
pstrcpy
url_feof
url_ferror
url_ftell
url_set_interrupt_cb

avutil-49

av_free
av_freep
av_log_set_level
av_malloc
av_mallocz
av_strdup

sdl

SDL_AddTimer
SDL_CloseAudio
SDL_CondSignal
SDL_CondWait
SDL_CreateCond
SDL_CreateMutex
SDL_CreateThread
SDL_CreateYUVOverlay
SDL_Delay
SDL_DestroyCond
SDL_DestroyMutex
SDL_DisplayYUVOverlay
SDL_EventState
SDL_FillRect
SDL_FreeYUVOverlay
SDL_GetError
SDL_Init
SDL_LockYUVOverlay
SDL_MapRGB
SDL_OpenAudio
SDL_PauseAudio
SDL_PushEvent
SDL_Quit
SDL_SetVideoMode
SDL_UnlockYUVOverlay
SDL_UpdateRect
SDL_WM_SetCaption
SDL_WaitEvent
SDL_WaitThread
SDL_mutexP
SDL_mutexV

kernel32

ExitProcess
SetUnhandledExceptionFilter

msvcrt

__getmainargs
__p__environ
__p__fmode
__set_app_type
_cexit
_iob
_onexit
_setmode
atexit
atof
atoi
exit
exp
fflush
fprintf
fwrite
log
memcpy
printf
putchar
puts
signal
strcmp

Sections

.text
Size: 25KB - Virtual size: 25KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 80B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 640B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
flvtool2.exe
.exe windows:4 windows x86 arch:x86

c88307c66704cc2c07f72eaa902bc349

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

DeleteFileA
FreeLibrary
GetModuleFileNameA
GetLastError
LoadLibraryExA
VirtualProtect
GetProcAddress
LoadLibraryA
GetModuleHandleA
CloseHandle
ReadFile
WriteFile
GetFileSize
GetTempFileNameA
GetTempPathA
FormatMessageA
CreateFileA
SetEnvironmentVariableA
GetFileType
GetFileInformationByHandle
CreateDirectoryA
RemoveDirectoryA
SystemTimeToFileTime
LocalFileTimeToFileTime
SetFileTime
CreateThread
TerminateThread
GetExitCodeThread
VirtualFree
GetThreadPriority
SetEvent
SuspendThread
SetThreadPriority
GetThreadContext
ResetEvent
SetThreadContext
ResumeThread
InitializeCriticalSection
TlsAlloc
TlsGetValue
InterlockedIncrement
InterlockedDecrement
Sleep
TlsSetValue
GetProcessTimes
FileTimeToLocalFileTime
FileTimeToSystemTime
GetFileAttributesA
SetFileAttributesA
MoveFileA
MoveFileExA
GetEnvironmentStrings
GetCurrentProcessId
OpenProcess
TerminateProcess
GenerateConsoleCtrlEvent
GetCurrentDirectoryA
GetLocalTime
WaitForMultipleObjectsEx
CreateEventA
EnterCriticalSection
LeaveCriticalSection
GetLogicalDrives
FindFirstFileA
FindNextFileA
FindClose
GetStdHandle
CreateProcessA
WaitForSingleObject
GetExitCodeProcess
CreatePipe
FreeEnvironmentStringsA
UnlockFile
LockFile
UnlockFileEx
LockFileEx
GetCurrentProcess
GetCurrentThread
DuplicateHandle
GetVersionExA
VirtualQuery
InterlockedExchange
GetCurrentThreadId
GetCommandLineA

user32

LoadIconA
LoadCursorA
CharNextA
CharPrevA
LoadStringA

msvcrt

clock
_filbuf
_flsbuf
fflush
localtime
_vsnprintf
fseek
clearerr
ungetc
fread
ftell
_commit
freopen
_pipe
fmod
fabs
floor
ceil
_unlink
_mbspbrk
_access
frexp
time
modf
gmtime
asctime
strftime
ldexp
exp
atan
atan2
cos
sin
tan
acos
asin
cosh
sinh
tanh
log
log10
sqrt
_XcptFilter
__p___initenv
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
__dllonexit
_onexit
_controlfp
_getdrive
raise
mktime
_sys_nerr
strerror
_open_osfhandle
__doserrno
__pioinfo
calloc
bsearch
strpbrk
_exit
_close
fclose
malloc
_get_osfhandle
fopen
strstr
pow
_HUGE
_finite
strtoul
fwrite
fputs
vfprintf
abort
strcat
atoi
realloc
_ftol
strchr
strncmp
printf
longjmp
signal
_setjmp3
__p__environ
exit
tolower
toupper
memchr
memcmp
memmove
memset
sprintf
free
strncpy
_isnan
memcpy
__mb_cur_max
_isctype
_pctype
_errno
_snprintf
strncat
strlen
strcpy
??2@YAPAXI@Z
strcmp
strrchr
??3@YAXPAX@Z
fprintf
_iob
_umask
_chsize
_tzname
_dup
_dup2
_daylight
_open
_lseek
_setmode
_fstat
_chmod
_write
_read
_getpid
_strcmpi
_stat
_fileno
_strdup
_fdopen
_tzset
_chdir
_strnicmp
_stricmp
_hypot

advapi32

GetUserNameA

wsock32

getprotobyname
getprotobynumber
getservbyname
getservbyport
closesocket
recvfrom
recv
listen
inet_ntoa
gethostname
getpeername
connect
bind
accept
WSAStartup
setsockopt
getsockopt
select
WSAGetLastError
__WSAFDIsSet
WSACleanup
gethostbyname
gethostbyaddr
socket
shutdown
sendto
getsockname
send

Exports

Exports

GetCurrentThreadHandle
Init_Array
Init_Bignum
Init_Binding
Init_Comparable
Init_Dir
Init_Enumerable
Init_Exception
Init_File
Init_GC
Init_Hash
Init_IO
Init_Math
Init_Numeric
Init_Object
Init_Precision
Init_Proc
Init_Random
Init_Range
Init_Regexp
Init_String
Init_Struct
Init_Thread
Init_Time
Init_eval
Init_ext
Init_heap
Init_load
Init_marshal
Init_pack
Init_process
Init_signal
Init_stack
Init_sym
Init_syserr
Init_var_tables
Init_version
NtInitialize
NtSyncProcess
SafeFree
acosh
asinh
atanh
chown
crypt
des_cipher
des_setkey
dln_find_exe
dln_find_file
dln_load
do_aspawn
do_spawn
eaccess
encrypt
endhostent
endnetent
endprotoent
endservent
erf
erfc
exerb_main
fcntl
flock
getegid
geteuid
getgid
getlogin
getnetbyaddr
getnetbyname
getnetent
getprotoent
getservent
gettimeofday
getuid
io_fread
ioctl
is_ruby_native_thread
kill
link
pipe_exec
rb_Array
rb_Float
rb_Integer
rb_String
rb_add_event_hook
rb_add_method
rb_alias
rb_alias_variable
rb_any_to_s
rb_apply
rb_argv
rb_argv0
rb_ary_aref
rb_ary_assoc
rb_ary_clear
rb_ary_cmp
rb_ary_concat
rb_ary_delete
rb_ary_delete_at
rb_ary_dup
rb_ary_each
rb_ary_entry
rb_ary_freeze
rb_ary_includes
rb_ary_join
rb_ary_new
rb_ary_new2
rb_ary_new3
rb_ary_new4
rb_ary_plus
rb_ary_pop
rb_ary_push
rb_ary_rassoc
rb_ary_reverse
rb_ary_shift
rb_ary_sort
rb_ary_sort_bang
rb_ary_store
rb_ary_to_ary
rb_ary_to_s
rb_ary_unshift
rb_assoc_new
rb_attr
rb_attr_get
rb_autoload
rb_autoload_load
rb_autoload_p
rb_backref_get
rb_backref_set
rb_backtrace
rb_big2dbl
rb_big2ll
rb_big2long
rb_big2str
rb_big2ull
rb_big2ulong
rb_big2ulong_pack
rb_big_2comp
rb_big_and
rb_big_clone
rb_big_divmod
rb_big_lshift
rb_big_minus
rb_big_mul
rb_big_norm
rb_big_or
rb_big_plus
rb_big_pow
rb_big_rand
rb_big_xor
rb_block_given_p
rb_block_proc
rb_bug
rb_cArray
rb_cBignum
rb_cBinding
rb_cClass
rb_cCont
rb_cData
rb_cDir
rb_cFalseClass
rb_cFile
rb_cFixnum
rb_cFloat
rb_cHash
rb_cIO
rb_cInteger
rb_cMatch
rb_cMethod
rb_cModule
rb_cNameErrorMesg
rb_cNilClass
rb_cNumeric
rb_cObject
rb_cProc
rb_cRange
rb_cRegexp
rb_cStat
rb_cString
rb_cStruct
rb_cSymbol
rb_cThread
rb_cTime
rb_cTrueClass
rb_cUnboundMethod
rb_call_inits
rb_call_super
rb_catch
rb_check_array_type
rb_check_convert_type
rb_check_frozen
rb_check_inheritable
rb_check_safe_obj
rb_check_safe_str
rb_check_string_type
rb_check_type
rb_class2name
rb_class_boot
rb_class_inherited
rb_class_inherited_p
rb_class_init_copy
rb_class_instance_methods
rb_class_name
rb_class_new
rb_class_new_instance
rb_class_path
rb_class_private_instance_methods
rb_class_protected_instance_methods
rb_class_public_instance_methods
rb_class_real
rb_class_tbl
rb_clear_cache
rb_clear_cache_by_class
rb_cmperr
rb_cmpint
rb_compile_cstr
rb_compile_error
rb_compile_error_append
rb_compile_file
rb_compile_string
rb_const_defined
rb_const_defined_at
rb_const_defined_from
rb_const_get
rb_const_get_at
rb_const_get_from
rb_const_list
rb_const_set
rb_convert_type
rb_copy_generic_ivar
rb_cstr2inum
rb_cstr_to_dbl
rb_cstr_to_inum
rb_cv_get
rb_cv_set
rb_cvar_defined
rb_cvar_get
rb_cvar_set
rb_data_object_alloc
rb_dbl2big
rb_dbl_cmp
rb_default_rs
rb_deferr
rb_define_alias
rb_define_alloc_func
rb_define_attr
rb_define_class
rb_define_class_id
rb_define_class_under
rb_define_class_variable
rb_define_const
rb_define_global_const
rb_define_global_function
rb_define_hooked_variable
rb_define_method
rb_define_method_id
rb_define_module
rb_define_module_function
rb_define_module_id
rb_define_module_under
rb_define_private_method
rb_define_protected_method
rb_define_readonly_variable
rb_define_singleton_method
rb_define_variable
rb_define_virtual_variable
rb_detach_process
rb_disable_super
rb_dvar_curr
rb_dvar_defined
rb_dvar_push
rb_dvar_ref
rb_eArgError
rb_eEOFError
rb_eException
rb_eExerbRuntimeError
rb_eFatal
rb_eFloatDomainError
rb_eIOError
rb_eIndexError
rb_eInterrupt
rb_eLoadError
rb_eLocalJumpError
rb_eNameError
rb_eNoMemError
rb_eNoMethodError
rb_eNotImpError
rb_eRangeError
rb_eRegexpError
rb_eRuntimeError
rb_eScriptError
rb_eSecurityError
rb_eSignal
rb_eStandardError
rb_eSyntaxError
rb_eSysStackError
rb_eSystemCallError
rb_eSystemExit
rb_eTypeError
rb_eZeroDivError
rb_each
rb_enable_super
rb_ensure
rb_env_path_tainted
rb_eof_error
rb_eql
rb_equal
rb_error_frozen
rb_eval_cmd
rb_eval_string
rb_eval_string_protect
rb_eval_string_wrap
rb_exc_fatal
rb_exc_new
rb_exc_new2
rb_exc_new3
rb_exc_raise
rb_exec_end_proc
rb_exit
rb_extend_object
rb_f_abort
rb_f_exec
rb_f_exit
rb_f_global_variables
rb_f_kill
rb_f_lambda
rb_f_require
rb_f_sprintf
rb_f_trace_var
rb_f_untrace_var
rb_fatal
rb_fdopen
rb_file_const
rb_file_expand_path
rb_file_open
rb_file_s_expand_path
rb_file_sysopen
rb_find_file
rb_find_file_ext
rb_fix2int
rb_fix2str
rb_float_new
rb_fopen
rb_frame_last_func
rb_free_generic_ivar
rb_frozen_class_p
rb_fs
rb_funcall
rb_funcall2
rb_funcall3
rb_funcall_rescue
rb_gc
rb_gc_abort_threads
rb_gc_call_finalizer_at_exit
rb_gc_copy_finalizer
rb_gc_disable
rb_gc_enable
rb_gc_finalize_deferred
rb_gc_force_recycle
rb_gc_mark
rb_gc_mark_frame
rb_gc_mark_global_tbl
rb_gc_mark_locations
rb_gc_mark_maybe
rb_gc_mark_parser
rb_gc_mark_threads
rb_gc_mark_trap_list
rb_gc_register_address
rb_gc_stack_start
rb_gc_start
rb_gc_unregister_address
rb_generic_ivar_table
rb_get_kcode
rb_getc
rb_gets
rb_glob
rb_global_entry
rb_global_tbl
rb_global_variable
rb_globi
rb_gv_get
rb_gv_set
rb_gvar_defined
rb_gvar_get
rb_gvar_set
rb_hash
rb_hash_aref
rb_hash_aset
rb_hash_delete
rb_hash_delete_if
rb_hash_foreach
rb_hash_freeze
rb_hash_new
rb_hash_reject_bang
rb_hash_select
rb_hash_values_at
rb_id2name
rb_id_attrset
rb_include_module
rb_inspect
rb_inspecting_p
rb_int2big
rb_int2inum
rb_intern
rb_interrupt
rb_invalid_str
rb_io_addstr
rb_io_binmode
rb_io_check_closed
rb_io_check_initialized
rb_io_check_readable
rb_io_check_writable
rb_io_close
rb_io_eof
rb_io_flags_mode
rb_io_fptr_finalize
rb_io_fread
rb_io_fwrite
rb_io_getc
rb_io_gets
rb_io_mode_flags
rb_io_modenum_flags
rb_io_print
rb_io_printf
rb_io_puts
rb_io_set_nonblock
rb_io_synchronized
rb_io_taint_check
rb_io_unbuffered
rb_io_ungetc
rb_io_wait_readable
rb_io_wait_writable
rb_io_write
rb_is_class_id
rb_is_const_id
rb_is_instance_id
rb_is_junk_id
rb_is_local_id
rb_iter_break
rb_iterate
rb_iterator_p
rb_iv_get
rb_iv_set
rb_ivar_defined
rb_ivar_get
rb_ivar_set
rb_jump_tag
rb_kcode
rb_last_status
rb_lastline_get
rb_lastline_set
rb_ll2big
rb_ll2inum
rb_load
rb_load_fail
rb_load_file
rb_load_path
rb_load_protect
rb_loaderror
rb_mComparable
rb_mEnumerable
rb_mErrno
rb_mExerbRuntime
rb_mFConst
rb_mFileTest
rb_mGC
rb_mKernel
rb_mMath
rb_mPrecision
rb_mProcGID
rb_mProcID_Syscall
rb_mProcUID
rb_mProcess
rb_make_metaclass
rb_mark_end_proc
rb_mark_generic_ivar
rb_mark_generic_ivar_tbl
rb_mark_hash
rb_mark_tbl
rb_marshal_dump
rb_marshal_load
rb_match_busy
rb_mem_clear
rb_memcicmp
rb_memcmp
rb_memerror
rb_memsearch
rb_method_boundp
rb_method_node
rb_mod_ancestors
rb_mod_class_variables
rb_mod_const_at
rb_mod_const_missing
rb_mod_const_of
rb_mod_constants
rb_mod_include_p
rb_mod_included_modules
rb_mod_init_copy
rb_mod_module_eval
rb_mod_name

Sections

.text
Size: 380KB - Virtual size: 376KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 80KB - Virtual size: 79KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 44KB - Virtual size: 118KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 68KB - Virtual size: 64KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
gdiplus.dll
.dll windows:5 windows x86 arch:x86

7941976a82dd7ff8b1a2ea069878fab3

Code Sign

4a:19:d2:38:8c:82:59:1c:a5:5d:73:5f:15:5d:dc:a3
Certificate

Issuer

OU=VeriSign\, Inc.+OU=VeriSign Time Stamping Service Root+OU=NO LIABILITY ACCEPTED\, (c)97 VeriSign\, Inc.,O=VeriSign Trust Network

Not Before

12/05/1997, 00:00

Not After

07/01/2004, 23:59

Subject

OU=VeriSign\, Inc.+OU=VeriSign Time Stamping Service Root+OU=NO LIABILITY ACCEPTED\, (c)97 VeriSign\, Inc.,O=VeriSign Trust Network

08:7a:6d:5c:6f:62:93:4f:ba:c4:fd:43:e1:14:18:9d
Certificate

Issuer

OU=VeriSign\, Inc.+OU=VeriSign Time Stamping Service Root+OU=NO LIABILITY ACCEPTED\, (c)97 VeriSign\, Inc.,O=VeriSign Trust Network

Not Before

28/02/2001, 00:00

Not After

06/01/2004, 23:59

Subject

CN=VeriSign Time Stamping Service,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)01,O=VeriSign\, Inc.

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

c1:00:8b:3c:3c:88:11:d1:3e:f6:63:ec:df:40
Certificate

Issuer

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

Not Before

10/01/1997, 07:00

Not After

31/12/2020, 07:00

Subject

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

61:06:2a:8d:00:00:00:00:00:0b
Certificate

Issuer

CN=Microsoft Code Signing PCA,OU=Copyright (c) 2000 Microsoft Corp.,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

29/03/2001, 21:27

Not After

29/05/2002, 21:37

Subject

CN=Microsoft Corporation,OU=Copyright (c) 2001 Microsoft Corp.,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

6a:0b:99:4f:c0:00:de:aa:11:d4:d8:40:9a:a8:be:e6
Certificate

Issuer

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

Not Before

10/12/2000, 08:00

Not After

12/11/2005, 08:00

Subject

CN=Microsoft Code Signing PCA,OU=Copyright (c) 2000 Microsoft Corp.,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageContentCommitment
KeyUsageCertSign
KeyUsageCRLSign

Signer

Actual PE Digest

Digest Algorithm

PE Digest Matches

false

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetOEMCP
InterlockedDecrement
EnterCriticalSection
LeaveCriticalSection
HeapAlloc
InterlockedExchange
GetCurrentThreadId
InitializeCriticalSection
DeleteCriticalSection
DisableThreadLibraryCalls
RaiseException
Sleep
CloseHandle
WriteFile
CreateFileA
WaitForSingleObject
SetEvent
lstrcmpiA
CreateThread
CreateEventA
WideCharToMultiByte
MultiByteToWideChar
GetTickCount
GetSystemDefaultLCID
GetProcAddress
GetModuleHandleW
GetACP
GetVersionExA
VirtualQuery
VirtualProtect
GetLocaleInfoA
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
RtlUnwind
GetCPInfo
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetStartupInfoA
GetFileType
GetStdHandle
SetHandleCount
ExitProcess
GetCommandLineA
GetSystemInfo
HeapReAlloc
HeapFree
VirtualAlloc
IsValidLocale
ConvertDefaultLocale
GetLocaleInfoW
GetModuleFileNameW
GetModuleFileNameA
FindResourceA
LoadResource
LockResource
GetProfileIntA
GetProfileStringA
lstrcmpiW
IsDBCSLeadByteEx
LocalReAlloc
MulDiv
SetLastError
LocalAlloc
LocalFree
GetFileTime
SearchPathW
SearchPathA
InterlockedIncrement
CreateSemaphoreA
lstrcpyW
lstrcatW
LoadLibraryW
lstrcpyA
lstrcatA
GetSystemDirectoryA
CreateFileMappingW
ReleaseSemaphore
GetProfileSectionA
CreateFileW
SetEndOfFile
SetFilePointer
ReadFile
UnlockFile
GetFileInformationByHandle
LockFile
FlushFileBuffers
GetLastError
VirtualFree
GlobalAlloc
GetFileSize
CreateFileMappingA
MapViewOfFile
UnmapViewOfFile
GlobalLock
GlobalSize
GlobalUnlock
GlobalFree
HeapCreate
GetModuleHandleA
GetSystemDirectoryW
GetWindowsDirectoryA
FreeLibrary
HeapDestroy
LoadLibraryA

user32

ReleaseDC
LoadBitmapW
LoadBitmapA
wsprintfW
SystemParametersInfoA
GetDC
wsprintfA
GetSysColor
UnregisterClassA
DestroyWindow
GetSystemMetrics
DefWindowProcA
CreateWindowExA
RegisterClassA
DispatchMessageA
TranslateMessage
MsgWaitForMultipleObjects
PeekMessageA
GetClientRect
GetDesktopWindow
GetWindowRect
WindowFromDC
CreateIconIndirect
GetIconInfo
ClientToScreen
wvsprintfA
GetDCEx
GetWindowLongA
GetClassLongA

gdi32

GetNearestPaletteIndex
GetDIBColorTable
FillRgn
SetMiterLimit
CreateSolidBrush
StrokePath
GetGraphicsMode
SetPolyFillMode
FillPath
StrokeAndFillPath
GetViewportExtEx
ExtTextOutA
GetTextCharsetInfo
TranslateCharsetInfo
PolylineTo
Polyline
LineTo
GetCurrentPositionEx
ArcTo
SetArcDirection
SelectClipPath
GetPath
CloseFigure
AbortPath
FlattenPath
WidenPath
BeginPath
Ellipse
AngleArc
PolyBezierTo
PolyBezier
RoundRect
PolyDraw
Pie
Chord
Arc
EndPath
OffsetClipRgn
GetRgnBox
CombineRgn
SetPaletteEntries
ResizePalette
ExcludeClipRect
MoveToEx
PlayEnhMetaFile
GetWinMetaFileBits
PlgBlt
BitBlt
OffsetViewportOrgEx
StretchBlt
ScaleViewportExtEx
ScaleWindowExtEx
CombineTransform
SetMapperFlags
CreatePen
CreateDIBitmap
CreatePatternBrush
ExtSelectClipRgn
GetBkMode
GetTextAlign
ModifyWorldTransform
ExtCreateRegion
CreateCompatibleBitmap
GetNearestColor
SetStretchBltMode
StretchDIBits
SetTextAlign
SetTextJustification
PolyPolygon
PlayMetaFileRecord
ExtCreatePen
GetWorldTransform
GetROP2
SetROP2
Rectangle
Polygon
IntersectClipRect
SetBrushOrgEx
GetClipRgn
SelectClipRgn
GetBkColor
GetTextColor
CreatePenIndirect
GetObjectW
DPtoLP
CreateDIBPatternBrushPt
ExtTextOutW
SetBitmapBits
CreateEnhMetaFileW
GdiComment
GetMetaFileW
GetMetaFileA
SaveDC
SetWindowOrgEx
SetViewportOrgEx
SetGraphicsMode
SetWorldTransform
GetEnhMetaFileW
GetEnhMetaFileA
GetEnhMetaFileBits
CopyEnhMetaFileA
CopyMetaFileA
DeleteMetaFile
GetEnhMetaFileHeader
SetMetaFileBitsEx
SetEnhMetaFileBits
CreateEnhMetaFileA
SetMapMode
SetViewportExtEx
SetWindowExtEx
PlayMetaFile
CloseEnhMetaFile
DeleteEnhMetaFile
SetMetaRgn
GetMetaFileBitsEx
EnumMetaFile
EnumEnhMetaFile
PlayEnhMetaFileRecord
RestoreDC
GetStockObject
CreateBitmap
SetTextColor
SetBkColor
SetBkMode
SetDIBits
CreatePalette
GetSystemPaletteEntries
GetSystemPaletteUse
GetDeviceCaps
ExtEscape
GetObjectType
GetPixel
SetDIBColorTable
DeleteObject
SelectPalette
GetTextFaceA
GetTextMetricsA
GetTextFaceW
GetTextMetricsW
EnumFontFamiliesExA
EnumFontFamiliesExW
SelectObject
CreateFontIndirectW
CreateFontIndirectA
GetRegionData
DeleteDC
CreateDCA
CreateICA
CreateRectRgn
GetRandomRgn
LPtoDP
GetWindowExtEx
PolyPolyline
GetWindowOrgEx
GetViewportOrgEx
GetMapMode
SetICMMode
Escape
GetDCOrgEx
GetObjectA
GetCurrentObject
GetDIBits
CreateCompatibleDC
CreateDIBSection
RealizePalette
GetPaletteEntries
GdiFlush
PatBlt
CreateBrushIndirect

ole32

CoTaskMemAlloc
CoTaskMemFree
CreateStreamOnHGlobal

advapi32

RegSetValueExA
RegCloseKey
RegEnumValueW
RegQueryInfoKeyA
RegOpenKeyExA
RegOpenKeyExW
RegQueryInfoKeyW
RegQueryValueExA
RegEnumKeyExA
RegEnumKeyExW
RegCreateKeyExA
RegQueryValueExW
RegSetValueExW
RegEnumValueA
RegDeleteKeyW
RegDeleteKeyA
RegCreateKeyExW

Exports

Exports

GdipAddPathArc
GdipAddPathArcI
GdipAddPathBezier
GdipAddPathBezierI
GdipAddPathBeziers
GdipAddPathBeziersI
GdipAddPathClosedCurve
GdipAddPathClosedCurve2
GdipAddPathClosedCurve2I
GdipAddPathClosedCurveI
GdipAddPathCurve
GdipAddPathCurve2
GdipAddPathCurve2I
GdipAddPathCurve3
GdipAddPathCurve3I
GdipAddPathCurveI
GdipAddPathEllipse
GdipAddPathEllipseI
GdipAddPathLine
GdipAddPathLine2
GdipAddPathLine2I
GdipAddPathLineI
GdipAddPathPath
GdipAddPathPie
GdipAddPathPieI
GdipAddPathPolygon
GdipAddPathPolygonI
GdipAddPathRectangle
GdipAddPathRectangleI
GdipAddPathRectangles
GdipAddPathRectanglesI
GdipAddPathString
GdipAddPathStringI
GdipAlloc
GdipBeginContainer
GdipBeginContainer2
GdipBeginContainerI
GdipBitmapGetPixel
GdipBitmapLockBits
GdipBitmapSetPixel
GdipBitmapSetResolution
GdipBitmapUnlockBits
GdipClearPathMarkers
GdipCloneBitmapArea
GdipCloneBitmapAreaI
GdipCloneBrush
GdipCloneCustomLineCap
GdipCloneFont
GdipCloneFontFamily
GdipCloneImage
GdipCloneImageAttributes
GdipCloneMatrix
GdipClonePath
GdipClonePen
GdipCloneRegion
GdipCloneStringFormat
GdipClosePathFigure
GdipClosePathFigures
GdipCombineRegionPath
GdipCombineRegionRect
GdipCombineRegionRectI
GdipCombineRegionRegion
GdipComment
GdipCreateAdjustableArrowCap
GdipCreateBitmapFromDirectDrawSurface
GdipCreateBitmapFromFile
GdipCreateBitmapFromFileICM
GdipCreateBitmapFromGdiDib
GdipCreateBitmapFromGraphics
GdipCreateBitmapFromHBITMAP
GdipCreateBitmapFromHICON
GdipCreateBitmapFromResource
GdipCreateBitmapFromScan0
GdipCreateBitmapFromStream
GdipCreateBitmapFromStreamICM
GdipCreateCachedBitmap
GdipCreateCustomLineCap
GdipCreateFont
GdipCreateFontFamilyFromName
GdipCreateFontFromDC
GdipCreateFontFromLogfontA
GdipCreateFontFromLogfontW
GdipCreateFromHDC
GdipCreateFromHDC2
GdipCreateFromHWND
GdipCreateFromHWNDICM
GdipCreateHBITMAPFromBitmap
GdipCreateHICONFromBitmap
GdipCreateHalftonePalette
GdipCreateHatchBrush
GdipCreateImageAttributes
GdipCreateLineBrush
GdipCreateLineBrushFromRect
GdipCreateLineBrushFromRectI
GdipCreateLineBrushFromRectWithAngle
GdipCreateLineBrushFromRectWithAngleI
GdipCreateLineBrushI
GdipCreateMatrix
GdipCreateMatrix2
GdipCreateMatrix3
GdipCreateMatrix3I
GdipCreateMetafileFromEmf
GdipCreateMetafileFromFile
GdipCreateMetafileFromStream
GdipCreateMetafileFromWmf
GdipCreateMetafileFromWmfFile
GdipCreatePath
GdipCreatePath2
GdipCreatePath2I
GdipCreatePathGradient
GdipCreatePathGradientFromPath
GdipCreatePathGradientI
GdipCreatePathIter
GdipCreatePen1
GdipCreatePen2
GdipCreateRegion
GdipCreateRegionHrgn
GdipCreateRegionPath
GdipCreateRegionRect
GdipCreateRegionRectI
GdipCreateRegionRgnData
GdipCreateSolidFill
GdipCreateStreamOnFile
GdipCreateStringFormat
GdipCreateTexture
GdipCreateTexture2
GdipCreateTexture2I
GdipCreateTextureIA
GdipCreateTextureIAI
GdipDeleteBrush
GdipDeleteCachedBitmap
GdipDeleteCustomLineCap
GdipDeleteFont
GdipDeleteFontFamily
GdipDeleteGraphics
GdipDeleteMatrix
GdipDeletePath
GdipDeletePathIter
GdipDeletePen
GdipDeletePrivateFontCollection
GdipDeleteRegion
GdipDeleteStringFormat
GdipDisposeImage
GdipDisposeImageAttributes
GdipDrawArc
GdipDrawArcI
GdipDrawBezier
GdipDrawBezierI
GdipDrawBeziers
GdipDrawBeziersI
GdipDrawCachedBitmap
GdipDrawClosedCurve
GdipDrawClosedCurve2
GdipDrawClosedCurve2I
GdipDrawClosedCurveI
GdipDrawCurve
GdipDrawCurve2
GdipDrawCurve2I
GdipDrawCurve3
GdipDrawCurve3I
GdipDrawCurveI
GdipDrawDriverString
GdipDrawEllipse
GdipDrawEllipseI
GdipDrawImage
GdipDrawImageI
GdipDrawImagePointRect
GdipDrawImagePointRectI
GdipDrawImagePoints
GdipDrawImagePointsI
GdipDrawImagePointsRect
GdipDrawImagePointsRectI
GdipDrawImageRect
GdipDrawImageRectI
GdipDrawImageRectRect
GdipDrawImageRectRectI
GdipDrawLine
GdipDrawLineI
GdipDrawLines
GdipDrawLinesI
GdipDrawPath
GdipDrawPie
GdipDrawPieI
GdipDrawPolygon
GdipDrawPolygonI
GdipDrawRectangle
GdipDrawRectangleI
GdipDrawRectangles
GdipDrawRectanglesI
GdipDrawString
GdipEmfToWmfBits
GdipEndContainer
GdipEnumerateMetafileDestPoint
GdipEnumerateMetafileDestPointI
GdipEnumerateMetafileDestPoints
GdipEnumerateMetafileDestPointsI
GdipEnumerateMetafileDestRect
GdipEnumerateMetafileDestRectI
GdipEnumerateMetafileSrcRectDestPoint
GdipEnumerateMetafileSrcRectDestPointI
GdipEnumerateMetafileSrcRectDestPoints
GdipEnumerateMetafileSrcRectDestPointsI
GdipEnumerateMetafileSrcRectDestRect
GdipEnumerateMetafileSrcRectDestRectI
GdipFillClosedCurve
GdipFillClosedCurve2
GdipFillClosedCurve2I
GdipFillClosedCurveI
GdipFillEllipse
GdipFillEllipseI
GdipFillPath
GdipFillPie
GdipFillPieI
GdipFillPolygon
GdipFillPolygon2
GdipFillPolygon2I
GdipFillPolygonI
GdipFillRectangle
GdipFillRectangleI
GdipFillRectangles
GdipFillRectanglesI
GdipFillRegion
GdipFlattenPath
GdipFlush
GdipFree
GdipGetAdjustableArrowCapFillState
GdipGetAdjustableArrowCapHeight
GdipGetAdjustableArrowCapMiddleInset
GdipGetAdjustableArrowCapWidth
GdipGetAllPropertyItems
GdipGetBrushType
GdipGetCellAscent
GdipGetCellDescent
GdipGetClip
GdipGetClipBounds
GdipGetClipBoundsI
GdipGetCompositingMode
GdipGetCompositingQuality
GdipGetCustomLineCapBaseCap
GdipGetCustomLineCapBaseInset
GdipGetCustomLineCapStrokeCaps
GdipGetCustomLineCapStrokeJoin
GdipGetCustomLineCapType
GdipGetCustomLineCapWidthScale
GdipGetDC
GdipGetDpiX
GdipGetDpiY
GdipGetEmHeight
GdipGetEncoderParameterList
GdipGetEncoderParameterListSize
GdipGetFamily
GdipGetFamilyName
GdipGetFontCollectionFamilyCount
GdipGetFontCollectionFamilyList
GdipGetFontHeight
GdipGetFontHeightGivenDPI
GdipGetFontSize
GdipGetFontStyle
GdipGetFontUnit
GdipGetGenericFontFamilyMonospace
GdipGetGenericFontFamilySansSerif
GdipGetGenericFontFamilySerif
GdipGetHatchBackgroundColor
GdipGetHatchForegroundColor
GdipGetHatchStyle
GdipGetHemfFromMetafile
GdipGetImageAttributesAdjustedPalette
GdipGetImageBounds
GdipGetImageDecoders
GdipGetImageDecodersSize
GdipGetImageDimension
GdipGetImageEncoders
GdipGetImageEncodersSize
GdipGetImageFlags
GdipGetImageGraphicsContext
GdipGetImageHeight
GdipGetImageHorizontalResolution
GdipGetImagePalette
GdipGetImagePaletteSize
GdipGetImagePixelFormat
GdipGetImageRawFormat
GdipGetImageThumbnail
GdipGetImageType
GdipGetImageVerticalResolution
GdipGetImageWidth
GdipGetInterpolationMode
GdipGetLineBlend
GdipGetLineBlendCount
GdipGetLineColors
GdipGetLineGammaCorrection
GdipGetLinePresetBlend
GdipGetLinePresetBlendCount
GdipGetLineRect
GdipGetLineRectI
GdipGetLineSpacing
GdipGetLineTransform
GdipGetLineWrapMode
GdipGetLogFontA
GdipGetLogFontW
GdipGetMatrixElements
GdipGetMetafileDownLevelRasterizationLimit
GdipGetMetafileHeaderFromEmf
GdipGetMetafileHeaderFromFile
GdipGetMetafileHeaderFromMetafile
GdipGetMetafileHeaderFromStream
GdipGetMetafileHeaderFromWmf
GdipGetNearestColor
GdipGetPageScale
GdipGetPageUnit
GdipGetPathData
GdipGetPathFillMode
GdipGetPathGradientBlend
GdipGetPathGradientBlendCount
GdipGetPathGradientCenterColor
GdipGetPathGradientCenterPoint
GdipGetPathGradientCenterPointI
GdipGetPathGradientFocusScales
GdipGetPathGradientGammaCorrection
GdipGetPathGradientPath
GdipGetPathGradientPointCount
GdipGetPathGradientPresetBlend
GdipGetPathGradientPresetBlendCount
GdipGetPathGradientRect
GdipGetPathGradientRectI
GdipGetPathGradientSurroundColorCount
GdipGetPathGradientSurroundColorsWithCount
GdipGetPathGradientTransform
GdipGetPathGradientWrapMode
GdipGetPathLastPoint
GdipGetPathPoints
GdipGetPathPointsI
GdipGetPathTypes
GdipGetPathWorldBounds
GdipGetPathWorldBoundsI
GdipGetPenBrushFill
GdipGetPenColor
GdipGetPenCompoundArray
GdipGetPenCompoundCount
GdipGetPenCustomEndCap
GdipGetPenCustomStartCap
GdipGetPenDashArray
GdipGetPenDashCap197819
GdipGetPenDashCount
GdipGetPenDashOffset
GdipGetPenDashStyle
GdipGetPenEndCap
GdipGetPenFillType
GdipGetPenLineJoin
GdipGetPenMiterLimit
GdipGetPenMode
GdipGetPenStartCap
GdipGetPenTransform
GdipGetPenUnit
GdipGetPenWidth
GdipGetPixelOffsetMode
GdipGetPointCount
GdipGetPropertyCount
GdipGetPropertyIdList
GdipGetPropertyItem
GdipGetPropertyItemSize
GdipGetPropertySize
GdipGetRegionBounds
GdipGetRegionBoundsI
GdipGetRegionData
GdipGetRegionDataSize
GdipGetRegionHRgn
GdipGetRegionScans
GdipGetRegionScansCount
GdipGetRegionScansI
GdipGetRenderingOrigin
GdipGetSmoothingMode
GdipGetSolidFillColor
GdipGetStringFormatAlign
GdipGetStringFormatDigitSubstitution
GdipGetStringFormatFlags
GdipGetStringFormatHotkeyPrefix
GdipGetStringFormatLineAlign
GdipGetStringFormatMeasurableCharacterRangeCount
GdipGetStringFormatTabStopCount
GdipGetStringFormatTabStops
GdipGetStringFormatTrimming
GdipGetTextContrast
GdipGetTextRenderingHint
GdipGetTextureImage
GdipGetTextureTransform
GdipGetTextureWrapMode
GdipGetVisibleClipBounds
GdipGetVisibleClipBoundsI
GdipGetWorldTransform
GdipGraphicsClear
GdipImageForceValidation
GdipImageGetFrameCount
GdipImageGetFrameDimensionsCount
GdipImageGetFrameDimensionsList
GdipImageRotateFlip
GdipImageSelectActiveFrame
GdipInvertMatrix
GdipIsClipEmpty
GdipIsEmptyRegion
GdipIsEqualRegion
GdipIsInfiniteRegion
GdipIsMatrixEqual
GdipIsMatrixIdentity
GdipIsMatrixInvertible
GdipIsOutlineVisiblePathPoint
GdipIsOutlineVisiblePathPointI
GdipIsStyleAvailable
GdipIsVisibleClipEmpty
GdipIsVisiblePathPoint
GdipIsVisiblePathPointI
GdipIsVisiblePoint
GdipIsVisiblePointI
GdipIsVisibleRect
GdipIsVisibleRectI
GdipIsVisibleRegionPoint
GdipIsVisibleRegionPointI
GdipIsVisibleRegionRect
GdipIsVisibleRegionRectI
GdipLoadImageFromFile
GdipLoadImageFromFileICM
GdipLoadImageFromStream
GdipLoadImageFromStreamICM
GdipMeasureCharacterRanges
GdipMeasureDriverString
GdipMeasureString
GdipMultiplyLineTransform
GdipMultiplyMatrix
GdipMultiplyPathGradientTransform
GdipMultiplyPenTransform
GdipMultiplyTextureTransform
GdipMultiplyWorldTransform
GdipNewInstalledFontCollection
GdipNewPrivateFontCollection
GdipPathIterCopyData
GdipPathIterEnumerate
GdipPathIterGetCount
GdipPathIterGetSubpathCount
GdipPathIterHasCurve
GdipPathIterIsValid
GdipPathIterNextMarker
GdipPathIterNextMarkerPath
GdipPathIterNextPathType
GdipPathIterNextSubpath
GdipPathIterNextSubpathPath
GdipPathIterRewind
GdipPlayMetafileRecord
GdipPrivateAddFontFile
GdipPrivateAddMemoryFont
GdipRecordMetafile
GdipRecordMetafileFileName
GdipRecordMetafileFileNameI
GdipRecordMetafileI
GdipRecordMetafileStream
GdipRecordMetafileStreamI
GdipReleaseDC
GdipRemovePropertyItem
GdipResetClip
GdipResetImageAttributes
GdipResetLineTransform
GdipResetPageTransform
GdipResetPath
GdipResetPathGradientTransform
GdipResetPenTransform
GdipResetTextureTransform
GdipResetWorldTransform
GdipRestoreGraphics
GdipReversePath
GdipRotateLineTransform
GdipRotateMatrix
GdipRotatePathGradientTransform
GdipRotatePenTransform
GdipRotateTextureTransform
GdipRotateWorldTransform
GdipSaveAdd
GdipSaveAddImage
GdipSaveGraphics
GdipSaveImageToFile
GdipSaveImageToStream
GdipScaleLineTransform
GdipScaleMatrix
GdipScalePathGradientTransform
GdipScalePenTransform
GdipScaleTextureTransform
GdipScaleWorldTransform
GdipSetAdjustableArrowCapFillState
GdipSetAdjustableArrowCapHeight
GdipSetAdjustableArrowCapMiddleInset
GdipSetAdjustableArrowCapWidth
GdipSetClipGraphics
GdipSetClipHrgn
GdipSetClipPath
GdipSetClipRect
GdipSetClipRectI
GdipSetClipRegion
GdipSetCompositingMode
GdipSetCompositingQuality
GdipSetCustomLineCapBaseCap
GdipSetCustomLineCapBaseInset
GdipSetCustomLineCapStrokeCaps
GdipSetCustomLineCapStrokeJoin

Sections

.text
Size: 1.5MB - Virtual size: 1.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 40KB - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Shared
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 72KB - Virtual size: 70KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 32KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
logo.jpg
.jpg
postproc-51.dll
.dll windows:4 windows x86 arch:x86

e1095bf4953040cf592c641d18c083a4

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Imports

kernel32

AddAtomA
FindAtomA
GetAtomNameA

msvcrt

__dllonexit
_assert
_errno
abort
fflush
free
malloc
memcpy
memmove
memset
strcmp
strlen
strncpy
strtok
strtol

avutil-49

av_free
av_log
av_malloc
av_mallocz

Exports

Exports

pp_free_context
pp_free_mode
pp_get_context
pp_get_mode_by_name_and_quality
pp_help
pp_postprocess

Sections

.text
Size: 24KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 624B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 992B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 215B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 1024B - Virtual size: 704B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 476B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
pthreadGC2.dll
.dll windows:4 windows x86 arch:x86

b534dc0ca0a3786d3093d30e4a577324

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

CloseHandle
CreateEventA
CreateSemaphoreA
DeleteCriticalSection
DuplicateHandle
EnterCriticalSection
FreeLibrary
GetCurrentProcess
GetCurrentProcessId
GetCurrentThread
GetCurrentThreadId
GetLastError
GetProcAddress
GetProcessAffinityMask
GetThreadContext
GetThreadPriority
InitializeCriticalSection
InterlockedDecrement
InterlockedExchange
InterlockedExchangeAdd
LeaveCriticalSection
LoadLibraryA
OpenProcess
ReleaseSemaphore
ResetEvent
ResumeThread
SetEvent
SetLastError
SetThreadContext
SetThreadPriority
Sleep
SuspendThread
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
WaitForMultipleObjects
WaitForSingleObject

msvcrt

__dllonexit
_beginthreadex
_endthreadex
_errno
_ftime
_setjmp
calloc
exit
fflush
free
longjmp
malloc
memcpy
memset

wsock32

WSAGetLastError
WSASetLastError

Exports

Exports

pthreadCancelableTimedWait
pthreadCancelableWait
pthread_attr_destroy
pthread_attr_getdetachstate
pthread_attr_getinheritsched
pthread_attr_getschedparam
pthread_attr_getschedpolicy
pthread_attr_getscope
pthread_attr_getstackaddr
pthread_attr_getstacksize
pthread_attr_init
pthread_attr_setdetachstate
pthread_attr_setinheritsched
pthread_attr_setschedparam
pthread_attr_setschedpolicy
pthread_attr_setscope
pthread_attr_setstackaddr
pthread_attr_setstacksize
pthread_barrier_destroy
pthread_barrier_init
pthread_barrier_wait
pthread_barrierattr_destroy
pthread_barrierattr_getpshared
pthread_barrierattr_init
pthread_barrierattr_setpshared
pthread_cancel
pthread_cond_broadcast
pthread_cond_destroy
pthread_cond_init
pthread_cond_signal
pthread_cond_timedwait
pthread_cond_wait
pthread_condattr_destroy
pthread_condattr_getpshared
pthread_condattr_init
pthread_condattr_setpshared
pthread_create
pthread_delay_np
pthread_detach
pthread_equal
pthread_exit
pthread_getconcurrency
pthread_getschedparam
pthread_getspecific
pthread_getw32threadhandle_np
pthread_join
pthread_key_create
pthread_key_delete
pthread_kill
pthread_mutex_destroy
pthread_mutex_init
pthread_mutex_lock
pthread_mutex_timedlock
pthread_mutex_trylock
pthread_mutex_unlock
pthread_mutexattr_destroy
pthread_mutexattr_getkind_np
pthread_mutexattr_getpshared
pthread_mutexattr_gettype
pthread_mutexattr_init
pthread_mutexattr_setkind_np
pthread_mutexattr_setpshared
pthread_mutexattr_settype
pthread_num_processors_np
pthread_once
pthread_rwlock_destroy
pthread_rwlock_init
pthread_rwlock_rdlock
pthread_rwlock_timedrdlock
pthread_rwlock_timedwrlock
pthread_rwlock_tryrdlock
pthread_rwlock_trywrlock
pthread_rwlock_unlock
pthread_rwlock_wrlock
pthread_rwlockattr_destroy
pthread_rwlockattr_getpshared
pthread_rwlockattr_init
pthread_rwlockattr_setpshared
pthread_self
pthread_setcancelstate
pthread_setcanceltype
pthread_setconcurrency
pthread_setschedparam
pthread_setspecific
pthread_spin_destroy
pthread_spin_init
pthread_spin_lock
pthread_spin_trylock
pthread_spin_unlock
pthread_testcancel
pthread_timechange_handler_np
pthread_win32_process_attach_np
pthread_win32_process_detach_np
pthread_win32_test_features_np
pthread_win32_thread_attach_np
pthread_win32_thread_detach_np
ptw32_get_exception_services_code
ptw32_pop_cleanup
ptw32_push_cleanup
sched_get_priority_max
sched_get_priority_min
sched_getscheduler
sched_setscheduler
sched_yield
sem_close
sem_destroy
sem_getvalue
sem_init
sem_open
sem_post
sem_post_multiple
sem_timedwait
sem_trywait
sem_unlink
sem_wait

Sections

.text
Size: 25KB - Virtual size: 25KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 64B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 112B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 368B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1024B - Virtual size: 668B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.stab
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_MEM_DISCARDABLE

.stabstr
Size: 17KB - Virtual size: 16KB

IMAGE_SCN_MEM_DISCARDABLE
show.exe
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 196KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 36KB - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 56KB - Virtual size: 53KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 120KB - Virtual size: 147KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.sxdata
Size: 4KB - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
swscale-0.dll
.dll windows:4 windows x86 arch:x86

7971fbd5ecad276a40f99b8eddfb2d73

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Imports

kernel32

AddAtomA
FindAtomA
GetAtomNameA

msvcrt

__dllonexit
_assert
_errno
abort
ceil
cos
exp
fflush
floor
free
malloc
memcpy
memset
pow
sin
sqrt

avutil-49

av_free
av_log
av_malloc
av_mallocz

Exports

Exports

Inverse_Table_6_9
dither_2x2_4
dither_2x2_8
dither_8x8_220
dither_8x8_32
dither_8x8_73
in_asm_used_var_warning_killer
interleaveBytes
interleaveBytes_3DNOW
interleaveBytes_C
interleaveBytes_MMX
interleaveBytes_MMX2
palette8tobgr15
palette8tobgr16
palette8tobgr24
palette8tobgr32
palette8torgb15
palette8torgb16
palette8torgb24
palette8torgb32
planar2x
rgb15to16
rgb15to24
rgb15to32
rgb15tobgr15
rgb15tobgr16
rgb15tobgr24
rgb15tobgr32
rgb16to15
rgb16to24
rgb16to32
rgb16tobgr15
rgb16tobgr16
rgb16tobgr24
rgb16tobgr32
rgb24to15
rgb24to16
rgb24to32
rgb24tobgr15
rgb24tobgr16
rgb24tobgr24
rgb24tobgr32
rgb24toyv12
rgb32to15
rgb32to16
rgb32to24
rgb32tobgr15
rgb32tobgr16
rgb32tobgr24
rgb32tobgr32
rgb8tobgr8
sws_addVec
sws_cloneVec
sws_convVec
sws_dcVec
sws_format_name
sws_freeContext
sws_freeFilter
sws_freeVec
sws_getCachedContext
sws_getColorspaceDetails
sws_getConstVec
sws_getContext
sws_getDefaultFilter
sws_getGaussianVec
sws_getIdentityVec
sws_normalizeVec
sws_printVec
sws_rgb2rgb_init
sws_scale
sws_scaleVec
sws_scale_ordered
sws_setColorspaceDetails
sws_shiftVec
sws_subVec
vu9_to_vu12
yuv2rgb_c_init_tables
yuv2rgb_get_func_ptr
yuv422ptoyuy2
yuy2toyv12
yv12touyvy
yv12toyuy2
yvu9_to_yuy2

Sections

.text
Size: 120KB - Virtual size: 119KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 320B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 1024B - Virtual size: 700B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
uninstall.exe.nsis
update.exe
.exe windows:4 windows x86 arch:x86

eece8f963ff7b46a9ec8b8ebcc8a1ab5

Code Sign

01
Certificate

Issuer

CN=Thawte Premium Server CA,OU=Certification Services Division,O=Thawte Consulting cc,L=Cape Town,ST=Western Cape,C=ZA,1.2.840.113549.1.9.1=#0c197072656d69756d2d736572766572407468617774652e636f6d

Not Before

01/08/1996, 00:00

Not After

31/12/2020, 23:59

Subject

CN=Thawte Premium Server CA,OU=Certification Services Division,O=Thawte Consulting cc,L=Cape Town,ST=Western Cape,C=ZA,1.2.840.113549.1.9.1=#0c197072656d69756d2d736572766572407468617774652e636f6d

0a
Certificate

Issuer

CN=Thawte Premium Server CA,OU=Certification Services Division,O=Thawte Consulting cc,L=Cape Town,ST=Western Cape,C=ZA,1.2.840.113549.1.9.1=#0c197072656d69756d2d736572766572407468617774652e636f6d

Not Before

06/08/2003, 00:00

Not After

05/08/2013, 23:59

Subject

CN=Thawte Code Signing CA,O=Thawte Consulting (Pty) Ltd.,C=ZA

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04/12/2003, 00:00

Not After

03/12/2013, 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

35:19:8a:09:f8:df:1a:89:a8:00:16:d1:4d:27:25:99
Certificate

Issuer

CN=Thawte Code Signing CA,O=Thawte Consulting (Pty) Ltd.,C=ZA

Not Before

14/12/2006, 09:28

Not After

14/12/2007, 09:28

Subject

CN=PopFolder,OU=Software Development Department,O=PopFolder,L=KyoungGi-do,ST=Gwangmyeong-si\ ,C=KR

Extended Key Usages

ExtKeyUsageCodeSigning
ExtKeyUsageMicrosoftCommercialCodeSigning

0d:e9:2b:f0:d4:d8:29:88:18:32:05:09:5e:9a:76:88
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

04/12/2003, 00:00

Not After

03/12/2008, 23:59

Subject

CN=VeriSign Time Stamping Services Signer,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

Signer

Actual PE Digest

Digest Algorithm

PE Digest Matches

false

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

urlmon

URLDownloadToFileA

wininet

DeleteUrlCacheEntry

kernel32

SetStdHandle
LoadLibraryA
IsBadCodePtr
DeleteFileA
GetTempFileNameA
GetTempPathA
GetWindowsDirectoryA
CloseHandle
WriteFile
CreateFileA
TerminateProcess
SetEndOfFile
MultiByteToWideChar
GetFileAttributesA
WinExec
Sleep
GetPrivateProfileIntA
GetPrivateProfileStringA
GetSystemDirectoryA
IsBadReadPtr
GetStringTypeW
GetStringTypeA
LCMapStringW
FreeEnvironmentStringsW
CompareStringA
CompareStringW
SetEnvironmentVariableA
GetModuleFileNameA
FreeEnvironmentStringsA
GetProcAddress
LCMapStringA
FlushFileBuffers
SetUnhandledExceptionFilter
SetFilePointer
ReadFile
GetFileType
UnhandledExceptionFilter
GetStdHandle
SetHandleCount
GetEnvironmentStringsW
GetEnvironmentStrings
WideCharToMultiByte
HeapSize
GetOEMCP
GetACP
GetCPInfo
IsBadWritePtr
HeapReAlloc
VirtualAlloc
HeapAlloc
HeapFree
GetLastError
GetTimeZoneInformation
GetSystemTime
GetLocalTime
RtlUnwind
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
RaiseException
GetCurrentProcess
HeapDestroy
HeapCreate
VirtualFree

user32

wsprintfA

advapi32

RegOpenKeyExA
RegSetValueExA
RegCreateKeyExA
RegQueryValueExA
RegCloseKey

shell32

SHGetPathFromIDListA
SHGetMalloc
SHGetSpecialFolderLocation

ole32

CoUninitialize
CoInitialize

Sections

.text
Size: 44KB - Virtual size: 41KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 122KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.sxdata
Size: 4KB - Virtual size: 124B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

55f3dfd13c0557d3e32bcbc604441dd3

Code Sign

01Certificate

0aCertificate

Extended Key Usages

Key Usages

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4Certificate

Extended Key Usages

Key Usages

35:19:8a:09:f8:df:1a:89:a8:00:16:d1:4d:27:25:99Certificate

Extended Key Usages

0d:e9:2b:f0:d4:d8:29:88:18:32:05:09:5e:9a:76:88Certificate

Extended Key Usages

Key Usages

Signer

Headers

File Characteristics

Imports

kernel32

user32

gdi32

shell32

advapi32

comctl32

ole32

version

Sections

.text Size: 22KB - Virtual size: 22KB

.rdata Size: 4KB - Virtual size: 4KB

.data Size: 1024B - Virtual size: 107KB

.ndata Size: - Virtual size: 36KB

.rsrc Size: 16KB - Virtual size: 16KB

e046ce41267987ef4ccfabb239186c31

Headers

File Characteristics

Imports

winmm

kernel32

user32

gdi32

advapi32

msvcrt

Exports

Exports

Sections

.text Size: 192KB - Virtual size: 190KB

.rdata Size: 20KB - Virtual size: 18KB

.data Size: 20KB - Virtual size: 47KB

.rsrc Size: 4KB - Virtual size: 792B

.reloc Size: 12KB - Virtual size: 9KB

246f04d00eccdefe5e4010a8d0a19087

Headers

File Characteristics

Imports

kernel32

msvcrt

avutil-49

Exports

Exports

Sections

.text Size: 4.3MB - Virtual size: 4.3MB

.rodata Size: 11KB - Virtual size: 11KB

.data Size: 1.2MB - Virtual size: 1.2MB

.rdata Size: 902KB - Virtual size: 901KB

.bss Size: - Virtual size: 982KB

.edata Size: 75KB - Virtual size: 74KB

.idata Size: 6KB - Virtual size: 6KB

.reloc Size: 97KB - Virtual size: 96KB

3254282d8a8a7a382681c2db455ab2a4

Headers

File Characteristics

Imports

kernel32

msvcrt

avifil32

01
Certificate

0a
Certificate

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

35:19:8a:09:f8:df:1a:89:a8:00:16:d1:4d:27:25:99
Certificate

0d:e9:2b:f0:d4:d8:29:88:18:32:05:09:5e:9a:76:88
Certificate

.text
Size: 22KB - Virtual size: 22KB

.rdata
Size: 4KB - Virtual size: 4KB

.data
Size: 1024B - Virtual size: 107KB

.ndata
Size: - Virtual size: 36KB

.rsrc
Size: 16KB - Virtual size: 16KB

.text
Size: 192KB - Virtual size: 190KB

.rdata
Size: 20KB - Virtual size: 18KB

.data
Size: 20KB - Virtual size: 47KB

.rsrc
Size: 4KB - Virtual size: 792B

.reloc
Size: 12KB - Virtual size: 9KB

.text
Size: 4.3MB - Virtual size: 4.3MB

.rodata
Size: 11KB - Virtual size: 11KB

.data
Size: 1.2MB - Virtual size: 1.2MB

.rdata
Size: 902KB - Virtual size: 901KB

.bss
Size: - Virtual size: 982KB

.edata
Size: 75KB - Virtual size: 74KB

.idata
Size: 6KB - Virtual size: 6KB

.reloc
Size: 97KB - Virtual size: 96KB

.text
Size: 342KB - Virtual size: 342KB

.data
Size: 12KB - Virtual size: 11KB

.rdata
Size: 73KB - Virtual size: 72KB

.bss
Size: - Virtual size: 288B

.edata
Size: 8KB - Virtual size: 8KB

.idata
Size: 4KB - Virtual size: 3KB

.reloc
Size: 7KB - Virtual size: 6KB

.text
Size: 20KB - Virtual size: 19KB

.data
Size: 512B - Virtual size: 64B

.rdata
Size: 1024B - Virtual size: 1008B

.bss
Size: - Virtual size: 8KB

.edata
Size: 1KB - Virtual size: 1KB

.idata
Size: 1024B - Virtual size: 628B

.reloc
Size: 512B - Virtual size: 464B

.text
Size: 49KB - Virtual size: 48KB

.data
Size: 512B - Virtual size: 272B

.rdata
Size: 14KB - Virtual size: 13KB

.bss
Size: - Virtual size: 4KB

.idata
Size: 6KB - Virtual size: 6KB

.text
Size: 25KB - Virtual size: 25KB

.data
Size: 512B - Virtual size: 80B

.rdata
Size: 3KB - Virtual size: 3KB

.bss
Size: - Virtual size: 640B

.idata
Size: 3KB - Virtual size: 2KB