σUŞe_~~19111547~~__Asπσ_Pswd_σ[.]rar

Sharing

Copy URL

Twitter E-mail

General

Target

σUŞe_~~19111547~~__Asπσ_Pswd_σ.rar
Size

15.2MB
MD5

362f49e97ced3a22a2feafc50cfa901b
SHA1

ca6be4087d6c619f561eaf2332b304bc3d6a9520
SHA256

9cc639b89556218cf878a591e4119f7d54de66381c5425df49b756862e17e6bb
SHA512

868f62860e7a04589ef9bb34be73a6376d6fd63f01aa02b5c0db92daee0546dce9df6b48eb80fae452f2d06834c531bc6312cf46ce57f79b95b4fd2f549853f0
SSDEEP

393216:C7WYlpUbi4e/avO/0Qx8uWs1OZzdEf8WjRrixQhP097hi:MdV/aE0uWlzdCN1P0phi

Score

3^/10

Malware Config

Signatures

Unsigned PE 2 IoCs

Checks for missing Authenticode signature.

Processes:

resource
unpack002/ccme_ecc.dll
unpack002/vcl120.bpl

Files

σUŞe_~~19111547~~__Asπσ_Pswd_σ.rar
.zip

Password: 19111547
σUŞe_~~19111547~~__Asπσ_Pswd_σ.zip
.zip

Password: 19111547
Register.dll
.dll windows:5 windows x86 arch:x86

Password: 19111547

ee94d9d14cff80538936ff9d276ecfc1

Code Sign

8b:a1:f1:72:fd:50:ba:8d:4c:11:b7:4f:fa:c8:a2:82
Certificate

Issuer

CN=Sectigo RSA Code Signing CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

25-03-2021 00:00

Not After

24-03-2024 23:59

Subject

CN=IObit CO.\, LTD,O=IObit CO.\, LTD,POSTALCODE=610042,STREET=No. 605\, 6th Floor\, Unit 1\, Building 1+STREET=45 Renmin South Road,L=Chengdu Shi,ST=Sichuan Sheng,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

39:72:44:3a:f9:22:b7:51:d7:d3:6c:10:dd:31:35:95
Certificate

Issuer

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

12-03-2019 00:00

Not After

31-12-2028 23:59

Subject

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01-08-2022 00:00

Not After

09-11-2031 23:59

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

1d:a2:48:30:6f:9b:26:18:d0:82:e0:96:7d:33:d3:6a
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

02-11-2018 00:00

Not After

31-12-2030 23:59

Subject

CN=Sectigo RSA Code Signing CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning
ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

23-03-2022 00:00

Not After

22-03-2037 23:59

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16
Certificate

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Not Before

14-07-2023 00:00

Not After

13-10-2034 23:59

Subject

CN=DigiCert Timestamp 2023,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

8b:a1:f1:72:fd:50:ba:8d:4c:11:b7:4f:fa:c8:a2:82
Certificate

Issuer

CN=Sectigo RSA Code Signing CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

25-03-2021 00:00

Not After

24-03-2024 23:59

Subject

CN=IObit CO.\, LTD,O=IObit CO.\, LTD,POSTALCODE=610042,STREET=No. 605\, 6th Floor\, Unit 1\, Building 1+STREET=45 Renmin South Road,L=Chengdu Shi,ST=Sichuan Sheng,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

39:72:44:3a:f9:22:b7:51:d7:d3:6c:10:dd:31:35:95
Certificate

Issuer

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

12-03-2019 00:00

Not After

31-12-2028 23:59

Subject

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

1d:a2:48:30:6f:9b:26:18:d0:82:e0:96:7d:33:d3:6a
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

02-11-2018 00:00

Not After

31-12-2030 23:59

Subject

CN=Sectigo RSA Code Signing CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning
ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

7b:05:b1:d4:49:68:51:44:f7:c9:89:d2:9c:19:9d:12
Certificate

Issuer

CN=VeriSign Universal Root Certification Authority,OU=VeriSign Trust Network+OU=(c) 2008 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

12-01-2016 00:00

Not After

11-01-2031 23:59

Subject

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

7b:d4:e5:af:ba:cc:07:3f:a1:01:23:04:22:41:4d:12
Certificate

Issuer

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Not Before

23-12-2017 00:00

Not After

22-03-2029 23:59

Subject

CN=Symantec SHA256 TimeStamping Signer - G3,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

d5:da:47:19:7b:f0:4b:65:e8:0d:4e:72:80:6f:4a:ef:64:4e:66:5a:ec:a2:5d:d4:0f:de:e4:58:32:56:3c:2d
Signer

Actual PE Digest

d5:da:47:19:7b:f0:4b:65:e8:0d:4e:72:80:6f:4a:ef:64:4e:66:5a:ec:a2:5d:d4:0f:de:e4:58:32:56:3c:2d

Digest Algorithm

sha256

PE Digest Matches

true

59:40:54:2c:49:a0:37:34:bf:d5:f8:3d:ef:46:b0:eb:de:36:01:fb
Signer

Actual PE Digest

59:40:54:2c:49:a0:37:34:bf:d5:f8:3d:ef:46:b0:eb:de:36:01:fb

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Imports

oleaut32

SysFreeString
SysReAllocStringLen
SysAllocStringLen
GetErrorInfo
GetActiveObject
SysFreeString
SafeArrayPtrOfIndex
SafeArrayGetElement
SafeArrayGetUBound
SafeArrayGetLBound
SafeArrayCreate
VariantChangeType
VariantCopyInd
VariantCopy
VariantClear
VariantInit

advapi32

RegQueryValueExW
RegOpenKeyExW
RegCloseKey
RegQueryValueExW
RegOpenKeyExW
RegFlushKey
RegCreateKeyExW
RegCloseKey

user32

GetKeyboardType
LoadStringW
MessageBoxA
CharNextW
CreateWindowExW
WindowFromPoint
WaitMessage
UpdateWindow
UnregisterClassW
UnhookWindowsHookEx
TranslateMessage
TranslateMDISysAccel
TrackPopupMenu
SystemParametersInfoW
ShowWindow
ShowScrollBar
ShowOwnedPopups
SetWindowsHookExW
SetWindowPos
SetWindowPlacement
SetWindowLongW
SetTimer
SetScrollRange
SetScrollPos
SetScrollInfo
SetRect
SetPropW
SetParent
SetMenuItemInfoW
SetMenu
SetForegroundWindow
SetFocus
SetCursor
SetClassLongW
SetCapture
SetActiveWindow
SendMessageA
SendMessageW
ScrollWindow
ScreenToClient
RemovePropW
RemoveMenu
ReleaseDC
ReleaseCapture
RegisterWindowMessageW
RegisterClipboardFormatW
RegisterClassW
RedrawWindow
PostQuitMessage
PostMessageW
PeekMessageA
PeekMessageW
OffsetRect
MsgWaitForMultipleObjectsEx
MsgWaitForMultipleObjects
MessageBoxW
MapWindowPoints
MapVirtualKeyW
LoadStringW
LoadKeyboardLayoutW
LoadIconW
LoadCursorW
LoadBitmapW
KillTimer
IsZoomed
IsWindowVisible
IsWindowUnicode
IsWindowEnabled
IsWindow
IsIconic
IsDialogMessageA
IsDialogMessageW
IsChild
InvalidateRect
IntersectRect
InsertMenuItemW
InsertMenuW
InflateRect
GetWindowThreadProcessId
GetWindowTextW
GetWindowRect
GetWindowPlacement
GetWindowLongW
GetWindowDC
GetTopWindow
GetSystemMetrics
GetSystemMenu
GetSysColorBrush
GetSysColor
GetSubMenu
GetScrollRange
GetScrollPos
GetScrollInfo
GetPropW
GetParent
GetWindow
GetMessagePos
GetMenuStringW
GetMenuState
GetMenuItemInfoW
GetMenuItemID
GetMenuItemCount
GetMenu
GetLastActivePopup
GetKeyboardState
GetKeyboardLayoutNameW
GetKeyboardLayoutList
GetKeyboardLayout
GetKeyState
GetKeyNameTextW
GetIconInfo
GetForegroundWindow
GetFocus
GetDesktopWindow
GetDCEx
GetDC
GetCursorPos
GetCursor
GetClientRect
GetClassLongW
GetClassInfoW
GetCapture
GetActiveWindow
FrameRect
FindWindowExW
FindWindowW
FillRect
EnumWindows
EnumThreadWindows
EnumChildWindows
EndPaint
EnableWindow
EnableScrollBar
EnableMenuItem
DrawTextExW
DrawTextW
DrawMenuBar
DrawIconEx
DrawIcon
DrawFrameControl
DrawEdge
DispatchMessageA
DispatchMessageW
DestroyWindow
DestroyMenu
DestroyIcon
DestroyCursor
DeleteMenu
DefWindowProcW
DefMDIChildProcW
DefFrameProcW
CreatePopupMenu
CreateMenu
CreateIcon
ClientToScreen
CheckMenuItem
CharUpperBuffW
CharNextW
CharLowerW
CallWindowProcW
CallNextHookEx
BeginPaint
AdjustWindowRectEx
ActivateKeyboardLayout

kernel32

GetACP
Sleep
VirtualFree
VirtualAlloc
GetSystemInfo
GetTickCount
QueryPerformanceCounter
GetVersion
GetCurrentThreadId
VirtualQuery
WideCharToMultiByte
MultiByteToWideChar
lstrlenW
lstrcpynW
LoadLibraryExW
GetThreadLocale
GetStartupInfoA
GetProcAddress
GetModuleHandleW
GetModuleFileNameW
GetLocaleInfoW
GetCommandLineW
FreeLibrary
FindFirstFileW
FindClose
ExitProcess
ExitThread
CreateThread
CompareStringW
WriteFile
UnhandledExceptionFilter
RtlUnwind
RaiseException
GetStdHandle
CloseHandle
TlsSetValue
TlsGetValue
TlsFree
TlsAlloc
LocalFree
LocalAlloc
lstrcpyW
WritePrivateProfileStringW
WriteFile
WideCharToMultiByte
WaitForSingleObject
WaitForMultipleObjectsEx
VirtualQueryEx
VirtualQuery
VirtualAlloc
TerminateProcess
SwitchToThread
Sleep
SizeofResource
SignalObjectAndWait
SetThreadLocale
SetLastError
SetFilePointer
SetFileAttributesW
SetEvent
SetErrorMode
SetEndOfFile
ResumeThread
ResetEvent
ReadFile
RaiseException
QueryPerformanceFrequency
QueryPerformanceCounter
PeekNamedPipe
OutputDebugStringW
MultiByteToWideChar
MulDiv
MoveFileW
LockResource
LoadResource
LoadLibraryW
LeaveCriticalSection
IsValidLocale
InitializeCriticalSection
GlobalFindAtomW
GlobalDeleteAtom
GlobalAddAtomW
GetWindowsDirectoryW
GetVersionExW
GetVersion
GetTimeZoneInformation
GetTickCount
GetThreadLocale
GetTempPathW
GetTempFileNameW
GetSystemDirectoryW
GetStdHandle
GetProcAddress
GetPrivateProfileStringW
GetModuleHandleW
GetModuleFileNameW
GetLocaleInfoW
GetLocalTime
GetLastError
GetFullPathNameW
GetFileSize
GetFileAttributesW
GetExitCodeThread
GetDiskFreeSpaceW
GetDateFormatW
GetCurrentThreadId
GetCurrentThread
GetCurrentProcessId
GetCurrentProcess
GetComputerNameW
GetCPInfo
FreeResource
InterlockedIncrement
InterlockedExchangeAdd
InterlockedExchange
InterlockedDecrement
InterlockedCompareExchange
FreeLibraryAndExitThread
FreeLibrary
FormatMessageW
FindResourceW
FindNextFileW
FindFirstFileW
FindClose
FileTimeToLocalFileTime
FileTimeToDosDateTime
EnumCalendarInfoW
EnterCriticalSection
DeviceIoControl
DeleteFileW
DeleteCriticalSection
CreateThread
CreateProcessW
CreatePipe
CreateFileW
CreateEventW
CreateDirectoryW
CopyFileW
CompareStringW
CloseHandle
Sleep

msimg32

AlphaBlend

gdi32

UnrealizeObject
StretchBlt
SetWindowOrgEx
SetViewportOrgEx
SetTextColor
SetStretchBltMode
SetROP2
SetPixel
SetDIBColorTable
SetBrushOrgEx
SetBkMode
SetBkColor
SelectPalette
SelectObject
SaveDC
RestoreDC
RectVisible
RealizePalette
PatBlt
MoveToEx
MaskBlt
LineTo
IntersectClipRect
GetWindowOrgEx
GetTextMetricsW
GetTextExtentPoint32W
GetSystemPaletteEntries
GetStockObject
GetRgnBox
GetPixel
GetPaletteEntries
GetObjectW
GetDeviceCaps
GetDIBits
GetDIBColorTable
GetDCOrgEx
GetCurrentPositionEx
GetClipBox
GetBrushOrgEx
GetBitmapBits
FrameRgn
ExcludeClipRect
DeleteObject
DeleteDC
CreateSolidBrush
CreateRectRgn
CreatePenIndirect
CreatePalette
CreateHalftonePalette
CreateFontIndirectW
CreateDIBitmap
CreateDIBSection
CreateCompatibleDC
CreateCompatibleBitmap
CreateBrushIndirect
CreateBitmap
BitBlt

version

VerQueryValueW
GetFileVersionInfoSizeW
GetFileVersionInfoW

ole32

OleUninitialize
OleInitialize
CoTaskMemFree
ProgIDFromCLSID
StringFromCLSID
CoCreateInstance
CoUninitialize
CoInitialize
IsEqualGUID

shell32

ShellExecuteW
SHGetSpecialFolderPathW

comctl32

InitializeFlatSB
FlatSB_SetScrollProp
FlatSB_SetScrollPos
FlatSB_SetScrollInfo
FlatSB_GetScrollPos
FlatSB_GetScrollInfo
_TrackMouseEvent
ImageList_SetIconSize
ImageList_GetIconSize
ImageList_Write
ImageList_Read
ImageList_GetDragImage
ImageList_DragShowNolock
ImageList_DragMove
ImageList_DragLeave
ImageList_DragEnter
ImageList_EndDrag
ImageList_BeginDrag
ImageList_Remove
ImageList_DrawEx
ImageList_GetBkColor
ImageList_SetBkColor
ImageList_Add
ImageList_SetImageCount
ImageList_GetImageCount
ImageList_Destroy
ImageList_Create

crtdll

isalnum
isspace

Exports

Exports

ActiveApp
ActiveAppSpecial
ActiveTrial
CheckDbValue
CheckLicenseLocatin
CheckTrialInstalled
ClearTrialData
GetLicenseType
GetSurplusDays
ValidateThreadLicense

Sections

.text
Size: 854KB - Virtual size: 853KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.itext
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 44KB - Virtual size: 44KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 25KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 315B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 57KB - Virtual size: 56KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rsrc
Size: 63KB - Virtual size: 63KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Resource/CMap/Identity-H
Resource/CMap/Identity-V
Resource/CMap/UCS2-GBK-EUC
Resource/CMap/UniKS-UTF16-H
Resource/CMap/UniKS-UTF16-V
Resource/Font/AdobePIStd.otf
Resource/Font/CourierStd-Bold.otf
Resource/Font/CourierStd-BoldOblique.otf
Resource/Font/CourierStd-Oblique.otf
Resource/Font/CourierStd.otf
Resource/Font/MinionPro-Bold.otf
Resource/Font/MinionPro-BoldIt.otf
Resource/Font/MinionPro-It.otf
Resource/Font/MinionPro-Regular.otf
Resource/Font/MyriadPro-Bold.otf
Resource/Font/MyriadPro-BoldIt.otf
Resource/Font/MyriadPro-It.otf
Resource/Font/MyriadPro-Regular.otf
Resource/Font/Pfm/SY______.PFM
Resource/Font/Pfm/zx______.pfm
Resource/Font/Pfm/zy______.pfm
Resource/Font/SY______.PFB
Resource/Font/ZX______.PFB
Resource/Font/ZY______.PFB
Resource/SaslPrep/SaslPrepProfile_norm_bidi.spp
Resource/TypeSupport/Unicode/ICU/icudt26l.dat
Resource/TypeSupport/Unicode/Mappings/Adobe/symbol.txt
Resource/TypeSupport/Unicode/Mappings/Adobe/zdingbat.txt
Resource/TypeSupport/Unicode/Mappings/Mac/CENTEURO.TXT
Resource/TypeSupport/Unicode/Mappings/Mac/CORPCHAR.TXT
Resource/TypeSupport/Unicode/Mappings/Mac/CROATIAN.TXT
Resource/TypeSupport/Unicode/Mappings/Mac/CYRILLIC.TXT
Resource/TypeSupport/Unicode/Mappings/Mac/GREEK.TXT
Resource/TypeSupport/Unicode/Mappings/Mac/ICELAND.TXT
Resource/TypeSupport/Unicode/Mappings/Mac/ROMAN.TXT
Resource/TypeSupport/Unicode/Mappings/Mac/ROMANIAN.TXT
Resource/TypeSupport/Unicode/Mappings/Mac/SYMBOL.TXT
Resource/TypeSupport/Unicode/Mappings/Mac/TURKISH.TXT
Resource/TypeSupport/Unicode/Mappings/Mac/UKRAINE.TXT
Resource/TypeSupport/Unicode/Mappings/win/CP1250.TXT
Resource/TypeSupport/Unicode/Mappings/win/CP1251.TXT
Resource/TypeSupport/Unicode/Mappings/win/CP1252.TXT
Resource/TypeSupport/Unicode/Mappings/win/CP1253.TXT
Resource/TypeSupport/Unicode/Mappings/win/CP1254.TXT
Resource/TypeSupport/Unicode/Mappings/win/CP1257.TXT
Resource/TypeSupport/Unicode/Mappings/win/CP1258.TXT
Set-up.exe
.exe windows:5 windows x86 arch:x86

Password: 19111547

28874ed5cf72c5f5139e0f73a21d7936

Code Sign

8b:a1:f1:72:fd:50:ba:8d:4c:11:b7:4f:fa:c8:a2:82
Certificate

Issuer

CN=Sectigo RSA Code Signing CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

25-03-2021 00:00

Not After

24-03-2024 23:59

Subject

CN=IObit CO.\, LTD,O=IObit CO.\, LTD,POSTALCODE=610042,STREET=No. 605\, 6th Floor\, Unit 1\, Building 1+STREET=45 Renmin South Road,L=Chengdu Shi,ST=Sichuan Sheng,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

39:72:44:3a:f9:22:b7:51:d7:d3:6c:10:dd:31:35:95
Certificate

Issuer

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

12-03-2019 00:00

Not After

31-12-2028 23:59

Subject

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01-08-2022 00:00

Not After

09-11-2031 23:59

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

1d:a2:48:30:6f:9b:26:18:d0:82:e0:96:7d:33:d3:6a
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

02-11-2018 00:00

Not After

31-12-2030 23:59

Subject

CN=Sectigo RSA Code Signing CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning
ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

23-03-2022 00:00

Not After

22-03-2037 23:59

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16
Certificate

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Not Before

14-07-2023 00:00

Not After

13-10-2034 23:59

Subject

CN=DigiCert Timestamp 2023,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

8b:a1:f1:72:fd:50:ba:8d:4c:11:b7:4f:fa:c8:a2:82
Certificate

Issuer

CN=Sectigo RSA Code Signing CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

25-03-2021 00:00

Not After

24-03-2024 23:59

Subject

CN=IObit CO.\, LTD,O=IObit CO.\, LTD,POSTALCODE=610042,STREET=No. 605\, 6th Floor\, Unit 1\, Building 1+STREET=45 Renmin South Road,L=Chengdu Shi,ST=Sichuan Sheng,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

39:72:44:3a:f9:22:b7:51:d7:d3:6c:10:dd:31:35:95
Certificate

Issuer

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

12-03-2019 00:00

Not After

31-12-2028 23:59

Subject

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

1d:a2:48:30:6f:9b:26:18:d0:82:e0:96:7d:33:d3:6a
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

02-11-2018 00:00

Not After

31-12-2030 23:59

Subject

CN=Sectigo RSA Code Signing CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning
ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

7b:05:b1:d4:49:68:51:44:f7:c9:89:d2:9c:19:9d:12
Certificate

Issuer

CN=VeriSign Universal Root Certification Authority,OU=VeriSign Trust Network+OU=(c) 2008 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

12-01-2016 00:00

Not After

11-01-2031 23:59

Subject

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

7b:d4:e5:af:ba:cc:07:3f:a1:01:23:04:22:41:4d:12
Certificate

Issuer

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Not Before

23-12-2017 00:00

Not After

22-03-2029 23:59

Subject

CN=Symantec SHA256 TimeStamping Signer - G3,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

d0:d9:7b:89:3c:7e:29:b9:d7:18:0a:4e:e8:e9:30:70:2f:74:56:a7:76:78:22:1b:36:da:79:d7:c9:58:49:27
Signer

Actual PE Digest

d0:d9:7b:89:3c:7e:29:b9:d7:18:0a:4e:e8:e9:30:70:2f:74:56:a7:76:78:22:1b:36:da:79:d7:c9:58:49:27

Digest Algorithm

sha256

PE Digest Matches

true

62:da:04:df:3a:d1:fa:3d:47:bc:be:f3:37:73:83:99:79:ea:0c:7d
Signer

Actual PE Digest

62:da:04:df:3a:d1:fa:3d:47:bc:be:f3:37:73:83:99:79:ea:0c:7d

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

rtl120.bpl

@System@initialization$qqrv
@System@Finalization$qqrv
@System@FreeMemory$qpv
@System@RegisterModule$qqrp17System@TLibModule
@System@@DynArrayClear$qqrrpvpv
@System@@DynArrayLength$qqrv
@System@@CopyRecord$qqrv
@System@@FinalizeArray$qqrpvt1ui
@System@@FinalizeRecord$qqrpvt1
@System@@InitializeRecord$qqrpvt1
@System@Pos$qqrx20System@UnicodeStringt1
@System@@UStrInsert$qqrx20System@UnicodeStringr20System@UnicodeStringi
@System@@UStrDelete$qqrr20System@UnicodeStringii
@System@@UStrCopy$qqrx20System@UnicodeStringii
@System@@UStrEqual$qqrv
@System@@UStrCatN$qqrv
@System@@UStrCat3$qqrr20System@UnicodeStringx20System@UnicodeStringt2
@System@@UStrCat$qqrr20System@UnicodeStringx20System@UnicodeString
@System@@UStrSetLength$qqrr20System@UnicodeStringi
@System@@UStrLen$qqrx20System@UnicodeString
@System@@WStrFromUStr$qqrr17System@WideStringx20System@UnicodeString
@System@@UStrFromWStr$qqrr20System@UnicodeStringx17System@WideString
@System@@LStrFromUStr$qqrr27System@%AnsiStringT$us$i0$%x20System@UnicodeStringus
@System@@UStrFromLStr$qqrr20System@UnicodeStringx27System@%AnsiStringT$us$i0$%
@System@@UStrFromWArray$qqrr20System@UnicodeStringpbi
@System@@UStrFromPWChar$qqrr20System@UnicodeStringpb
@System@@UStrFromWChar$qqrr20System@UnicodeStringb
@System@@UStrFromPWCharLen$qqrr20System@UnicodeStringpbi
@System@@UStrToPWChar$qqrx20System@UnicodeString
@System@@UStrLAsg$qqrr20System@UnicodeStringx20System@UnicodeString
@System@@UStrAsg$qqrr20System@UnicodeStringx20System@UnicodeString
@System@@UStrArrayClr$qqrpvi
@System@@UStrClr$qqrpv
@System@@UStrAddRef$qqrpv
@System@@WStrAddRef$qqrr17System@WideString
@System@@WStrEqual$qqrv
@System@@WStrCat3$qqrr17System@WideStringx17System@WideStringt2
@System@@WStrLen$qqrx17System@WideString
@System@@WStrToPWChar$qqrx17System@WideString
@System@@WStrFromWChar$qqrr17System@WideStringb
@System@@WStrArrayClr$qqrpvi
@System@@WStrClr$qqrpv
@System@@LStrCopy$qqrv
@System@@UniqueStringA$qqrr27System@%AnsiStringT$us$i0$%
@System@@LStrToPChar$qqrx27System@%AnsiStringT$us$i0$%
@System@@LStrAddRef$qqrpv
@System@@LStrCat$qqrv
@System@@LStrLen$qqrx27System@%AnsiStringT$us$i0$%
@System@@LStrFromPWChar$qqrr27System@%AnsiStringT$us$i0$%pbus
@System@@LStrFromChar$qqrr27System@%AnsiStringT$us$i0$%cus
@System@@EnsureAnsiString$qqrr27System@%AnsiStringT$us$i0$%us
@System@@EnsureUnicodeString$qqrr20System@UnicodeString
@System@@LStrAsg$qqrpvpxv
@System@@LStrArrayClr$qqrpvi
@System@@LStrClr$qqrpv
@System@@Halt0$qqrv
@System@@StartExe$qqrp23System@PackageInfoTablep17System@TLibModule
@System@@TryFinallyExit$qqrv
@System@@DoneExcept$qqrv
@System@@RaiseAgain$qqrv
@System@@RaiseExcept$qqrv
@System@@HandleFinally$qqrv
@System@@HandleOnException$qqrv
@System@@HandleAnyException$qqrv
@System@@BeforeDestruction$qqrp14System@TObjectzc
@System@@AfterConstruction$qqrp14System@TObject
@System@@ClassDestroy$qqrp14System@TObject
@System@@ClassCreate$qqrp17System@TMetaClasso
@System@TObject@Dispatch$qqrpv
@System@TObject@BeforeDestruction$qqrv
@System@TObject@AfterConstruction$qqrv
@System@TObject@DefaultHandler$qqrpv
@System@TObject@ToString$qqrv
@System@TObject@SafeCallException$qqrp14System@TObjectpv
@System@@IsClass$qqrp14System@TObjectp17System@TMetaClass
@System@TObject@GetHashCode$qqrv
@System@TObject@Equals$qqrp14System@TObject
@System@TObject@Free$qqrv
@System@TObject@$bdtr$qqrv
@System@TObject@$bctr$qqrv
@System@TObject@FreeInstance$qqrv
@System@TObject@NewInstance$qqrv
@System@@SetEq$qqrv
@System@@FillChar$qqrpvib
@System@@TRUNC$qqrv
@System@ParamStr$qqri
@System@ParamCount$qqrv
@System@Move$qqrpxvpvi
@System@@FreeMem$qqrpv
@System@@GetMem$qqri
@System@AllocMem$qqrui
@System@TObject@
@$xp$17System@WideString
@$xp$13System@string
@Sysutils@initialization$qqrv
@Sysutils@Finalization$qqrv
@Sysutils@TEncoding@GetUnicode$qqrv
@Sysutils@FreeAndNil$qqrpv
@Sysutils@FindCmdLineSwitch$qqrx20System@UnicodeString
@Sysutils@StringReplace$qqrx20System@UnicodeStringt1t149System@%Set$t21Sysutils@Sysutils__15$iuc$0$iuc$1%
@Sysutils@GetLocaleFormatSettings$qqrir24Sysutils@TFormatSettings
@Sysutils@AnsiPos$qqrx20System@UnicodeStringt1
@Sysutils@IncludeTrailingPathDelimiter$qqrx20System@UnicodeString
@Sysutils@IncludeTrailingBackslash$qqrx20System@UnicodeString
@Sysutils@Exception@$bctr$qqrx20System@UnicodeString
@Sysutils@StrToDateTime$qqrx20System@UnicodeStringrx24Sysutils@TFormatSettings
@Sysutils@FormatDateTime$qqrx20System@UnicodeString16System@TDateTimerx24Sysutils@TFormatSettings
@Sysutils@FormatDateTime$qqrx20System@UnicodeString16System@TDateTime
@Sysutils@Now$qqrv
@Sysutils@StrToFloatDef$qqrx20System@UnicodeStringxgrx24Sysutils@TFormatSettings
@Sysutils@StrToFloat$qqrx20System@UnicodeStringrx24Sysutils@TFormatSettings
@Sysutils@FloatToStr$qqrgrx24Sysutils@TFormatSettings
@Sysutils@Format$qqrx20System@UnicodeStringpx14System@TVarRecxi
@Sysutils@StrDispose$qqrpb
@Sysutils@StrAlloc$qqrui
@Sysutils@StrPas$qqrpxc
@Sysutils@StrPLCopy$qqrpbx20System@UnicodeStringui
@Sysutils@StrPCopy$qqrpbx20System@UnicodeString
@Sysutils@StrLen$qqrpxb
@Sysutils@ExtractFileDir$qqrx20System@UnicodeString
@Sysutils@ExtractFilePath$qqrx20System@UnicodeString
@Sysutils@FileIsReadOnly$qqrx20System@UnicodeString
@Sysutils@FileSetAttr$qqrx20System@UnicodeStringi
@Sysutils@FileGetAttr$qqrx20System@UnicodeString
@Sysutils@ForceDirectories$qqr20System@UnicodeString
@Sysutils@DirectoryExists$qqrx20System@UnicodeString
@Sysutils@FileExists$qqrx20System@UnicodeString
@Sysutils@StrToInt$qqrx20System@UnicodeString
@Sysutils@IntToHex$qqrii
@Sysutils@IntToStr$qqrj
@Sysutils@IntToStr$qqri
@Sysutils@AnsiQuotedStr$qqrx20System@UnicodeStringb
@Sysutils@Trim$qqrx20System@UnicodeString
@Sysutils@AnsiUpperCase$qqrx20System@UnicodeString
@Sysutils@SameText$qqrx20System@UnicodeStringt1
@Sysutils@SameStr$qqrx20System@UnicodeStringt1
@Sysutils@UpperCase$qqrx20System@UnicodeString
@Sysutils@CharInSet$qqrbrx29System@%Set$tc$iuc$0$iuc$255%
@$xp$24Sysutils@TFormatSettings
@Sysutils@TwoDigitYearCenturyWindow
@Sysutils@EConvertError@
@Sysutils@EInOutError@
@Sysutils@Exception@
@$xp$15Sysutils@TBytes
@Strutils@MidStr$qqrx17System@WideStringxixi
@Strutils@RightStr$qqrx17System@WideStringxi
@Strutils@LeftStr$qqrx17System@WideStringxi
@Classes@initialization$qqrv
@Classes@Finalization$qqrv
@Classes@TMemoryStream@LoadFromFile$qqrx20System@UnicodeString
@Classes@TCustomMemoryStream@SaveToFile$qqrx20System@UnicodeString
@Classes@TStream@SetSize64$qqrxj
@Classes@TStream@SetPosition$qqrxj
@Classes@TStringList@SetCaseSensitive$qqrxo
@Classes@TStringList@$bctr$qqrv
@Classes@TStringList@CompareStrings$qqrx20System@UnicodeStringt1
@Classes@TStringList@CustomSort$qqrpqqrp19Classes@TStringListii$i
@Classes@TStringList@Sort$qqrv
@Classes@TStringList@SetUpdateState$qqro
@Classes@TStringList@SetSorted$qqro
@Classes@TStringList@SetCapacity$qqri
@Classes@TStringList@PutObject$qqrip14System@TObject
@Classes@TStringList@Put$qqrix20System@UnicodeString
@Classes@TStringList@InsertItem$qqrix20System@UnicodeStringp14System@TObject
@Classes@TStringList@InsertObject$qqrix20System@UnicodeStringp14System@TObject
@Classes@TStringList@Insert$qqrix20System@UnicodeString
@Classes@TStringList@GetObject$qqri
@Classes@TStringList@GetCount$qqrv
@Classes@TStringList@GetCapacity$qqrv
@Classes@TStringList@Get$qqri
@Classes@TStringList@Find$qqrx20System@UnicodeStringri
@Classes@TStringList@Exchange$qqrii
@Classes@TStringList@Delete$qqri
@Classes@TStringList@Clear$qqrv
@Classes@TStringList@Changing$qqrv
@Classes@TStringList@AddObject$qqrx20System@UnicodeStringp14System@TObject
@Classes@TStringList@Add$qqrx20System@UnicodeString
@Classes@TStrings@GetNameValueSeparator$qqrv
@Classes@TStrings@SetTextStr$qqrx20System@UnicodeString
@Classes@TStrings@SetText$qqrpb
@Classes@TStrings@SaveToStream$qqrp15Classes@TStreamp18Sysutils@TEncoding
@Classes@TStrings@SaveToStream$qqrp15Classes@TStream
@Classes@TStrings@SaveToFile$qqrx20System@UnicodeStringp18Sysutils@TEncoding
@Classes@TStrings@SaveToFile$qqrx20System@UnicodeString
@Classes@TStrings@Move$qqrii
@Classes@TStrings@LoadFromStream$qqrp15Classes@TStreamp18Sysutils@TEncoding
@Classes@TStrings@LoadFromStream$qqrp15Classes@TStream
@Classes@TStrings@LoadFromFile$qqrx20System@UnicodeStringp18Sysutils@TEncoding
@Classes@TStrings@LoadFromFile$qqrx20System@UnicodeString
@Classes@TStrings@IndexOfObject$qqrp14System@TObject
@Classes@TStrings@GetTextStr$qqrv
@Classes@TStrings@GetText$qqrv
@Classes@TStrings@EndUpdate$qqrv
@Classes@TStrings@DefineProperties$qqrp14Classes@TFiler
@Classes@TStrings@BeginUpdate$qqrv
@Classes@TStrings@Assign$qqrp19Classes@TPersistent
@Classes@TStrings@AddStrings$qqrp16Classes@TStrings
@Classes@TPersistent@AssignTo$qqrp19Classes@TPersistent
@Classes@TMemoryStream@
@Classes@TStringList@
@Typinfo@initialization$qqrv
@Typinfo@Finalization$qqrv
@Variants@initialization$qqrv
@Variants@Finalization$qqrv
@Varutils@initialization$qqrv
@Varutils@Finalization$qqrv
@Registry@initialization$qqrv
@Registry@Finalization$qqrv
@Registry@TRegistry@ValueExists$qqrx20System@UnicodeString
@Registry@TRegistry@GetDataAsString$qqrx20System@UnicodeStringo
@Registry@TRegistry@ReadString$qqrx20System@UnicodeString
@Registry@TRegistry@WriteString$qqrx20System@UnicodeStringt1
@Registry@TRegistry@OpenKeyReadOnly$qqrx20System@UnicodeString
@Registry@TRegistry@OpenKey$qqrx20System@UnicodeStringo
@Registry@TRegistry@SetRootKey$qqrp6HKEY__
@Registry@TRegistry@$bctr$qqrv
@Registry@TRegistry@
@Inifiles@initialization$qqrv
@Inifiles@Finalization$qqrv
@Inifiles@TIniFile@DeleteKey$qqrx20System@UnicodeStringt1
@Inifiles@TIniFile@ReadSectionValues$qqrx20System@UnicodeStringp16Classes@TStrings
@Inifiles@TIniFile@ReadSection$qqrx20System@UnicodeStringp16Classes@TStrings
@Inifiles@TIniFile@$bdtr$qqrv
@Inifiles@TMemIniFile@ReadString$qqrx20System@UnicodeStringt1t1
@Inifiles@TMemIniFile@ReadSectionValues$qqrx20System@UnicodeStringp16Classes@TStrings
@Inifiles@TMemIniFile@ReadSections$qqrp16Classes@TStrings
@Inifiles@TMemIniFile@ReadSection$qqrx20System@UnicodeStringp16Classes@TStrings
@Inifiles@TMemIniFile@GetStrings$qqrp16Classes@TStrings
@Inifiles@TMemIniFile@GetCaseSensitive$qqrv
@Inifiles@TMemIniFile@EraseSection$qqrx20System@UnicodeString
@Inifiles@TMemIniFile@Clear$qqrv
@Inifiles@TMemIniFile@$bdtr$qqrv
@Inifiles@TMemIniFile@$bctr$qqrx20System@UnicodeString
@Inifiles@THashedStringList@IndexOfName$qqrx20System@UnicodeString
@Inifiles@THashedStringList@IndexOf$qqrx20System@UnicodeString
@Inifiles@THashedStringList@$bdtr$qqrv
@Inifiles@THashedStringList@Changed$qqrv
@Inifiles@TStringHash@Remove$qqrx20System@UnicodeString
@Inifiles@TStringHash@Add$qqrx20System@UnicodeStringi
@Inifiles@TCustomIniFile@ReadSections$qqrx20System@UnicodeStringp16Classes@TStrings
@Inifiles@TCustomIniFile@WriteBinaryStream$qqrx20System@UnicodeStringt1p15Classes@TStream
@Inifiles@TCustomIniFile@ReadBinaryStream$qqrx20System@UnicodeStringt1p15Classes@TStream
@Inifiles@TCustomIniFile@ValueExists$qqrx20System@UnicodeStringt1
@Inifiles@TCustomIniFile@WriteTime$qqrx20System@UnicodeStringt116System@TDateTime
@Inifiles@TCustomIniFile@WriteFloat$qqrx20System@UnicodeStringt1d
@Inifiles@TCustomIniFile@WriteDate$qqrx20System@UnicodeStringt116System@TDateTime
@Inifiles@TCustomIniFile@ReadTime$qqrx20System@UnicodeStringt116System@TDateTime
@Inifiles@TCustomIniFile@ReadFloat$qqrx20System@UnicodeStringt1d
@Inifiles@TCustomIniFile@ReadDate$qqrx20System@UnicodeStringt116System@TDateTime
@Inifiles@TCustomIniFile@ReadBool$qqrx20System@UnicodeStringt1o
@Inifiles@TCustomIniFile@WriteInteger$qqrx20System@UnicodeStringt1i
@Inifiles@TCustomIniFile@ReadInteger$qqrx20System@UnicodeStringt1i
@Inifiles@TCustomIniFile@SectionExists$qqrx20System@UnicodeString
@Inifiles@TCustomIniFile@$bctr$qqrx20System@UnicodeString
@Inifiles@TIniFile@
@Inifiles@TMemIniFile@
@$xp$26Inifiles@THashedStringList
@Inifiles@THashedStringList@
@Syncobjs@initialization$qqrv
@Syncobjs@Finalization$qqrv
@Syncobjs@TCriticalSection@Leave$qqrv
@Syncobjs@TCriticalSection@Enter$qqrv
@Syncobjs@TCriticalSection@$bctr$qqrv
@Syncobjs@TCriticalSection@
@Uxtheme@initialization$qqrv
@Uxtheme@Finalization$qqrv
@Multimon@initialization$qqrv
@Multimon@Finalization$qqrv
@Dwmapi@initialization$qqrv
@Dwmapi@Finalization$qqrv
@Helpintfs@initialization$qqrv
@Helpintfs@Finalization$qqrv
@Mapi@initialization$qqrv
@Mapi@Finalization$qqrv
@Flatsb@initialization$qqrv
@Flatsb@Finalization$qqrv
@Comobj@initialization$qqrv
@Comobj@Finalization$qqrv
@Dateutils@MonthOf$qqrx16System@TDateTime
@Dateutils@YearOf$qqrx16System@TDateTime

kernel32

GetModuleHandleW
Sleep
WritePrivateProfileStringW
WriteFile
WaitForSingleObject
OutputDebugStringW
LoadLibraryW
InitializeCriticalSection
GetVersionExW
GetTickCount
GetTempPathW
GetSystemInfo
GetSystemDefaultLCID
GetProcAddress
GetPrivateProfileStringW
GetModuleHandleW
GetLastError
GetExitCodeProcess
GetCurrentProcess
FreeLibrary
DeleteCriticalSection
CreateProcessW
CreateFileW
CloseHandle

version

VerQueryValueW
GetFileVersionInfoSizeW
GetFileVersionInfoW

shell32

ShellExecuteExW
SHGetSpecialFolderPathW

vcl120.bpl

@Graphics@initialization$qqrv
@Graphics@Finalization$qqrv
@Controls@initialization$qqrv
@Controls@Finalization$qqrv
@Actnlist@initialization$qqrv
@Actnlist@Finalization$qqrv
@Themes@initialization$qqrv
@Themes@Finalization$qqrv
@Menus@initialization$qqrv
@Menus@Finalization$qqrv
@Forms@initialization$qqrv
@Forms@Finalization$qqrv
@Forms@TApplication@GetExeName$qqrv
@Forms@TApplication@ProcessMessages$qqrv
@Forms@Application
@Dialogs@initialization$qqrv
@Dialogs@Finalization$qqrv
@Comctrls@initialization$qqrv
@Comctrls@Finalization$qqrv
@Graphutil@initialization$qqrv
@Graphutil@Finalization$qqrv
@Extctrls@initialization$qqrv
@Extctrls@Finalization$qqrv
@Printers@initialization$qqrv
@Printers@Finalization$qqrv
@Clipbrd@initialization$qqrv
@Clipbrd@Finalization$qqrv
@Extactns@initialization$qqrv
@Extactns@Finalization$qqrv
@Extdlgs@initialization$qqrv
@Extdlgs@Finalization$qqrv
@Buttons@initialization$qqrv
@Buttons@Finalization$qqrv
@Oleserver@initialization$qqrv
@Oleserver@Finalization$qqrv

Sections

.text
Size: 79KB - Virtual size: 78KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.itext
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 1KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 19KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rsrc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
ccme_ecc.dll
.dll windows:6 windows x64 arch:x64

Password: 19111547

85fa29bd3c72ce2d14f3f8e4207261d4

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

msvcr120

__C_specific_handler
_lock
_unlock
_calloc_crt
__dllonexit
_onexit
_initterm_e
__crt_debugger_hook
__crtUnhandledException
__crtTerminateProcess
__crtCapturePreviousContext
_initterm
_malloc_crt
free
_amsg_exit
__CppXcptFilter
memmove_s
memcpy_s
memcmp
__clean_type_info_names_internal
memset

kernel32

IsDebuggerPresent
DisableThreadLibraryCalls
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
DecodePointer
EncodePointer
IsProcessorFeaturePresent

Exports

Exports

R_FIPS_MODULE_resource

Sections

.text
Size: 347KB - Virtual size: 346KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 139KB - Virtual size: 140KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 928B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
cpki
icucnv67.dll
.msi
icudt67.dll
.msi
jgve
resources.pak
rtl120.bpl
.dll windows:5 windows x86 arch:x86

Password: 19111547

71ef3c08452290b9b380ced40a0015c9

Code Sign

8b:a1:f1:72:fd:50:ba:8d:4c:11:b7:4f:fa:c8:a2:82
Certificate

Issuer

CN=Sectigo RSA Code Signing CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

25-03-2021 00:00

Not After

24-03-2024 23:59

Subject

CN=IObit CO.\, LTD,O=IObit CO.\, LTD,POSTALCODE=610042,STREET=No. 605\, 6th Floor\, Unit 1\, Building 1+STREET=45 Renmin South Road,L=Chengdu Shi,ST=Sichuan Sheng,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

39:72:44:3a:f9:22:b7:51:d7:d3:6c:10:dd:31:35:95
Certificate

Issuer

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

12-03-2019 00:00

Not After

31-12-2028 23:59

Subject

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01-08-2022 00:00

Not After

09-11-2031 23:59

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

1d:a2:48:30:6f:9b:26:18:d0:82:e0:96:7d:33:d3:6a
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

02-11-2018 00:00

Not After

31-12-2030 23:59

Subject

CN=Sectigo RSA Code Signing CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning
ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

23-03-2022 00:00

Not After

22-03-2037 23:59

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0c:4d:69:72:4b:94:fa:3c:2a:4a:3d:29:07:80:3d:5a
Certificate

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Not Before

21-09-2022 00:00

Not After

21-11-2033 23:59

Subject

CN=DigiCert Timestamp 2022 - 2,O=DigiCert,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

8b:a1:f1:72:fd:50:ba:8d:4c:11:b7:4f:fa:c8:a2:82
Certificate

Issuer

CN=Sectigo RSA Code Signing CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

25-03-2021 00:00

Not After

24-03-2024 23:59

Subject

CN=IObit CO.\, LTD,O=IObit CO.\, LTD,POSTALCODE=610042,STREET=No. 605\, 6th Floor\, Unit 1\, Building 1+STREET=45 Renmin South Road,L=Chengdu Shi,ST=Sichuan Sheng,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

39:72:44:3a:f9:22:b7:51:d7:d3:6c:10:dd:31:35:95
Certificate

Issuer

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

12-03-2019 00:00

Not After

31-12-2028 23:59

Subject

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

1d:a2:48:30:6f:9b:26:18:d0:82:e0:96:7d:33:d3:6a
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

02-11-2018 00:00

Not After

31-12-2030 23:59

Subject

CN=Sectigo RSA Code Signing CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning
ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

7b:05:b1:d4:49:68:51:44:f7:c9:89:d2:9c:19:9d:12
Certificate

Issuer

CN=VeriSign Universal Root Certification Authority,OU=VeriSign Trust Network+OU=(c) 2008 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

12-01-2016 00:00

Not After

11-01-2031 23:59

Subject

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

7b:d4:e5:af:ba:cc:07:3f:a1:01:23:04:22:41:4d:12
Certificate

Issuer

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Not Before

23-12-2017 00:00

Not After

22-03-2029 23:59

Subject

CN=Symantec SHA256 TimeStamping Signer - G3,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

96:dc:54:03:fa:61:85:f6:56:26:0c:6d:a2:5a:86:db:ef:af:17:96:55:52:bc:46:9b:a9:6d:ef:dd:f3:c9:00
Signer

Actual PE Digest

96:dc:54:03:fa:61:85:f6:56:26:0c:6d:a2:5a:86:db:ef:af:17:96:55:52:bc:46:9b:a9:6d:ef:dd:f3:c9:00

Digest Algorithm

sha256

PE Digest Matches

true

f7:b2:51:e4:69:7e:4d:d3:59:a4:22:e5:bb:56:1f:8e:d8:c7:52:2c
Signer

Actual PE Digest

f7:b2:51:e4:69:7e:4d:d3:59:a4:22:e5:bb:56:1f:8e:d8:c7:52:2c

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Imports

oleaut32

SysFreeString
SysReAllocStringLen
SysAllocStringLen
SafeArrayPtrOfIndex
SafeArrayPutElement
SafeArrayGetElement
SafeArrayUnaccessData
SafeArrayAccessData
SafeArrayGetUBound
SafeArrayGetLBound
SafeArrayRedim
SafeArrayCreate
VariantChangeType
VariantCopyInd
VariantCopy
VariantClear
VariantInit
CreateErrorInfo
GetErrorInfo
SetErrorInfo
GetActiveObject
DispInvoke
DispGetIDsOfNames
LHashValOfNameSys
SysFreeString

advapi32

RegQueryValueExW
RegOpenKeyExW
RegCloseKey
RegUnLoadKeyW
RegSetValueExW
RegSaveKeyW
RegRestoreKeyW
RegReplaceKeyW
RegQueryValueExW
RegQueryInfoKeyW
RegOpenKeyExW
RegOpenKeyW
RegLoadKeyW
RegFlushKey
RegEnumValueW
RegEnumKeyExW
RegDeleteValueW
RegDeleteKeyW
RegCreateKeyExW
RegConnectRegistryW
RegCloseKey

user32

GetKeyboardType
LoadStringW
MessageBoxA
CharNextW
CreateWindowExW
UnregisterClassW
TranslateMessage
SystemParametersInfoW
ShowScrollBar
SetWindowLongW
SetScrollRange
SetScrollPos
SetScrollInfo
SendMessageW
RegisterClassW
PostMessageW
PeekMessageW
OffsetRect
MsgWaitForMultipleObjectsEx
MsgWaitForMultipleObjects
MessageBoxW
MessageBeep
LoadStringW
IsWindow
IsIconic
IntersectRect
GetWindowThreadProcessId
GetWindowRect
GetWindowPlacement
GetWindowLongW
GetSystemMetrics
GetScrollRange
GetScrollPos
GetScrollInfo
GetMessageW
GetClassInfoW
GetCapture
FindWindowExW
EnableScrollBar
DispatchMessageW
DestroyWindow
DefWindowProcW
CharUpperBuffW
CharUpperW
CharToOemW
CharNextW
CharLowerBuffW
CharLowerW
CallWindowProcW
CharNextA
CharLowerBuffA
CharLowerA
CharUpperBuffA
CharUpperA

kernel32

GetACP
UnmapViewOfFile
MapViewOfFile
OpenFileMappingA
CreateFileMappingA
GetCurrentProcessId
Sleep
VirtualFree
VirtualAlloc
GetSystemInfo
GetTickCount
QueryPerformanceCounter
GetVersion
GetCurrentThreadId
VirtualQuery
WideCharToMultiByte
SetCurrentDirectoryW
SetCurrentDirectoryA
RemoveDirectoryW
MultiByteToWideChar
lstrlenW
lstrlenA
lstrcpynW
LoadLibraryExW
GetThreadLocale
GetStartupInfoA
GetProcAddress
GetModuleHandleW
GetModuleFileNameW
GetLocaleInfoW
GetLastError
GetCurrentDirectoryW
GetCurrentDirectoryA
GetCommandLineW
FreeLibrary
FindFirstFileW
FindClose
CreateDirectoryW
ExitProcess
ExitThread
CreateThread
CompareStringW
WriteFile
UnhandledExceptionFilter
SetFilePointer
SetEndOfFile
RtlUnwind
ReadFile
RaiseException
MoveFileW
GetStdHandle
GetFileSize
GetFileType
DeleteFileW
CreateFileW
CloseHandle
TlsSetValue
TlsGetValue
TlsFree
TlsAlloc
LocalFree
LocalAlloc
FreeLibrary
lstrcpyW
WritePrivateProfileStringW
WriteFile
WideCharToMultiByte
WaitForSingleObject
WaitForMultipleObjectsEx
VirtualQueryEx
VirtualQuery
VirtualAlloc
UnmapViewOfFile
TryEnterCriticalSection
SwitchToThread
SuspendThread
SizeofResource
SignalObjectAndWait
SetThreadPriority
SetLastError
SetFileTime
SetFilePointer
SetFileAttributesW
SetEvent
SetErrorMode
SetEndOfFile
SetCurrentDirectoryW
ResumeThread
ResetEvent
RemoveDirectoryW
ReleaseSemaphore
ReleaseMutex
ReadFile
OpenSemaphoreW
OpenMutexW
MultiByteToWideChar
MoveFileW
MapViewOfFile
LockResource
LocalFileTimeToFileTime
LoadResource
LoadLibraryExW
LoadLibraryW
LeaveCriticalSection
LCMapStringW
IsValidLocale
InitializeCriticalSection
GetVersionExW
GetThreadPriority
GetThreadLocale
GetStdHandle
GetShortPathNameA
GetShortPathNameW
GetProfileIntW
GetProcAddress
GetPrivateProfileStringW
GetOverlappedResult
GetModuleHandleW
GetModuleFileNameW
GetLocaleInfoW
GetLocalTime
GetLastError
GetFullPathNameA
GetFullPathNameW
GetFileTime
GetFileAttributesExW
GetFileAttributesW
GetExitCodeThread
GetEnvironmentVariableW
GetDiskFreeSpaceW
GetDateFormatW
GetCurrentThreadId
GetCurrentThread
GetCurrentProcess
GetComputerNameW
GetCPInfo
FreeResource
InterlockedIncrement
InterlockedExchangeAdd
InterlockedExchange
InterlockedDecrement
InterlockedCompareExchange
FreeLibrary
FormatMessageW
FindResourceW
FindNextFileW
FindFirstFileW
FindClose
FileTimeToSystemTime
FileTimeToLocalFileTime
FileTimeToDosDateTime
EnumSystemLocalesW
EnumCalendarInfoA
EnterCriticalSection
DosDateTimeToFileTime
DeleteFileW
DeleteCriticalSection
CreateSemaphoreW
CreateMutexW
CreateFileMappingW
CreateFileW
CreateEventW
CreateDirectoryW
CompareStringA
CompareStringW
CloseHandle
Sleep

gdi32

GetDCOrgEx
GetClipBox

version

VerQueryValueW
GetFileVersionInfoSizeW
GetFileVersionInfoW

mpr

WNetOpenEnumW
WNetGetUniversalNameA
WNetGetUniversalNameW
WNetEnumResourceA
WNetEnumResourceW
WNetCloseEnum

imagehlp

ImageDirectoryEntryToData

ole32

IsEqualGUID
CLSIDFromString
CoTaskMemFree
StringFromCLSID
CoCreateGuid
CoTaskMemFree
CoTaskMemAlloc
CoCreateGuid
CLSIDFromProgID
ProgIDFromCLSID
CLSIDFromString
StringFromCLSID
CoCreateInstance
CoGetInterfaceAndReleaseStream
CoMarshalInterThreadInterfaceInStream
CoLockObjectExternal
CoDisconnectObject
CoRevokeClassObject
CoRegisterClassObject
CoUninitialize
CoInitialize
IsEqualGUID

wsock32

WSACleanup
WSAStartup
WSAGetLastError
WSACancelAsyncRequest
WSAAsyncGetServByName
WSAAsyncGetHostByName
WSAAsyncSelect
gethostname
getservbyname
gethostbyname
gethostbyaddr
socket
setsockopt
send
select
recv
ntohs
listen
ioctlsocket
inet_ntoa
inet_addr
htons
getsockopt
getsockname
getpeername
connect
closesocket
bind
accept

oleacc

CreateStdAccessibleProxyW

Exports

Exports

@$xp$10CppLongInt
@$xp$10DBPROPINFO
@$xp$10IASPObject
@$xp$10IEnumNames
@$xp$10IErrorInfo
@$xp$10ILockBytes
@$xp$10IMallocSpy
@$xp$10IMtsEvents
@$xp$10IOleCache2
@$xp$10IOleObject
@$xp$10IOleWindow
@$xp$10ITypeInfo2
@$xp$10NativeUInt
@$xp$10TASPObject
@$xp$10TComObject
@$xp$10TParamFlag
@$xp$10_xml_error
@$xp$10tagREGKIND
@$xp$11Adoint@_ADO
@$xp$11ContextInfo
@$xp$11CppULongInt
@$xp$11DBPARAMINFO
@$xp$11IAccessible
@$xp$11IAdviseSink
@$xp$11ICrmMonitor
@$xp$11IDataObject
@$xp$11IDispatchEx
@$xp$11IDropSource
@$xp$11IDropTarget
@$xp$11IEnumString
@$xp$11IGetAppData
@$xp$11IMTSLocator
@$xp$11IOleControl
@$xp$11IReadCookie
@$xp$11IStringList
@$xp$11IViewObject
@$xp$11Masks@TMask
@$xp$11System@Byte
@$xp$11System@Char
@$xp$11System@Comp
@$xp$11System@Word
@$xp$11TAutoObject
@$xp$11tagMULTI_QI
@$xp$11tagSTATDATA
@$xp$12ADDRESS_MODE
@$xp$12Adoint@Error
@$xp$12Adoint@Field
@$xp$12DBCOLUMNDESC
@$xp$12DBCOLUMNINFO
@$xp$12IAccIdentity
@$xp$12IAdviseSink2
@$xp$12IChannelHook
@$xp$12IComQCEvents
@$xp$12IEnumMoniker
@$xp$12IEnumOLEVERB
@$xp$12IEnumStatStg
@$xp$12IEnumUnknown
@$xp$12IEnumVARIANT
@$xp$12IEventServer
@$xp$12IOleDocument
@$xp$12IPersistFile
@$xp$12IPictureDisp
@$xp$12IPropertyBag
@$xp$12IRootStorage
@$xp$12ITransaction
@$xp$12IViewObject2
@$xp$12IWriteCookie
@$xp$12IXMLDocument
@$xp$12System@TDate
@$xp$12System@TTime
@$xp$12TChunkStatus
@$xp$12TFactoryProc
@$xp$12tagEXCEPINFO
@$xp$13Adoint@Errors
@$xp$13Adoint@Fields
@$xp$13Classes@TBits
@$xp$13Classes@TList
@$xp$13IClassFactory
@$xp$13IComAppEvents
@$xp$13IComCRMEvents
@$xp$13IComUserEvent
@$xp$13IContextState
@$xp$13IEnumSTATDATA
@$xp$13IMessageMover
@$xp$13IMtsEventInfo
@$xp$13IObjectSafety
@$xp$13IOleContainer
@$xp$13IPropertyPage
@$xp$13ObjectContext
@$xp$13ObjectControl
@$xp$13Oledb@IDBInfo
@$xp$13Oledb@IMDFind
@$xp$13Oledb@IRowset
@$xp$13System@string
@$xp$13TASPMTSObject
@$xp$13TByteDynArray
@$xp$13TConnectEvent
@$xp$13TWordDynArray
@$xp$14Adoint@Field15
@$xp$14Classes@TFiler
@$xp$14Contnrs@TQueue
@$xp$14Contnrs@TStack
@$xp$14IAccPropServer
@$xp$14IClassFactory2
@$xp$14ICreateTypeLib
@$xp$14ICrmLogControl
@$xp$14IEnumFORMATETC
@$xp$14IFillLockBytes
@$xp$14IMessageFilter
@$xp$14IObjectContext
@$xp$14IObjectControl
@$xp$14IOleClientSite
@$xp$14IPersistStream
@$xp$14IPropertyPage2
@$xp$14IQuickActivate
@$xp$14IRpcStubBuffer
@$xp$14ISessionObject
@$xp$14Oledb@ICommand
@$xp$14PROPERTYORIGIN
@$xp$14System@TObject
@$xp$14System@Variant
@$xp$14Sysutils@TProc
@$xp$14TInt64DynArray
@$xp$14TIntfFlagsBase
@$xp$14tagCONNECTDATA
@$xp$14tagQACONTAINER
@$xp$15Adoint@Fields15
@$xp$15Adoint@_ADODisp
@$xp$15Adoint@_Command
@$xp$15Classes@EThread
@$xp$15Classes@TParser
@$xp$15Classes@TReader
@$xp$15Classes@TRecall
@$xp$15Classes@TStream
@$xp$15Classes@TThread
@$xp$15Classes@TWriter
@$xp$15Contnrs@TBucket
@$xp$15IAccessibleDisp
@$xp$15IActiveDesigner
@$xp$15ICreateTypeInfo
@$xp$15ICreateTypeLib2
@$xp$15ICrmCompensator
@$xp$15IObjectWithSite
@$xp$15IOleControlSite
@$xp$15IOleInPlaceSite
@$xp$15IOleUndoManager
@$xp$15IPersistStorage
@$xp$15IReceiveAppData
@$xp$15IRpcProxyBuffer
@$xp$15IRunnableObject
@$xp$15ISharedProperty
@$xp$15IStdMarshalInfo
@$xp$15Math@TValueSign
@$xp$15Msxml@IXMLError
@$xp$15Oledb@IAccessor
@$xp$15Oledb@IDBInfoSC
@$xp$15Oledb@IMDFindSC
@$xp$15Oledb@IRowsetSC
@$xp$15Oledb@IViewSort
@$xp$15ShortStringBase
@$xp$15Stdvcl@IStrings
@$xp$15Syncobjs@TEvent
@$xp$15Syncobjs@TMutex
@$xp$15System@ByteBool
@$xp$15System@Currency
@$xp$15System@Extended
@$xp$15System@ShortInt
@$xp$15System@UCS4Char
@$xp$15System@WordBool
@$xp$15Sysutils@EAbort
@$xp$15Sysutils@TBytes
@$xp$15TDoubleDynArray
@$xp$15TParamFlagsBase
@$xp$15TSingleDynArray
@$xp$15TStringDynArray
@$xp$15TTypedComObject
@$xp$15Zlib@EZLibError
@$xp$16Activex@TOleEnum
@$xp$16Adoint@CoCommand
@$xp$16Adoint@Command15
@$xp$16Adoint@ErrorDisp
@$xp$16Adoint@FieldDisp
@$xp$16Adoint@Property_
@$xp$16Classes@TStrings
@$xp$16Comobj@EOleError
@$xp$16IAccPropServices
@$xp$16IComMethodEvents
@$xp$16IComObjectEvents
@$xp$16IComThreadEvents
@$xp$16IConnectionPoint
@$xp$16ICreateErrorInfo
@$xp$16ICreateTypeInfo2
@$xp$16IDispenserDriver
@$xp$16IEnumConnections
@$xp$16IEnumSTATPROPSTG
@$xp$16IObjectConstruct
@$xp$16IOleAdviseHolder
@$xp$16IOleCacheControl
@$xp$16IOleDocumentSite
@$xp$16IOleDocumentView
@$xp$16IOleInPlaceFrame
@$xp$16IPSFactoryBuffer
@$xp$16IPlaybackControl
@$xp$16IPropertyStorage
@$xp$16IServiceProvider
@$xp$16ISimpleFrameSite
@$xp$16Oledb@ICommandSC
@$xp$16SecurityProperty
@$xp$16Stdvcl@IProvider
@$xp$16System@TDateTime
@$xp$16TBooleanDynArray
@$xp$16TComClassManager
@$xp$16TIntegerDynArray
@$xp$16Typinfo@TOrdType
@$xp$16tagINTERFACEINFO
@$xp$17Activex@IEnumGUID
@$xp$17Adoint@ErrorsDisp
@$xp$17Adoint@FieldsDisp
@$xp$17Adoint@IDataspace
@$xp$17Adoint@Parameters
@$xp$17Adoint@Properties
@$xp$17Adoint@_Parameter
@$xp$17Adoint@_Recordset
@$xp$17Classes@TBiDiMode
@$xp$17Classes@TGetClass
@$xp$17Classes@THelpType
@$xp$17Classes@TShortCut
@$xp$17IContinueCallback
@$xp$17ICrmMonitorClerks
@$xp$17IDataAdviseHolder
@$xp$17IDispenserManager
@$xp$17IObjectContextTip
@$xp$17IOleCommandTarget
@$xp$17IOleInPlaceObject
@$xp$17IOleInPlaceSiteEx
@$xp$17IOleItemContainer
@$xp$17IParseDisplayName
@$xp$17IPropertyPageSite
@$xp$17IProvideClassInfo
@$xp$17IRpcChannelBuffer
@$xp$17IScriptingContext
@$xp$17ISecurityProperty
@$xp$17ISequentialStream
@$xp$17ISupportErrorInfo
@$xp$17Inifiles@TIniFile
@$xp$17Math@TPaymentTime
@$xp$17Msxml@IXMLDOMNode
@$xp$17Msxml@IXMLDOMText
@$xp$17Msxml@IXMLElement
@$xp$17Msxml@IXTLRuntime
@$xp$17Oledb@IAccessorSC
@$xp$17Oledb@IAlterIndex
@$xp$17Oledb@IAlterTable
@$xp$17Oledb@IOpenRowset
@$xp$17Oledb@IRowsetFind
@$xp$17Oledb@IRowsetInfo
@$xp$17Oledb@IRowsetView
@$xp$17Oledb@IViewFilter
@$xp$17Oledb@IViewRowset
@$xp$17Oledb@IViewSortSC
@$xp$17System@AnsiString
@$xp$17System@IInterface
@$xp$17System@IInvokable
@$xp$17System@OleVariant
@$xp$17System@Openstring
@$xp$17System@UCS4String
@$xp$17System@UTF8String
@$xp$17System@WideString
@$xp$17Sysutils@EMonitor
@$xp$17Sysutils@EOSError
@$xp$17Sysutils@TLangRec
@$xp$17TCardinalDynArray
@$xp$17TComObjectFactory
@$xp$17TComponentFactory
@$xp$17TLongWordDynArray
@$xp$17TShortIntDynArray
@$xp$17TSmallIntDynArray
@$xp$17Typinfo@TTypeKind
@$xp$18Adoint@CoParameter
@$xp$18Adoint@CoRecordset
@$xp$18Adoint@Field15Disp
@$xp$18Adoint@Recordset15
@$xp$18Adoint@Recordset20
@$xp$18Adoint@_Collection
@$xp$18Adoint@_Connection
@$xp$18Classes@Classes__1
@$xp$18Classes@EBitsError
@$xp$18Classes@EListError
@$xp$18Classes@EReadError
@$xp$18Classes@TAlignment
@$xp$18Classes@TComponent
@$xp$18Classes@TFilerFlag
@$xp$18Classes@TLeftRight
@$xp$18Classes@TOperation
@$xp$18Classes@TTopBottom
@$xp$18Classes@TValueType
@$xp$18Classes@TWndMethod
@$xp$18CoCAccPropServices
@$xp$18Contnrs@TClassList
@$xp$18DWMWINDOWATTRIBUTE
@$xp$18IAccessibleHandler
@$xp$18IApplicationObject
@$xp$18IComActivityEvents
@$xp$18IComIdentityEvents
@$xp$18IComInstanceEvents
@$xp$18IComResourceEvents
@$xp$18IComSecurityEvents
@$xp$18IPersistStreamInit
@$xp$18IPersistTextStream
@$xp$18IRequestDictionary
@$xp$18IVariantDictionary
@$xp$18Inifiles@THashItem
@$xp$18Math@TFPUException
@$xp$18Math@TRoundToRange
@$xp$18Msxml@IXMLElement2
@$xp$18Objauto@Objauto__1
@$xp$18Oledb@IColumnsInfo
@$xp$18Oledb@ICommandText
@$xp$18Oledb@IConvertType
@$xp$18Oledb@IErrorLookup
@$xp$18Oledb@IRowPosition
@$xp$18Oledb@IRowsetIndex
@$xp$18Oledb@ITransaction
@$xp$18Oledb@IViewChapter
@$xp$18Oledb@TDBPropArray
@$xp$18Registry@TRegistry
@$xp$18Stdvcl@IDataBroker
@$xp$18System@IComparable
@$xp$18System@IEnumerable
@$xp$18System@IEnumerator
@$xp$18System@ShortString
@$xp$18System@TBoundArray
@$xp$18Sysutils@EControlC
@$xp$18Sysutils@EExternal
@$xp$18Sysutils@EIntError
@$xp$18Sysutils@EOverflow
@$xp$18Sysutils@Exception
@$xp$18Sysutils@TEncoding
@$xp$18Sysutils@TFileName
@$xp$18Sysutils@TNameType
@$xp$18TAutoObjectFactory
@$xp$18Typinfo@TFloatType
@$xp$18Typinfo@TIntfFlags
@$xp$18Typinfo@TTypeKinds
@$xp$18Typinfo@Typinfo__4
@$xp$19Activex@TOldOleEnum
@$xp$19Adoint@CoConnection
@$xp$19Adoint@Connection15
@$xp$19Adoint@Fields15Disp
@$xp$19Adoint@_CommandDisp
@$xp$19Classes@Classes__33
@$xp$19Classes@Classes__45
@$xp$19Classes@Classes__55
@$xp$19Classes@EFOpenError
@$xp$19Classes@EFilerError
@$xp$19Classes@EWriteError
@$xp$19Classes@TCollection
@$xp$19Classes@TDataModule
@$xp$19Classes@TDuplicates
@$xp$19Classes@TFileStream
@$xp$19Classes@TFilerFlags
@$xp$19Classes@TGetStrProc
@$xp$19Classes@TPersistent
@$xp$19Classes@TReaderProc
@$xp$19Classes@TSeekOrigin
@$xp$19Classes@TShiftState
@$xp$19Classes@TStreamProc
@$xp$19Classes@TStringItem
@$xp$19Classes@TStringList
@$xp$19Classes@TTextReader
@$xp$19Classes@TTextWriter
@$xp$19Classes@TThreadList
@$xp$19Classes@TWriterProc
@$xp$19Comobj@EOleSysError
@$xp$19Contnrs@TBucketList
@$xp$19Contnrs@TObjectList
@$xp$19Convutils@TConvType
@$xp$19IComExceptionEvents
@$xp$19IEnumSTATPROPSETSTG
@$xp$19IExternalConnection
@$xp$19IOleInPlaceUIWindow
@$xp$19IPersistPropertyBag
@$xp$19IPropertyNotifySink
@$xp$19IPropertySetStorage
@$xp$19IProvideRuntimeText
@$xp$19IRunningObjectTable
@$xp$19ITransactionContext
@$xp$19Maskutils@TEditMask
@$xp$19Msxml@CoDOMDocument
@$xp$19Msxml@CoXMLDocument
@$xp$19Msxml@IXMLAttribute
@$xp$19Msxml@IXMLDOMEntity
@$xp$19Msxml@IXMLDocument2
@$xp$19Objauto@TParamFlags
@$xp$19Oledb@IAlterIndexSC
@$xp$19Oledb@IAlterTableSC
@$xp$19Oledb@IDBInitialize
@$xp$19Oledb@IDBProperties
@$xp$19Oledb@IOpenRowsetSC
@$xp$19Oledb@IParentRowset
@$xp$19Oledb@IRowsetChange
@$xp$19Oledb@IRowsetFindSC
@$xp$19Oledb@IRowsetInfoSC
@$xp$19Oledb@IRowsetLocate
@$xp$19Oledb@IRowsetScroll
@$xp$19Oledb@IRowsetUpdate
@$xp$19Oledb@IRowsetViewSC
@$xp$19Oledb@ISQLErrorInfo
@$xp$19Oledb@ISecurityInfo
@$xp$19Oledb@IViewFilterSC
@$xp$19Oledb@IViewRowsetSC
@$xp$19Stdvcl@IStringsDisp
@$xp$19Syncobjs@TSemaphore
@$xp$19Sysutils@EDivByZero
@$xp$19Sysutils@EInvalidOp
@$xp$19Sysutils@EMathError
@$xp$19Sysutils@EPrivilege
@$xp$19Sysutils@EUnderflow
@$xp$19Sysutils@TCharArray
@$xp$19Sysutils@TLanguages
@$xp$19Sysutils@TSearchRec
@$xp$19TWideStringDynArray
@$xp$19Typinfo@TMethodKind
@$xp$19Typinfo@TParamFlags
@$xp$19Zlib@TCustomZStream
@$xp$20Activex@ICatRegister
@$xp$20Activex@TUnknownList
@$xp$20Adoint@Command15Disp
@$xp$20Adoint@Property_Disp
@$xp$20Character@TCharacter
@$xp$20Classes@EParserError
@$xp$20Classes@EResNotFound
@$xp$20Classes@EStreamError
@$xp$20Classes@TBasicAction
@$xp$20Classes@TBytesStream
@$xp$20Classes@TClassFinder
@$xp$20Classes@THelpContext
@$xp$20Classes@TNotifyEvent
@$xp$20Classes@TReaderError
@$xp$20Comobj@EOleException
@$xp$20Contnrs@TBucketArray
@$xp$20Contnrs@TBucketEvent
@$xp$20Contnrs@TObjectQueue
@$xp$20Contnrs@TObjectStack
@$xp$20Contnrs@TOrderedList
@$xp$20IComObjectPoolEvents
@$xp$20ICrmFormatLogRecords
@$xp$20IPerPropertyBrowsing
@$xp$20ISecurityCallContext
@$xp$20ISecurityCallersColl
@$xp$20ISharedPropertyGroup
@$xp$20Inifiles@TMemIniFile
@$xp$20Inifiles@TStringHash
@$xp$20Masks@EMaskException
@$xp$20Msxml@IXMLDOMComment
@$xp$20Msxml@IXMLDOMElement
@$xp$20Msxml@IXMLDSOControl
@$xp$20Oledb@IColumnsInfoSC
@$xp$20Oledb@IColumnsRowset
@$xp$20Oledb@ICommandTextSC
@$xp$20Oledb@IConvertTypeSC
@$xp$20Oledb@IErrorLookupSC
@$xp$20Oledb@IGetDataSource
@$xp$20Oledb@IMDRangeRowset
@$xp$20Oledb@IRowPositionSC
@$xp$20Oledb@IRowsetIndexSC
@$xp$20Oledb@IRowsetRefresh
@$xp$20Oledb@IRowsetResynch
@$xp$20Oledb@ISourcesRowset
@$xp$20Oledb@ITransactionSC
@$xp$20Oledb@IViewChapterSC
@$xp$20Registry@TRegIniFile
@$xp$20Scktcomp@TAsyncStyle
@$xp$20Scktcomp@TClientType
@$xp$20Scktcomp@TErrorEvent
@$xp$20Scktcomp@TServerType
@$xp$20Stdvcl@IProviderDisp
@$xp$20Syncobjs@TWaitResult
@$xp$20System@RawByteString
@$xp$20System@TRuntimeError
@$xp$20Sysutils@EInOutError
@$xp$20Sysutils@ERangeError
@$xp$20Sysutils@EWin32Error
@$xp$20Sysutils@EZeroDivide
@$xp$20Sysutils@TFloatValue
@$xp$20Sysutils@TSysCharSet
@$xp$20Types@TSplitRectType
@$xp$20Widestrutils@CharSet
@$xp$21Activex@TMultiQIArray
@$xp$21Activex@TTypeInfoList
@$xp$21Adoint@IDataspaceDisp
@$xp$21Adoint@ParametersDisp
@$xp$21Adoint@PropertiesDisp
@$xp$21Adoint@_ParameterDisp
@$xp$21Adoint@_RecordsetDisp
@$xp$21Classes@EFCreateError
@$xp$21Classes@EInvalidImage
@$xp$21Classes@IVCLComObject
@$xp$21Classes@TGetChildProc
@$xp$21Classes@THandleStream

Sections

.text
Size: 608KB - Virtual size: 608KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.itext
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 30KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 21KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 312KB - Virtual size: 312KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 26B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 38KB - Virtual size: 38KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rsrc
Size: 58KB - Virtual size: 58KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
vcl120.bpl
.dll windows:5 windows x86 arch:x86

Password: 19111547

8df8c3c6e47c73ef6aa19581542f5b9f

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Imports

rtl120.bpl

@System@initialization$qqrv
@System@Finalization$qqrv
@System@LoadResString$qqrp20System@TResStringRec
@System@UTF8ToUnicodeString$qqrrx28System@%SmallString$iuc$255%
@System@UTF8EncodeToShortString$qqrx20System@UnicodeString
@System@@CheckAutoResult$qqrl
@System@TContainedObject@QueryInterface$qqsrx5_GUIDpv
@System@TAggregatedObject@_Release$qqsv
@System@TAggregatedObject@_AddRef$qqsv
@System@TAggregatedObject@QueryInterface$qqsrx5_GUIDpv
@System@TAggregatedObject@GetController$qqrv
@System@TAggregatedObject@$bctr$qqrx45System@%DelphiInterface$t17System@IInterface%
@System@TInterfacedObject@_Release$qqsv
@System@TInterfacedObject@_AddRef$qqsv
@System@TInterfacedObject@QueryInterface$qqsrx5_GUIDpv
@System@TInterfacedObject@NewInstance$qqrv
@System@TInterfacedObject@BeforeDestruction$qqrv
@System@TInterfacedObject@AfterConstruction$qqrv
@System@@IntfAddRef$qqrx45System@%DelphiInterface$t17System@IInterface%
@System@@IntfCast$qqrr45System@%DelphiInterface$t17System@IInterface%x45System@%DelphiInterface$t17System@IInterface%rx5_GUID
@System@@IntfCopy$qqrr45System@%DelphiInterface$t17System@IInterface%x45System@%DelphiInterface$t17System@IInterface%
@System@@IntfClear$qqrr45System@%DelphiInterface$t17System@IInterface%
@System@UnregisterModule$qqrp17System@TLibModule
@System@RegisterModule$qqrp17System@TLibModule
@System@@DynArrayAddRef$qqrv
@System@@DynArrayAsg$qqrv
@System@@DynArrayClear$qqrrpvpv
@System@@DynArrayCopyRange$qqrpvt1iirpv
@System@@DynArraySetLength$qqrv
@System@@DynArrayHigh$qqrv
@System@@DynArrayLength$qqrv
@System@@IntfDispCall$qv
@System@StringToOleStr$qqrx20System@UnicodeString
@System@OleStrToStrVar$qqrpbr27System@%AnsiStringT$us$i0$%
@System@OleStrToString$qqrpb
@System@StringToWideChar$qqrx20System@UnicodeStringpbi
@System@WideCharToString$qqrpb
@System@@Dispose$qqrpvt1
@System@@New$qqripv
@System@@CopyRecord$qqrv
@System@@AddRefRecord$qqrv
@System@@FinalizeArray$qqrpvt1ui
@System@@FinalizeRecord$qqrpvt1
@System@@InitializeRecord$qqrpvt1
@System@Pos$qqrx20System@UnicodeStringt1
@System@@UniqueStringU$qqrr20System@UnicodeString
@System@@UStrInsert$qqrx20System@UnicodeStringr20System@UnicodeStringi
@System@@UStrDelete$qqrr20System@UnicodeStringii
@System@@UStrCopy$qqrx20System@UnicodeStringii
@System@@UStrEqual$qqrv
@System@@UStrCatN$qqrv
@System@@UStrCat3$qqrr20System@UnicodeStringx20System@UnicodeStringt2
@System@@UStrCat$qqrr20System@UnicodeStringx20System@UnicodeString
@System@@UStrSetLength$qqrr20System@UnicodeStringi
@System@@UStrLen$qqrx20System@UnicodeString
@System@@UStrFromString$qqrr20System@UnicodeStringrx28System@%SmallString$iuc$255%
@System@@WStrFromUStr$qqrr17System@WideStringx20System@UnicodeString
@System@@UStrFromWStr$qqrr20System@UnicodeStringx17System@WideString
@System@@LStrFromUStr$qqrr27System@%AnsiStringT$us$i0$%x20System@UnicodeStringus
@System@@UStrFromWArray$qqrr20System@UnicodeStringpbi
@System@@UStrFromPWChar$qqrr20System@UnicodeStringpb
@System@@UStrFromWChar$qqrr20System@UnicodeStringb
@System@@UStrFromPWCharLen$qqrr20System@UnicodeStringpbi
@System@@UStrToPWChar$qqrx20System@UnicodeString
@System@@UStrLAsg$qqrr20System@UnicodeStringx20System@UnicodeString
@System@@UStrAsg$qqrr20System@UnicodeStringx20System@UnicodeString
@System@@UStrArrayClr$qqrpvi
@System@@UStrClr$qqrpv
@System@@UStrAddRef$qqrpv
@System@StringOfChar$qqrbi
@System@@WStrSetLength$qqrr17System@WideStringi
@System@@WStrEqual$qqrv
@System@@WStrToPWChar$qqrx17System@WideString
@System@@WStrFromWArray$qqrr17System@WideStringpbi
@System@@WStrFromPWChar$qqrr17System@WideStringpb
@System@@WStrArrayClr$qqrpvi
@System@@WStrClr$qqrpv
@System@@LStrToPChar$qqrx27System@%AnsiStringT$us$i0$%
@System@@LStrFromPWChar$qqrr27System@%AnsiStringT$us$i0$%pbus
@System@@EnsureUnicodeString$qqrr20System@UnicodeString
@System@@InternalUStrFromLStr$qqrr20System@UnicodeStringx27System@%AnsiStringT$us$i0$%
@System@@LStrArrayClr$qqrpvi
@System@@LStrClr$qqrpv
@System@@RunError$qqruc
@System@@Halt0$qqrv
@System@@InitImports$qqrv
@System@@InitResStringImports$qqrv
@System@@PackageUnload$qqrpx23System@PackageInfoTablep17System@TLibModule
@System@@PackageLoad$qqrpx23System@PackageInfoTablep17System@TLibModule
@System@@TryFinallyExit$qqrv
@System@@DoneExcept$qqrv
@System@@RaiseAgain$qqrv
@System@@RaiseExcept$qqrv
@System@@HandleAutoException$qqrv
@System@@HandleFinally$qqrv
@System@@HandleOnException$qqrv
@System@@HandleAnyException$qqrv
@System@@BeforeDestruction$qqrp14System@TObjectzc
@System@@AfterConstruction$qqrp14System@TObject
@System@@ClassDestroy$qqrp14System@TObject
@System@@ClassCreate$qqrp17System@TMetaClasso
@System@TObject@Dispatch$qqrpv
@System@TObject@BeforeDestruction$qqrv
@System@TObject@AfterConstruction$qqrv
@System@TObject@DefaultHandler$qqrpv
@System@TObject@ToString$qqrv
@System@TObject@SafeCallException$qqrp14System@TObjectpv
@System@TObject@InheritsFrom$qqrp17System@TMetaClass
@System@@FindDynaInst$qqrv
@System@@CallDynaInst$qqrv
@System@@AsClass$qqrp14System@TObjectp17System@TMetaClass
@System@@IsClass$qqrp14System@TObjectp17System@TMetaClass
@System@TObject@GetInterfaceEntry$qqrrx5_GUID
@System@TObject@GetInterface$qqrrx5_GUIDpv
@System@TObject@GetHashCode$qqrv
@System@TObject@Equals$qqrp14System@TObject
@System@TObject@Free$qqrv
@System@TObject@$bdtr$qqrv
@System@TObject@$bctr$qqrv
@System@TObject@InstanceSize$qqrv
@System@TObject@FreeInstance$qqrv
@System@TObject@NewInstance$qqrv
@System@TObject@ClassParent$qqrv
@System@TObject@ClassNameIs$qqrx20System@UnicodeString
@System@TObject@ClassName$qqrv
@System@@SetRange$qqrv
@System@@SetElem$qqrv
@System@@FillChar$qqrpvib
@System@@AStrCmp$qqrv
@System@@PStrNCpy$qqrp28System@%SmallString$iuc$255%t1uc
@System@@AbstractError$qqrv
@System@@TRUNC$qqrv
@System@@ROUND$qqrv
@System@Frac$qqrxg
@System@Get8087CW$qqrv
@System@Set8087CW$qqrus
@System@ParamStr$qqri
@System@Move$qqrpxvpvi
@System@ExceptAddr$qqrv
@System@ExceptObject$qqrv
@System@@ReallocMem$qqrrpvi
@System@@FreeMem$qqrpv
@System@@GetMem$qqri
@System@AllocMem$qqrui
@System@LibModuleList
@System@Test8086
@System@IsConsole
@System@InitProc
@System@CmdShow
@System@IsLibrary
@System@MainThreadID
@System@MainInstance
@$xp$12System@TTime
@$xp$12System@TDate
@$xp$16System@TDateTime
@$xp$23System@TContainedObject
@System@TContainedObject@
@$xp$24System@TAggregatedObject
@System@TAggregatedObject@
@$xp$24System@TInterfacedObject
@System@TInterfacedObject@
@$xp$9IDispatch
@$xp$17System@IInterface
@$xp$14System@TObject
@System@TObject@
@$xp$7HRESULT
@$xp$17System@OleVariant
@$xp$14System@Variant
@$xp$17System@WideString
@$xp$13System@string
@$xp$6Double
@$xp$8Cardinal
@$xp$11System@Word
@$xp$11System@Byte
@$xp$7Integer
@$xp$8SmallInt
@$xp$11System@Char
@$xp$7Boolean
@Classes@initialization$qqrv
@Classes@Finalization$qqrv
@Classes@DeallocateHWnd$qqrp6HWND__
@Classes@AllocateHWnd$qqrynpqqrr17Messages@TMessage$v
@Classes@FreeObjectInstance$qqrpv
@Classes@MakeObjectInstance$qqrynpqqrr17Messages@TMessage$v
@Classes@TDataModule@ReadState$qqrp15Classes@TReader
@Classes@TDataModule@DefineProperties$qqrp14Classes@TFiler
@Classes@TDataModule@DoDestroy$qqrv
@Classes@TDataModule@DoCreate$qqrv
@Classes@TDataModule@$bdtr$qqrv
@Classes@TDataModule@BeforeDestruction$qqrv
@Classes@TDataModule@$bctr$qqrp18Classes@TComponenti
@Classes@TDataModule@AfterConstruction$qqrv
@Classes@TDataModule@$bctr$qqrp18Classes@TComponent
@Classes@TStreamAdapter@$bctr$qqrp15Classes@TStream24Classes@TStreamOwnership
@Classes@TBasicAction@Change$qqrv
@Classes@TBasicAction@SetOnExecute$qqrynpqqrp14System@TObject$v
@Classes@TBasicAction@Update$qqrv
@Classes@TBasicAction@Execute$qqrv
@Classes@TBasicAction@UpdateTarget$qqrp14System@TObject
@Classes@TBasicAction@Notification$qqrp18Classes@TComponent18Classes@TOperation
@Classes@TBasicAction@ExecuteTarget$qqrp14System@TObject
@Classes@TBasicAction@HandlesTarget$qqrp14System@TObject
@Classes@TBasicAction@$bdtr$qqrv
@Classes@TBasicAction@$bctr$qqrp18Classes@TComponent
@Classes@TBasicActionLink@Update$qqrv
@Classes@TBasicActionLink@SetOnExecute$qqrynpqqrp14System@TObject$v
@Classes@TBasicActionLink@IsOnExecuteLinked$qqrv
@Classes@TBasicActionLink@SetAction$qqrp20Classes@TBasicAction
@Classes@TBasicActionLink@Execute$qqrp18Classes@TComponent
@Classes@TBasicActionLink@Change$qqrv
@Classes@TBasicActionLink@$bdtr$qqrv
@Classes@TBasicActionLink@AssignClient$qqrp14System@TObject
@Classes@TBasicActionLink@$bctr$qqrp14System@TObject
@Classes@TComponent@_Release$qqsv
@Classes@TComponent@_AddRef$qqsv
@Classes@TComponent@QueryInterface$qqsrx5_GUIDpv
@Classes@TComponent@UpdateRegistry$qqrox20System@UnicodeStringt2
@Classes@TComponent@SafeCallException$qqrp14System@TObjectpv
@Classes@TComponent@SetSubComponent$qqro
@Classes@TComponent@ExecuteAction$qqrp20Classes@TBasicAction
@Classes@TComponent@SetComponentIndex$qqri
@Classes@TComponent@GetComponentCount$qqrv
@Classes@TComponent@GetComponent$qqri
@Classes@TComponent@SetName$qqrx20System@UnicodeString
@Classes@TComponent@FindComponent$qqrx20System@UnicodeString
@Classes@TComponent@ValidateContainer$qqrp18Classes@TComponent
@Classes@TComponent@ValidateRename$qqrp18Classes@TComponentx20System@UnicodeStringt2
@Classes@TComponent@WriteState$qqrp15Classes@TWriter
@Classes@TComponent@ReadState$qqrp15Classes@TReader
@Classes@TComponent@Loaded$qqrv
@Classes@TComponent@GetParentComponent$qqrv
@Classes@TComponent@HasParent$qqrv
@Classes@TComponent@DefineProperties$qqrp14Classes@TFiler
@Classes@TComponent@Notification$qqrp18Classes@TComponent18Classes@TOperation
@Classes@TComponent@RemoveFreeNotification$qqrp18Classes@TComponent
@Classes@TComponent@Destroying$qqrv
@Classes@TComponent@DestroyComponents$qqrv
@Classes@TComponent@InsertComponent$qqrp18Classes@TComponent
@Classes@TComponent@FreeNotification$qqrp18Classes@TComponent
@Classes@TComponent@BeforeDestruction$qqrv
@Classes@TComponent@$bdtr$qqrv
@Classes@TComponent@$bctr$qqrp18Classes@TComponent
@Classes@TThread@WaitFor$qqrv
@Classes@TThread@Terminate$qqrv
@Classes@TThread@Resume$qqrv
@Classes@TThread@Suspend$qqrv
@Classes@TThread@Synchronize$qqrynpqqrv$v
@Classes@TThread@DoTerminate$qqrv
@Classes@TThread@AfterConstruction$qqrv
@Classes@TThread@$bdtr$qqrv
@Classes@TThread@$bctr$qqro
@Classes@CheckSynchronize$qqri
@Classes@TWriter@WriteString$qqrx20System@UnicodeString
@Classes@TWriter@WriteListEnd$qqrv
@Classes@TWriter@WriteListBegin$qqrv
@Classes@TWriter@WriteInteger$qqri
@Classes@TWriter@WriteDescendent$qqrp18Classes@TComponentt1
@Classes@TWriter@WriteCollection$qqrp19Classes@TCollection
@Classes@TWriter@WriteBoolean$qqro
@Classes@TReader@ReadValue$qqrv
@Classes@TReader@ReadString$qqrv
@Classes@TReader@ReadRootComponent$qqrp18Classes@TComponent
@Classes@TReader@ReadListEnd$qqrv
@Classes@TReader@ReadListBegin$qqrv
@Classes@TReader@ReadInteger$qqrv
@Classes@TReader@ReadIdent$qqrv
@Classes@TReader@ReadCollection$qqrp19Classes@TCollection
@Classes@TReader@ReadBoolean$qqrv
@Classes@TReader@EndOfList$qqrv
@Classes@RemoveFixupReferences$qqrp18Classes@TComponentx20System@UnicodeString
@Classes@TFiler@$bctr$qqrp15Classes@TStreami
@Classes@TResourceStream@$bctr$qqruiipb
@Classes@TResourceStream@$bctr$qqruix20System@UnicodeStringpb
@Classes@TMemoryStream@LoadFromStream$qqrp15Classes@TStream
@Classes@TFileStream@$bctr$qqrx20System@UnicodeStringus
@Classes@TStream@WriteComponent$qqrp18Classes@TComponent
@Classes@TStream@ReadComponent$qqrp18Classes@TComponent
@Classes@TStream@CopyFrom$qqrp15Classes@TStreamj
@Classes@TStream@WriteBuffer$qqrpxvi
@Classes@TStream@ReadBuffer$qqrpvi
@Classes@TStream@Seek$qqrxj19Classes@TSeekOrigin
@Classes@TStream@SetSize$qqrxj
@Classes@TStream@SetSize64$qqrxj
@Classes@TStream@SetSize$qqri
@Classes@TStream@GetSize$qqrv
@Classes@TStream@SetPosition$qqrxj
@Classes@TStream@GetPosition$qqrv
@Classes@TStringList@$bctr$qqrv
@Classes@TStringList@CompareStrings$qqrx20System@UnicodeStringt1
@Classes@TStringList@CustomSort$qqrpqqrp19Classes@TStringListii$i
@Classes@TStringList@Sort$qqrv
@Classes@TStringList@SetUpdateState$qqro
@Classes@TStringList@SetSorted$qqro
@Classes@TStringList@SetCapacity$qqri
@Classes@TStringList@PutObject$qqrip14System@TObject
@Classes@TStringList@Put$qqrix20System@UnicodeString
@Classes@TStringList@InsertItem$qqrix20System@UnicodeStringp14System@TObject
@Classes@TStringList@InsertObject$qqrix20System@UnicodeStringp14System@TObject
@Classes@TStringList@Insert$qqrix20System@UnicodeString
@Classes@TStringList@IndexOf$qqrx20System@UnicodeString
@Classes@TStringList@GetObject$qqri
@Classes@TStringList@GetCount$qqrv
@Classes@TStringList@GetCapacity$qqrv
@Classes@TStringList@Get$qqri
@Classes@TStringList@Find$qqrx20System@UnicodeStringri
@Classes@TStringList@Exchange$qqrii
@Classes@TStringList@Delete$qqri
@Classes@TStringList@Clear$qqrv
@Classes@TStringList@Changing$qqrv
@Classes@TStringList@Changed$qqrv
@Classes@TStringList@AddObject$qqrx20System@UnicodeStringp14System@TObject
@Classes@TStringList@Add$qqrx20System@UnicodeString
@Classes@TStringList@$bdtr$qqrv
@Classes@TStrings@CompareStrings$qqrx20System@UnicodeStringt1
@Classes@TStrings@SetValue$qqrx20System@UnicodeStringt1
@Classes@TStrings@SetUpdateState$qqro
@Classes@TStrings@SetTextStr$qqrx20System@UnicodeString
@Classes@TStrings@SetText$qqrpb
@Classes@TStrings@SetStringsAdapter$qqrx51System@%DelphiInterface$t23Classes@IStringsAdapter%
@Classes@TStrings@SetCapacity$qqri
@Classes@TStrings@SaveToStream$qqrp15Classes@TStreamp18Sysutils@TEncoding
@Classes@TStrings@SaveToStream$qqrp15Classes@TStream
@Classes@TStrings@SaveToFile$qqrx20System@UnicodeStringp18Sysutils@TEncoding
@Classes@TStrings@SaveToFile$qqrx20System@UnicodeString
@Classes@TStrings@PutObject$qqrip14System@TObject
@Classes@TStrings@Put$qqrix20System@UnicodeString
@Classes@TStrings@Move$qqrii
@Classes@TStrings@LoadFromStream$qqrp15Classes@TStreamp18Sysutils@TEncoding
@Classes@TStrings@LoadFromStream$qqrp15Classes@TStream
@Classes@TStrings@LoadFromFile$qqrx20System@UnicodeStringp18Sysutils@TEncoding
@Classes@TStrings@LoadFromFile$qqrx20System@UnicodeString
@Classes@TStrings@InsertObject$qqrix20System@UnicodeStringp14System@TObject
@Classes@TStrings@IndexOfObject$qqrp14System@TObject
@Classes@TStrings@IndexOfName$qqrx20System@UnicodeString
@Classes@TStrings@IndexOf$qqrx20System@UnicodeString
@Classes@TStrings@GetValue$qqrx20System@UnicodeString
@Classes@TStrings@GetTextStr$qqrv
@Classes@TStrings@GetText$qqrv
@Classes@TStrings@GetObject$qqri
@Classes@TStrings@GetName$qqri
@Classes@TStrings@GetCapacity$qqrv
@Classes@TStrings@ExtractName$qqrx20System@UnicodeString
@Classes@TStrings@Exchange$qqrii
@Classes@TStrings@Error$qqrx20System@UnicodeStringi
@Classes@TStrings@EndUpdate$qqrv
@Classes@TStrings@DefineProperties$qqrp14Classes@TFiler
@Classes@TStrings@BeginUpdate$qqrv
@Classes@TStrings@Assign$qqrp19Classes@TPersistent
@Classes@TStrings@AddStrings$qqrp16Classes@TStrings
@Classes@TStrings@Append$qqrx20System@UnicodeString
@Classes@TStrings@AddObject$qqrx20System@UnicodeStringp14System@TObject
@Classes@TStrings@Add$qqrx20System@UnicodeString
@Classes@TStrings@$bdtr$qqrv
@Classes@TOwnedCollection@$bctr$qqrp19Classes@TPersistentp17System@TMetaClass
@Classes@TCollection@Notify$qqrp23Classes@TCollectionItem31Classes@TCollectionNotification
@Classes@TCollection@Deleting$qqrp23Classes@TCollectionItem
@Classes@TCollection@Added$qqrrp23Classes@TCollectionItem
@Classes@TCollection@Owner$qqrv
@Classes@TCollection@Delete$qqri
@Classes@TCollection@Update$qqrp23Classes@TCollectionItem
@Classes@TCollection@SetItemName$qqrp23Classes@TCollectionItem
@Classes@TCollection@SetItem$qqrip23Classes@TCollectionItem
@Classes@TCollection@Insert$qqri
@Classes@TCollection@GetItem$qqri
@Classes@TCollection@GetCount$qqrv
@Classes@TCollection@GetEnumerator$qqrv
@Classes@TCollection@FindItemID$qqri
@Classes@TCollection@EndUpdate$qqrv
@Classes@TCollection@Clear$qqrv
@Classes@TCollection@BeginUpdate$qqrv
@Classes@TCollection@Assign$qqrp19Classes@TPersistent
@Classes@TCollection@Add$qqrv
@Classes@TCollection@$bdtr$qqrv
@Classes@TCollection@$bctr$qqrp17System@TMetaClass
@Classes@TCollectionEnumerator@MoveNext$qqrv
@Classes@TCollectionEnumerator@GetCurrent$qqrv
@Classes@TCollectionItem@SetIndex$qqri
@Classes@TCollectionItem@SetDisplayName$qqrx20System@UnicodeString
@Classes@TCollectionItem@SetCollection$qqrp19Classes@TCollection
@Classes@TCollectionItem@GetDisplayName$qqrv
@Classes@TCollectionItem@GetIndex$qqrv
@Classes@TCollectionItem@Changed$qqro
@Classes@TCollectionItem@$bdtr$qqrv
@Classes@TCollectionItem@$bctr$qqrp19Classes@TCollection
@Classes@TRecall@$bdtr$qqrv
@Classes@TRecall@$bctr$qqrp19Classes@TPersistentt1
@Classes@TInterfacedPersistent@QueryInterface$qqsrx5_GUIDpv
@Classes@TInterfacedPersistent@_Release$qqsv
@Classes@TInterfacedPersistent@_AddRef$qqsv
@Classes@TInterfacedPersistent@AfterConstruction$qqrv
@Classes@TPersistent@DefineProperties$qqrp14Classes@TFiler
@Classes@TPersistent@AssignTo$qqrp19Classes@TPersistent
@Classes@TPersistent@Assign$qqrp19Classes@TPersistent
@Classes@TPersistent@$bdtr$qqrv
@Classes@TBits@OpenBit$qqrv
@Classes@TBits@GetBit$qqri
@Classes@TBits@SetBit$qqrio
@Classes@TBits@SetSize$qqri
@Classes@TInterfaceList@Add$qqrx45System@%DelphiInterface$t17System@IInterface%
@Classes@TInterfaceList@Clear$qqrv
@Classes@TInterfaceList@$bctr$qqrv
@Classes@TThreadList@UnlockList$qqrv
@Classes@TThreadList@Remove$qqrpv
@Classes@TThreadList@LockList$qqrv
@Classes@TThreadList@Clear$qqrv
@Classes@TThreadList@Add$qqrpv
@Classes@TThreadList@$bctr$qqrv
@Classes@TList@Assign$qqrp13Classes@TList21Classes@TListAssignOpt1
@Classes@TList@Notify$qqrpv25Classes@TListNotification
@Classes@TList@Sort$qqrpqqrpvt1$i
@Classes@TList@SetCount$qqri
@Classes@TList@SetCapacity$qqri
@Classes@TList@Remove$qqrpv
@Classes@TList@Put$qqripv
@Classes@TList@Move$qqrii
@Classes@TList@Last$qqrv
@Classes@TList@Insert$qqripv
@Classes@TList@IndexOf$qqrpv
@Classes@TList@Grow$qqrv
@Classes@TList@Get$qqri
@Classes@TList@First$qqrv
@Classes@TList@Expand$qqrv
@Classes@TList@Error$qqrx20System@UnicodeStringi
@Classes@TList@Delete$qqri
@Classes@TList@Clear$qqrv
@Classes@TList@Add$qqrpv
@Classes@TList@$bdtr$qqrv
@Classes@InitInheritedComponent$qqrp18Classes@TComponentp17System@TMetaClass
@Classes@UnregisterFindGlobalComponentProc$qqrpqqrx20System@UnicodeString$p18Classes@TComponent
@Classes@RegisterFindGlobalComponentProc$qqrpqqrx20System@UnicodeString$p18Classes@TComponent
@Classes@IntToIdent$qqrir20System@UnicodeStringpx22Classes@TIdentMapEntryxi
@Classes@IdentToInt$qqrx20System@UnicodeStringripx22Classes@TIdentMapEntryxi
@Classes@RegisterIntegerConsts$qqrpvpqqrx20System@UnicodeStringri$opqqrir20System@UnicodeString$o
@Classes@ActivateClassGroup$qqrp17System@TMetaClass
@Classes@GroupDescendentsWith$qqrp17System@TMetaClasst1
@Classes@StartClassGroup$qqrp17System@TMetaClass
@Classes@RegisterClasses$qqrpp17System@TMetaClassxi
@Classes@RegisterClass$qqrp17System@TMetaClass
@Classes@InvalidPoint$qqrx17Types@TSmallPoint
@Classes@InvalidPoint$qqrrx12Types@TPoint
@Classes@Bounds$qqriiii
@Classes@Rect$qqriiii
@Classes@SmallPoint$qqrss
@Classes@Point$qqrii
@Classes@WakeMainThread
@$xp$22Classes@TIdentMapEntry
@Classes@GlobalNameSpace
@Classes@ApplicationShowException
@Classes@ApplicationHandleException
@Classes@RemoveDataModule
@Classes@AddDataModule
@$xp$19Classes@TDataModule
@Classes@TDataModule@
@$xp$20Classes@TBasicAction
@Classes@TBasicAction@
@$xp$24Classes@TBasicActionLink
@Classes@TBasicActionLink@
@$xp$18Classes@TComponent
@Classes@TComponent@
@$xp$23Classes@IDesignerNotify
@$xp$15Classes@TThread
@Classes@TThread@
@Classes@TWriter@
@Classes@TReader@
@Classes@TStreamAdapter@
@Classes@TResourceStream@
@Classes@TMemoryStream@
@Classes@TFileStream@
@$xp$15Classes@TStream
@Classes@TStream@
@$xp$19Classes@TStringList
@Classes@TStringList@
@$xp$16Classes@TStrings
@Classes@TStrings@
@$xp$24Classes@TOwnedCollection
@Classes@TOwnedCollection@
@$xp$19Classes@TCollection
@Classes@TCollection@
@$xp$23Classes@TCollectionItem
@Classes@TCollectionItem@
@$xp$15Classes@TRecall
@Classes@TRecall@
@$xp$29Classes@TInterfacedPersistent
@Classes@TInterfacedPersistent@
@$xp$19Classes@TPersistent
@Classes@TPersistent@
@Classes@TBits@
@Classes@TInterfaceList@
@Classes@TThreadList@
@$xp$13Classes@TList
@Classes@TList@
@Classes@EInvalidOperation@
@Classes@EOutOfResources@
@Classes@EComponentError@
@Classes@EListError@
@Classes@EResNotFound@
@Classes@EWriteError@
@Classes@EReadError@
@$xp$20Classes@TNotifyEvent
@$xp$17Classes@TShortCut

kernel32

TlsSetValue
TlsGetValue
TlsFree
TlsAlloc
LocalFree
LocalAlloc
FreeLibrary
lstrcmpW
WaitForSingleObject
SetThreadLocale
SetEvent
SetErrorMode
MultiByteToWideChar
MulDiv
LockResource
LoadResource
LoadLibraryW
LeaveCriticalSection
InitializeCriticalSection
GlobalUnlock
GlobalSize
GlobalLock
GlobalFree
GlobalFindAtomW
GlobalDeleteAtom
GlobalAlloc
GlobalAddAtomW
GetVersion
GetUserDefaultLCID
GetTickCount
GetThreadLocale
GetSystemDefaultLCID
GetProfileStringW
GetProcAddress
GetModuleHandleW
GetModuleFileNameW
GetLocaleInfoW
GetLastError
GetCurrentThreadId
GetCurrentProcessId
FreeResource
InterlockedIncrement
FreeLibrary
FormatMessageW
FindResourceW
EnterCriticalSection
DeleteCriticalSection
CreateThread
CreateEventW
CompareStringW
CloseHandle
Sleep
MulDiv

oleaut32

GetActiveObject
LoadRegTypeLib
SysFreeString

ole32

CreateStreamOnHGlobal
CreateILockBytesOnHGlobal
GetHGlobalFromILockBytes
OleRegEnumVerbs
OleRegGetUserType
OleGetIconOfClass
IsAccelerator
CreateOleAdviseHolder
ReleaseStgMedium
OleIsRunning
OleRun
OleDraw
OleSetMenuDescriptor
OleGetClipboard
OleSetClipboard
OleSetContainedObject
OleSave
OleLoad
OleCreateFromFile
OleCreateLinkToFile
OleCreateLinkFromData
OleCreateFromData
OleCreate
OleQueryCreateFromData
OleQueryLinkFromData
OleUninitialize
OleInitialize
CreateBindCtx
StgOpenStorageOnILockBytes
StgCreateDocfileOnILockBytes
StgCreateDocfile
CreateDataAdviseHolder
CoTaskMemFree
CoTaskMemAlloc
CoCreateInstance
CoGetClassObject
IsEqualGUID
IsEqualGUID

user32

CreateWindowExW
WindowFromPoint
WinHelpW
WaitMessage
ValidateRect
UpdateWindow
UnregisterClassW
UnhookWindowsHookEx
TranslateMessage
TranslateMDISysAccel
TrackPopupMenu
TrackMouseEvent
SystemParametersInfoW
ShowWindow
ShowScrollBar
ShowOwnedPopups
SetWindowRgn
SetWindowsHookExW
SetWindowTextW
SetWindowPos
SetWindowPlacement
SetWindowLongW
SetTimer
SetScrollRange
SetScrollPos
SetScrollInfo
SetRect
SetPropW
SetParent
SetMenuItemInfoW
SetMenu
SetKeyboardState
SetForegroundWindow
SetFocus
SetCursorPos
SetCursor
SetClipboardData
SetClassLongW
SetCaretPos
SetCapture
SetActiveWindow
SendMessageA
SendMessageW
SendDlgItemMessageW
ScrollWindowEx
ScrollWindow
ScreenToClient
RemovePropW
RemoveMenu
ReleaseDC
ReleaseCapture
RegisterWindowMessageW
RegisterClipboardFormatW
RegisterClassW
RedrawWindow
PtInRect
PostThreadMessageW
PostQuitMessage
PostMessageW
PeekMessageA
PeekMessageW
OpenClipboard
OffsetRect
MessageBoxW
MessageBeep
MapWindowPoints
MapVirtualKeyW
LockWindowUpdate
LoadKeyboardLayoutW
LoadIconW
LoadCursorW
LoadBitmapW
KillTimer
IsZoomed
IsWindowVisible
IsWindowUnicode
IsWindowEnabled
IsWindow
IsIconic
IsDialogMessageA
IsDialogMessageW
IsClipboardFormatAvailable
IsChild
IsCharAlphaNumericW
IsCharAlphaW
InvalidateRect
IntersectRect
InsertMenuItemW
InsertMenuW
InflateRect
GetWindowThreadProcessId
GetWindowTextW
GetWindowRect
GetWindowPlacement
GetWindowLongW
GetWindowDC
GetUpdateRect
GetTopWindow
GetSystemMetrics
GetSystemMenu
GetSysColorBrush
GetSysColor
GetSubMenu
GetScrollRange
GetScrollPos
GetScrollInfo
GetPropW
GetParent
GetWindow
GetMessageTime
GetMessagePos
GetMessageW
GetMenuStringW
GetMenuState
GetMenuItemInfoW
GetMenuItemID
GetMenuItemCount
GetMenu
GetLastActivePopup
GetKeyboardState
GetKeyboardLayoutNameW
GetKeyboardLayoutList
GetKeyboardLayout
GetKeyState
GetKeyNameTextW
GetIconInfo
GetForegroundWindow
GetFocus
GetDoubleClickTime
GetDlgItem
GetDesktopWindow
GetDCEx
GetDC
GetCursorPos
GetCursor
GetClipboardData
GetClientRect
GetClassNameW
GetClassLongW
GetClassInfoW
GetCaretPos
GetCapture
GetActiveWindow
FrameRect
FindWindowExW
FindWindowW
FillRect
EqualRect
EnumWindows
EnumThreadWindows
EnumClipboardFormats
EnumChildWindows
EndPaint
EndDeferWindowPos
EnableWindow
EnableMenuItem
EmptyClipboard
DrawTextExW
DrawTextW
DrawMenuBar
DrawIconEx
DrawIcon
DrawFrameControl
DrawFocusRect
DrawEdge
DispatchMessageA
DispatchMessageW
DestroyWindow
DestroyMenu
DestroyIcon
DestroyCursor
DestroyCaret
DestroyAcceleratorTable
DeleteMenu
DeferWindowPos
DefWindowProcW
DefMDIChildProcW
DefFrameProcW
CreatePopupMenu
CreateMenu
CreateIcon
CreateCaret
CreateAcceleratorTableW
CountClipboardFormats
CopyIcon
CloseClipboard
ClientToScreen
ChildWindowFromPoint
CheckMenuItem
CharPrevW
CharNextW
CharLowerW
CallWindowProcW
CallNextHookEx
BringWindowToTop
BeginPaint
BeginDeferWindowPos
AdjustWindowRectEx
ActivateKeyboardLayout

msimg32

GradientFill
AlphaBlend

gdi32

UnrealizeObject
TextOutW
StretchDIBits
StretchBlt
StartPage
StartDocW
SetWindowOrgEx
SetWindowExtEx
SetWinMetaFileBits
SetViewportOrgEx
SetViewportExtEx
SetTextColor
SetStretchBltMode
SetROP2
SetPixel
SetMapMode
SetEnhMetaFileBits
SetDIBColorTable
SetBrushOrgEx
SetBkMode
SetBkColor
SetAbortProc
SelectPalette
SelectObject
SelectClipRgn
SelectClipPath
SaveDC
RoundRect
RestoreDC
Rectangle
RectVisible
RealizePalette
Polyline
Polygon
PolyPolyline
PolyBezierTo
PolyBezier
PlayEnhMetaFile
Pie
PatBlt
MoveToEx
MaskBlt
LineTo
LPtoDP
IntersectClipRect
GetWindowOrgEx
GetWinMetaFileBits
GetTextMetricsW
GetTextExtentPointW
GetTextExtentPoint32W
GetSystemPaletteEntries
GetStockObject
GetRgnBox
GetPixel
GetPaletteEntries
GetObjectW
GetEnhMetaFilePaletteEntries
GetEnhMetaFileHeader
GetEnhMetaFileDescriptionW
GetEnhMetaFileBits
GetDeviceCaps
GetDIBits
GetDIBColorTable
GetCurrentPositionEx
GetClipBox
GetBrushOrgEx
GetBitmapBits
GdiFlush
FrameRgn
FillRgn
ExtTextOutW
ExtFloodFill
ExtCreatePen
ExcludeClipRect
EnumFontsW
EnumFontFamiliesExW
EndPath
EndPage
EndDoc
Ellipse
DeleteObject
DeleteMetaFile
DeleteEnhMetaFile
DeleteDC
CreateSolidBrush
CreateRoundRectRgn
CreateRectRgnIndirect
CreateRectRgn
CreatePolygonRgn
CreatePenIndirect
CreatePen
CreatePatternBrush
CreatePalette
CreateMetaFileW
CreateICW
CreateHalftonePalette
CreateFontIndirectW
CreateEnhMetaFileW
CreateEllipticRgn
CreateDIBitmap
CreateDIBSection
CreateDCW
CreateCompatibleDC
CreateCompatibleBitmap
CreateBrushIndirect
CreateBitmap
CopyEnhMetaFileW
CombineRgn
CloseMetaFile
CloseEnhMetaFile
Chord
BitBlt
BeginPath
Arc
AbortDoc

advapi32

ReportEventW
RegisterEventSourceW
RegQueryValueExW
RegOpenKeyExW
RegCloseKey
DeregisterEventSource
StartServiceCtrlDispatcherW
SetServiceStatus
RegisterServiceCtrlHandlerW
OpenServiceW
OpenSCManagerW
DeleteService
CreateServiceW
CloseServiceHandle

comctl32

InitializeFlatSB
FlatSB_SetScrollProp
FlatSB_SetScrollPos
FlatSB_SetScrollInfo
FlatSB_GetScrollPos
FlatSB_GetScrollInfo
_TrackMouseEvent
ImageList_GetImageInfo
ImageList_SetIconSize
ImageList_GetIconSize
ImageList_Write
ImageList_Read
ImageList_GetDragImage
ImageList_DragShowNolock
ImageList_DragMove
ImageList_DragLeave
ImageList_DragEnter
ImageList_EndDrag
ImageList_BeginDrag
ImageList_Copy
ImageList_LoadImageW
ImageList_GetIcon
ImageList_Remove
ImageList_DrawEx
ImageList_Replace
ImageList_Draw
ImageList_SetOverlayImage
ImageList_GetBkColor
ImageList_SetBkColor
ImageList_ReplaceIcon
ImageList_Add
ImageList_SetImageCount
ImageList_GetImageCount
ImageList_Destroy
ImageList_Create
InitCommonControls

shell32

SHGetPathFromIDListW
SHGetMalloc
SHGetDesktopFolder
SHBrowseForFolderW
Shell_NotifyIconW
ShellExecuteW

comdlg32

PageSetupDlgW
PrintDlgW
ChooseFontW
ReplaceTextW
FindTextW
ChooseColorW
GetSaveFileNameW
GetOpenFileNameW

winspool.drv

OpenPrinterW
EnumPrintersW
DocumentPropertiesW
ClosePrinter

oledlg

OleUIObjectPropertiesW
OleUIChangeIconW
OleUIPasteSpecialW
OleUIInsertObjectW

Exports

Exports

@$xp$11Forms@TForm
@$xp$11Menus@TMenu
@$xp$11TActiveForm
@$xp$12Forms@TFrame
@$xp$12Mask@Mask__2
@$xp$12Tabs@TTabSet
@$xp$13Forms@TScreen
@$xp$13Graphics@TPen
@$xp$13Tabs@TTabList
@$xp$14Extctrls@TPage
@$xp$14Forms@Forms__6
@$xp$14Forms@IOleForm
@$xp$14Forms@TMonitor
@$xp$14Graphics@TFont
@$xp$14Graphics@TIcon
@$xp$14Grids@Grids__3
@$xp$14Grids@Grids__4
@$xp$14Mask@TMaskEdit
@$xp$14Stdctrls@TEdit
@$xp$14Stdctrls@TMemo
@$xp$14Tabs@TEdgePart
@$xp$14Tabs@TEdgeType
@$xp$14Tabs@TScroller
@$xp$15Buttons@TBitBtn
@$xp$15Comctrls@TWidth
@$xp$15Controls@TAlign
@$xp$15Controls@TMouse
@$xp$15Extctrls@TBevel
@$xp$15Extctrls@TImage
@$xp$15Extctrls@TPanel
@$xp$15Extctrls@TShape
@$xp$15Extctrls@TTimer
@$xp$15Forms@TPosition
@$xp$15Forms@TTileMode
@$xp$15Graphics@TBrush
@$xp$15Graphics@TColor
@$xp$15Grids@TDrawGrid
@$xp$15Menus@TMainMenu
@$xp$15Menus@TMenuItem
@$xp$15Stdctrls@TLabel
@$xp$15Svcmgr@TService
@$xp$15TActiveXControl
@$xp$15TConnectionKind
@$xp$15Tabs@TScrollBtn
@$xp$16Actnlist@TAction
@$xp$16Comctrls@THotKey
@$xp$16Comctrls@TUpDown
@$xp$16Controls@TCursor
@$xp$16Extctrls@THeader
@$xp$16Forms@TFormState
@$xp$16Forms@TFormStyle
@$xp$16Forms@THelpEvent
@$xp$16Forms@TIdleEvent
@$xp$16Forms@TPopupMode
@$xp$16Forms@TScrollBox
@$xp$16Forms@TTimerMode
@$xp$16Graphics@TBitmap
@$xp$16Graphics@TCanvas
@$xp$16Grids@TEditStyle
@$xp$16Grids@TGridState
@$xp$16Imglist@TOverlay
@$xp$16Imglist@TResType
@$xp$16Menus@EMenuError
@$xp$16Menus@TMenuBreak
@$xp$16Menus@TPopupList
@$xp$16Menus@TPopupMenu
@$xp$16Stdctrls@TButton
@$xp$16TConnectionPoint
@$xp$17Comctrls@TAddMode
@$xp$17Comctrls@TAnimate
@$xp$17Comctrls@TCoolBar
@$xp$17Comctrls@THitTest
@$xp$17Comctrls@TToolBar
@$xp$17Controls@TAnchors
@$xp$17Controls@TCaption
@$xp$17Controls@TControl
@$xp$17Controls@TImeMode
@$xp$17Controls@TImeName
@$xp$17Controls@TMargins
@$xp$17Controls@TPadding
@$xp$17Dialogs@TPageType
@$xp$17Extactns@TFileRun
@$xp$17Extactns@TNextTab
@$xp$17Extactns@TShowCmd
@$xp$17Extctrls@TRowItem
@$xp$17Extctrls@TRowSize
@$xp$17Forms@TBorderIcon
@$xp$17Forms@TCloseEvent
@$xp$17Forms@TCustomForm
@$xp$17Forms@TGlassFrame
@$xp$17Forms@TPrintScale
@$xp$17Forms@TShowAction
@$xp$17Forms@TWindowHook
@$xp$17Graphics@TGraphic
@$xp$17Graphics@TPenMode
@$xp$17Graphics@TPicture
@$xp$17Grids@TCustomGrid
@$xp$17Grids@TGridOption
@$xp$17Grids@TMovedEvent
@$xp$17Grids@TStringGrid
@$xp$17Imouse@TPanOption
@$xp$17Mask@EDBEditError
@$xp$17Mask@TMaskedState
@$xp$17Olectnrs@TOleForm
@$xp$17Printers@EPrinter
@$xp$17Printers@TPrinter
@$xp$17Stdactns@TEditCut
@$xp$17Stdctrls@TListBox
@$xp$17Svcmgr@TStartType
@$xp$17Svcmgr@TStopEvent
@$xp$17TConnectionPoints
@$xp$17Themes@TThemedTab
@$xp$17Valedit@TItemProp
@$xp$18Axctrls@TOleStream
@$xp$18Buttons@TNumGlyphs
@$xp$18Clipbrd@TClipboard
@$xp$18Comctrls@TCoolBand
@$xp$18Comctrls@THitTests
@$xp$18Comctrls@TItemFind
@$xp$18Comctrls@TListItem
@$xp$18Comctrls@TListView
@$xp$18Comctrls@TRichEdit
@$xp$18Comctrls@TSortType
@$xp$18Comctrls@TTabSheet
@$xp$18Comctrls@TTabStyle
@$xp$18Comctrls@TTickMark
@$xp$18Comctrls@TTrackBar
@$xp$18Comctrls@TTreeNode
@$xp$18Comctrls@TTreeView
@$xp$18Comctrls@TWorkArea
@$xp$18Controls@TAlignSet
@$xp$18Controls@TBevelCut
@$xp$18Controls@TDockTree
@$xp$18Controls@TDockZone
@$xp$18Controls@TDragKind
@$xp$18Controls@TDragMode
@$xp$18Controls@THintInfo
@$xp$18Controls@TKeyEvent
@$xp$18Controls@TTabOrder
@$xp$18Dialogs@TMsgDlgBtn
@$xp$18Extactns@TSendMail
@$xp$18Extctrls@TCellItem
@$xp$18Extctrls@TCellSpan
@$xp$18Extctrls@TColorBox
@$xp$18Extctrls@TNotebook
@$xp$18Extctrls@TPaintBox
@$xp$18Extctrls@TSplitter
@$xp$18Extctrls@TTrayIcon
@$xp$18Extdlgs@Extdlgs__5
@$xp$18Forms@TApplication
@$xp$18Forms@TBorderIcons
@$xp$18Forms@TBorderStyle
@$xp$18Forms@TCloseAction
@$xp$18Forms@TCustomFrame
@$xp$18Forms@TWindowState
@$xp$18Graphics@TFillMode
@$xp$18Graphics@TFontName
@$xp$18Graphics@TMetafile
@$xp$18Graphics@TPenStyle
@$xp$18Grids@TGridOptions
@$xp$18Grids@TInplaceEdit
@$xp$18Imglist@TImageType
@$xp$18Imouse@TPanOptions
@$xp$18Menus@TTrackButton
@$xp$18Olectnrs@TSizeMode
@$xp$18Stdactns@TEditCopy
@$xp$18Stdactns@TEditUndo
@$xp$18Stdactns@TFileExit
@$xp$18Stdactns@TFileOpen
@$xp$18Stdactns@TFontEdit
@$xp$18Stdactns@TPrintDlg
@$xp$18Stdctrls@TCheckBox
@$xp$18Stdctrls@TComboBox
@$xp$18Stdctrls@TGroupBox
@$xp$18Svcmgr@TDependency
@$xp$18Svcmgr@TPauseEvent
@$xp$18Svcmgr@TStartEvent
@$xp$18TActiveFormControl
@$xp$18TActiveFormFactory
@$xp$18Themes@TThemedEdit
@$xp$18Themes@TThemedMenu
@$xp$18Themes@TThemedPage
@$xp$18Themes@TThemedSpin
@$xp$18Toolwin@TEdgeStyle
@$xp$18Valedit@TItemProps
@$xp$18Valedit@TKeyOption
@$xp$19Actnlist@THintEvent
@$xp$19Axctrls@IFontAccess
@$xp$19Axctrls@TOleGraphic
@$xp$19Buttons@TBitBtnKind
@$xp$19Comctrls@TCommonAVI
@$xp$19Comctrls@TCoolBands
@$xp$19Comctrls@TItemState
@$xp$19Comctrls@TListGroup
@$xp$19Comctrls@TListItems
@$xp$19Comctrls@TNodeState
@$xp$19Comctrls@TStatusBar
@$xp$19Comctrls@TTickStyle
@$xp$19Comctrls@TTreeNodes
@$xp$19Comctrls@TUDBtnType
@$xp$19Comctrls@TViewStyle
@$xp$19Comctrls@TWorkAreas
@$xp$19Controls@TBevelEdge
@$xp$19Controls@TBevelKind
@$xp$19Controls@TDragState
@$xp$19Controls@TImageList
@$xp$19Dialogs@TFindDialog
@$xp$19Dialogs@TFindOption
@$xp$19Dialogs@TFontDialog
@$xp$19Dialogs@TMsgDlgType
@$xp$19Dialogs@TOFNotifyEx
@$xp$19Dialogs@TOpenDialog
@$xp$19Dialogs@TOpenOption
@$xp$19Dialogs@TPrintRange
@$xp$19Dialogs@TSaveDialog
@$xp$19Dialogs@TTaskDialog
@$xp$19Extactns@TBrowseURL
@$xp$19Extactns@TTabAction
@$xp$19Extactns@TURLAction
@$xp$19Extctrls@TFlowPanel
@$xp$19Extctrls@TFlowStyle
@$xp$19Extctrls@TGridPanel
@$xp$19Extctrls@TLinkLabel
@$xp$19Extctrls@TShapeType
@$xp$19Extctrls@TSizeStyle
@$xp$19Forms@IDesignerHook
@$xp$19Forms@TMessageEvent
@$xp$19Forms@TScrollBarInc
@$xp$19Graphics@TFillStyle
@$xp$19Graphics@TFontPitch
@$xp$19Graphics@TFontStyle
@$xp$19Graphics@TIconImage
@$xp$19Graphics@TPenRecall
@$xp$19Grids@TGetEditEvent
@$xp$19Grids@TGridMovement
@$xp$19Grids@TSetEditEvent
@$xp$19Imglist@TChangeLink
@$xp$19Imglist@TColorDepth
@$xp$19Imglist@TImageIndex
@$xp$19Imouse@TUpdateEvent
@$xp$19Menus@TFindItemKind
@$xp$19Menus@TMenuAutoFlag
@$xp$19Olectrls@TEnumValue
@$xp$19Stdactns@TEditPaste
@$xp$19Stdctrls@TScrollBar
@$xp$19Svcmgr@TEventLogger
@$xp$19Svcmgr@TServiceType
@$xp$19Themes@TThemedClock
@$xp$19Themes@TThemedRebar
@$xp$19Toolwin@TEdgeBorder
@$xp$19Toolwin@TToolWindow
@$xp$19Valedit@TKeyOptions
@$xp$20Actnlist@TActionLink
@$xp$20Actnlist@TActionList
@$xp$20Axctrls@TFontAdapter
@$xp$20Buttons@TButtonState
@$xp$20Buttons@TButtonStyle
@$xp$20Buttons@TSpeedButton
@$xp$20Comctrls@Comctrls__9
@$xp$20Comctrls@TComboBoxEx
@$xp$20Comctrls@TConversion
@$xp$20Comctrls@TDTDateMode
@$xp$20Comctrls@THKModifier
@$xp$20Comctrls@TItemChange
@$xp$20Comctrls@TItemStates
@$xp$20Comctrls@TListColumn
@$xp$20Comctrls@TListGroups
@$xp$20Comctrls@TSearchType
@$xp$20Comctrls@TTabControl
@$xp$20Comctrls@TToolButton
@$xp$20Controls@TAnchorKind
@$xp$20Controls@TBevelEdges
@$xp$20Controls@TBevelWidth
@$xp$20Controls@TCustomHint
@$xp$20Controls@TDragObject
@$xp$20Controls@THintWindow
@$xp$20Controls@TMarginSize
@$xp$20Controls@TMouseEvent
@$xp$20Controls@TWinControl
@$xp$20Dialogs@TColorDialog
@$xp$20Dialogs@TFindOptions
@$xp$20Dialogs@TOpenOptions
@$xp$20Dialogs@TPrintDialog
@$xp$20Dialogs@TPrinterKind
@$xp$20Extctrls@TBevelShape
@$xp$20Extctrls@TBevelStyle
@$xp$20Extctrls@TBoundLabel
@$xp$20Extctrls@TColumnItem
@$xp$20Extctrls@TControlBar
@$xp$20Extctrls@TCornerEdge
@$xp$20Extctrls@TEditButton
@$xp$20Extctrls@TRadioGroup
@$xp$20Forms@TPopupWndArray
@$xp$20Forms@TScrollBarKind
@$xp$20Forms@TShortCutEvent
@$xp$20Forms@TShowHintEvent
@$xp$20Graphics@TBrushStyle
@$xp$20Graphics@TFontRecall
@$xp$20Graphics@TFontStyles
@$xp$20Graphics@TTextFormat
@$xp$20Graphutil@TArrowType
@$xp$20Grids@TDrawCellEvent
@$xp$20Grids@TGridDrawState
@$xp$20Imouse@TPanDirection
@$xp$20Mask@TCustomMaskEdit
@$xp$20Menus@TMenuAnimation
@$xp$20Menus@TMenuItemStack
@$xp$20Olectnrs@TCreateInfo
@$xp$20Olectnrs@TCreateType
@$xp$20Olectrls@TOleControl
@$xp$20Oleserver@TOleServer
@$xp$20Stdactns@TEditAction
@$xp$20Stdactns@TEditDelete
@$xp$20Stdactns@TFileAction
@$xp$20Stdactns@TFileSaveAs
@$xp$20Stdactns@THelpAction
@$xp$20Stdactns@THelpOnHelp
@$xp$20Stdactns@THintAction
@$xp$20Stdactns@TSearchFind
@$xp$20Stdctrls@TCustomEdit
@$xp$20Stdctrls@TCustomMemo
@$xp$20Stdctrls@TFNDrawText
@$xp$20Stdctrls@TScrollCode
@$xp$20Stdctrls@TStaticText
@$xp$20Stdctrls@TTextLayout
@$xp$20Svcmgr@TDependencies
@$xp$20Svcmgr@TServiceEvent
@$xp$20TActiveXPropertyPage
@$xp$20Tabs@TTabChangeEvent
@$xp$20Tabs@TTabSetTabStyle
@$xp$20Themes@TThemedButton
@$xp$20Themes@TThemedHeader
@$xp$20Themes@TThemedStatus
@$xp$20Themes@TThemedWindow
@$xp$20Toolwin@TEdgeBorders
@$xp$21Actnlist@TActionEvent
@$xp$21Axctrls@TPropertyPage
@$xp$21Buttons@TButtonLayout
@$xp$21Comctrls@Comctrls__74
@$xp$21Comctrls@Comctrls__84
@$xp$21Comctrls@TComboExItem
@$xp$21Comctrls@TDisplayCode
@$xp$21Comctrls@THKModifiers
@$xp$21Comctrls@THeaderStyle
@$xp$21Comctrls@TIconOptions
@$xp$21Comctrls@TItemRequest
@$xp$21Comctrls@TListColumns
@$xp$21Comctrls@TPageControl
@$xp$21Comctrls@TProgressBar
@$xp$21Comctrls@TSearchTypes
@$xp$21Comctrls@TStatusPanel
@$xp$21Comctrls@TTabPosition
@$xp$21Controls@Controls__21
@$xp$21Controls@Controls__31
@$xp$21Controls@Controls__41
@$xp$21Controls@IDockManager
@$xp$21Controls@TBalloonHint
@$xp$21Controls@TBorderWidth
@$xp$21Controls@TDragMessage
@$xp$21Controls@TModalResult
@$xp$21Controls@TMouseButton
@$xp$21Controls@TUnDockEvent
@$xp$21Dialogs@TCommonDialog
@$xp$21Dialogs@TFDApplyEvent
@$xp$21Dialogs@TFileTypeItem
@$xp$21Dialogs@TOpenOptionEx
@$xp$21Extactns@TDownLoadURL
@$xp$21Extactns@TOpenPicture
@$xp$21Extactns@TPreviousTab
@$xp$21Extactns@TSavePicture
@$xp$21Extctrls@TControlItem
@$xp$21Extctrls@TCustomPanel
@$xp$21Extctrls@TExpandStyle
@$xp$21Extctrls@TLabeledEdit
@$xp$21Extctrls@TResizeStyle
@$xp$21Extctrls@TSysLinkType
@$xp$21Forms@TCustomDockForm
@$xp$21Forms@TDefaultMonitor
@$xp$21Forms@TExceptionEvent
@$xp$21Forms@TGetHandleEvent
@$xp$21Forms@TPopupFormArray
@$xp$21Forms@TScrollBarStyle
@$xp$21Graphics@TAlphaFormat
@$xp$21Graphics@TBitmapImage
@$xp$21Graphics@TBrushRecall
@$xp$21Graphics@TCanvasState
@$xp$21Graphics@TFontCharset
@$xp$21Graphics@TPixelFormat
@$xp$21Graphics@TSharedImage
@$xp$21Graphics@TTextFormats
@$xp$21Graphutil@TColorArray
@$xp$21Grids@TCustomDrawGrid
@$xp$21Grids@TGetExtentsFunc
@$xp$21Imglist@TDrawingStyle
@$xp$21Imglist@TLoadResource
@$xp$21Imouse@TPanDirections
@$xp$21Imouse@TPanningWindow
@$xp$21Menus@TMenuActionLink
@$xp$21Menus@TMenuAnimations
@$xp$21Menus@TPopupAlignment
@$xp$21Olectnrs@TObjectState
@$xp$21Stdactns@TColorSelect
@$xp$21Stdactns@TWindowClose
@$xp$21Stdctrls@TCustomCombo
@$xp$21Stdctrls@TCustomLabel
@$xp$21Stdctrls@TRadioButton
@$xp$21Stdctrls@TScrollEvent
@$xp$21Stdctrls@TScrollStyle
@$xp$21Svcmgr@TContinueEvent
@$xp$21Svcmgr@TCurrentStatus
@$xp$21Svcmgr@TErrorSeverity
@$xp$21Svcmgr@TServiceThread
@$xp$21Tabs@TMeasureTabEvent
@$xp$21Themes@TThemeServices
@$xp$21Themes@TThemedElement
@$xp$21Themes@TThemedTaskBar
@$xp$21Themes@TThemedToolBar
@$xp$21Themes@TThemedToolTip
@$xp$21Toolwin@TToolDockForm
@$xp$22Actnlist@TCustomAction
@$xp$22Actnlist@TShortCutList
@$xp$22Axctrls@IPictureAccess
@$xp$22Axctrls@TCustomAdapter
@$xp$22Comctrls@TCalDayOfWeek
@$xp$22Comctrls@TComboExItems
@$xp$22Comctrls@TCustomHotKey
@$xp$22Comctrls@TCustomUpDown
@$xp$22Comctrls@TDTDateFormat
@$xp$22Comctrls@TDateTimeKind
@$xp$22Comctrls@TDrawTabEvent
@$xp$22Comctrls@THKInvalidKey
@$xp$22Comctrls@TItemRequests
@$xp$22Comctrls@TNodeDataType
@$xp$22Comctrls@TPageScroller
@$xp$22Comctrls@TStatusPanels
@$xp$22Comctrls@TUDClickEvent
@$xp$22Controls@TControlState
@$xp$22Controls@TControlStyle
@$xp$22Controls@TDragObjectEx
@$xp$22Controls@TEndDragEvent
@$xp$22Controls@TScalingFlags
@$xp$22Dialogs@TFileEditStyle
@$xp$22Dialogs@TFileTypeItems
@$xp$22Dialogs@TMsgDlgButtons
@$xp$22Dialogs@TOpenOptionsEx
@$xp$22Dialogs@TReplaceDialog
@$xp$22Docktabset@TDockTabSet
@$xp$22Extactns@TRichEditBold
@$xp$22Extctrls@NaturalNumber
@$xp$22Extctrls@TBalloonFlags
@$xp$22Extctrls@TButtonedEdit
@$xp$22Extctrls@TColorListBox
@$xp$22Extctrls@TSectionEvent
@$xp$22Extctrls@TSysLinkEvent
@$xp$22Forms@TCloseQueryEvent
@$xp$22Forms@TFormBorderStyle
@$xp$22Forms@_TApplication@_1
@$xp$22Graphics@TCanvasStates
@$xp$22Graphics@TFontDataName
@$xp$22Graphutil@Graphutil__1
@$xp$22Grids@TInplaceEditList
@$xp$22Grids@TSelectCellEvent
@$xp$22Imglist@TLoadResources
@$xp$22Menus@TMenuChangeEvent
@$xp$22Olectnrs@IVCLFrameForm
@$xp$22Olectnrs@TAutoActivate
@$xp$22Olectnrs@TOleContainer
@$xp$22Olectrls@EOleCtrlError
@$xp$22Olectrls@TEnumPropDesc
@$xp$22Olectrls@TServiceQuery
@$xp$22Oleserver@TConnectKind
@$xp$22Printers@TPrinterState
@$xp$22Stdactns@TFileOpenWith
@$xp$22Stdactns@THelpContents
@$xp$22Stdactns@TSearchAction
@$xp$22Stdactns@TWindowAction
@$xp$22Stdctrls@TCustomButton
@$xp$22Stdctrls@TEditCharCase
@$xp$22Stdctrls@TImageMargins
@$xp$22Stdctrls@TListBoxStyle
@$xp$22TActiveXControlFactory
@$xp$22Themes@TThemedComboBox
@$xp$22Themes@TThemedListview
@$xp$22Themes@TThemedProgress
@$xp$22Themes@TThemedTaskBand
@$xp$22Themes@TThemedTrackBar
@$xp$22Themes@TThemedTreeview
@$xp$22Valedit@TDisplayOption
@$xp$23Axctrls@TPictureAdapter
@$xp$23Axctrls@TStringsAdapter
@$xp$23Comctrls@EDateTimeError
@$xp$23Comctrls@EMonthCalError
@$xp$23Comctrls@ETreeViewError
@$xp$23Comctrls@TAnimateParams
@$xp$23Comctrls@TAttributeType
@$xp$23Comctrls@THKInvalidKeys
@$xp$23Comctrls@THeaderControl
@$xp$23Comctrls@THeaderSection
@$xp$23Comctrls@TLVChangeEvent
@$xp$23Comctrls@TLVEditedEvent

Sections

.text
Size: 1.1MB - Virtual size: 1.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.itext
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 828B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 57KB - Virtual size: 57KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 458KB - Virtual size: 457KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 34B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 88KB - Virtual size: 87KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rsrc
Size: 182KB - Virtual size: 182KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
vcomp140.dll
.dll windows:6 windows x64 arch:x64

Password: 19111547

b0dceb96b51d2648c4e665c9ec09b163

Code Sign

33:00:00:01:e2:f1:7d:92:02:0e:49:f8:7f:00:00:00:00:01:e2
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

15-12-2020 21:31

Not After

02-12-2021 21:31

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08-07-2011 20:59

Not After

08-07-2026 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

6a:4d:9a:15:91:5d:9b:49:c6:84:93:9f:70:a4:88:da:bc:33:e6:9b:eb:78:5a:02:74:0d:26:6e:d7:b5:21:23
Signer

Actual PE Digest

6a:4d:9a:15:91:5d:9b:49:c6:84:93:9f:70:a4:88:da:bc:33:e6:9b:eb:78:5a:02:74:0d:26:6e:d7:b5:21:23

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

d:\a01\_work\2\s\\binaries\amd64ret\bin\amd64\\vcomp140.amd64.pdb

Imports

kernel32

FormatMessageW
OutputDebugStringW
LocalAlloc
LocalFree
GetConsoleWindow
GetConsoleScreenBufferInfo
WriteConsoleW
WideCharToMultiByte
WriteFile
GetLastError
GetCurrentThreadId
HeapFree
GetProcessHeap
UnhandledExceptionFilter
CloseHandle
WaitForSingleObjectEx
SetEvent
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
HeapAlloc
TryEnterCriticalSection
QueryPerformanceCounter
InitializeCriticalSectionAndSpinCount
GetTickCount
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
Sleep
SwitchToThread
ExitProcess
GetStdHandle
CreateThread
QueueUserWorkItem
CreateEventW
LoadLibraryExW
FreeLibrary
GetProcAddress
VirtualAlloc
GetModuleHandleW
VirtualProtect
VirtualFree
GetNativeSystemInfo
QueryPerformanceFrequency
GetSystemTimeAdjustment
GetEnvironmentVariableW
lstrlenW
lstrcmpiW
GetStringTypeExW
ResetEvent
GetCurrentProcess
EncodePointer
DecodePointer
GetUserDefaultUILanguage
FindFirstFileW
FindNextFileW
FindClose
GetModuleFileNameW
FindResourceExW
LoadResource
GetCurrentProcessId
GetSystemTimeAsFileTime
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
SetUnhandledExceptionFilter
TerminateProcess
IsProcessorFeaturePresent
RtlUnwindEx
SetLastError
IsDebuggerPresent
GetModuleHandleExW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
MultiByteToWideChar
LCMapStringW
SetFilePointerEx
GetStringTypeW
SetStdHandle
FlushFileBuffers
GetConsoleOutputCP
GetConsoleMode
RaiseException
CreateFileW
RtlPcToFileHeader

Exports

Exports

C2VectParallel
_vcomp_atomic_add_i1
_vcomp_atomic_add_i2
_vcomp_atomic_add_i4
_vcomp_atomic_add_i8
_vcomp_atomic_add_r4
_vcomp_atomic_add_r8
_vcomp_atomic_and_i1
_vcomp_atomic_and_i2
_vcomp_atomic_and_i4
_vcomp_atomic_and_i8
_vcomp_atomic_div_i1
_vcomp_atomic_div_i2
_vcomp_atomic_div_i4
_vcomp_atomic_div_i8
_vcomp_atomic_div_r4
_vcomp_atomic_div_r8
_vcomp_atomic_div_ui1
_vcomp_atomic_div_ui2
_vcomp_atomic_div_ui4
_vcomp_atomic_div_ui8
_vcomp_atomic_mul_i1
_vcomp_atomic_mul_i2
_vcomp_atomic_mul_i4
_vcomp_atomic_mul_i8
_vcomp_atomic_mul_r4
_vcomp_atomic_mul_r8
_vcomp_atomic_or_i1
_vcomp_atomic_or_i2
_vcomp_atomic_or_i4
_vcomp_atomic_or_i8
_vcomp_atomic_shl_i1
_vcomp_atomic_shl_i2
_vcomp_atomic_shl_i4
_vcomp_atomic_shl_i8
_vcomp_atomic_shr_i1
_vcomp_atomic_shr_i2
_vcomp_atomic_shr_i4
_vcomp_atomic_shr_i8
_vcomp_atomic_shr_ui1
_vcomp_atomic_shr_ui2
_vcomp_atomic_shr_ui4
_vcomp_atomic_shr_ui8
_vcomp_atomic_sub_i1
_vcomp_atomic_sub_i2
_vcomp_atomic_sub_i4
_vcomp_atomic_sub_i8
_vcomp_atomic_sub_r4
_vcomp_atomic_sub_r8
_vcomp_atomic_xor_i1
_vcomp_atomic_xor_i2
_vcomp_atomic_xor_i4
_vcomp_atomic_xor_i8
_vcomp_barrier
_vcomp_copyprivate_broadcast
_vcomp_copyprivate_receive
_vcomp_enter_critsect
_vcomp_flush
_vcomp_for_dynamic_init
_vcomp_for_dynamic_init_i8
_vcomp_for_dynamic_next
_vcomp_for_dynamic_next_i8
_vcomp_for_static_end
_vcomp_for_static_init
_vcomp_for_static_init_i8
_vcomp_for_static_simple_init
_vcomp_for_static_simple_init_i8
_vcomp_fork
_vcomp_get_thread_num
_vcomp_leave_critsect
_vcomp_master_barrier
_vcomp_master_begin
_vcomp_master_end
_vcomp_ordered_begin
_vcomp_ordered_end
_vcomp_ordered_loop_end
_vcomp_reduction_i1
_vcomp_reduction_i2
_vcomp_reduction_i4
_vcomp_reduction_i8
_vcomp_reduction_r4
_vcomp_reduction_r8
_vcomp_reduction_u1
_vcomp_reduction_u2
_vcomp_reduction_u4
_vcomp_reduction_u8
_vcomp_sections_init
_vcomp_sections_next
_vcomp_set_num_threads
_vcomp_single_begin
_vcomp_single_end
omp_destroy_lock
omp_destroy_nest_lock
omp_get_dynamic
omp_get_max_threads
omp_get_nested
omp_get_num_procs
omp_get_num_threads
omp_get_thread_num
omp_get_wtick
omp_get_wtime
omp_in_parallel
omp_init_lock
omp_init_nest_lock
omp_set_dynamic
omp_set_lock
omp_set_nest_lock
omp_set_nested
omp_set_num_threads
omp_test_lock
omp_test_nest_lock
omp_unset_lock
omp_unset_nest_lock

Sections

.text
Size: 101KB - Virtual size: 100KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 49KB - Virtual size: 49KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

_RDATA
Size: 512B - Virtual size: 244B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
vcruntime140.dll
.dll windows:6 windows x64 arch:x64

Password: 19111547

44c3854843f7a3fccdf8ddbbea66f302

Code Sign

33:00:00:01:e2:f1:7d:92:02:0e:49:f8:7f:00:00:00:00:01:e2
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

15-12-2020 21:31

Not After

02-12-2021 21:31

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08-07-2011 20:59

Not After

08-07-2026 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

f7:83:e8:fe:9b:12:41:fc:30:39:3a:38:a0:12:16:d8:7c:73:43:56:72:48:ca:1e:25:f6:f1:cb:95:e8:ff:06
Signer

Actual PE Digest

f7:83:e8:fe:9b:12:41:fc:30:39:3a:38:a0:12:16:d8:7c:73:43:56:72:48:ca:1e:25:f6:f1:cb:95:e8:ff:06

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

d:\a01\_work\2\s\\binaries\amd64ret\bin\amd64\\vcruntime140.amd64.pdb

Imports

api-ms-win-crt-runtime-l1-1-0

terminate
abort

api-ms-win-crt-heap-l1-1-0

calloc
malloc
free

api-ms-win-crt-string-l1-1-0

strcpy_s
strncmp
wcsncmp

api-ms-win-crt-stdio-l1-1-0

__stdio_common_vsprintf_s

api-ms-win-crt-convert-l1-1-0

atol

kernel32

SetLastError
IsProcessorFeaturePresent
TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
RtlVirtualUnwind
RtlCaptureContext
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
RtlLookupFunctionEntry
RtlUnwindEx
GetModuleHandleW
RtlUnwind
EncodePointer
RaiseException
RtlPcToFileHeader
InterlockedPushEntrySList
InterlockedFlushSList
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
GetLastError
LoadLibraryExW
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
GetProcAddress
GetModuleFileNameW

Exports

Exports

_CreateFrameInfo
_CxxThrowException
_FindAndUnlinkFrame
_IsExceptionObjectToBeDestroyed
_SetWinRTOutOfMemoryExceptionCallback
__AdjustPointer
__BuildCatchObject
__BuildCatchObjectHelper
__C_specific_handler
__C_specific_handler_noexcept
__CxxDetectRethrow
__CxxExceptionFilter
__CxxFrameHandler
__CxxFrameHandler2
__CxxFrameHandler3
__CxxQueryExceptionSize
__CxxRegisterExceptionObject
__CxxUnregisterExceptionObject
__DestructExceptionObject
__FrameUnwindFilter
__GetPlatformExceptionInfo
__NLG_Dispatch2
__NLG_Return2
__RTCastToVoid
__RTDynamicCast
__RTtypeid
__TypeMatch
__current_exception
__current_exception_context
__intrinsic_setjmp
__intrinsic_setjmpex
__processing_throw
__report_gsfailure
__std_exception_copy
__std_exception_destroy
__std_terminate
__std_type_info_compare
__std_type_info_destroy_list
__std_type_info_hash
__std_type_info_name
__telemetry_main_invoke_trigger
__telemetry_main_return_trigger
__unDName
__unDNameEx
__uncaught_exception
__uncaught_exceptions
__vcrt_GetModuleFileNameW
__vcrt_GetModuleHandleW
__vcrt_InitializeCriticalSectionEx
__vcrt_LoadLibraryExW
_get_purecall_handler
_get_unexpected
_is_exception_typeof
_local_unwind
_purecall
_set_purecall_handler
_set_se_translator
longjmp
memchr
memcmp
memcpy
memmove
memset
set_unexpected
strchr
strrchr
strstr
unexpected
wcschr
wcsrchr
wcsstr

Sections

.text
Size: 62KB - Virtual size: 62KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

_RDATA
Size: 512B - Virtual size: 244B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 1016B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 416B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
x86/ACE.dll
.dll windows:6 windows x86 arch:x86

23076d501d734740bd988395f9a2bdc0

Code Sign

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

29-04-2021 00:00

Not After

28-04-2036 23:59

Subject

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

04:52:96:f8:fc:d8:29:a7:5d:c9:42:94:f5:a4:15:a4
Certificate

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Not Before

29-04-2022 00:00

Not After

01-05-2024 23:59

Subject

SERIALNUMBER=2748129,CN=Adobe Inc.,OU=Acrobat DC,O=Adobe Inc.,L=San Jose,ST=ca,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130844656c6177617265,1.3.6.1.4.1.311.60.2.1.3=#13025553

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

0a:7a:4a:88:9e:c9:99:42:90:06:63:38:4d:86:97:9d
Certificate

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Not Before

29-03-2022 00:00

Not After

14-03-2033 23:59

Subject

CN=DigiCert Timestamp 2022 - 2,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

23-03-2022 00:00

Not After

22-03-2037 23:59

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

01:24:0a:fb:1e:38:0b:8a:16:f1:4b:71:9d:f4:d3:c0
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

09-06-2022 00:00

Not After

09-11-2031 23:59

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

15:ad:5d:15:fc:72:09:57:11:7f:e0:d3:ae:46:a9:a5:57:76:b6:2d:5c:5f:30:2e:cb:74:93:a1:44:12:fb:31
Signer

Actual PE Digest

15:ad:5d:15:fc:72:09:57:11:7f:e0:d3:ae:46:a9:a5:57:76:b6:2d:5c:5f:30:2e:cb:74:93:a1:44:12:fb:31

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

ACE.pdb

Imports

kernel32

GetSystemTimeAsFileTime
CloseHandle
WaitForSingleObject
CreateThread
ReleaseSemaphore
CreateSemaphoreA
GetSystemTime
GetModuleFileNameW
SystemTimeToFileTime
GetSystemDirectoryA
FreeLibrary
LoadLibraryA
GlobalMemoryStatus
GetProfileStringA
CreateDirectoryW
MultiByteToWideChar
CreateFileW
DeleteFileW
GetCurrentProcessId
FindFirstFileW
FindNextFileW
GetFileAttributesW
ReadFile
SetFilePointerEx
WriteFile
GetLastError
MoveFileExW
FileTimeToSystemTime
WideCharToMultiByte
IsValidCodePage
GetACP
Sleep
GetCurrentProcess
GetProcessAffinityMask
SetProcessAffinityMask
GetCurrentThreadId
QueryPerformanceCounter
GetProcAddress
GetModuleHandleA
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSection
VerifyVersionInfoW
GetSystemInfo
IsProcessorFeaturePresent
FindClose
VerSetConditionMask
IsDebuggerPresent
GetModuleHandleW
CreateEventW
WaitForSingleObjectEx
ResetEvent
SetEvent
InitializeCriticalSectionAndSpinCount
TerminateProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
InitializeSListHead

user32

LoadStringA

gdi32

GetICMProfileW
DeleteDC
CreateDCW
CreateDCA

advapi32

RegQueryInfoKeyA
RegOpenKeyExA
RegEnumValueA
RegCloseKey
RegQueryValueExA

shell32

SHGetFolderPathW

ole32

CoCreateInstance

msvcp140

??0?$basic_istream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
??1?$basic_istream@DU?$char_traits@D@std@@@std@@UAE@XZ
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@AAG@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@AAH@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@AAI@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@AAM@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@AAN@Z
?get@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV12@AAD@Z
?peek@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEHXZ
?unget@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV12@XZ
?seekg@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV12@V?$fpos@U_Mbstatet@@@2@@Z
?tellg@?$basic_istream@DU?$char_traits@D@std@@@std@@QAE?AV?$fpos@U_Mbstatet@@@2@XZ
?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ
?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ
?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEXABVlocale@2@@Z
?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEPAV12@PAD_J@Z
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JXZ
?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPAD_J@Z
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPBD_J@Z
?_Xout_of_range@std@@YAXPBD@Z
?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEPADXZ
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAE@XZ
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAE@XZ
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UAE@XZ
?_Xbad_alloc@std@@YAXXZ
?_Xlength_error@std@@YAXPBD@Z
?clear@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IAE@XZ

vcruntime140

__current_exception
strstr
_except_handler4_common
__std_type_info_destroy_list
__CxxFrameHandler3
memcmp
wcsstr
_purecall
memmove
__current_exception_context
__std_exception_destroy
__std_exception_copy
memset
memcpy
__RTDynamicCast
__std_terminate
_CxxThrowException

api-ms-win-crt-math-l1-1-0

fabs
pow
log10
log2
sqrt
log
_fdsign

api-ms-win-crt-runtime-l1-1-0

_register_onexit_function
_initterm_e
_invalid_parameter_noinfo
_errno
_initterm
terminate
_cexit
_seh_filter_dll
_configure_narrow_argv
_initialize_narrow_environment
_initialize_onexit_table
_invalid_parameter_noinfo_noreturn
_execute_onexit_table
_crt_atexit

api-ms-win-crt-string-l1-1-0

strncpy
strncmp
strcat
wcstok_s
wcscmp
strcmp
strlen
strnlen
towupper
strcpy

api-ms-win-crt-convert-l1-1-0

strtoul

api-ms-win-crt-stdio-l1-1-0

__stdio_common_vfprintf
__stdio_common_vsscanf
__acrt_iob_func
__stdio_common_vsprintf_s
__stdio_common_vsprintf

api-ms-win-crt-heap-l1-1-0

_callnewh
free
realloc
malloc

api-ms-win-crt-environment-l1-1-0

getenv

api-ms-win-crt-time-l1-1-0

_time64
_gmtime64

api-ms-win-crt-utility-l1-1-0

qsort

Exports

Exports

ACEGetVersion
ACEHasFeature
ACEInitDelayed
ACEInitialize
ACEInitializeEx
ACETerminate

Sections

.text
Size: 844KB - Virtual size: 843KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 248KB - Virtual size: 247KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 7KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 46KB - Virtual size: 45KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
x86/AGM.dll
.dll windows:6 windows x86 arch:x86

0c4ef399e3ebaa650bb9619d8524550c

Code Sign

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

29-04-2021 00:00

Not After

28-04-2036 23:59

Subject

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

04:52:96:f8:fc:d8:29:a7:5d:c9:42:94:f5:a4:15:a4
Certificate

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Not Before

29-04-2022 00:00

Not After

01-05-2024 23:59

Subject

SERIALNUMBER=2748129,CN=Adobe Inc.,OU=Acrobat DC,O=Adobe Inc.,L=San Jose,ST=ca,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130844656c6177617265,1.3.6.1.4.1.311.60.2.1.3=#13025553

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

0a:7a:4a:88:9e:c9:99:42:90:06:63:38:4d:86:97:9d
Certificate

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Not Before

29-03-2022 00:00

Not After

14-03-2033 23:59

Subject

CN=DigiCert Timestamp 2022 - 2,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

23-03-2022 00:00

Not After

22-03-2037 23:59

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

01:24:0a:fb:1e:38:0b:8a:16:f1:4b:71:9d:f4:d3:c0
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

09-06-2022 00:00

Not After

09-11-2031 23:59

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

8f:e0:d2:5a:90:d1:6b:ae:1a:ac:33:7e:43:cd:1b:9d:1a:a2:81:49:42:ab:65:f1:e9:0d:38:e7:3a:26:df:38
Signer

Actual PE Digest

8f:e0:d2:5a:90:d1:6b:ae:1a:ac:33:7e:43:cd:1b:9d:1a:a2:81:49:42:ab:65:f1:e9:0d:38:e7:3a:26:df:38

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

AGM.pdb

Imports

kernel32

GetModuleFileNameA
VerSetConditionMask
IsProcessorFeaturePresent
VerifyVersionInfoW
QueryPerformanceCounter
IsDebuggerPresent
TerminateProcess
GetWindowsDirectoryA
UnhandledExceptionFilter
CreateEventW
InitializeCriticalSectionAndSpinCount
LoadLibraryExA
GetModuleHandleW
VirtualQuery
VirtualProtect
RaiseException
InitializeSListHead
GetSystemDirectoryW
GetSystemDirectoryA
GetCurrentDirectoryA
GetFileSize
ReadFile
SetCurrentDirectoryA
GlobalSize
WaitForSingleObject
GetProfileStringW
GetSystemDefaultLCID
GetLocaleInfoA
GetACP
GetFileTime
CreateFileA
LoadLibraryA
FindNextFileA
FindFirstFileA
FindClose
GetUserDefaultLangID
GetThreadLocale
GetTimeFormatW
GetTimeFormatA
GetDateFormatW
GetDateFormatA
GetCurrentProcess
DuplicateHandle
CreateSemaphoreA
GetVersionExA
GetThreadPriority
SetThreadPriority
GetCurrentThread
lstrcmpW
GetEnvironmentVariableW
GlobalHandle
GetTempFileNameW
GetTempPathW
DeleteFileW
WideCharToMultiByte
MultiByteToWideChar
lstrlenW
GlobalFree
GlobalAlloc
LoadLibraryW
FreeLibrary
GetLocalTime
GlobalLock
GlobalUnlock
OutputDebugStringA
GetTempPathA
DeleteCriticalSection
InitializeCriticalSection
LeaveCriticalSection
EnterCriticalSection
SystemTimeToFileTime
CreateWaitableTimerA
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
ResumeThread
SetWaitableTimer
GetLastError
HeapFree
HeapAlloc
GetProcessHeap
ResetEvent
SetEvent
GetCurrentThreadId
GetCurrentProcessId
GetProcAddress
Sleep
ReleaseSemaphore
WaitForMultipleObjectsEx
WaitForSingleObjectEx
CloseHandle
GetTickCount
GetSystemInfo
GetModuleHandleA
OpenEventA
CreateEventA
GetSystemTimeAsFileTime
LocalFree
SetUnhandledExceptionFilter
FormatMessageA

user32

DestroyWindow
SetWindowPos
LoadCursorA
LoadIconA
CreateWindowExA
SetActiveWindow
CharNextW
GetMonitorInfoA
EnumDisplayMonitors
UnregisterClassA
RegisterClassA
GetClientRect
GetActiveWindow
WindowFromDC
GetDC
ReleaseDC
GetWindowRect
ScrollWindowEx
OffsetRect
MonitorFromPoint
MonitorFromWindow
GetSystemMetrics
GetDesktopWindow
DefWindowProcA

gdi32

EndPath
CloseFigure
BeginPath
AbortDoc
EndPage
StartPage
EndDoc
StartDocW
GetDIBColorTable
CreateDIBSection
ModifyWorldTransform
SetWorldTransform
GetWorldTransform
SetStretchBltMode
SetROP2
StretchDIBits
StretchBlt
SetPolyFillMode
SetGraphicsMode
SetDIBits
SelectPalette
SelectObject
ExtSelectClipRgn
SelectClipRgn
SaveDC
RealizePalette
ResetDCW
RestoreDC
Rectangle
PatBlt
FillPath
LineTo
IntersectClipRect
GetViewportOrgEx
GetStockObject
GetRgnBox
GetRegionData
GetGraphicsMode
GetDeviceCaps
GetCurrentObject
GetClipRgn
GetClipBox
ExtEscape
Escape
EqualRgn
DeleteObject
DeleteDC
CreateRectRgn
CreatePatternBrush
CreatePolyPolygonRgn
CreatePalette
CreateICW
CreateDCW
CreateCompatibleDC
CreateCompatibleBitmap
CreateBrushIndirect
CreateBitmap
CombineRgn
BitBlt
PolyBezierTo
PolylineTo
SetBrushOrgEx
PolyDraw
SelectClipPath
SetMiterLimit
StrokePath
ExtCreatePen
OffsetRgn
MoveToEx
GetObjectA

advapi32

RegQueryValueExA
RegOpenKeyExA
RegCreateKeyExA
RegCloseKey
RegGetValueA
RegSetValueExA

ole32

CreateStreamOnHGlobal

msvcp140

_Xtime_get_ticks
?_Ipfx@?$basic_istream@_WU?$char_traits@_W@std@@@std@@QAE_N_N@Z
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@H@Z
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@G@Z
?snextc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QAEGXZ
?sgetc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QAEGXZ
?is@?$ctype@_W@std@@QBE_NF_W@Z
?id@?$ctype@_W@std@@2V0locale@2@A
??5?$basic_istream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@AAH@Z
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@PBX@Z
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@_N@Z
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
?_Getcat@?$ctype@_W@std@@SAIPAPBVfacet@locale@2@PBV42@@Z
?_Xlength_error@std@@YAXPBD@Z
?_Xout_of_range@std@@YAXPBD@Z
?_Syserror_map@std@@YAPBDH@Z
?_Xbad_alloc@std@@YAXXZ
_Mtx_init_in_situ
_Mtx_destroy_in_situ
??0_Lockit@std@@QAE@H@Z
??1_Lockit@std@@QAE@XZ
?uncaught_exception@std@@YA_NXZ
?_Xinvalid_argument@std@@YAXPBD@Z
_Query_perf_counter
_Query_perf_frequency
_Mtx_lock
_Mtx_unlock
?_Throw_C_error@std@@YAXH@Z
??Bid@locale@std@@QAEIXZ
?_Getgloballocale@locale@std@@CAPAV_Locimp@12@XZ
?always_noconv@codecvt_base@std@@QBE_NXZ
?in@?$codecvt@DDU_Mbstatet@@@std@@QBEHAAU_Mbstatet@@PBD1AAPBDPAD3AAPAD@Z
?out@?$codecvt@DDU_Mbstatet@@@std@@QBEHAAU_Mbstatet@@PBD1AAPBDPAD3AAPAD@Z
?unshift@?$codecvt@DDU_Mbstatet@@@std@@QBEHAAU_Mbstatet@@PAD1AAPAD@Z
?_Getcat@?$codecvt@DDU_Mbstatet@@@std@@SAIPAPBVfacet@locale@2@PBV42@@Z
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAE@XZ
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAE@XZ
?getloc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QBE?AVlocale@2@XZ
?sbumpc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHXZ
?sgetc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHXZ
?snextc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHXZ
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHD@Z
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAE_JPBD_J@Z
?_Gndec@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEPADXZ
?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEPADXZ
?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXXZ
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPAD_J@Z
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPBD_J@Z
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UAE@XZ
?clear@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
?widen@?$ctype@_W@std@@QBE_WD@Z
?widen@?$basic_ios@DU?$char_traits@D@std@@@std@@QBEDD@Z
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IAE@XZ
??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UAE@XZ
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEXXZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAV01@AAV01@@Z@Z
?put@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@D@Z
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@XZ
??0?$basic_istream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
??1?$basic_istream@DU?$char_traits@D@std@@@std@@UAE@XZ
?_Ipfx@?$basic_istream@DU?$char_traits@D@std@@@std@@QAE_N_N@Z
?_Fiopen@std@@YAPAU_iobuf@@PBDHH@Z
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JXZ
?id@?$codecvt@DDU_Mbstatet@@@std@@2V0locale@2@A
??0?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IAE@XZ
??1?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UAE@XZ
?gbump@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IAEXH@Z
?_Pninc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IAEPA_WXZ
??1?$basic_ios@_WU?$char_traits@_W@std@@@std@@UAE@XZ
??0?$basic_ios@_WU?$char_traits@_W@std@@@std@@IAE@XZ
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@I@Z
??0?$basic_iostream@_WU?$char_traits@_W@std@@@std@@QAE@PAV?$basic_streambuf@_WU?$char_traits@_W@std@@@1@@Z
??1?$basic_iostream@_WU?$char_traits@_W@std@@@std@@UAE@XZ
?_Lock@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UAEXXZ
?_Unlock@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UAEXXZ
?imbue@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAEXABVlocale@2@@Z
?setbuf@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAEPAV12@PA_W_J@Z
?showmanyc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAE_JXZ
?sync@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAEHXZ
?uflow@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAEGXZ
?xsgetn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAE_JPA_W_J@Z
?xsputn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAE_JPB_W_J@Z
?in@?$codecvt@_WDU_Mbstatet@@@std@@QBEHAAU_Mbstatet@@PBD1AAPBDPA_W3AAPA_W@Z
?out@?$codecvt@_WDU_Mbstatet@@@std@@QBEHAAU_Mbstatet@@PB_W1AAPB_WPAD3AAPAD@Z
?unshift@?$codecvt@_WDU_Mbstatet@@@std@@QBEHAAU_Mbstatet@@PAD1AAPAD@Z
?_Getcat@?$codecvt@_WDU_Mbstatet@@@std@@SAIPAPBVfacet@locale@2@PBV42@@Z
?getloc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QBE?AVlocale@2@XZ
?sputc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QAEG_W@Z
?sputn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QAE_JPB_W_J@Z
?_Gndec@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IAEPA_WXZ
?_Init@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IAEXXZ
?setstate@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QAEXH_N@Z
??0?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAE@PAV?$basic_streambuf@_WU?$char_traits@_W@std@@@1@_N@Z
??1?$basic_ostream@_WU?$char_traits@_W@std@@@std@@UAE@XZ
?_Osfx@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEXXZ
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@K@Z
?flush@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV12@XZ
?id@?$codecvt@_WDU_Mbstatet@@@std@@2V0locale@2@A
?wcout@std@@3V?$basic_ostream@_WU?$char_traits@_W@std@@@1@A
?_Getcat@?$ctype@D@std@@SAIPAPBVfacet@locale@2@PBV42@@Z
?getloc@ios_base@std@@QBE?AVlocale@2@XZ
?rdbuf@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEPAV?$basic_streambuf@DU?$char_traits@D@std@@@2@PAV32@@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@H@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z
?write@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@PBD_J@Z
?read@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV12@PAD_J@Z
??0?$basic_iostream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z
??1?$basic_iostream@DU?$char_traits@D@std@@@std@@UAE@XZ
?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ
?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ
?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEXABVlocale@2@@Z
?pbackfail@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHH@Z
?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEPAV12@PAD_J@Z
?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
?id@?$ctype@D@std@@2V0locale@2@A

shlwapi

PathRemoveFileSpecA
PathAppendA

vcruntime140

__std_type_info_compare
memchr
wcschr
strchr
wcsstr
__current_exception
__current_exception_context
_except_handler4_common
__std_type_info_destroy_list
memcpy
_purecall
__std_exception_copy
__std_exception_destroy
_CxxThrowException
__CxxFrameHandler3
__RTDynamicCast
memmove
__std_terminate
memset
memcmp
strstr

api-ms-win-crt-heap-l1-1-0

free
malloc
calloc
realloc

api-ms-win-crt-string-l1-1-0

strtok_s
tolower
isdigit
toupper
_wcsicmp
strncmp
wcsncpy
strcat_s
strcpy_s
wcscpy_s
_stricmp
strncpy
_wcsnicmp

api-ms-win-crt-convert-l1-1-0

atoi
_ltoa_s
strtol

api-ms-win-crt-filesystem-l1-1-0

remove
_lock_file
_unlock_file
rename

api-ms-win-crt-stdio-l1-1-0

fwrite
_fseeki64
fsetpos
fread
fputc
fgetpos
ungetc
setvbuf
feof
fopen
fputs
fgetc
fflush
setbuf
__stdio_common_vsprintf
freopen
getc
fclose
_get_stream_buffer_pointers
fopen_s
__stdio_common_vsprintf_s
__stdio_common_vfprintf
__stdio_common_vswprintf
__acrt_iob_func
ferror
clearerr
fgets
rewind
ftell
fseek
_wfopen_s
ungetwc
fputwc
__stdio_common_vsscanf
fgetwc

api-ms-win-crt-runtime-l1-1-0

_initterm
_invalid_parameter_noinfo_noreturn
terminate
_cexit
_crt_atexit
_execute_onexit_table
_beginthreadex
_register_onexit_function
_initialize_onexit_table
_initialize_narrow_environment
_configure_narrow_argv
_seh_filter_dll
_errno
_control87
_initterm_e
strerror

api-ms-win-crt-time-l1-1-0

_gmtime64
_localtime64
_time64

api-ms-win-crt-math-l1-1-0

_libm_sse2_atan_precise
floor
_hypot
_fdclass
_CIfmod
_isnan
_libm_sse2_cos_precise
_CIatan2
ldexp
ceil
_libm_sse2_sqrt_precise
_libm_sse2_log_precise
_libm_sse2_sin_precise
_libm_sse2_pow_precise
_libm_sse2_log10_precise
modf

api-ms-win-crt-utility-l1-1-0

qsort

Exports

Exports

AGMGetVersion
AGMInitialize
AGMTerminate

Sections

.text
Size: 4.0MB - Virtual size: 4.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1.3MB - Virtual size: 1.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 166KB - Virtual size: 339KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.didat
Size: 512B - Virtual size: 100B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 306KB - Virtual size: 305KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
x86/AIDE.dll
.dll windows:6 windows x86 arch:x86

35310b00e41c70ccb762d39f144b9fc0

Code Sign

01:1f:39:a2:26:1a:99:3d:d1:51:76:da:6f:e4:fb:ea
Certificate

Issuer

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

19-12-2020 00:00

Not After

21-12-2022 23:59

Subject

SERIALNUMBER=2748129,CN=Adobe Inc.,OU=Acrobat DC,O=Adobe Inc.,L=San Jose,ST=ca,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130844656c6177617265,1.3.6.1.4.1.311.60.2.1.3=#13025553

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

03:f1:b4:e1:5f:3a:82:f1:14:96:78:b3:d7:d8:47:5c
Certificate

Issuer

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

18-04-2012 12:00

Not After

18-04-2027 12:00

Subject

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0a:7a:4a:88:9e:c9:99:42:90:06:63:38:4d:86:97:9d
Certificate

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Not Before

29-03-2022 00:00

Not After

14-03-2033 23:59

Subject

CN=DigiCert Timestamp 2022 - 2,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

23-03-2022 00:00

Not After

22-03-2037 23:59

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

f8:d5:86:13:9f:0e:a8:06:96:1c:b2:3f:07:d6:09:97:f4:49:9a:f0:b2:e5:e0:4c:e1:aa:15:bd:27:b5:8e:99
Signer

Actual PE Digest

f8:d5:86:13:9f:0e:a8:06:96:1c:b2:3f:07:d6:09:97:f4:49:9a:f0:b2:e5:e0:4c:e1:aa:15:bd:27:b5:8e:99

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

AIDE.pdb

Imports

windowscodecs

WICConvertBitmapSource

kernel32

InitializeSListHead
DisableThreadLibraryCalls
CloseHandle
WaitForSingleObject
CreateThread
GetSystemInfo
ReleaseSemaphore
CreateSemaphoreA
FreeLibrary
GetProcAddress
LoadLibraryA
ExitProcess
IsProcessorFeaturePresent
GetTempPathA
DeleteFileA
GetTempFileNameA
LeaveCriticalSection
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
SetEvent
ResetEvent
WaitForSingleObjectEx
CreateEventW
GetModuleHandleW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsDebuggerPresent
EnterCriticalSection

ole32

CoInitializeEx
CoCreateInstance
PropVariantClear

msvcp140

??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAE@XZ
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAE@XZ
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAE_JPBD_J@Z
?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEPADXZ
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UAE@XZ
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IAE@XZ
??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UAE@XZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@I@Z
??0?$basic_iostream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z
??1?$basic_iostream@DU?$char_traits@D@std@@@std@@UAE@XZ
?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ
?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEXABVlocale@2@@Z
?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEPAV12@PAD_J@Z
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JXZ
?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPAD_J@Z
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPBD_J@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@H@Z
?_Xlength_error@std@@YAXPBD@Z
?uncaught_exception@std@@YA_NXZ
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHD@Z
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEXXZ
?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@XZ

vcruntime140

__current_exception
__current_exception_context
_except_handler4_common
__std_type_info_destroy_list
strstr
strrchr
_setjmp3
__CxxLongjmpUnwind
longjmp
memchr
memset
memmove
__CxxFrameHandler3
_CxxThrowException
__std_exception_destroy
_purecall
__std_exception_copy
__std_terminate
memcpy

api-ms-win-crt-runtime-l1-1-0

_invalid_parameter_noinfo_noreturn
exit
_initterm_e
_initterm
_cexit
_crt_atexit
abort
_wassert
terminate
_seh_filter_dll
_configure_narrow_argv
_initialize_narrow_environment
_initialize_onexit_table
_register_onexit_function
_execute_onexit_table

api-ms-win-crt-math-l1-1-0

ldexp
_libm_sse2_log10_precise
_libm_sse2_log_precise
floor
ceil
_libm_sse2_sqrt_precise
_CIatan2
frexp
_libm_sse2_pow_precise
_libm_sse2_exp_precise

api-ms-win-crt-heap-l1-1-0

malloc
_aligned_malloc
_aligned_free
free
calloc
realloc
_callnewh

api-ms-win-crt-stdio-l1-1-0

fopen_s
fseek
ftell
feof
__stdio_common_vsnprintf_s
fclose
fwrite
fflush
__stdio_common_vsprintf
fread
__stdio_common_vfprintf
__acrt_iob_func

api-ms-win-crt-utility-l1-1-0

bsearch
srand
rand
qsort

api-ms-win-crt-string-l1-1-0

tolower
strncmp

api-ms-win-crt-convert-l1-1-0

atoi

api-ms-win-crt-environment-l1-1-0

getenv

Exports

Exports

??0AIDEDimension@AIDE@@QAE@II@Z
??0AIDEDimension@AIDE@@QAE@XZ
??0AIDEFormatType@AIDE@@QAE@H@Z
??0AIDEFormatType@AIDE@@QAE@XZ
??0AIDEInputOutputStreamCallBacks@AIDE@@QAE@XZ
??0AIDEInputStreamCallBacks@AIDE@@QAE@XZ
??0AIDELibInitCallBacks@AIDE@@QAE@XZ
??0AIDEOutputStreamCallBacks@AIDE@@QAE@XZ
??0AIDEPoint@AIDE@@QAE@II@Z
??0AIDEPoint@AIDE@@QAE@XZ
??0AIDEProgressCallback@AIDE@@QAE@XZ
??0ComponentInfo@AIDE@@QAE@IW4AIDEComponentType@1@@Z
??0ComponentInfo@AIDE@@QAE@XZ
??0PaletteInfo@AIDE@@QAE@XZ
??0PixelPartInfo@AIDE@@QAE@XZ
??1AIDEDimension@AIDE@@QAE@XZ
??1AIDEFormatType@AIDE@@QAE@XZ
??1AIDEInputOutputStreamCallBacks@AIDE@@QAE@XZ
??1AIDEInputStreamCallBacks@AIDE@@QAE@XZ
??1AIDELibInitCallBacks@AIDE@@QAE@XZ
??1AIDEOutputStreamCallBacks@AIDE@@QAE@XZ
??1AIDEPoint@AIDE@@QAE@XZ
??1AIDEProgressCallback@AIDE@@QAE@XZ
??1ComponentInfo@AIDE@@QAE@XZ
??1PaletteInfo@AIDE@@QAE@XZ
??1PixelPartInfo@AIDE@@QAE@XZ
??4AIDEDimension@AIDE@@QAEAAU01@ABU01@@Z
??4AIDEFormatType@AIDE@@QAEAAU01@ABU01@@Z
??4AIDEInputOutputStreamCallBacks@AIDE@@QAEAAU01@ABU01@@Z
??4AIDEInputStreamCallBacks@AIDE@@QAEAAU01@ABU01@@Z
??4AIDELayerSize@AIDE@@QAEAAU01@ABU01@@Z
??4AIDELibInitCallBacks@AIDE@@QAEAAU01@ABU01@@Z
??4AIDEOutputStreamCallBacks@AIDE@@QAEAAU01@ABU01@@Z
??4AIDEPoint@AIDE@@QAEAAU01@ABU01@@Z
??4AIDEProgressCallback@AIDE@@QAEAAU01@ABU01@@Z
??4ComponentInfo@AIDE@@QAEAAU01@ABU01@@Z
??4PaletteInfo@AIDE@@QAEAAU01@ABU01@@Z
??4PixelPartInfo@AIDE@@QAEAAU01@ABU01@@Z
?AIDEDecodeOptionsSetComponentOrder@@YA?AW4AIDEError@AIDE@@PAVDecodeOptions@Impl@2@W4AIDEComponentOrder@2@I@Z
?mVersion@AIDEInputOutputStreamCallBacks@AIDE@@2IB
?mVersion@AIDEInputStreamCallBacks@AIDE@@2IB
?mVersion@AIDELibInitCallBacks@AIDE@@2IB
?mVersion@AIDEOutputStreamCallBacks@AIDE@@2IB
?mVersion@AIDEProgressCallback@AIDE@@2IB
AIDECreateLibInstance
AIDEDecodeOptionsSetBitDepth
AIDEDecodeOptionsSetColorSpace
AIDEDecodeOptionsSetDirectDecode
AIDEDecodeOptionsSetImageOrientation
AIDEDecodeOptionsSetImageResampling
AIDEDecodeOptionsSetIntValue
AIDEDecodeOptionsSetMaxDimensions
AIDEDecodeOptionsSetNoDecodeErrors
AIDEDecodeOptionsSetPackingType
AIDEDecodeOptionsSetPalette
AIDEDecodeOptionsSetPrivateChunkNames
AIDEDecodeOptionsSetTransparency
AIDEDecoderDecodeNextImage
AIDEDecoderDecodeNextTile
AIDEDecoderFillPixelPartBuffers
AIDEDecoderGetColorInfo
AIDEDecoderGetColorSpace
AIDEDecoderGetCommonColorBitDepth
AIDEDecoderGetComponentCount
AIDEDecoderGetComponentInfo
AIDEDecoderGetDirectDecode
AIDEDecoderGetEXIF_1_Data
AIDEDecoderGetEXIF_3_Data
AIDEDecoderGetFormatType
AIDEDecoderGetGlobalTransparencyIndex
AIDEDecoderGetICCProfile
AIDEDecoderGetIPTCData
AIDEDecoderGetImageResolution
AIDEDecoderGetImageSize
AIDEDecoderGetMetaDataBlob
AIDEDecoderGetMetaDataBlobAtIndex
AIDEDecoderGetMetaDataBlobClientBuffer
AIDEDecoderGetMetaDataIntegerValue
AIDEDecoderGetPackingInfo
AIDEDecoderGetPaletteColorInfo
AIDEDecoderGetPaletteFullyTransparentValue
AIDEDecoderGetPaletteInfo
AIDEDecoderGetPaletteTransparencyType
AIDEDecoderGetPixelPartInfo
AIDEDecoderGetPixelPartInfoBigFilesSupported
AIDEDecoderGetTileInfo
AIDEDecoderGetTransparencyType
AIDEDecoderGetXMPData
AIDEDecoderHasPalettedComponent
AIDEDecoderSetMaxTileBufferSize
AIDEDecoderSetMaxTileBufferSizeBigFilesSupported
AIDEDestroyLibInstance
AIDEEncoderEncodeNRows
AIDEEncoderEncodeNextImage
AIDEEncoderFinishEncoding
AIDEEncoderGetFormatType
AIDEEncoderRegisterProgressCallback
AIDEEncoderSetColorSpace
AIDEEncoderSetCommonColorBitDepth
AIDEEncoderSetEXIF_1_Data
AIDEEncoderSetEXIF_3_Data
AIDEEncoderSetICCProfile
AIDEEncoderSetIPTCData
AIDEEncoderSetImageResampling
AIDEEncoderSetImageResolution
AIDEEncoderSetImageSize
AIDEEncoderSetMetaDataBlob
AIDEEncoderSetMetaDataIntegerValue
AIDEEncoderSetPaletteFullyTransparentIndex
AIDEEncoderSetPaletteInfo
AIDEEncoderSetPaletteTransparencyType
AIDEEncoderSetPixelPartInfo
AIDEEncoderSetPixelPartInfoBigFilesSupported
AIDEEncoderSetTileInfo
AIDEEncoderSetTransparencyType
AIDEEncoderSetXMPData
AIDEEncoderWriteHeader
AIDEEncoderWritePixelPartBuffers
AIDEJXREncodeOptionsSetAlphaChannelFormat
AIDEJXREncodeOptionsSetAlphaChannelQuality
AIDEJXREncodeOptionsSetBitStreamOrdering
AIDEJXREncodeOptionsSetChromaSubSampling
AIDEJXREncodeOptionsSetCompressionType
AIDEJXREncodeOptionsSetImageQuality
AIDEJXREncodeOptionsSetOverlapLevel
AIDEJXREncodeOptionsSetTilingSlices
AIDEJpegEncodeOptionsSetAIQuality
AIDEJpegEncodeOptionsSetCustomQuality
AIDEJpegEncodeOptionsSetEncodeMethod
AIDEJpegEncodeOptionsSetEncodeMode
AIDEJpegEncodeOptionsSetPackingType
AIDEJpegEncodeOptionsSetQualityLevel
AIDEJpegEncodeOptionsSetSave4WebQuality
AIDEJpegEncodeOptionsSetUseClipping
AIDELibBuildDate
AIDELibCreateBmpEncodeOptions
AIDELibCreateDecodeOptions
AIDELibCreateDecoder
AIDELibCreateDecoderForFormatType
AIDELibCreateEncoderForBMP
AIDELibCreateEncoderForGIF
AIDELibCreateEncoderForICON
AIDELibCreateEncoderForJPEG
AIDELibCreateEncoderForJXR
AIDELibCreateEncoderForPDF
AIDELibCreateEncoderForPNG
AIDELibCreateEncoderForRAW
AIDELibCreateEncoderForTIFF
AIDELibCreateEncoderForWEBP
AIDELibCreateGifEncodeOptions
AIDELibCreateIconEncodeOptions
AIDELibCreateInputOutputStream
AIDELibCreateInputStream
AIDELibCreateInputStreamUncached
AIDELibCreateJXREncodeOptions
AIDELibCreateJpegEncodeOptions
AIDELibCreateOutputStream
AIDELibCreatePdfEncodeOptions
AIDELibCreatePngEncodeOptions
AIDELibCreateRawEncodeOptions
AIDELibCreateTiffEncodeOptions
AIDELibCreateWebPEncodeOptions
AIDELibDestroyBmpEncodeOptions
AIDELibDestroyDecodeOptions
AIDELibDestroyDecoder
AIDELibDestroyEncoder
AIDELibDestroyGifEncodeOptions
AIDELibDestroyIconEncodeOptions
AIDELibDestroyInputOutputStream
AIDELibDestroyInputStream
AIDELibDestroyJXREncodeOptions
AIDELibDestroyJpegEncodeOptions
AIDELibDestroyOutputStream
AIDELibDestroyPdfEncodeOptions
AIDELibDestroyPngEncodeOptions
AIDELibDestroyRawEncodeOptions
AIDELibDestroyTiffEncodeOptions
AIDELibDestroyWebPEncodeOptions
AIDELibVersion
AIDEPngEncodeOptionsSetAttemptPaletteCreation
AIDEPngEncodeOptionsSetCompressionLevel
AIDEPngEncodeOptionsSetForcedPaletteCreation
AIDEPngEncodeOptionsSetInterlaced
AIDEPngEncodeOptionsSetPHYChunk
AIDEPngEncodeOptionsSetPalettizationTechnique
AIDERawEncodeOptionsSetBlurMethod
AIDETiffEncodeOptionsDiableLayer
AIDETiffEncodeOptionsSetCompressionScheme
AIDETiffEncodeOptionsSetCustomEncodeParams
AIDETiffEncodeOptionsSetPyramidParams
AIDETiffEncodeOptionsSetPyramidParamsCustomLayers
AIDETiffEncodeOptionsSetTileSize
AIDEWebPEncodeOptionsSetCompressionType
AIDEWebPEncodeOptionsSetImageQuality
AIDEWritePrivateChunk

Sections

.text
Size: 1.6MB - Virtual size: 1.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 300KB - Virtual size: 299KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 30KB - Virtual size: 92KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 53KB - Virtual size: 53KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
x86/Acrobat/Acrobat32OL.dll
.dll windows:6 windows x86 arch:x86

6062013b3a9e7db7d8413ae1dcbbdd2e

Code Sign

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

29-04-2021 00:00

Not After

28-04-2036 23:59

Subject

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

04:52:96:f8:fc:d8:29:a7:5d:c9:42:94:f5:a4:15:a4
Certificate

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Not Before

29-04-2022 00:00

Not After

01-05-2024 23:59

Subject

SERIALNUMBER=2748129,CN=Adobe Inc.,OU=Acrobat DC,O=Adobe Inc.,L=San Jose,ST=ca,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130844656c6177617265,1.3.6.1.4.1.311.60.2.1.3=#13025553

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

0a:7a:4a:88:9e:c9:99:42:90:06:63:38:4d:86:97:9d
Certificate

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Not Before

29-03-2022 00:00

Not After

14-03-2033 23:59

Subject

CN=DigiCert Timestamp 2022 - 2,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

23-03-2022 00:00

Not After

22-03-2037 23:59

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

01:24:0a:fb:1e:38:0b:8a:16:f1:4b:71:9d:f4:d3:c0
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

09-06-2022 00:00

Not After

09-11-2031 23:59

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

d1:f5:ac:c2:77:5c:d9:a2:49:4c:46:23:c1:a6:2f:b4:66:99:3d:28:78:f8:c2:31:42:48:bd:13:1f:97:c2:ff
Signer

Actual PE Digest

d1:f5:ac:c2:77:5c:d9:a2:49:4c:46:23:c1:a6:2f:b4:66:99:3d:28:78:f8:c2:31:42:48:bd:13:1f:97:c2:ff

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

D:\T\BuildResults\bin\Release\Acrobat32OL.pdb

Imports

kernel32

GlobalFlags
lstrcmpW
InitializeCriticalSectionAndSpinCount
GlobalDeleteAtom
GlobalFindAtomW
GetCurrentThread
ConnectNamedPipe
DisconnectNamedPipe
CreateNamedPipeW
GetOverlappedResult
ReleaseSemaphore
WaitForMultipleObjectsEx
CreateEventA
WaitForMultipleObjects
TerminateProcess
ResetEvent
WaitForSingleObjectEx
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsProcessorFeaturePresent
IsDebuggerPresent
QueryPerformanceCounter
GetSystemTimeAsFileTime
InitializeSListHead
OpenEventA
OutputDebugStringW
EncodePointer
LoadLibraryExW
GlobalAddAtomW
CreateEventW
WaitForSingleObject
FindResourceW
FormatMessageW
SizeofResource
LockResource
LoadResource
LocalReAlloc
LocalAlloc
GlobalFree
GlobalUnlock
GlobalHandle
GlobalLock
GlobalReAlloc
GlobalAlloc
VerifyVersionInfoW
GetFileType
VerSetConditionMask
UnmapViewOfFile
MapViewOfFile
CreateFileMappingW
GetSystemDirectoryW
GetTempPathA
GetFileAttributesW
GetCurrentDirectoryW
SetCurrentDirectoryW
lstrlenW
GetTickCount
Sleep
OpenMutexW
SetNamedPipeHandleState
WriteFile
ReadFile
GetVolumeInformationW
OutputDebugStringA
CreateFileW
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
GetCurrentThreadId
LeaveCriticalSection
EnterCriticalSection
InitializeCriticalSection
GetSystemDefaultLCID
SetThreadLocale
LocalFree
FreeLibrary
DisableThreadLibraryCalls
GetVersionExW
GetCurrentProcessId
GetCurrentProcess
OpenEventW
SetEvent
CloseHandle
GetCommandLineW
LoadLibraryW
GetProcAddress
GetModuleHandleW
GetModuleHandleA
GetModuleFileNameW
DeleteCriticalSection
InitializeCriticalSectionEx
GetProcessHeap
HeapFree
SetLastError
GetLastError
DecodePointer
CreateSemaphoreA

user32

TabbedTextOutW
SetWindowsHookExW
ValidateRect
GetKeyState
PeekMessageW
DispatchMessageW
TranslateMessage
GrayStringW
GetSysColorBrush
GetSysColor
ReleaseDC
GetDC
GetSystemMetrics
GetLastActivePopup
GetWindowThreadProcessId
GetParent
GetWindowLongW
DrawTextExW
DrawTextW
CallNextHookEx
GetWindowTextW
MessageBoxW
IsWindowEnabled
EnableWindow
GetDlgCtrlID
GetFocus
SetWindowTextW
GetWindowRect
ClientToScreen
PtInRect
LoadCursorW
DestroyMenu
GetClassNameW
PeekMessageA
MsgWaitForMultipleObjectsEx
PostQuitMessage
CheckMenuItem
EnableMenuItem
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
SetMenuItemInfoW
LoadBitmapW
RegisterWindowMessageW
GetMessagePos
GetMessageTime
PostMessageW
DefWindowProcW
CallWindowProcW
RegisterClassW
GetClassInfoW
GetClassInfoExW
CreateWindowExW
IsWindow
DestroyWindow
SetWindowPos
GetDlgItem
GetCapture
GetMenu
SetMenu
GetForegroundWindow
SetForegroundWindow
GetWindow
SetPropW
GetPropW
RemovePropW
GetClientRect
AdjustWindowRectEx
ScreenToClient
MapWindowPoints
CopyRect
SetWindowLongW
GetClassLongW
GetTopWindow
LoadIconW
WinHelpW
DispatchMessageA
RealChildWindowFromPoint
MonitorFromWindow
GetMonitorInfoW
SendMessageW
FindWindowW
GetSubMenu
GetMenuItemID
GetMenuItemCount
UnhookWindowsHookEx

gdi32

PtVisible
RectVisible
RestoreDC
SaveDC
SelectObject
SetMapMode
TextOutW
ExtTextOutW
SetViewportExtEx
SetViewportOrgEx
SetWindowExtEx
OffsetViewportOrgEx
ScaleViewportExtEx
ScaleWindowExtEx
GetStockObject
GetClipBox
Escape
DeleteDC
SetTextColor
SetBkColor
CreateBitmap
DeleteObject
GetDeviceCaps

winspool.drv

DocumentPropertiesW
OpenPrinterW
ClosePrinter

advapi32

SetSecurityInfo
ConvertStringSecurityDescriptorToSecurityDescriptorW
RegCloseKey
GetTokenInformation
GetSidSubAuthorityCount
GetSidSubAuthority
OpenThreadToken
OpenProcessToken
RegQueryValueExW
RegOpenKeyExW
GetSecurityDescriptorSacl

shell32

CommandLineToArgvW

comctl32

InitCommonControlsEx

shlwapi

PathAppendW

oleaut32

VariantInit
VariantChangeType
VariantClear

msvcp140

?_Xinvalid_argument@std@@YAXPBD@Z
?_Xout_of_range@std@@YAXPBD@Z
_Mtx_lock
_Mtx_unlock
?_Throw_C_error@std@@YAXH@Z
?_Xlength_error@std@@YAXPBD@Z

oleacc

CreateStdAccessibleObject
LresultFromObject

vcruntime140

__std_type_info_destroy_list
__current_exception_context
__current_exception
_except_handler4_common
memset
__CxxFrameHandler3
memcpy
memmove
__std_exception_copy
__std_exception_destroy
_CxxThrowException
_purecall
longjmp
__std_terminate

api-ms-win-crt-heap-l1-1-0

calloc
_msize
free
_expand
realloc
malloc

api-ms-win-crt-runtime-l1-1-0

_cexit
_initterm
_initterm_e
terminate
_crt_atexit
_initialize_onexit_table
_execute_onexit_table
_configure_narrow_argv
_seh_filter_dll
_wassert
_register_onexit_function
_invalid_parameter_noinfo
_invalid_parameter_noinfo_noreturn
_initialize_narrow_environment
_errno

api-ms-win-crt-string-l1-1-0

wcscpy_s
wcsncpy_s
wcscat_s
wcsncpy
wmemcpy_s
wcslen
_wcsicmp
strlen
wcsnlen

api-ms-win-crt-stdio-l1-1-0

__stdio_common_vswscanf
__stdio_common_vswprintf_s
__stdio_common_vswprintf
__stdio_common_vsprintf
__stdio_common_vsprintf_s

api-ms-win-crt-convert-l1-1-0

strtod

api-ms-win-crt-utility-l1-1-0

ldiv

Exports

Exports

AcroWinMainSandbox
DllCanUnloadNow
DllGetClassObject
_ixAbortIndexingSession@8
_ixCloseIndex@8
_ixConvertQuery@8
_ixCreateIndexCreationParams@4
_ixCreateIndexEx@12
_ixCreateIndexManager@12
_ixCreateStemmer@4
_ixDeleteIndexCreationParams@4
_ixDeleteIndexManager@8
_ixDeleteRecordNum@12
_ixDeleteResultVector@8
_ixDeleteStemmer@8
_ixEndIndexingSession@20
_ixEndRetrievalSession@8
_ixForceCloseOfTemporaryFiles@4
_ixGetTempDiskSpaceUsage@12
_ixIncrementRecord@12
_ixIndexNumber@20
_ixIndexWord@12
_ixIndexWordSpecial@20
_ixIsRecordDeleted@12
_ixNumHits@20
_ixNumberOfRecordsInIndex@12
_ixOpenIndex@12
_ixProcessQuery@16
_ixRetrieveMoreRecordData@24
_ixRetrieveRecordData@28
_ixSetBaseDistributedIndexDirectory@12
_ixSetFinalIndexDataFileNameAndPosition@16
_ixSetIndexCreationParams@12
_ixSetLocationForTemporaryFiles@4
_ixStartIndexingSession@8
_ixStartRetrievalSession@8
_ixStem8BitWord@28
_ixStoreMoreRecordData@16
_ixStoreRecordData@16
_ixVectorCurrentHit@24
_ixVectorNextHit@24

Sections

.text
Size: 123KB - Virtual size: 123KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 45KB - Virtual size: 44KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
x86/Acrobat/Adobe.Acrobat.Dependencies.manifest
.xml
x86/Acrobat/Onix32.dll
.dll windows:6 windows x86 arch:x86

daaa110d62c7d69cff88f74569703386

Code Sign

01:1f:39:a2:26:1a:99:3d:d1:51:76:da:6f:e4:fb:ea
Certificate

Issuer

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

19-12-2020 00:00

Not After

21-12-2022 23:59

Subject

SERIALNUMBER=2748129,CN=Adobe Inc.,OU=Acrobat DC,O=Adobe Inc.,L=San Jose,ST=ca,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130844656c6177617265,1.3.6.1.4.1.311.60.2.1.3=#13025553

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

03:f1:b4:e1:5f:3a:82:f1:14:96:78:b3:d7:d8:47:5c
Certificate

Issuer

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

18-04-2012 12:00

Not After

18-04-2027 12:00

Subject

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:dd
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01-01-2021 00:00

Not After

06-01-2031 00:00

Subject

CN=DigiCert Timestamp 2021,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

07-01-2016 12:00

Not After

07-01-2031 12:00

Subject

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

21:9c:4c:9e:d3:e4:52:3b:b1:42:4e:40:dc:68:b0:f9:59:e5:dc:20:15:8d:58:82:a8:59:30:63:d8:d4:73:c8
Signer

Actual PE Digest

21:9c:4c:9e:d3:e4:52:3b:b1:42:4e:40:dc:68:b0:f9:59:e5:dc:20:15:8d:58:82:a8:59:30:63:d8:d4:73:c8

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

DeleteFileW
GetLastError
FormatMessageA
MoveFileW
MultiByteToWideChar
CloseHandle
CreateMutexA
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
DecodePointer
EncodePointer
IsProcessorFeaturePresent
IsDebuggerPresent
DisableThreadLibraryCalls

msvcr110

strncpy
calloc
fclose
fflush
fgetc
fputc
fread
fseek
ftell
fwrite
setvbuf
sprintf
_wfopen_s
printf
_libm_sse2_pow_precise
memmove
_time64
strchr
ceil
toupper
tolower
_localtime64
_libm_sse2_sqrt_precise
isdigit
isspace
atoi
atol
strstr
isalpha
qsort
strncmp
strpbrk
memcmp
__iob_func
fprintf
exit
fgets
fopen
??1type_info@@UAE@XZ
_crt_debugger_hook
__crtUnhandledException
__crtTerminateProcess
__CppXcptFilter
_amsg_exit
_malloc_crt
_initterm
_initterm_e
?terminate@@YAXXZ
_except_handler4_common
_lock
_unlock
_calloc_crt
__dllonexit
_onexit
__clean_type_info_names_internal
_libm_sse2_log_precise
memset
memcpy
malloc
free
__CxxFrameHandler3
??3@YAXPAX@Z
??2@YAPAXI@Z
_setmaxstdio

Exports

Exports

_ixAbortIndexingSession@8
_ixAddStopWord@16
_ixAddStopWordList@12
_ixAddWildCardPatternToHighlightMatcher@16
_ixAppendDistributedDataToIndex@12
_ixCharToHex@8
_ixCharWordToHexWord@12
_ixCloseIndex@8
_ixConvertQuery2@8
_ixConvertQuery@8
_ixCreateHighlightMatcher@4
_ixCreateIndex@16
_ixCreateIndexCreationParams@4
_ixCreateIndexEx@12
_ixCreateIndexManager@12
_ixCreateResultVector@4
_ixCreateRobotsTxtParser@4
_ixCreateStemmer@4
_ixCreateStopWordList@4
_ixCurrentKey@24
_ixDeleteHighlightMatcher@4
_ixDeleteIndexCreationParams@4
_ixDeleteIndexManager@8
_ixDeleteRecordNum@12
_ixDeleteRecordNums@16
_ixDeleteResultVector@8
_ixDeleteRobotsTxtParser@4
_ixDeleteStemmer@8
_ixDeleteStopWordList@4
_ixEndDistributedIndexingSession@16
_ixEndIndexingSession@20
_ixEndRetrievalSession@8
_ixFinalProcessIndex@20
_ixFindKey@28
_ixFindRecordID@16
_ixForceCloseOfAllFiles@4
_ixForceCloseOfTemporaryFiles@4
_ixGetCurrentQueryVector@12
_ixGetLibraryCompileDateAndTime@8
_ixGetLocationForTemporaryFiles@4
_ixGetMaximumWildcardTestLimit@4
_ixGetNumberOfRecordsDeleted@8
_ixGetNumberOfUnoptimizedInsertions@4
_ixGetStatusMessage@12
_ixGetTempDiskSpaceUsage@12
_ixHexToChar@8
_ixHighestRecordNumberInIndex@12
_ixHighlightMatcherMatch@12
_ixIncrementRecord@12
_ixIndexNumber@20
_ixIndexWord@12
_ixIndexWordSpecial@20
_ixIsRecordDeleted@12
_ixIsStopWord@16
_ixLongQueryFormToShortQueryForm@8
_ixMakeIndexActive@20
_ixNextKey@24
_ixNumHits@20
_ixNumStopWords@4
_ixNumberOfRecordsInIndex@12
_ixOpenIndex@12
_ixOpenIndexReadOnly@12
_ixOutputCompactRobotsTxt@8
_ixOutputDeletedRecords@12
_ixOutputStatsFile@12
_ixParseRobotsTxt@8
_ixPreviousKey@24
_ixProcessQuery@16
_ixProcessRecordID@24
_ixReloadIndex@8
_ixResetIndexCreationParams@4
_ixResetOpenFileTables@8
_ixRetrieveMoreRecordData@24
_ixRetrieveRecordData@28
_ixRetrieveRecordID@28
_ixRobotsPermissionGranted@8
_ixRobotsPermissionGrantedFullURL@8
_ixRobotsTxtLength@4
_ixSetBaseDistributedIndexDirectory@12
_ixSetFinalIndexDataFileNameAndPosition@16
_ixSetIndexCreationParams@12
_ixSetLocationForTemporaryFiles@4
_ixSetMaxRankedHits@12
_ixSetMaximumWildcardTestLimit@4
_ixSetNormalizedHits@12
_ixSetRobotName@12
_ixStartDistributedIndexingSession@8
_ixStartIndexingSession@8
_ixStartRetrievalSession@8
_ixStem8BitWord@28
_ixStemUnicodeWord@28
_ixStoreMoreRecordData@16
_ixStoreRecordData@16
_ixUnDeleteRecordNum@12
_ixUnDeleteRecordNums@16
_ixUnicodeCharToHex@8
_ixUnicodeHexToChar@8
_ixVectorAddHit@20
_ixVectorAnd@12
_ixVectorCurrentHit@24
_ixVectorNextHit@24
_ixVectorNextRecord@24
_ixVectorNot@12
_ixVectorOr@12
_ixVectorPreviousHit@24
_ixVectorPreviousRecord@24
_ixVectorRewind@8
_ucInitializeNormalizationTable@12
_ucNormalizeChar@8
_ucTableNormalizeChar@12

Sections

.text
Size: 620KB - Virtual size: 620KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 23KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 66KB - Virtual size: 116KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 26KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
x86/AdobeXMP.dll
.dll windows:6 windows x86 arch:x86

6af9b18d0fde4654e8b2a5c75a9563ec

Code Sign

01:1f:39:a2:26:1a:99:3d:d1:51:76:da:6f:e4:fb:ea
Certificate

Issuer

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

19-12-2020 00:00

Not After

21-12-2022 23:59

Subject

SERIALNUMBER=2748129,CN=Adobe Inc.,OU=Acrobat DC,O=Adobe Inc.,L=San Jose,ST=ca,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130844656c6177617265,1.3.6.1.4.1.311.60.2.1.3=#13025553

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

03:f1:b4:e1:5f:3a:82:f1:14:96:78:b3:d7:d8:47:5c
Certificate

Issuer

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

18-04-2012 12:00

Not After

18-04-2027 12:00

Subject

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0a:7a:4a:88:9e:c9:99:42:90:06:63:38:4d:86:97:9d
Certificate

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Not Before

29-03-2022 00:00

Not After

14-03-2033 23:59

Subject

CN=DigiCert Timestamp 2022 - 2,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

23-03-2022 00:00

Not After

22-03-2037 23:59

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

16:5e:8f:63:35:31:dd:76:c0:23:f7:3e:30:cc:20:bd:18:56:20:a3:bc:89:98:1f:61:7a:d9:b1:13:2c:c5:f8
Signer

Actual PE Digest

16:5e:8f:63:35:31:dd:76:c0:23:f7:3e:30:cc:20:bd:18:56:20:a3:bc:89:98:1f:61:7a:d9:b1:13:2c:c5:f8

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

AdobeXMP.pdb

Imports

kernel32

GetCurrentProcessId
GetSystemTimeAsFileTime
QueryPerformanceCounter
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSection
WaitForSingleObject
CreateEventW
SetEvent
CloseHandle
DeleteCriticalSection
ResetEvent
WaitForSingleObjectEx
InitializeSListHead
GetModuleHandleW
GetProcAddress
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
IsDebuggerPresent
GetCurrentThreadId
DisableThreadLibraryCalls
InitializeCriticalSectionAndSpinCount

ole32

CoCreateGuid

msvcp140

?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEPADXZ
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IAE@XZ
??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAE@XZ
?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ
?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JXZ
?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPAD_J@Z
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPBD_J@Z
?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEPAV12@PAD_J@Z
?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEXABVlocale@2@@Z
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UAE@XZ
??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UAE@XZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@K@Z
?uncaught_exception@std@@YA_NXZ
?setprecision@std@@YA?AU?$_Smanip@_J@1@_J@Z
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAE_JPBD_J@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@J@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@_J@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@_K@Z
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEXXZ
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@XZ
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
??0?$basic_iostream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAVios_base@1@AAV21@@Z@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@M@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@N@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@PBX@Z
??1?$basic_iostream@DU?$char_traits@D@std@@@std@@UAE@XZ
?_Xout_of_range@std@@YAXPBD@Z
?_Xlength_error@std@@YAXPBD@Z
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAE@XZ
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHD@Z

vcruntime140

_except_handler4_common
__std_type_info_destroy_list
_CxxThrowException
__std_type_info_compare
memcmp
_purecall
__std_exception_copy
memcpy
memmove
__std_exception_destroy
__std_terminate
__CxxFrameHandler3
__RTDynamicCast
memset
memchr

api-ms-win-crt-runtime-l1-1-0

_initialize_narrow_environment
_initialize_onexit_table
_register_onexit_function
_execute_onexit_table
_crt_atexit
_invalid_parameter_noinfo_noreturn
_cexit
_seh_filter_dll
_initterm
_initterm_e
_errno
_configure_narrow_argv

api-ms-win-crt-string-l1-1-0

strncmp
strlen
strcmp

api-ms-win-crt-stdio-l1-1-0

__stdio_common_vsprintf
__acrt_iob_func
__stdio_common_vfprintf
__stdio_common_vsscanf

api-ms-win-crt-heap-l1-1-0

free
_callnewh
malloc
realloc

api-ms-win-crt-locale-l1-1-0

__initialize_lconv_for_unsigned_char
setlocale

api-ms-win-crt-time-l1-1-0

_gmtime64_s
_localtime64_s
_mktime64
_time64
_difftime64

api-ms-win-crt-convert-l1-1-0

strtod

api-ms-win-crt-utility-l1-1-0

rand_s

api-ms-win-crt-environment-l1-1-0

getenv

Exports

Exports

WXMPDocOps_BranchXMP_1
WXMPDocOps_CTor_1
WXMPDocOps_Clone_1
WXMPDocOps_CreateID_1
WXMPDocOps_DecrementRefCount_1
WXMPDocOps_EnsureIDsExist_1
WXMPDocOps_GetMetaRef_1
WXMPDocOps_GetPartChangeID_1
WXMPDocOps_HasPartChanged_1
WXMPDocOps_IncrementRefCount_1
WXMPDocOps_IsDirty_1
WXMPDocOps_NewXMP_1
WXMPDocOps_NoteChange_1
WXMPDocOps_OpenXMP_1
WXMPDocOps_PrepareForSave_1
WXMPDocOps_SetAppName_1
WXMPIterator_DecrementRefCount_1
WXMPIterator_IncrementRefCount_1
WXMPIterator_Next_1
WXMPIterator_PropCTor_1
WXMPIterator_Skip_1
WXMPIterator_TableCTor_1
WXMPMeta_AppendArrayItem_1
WXMPMeta_CTor_1
WXMPMeta_Clone_1
WXMPMeta_CountArrayItems_1
WXMPMeta_DecrementRefCount_1
WXMPMeta_DeleteArrayItem_1
WXMPMeta_DeleteLocalizedText_1
WXMPMeta_DeleteNamespace_1
WXMPMeta_DeleteProperty_1
WXMPMeta_DeleteQualifier_1
WXMPMeta_DeleteStructField_1
WXMPMeta_DoesArrayItemExist_1
WXMPMeta_DoesPropertyExist_1
WXMPMeta_DoesQualifierExist_1
WXMPMeta_DoesStructFieldExist_1
WXMPMeta_DumpNamespaces_1
WXMPMeta_DumpObject_1
WXMPMeta_DumpPropertyTraits_1
WXMPMeta_Erase_1
WXMPMeta_GetArrayItem_1
WXMPMeta_GetGlobalOptions_1
WXMPMeta_GetIXMPMetadata_1
WXMPMeta_GetLocalizedText_1
WXMPMeta_GetMemProcs_1
WXMPMeta_GetNamespacePrefix_1
WXMPMeta_GetNamespaceURI_1
WXMPMeta_GetObjectName_1
WXMPMeta_GetObjectOptions_1
WXMPMeta_GetProperty_1
WXMPMeta_GetProperty_Bool_1
WXMPMeta_GetProperty_Date_1
WXMPMeta_GetProperty_Float_1
WXMPMeta_GetProperty_Int64_1
WXMPMeta_GetProperty_Int_1
WXMPMeta_GetQualifier_1
WXMPMeta_GetStructField_1
WXMPMeta_GetVersionInfo_1
WXMPMeta_GetXMPDOMFactoryInstance_1
WXMPMeta_IncrementRefCount_1
WXMPMeta_Initialize_1
WXMPMeta_MarkStaleProperties_1
WXMPMeta_ParseFromBuffer_1
WXMPMeta_RegisterAssertNotify_1
WXMPMeta_RegisterNamespace_1
WXMPMeta_RegisterPropertyTraits_1
WXMPMeta_ResetErrorCallbackLimit_1
WXMPMeta_SerializeToBuffer_1
WXMPMeta_SetArrayItem_1
WXMPMeta_SetDefaultErrorCallback_1
WXMPMeta_SetErrorCallback_1
WXMPMeta_SetGlobalOptions_1
WXMPMeta_SetLocalizedText_1
WXMPMeta_SetObjectName_1
WXMPMeta_SetObjectOptions_1
WXMPMeta_SetProperty_1
WXMPMeta_SetProperty_Bool_1
WXMPMeta_SetProperty_Date_1
WXMPMeta_SetProperty_Float_1
WXMPMeta_SetProperty_Int64_1
WXMPMeta_SetProperty_Int_1
WXMPMeta_SetQualifier_1
WXMPMeta_SetStructField_1
WXMPMeta_Sort_1
WXMPMeta_Terminate_1
WXMPMeta_UnregisterAssertNotify_1
WXMPMeta_Use_CPP_DOM_APIs_1
WXMPUtils_AppendProperties_1
WXMPUtils_ApplyTemplate_1
WXMPUtils_CatenateArrayItems_1
WXMPUtils_CollectMultiFileXMP_1
WXMPUtils_CompareDateTime_1
WXMPUtils_ComposeArrayItemPath_1
WXMPUtils_ComposeFieldSelector_1
WXMPUtils_ComposeLangSelector_1
WXMPUtils_ComposeQualifierPath_1
WXMPUtils_ComposeStructFieldPath_1
WXMPUtils_ConvertFromBool_1
WXMPUtils_ConvertFromDate_1
WXMPUtils_ConvertFromFloat_1
WXMPUtils_ConvertFromInt64_1
WXMPUtils_ConvertFromInt_1
WXMPUtils_ConvertToBool_1
WXMPUtils_ConvertToDate_1
WXMPUtils_ConvertToFloat_1
WXMPUtils_ConvertToInt64_1
WXMPUtils_ConvertToInt_1
WXMPUtils_ConvertToLocalTime_1
WXMPUtils_ConvertToUTCTime_1
WXMPUtils_CurrentDateTime_1
WXMPUtils_DecodeFromBase64_1
WXMPUtils_DistributeMultiFileXMP_1
WXMPUtils_DuplicateSubtree_1
WXMPUtils_EncodeToBase64_1
WXMPUtils_GetBulkMarkers_1
WXMPUtils_GetDateRange_1
WXMPUtils_GetMergedListPath_1
WXMPUtils_IsPropertyMultiValued_1
WXMPUtils_MergeFromJPEG_1
WXMPUtils_PackageForJPEG_1
WXMPUtils_RemoveMultiValueInfo_1
WXMPUtils_RemoveProperties_1
WXMPUtils_SeparateArrayItems_1
WXMPUtils_SetBulkMarkers_1
WXMPUtils_SetTimeZone_1
XMP_GetAssertNotify
XMP_NewExpatAdapter

Sections

.text
Size: 648KB - Virtual size: 647KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 161KB - Virtual size: 161KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 52KB - Virtual size: 52KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
x86/BIB.dll
.dll windows:6 windows x86 arch:x86

1d0257e1aac91706ba5a3464d653bbcc

Code Sign

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

29-04-2021 00:00

Not After

28-04-2036 23:59

Subject

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

04:52:96:f8:fc:d8:29:a7:5d:c9:42:94:f5:a4:15:a4
Certificate

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Not Before

29-04-2022 00:00

Not After

01-05-2024 23:59

Subject

SERIALNUMBER=2748129,CN=Adobe Inc.,OU=Acrobat DC,O=Adobe Inc.,L=San Jose,ST=ca,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130844656c6177617265,1.3.6.1.4.1.311.60.2.1.3=#13025553

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

0a:7a:4a:88:9e:c9:99:42:90:06:63:38:4d:86:97:9d
Certificate

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Not Before

29-03-2022 00:00

Not After

14-03-2033 23:59

Subject

CN=DigiCert Timestamp 2022 - 2,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

23-03-2022 00:00

Not After

22-03-2037 23:59

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

01:24:0a:fb:1e:38:0b:8a:16:f1:4b:71:9d:f4:d3:c0
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

09-06-2022 00:00

Not After

09-11-2031 23:59

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

4e:82:9e:48:90:6d:15:fd:16:9a:60:b0:00:eb:8a:88:89:43:56:6f:3a:83:a7:8a:ce:a5:dc:73:8f:9c:69:84
Signer

Actual PE Digest

4e:82:9e:48:90:6d:15:fd:16:9a:60:b0:00:eb:8a:88:89:43:56:6f:3a:83:a7:8a:ce:a5:dc:73:8f:9c:69:84

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

BIB.pdb

Imports

kernel32

EnterCriticalSection
LeaveCriticalSection
CloseHandle
QueryPerformanceCounter
InitializeCriticalSection
DeleteCriticalSection
SetEvent
ResetEvent
WaitForSingleObject
CreateEventA
CreateThread
GetSystemTimeAsFileTime
GetModuleHandleA
GetProcAddress
SetCurrentDirectoryA
GetCurrentDirectoryA
MultiByteToWideChar
GetACP
Sleep
GetCurrentThreadId
GetCurrentProcessId
TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
IsDebuggerPresent
IsProcessorFeaturePresent
InitializeSListHead

msvcp140

?_Xlength_error@std@@YAXPBD@Z

vcruntime140

__current_exception_context
_except_handler4_common
__std_type_info_destroy_list
memset
__std_exception_destroy
_purecall
memcpy
__std_terminate
__CxxFrameHandler3
memmove
_CxxThrowException
__current_exception
__std_exception_copy
__RTDynamicCast

api-ms-win-crt-string-l1-1-0

strlen
strcmp

api-ms-win-crt-stdio-l1-1-0

fseek
fread
fopen
fflush
ferror
fwrite
feof
fclose
ftell
_wfopen

api-ms-win-crt-runtime-l1-1-0

_initterm_e
_initterm
_invalid_parameter_noinfo
terminate
_errno
_invalid_parameter_noinfo_noreturn
_seh_filter_dll
_configure_narrow_argv
_initialize_narrow_environment
_initialize_onexit_table
_register_onexit_function
_execute_onexit_table
_crt_atexit
_cexit

api-ms-win-crt-math-l1-1-0

log

api-ms-win-crt-utility-l1-1-0

qsort

api-ms-win-crt-heap-l1-1-0

free
malloc
_callnewh

Exports

Exports

BIBGetGetProcAddress
BIBGetVersion
BIBInitialize
BIBInitialize2
BIBInitialize3
BIBInitialize4
BIBLockSmithAssertNoLocksImpl
BIBLockSmithDeleteImpl
BIBLockSmithLockImpl
BIBLockSmithUnlockImpl
BIBTerminate

Sections

.text
Size: 65KB - Virtual size: 64KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 30KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
x86/BIBUtils.dll
.dll windows:6 windows x86 arch:x86

6ec1b6b05b219bb02c165a7efc6c6592

Code Sign

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

29-04-2021 00:00

Not After

28-04-2036 23:59

Subject

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

04:52:96:f8:fc:d8:29:a7:5d:c9:42:94:f5:a4:15:a4
Certificate

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Not Before

29-04-2022 00:00

Not After

01-05-2024 23:59

Subject

SERIALNUMBER=2748129,CN=Adobe Inc.,OU=Acrobat DC,O=Adobe Inc.,L=San Jose,ST=ca,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130844656c6177617265,1.3.6.1.4.1.311.60.2.1.3=#13025553

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

0a:7a:4a:88:9e:c9:99:42:90:06:63:38:4d:86:97:9d
Certificate

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Not Before

29-03-2022 00:00

Not After

14-03-2033 23:59

Subject

CN=DigiCert Timestamp 2022 - 2,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

23-03-2022 00:00

Not After

22-03-2037 23:59

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

01:24:0a:fb:1e:38:0b:8a:16:f1:4b:71:9d:f4:d3:c0
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

09-06-2022 00:00

Not After

09-11-2031 23:59

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

04:8d:86:7f:c2:82:50:d9:cf:83:97:16:d4:b7:e0:83:50:ed:25:f8:63:08:ac:60:eb:c3:64:24:4e:0f:c7:40
Signer

Actual PE Digest

04:8d:86:7f:c2:82:50:d9:cf:83:97:16:d4:b7:e0:83:50:ed:25:f8:63:08:ac:60:eb:c3:64:24:4e:0f:c7:40

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

BIBUtils.pdb

Imports

kernel32

InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
GetModuleHandleA
GetProcAddress
GetCurrentDirectoryA
GetTempPathA
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
QueryPerformanceCounter
IsDebuggerPresent
IsProcessorFeaturePresent
TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
InitializeSListHead

vcruntime140

_except_handler4_common
__std_type_info_destroy_list
_purecall
__std_terminate
__std_exception_copy
memset
memcpy
__RTDynamicCast
__CxxFrameHandler3
_CxxThrowException
strstr
__std_exception_destroy

api-ms-win-crt-runtime-l1-1-0

_initialize_narrow_environment
_initialize_onexit_table
_register_onexit_function
_execute_onexit_table
_crt_atexit
_cexit
_seh_filter_dll
_errno
_configure_narrow_argv
_initterm
_initterm_e
_invalid_parameter_noinfo

api-ms-win-crt-string-l1-1-0

strcspn
isdigit
isprint
isalpha
strspn

api-ms-win-crt-convert-l1-1-0

atof
atoi

api-ms-win-crt-filesystem-l1-1-0

rename
remove
_stat64i32

api-ms-win-crt-stdio-l1-1-0

_sopen_dispatch
__stdio_common_vsscanf
_close
__stdio_common_vsprintf_s

api-ms-win-crt-heap-l1-1-0

free
_callnewh
malloc

Exports

Exports

BIBUtilsGetVersion
BIBUtilsInitialize
BIBUtilsTerminate

Sections

.text
Size: 102KB - Virtual size: 102KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 39KB - Virtual size: 39KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
x86/CoolType.dll
.dll windows:6 windows x86 arch:x86

4802bc9f23feb1a2452c8519e072c9db

Code Sign

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

29-04-2021 00:00

Not After

28-04-2036 23:59

Subject

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

04:52:96:f8:fc:d8:29:a7:5d:c9:42:94:f5:a4:15:a4
Certificate

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Not Before

29-04-2022 00:00

Not After

01-05-2024 23:59

Subject

SERIALNUMBER=2748129,CN=Adobe Inc.,OU=Acrobat DC,O=Adobe Inc.,L=San Jose,ST=ca,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130844656c6177617265,1.3.6.1.4.1.311.60.2.1.3=#13025553

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

0a:7a:4a:88:9e:c9:99:42:90:06:63:38:4d:86:97:9d
Certificate

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Not Before

29-03-2022 00:00

Not After

14-03-2033 23:59

Subject

CN=DigiCert Timestamp 2022 - 2,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

23-03-2022 00:00

Not After

22-03-2037 23:59

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

01:24:0a:fb:1e:38:0b:8a:16:f1:4b:71:9d:f4:d3:c0
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

09-06-2022 00:00

Not After

09-11-2031 23:59

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

df:22:f2:13:c9:82:c5:d8:5e:42:5f:71:26:d1:af:c2:d7:7d:3c:3d:aa:70:fb:be:55:61:45:17:02:f8:a2:66
Signer

Actual PE Digest

df:22:f2:13:c9:82:c5:d8:5e:42:5f:71:26:d1:af:c2:d7:7d:3c:3d:aa:70:fb:be:55:61:45:17:02:f8:a2:66

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

CoolType.pdb

Imports

kernel32

LocalAlloc
LocalFree
GetSystemDefaultLCID
GetUserDefaultLCID
CreateEventA
GetVersionExA
GetSystemTime
SystemTimeToFileTime
GetLastError
GetACP
FileTimeToLocalFileTime
FileTimeToSystemTime
MapViewOfFile
UnmapViewOfFile
CreateFileMappingA
FlushFileBuffers
GetCurrentProcess
MoveFileExW
VerSetConditionMask
IsProcessorFeaturePresent
GetSystemInfo
VerifyVersionInfoW
FreeLibrary
LoadLibraryA
GetSystemTimeAsFileTime
GetCurrentThreadId
QueryPerformanceCounter
IsDebuggerPresent
WaitForSingleObjectEx
InitializeCriticalSectionAndSpinCount
TerminateProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
LoadLibraryExA
SetLastError
GetTickCount
WaitForMultipleObjects
FindNextChangeNotification
FindCloseChangeNotification
FindClose
GetCurrentProcessId
lstrlenA
CreateFileA
WaitForSingleObject
ResetEvent
SetEvent
CompareStringA
GetPrivateProfileStringA
SetFilePointer
ReadFile
GetFileSize
ReadDirectoryChangesW
CloseThreadpoolIo
WaitForThreadpoolIoCallbacks
StartThreadpoolIo
CancelThreadpoolIo
CreateThreadpoolIo
CloseHandle
GetModuleHandleA
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
WriteFile
InitializeCriticalSection
VirtualQuery
VirtualProtect
RaiseException
InitializeSListHead

user32

GetDC
ReleaseDC
MonitorFromPoint
DestroyWindow
CreateWindowExA
RegisterClassA
GetDesktopWindow
DefWindowProcA

gdi32

SetTextAlign
SetBkMode
GetTextExtentPointI
GetDeviceCaps
GdiFlush
ExtTextOutA
GetObjectA
GetTextMetricsA
SetTextColor
SetBkColor
PatBlt
GetTextExtentPointA
GetCurrentObject
GetCharABCWidthsA
GetBitmapBits
CreateBitmap
SelectObject
GetFontData
DeleteDC
CreateCompatibleDC
DeleteObject

advapi32

ConvertSidToStringSidW
GetTokenInformation
OpenProcessToken
RegQueryValueExA
RegOpenKeyExA
RegCloseKey
RegGetValueW

shell32

SHGetKnownFolderPath
SHGetMalloc
SHGetFolderPathW
SHGetSpecialFolderLocation

ole32

CoGetClassObject
CoInitializeEx
CoUninitialize
CoTaskMemFree

msvcp140

?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JXZ
?clear@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEPAV12@PAD_J@Z
?_Xlength_error@std@@YAXPBD@Z
??0_Lockit@std@@QAE@H@Z
??1_Lockit@std@@QAE@XZ
?_Xout_of_range@std@@YAXPBD@Z
??Bid@locale@std@@QAEIXZ
?_Getgloballocale@locale@std@@CAPAV_Locimp@12@XZ
?always_noconv@codecvt_base@std@@QBE_NXZ
?in@?$codecvt@_WDU_Mbstatet@@@std@@QBEHAAU_Mbstatet@@PBD1AAPBDPA_W3AAPA_W@Z
?out@?$codecvt@_WDU_Mbstatet@@@std@@QBEHAAU_Mbstatet@@PB_W1AAPB_WPAD3AAPAD@Z
?unshift@?$codecvt@_WDU_Mbstatet@@@std@@QBEHAAU_Mbstatet@@PAD1AAPAD@Z
?_Getcat@?$codecvt@_WDU_Mbstatet@@@std@@SAIPAPBVfacet@locale@2@PBV42@@Z
??0?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IAE@XZ
??1?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UAE@XZ
?getloc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QBE?AVlocale@2@XZ
?_Gndec@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IAEPA_WXZ
?_Pninc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IAEPA_WXZ
?_Init@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IAEXXZ
?xsgetn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAE_JPA_W_J@Z
?xsputn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAE_JPB_W_J@Z
??1?$basic_ios@_WU?$char_traits@_W@std@@@std@@UAE@XZ
?setstate@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QAEXH_N@Z
??0?$basic_ios@_WU?$char_traits@_W@std@@@std@@IAE@XZ
??0?$basic_istream@_WU?$char_traits@_W@std@@@std@@QAE@PAV?$basic_streambuf@_WU?$char_traits@_W@std@@@1@_N@Z
??1?$basic_istream@_WU?$char_traits@_W@std@@@std@@UAE@XZ
?_Fiopen@std@@YAPAU_iobuf@@PBGHH@Z
?showmanyc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAE_JXZ
?id@?$codecvt@_WDU_Mbstatet@@@std@@2V0locale@2@A
?_Xinvalid_argument@std@@YAXPBD@Z
?in@?$codecvt@DDU_Mbstatet@@@std@@QBEHAAU_Mbstatet@@PBD1AAPBDPAD3AAPAD@Z
?out@?$codecvt@DDU_Mbstatet@@@std@@QBEHAAU_Mbstatet@@PBD1AAPBDPAD3AAPAD@Z
?unshift@?$codecvt@DDU_Mbstatet@@@std@@QBEHAAU_Mbstatet@@PAD1AAPAD@Z
?_Getcat@?$codecvt@DDU_Mbstatet@@@std@@SAIPAPBVfacet@locale@2@PBV42@@Z
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAE@XZ
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAE@XZ
?getloc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QBE?AVlocale@2@XZ
?_Gndec@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEPADXZ
?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEPADXZ
?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXXZ
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPAD_J@Z
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPBD_J@Z
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UAE@XZ
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IAE@XZ
??0?$basic_istream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
??1?$basic_istream@DU?$char_traits@D@std@@@std@@UAE@XZ
?peek@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEHXZ
?_Fiopen@std@@YAPAU_iobuf@@PB_WHH@Z
?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEXABVlocale@2@@Z
?id@?$codecvt@DDU_Mbstatet@@@std@@2V0locale@2@A
?uncaught_exception@std@@YA_NXZ
?_Random_device@std@@YAIXZ
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHD@Z
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAE_JPBD_J@Z
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEXXZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAVios_base@1@AAV21@@Z@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@H@Z
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@XZ
??0?$basic_iostream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z
??1?$basic_iostream@DU?$char_traits@D@std@@@std@@UAE@XZ
?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ
?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ
?_Fiopen@std@@YAPAU_iobuf@@PBDHH@Z

vcruntime140

strchr
_purecall
__std_exception_copy
__std_exception_destroy
__RTDynamicCast
strstr
wcsstr
memcmp
wcschr
memchr
strrchr
__CxxLongjmpUnwind
__current_exception
__current_exception_context
_except_handler4_common
__std_type_info_destroy_list
_setjmp3
memset
memcpy
__std_terminate
memmove
__CxxFrameHandler3
_CxxThrowException
wcsrchr
longjmp

api-ms-win-crt-runtime-l1-1-0

_invalid_parameter_noinfo_noreturn
_seh_filter_dll
_initterm_e
_configure_narrow_argv
_set_thread_local_invalid_parameter_handler
_initterm
terminate
_cexit
_crt_at_quick_exit
_crt_atexit
_execute_onexit_table
_initialize_narrow_environment
_errno
_invalid_parameter_noinfo
_initialize_onexit_table
_register_onexit_function
abort

api-ms-win-crt-string-l1-1-0

isupper
strspn
wcsncmp
wcsnlen
wcscmp
wcscpy_s
wcscat_s
strcspn
wcstok_s
strlen
strcat
wcsncat_s
strpbrk
toupper
strtok_s
strtok
isxdigit
isalnum
isdigit
tolower
wcslen
isspace
strcmp
wcscat
_wcsnicmp
_wcsicmp
wcsncpy_s
strncpy
strncmp
strcpy
isalpha
wcscpy
towupper

api-ms-win-crt-utility-l1-1-0

rand
labs
qsort
bsearch
abs

api-ms-win-crt-stdio-l1-1-0

fgets
_get_stream_buffer_pointers
setvbuf
_wfopen
ungetc
fwrite
_fseeki64
__stdio_common_vsnwprintf_s
__stdio_common_vsprintf
fputc
fsetpos
__stdio_common_vsnprintf_s
fgetpos
__stdio_common_vfprintf_s
gets_s
__stdio_common_vfwprintf_s
__stdio_common_vfprintf
__stdio_common_vsprintf_s
fread
__acrt_iob_func
clearerr
feof
ferror
_fileno
fputs
fseek
ftell
_get_osfhandle
_open_osfhandle
fgetwc
fputwc
fgetc
fflush
ungetwc
fclose

api-ms-win-crt-math-l1-1-0

_except1
_fdopen
log
atan2
floor
asin
log10
tan
ceil
atan
fabs
pow
sqrt

api-ms-win-crt-convert-l1-1-0

atol
strtol
strtoul
atoi
_ui64tow_s
_ltow_s
_ultow_s
strtof
_i64tow_s
_itoa_s
_ltoa_s
_ultoa_s
mbstowcs_s
_itow_s
strtod
_ui64toa_s
_i64toa_s

api-ms-win-crt-heap-l1-1-0

free
malloc
realloc

api-ms-win-crt-filesystem-l1-1-0

_lock_file
_unlock_file
_makepath_s
_wremove
_waccess
_stat64i32
_wsplitpath_s
_wfullpath
_splitpath_s

api-ms-win-crt-time-l1-1-0

_localtime64
_time64
_mktime64
_gmtime64

Exports

Exports

CTCleanup
CTGetVersion
CTInit

Sections

.text
Size: 2.2MB - Virtual size: 2.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 743KB - Virtual size: 743KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 107KB - Virtual size: 158KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.didat
Size: 512B - Virtual size: 36B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 155KB - Virtual size: 154KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
x86/JP2KLib.dll
.dll windows:6 windows x86 arch:x86

83b05223f39b8593905fca1ffc7a2eba

Code Sign

01:1f:39:a2:26:1a:99:3d:d1:51:76:da:6f:e4:fb:ea
Certificate

Issuer

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

19-12-2020 00:00

Not After

21-12-2022 23:59

Subject

SERIALNUMBER=2748129,CN=Adobe Inc.,OU=Acrobat DC,O=Adobe Inc.,L=San Jose,ST=ca,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130844656c6177617265,1.3.6.1.4.1.311.60.2.1.3=#13025553

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

03:f1:b4:e1:5f:3a:82:f1:14:96:78:b3:d7:d8:47:5c
Certificate

Issuer

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

18-04-2012 12:00

Not After

18-04-2027 12:00

Subject

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0a:7a:4a:88:9e:c9:99:42:90:06:63:38:4d:86:97:9d
Certificate

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Not Before

29-03-2022 00:00

Not After

14-03-2033 23:59

Subject

CN=DigiCert Timestamp 2022 - 2,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

23-03-2022 00:00

Not After

22-03-2037 23:59

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

58:1b:1d:8f:72:c6:d6:23:4d:16:57:a6:90:20:b0:b6:bb:8e:cd:6f:4b:f7:aa:de:e3:22:ec:4a:ea:5f:87:18
Signer

Actual PE Digest

58:1b:1d:8f:72:c6:d6:23:4d:16:57:a6:90:20:b0:b6:bb:8e:cd:6f:4b:f7:aa:de:e3:22:ec:4a:ea:5f:87:18

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

JP2KLib.pdb

Imports

vcruntime140

__current_exception
__std_type_info_destroy_list
_CxxThrowException
memset
__current_exception_context
_except_handler4_common
__CxxFrameHandler3

api-ms-win-crt-math-l1-1-0

_libm_sse2_sqrt_precise
_except1
log10
_libm_sse2_pow_precise
fabs
ceil
sqrt
pow
_libm_sse2_log_precise

api-ms-win-crt-string-l1-1-0

strncmp
strlen

api-ms-win-crt-utility-l1-1-0

abs

api-ms-win-crt-stdio-l1-1-0

fputc
fflush
fclose
__acrt_iob_func
putc
fwrite
__stdio_common_vfprintf
fopen_s

api-ms-win-crt-runtime-l1-1-0

_execute_onexit_table
_crt_atexit
_crt_at_quick_exit
_cexit
terminate
_register_onexit_function
_initialize_narrow_environment
_configure_narrow_argv
_initterm_e
_initterm
_initialize_onexit_table
_seh_filter_dll

api-ms-win-crt-heap-l1-1-0

free

kernel32

InitializeSListHead
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
QueryPerformanceCounter
GetCurrentProcessId
GetModuleHandleW
GetStartupInfoW
IsDebuggerPresent
IsProcessorFeaturePresent
DisableThreadLibraryCalls
GetSystemTimeAsFileTime
GetCurrentThreadId

Exports

Exports

??0JP2KCodeStm@@QAE@XZ
??0JP2KMemFuncs@@QAE@XZ
??0JP2KMemFuncsEx@@QAE@XZ
??1JP2KCodeStm@@QAE@XZ
??4IJP2KException@@QAEAAV0@$$QAV0@@Z
??4IJP2KException@@QAEAAV0@ABV0@@Z
??4JP2KBufID_I@@QAEAAU0@$$QAU0@@Z
??4JP2KBufID_I@@QAEAAU0@ABU0@@Z
??4JP2KClientData@@QAEAAU0@$$QAU0@@Z
??4JP2KClientData@@QAEAAU0@ABU0@@Z
??4JP2KClientProcs@@QAEAAU0@$$QAU0@@Z
??4JP2KClientProcs@@QAEAAU0@ABU0@@Z
??4JP2KCodeStm@@QAEAAV0@ABV0@@Z
??4JP2KDecOpt@@QAEAAU0@$$QAU0@@Z
??4JP2KDecOpt@@QAEAAU0@ABU0@@Z
??4JP2KEncOpt@@QAEAAU0@$$QAU0@@Z
??4JP2KEncOpt@@QAEAAU0@ABU0@@Z
??4JP2KException@@QAEAAU0@$$QAU0@@Z
??4JP2KException@@QAEAAU0@ABU0@@Z
??4JP2KImageDataParms@@QAEAAU0@$$QAU0@@Z
??4JP2KImageDataParms@@QAEAAU0@ABU0@@Z
??4JP2KImageDataProcs@@QAEAAU0@$$QAU0@@Z
??4JP2KImageDataProcs@@QAEAAU0@ABU0@@Z
??4JP2KMemFuncs@@QAEAAU0@$$QAU0@@Z
??4JP2KMemFuncs@@QAEAAU0@ABU0@@Z
??4JP2KMemFuncsEx@@QAEAAU0@$$QAU0@@Z
??4JP2KMemFuncsEx@@QAEAAU0@ABU0@@Z
??4JP2KStreamProcs@@QAEAAU0@$$QAU0@@Z
??4JP2KStreamProcs@@QAEAAU0@ABU0@@Z
??4JP2KStreamProcsEx@@QAEAAU0@$$QAU0@@Z
??4JP2KStreamProcsEx@@QAEAAU0@ABU0@@Z
??4JP2KUserActions@@QAEAAU0@$$QAU0@@Z
??4JP2KUserActions@@QAEAAU0@ABU0@@Z
?ClearErrState@IJP2KException@@QAEXXZ
?Clone@IJP2KException@@QAEXPAV1@@Z
?Die@JP2KCodeStm@@QAEXXZ
?GetCurPos@JP2KCodeStm@@QAE_JXZ
?GetErrString@IJP2KException@@QAEPADXZ
?GetOpenMode@JP2KCodeStm@@QAE?AW4JP2KStmOpenMode@@XZ
?GetStmBase@JP2KCodeStm@@QAEPAXXZ
?GetStmProcs@JP2KCodeStm@@QAEPAUJP2KStreamProcsEx@@XZ
?GetTotalLength@JP2KCodeStm@@QAE_KXZ
?InitJP2KCodeStm@JP2KCodeStm@@QAEH_KHPAXPAUJP2KStreamProcsEx@@W4JP2KStmOpenMode@@H@Z
?IsReadable@JP2KCodeStm@@QAE_NXZ
?IsSeekable@JP2KCodeStm@@QAE_NXZ
?IsWritable@JP2KCodeStm@@QAE_NXZ
?ReadOnly@JP2KCodeStm@@QAE_NXZ
?StmLengthUnknown@JP2KCodeStm@@QAE_NXZ
?TellPos@JP2KCodeStm@@QAE_JXZ
?WriteOnly@JP2KCodeStm@@QAE_NXZ
?flushWriteBuffer@JP2KCodeStm@@QAEHXZ
?read@JP2KCodeStm@@QAEHPAEH@Z
?seek@JP2KCodeStm@@QAE_JH_J@Z
?write@JP2KCodeStm@@QAEHPAEH@Z
CIEParamsAreDefaults
ColorSpecIsJP2Compatibile
InitDefaultCIEParams
JP2KCopyRect
JP2KDecOptCreate
JP2KDecOptDestroy
JP2KDecOptInitToDefaults
JP2KEncOptClone
JP2KEncOptCreate
JP2KEncOptDestroy
JP2KEncOptGetGeomParams
JP2KEncOptInitToDefaults
JP2KEncOptInitToDefaultsUsingImageGeometry
JP2KGetMemObj
JP2KGetMemObjEx
JP2KImageCompletedDecoding
JP2KImageCompressAndWriteTile
JP2KImageCompressImage
JP2KImageCompressTile
JP2KImageCreate
JP2KImageDataCreate
JP2KImageDataDestroy
JP2KImageDataFreeImageBuffer
JP2KImageDataGetHeight
JP2KImageDataGetImageBuffer
JP2KImageDataGetSizeofImageDataType
JP2KImageDataGetWidth
JP2KImageDataInit
JP2KImageDataSetHeight
JP2KImageDataSetImageBuffer
JP2KImageDataSetImageBufferType
JP2KImageDataSetSizeOfImageDataType
JP2KImageDataSetWidth
JP2KImageDecodeImageRegion
JP2KImageDecodeImageWithoutSeeking
JP2KImageDecodeTileInterleaved
JP2KImageDecodeTileInterleavedIncremental
JP2KImageDecodeTilePlanar
JP2KImageDestroy
JP2KImageEncodeImage
JP2KImageEstimatePeakDecodeMemoryRequirement
JP2KImageEstimateSizeofRegionToDecode
JP2KImageFileIsJP2K
JP2KImageFileIsJP2KEx
JP2KImageFindQualityNumbersEmbedded
JP2KImageGeometryComputeTransformedPoint
JP2KImageGeometryComputeTransformedPointUsingOrientations
JP2KImageGeometryComputeTransformedRect
JP2KImageGeometryComputeTransformedRectUsingOrientations
JP2KImageGeometryCopyInit
JP2KImageGeometryCreate
JP2KImageGeometryDestroy
JP2KImageGeometryGetImageResolutionBoundingBox
JP2KImageGeometryGetNumXTiles
JP2KImageGeometryGetNumYTiles
JP2KImageGeometryGetParams
JP2KImageGeometryGetTileBoundingBox
JP2KImageGeometryGetTileCompBoundingBox
JP2KImageGeometryGetTileCompResolutionBoundingBox
JP2KImageGeometryGetTileNum
JP2KImageGeometryGetTileResolutionBoundingBox
JP2KImageGeometryGetTileResolutionBoundingBoxOfRegion
JP2KImageGeometryGetXIndex
JP2KImageGeometryGetYIndex
JP2KImageGeometryInit
JP2KImageGeometryMapCanvasCoordRectToComponentRect
JP2KImageGeometryMapCanvasCoordRectToLowerResComponentRect
JP2KImageGeometryMapRectToLowerRes
JP2KImageGeometryParamsAreInConsistent
JP2KImageGeometryTransformRect
JP2KImageGeometryTransformRectUsingOrientations
JP2KImageGetAlphaChannelCodeStreamSize
JP2KImageGetBitDepths
JP2KImageGetChannelIndex
JP2KImageGetChromaKey
JP2KImageGetClientData
JP2KImageGetCodeStream
JP2KImageGetColorSpecList
JP2KImageGetComponentType
JP2KImageGetDecodeOptions
JP2KImageGetDecodedImage
JP2KImageGetEncodeOptions
JP2KImageGetErrorDetails
JP2KImageGetGMLData
JP2KImageGetGeometryParams
JP2KImageGetGlobalTransparencyChannelNum
JP2KImageGetICCProfile
JP2KImageGetInterleavedColorData
JP2KImageGetMaxCodeStreamLength
JP2KImageGetMaxRes
JP2KImageGetMemObj
JP2KImageGetMemObjEx
JP2KImageGetMinCodeStreamLength
JP2KImageGetNumColorChannels
JP2KImageGetNumComponents
JP2KImageGetNumComponentsDoneInProgPlay
JP2KImageGetNumQualitySteps
JP2KImageGetNumTileComps
JP2KImageGetNumTiles
JP2KImageGetNumUUIDBoxes
JP2KImageGetNumXMLBoxes
JP2KImageGetOrientationForDecode
JP2KImageGetPalette
JP2KImageGetPreviewData
JP2KImageGetPreviewDataOfRegion
JP2KImageGetStreamProcs
JP2KImageGetStreamProcsEx
JP2KImageGetTempFileStream
JP2KImageGetTileComponent
JP2KImageGetTransparencyChannelNum
JP2KImageGetTransparencyCodeStreamSize
JP2KImageGetTransparencyType
JP2KImageGetUUIDBoxes
JP2KImageGetXMLBoxes
JP2KImageGlobalTransparencyChannelPresent
JP2KImageIncrementalDecodingIsEnabled
JP2KImageIncrementalDecodingIsRequired
JP2KImageInitDecoder
JP2KImageInitDecoderEx
JP2KImageInitEncoder
JP2KImageInitEncoderEx
JP2KImageIsGMLDataPresent
JP2KImageNumProgresionStepsInCompressImage
JP2KImageNumProgressionStepsInEncodeImage
JP2KImageOptimizeImage
JP2KImagePalettePresent
JP2KImagePlay
JP2KImagePlayProgression
JP2KImagePlayProgressionStart
JP2KImagePlayProgressionStop
JP2KImageReorderCodeStream
JP2KImageResolutionInfoPresent
JP2KImageRewind
JP2KImageSetAlphaChannelsForPreview
JP2KImageSetOrientationForDecode
JP2KImageSetReplayOptions
JP2KImageSkipDecodingOfAlphaChannels
JP2KImageTransparencyChannelPresent
JP2KImageUUIDPresent
JP2KImageUpdateCodestreamSize
JP2KImageValidate
JP2KImageWriteJPXHeaders
JP2KImageXMLPresent
JP2KImageZoom
JP2KLibBuildDate
JP2KLibInit
JP2KLibInitEx
JP2KLibShutDown
JP2KLibVersion
JP2KTileComponentGetDecOpt
JP2KTileComponentGetDecodeParams
JP2KTileComponentGetEncOpt
JP2KTileComponentGetHeight
JP2KTileComponentGetOutputImage
JP2KTileComponentGetProgData
JP2KTileComponentGetTileGeometryParams
JP2KTileComponentGetWaveletData
JP2KTileComponentGetWidth
JP2KTileComponentReleaseWaveletData
JP2KTileComponentResetTileCompDataIsValid
JP2KTileComponentResetTileCompDataReady
JP2KTileComponentSetDecodeOptions
JP2KTileComponentSetDecodeParams
JP2KTileComponentSetEncodeOptions
JP2KTileComponentSetIsAlphaChannel
JP2KTileComponentSetOutputImage
JP2KTileComponentSetProgData
JP2KTileComponentSetTileCompDataIsValid
JP2KTileComponentSetTileCompDataReady
JP2KTileComponentSetTileGeometryParams
JP2KTileComponentSetWaveletData
JP2KTileComponentTileCompDataIsValid
JP2KTileComponentTileCompDataReady
JP2KTileComponentValidate
JP2KTileGeometryCreate
JP2KTileGeometryDestroy
JP2KTileGeometryGetResolutionCoords
JP2KTileGeometryGetResolutionCoordsofRegion
JP2KTileGeometryInit
JP2KTileGeometryInitUsingTileIndices
JP2KTileGeometryRegionIsTile

Sections

.text
Size: 445KB - Virtual size: 445KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 30KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 11KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

Password: 19111547

Password: 19111547

Password: 19111547

ee94d9d14cff80538936ff9d276ecfc1

Code Sign

8b:a1:f1:72:fd:50:ba:8d:4c:11:b7:4f:fa:c8:a2:82Certificate

Extended Key Usages

Key Usages

39:72:44:3a:f9:22:b7:51:d7:d3:6c:10:dd:31:35:95Certificate

Key Usages

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5aCertificate

Key Usages

1d:a2:48:30:6f:9b:26:18:d0:82:e0:96:7d:33:d3:6aCertificate

Extended Key Usages

Key Usages

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5bCertificate

Extended Key Usages

Key Usages

05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16Certificate

Extended Key Usages

Key Usages

8b:a1:f1:72:fd:50:ba:8d:4c:11:b7:4f:fa:c8:a2:82Certificate

Extended Key Usages

Key Usages

39:72:44:3a:f9:22:b7:51:d7:d3:6c:10:dd:31:35:95Certificate

Key Usages

1d:a2:48:30:6f:9b:26:18:d0:82:e0:96:7d:33:d3:6aCertificate

Extended Key Usages

Key Usages

7b:05:b1:d4:49:68:51:44:f7:c9:89:d2:9c:19:9d:12Certificate

Extended Key Usages

Key Usages

7b:d4:e5:af:ba:cc:07:3f:a1:01:23:04:22:41:4d:12Certificate

Extended Key Usages

Key Usages

d5:da:47:19:7b:f0:4b:65:e8:0d:4e:72:80:6f:4a:ef:64:4e:66:5a:ec:a2:5d:d4:0f:de:e4:58:32:56:3c:2dSigner

59:40:54:2c:49:a0:37:34:bf:d5:f8:3d:ef:46:b0:eb:de:36:01:fbSigner

Headers

File Characteristics

Imports

oleaut32

advapi32

user32

kernel32

msimg32

gdi32

version

ole32

shell32

comctl32

crtdll

Exports

Exports

Sections

.text Size: 854KB - Virtual size: 853KB

.itext Size: 5KB - Virtual size: 4KB

.data Size: 44KB - Virtual size: 44KB

.bss Size: - Virtual size: 25KB

.idata Size: 11KB - Virtual size: 11KB

.edata Size: 512B - Virtual size: 315B

.reloc Size: 57KB - Virtual size: 56KB

.rsrc Size: 63KB - Virtual size: 63KB

Password: 19111547

28874ed5cf72c5f5139e0f73a21d7936

Code Sign

8b:a1:f1:72:fd:50:ba:8d:4c:11:b7:4f:fa:c8:a2:82Certificate

Extended Key Usages

Key Usages

39:72:44:3a:f9:22:b7:51:d7:d3:6c:10:dd:31:35:95Certificate

Key Usages

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5aCertificate

Key Usages

1d:a2:48:30:6f:9b:26:18:d0:82:e0:96:7d:33:d3:6aCertificate

Extended Key Usages

Key Usages

8b:a1:f1:72:fd:50:ba:8d:4c:11:b7:4f:fa:c8:a2:82
Certificate

39:72:44:3a:f9:22:b7:51:d7:d3:6c:10:dd:31:35:95
Certificate

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

1d:a2:48:30:6f:9b:26:18:d0:82:e0:96:7d:33:d3:6a
Certificate

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16
Certificate

8b:a1:f1:72:fd:50:ba:8d:4c:11:b7:4f:fa:c8:a2:82
Certificate

39:72:44:3a:f9:22:b7:51:d7:d3:6c:10:dd:31:35:95
Certificate

1d:a2:48:30:6f:9b:26:18:d0:82:e0:96:7d:33:d3:6a
Certificate

7b:05:b1:d4:49:68:51:44:f7:c9:89:d2:9c:19:9d:12
Certificate

7b:d4:e5:af:ba:cc:07:3f:a1:01:23:04:22:41:4d:12
Certificate

d5:da:47:19:7b:f0:4b:65:e8:0d:4e:72:80:6f:4a:ef:64:4e:66:5a:ec:a2:5d:d4:0f:de:e4:58:32:56:3c:2d
Signer

59:40:54:2c:49:a0:37:34:bf:d5:f8:3d:ef:46:b0:eb:de:36:01:fb
Signer

.text
Size: 854KB - Virtual size: 853KB

.itext
Size: 5KB - Virtual size: 4KB

.data
Size: 44KB - Virtual size: 44KB

.bss
Size: - Virtual size: 25KB

.idata
Size: 11KB - Virtual size: 11KB

.edata
Size: 512B - Virtual size: 315B

.reloc
Size: 57KB - Virtual size: 56KB

.rsrc
Size: 63KB - Virtual size: 63KB

8b:a1:f1:72:fd:50:ba:8d:4c:11:b7:4f:fa:c8:a2:82
Certificate

39:72:44:3a:f9:22:b7:51:d7:d3:6c:10:dd:31:35:95
Certificate

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

1d:a2:48:30:6f:9b:26:18:d0:82:e0:96:7d:33:d3:6a
Certificate

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16
Certificate

8b:a1:f1:72:fd:50:ba:8d:4c:11:b7:4f:fa:c8:a2:82
Certificate

39:72:44:3a:f9:22:b7:51:d7:d3:6c:10:dd:31:35:95
Certificate

1d:a2:48:30:6f:9b:26:18:d0:82:e0:96:7d:33:d3:6a
Certificate

7b:05:b1:d4:49:68:51:44:f7:c9:89:d2:9c:19:9d:12
Certificate

7b:d4:e5:af:ba:cc:07:3f:a1:01:23:04:22:41:4d:12
Certificate

d0:d9:7b:89:3c:7e:29:b9:d7:18:0a:4e:e8:e9:30:70:2f:74:56:a7:76:78:22:1b:36:da:79:d7:c9:58:49:27
Signer

62:da:04:df:3a:d1:fa:3d:47:bc:be:f3:37:73:83:99:79:ea:0c:7d
Signer

.text
Size: 79KB - Virtual size: 78KB

.itext
Size: 5KB - Virtual size: 4KB

.data
Size: 4KB - Virtual size: 3KB

.bss
Size: - Virtual size: 1KB

.idata
Size: 19KB - Virtual size: 18KB

.reloc
Size: 5KB - Virtual size: 4KB

.rsrc
Size: 3KB - Virtual size: 3KB

.text
Size: 347KB - Virtual size: 346KB

.rdata
Size: 42KB - Virtual size: 41KB

.data
Size: 139KB - Virtual size: 140KB

.pdata
Size: 16KB - Virtual size: 15KB

.rsrc
Size: 1024B - Virtual size: 928B

.reloc
Size: 2KB - Virtual size: 2KB

8b:a1:f1:72:fd:50:ba:8d:4c:11:b7:4f:fa:c8:a2:82
Certificate

39:72:44:3a:f9:22:b7:51:d7:d3:6c:10:dd:31:35:95
Certificate

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

1d:a2:48:30:6f:9b:26:18:d0:82:e0:96:7d:33:d3:6a
Certificate

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate