3eea35a49ac7fd2feed67a04da3021fe_JaffaCakes118

resource
unpack001/$PLUGINSDIR/StartMenu.dll
unpack001/$PLUGINSDIR/System.dll
unpack001/BugSplatRc.dll
unpack001/dbghelp.dll
unpack001/npvoiplay.dll
unpack001/xerces-c_2_8.dll

resource	yara_rule
sample	nsis_installer_1
sample	nsis_installer_2

.exe windows:4 windows x86 arch:x86

099c0646ea7282d232219f8807883be0

Code Sign

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

15/06/2007, 00:00

Not After

14/06/2012, 23:59

Subject

CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

KeyUsageContentCommitment

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04/12/2003, 00:00

Not After

03/12/2013, 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign

KeyUsageCRLSign

65:52:26:e1:b2:2e:18:e1:59:0f:29:85:ac:22:e7:5c
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

21/05/2009, 00:00

Not After

20/05/2019, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth

ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign

KeyUsageCRLSign

09:81:ff:eb:00:25:83:b6:79:45:13:05:5f:c0:ad:d5
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Not Before

27/10/2009, 00:00

Not After

26/10/2012, 23:59

Subject

CN=Electronic Sports Network i Sverige AB,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Electronic Sports Network i Sverige AB,L=Uppsala,ST=N/A,C=SE

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

99:90:5a:2c:c9:d5:08:a6:f7:bf:6b:04:58:7f:74:69:10:32:11:91
Signer

Actual PE Digest

99:90:5a:2c:c9:d5:08:a6:f7:bf:6b:04:58:7f:74:69:10:32:11:91

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_LINE_NUMS_STRIPPED

IMAGE_FILE_LOCAL_SYMS_STRIPPED

IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CompareFileTime

SearchPathA

GetShortPathNameA

GetFullPathNameA

MoveFileA

SetCurrentDirectoryA

GetFileAttributesA

GetLastError

CreateDirectoryA

SetFileAttributesA

Sleep

GetTickCount

CreateFileA

GetFileSize

GetModuleFileNameA

GetCurrentProcess

CopyFileA

ExitProcess

SetFileTime

GetTempPathA

GetCommandLineA

SetErrorMode

LoadLibraryA

lstrcpynA

GetDiskFreeSpaceA

GlobalUnlock

GlobalLock

CreateThread

CreateProcessA

RemoveDirectoryA

GetTempFileNameA

lstrlenA

lstrcatA

GetSystemDirectoryA

GetVersion

CloseHandle

lstrcmpiA

lstrcmpA

ExpandEnvironmentStringsA

GlobalFree

GlobalAlloc

WaitForSingleObject

GetExitCodeProcess

GetModuleHandleA

LoadLibraryExA

GetProcAddress

FreeLibrary

MultiByteToWideChar

WritePrivateProfileStringA

GetPrivateProfileStringA

WriteFile

ReadFile

MulDiv

SetFilePointer

FindClose

FindNextFileA

FindFirstFileA

DeleteFileA

GetWindowsDirectoryA

user32

EndDialog

ScreenToClient

GetWindowRect

EnableMenuItem

GetSystemMenu

SetClassLongA

IsWindowEnabled

SetWindowPos

GetSysColor

GetWindowLongA

SetCursor

LoadCursorA

CheckDlgButton

GetMessagePos

LoadBitmapA

CallWindowProcA

IsWindowVisible

CloseClipboard

SetClipboardData

EmptyClipboard

RegisterClassA

TrackPopupMenu

AppendMenuA

CreatePopupMenu

GetSystemMetrics

SetDlgItemTextA

GetDlgItemTextA

MessageBoxIndirectA

CharPrevA

DispatchMessageA

PeekMessageA

DestroyWindow

CreateDialogParamA

SetTimer

SetWindowTextA

PostQuitMessage

SetForegroundWindow

wsprintfA

SendMessageTimeoutA

FindWindowExA

SystemParametersInfoA

CreateWindowExA

GetClassInfoA

DialogBoxParamA

CharNextA

OpenClipboard

ExitWindowsEx

IsWindow

GetDlgItem

SetWindowLongA

LoadImageA

GetDC

EnableWindow

InvalidateRect

SendMessageA

DefWindowProcA

BeginPaint

GetClientRect

FillRect

DrawTextA

EndPaint

ShowWindow

gdi32

SetBkColor

GetDeviceCaps

DeleteObject

CreateBrushIndirect

CreateFontIndirectA

SetBkMode

SetTextColor

SelectObject

shell32

SHGetPathFromIDListA

SHBrowseForFolderA

SHGetFileInfoA

ShellExecuteA

SHFileOperationA

SHGetSpecialFolderLocation

advapi32

RegQueryValueExA

RegSetValueExA

RegEnumKeyA

RegEnumValueA

RegOpenKeyExA

RegDeleteKeyA

RegDeleteValueA

RegCloseKey

RegCreateKeyExA

comctl32

ImageList_AddMasked

ImageList_Destroy

ord17

ImageList_Create

ole32

CoTaskMemFree

OleInitialize

OleUninitialize

CoCreateInstance

version

GetFileVersionInfoSizeA

GetFileVersionInfoA

VerQueryValueA

Sections

.text
Size: 22KB - Virtual size: 22KB

IMAGE_SCN_CNT_CODE

IMAGE_SCN_MEM_EXECUTE

IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 107KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

IMAGE_SCN_MEM_WRITE

.ndata
Size: - Virtual size: 44KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA

IMAGE_SCN_MEM_READ

IMAGE_SCN_MEM_WRITE

.rsrc
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

$0/VOIPlay/Message History/LogStyle.xsl

$0/VOIPlay/languages/english.xml

$0/VOIPlay/languages/german.xml

$0/VOIPlay/languages/swedish.xml

$0/VOIPlay/skins/default/1c30_9grid.png

.png

$0/VOIPlay/skins/default/1c30_9grid.txt

$0/VOIPlay/skins/default/3339_9grid.png

.png

$0/VOIPlay/skins/default/3339_9grid.txt

$0/VOIPlay/skins/default/applicationcontainer_9grid.png

.png

$0/VOIPlay/skins/default/applicationcontainer_9grid.txt

$0/VOIPlay/skins/default/applicationcontainer_focuslost_9grid.png

.png

$0/VOIPlay/skins/default/applicationcontainer_focuslost_9grid.txt

$0/VOIPlay/skins/default/audioscope_background.png

.png

$0/VOIPlay/skins/default/audioscope_light_green.png

.png

$0/VOIPlay/skins/default/audioscope_light_red.png

.png

$0/VOIPlay/skins/default/audioscope_light_unlit.png

.png

$0/VOIPlay/skins/default/audiosettings_icon_microphone.png

.png

$0/VOIPlay/skins/default/audiosettings_icon_ptt.png

.png

$0/VOIPlay/skins/default/audiosettings_icon_ptt_a.png

.png

$0/VOIPlay/skins/default/audiosettings_icon_ptt_b.png

.png

$0/VOIPlay/skins/default/audiosettings_icon_ptt_c.png

.png

$0/VOIPlay/skins/default/audiosettings_icon_ptt_d.png

.png

$0/VOIPlay/skins/default/audiosettings_icon_speakers.png

.png

$0/VOIPlay/skins/default/audiosettings_icon_voiceactivation.png

.png

$0/VOIPlay/skins/default/audiosettings_icon_voicesensitivity.png

.png

$0/VOIPlay/skins/default/avatar_default.png

.png

$0/VOIPlay/skins/default/avatar_unknown.png

.png

$0/VOIPlay/skins/default/buddies_header_icon.png

.png

$0/VOIPlay/skins/default/buddylist_avatarframe.png

.png

$0/VOIPlay/skins/default/buddylist_panel_3grid.png

.png

$0/VOIPlay/skins/default/buddylist_panel_3grid.txt

$0/VOIPlay/skins/default/buddylist_panel_9grid.png

.png

$0/VOIPlay/skins/default/buddylist_panel_9grid.txt

$0/VOIPlay/skins/default/button_big_disabled_3grid.png

.png

$0/VOIPlay/skins/default/button_big_disabled_3grid.txt

$0/VOIPlay/skins/default/button_big_down_3grid.png

.png

$0/VOIPlay/skins/default/button_big_down_3grid.txt

$0/VOIPlay/skins/default/button_big_over_3grid.png

.png

$0/VOIPlay/skins/default/button_big_over_3grid.txt

$0/VOIPlay/skins/default/button_big_up_3grid.png

.png

$0/VOIPlay/skins/default/button_big_up_3grid.txt

$0/VOIPlay/skins/default/button_disabled_3grid.png

.png

$0/VOIPlay/skins/default/button_disabled_3grid.txt

$0/VOIPlay/skins/default/button_down_3grid.png

.png

$0/VOIPlay/skins/default/button_down_3grid.txt

$0/VOIPlay/skins/default/button_icon_arrowleft.png

.png

$0/VOIPlay/skins/default/button_icon_arrowright.png

.png

$0/VOIPlay/skins/default/button_over_3grid.png

.png

$0/VOIPlay/skins/default/button_over_3grid.txt

$0/VOIPlay/skins/default/button_up_3grid.png

.png

$0/VOIPlay/skins/default/button_up_3grid.txt

$0/VOIPlay/skins/default/buttonleft_disabled.png

.png

$0/VOIPlay/skins/default/buttonleft_down.png

.png

$0/VOIPlay/skins/default/buttonleft_over.png

.png

$0/VOIPlay/skins/default/buttonleft_up.png

.png

$0/VOIPlay/skins/default/buttonright_disabled.png

.png

$0/VOIPlay/skins/default/buttonright_down.png

.png

$0/VOIPlay/skins/default/buttonright_over.png

.png

$0/VOIPlay/skins/default/buttonright_up.png

.png

$0/VOIPlay/skins/default/channel_default.png

.png

$0/VOIPlay/skins/default/channelavatar_default.png

.png

$0/VOIPlay/skins/default/channelavatar_unknown.png

.png

$0/VOIPlay/skins/default/channelheader_3grid.png

.png

$0/VOIPlay/skins/default/channelheader_3grid.txt

$0/VOIPlay/skins/default/channelheader_default.png

.png

$0/VOIPlay/skins/default/channelheader_icon_channel.png

.png

$0/VOIPlay/skins/default/channelheader_overlay.png

.png

$0/VOIPlay/skins/default/channelheader_unknown.png

.png

$0/VOIPlay/skins/default/channellist_banner.png

.png

$0/VOIPlay/skins/default/channels_expander_maximized.png

.png

$0/VOIPlay/skins/default/channels_expander_minimized.png

.png

$0/VOIPlay/skins/default/channels_expander_minimized_disabled.png

.png

$0/VOIPlay/skins/default/channels_header_3grid.png

.png

$0/VOIPlay/skins/default/channels_header_3grid.txt

$0/VOIPlay/skins/default/channels_header_icon.png

.png

$0/VOIPlay/skins/default/channels_header_separator.png

.png

$0/VOIPlay/skins/default/channels_icon_joined_selected.png

.png

$0/VOIPlay/skins/default/channels_icon_joined_up.png

.png

$0/VOIPlay/skins/default/channels_item_avatar_overlay_highlighted_selected.png

.png

$0/VOIPlay/skins/default/channels_item_avatar_overlay_highlighted_up.png

.png

$0/VOIPlay/skins/default/channels_item_avatar_overlay_selected.png

.png

$0/VOIPlay/skins/default/channels_item_avatar_overlay_up.png

.png

$0/VOIPlay/skins/default/channels_item_bg_expanded_3grid.png

.png

$0/VOIPlay/skins/default/channels_item_bg_expanded_3grid.txt

$0/VOIPlay/skins/default/channels_item_bg_selected_3grid.png

.png

$0/VOIPlay/skins/default/channels_item_bg_selected_3grid.txt

$0/VOIPlay/skins/default/channels_item_expanded_bg_9grid.png

.png

$0/VOIPlay/skins/default/channels_item_expanded_bg_9grid.txt

$0/VOIPlay/skins/default/channels_item_friends_selected_off.png

.png

$0/VOIPlay/skins/default/channels_item_friends_selected_on.png

.png

$0/VOIPlay/skins/default/channels_item_friends_up_off.png

.png

$0/VOIPlay/skins/default/channels_item_friends_up_on.png

.png

$0/VOIPlay/skins/default/channels_item_icon_join.png

.png

$0/VOIPlay/skins/default/channels_item_icon_more.png

.png

$0/VOIPlay/skins/default/chat_avatarframe_big.png

.png

$0/VOIPlay/skins/default/chat_avatarframe_small.png

.png

$0/VOIPlay/skins/default/chat_buttoncontainer_3grid.png

.png

$0/VOIPlay/skins/default/chat_buttoncontainer_3grid.txt

$0/VOIPlay/skins/default/checkbox_checked_disabled.png

.png

$0/VOIPlay/skins/default/checkbox_checked_down.png

.png

$0/VOIPlay/skins/default/checkbox_checked_over.png

.png

$0/VOIPlay/skins/default/checkbox_checked_up.png

.png

$0/VOIPlay/skins/default/checkbox_unchecked_disabled.png

.png

$0/VOIPlay/skins/default/checkbox_unchecked_down.png

.png

$0/VOIPlay/skins/default/checkbox_unchecked_over.png

.png

$0/VOIPlay/skins/default/checkbox_unchecked_up.png

.png

$0/VOIPlay/skins/default/desktop_wallpaper.png

.png

$0/VOIPlay/skins/default/ffc5_9grid.png

.png

$0/VOIPlay/skins/default/ffc5_9grid.txt

$0/VOIPlay/skins/default/find_icon_buddies.png

.png

$0/VOIPlay/skins/default/find_icon_channels.png

.png

$0/VOIPlay/skins/default/find_input_9grid.png

.png

$0/VOIPlay/skins/default/find_input_9grid.txt

$0/VOIPlay/skins/default/footercontainer_3grid.png

.png

$0/VOIPlay/skins/default/footercontainer_3grid.txt

$0/VOIPlay/skins/default/friends_item_icon_arenastatus.png

.png

$0/VOIPlay/skins/default/friends_item_icon_chat.png

.png

$0/VOIPlay/skins/default/friends_item_icon_inchannel_selected_off.png

.png

$0/VOIPlay/skins/default/friends_item_icon_inchannel_selected_on.png

.png

$0/VOIPlay/skins/default/friends_item_icon_inchannel_up_off.png

.png

$0/VOIPlay/skins/default/friends_item_icon_inchannel_up_on.png

.png

$0/VOIPlay/skins/default/friends_item_icon_more.png

.png

$0/VOIPlay/skins/default/friends_item_icon_profile.png

.png

$0/VOIPlay/skins/default/friends_item_icon_status_away.png

.png

$0/VOIPlay/skins/default/friends_item_icon_status_busy.png

.png

$0/VOIPlay/skins/default/friends_item_icon_status_dinner.png

.png

$0/VOIPlay/skins/default/friends_item_icon_status_offline.png

.png

$0/VOIPlay/skins/default/friends_item_icon_status_online.png

.png

$0/VOIPlay/skins/default/friends_item_icon_status_onphone.png

.png

$0/VOIPlay/skins/default/friends_item_icon_status_partying.png

.png

$0/VOIPlay/skins/default/friends_item_icon_status_playing.png

.png

$0/VOIPlay/skins/default/friends_item_icon_status_rightback.png

.png

$0/VOIPlay/skins/default/header_3grid.png

.png

$0/VOIPlay/skins/default/header_3grid.txt

$0/VOIPlay/skins/default/icon_admin.png

.png

$0/VOIPlay/skins/default/icon_demoupload.png

.png

$0/VOIPlay/skins/default/icon_mic_muted.png

.png

$0/VOIPlay/skins/default/icon_microphone.png

.png

$0/VOIPlay/skins/default/icon_muted.png

.png

$0/VOIPlay/skins/default/icon_speakers.png

.png

$0/VOIPlay/skins/default/icon_speakers_muted.png

.png

$0/VOIPlay/skins/default/loading_animation_rotation.gif

.gif

$0/VOIPlay/skins/default/loading_animation_rotation_whitebg.gif

.gif

$0/VOIPlay/skins/default/loading_animation_still.gif

.gif

$0/VOIPlay/skins/default/login_3grid.png

.png

$0/VOIPlay/skins/default/login_3grid.txt

$0/VOIPlay/skins/default/login_twirl.png

.png

$0/VOIPlay/skins/default/logo_large.png

.png

$0/VOIPlay/skins/default/menubar_selected_9grid.png

.png

$0/VOIPlay/skins/default/menubar_selected_9grid.txt

$0/VOIPlay/skins/default/newuser_check_notok.png

.png

$0/VOIPlay/skins/default/newuser_check_ok.png

.png

$0/VOIPlay/skins/default/panel_outer_9grid.png

.png

$0/VOIPlay/skins/default/panel_outer_9grid.txt

$0/VOIPlay/skins/default/panel_outer_white_9grid.png

.png

$0/VOIPlay/skins/default/panel_outer_white_9grid.txt

$0/VOIPlay/skins/default/panel_top_3grid.png

.png

$0/VOIPlay/skins/default/panel_top_3grid.txt

$0/VOIPlay/skins/default/progressbar_background_3grid.png

.png

$0/VOIPlay/skins/default/progressbar_background_3grid.txt

$0/VOIPlay/skins/default/progressbar_foreground_3grid.png

.png

$0/VOIPlay/skins/default/progressbar_foreground_3grid.txt

$0/VOIPlay/skins/default/send_icon_buddy.png

.png

$0/VOIPlay/skins/default/send_icon_channel.png

.png

$0/VOIPlay/skins/default/settings_audioscope_legend.png

.png

$0/VOIPlay/skins/default/settings_menu_background_9grid.png

.png

$0/VOIPlay/skins/default/settings_menu_background_9grid.txt

$0/VOIPlay/skins/default/settings_menubutton_down_3grid.png

.png

$0/VOIPlay/skins/default/settings_menubutton_down_3grid.txt

$0/VOIPlay/skins/default/settings_menubutton_icon_alerts.png

.png

$0/VOIPlay/skins/default/settings_menubutton_icon_audio.png

.png

$0/VOIPlay/skins/default/settings_menubutton_icon_hotkeys.png

.png

$0/VOIPlay/skins/default/settings_menubutton_icon_options.png

.png

$0/VOIPlay/skins/default/settings_menubutton_icon_privacy.png

.png

$0/VOIPlay/skins/default/settings_menubutton_icon_profile.png

.png

$0/VOIPlay/skins/default/settings_menubutton_over_3grid.png

.png

$0/VOIPlay/skins/default/settings_menubutton_over_3grid.txt

$0/VOIPlay/skins/default/settings_menubutton_up_3grid.png

.png

$0/VOIPlay/skins/default/settings_menubutton_up_3grid.txt

$0/VOIPlay/skins/default/slider_background.png

.png

$0/VOIPlay/skins/default/slider_handle_disabled.png

.png

$0/VOIPlay/skins/default/slider_handle_enabled.png

.png

$0/VOIPlay/skins/default/smiley_blink.png

.png

$0/VOIPlay/skins/default/smiley_blush.png

.png

$0/VOIPlay/skins/default/smiley_confused.png

.png

$0/VOIPlay/skins/default/smiley_cool.png

.png

$0/VOIPlay/skins/default/smiley_happy.png

.png

$0/VOIPlay/skins/default/smiley_headset.png

.png

$0/VOIPlay/skins/default/smiley_laugh.png

.png

$0/VOIPlay/skins/default/smiley_phone.png

.png

$0/VOIPlay/skins/default/smiley_sad.png

.png

$0/VOIPlay/skins/default/smiley_scared.png

.png

$0/VOIPlay/skins/default/smiley_surprised.png

.png

$0/VOIPlay/skins/default/smiley_tongue.png

.png

$0/VOIPlay/skins/default/speakerpanel_outer_9grid.png

.png

$0/VOIPlay/skins/default/speakerpanel_outer_9grid.txt

$0/VOIPlay/skins/default/statusbar_background_3grid.png

.png

$0/VOIPlay/skins/default/statusbar_background_3grid.txt

$0/VOIPlay/skins/default/statusbar_resizer.png

.png

$0/VOIPlay/skins/default/subchannel_active_3grid.png

.png

$0/VOIPlay/skins/default/subchannel_active_3grid.txt

$0/VOIPlay/skins/default/subchannel_buttons_3grid.png

.png

$0/VOIPlay/skins/default/subchannel_buttons_3grid.txt

$0/VOIPlay/skins/default/subchannel_icon.png

.png

$0/VOIPlay/skins/default/subchannel_icon_grow.png

.png

$0/VOIPlay/skins/default/subchannel_icon_ptt_a.png

.png

$0/VOIPlay/skins/default/subchannel_icon_ptt_b.png

.png

$0/VOIPlay/skins/default/subchannel_icon_ptt_c.png

.png

$0/VOIPlay/skins/default/subchannel_icon_ptt_d.png

.png

$0/VOIPlay/skins/default/subchannel_icon_shrink.png

.png

$0/VOIPlay/skins/default/subchannel_icon_va.png

.png

$0/VOIPlay/skins/default/subchannel_inactive_3grid.png

.png

$0/VOIPlay/skins/default/subchannel_inactive_3grid.txt

$0/VOIPlay/skins/default/subchannellist_3grid.png

.png

$0/VOIPlay/skins/default/subchannellist_3grid.txt

$0/VOIPlay/skins/default/subchannellist_9grid.png

.png

$0/VOIPlay/skins/default/subchannellist_9grid.txt

$0/VOIPlay/skins/default/subchannellist_buddy.png

.png

$0/VOIPlay/skins/default/subchannellist_headericon.png

.png

$0/VOIPlay/skins/default/subchannellist_speaker_silent.png

.png

$0/VOIPlay/skins/default/subchannellist_speaker_talking.png

.png

$0/VOIPlay/skins/default/subchannellist_stranger.png

.png

$0/VOIPlay/skins/default/subchannellist_subchannel_9grid.png

.png

$0/VOIPlay/skins/default/subchannellist_subchannel_9grid.txt

$0/VOIPlay/skins/default/subchannellist_subchannel_inactive_9grid.png

.png

$0/VOIPlay/skins/default/subchannellist_subchannel_inactive_9grid.txt

$0/VOIPlay/skins/default/titlebar_background_3grid.png

.png

$0/VOIPlay/skins/default/titlebar_background_3grid.txt

$0/VOIPlay/skins/default/titlebar_background_focuslost_3grid.png

.png

$0/VOIPlay/skins/default/titlebar_background_focuslost_3grid.txt

$0/VOIPlay/skins/default/titlebar_close_down.png

.png

$0/VOIPlay/skins/default/titlebar_close_focuslost.png

.png

$0/VOIPlay/skins/default/titlebar_close_over.png

.png

$0/VOIPlay/skins/default/titlebar_close_up.png

.png

$0/VOIPlay/skins/default/titlebar_logo.png

.png

$0/VOIPlay/skins/default/titlebar_logo_focuslost.png

.png

$0/VOIPlay/skins/default/titlebar_maximize_down.png

.png

$0/VOIPlay/skins/default/titlebar_maximize_focuslost.png

.png

$0/VOIPlay/skins/default/titlebar_maximize_over.png

.png

$0/VOIPlay/skins/default/titlebar_maximize_up.png

.png

$0/VOIPlay/skins/default/titlebar_minimize_down.png

.png

$0/VOIPlay/skins/default/titlebar_minimize_focuslost.png

.png

$0/VOIPlay/skins/default/titlebar_minimize_over.png

.png

$0/VOIPlay/skins/default/titlebar_minimize_up.png

.png

$0/VOIPlay/skins/default/titlebar_restore_down.png

.png

$0/VOIPlay/skins/default/titlebar_restore_focuslost.png

.png

$0/VOIPlay/skins/default/titlebar_restore_over.png

.png

$0/VOIPlay/skins/default/titlebar_restore_up.png

.png

$0/VOIPlay/skins/default/titlebar_separator.png

.png

$0/VOIPlay/skins/default/userbar_avatar_overlay.png

.png

$0/VOIPlay/skins/default/userbar_avatar_unknown.png

.png

$0/VOIPlay/skins/default/userbar_background_3grid.png

.png

$0/VOIPlay/skins/default/userbar_background_3grid.txt

$0/VOIPlay/skins/default/userbar_button_console_down.png

.png

$0/VOIPlay/skins/default/userbar_button_console_over.png

.png

$0/VOIPlay/skins/default/userbar_button_console_up.png

.png

$0/VOIPlay/skins/default/userbar_button_profile_down.png

.png

$0/VOIPlay/skins/default/userbar_button_profile_over.png

.png

$0/VOIPlay/skins/default/userbar_button_profile_up.png

.png

$0/VOIPlay/skins/default/userbar_button_settings_down.png

.png

$0/VOIPlay/skins/default/userbar_button_settings_over.png

.png

$0/VOIPlay/skins/default/userbar_button_settings_up.png

.png

$0/VOIPlay/skins/default/userbar_button_status_down.png

.png

$0/VOIPlay/skins/default/userbar_button_status_over.png

.png

$0/VOIPlay/skins/default/userbar_button_status_up.png

.png

$0/VOIPlay/skins/default/userbar_icon_status_away.png

.png

$0/VOIPlay/skins/default/userbar_icon_status_busy.png

.png

$0/VOIPlay/skins/default/userbar_icon_status_dinner.png

.png

$0/VOIPlay/skins/default/userbar_icon_status_offline.png

.png

$0/VOIPlay/skins/default/userbar_icon_status_online.png

.png

$0/VOIPlay/skins/default/userbar_icon_status_onphone.png

.png

$0/VOIPlay/skins/default/userbar_icon_status_partying.png

.png

$0/VOIPlay/skins/default/userbar_icon_status_playing.png

.png

$0/VOIPlay/skins/default/userbar_icon_status_rightback.png

.png

$0/VOIPlay/skins/default/userpopout_avatarframe.png

.png

$0/VOIPlay/skins/default/userpopout_close_down.png

.png

$0/VOIPlay/skins/default/userpopout_close_over.png

.gif

$0/VOIPlay/skins/default/userpopout_close_up.png

.png

$0/VOIPlay/skins/default/vscrollbar_arrowdown_down.png

.png

$0/VOIPlay/skins/default/vscrollbar_arrowdown_over.png

.png

$0/VOIPlay/skins/default/vscrollbar_arrowdown_up.png

.png

$0/VOIPlay/skins/default/vscrollbar_arrowup_down.png

.png

$0/VOIPlay/skins/default/vscrollbar_arrowup_over.png

.png

$0/VOIPlay/skins/default/vscrollbar_arrowup_up.png

.png

$0/VOIPlay/skins/default/vscrollbar_bg.png

.png

$0/VOIPlay/skins/default/vscrollbar_bg_3grid.png

.png

$0/VOIPlay/skins/default/vscrollbar_bg_3grid.txt

$0/VOIPlay/skins/default/vscrollbar_thumb_3grid.png

.png

$0/VOIPlay/skins/default/vscrollbar_thumb_3grid.txt

$0/VOIPlay/skins/default/vscrollbar_thumb_caret.png

.png

$0/VOIPlay/skins/default/white_3grid.png

.png

$0/VOIPlay/skins/default/white_3grid.txt

$0/VOIPlay/skins/default/xmitctrl_bkg_3grid.png

.png

$0/VOIPlay/skins/default/xmitctrl_bkg_3grid.txt

$0/VOIPlay/skins/default/xmitctrl_icon_ptta.png

.png

$0/VOIPlay/skins/default/xmitctrl_icon_pttb.png

.png

$0/VOIPlay/skins/default/xmitctrl_icon_pttc.png

.png

$0/VOIPlay/skins/default/xmitctrl_icon_pttd.png

.png

$0/VOIPlay/skins/default/xmitctrl_icon_va.png

.png

$0/VOIPlay/sounds/default/arenamessage.wav

$0/VOIPlay/sounds/default/channel_join.wav

$0/VOIPlay/sounds/default/channel_part.wav

$0/VOIPlay/sounds/default/channel_userjoin.wav

$0/VOIPlay/sounds/default/channel_userpart.wav

$0/VOIPlay/sounds/default/chat_begin.wav

$0/VOIPlay/sounds/default/hudmessage.wav

$PLUGINSDIR/StartMenu.dll

.dll windows:4 windows x86 arch:x86

7868cd55f358bfb360f9eb8ce1512ca0

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_LINE_NUMS_STRIPPED

IMAGE_FILE_LOCAL_SYMS_STRIPPED

IMAGE_FILE_32BIT_MACHINE

IMAGE_FILE_DLL

Imports

kernel32

lstrcpynA

GlobalAlloc

MulDiv

GetModuleHandleA

GlobalFree

FindClose

FindNextFileA

FindFirstFileA

lstrcmpiA

lstrcatA

lstrcpyA

user32

TranslateMessage

GetMessageA

IsDialogMessageA

PostMessageA

DispatchMessageA

GetWindowLongA

CheckDlgButton

ShowWindow

LoadIconA

GetClientRect

MoveWindow

ScreenToClient

GetWindowRect

ReleaseDC

GetDC

EnableWindow

SetWindowTextA

SendMessageA

IsDlgButtonChecked

GetWindowTextA

DestroyWindow

GetDlgItem

CreateDialogParamA

SetWindowLongA

wsprintfA

CallWindowProcA

gdi32

GetTextMetricsA

SelectObject

shell32

SHGetSpecialFolderLocation

SHGetPathFromIDListA

ole32

CoTaskMemFree

Exports

Init

Select

Show

Sections

.text
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE

IMAGE_SCN_MEM_EXECUTE

IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 296B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 472B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_DISCARDABLE

IMAGE_SCN_MEM_READ

$PLUGINSDIR/System.dll

.dll windows:4 windows x86 arch:x86

4ec328f99bdd944fc98d8a5cf11f7a62

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_LINE_NUMS_STRIPPED

IMAGE_FILE_LOCAL_SYMS_STRIPPED

IMAGE_FILE_32BIT_MACHINE

IMAGE_FILE_DLL

Imports

kernel32

GlobalAlloc

GlobalFree

GlobalSize

lstrcpyA

lstrcpynA

FreeLibrary

lstrcatA

GetProcAddress

LoadLibraryA

GetModuleHandleA

MultiByteToWideChar

lstrlenA

WideCharToMultiByte

GetLastError

VirtualAlloc

VirtualProtect

user32

wsprintfA

ole32

StringFromGUID2

CLSIDFromString

Exports

Alloc

Call

Copy

Free

Get

Int64Op

Store

Sections

.text
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE

IMAGE_SCN_MEM_EXECUTE

IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 784B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 92B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 496B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_DISCARDABLE

IMAGE_SCN_MEM_READ

$PLUGINSDIR/modern-header.bmp

BsSndRpt.exe

.exe windows:5 windows x86 arch:x86

26e11cef36f6667a475c39c10085362d

Code Sign

4f:63:d0:30:f8:15:a3:a5:b3:44:69:40:06:3d:16:89
Certificate

Issuer

CN=UTN-USERFirst-Object,OU=http://www.usertrust.com,O=The USERTRUST Network,L=Salt Lake City,ST=UT,C=US

Not Before

17/05/2005, 00:00

Not After

16/05/2010, 23:59

Subject

CN=Comodo Time Stamping Signer,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

KeyUsageContentCommitment

6c:32:e7:fa:b6:4d:ac:d4:54:b8:85:ae:22:ae:75:c0
Certificate

Issuer

CN=UTN-USERFirst-Object,OU=http://www.usertrust.com,O=The USERTRUST Network,L=Salt Lake City,ST=UT,C=US

Not Before

19/04/2008, 00:00

Not After

19/04/2009, 23:59

Subject

CN=BugSplat LLC,O=BugSplat LLC,POSTALCODE=03242,STREET=104 Deer Run,L=Henniker,ST=NH,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

8a:be:37:b8:b7:4a:fb:55:a0:f8:5a:cc:e0:1f:2b:4c:24:ee:37:5f
Signer

Actual PE Digest

8a:be:37:b8:b7:4a:fb:55:a0:f8:5a:cc:e0:1f:2b:4c:24:ee:37:5f

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_32BIT_MACHINE

PDB Paths

d:\builds\BugSplatLibraries\trunk\BugSplat\bin\BsSndRpt.pdb

Imports

shlwapi

PathAppendA

PathFileExistsA

PathUnquoteSpacesA

rpcrt4

UuidToStringA

RpcStringFreeA

wininet

InternetAttemptConnect

InternetOpenA

InternetConnectA

InternetCloseHandle

HttpOpenRequestA

HttpAddRequestHeadersA

HttpSendRequestA

HttpSendRequestExA

InternetWriteFile

HttpEndRequestA

InternetReadFile

HttpQueryInfoA

ws2_32

gethostname

gethostbyname

inet_ntoa

WSACleanup

WSAStartup

kernel32

GetFileAttributesA

GetFullPathNameA

GetModuleFileNameA

MultiByteToWideChar

GetACP

WideCharToMultiByte

CreateFileA

GetFileInformationByHandle

CreateFileMappingA

MapViewOfFile

GetCurrentDirectoryA

SetCurrentDirectoryA

UnmapViewOfFile

LoadLibraryA

InterlockedExchange

FreeLibrary

lstrlenA

lstrcmpiA

IsDBCSLeadByte

lstrlenW

LeaveCriticalSection

RaiseException

EnterCriticalSection

SizeofResource

GetLastError

LoadResource

FindResourceA

LoadLibraryExA

GetModuleHandleA

InitializeCriticalSection

DeleteCriticalSection

InterlockedDecrement

InterlockedIncrement

GetPrivateProfileStringA

GetCurrentThreadId

GetCommandLineA

CloseHandle

DebugBreak

OutputDebugStringA

ResetEvent

LocalFree

FormatMessageA

SetEvent

GetCurrentProcess

FlushInstructionCache

SetLastError

CompareStringA

lstrcpyA

LocalAlloc

GetFileSize

ReadFile

MulDiv

CreateEventA

WaitForSingleObject

GetEnvironmentStringsW

CreateThread

SetThreadPriority

ResumeThread

FileTimeToSystemTime

GetFileType

SetFilePointer

FileTimeToDosDateTime

WriteFile

GetLocalTime

SystemTimeToFileTime

GetStdHandle

HeapCreate

HeapReAlloc

ExitProcess

HeapSize

TlsFree

TlsSetValue

TlsAlloc

TlsGetValue

IsValidCodePage

GetOEMCP

GetCPInfo

LCMapStringW

LCMapStringA

RtlUnwind

GetStartupInfoA

GetTimeZoneInformation

GetDateFormatA

GetTimeFormatA

GetSystemTimeAsFileTime

QueryPerformanceCounter

IsDebuggerPresent

SetUnhandledExceptionFilter

UnhandledExceptionFilter

TerminateProcess

DeleteFileA

VirtualQuery

GetSystemInfo

GetModuleHandleW

VirtualProtect

VirtualAlloc

VirtualFree

IsProcessorFeaturePresent

GetProcAddress

HeapAlloc

GetProcessHeap

HeapFree

InterlockedCompareExchange

Sleep

GetTickCount

GetCurrentProcessId

FlushFileBuffers

GetUserDefaultLCID

GetLocaleInfoA

GetStringTypeW

GetConsoleCP

GetConsoleMode

SetHandleCount

FreeEnvironmentStringsA

GetEnvironmentStrings

FreeEnvironmentStringsW

EnumSystemLocalesA

IsValidLocale

InitializeCriticalSectionAndSpinCount

GetLocaleInfoW

WriteConsoleA

GetConsoleOutputCP

WriteConsoleW

SetStdHandle

SetEndOfFile

CompareStringW

SetEnvironmentVariableA

GetTempPathA

GetStringTypeA

user32

CharUpperA

ShowWindow

KillTimer

SetTimer

EnableWindow

MessageBeep

SetDlgItemTextA

GetDlgItem

GetWindow

SystemParametersInfoA

GetWindowRect

MapWindowPoints

DestroyWindow

BeginPaint

EndPaint

FillRect

IsWindowEnabled

GetSysColor

GetFocus

DrawFocusRect

SetCursor

SetCapture

GetCapture

ReleaseCapture

GetDlgCtrlID

GetCursorPos

ScreenToClient

PtInRect

InvalidateRect

UpdateWindow

GetClassNameA

SetWindowPos

CreateCursor

CreateWindowExA

SetWindowTextA

ReleaseDC

GetClientRect

DrawTextA

OffsetRect

IsWindow

GetParent

SendMessageA

CallWindowProcA

GetWindowLongA

SetWindowLongA

SetFocus

DefWindowProcA

EndDialog

GetWindowTextA

GetWindowTextLengthA

DialogBoxParamA

SetRectEmpty

DestroyCursor

wvsprintfA

GetActiveWindow

LoadStringA

CharNextA

MessageBoxA

GetDC

UnregisterClassA

gdi32

SetBkMode

GetObjectA

GetStockObject

CreateFontIndirectA

SelectObject

DeleteObject

SetTextColor

advapi32

DeregisterEventSource

ReportEventA

RegisterEventSourceA

RegDeleteValueA

RegCreateKeyExA

RegSetValueExA

RegOpenKeyExA

RegQueryInfoKeyA

RegCloseKey

RegDeleteKeyA

RegCreateKeyA

RegEnumKeyExA

RegQueryValueExA

shell32

ShellExecuteA

ole32

CoTaskMemFree

CoTaskMemRealloc

CoTaskMemAlloc

CoCreateInstance

CoInitialize

CoCreateGuid

oleaut32

VarUI4FromStr

comctl32

InitCommonControlsEx

_TrackMouseEvent

Sections

.text
Size: 172KB - Virtual size: 172KB

IMAGE_SCN_CNT_CODE

IMAGE_SCN_MEM_EXECUTE

IMAGE_SCN_MEM_READ

.rdata
Size: 37KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.data
Size: 7KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

IMAGE_SCN_MEM_WRITE

.rsrc
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

BugSplat.dll

.dll windows:5 windows x86 arch:x86

8358c277ccb4835db6605129eacc0437

Code Sign

4f:63:d0:30:f8:15:a3:a5:b3:44:69:40:06:3d:16:89
Certificate

Issuer

CN=UTN-USERFirst-Object,OU=http://www.usertrust.com,O=The USERTRUST Network,L=Salt Lake City,ST=UT,C=US

Not Before

17/05/2005, 00:00

Not After

16/05/2010, 23:59

Subject

CN=Comodo Time Stamping Signer,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

KeyUsageContentCommitment

6c:32:e7:fa:b6:4d:ac:d4:54:b8:85:ae:22:ae:75:c0
Certificate

Issuer

CN=UTN-USERFirst-Object,OU=http://www.usertrust.com,O=The USERTRUST Network,L=Salt Lake City,ST=UT,C=US

Not Before

19/04/2008, 00:00

Not After

19/04/2009, 23:59

Subject

CN=BugSplat LLC,O=BugSplat LLC,POSTALCODE=03242,STREET=104 Deer Run,L=Henniker,ST=NH,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

5c:5d:7b:89:28:2e:0e:6b:e6:7c:9f:d6:59:b9:47:21:ee:fc:c1:4d
Signer

Actual PE Digest

5c:5d:7b:89:28:2e:0e:6b:e6:7c:9f:d6:59:b9:47:21:ee:fc:c1:4d

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_32BIT_MACHINE

IMAGE_FILE_DLL

PDB Paths

d:\builds\BugSplatLibraries\trunk\BugSplat\bin\BugSplat.pdb

Imports

wininet

HttpSendRequestA

InternetOpenA

HttpOpenRequestA

InternetReadFile

InternetConnectA

HttpAddRequestHeadersA

InternetCloseHandle

HttpSendRequestExA

InternetAttemptConnect

InternetWriteFile

HttpEndRequestA

HttpQueryInfoA

shlwapi

PathStripPathA

PathFileExistsA

PathRemoveExtensionA

PathAppendA

kernel32

SetStdHandle

IsValidLocale

EnumSystemLocalesA

GetLocaleInfoA

GetUserDefaultLCID

GetConsoleMode

LocalFree

FormatMessageA

GetLastError

CloseHandle

GetThreadContext

OpenThread

lstrlenA

InterlockedDecrement

InterlockedIncrement

GetCurrentProcessId

CreateFileA

DeleteFileA

GetTempPathA

GetProcAddress

LoadLibraryA

GetFileSize

ReadFile

LocalAlloc

InterlockedExchange

GetModuleFileNameA

VirtualQuery

TerminateProcess

OpenProcess

WideCharToMultiByte

DebugBreak

OutputDebugStringA

FreeLibrary

SystemTimeToFileTime

FlushFileBuffers

SetErrorMode

GetCurrentProcess

GetCurrentThreadId

CreateProcessA

GlobalFree

GlobalLock

WritePrivateProfileStringA

WaitForSingleObject

FlushInstructionCache

VirtualProtect

GetModuleHandleA

SetUnhandledExceptionFilter

RaiseException

EnterCriticalSection

LeaveCriticalSection

InitializeCriticalSection

DeleteCriticalSection

MultiByteToWideChar

lstrlenW

lstrcmpiA

IsDBCSLeadByte

SizeofResource

LoadResource

FindResourceA

LoadLibraryExA

GetConsoleCP

SetFilePointer

GetTickCount

QueryPerformanceCounter

GetEnvironmentStringsW

FreeEnvironmentStringsW

GetEnvironmentStrings

InitializeCriticalSectionAndSpinCount

SetConsoleCtrlHandler

WriteConsoleA

GetConsoleOutputCP

WriteConsoleW

SetEndOfFile

GetProcessHeap

GetLocaleInfoW

SetEnvironmentVariableA

CompareStringA

CompareStringW

GetSystemTime

FreeEnvironmentStringsA

WriteFile

HeapReAlloc

FatalAppExitA

VirtualFree

HeapDestroy

HeapCreate

ExitProcess

HeapSize

Sleep

GetStartupInfoA

GetFileType

GetStdHandle

SetHandleCount

GetStringTypeW

GetStringTypeA

LCMapStringW

RtlUnwind

UnhandledExceptionFilter

IsDebuggerPresent

GetSystemTimeAsFileTime

GetTimeFormatA

GetDateFormatA

ExitThread

CreateThread

HeapFree

HeapAlloc

VirtualAlloc

GetModuleHandleW

GetSystemInfo

GetCommandLineA

GetCPInfo

GetACP

GetOEMCP

IsValidCodePage

TlsGetValue

TlsAlloc

TlsSetValue

TlsFree

SetLastError

GetCurrentThread

GetTimeZoneInformation

LCMapStringA

user32

MessageBoxA

LoadStringA

CharUpperA

wvsprintfA

CharNextA

DestroyWindow

advapi32

RegCreateKeyExA

RegEnumKeyExA

RegQueryInfoKeyA

RegDeleteValueA

RegDeleteKeyA

RegOpenKeyA

RegCreateKeyA

RegSetValueExA

RegOpenKeyExA

RegQueryValueExA

RegCloseKey

ole32

CoTaskMemAlloc

CoTaskMemFree

CoCreateInstance

CoTaskMemRealloc

CoCreateGuid

oleaut32

SysFreeString

VarUI4FromStr

urlmon

URLDownloadToFileA

version

GetFileVersionInfoA

GetFileVersionInfoSizeA

rpcrt4

RpcStringFreeA

UuidToStringA

Exports

??0BugSplatImp@@QAE@XZ

??0MiniDmpSender@@QAE@ABV0@@Z

??0MiniDmpSender@@QAE@PBD000K@Z

??0MiniDmpSender@@QAE@PBG000K@Z

??0MiniDmpSender@@QAE@PB_W000K@Z

??1MiniDmpSender@@UAE@XZ

??4BugSplatImp@@QAEAAV0@ABV0@@Z

??4MiniDmpSender@@QAEAAV0@ABV0@@Z

??_7MiniDmpSender@@6B@

?CreateMiniDump@BugSplatImp@@QAEHPAUHINSTANCE__@@KPAXKPAU_EXCEPTION_POINTERS@@PBDPADK@Z

?GetReducedGuid@BugSplatImp@@QAEXPADK@Z

?ReduceGuidString@BugSplatImp@@QAEXPADK@Z

?SetDbghelpFlags@MiniDmpSender@@QAEXW4dbghelpFlags@1@@Z

?createReport@MiniDmpSender@@QAEXPAU_EXCEPTION_POINTERS@@@Z

?createReport@MiniDmpSender@@QAEXXZ

?createReportAndExit@MiniDmpSender@@QAEXXZ

?enableExceptionFilter@MiniDmpSender@@QAE_N_N@Z

?getFlags@MiniDmpSender@@QBEKXZ

?imp@MiniDmpSender@@QAEPAXXZ

?isExceptionFilterEnabled@MiniDmpSender@@QBE_NXZ

?resetAppIdentifierA@MiniDmpSender@@QAEXPBD@Z

?resetAppIdentifierW@MiniDmpSender@@QAEXPBG@Z

?resetAppIdentifierWC@MiniDmpSender@@QAEX_W@Z

?resetVersionStringA@MiniDmpSender@@QAEXPBD@Z

?resetVersionStringW@MiniDmpSender@@QAEXPBG@Z

?setCallback@MiniDmpSender@@QAEXP6A_NIPAX0@Z@Z

?setFlags@MiniDmpSender@@QAE_NK@Z

CreateMiniDmpSender

DestroyMiniDmpSender

MDSGetFlags

MDSResetAppIdentifier

MDSResetVersionString

MDSSetFlags

Sections

.text
Size: 169KB - Virtual size: 169KB

IMAGE_SCN_CNT_CODE

IMAGE_SCN_MEM_EXECUTE

IMAGE_SCN_MEM_READ

.rdata
Size: 30KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_DISCARDABLE

IMAGE_SCN_MEM_READ

BugSplatRc.dll

.dll windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_32BIT_MACHINE

IMAGE_FILE_DLL

Sections

.rsrc
Size: 116KB - Virtual size: 116KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

IEVplDetector.ocx

.dll regsvr32 windows:5 windows x86 arch:x86

b44287f0b8cad7a044d1eeb1b30daa36

Code Sign

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

15/06/2007, 00:00

Not After

14/06/2012, 23:59

Subject

CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

KeyUsageContentCommitment

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04/12/2003, 00:00

Not After

03/12/2013, 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign

KeyUsageCRLSign

65:52:26:e1:b2:2e:18:e1:59:0f:29:85:ac:22:e7:5c
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

21/05/2009, 00:00

Not After

20/05/2019, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth

ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign

KeyUsageCRLSign

09:81:ff:eb:00:25:83:b6:79:45:13:05:5f:c0:ad:d5
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Not Before

27/10/2009, 00:00

Not After

26/10/2012, 23:59

Subject

CN=Electronic Sports Network i Sverige AB,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Electronic Sports Network i Sverige AB,L=Uppsala,ST=N/A,C=SE

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

89:cd:41:cf:9b:5e:f3:85:f6:00:14:81:cf:b2:e0:cb:9d:b5:e0:0a
Signer

Actual PE Digest

89:cd:41:cf:9b:5e:f3:85:f6:00:14:81:cf:b2:e0:cb:9d:b5:e0:0a

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_32BIT_MACHINE

IMAGE_FILE_DLL

PDB Paths

c:\Programming\work\esc3new\Release\IEVplDetector.pdb

Imports

kernel32

LoadLibraryA

GetProcAddress

VirtualAlloc

VirtualFree

user32

GetDCEx

gdi32

GetCurrentPositionEx

comdlg32

GetFileTitleW

winspool.drv

ClosePrinter

advapi32

RegSetValueExW

shell32

ExtractIconW

shlwapi

PathFindFileNameW

ole32

CreateILockBytesOnHGlobal

oleaut32

OleCreatePictureIndirect

Exports

DllCanUnloadNow

DllGetClassObject

DllRegisterServer

DllUnregisterServer

Sections

.text
Size: 133KB - Virtual size: 380KB

IMAGE_SCN_CNT_CODE

IMAGE_SCN_MEM_EXECUTE

IMAGE_SCN_MEM_READ

IMAGE_SCN_MEM_WRITE

.rsrc
Size: 9KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE

IMAGE_SCN_MEM_EXECUTE

IMAGE_SCN_MEM_READ

IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

IMAGE_SCN_MEM_WRITE

acres1.dat

.zip

acres1.dat

acres2.dat

.zip

acres2.dat

acres3.dat

.zip

acres3.dat

dbghelp.dll

.dll windows:4 windows x86 arch:x86

b71c04601978163c5a459181282d0d2c

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_32BIT_MACHINE

IMAGE_FILE_DLL

PDB Paths

dbghelp.pdb

Imports

kernel32

LoadLibraryA

GetProcAddress

VirtualAlloc

VirtualFree

msvcrt

__dllonexit

advapi32

RegOpenKeyExA

rpcrt4

UuidCreate

Exports

DbgHelpCreateUserDump

DbgHelpCreateUserDumpW

EnumDirTree

EnumDirTreeW

EnumerateLoadedModules

EnumerateLoadedModules64

EnumerateLoadedModulesW64

ExtensionApiVersion

FindDebugInfoFile

FindDebugInfoFileEx

FindExecutableImage

FindExecutableImageEx

FindExecutableImageExW

FindFileInPath

FindFileInSearchPath

GetTimestampForLoadedLibrary

ImageDirectoryEntryToData

ImageDirectoryEntryToDataEx

ImageNtHeader

ImageRvaToSection

ImageRvaToVa

ImagehlpApiVersion

ImagehlpApiVersionEx

MakeSureDirectoryPathExists

MapDebugInformation

MiniDumpReadDumpStream

MiniDumpWriteDump

SearchTreeForFile

SearchTreeForFileW

StackWalk

StackWalk64

SymAddSymbol

SymAddSymbolW

SymCleanup

SymDeleteSymbol

SymDeleteSymbolW

SymEnumLines

SymEnumLinesW

SymEnumProcesses

SymEnumSourceFiles

SymEnumSourceFilesW

SymEnumSourceLines

SymEnumSourceLinesW

SymEnumSym

SymEnumSymbols

SymEnumSymbolsForAddr

SymEnumSymbolsForAddrW

SymEnumSymbolsW

SymEnumTypes

SymEnumTypesW

SymEnumerateModules

SymEnumerateModules64

SymEnumerateModulesW64

SymEnumerateSymbols

SymEnumerateSymbols64

SymEnumerateSymbolsW

SymEnumerateSymbolsW64

SymFindFileInPath

SymFindFileInPathW

SymFromAddr

SymFromAddrW

SymFromIndex

SymFromIndexW

SymFromName

SymFromNameW

SymFromToken

SymFromTokenW

SymFunctionTableAccess

SymFunctionTableAccess64

SymGetFileLineOffsets64

SymGetHomeDirectory

SymGetHomeDirectoryW

SymGetLineFromAddr

SymGetLineFromAddr64

SymGetLineFromAddrW64

SymGetLineFromName

SymGetLineFromName64

SymGetLineFromNameW64

SymGetLineNext

SymGetLineNext64

SymGetLineNextW64

SymGetLinePrev

SymGetLinePrev64

SymGetLinePrevW64

SymGetModuleBase

SymGetModuleBase64

SymGetModuleInfo

SymGetModuleInfo64

SymGetModuleInfoW

SymGetModuleInfoW64

SymGetOmapBlockBase

SymGetOptions

SymGetScope

SymGetScopeW

SymGetSearchPath

SymGetSearchPathW

SymGetSourceFile

SymGetSourceFileFromToken

SymGetSourceFileFromTokenW

SymGetSourceFileToken

SymGetSourceFileTokenW

SymGetSourceVarFromToken

SymGetSourceVarFromTokenW

SymGetSymFromAddr

SymGetSymFromAddr64

SymGetSymFromName

SymGetSymFromName64

SymGetSymNext

SymGetSymNext64

SymGetSymPrev

SymGetSymPrev64

SymGetSymbolFile

SymGetSymbolFileW

SymGetTypeFromName

SymGetTypeFromNameW

SymGetTypeInfo

SymGetTypeInfoEx

SymInitialize

SymInitializeW

SymLoadModule

SymLoadModule64

SymLoadModuleEx

SymLoadModuleExW

SymMatchFileName

SymMatchFileNameW

SymMatchString

SymMatchStringA

SymMatchStringW

SymNext

SymNextW

SymPrev

SymPrevW

SymRegisterCallback

SymRegisterCallback64

SymRegisterCallbackW64

SymRegisterFunctionEntryCallback

SymRegisterFunctionEntryCallback64

SymSearch

SymSearchW

SymSetContext

SymSetHomeDirectory

SymSetOptions

SymSetParentWindow

SymSetSearchPath

SymSetSearchPathW

SymSrvDeltaName

SymSrvDeltaNameW

SymSrvGetFileIndexString

SymSrvGetFileIndexStringW

SymSrvGetFileIndexes

SymSrvGetFileIndexesW

SymSrvGetSupplement

SymSrvGetSupplementW

SymSrvIsStore

SymSrvIsStoreW

SymSrvStoreFile

SymSrvStoreFileW

SymSrvStoreSupplement

SymSrvStoreSupplementW

SymUnDName

SymUnDName64

SymUnloadModule

SymUnloadModule64

UnDecorateSymbolName

UnDecorateSymbolNameW

UnmapDebugInformation

WinDbgExtensionDllInit

block

dbghelp

dh

fptr

homedir

lmi

lminfo

omap

srcfiles

stack_force_ebp

stackdbg

sym

symsrv

vc7fpo

Sections

.text
Size: 311KB - Virtual size: 1.0MB

IMAGE_SCN_CNT_CODE

IMAGE_SCN_MEM_EXECUTE

IMAGE_SCN_MEM_READ

IMAGE_SCN_MEM_WRITE

.rsrc
Size: 10KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE

IMAGE_SCN_MEM_EXECUTE

IMAGE_SCN_MEM_READ

IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

IMAGE_SCN_MEM_WRITE

graphics/buddyicon_unknown.png

.png

graphics/buddyjoinchannel.xml

graphics/buddylogin.xml

graphics/buddylogout.xml

graphics/buddypartchannel.xml

graphics/buddyrequest.xml

graphics/buddytip.xml

graphics/button_close.png

.png

graphics/button_no.png

.png

graphics/button_yes.png

.png

graphics/channelinvite.xml

graphics/channeltip.xml

graphics/democompressing.xml

graphics/i.gif

.gif

graphics/icon_down.png

.png

graphics/icon_message.png

.png

graphics/loggedinelsewhere.xml

graphics/logo.jpg

.jpg

graphics/maintenance.xml

graphics/message_background.png

.png

graphics/newchat.xml

graphics/software.jpg

.jpg

graphics/testmessage.xml

graphics/updateinstalling.xml

hud_hook_2070.dll

.dll windows:5 windows x86 arch:x86

c248315e00a296fcfae97f1170637251

Code Sign

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

15/06/2007, 00:00

Not After

14/06/2012, 23:59

Subject

CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

KeyUsageContentCommitment

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04/12/2003, 00:00

Not After

03/12/2013, 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign

KeyUsageCRLSign

65:52:26:e1:b2:2e:18:e1:59:0f:29:85:ac:22:e7:5c
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

21/05/2009, 00:00

Not After

20/05/2019, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth

ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign

KeyUsageCRLSign

09:81:ff:eb:00:25:83:b6:79:45:13:05:5f:c0:ad:d5
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Not Before

27/10/2009, 00:00

Not After

26/10/2012, 23:59

Subject

CN=Electronic Sports Network i Sverige AB,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Electronic Sports Network i Sverige AB,L=Uppsala,ST=N/A,C=SE

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

3c:f0:d9:54:2a:a3:30:fd:65:3a:09:1a:cf:23:e0:8a:cd:a6:0e:8b
Signer

Actual PE Digest

3c:f0:d9:54:2a:a3:30:fd:65:3a:09:1a:cf:23:e0:8a:cd:a6:0e:8b

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_32BIT_MACHINE

IMAGE_FILE_DLL

Imports

kernel32

LoadLibraryA

GetProcAddress

VirtualAlloc

VirtualFree

opengl32

glScalef

glu32

gluOrtho2D

user32

UnhookWindowsHookEx

gdi32

GetDeviceCaps

oleaut32

SafeArrayGetLBound

Exports

DllMain

HUD_GetInterface

Sections

.text
Size: 80KB - Virtual size: 192KB

IMAGE_SCN_CNT_CODE

IMAGE_SCN_MEM_EXECUTE

IMAGE_SCN_MEM_READ

IMAGE_SCN_MEM_WRITE

.ESC3SH
Size: 512B - Virtual size: 538B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE

IMAGE_SCN_MEM_EXECUTE

IMAGE_SCN_MEM_READ

IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

IMAGE_SCN_MEM_WRITE

licenses/Pthreads-win32/COPYING

licenses/speex/COPYING

licenses/wxWidgets/licence.txt

licenses/xerces/LICENSE

npvoiplay.dll

.dll windows:4 windows x86 arch:x86

17d2414c19bf5da6583e1649c80d9a9f

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_LINE_NUMS_STRIPPED

IMAGE_FILE_LOCAL_SYMS_STRIPPED

IMAGE_FILE_32BIT_MACHINE

IMAGE_FILE_DLL

PDB Paths

c:\Documents and Settings\truppo\My Documents\Visual Studio Projects\npvoiplay\Debug\npvoiplay.pdb

Imports

kernel32

LoadLibraryA

GetProcAddress

VirtualAlloc

VirtualFree

user32

BeginPaint

gdi32

GetStockObject

Exports

NP_GetEntryPoints

NP_Initialize

NP_Shutdown

Sections

.textbss
Size: - Virtual size: 69KB

IMAGE_SCN_CNT_CODE

IMAGE_SCN_CNT_UNINITIALIZED_DATA

IMAGE_SCN_MEM_EXECUTE

IMAGE_SCN_MEM_READ

IMAGE_SCN_MEM_WRITE

.text
Size: 51KB - Virtual size: 208KB

IMAGE_SCN_CNT_CODE

IMAGE_SCN_MEM_EXECUTE

IMAGE_SCN_MEM_READ

IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE

IMAGE_SCN_MEM_EXECUTE

IMAGE_SCN_MEM_READ

IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

IMAGE_SCN_MEM_WRITE

voiplay.exe

.exe windows:5 windows x86 arch:x86

4b1df5e08bfe5223d9cf053f779a4093

Code Sign

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

15/06/2007, 00:00

Not After

14/06/2012, 23:59

Subject

CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

KeyUsageContentCommitment

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04/12/2003, 00:00

Not After

03/12/2013, 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign

KeyUsageCRLSign

65:52:26:e1:b2:2e:18:e1:59:0f:29:85:ac:22:e7:5c
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

21/05/2009, 00:00

Not After

20/05/2019, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth

ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign

KeyUsageCRLSign

09:81:ff:eb:00:25:83:b6:79:45:13:05:5f:c0:ad:d5
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Not Before

27/10/2009, 00:00

Not After

26/10/2012, 23:59

Subject

CN=Electronic Sports Network i Sverige AB,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Electronic Sports Network i Sverige AB,L=Uppsala,ST=N/A,C=SE

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

92:3a:f7:be:90:bf:27:b8:49:11:ce:ff:f3:0c:8d:29:85:89:6b:f5
Signer

Actual PE Digest

92:3a:f7:be:90:bf:27:b8:49:11:ce:ff:f3:0c:8d:29:85:89:6b:f5

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_32BIT_MACHINE

PDB Paths

c:\Programming\work\esc3new\release\voiplay.pdb

Imports

kernel32

LoadLibraryA

GetProcAddress

VirtualAlloc

VirtualFree

winmm

PlaySoundW

ws2_32

WSAAddressToStringW

dsound

ord12

comctl32

ImageList_EndDrag

xerces-c_2_8

?elementTypeInfo@XMLDocumentHandler@xercesc_2_8@@UAEXQB_W0@Z

iphlpapi

NotifyAddrChange

crypt32

CryptProtectData

bugsplat

?createReportAndExit@MiniDmpSender@@QAEXXZ

shell32

SHGetFolderPathW

msimg32

AlphaBlend

user32

PostQuitMessage

gdi32

GetTextExtentPoint32W

comdlg32

GetSaveFileNameW

advapi32

RegCreateKeyW

ole32

OleGetClipboard

oleaut32

SafeArrayGetLBound

Sections

.text
Size: 1.2MB - Virtual size: 4.9MB

IMAGE_SCN_CNT_CODE

IMAGE_SCN_MEM_EXECUTE

IMAGE_SCN_MEM_READ

IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE

IMAGE_SCN_MEM_EXECUTE

IMAGE_SCN_MEM_READ

IMAGE_SCN_MEM_WRITE

voiplay_uninstall.exe.nsis

xerces-c_2_8.dll

.dll windows:4 windows x86 arch:x86

4cd6413f737b67feee2c79cbdddc3b5d

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_32BIT_MACHINE

IMAGE_FILE_DLL

PDB Paths

c:\Programming\Libraries\xerces-c-src_2_8_0\Build\Win32\VC8\Release\xerces-c_2_8.fullpdb

Imports

kernel32

LoadLibraryA

GetProcAddress

VirtualAlloc

VirtualFree

advapi32

RegEnumKeyExA

Exports

??0?$XMLHolder@U_RTL_CRITICAL_SECTION@@@xercesc_2_8@@QAE@XZ

??0ASCIIRangeFactory@xercesc_2_8@@QAE@XZ

??0AbstractDOMParser@xercesc_2_8@@IAE@QAVXMLValidator@1@QAVMemoryManager@1@QAVXMLGrammarPool@1@@Z

??0AbstractNumericFacetValidator@xercesc_2_8@@IAE@QAVDatatypeValidator@1@QAV?$RefHashTableOf@VKVStringPair@xercesc_2_8@@@1@HW4ValidatorType@21@QAVMemoryManager@1@@Z

??0AbstractNumericValidator@xercesc_2_8@@IAE@QAVDatatypeValidator@1@QAV?$RefHashTableOf@VKVStringPair@xercesc_2_8@@@1@HW4ValidatorType@21@QAVMemoryManager@1@@Z

??0AbstractStringValidator@xercesc_2_8@@IAE@QAVDatatypeValidator@1@QAV?$RefHashTableOf@VKVStringPair@xercesc_2_8@@@1@HW4ValidatorType@21@QAVMemoryManager@1@@Z

??0AnySimpleTypeDatatypeValidator@xercesc_2_8@@QAE@QAVMemoryManager@1@@Z

??0AnyURIDatatypeValidator@xercesc_2_8@@QAE@QAVDatatypeValidator@1@QAV?$RefHashTableOf@VKVStringPair@xercesc_2_8@@@1@QAV?$RefArrayVectorOf@_W@1@HQAVMemoryManager@1@@Z

??0AnyURIDatatypeValidator@xercesc_2_8@@QAE@QAVMemoryManager@1@@Z

??0ArrayIndexOutOfBoundsException@xercesc_2_8@@QAE@ABV01@@Z

??0ArrayIndexOutOfBoundsException@xercesc_2_8@@QAE@QBDIW4Codes@XMLExcepts@1@0000PAVMemoryManager@1@@Z

??0ArrayIndexOutOfBoundsException@xercesc_2_8@@QAE@QBDIW4Codes@XMLExcepts@1@PAVMemoryManager@1@@Z

??0ArrayIndexOutOfBoundsException@xercesc_2_8@@QAE@QBDIW4Codes@XMLExcepts@1@QB_W222PAVMemoryManager@1@@Z

??0AttributeList@xercesc_2_8@@QAE@XZ

??0Attributes@xercesc_2_8@@QAE@XZ

??0BMPattern@xercesc_2_8@@QAE@QB_WH_NQAVMemoryManager@1@@Z

??0BMPattern@xercesc_2_8@@QAE@QB_W_NQAVMemoryManager@1@@Z

??0Base64BinaryDatatypeValidator@xercesc_2_8@@QAE@QAVDatatypeValidator@1@QAV?$RefHashTableOf@VKVStringPair@xercesc_2_8@@@1@QAV?$RefArrayVectorOf@_W@1@HQAVMemoryManager@1@@Z

??0Base64BinaryDatatypeValidator@xercesc_2_8@@QAE@QAVMemoryManager@1@@Z

??0BinFileInputStream@xercesc_2_8@@QAE@QAXQAVMemoryManager@1@@Z

??0BinFileInputStream@xercesc_2_8@@QAE@QBDQAVMemoryManager@1@@Z

??0BinFileInputStream@xercesc_2_8@@QAE@QB_WQAVMemoryManager@1@@Z

??0BinFileOutputStream@xercesc_2_8@@QAE@QBDQAVMemoryManager@1@@Z

??0BinFileOutputStream@xercesc_2_8@@QAE@QB_WQAVMemoryManager@1@@Z

??0BinHTTPURLInputStream@xercesc_2_8@@QAE@ABVXMLURL@1@PBVXMLNetHTTPInfo@1@@Z

??0BinInputStream@xercesc_2_8@@IAE@XZ

??0BinMemInputStream@xercesc_2_8@@QAE@QBEIW4BufOpts@01@QAVMemoryManager@1@@Z

??0BinMemOutputStream@xercesc_2_8@@QAE@HQAVMemoryManager@1@@Z

??0BinOutputStream@xercesc_2_8@@IAE@XZ

??0BitSet@xercesc_2_8@@QAE@ABV01@@Z

??0BitSet@xercesc_2_8@@QAE@IQAVMemoryManager@1@@Z

??0BlockRangeFactory@xercesc_2_8@@QAE@XZ

??0BooleanDatatypeValidator@xercesc_2_8@@QAE@QAVDatatypeValidator@1@QAV?$RefHashTableOf@VKVStringPair@xercesc_2_8@@@1@QAV?$RefArrayVectorOf@_W@1@HQAVMemoryManager@1@@Z

??0BooleanDatatypeValidator@xercesc_2_8@@QAE@QAVMemoryManager@1@@Z

??0CharOp@xercesc_2_8@@QAE@FHQAVMemoryManager@1@@Z

??0CharToken@xercesc_2_8@@QAE@GHQAVMemoryManager@1@@Z

??0ChildOp@xercesc_2_8@@QAE@FQAVMemoryManager@1@@Z

??0ClosureToken@xercesc_2_8@@QAE@GQAVToken@1@QAVMemoryManager@1@@Z

??0ComplexTypeInfo@xercesc_2_8@@QAE@QAVMemoryManager@1@@Z

??0ConcatToken@xercesc_2_8@@QAE@QAVToken@1@0QAVMemoryManager@1@@Z

??0ConditionOp@xercesc_2_8@@QAE@FHQBVOp@1@00QAVMemoryManager@1@@Z

??0ConditionToken@xercesc_2_8@@QAE@IQAVToken@1@00QAVMemoryManager@1@@Z

??0ContentHandler@xercesc_2_8@@QAE@XZ

??0ContentLeafNameTypeVector@xercesc_2_8@@QAE@ABV01@@Z

??0ContentLeafNameTypeVector@xercesc_2_8@@QAE@QAPAVQName@1@QAW4NodeTypes@ContentSpecNode@1@IQAVMemoryManager@1@@Z

??0ContentLeafNameTypeVector@xercesc_2_8@@QAE@QAVMemoryManager@1@@Z

??0ContentSpecNode@xercesc_2_8@@QAE@ABV01@@Z

??0ContentSpecNode@xercesc_2_8@@QAE@QAVMemoryManager@1@@Z

??0ContentSpecNode@xercesc_2_8@@QAE@QAVQName@1@QAVMemoryManager@1@@Z

??0ContentSpecNode@xercesc_2_8@@QAE@QAVQName@1@_NQAVMemoryManager@1@@Z

??0ContentSpecNode@xercesc_2_8@@QAE@QAVXMLElementDecl@1@QAVMemoryManager@1@@Z

??0ContentSpecNode@xercesc_2_8@@QAE@W4NodeTypes@01@QAV01@1_N2QAVMemoryManager@1@@Z

??0Context@RegularExpression@xercesc_2_8@@QAE@PAV012@@Z

??0Context@RegularExpression@xercesc_2_8@@QAE@QAVMemoryManager@2@@Z

??0DGXMLScanner@xercesc_2_8@@QAE@QAVXMLDocumentHandler@1@QAVDocTypeHandler@1@QAVXMLEntityHandler@1@QAVXMLErrorReporter@1@QAVXMLValidator@1@QAVGrammarResolver@1@QAVMemoryManager@1@@Z

??0DGXMLScanner@xercesc_2_8@@QAE@QAVXMLValidator@1@QAVGrammarResolver@1@QAVMemoryManager@1@@Z

??0DOMAttr@xercesc_2_8@@IAE@ABV01@@Z

??0DOMAttr@xercesc_2_8@@IAE@XZ

??0DOMAttrImpl@xercesc_2_8@@QAE@ABV01@_N@Z

??0DOMAttrImpl@xercesc_2_8@@QAE@PAVDOMDocument@1@PB_W@Z

??0DOMAttrMapImpl@xercesc_2_8@@QAE@PAVDOMNode@1@@Z

??0DOMAttrMapImpl@xercesc_2_8@@QAE@PAVDOMNode@1@PBV01@@Z

??0DOMAttrNSImpl@xercesc_2_8@@QAE@ABV01@_N@Z

??0DOMAttrNSImpl@xercesc_2_8@@QAE@PAVDOMDocument@1@PB_W1@Z

??0DOMAttrNSImpl@xercesc_2_8@@QAE@PAVDOMDocument@1@PB_W@Z

??0DOMBuilder@xercesc_2_8@@IAE@XZ

??0DOMBuilderImpl@xercesc_2_8@@QAE@QAVXMLValidator@1@QAVMemoryManager@1@QAVXMLGrammarPool@1@@Z

??0DOMCDATASection@xercesc_2_8@@IAE@ABV01@@Z

??0DOMCDATASection@xercesc_2_8@@IAE@XZ

??0DOMCDATASectionImpl@xercesc_2_8@@QAE@ABV01@_N@Z

??0DOMCDATASectionImpl@xercesc_2_8@@QAE@PAVDOMDocument@1@PB_W@Z

??0DOMCharacterData@xercesc_2_8@@IAE@ABV01@@Z

??0DOMCharacterData@xercesc_2_8@@IAE@XZ

??0DOMCharacterDataImpl@xercesc_2_8@@QAE@ABV01@@Z

??0DOMCharacterDataImpl@xercesc_2_8@@QAE@PAVDOMDocument@1@PB_W@Z

??0DOMChildNode@xercesc_2_8@@QAE@ABV01@@Z

??0DOMChildNode@xercesc_2_8@@QAE@XZ

??0DOMComment@xercesc_2_8@@IAE@XZ

??0DOMCommentImpl@xercesc_2_8@@QAE@ABV01@_N@Z

??0DOMCommentImpl@xercesc_2_8@@QAE@PAVDOMDocument@1@PB_W@Z

??0DOMConfiguration@xercesc_2_8@@IAE@XZ

??0DOMConfigurationImpl@xercesc_2_8@@QAE@QAVMemoryManager@1@@Z

??0DOMDeepNodeListImpl@xercesc_2_8@@QAE@PBVDOMNode@1@PB_W1@Z

??0DOMDeepNodeListImpl@xercesc_2_8@@QAE@PBVDOMNode@1@PB_W@Z

??0DOMDocument@xercesc_2_8@@IAE@XZ

??0DOMDocumentFragment@xercesc_2_8@@IAE@XZ

??0DOMDocumentFragmentImpl@xercesc_2_8@@AAE@ABV01@_N@Z

??0DOMDocumentFragmentImpl@xercesc_2_8@@IAE@PAVDOMDocument@1@@Z

??0DOMDocumentImpl@xercesc_2_8@@QAE@PB_W0PAVDOMDocumentType@1@QAVMemoryManager@1@@Z

??0DOMDocumentImpl@xercesc_2_8@@QAE@QAVMemoryManager@1@@Z

??0DOMDocumentRange@xercesc_2_8@@IAE@XZ

??0DOMDocumentTraversal@xercesc_2_8@@IAE@XZ

??0DOMDocumentType@xercesc_2_8@@IAE@XZ

??0DOMDocumentTypeImpl@xercesc_2_8@@QAE@ABV01@_N1@Z

??0DOMDocumentTypeImpl@xercesc_2_8@@QAE@PAVDOMDocument@1@PB_W11_N@Z

??0DOMDocumentTypeImpl@xercesc_2_8@@QAE@PAVDOMDocument@1@PB_W_N@Z

??0DOMElement@xercesc_2_8@@IAE@ABV01@@Z

??0DOMElement@xercesc_2_8@@IAE@XZ

??0DOMElementImpl@xercesc_2_8@@QAE@ABV01@_N@Z

??0DOMElementImpl@xercesc_2_8@@QAE@PAVDOMDocument@1@PB_W@Z

??0DOMElementNSImpl@xercesc_2_8@@QAE@ABV01@_N@Z

??0DOMElementNSImpl@xercesc_2_8@@QAE@PAVDOMDocument@1@PB_W1@Z

??0DOMElementNSImpl@xercesc_2_8@@QAE@PAVDOMDocument@1@PB_W@Z

??0DOMEntity@xercesc_2_8@@IAE@ABV01@@Z

??0DOMEntity@xercesc_2_8@@IAE@XZ

??0DOMEntityImpl@xercesc_2_8@@QAE@ABV01@_N@Z

??0DOMEntityImpl@xercesc_2_8@@QAE@PAVDOMDocument@1@PB_W@Z

??0DOMEntityReference@xercesc_2_8@@IAE@ABV01@@Z

??0DOMEntityReference@xercesc_2_8@@IAE@XZ

??0DOMEntityReferenceImpl@xercesc_2_8@@QAE@ABV01@_N@Z

??0DOMEntityReferenceImpl@xercesc_2_8@@QAE@PAVDOMDocument@1@PB_W@Z

??0DOMEntityReferenceImpl@xercesc_2_8@@QAE@PAVDOMDocument@1@PB_W_N@Z

??0DOMEntityResolver@xercesc_2_8@@IAE@XZ

??0DOMError@xercesc_2_8@@IAE@XZ

??0DOMErrorHandler@xercesc_2_8@@IAE@XZ

??0DOMErrorImpl@xercesc_2_8@@QAE@F@Z

??0DOMErrorImpl@xercesc_2_8@@QAE@FPB_W0PAX@Z

??0DOMErrorImpl@xercesc_2_8@@QAE@FQB_WQAVDOMLocator@1@@Z

??0DOMException@xercesc_2_8@@QAE@ABV01@@Z

??0DOMException@xercesc_2_8@@QAE@FPB_WQAVMemoryManager@1@@Z

??0DOMException@xercesc_2_8@@QAE@XZ

??0DOMImplementation@xercesc_2_8@@IAE@XZ

??0DOMImplementationLS@xercesc_2_8@@IAE@XZ

??0DOMImplementationSource@xercesc_2_8@@IAE@XZ

??0DOMInputSource@xercesc_2_8@@IAE@XZ

??0DOMLocator@xercesc_2_8@@IAE@XZ

??0DOMLocatorImpl@xercesc_2_8@@QAE@JJQAVDOMNode@1@QB_WJ@Z

??0DOMLocatorImpl@xercesc_2_8@@QAE@XZ

??0DOMNamedNodeMap@xercesc_2_8@@IAE@XZ

??0DOMNamedNodeMapImpl@xercesc_2_8@@QAE@PAVDOMNode@1@@Z

??0DOMNode@xercesc_2_8@@IAE@ABV01@@Z

??0DOMNode@xercesc_2_8@@IAE@XZ

??0DOMNodeFilter@xercesc_2_8@@IAE@XZ

??0DOMNodeImpl@xercesc_2_8@@QAE@ABV01@@Z

??0DOMNodeImpl@xercesc_2_8@@QAE@PAVDOMNode@1@@Z

??0DOMNodeIterator@xercesc_2_8@@IAE@ABV01@@Z

??0DOMNodeIterator@xercesc_2_8@@IAE@XZ

??0DOMNodeIteratorImpl@xercesc_2_8@@QAE@ABV01@@Z

??0DOMNodeIteratorImpl@xercesc_2_8@@QAE@PAVDOMDocument@1@PAVDOMNode@1@KPAVDOMNodeFilter@1@_N@Z

??0DOMNodeList@xercesc_2_8@@IAE@XZ

??0DOMNodeListImpl@xercesc_2_8@@QAE@PAVDOMNode@1@@Z

??0DOMNotation@xercesc_2_8@@IAE@ABV01@@Z

??0DOMNotation@xercesc_2_8@@IAE@XZ

??0DOMNotationImpl@xercesc_2_8@@QAE@ABV01@_N@Z

??0DOMNotationImpl@xercesc_2_8@@QAE@PAVDOMDocument@1@PB_W@Z

??0DOMPSVITypeInfo@xercesc_2_8@@IAE@XZ

??0DOMParentNode@xercesc_2_8@@QAE@ABV01@@Z

??0DOMParentNode@xercesc_2_8@@QAE@PAVDOMDocument@1@@Z

??0DOMProcessingInstruction@xercesc_2_8@@IAE@ABV01@@Z

??0DOMProcessingInstruction@xercesc_2_8@@IAE@XZ

??0DOMProcessingInstructionImpl@xercesc_2_8@@QAE@ABV01@_N@Z

??0DOMProcessingInstructionImpl@xercesc_2_8@@QAE@PAVDOMDocument@1@PB_W1@Z

??0DOMRange@xercesc_2_8@@IAE@ABV01@@Z

??0DOMRange@xercesc_2_8@@IAE@XZ

??0DOMRangeException@xercesc_2_8@@QAE@ABV01@@Z

??0DOMRangeException@xercesc_2_8@@QAE@W4RangeExceptionCode@01@PB_WQAVMemoryManager@1@@Z

??0DOMRangeException@xercesc_2_8@@QAE@XZ

??0DOMRangeImpl@xercesc_2_8@@QAE@ABV01@@Z

??0DOMRangeImpl@xercesc_2_8@@QAE@PAVDOMDocument@1@QAVMemoryManager@1@@Z

??0DOMText@xercesc_2_8@@IAE@ABV01@@Z

??0DOMText@xercesc_2_8@@IAE@XZ

??0DOMTextImpl@xercesc_2_8@@QAE@ABV01@_N@Z

??0DOMTextImpl@xercesc_2_8@@QAE@PAVDOMDocument@1@PB_W@Z

??0DOMTreeWalker@xercesc_2_8@@IAE@ABV01@@Z

??0DOMTreeWalker@xercesc_2_8@@IAE@XZ

??0DOMTreeWalkerImpl@xercesc_2_8@@QAE@ABV01@@Z

??0DOMTreeWalkerImpl@xercesc_2_8@@QAE@PAVDOMNode@1@KPAVDOMNodeFilter@1@_N@Z

??0DOMTypeInfo@xercesc_2_8@@IAE@XZ

??0DOMTypeInfoImpl@xercesc_2_8@@QAE@PAVDOMDocumentImpl@1@PBVDOMPSVITypeInfo@1@@Z

??0DOMTypeInfoImpl@xercesc_2_8@@QAE@PB_W0@Z

??0DOMUserDataHandler@xercesc_2_8@@IAE@XZ

??0DOMWriter@xercesc_2_8@@IAE@XZ

??0DOMWriterFilter@xercesc_2_8@@IAE@XZ

??0DOMWriterImpl@xercesc_2_8@@QAE@QAVMemoryManager@1@@Z

??0DOMXPathEvaluator@xercesc_2_8@@IAE@XZ

??0DOMXPathException@xercesc_2_8@@QAE@ABV01@@Z

??0DOMXPathException@xercesc_2_8@@QAE@FPB_W@Z

??0DOMXPathException@xercesc_2_8@@QAE@XZ

??0DOMXPathExpression@xercesc_2_8@@IAE@XZ

??0DOMXPathNSResolver@xercesc_2_8@@IAE@XZ

??0DOMXPathNamespace@xercesc_2_8@@IAE@XZ

??0DOMXPathResult@xercesc_2_8@@IAE@XZ

??0DTDAttDef@xercesc_2_8@@QAE@QAVMemoryManager@1@@Z

??0DTDAttDef@xercesc_2_8@@QAE@QB_W0W4AttTypes@XMLAttDef@1@W4DefAttTypes@31@0QAVMemoryManager@1@@Z

??0DTDAttDef@xercesc_2_8@@QAE@QB_WW4AttTypes@XMLAttDef@1@W4DefAttTypes@31@QAVMemoryManager@1@@Z

??0DTDAttDefList@xercesc_2_8@@QAE@QAV?$RefHashTableOf@VDTDAttDef@xercesc_2_8@@@1@QAVMemoryManager@1@@Z

??0DTDAttDefList@xercesc_2_8@@QAE@QAVMemoryManager@1@@Z

??0DTDElementDecl@xercesc_2_8@@QAE@QAVMemoryManager@1@@Z

??0DTDElementDecl@xercesc_2_8@@QAE@QAVQName@1@W4ModelTypes@01@QAVMemoryManager@1@@Z

??0DTDElementDecl@xercesc_2_8@@QAE@QB_WIW4ModelTypes@01@QAVMemoryManager@1@@Z

??0DTDEntityDecl@xercesc_2_8@@QAE@QAVMemoryManager@1@@Z

??0DTDEntityDecl@xercesc_2_8@@QAE@QB_W0_NQAVMemoryManager@1@@Z

??0DTDEntityDecl@xercesc_2_8@@QAE@QB_W_NQAVMemoryManager@1@@Z

??0DTDEntityDecl@xercesc_2_8@@QAE@QB_W_W_N2@Z

??0DTDGrammar@xercesc_2_8@@QAE@QAVMemoryManager@1@@Z

??0DTDHandler@xercesc_2_8@@QAE@XZ

??0DTDScanner@xercesc_2_8@@QAE@PAVDTDGrammar@1@QAVDocTypeHandler@1@QAVMemoryManager@1@2@Z

??0DTDValidator@xercesc_2_8@@QAE@QAVXMLErrorReporter@1@@Z

??0DatatypeValidator@xercesc_2_8@@IAE@QAV01@QAV?$RefHashTableOf@VKVStringPair@xercesc_2_8@@@1@HW4ValidatorType@01@QAVMemoryManager@1@@Z

??0DatatypeValidatorFactory@xercesc_2_8@@QAE@QAVMemoryManager@1@@Z

??0DateDatatypeValidator@xercesc_2_8@@QAE@QAVDatatypeValidator@1@QAV?$RefHashTableOf@VKVStringPair@xercesc_2_8@@@1@QAV?$RefArrayVectorOf@_W@1@HQAVMemoryManager@1@@Z

??0DateDatatypeValidator@xercesc_2_8@@QAE@QAVMemoryManager@1@@Z

??0DateTimeDatatypeValidator@xercesc_2_8@@QAE@QAVDatatypeValidator@1@QAV?$RefHashTableOf@VKVStringPair@xercesc_2_8@@@1@QAV?$RefArrayVectorOf@_W@1@HQAVMemoryManager@1@@Z

??0DateTimeDatatypeValidator@xercesc_2_8@@QAE@QAVMemoryManager@1@@Z

??0DateTimeValidator@xercesc_2_8@@IAE@QAVDatatypeValidator@1@QAV?$RefHashTableOf@VKVStringPair@xercesc_2_8@@@1@HW4ValidatorType@21@QAVMemoryManager@1@@Z

??0DayDatatypeValidator@xercesc_2_8@@QAE@QAVDatatypeValidator@1@QAV?$RefHashTableOf@VKVStringPair@xercesc_2_8@@@1@QAV?$RefArrayVectorOf@_W@1@HQAVMemoryManager@1@@Z

??0DayDatatypeValidator@xercesc_2_8@@QAE@QAVMemoryManager@1@@Z

??0DecimalDatatypeValidator@xercesc_2_8@@IAE@QAVDatatypeValidator@1@QAV?$RefHashTableOf@VKVStringPair@xercesc_2_8@@@1@HW4ValidatorType@21@QAVMemoryManager@1@@Z

??0DecimalDatatypeValidator@xercesc_2_8@@QAE@QAVDatatypeValidator@1@QAV?$RefHashTableOf@VKVStringPair@xercesc_2_8@@@1@QAV?$RefArrayVectorOf@_W@1@HQAVMemoryManager@1@@Z

??0DecimalDatatypeValidator@xercesc_2_8@@QAE@QAVMemoryManager@1@@Z

??0DeclHandler@xercesc_2_8@@QAE@XZ

??0DefaultHandler@xercesc_2_8@@QAE@XZ

??0DefaultPanicHandler@xercesc_2_8@@QAE@XZ

??0DocTypeHandler@xercesc_2_8@@QAE@XZ

??0DocumentHandler@xercesc_2_8@@QAE@XZ

??0DoubleDatatypeValidator@xercesc_2_8@@IAE@QAVDatatypeValidator@1@QAV?$RefHashTableOf@VKVStringPair@xercesc_2_8@@@1@HW4ValidatorType@21@QAVMemoryManager@1@@Z

??0DoubleDatatypeValidator@xercesc_2_8@@QAE@QAVDatatypeValidator@1@QAV?$RefHashTableOf@VKVStringPair@xercesc_2_8@@@1@QAV?$RefArrayVectorOf@_W@1@HQAVMemoryManager@1@@Z

??0DoubleDatatypeValidator@xercesc_2_8@@QAE@QAVMemoryManager@1@@Z

??0DurationDatatypeValidator@xercesc_2_8@@QAE@QAVDatatypeValidator@1@QAV?$RefHashTableOf@VKVStringPair@xercesc_2_8@@@1@QAV?$RefArrayVectorOf@_W@1@HQAVMemoryManager@1@@Z

??0DurationDatatypeValidator@xercesc_2_8@@QAE@QAVMemoryManager@1@@Z

??0ENTITYDatatypeValidator@xercesc_2_8@@QAE@QAVDatatypeValidator@1@QAV?$RefHashTableOf@VKVStringPair@xercesc_2_8@@@1@QAV?$RefArrayVectorOf@_W@1@HQAVMemoryManager@1@@Z

??0ENTITYDatatypeValidator@xercesc_2_8@@QAE@QAVMemoryManager@1@@Z

??0ElemStack@xercesc_2_8@@QAE@QAVMemoryManager@1@@Z

??0EmptyStackException@xercesc_2_8@@QAE@ABV01@@Z

??0EmptyStackException@xercesc_2_8@@QAE@QBDIW4Codes@XMLExcepts@1@0000PAVMemoryManager@1@@Z

??0EmptyStackException@xercesc_2_8@@QAE@QBDIW4Codes@XMLExcepts@1@PAVMemoryManager@1@@Z

??0EmptyStackException@xercesc_2_8@@QAE@QBDIW4Codes@XMLExcepts@1@QB_W222PAVMemoryManager@1@@Z

??0EncodingValidator@xercesc_2_8@@AAE@XZ

??0EndOfEntityException@xercesc_2_8@@QAE@ABV01@@Z

??0EndOfEntityException@xercesc_2_8@@QAE@PAVXMLEntityDecl@1@I@Z

??0EntityResolver@xercesc_2_8@@QAE@XZ

??0ErrorHandler@xercesc_2_8@@QAE@XZ

??0FieldActivator@xercesc_2_8@@QAE@ABV01@@Z

??0FieldActivator@xercesc_2_8@@QAE@QAVValueStoreCache@1@QAVXPathMatcherStack@1@QAVMemoryManager@1@@Z

??0FieldMatcher@xercesc_2_8@@AAE@QAVXercesXPath@1@QAVIC_Field@1@QAVValueStore@1@QAVFieldActivator@1@QAVMemoryManager@1@@Z

??0FieldValueMap@xercesc_2_8@@QAE@ABV01@@Z

??0FieldValueMap@xercesc_2_8@@QAE@QAVMemoryManager@1@@Z

??0FloatDatatypeValidator@xercesc_2_8@@IAE@QAVDatatypeValidator@1@QAV?$RefHashTableOf@VKVStringPair@xercesc_2_8@@@1@HW4ValidatorType@21@QAVMemoryManager@1@@Z

??0FloatDatatypeValidator@xercesc_2_8@@QAE@QAVDatatypeValidator@1@QAV?$RefHashTableOf@VKVStringPair@xercesc_2_8@@@1@QAV?$RefArrayVectorOf@_W@1@HQAVMemoryManager@1@@Z

??0FloatDatatypeValidator@xercesc_2_8@@QAE@QAVMemoryManager@1@@Z

??0GeneralAttributeCheck@xercesc_2_8@@QAE@QAVMemoryManager@1@@Z

??0Grammar@xercesc_2_8@@IAE@XZ

??0GrammarResolver@xercesc_2_8@@QAE@QAVXMLGrammarPool@1@QAVMemoryManager@1@@Z

??0HandlerBase@xercesc_2_8@@QAE@XZ

??0HashBase@xercesc_2_8@@QAE@XZ

??0HashCMStateSet@xercesc_2_8@@QAE@XZ

??0HashPtr@xercesc_2_8@@QAE@XZ

??0HashXMLCh@xercesc_2_8@@QAE@XZ

??0HexBinaryDatatypeValidator@xercesc_2_8@@QAE@QAVDatatypeValidator@1@QAV?$RefHashTableOf@VKVStringPair@xercesc_2_8@@@1@QAV?$RefArrayVectorOf@_W@1@HQAVMemoryManager@1@@Z

??0HexBinaryDatatypeValidator@xercesc_2_8@@QAE@QAVMemoryManager@1@@Z

??0IC_Field@xercesc_2_8@@QAE@QAVMemoryManager@1@@Z

??0IC_Field@xercesc_2_8@@QAE@QAVXercesXPath@1@QAVIdentityConstraint@1@@Z

??0IC_Key@xercesc_2_8@@QAE@QAVMemoryManager@1@@Z

??0IC_Key@xercesc_2_8@@QAE@QB_W0QAVMemoryManager@1@@Z

??0IC_KeyRef@xercesc_2_8@@QAE@QAVMemoryManager@1@@Z

??0IC_KeyRef@xercesc_2_8@@QAE@QB_W0QAVIdentityConstraint@1@QAVMemoryManager@1@@Z

??0IC_Selector@xercesc_2_8@@QAE@QAVMemoryManager@1@@Z

??0IC_Selector@xercesc_2_8@@QAE@QAVXercesXPath@1@QAVIdentityConstraint@1@@Z

??0IC_Unique@xercesc_2_8@@QAE@QAVMemoryManager@1@@Z

??0IC_Unique@xercesc_2_8@@QAE@QB_W0QAVMemoryManager@1@@Z

??0IDDatatypeValidator@xercesc_2_8@@IAE@QAVDatatypeValidator@1@QAV?$RefHashTableOf@VKVStringPair@xercesc_2_8@@@1@HW4ValidatorType@21@QAVMemoryManager@1@@Z

??0IDDatatypeValidator@xercesc_2_8@@QAE@QAVDatatypeValidator@1@QAV?$RefHashTableOf@VKVStringPair@xercesc_2_8@@@1@QAV?$RefArrayVectorOf@_W@1@HQAVMemoryManager@1@@Z

??0IDDatatypeValidator@xercesc_2_8@@QAE@QAVMemoryManager@1@@Z

??0IDREFDatatypeValidator@xercesc_2_8@@IAE@QAVDatatypeValidator@1@QAV?$RefHashTableOf@VKVStringPair@xercesc_2_8@@@1@HW4ValidatorType@21@QAVMemoryManager@1@@Z

??0IDREFDatatypeValidator@xercesc_2_8@@QAE@QAVDatatypeValidator@1@QAV?$RefHashTableOf@VKVStringPair@xercesc_2_8@@@1@QAV?$RefArrayVectorOf@_W@1@HQAVMemoryManager@1@@Z

??0IDREFDatatypeValidator@xercesc_2_8@@QAE@QAVMemoryManager@1@@Z

??0IGXMLScanner@xercesc_2_8@@QAE@QAVXMLDocumentHandler@1@QAVDocTypeHandler@1@QAVXMLEntityHandler@1@QAVXMLErrorReporter@1@QAVXMLValidator@1@QAVGrammarResolver@1@QAVMemoryManager@1@@Z

??0IGXMLScanner@xercesc_2_8@@QAE@QAVXMLValidator@1@QAVGrammarResolver@1@QAVMemoryManager@1@@Z

??0IOException@xercesc_2_8@@QAE@ABV01@@Z

??0IOException@xercesc_2_8@@QAE@QBDIW4Codes@XMLExcepts@1@0000PAVMemoryManager@1@@Z

??0IOException@xercesc_2_8@@QAE@QBDIW4Codes@XMLExcepts@1@PAVMemoryManager@1@@Z

??0IOException@xercesc_2_8@@QAE@QBDIW4Codes@XMLExcepts@1@QB_W222PAVMemoryManager@1@@Z

??0IdentityConstraint@xercesc_2_8@@IAE@QB_W0QAVMemoryManager@1@@Z

??0IdentityConstraintHandler@xercesc_2_8@@QAE@QAVXMLScanner@1@QAVMemoryManager@1@@Z

??0IllegalArgumentException@xercesc_2_8@@QAE@ABV01@@Z

??0IllegalArgumentException@xercesc_2_8@@QAE@QBDIW4Codes@XMLExcepts@1@0000PAVMemoryManager@1@@Z

??0IllegalArgumentException@xercesc_2_8@@QAE@QBDIW4Codes@XMLExcepts@1@PAVMemoryManager@1@@Z

??0IllegalArgumentException@xercesc_2_8@@QAE@QBDIW4Codes@XMLExcepts@1@QB_W222PAVMemoryManager@1@@Z

??0InputSource@xercesc_2_8@@IAE@QAVMemoryManager@1@@Z

??0InputSource@xercesc_2_8@@IAE@QBD0QAVMemoryManager@1@@Z

??0InputSource@xercesc_2_8@@IAE@QBDQAVMemoryManager@1@@Z

??0InputSource@xercesc_2_8@@IAE@QB_W0QAVMemoryManager@1@@Z

??0InputSource@xercesc_2_8@@IAE@QB_WQAVMemoryManager@1@@Z

??0InvalidCastException@xercesc_2_8@@QAE@ABV01@@Z

??0InvalidCastException@xercesc_2_8@@QAE@QBDIW4Codes@XMLExcepts@1@0000PAVMemoryManager@1@@Z

??0InvalidCastException@xercesc_2_8@@QAE@QBDIW4Codes@XMLExcepts@1@PAVMemoryManager@1@@Z

??0InvalidCastException@xercesc_2_8@@QAE@QBDIW4Codes@XMLExcepts@1@QB_W222PAVMemoryManager@1@@Z

??0InvalidDatatypeFacetException@xercesc_2_8@@QAE@ABV01@@Z

??0InvalidDatatypeFacetException@xercesc_2_8@@QAE@QBDIW4Codes@XMLExcepts@1@0000PAVMemoryManager@1@@Z

??0InvalidDatatypeFacetException@xercesc_2_8@@QAE@QBDIW4Codes@XMLExcepts@1@PAVMemoryManager@1@@Z

??0InvalidDatatypeFacetException@xercesc_2_8@@QAE@QBDIW4Codes@XMLExcepts@1@QB_W222PAVMemoryManager@1@@Z

??0InvalidDatatypeValueException@xercesc_2_8@@QAE@ABV01@@Z

??0InvalidDatatypeValueException@xercesc_2_8@@QAE@QBDIW4Codes@XMLExcepts@1@0000PAVMemoryManager@1@@Z

??0InvalidDatatypeValueException@xercesc_2_8@@QAE@QBDIW4Codes@XMLExcepts@1@PAVMemoryManager@1@@Z

??0InvalidDatatypeValueException@xercesc_2_8@@QAE@QBDIW4Codes@XMLExcepts@1@QB_W222PAVMemoryManager@1@@Z

??0KVStringPair@xercesc_2_8@@QAE@ABV01@@Z

??0KVStringPair@xercesc_2_8@@QAE@QAVMemoryManager@1@@Z

??0KVStringPair@xercesc_2_8@@QAE@QB_W0IQAVMemoryManager@1@@Z

??0KVStringPair@xercesc_2_8@@QAE@QB_W0QAVMemoryManager@1@@Z

??0KVStringPair@xercesc_2_8@@QAE@QB_WI0IQAVMemoryManager@1@@Z

??0LexicalHandler@xercesc_2_8@@QAE@XZ

??0ListDatatypeValidator@xercesc_2_8@@QAE@QAVDatatypeValidator@1@QAV?$RefHashTableOf@VKVStringPair@xercesc_2_8@@@1@QAV?$RefArrayVectorOf@_W@1@HQAVMemoryManager@1@@Z

??0ListDatatypeValidator@xercesc_2_8@@QAE@QAVMemoryManager@1@@Z

??0LocalFileFormatTarget@xercesc_2_8@@QAE@QBDQAVMemoryManager@1@@Z

??0LocalFileFormatTarget@xercesc_2_8@@QAE@QB_WQAVMemoryManager@1@@Z

??0LocalFileInputSource@xercesc_2_8@@QAE@QB_W0QAVMemoryManager@1@@Z

??0LocalFileInputSource@xercesc_2_8@@QAE@QB_WQAVMemoryManager@1@@Z

??0Locator@xercesc_2_8@@QAE@XZ

??0MalformedURLException@xercesc_2_8@@QAE@ABV01@@Z

??0MalformedURLException@xercesc_2_8@@QAE@QBDIW4Codes@XMLExcepts@1@0000PAVMemoryManager@1@@Z

??0MalformedURLException@xercesc_2_8@@QAE@QBDIW4Codes@XMLExcepts@1@PAVMemoryManager@1@@Z

??0MalformedURLException@xercesc_2_8@@QAE@QBDIW4Codes@XMLExcepts@1@QB_W222PAVMemoryManager@1@@Z

??0Match@xercesc_2_8@@QAE@ABV01@@Z

??0Match@xercesc_2_8@@QAE@QAVMemoryManager@1@@Z

??0MemBufFormatTarget@xercesc_2_8@@QAE@HQAVMemoryManager@1@@Z

??0MemBufInputSource@xercesc_2_8@@QAE@QBEIQBD_NQAVMemoryManager@1@@Z

??0MemBufInputSource@xercesc_2_8@@QAE@QBEIQB_W_NQAVMemoryManager@1@@Z

??0MemoryManager@xercesc_2_8@@IAE@XZ

??0MemoryManagerArrayImpl@xercesc_2_8@@QAE@XZ

??0MemoryManagerImpl@xercesc_2_8@@QAE@XZ

??0ModifierOp@xercesc_2_8@@QAE@FHHQAVMemoryManager@1@@Z

??0ModifierToken@xercesc_2_8@@QAE@QAVToken@1@HHQAVMemoryManager@1@@Z

??0MonthDatatypeValidator@xercesc_2_8@@QAE@QAVDatatypeValidator@1@QAV?$RefHashTableOf@VKVStringPair@xercesc_2_8@@@1@QAV?$RefArrayVectorOf@_W@1@HQAVMemoryManager@1@@Z

??0MonthDatatypeValidator@xercesc_2_8@@QAE@QAVMemoryManager@1@@Z

??0MonthDayDatatypeValidator@xercesc_2_8@@QAE@QAVDatatypeValidator@1@QAV?$RefHashTableOf@VKVStringPair@xercesc_2_8@@@1@QAV?$RefArrayVectorOf@_W@1@HQAVMemoryManager@1@@Z

??0MonthDayDatatypeValidator@xercesc_2_8@@QAE@QAVMemoryManager@1@@Z

??0NCNameDatatypeValidator@xercesc_2_8@@IAE@QAVDatatypeValidator@1@QAV?$RefHashTableOf@VKVStringPair@xercesc_2_8@@@1@HW4ValidatorType@21@QAVMemoryManager@1@@Z

??0NCNameDatatypeValidator@xercesc_2_8@@QAE@QAVDatatypeValidator@1@QAV?$RefHashTableOf@VKVStringPair@xercesc_2_8@@@1@QAV?$RefArrayVectorOf@_W@1@HQAVMemoryManager@1@@Z

??0NCNameDatatypeValidator@xercesc_2_8@@QAE@QAVMemoryManager@1@@Z

??0NOTATIONDatatypeValidator@xercesc_2_8@@QAE@QAVDatatypeValidator@1@QAV?$RefHashTableOf@VKVStringPair@xercesc_2_8@@@1@QAV?$RefArrayVectorOf@_W@1@HQAVMemoryManager@1@@Z

??0NOTATIONDatatypeValidator@xercesc_2_8@@QAE@QAVMemoryManager@1@@Z

??0NameDatatypeValidator@xercesc_2_8@@IAE@QAVDatatypeValidator@1@QAV?$RefHashTableOf@VKVStringPair@xercesc_2_8@@@1@HW4ValidatorType@21@QAVMemoryManager@1@@Z

??0NameDatatypeValidator@xercesc_2_8@@QAE@QAVDatatypeValidator@1@QAV?$RefHashTableOf@VKVStringPair@xercesc_2_8@@@1@QAV?$RefArrayVectorOf@_W@1@HQAVMemoryManager@1@@Z

??0NameDatatypeValidator@xercesc_2_8@@QAE@QAVMemoryManager@1@@Z

??0NamespaceScope@xercesc_2_8@@QAE@QAVMemoryManager@1@@Z

??0NetAccessorException@xercesc_2_8@@QAE@ABV01@@Z

??0NetAccessorException@xercesc_2_8@@QAE@QBDIW4Codes@XMLExcepts@1@0000PAVMemoryManager@1@@Z

??0NetAccessorException@xercesc_2_8@@QAE@QBDIW4Codes@XMLExcepts@1@PAVMemoryManager@1@@Z

??0NetAccessorException@xercesc_2_8@@QAE@QBDIW4Codes@XMLExcepts@1@QB_W222PAVMemoryManager@1@@Z

??0NoSuchElementException@xercesc_2_8@@QAE@ABV01@@Z

??0NoSuchElementException@xercesc_2_8@@QAE@QBDIW4Codes@XMLExcepts@1@0000PAVMemoryManager@1@@Z

??0NoSuchElementException@xercesc_2_8@@QAE@QBDIW4Codes@XMLExcepts@1@PAVMemoryManager@1@@Z

??0NoSuchElementException@xercesc_2_8@@QAE@QBDIW4Codes@XMLExcepts@1@QB_W222PAVMemoryManager@1@@Z

??0NullPointerException@xercesc_2_8@@QAE@ABV01@@Z

??0NullPointerException@xercesc_2_8@@QAE@QBDIW4Codes@XMLExcepts@1@0000PAVMemoryManager@1@@Z

??0NullPointerException@xercesc_2_8@@QAE@QBDIW4Codes@XMLExcepts@1@PAVMemoryManager@1@@Z

??0NullPointerException@xercesc_2_8@@QAE@QBDIW4Codes@XMLExcepts@1@QB_W222PAVMemoryManager@1@@Z

??0NumberFormatException@xercesc_2_8@@QAE@ABV01@@Z

??0NumberFormatException@xercesc_2_8@@QAE@QBDIW4Codes@XMLExcepts@1@0000PAVMemoryManager@1@@Z

??0NumberFormatException@xercesc_2_8@@QAE@QBDIW4Codes@XMLExcepts@1@PAVMemoryManager@1@@Z

??0NumberFormatException@xercesc_2_8@@QAE@QBDIW4Codes@XMLExcepts@1@QB_W222PAVMemoryManager@1@@Z

??0Op@xercesc_2_8@@IAE@FQAVMemoryManager@1@@Z

??0OpFactory@xercesc_2_8@@QAE@QAVMemoryManager@1@@Z

??0OutOfMemoryException@xercesc_2_8@@QAE@ABV01@@Z

??0OutOfMemoryException@xercesc_2_8@@QAE@XZ

??0PSVIAttribute@xercesc_2_8@@QAE@QAVMemoryManager@1@@Z

??0PSVIAttributeList@xercesc_2_8@@QAE@QAVMemoryManager@1@@Z

??0PSVIElement@xercesc_2_8@@QAE@QAVMemoryManager@1@@Z

??0PSVIHandler@xercesc_2_8@@IAE@XZ

??0PSVIItem@xercesc_2_8@@QAE@QAVMemoryManager@1@@Z

??0PanicHandler@xercesc_2_8@@IAE@XZ

??0ParenToken@xercesc_2_8@@QAE@GQAVToken@1@HQAVMemoryManager@1@@Z

??0ParseException@xercesc_2_8@@QAE@ABV01@@Z

??0ParseException@xercesc_2_8@@QAE@QBDIW4Codes@XMLExcepts@1@0000PAVMemoryManager@1@@Z

??0ParseException@xercesc_2_8@@QAE@QBDIW4Codes@XMLExcepts@1@PAVMemoryManager@1@@Z

??0ParseException@xercesc_2_8@@QAE@QBDIW4Codes@XMLExcepts@1@QB_W222PAVMemoryManager@1@@Z

??0Parser@xercesc_2_8@@QAE@XZ

??0ParserForXMLSchema@xercesc_2_8@@QAE@QAVMemoryManager@1@@Z

??0QName@xercesc_2_8@@QAE@ABV01@@Z

??0QName@xercesc_2_8@@QAE@QAVMemoryManager@1@@Z

??0QName@xercesc_2_8@@QAE@QB_W0IQAVMemoryManager@1@@Z

??0QName@xercesc_2_8@@QAE@QB_WIQAVMemoryManager@1@@Z

??0QNameDatatypeValidator@xercesc_2_8@@QAE@QAVDatatypeValidator@1@QAV?$RefHashTableOf@VKVStringPair@xercesc_2_8@@@1@QAV?$RefArrayVectorOf@_W@1@HQAVMemoryManager@1@@Z

??0QNameDatatypeValidator@xercesc_2_8@@QAE@QAVMemoryManager@1@@Z

??0RangeFactory@xercesc_2_8@@IAE@XZ

??0RangeOp@xercesc_2_8@@QAE@FQBVToken@1@QAVMemoryManager@1@@Z

??0RangeToken@xercesc_2_8@@QAE@GQAVMemoryManager@1@@Z

??0RangeTokenElemMap@xercesc_2_8@@QAE@I@Z

??0RangeTokenMap@xercesc_2_8@@IAE@PAVMemoryManager@1@@Z

??0ReaderMgr@xercesc_2_8@@QAE@QAVMemoryManager@1@@Z

??0RegularExpression@xercesc_2_8@@QAE@QBD0QAVMemoryManager@1@@Z

??0RegularExpression@xercesc_2_8@@QAE@QBDQAVMemoryManager@1@@Z

??0RegularExpression@xercesc_2_8@@QAE@QB_W0QAVMemoryManager@1@@Z

??0RegularExpression@xercesc_2_8@@QAE@QB_WQAVMemoryManager@1@@Z

??0RegxParser@xercesc_2_8@@QAE@QAVMemoryManager@1@@Z

??0RuntimeException@xercesc_2_8@@QAE@ABV01@@Z

??0RuntimeException@xercesc_2_8@@QAE@QBDIW4Codes@XMLExcepts@1@0000PAVMemoryManager@1@@Z

??0RuntimeException@xercesc_2_8@@QAE@QBDIW4Codes@XMLExcepts@1@PAVMemoryManager@1@@Z

??0RuntimeException@xercesc_2_8@@QAE@QBDIW4Codes@XMLExcepts@1@QB_W222PAVMemoryManager@1@@Z

??0SAX2XMLFilter@xercesc_2_8@@QAE@XZ

??0SAX2XMLFilterImpl@xercesc_2_8@@QAE@PAVSAX2XMLReader@1@@Z

??0SAX2XMLReader@xercesc_2_8@@QAE@XZ

??0SAX2XMLReaderImpl@xercesc_2_8@@QAE@QAVMemoryManager@1@QAVXMLGrammarPool@1@@Z

??0SAXException@xercesc_2_8@@QAE@ABV01@@Z

??0SAXException@xercesc_2_8@@QAE@QAVMemoryManager@1@@Z

??0SAXException@xercesc_2_8@@QAE@QBDQAVMemoryManager@1@@Z

??0SAXException@xercesc_2_8@@QAE@QB_WQAVMemoryManager@1@@Z

??0SAXNotRecognizedException@xercesc_2_8@@QAE@ABV01@@Z

??0SAXNotRecognizedException@xercesc_2_8@@QAE@ABVSAXException@1@@Z

??0SAXNotRecognizedException@xercesc_2_8@@QAE@QAVMemoryManager@1@@Z

??0SAXNotRecognizedException@xercesc_2_8@@QAE@QBDQAVMemoryManager@1@@Z

??0SAXNotRecognizedException@xercesc_2_8@@QAE@QB_WQAVMemoryManager@1@@Z

??0SAXNotSupportedException@xercesc_2_8@@QAE@ABV01@@Z

??0SAXNotSupportedException@xercesc_2_8@@QAE@ABVSAXException@1@@Z

??0SAXNotSupportedException@xercesc_2_8@@QAE@QAVMemoryManager@1@@Z

??0SAXNotSupportedException@xercesc_2_8@@QAE@QBDQAVMemoryManager@1@@Z

??0SAXNotSupportedException@xercesc_2_8@@QAE@QB_WQAVMemoryManager@1@@Z

??0SAXParseException@xercesc_2_8@@QAE@ABV01@@Z

??0SAXParseException@xercesc_2_8@@QAE@QB_W00JJQAVMemoryManager@1@@Z

??0SAXParseException@xercesc_2_8@@QAE@QB_WABVLocator@1@QAVMemoryManager@1@@Z

??0SAXParser@xercesc_2_8@@QAE@QAVXMLValidator@1@QAVMemoryManager@1@QAVXMLGrammarPool@1@@Z

??0SGXMLScanner@xercesc_2_8@@QAE@QAVXMLDocumentHandler@1@QAVDocTypeHandler@1@QAVXMLEntityHandler@1@QAVXMLErrorReporter@1@QAVXMLValidator@1@QAVGrammarResolver@1@QAVMemoryManager@1@@Z

??0SGXMLScanner@xercesc_2_8@@QAE@QAVXMLValidator@1@QAVGrammarResolver@1@QAVMemoryManager@1@@Z

??0SchemaAttDef@xercesc_2_8@@QAE@PBV01@@Z

??0SchemaAttDef@xercesc_2_8@@QAE@QAVMemoryManager@1@@Z

??0SchemaAttDef@xercesc_2_8@@QAE@QB_W0H0W4AttTypes@XMLAttDef@1@W4DefAttTypes@31@0QAVMemoryManager@1@@Z

??0SchemaAttDef@xercesc_2_8@@QAE@QB_W0HW4AttTypes@XMLAttDef@1@W4DefAttTypes@31@QAVMemoryManager@1@@Z

??0SchemaAttDefList@xercesc_2_8@@QAE@QAV?$RefHash2KeysTableOf@VSchemaAttDef@xercesc_2_8@@@1@QAVMemoryManager@1@@Z

??0SchemaAttDefList@xercesc_2_8@@QAE@QAVMemoryManager@1@@Z

??0SchemaDateTimeException@xercesc_2_8@@QAE@ABV01@@Z

??0SchemaDateTimeException@xercesc_2_8@@QAE@QBDIW4Codes@XMLExcepts@1@0000PAVMemoryManager@1@@Z

??0SchemaDateTimeException@xercesc_2_8@@QAE@QBDIW4Codes@XMLExcepts@1@PAVMemoryManager@1@@Z

??0SchemaDateTimeException@xercesc_2_8@@QAE@QBDIW4Codes@XMLExcepts@1@QB_W222PAVMemoryManager@1@@Z

??0SchemaElementDecl@xercesc_2_8@@QAE@QAVMemoryManager@1@@Z

??0SchemaElementDecl@xercesc_2_8@@QAE@QBVQName@1@W4ModelTypes@01@HQAVMemoryManager@1@@Z

??0SchemaElementDecl@xercesc_2_8@@QAE@QB_W0HW4ModelTypes@01@HQAVMemoryManager@1@@Z

??0SchemaGrammar@xercesc_2_8@@QAE@QAVMemoryManager@1@@Z

??0SchemaInfo@xercesc_2_8@@QAE@GHHHHIQA_WQB_WQBVDOMElement@1@QAVMemoryManager@1@@Z

??0SchemaValidator@xercesc_2_8@@QAE@QAVXMLErrorReporter@1@QAVMemoryManager@1@@Z

??0SecurityManager@xercesc_2_8@@QAE@XZ

??0SelectorMatcher@xercesc_2_8@@AAE@QAVXercesXPath@1@QAVIC_Selector@1@QAVFieldActivator@1@HQAVMemoryManager@1@@Z

??0StdInInputSource@xercesc_2_8@@QAE@QAVMemoryManager@1@@Z

??0StdOutFormatTarget@xercesc_2_8@@QAE@XZ

??0StringDatatypeValidator@xercesc_2_8@@IAE@QAVDatatypeValidator@1@QAV?$RefHashTableOf@VKVStringPair@xercesc_2_8@@@1@HW4ValidatorType@21@QAVMemoryManager@1@@Z

??0StringDatatypeValidator@xercesc_2_8@@QAE@QAVDatatypeValidator@1@QAV?$RefHashTableOf@VKVStringPair@xercesc_2_8@@@1@QAV?$RefArrayVectorOf@_W@1@HQAVMemoryManager@1@@Z

??0StringDatatypeValidator@xercesc_2_8@@QAE@QAVMemoryManager@1@@Z

??0StringOp@xercesc_2_8@@QAE@FQB_WQAVMemoryManager@1@@Z

??0StringToken@xercesc_2_8@@QAE@GQB_WHQAVMemoryManager@1@@Z

??0SubstitutionGroupComparator@xercesc_2_8@@QAE@QAVGrammarResolver@1@QAVXMLStringPool@1@@Z

??0ThrowEOEJanitor@xercesc_2_8@@QAE@PAVReaderMgr@1@_N@Z

??0TimeDatatypeValidator@xercesc_2_8@@QAE@QAVDatatypeValidator@1@QAV?$RefHashTableOf@VKVStringPair@xercesc_2_8@@@1@QAV?$RefArrayVectorOf@_W@1@HQAVMemoryManager@1@@Z

??0TimeDatatypeValidator@xercesc_2_8@@QAE@QAVMemoryManager@1@@Z

??0Token@xercesc_2_8@@QAE@GQAVMemoryManager@1@@Z

??0TokenFactory@xercesc_2_8@@QAE@QAVMemoryManager@1@@Z

??0TranscodingException@xercesc_2_8@@QAE@ABV01@@Z

??0TranscodingException@xercesc_2_8@@QAE@QBDIW4Codes@XMLExcepts@1@0000PAVMemoryManager@1@@Z

??0TranscodingException@xercesc_2_8@@QAE@QBDIW4Codes@XMLExcepts@1@PAVMemoryManager@1@@Z

??0TranscodingException@xercesc_2_8@@QAE@QBDIW4Codes@XMLExcepts@1@QB_W222PAVMemoryManager@1@@Z

??0TraverseSchema@xercesc_2_8@@QAE@QAVDOMElement@1@QAVXMLStringPool@1@QAVSchemaGrammar@1@QAVGrammarResolver@1@QAVXMLScanner@1@QB_WQAVXMLEntityHandler@1@QAVXMLErrorReporter@1@QAVMemoryManager@1@@Z

??0URLInputSource@xercesc_2_8@@QAE@ABVXMLURL@1@QAVMemoryManager@1@@Z

??0URLInputSource@xercesc_2_8@@QAE@QB_W00QAVMemoryManager@1@@Z

??0URLInputSource@xercesc_2_8@@QAE@QB_W0QAVMemoryManager@1@@Z

??0URLInputSource@xercesc_2_8@@QAE@QB_WQBD1QAVMemoryManager@1@@Z

??0URLInputSource@xercesc_2_8@@QAE@QB_WQBDQAVMemoryManager@1@@Z

??0UTFDataFormatException@xercesc_2_8@@QAE@ABV01@@Z

??0UTFDataFormatException@xercesc_2_8@@QAE@QBDIW4Codes@XMLExcepts@1@0000PAVMemoryManager@1@@Z

??0UTFDataFormatException@xercesc_2_8@@QAE@QBDIW4Codes@XMLExcepts@1@PAVMemoryManager@1@@Z

??0UTFDataFormatException@xercesc_2_8@@QAE@QBDIW4Codes@XMLExcepts@1@QB_W222PAVMemoryManager@1@@Z

??0UnexpectedEOFException@xercesc_2_8@@QAE@ABV01@@Z

??0UnexpectedEOFException@xercesc_2_8@@QAE@QBDIW4Codes@XMLExcepts@1@0000PAVMemoryManager@1@@Z

??0UnexpectedEOFException@xercesc_2_8@@QAE@QBDIW4Codes@XMLExcepts@1@PAVMemoryManager@1@@Z

??0UnexpectedEOFException@xercesc_2_8@@QAE@QBDIW4Codes@XMLExcepts@1@QB_W222PAVMemoryManager@1@@Z

??0UnicodeRangeFactory@xercesc_2_8@@QAE@XZ

??0UnionDatatypeValidator@xercesc_2_8@@QAE@QAV?$RefVectorOf@VDatatypeValidator@xercesc_2_8@@@1@HQAVMemoryManager@1@@Z

??0UnionDatatypeValidator@xercesc_2_8@@QAE@QAVDatatypeValidator@1@QAV?$RefHashTableOf@VKVStringPair@xercesc_2_8@@@1@QAV?$RefArrayVectorOf@_W@1@HQAVMemoryManager@1@QAV?$RefVectorOf@VDatatypeValidator@xercesc_2_8@@@1@_N@Z

??0UnionDatatypeValidator@xercesc_2_8@@QAE@QAVMemoryManager@1@@Z

??0UnionOp@xercesc_2_8@@QAE@FHQAVMemoryManager@1@@Z

??0UnionToken@xercesc_2_8@@QAE@GQAVMemoryManager@1@@Z

??0UnsupportedEncodingException@xercesc_2_8@@QAE@ABV01@@Z

??0UnsupportedEncodingException@xercesc_2_8@@QAE@QBDIW4Codes@XMLExcepts@1@0000PAVMemoryManager@1@@Z

??0UnsupportedEncodingException@xercesc_2_8@@QAE@QBDIW4Codes@XMLExcepts@1@PAVMemoryManager@1@@Z

??0UnsupportedEncodingException@xercesc_2_8@@QAE@QBDIW4Codes@XMLExcepts@1@QB_W222PAVMemoryManager@1@@Z

??0ValidationContext@xercesc_2_8@@IAE@QAVMemoryManager@1@@Z

??0ValidationContextImpl@xercesc_2_8@@QAE@QAVMemoryManager@1@@Z

??0ValueStore@xercesc_2_8@@QAE@QAVIdentityConstraint@1@QAVXMLScanner@1@QAVMemoryManager@1@@Z

??0ValueStoreCache@xercesc_2_8@@QAE@QAVMemoryManager@1@@Z

??0VecAttrListImpl@xercesc_2_8@@QAE@XZ

??0VecAttributesImpl@xercesc_2_8@@QAE@XZ

??0WFElemStack@xercesc_2_8@@QAE@QAVMemoryManager@1@@Z

??0WFXMLScanner@xercesc_2_8@@QAE@QAVXMLDocumentHandler@1@QAVDocTypeHandler@1@QAVXMLEntityHandler@1@QAVXMLErrorReporter@1@QAVXMLValidator@1@QAVGrammarResolver@1@QAVMemoryManager@1@@Z

??0WFXMLScanner@xercesc_2_8@@QAE@QAVXMLValidator@1@QAVGrammarResolver@1@QAVMemoryManager@1@@Z

??0Win32LCPTranscoder@xercesc_2_8@@QAE@XZ

??0Win32MsgLoader@xercesc_2_8@@QAE@QB_W@Z

??0Win32TransService@xercesc_2_8@@QAE@XZ

??0Win32Transcoder@xercesc_2_8@@QAE@QB_WIIIQAVMemoryManager@1@@Z

??0WinSockNetAccessor@xercesc_2_8@@QAE@XZ

??0Wrapper4DOMInputSource@xercesc_2_8@@QAE@QAVDOMInputSource@1@_NQAVMemoryManager@1@@Z

??0Wrapper4InputSource@xercesc_2_8@@QAE@QAVInputSource@1@_NQAVMemoryManager@1@@Z

??0XML256TableTranscoder@xercesc_2_8@@IAE@QB_WI0QBUTransRec@XMLTransService@1@IQAVMemoryManager@1@@Z

??0XML88591Transcoder@xercesc_2_8@@QAE@QB_WIQAVMemoryManager@1@@Z

??0XMLASCIITranscoder@xercesc_2_8@@QAE@QB_WIQAVMemoryManager@1@@Z

??0XMLAbstractDoubleFloat@xercesc_2_8@@IAE@QAVMemoryManager@1@@Z

??0XMLAttDef@xercesc_2_8@@IAE@QB_WW4AttTypes@01@W4DefAttTypes@01@0QAVMemoryManager@1@@Z

??0XMLAttDef@xercesc_2_8@@IAE@W4AttTypes@01@W4DefAttTypes@01@QAVMemoryManager@1@@Z

??0XMLAttDefList@xercesc_2_8@@IAE@QAVMemoryManager@1@@Z

??0XMLAttr@xercesc_2_8@@QAE@IQB_W00W4AttTypes@XMLAttDef@1@_NQAVMemoryManager@1@PAVDatatypeValidator@1@2@Z

??0XMLAttr@xercesc_2_8@@QAE@IQB_W0W4AttTypes@XMLAttDef@1@_NQAVMemoryManager@1@PAVDatatypeValidator@1@2@Z

??0XMLAttr@xercesc_2_8@@QAE@QAVMemoryManager@1@@Z

??0XMLBigDecimal@xercesc_2_8@@QAE@QAVMemoryManager@1@@Z

??0XMLBigDecimal@xercesc_2_8@@QAE@QB_WQAVMemoryManager@1@@Z

Sections

.text
Size: 346KB - Virtual size: 1.9MB

IMAGE_SCN_CNT_CODE

IMAGE_SCN_MEM_EXECUTE

IMAGE_SCN_MEM_READ

IMAGE_SCN_MEM_WRITE

.rsrc
Size: 516KB - Virtual size: 516KB

IMAGE_SCN_CNT_CODE

IMAGE_SCN_MEM_EXECUTE

IMAGE_SCN_MEM_READ

IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

099c0646ea7282d232219f8807883be0

Code Sign

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5Certificate

Extended Key Usages

Key Usages

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4Certificate

Extended Key Usages

Key Usages

65:52:26:e1:b2:2e:18:e1:59:0f:29:85:ac:22:e7:5cCertificate

Extended Key Usages

Key Usages

09:81:ff:eb:00:25:83:b6:79:45:13:05:5f:c0:ad:d5Certificate

Extended Key Usages

Key Usages

99:90:5a:2c:c9:d5:08:a6:f7:bf:6b:04:58:7f:74:69:10:32:11:91Signer

Headers

File Characteristics

Imports

kernel32

user32

gdi32

shell32

advapi32

comctl32

ole32

version

Sections

.text Size: 22KB - Virtual size: 22KB

.rdata Size: 4KB - Virtual size: 4KB

.data Size: 1024B - Virtual size: 107KB

.ndata Size: - Virtual size: 44KB

.rsrc Size: 16KB - Virtual size: 16KB

7868cd55f358bfb360f9eb8ce1512ca0

Headers

File Characteristics

Imports

kernel32

user32

gdi32

shell32

ole32

Exports

Exports

Sections

.text Size: 3KB - Virtual size: 2KB

.rdata Size: 1KB - Virtual size: 1KB

.data Size: 512B - Virtual size: 5KB

.rsrc Size: 512B - Virtual size: 296B

.reloc Size: 512B - Virtual size: 472B

4ec328f99bdd944fc98d8a5cf11f7a62

Headers

File Characteristics

Imports

kernel32

user32

ole32

Exports

Exports

Sections

.text Size: 7KB - Virtual size: 6KB

.rdata Size: 1024B - Virtual size: 784B

.data Size: 512B - Virtual size: 92B

.reloc Size: 512B - Virtual size: 496B

26e11cef36f6667a475c39c10085362d

Code Sign

4f:63:d0:30:f8:15:a3:a5:b3:44:69:40:06:3d:16:89Certificate

Extended Key Usages

Key Usages

6c:32:e7:fa:b6:4d:ac:d4:54:b8:85:ae:22:ae:75:c0Certificate

Extended Key Usages

Key Usages

8a:be:37:b8:b7:4a:fb:55:a0:f8:5a:cc:e0:1f:2b:4c:24:ee:37:5fSigner

Headers

DLL Characteristics

File Characteristics

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Certificate

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

65:52:26:e1:b2:2e:18:e1:59:0f:29:85:ac:22:e7:5c
Certificate

09:81:ff:eb:00:25:83:b6:79:45:13:05:5f:c0:ad:d5
Certificate

99:90:5a:2c:c9:d5:08:a6:f7:bf:6b:04:58:7f:74:69:10:32:11:91
Signer

.text
Size: 22KB - Virtual size: 22KB

.rdata
Size: 4KB - Virtual size: 4KB

.data
Size: 1024B - Virtual size: 107KB

.ndata
Size: - Virtual size: 44KB

.rsrc
Size: 16KB - Virtual size: 16KB

.text
Size: 3KB - Virtual size: 2KB

.rdata
Size: 1KB - Virtual size: 1KB

.data
Size: 512B - Virtual size: 5KB

.rsrc
Size: 512B - Virtual size: 296B

.reloc
Size: 512B - Virtual size: 472B

.text
Size: 7KB - Virtual size: 6KB

.rdata
Size: 1024B - Virtual size: 784B

.data
Size: 512B - Virtual size: 92B

.reloc
Size: 512B - Virtual size: 496B

4f:63:d0:30:f8:15:a3:a5:b3:44:69:40:06:3d:16:89
Certificate

6c:32:e7:fa:b6:4d:ac:d4:54:b8:85:ae:22:ae:75:c0
Certificate

8a:be:37:b8:b7:4a:fb:55:a0:f8:5a:cc:e0:1f:2b:4c:24:ee:37:5f
Signer

.text
Size: 172KB - Virtual size: 172KB

.rdata
Size: 37KB - Virtual size: 36KB

.data
Size: 7KB - Virtual size: 16KB

.rsrc
Size: 7KB - Virtual size: 7KB

4f:63:d0:30:f8:15:a3:a5:b3:44:69:40:06:3d:16:89
Certificate

6c:32:e7:fa:b6:4d:ac:d4:54:b8:85:ae:22:ae:75:c0
Certificate

5c:5d:7b:89:28:2e:0e:6b:e6:7c:9f:d6:59:b9:47:21:ee:fc:c1:4d
Signer

.text
Size: 169KB - Virtual size: 169KB

.rdata
Size: 30KB - Virtual size: 30KB

.data
Size: 5KB - Virtual size: 14KB

.rsrc
Size: 3KB - Virtual size: 3KB

.reloc
Size: 8KB - Virtual size: 8KB

.rsrc
Size: 116KB - Virtual size: 116KB

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Certificate

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

65:52:26:e1:b2:2e:18:e1:59:0f:29:85:ac:22:e7:5c
Certificate

09:81:ff:eb:00:25:83:b6:79:45:13:05:5f:c0:ad:d5
Certificate