dialog
initDialog
show
Overview
overview
8Static
static
3qq_pinyin_4.4_Dsn.exe
windows7-x64
7qq_pinyin_4.4_Dsn.exe
windows10-2004-x64
7$PLUGINSDI...ns.dll
windows7-x64
3$PLUGINSDI...ns.dll
windows10-2004-x64
3$TEMP/TXSS...er.dll
windows7-x64
3$TEMP/TXSS...er.dll
windows10-2004-x64
3$TEMP/TXSS...UI.exe
windows7-x64
3$TEMP/TXSS...UI.exe
windows10-2004-x64
3$TEMP/TXSS...on.dll
windows7-x64
3$TEMP/TXSS...on.dll
windows10-2004-x64
3$TEMP/TXSS...ol.dll
windows7-x64
3$TEMP/TXSS...ol.dll
windows10-2004-x64
3$TEMP/TXSS...rm.dll
windows7-x64
3$TEMP/TXSS...rm.dll
windows10-2004-x64
34.4.1105.4...ct.exe
windows7-x64
34.4.1105.4...ct.exe
windows10-2004-x64
34.4.1105.4...in.exe
windows7-x64
34.4.1105.4...in.exe
windows10-2004-x64
34.4.1105.4...il.dll
windows7-x64
34.4.1105.4...il.dll
windows10-2004-x64
34.4.1105.4...il.exe
windows7-x64
84.4.1105.4...il.exe
windows10-2004-x64
34.4.1105.4...64.dll
windows7-x64
14.4.1105.4...64.dll
windows10-2004-x64
14.4.1105.4...ud.exe
windows7-x64
34.4.1105.4...ud.exe
windows10-2004-x64
34.4.1105.4...ig.exe
windows7-x64
34.4.1105.4...ig.exe
windows10-2004-x64
34.4.1105.4...ce.exe
windows7-x64
34.4.1105.4...ce.exe
windows10-2004-x64
34.4.1105.4...ut.exe
windows7-x64
34.4.1105.4...ut.exe
windows10-2004-x64
3Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
qq_pinyin_4.4_Dsn.exe
Resource
win7-20240903-en
windows7-x64
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
qq_pinyin_4.4_Dsn.exe
Resource
win10v2004-20241007-en
windows10-2004-x64
3 signatures
150 seconds
Behavioral task
behavioral3
Sample
$PLUGINSDIR/InstallOptions.dll
Resource
win7-20240903-en
windows7-x64
3 signatures
150 seconds
Behavioral task
behavioral4
Sample
$PLUGINSDIR/InstallOptions.dll
Resource
win10v2004-20241007-en
windows10-2004-x64
3 signatures
150 seconds
Behavioral task
behavioral5
Sample
$TEMP/TXSSO/InstTXSSOHelper.dll
Resource
win7-20240903-en
windows7-x64
2 signatures
150 seconds
Behavioral task
behavioral6
Sample
$TEMP/TXSSO/InstTXSSOHelper.dll
Resource
win10v2004-20241007-en
windows10-2004-x64
3 signatures
150 seconds
Behavioral task
behavioral7
Sample
$TEMP/TXSSO/InstTXSSO_LUI.exe
Resource
win7-20241010-en
windows7-x64
1 signatures
150 seconds
Behavioral task
behavioral8
Sample
$TEMP/TXSSO/InstTXSSO_LUI.exe
Resource
win10v2004-20241007-en
windows10-2004-x64
1 signatures
150 seconds
Behavioral task
behavioral9
Sample
$TEMP/TXSSO/bin/SSOCommon.dll
Resource
win7-20240903-en
windows7-x64
3 signatures
150 seconds
Behavioral task
behavioral10
Sample
$TEMP/TXSSO/bin/SSOCommon.dll
Resource
win10v2004-20241007-en
windows10-2004-x64
3 signatures
150 seconds
Behavioral task
behavioral11
Sample
$TEMP/TXSSO/bin/SSOLUIControl.dll
Resource
win7-20241023-en
windows7-x64
3 signatures
150 seconds
Behavioral task
behavioral12
Sample
$TEMP/TXSSO/bin/SSOLUIControl.dll
Resource
win10v2004-20241007-en
windows10-2004-x64
3 signatures
150 seconds
Behavioral task
behavioral13
Sample
$TEMP/TXSSO/bin/SSOPlatform.dll
Resource
win7-20240903-en
windows7-x64
3 signatures
150 seconds
Behavioral task
behavioral14
Sample
$TEMP/TXSSO/bin/SSOPlatform.dll
Resource
win10v2004-20241007-en
windows10-2004-x64
3 signatures
150 seconds
Behavioral task
behavioral15
Sample
4.4.1105.400/QQImeRegDict.exe
Resource
win7-20240729-en
windows7-x64
1 signatures
150 seconds
Behavioral task
behavioral16
Sample
4.4.1105.400/QQImeRegDict.exe
Resource
win10v2004-20241007-en
windows10-2004-x64
1 signatures
150 seconds
Behavioral task
behavioral17
Sample
4.4.1105.400/QQImeRegSkin.exe
Resource
win7-20240903-en
windows7-x64
1 signatures
150 seconds
Behavioral task
behavioral18
Sample
4.4.1105.400/QQImeRegSkin.exe
Resource
win10v2004-20241007-en
windows10-2004-x64
1 signatures
150 seconds
Behavioral task
behavioral19
Sample
4.4.1105.400/QQImeUtil.dll
Resource
win7-20241023-en
windows7-x64
2 signatures
150 seconds
Behavioral task
behavioral20
Sample
4.4.1105.400/QQImeUtil.dll
Resource
win10v2004-20241007-en
windows10-2004-x64
2 signatures
150 seconds
Behavioral task
behavioral21
Sample
4.4.1105.400/QQImeUtil.exe
Resource
win7-20240903-en
windows7-x64
6 signatures
150 seconds
Behavioral task
behavioral22
Sample
4.4.1105.400/QQImeUtil.exe
Resource
win10v2004-20241007-en
windows10-2004-x64
1 signatures
150 seconds
Behavioral task
behavioral23
Sample
4.4.1105.400/QQImeUtil_x64.dll
Resource
win7-20240903-en
windows7-x64
0 signatures
150 seconds
Behavioral task
behavioral24
Sample
4.4.1105.400/QQImeUtil_x64.dll
Resource
win10v2004-20241007-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral25
Sample
4.4.1105.400/QQPYCloud.exe
Resource
win7-20240903-en
windows7-x64
1 signatures
150 seconds
Behavioral task
behavioral26
Sample
4.4.1105.400/QQPYCloud.exe
Resource
win10v2004-20241007-en
windows10-2004-x64
1 signatures
150 seconds
Behavioral task
behavioral27
Sample
4.4.1105.400/QQPYConfig.exe
Resource
win7-20240708-en
windows7-x64
4 signatures
150 seconds
Behavioral task
behavioral28
Sample
4.4.1105.400/QQPYConfig.exe
Resource
win10v2004-20241007-en
windows10-2004-x64
3 signatures
150 seconds
Behavioral task
behavioral29
Sample
4.4.1105.400/QQPYFace.exe
Resource
win7-20240903-en
windows7-x64
1 signatures
150 seconds
Behavioral task
behavioral30
Sample
4.4.1105.400/QQPYFace.exe
Resource
win10v2004-20241007-en
windows10-2004-x64
1 signatures
150 seconds
Behavioral task
behavioral31
Sample
4.4.1105.400/QQPYHandInput.exe
Resource
win7-20240729-en
windows7-x64
1 signatures
150 seconds
Behavioral task
behavioral32
Sample
4.4.1105.400/QQPYHandInput.exe
Resource
win10v2004-20241007-en
windows10-2004-x64
1 signatures
150 seconds
General
-
Target
b413ccc7aaaaa63efccf395fa943ec34_JaffaCakes118
-
Size
19.1MB
-
MD5
b413ccc7aaaaa63efccf395fa943ec34
-
SHA1
8139d2089b10e6c2722af67750a48c9f7b7d0f43
-
SHA256
5e5bb6ddf3de647147535d087e9e494f322ed0d7efc681883bd835c5e9efaa67
-
SHA512
088b41b2744c4952588693bbed1a6aa71d0cc70b6f7e8af10ba4b8bebce9660c2de2d9f97ec19a768681ffa10b24aadaa700fb81f43679da50e5cbdce7fb5fa6
-
SSDEEP
393216:snSiX0lYHaq1Y28su71FX+b6VqlhtpZinHZdMv9xU+o7thb:s0Ia4R7up9+b6g0HrMFbo7tt
Score
3/10
Malware Config
Signatures
-
Unsigned PE 6 IoCs
Checks for missing Authenticode signature.
resource unpack001/qq_pinyin_4.4_Dsn.exe unpack002/$PLUGINSDIR/InstallOptions.dll unpack002/QQIME.exe unpack002/QQPinyin/QQPinyinHelper.dll unpack002/QQPinyin/x86/QQPinyin.ime unpack002/uninst.exe -
NSIS installer 6 IoCs
resource yara_rule static1/unpack001/qq_pinyin_4.4_Dsn.exe nsis_installer_1 static1/unpack001/qq_pinyin_4.4_Dsn.exe nsis_installer_2 static1/unpack002/QQIME.exe nsis_installer_1 static1/unpack002/QQIME.exe nsis_installer_2 static1/unpack002/uninst.exe nsis_installer_1 static1/unpack002/uninst.exe nsis_installer_2
Files
-
b413ccc7aaaaa63efccf395fa943ec34_JaffaCakes118.zip
-
qq_pinyin_4.4_Dsn.exe.exe windows:4 windows x86 arch:x86
099c0646ea7282d232219f8807883be0
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CompareFileTime
SearchPathA
GetShortPathNameA
GetFullPathNameA
MoveFileA
SetCurrentDirectoryA
GetFileAttributesA
GetLastError
CreateDirectoryA
SetFileAttributesA
Sleep
GetTickCount
CreateFileA
GetFileSize
GetModuleFileNameA
GetCurrentProcess
CopyFileA
ExitProcess
SetFileTime
GetTempPathA
GetCommandLineA
SetErrorMode
LoadLibraryA
lstrcpynA
GetDiskFreeSpaceA
GlobalUnlock
GlobalLock
CreateThread
CreateProcessA
RemoveDirectoryA
GetTempFileNameA
lstrlenA
lstrcatA
GetSystemDirectoryA
GetVersion
CloseHandle
lstrcmpiA
lstrcmpA
ExpandEnvironmentStringsA
GlobalFree
GlobalAlloc
WaitForSingleObject
GetExitCodeProcess
GetModuleHandleA
LoadLibraryExA
GetProcAddress
FreeLibrary
MultiByteToWideChar
WritePrivateProfileStringA
GetPrivateProfileStringA
WriteFile
ReadFile
MulDiv
SetFilePointer
FindClose
FindNextFileA
FindFirstFileA
DeleteFileA
GetWindowsDirectoryA
user32
EndDialog
ScreenToClient
GetWindowRect
EnableMenuItem
GetSystemMenu
SetClassLongA
IsWindowEnabled
SetWindowPos
GetSysColor
GetWindowLongA
SetCursor
LoadCursorA
CheckDlgButton
GetMessagePos
LoadBitmapA
CallWindowProcA
IsWindowVisible
CloseClipboard
SetClipboardData
EmptyClipboard
RegisterClassA
TrackPopupMenu
AppendMenuA
CreatePopupMenu
GetSystemMetrics
SetDlgItemTextA
GetDlgItemTextA
MessageBoxIndirectA
CharPrevA
DispatchMessageA
PeekMessageA
DestroyWindow
CreateDialogParamA
SetTimer
SetWindowTextA
PostQuitMessage
SetForegroundWindow
wsprintfA
SendMessageTimeoutA
FindWindowExA
SystemParametersInfoA
CreateWindowExA
GetClassInfoA
DialogBoxParamA
CharNextA
OpenClipboard
ExitWindowsEx
IsWindow
GetDlgItem
SetWindowLongA
LoadImageA
GetDC
EnableWindow
InvalidateRect
SendMessageA
DefWindowProcA
BeginPaint
GetClientRect
FillRect
DrawTextA
EndPaint
ShowWindow
gdi32
SetBkColor
GetDeviceCaps
DeleteObject
CreateBrushIndirect
CreateFontIndirectA
SetBkMode
SetTextColor
SelectObject
shell32
SHGetPathFromIDListA
SHBrowseForFolderA
SHGetFileInfoA
ShellExecuteA
SHFileOperationA
SHGetSpecialFolderLocation
advapi32
RegQueryValueExA
RegSetValueExA
RegEnumKeyA
RegEnumValueA
RegOpenKeyExA
RegDeleteKeyA
RegDeleteValueA
RegCloseKey
RegCreateKeyExA
comctl32
ImageList_AddMasked
ImageList_Destroy
ord17
ImageList_Create
ole32
CoTaskMemFree
OleInitialize
OleUninitialize
CoCreateInstance
version
GetFileVersionInfoSizeA
GetFileVersionInfoA
VerQueryValueA
Sections
.text Size: 23KB - Virtual size: 22KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 107KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ndata Size: - Virtual size: 36KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 21KB - Virtual size: 21KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
$PLUGINSDIR/InstallOptions.dll.dll windows:4 windows x86 arch:x86
b1cd0d78f652ce5fc63f0879371af012
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
SetCurrentDirectoryA
GetCurrentDirectoryA
MultiByteToWideChar
GetPrivateProfileIntA
GlobalLock
GetModuleHandleA
lstrcmpiA
GetPrivateProfileStringA
lstrcatA
lstrcpynA
WritePrivateProfileStringA
lstrlenA
lstrcpyA
GlobalFree
GlobalUnlock
GlobalAlloc
user32
MapWindowPoints
GetDlgCtrlID
CloseClipboard
GetClipboardData
OpenClipboard
PtInRect
SetWindowRgn
LoadIconA
LoadImageA
SetWindowLongA
CreateWindowExA
MapDialogRect
SetWindowPos
GetWindowRect
CreateDialogParamA
ShowWindow
EnableMenuItem
GetSystemMenu
EnableWindow
GetDlgItem
DestroyIcon
DestroyWindow
DispatchMessageA
TranslateMessage
GetMessageA
IsDialogMessageA
LoadCursorA
SetCursor
DrawTextA
GetWindowLongA
DrawFocusRect
CallWindowProcA
PostMessageA
MessageBoxA
CharNextA
wsprintfA
GetWindowTextA
SetWindowTextA
SendMessageA
GetClientRect
gdi32
SetTextColor
CreateCompatibleDC
GetObjectA
GetDIBits
CreateRectRgn
CombineRgn
DeleteObject
SelectObject
shell32
SHBrowseForFolderA
SHGetDesktopFolder
SHGetPathFromIDListA
ShellExecuteA
comdlg32
GetOpenFileNameA
GetSaveFileNameA
CommDlgExtendedError
ole32
CoTaskMemFree
Exports
Exports
Sections
.text Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 152B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
$PLUGINSDIR/ioSpecial.ini
-
$PLUGINSDIR/modern-wizard.bmp
-
$TEMP/TXSSO/I18N/2052/PGFStringBundle.xml.xml
-
$TEMP/TXSSO/I18N/2052/SSOStringBundle.xml.xml
-
$TEMP/TXSSO/I18N/SSOConfig.xml.xml
-
$TEMP/TXSSO/InstTXSSOHelper.dll.dll windows:4 windows x86 arch:x86
7300c288a62aa77b3e11d1bb9ccde7b3
Code Sign
38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5Certificate
IssuerCN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=USNot Before15-06-2007 00:00Not After14-06-2012 23:59SubjectCN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=USExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageContentCommitment
47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4Certificate
IssuerCN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZANot Before04-12-2003 00:00Not After03-12-2013 23:59SubjectCN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=USExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageCertSign
KeyUsageCRLSign
65:52:26:e1:b2:2e:18:e1:59:0f:29:85:ac:22:e7:5cCertificate
IssuerOU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=USNot Before21-05-2009 00:00Not After20-05-2019 23:59SubjectCN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=USExtended Key Usages
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
Key Usages
KeyUsageCertSign
KeyUsageCRLSign
5d:06:88:f9:04:0a:d5:22:87:fc:32:ad:ec:eb:85:b0Certificate
IssuerCN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=USNot Before26-01-2010 00:00Not After25-01-2013 23:59SubjectCN=Tencent Technology(Shenzhen) Company Limited,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Tencent Technology(Shenzhen) Company Limited,L=shenzhen,ST=guangdong,C=CNExtended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
31:03:12:e8:a9:00:40:23:b8:32:7f:a2:fb:96:b3:fb:e0:a4:b7:2eSigner
Actual PE Digest31:03:12:e8:a9:00:40:23:b8:32:7f:a2:fb:96:b3:fb:e0:a4:b7:2eDigest Algorithmsha1PE Digest MatchestrueHeaders
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
h:\Hummer\basebuilder_hummerplatformProj_int\Basic_HummerPlatform_VOB\Platform\SSOPlatform\TXSSO\output\bin\InstTXSSOHelper.pdb
Imports
version
VerQueryValueW
GetFileVersionInfoW
GetFileVersionInfoSizeW
kernel32
GetLongPathNameW
LoadLibraryA
OpenProcess
InterlockedIncrement
CreateToolhelp32Snapshot
Process32FirstW
InterlockedDecrement
Module32FirstW
Module32NextW
Process32NextW
GetFileAttributesW
CloseHandle
lstrlenA
MoveFileExW
lstrcmpiW
GetProcAddress
FreeLibrary
DebugBreak
GetVersionExW
CreateFileW
OutputDebugStringW
GetConsoleOutputCP
GetCurrentProcessId
VirtualAlloc
GetModuleHandleW
VirtualFree
DuplicateHandle
GetCurrentProcess
WaitForSingleObject
GetLastError
LoadLibraryW
MultiByteToWideChar
QueryDosDeviceW
TerminateThread
FlushFileBuffers
GetConsoleMode
GetConsoleCP
SetStdHandle
SetFilePointer
WriteConsoleW
CreateFileA
lstrlenW
HeapFree
ReadFile
InitializeCriticalSection
RtlUnwind
GetSystemTimeAsFileTime
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
ExitThread
ResumeThread
CreateThread
GetCurrentThreadId
GetCommandLineA
GetVersionExA
HeapAlloc
GetProcessHeap
RaiseException
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
GetModuleHandleA
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
ExitProcess
Sleep
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
DeleteCriticalSection
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
HeapDestroy
HeapCreate
QueryPerformanceCounter
GetTickCount
HeapSize
LeaveCriticalSection
EnterCriticalSection
HeapReAlloc
WriteFile
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
WriteConsoleA
user32
CharNextW
wvsprintfW
LoadStringW
GetWindowTextW
GetWindowThreadProcessId
GetWindowLongW
EnumWindows
UnregisterClassA
advapi32
OpenProcessToken
AdjustTokenPrivileges
LookupPrivilegeValueW
shell32
SHGetPathFromIDListW
SHGetSpecialFolderLocation
shlwapi
PathFileExistsW
Exports
Exports
CheckModuleExist
CheckTXSSOModuleExist
FreeTXSSOModuleExistResult
QueryTXSSOModuleExistInfo
QueryTXSSOModuleExistInfo_IEFilter
Sections
.text Size: 76KB - Virtual size: 73KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 16KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
$TEMP/TXSSO/InstTXSSO_LUI.exe.exe windows:4 windows x86 arch:x86
b43ad91db2689030bab9ee598cc64c53
Code Sign
38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5Certificate
IssuerCN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=USNot Before15-06-2007 00:00Not After14-06-2012 23:59SubjectCN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=USExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageContentCommitment
47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4Certificate
IssuerCN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZANot Before04-12-2003 00:00Not After03-12-2013 23:59SubjectCN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=USExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageCertSign
KeyUsageCRLSign
65:52:26:e1:b2:2e:18:e1:59:0f:29:85:ac:22:e7:5cCertificate
IssuerOU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=USNot Before21-05-2009 00:00Not After20-05-2019 23:59SubjectCN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=USExtended Key Usages
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
Key Usages
KeyUsageCertSign
KeyUsageCRLSign
5d:06:88:f9:04:0a:d5:22:87:fc:32:ad:ec:eb:85:b0Certificate
IssuerCN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=USNot Before26-01-2010 00:00Not After25-01-2013 23:59SubjectCN=Tencent Technology(Shenzhen) Company Limited,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Tencent Technology(Shenzhen) Company Limited,L=shenzhen,ST=guangdong,C=CNExtended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
34:18:57:76:24:66:cd:68:34:07:5f:fd:e0:14:8f:ea:71:69:55:4dSigner
Actual PE Digest34:18:57:76:24:66:cd:68:34:07:5f:fd:e0:14:8f:ea:71:69:55:4dDigest Algorithmsha1PE Digest MatchestrueHeaders
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
h:\Hummer\basebuilder_hummerplatformProj_int\Basic_HummerPlatform_VOB\Platform\SSOPlatform\TXSSO\output\bin\InstTXSSO_LUI.pdb
Imports
version
VerQueryValueW
GetFileVersionInfoW
GetFileVersionInfoSizeW
kernel32
InterlockedDecrement
SetEnvironmentVariableA
CompareStringW
CompareStringA
SetFilePointer
SetEndOfFile
CloseHandle
GetFileAttributesW
GetFullPathNameW
DeleteFileW
MoveFileW
CopyFileW
GetLastError
MoveFileExW
FindResourceW
CreateProcessW
WaitForSingleObject
GetDriveTypeW
FindFirstFileW
FindNextFileW
FindClose
SizeofResource
LockResource
LoadResource
FindResourceExW
CreateDirectoryW
CreateFileW
WriteFile
GetFileSize
FlushFileBuffers
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
SetStdHandle
HeapDestroy
HeapAlloc
HeapFree
HeapReAlloc
HeapSize
GetProcessHeap
RaiseException
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSection
DeleteCriticalSection
GetVersionExA
GetProcAddress
GetModuleHandleA
ExitProcess
GetSystemTimeAsFileTime
GetStartupInfoW
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetCPInfo
InterlockedIncrement
GetLocaleInfoA
GetACP
GetOEMCP
IsValidCodePage
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
GetCurrentThreadId
WideCharToMultiByte
GetTimeZoneInformation
GetStdHandle
GetModuleFileNameA
LoadLibraryA
GetModuleFileNameW
FreeEnvironmentStringsA
MultiByteToWideChar
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineA
GetCommandLineW
SetHandleCount
GetFileType
GetStartupInfoA
HeapCreate
VirtualFree
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
Sleep
VirtualAlloc
RtlUnwind
GetConsoleCP
GetConsoleMode
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
CreateFileA
user32
GetDesktopWindow
UnregisterClassA
shell32
SHGetSpecialFolderLocation
SHGetPathFromIDListW
SHGetSpecialFolderPathW
shlwapi
PathFileExistsW
Sections
.text Size: 65KB - Virtual size: 65KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 16KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
$TEMP/TXSSO/bin/SSOCommon.dll.dll regsvr32 windows:4 windows x86 arch:x86
3211a8c05bbc30c688421aa2ff2ae7c3
Code Sign
38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5Certificate
IssuerCN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=USNot Before15-06-2007 00:00Not After14-06-2012 23:59SubjectCN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=USExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageContentCommitment
47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4Certificate
IssuerCN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZANot Before04-12-2003 00:00Not After03-12-2013 23:59SubjectCN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=USExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageCertSign
KeyUsageCRLSign
65:52:26:e1:b2:2e:18:e1:59:0f:29:85:ac:22:e7:5cCertificate
IssuerOU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=USNot Before21-05-2009 00:00Not After20-05-2019 23:59SubjectCN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=USExtended Key Usages
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
Key Usages
KeyUsageCertSign
KeyUsageCRLSign
5d:06:88:f9:04:0a:d5:22:87:fc:32:ad:ec:eb:85:b0Certificate
IssuerCN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=USNot Before26-01-2010 00:00Not After25-01-2013 23:59SubjectCN=Tencent Technology(Shenzhen) Company Limited,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Tencent Technology(Shenzhen) Company Limited,L=shenzhen,ST=guangdong,C=CNExtended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
24:3a:3f:57:ba:96:38:8e:68:47:04:e4:ee:b1:59:9e:e1:55:1e:29Signer
Actual PE Digest24:3a:3f:57:ba:96:38:8e:68:47:04:e4:ee:b1:59:9e:e1:55:1e:29Digest Algorithmsha1PE Digest MatchestrueHeaders
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
h:\Hummer\basebuilder_hummerplatformProj_int\Basic_HummerPlatform_VOB\Platform\SSOPlatform\TXSSO\output\bin\SSOCommon.pdb
Imports
ws2_32
__WSAFDIsSet
WSAAsyncSelect
WSAGetLastError
closesocket
ioctlsocket
recv
select
WSAStartup
inet_ntoa
WSACleanup
inet_addr
gethostname
gethostbyname
send
WSAAsyncGetHostByName
WSACancelAsyncRequest
getservbyport
gethostbyaddr
getservbyname
accept
socket
WSASetLastError
sendto
recvfrom
connect
listen
getsockopt
setsockopt
getsockname
getpeername
bind
wininet
InternetSetCookieW
HttpQueryInfoW
InternetSetOptionW
HttpSendRequestW
InternetGetCookieW
InternetCloseHandle
InternetConnectW
InternetOpenW
InternetQueryOptionW
InternetCanonicalizeUrlW
HttpOpenRequestW
InternetErrorDlg
InternetCrackUrlW
winmm
timeGetTime
version
GetFileVersionInfoW
VerQueryValueW
GetFileVersionInfoSizeW
psapi
GetModuleFileNameExW
iphlpapi
GetIpForwardTable
GetIpAddrTable
kernel32
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
GetVersionExA
IsDebuggerPresent
RtlUnwind
GetLocaleInfoA
InterlockedExchange
HeapReAlloc
lstrlenW
RaiseException
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSection
DeleteCriticalSection
GetLastError
lstrcmpiW
GetModuleFileNameW
InterlockedIncrement
InterlockedDecrement
FreeLibrary
MultiByteToWideChar
SizeofResource
LoadResource
FindResourceW
LoadLibraryExW
GetModuleHandleW
SetThreadLocale
GetThreadLocale
OutputDebugStringA
CreateDirectoryW
GetFileAttributesW
GetFileType
RemoveDirectoryW
FindClose
FindNextFileW
DeleteFileW
SetFileAttributesW
FindFirstFileW
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetTempPathW
CloseHandle
SetFilePointer
ReadFile
CreateFileW
WriteFile
GetFileSize
GetCommandLineW
GetDiskFreeSpaceW
GetProcAddress
LoadLibraryW
GetFullPathNameW
lstrcmpW
SetEndOfFile
GetFileSizeEx
CopyFileW
MoveFileExW
WideCharToMultiByte
IsBadReadPtr
GetACP
HeapSize
GetVersion
GetCurrentProcess
GetCurrentProcessId
OpenProcess
lstrcpynW
LoadLibraryA
GetVersionExW
HeapFree
HeapAlloc
GetProcessHeap
SetProcessWorkingSetSize
MoveFileW
Sleep
GetSystemTimeAsFileTime
GetProcessTimes
GetModuleHandleA
GetPrivateProfileStringA
GetFileAttributesA
GetModuleFileNameA
VirtualQuery
QueryPerformanceFrequency
SetProcessAffinityMask
GetProcessAffinityMask
GetLocaleInfoW
GetUserDefaultLCID
GetSystemDefaultLCID
IsValidLocale
GetUserDefaultUILanguage
GetSystemDefaultUILanguage
GetSystemDefaultLangID
GetUserDefaultLangID
SetLocaleInfoW
GetDateFormatW
GetTimeFormatW
GetCalendarInfoW
GetCurrencyFormatW
GetNumberFormatW
GetTimeZoneInformation
FileTimeToSystemTime
FileTimeToLocalFileTime
HeapCompact
GetVolumeInformationW
GetDriveTypeW
CreateProcessW
CreatePipe
DuplicateHandle
GetStdHandle
LockResource
lstrcmpiA
FindResourceExW
FormatMessageW
GlobalFree
SetLastError
LocalFree
WaitForSingleObject
GetSystemDirectoryA
SetEvent
SetThreadPriority
ResetEvent
TerminateThread
WaitForMultipleObjects
CreateEventW
GlobalUnlock
GlobalLock
GlobalAlloc
GlobalSize
ExitThread
ResumeThread
CreateThread
ExitProcess
GetCommandLineA
VirtualFree
VirtualAlloc
HeapDestroy
HeapCreate
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
GetCPInfo
GetOEMCP
IsValidCodePage
EnumSystemLocalesA
GetStringTypeA
GetStringTypeW
SetHandleCount
GetStartupInfoA
LCMapStringA
LCMapStringW
CompareStringA
CompareStringW
GetConsoleCP
GetConsoleMode
FlushFileBuffers
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
CreateFileA
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
SetEnvironmentVariableA
GetCPInfoExW
DeviceIoControl
user32
SendMessageW
KillTimer
SetTimer
CharNextA
CharUpperA
CharLowerA
PostMessageW
CharLowerW
ReleaseDC
GetDC
DestroyWindow
GetDesktopWindow
DrawTextW
RegisterClassExW
CharUpperW
SetWindowLongW
CreateWindowExW
ShowWindow
DefWindowProcW
OpenInputDesktop
GetUserObjectInformationW
GetThreadDesktop
CloseDesktop
UnregisterClassA
IsWindow
IsWindowVisible
GetClassNameW
GetGUIThreadInfo
GetWindowLongW
GetParent
GetWindowRect
GetWindowTextW
SystemParametersInfoW
FindWindowW
GetWindowThreadProcessId
CharNextW
GetIconInfo
GetClassInfoExW
GetSystemMetrics
gdi32
CreateDIBSection
DeleteDC
CreateRectRgn
GetStockObject
ExtCreateRegion
GetDIBits
RealizePalette
SelectObject
GetObjectW
StretchBlt
BitBlt
SetBkColor
CreateBitmap
CreateCompatibleBitmap
RectVisible
StretchDIBits
SetStretchBltMode
SetBkMode
SetTextColor
CreateFontIndirectW
ExtTextOutW
SetDIBitsToDevice
ExtSelectClipRgn
CreateRectRgnIndirect
GetClipBox
CreateDIBitmap
DeleteObject
CreateCompatibleDC
advapi32
RegCloseKey
RegDeleteKeyW
RegDeleteValueW
RegOpenKeyW
RegCreateKeyExW
RegOpenKeyExW
RegSetValueExW
RegQueryInfoKeyW
RegEnumKeyExW
AdjustTokenPrivileges
LookupPrivilegeValueW
GetSidSubAuthority
GetSidSubAuthorityCount
GetTokenInformation
OpenProcessToken
DuplicateTokenEx
RegQueryValueExW
shell32
ShellExecuteExW
ShellExecuteW
SHGetSpecialFolderPathW
SHGetFolderLocation
SHGetPathFromIDListW
SHGetMalloc
ole32
CoTaskMemAlloc
CoTaskMemRealloc
CoTaskMemFree
StringFromGUID2
CoCreateInstance
CoCreateGuid
CoFreeLibrary
CoLoadLibrary
CLSIDFromString
CoGetMalloc
oleaut32
VariantChangeType
SysReAllocStringLen
SysStringLen
SysFreeString
SysAllocString
LoadTypeLi
UnRegisterTypeLi
RegisterTypeLi
VarUI4FromStr
SysAllocStringLen
VariantClear
VariantTimeToSystemTime
VarDateFromStr
VarBstrCmp
VectorFromBstr
BstrFromVector
SysStringByteLen
SysAllocStringByteLen
VariantInit
SafeArrayUnaccessData
SafeArrayAccessData
SafeArrayCreate
LoadRegTypeLi
shlwapi
StrCmpW
wintrust
WTHelperProvDataFromStateData
WinVerifyTrust
CryptCATCatalogInfoFromContext
CryptCATAdminEnumCatalogFromHash
WTHelperGetProvSignerFromChain
CryptCATAdminReleaseCatalogContext
CryptCATAdminAcquireContext
CryptCATAdminReleaseContext
CryptCATAdminCalcHashFromFileHandle
WTHelperGetProvCertFromChain
crypt32
CertGetNameStringW
netapi32
Netbios
rasapi32
RasGetProjectionInfoW
RasEnumConnectionsW
Exports
Exports
??0CCmdCodecBase@@QAE@XZ
??0CExpatDataCompat@@QAE@XZ
??0CExpatFileReader@@QAE@XZ
??0CExpatMemReader@@QAE@XZ
??0CFmtString@@QAE@XZ
??0CMACReader@@QAE@XZ
??0CScopeToggler@@QAE@PA_N_N@Z
??0CTXBSTR@@QAE@ABU_GUID@@@Z
??0CTXBSTR@@QAE@ABV0@@Z
??0CTXBSTR@@QAE@ABVCTXStringW@@@Z
??0CTXBSTR@@QAE@H@Z
??0CTXBSTR@@QAE@HPB_W@Z
??0CTXBSTR@@QAE@PB_W@Z
??0CTXBSTR@@QAE@XZ
??0CTXCommPack@@QAE@ABV0@@Z
??0CTXCommPack@@QAE@XZ
??0CTXCriticalSection@@QAE@ABV0@@Z
??0CTXCriticalSection@@QAE@XZ
??0CTXHttpDownload@@QAE@XZ
??0CTXHttpDownloadSink@@IAE@XZ
??0CTXHttpDownloadSink@@QAE@ABV0@@Z
??0CTXHttpUpload@@QAE@XZ
??0CTXHttpUploadBuffer@@QAE@XZ
??0CTXHttpUploadStandard@@QAE@XZ
??0CTXStringA@@QAE@ABV0@@Z
??0CTXStringA@@QAE@DH@Z
??0CTXStringA@@QAE@PBD@Z
??0CTXStringA@@QAE@PBDH@Z
??0CTXStringA@@QAE@UtagEN@@PB_WH@Z
??0CTXStringA@@QAE@UtagGBK@@PB_WH@Z
??0CTXStringA@@QAE@UtagUTF8@@PB_WH@Z
??0CTXStringA@@QAE@XZ
??0CTXStringW@@QAE@ABU_GUID@@@Z
??0CTXStringW@@QAE@ABUtagVARIANT@@@Z
??0CTXStringW@@QAE@ABV0@@Z
??0CTXStringW@@QAE@ABVCTXBSTR@@@Z
??0CTXStringW@@QAE@H@Z
??0CTXStringW@@QAE@PA_W@Z
??0CTXStringW@@QAE@PB_W@Z
??0CTXStringW@@QAE@PB_WH@Z
??0CTXStringW@@QAE@UtagEN@@PBDH@Z
??0CTXStringW@@QAE@UtagGBK@@PBDH@Z
??0CTXStringW@@QAE@UtagUTF8@@PBDH@Z
??0CTXStringW@@QAE@XZ
??0CTXStringW@@QAE@_WH@Z
??0CTXTCPDataSender@@QAE@XZ
??0CTXTLVCodecBase@@QAE@XZ
??0CTXThreadModel@@IAE@XZ
??0CTXUDPDataSender@@QAE@XZ
??0CTXVariant@@QAE@ABVCTXBuffer@@@Z
??0CxExifInfo@CxImageJPG@@QAE@PAUtag_ExifInfo@1@@Z
??0CxFile@@QAE@ABV0@@Z
??0CxFile@@QAE@PB_WK@Z
??0CxFile@@QAE@XZ
??0CxImage@@QAE@ABV0@_N11@Z
??0CxImage@@QAE@K@Z
??0CxImage@@QAE@KKKK@Z
??0CxImage@@QAE@PAEKK@Z
??0CxImage@@QAE@PAU_iobuf@@K@Z
??0CxImage@@QAE@PAVCxFile@@K@Z
??0CxImage@@QAE@PB_WK@Z
??0CxImageGIF@@QAE@ABV0@@Z
??0CxImageGIF@@QAE@XZ
??0CxImageJPG@@QAE@ABV0@@Z
??0CxImageJPG@@QAE@XZ
??0CxMemFile@@QAE@ABV0@@Z
??0CxMemFile@@QAE@KPAE@Z
??0CxPoint2@@QAE@ABV0@@Z
??0CxPoint2@@QAE@MM@Z
??0CxPoint2@@QAE@XZ
??0CxRect2@@QAE@ABV0@@Z
??0CxRect2@@QAE@MMMM@Z
??0CxRect2@@QAE@XZ
??0TiXmlAttribute@@QAE@PBD0@Z
??0TiXmlAttribute@@QAE@XZ
??0TiXmlAttributeSet@@QAE@XZ
??0TiXmlComment@@QAE@ABV0@@Z
??0TiXmlComment@@QAE@PBD@Z
??0TiXmlComment@@QAE@XZ
??0TiXmlDeclaration@@QAE@ABV0@@Z
??0TiXmlDeclaration@@QAE@PBD00@Z
??0TiXmlDeclaration@@QAE@XZ
??0TiXmlDocument@@IAE@PBD@Z
??0TiXmlDocument@@QAE@ABV0@@Z
??0TiXmlDocument@@QAE@XZ
??0TiXmlElement@@QAE@ABV0@@Z
??0TiXmlElement@@QAE@PBD@Z
??0TiXmlNode@@IAE@W4NodeType@0@@Z
??0TiXmlText@@QAE@ABV0@@Z
??0TiXmlText@@QAE@PBD@Z
??0TiXmlUnknown@@QAE@ABV0@@Z
??0TiXmlUnknown@@QAE@XZ
??0VTXTCPDataSenderTimeOutCallback@@QAE@ABV0@@Z
??0VTXTCPDataSenderTimeOutCallback@@QAE@XZ
??0VTXUDPDataSenderTimeOutCallback@@QAE@ABV0@@Z
??0VTXUDPDataSenderTimeOutCallback@@QAE@XZ
??1CCmdCodecBase@@UAE@XZ
??1CExpatDataCompat@@QAE@XZ
??1CExpatFileReader@@UAE@XZ
??1CExpatMemReader@@UAE@XZ
??1CFmtString@@QAE@XZ
??1CMACReader@@QAE@XZ
??1CScopeToggler@@QAE@XZ
??1CTXBSTR@@QAE@XZ
??1CTXCommPack@@UAE@XZ
??1CTXCriticalSection@@UAE@XZ
??1CTXHttpDownload@@UAE@XZ
??1CTXHttpDownloadSink@@UAE@XZ
??1CTXHttpUpload@@UAE@XZ
??1CTXHttpUploadBuffer@@UAE@XZ
??1CTXHttpUploadStandard@@UAE@XZ
??1CTXStringA@@QAE@XZ
??1CTXStringW@@QAE@XZ
??1CTXTCPDataSender@@UAE@XZ
??1CTXTLVCodecBase@@UAE@XZ
??1CTXThreadModel@@MAE@XZ
??1CTXUDPDataSender@@UAE@XZ
??1CxExifInfo@CxImageJPG@@QAE@XZ
??1CxFile@@UAE@XZ
??1CxImage@@UAE@XZ
??1CxImageGIF@@UAE@XZ
??1CxImageJPG@@UAE@XZ
??1CxMemFile@@UAE@XZ
??1TiXmlAttribute@@UAE@XZ
??1TiXmlAttributeSet@@QAE@XZ
??1TiXmlComment@@UAE@XZ
??1TiXmlDeclaration@@UAE@XZ
??1TiXmlDocument@@UAE@XZ
??1TiXmlElement@@UAE@XZ
??1TiXmlNode@@UAE@XZ
??1TiXmlText@@UAE@XZ
??1TiXmlUnknown@@UAE@XZ
??4CScopeToggler@@QAEAAV0@ABV0@@Z
??4CTXBSTR@@QAEAAV0@ABV0@@Z
??4CTXBSTR@@QAEAAV0@ABVCTXStringW@@@Z
??4CTXBSTR@@QAEAAV0@PB_W@Z
??4CTXCriticalSection@@QAEAAV0@ABV0@@Z
??4CTXHttpDownloadSink@@QAEAAV0@ABV0@@Z
??4CTXStringA@@QAEAAV0@ABV0@@Z
??4CTXStringA@@QAEAAV0@D@Z
??4CTXStringA@@QAEAAV0@PBD@Z
??4CTXStringW@@QAEAAV0@ABUtagVARIANT@@@Z
??4CTXStringW@@QAEAAV0@ABV0@@Z
??4CTXStringW@@QAEAAV0@ABVCTXBSTR@@@Z
??4CTXStringW@@QAEAAV0@PA_W@Z
??4CTXStringW@@QAEAAV0@PB_W@Z
??4CTXStringW@@QAEAAV0@_W@Z
??4CxExifInfo@CxImageJPG@@QAEAAV01@ABV01@@Z
??4CxFile@@QAEAAV0@ABV0@@Z
??4CxImage@@QAEAAV0@ABV0@@Z
??4CxImageGIF@@QAEAAV0@ABV0@@Z
??4CxImageJPG@@QAEAAV0@ABV0@@Z
??4CxMemFile@@QAEAAV0@ABV0@@Z
??4CxPoint2@@QAEAAV0@ABV0@@Z
??4CxRect2@@QAEAAV0@ABV0@@Z
??4TiXmlComment@@QAEXABV0@@Z
??4TiXmlDeclaration@@QAEXABV0@@Z
??4TiXmlDocument@@QAEXABV0@@Z
??4TiXmlElement@@QAEXABV0@@Z
??4TiXmlText@@QAEXABV0@@Z
??4TiXmlUnknown@@QAEXABV0@@Z
??4VTXTCPDataSenderTimeOutCallback@@QAEAAV0@ABV0@@Z
??4VTXUDPDataSenderTimeOutCallback@@QAEAAV0@ABV0@@Z
??7CTXStringA@@QBE_NXZ
??7CTXStringW@@QBE_NXZ
??8@YA_NABVCTXStringA@@0@Z
??8@YA_NABVCTXStringA@@D@Z
??8@YA_NABVCTXStringA@@PBD@Z
??8@YA_NABVCTXStringW@@0@Z
??8@YA_NABVCTXStringW@@PB_W@Z
??8@YA_NABVCTXStringW@@_W@Z
??8@YA_NDABVCTXStringA@@@Z
??8@YA_NPA_WABVCTXBSTR@@@Z
??8@YA_NPA_WABVCTXStringW@@@Z
??8@YA_NPBDABVCTXStringA@@@Z
??8@YA_NPB_WABVCTXBSTR@@@Z
??8@YA_NPB_WABVCTXStringW@@@Z
??8@YA_N_WABVCTXStringW@@@Z
??8CTXBSTR@@QBE_NABV0@@Z
??8CTXBSTR@@QBE_NPA_W@Z
??8CTXBSTR@@QBE_NPB_W@Z
??8TiXmlAttribute@@QBE_NABV0@@Z
??9@YA_NABVCTXStringA@@0@Z
??9@YA_NABVCTXStringA@@D@Z
??9@YA_NABVCTXStringA@@PBD@Z
??9@YA_NABVCTXStringW@@0@Z
??9@YA_NABVCTXStringW@@PB_W@Z
??9@YA_NABVCTXStringW@@_W@Z
??9@YA_NDABVCTXStringA@@@Z
??9@YA_NPA_WABVCTXBSTR@@@Z
??9@YA_NPBDABVCTXStringA@@@Z
??9@YA_NPB_WABVCTXBSTR@@@Z
??9@YA_NPB_WABVCTXStringW@@@Z
??9@YA_N_WABVCTXStringW@@@Z
??9CTXBSTR@@QBE_NABV0@@Z
??9CTXBSTR@@QBE_NPA_W@Z
??9CTXBSTR@@QBE_NPB_W@Z
??ACTXStringA@@QBEDH@Z
??ACTXStringW@@QBE_WH@Z
??BCTXBSTR@@QBEPA_WXZ
??BCTXCriticalSection@@QAEPAU_RTL_CRITICAL_SECTION@@XZ
??BCTXStringA@@QBEPBDXZ
??BCTXStringW@@QBEPB_WXZ
??H@YA?AVCTXStringA@@ABV0@0@Z
??H@YA?AVCTXStringA@@ABV0@D@Z
??H@YA?AVCTXStringA@@ABV0@PBD@Z
??H@YA?AVCTXStringA@@DABV0@@Z
??H@YA?AVCTXStringA@@PBDABV0@@Z
??H@YA?AVCTXStringW@@ABV0@0@Z
??H@YA?AVCTXStringW@@ABV0@PB_W@Z
??H@YA?AVCTXStringW@@ABV0@_W@Z
??H@YA?AVCTXStringW@@PB_WABV0@@Z
??H@YA?AVCTXStringW@@_WABV0@@Z
??ICTXBSTR@@QAEPAPA_WXZ
??M@YA_NABVCTXStringA@@0@Z
??M@YA_NABVCTXStringA@@PBD@Z
??M@YA_NABVCTXStringW@@0@Z
??M@YA_NABVCTXStringW@@PB_W@Z
??M@YA_NPBDABVCTXStringA@@@Z
??M@YA_NPB_WABVCTXStringW@@@Z
??MCTXBSTR@@QBE_NABV0@@Z
??MCTXBSTR@@QBE_NPA_W@Z
??MCTXBSTR@@QBE_NPB_W@Z
??MTiXmlAttribute@@QBE_NABV0@@Z
??N@YA_NABVCTXStringA@@0@Z
??N@YA_NABVCTXStringA@@PBD@Z
??N@YA_NABVCTXStringW@@0@Z
??N@YA_NABVCTXStringW@@PB_W@Z
??N@YA_NPBDABVCTXStringA@@@Z
??N@YA_NPB_WABVCTXStringW@@@Z
??O@YA_NABVCTXStringA@@0@Z
??O@YA_NABVCTXStringA@@PBD@Z
??O@YA_NABVCTXStringW@@0@Z
??O@YA_NABVCTXStringW@@PB_W@Z
??O@YA_NPBDABVCTXStringA@@@Z
??O@YA_NPB_WABVCTXStringW@@@Z
??OCTXBSTR@@QBE_NABV0@@Z
??OCTXBSTR@@QBE_NPA_W@Z
??OCTXBSTR@@QBE_NPB_W@Z
??OTiXmlAttribute@@QBE_NABV0@@Z
??P@YA_NABVCTXStringA@@0@Z
??P@YA_NABVCTXStringA@@PBD@Z
??P@YA_NABVCTXStringW@@0@Z
??P@YA_NABVCTXStringW@@PB_W@Z
??P@YA_NPBDABVCTXStringA@@@Z
??P@YA_NPB_WABVCTXStringW@@@Z
??YCTXBSTR@@QAEAAV0@ABV0@@Z
??YCTXBSTR@@QAEAAV0@ABVCTXStringW@@@Z
??YCTXBSTR@@QAEAAV0@PB_W@Z
??YCTXStringA@@QAEAAV0@ABV0@@Z
??YCTXStringA@@QAEAAV0@D@Z
??YCTXStringA@@QAEAAV0@PBD@Z
??YCTXStringW@@QAEAAV0@ABUtagVARIANT@@@Z
??YCTXStringW@@QAEAAV0@ABV0@@Z
??YCTXStringW@@QAEAAV0@ABVCTXBSTR@@@Z
??YCTXStringW@@QAEAAV0@PB_W@Z
??YCTXStringW@@QAEAAV0@_W@Z
??_7CTXCommPack@@6B@
??_7CTXCriticalSection@@6B@
??_7CTXHttpDownload@@6BCHttpTCPConnectorSink@@@
??_7CTXHttpDownload@@6BCTXThreadModel@@@
??_7CTXHttpDownloadSink@@6B@
??_7CTXHttpUpload@@6BCHttpTCPConnectorSink@@@
??_7CTXHttpUpload@@6BCTXThreadModel@@@
??_7CTXHttpUploadBuffer@@6BCHttpTCPConnectorSink@@@
??_7CTXHttpUploadBuffer@@6BCTXThreadModel@@@
??_7CTXHttpUploadStandard@@6BCHttpTCPConnectorSink@@@
??_7CTXHttpUploadStandard@@6BCTXThreadModel@@@
??_7CTXTCPDataSender@@6B@
??_7CTXUDPDataSender@@6B@
??_7CxFile@@6B@
??_7CxImage@@6B@
??_7CxImageGIF@@6B@
??_7CxImageJPG@@6B@
??_7CxMemFile@@6B@
??_7TiXmlAttribute@@6B@
??_7TiXmlComment@@6B@
??_7TiXmlDeclaration@@6B@
??_7TiXmlDocument@@6B@
??_7TiXmlElement@@6B@
??_7TiXmlNode@@6B@
??_7TiXmlText@@6B@
??_7TiXmlUnknown@@6B@
??_7VTXTCPDataSenderTimeOutCallback@@6B@
??_7VTXUDPDataSenderTimeOutCallback@@6B@
??_FCxExifInfo@CxImageJPG@@QAEXXZ
??_FCxImage@@QAEXXZ
??_FCxMemFile@@QAEXXZ
??_OCxImage@@QAEXAAV0@@Z
?Accept@TiXmlComment@@UBE_NPAVTiXmlVisitor@@@Z
?Accept@TiXmlDeclaration@@UBE_NPAVTiXmlVisitor@@@Z
?Accept@TiXmlDocument@@UBE_NPAVTiXmlVisitor@@@Z
?Accept@TiXmlElement@@UBE_NPAVTiXmlVisitor@@@Z
?Accept@TiXmlText@@UBE_NPAVTiXmlVisitor@@@Z
?Accept@TiXmlUnknown@@UBE_NPAVTiXmlVisitor@@@Z
?Add@TiXmlAttributeSet@@QAEXPAVTiXmlAttribute@@@Z
?AddAveragingCont@CxImage@@IAEXABUtagRGBQUAD@@MAAM111@Z
?AddBuf@CTXCommPack@@QAEHABVCTXBuffer@@@Z
?AddBuf@CTXCommPack@@QAEHPBEI@Z
?AddBufLenByte@CTXCommPack@@QAEHABVCTXBuffer@@@Z
?AddBufLenDWord@CTXCommPack@@QAEHABVCTXBuffer@@H@Z
?AddBufLenWord@CTXCommPack@@QAEHABVCTXBuffer@@H@Z
?AddBundleFile@TXStringBundle@@YAXPB_W0@Z
?AddByte@CTXCommPack@@QAEHE@Z
?AddConfigData@ModuleConfig@@YAJPB_W0@Z
?AddDWord@CTXCommPack@@QAEHKH@Z
?AddEvent@CTXThreadModel@@IAEXPAX@Z
?AddFileSystem@FS@@YAJW4FILESYSTEM_TYPE@@PB_W1HHH@Z
?AddFmtString@TXStringBundle@@YAXABVCFmtString@@@Z
?AddFormData@CTXHttpDownload@@QAEXABVCTXStringW@@0@Z
?AddIdleCallback@Window@Util@@YAJPAVVTXMsgLoopIdleCallback@@@Z
?AddInfo@CTXHttpDownload@@QAEHABVCTXStringW@@0@Z
?AddInfo@CTXHttpDownload@@QAEHABVCTXStringW@@@Z
?AddInfo@CTXHttpDownload@@QAEHABVCTXStringW@@K@Z
?AddInfo@CTXHttpDownload@@QAEHABVCTXStringW@@PBEK@Z
?AddPack@CTXCommPack@@QAEHABV1@@Z
?AddPlugin@CoreCenter@Util@@YAHPA_WPAUITXData@@@Z
?AddRef@CCmdCodecBase@@MAGKXZ
?AddRelativeFileSystem@FS@@YAJPB_W00HH@Z
?AddStrA@CTXCommPack@@QAEHABVCTXStringA@@@Z
?AddStrAEndChar@CTXCommPack@@QAEHABVCTXStringA@@E@Z
?AddStrALenByte@CTXCommPack@@QAEHABVCTXStringA@@@Z
?AddStrALenDWord@CTXCommPack@@QAEHABVCTXStringA@@H@Z
?AddStrALenWord@CTXCommPack@@QAEHABVCTXStringA@@H@Z
?AddStrW@CTXCommPack@@QAEHABVCTXStringW@@@Z
?AddStrWEndChar@CTXCommPack@@QAEHABVCTXStringW@@E@Z
?AddStrWLenByte@CTXCommPack@@QAEHABVCTXStringW@@@Z
?AddStrWLenDWord@CTXCommPack@@QAEHABVCTXStringW@@H@Z
?AddStrWLenWord@CTXCommPack@@QAEHABVCTXStringW@@H@Z
?AddTLV@CTXCommPack@@QAEHEABVCTXBuffer@@W4TXCommPackDataType@@@Z
?AddTLV@CTXCommPack@@QAEHGABVCTXBuffer@@W4TXCommPackDataType@@@Z
?AddTLV@CTXCommPack@@QAEHKABVCTXBuffer@@W4TXCommPackDataType@@@Z
?AddToDeadQueue@Misc@Util@@YAXHP6AXXZ@Z
?AddUInt64@CTXCommPack@@QAEH_KH@Z
?AddVBuf@CTXCommPack@@IAEHABVCTXBuffer@@W4TXCommPackDataType@@@Z
?AddWord@CTXCommPack@@QAEHGH@Z
?Alloc@CxMemFile@@IAEXK@Z
?AllocSysString@CTXStringW@@QBEPA_WXZ
?AlphaClear@CxImage@@QAEXXZ
?AlphaCopy@CxImage@@QAE_NAAV1@@Z
?AlphaCreate@CxImage@@QAEXXZ
?AlphaDelete@CxImage@@QAEXXZ
?AlphaFlip@CxImage@@QAE_NXZ
?AlphaGet@CxImage@@QAEEJJ@Z
?AlphaGetMax@CxImage@@QBEEXZ
?AlphaGetPointer@CxImage@@QAEPAEJJ@Z
?AlphaInvert@CxImage@@QAEXXZ
?AlphaIsValid@CxImage@@QAE_NXZ
?AlphaMirror@CxImage@@QAE_NXZ
?AlphaPaletteClear@CxImage@@QAEXXZ
?AlphaPaletteEnable@CxImage@@QAEX_N@Z
?AlphaPaletteIsEnabled@CxImage@@QAE_NXZ
?AlphaPaletteIsValid@CxImage@@QAE_NXZ
?AlphaPaletteSplit@CxImage@@QAE_NPAV1@@Z
?AlphaSet@CxImage@@QAEXE@Z
?AlphaSet@CxImage@@QAEXJJE@Z
?AlphaSet@CxImage@@QAE_NAAV1@@Z
?AlphaSetMax@CxImage@@QAEXE@Z
?AlphaSplit@CxImage@@QAE_NPAV1@@Z
?AlphaStrip@CxImage@@QAEXXZ
?AnalyseResponseData@CTXHttpDownload@@AAEHAAH@Z
?AnalyseResponseHead@CTXHttpDownload@@AAEHXZ
?AnsiToUnicode@Convert@Util@@YA_NAAVCTXStringW@@PBDH@Z
?Append@CTXBSTR@@QAEJABV1@@Z
?Append@CTXBSTR@@QAEJD@Z
?Append@CTXBSTR@@QAEJPB_W@Z
?Append@CTXBSTR@@QAEJPB_WH@Z
?Append@CTXBSTR@@QAEJ_W@Z
?Append@CTXStringA@@QAEXABV1@@Z
?Append@CTXStringA@@QAEXPBD@Z
?Append@CTXStringA@@QAEXPBDH@Z
?Append@CTXStringW@@QAEXABV1@@Z
?Append@CTXStringW@@QAEXPB_W@Z
?Append@CTXStringW@@QAEXPB_WH@Z
?AppendBSTR@CTXBSTR@@QAEJPA_W@Z
?AppendBSTR@CTXStringW@@QAEXPA_W@Z
?AppendBytes@CTXBSTR@@QAEJPBDH@Z
?AppendChar@CTXStringA@@QAEXD@Z
?AppendChar@CTXStringW@@QAEX_W@Z
?AppendFormat@CTXStringW@@QAAXPB_WZZ
?ApplyProxyInfoToHttp@Network@Util@@YAXXZ
?ApplySettings@CTXTCPDataSender@@IAEXPAUITXData@@PAUtagTXTCPPacket@@@Z
?ApplySettings@CTXUDPDataSender@@IAEXPAUITXData@@PAUtagTXUDPPacket@@@Z
?ArrayToBSTR@CTXBSTR@@QAEJPBUtagSAFEARRAY@@@Z
?AssignBSTR@CTXBSTR@@QAEJQA_W@Z
?Attach@CTXBSTR@@QAEXPA_W@Z
?Attribute@TiXmlElement@@QBEPBDPBD@Z
?Attribute@TiXmlElement@@QBEPBDPBDPAH@Z
?Attribute@TiXmlElement@@QBEPBDPBDPAN@Z
?BIG5ToUnicode@Convert@Util@@YA_NAAVCTXStringW@@PBDH@Z
?BSTRToArray@CTXBSTR@@QAEJPAPAUtagSAFEARRAY@@@Z
?Base64Encode@Encode@Util@@YA?AVCTXStringW@@ABVCTXBuffer@@H@Z
?Bitfield2RGB@CxImage@@IAEXPAEGGGE@Z
?Blank@TiXmlText@@IBE_NXZ
?BlendPalette@CxImage@@QAEXKJ@Z
?BlendPixelColor@CxImage@@QAEXJJUtagRGBQUAD@@M_N@Z
?BlindAlphaGet@CxImage@@IAEEJJ@Z
?BlindGetPixelColor@CxImage@@IAE?AUtagRGBQUAD@@JJ@Z
?BlindGetPixelIndex@CxImage@@IAEEJJ@Z
?BlindGetPixelPointer@CxImage@@IAEPAXJJ@Z
?BrokenCodec@CCmdCodecBase@@IAEXPB_W@Z
?BuildRqHead@CTXHttpDownload@@AAEHAAVCTXStringA@@@Z
?ByteLength@CTXBSTR@@QBEIXZ
?CDATA@TiXmlText@@QBE_NXZ
?CPConvert@Encoding@XmlText@@YAHHPBD@Z
?CRC32@Encode@Util@@YAKKPBEH@Z
?CancelDownload@CTXHttpDownload@@QAEXXZ
?CancelResolve@HostResolve@Util@@YAJK@Z
?CancelUpload@CTXHttpUpload@@QAEXXZ
?CancelUpload@CTXHttpUploadBuffer@@QAEXXZ
?CancelUpload@CTXHttpUploadStandard@@QAEXXZ
?Center@CxRect2@@QBE?AVCxPoint2@@XZ
?ChangeConfig@CCmdCodecBase@@IAEXHH@Z
?ChangeConfig@CTXTLVCodecBase@@IAEX_N@Z
?CheckBufEndChar@CTXCommPack@@QAEHE@Z
?CheckBuffer@CTXCommPack@@IAEHI@Z
?CheckOutOverflow@CTXCommPack@@IAEHI@Z
?CheckRunMode@CTXCommPack@@IAEHW4RunMode@1@@Z
?CheckUinValid@Extend@Util@@YAHPA_W@Z
?CheckVistaAndStartSelfMediumLevel@Sys@Util@@YAHXZ
?CircleTransform@CxImage@@QAE_NHJM@Z
?Clear@CxImage@@QAEXE@Z
?Clear@CxImageGIF@@IAEXEAAUtag_image@1@@Z
?Clear@TiXmlNode@@QAEXXZ
?ClearError@TiXmlDocument@@QAEXXZ
?ClearRequestHeader@CTXHttpDownload@@QAEXXZ
?ClearThis@TiXmlElement@@IAEXXZ
?Clone@TiXmlComment@@UBEPAVTiXmlNode@@XZ
?Clone@TiXmlDeclaration@@UBEPAVTiXmlNode@@XZ
?Clone@TiXmlDocument@@MBEPAVTiXmlNode@@XZ
?Clone@TiXmlElement@@UBEPAVTiXmlNode@@XZ
?Clone@TiXmlText@@MBEPAVTiXmlNode@@XZ
?Clone@TiXmlUnknown@@UBEPAVTiXmlNode@@XZ
?Close@CxMemFile@@UAE_NXZ
?CloseReuseTCP@CTXHttpDownload@@QAEXXZ
?ClrBit@BitManip@Util@@YAXKAAKH@Z
?ClrBit@BitManip@Util@@YAXKAAVCTXBuffer@@H@Z
?ClrBit@BitManip@Util@@YAXKAA_JH@Z
?CodeAddBuffer@CTXTLVCodecBase@@IAEXEPAUITXBuffer@@@Z
?CodeArrayBuffer@CCmdCodecBase@@IAEXXZ
?CodeArrayBufferLenHead@CCmdCodecBase@@IAEXW4CMDFIELDTYPE@@@Z
?CodeArrayLenHead@CCmdCodecBase@@IAEXPB_WW4CMDFIELDTYPE@@H@Z
?CodeArrayNumber@CCmdCodecBase@@IAEXW4TX_DATA_TYPE@@@Z
?CodeArrayString@CCmdCodecBase@@IAEXI@Z
?CodeArrayStringEndChar@CCmdCodecBase@@IAEXD@Z
?CodeArrayStringLenHead@CCmdCodecBase@@IAEXW4CMDFIELDTYPE@@@Z
?CodeArrayTXDataBuffer@CCmdCodecBase@@IAEXPB_W@Z
?CodeArrayTXDataBufferLenHead@CCmdCodecBase@@IAEXPB_WW4CMDFIELDTYPE@@@Z
?CodeArrayTXDataNumber@CCmdCodecBase@@IAEXPB_WW4TX_DATA_TYPE@@@Z
?CodeArrayTXDataString@CCmdCodecBase@@IAEXPB_WI@Z
?CodeArrayTXDataStringEndChar@CCmdCodecBase@@IAEXPB_WD@Z
?CodeArrayTXDataStringLenHead@CCmdCodecBase@@IAEXPB_WW4CMDFIELDTYPE@@@Z
?CodeArrayToEnd@CCmdCodecBase@@IAEXPB_WH@Z
?CodeBuffer@CCmdCodecBase@@IAEXPB_W@Z
?CodeBuffer@CTXTLVCodecBase@@IAEXEPB_WK@Z
?CodeBufferEndChar@CCmdCodecBase@@IAEXPB_WD@Z
?CodeBufferLenHead@CCmdCodecBase@@IAEXPB_WW4CMDFIELDTYPE@@@Z
?CodeByte@CTXTLVCodecBase@@IAEXEPB_W@Z
?CodeByteEx@CTXTLVCodecBase@@IAEXEPB_WE_N1@Z
?CodeChar@CTXTLVCodecBase@@IAEXEPB_W@Z
?CodeCharEx@CTXTLVCodecBase@@IAEXEPB_WD_N1@Z
?CodeDWord@CTXTLVCodecBase@@IAEXEPB_W@Z
?CodeDWordEx@CTXTLVCodecBase@@IAEXEPB_WK_N1@Z
?CodeEndArray@CCmdCodecBase@@IAEXXZ
?CodeInt@CTXTLVCodecBase@@IAEXEPB_W@Z
?CodeIntEx@CTXTLVCodecBase@@IAEXEPB_WH_N1@Z
?CodeNumber@CCmdCodecBase@@IAEXPB_WW4TX_DATA_TYPE@@@Z
?CodeShort@CTXTLVCodecBase@@IAEXEPB_W@Z
?CodeShortEx@CTXTLVCodecBase@@IAEXEPB_WF_N1@Z
?CodeString@CCmdCodecBase@@IAEXPB_WI@Z
?CodeStringEndChar@CCmdCodecBase@@IAEXPB_WD@Z
?CodeStringLenHead@CCmdCodecBase@@IAEXPB_WW4CMDFIELDTYPE@@@Z
?CodeTXData@CCmdCodecBase@@UAGJPAUITXData@@PAPAUITXBuffer@@@Z
?CodeWord@CTXTLVCodecBase@@IAEXEPB_W@Z
?CodeWordEx@CTXTLVCodecBase@@IAEXEPB_WG_N1@Z
?CodecTLV@CTXTLVCodecBase@@UAGJKPAUITXData@@PAPAUITXBuffer@@@Z
?Collate@CTXStringW@@QBEHPB_W@Z
?CollateNoCase@CTXStringW@@QBEHPB_W@Z
?Colorize@CxImage@@QAE_NEEM@Z
?Colorize@CxImage@@QAE_NNNN@Z
?Combine@CxImage@@QAE_NPAV1@000J@Z
?CombinePath@FS@Util@@YA?AVCTXStringW@@ABV3@0@Z
?CombineQNC@FS@@YA?AVCTXStringW@@PB_W0@Z
?CommitChange@FS@@YAHPB_W@Z
?Compare@CTXStringA@@QBEHPBD@Z
?Compare@CTXStringW@@QBEHPB_W@Z
?CompareColors@CxImage@@KAHPBX0@Z
?CompareNoCase@CTXStringA@@QBEHPBD@Z
?CompareNoCase@CTXStringW@@QBEHPB_W@Z
?ConnectToServer@CTXHttpDownload@@AAEHXZ
?Contour@CxImage@@QAE_NXZ
?ConventAnsiBufferToBSTR@SSOConvert@Util@@YAHAAVCTXBuffer@@AAVCTXBSTR@@H@Z
?ConvertAnyFormat@CxExifInfo@CxImageJPG@@IAENPAXH@Z
?ConvertTXArraySpecialLabel@Convert@Util@@YAHPAUITXArray@@PA_W@Z
?ConvertTXArrayStringBundle@Convert@Util@@YAHPAUITXArray@@@Z
?ConvertTXBufferToTXSSOBuffer@SSOConvert@Util@@YAJPAUITXBuffer@@PAPAUITXSSOBuffer@@@Z
?ConvertTXDataSpecialLabel@Convert@Util@@YAHPAUITXData@@PA_W@Z
?ConvertTXDataStringBundle@Convert@Util@@YAHPAUITXData@@@Z
?ConvertTXDataToTXSSOData@SSOConvert@Util@@YAJPAUITXData@@PAPAUITXSSOData@@@Z
?ConvertTXDataToXML@Convert@Util@@YAHPA_WPAUITXDataRead@@0@Z
Sections
.text Size: 936KB - Virtual size: 935KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 412KB - Virtual size: 409KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 32KB - Virtual size: 38KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 16KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 56KB - Virtual size: 55KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
$TEMP/TXSSO/bin/SSOLUIControl.dll.dll regsvr32 windows:4 windows x86 arch:x86
89b5043bf995ecf48dbc4c2b7764f65e
Code Sign
38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5Certificate
IssuerCN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=USNot Before15-06-2007 00:00Not After14-06-2012 23:59SubjectCN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=USExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageContentCommitment
47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4Certificate
IssuerCN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZANot Before04-12-2003 00:00Not After03-12-2013 23:59SubjectCN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=USExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageCertSign
KeyUsageCRLSign
65:52:26:e1:b2:2e:18:e1:59:0f:29:85:ac:22:e7:5cCertificate
IssuerOU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=USNot Before21-05-2009 00:00Not After20-05-2019 23:59SubjectCN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=USExtended Key Usages
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
Key Usages
KeyUsageCertSign
KeyUsageCRLSign
5d:06:88:f9:04:0a:d5:22:87:fc:32:ad:ec:eb:85:b0Certificate
IssuerCN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=USNot Before26-01-2010 00:00Not After25-01-2013 23:59SubjectCN=Tencent Technology(Shenzhen) Company Limited,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Tencent Technology(Shenzhen) Company Limited,L=shenzhen,ST=guangdong,C=CNExtended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
2a:43:d2:4f:d7:d5:67:67:15:0f:06:65:6a:69:d4:a9:af:43:6d:3aSigner
Actual PE Digest2a:43:d2:4f:d7:d5:67:67:15:0f:06:65:6a:69:d4:a9:af:43:6d:3aDigest Algorithmsha1PE Digest MatchestrueHeaders
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
h:\Hummer\basebuilder_hummerplatformProj_int\Basic_HummerPlatform_VOB\Platform\SSOPlatform\TXSSO\output\bin\SSOLUIControl.pdb
Imports
ssocommon
?StringToIntW@Convert@Util@@YA_NPB_WAAH@Z
?Mid@CTXStringW@@QBE?AV1@HH@Z
??H@YA?AVCTXStringW@@ABV0@0@Z
?Empty@CTXStringW@@QAEXXZ
?OpenUrlWithDefault@UrlBase@Util@@YAXABVCTXStringW@@@Z
??0CTXBSTR@@QAE@ABVCTXStringW@@@Z
?IsEmpty@CTXStringW@@QBE_NXZ
?Delete@CTXStringW@@QAEHHH@Z
??YCTXStringW@@QAEAAV0@ABV0@@Z
?AddBufLenWord@CTXCommPack@@QAEHABVCTXBuffer@@H@Z
?SetAsyncCallback@TXTimer@@YAHPAUITXAsyncCallback@@I@Z
?EraseAsyncCallback@TXTimer@@YAHPAUITXAsyncCallback@@I@Z
??0CTXStringW@@QAE@ABVCTXBSTR@@@Z
?SetInterval@TXTimer@@YAHIPAUITXTimerCallback@@I@Z
?Format@CTXStringW@@QAAXPB_WZZ
?SBCToDBC@Convert@Util@@YA_NAAVCTXStringW@@@Z
??0CTXStringA@@QAE@UtagUTF8@@PB_WH@Z
?AddStrALenByte@CTXCommPack@@QAEHABVCTXStringA@@@Z
?Mid@CTXStringW@@QBE?AV1@H@Z
?Find@CTXStringW@@QBEH_WH@Z
??8@YA_NABVCTXStringW@@PB_W@Z
?Length@CTXBSTR@@QBEIXZ
??8CTXBSTR@@QBE_NPB_W@Z
??M@YA_NABVCTXStringW@@0@Z
??1CTXStringA@@QAE@XZ
?GetBufferOut@CTXCommPack@@QAEHAAVCTXBuffer@@@Z
?EraseTimerCallback@TXTimer@@YAHPAUITXTimerCallback@@I@Z
?Detach@CTXBSTR@@QAEPA_WXZ
?GetBuffer@CTXStringW@@QAEPA_WH@Z
?ReleaseBuffer@CTXStringW@@QAEXH@Z
?GetLCID@TXI18N@@YAKXZ
??0CTXStringW@@QAE@PA_W@Z
??0CTXStringW@@QAE@ABV0@@Z
?GetLength@CTXStringW@@QBEHXZ
??ACTXStringW@@QBE_WH@Z
?Left@CTXStringW@@QBE?AV1@H@Z
?ReverseFind@CTXStringW@@QBEH_W@Z
??0CTXBSTR@@QAE@ABV0@@Z
??4CTXBSTR@@QAEAAV0@PB_W@Z
??4CTXStringW@@QAEAAV0@PB_W@Z
?GetBSTRPtr@CTXStringW@@QAEPAPA_WXZ
?SetBufferIn@CTXCommPack@@QAEXPBEIH@Z
?ConvertTXSSOBufferToTXBuffer@SSOConvert@Util@@YAJPAUITXSSOBuffer@@PAPAUITXBuffer@@@Z
?ConvertTXSSODataToTXData@SSOConvert@Util@@YAJPAUITXSSOData@@PAPAUITXData@@@Z
?StringToDWordW@Convert@Util@@YA_NPB_WAAK@Z
??0CTXBSTR@@QAE@XZ
?IsEmpty@CTXBSTR@@QAEHXZ
?CreateTXData@Data@Util@@YAHPAPAUITXData@@@Z
??ICTXBSTR@@QAEPAPA_WXZ
?GetBuf@CTXCommPack@@QAEHPAEHH@Z
?GetWord@CTXCommPack@@QAEHAAGHH@Z
??0CTXStringW@@QAE@XZ
?GetString@CTXCommPack@@QAEHAAVCTXStringW@@HHH@Z
?GetDWord@CTXCommPack@@QAEHAAKHH@Z
?GetByte@CTXCommPack@@QAEHAAEH@Z
??1CTXBSTR@@QAE@XZ
??0CTXBSTR@@QAE@PB_W@Z
?GetBSTR@CTXStringW@@QBEPA_WXZ
??BCTXBSTR@@QBEPA_WXZ
??1CTXCommPack@@UAE@XZ
??0CTXCommPack@@QAE@XZ
??0CTXStringW@@QAE@PB_W@Z
??YCTXStringW@@QAEAAV0@PB_W@Z
??BCTXStringW@@QBEPB_WXZ
?LoadStringW@TXStringBundle@@YAPB_WPB_W@Z
??1CTXStringW@@QAE@XZ
?CreateTXBuffer@Data@Util@@YAHPAPAUITXBuffer@@@Z
??0CxImage@@QAE@K@Z
??1CxImage@@UAE@XZ
?Draw@CxImage@@QAEJPAUHDC__@@JJJJPAUtagRECT@@PAK_N@Z
??0CxMemFile@@QAE@KPAE@Z
?LoadGif@CxImageHelper@@YAPAVCxImage@@PAVCxFile@@AAH@Z
?GetWidth@CxImage@@QBEKXZ
?Load@CxImage@@QAE_NPAVCxFile@@K@Z
?GetHeight@CxImage@@QBEKXZ
??1CxMemFile@@UAE@XZ
??4CTXStringW@@QAEAAV0@ABVCTXBSTR@@@Z
?LoadXmlByName@FS@Util@@YAHPB_WPAPAUIXMLDOMDocument@@@Z
??H@YA?AVCTXStringW@@ABV0@PB_W@Z
?GetLocalePath@TXI18N@@YA?AVCTXStringW@@PB_W@Z
?Utf8ToWS@Convert@Util@@YA?AVCTXStringW@@PBDH@Z
?MakeUpper@CTXStringW@@QAEAAV1@XZ
?Trim@CTXStringW@@QAEAAV1@XZ
??4CTXStringW@@QAEAAV0@ABV0@@Z
kernel32
SetEnvironmentVariableA
CompareStringW
CompareStringA
CreateFileA
GetStringTypeW
GetStringTypeA
WriteConsoleA
WriteConsoleW
GetConsoleOutputCP
GetVersionExA
InterlockedCompareExchange
HeapFree
GetProcessHeap
HeapAlloc
LoadLibraryA
IsProcessorFeaturePresent
VirtualFree
VirtualAlloc
InterlockedExchange
GetACP
GetLocaleInfoA
HeapDestroy
HeapReAlloc
HeapSize
RtlUnwind
VirtualProtect
GetModuleHandleA
GetSystemInfo
VirtualQuery
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetCommandLineA
CloseHandle
WriteFile
GetConsoleCP
GetConsoleMode
LockResource
LoadResource
SizeofResource
FindResourceW
lstrlenW
RaiseException
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSection
DeleteCriticalSection
GetLastError
lstrcmpiW
GetModuleFileNameW
InterlockedIncrement
InterlockedDecrement
FreeLibrary
MultiByteToWideChar
LoadLibraryExW
GetModuleHandleW
SetThreadLocale
GetThreadLocale
GetProcAddress
GetCurrentProcessId
FlushInstructionCache
GetCurrentProcess
lstrlenA
MulDiv
GlobalUnlock
GlobalLock
GlobalAlloc
GetCurrentThreadId
WideCharToMultiByte
SetLastError
lstrcpynW
GetTickCount
SetStdHandle
GetSystemTimeAsFileTime
QueryPerformanceCounter
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
LCMapStringW
LCMapStringA
IsValidCodePage
GetOEMCP
GetCPInfo
GetTimeZoneInformation
Sleep
GetModuleFileNameA
ExitProcess
HeapCreate
TlsFree
TlsSetValue
TlsAlloc
TlsGetValue
FlushFileBuffers
GetStartupInfoA
GetFileType
GetStdHandle
SetHandleCount
SetFilePointer
user32
EnableWindow
IsDialogMessageW
GetDesktopWindow
DialogBoxParamW
DrawTextW
GetWindow
MapWindowPoints
EndDialog
GetSystemMetrics
GetCapture
ReleaseCapture
SystemParametersInfoW
SetCursor
GetSysColor
InflateRect
SetScrollInfo
GetScrollInfo
ShowScrollBar
GetScrollPos
SetCapture
IsWindowVisible
PostMessageW
ScreenToClient
SendMessageW
GetWindowRect
MoveWindow
CreateDialogParamW
FillRect
GetSysColorBrush
SetWindowTextW
GetWindowTextLengthW
GetWindowTextW
CreateWindowExW
RegisterClassExW
GetKeyState
IsWindow
GetParent
GetFocus
IsChild
SetFocus
GetDC
ReleaseDC
LoadCursorW
GetClassInfoExW
ShowWindow
UnionRect
PtInRect
GetClientRect
IntersectRect
EqualRect
OffsetRect
SetWindowRgn
SetWindowPos
DestroyWindow
MessageBoxW
CharNextW
CallWindowProcW
GetWindowLongW
SetWindowLongW
DefWindowProcW
KillTimer
SetTimer
InvalidateRect
GetUpdateRect
EndPaint
BeginPaint
GetDlgItem
UnregisterClassA
gdi32
CloseMetaFile
RestoreDC
SetWindowExtEx
DeleteMetaFile
SaveDC
CreateMetaFileW
CreateDCW
GetDeviceCaps
GetClipRgn
CreateRectRgn
SelectClipRgn
Rectangle
SetTextAlign
TextOutW
SetWindowOrgEx
DPtoLP
GetTextExtentExPointW
GetObjectW
CreateRectRgnIndirect
CreateFontIndirectW
CreateSolidBrush
SetBkColor
GetStockObject
SetTextColor
SetBkMode
SelectObject
DeleteObject
LPtoDP
SetMapMode
SetViewportOrgEx
DeleteDC
advapi32
RegDeleteKeyW
RegCloseKey
RegCreateKeyExW
RegOpenKeyExW
RegSetValueExW
RegQueryInfoKeyW
RegEnumKeyExW
RegDeleteValueW
ole32
OleSaveToStream
WriteClassStm
CreateDataAdviseHolder
OleRegGetMiscStatus
OleRegGetUserType
OleRegEnumVerbs
OleLoadFromStream
CoLoadLibrary
CoCreateInstance
StringFromGUID2
CoTaskMemFree
CoTaskMemRealloc
CoTaskMemAlloc
CreateOleAdviseHolder
oleaut32
VariantClear
VarUI4FromStr
RegisterTypeLi
UnRegisterTypeLi
LoadTypeLi
SysAllocString
SysFreeString
SysStringLen
VariantInit
SysAllocStringByteLen
SysStringByteLen
VariantChangeType
OleCreatePropertyFrame
LoadRegTypeLi
wininet
InternetCrackUrlA
Exports
Exports
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Sections
.text Size: 220KB - Virtual size: 218KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 72KB - Virtual size: 69KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 20KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 108KB - Virtual size: 105KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 28KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
$TEMP/TXSSO/bin/SSOPlatform.dll.dll regsvr32 windows:4 windows x86 arch:x86
bd3129ecfddc67f73dec950f0620ccaa
Code Sign
38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5Certificate
IssuerCN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=USNot Before15-06-2007 00:00Not After14-06-2012 23:59SubjectCN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=USExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageContentCommitment
47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4Certificate
IssuerCN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZANot Before04-12-2003 00:00Not After03-12-2013 23:59SubjectCN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=USExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageCertSign
KeyUsageCRLSign
65:52:26:e1:b2:2e:18:e1:59:0f:29:85:ac:22:e7:5cCertificate
IssuerOU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=USNot Before21-05-2009 00:00Not After20-05-2019 23:59SubjectCN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=USExtended Key Usages
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
Key Usages
KeyUsageCertSign
KeyUsageCRLSign
5d:06:88:f9:04:0a:d5:22:87:fc:32:ad:ec:eb:85:b0Certificate
IssuerCN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=USNot Before26-01-2010 00:00Not After25-01-2013 23:59SubjectCN=Tencent Technology(Shenzhen) Company Limited,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Tencent Technology(Shenzhen) Company Limited,L=shenzhen,ST=guangdong,C=CNExtended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
d8:b9:72:14:fb:fa:94:aa:e0:d7:43:f5:35:bd:c3:86:34:d8:ed:26Signer
Actual PE Digestd8:b9:72:14:fb:fa:94:aa:e0:d7:43:f5:35:bd:c3:86:34:d8:ed:26Digest Algorithmsha1PE Digest MatchestrueHeaders
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
h:\Hummer\basebuilder_hummerplatformProj_int\Basic_HummerPlatform_VOB\Platform\SSOPlatform\TXSSO\output\bin\SSOPlatform.pdb
Imports
ws2_32
inet_addr
ssocommon
?CodeStringLenHead@CCmdCodecBase@@IAEXPB_WW4CMDFIELDTYPE@@@Z
?DecodeStringLenHead@CCmdCodecBase@@IAEXPB_WW4CMDFIELDTYPE@@@Z
?GetDecodeNumberUnsigned@CCmdCodecBase@@IAEKPB_W@Z
?DecodeString@CCmdCodecBase@@IAEXPB_WI@Z
?IsDecodeReachEnd@CCmdCodecBase@@IAEHXZ
?ChangeConfig@CCmdCodecBase@@IAEXHH@Z
?DecodeEndArray@CCmdCodecBase@@IAEXXZ
?DecodeArrayTXDataNumber@CCmdCodecBase@@IAEXPB_WW4TX_DATA_TYPE@@@Z
?DecodeArrayLenHead@CCmdCodecBase@@IAEXPB_WW4CMDFIELDTYPE@@H@Z
?BrokenCodec@CCmdCodecBase@@IAEXPB_W@Z
?Mid@CTXStringW@@QBE?AV1@H@Z
?Left@CTXStringW@@QBE?AV1@H@Z
?Find@CTXStringW@@QBEH_WH@Z
??0CTXStringW@@QAE@UtagUTF8@@PBDH@Z
??0CTXStringA@@QAE@PBDH@Z
??0CTXBSTR@@QAE@HPB_W@Z
?GetBuffer@CTXStringW@@QAEPA_WH@Z
?GetBuffer@CTXStringA@@QAEPADH@Z
?CodeBuffer@CCmdCodecBase@@IAEXPB_W@Z
??0CTXStringA@@QAE@UtagGBK@@PB_WH@Z
?StringToDWordW@Convert@Util@@YA_NPB_WAAK@Z
??7CTXStringW@@QBE_NXZ
??4CTXStringW@@QAEAAV0@PB_W@Z
?SetAsyncCallback@TXTimer@@YAHPAUITXAsyncCallback@@I@Z
?EraseAsyncCallback@TXTimer@@YAHPAUITXAsyncCallback@@I@Z
?ToLower@CTXBSTR@@QAEJXZ
?GetClientType@ClientType@ProductConfig@Util@@YAJPAK@Z
?GetPlatformCore@Core@Util@@YAHPAPAUITXCore@@@Z
?CreateChannel@Connection@Util@@YAJHPAPAUITXChannel@@@Z
?GetMemoryUsage@Sys@Util@@YAXAAK0@Z
?Encode16@Encode@Util@@YA?AVCTXStringW@@PBXI@Z
?IsCSSubSendData@Misc@Util@@YAHPAUITXData@@@Z
??H@YA?AVCTXStringW@@PB_WABV0@@Z
?Replace@CTXStringW@@QAEHPB_W0@Z
??YCTXStringW@@QAEAAV0@ABV0@@Z
?GetLCID@TXI18N@@YAKXZ
??YCTXStringW@@QAEAAV0@PB_W@Z
wcslcat
?DecodeNumber@CCmdCodecBase@@IAEXPB_WW4TX_DATA_TYPE@@@Z
?DecodeBuffer@CCmdCodecBase@@IAEXPB_WI@Z
?CodeNumber@CCmdCodecBase@@IAEXPB_WW4TX_DATA_TYPE@@@Z
?CodeBufferLenHead@CCmdCodecBase@@IAEXPB_WW4CMDFIELDTYPE@@@Z
?OnRedirected@CTXHttpDownloadSink@@UAEXPAVCTXHttpDownload@@PB_W@Z
?OnProgress@CTXHttpDownloadSink@@UAEXPAVCTXHttpDownload@@KK@Z
?OnDownloadStart@CTXHttpDownloadSink@@UAEXPAVCTXHttpDownload@@KK@Z
?OnConnected@CTXHttpDownloadSink@@UAEXPAVCTXHttpDownload@@@Z
?OnConnecting@CTXHttpDownloadSink@@UAEXPAVCTXHttpDownload@@PB_W@Z
??0CTXHttpDownloadSink@@IAE@XZ
??0CTXHttpDownload@@QAE@XZ
?SetUIInterface@CTXHttpDownload@@QAEXPAVCTXHttpDownloadSink@@@Z
??1CTXHttpDownloadSink@@UAE@XZ
??1CTXHttpDownload@@UAE@XZ
?GetDownloadedFilePath@CTXHttpDownload@@QAEHAAVCTXStringW@@@Z
?CreateFileW@FS@@YAHPB_WKPAPAUITXFile@@@Z
?QueryInfo@CTXHttpDownload@@QAEHABVCTXStringW@@AAV2@H@Z
?EnableUnicodeString@CCmdCodecBase@@IAEXH@Z
?GetBSTRPtr@CTXStringW@@QAEPAPA_WXZ
?Download@CTXHttpDownload@@QAEHPB_WPAU_SYSTEMTIME@@0H@Z
?GetTXDataBuf@Data@Util@@YAHPAUITXDataRead@@PB_WAAVCTXBuffer@@@Z
?Generate@CComputerIDGenerator@@QAEKPAE@Z
?AddPack@CTXCommPack@@QAEHABV1@@Z
?GenerateEx@CComputerIDGenerator@@QAEHPAE@Z
?GetBufferByteLeft@CTXCommPack@@QBEHXZ
?ConventAnsiBufferToBSTR@SSOConvert@Util@@YAHAAVCTXBuffer@@AAVCTXBSTR@@H@Z
?GetBuf@CTXCommPack@@QAEHPAPBEHH@Z
?AddStrALenWord@CTXCommPack@@QAEHABVCTXStringA@@H@Z
?SetTimeout@TXTimer@@YAHIPAUITXTimerCallback@@I@Z
?AddBufLenWord@CTXCommPack@@QAEHABVCTXBuffer@@H@Z
?AddByte@CTXCommPack@@QAEHE@Z
?AddBuf@CTXCommPack@@QAEHABVCTXBuffer@@@Z
?GetBufferOut@CTXCommPack@@QAEHAAVCTXBuffer@@@Z
?AddWord@CTXCommPack@@QAEHGH@Z
?AddDWord@CTXCommPack@@QAEHKH@Z
?CRC32@Encode@Util@@YAKKPBEH@Z
?Empty@CTXBSTR@@QAEXXZ
?GetBinDir@Dir@Util@@YA?AVCTXStringW@@XZ
?GetParentDir@FS@Util@@YA?AVCTXStringW@@V3@@Z
?IsFileExist@FS@@YAHPB_W@Z
??0CTXStringW@@QAE@ABV0@@Z
?Attach@CTXBSTR@@QAEXPA_W@Z
?Detach@CTXBSTR@@QAEPA_WXZ
?GetAt@CTXStringW@@QBE_WH@Z
?Empty@CTXStringW@@QAEXXZ
??YCTXStringW@@QAEAAV0@_W@Z
?CreateTXArray@Data@Util@@YAHPAPAUITXArray@@@Z
?LoadXmlByName@FS@Util@@YAHPB_WPAPAUIXMLDOMDocument@@@Z
?StringToIP@Network@Util@@YAKPB_W@Z
?IPToString@Network@Util@@YA?AVCTXStringW@@K@Z
?Random@Sys@Util@@YAHXZ
?GetLCID@NLS@@YAKXZ
?GetTimeOffsetUTC@NLS@@YAJXZ
??0CTXStringA@@QAE@UtagUTF8@@PB_WH@Z
??BCTXStringA@@QBEPBDXZ
??1CTXStringA@@QAE@XZ
?GetHostByName@HostResolve@Util@@YAJPA_WPAPA_W@Z
?Resolve@HostResolve@Util@@YAJPA_WPAUITXHostResolverSink@@PAK@Z
??0CTXStringW@@QAE@PB_WH@Z
?CancelResolve@HostResolve@Util@@YAJK@Z
??1CCmdCodecBase@@UAE@XZ
?DecodeBuffer@CCmdCodecBase@@UAGJPAUITXBuffer@@PAPAUITXData@@PAU3@@Z
?CodeTXData@CCmdCodecBase@@UAGJPAUITXData@@PAPAUITXBuffer@@@Z
?Release@CCmdCodecBase@@MAGKXZ
?AddRef@CCmdCodecBase@@MAGKXZ
?QueryInterface@CCmdCodecBase@@MAGJABU_GUID@@PAPAX@Z
??0CCmdCodecBase@@QAE@XZ
?GetIEProxySetting@Network@Util@@YAHPAUITXData@@AAE@Z
?GetIEProxyUserName@Network@Util@@YAHAAVCTXStringW@@0@Z
?IsEmpty@CTXStringW@@QBE_NXZ
?GetBSTR@CTXStringW@@QBEPA_WXZ
??0CTXCommPack@@QAE@XZ
?SetBufferIn@CTXCommPack@@QAEXAAVCTXBuffer@@H@Z
?GetWord@CTXCommPack@@QAEHAAGHH@Z
?GetByte@CTXCommPack@@QAEHAAEH@Z
?Decode16@Encode@Util@@YAHABVCTXStringW@@AAVCTXBuffer@@@Z
?DecodeBufferLenHead@CCmdCodecBase@@IAEXPB_WW4CMDFIELDTYPE@@@Z
?GetBuf@CTXCommPack@@QAEHPAEHH@Z
?GetDWord@CTXCommPack@@QAEHAAKHH@Z
?Utf8ToWS@Convert@Util@@YA?AVCTXStringW@@PBDH@Z
??0CTXBSTR@@QAE@ABVCTXStringW@@@Z
??1CTXCommPack@@UAE@XZ
?TrimLeft@CTXStringW@@QAEAAV1@XZ
?TrimRight@CTXStringW@@QAEAAV1@XZ
??ACTXStringW@@QBE_WH@Z
??0CTXStringW@@QAE@PA_W@Z
?GetProcessName@SystemHelp@Util@@YA?AVCTXStringW@@K@Z
?CopyTXDataField@Data@Util@@YAHPAUITXDataRead@@PAUITXData@@PB_W2@Z
?CreateTXData@Data@Util@@YAHPAPAUITXData@@@Z
?ConvertTXSSOBufferToTXBuffer@SSOConvert@Util@@YAJPAUITXSSOBuffer@@PAPAUITXBuffer@@@Z
??8CTXBSTR@@QBE_NABV0@@Z
?ConvertTXSSODataToTXData@SSOConvert@Util@@YAJPAUITXSSOData@@PAPAUITXData@@@Z
??0CTXStringW@@QAE@ABVCTXBSTR@@@Z
?ConvertTXDataToTXSSOData@SSOConvert@Util@@YAJPAUITXData@@PAPAUITXSSOData@@@Z
??MCTXBSTR@@QBE_NABV0@@Z
?CreateTXBuffer@Data@Util@@YAHPAPAUITXBuffer@@@Z
??4CTXBSTR@@QAEAAV0@ABV0@@Z
??0CTXBSTR@@QAE@ABV0@@Z
??4CTXBSTR@@QAEAAV0@PB_W@Z
?GetUserDefaultLCID@NLS@@YAKXZ
?SetLCID@NLS@@YAHK@Z
?NotifyIdle@TXTimer@@YAXXZ
?SetUserLCID@TXI18N@@YAXK@Z
?IsEmpty@CTXBSTR@@QAEHXZ
?GetRootDir@Dir@Util@@YA?AVCTXStringW@@XZ
??H@YA?AVCTXStringW@@ABV0@PB_W@Z
??4CTXStringW@@QAEAAV0@ABV0@@Z
??4CTXStringW@@QAEAAV0@ABVCTXBSTR@@@Z
?SetConfigFile@TXI18N@@YAHPB_W0@Z
?OnExitCoreCenter@Misc@Util@@YAXXZ
?OnUninitCom@Misc@Util@@YAXXZ
?OnExitWinMain@Misc@Util@@YAXXZ
?InitNetwork@Network@Util@@YAHXZ
?GetSSOTempDir@Dir@Util@@YA?AVCTXStringW@@XZ
??0CTXStringW@@QAE@PB_W@Z
??H@YA?AVCTXStringW@@ABV0@0@Z
?InitDownloadTempDirectory@CTXHttpDownload@@SAXPB_W@Z
?SetInterval@TXTimer@@YAHIPAUITXTimerCallback@@I@Z
?Length@CTXBSTR@@QBEIXZ
?CreateTXArray@SSOData@Util@@YAHPAPAUITXSSOArray@@@Z
??ICTXBSTR@@QAEPAPA_WXZ
??8CTXBSTR@@QBE_NPA_W@Z
?EraseTimerCallback@TXTimer@@YAHPAUITXTimerCallback@@I@Z
?CopyTXDataField@SSOData@Util@@YAHPAUITXSSODataRead@@PAUITXSSOData@@PB_W2@Z
??BCTXStringW@@QBEPB_WXZ
?CreateTXBuffer@SSOData@Util@@YAHPAPAUITXSSOBuffer@@@Z
?CreateTXData@SSOData@Util@@YAHPAPAUITXSSOData@@@Z
??0CTXBSTR@@QAE@XZ
?Format@CTXStringW@@QAAXPB_WZZ
?TXLog_DoTXLogVW@@YAXPAUtagLogObj@@PB_W1PAD@Z
??0CTXBSTR@@QAE@PB_W@Z
??0CTXStringW@@QAE@XZ
??1CTXStringW@@QAE@XZ
?Find@CTXStringW@@QBEHPB_WH@Z
?GetLength@CTXStringW@@QBEHXZ
??4CTXStringW@@QAEAAV0@PA_W@Z
??0CTXBSTR@@QAE@ABU_GUID@@@Z
??BCTXBSTR@@QBEPA_WXZ
??1CTXBSTR@@QAE@XZ
?GetLength@CTXStringA@@QBEHXZ
version
VerQueryValueW
GetFileVersionInfoSizeW
GetFileVersionInfoW
kernel32
VirtualFree
GetProcessHeap
GetCommandLineA
GetSystemTimeAsFileTime
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
VirtualAlloc
TerminateProcess
HeapReAlloc
RtlUnwind
HeapFree
HeapAlloc
GetVersionExA
GetLocaleInfoA
GetACP
InterlockedExchange
GetCurrentProcess
HeapDestroy
GetOEMCP
IsValidCodePage
HeapCreate
GetUserDefaultLCID
EnumSystemLocalesA
IsValidLocale
GetStringTypeA
GetStringTypeW
HeapSize
SetHandleCount
lstrlenW
RaiseException
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSection
DeleteCriticalSection
GetLastError
lstrcmpiW
GetModuleFileNameW
OutputDebugStringA
InterlockedIncrement
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetModuleHandleA
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameA
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
GetCPInfo
Sleep
GetEnvironmentStringsW
LCMapStringA
LCMapStringW
GetLocaleInfoW
LocalAlloc
LoadLibraryA
GetProcAddress
CreateDirectoryW
VirtualProtect
GlobalAlloc
GlobalFree
GetSystemDirectoryW
GetVolumeInformationW
GetDiskFreeSpaceExW
GetFileAttributesW
GetVersionExW
LocalFree
CreateFileMappingW
MapViewOfFile
UnmapViewOfFile
ReleaseMutex
WaitForSingleObject
CreateMutexW
OpenMutexW
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
CloseHandle
GetThreadLocale
SetThreadLocale
GetModuleHandleW
LoadLibraryExW
FindResourceW
LoadResource
SizeofResource
MultiByteToWideChar
FreeLibrary
InterlockedDecrement
user32
SendMessageW
CharNextW
GetWindowThreadProcessId
IsWindow
PostMessageW
UnregisterClassA
GetDesktopWindow
advapi32
ConvertStringSecurityDescriptorToSecurityDescriptorW
RegDeleteValueW
RegCloseKey
RegCreateKeyExW
RegOpenKeyExW
RegSetValueExW
RegQueryInfoKeyW
RegEnumKeyExW
SetSecurityDescriptorSacl
GetSecurityDescriptorSacl
SetSecurityDescriptorDacl
InitializeSecurityDescriptor
RegQueryValueExW
RegDeleteKeyW
shell32
SHGetSpecialFolderPathW
ole32
CoTaskMemFree
StringFromGUID2
CoCreateInstance
CoTaskMemRealloc
CoTaskMemAlloc
oleaut32
SysFreeString
SysAllocString
LoadTypeLi
UnRegisterTypeLi
RegisterTypeLi
VarUI4FromStr
LoadRegTypeLi
VariantInit
VariantClear
SysStringLen
Exports
Exports
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Sections
.text Size: 352KB - Virtual size: 349KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 152KB - Virtual size: 151KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 36KB - Virtual size: 35KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
4.4.1105.400/389_phrase.ini
-
4.4.1105.400/CDict/1.qpyd
-
4.4.1105.400/CDict/2.qpyd
-
4.4.1105.400/CDict/3.qpyd
-
4.4.1105.400/CDict/4.qpyd
-
4.4.1105.400/CDict/5.qpyd
-
4.4.1105.400/CDict/6.qpyd
-
4.4.1105.400/CDict/8.qpyd
-
4.4.1105.400/CandOrder/fixorder_abc.dat
-
4.4.1105.400/CandOrder/fixorder_default.dat
-
4.4.1105.400/EUDC/EUDCBIHUA.DAT
-
4.4.1105.400/EUDC/EUDCCHAIZI.DICT
-
4.4.1105.400/EUDC/EUDCDICT.DICT
-
4.4.1105.400/EUDC/OPTIONS.INI
-
4.4.1105.400/EUDC/QQPYEUDC.EUF
-
4.4.1105.400/EUDC/QQPYEUDC.TTE
-
4.4.1105.400/QQImeRegDict.exe.exe windows:4 windows x86 arch:x86
dbc333c40e09edc03d9d1219846f4c49
Code Sign
38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5Certificate
IssuerCN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=USNot Before15-06-2007 00:00Not After14-06-2012 23:59SubjectCN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=USExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageContentCommitment
47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4Certificate
IssuerCN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZANot Before04-12-2003 00:00Not After03-12-2013 23:59SubjectCN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=USExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageCertSign
KeyUsageCRLSign
65:52:26:e1:b2:2e:18:e1:59:0f:29:85:ac:22:e7:5cCertificate
IssuerOU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=USNot Before21-05-2009 00:00Not After20-05-2019 23:59SubjectCN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=USExtended Key Usages
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
Key Usages
KeyUsageCertSign
KeyUsageCRLSign
5d:06:88:f9:04:0a:d5:22:87:fc:32:ad:ec:eb:85:b0Certificate
IssuerCN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=USNot Before26-01-2010 00:00Not After25-01-2013 23:59SubjectCN=Tencent Technology(Shenzhen) Company Limited,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Tencent Technology(Shenzhen) Company Limited,L=shenzhen,ST=guangdong,C=CNExtended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
67:46:82:51:83:57:1c:59:17:79:8c:6b:62:af:10:67:13:81:70:6dSigner
Actual PE Digest67:46:82:51:83:57:1c:59:17:79:8c:6b:62:af:10:67:13:81:70:6dDigest Algorithmsha1PE Digest MatchestrueHeaders
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
e:\vqq_debug\release\pdb\QQImeRegDict.pdb
Imports
kernel32
CloseHandle
GetCurrentProcess
WideCharToMultiByte
MultiByteToWideChar
GetCPInfo
CreateFileW
WriteFile
SetFilePointer
DeleteFileW
InterlockedIncrement
InterlockedDecrement
InitializeCriticalSection
FlushInstructionCache
lstrlenW
SetLastError
DeleteCriticalSection
RaiseException
GetCommandLineW
GetCurrentThreadId
EnterCriticalSection
LeaveCriticalSection
FlushFileBuffers
CreateFileA
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
SetStdHandle
GetConsoleMode
GetConsoleCP
GetStringTypeW
GetStringTypeA
RtlUnwind
GetSystemTimeAsFileTime
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
FreeLibrary
FindClose
FindFirstFileW
GetModuleFileNameW
GetLastError
LoadLibraryW
GetProcAddress
FindResourceExW
LoadResource
LockResource
SizeofResource
GetStartupInfoA
GetFileType
SetHandleCount
GetCommandLineA
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
LCMapStringW
LCMapStringA
FindResourceW
GetModuleFileNameA
GetStdHandle
HeapCreate
HeapDestroy
HeapAlloc
HeapFree
HeapReAlloc
HeapSize
GetProcessHeap
GetVersionExA
InterlockedExchange
GetACP
GetLocaleInfoA
GetThreadLocale
InterlockedCompareExchange
LoadLibraryA
IsProcessorFeaturePresent
VirtualFree
VirtualAlloc
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetStartupInfoW
GetModuleHandleA
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
Sleep
ExitProcess
GetOEMCP
IsValidCodePage
user32
ScreenToClient
SetWindowLongW
MoveWindow
GetWindowRect
TranslateMessage
GetParent
PostQuitMessage
LoadImageW
LoadIconW
DestroyIcon
DestroyWindow
DispatchMessageW
UnregisterClassA
IsDialogMessageW
CreateDialogParamW
GetMessageW
EnableWindow
SetFocus
GetDlgItem
SetWindowTextW
IsWindow
SendMessageW
PostMessageW
MessageBoxW
SetForegroundWindow
ShowWindow
advapi32
RegCloseKey
RegQueryValueExW
RegOpenKeyExW
shell32
SHGetSpecialFolderPathW
ole32
CoCreateInstance
CreateBindCtx
oleaut32
SysFreeString
SysAllocString
shlwapi
PathFileExistsW
comctl32
ord17
urlmon
RegisterBindStatusCallback
CreateURLMoniker
Sections
.text Size: 104KB - Virtual size: 103KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 28KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 116KB - Virtual size: 114KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
4.4.1105.400/QQImeRegSkin.exe.exe windows:4 windows x86 arch:x86
ab2df1d37d0bbc9eddb8d60683e57358
Code Sign
38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5Certificate
IssuerCN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=USNot Before15-06-2007 00:00Not After14-06-2012 23:59SubjectCN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=USExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageContentCommitment
47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4Certificate
IssuerCN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZANot Before04-12-2003 00:00Not After03-12-2013 23:59SubjectCN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=USExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageCertSign
KeyUsageCRLSign
65:52:26:e1:b2:2e:18:e1:59:0f:29:85:ac:22:e7:5cCertificate
IssuerOU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=USNot Before21-05-2009 00:00Not After20-05-2019 23:59SubjectCN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=USExtended Key Usages
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
Key Usages
KeyUsageCertSign
KeyUsageCRLSign
5d:06:88:f9:04:0a:d5:22:87:fc:32:ad:ec:eb:85:b0Certificate
IssuerCN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=USNot Before26-01-2010 00:00Not After25-01-2013 23:59SubjectCN=Tencent Technology(Shenzhen) Company Limited,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Tencent Technology(Shenzhen) Company Limited,L=shenzhen,ST=guangdong,C=CNExtended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
02:e8:04:49:36:36:2d:98:d5:45:b0:ed:3f:76:fb:b5:3d:47:96:7cSigner
Actual PE Digest02:e8:04:49:36:36:2d:98:d5:45:b0:ed:3f:76:fb:b5:3d:47:96:7cDigest Algorithmsha1PE Digest MatchestrueHeaders
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
e:\vqq_debug\release\pdb\QQImeRegSkin.pdb
Imports
kernel32
WideCharToMultiByte
MultiByteToWideChar
GetCurrentProcess
GetCPInfo
DeleteFileW
InterlockedIncrement
InterlockedDecrement
InitializeCriticalSection
DeleteCriticalSection
FlushInstructionCache
SetLastError
RaiseException
GetCommandLineW
GetCurrentThreadId
EnterCriticalSection
LeaveCriticalSection
FlushFileBuffers
CreateFileA
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
SetStdHandle
GetConsoleMode
GetConsoleCP
GetStringTypeW
GetStringTypeA
RtlUnwind
GetSystemTimeAsFileTime
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
SetFilePointer
FreeLibrary
FindClose
FindFirstFileW
FindResourceW
LoadLibraryW
GetModuleFileNameW
GetProcAddress
FindResourceExW
LoadResource
LockResource
WriteFile
SizeofResource
CreateFileW
ReadFile
GetLastError
GetFileSize
GetStartupInfoA
GetFileType
SetHandleCount
GetCommandLineA
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetModuleFileNameA
GetStdHandle
CloseHandle
LCMapStringW
LCMapStringA
IsValidCodePage
GetVersionExA
HeapDestroy
HeapAlloc
HeapFree
HeapReAlloc
HeapSize
GetProcessHeap
InterlockedExchange
GetACP
GetLocaleInfoA
GetThreadLocale
InterlockedCompareExchange
LoadLibraryA
IsProcessorFeaturePresent
VirtualFree
VirtualAlloc
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetStartupInfoW
GetModuleHandleA
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
Sleep
ExitProcess
HeapCreate
GetOEMCP
user32
SetWindowLongW
GetParent
ScreenToClient
GetDlgItem
TranslateMessage
GetWindowRect
PostQuitMessage
LoadImageW
LoadIconW
DestroyIcon
DestroyWindow
DispatchMessageW
UnregisterClassA
IsDialogMessageW
CreateDialogParamW
GetMessageW
EnableWindow
SetFocus
SetWindowTextW
IsWindow
SendMessageW
PostMessageW
MessageBoxW
SetForegroundWindow
ShowWindow
MoveWindow
advapi32
RegCloseKey
RegQueryValueExW
RegOpenKeyExW
shell32
SHGetSpecialFolderPathW
ole32
CoCreateInstance
CreateBindCtx
oleaut32
SysFreeString
SysAllocString
shlwapi
PathFileExistsW
comctl32
ord17
urlmon
RegisterBindStatusCallback
CreateURLMoniker
Sections
.text Size: 100KB - Virtual size: 99KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 28KB - Virtual size: 25KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 24KB - Virtual size: 21KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
4.4.1105.400/QQImeUtil.dll.dll windows:4 windows x86 arch:x86
925a4ff7335b28014aa6802a75274250
Code Sign
38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5Certificate
IssuerCN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=USNot Before15-06-2007 00:00Not After14-06-2012 23:59SubjectCN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=USExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageContentCommitment
47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4Certificate
IssuerCN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZANot Before04-12-2003 00:00Not After03-12-2013 23:59SubjectCN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=USExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageCertSign
KeyUsageCRLSign
65:52:26:e1:b2:2e:18:e1:59:0f:29:85:ac:22:e7:5cCertificate
IssuerOU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=USNot Before21-05-2009 00:00Not After20-05-2019 23:59SubjectCN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=USExtended Key Usages
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
Key Usages
KeyUsageCertSign
KeyUsageCRLSign
5d:06:88:f9:04:0a:d5:22:87:fc:32:ad:ec:eb:85:b0Certificate
IssuerCN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=USNot Before26-01-2010 00:00Not After25-01-2013 23:59SubjectCN=Tencent Technology(Shenzhen) Company Limited,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Tencent Technology(Shenzhen) Company Limited,L=shenzhen,ST=guangdong,C=CNExtended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
3c:f7:a1:33:48:42:9b:86:b6:7c:7d:46:43:f1:a9:f5:60:62:7c:81Signer
Actual PE Digest3c:f7:a1:33:48:42:9b:86:b6:7c:7d:46:43:f1:a9:f5:60:62:7c:81Digest Algorithmsha1PE Digest MatchestrueHeaders
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
c:\vqq_debug\release\pdb\QQImeUtil.pdb
Imports
kernel32
MapViewOfFileEx
GetCPInfo
IsDBCSLeadByte
LoadLibraryW
InterlockedDecrement
DeleteCriticalSection
LeaveCriticalSection
InitializeCriticalSection
EnterCriticalSection
GetStdHandle
MulDiv
FreeResource
GetFileTime
WideCharToMultiByte
SetFileTime
GetSystemTime
GetFileAttributesW
GetTickCount
SetFileAttributesW
GlobalAlloc
LocalFree
ProcessIdToSessionId
lstrlenA
GlobalUnlock
GlobalLock
GetFileSizeEx
SetEnvironmentVariableA
CompareStringW
CompareStringA
SetEndOfFile
GetDriveTypeA
GetConsoleOutputCP
DeviceIoControl
GetDriveTypeW
GetLogicalDrives
SetFilePointer
GetThreadSelectorEntry
FreeLibrary
GetCurrentProcessId
WriteFile
VirtualQuery
GetModuleFileNameA
VirtualQueryEx
GetVersionExW
WritePrivateProfileStringW
GetModuleFileNameW
GetCurrentProcess
GetProcAddress
GetCurrentThreadId
CreateFileA
ReadProcessMemory
SetUnhandledExceptionFilter
GetCurrentThread
GetLocalTime
UnmapViewOfFile
MapViewOfFile
OpenFileMappingW
SystemTimeToFileTime
InterlockedIncrement
CreateFileMappingW
MultiByteToWideChar
FindResourceExW
FindNextFileW
GetFileSize
CreateFileW
lstrlenW
GetFullPathNameW
SetLastError
GetLastError
CloseHandle
DeleteFileW
ReadFile
LoadResource
LockResource
SizeofResource
FindResourceW
CopyFileW
FindClose
FindFirstFileW
WriteConsoleW
WriteConsoleA
GetLocaleInfoW
SetStdHandle
LoadLibraryA
GetStringTypeW
GetStringTypeA
IsValidLocale
EnumSystemLocalesA
GetUserDefaultLCID
FlushFileBuffers
GetConsoleMode
GetConsoleCP
QueryPerformanceCounter
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetStartupInfoA
GetFileType
SetHandleCount
GetCurrentDirectoryA
GetDateFormatA
GetTimeFormatA
GetTimeZoneInformation
IsValidCodePage
GetOEMCP
ExitProcess
VirtualAlloc
VirtualFree
HeapCreate
TlsFree
TlsSetValue
TlsAlloc
TlsGetValue
RaiseException
GetVersionExA
HeapDestroy
HeapAlloc
HeapFree
HeapReAlloc
HeapSize
GetProcessHeap
InterlockedExchange
GetACP
GetLocaleInfoA
GetThreadLocale
Sleep
TerminateProcess
UnhandledExceptionFilter
IsDebuggerPresent
GetSystemTimeAsFileTime
FileTimeToSystemTime
FileTimeToLocalFileTime
CreateDirectoryW
GetCommandLineA
RtlUnwind
LCMapStringA
LCMapStringW
GetModuleHandleA
user32
ReleaseDC
MonitorFromPoint
GetDC
OffsetRect
GetCursorPos
GetMonitorInfoW
PtInRect
SystemParametersInfoW
UnregisterClassA
EnumDisplayMonitors
DrawTextW
gdi32
SetTextColor
SetBkMode
RestoreDC
SaveDC
CreateFontIndirectW
GetDeviceCaps
Rectangle
CreateCompatibleDC
SelectObject
GetObjectW
LineTo
DeleteDC
MoveToEx
CreateDIBSection
CreatePen
CreateSolidBrush
DeleteObject
advapi32
BuildExplicitAccessWithNameW
GetSecurityInfo
IsTextUnicode
GetSecurityDescriptorSacl
ConvertStringSecurityDescriptorToSecurityDescriptorW
SetSecurityInfo
SetEntriesInAclW
ConvertSidToStringSidW
LookupAccountNameW
RegSetValueExW
RegQueryValueExW
RegOpenKeyExA
RegQueryValueExA
RegCloseKey
RegCreateKeyExW
RegOpenKeyExW
shell32
SHGetSpecialFolderPathW
ShellExecuteW
ShellExecuteExW
SHGetFolderPathW
SHCreateDirectoryExW
ole32
CoUninitialize
CoCreateGuid
CoInitialize
StgOpenStorageOnILockBytes
CreateILockBytesOnHGlobal
StgCreateDocfile
StgOpenStorage
shlwapi
PathFileExistsW
wtsapi32
WTSQuerySessionInformationW
WTSFreeMemory
version
GetFileVersionInfoW
VerQueryValueW
GetFileVersionInfoSizeW
ws2_32
gethostbyname
socket
htons
sendto
WSACleanup
WSAStartup
closesocket
netapi32
Netbios
NetApiBufferFree
NetWkstaTransportEnum
Exports
Exports
ImeUtil_Init
Ime_CompareDictVersion
Ime_GetAppData
Ime_GetDictExample
Ime_GetDictInternalFileName
Ime_GetInstallDir
Ime_InstallDict
Ime_InstallSkin
Ime_IsDictEngSupport
Ime_IsDictExist
Ime_IsDictFileValid
Ime_IsDictInUse
Ime_IsSkinExist
Ime_SetSkinToUse
SknEng_GetCompCandPreview
SknEng_GetPicFrame
SknEng_GetPrimaryMonitorWorkArea
SknEng_GetSkinAllPicFrameInfo
SknEng_GetSkinPreview
SknEng_GetStatusBarPreview
SknEng_GetVirtualWorkAreaContainPt
SknEng_IsEngSupport
SknEng_IsEngineLoadSkinContainPicFrame
SknEng_IsSkinContainPicFrame
SknEng_LoadSSSkinFile
SknEng_LoadSkinFile
SknEng_PlayImageFrame
SknEng_SetDisplayStyle
Sections
.text Size: 820KB - Virtual size: 819KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 132KB - Virtual size: 129KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 104KB - Virtual size: 102KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 36KB - Virtual size: 35KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
4.4.1105.400/QQImeUtil.exe.exe windows:4 windows x86 arch:x86
fd2a38994a4c5c88cd3878ccdc0ce6f3
Code Sign
38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5Certificate
IssuerCN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=USNot Before15-06-2007 00:00Not After14-06-2012 23:59SubjectCN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=USExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageContentCommitment
47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4Certificate
IssuerCN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZANot Before04-12-2003 00:00Not After03-12-2013 23:59SubjectCN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=USExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageCertSign
KeyUsageCRLSign
65:52:26:e1:b2:2e:18:e1:59:0f:29:85:ac:22:e7:5cCertificate
IssuerOU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=USNot Before21-05-2009 00:00Not After20-05-2019 23:59SubjectCN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=USExtended Key Usages
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
Key Usages
KeyUsageCertSign
KeyUsageCRLSign
5d:06:88:f9:04:0a:d5:22:87:fc:32:ad:ec:eb:85:b0Certificate
IssuerCN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=USNot Before26-01-2010 00:00Not After25-01-2013 23:59SubjectCN=Tencent Technology(Shenzhen) Company Limited,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Tencent Technology(Shenzhen) Company Limited,L=shenzhen,ST=guangdong,C=CNExtended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
69:d3:7d:9c:b6:b7:f5:8e:7b:c8:a1:e9:8e:3b:04:f0:28:df:69:35Signer
Actual PE Digest69:d3:7d:9c:b6:b7:f5:8e:7b:c8:a1:e9:8e:3b:04:f0:28:df:69:35Digest Algorithmsha1PE Digest MatchestrueHeaders
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
e:\qqpinyin_proj\client\RenameTTX\release\QQImeUtil.pdb
Imports
kernel32
ProcessIdToSessionId
GetLastError
DeleteFileW
GetCurrentProcessId
GetFileAttributesW
SetFileAttributesW
MoveFileExW
FindResourceExW
LocalFree
GetVersionExW
FreeResource
FindResourceW
SizeofResource
LockResource
WaitForSingleObject
LoadResource
LCMapStringW
LCMapStringA
GetStringTypeW
GetStringTypeA
HeapDestroy
HeapAlloc
HeapFree
HeapReAlloc
HeapSize
GetProcessHeap
RaiseException
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSection
DeleteCriticalSection
GetVersionExA
GetStartupInfoW
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RtlUnwind
WriteFile
WideCharToMultiByte
GetConsoleCP
GetConsoleMode
CloseHandle
GetModuleHandleA
GetProcAddress
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
Sleep
ExitProcess
GetStdHandle
GetModuleFileNameA
GetModuleFileNameW
FreeEnvironmentStringsA
MultiByteToWideChar
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineA
GetCommandLineW
SetHandleCount
GetFileType
GetStartupInfoA
HeapCreate
VirtualFree
QueryPerformanceCounter
GetTickCount
GetSystemTimeAsFileTime
VirtualAlloc
CreateFileW
SetFilePointer
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
SetStdHandle
FlushFileBuffers
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
LoadLibraryA
SetEndOfFile
ReadFile
CreateFileA
GetLocaleInfoA
gdi32
AddFontResourceW
RemoveFontResourceW
advapi32
ConvertSidToStringSidW
LookupAccountNameW
RegOpenKeyExW
RegCreateKeyExW
RegCloseKey
shell32
SHGetSpecialFolderPathW
ShellExecuteExW
SHCreateDirectoryExW
SHFileOperationW
shlwapi
PathFileExistsW
wtsapi32
WTSFreeMemory
WTSQuerySessionInformationW
user32
UnregisterClassA
Sections
.text Size: 68KB - Virtual size: 65KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 16KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
4.4.1105.400/QQImeUtil_x64.dll.dll windows:4 windows x64 arch:x64
8952f4c4d71da5af21d436beca397b04
Code Sign
38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5Certificate
IssuerCN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=USNot Before15-06-2007 00:00Not After14-06-2012 23:59SubjectCN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=USExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageContentCommitment
47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4Certificate
IssuerCN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZANot Before04-12-2003 00:00Not After03-12-2013 23:59SubjectCN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=USExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageCertSign
KeyUsageCRLSign
65:52:26:e1:b2:2e:18:e1:59:0f:29:85:ac:22:e7:5cCertificate
IssuerOU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=USNot Before21-05-2009 00:00Not After20-05-2019 23:59SubjectCN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=USExtended Key Usages
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
Key Usages
KeyUsageCertSign
KeyUsageCRLSign
5d:06:88:f9:04:0a:d5:22:87:fc:32:ad:ec:eb:85:b0Certificate
IssuerCN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=USNot Before26-01-2010 00:00Not After25-01-2013 23:59SubjectCN=Tencent Technology(Shenzhen) Company Limited,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Tencent Technology(Shenzhen) Company Limited,L=shenzhen,ST=guangdong,C=CNExtended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
e5:fe:7d:cf:be:6a:63:59:e7:ea:76:3e:a8:fb:06:1a:34:24:2f:b0Signer
Actual PE Digeste5:fe:7d:cf:be:6a:63:59:e7:ea:76:3e:a8:fb:06:1a:34:24:2f:b0Digest Algorithmsha1PE Digest MatchestrueHeaders
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB Paths
c:\vqq_debug\release\pdb\QQImeUtil_x64.pdb
Imports
kernel32
LoadLibraryW
LeaveCriticalSection
InitializeCriticalSection
EnterCriticalSection
DeleteCriticalSection
WriteConsoleW
GetStdHandle
MulDiv
IsDBCSLeadByte
GetCPInfo
MapViewOfFileEx
GetVersionExW
SetFilePointer
lstrlenA
GlobalLock
GlobalUnlock
GetFileSizeEx
SetEnvironmentVariableA
CompareStringW
CompareStringA
SetEndOfFile
GetConsoleOutputCP
GetSystemTime
GetFileAttributesW
SetFileAttributesW
GetFileTime
SetFileTime
WideCharToMultiByte
GetCurrentProcessId
GetCurrentProcess
GlobalAlloc
LocalFree
ProcessIdToSessionId
WriteFile
FreeLibrary
GetProcAddress
GetTickCount
OpenFileMappingW
UnmapViewOfFile
MapViewOfFile
GetLocalTime
CreateFileMappingW
SystemTimeToFileTime
GetLastError
lstrlenW
GetFullPathNameW
DeleteFileW
GetFileSize
SetLastError
FindFirstFileW
CreateFileW
MultiByteToWideChar
CloseHandle
ReadFile
FindNextFileW
FindResourceExW
CopyFileW
LoadResource
LockResource
SizeofResource
FindClose
FindResourceW
FreeResource
WriteConsoleA
CreateFileA
SetStdHandle
LoadLibraryA
GetStringTypeW
GetStringTypeA
FlushFileBuffers
GetConsoleMode
GetConsoleCP
QueryPerformanceCounter
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetStartupInfoA
GetFileType
SetHandleCount
GetModuleFileNameA
ExitProcess
IsValidCodePage
GetOEMCP
RaiseException
GetVersionExA
HeapDestroy
HeapAlloc
HeapFree
HeapReAlloc
HeapSize
GetProcessHeap
GetACP
GetLocaleInfoA
GetThreadLocale
Sleep
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RtlCaptureContext
GetSystemTimeAsFileTime
CreateDirectoryW
GetCurrentThreadId
FlsSetValue
GetCommandLineA
RtlLookupFunctionEntry
RtlUnwindEx
RtlPcToFileHeader
LCMapStringA
LCMapStringW
RtlVirtualUnwind
GetModuleHandleA
FlsGetValue
TlsFree
FlsFree
TlsSetValue
FlsAlloc
HeapSetInformation
HeapCreate
user32
GetMonitorInfoW
GetCursorPos
MonitorFromPoint
ReleaseDC
PtInRect
GetDC
SystemParametersInfoW
OffsetRect
UnregisterClassA
EnumDisplayMonitors
DrawTextW
gdi32
SetBkMode
SetTextColor
SaveDC
RestoreDC
CreateFontIndirectW
GetDeviceCaps
CreateDIBSection
Rectangle
CreateCompatibleDC
SelectObject
GetObjectW
LineTo
MoveToEx
DeleteDC
CreateSolidBrush
CreatePen
DeleteObject
advapi32
IsTextUnicode
GetSecurityDescriptorSacl
ConvertStringSecurityDescriptorToSecurityDescriptorW
SetSecurityInfo
SetEntriesInAclW
BuildExplicitAccessWithNameW
GetSecurityInfo
ConvertSidToStringSidW
LookupAccountNameW
RegSetValueExW
RegQueryValueExW
RegCreateKeyExW
RegOpenKeyExW
RegCloseKey
shell32
SHGetSpecialFolderPathW
ShellExecuteW
ShellExecuteExW
SHCreateDirectoryExW
ole32
CreateILockBytesOnHGlobal
StgCreateDocfile
StgOpenStorage
StgOpenStorageOnILockBytes
shlwapi
PathFileExistsW
wtsapi32
WTSQuerySessionInformationW
WTSFreeMemory
Exports
Exports
ImeUtil_Init
Ime_CompareDictVersion
Ime_GetAppData
Ime_GetDictExample
Ime_GetDictInternalFileName
Ime_GetInstallDir
Ime_InstallDict
Ime_InstallSkin
Ime_IsDictEngSupport
Ime_IsDictExist
Ime_IsDictFileValid
Ime_IsDictInUse
Ime_IsSkinExist
Ime_SetSkinToUse
SknEng_GetCompCandPreview
SknEng_GetPicFrame
SknEng_GetPrimaryMonitorWorkArea
SknEng_GetSkinAllPicFrameInfo
SknEng_GetSkinPreview
SknEng_GetStatusBarPreview
SknEng_GetVirtualWorkAreaContainPt
SknEng_IsEngSupport
SknEng_IsEngineLoadSkinContainPicFrame
SknEng_IsSkinContainPicFrame
SknEng_LoadSSSkinFile
SknEng_LoadSkinFile
SknEng_PlayImageFrame
SknEng_SetDisplayStyle
Sections
.text Size: 1.0MB - Virtual size: 1.0MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 202KB - Virtual size: 202KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 27KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 54KB - Virtual size: 54KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 103KB - Virtual size: 102KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 10KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
4.4.1105.400/QQPYCloud.exe.exe windows:4 windows x86 arch:x86
d70a150428a402c01647816e316133b6
Code Sign
38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5Certificate
IssuerCN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=USNot Before15-06-2007 00:00Not After14-06-2012 23:59SubjectCN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=USExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageContentCommitment
47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4Certificate
IssuerCN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZANot Before04-12-2003 00:00Not After03-12-2013 23:59SubjectCN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=USExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageCertSign
KeyUsageCRLSign
65:52:26:e1:b2:2e:18:e1:59:0f:29:85:ac:22:e7:5cCertificate
IssuerOU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=USNot Before21-05-2009 00:00Not After20-05-2019 23:59SubjectCN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=USExtended Key Usages
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
Key Usages
KeyUsageCertSign
KeyUsageCRLSign
5d:06:88:f9:04:0a:d5:22:87:fc:32:ad:ec:eb:85:b0Certificate
IssuerCN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=USNot Before26-01-2010 00:00Not After25-01-2013 23:59SubjectCN=Tencent Technology(Shenzhen) Company Limited,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Tencent Technology(Shenzhen) Company Limited,L=shenzhen,ST=guangdong,C=CNExtended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
45:d4:67:ff:5a:02:71:63:5b:f3:2f:18:06:f9:0c:e0:0f:09:bd:30Signer
Actual PE Digest45:d4:67:ff:5a:02:71:63:5b:f3:2f:18:06:f9:0c:e0:0f:09:bd:30Digest Algorithmsha1PE Digest MatchestrueHeaders
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
c:\vqq_debug\release\pdb\QQPYCloud.pdb
Imports
wininet
InternetQueryOptionA
wtsapi32
WTSQuerySessionInformationW
WTSFreeMemory
kernel32
FindClose
InterlockedIncrement
CloseHandle
WideCharToMultiByte
lstrlenA
MultiByteToWideChar
GetTickCount
WaitForSingleObject
CreateThread
ReleaseMutex
OpenFileMappingW
MapViewOfFile
UnmapViewOfFile
LoadLibraryW
GetProcAddress
WriteConsoleW
GetStdHandle
CreateFileMappingW
GetLocalTime
SystemTimeToFileTime
GetCurrentThread
GetVersionExW
VirtualQuery
FreeLibrary
VirtualQueryEx
GetThreadSelectorEntry
CreateFileA
SetFilePointer
DeleteFileW
WriteFile
SetUnhandledExceptionFilter
GetCurrentProcessId
ReadProcessMemory
ReadFile
GetModuleFileNameA
CreateFileW
lstrlenW
lstrcpynW
CopyFileW
GetFileSize
GetLogicalDrives
GetDriveTypeW
DeviceIoControl
FindFirstFileW
ProcessIdToSessionId
OutputDebugStringW
MapViewOfFileEx
GetCPInfo
IsDBCSLeadByte
GetFullPathNameW
Sleep
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
RtlUnwind
GetStartupInfoA
GetCommandLineA
CreateDirectoryW
FileTimeToLocalFileTime
FileTimeToSystemTime
GetFileType
ExitProcess
GetModuleHandleA
GetSystemTimeAsFileTime
IsDebuggerPresent
UnhandledExceptionFilter
HeapCreate
TerminateProcess
GetThreadLocale
GetLocaleInfoA
GetACP
InterlockedExchange
GetVersionExA
VirtualAlloc
VirtualFree
IsProcessorFeaturePresent
LoadLibraryA
GetCurrentThreadId
FindResourceExW
LoadResource
FlushInstructionCache
LockResource
GetCurrentProcess
GetPrivateProfileIntW
InterlockedCompareExchange
SizeofResource
WritePrivateProfileStringW
GetLastError
CreateMutexW
LeaveCriticalSection
OpenMutexW
EnterCriticalSection
FindResourceW
DeleteCriticalSection
InitializeCriticalSection
GetCommandLineW
GetModuleFileNameW
SetLastError
RaiseException
InterlockedDecrement
CompareStringA
CompareStringW
GetProcessHeap
HeapSize
HeapReAlloc
HeapFree
GetDriveTypeA
GetConsoleOutputCP
WriteConsoleA
GetLocaleInfoW
IsValidLocale
HeapAlloc
HeapDestroy
TlsGetValue
SetEnvironmentVariableA
LocalFree
EnumSystemLocalesA
GetUserDefaultLCID
QueryPerformanceCounter
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetCurrentDirectoryA
SetStdHandle
GetDateFormatA
GetTimeFormatA
FlushFileBuffers
GetConsoleMode
GetConsoleCP
GetTimeZoneInformation
SetHandleCount
IsValidCodePage
GetOEMCP
TlsFree
TlsSetValue
TlsAlloc
user32
UnregisterClassA
ShowWindow
CallWindowProcW
DefWindowProcW
DestroyWindow
GetWindowLongW
GetMonitorInfoW
GetCursorPos
MonitorFromPoint
PostMessageW
IsWindow
SetTimer
KillTimer
LoadCursorW
GetClassInfoExW
RegisterClassExW
SetWindowLongW
DispatchMessageW
TranslateMessage
GetMessageW
CreateWindowExW
PostQuitMessage
advapi32
RegSetValueExW
RegCloseKey
GetSecurityDescriptorSacl
ConvertStringSecurityDescriptorToSecurityDescriptorW
SetSecurityInfo
SetEntriesInAclW
BuildExplicitAccessWithNameW
GetSecurityInfo
IsTextUnicode
ConvertSidToStringSidW
LookupAccountNameW
RegQueryValueExA
RegQueryValueExW
RegOpenKeyExA
RegCreateKeyExW
RegOpenKeyExW
shell32
SHGetSpecialFolderPathW
SHGetFolderPathW
SHCreateDirectoryExW
ole32
CoInitialize
CoCreateGuid
CoUninitialize
CoCreateInstance
shlwapi
PathFileExistsW
comctl32
ord17
ws2_32
setsockopt
shutdown
gethostbyname
sendto
send
WSAAsyncGetHostByName
connect
WSAAsyncSelect
socket
htons
inet_addr
inet_ntoa
closesocket
WSACancelAsyncRequest
WSAGetLastError
WSAStartup
WSACleanup
ntohs
recv
htonl
version
GetFileVersionInfoW
VerQueryValueW
GetFileVersionInfoSizeW
netapi32
Netbios
NetWkstaTransportEnum
NetApiBufferFree
Sections
.text Size: 308KB - Virtual size: 305KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 84KB - Virtual size: 80KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 22KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
4.4.1105.400/QQPYConfig.exe.exe windows:4 windows x86 arch:x86
717d0b8fcb45accc244b295b43509c19
Code Sign
38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5Certificate
IssuerCN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=USNot Before15-06-2007 00:00Not After14-06-2012 23:59SubjectCN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=USExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageContentCommitment
47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4Certificate
IssuerCN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZANot Before04-12-2003 00:00Not After03-12-2013 23:59SubjectCN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=USExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageCertSign
KeyUsageCRLSign
65:52:26:e1:b2:2e:18:e1:59:0f:29:85:ac:22:e7:5cCertificate
IssuerOU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=USNot Before21-05-2009 00:00Not After20-05-2019 23:59SubjectCN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=USExtended Key Usages
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
Key Usages
KeyUsageCertSign
KeyUsageCRLSign
5d:06:88:f9:04:0a:d5:22:87:fc:32:ad:ec:eb:85:b0Certificate
IssuerCN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=USNot Before26-01-2010 00:00Not After25-01-2013 23:59SubjectCN=Tencent Technology(Shenzhen) Company Limited,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Tencent Technology(Shenzhen) Company Limited,L=shenzhen,ST=guangdong,C=CNExtended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
3b:74:3c:35:09:6f:8d:d4:f1:98:1e:7a:c3:c3:8c:95:cf:e4:c3:8dSigner
Actual PE Digest3b:74:3c:35:09:6f:8d:d4:f1:98:1e:7a:c3:c3:8c:95:cf:e4:c3:8dDigest Algorithmsha1PE Digest MatchestrueHeaders
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
c:\vqq_debug\release\pdb\QQPYConfig.pdb
Imports
comctl32
ImageList_Remove
ImageList_SetBkColor
ImageList_Create
ImageList_ReplaceIcon
ord17
_TrackMouseEvent
wtsapi32
WTSFreeMemory
WTSQuerySessionInformationW
imm32
ImmGetContext
ImmUnlockIMC
ImmGetDescriptionW
ImmInstallIMEW
ImmDisableIME
ImmSetOpenStatus
ImmIsIME
ImmGetIMEFileNameW
kernel32
GetTempPathW
ProcessIdToSessionId
LocalFree
OpenMutexW
CreateMutexW
GetPrivateProfileIntW
MapViewOfFileEx
MulDiv
GetLogicalDrives
GetDriveTypeW
QueryDosDeviceW
DeviceIoControl
GetDiskFreeSpaceExW
GetSystemTime
SetFileTime
GetProfileIntW
RemoveDirectoryW
OpenProcess
VirtualAllocEx
VirtualFreeEx
GetSystemTimeAsFileTime
GetSystemDirectoryA
LoadLibraryA
MoveFileExW
FreeResource
lstrlenA
lstrcpynW
GetCPInfo
IsDBCSLeadByte
GetPrivateProfileSectionW
GetPrivateProfileSectionNamesW
WritePrivateProfileSectionW
ExitProcess
GetCurrentDirectoryW
GetFileSizeEx
GetFileType
CreateDirectoryW
WriteConsoleW
LoadLibraryW
GetACP
GetDriveTypeA
SetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapAlloc
HeapFree
HeapReAlloc
HeapSize
GetProcessHeap
InterlockedExchange
GetLocaleInfoA
GetThreadLocale
InterlockedCompareExchange
IsProcessorFeaturePresent
VirtualFree
VirtualAlloc
TerminateProcess
UnhandledExceptionFilter
IsDebuggerPresent
GetModuleHandleA
GetStartupInfoW
RtlUnwind
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
HeapCreate
GetOEMCP
SetCurrentDirectoryW
InitializeCriticalSection
IsValidCodePage
GetTimeZoneInformation
GetTimeFormatA
GetDateFormatA
GetCurrentDirectoryA
LoadLibraryExW
GetConsoleMode
FlushFileBuffers
SetHandleCount
GetStartupInfoA
SetStdHandle
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineA
QueryPerformanceCounter
GetUserDefaultLCID
EnumSystemLocalesA
GetLongPathNameW
LocalAlloc
GetCommandLineW
Sleep
ReleaseMutex
MoveFileW
ExpandEnvironmentStringsW
GetFileTime
WideCharToMultiByte
GetProcAddress
VirtualQueryEx
SetUnhandledExceptionFilter
CreateFileA
FreeLibrary
GetModuleFileNameA
GetCurrentThread
VirtualQuery
GetCurrentProcessId
WritePrivateProfileStringW
ReadProcessMemory
GetThreadSelectorEntry
GlobalUnlock
GlobalLock
InterlockedDecrement
SetEndOfFile
GlobalAddAtomW
GetSystemDirectoryW
OutputDebugStringW
GetLocaleInfoW
Process32NextW
Process32FirstW
CreateToolhelp32Snapshot
IsValidLocale
WriteConsoleA
GetConsoleOutputCP
CompareStringA
GetFileAttributesW
SetFileAttributesW
CreateThread
CopyFileW
GetVersionExW
GetPrivateProfileStringW
FileTimeToSystemTime
FileTimeToLocalFileTime
MultiByteToWideChar
CompareStringW
lstrcmpiW
LeaveCriticalSection
GetLastError
EnterCriticalSection
RaiseException
FlushInstructionCache
GetCurrentProcess
GetModuleFileNameW
GetCurrentThreadId
WaitForSingleObject
FindClose
FindNextFileW
DeleteFileW
SetLastError
lstrlenW
FindFirstFileW
GetFullPathNameW
GetFileSize
SetFilePointer
WriteFile
CreateFileW
ReadFile
CloseHandle
LockResource
FindResourceExW
CreateFileMappingW
SizeofResource
UnmapViewOfFile
SystemTimeToFileTime
InterlockedIncrement
MapViewOfFile
LoadResource
GetTickCount
GetLocalTime
OpenFileMappingW
FindResourceW
GlobalFree
GlobalAlloc
DeleteCriticalSection
SetErrorMode
lstrcmpW
GetTempFileNameW
GetConsoleCP
GetModuleHandleW
GetStdHandle
user32
GetDesktopWindow
SetActiveWindow
IsIconic
SetForegroundWindow
AttachThreadInput
GetWindowThreadProcessId
GetForegroundWindow
LoadImageW
CreateDialogParamW
GetClassInfoExW
RegisterClassExW
ClientToScreen
SetScrollInfo
SetScrollRange
GetScrollPos
SetDlgItemTextW
CloseClipboard
SetClipboardData
EmptyClipboard
OpenClipboard
DestroyIcon
LoadIconW
LoadKeyboardLayoutW
UnregisterHotKey
RegisterHotKey
UnloadKeyboardLayout
GetSystemMetrics
DestroyCursor
MapWindowPoints
PostQuitMessage
GetSysColorBrush
CharNextW
SetCursor
OffsetRect
SetRectEmpty
UpdateWindow
GetCapture
GetWindow
GetMessageW
IsDialogMessageW
TranslateMessage
DispatchMessageW
SetPropW
GetPropW
TrackMouseEvent
RedrawWindow
DefWindowProcW
IsWindowEnabled
GetFocus
DestroyWindow
DrawFocusRect
LoadCursorW
GetWindowTextW
GetWindowTextLengthW
LoadBitmapW
PtInRect
FindWindowW
EnumChildWindows
DialogBoxParamW
GetClassNameW
EnableWindow
GetActiveWindow
CreateDialogIndirectParamW
MoveWindow
ScreenToClient
SetWindowTextW
SetTimer
CopyRect
SetParent
UpdateLayeredWindow
UnregisterClassW
InflateRect
IntersectRect
EqualRect
GetWindowRgn
DrawIconEx
PeekMessageW
EnumWindows
InvalidateRgn
DestroyAcceleratorTable
RegisterWindowMessageW
GetComboBoxInfo
CreateAcceleratorTableW
IsChild
EnumDisplayMonitors
KillTimer
ShowWindow
FillRect
MessageBoxW
SetWindowRgn
GetWindowRect
GetMonitorInfoW
GetCursorPos
MonitorFromPoint
IsWindow
GetDlgItem
EndDialog
DrawTextW
SendMessageW
CreateWindowExW
GetSysColor
ReleaseCapture
InvalidateRect
EndPaint
ReleaseDC
GetDC
BeginPaint
SetWindowLongW
CallWindowProcW
GetParent
GetDlgCtrlID
PostMessageW
SetFocus
SetCapture
GetClientRect
SetWindowPos
SystemParametersInfoW
GetKeyboardLayoutList
GetWindowLongW
IsWindowVisible
SetScrollPos
UnregisterClassA
gdi32
GetPixel
SaveDC
RestoreDC
UnrealizeObject
SetROP2
SetMapMode
SetWindowOrgEx
GetClipBox
SelectClipRgn
SetRectRgn
CreateBitmap
TextOutW
SetViewportOrgEx
FillRgn
FrameRgn
PtInRegion
CreateRoundRectRgn
CreatePolygonRgn
CreateDIBSection
PatBlt
StretchBlt
Rectangle
GetTextExtentPointW
CreateCompatibleBitmap
Polygon
LineTo
CreateCompatibleDC
DeleteDC
SetBkColor
ExtTextOutW
CreateFontW
DeleteObject
SetTextColor
SelectObject
CreateRectRgn
CombineRgn
CreateRectRgnIndirect
CreateSolidBrush
BitBlt
SetBkMode
CreateFontIndirectW
GetObjectW
GetStockObject
GetDeviceCaps
EnumFontFamiliesExW
CreatePen
CreatePatternBrush
MoveToEx
comdlg32
GetSaveFileNameW
ChooseColorW
GetOpenFileNameW
advapi32
RegOpenKeyExW
RegCreateKeyExW
RegQueryValueExW
RegEnumKeyExW
RegOpenKeyW
RegSetValueExW
GetSecurityDescriptorSacl
ConvertStringSecurityDescriptorToSecurityDescriptorW
SetSecurityInfo
SetEntriesInAclW
BuildExplicitAccessWithNameW
GetSecurityInfo
IsTextUnicode
RegOpenKeyExA
RegQueryValueExA
GetUserNameW
GetTokenInformation
LookupAccountSidW
OpenProcessToken
LookupAccountNameW
ConvertSidToStringSidW
RegDeleteValueW
RegQueryInfoKeyW
RegCreateKeyW
RegDeleteKeyW
RegCloseKey
shell32
SHCreateDirectoryExW
ExtractIconExW
ShellExecuteW
ShellExecuteExW
SHFileOperationW
Shell_NotifyIconW
SHGetSpecialFolderPathW
SHGetFolderPathW
ole32
CoGetClassObject
CreateStreamOnHGlobal
OleLockRunning
StringFromGUID2
CoTaskMemAlloc
OleUninitialize
CLSIDFromProgID
CoTaskMemRealloc
CoCreateGuid
CoUninitialize
CoTaskMemFree
CoCreateInstance
CoInitialize
CLSIDFromString
CoLoadLibrary
StgOpenStorageOnILockBytes
StgOpenStorage
CreateILockBytesOnHGlobal
StgCreateDocfile
OleInitialize
oleaut32
VarR8FromStr
LoadRegTypeLi
LoadTypeLi
SystemTimeToVariantTime
VariantTimeToSystemTime
SysAllocStringByteLen
SysAllocStringLen
OleCreateFontIndirect
VarBstrCmp
VariantClear
VariantInit
SysStringByteLen
RegisterTypeLi
VarUI4FromStr
SysAllocString
VarI4FromStr
SysStringLen
VarDecCmp
VarDecFromStr
VarDateFromStr
SysFreeString
shlwapi
PathFileExistsW
msimg32
TransparentBlt
version
VerQueryValueW
GetFileVersionInfoSizeW
GetFileVersionInfoW
ws2_32
connect
getservbyname
gethostname
WSASetLastError
gethostbyaddr
getservbyport
inet_ntoa
ntohs
WSACancelAsyncRequest
ntohl
htonl
recvfrom
send
inet_addr
WSAAsyncSelect
bind
WSAGetLastError
closesocket
sendto
gethostbyname
WSACleanup
WSAStartup
htons
socket
shutdown
WSAAsyncGetHostByName
recv
setsockopt
netapi32
Netbios
NetWkstaTransportEnum
NetApiBufferFree
wininet
InternetQueryOptionA
Sections
.text Size: 2.1MB - Virtual size: 2.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 332KB - Virtual size: 328KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 64KB - Virtual size: 105KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sdata Size: 4KB - Virtual size: 16B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 800KB - Virtual size: 796KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
4.4.1105.400/QQPYFace.exe.exe windows:4 windows x86 arch:x86
1a9af7297ed88e06b2803c0235b56cb5
Code Sign
38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5Certificate
IssuerCN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=USNot Before15-06-2007 00:00Not After14-06-2012 23:59SubjectCN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=USExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageContentCommitment
47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4Certificate
IssuerCN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZANot Before04-12-2003 00:00Not After03-12-2013 23:59SubjectCN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=USExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageCertSign
KeyUsageCRLSign
65:52:26:e1:b2:2e:18:e1:59:0f:29:85:ac:22:e7:5cCertificate
IssuerOU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=USNot Before21-05-2009 00:00Not After20-05-2019 23:59SubjectCN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=USExtended Key Usages
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
Key Usages
KeyUsageCertSign
KeyUsageCRLSign
5d:06:88:f9:04:0a:d5:22:87:fc:32:ad:ec:eb:85:b0Certificate
IssuerCN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=USNot Before26-01-2010 00:00Not After25-01-2013 23:59SubjectCN=Tencent Technology(Shenzhen) Company Limited,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Tencent Technology(Shenzhen) Company Limited,L=shenzhen,ST=guangdong,C=CNExtended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
77:dc:a0:87:50:c4:40:f4:a0:c2:c6:07:90:e1:25:36:e9:51:9c:e6Signer
Actual PE Digest77:dc:a0:87:50:c4:40:f4:a0:c2:c6:07:90:e1:25:36:e9:51:9c:e6Digest Algorithmsha1PE Digest MatchesfalseHeaders
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
c:\vqq_debug\release\pdb\QQPYFace.pdb
Imports
wtsapi32
WTSQuerySessionInformationW
WTSFreeMemory
kernel32
LocalFree
OpenMutexW
OutputDebugStringW
CreateMutexW
MulDiv
DeleteCriticalSection
InitializeCriticalSection
GetFileAttributesW
FindNextFileW
GlobalLock
GlobalUnlock
WideCharToMultiByte
ExitProcess
lstrlenA
GetFullPathNameW
SetEndOfFile
CreateDirectoryW
GetFileType
GetCPInfo
IsDBCSLeadByte
ReleaseMutex
FileTimeToSystemTime
GetCurrentDirectoryA
GetDateFormatA
GetTimeFormatA
GetTimeZoneInformation
GetStdHandle
HeapCreate
IsValidCodePage
GetOEMCP
TlsFree
TlsSetValue
CreateFileMappingW
TlsGetValue
LCMapStringW
LCMapStringA
GetModuleHandleA
RtlUnwind
GetStartupInfoW
ProcessIdToSessionId
GetSystemTimeAsFileTime
IsDebuggerPresent
UnhandledExceptionFilter
TerminateProcess
GetThreadLocale
GetLocaleInfoA
GetACP
InterlockedExchange
VirtualAlloc
VirtualFree
IsProcessorFeaturePresent
LoadLibraryA
InterlockedCompareExchange
GetVersionExA
GetProcessHeap
HeapSize
HeapReAlloc
HeapFree
HeapAlloc
HeapDestroy
FlushInstructionCache
MapViewOfFileEx
GetCurrentProcess
UnmapViewOfFile
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineA
SetHandleCount
GetStartupInfoA
QueryPerformanceCounter
GetConsoleCP
GetConsoleMode
FlushFileBuffers
GetUserDefaultLCID
EnumSystemLocalesA
IsValidLocale
GetStringTypeA
SystemTimeToFileTime
GetLocalTime
FindClose
FindFirstFileW
InterlockedDecrement
InterlockedIncrement
GetStringTypeW
SetStdHandle
GetLocaleInfoW
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
CompareStringA
CompareStringW
SetEnvironmentVariableA
GetDriveTypeA
GetProcAddress
LoadLibraryW
GetModuleFileNameW
GetLastError
CloseHandle
GlobalFree
GlobalAlloc
lstrlenW
DeviceIoControl
GetDriveTypeW
GetLogicalDrives
CopyFileW
WritePrivateProfileStringW
CreateFileA
ReadProcessMemory
SetUnhandledExceptionFilter
GetCurrentThread
FreeLibrary
GetThreadSelectorEntry
GetCurrentProcessId
VirtualQuery
DeleteFileW
GetModuleFileNameA
VirtualQueryEx
GetVersionExW
OpenFileMappingW
GetTickCount
MapViewOfFile
GetLongPathNameW
GetCommandLineW
TerminateThread
WaitForSingleObject
MultiByteToWideChar
CreateThread
LeaveCriticalSection
EnterCriticalSection
GetCurrentThreadId
GetFileSize
WriteFile
RaiseException
SetLastError
FileTimeToLocalFileTime
SetFilePointer
CreateFileW
FindResourceExW
LoadResource
Sleep
LockResource
SizeofResource
ReadFile
FindResourceW
FreeEnvironmentStringsA
TlsAlloc
GetEnvironmentStrings
user32
SetClipboardData
OffsetRect
UpdateLayeredWindow
PostMessageW
DefWindowProcW
RegisterClassExW
RegisterClipboardFormatW
UnregisterClassW
EnableWindow
GetSystemMetrics
RedrawWindow
GetPropW
GetWindow
GetClipboardData
GetClassInfoExW
GetDesktopWindow
GetMonitorInfoW
MonitorFromPoint
FillRect
WindowFromPoint
ShowScrollBar
SetScrollInfo
GetParent
ScrollWindow
SetScrollPos
DispatchMessageW
TranslateMessage
GetMessageW
SystemParametersInfoW
SetForegroundWindow
IsIconic
IsWindowVisible
IsWindow
GetCapture
ShowWindow
CreateDialogParamW
SetWindowRgn
MoveWindow
GetWindowLongW
LoadImageW
GetDlgItem
LoadIconW
DestroyIcon
SendMessageW
DestroyWindow
LoadBitmapW
CopyRect
SetWindowTextW
ShowCursor
SetWindowPos
CreateWindowExW
SetTimer
SetWindowLongW
ReleaseDC
UpdateWindow
InvalidateRect
TrackMouseEvent
LoadCursorW
SetCursor
ClientToScreen
GetCursorPos
PtInRect
ScreenToClient
GetWindowRect
EndPaint
GetDC
SendInput
GetMessageExtraInfo
GetClientRect
BeginPaint
EnumClipboardFormats
PostQuitMessage
CloseClipboard
EmptyClipboard
DrawTextW
KillTimer
OpenClipboard
UnregisterClassA
SetPropW
gdi32
GetDIBits
SetStretchBltMode
SetDIBitsToDevice
SaveDC
RestoreDC
GetClipBox
CreateDIBSection
Rectangle
PatBlt
CreateFontIndirectW
GetObjectW
GetStockObject
StretchBlt
CreateRoundRectRgn
SetTextColor
SetBkMode
MoveToEx
CreateSolidBrush
BitBlt
CreatePen
SelectObject
CreateCompatibleBitmap
CreateCompatibleDC
SetBkColor
CreateFontW
ExtTextOutW
DeleteDC
LineTo
DeleteObject
GetDeviceCaps
advapi32
LookupAccountSidW
OpenProcessToken
ConvertSidToStringSidW
RegOpenKeyExA
RegQueryValueExA
RegQueryValueExW
RegOpenKeyExW
RegCloseKey
RegCreateKeyExW
RegSetValueExW
LookupAccountNameW
GetTokenInformation
GetSecurityInfo
BuildExplicitAccessWithNameW
SetEntriesInAclW
SetSecurityInfo
ConvertStringSecurityDescriptorToSecurityDescriptorW
GetSecurityDescriptorSacl
IsTextUnicode
shell32
SHCreateDirectoryExW
SHGetFolderPathW
ShellExecuteW
SHGetSpecialFolderPathW
ole32
StgOpenStorage
StgCreateDocfile
CreateILockBytesOnHGlobal
CoTaskMemFree
CoUninitialize
CoCreateGuid
CoInitialize
StgOpenStorageOnILockBytes
shlwapi
PathRemoveFileSpecW
PathFileExistsW
comctl32
_TrackMouseEvent
ord17
version
GetFileVersionInfoW
GetFileVersionInfoSizeW
VerQueryValueW
ws2_32
socket
gethostbyname
closesocket
WSACleanup
htons
WSAStartup
sendto
netapi32
Netbios
NetApiBufferFree
NetWkstaTransportEnum
Sections
.text Size: 664KB - Virtual size: 660KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 176KB - Virtual size: 172KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 36KB - Virtual size: 55KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 148KB - Virtual size: 148KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
4.4.1105.400/QQPYHandInput.exe.exe windows:4 windows x86 arch:x86
67925cd44b15fe2526ff46b4657a1770
Code Sign
38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5Certificate
IssuerCN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=USNot Before15-06-2007 00:00Not After14-06-2012 23:59SubjectCN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=USExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageContentCommitment
47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4Certificate
IssuerCN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZANot Before04-12-2003 00:00Not After03-12-2013 23:59SubjectCN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=USExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageCertSign
KeyUsageCRLSign
65:52:26:e1:b2:2e:18:e1:59:0f:29:85:ac:22:e7:5cCertificate
IssuerOU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=USNot Before21-05-2009 00:00Not After20-05-2019 23:59SubjectCN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=USExtended Key Usages
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
Key Usages
KeyUsageCertSign
KeyUsageCRLSign
5d:06:88:f9:04:0a:d5:22:87:fc:32:ad:ec:eb:85:b0Certificate
IssuerCN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=USNot Before26-01-2010 00:00Not After25-01-2013 23:59SubjectCN=Tencent Technology(Shenzhen) Company Limited,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Tencent Technology(Shenzhen) Company Limited,L=shenzhen,ST=guangdong,C=CNExtended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
9d:3e:94:b8:1a:79:35:b7:c2:7f:2c:c2:a1:ae:b1:29:1f:80:b2:91Signer
Actual PE Digest9d:3e:94:b8:1a:79:35:b7:c2:7f:2c:c2:a1:ae:b1:29:1f:80:b2:91Digest Algorithmsha1PE Digest MatchestrueHeaders
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
c:\vqq_debug\release\pdb\QQPYHandInput.pdb
Imports
wtsapi32
WTSQuerySessionInformationW
WTSFreeMemory
wininet
InternetQueryOptionA
kernel32
DeviceIoControl
lstrlenW
GlobalFree
GlobalAlloc
ProcessIdToSessionId
LocalFree
OutputDebugStringW
OpenMutexW
CreateMutexW
MapViewOfFileEx
InterlockedDecrement
MulDiv
GetFullPathNameW
GetCPInfo
IsDBCSLeadByte
DeleteCriticalSection
InitializeCriticalSection
CreateThread
lstrcpynW
GlobalUnlock
GlobalLock
GetFileAttributesW
FindNextFileW
ExitProcess
SetEndOfFile
GetFileType
CreateDirectoryW
ReleaseMutex
GetTempFileNameW
GetTempPathW
FileTimeToSystemTime
ResetEvent
IsBadReadPtr
GetDriveTypeA
SetEnvironmentVariableA
CompareStringW
CompareStringA
GetLocaleInfoW
GetConsoleOutputCP
SetStdHandle
IsValidLocale
EnumSystemLocalesA
GetUserDefaultLCID
QueryPerformanceCounter
GetCommandLineW
GetCommandLineA
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetStringTypeW
GetStringTypeA
GetCurrentDirectoryA
GetDateFormatA
GetTimeFormatA
IsValidCodePage
GetOEMCP
HeapCreate
TlsFree
TlsSetValue
TlsAlloc
TlsGetValue
FlushFileBuffers
GetConsoleMode
GetConsoleCP
GetStartupInfoA
SetHandleCount
GetTimeZoneInformation
LCMapStringW
LCMapStringA
GetModuleHandleA
RtlUnwind
GetStartupInfoW
FileTimeToLocalFileTime
IsDebuggerPresent
UnhandledExceptionFilter
TerminateProcess
GetSystemTimeAsFileTime
GetVersionExA
GetThreadLocale
GetLocaleInfoA
GetACP
InterlockedExchange
HeapSize
HeapReAlloc
HeapDestroy
VirtualAlloc
VirtualFree
IsProcessorFeaturePresent
LoadLibraryA
HeapAlloc
GetProcessHeap
HeapFree
InterlockedCompareExchange
GetLogicalDrives
CopyFileW
FindClose
FindFirstFileW
GetDriveTypeW
GetThreadSelectorEntry
FreeLibrary
VirtualQuery
GetVersionExW
GetCurrentThread
GetModuleFileNameA
GetCurrentProcessId
ReadProcessMemory
WritePrivateProfileStringW
CreateFileA
VirtualQueryEx
SetUnhandledExceptionFilter
UnmapViewOfFile
MapViewOfFile
ExitThread
OpenFileMappingW
CreateFileMappingW
InterlockedIncrement
LoadLibraryW
GetProcAddress
GetModuleFileNameW
SetFilePointer
Sleep
GetFileSize
WriteFile
MoveFileExW
MoveFileW
lstrlenA
GetCurrentProcess
SetLastError
RaiseException
GetCurrentThreadId
FlushInstructionCache
ReadFile
CreateFileW
SizeofResource
MultiByteToWideChar
CloseHandle
FindResourceExW
LockResource
DeleteFileW
LoadResource
GetStdHandle
WaitForSingleObject
LeaveCriticalSection
WriteConsoleW
EnterCriticalSection
GetLastError
WideCharToMultiByte
SystemTimeToFileTime
GetLocalTime
FindResourceW
GetTickCount
TerminateThread
SetEvent
CreateEventW
WriteConsoleA
user32
RegisterClassExW
UpdateWindow
UpdateLayeredWindow
UnregisterClassW
DefWindowProcW
CreateWindowExW
RegisterClipboardFormatW
SystemParametersInfoW
UnregisterClassA
SendMessageW
IsWindowVisible
SetWindowPos
SetWindowRgn
GetWindowRect
ScreenToClient
GetClientRect
GetClipboardData
SetClipboardData
SetRect
GetClassInfoExW
EnableWindow
SetWindowLongW
GetCursorPos
GetParent
GetMonitorInfoW
IsWindow
SetWindowTextW
GetDlgItem
ShowWindow
EndDialog
MonitorFromPoint
InvalidateRect
GetKeyState
LoadCursorW
KillTimer
PtInRect
SetCursor
SetTimer
PostMessageW
TranslateMessage
MoveWindow
IsIconic
CreateDialogParamW
DispatchMessageW
GetMessageW
SetForegroundWindow
EnumDisplayMonitors
GetSystemMetrics
TrackMouseEvent
GetDlgCtrlID
EndPaint
BeginPaint
GetPropW
GetDesktopWindow
SetPropW
GetWindow
DrawTextW
DrawIconEx
DestroyWindow
EmptyClipboard
SendInput
PostQuitMessage
LoadImageW
DestroyIcon
DialogBoxParamW
GetWindowLongW
CloseClipboard
GetMessageExtraInfo
GetDC
LoadIconW
SetCapture
GetWindowPlacement
ReleaseCapture
IsWindowEnabled
EnumClipboardFormats
ReleaseDC
OpenClipboard
OffsetRect
GetForegroundWindow
gdi32
ExtCreateRegion
CombineRgn
CreateDIBSection
CreateFontIndirectW
RestoreDC
PatBlt
GetObjectW
CreateCompatibleDC
Rectangle
CreateSolidBrush
SetBkMode
SetTextColor
MoveToEx
SelectObject
GetFontUnicodeRanges
LineTo
CreatePen
DeleteDC
BitBlt
CreateFontW
SaveDC
GetDIBits
GetDeviceCaps
DeleteObject
advapi32
LookupAccountSidW
RegOpenKeyW
GetTokenInformation
RegOpenKeyExA
RegQueryValueExA
RegCreateKeyExW
RegCloseKey
RegOpenKeyExW
RegQueryValueExW
IsTextUnicode
GetSecurityInfo
SetEntriesInAclW
SetSecurityInfo
ConvertStringSecurityDescriptorToSecurityDescriptorW
BuildExplicitAccessWithNameW
GetSecurityDescriptorSacl
LookupAccountNameW
ConvertSidToStringSidW
OpenProcessToken
RegSetValueExW
shell32
ShellExecuteExW
SHGetFolderPathW
SHCreateDirectoryExW
ShellExecuteW
SHGetSpecialFolderPathW
ole32
CoInitialize
CoUninitialize
StringFromGUID2
CoCreateGuid
CoMarshalInterThreadInterfaceInStream
CoInitializeEx
CoCreateInstance
CoGetInterfaceAndReleaseStream
CLSIDFromProgID
CoFreeLibrary
CoLoadLibrary
OleUninitialize
OleInitialize
oleaut32
SysFreeString
SysAllocStringByteLen
shlwapi
wnsprintfW
PathFileExistsW
version
VerQueryValueW
GetFileVersionInfoSizeW
GetFileVersionInfoW
ws2_32
recv
inet_ntoa
connect
WSACancelAsyncRequest
WSAAsyncGetHostByName
WSAAsyncSelect
ntohs
htonl
WSAGetLastError
gethostbyname
sendto
WSACleanup
WSAStartup
socket
ntohl
htons
inet_addr
send
shutdown
setsockopt
closesocket
netapi32
NetApiBufferFree
NetWkstaTransportEnum
Netbios
Sections
.text Size: 848KB - Virtual size: 845KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 180KB - Virtual size: 179KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 44KB - Virtual size: 63KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 84KB - Virtual size: 80KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
4.4.1105.400/QQPYLevel.exe.exe windows:4 windows x86 arch:x86
7a1e291ee6ac405baedcc284fee21af0
Code Sign
38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5Certificate
IssuerCN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=USNot Before15-06-2007 00:00Not After14-06-2012 23:59SubjectCN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=USExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageContentCommitment
47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4Certificate
IssuerCN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZANot Before04-12-2003 00:00Not After03-12-2013 23:59SubjectCN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=USExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageCertSign
KeyUsageCRLSign
65:52:26:e1:b2:2e:18:e1:59:0f:29:85:ac:22:e7:5cCertificate
IssuerOU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=USNot Before21-05-2009 00:00Not After20-05-2019 23:59SubjectCN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=USExtended Key Usages
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
Key Usages
KeyUsageCertSign
KeyUsageCRLSign
5d:06:88:f9:04:0a:d5:22:87:fc:32:ad:ec:eb:85:b0Certificate
IssuerCN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=USNot Before26-01-2010 00:00Not After25-01-2013 23:59SubjectCN=Tencent Technology(Shenzhen) Company Limited,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Tencent Technology(Shenzhen) Company Limited,L=shenzhen,ST=guangdong,C=CNExtended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
c6:76:5e:e2:5f:23:66:7e:2a:35:f4:43:87:7f:7d:28:2e:e4:05:33Signer
Actual PE Digestc6:76:5e:e2:5f:23:66:7e:2a:35:f4:43:87:7f:7d:28:2e:e4:05:33Digest Algorithmsha1PE Digest MatchestrueHeaders
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
c:\vqq_debug\release\pdb\QQPYLevel.pdb
Imports
kernel32
InterlockedDecrement
CopyFileW
GetLogicalDrives
GetDriveTypeW
QueryDosDeviceW
FindFirstFileW
DeviceIoControl
FindClose
GetDiskFreeSpaceExW
lstrlenW
GlobalAlloc
GlobalFree
ProcessIdToSessionId
LocalFree
MulDiv
MapViewOfFileEx
GetFullPathNameW
GetCPInfo
SetEnvironmentVariableA
CompareStringW
CompareStringA
FlushFileBuffers
GetDriveTypeA
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
SetStdHandle
GetLocaleInfoW
GetConsoleMode
GetConsoleCP
GetStringTypeW
GetStringTypeA
IsValidLocale
EnumSystemLocalesA
GetUserDefaultLCID
GetCommandLineW
GetStartupInfoA
GetFileType
SetHandleCount
GetCommandLineA
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetCurrentDirectoryA
GetDateFormatA
GetTimeFormatA
GetTimeZoneInformation
GetStdHandle
ExitProcess
HeapCreate
TlsFree
TlsSetValue
TlsAlloc
TlsGetValue
GetModuleHandleA
IsValidCodePage
GetOEMCP
LCMapStringW
LCMapStringA
RtlUnwind
GetStartupInfoW
IsDebuggerPresent
UnhandledExceptionFilter
TerminateProcess
CreateDirectoryW
FileTimeToLocalFileTime
FileTimeToSystemTime
GetSystemTimeAsFileTime
Sleep
DeleteCriticalSection
InitializeCriticalSection
FlushInstructionCache
WideCharToMultiByte
LeaveCriticalSection
EnterCriticalSection
RaiseException
SetLastError
VirtualQueryEx
FreeLibrary
VirtualQuery
GetCurrentProcessId
SizeofResource
DeleteFileW
ReadProcessMemory
GetCurrentProcess
GetModuleFileNameA
GetCurrentThread
GetThreadSelectorEntry
SetUnhandledExceptionFilter
CreateFileA
GetCurrentThreadId
WritePrivateProfileStringW
GetVersionExW
CreateFileMappingW
SystemTimeToFileTime
InterlockedIncrement
UnmapViewOfFile
OpenFileMappingW
MapViewOfFile
GetTickCount
GetLocalTime
GetProcAddress
LoadLibraryW
GetModuleFileNameW
CloseHandle
FindResourceW
MultiByteToWideChar
ReadFile
GetFileSize
SetFilePointer
FindResourceExW
CreateFileW
GetLastError
LoadResource
LockResource
GetThreadLocale
GetLocaleInfoA
GetACP
InterlockedExchange
GetVersionExA
HeapSize
HeapReAlloc
HeapDestroy
VirtualAlloc
VirtualFree
IsProcessorFeaturePresent
LoadLibraryA
HeapAlloc
GetProcessHeap
HeapFree
InterlockedCompareExchange
WriteFile
QueryPerformanceCounter
user32
InvalidateRect
CreateWindowExW
GetWindowTextW
GetWindowTextLengthW
LoadBitmapW
CreateDialogParamW
PostQuitMessage
KillTimer
MonitorFromPoint
IsWindow
GetCursorPos
GetMonitorInfoW
GetDlgItem
FillRect
DrawTextW
SendMessageW
BeginPaint
GetDC
LoadImageW
ReleaseDC
GetClientRect
ShowWindow
MoveWindow
SetWindowLongW
GetWindowRect
SetWindowTextW
DefWindowProcW
UpdateWindow
RegisterClassExW
GetClassInfoExW
UnregisterClassW
UpdateLayeredWindow
PostMessageW
RedrawWindow
GetParent
TrackMouseEvent
LoadCursorW
SetCursor
GetWindowLongW
GetSystemMetrics
DispatchMessageW
TranslateMessage
GetMessageW
IsWindowVisible
SetWindowPos
PtInRect
DestroyWindow
EndPaint
ScreenToClient
SetTimer
UnregisterClassA
gdi32
CreateFontIndirectW
GetDeviceCaps
CreateDIBSection
Rectangle
PatBlt
GetStockObject
SetBkMode
SetBkColor
SetTextColor
TextOutW
CreateFontW
DeleteDC
BitBlt
SelectObject
CreateCompatibleDC
DeleteObject
CreateSolidBrush
GetObjectW
advapi32
OpenProcessToken
RegOpenKeyExW
GetSecurityDescriptorSacl
ConvertStringSecurityDescriptorToSecurityDescriptorW
SetSecurityInfo
SetEntriesInAclW
BuildExplicitAccessWithNameW
GetSecurityInfo
RegCloseKey
ConvertSidToStringSidW
GetTokenInformation
LookupAccountNameW
RegSetValueExW
LookupAccountSidW
RegOpenKeyExA
RegQueryValueExA
RegCreateKeyExW
RegQueryValueExW
shell32
ShellExecuteExW
ShellExecuteW
SHCreateDirectoryExW
SHGetFolderPathW
SHGetSpecialFolderPathW
ole32
CoUninitialize
CoInitialize
CreateBindCtx
CoCreateGuid
CoCreateInstance
oleaut32
SysAllocString
SysFreeString
shlwapi
PathFileExistsW
comctl32
ord17
wtsapi32
WTSQuerySessionInformationW
WTSFreeMemory
version
GetFileVersionInfoW
GetFileVersionInfoSizeW
VerQueryValueW
ws2_32
WSACleanup
sendto
gethostbyname
htons
htonl
ntohl
closesocket
socket
WSAStartup
urlmon
CreateURLMoniker
RegisterBindStatusCallback
netapi32
NetApiBufferFree
Netbios
NetWkstaTransportEnum
Sections
.text Size: 232KB - Virtual size: 228KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 40KB - Virtual size: 39KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 19KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Shared Size: 4KB - Virtual size: 4B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 76KB - Virtual size: 75KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
4.4.1105.400/QQPYLiveup.exe.exe windows:4 windows x86 arch:x86
a4cbacc08dce979a64bd7f6d622eaebe
Code Sign
38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5Certificate
IssuerCN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=USNot Before15-06-2007 00:00Not After14-06-2012 23:59SubjectCN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=USExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageContentCommitment
47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4Certificate
IssuerCN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZANot Before04-12-2003 00:00Not After03-12-2013 23:59SubjectCN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=USExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageCertSign
KeyUsageCRLSign
65:52:26:e1:b2:2e:18:e1:59:0f:29:85:ac:22:e7:5cCertificate
IssuerOU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=USNot Before21-05-2009 00:00Not After20-05-2019 23:59SubjectCN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=USExtended Key Usages
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
Key Usages
KeyUsageCertSign
KeyUsageCRLSign
5d:06:88:f9:04:0a:d5:22:87:fc:32:ad:ec:eb:85:b0Certificate
IssuerCN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=USNot Before26-01-2010 00:00Not After25-01-2013 23:59SubjectCN=Tencent Technology(Shenzhen) Company Limited,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Tencent Technology(Shenzhen) Company Limited,L=shenzhen,ST=guangdong,C=CNExtended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
f6:d4:22:7c:c8:f3:5d:77:41:b9:70:e4:07:7e:09:e4:8c:f6:29:25Signer
Actual PE Digestf6:d4:22:7c:c8:f3:5d:77:41:b9:70:e4:07:7e:09:e4:8c:f6:29:25Digest Algorithmsha1PE Digest MatchestrueHeaders
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
c:\vqq_debug\release\pdb\QQPYLiveup.pdb
Imports
kernel32
FindClose
WaitForSingleObject
lstrlenA
MoveFileW
MoveFileExW
GetVersion
FreeLibrary
GetProcAddress
CreateThread
GetFileSize
GetFullPathNameW
FindNextFileW
LoadLibraryW
GetStdHandle
WriteConsoleW
VirtualQueryEx
SetUnhandledExceptionFilter
GetThreadSelectorEntry
CreateFileA
SetFilePointer
ReadProcessMemory
VirtualQuery
GetCurrentThread
GetModuleFileNameA
SetEvent
CreateEventW
lstrcpynW
GetLogicalDrives
GetDriveTypeW
DeviceIoControl
MapViewOfFileEx
OpenMutexW
GetCPInfo
IsDBCSLeadByte
SetEndOfFile
GetFileSizeEx
GetCurrentDirectoryW
GetFileType
CreateDirectoryW
GetACP
ReleaseMutex
FileTimeToSystemTime
FindFirstFileW
ResetEvent
TerminateThread
IsBadReadPtr
OutputDebugStringW
WriteFile
CompareStringW
CompareStringA
GetDriveTypeA
GetLocaleInfoW
GetConsoleOutputCP
WriteConsoleA
SetStdHandle
IsValidLocale
EnumSystemLocalesA
GetUserDefaultLCID
QueryPerformanceCounter
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetCurrentDirectoryA
GetDateFormatA
GetTimeFormatA
FlushFileBuffers
GetConsoleMode
GetConsoleCP
SetHandleCount
GetTimeZoneInformation
TlsFree
TlsSetValue
TlsAlloc
TlsGetValue
IsValidCodePage
GetOEMCP
HeapCreate
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
ExitProcess
GetModuleHandleA
RtlUnwind
GetStartupInfoA
GetCommandLineA
FileTimeToLocalFileTime
ExitThread
IsDebuggerPresent
UnhandledExceptionFilter
TerminateProcess
GetSystemTimeAsFileTime
HeapSize
HeapReAlloc
HeapDestroy
GetThreadLocale
GetLocaleInfoA
InterlockedExchange
VirtualAlloc
VirtualFree
IsProcessorFeaturePresent
LoadLibraryA
HeapAlloc
GetProcessHeap
HeapFree
InterlockedCompareExchange
GetVersionExA
CopyFileW
GetFileAttributesW
SetFileAttributesW
MultiByteToWideChar
GetModuleFileNameW
MulDiv
GlobalLock
GlobalUnlock
lstrcmpW
SizeofResource
WideCharToMultiByte
GetCommandLineW
UnmapViewOfFile
CloseHandle
GetTickCount
MapViewOfFile
FindResourceW
SystemTimeToFileTime
GetLocalTime
DeleteCriticalSection
CreateFileMappingW
GetLastError
OpenFileMappingW
LeaveCriticalSection
GetTempFileNameW
GetTempPathW
LockResource
EnterCriticalSection
GetPrivateProfileIntW
GetVersionExW
GetCurrentThreadId
WritePrivateProfileStringW
CreateMutexW
GetPrivateProfileStringW
ProcessIdToSessionId
GetCurrentProcessId
InterlockedIncrement
GlobalFree
GetCurrentProcess
RaiseException
lstrlenW
ReadFile
GlobalAlloc
LocalFree
SetLastError
InterlockedDecrement
DeleteFileW
FlushInstructionCache
Sleep
FindResourceExW
CreateFileW
LoadResource
InitializeCriticalSection
SetEnvironmentVariableA
user32
PeekMessageW
CreateDialogParamW
IsWindow
SetWindowLongW
LoadImageW
GetCursorPos
MonitorFromPoint
GetMonitorInfoW
GetWindow
GetMessageW
TranslateMessage
DrawIconEx
DrawTextW
OpenInputDesktop
GetUserObjectInformationW
CloseDesktop
GetThreadDesktop
GetWindowTextW
GetGUIThreadInfo
SetWindowRgn
GetWindowThreadProcessId
SetCursor
DispatchMessageW
DestroyIcon
SetForegroundWindow
ShowWindow
LoadBitmapW
GetDlgCtrlID
GetPropW
GetCapture
EnableMenuItem
SystemParametersInfoW
GetSystemMenu
PtInRect
CreateWindowExW
IsChild
GetSysColor
GetClassNameW
ReleaseCapture
UnregisterClassA
GetDesktopWindow
SetCapture
GetKeyState
GetAsyncKeyState
SetWindowPos
EndPaint
FillRect
GetWindowLongW
ReleaseDC
MoveWindow
BeginPaint
GetDC
DestroyWindow
ScreenToClient
DefWindowProcW
RegisterClassExW
GetParent
GetClassInfoExW
RedrawWindow
ClientToScreen
GetClientRect
SendMessageW
GetDlgItem
DestroyAcceleratorTable
InvalidateRect
LoadCursorW
TrackMouseEvent
UnregisterClassW
UpdateLayeredWindow
UpdateWindow
IsWindowEnabled
AdjustWindowRectEx
GetMenu
DrawEdge
InflateRect
GetSystemMetrics
DrawFocusRect
MessageBoxW
GetWindowRect
PostQuitMessage
SetTimer
EnableWindow
PostMessageW
SetWindowTextW
IsWindowVisible
IsDialogMessageW
KillTimer
CallWindowProcW
GetFocus
SetFocus
CharNextW
InvalidateRgn
CreateAcceleratorTableW
gdi32
CreateFontW
StretchBlt
CreateRoundRectRgn
SetBkMode
BitBlt
PatBlt
Rectangle
CreateDIBSection
CreateFontIndirectW
DeleteDC
GetStockObject
GetObjectW
CreateCompatibleBitmap
CreateSolidBrush
DeleteObject
SetTextColor
GetDeviceCaps
SelectObject
CreateCompatibleDC
advapi32
RegCloseKey
RegQueryValueExW
RegOpenKeyExW
ConvertSidToStringSidW
RegCreateKeyExW
LookupAccountNameW
RegSetValueExW
IsTextUnicode
GetSecurityDescriptorSacl
ConvertStringSecurityDescriptorToSecurityDescriptorW
SetSecurityInfo
SetEntriesInAclW
BuildExplicitAccessWithNameW
GetSecurityInfo
RegQueryValueExA
RegOpenKeyExA
RegOpenKeyW
shell32
Shell_NotifyIconW
ShellExecuteW
SHGetFolderPathW
ShellExecuteExW
SHFileOperationW
SHGetSpecialFolderPathW
SHCreateDirectoryExW
ole32
CoTaskMemFree
StgOpenStorageOnILockBytes
StgCreateDocfile
CreateILockBytesOnHGlobal
StgOpenStorage
CoUninitialize
StringFromGUID2
CoCreateGuid
OleLockRunning
CLSIDFromString
CLSIDFromProgID
CoGetClassObject
CreateStreamOnHGlobal
CoInitialize
OleInitialize
CoCreateInstance
CoGetInterfaceAndReleaseStream
CoInitializeEx
CoMarshalInterThreadInterfaceInStream
CoFreeLibrary
CoLoadLibrary
OleUninitialize
CoTaskMemAlloc
oleaut32
SystemTimeToVariantTime
VariantTimeToSystemTime
VariantInit
VariantClear
SysAllocStringLen
SysFreeString
SysAllocString
SysStringByteLen
LoadTypeLi
LoadRegTypeLi
OleCreateFontIndirect
SysStringLen
SysAllocStringByteLen
shlwapi
PathFileExistsW
wnsprintfW
comctl32
_TrackMouseEvent
ImageList_Create
ImageList_Draw
ImageList_ReplaceIcon
ImageList_Destroy
ord17
ImageList_GetIconSize
wtsapi32
WTSFreeMemory
WTSQuerySessionInformationW
wininet
InternetQueryOptionA
ws2_32
shutdown
sendto
WSAAsyncGetHostByName
connect
WSAAsyncSelect
socket
inet_addr
setsockopt
htonl
closesocket
WSACancelAsyncRequest
WSAGetLastError
WSACleanup
ntohs
recv
send
WSAStartup
htons
ntohl
inet_ntoa
gethostbyname
version
GetFileVersionInfoW
VerQueryValueW
GetFileVersionInfoSizeW
netapi32
Netbios
NetApiBufferFree
NetWkstaTransportEnum
Sections
.text Size: 632KB - Virtual size: 631KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 144KB - Virtual size: 143KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 48KB - Virtual size: 66KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 76KB - Virtual size: 74KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
4.4.1105.400/QQPYMergeDict.exe.exe windows:4 windows x86 arch:x86
caa36f88588043b7ed40679e5e0a5a24
Code Sign
38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5Certificate
IssuerCN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=USNot Before15-06-2007 00:00Not After14-06-2012 23:59SubjectCN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=USExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageContentCommitment
47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4Certificate
IssuerCN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZANot Before04-12-2003 00:00Not After03-12-2013 23:59SubjectCN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=USExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageCertSign
KeyUsageCRLSign
65:52:26:e1:b2:2e:18:e1:59:0f:29:85:ac:22:e7:5cCertificate
IssuerOU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=USNot Before21-05-2009 00:00Not After20-05-2019 23:59SubjectCN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=USExtended Key Usages
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
Key Usages
KeyUsageCertSign
KeyUsageCRLSign
5d:06:88:f9:04:0a:d5:22:87:fc:32:ad:ec:eb:85:b0Certificate
IssuerCN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=USNot Before26-01-2010 00:00Not After25-01-2013 23:59SubjectCN=Tencent Technology(Shenzhen) Company Limited,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Tencent Technology(Shenzhen) Company Limited,L=shenzhen,ST=guangdong,C=CNExtended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
3b:ad:e3:5f:a9:2a:dc:56:a5:f4:fe:00:a5:33:52:20:5b:bb:6d:56Signer
Actual PE Digest3b:ad:e3:5f:a9:2a:dc:56:a5:f4:fe:00:a5:33:52:20:5b:bb:6d:56Digest Algorithmsha1PE Digest MatchestrueHeaders
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
c:\vqq_debug\release\pdb\QQPYMergeDict.pdb
Imports
kernel32
SetFileAttributesW
GetCommandLineW
GetTempPathW
GetTempFileNameW
GetTickCount
CopyFileW
GetFileAttributesW
GetProcAddress
GetModuleFileNameW
LoadLibraryW
MapViewOfFile
UnmapViewOfFile
CreateFileMappingW
OpenFileMappingW
InterlockedIncrement
WritePrivateProfileStringW
GetCurrentProcess
GetVersionExW
GetModuleFileNameA
VirtualQueryEx
GetCurrentProcessId
VirtualQuery
GetThreadSelectorEntry
FreeLibrary
GetCurrentThread
ReadProcessMemory
SetUnhandledExceptionFilter
GetCurrentThreadId
CreateFileA
GetLogicalDrives
GetDriveTypeW
DeviceIoControl
MoveFileW
ProcessIdToSessionId
LocalFree
MapViewOfFileEx
IsDBCSLeadByte
GetCPInfo
EnterCriticalSection
DeleteCriticalSection
LeaveCriticalSection
InitializeCriticalSection
CreateDirectoryW
GetFileType
SetEnvironmentVariableA
CompareStringW
CompareStringA
FlushFileBuffers
GetLocalTime
SystemTimeToFileTime
WideCharToMultiByte
WriteFile
Sleep
SetFilePointer
GetSystemTimeAsFileTime
CloseHandle
FindNextFileW
MultiByteToWideChar
FindClose
GetFileSize
SetLastError
FindResourceW
DeleteFileW
GetFullPathNameW
MoveFileExW
LockResource
GetLastError
CreateFileW
FindResourceExW
ReadFile
SizeofResource
LoadResource
FindFirstFileW
lstrlenW
GetDriveTypeA
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
SetStdHandle
GetLocaleInfoW
GetConsoleMode
GetConsoleCP
IsValidLocale
EnumSystemLocalesA
GetUserDefaultLCID
GetStringTypeW
GetStringTypeA
QueryPerformanceCounter
GetStartupInfoA
SetHandleCount
GetCommandLineA
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetCurrentDirectoryA
GetDateFormatA
GetTimeFormatA
GetTimeZoneInformation
LoadLibraryA
IsValidCodePage
GetOEMCP
TlsFree
TlsSetValue
TlsAlloc
TlsGetValue
GetStdHandle
VirtualAlloc
VirtualFree
HeapCreate
LCMapStringW
LCMapStringA
RaiseException
GetVersionExA
HeapDestroy
HeapAlloc
HeapFree
HeapReAlloc
HeapSize
GetProcessHeap
InterlockedExchange
GetACP
GetLocaleInfoA
GetThreadLocale
InterlockedDecrement
TerminateProcess
UnhandledExceptionFilter
IsDebuggerPresent
GetModuleHandleA
ExitProcess
FileTimeToSystemTime
FileTimeToLocalFileTime
GetStartupInfoW
RtlUnwind
user32
UnregisterClassA
GetCursorPos
GetMonitorInfoW
MonitorFromPoint
advapi32
GetSecurityInfo
SetEntriesInAclW
BuildExplicitAccessWithNameW
SetSecurityInfo
IsTextUnicode
ConvertStringSecurityDescriptorToSecurityDescriptorW
GetSecurityDescriptorSacl
LookupAccountNameW
RegSetValueExW
ConvertSidToStringSidW
RegQueryValueExW
RegQueryValueExA
RegOpenKeyExA
RegOpenKeyExW
RegCreateKeyExW
RegCloseKey
shell32
SHCreateDirectoryExW
SHGetSpecialFolderPathW
SHGetFolderPathW
ole32
StringFromGUID2
CoUninitialize
CoInitialize
CoCreateGuid
shlwapi
PathFileExistsW
wtsapi32
WTSFreeMemory
WTSQuerySessionInformationW
version
VerQueryValueW
GetFileVersionInfoSizeW
GetFileVersionInfoW
ws2_32
WSACleanup
sendto
socket
closesocket
htons
WSAStartup
gethostbyname
netapi32
Netbios
NetWkstaTransportEnum
NetApiBufferFree
Sections
.text Size: 220KB - Virtual size: 218KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 76KB - Virtual size: 75KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 23KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Shared Size: 4KB - Virtual size: 4B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
4.4.1105.400/QQPYSpeechInput.exe.exe windows:4 windows x86 arch:x86
8b2d938ba80145dd9b87e9348e79a6c6
Code Sign
38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5Certificate
IssuerCN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=USNot Before15-06-2007 00:00Not After14-06-2012 23:59SubjectCN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=USExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageContentCommitment
47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4Certificate
IssuerCN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZANot Before04-12-2003 00:00Not After03-12-2013 23:59SubjectCN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=USExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageCertSign
KeyUsageCRLSign
65:52:26:e1:b2:2e:18:e1:59:0f:29:85:ac:22:e7:5cCertificate
IssuerOU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=USNot Before21-05-2009 00:00Not After20-05-2019 23:59SubjectCN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=USExtended Key Usages
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
Key Usages
KeyUsageCertSign
KeyUsageCRLSign
5d:06:88:f9:04:0a:d5:22:87:fc:32:ad:ec:eb:85:b0Certificate
IssuerCN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=USNot Before26-01-2010 00:00Not After25-01-2013 23:59SubjectCN=Tencent Technology(Shenzhen) Company Limited,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Tencent Technology(Shenzhen) Company Limited,L=shenzhen,ST=guangdong,C=CNExtended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
9c:7a:12:9f:26:58:d5:ba:d8:f9:c9:81:88:08:e1:b6:f3:33:d0:5fSigner
Actual PE Digest9c:7a:12:9f:26:58:d5:ba:d8:f9:c9:81:88:08:e1:b6:f3:33:d0:5fDigest Algorithmsha1PE Digest MatchestrueHeaders
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
c:\Program Files\Tencent\QQPinyin\QQPYSpeechInput.pdb
Imports
kernel32
GetStartupInfoW
HeapReAlloc
GetSystemTimeAsFileTime
TerminateProcess
UnhandledExceptionFilter
IsDebuggerPresent
RtlUnwind
RaiseException
HeapSize
VirtualProtect
VirtualAlloc
GetSystemInfo
VirtualQuery
GetStdHandle
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineA
GetCommandLineW
SetHandleCount
GetFileType
GetStartupInfoA
HeapDestroy
GetProcessHeap
VirtualFree
QueryPerformanceCounter
GetTimeZoneInformation
GetACP
GetOEMCP
IsValidCodePage
GetTimeFormatA
GetDateFormatA
GetConsoleCP
GetConsoleMode
LCMapStringA
LCMapStringW
GetLocaleInfoA
GetStringTypeA
GetStringTypeW
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
SetStdHandle
SetEnvironmentVariableA
CreateFileA
HeapAlloc
HeapFree
GetTickCount
GetFileTime
GetFileAttributesW
FileTimeToLocalFileTime
SetErrorMode
GetVolumeInformationW
FindFirstFileW
FindClose
DuplicateHandle
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
GlobalFlags
FileTimeToSystemTime
GetThreadLocale
TlsFree
DeleteCriticalSection
LocalReAlloc
TlsSetValue
TlsAlloc
InitializeCriticalSection
GlobalHandle
GlobalReAlloc
EnterCriticalSection
TlsGetValue
LeaveCriticalSection
LocalAlloc
InterlockedIncrement
GetModuleHandleA
InterlockedDecrement
GlobalAddAtomW
GlobalFindAtomW
CompareStringW
LoadLibraryA
GetVersionExA
FreeResource
GlobalDeleteAtom
ConvertDefaultLocale
GetVersion
EnumResourceLanguagesW
lstrcmpA
GetLocaleInfoW
CompareStringA
InterlockedExchange
lstrcmpW
GetModuleHandleW
SetLastError
GlobalFree
FormatMessageW
MulDiv
lstrlenA
ExitProcess
MultiByteToWideChar
ReadFile
GetFullPathNameW
GetCurrentThread
GetFileSize
WritePrivateProfileStringW
SetFilePointer
GetCPInfo
WriteFile
LocalFree
Sleep
GetCurrentProcess
CreateFileW
FreeLibrary
GetLocalTime
SetUnhandledExceptionFilter
GetCurrentProcessId
GetCurrentThreadId
OpenMutexW
CloseHandle
CreateMutexW
OutputDebugStringW
lstrlenW
WideCharToMultiByte
GlobalUnlock
GlobalAlloc
GlobalLock
SizeofResource
GetProcAddress
GetModuleFileNameW
FindResourceW
LockResource
GetLastError
LoadResource
HeapCreate
LoadLibraryW
user32
PostThreadMessageW
InvalidateRgn
InvalidateRect
SetRect
IsRectEmpty
CopyAcceleratorTableW
CharNextW
CharUpperW
ReleaseCapture
SetCapture
LoadCursorW
GetSysColorBrush
EndPaint
BeginPaint
GetWindowDC
ClientToScreen
GrayStringW
DrawTextExW
TabbedTextOutW
DestroyMenu
GetMessageW
TranslateMessage
GetCursorPos
ValidateRect
SetWindowContextHelpId
MapDialogRect
RegisterWindowMessageW
SendDlgItemMessageA
WinHelpW
IsChild
GetCapture
SetWindowsHookExW
CallNextHookEx
GetClassLongW
GetClassNameW
RemovePropW
GetForegroundWindow
DispatchMessageW
GetTopWindow
UnhookWindowsHookEx
GetMessageTime
GetMessagePos
PeekMessageW
MapWindowPoints
GetKeyState
IsWindowVisible
UpdateWindow
GetMenu
CreateWindowExW
GetClassInfoExW
GetClassInfoW
RegisterClassW
AdjustWindowRectEx
EqualRect
CopyRect
PtInRect
DefWindowProcW
CallWindowProcW
OffsetRect
IntersectRect
SystemParametersInfoA
GetWindowPlacement
GetWindowRect
GetWindowThreadProcessId
MessageBoxW
GetActiveWindow
SetActiveWindow
CreateDialogIndirectParamW
DestroyWindow
GetNextDlgTabItem
EndDialog
SetCursor
GetWindowTextW
SetFocus
IsWindowEnabled
MoveWindow
SetWindowLongW
GetDlgCtrlID
SetWindowTextW
GetWindowLongW
IsDialogMessageW
SendDlgItemMessageW
GetDlgItem
PostMessageW
PostQuitMessage
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
LoadBitmapW
GetFocus
GetParent
ModifyMenuW
EnableMenuItem
CheckMenuItem
GetMenuState
GetMenuItemID
UnregisterClassW
MessageBeep
GetNextDlgGroupItem
GetMenuItemCount
GetSubMenu
GetDC
ReleaseDC
DrawTextW
DrawIcon
AppendMenuW
OpenClipboard
SetWindowPos
GetSystemMetrics
GetMessageExtraInfo
EnableWindow
wsprintfW
EmptyClipboard
GetSystemMenu
SendInput
CloseClipboard
GetClientRect
LoadIconW
GetLastActivePopup
IsIconic
SetForegroundWindow
ShowWindow
SendMessageW
GetWindow
SetPropW
GetDesktopWindow
IsWindow
GetPropW
GetClipboardData
RegisterClipboardFormatW
SetClipboardData
GetSysColor
UnregisterClassA
gdi32
SetWindowExtEx
ScaleWindowExtEx
GetBkColor
GetTextColor
GetRgnBox
GetMapMode
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
Escape
TextOutW
PtVisible
GetWindowExtEx
GetViewportExtEx
GetObjectW
ExtTextOutW
GetDeviceCaps
DeleteDC
GetDIBits
GetClipBox
SetBkColor
RectVisible
CreateBitmap
ExtSelectClipRgn
GetStockObject
DeleteObject
RestoreDC
SelectObject
CreateRectRgnIndirect
SaveDC
SetTextColor
SetMapMode
comdlg32
GetFileTitleW
winspool.drv
ClosePrinter
DocumentPropertiesW
OpenPrinterW
advapi32
GetSecurityInfo
RegSetValueExW
RegCreateKeyExW
RegQueryValueW
RegEnumKeyW
RegDeleteKeyW
RegOpenKeyW
RegCloseKey
SetEntriesInAclW
GetSecurityDescriptorSacl
SetSecurityInfo
ConvertStringSecurityDescriptorToSecurityDescriptorW
BuildExplicitAccessWithNameW
RegOpenKeyExW
RegQueryValueExW
shell32
SHGetSpecialFolderPathW
comctl32
InitCommonControlsEx
shlwapi
PathFindExtensionW
PathFindFileNameW
PathStripToRootW
PathFileExistsW
PathIsUNCW
oledlg
OleUIBusyW
ole32
CoFreeUnusedLibraries
OleUninitialize
CreateILockBytesOnHGlobal
StgCreateDocfileOnILockBytes
StgOpenStorageOnILockBytes
CoGetClassObject
CLSIDFromString
CLSIDFromProgID
OleInitialize
CoTaskMemAlloc
CoTaskMemFree
CoRevokeClassObject
OleIsCurrentClipboard
OleFlushClipboard
CoRegisterMessageFilter
oleaut32
SysAllocString
OleCreateFontIndirect
SystemTimeToVariantTime
VariantTimeToSystemTime
SafeArrayDestroy
VariantCopy
SysAllocStringLen
VariantInit
VariantChangeType
VariantClear
SysFreeString
SysStringLen
psapi
GetProcessMemoryInfo
dbghelp
MiniDumpWriteDump
Sections
.text Size: 416KB - Virtual size: 414KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 108KB - Virtual size: 107KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 16KB - Virtual size: 27KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 32KB - Virtual size: 31KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
4.4.1105.400/QQPYStat.exe.exe windows:4 windows x86 arch:x86
6cca11491a69bd0fec48b1ef7f90af83
Code Sign
38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5Certificate
IssuerCN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=USNot Before15-06-2007 00:00Not After14-06-2012 23:59SubjectCN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=USExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageContentCommitment
47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4Certificate
IssuerCN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZANot Before04-12-2003 00:00Not After03-12-2013 23:59SubjectCN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=USExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageCertSign
KeyUsageCRLSign
65:52:26:e1:b2:2e:18:e1:59:0f:29:85:ac:22:e7:5cCertificate
IssuerOU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=USNot Before21-05-2009 00:00Not After20-05-2019 23:59SubjectCN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=USExtended Key Usages
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
Key Usages
KeyUsageCertSign
KeyUsageCRLSign
5d:06:88:f9:04:0a:d5:22:87:fc:32:ad:ec:eb:85:b0Certificate
IssuerCN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=USNot Before26-01-2010 00:00Not After25-01-2013 23:59SubjectCN=Tencent Technology(Shenzhen) Company Limited,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Tencent Technology(Shenzhen) Company Limited,L=shenzhen,ST=guangdong,C=CNExtended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
9c:c9:a0:0b:af:f7:65:d6:31:6c:98:bc:89:39:2b:ff:93:dc:f4:0fSigner
Actual PE Digest9c:c9:a0:0b:af:f7:65:d6:31:6c:98:bc:89:39:2b:ff:93:dc:f4:0fDigest Algorithmsha1PE Digest MatchestrueHeaders
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
c:\vqq_debug\Release\pdb\QQPYStat.pdb
Imports
kernel32
GetCPInfo
GetFullPathNameW
WideCharToMultiByte
ExitProcess
lstrlenA
GetFileType
SetHandleCount
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetStdHandle
GetCurrentDirectoryA
GetDateFormatA
GetTimeFormatA
LCMapStringW
LCMapStringA
IsValidCodePage
GetOEMCP
HeapCreate
GetTimeZoneInformation
Sleep
InterlockedDecrement
TlsFree
TlsSetValue
TlsAlloc
TlsGetValue
GetModuleHandleA
RtlUnwind
GetStartupInfoA
GetCommandLineA
CreateDirectoryW
FileTimeToLocalFileTime
FileTimeToSystemTime
GetSystemTimeAsFileTime
IsDebuggerPresent
UnhandledExceptionFilter
TerminateProcess
GetThreadLocale
GetLocaleInfoA
GetACP
LocalFree
FindClose
DeviceIoControl
FindFirstFileW
GetDriveTypeW
GetLogicalDrives
CopyFileW
VirtualQuery
GetModuleFileNameA
VirtualQueryEx
GetVersionExW
WritePrivateProfileStringW
ReadFile
CreateFileA
SetUnhandledExceptionFilter
ReadProcessMemory
GetCurrentThread
SetFilePointer
FreeLibrary
GetCurrentProcessId
GetThreadSelectorEntry
InterlockedExchange
DeleteFileW
InterlockedIncrement
GetLocalTime
SystemTimeToFileTime
RaiseException
SetLastError
FlushInstructionCache
GetCurrentProcess
LeaveCriticalSection
EnterCriticalSection
GetCurrentThreadId
CreateMutexW
OpenMutexW
MultiByteToWideChar
GlobalUnlock
GlobalLock
GlobalAlloc
GetModuleHandleW
ReleaseMutex
WaitForSingleObject
GetTickCount
GetFileSize
CreateFileMappingW
MapViewOfFileEx
CloseHandle
WriteFile
UnmapViewOfFile
CreateFileW
LoadResource
LockResource
SizeofResource
GetLastError
FindResourceW
GetProcAddress
LoadLibraryW
GetModuleFileNameW
FindResourceExW
VirtualAlloc
VirtualFree
IsProcessorFeaturePresent
LoadLibraryA
InterlockedCompareExchange
GetDriveTypeA
SetEnvironmentVariableA
CompareStringW
CompareStringA
GetProcessHeap
HeapSize
HeapReAlloc
HeapFree
HeapAlloc
HeapDestroy
SetEndOfFile
GetVersionExA
DeleteCriticalSection
GetLocaleInfoW
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
SetStdHandle
IsValidLocale
EnumSystemLocalesA
GetUserDefaultLCID
GetStringTypeW
GetStringTypeA
FlushFileBuffers
GetConsoleMode
GetConsoleCP
InitializeCriticalSection
QueryPerformanceCounter
user32
UnregisterClassA
GetCursorPos
GetMonitorInfoW
MonitorFromPoint
SetForegroundWindow
ShowWindow
IsIconic
GetWindowLongW
GetActiveWindow
EnumWindows
DialogBoxParamW
LoadIconW
SetTimer
SetWindowLongW
InvalidateRect
GetDlgItem
SetWindowTextW
GetWindowTextW
CloseClipboard
SetClipboardData
EmptyClipboard
OpenClipboard
EndDialog
MessageBoxW
KillTimer
SendMessageW
ValidateRect
ScreenToClient
GetWindowRect
ReleaseDC
GetDesktopWindow
GetDC
GetSystemMetrics
IsWindowVisible
gdi32
GetDIBits
GetObjectW
CreateFontIndirectW
GetTextExtentPointW
LineTo
MoveToEx
TextOutW
SetBkMode
SetTextColor
Rectangle
CreatePen
CreateSolidBrush
BitBlt
CreateCompatibleBitmap
CreateCompatibleDC
DeleteObject
DeleteDC
SelectObject
advapi32
RegCloseKey
RegOpenKeyExW
GetSecurityDescriptorSacl
ConvertStringSecurityDescriptorToSecurityDescriptorW
SetSecurityInfo
SetEntriesInAclW
BuildExplicitAccessWithNameW
GetSecurityInfo
RegQueryValueExW
RegOpenKeyExA
RegQueryValueExA
shell32
SHGetSpecialFolderPathW
SHCreateDirectoryExW
SHGetFolderPathW
ShellExecuteW
ole32
CoInitialize
CoCreateGuid
CoUninitialize
oleaut32
SystemTimeToVariantTime
VariantTimeToSystemTime
shlwapi
PathFileExistsW
comctl32
ord17
version
GetFileVersionInfoSizeW
GetFileVersionInfoW
VerQueryValueW
ws2_32
sendto
WSAStartup
WSACleanup
htons
socket
gethostbyname
closesocket
netapi32
NetWkstaTransportEnum
Netbios
NetApiBufferFree
Sections
.text Size: 388KB - Virtual size: 384KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 84KB - Virtual size: 82KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 28KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
4.4.1105.400/QQPYTrayBar.exe.exe windows:4 windows x86 arch:x86
a5ac03e0ca102e15448e6f62b54168c3
Code Sign
38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5Certificate
IssuerCN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=USNot Before15-06-2007 00:00Not After14-06-2012 23:59SubjectCN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=USExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageContentCommitment
47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4Certificate
IssuerCN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZANot Before04-12-2003 00:00Not After03-12-2013 23:59SubjectCN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=USExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageCertSign
KeyUsageCRLSign
65:52:26:e1:b2:2e:18:e1:59:0f:29:85:ac:22:e7:5cCertificate
IssuerOU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=USNot Before21-05-2009 00:00Not After20-05-2019 23:59SubjectCN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=USExtended Key Usages
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
Key Usages
KeyUsageCertSign
KeyUsageCRLSign
5d:06:88:f9:04:0a:d5:22:87:fc:32:ad:ec:eb:85:b0Certificate
IssuerCN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=USNot Before26-01-2010 00:00Not After25-01-2013 23:59SubjectCN=Tencent Technology(Shenzhen) Company Limited,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Tencent Technology(Shenzhen) Company Limited,L=shenzhen,ST=guangdong,C=CNExtended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
86:5e:64:52:27:97:6a:3c:7d:fb:40:6f:db:13:9a:56:53:be:cc:96Signer
Actual PE Digest86:5e:64:52:27:97:6a:3c:7d:fb:40:6f:db:13:9a:56:53:be:cc:96Digest Algorithmsha1PE Digest MatchestrueHeaders
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
c:\vqq_debug\release\pdb\QQPYTrayBar.pdb
Imports
wtsapi32
WTSFreeMemory
WTSQuerySessionInformationW
kernel32
GetSystemTime
SetFileTime
SetFileAttributesW
GetFileAttributesW
MulDiv
MapViewOfFileEx
GetFullPathNameW
GetCPInfo
IsDBCSLeadByte
InitializeCriticalSection
DeleteCriticalSection
WriteConsoleW
GetStdHandle
FreeResource
GetDriveTypeA
SetEndOfFile
GetConsoleOutputCP
WriteConsoleA
GetLocaleInfoW
SetStdHandle
IsValidLocale
EnumSystemLocalesA
GetUserDefaultLCID
FlushFileBuffers
GetConsoleMode
GetConsoleCP
QueryPerformanceCounter
GetStartupInfoA
GetFileType
SetHandleCount
GetCommandLineW
GetCommandLineA
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetFileTime
GetCurrentDirectoryA
GetDateFormatA
GetTimeFormatA
CreateMutexW
HeapCreate
IsValidCodePage
GetOEMCP
ExitProcess
TlsFree
TlsSetValue
GetVersion
TlsGetValue
GetModuleHandleA
LCMapStringW
LCMapStringA
GetStringTypeW
GetStringTypeA
RtlUnwind
GetStartupInfoW
FileTimeToLocalFileTime
FileTimeToSystemTime
CreateDirectoryW
GetSystemTimeAsFileTime
IsDebuggerPresent
UnhandledExceptionFilter
TerminateProcess
Sleep
VirtualAlloc
VirtualFree
IsProcessorFeaturePresent
LoadLibraryA
InterlockedCompareExchange
GetThreadLocale
GetLocaleInfoA
GetACP
InterlockedExchange
GetProcessHeap
HeapSize
HeapReAlloc
HeapFree
HeapAlloc
HeapDestroy
GetVersionExA
CreateFileW
FindClose
FindFirstFileW
WaitForSingleObject
CompareStringW
SetEnvironmentVariableA
GlobalLock
GlobalUnlock
lstrlenA
GetFileSizeEx
VirtualFreeEx
VirtualAllocEx
OutputDebugStringW
GetTimeZoneInformation
WideCharToMultiByte
OpenMutexW
lstrlenW
GlobalFree
OpenProcess
InterlockedDecrement
GlobalAlloc
InterlockedIncrement
RaiseException
SetLastError
LocalFree
ProcessIdToSessionId
FlushInstructionCache
QueryDosDeviceW
GetDriveTypeW
GetLogicalDrives
CopyFileW
GetDiskFreeSpaceExW
DeviceIoControl
FreeLibrary
GetVersionExW
GetCurrentThread
GetModuleFileNameA
VirtualQuery
GetCurrentProcessId
WritePrivateProfileStringW
ReadProcessMemory
VirtualQueryEx
GetThreadSelectorEntry
SetUnhandledExceptionFilter
CreateFileA
CreateFileMappingW
GetTickCount
OpenFileMappingW
SystemTimeToFileTime
GetLocalTime
UnmapViewOfFile
MapViewOfFile
GetProcAddress
LoadLibraryW
GetModuleFileNameW
SetFilePointer
GetLastError
WriteFile
ReadFile
GetFileSize
FindNextFileW
DeleteFileW
GetCurrentProcess
LeaveCriticalSection
EnterCriticalSection
GetCurrentThreadId
FindResourceExW
LoadResource
LockResource
SizeofResource
MultiByteToWideChar
FindResourceW
TlsAlloc
CloseHandle
CompareStringA
user32
EnumDisplayMonitors
MoveWindow
UpdateLayeredWindow
PostMessageW
SetWindowPos
IsWindowVisible
UpdateWindow
RegisterClassExW
GetClassInfoExW
UnregisterClassW
GetPropW
GetDesktopWindow
SetPropW
GetWindowThreadProcessId
SetRectEmpty
UnregisterClassA
FindWindowExW
CallNextHookEx
CopyRect
GetMenuItemID
DrawTextW
WindowFromPoint
FillRect
MenuItemFromPoint
UnhookWindowsHookEx
SetWindowsHookExW
GetSysColor
GetSysColorBrush
GetKeyNameTextW
MapVirtualKeyW
SetRect
ReleaseDC
GetDC
MonitorFromPoint
GetMonitorInfoW
CreateWindowExW
DestroyWindow
MessageBoxW
GetKeyboardLayoutList
TrackPopupMenu
LoadBitmapW
SystemParametersInfoW
DestroyMenu
FindWindowW
AppendMenuW
IsWindow
CreateMenu
GetWindowRect
GetMenuItemRect
GetKeyState
GetMenuItemInfoW
GetMenuItemCount
EnableMenuItem
CheckMenuRadioItem
CheckMenuItem
LoadIconW
SetMenuItemBitmaps
GetSubMenu
LoadMenuW
PostQuitMessage
InsertMenuW
DialogBoxParamW
SetForegroundWindow
ModifyMenuW
RegisterWindowMessageW
DispatchMessageW
TranslateMessage
IsDialogMessageW
CreateDialogParamW
GetMessageW
ShowWindow
SetWindowTextW
SendMessageW
GetDlgItem
CallWindowProcW
LoadCursorW
SetCursor
SetTimer
InvalidateRect
KillTimer
PtInRect
GetClientRect
ScreenToClient
GetMessagePos
ClientToScreen
OffsetRect
GetCursorPos
EndPaint
BeginPaint
DefWindowProcW
EndDialog
SetWindowLongW
DestroyIcon
GetWindowLongW
LoadImageW
GetWindow
gdi32
GetDeviceCaps
GetObjectW
CreateDIBSection
Rectangle
PatBlt
CreateCompatibleBitmap
CreateCompatibleDC
SelectObject
SetPixel
GetPixel
SetBkMode
CreateFontIndirectW
BitBlt
CreateSolidBrush
CreatePen
StretchDIBits
SetStretchBltMode
DeleteDC
CreateFontW
SetTextColor
DeleteObject
Ellipse
advapi32
OpenProcessToken
GetTokenInformation
LookupAccountSidW
RegSetValueExW
RegOpenKeyExA
RegQueryValueExA
RegCreateKeyExW
RegQueryValueExW
RegOpenKeyExW
RegCloseKey
LookupAccountNameW
ConvertStringSecurityDescriptorToSecurityDescriptorW
GetSecurityDescriptorSacl
IsTextUnicode
GetSecurityInfo
BuildExplicitAccessWithNameW
SetEntriesInAclW
SetSecurityInfo
ConvertSidToStringSidW
shell32
SHCreateDirectoryExW
SHGetFolderPathW
SHGetSpecialFolderPathW
ShellExecuteExW
ShellExecuteW
Shell_NotifyIconW
ole32
CoCreateGuid
CoInitialize
CoUninitialize
StgCreateDocfile
StgOpenStorage
StgOpenStorageOnILockBytes
CreateILockBytesOnHGlobal
shlwapi
PathFileExistsW
comctl32
ord17
msimg32
TransparentBlt
imm32
ImmGetIMEFileNameW
ImmGetHotKey
version
VerQueryValueW
GetFileVersionInfoW
GetFileVersionInfoSizeW
ws2_32
WSAStartup
socket
WSACleanup
closesocket
sendto
gethostbyname
ntohl
htonl
htons
netapi32
NetApiBufferFree
Netbios
NetWkstaTransportEnum
Sections
.text Size: 624KB - Virtual size: 623KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 124KB - Virtual size: 122KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 168KB - Virtual size: 165KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
4.4.1105.400/QQPYWizard.exe.exe windows:4 windows x86 arch:x86
ca7f5645071f6622864ceeb9a15031df
Code Sign
38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5Certificate
IssuerCN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=USNot Before15-06-2007 00:00Not After14-06-2012 23:59SubjectCN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=USExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageContentCommitment
47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4Certificate
IssuerCN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZANot Before04-12-2003 00:00Not After03-12-2013 23:59SubjectCN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=USExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageCertSign
KeyUsageCRLSign
65:52:26:e1:b2:2e:18:e1:59:0f:29:85:ac:22:e7:5cCertificate
IssuerOU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=USNot Before21-05-2009 00:00Not After20-05-2019 23:59SubjectCN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=USExtended Key Usages
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
Key Usages
KeyUsageCertSign
KeyUsageCRLSign
5d:06:88:f9:04:0a:d5:22:87:fc:32:ad:ec:eb:85:b0Certificate
IssuerCN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=USNot Before26-01-2010 00:00Not After25-01-2013 23:59SubjectCN=Tencent Technology(Shenzhen) Company Limited,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Tencent Technology(Shenzhen) Company Limited,L=shenzhen,ST=guangdong,C=CNExtended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
76:ec:6e:1b:4b:a5:64:17:6f:0b:f4:ea:4e:d1:41:9a:24:e7:a1:c8Signer
Actual PE Digest76:ec:6e:1b:4b:a5:64:17:6f:0b:f4:ea:4e:d1:41:9a:24:e7:a1:c8Digest Algorithmsha1PE Digest MatchestrueHeaders
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
c:\vqq_debug\Release\pdb\QQPYWizard.pdb
Imports
wtsapi32
WTSFreeMemory
WTSQuerySessionInformationW
wininet
InternetQueryOptionA
kernel32
ProcessIdToSessionId
SetFileAttributesW
GetSystemTime
SetFileTime
GetCPInfo
IsDBCSLeadByte
QueryPerformanceCounter
LoadLibraryW
InitializeCriticalSection
DeleteCriticalSection
GetStdHandle
WriteConsoleW
MulDiv
FreeResource
SetEndOfFile
GetTempFileNameW
GetTempPathW
MoveFileW
FileTimeToSystemTime
GetDriveTypeW
GetLogicalDrives
CopyFileW
lstrcpynW
GetCurrentThread
GetVersionExW
GetModuleFileNameW
GetModuleFileNameA
ReadProcessMemory
GetFileSizeEx
GlobalLock
GlobalUnlock
GetThreadLocale
IsProcessorFeaturePresent
InterlockedCompareExchange
SetEnvironmentVariableA
CompareStringA
GetDriveTypeA
GetConsoleOutputCP
WriteConsoleA
SetStdHandle
IsValidLocale
SetUnhandledExceptionFilter
GetLocaleInfoA
LoadLibraryA
InterlockedExchange
GetFileType
SetHandleCount
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
FlushFileBuffers
GetConsoleMode
GetConsoleCP
GetCurrentDirectoryA
GetDateFormatA
GetTimeFormatA
GetTimeZoneInformation
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
IsValidCodePage
GetOEMCP
GetACP
HeapSize
TlsFree
TlsSetValue
TlsAlloc
TlsGetValue
ExitProcess
GetModuleHandleA
VirtualAlloc
VirtualFree
HeapCreate
HeapDestroy
RtlUnwind
GetStartupInfoA
GetProcessHeap
GetVersionExA
GetCommandLineA
CreateDirectoryW
FileTimeToLocalFileTime
GetSystemTimeAsFileTime
HeapReAlloc
IsDebuggerPresent
UnhandledExceptionFilter
TerminateProcess
HeapAlloc
HeapFree
SizeofResource
LockResource
LoadResource
FindResourceExW
LocalFree
GetDiskFreeSpaceExW
DeviceIoControl
EnumSystemLocalesA
QueryDosDeviceW
WaitForSingleObject
CreateFileA
VirtualQueryEx
GetThreadSelectorEntry
ReleaseMutex
GetCurrentProcessId
VirtualQuery
OpenFileMappingW
MapViewOfFile
GetFullPathNameW
MoveFileExW
DeleteFileW
InterlockedIncrement
CreateThread
InterlockedDecrement
lstrlenA
CreateFileMappingW
MapViewOfFileEx
UnmapViewOfFile
GetFileAttributesW
FreeLibrary
GetProcAddress
GetFileTime
WideCharToMultiByte
CreateMutexW
OpenMutexW
SystemTimeToFileTime
GetLocalTime
GetCommandLineW
GetLocaleInfoW
GlobalAlloc
GetSystemDirectoryW
GlobalFree
GlobalAddAtomW
SetFilePointer
GetLastError
SetLastError
ReadFile
RaiseException
WriteFile
LeaveCriticalSection
EnterCriticalSection
GetCurrentThreadId
GetFileSize
CreateFileW
FindFirstFileW
GetPrivateProfileIntW
MultiByteToWideChar
WritePrivateProfileStringW
WritePrivateProfileSectionW
GetTickCount
GetPrivateProfileStringW
FindClose
FindNextFileW
FlushInstructionCache
lstrcmpiW
GetCurrentProcess
lstrlenW
CompareStringW
FindResourceW
Sleep
CloseHandle
GetUserDefaultLCID
user32
SystemParametersInfoW
SetFocus
PostQuitMessage
GetWindowLongW
UpdateWindow
GetWindowTextW
SetWindowLongW
EnumDisplayMonitors
PostMessageW
OffsetRect
CharNextW
UnregisterClassA
DefWindowProcW
GetDlgItem
CallWindowProcW
ReleaseDC
SetCursor
GetWindowTextLengthW
GetDC
PtInRect
GetClientRect
GetWindowRect
GetParent
InvalidateRect
EndPaint
SetWindowTextW
GetCursorPos
CreateWindowExW
BeginPaint
ShowWindow
ScreenToClient
SendMessageW
DrawFocusRect
GetDlgCtrlID
GetActiveWindow
SetScrollInfo
SetScrollRange
SetScrollPos
GetScrollPos
TranslateMessage
IsDialogMessageW
GetMessageW
GetPropW
GetWindow
GetDesktopWindow
DispatchMessageW
DialogBoxParamW
GetMonitorInfoW
MonitorFromPoint
SetForegroundWindow
LoadImageW
MoveWindow
CreateDialogParamW
SetPropW
MessageBoxW
KillTimer
SetTimer
IsWindowVisible
LoadBitmapW
GetFocus
UnloadKeyboardLayout
DestroyIcon
EnableWindow
LoadIconW
GetKeyboardLayoutList
UnregisterHotKey
RegisterHotKey
LoadKeyboardLayoutW
EndDialog
GetClassInfoExW
RegisterClassExW
GetSysColorBrush
IsWindow
IsWindowEnabled
SetCapture
GetClassNameW
GetSysColor
DestroyWindow
GetCapture
ReleaseCapture
SetWindowPos
DrawTextW
LoadCursorW
SetRectEmpty
FillRect
gdi32
RestoreDC
SaveDC
GetDeviceCaps
LineTo
CreateDIBSection
MoveToEx
BitBlt
GetPixel
CreateCompatibleDC
SetBkColor
CreateSolidBrush
SelectObject
CreatePen
GetStockObject
SetTextColor
DeleteDC
GetObjectW
CreateFontIndirectW
DeleteObject
SetBkMode
Rectangle
CreateFontW
advapi32
RegOpenKeyExW
RegCloseKey
RegEnumKeyExW
RegCreateKeyExW
RegSetValueExW
RegDeleteKeyW
RegOpenKeyW
RegCreateKeyW
RegOpenKeyExA
IsTextUnicode
GetSecurityDescriptorSacl
ConvertStringSecurityDescriptorToSecurityDescriptorW
SetSecurityInfo
SetEntriesInAclW
BuildExplicitAccessWithNameW
GetSecurityInfo
RegQueryValueExW
LookupAccountSidW
OpenProcessToken
LookupAccountNameW
GetTokenInformation
ConvertSidToStringSidW
RegQueryValueExA
shell32
ExtractIconExW
SHCreateDirectoryExW
ShellExecuteW
SHGetFolderPathW
SHGetSpecialFolderPathW
Shell_NotifyIconW
ole32
CoTaskMemFree
CoInitialize
CoCreateInstance
CoUninitialize
CoCreateGuid
StgOpenStorageOnILockBytes
CreateILockBytesOnHGlobal
StgOpenStorage
StgCreateDocfile
oleaut32
SysFreeString
shlwapi
PathFileExistsW
comctl32
ord17
ImageList_ReplaceIcon
ImageList_Create
ImageList_SetBkColor
_TrackMouseEvent
ImageList_Remove
msimg32
TransparentBlt
imm32
ImmDisableIME
ImmSetOpenStatus
ImmUnlockIMC
ImmIsIME
ImmGetIMEFileNameW
ImmGetDescriptionW
ImmGetContext
ws2_32
setsockopt
shutdown
sendto
gethostbyname
WSACleanup
ntohs
recv
ntohl
WSAAsyncGetHostByName
connect
WSAAsyncSelect
socket
htons
inet_addr
inet_ntoa
htonl
closesocket
WSACancelAsyncRequest
WSAGetLastError
WSAStartup
send
version
GetFileVersionInfoSizeW
GetFileVersionInfoW
VerQueryValueW
netapi32
NetWkstaTransportEnum
NetApiBufferFree
Netbios
Sections
.text Size: 1.2MB - Virtual size: 1.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 232KB - Virtual size: 228KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 40KB - Virtual size: 69KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512KB - Virtual size: 509KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
4.4.1105.400/QQPinyin.ico
-
4.4.1105.400/Skin/2.0/recommend/like black 2.skn
-
4.4.1105.400/Skin/2.0/recommend/like black 3.skn
-
4.4.1105.400/Skin/2.0/recommend/ϰƤ.skn
-
4.4.1105.400/Skin/Default/about.bmp
-
4.4.1105.400/Skin/SkinlistOrder.dat
-
4.4.1105.400/Skin/wizardskin.lst
-
4.4.1105.400/TRCloudInputLib.dll.dll windows:4 windows x86 arch:x86
76549ade739b2409529e88333d48f8ac
Code Sign
38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5Certificate
IssuerCN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=USNot Before15-06-2007 00:00Not After14-06-2012 23:59SubjectCN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=USExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageContentCommitment
47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4Certificate
IssuerCN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZANot Before04-12-2003 00:00Not After03-12-2013 23:59SubjectCN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=USExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageCertSign
KeyUsageCRLSign
65:52:26:e1:b2:2e:18:e1:59:0f:29:85:ac:22:e7:5cCertificate
IssuerOU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=USNot Before21-05-2009 00:00Not After20-05-2019 23:59SubjectCN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=USExtended Key Usages
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
Key Usages
KeyUsageCertSign
KeyUsageCRLSign
5d:06:88:f9:04:0a:d5:22:87:fc:32:ad:ec:eb:85:b0Certificate
IssuerCN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=USNot Before26-01-2010 00:00Not After25-01-2013 23:59SubjectCN=Tencent Technology(Shenzhen) Company Limited,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Tencent Technology(Shenzhen) Company Limited,L=shenzhen,ST=guangdong,C=CNExtended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
82:66:c7:59:88:31:82:ea:09:bc:72:4c:da:be:3a:28:06:a3:bc:b4Signer
Actual PE Digest82:66:c7:59:88:31:82:ea:09:bc:72:4c:da:be:3a:28:06:a3:bc:b4Digest Algorithmsha1PE Digest MatchestrueHeaders
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
e:\人机交互\手写识别\QQCloudInputPlugin\Release\TRCloudInputLib.pdb
Imports
wtsapi32
WTSFreeMemory
WTSQuerySessionInformationW
wininet
InternetQueryOptionA
kernel32
ExitProcess
GetProcAddress
GetModuleHandleA
GetVersion
GetFileType
SetHandleCount
RtlUnwind
GetCommandLineA
CreateFileA
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
GetSystemTimeAsFileTime
VirtualAlloc
VirtualFree
IsProcessorFeaturePresent
LoadLibraryA
InterlockedCompareExchange
GetThreadLocale
GetLocaleInfoA
GetACP
GetVersionExA
GetProcessHeap
HeapSize
HeapReAlloc
HeapFree
HeapAlloc
HeapDestroy
WriteFile
GetConsoleMode
FlushFileBuffers
GetModuleFileNameA
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
HeapCreate
GetCPInfo
GetOEMCP
IsValidCodePage
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
SetFilePointer
SetStdHandle
ReadFile
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
WriteConsoleA
GetConsoleOutputCP
GetStartupInfoA
InitializeCriticalSection
DeleteCriticalSection
GetCurrentThreadId
SetLastError
RaiseException
FlushInstructionCache
lstrlenA
GetTickCount
InterlockedDecrement
MulDiv
InterlockedIncrement
GetCurrentProcessId
GetCurrentProcess
GetVersionExW
LocalFree
lstrlenW
ProcessIdToSessionId
InterlockedExchange
CloseHandle
SetEvent
CreateEventW
ResetEvent
QueryPerformanceCounter
MultiByteToWideChar
Sleep
QueryPerformanceFrequency
LoadResource
LockResource
FindResourceW
SizeofResource
FindResourceExW
GetLastError
WideCharToMultiByte
WriteConsoleW
GetStdHandle
LeaveCriticalSection
WaitForSingleObject
EnterCriticalSection
CompareStringA
CompareStringW
SetEnvironmentVariableA
GetConsoleCP
user32
UnregisterClassA
MessageBoxA
GetDesktopWindow
GetProcessWindowStation
GetUserObjectInformationW
CreateDialogParamW
CallWindowProcW
SystemParametersInfoW
SetRect
DrawTextW
CreateWindowExW
RegisterClassExW
DefWindowProcW
GetClassInfoExW
UpdateWindow
UnregisterClassW
UpdateLayeredWindow
GetWindowRect
GetSystemMetrics
BeginPaint
GetDlgCtrlID
MoveWindow
ReleaseDC
GetParent
TrackMouseEvent
EnableWindow
EndPaint
GetDC
DestroyWindow
LoadIconW
GetWindowPlacement
SetWindowPos
DestroyIcon
KillTimer
ScreenToClient
SetWindowRgn
OffsetRect
SetWindowLongW
GetMessageExtraInfo
SetCapture
ShowWindow
InvalidateRect
PtInRect
ReleaseCapture
SendInput
SetTimer
GetCursorPos
GetClientRect
LoadCursorW
GetDlgItem
SetWindowTextW
IsWindowVisible
LoadImageW
SetCursor
PostMessageW
GetWindowLongW
SendMessageW
IsWindow
gdi32
SaveDC
RestoreDC
ExtCreateRegion
CombineRgn
SetTextColor
CreateSolidBrush
SetBkMode
CreateCompatibleDC
CreateDIBSection
PatBlt
GetObjectW
CreateFontIndirectW
GetDeviceCaps
Rectangle
MoveToEx
CreatePen
DeleteDC
DeleteObject
BitBlt
LineTo
CreateRoundRectRgn
SelectObject
CreateFontW
advapi32
RegisterEventSourceA
ReportEventA
DeregisterEventSource
LookupAccountNameW
RegOpenKeyExW
ConvertSidToStringSidW
RegQueryValueExW
RegCloseKey
winmm
waveOutWrite
waveOutUnprepareHeader
waveInUnprepareHeader
waveInOpen
waveInAddBuffer
waveInStop
waveOutOpen
waveOutClose
waveInReset
waveOutRestart
waveInClose
waveInStart
waveOutPause
waveOutPrepareHeader
waveOutReset
waveInPrepareHeader
ws2_32
closesocket
htons
WSACancelAsyncRequest
send
WSAStartup
WSAAsyncGetHostByName
WSAGetLastError
inet_ntoa
connect
WSAAsyncSelect
htonl
recv
inet_addr
WSACleanup
socket
Exports
Exports
TRInput_HWClose
TRInput_HWOpen
TRInput_HWRefresh
TRInput_Init
TRInput_Release
TRInput_SRClose
TRInput_SROnHotKey
TRInput_SROpen
TRInput_SRRefresh
TRInput_SRSetHotKey
Sections
.text Size: 480KB - Virtual size: 476KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 104KB - Virtual size: 102KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 208KB - Virtual size: 206KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 32KB - Virtual size: 31KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
4.4.1105.400/WeatherPlace.dat
-
4.4.1105.400/abcbihua.dat
-
4.4.1105.400/bihua.dat
-
4.4.1105.400/celldict.dat
-
4.4.1105.400/cemi.dat
-
4.4.1105.400/core.dict
-
4.4.1105.400/engcore.dat
-
4.4.1105.400/name.dict
-
4.4.1105.400/phrase.ini
-
4.4.1105.400/phrase_abc.ini
-
4.4.1105.400/punc.ini
-
4.4.1105.400/shuangpin/abc.dat
-
4.4.1105.400/shuangpin/mspy2003.dat
-
4.4.1105.400/shuangpin/pyjj.dat
-
4.4.1105.400/shuangpin/shuangpin.lst
-
4.4.1105.400/shuangpin/unispim.dat
-
4.4.1105.400/shuangpin/xiaohe.dat
-
4.4.1105.400/shuangpin/ziranma.dat
-
4.4.1105.400/simp2trad.dat.ps1
-
4.4.1105.400/simp2tradword.dat
-
4.4.1105.400/speclist.ini
-
4.4.1105.400/split.dat
-
4.4.1105.400/split.dict
-
4.4.1105.400/stock.ini
-
4.4.1105.400/stroke.dat
-
4.4.1105.400/swl.dat
-
4.4.1105.400/url.dat
-
4.4.1105.400/urlguide.dat
-
4.4.1105.400/zlib1.dll.dll windows:4 windows x86 arch:x86
9039c7c013568bc8e3fb64434380390c
Code Sign
38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5Certificate
IssuerCN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=USNot Before15-06-2007 00:00Not After14-06-2012 23:59SubjectCN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=USExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageContentCommitment
47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4Certificate
IssuerCN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZANot Before04-12-2003 00:00Not After03-12-2013 23:59SubjectCN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=USExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageCertSign
KeyUsageCRLSign
41:91:a1:5a:39:78:df:cf:49:65:66:38:1d:4c:75:c2Certificate
IssuerOU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=USNot Before16-07-2004 00:00Not After15-07-2014 23:59SubjectCN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=USExtended Key Usages
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
Key Usages
KeyUsageCertSign
KeyUsageCRLSign
0d:55:f9:95:e6:cd:a7:e4:0d:b8:62:9e:5a:f1:5e:48Certificate
IssuerCN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=USNot Before26-02-2007 00:00Not After26-02-2008 23:59SubjectCN=Tencent Technology(Shenzhen) Company Limited,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=Shenzhen R&D Center,O=Tencent Technology(Shenzhen) Company Limited,L=Shenzhen,ST=Guangdong,C=CNExtended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
1d:4d:10:47:1c:d1:09:78:45:8f:46:3f:0d:ed:3f:fc:b9:ca:69:20Signer
Actual PE Digest1d:4d:10:47:1c:d1:09:78:45:8f:46:3f:0d:ed:3f:fc:b9:ca:69:20Digest Algorithmsha1PE Digest MatchestrueHeaders
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
HeapAlloc
HeapFree
GetCommandLineA
GetVersion
EnterCriticalSection
LeaveCriticalSection
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
DeleteCriticalSection
GetLastError
SetFilePointer
InitializeCriticalSection
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
GetModuleHandleA
GetModuleFileNameA
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
HeapReAlloc
ExitProcess
RtlUnwind
WriteFile
ReadFile
CloseHandle
FlushFileBuffers
TerminateProcess
GetCurrentProcess
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetStdHandle
InterlockedDecrement
InterlockedIncrement
CreateFileA
GetCPInfo
GetACP
GetOEMCP
GetProcAddress
LoadLibraryA
SetEndOfFile
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
Exports
Exports
adler32
compress
compress2
compressBound
crc32
deflate
deflateBound
deflateCopy
deflateEnd
deflateInit2_
deflateInit_
deflateParams
deflatePrime
deflateReset
deflateSetDictionary
get_crc_table
gzclearerr
gzclose
gzdopen
gzeof
gzerror
gzflush
gzgetc
gzgets
gzopen
gzprintf
gzputc
gzputs
gzread
gzrewind
gzseek
gzsetparams
gztell
gzungetc
gzwrite
inflate
inflateBack
inflateBackEnd
inflateBackInit_
inflateCopy
inflateEnd
inflateInit2_
inflateInit_
inflateReset
inflateSetDictionary
inflateSync
inflateSyncPoint
uncompress
zError
zlibCompileFlags
zlibVersion
Sections
.text Size: 64KB - Virtual size: 60KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 24KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 16KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 920B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 8KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
QQIME.exe.exe windows:4 windows x86 arch:x86
1d459545d68117e476b4c6cd8990e2e3
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
SetFileTime
CompareFileTime
SearchPathA
GetShortPathNameA
GetFullPathNameA
MoveFileA
SetCurrentDirectoryA
GetFileAttributesA
GetLastError
CreateDirectoryA
SetFileAttributesA
Sleep
GetTickCount
CreateFileA
GetFileSize
GetModuleFileNameA
GetCurrentProcess
CopyFileA
CloseHandle
GetWindowsDirectoryA
GetTempPathA
GetCommandLineA
SetErrorMode
LoadLibraryA
lstrcpynA
GetDiskFreeSpaceA
GlobalUnlock
GlobalLock
CreateThread
CreateProcessA
RemoveDirectoryA
GetTempFileNameA
lstrlenA
lstrcatA
GetSystemDirectoryA
GetVersion
CreateMutexA
lstrcmpiA
lstrcmpA
ExpandEnvironmentStringsA
GlobalFree
GlobalAlloc
WaitForSingleObject
GetExitCodeProcess
GetModuleHandleA
LoadLibraryExA
GetProcAddress
FreeLibrary
MultiByteToWideChar
WritePrivateProfileStringA
GetPrivateProfileStringA
WriteFile
ReadFile
MulDiv
SetFilePointer
FindClose
FindNextFileA
FindFirstFileA
DeleteFileA
ExitProcess
user32
ScreenToClient
GetWindowRect
EnableMenuItem
GetSystemMenu
SetClassLongA
IsWindowEnabled
SetWindowPos
GetSysColor
GetWindowLongA
SetCursor
LoadCursorA
CheckDlgButton
GetMessagePos
LoadBitmapA
CallWindowProcA
IsWindowVisible
CloseClipboard
SetClipboardData
EmptyClipboard
EndDialog
TrackPopupMenu
AppendMenuA
CreatePopupMenu
GetSystemMetrics
SetDlgItemTextA
GetDlgItemTextA
MessageBoxIndirectA
CharPrevA
DispatchMessageA
PeekMessageA
CreateDialogParamA
SetTimer
SetWindowTextA
PostQuitMessage
SetForegroundWindow
ShowWindow
SendMessageTimeoutA
FindWindowExA
IsWindow
RegisterClassA
SystemParametersInfoA
GetClassInfoA
DialogBoxParamA
CharNextA
ExitWindowsEx
OpenClipboard
DestroyWindow
GetDlgItem
SetWindowLongA
LoadImageA
GetDC
EnableWindow
CreateWindowExA
InvalidateRect
SendMessageA
DefWindowProcA
BeginPaint
GetClientRect
FillRect
DrawTextA
EndPaint
wsprintfA
gdi32
SetBkColor
GetDeviceCaps
DeleteObject
CreateBrushIndirect
CreateFontIndirectA
SetBkMode
SetTextColor
SelectObject
shell32
SHGetPathFromIDListA
SHBrowseForFolderA
SHGetFileInfoA
SHChangeNotify
ShellExecuteA
SHFileOperationA
SHGetSpecialFolderLocation
advapi32
RegQueryValueExA
RegSetValueExA
RegEnumKeyA
RegEnumValueA
RegOpenKeyExA
RegDeleteKeyA
RegDeleteValueA
RegCloseKey
RegCreateKeyExA
comctl32
ImageList_AddMasked
ImageList_Destroy
ord17
ImageList_Create
ole32
CoTaskMemFree
OleInitialize
OleUninitialize
CoCreateInstance
version
GetFileVersionInfoSizeA
GetFileVersionInfoA
VerQueryValueA
Sections
.text Size: 24KB - Virtual size: 23KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 247KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ndata Size: - Virtual size: 288KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 22KB - Virtual size: 21KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
QQPinyin/Install64.exe.exe windows:4 windows x64 arch:x64
e461ccd8b6f32fec199ccff9e580c1dc
Code Sign
38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5Certificate
IssuerCN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=USNot Before15-06-2007 00:00Not After14-06-2012 23:59SubjectCN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=USExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageContentCommitment
47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4Certificate
IssuerCN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZANot Before04-12-2003 00:00Not After03-12-2013 23:59SubjectCN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=USExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageCertSign
KeyUsageCRLSign
65:52:26:e1:b2:2e:18:e1:59:0f:29:85:ac:22:e7:5cCertificate
IssuerOU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=USNot Before21-05-2009 00:00Not After20-05-2019 23:59SubjectCN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=USExtended Key Usages
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
Key Usages
KeyUsageCertSign
KeyUsageCRLSign
5d:06:88:f9:04:0a:d5:22:87:fc:32:ad:ec:eb:85:b0Certificate
IssuerCN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=USNot Before26-01-2010 00:00Not After25-01-2013 23:59SubjectCN=Tencent Technology(Shenzhen) Company Limited,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Tencent Technology(Shenzhen) Company Limited,L=shenzhen,ST=guangdong,C=CNExtended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
d3:cf:da:61:35:37:56:76:e4:0b:a9:13:60:de:e8:8a:47:40:0b:7bSigner
Actual PE Digestd3:cf:da:61:35:37:56:76:e4:0b:a9:13:60:de:e8:8a:47:40:0b:7bDigest Algorithmsha1PE Digest MatchestrueHeaders
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB Paths
c:\vqq_debug\release\pdb\Install64.pdb
Imports
kernel32
GetLastError
DeleteFileW
CreateFileW
FindClose
CopyFileW
GetSystemDirectoryW
GetSystemWow64DirectoryW
FindFirstFileW
lstrlenW
FindResourceExW
FindResourceW
SizeofResource
LockResource
LoadResource
MoveFileExW
CloseHandle
HeapDestroy
HeapAlloc
HeapFree
HeapReAlloc
HeapSize
GetProcessHeap
RaiseException
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSection
DeleteCriticalSection
GetVersionExA
RtlUnwindEx
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RtlCaptureContext
RtlVirtualUnwind
RtlLookupFunctionEntry
GetProcAddress
GetModuleHandleA
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameA
GetModuleFileNameW
FreeEnvironmentStringsA
MultiByteToWideChar
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineA
GetCommandLineW
SetHandleCount
GetFileType
GetStartupInfoA
FlsGetValue
FlsSetValue
TlsFree
FlsFree
SetLastError
GetCurrentThreadId
FlsAlloc
HeapSetInformation
HeapCreate
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
Sleep
SetFilePointer
WideCharToMultiByte
GetConsoleCP
GetConsoleMode
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
LoadLibraryA
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
CreateFileA
FlushFileBuffers
RtlPcToFileHeader
advapi32
RegOpenKeyExW
RegCloseKey
RegDeleteKeyW
RegSetValueExW
RegCreateKeyExW
imm32
ImmInstallIMEW
ImmIsIME
user32
UnregisterClassA
Sections
.text Size: 70KB - Virtual size: 70KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 18KB - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 5KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
QQPinyin/QQPinyin.ime.dll windows:4 windows x86 arch:x86
264ab5df70a1ef41dbfbb96edd0dab46
Code Sign
38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5Certificate
IssuerCN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=USNot Before15-06-2007 00:00Not After14-06-2012 23:59SubjectCN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=USExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageContentCommitment
47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4Certificate
IssuerCN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZANot Before04-12-2003 00:00Not After03-12-2013 23:59SubjectCN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=USExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageCertSign
KeyUsageCRLSign
65:52:26:e1:b2:2e:18:e1:59:0f:29:85:ac:22:e7:5cCertificate
IssuerOU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=USNot Before21-05-2009 00:00Not After20-05-2019 23:59SubjectCN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=USExtended Key Usages
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
Key Usages
KeyUsageCertSign
KeyUsageCRLSign
5d:06:88:f9:04:0a:d5:22:87:fc:32:ad:ec:eb:85:b0Certificate
IssuerCN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=USNot Before26-01-2010 00:00Not After25-01-2013 23:59SubjectCN=Tencent Technology(Shenzhen) Company Limited,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Tencent Technology(Shenzhen) Company Limited,L=shenzhen,ST=guangdong,C=CNExtended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
06:b7:a8:c6:ea:35:f0:bf:9d:8c:da:d3:b2:c8:22:67:8e:71:2d:9fSigner
Actual PE Digest06:b7:a8:c6:ea:35:f0:bf:9d:8c:da:d3:b2:c8:22:67:8e:71:2d:9fDigest Algorithmsha1PE Digest MatchesfalseHeaders
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
c:\vqq_debug\release\pdb\QQPinyin.pdb
Imports
ws2_32
gethostbyname
closesocket
WSAStartup
htons
WSACleanup
sendto
ntohl
htonl
gethostname
socket
wtsapi32
WTSFreeMemory
WTSQuerySessionInformationW
imm32
ImmLockIMC
ImmDisableIME
ImmUnlockIMCC
ImmLockIMCC
ImmGetIMEFileNameW
ImmGetHotKey
ImmGetConversionStatus
ImmCreateSoftKeyboard
ImmDestroySoftKeyboard
ImmShowSoftKeyboard
ImmSetOpenStatus
ImmGetOpenStatus
ImmDestroyIMCC
ImmReSizeIMCC
ImmGenerateMessage
ImmCreateIMCC
ImmUnlockIMC
comctl32
_TrackMouseEvent
ord17
kernel32
GetFileTime
GetSystemTime
GetFileAttributesW
WideCharToMultiByte
SetFileAttributesW
GetPrivateProfileIntW
MulDiv
InterlockedDecrement
GlobalUnlock
GlobalLock
MapViewOfFileEx
TlsFree
TlsSetValue
GetModuleHandleW
TlsAlloc
TlsGetValue
GetVersion
OutputDebugStringW
CreateMutexW
SetLastError
SetEvent
WaitForMultipleObjects
CreateEventW
FormatMessageW
VirtualFreeEx
VirtualAllocEx
OpenProcess
FreeResource
MoveFileExW
GetSystemTimeAsFileTime
SetFilePointerEx
IsDBCSLeadByte
GetFullPathNameW
GetCPInfo
MoveFileW
GlobalFlags
GlobalSize
SetEndOfFile
VirtualQuery
GetTempPathW
FileTimeToSystemTime
ExitProcess
lstrlenA
LoadLibraryW
GetStdHandle
WriteConsoleW
GetACP
GetConsoleCP
GetStartupInfoA
GetFileType
SetHandleCount
CompareStringA
GetCurrentDirectoryA
GetDateFormatA
GetTimeFormatA
GetTimeZoneInformation
IsValidCodePage
GetOEMCP
HeapCreate
LCMapStringW
LCMapStringA
GetModuleHandleA
RtlUnwind
GetCommandLineA
ExitThread
FileTimeToLocalFileTime
FindNextFileW
IsDebuggerPresent
UnhandledExceptionFilter
TerminateProcess
GetThreadLocale
GetLocaleInfoA
InterlockedExchange
VirtualAlloc
VirtualFree
IsProcessorFeaturePresent
LoadLibraryA
InterlockedCompareExchange
GetProcessHeap
HeapSize
HeapReAlloc
HeapFree
HeapAlloc
HeapDestroy
GetVersionExA
VirtualQueryEx
GetVersionExW
DeleteFileW
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
CreateFileA
GetProcAddress
SetUnhandledExceptionFilter
GetCurrentThread
ReadProcessMemory
GetCurrentThreadId
SystemTimeToFileTime
InterlockedIncrement
GetLocalTime
GetTickCount
CreateFileMappingW
QueryPerformanceCounter
GetUserDefaultLCID
EnumSystemLocalesA
IsValidLocale
OpenFileMappingW
UnmapViewOfFile
MapViewOfFile
GetFileSize
SetFilePointer
ReadFile
MultiByteToWideChar
GetLastError
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
WritePrivateProfileStringW
GetPrivateProfileStringW
GetModuleFileNameW
CreateFileW
GlobalAddAtomW
WriteFile
GetCurrentProcessId
Sleep
CreateThread
RaiseException
CompareStringW
lstrcmpiW
FlushInstructionCache
lstrlenW
GetCurrentProcess
LoadResource
CloseHandle
FindFirstFileW
ReleaseMutex
WaitForSingleObject
FindResourceW
SizeofResource
OpenMutexW
LockResource
FindClose
FindResourceExW
SetFileTime
ProcessIdToSessionId
GlobalFree
GlobalAlloc
LocalFree
GetDiskFreeSpaceExW
GetDriveTypeW
QueryDosDeviceW
DeviceIoControl
CopyFileW
GetLogicalDrives
FreeLibrary
CreateDirectoryW
GetThreadSelectorEntry
GetStringTypeA
GetStringTypeW
GetLocaleInfoW
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
SetEnvironmentVariableA
GetDriveTypeA
GetFileSizeEx
GetConsoleMode
GetTempFileNameW
FlushFileBuffers
user32
EnumDisplayMonitors
ChangeClipboardChain
SetClipboardViewer
EnumClipboardFormats
MapWindowPoints
GetSystemMenu
EnableWindow
DrawIconEx
LoadIconW
GetActiveWindow
VkKeyScanW
ToAscii
OpenClipboard
CloseClipboard
EmptyClipboard
FindWindowExW
RegisterHotKey
SendInput
GetMessageExtraInfo
UnregisterHotKey
GetGUIThreadInfo
EqualRect
MonitorFromWindow
FindWindowW
EnumChildWindows
GetWindowRgn
AppendMenuW
CheckMenuRadioItem
CheckMenuItem
DialogBoxParamW
CreatePopupMenu
GetCaretPos
ModifyMenuW
CreateMenu
GetSubMenu
GetMenuItemCount
TrackPopupMenu
GetSystemMetrics
LoadMenuW
EnableMenuItem
RemoveMenu
MapVirtualKeyW
GetKeyNameTextW
GetKeyState
GetForegroundWindow
SetCursorPos
ClientToScreen
GetMessagePos
GetKeyboardLayoutList
MessageBoxW
SetWindowRgn
GetClipboardData
RegisterClipboardFormatW
SetClipboardData
ShowWindow
UnregisterClassW
SetTimer
MoveWindow
RegisterClassExW
UpdateLayeredWindow
GetClassInfoExW
KillTimer
UnhookWindowsHookEx
CallNextHookEx
LoadBitmapW
CopyRect
GetMenuItemRect
MenuItemFromPoint
GetMenuItemID
SetWindowsHookExW
GetMenuItemInfoW
GetSysColorBrush
GetWindowRect
WindowFromPoint
DestroyMenu
SetRect
MonitorFromPoint
GetMonitorInfoW
IsWindowVisible
PostMessageW
PeekMessageW
PostThreadMessageW
GetWindowThreadProcessId
DispatchMessageW
LoadImageW
GetMessageW
TranslateMessage
DestroyIcon
CharNextW
SetCapture
SetWindowLongW
SetCursor
UpdateWindow
EndPaint
GetParent
IsWindow
GetClientRect
GetDlgCtrlID
CreateWindowExW
DestroyWindow
GetDC
GetWindowTextLengthW
OffsetRect
ReleaseCapture
LoadCursorW
ScreenToClient
SetWindowTextW
GetCapture
SetFocus
EndDialog
DrawFocusRect
GetCursorPos
SendMessageW
InvalidateRect
GetFocus
GetDlgItem
IsWindowEnabled
CallWindowProcW
DefWindowProcW
BeginPaint
GetSysColor
DrawTextW
GetWindowLongW
SetWindowPos
SetRectEmpty
FillRect
PtInRect
GetClassNameW
GetWindowTextW
ReleaseDC
UnregisterClassA
SystemParametersInfoW
gdi32
LineTo
MoveToEx
RestoreDC
GetDIBits
SaveDC
CreatePolygonRgn
FillRgn
GetTextExtentPointW
FrameRgn
TextOutW
PtInRegion
CreateRoundRectRgn
SetBkColor
GetTextMetricsW
CreateRectRgn
CreateFontW
DeleteDC
DeleteObject
SetTextColor
SetBkMode
CreateFontIndirectW
GetStockObject
GetObjectW
SelectObject
StretchDIBits
SetStretchBltMode
CombineRgn
CreatePen
CreateCompatibleDC
CreateSolidBrush
GetPixel
Ellipse
SetPixel
CreateCompatibleBitmap
BitBlt
Rectangle
PatBlt
GetDeviceCaps
CreateDIBSection
ExtCreateRegion
advapi32
RegOpenKeyExW
IsTextUnicode
GetSecurityDescriptorSacl
ConvertStringSecurityDescriptorToSecurityDescriptorW
SetSecurityInfo
SetEntriesInAclW
BuildExplicitAccessWithNameW
GetSecurityInfo
GetUserNameW
FreeSid
EqualSid
AllocateAndInitializeSid
RegSetValueExW
OpenProcessToken
LookupAccountSidW
GetTokenInformation
ConvertSidToStringSidW
LookupAccountNameW
RegQueryValueExA
RegOpenKeyExA
RegCreateKeyExW
RegCloseKey
RegQueryValueExW
shell32
ShellExecuteW
DragQueryFileW
SHCreateDirectoryExW
SHGetFolderPathW
ShellExecuteExW
Shell_NotifyIconW
SHFileOperationW
SHGetSpecialFolderPathW
ole32
CoCreateGuid
CoInitialize
StringFromGUID2
CoUninitialize
StgOpenStorageOnILockBytes
CreateILockBytesOnHGlobal
StgOpenStorage
StgCreateDocfile
CoTaskMemFree
oleaut32
SysAllocStringLen
VariantTimeToSystemTime
SystemTimeToVariantTime
shlwapi
PathFindFileNameW
PathFileExistsW
PathRemoveFileSpecW
msimg32
TransparentBlt
version
GetFileVersionInfoW
VerQueryValueW
GetFileVersionInfoSizeW
netapi32
Netbios
NetApiBufferFree
NetWkstaTransportEnum
Exports
Exports
ImeConfigure
ImeConversionList
ImeDestroy
ImeEnumRegisterWord
ImeEscape
ImeGetRegisterWordStyle
ImeInquire
ImeProcessKey
ImeRegisterWord
ImeSelect
ImeSetActiveContext
ImeSetCompositionString
ImeToAsciiEx
ImeUnregisterWord
NotifyIME
Sections
.text Size: 2.1MB - Virtual size: 2.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 364KB - Virtual size: 363KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 48KB - Virtual size: 82KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ShareDa Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 220KB - Virtual size: 220KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 116KB - Virtual size: 114KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
QQPinyin/QQPinyinHelper.dll.dll windows:4 windows x86 arch:x86
958510707a5a4e5e83d7d504dec0441f
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
c:\Program Files\NSIS\plugins\QQPinyinHelper.pdb
Imports
wtsapi32
WTSFreeMemory
WTSQuerySessionInformationW
imm32
ImmGetIMEFileNameW
ImmInstallIMEW
ImmIsIME
ImmGetDescriptionW
kernel32
ProcessIdToSessionId
Sleep
GetFullPathNameW
QueryPerformanceCounter
RemoveDirectoryW
MoveFileExW
WideCharToMultiByte
OpenProcess
TerminateProcess
CreateFileMappingW
MapViewOfFileEx
OpenFileMappingW
UnmapViewOfFile
GetCPInfo
IsDBCSLeadByte
GetPrivateProfileIntW
GetTickCount
SetFileAttributesW
GlobalLock
GlobalUnlock
Module32NextW
Module32FirstW
GetACP
RtlUnwind
GetCurrentDirectoryA
GetModuleFileNameA
GetStdHandle
HeapCreate
LCMapStringW
DeviceIoControl
IsValidCodePage
GetOEMCP
InterlockedDecrement
InterlockedIncrement
TlsFree
TlsSetValue
TlsAlloc
TlsGetValue
GetCommandLineA
ExitProcess
GetModuleHandleA
FileTimeToLocalFileTime
FileTimeToSystemTime
GetSystemTimeAsFileTime
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
VirtualAlloc
VirtualFree
IsProcessorFeaturePresent
LoadLibraryA
InterlockedCompareExchange
GetThreadLocale
GetLocaleInfoA
InterlockedExchange
HeapSize
HeapReAlloc
GetCurrentProcessId
HeapDestroy
GetVersionExA
DeleteCriticalSection
InitializeCriticalSection
GetConsoleCP
GetConsoleMode
FlushFileBuffers
SetHandleCount
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetStringTypeA
GetStringTypeW
GetTimeZoneInformation
GetUserDefaultLCID
EnumSystemLocalesA
IsValidLocale
SetStdHandle
WriteConsoleA
QueryDosDeviceW
GetLogicalDrives
GetProcessHeap
HeapAlloc
GetFileSize
CreateFileW
SetFilePointer
WriteFile
ReadFile
GetConsoleOutputCP
FindNextFileW
GetFileAttributesW
DeleteFileW
WaitForSingleObject
LeaveCriticalSection
EnterCriticalSection
GetCurrentThreadId
MulDiv
RaiseException
SetLastError
FlushInstructionCache
CopyFileW
CreateDirectoryW
LocalFree
FindClose
FindFirstFileW
lstrcpynW
GetDriveTypeW
CloseHandle
lstrlenW
GetSystemDefaultLangID
GetSystemInfo
GetModuleHandleW
GetLocaleInfoW
GetCurrentProcess
GetVersionExW
GlobalFree
GlobalAlloc
OutputDebugStringW
MultiByteToWideChar
GetSystemDirectoryW
FindResourceExW
LoadResource
LockResource
SizeofResource
FindResourceW
GetLastError
GetProcAddress
LoadLibraryW
GetModuleFileNameW
CreateToolhelp32Snapshot
ExpandEnvironmentStringsW
FreeLibrary
HeapFree
GetDiskFreeSpaceExW
CompareStringW
SetEnvironmentVariableA
LCMapStringA
WriteConsoleW
GetDriveTypeA
CompareStringA
CreateFileA
SetEndOfFile
user32
SetDlgItemTextW
ClientToScreen
SendMessageTimeoutW
FindWindowExW
RegisterWindowMessageW
SetWindowsHookExW
GetClassInfoExW
RegisterClassExW
TranslateMessage
UnregisterClassA
DestroyIcon
PostMessageW
PostThreadMessageW
ShowScrollBar
LoadIconW
DispatchMessageW
GetMessageW
GetDesktopWindow
DestroyWindow
CallWindowProcW
SetParent
EnableMenuItem
GetSystemMenu
EnableWindow
SetWindowPos
GetClientRect
SetWindowLongW
GetWindowLongW
CreateWindowExW
DrawTextW
ReleaseDC
CreateDialogParamW
LoadCursorW
GetDC
SetCursor
PtInRect
GetCursorPos
SetWindowTextW
LoadImageW
GetDlgItem
OffsetRect
KillTimer
GetParent
IsWindowVisible
MoveWindow
ScreenToClient
GetWindowRect
SendMessageW
IsWindow
DialogBoxParamW
ActivateKeyboardLayout
DefWindowProcW
MessageBoxW
EndDialog
SetTimer
ShowWindow
SystemParametersInfoW
LoadKeyboardLayoutW
UnloadKeyboardLayout
GetKeyboardLayoutList
UnhookWindowsHookEx
gdi32
AddFontResourceW
GetStockObject
SetTextColor
SetBkMode
CreateSolidBrush
SetBkColor
SelectObject
CreateFontIndirectW
GetDeviceCaps
GetObjectW
DeleteObject
advapi32
LookupAccountNameW
AdjustTokenPrivileges
RegQueryValueExW
RegLoadKeyW
RegCloseKey
RegSaveKeyW
RegUnLoadKeyW
EqualSid
ConvertStringSecurityDescriptorToSecurityDescriptorW
SetSecurityInfo
BuildExplicitAccessWithNameW
GetSecurityInfo
IsTextUnicode
GetSecurityDescriptorSacl
RegDeleteValueW
ConvertSidToStringSidW
GetTokenInformation
RegOpenKeyW
RegOpenKeyExA
RegQueryValueExA
FreeSid
SetNamedSecurityInfoW
SetEntriesInAclW
AllocateAndInitializeSid
GetNamedSecurityInfoW
RegCreateKeyExW
LookupPrivilegeValueW
OpenProcessToken
RegEnumKeyExW
RegSetValueExW
RegOpenKeyExW
RegCreateKeyW
RegDeleteKeyW
shell32
ShellExecuteExW
ExtractIconExW
SHCreateDirectoryExW
ShellExecuteW
SHGetSpecialFolderPathW
SHFileOperationW
ole32
CoInitializeEx
CoCreateInstance
CoUninitialize
CoCreateGuid
CoInitialize
oleaut32
SysStringLen
SysAllocString
SysFreeString
shlwapi
PathFileExistsW
SHDeleteKeyW
PathIsDirectoryW
comctl32
ImageList_Create
ImageList_ReplaceIcon
ImageList_SetBkColor
ImageList_Remove
ws2_32
WSAStartup
ntohl
htonl
inet_addr
htons
WSAAsyncSelect
bind
WSAGetLastError
socket
sendto
recvfrom
closesocket
WSACancelAsyncRequest
WSACleanup
WSAAsyncGetHostByName
netapi32
Netbios
NetApiBufferFree
NetWkstaTransportEnum
psapi
EnumProcesses
GetModuleFileNameExW
version
VerQueryValueW
GetFileVersionInfoW
GetFileVersionInfoSizeW
Exports
Exports
API_ClearDiretoryDeleteFlag
API_MoveVersionFileFromBackup
AddCheckBoxCtrl
AddWarningCtrl
BackupSetupPack
CheckHKCUForceReboot
CheckQQPinyinDelete
ConvertSkinGUID2CurrentFile
CopyFileRightNow
CopyHistroyVersionSkinFileToCurUse
CoverOldSkinFileToSkinGUID
CreateBitmapCtrl
CreateUniqueDiretory
DelImeReg
DelImeReg2
DelQQPinyinAppdata
DelQQPinyinHKCU
DelRegHotKey
DeleteHKCUKey
DeleteHKCUValue
DeleteOldUnintallKey
DeleteSystem32FileTSETKP
ForceFirstInstallRecommendSkin
ForceRecommendSkin
FreeTxSSO
FreeTxSSO2
GetAppDataOwnDir
GetBindQQ
GetCmdParam
GetCurrentQQPinyinApp
GetEnumQQ
GetInstallPackInfo
GetLastVersion
GetLenovoLog
GetParaNeed
GetRawSupplyID
GetSupplyID
GetUniqueImeName
GetUniqueUninstallerName
HideStatusBar
InitSetupLog
InstallEUDC
InstallFor64
IsAdmin
IsExistOccupyExe
IsLenovoReqInstall
IsNeedRunQQPYWizard
IsQQPYLaunchWizard
IsQQPinyinDefaultIme
IsQQWubiRecommendEnable
IsVideoHelpEnable
IsWow64System
MergeUserDefinedFile
ModifyOccupyingProcessForm
MoveFileAfterReboot
MoveVersionFileFromBackup
NotifyHostSetupStatus
NotifyHostTerminateError
PackMoveWindow
PostInstall
PostUninstall
PreInstall
PreUninstall
QPCreateReboot
QPFindReboot
QQPinyinImeInstall
QQpinyinAddToAllUser
QQpinyinRape
QQpinyinRapeInit
ReadHKCUString
RecordOldDirFor64
RefreshImeList
RegQQPYProtocol
RegQQPinyinImeChecker
RegQQWbProtocol
RegQQWubiImeChecker
ReginsterHotKey
RemoveOldDatFileAfterReboot
RemoveOldFile
RenameAndDeleteFile
RollBackMingLiuTTX
SaveCmdLineSupplyId
SaveForceRawSupplyId
SaveInstallPackInfo
SaveWelcomeForm
SendInstallStat
SendMessageToLiveUp
SendUninstallReason
SendUnistallStat
SetAutoCheck
SetOnIonAutoCheck
SetPathEveryoneAccess
SetWindowText2
StatInit
TuningWindowPosition
TuningWindowPosition2
UnInstallQQPinyin
UnInstallQQPinyin2
UnRegQQPYProtocol
UnRegQQPinyinImeChecker
UnRegQQWbProtocol
UnRegQQWubiImeChecker
UninstallEUDC
UninstallFor64
UpdateHandInputLibLastUpdateTime
WriteHKCUDWORD
WriteHKCUString
WriteSetupLog
add_recommend_wubi_ctrl
free_instfilespage_bitmap
kill_instfilespage_timer
load_instfilespage_bitmap
load_instfilespage_url
modify_reg_for_yulinmufeng
start_instfilespage_timer
Sections
.text Size: 396KB - Virtual size: 394KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 60KB - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 16KB - Virtual size: 21KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 16KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 24KB - Virtual size: 22KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
QQPinyin/x86/QQPinyin.ime.dll windows:4 windows x64 arch:x64
86c80ea5c8f25dfd2ff94608f9189ec9
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB Paths
c:\vqq_debug\release\pdb\QQPinyin_x64.pdb
Imports
ws2_32
WSAStartup
gethostbyname
htonl
ntohl
gethostname
WSACleanup
wtsapi32
WTSFreeMemory
WTSQuerySessionInformationW
imm32
ImmLockIMC
ImmDisableIME
ImmLockIMCC
ImmUnlockIMCC
ImmGetIMEFileNameW
ImmGetHotKey
ImmGetConversionStatus
ImmCreateSoftKeyboard
ImmDestroySoftKeyboard
ImmShowSoftKeyboard
ImmGetOpenStatus
ImmSetOpenStatus
ImmCreateIMCC
ImmGenerateMessage
ImmReSizeIMCC
ImmDestroyIMCC
ImmUnlockIMC
comctl32
_TrackMouseEvent
ord17
kernel32
MapViewOfFileEx
TlsAlloc
TlsFree
TlsSetValue
GetModuleHandleW
TlsGetValue
GetVersion
OutputDebugStringW
CreateMutexW
SetLastError
CreateEventW
SetEvent
WaitForMultipleObjects
FormatMessageW
VirtualAllocEx
OpenProcess
ReadProcessMemory
VirtualFreeEx
FreeResource
MoveFileExW
GetSystemTimeAsFileTime
SetFilePointerEx
GetFullPathNameW
GetCPInfo
IsDBCSLeadByte
MoveFileW
GlobalFlags
GlobalSize
SetEndOfFile
GetTempFileNameW
GetTempPathW
FileTimeToSystemTime
ExitProcess
lstrlenA
LoadLibraryW
WriteConsoleW
GlobalFree
GetStdHandle
GetACP
GetEnvironmentStrings
FreeEnvironmentStringsA
FlushFileBuffers
GetConsoleMode
GetConsoleCP
GetStartupInfoA
GetFileType
SetHandleCount
CompareStringA
GetCurrentDirectoryA
GetTimeZoneInformation
FlsAlloc
FlsFree
FlsGetValue
IsValidCodePage
GetOEMCP
GetModuleFileNameA
HeapCreate
HeapSetInformation
RtlVirtualUnwind
LCMapStringW
LCMapStringA
GetModuleHandleA
RtlUnwindEx
RtlLookupFunctionEntry
GetCommandLineA
FlsSetValue
ExitThread
GlobalLock
CreateDirectoryW
RtlCaptureContext
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
RtlPcToFileHeader
GetThreadLocale
GetLocaleInfoA
InterlockedPopEntrySList
VirtualAlloc
VirtualFree
InterlockedPushEntrySList
GetProcessHeap
HeapSize
HeapReAlloc
HeapFree
HeapAlloc
HeapDestroy
GetVersionExA
DeleteFileW
GetLogicalDrives
GetDiskFreeSpaceExW
GetProcAddress
QueryPerformanceCounter
GetDateFormatA
GetTimeFormatA
FreeLibrary
GetDriveTypeW
CopyFileW
QueryDosDeviceW
DeviceIoControl
GetCurrentThreadId
GetVersionExW
SystemTimeToFileTime
GetLocalTime
GetTickCount
CreateFileMappingW
LoadLibraryA
GetUserDefaultLCID
EnumSystemLocalesA
IsValidLocale
GetStringTypeA
OpenFileMappingW
UnmapViewOfFile
MapViewOfFile
SetFilePointer
GetFileSize
ReadFile
MultiByteToWideChar
GetLastError
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSection
DeleteCriticalSection
GetPrivateProfileStringW
WritePrivateProfileStringW
GetModuleFileNameW
GlobalAddAtomW
CreateFileW
WriteFile
RaiseException
GetCurrentProcessId
Sleep
CreateThread
GetCurrentProcess
CompareStringW
lstrcmpiW
FlushInstructionCache
lstrlenW
CloseHandle
FindFirstFileW
WaitForSingleObject
ReleaseMutex
FindResourceW
SizeofResource
OpenMutexW
LockResource
FindResourceExW
FindClose
LoadResource
GlobalUnlock
MulDiv
GetPrivateProfileIntW
SetFileTime
SetFileAttributesW
WideCharToMultiByte
GetFileAttributesW
GetSystemTime
GetFileTime
FindNextFileW
GlobalAlloc
LocalFree
ProcessIdToSessionId
FileTimeToLocalFileTime
GetStringTypeW
GetLocaleInfoW
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
CreateFileA
SetEnvironmentVariableA
GetDriveTypeA
GetFileSizeEx
FreeEnvironmentStringsW
GetEnvironmentStringsW
user32
EnumDisplayMonitors
EnumClipboardFormats
ChangeClipboardChain
SetClipboardViewer
MapWindowPoints
GetSystemMenu
EnableWindow
DrawIconEx
LoadIconW
GetActiveWindow
VkKeyScanW
ToAscii
CloseClipboard
OpenClipboard
EmptyClipboard
FindWindowExW
RegisterHotKey
SendInput
GetMessageExtraInfo
UnregisterHotKey
GetGUIThreadInfo
EqualRect
MonitorFromWindow
EnumChildWindows
FindWindowW
GetWindowRgn
GetCaretPos
ModifyMenuW
AppendMenuW
CreateMenu
CheckMenuRadioItem
DialogBoxParamW
CheckMenuItem
CreatePopupMenu
GetSystemMetrics
LoadMenuW
RemoveMenu
EnableMenuItem
GetSubMenu
GetMenuItemCount
TrackPopupMenu
MapVirtualKeyW
GetKeyNameTextW
GetKeyState
GetForegroundWindow
SetCursorPos
ClientToScreen
GetMessagePos
GetKeyboardLayoutList
MessageBoxW
SetWindowRgn
GetClipboardData
RegisterClipboardFormatW
SetClipboardData
KillTimer
GetClassInfoExW
ShowWindow
UnregisterClassW
MoveWindow
UpdateLayeredWindow
RegisterClassExW
UnhookWindowsHookEx
LoadBitmapW
CallNextHookEx
CopyRect
SystemParametersInfoW
GetMenuItemID
GetWindowRect
GetMenuItemRect
MenuItemFromPoint
SetWindowsHookExW
GetSysColorBrush
GetMenuItemInfoW
DestroyMenu
WindowFromPoint
SetRect
MonitorFromPoint
GetMonitorInfoW
IsWindowVisible
PostMessageW
LoadImageW
GetMessageW
DestroyIcon
TranslateMessage
PostThreadMessageW
PeekMessageW
DispatchMessageW
GetWindowThreadProcessId
InvalidateRect
GetDlgItem
GetFocus
GetSysColor
GetWindowLongW
DrawTextW
BeginPaint
CallWindowProcW
IsWindowEnabled
SetWindowPos
GetWindowTextW
DefWindowProcW
FillRect
SetCursor
GetClassNameW
EndPaint
PtInRect
ReleaseDC
SetRectEmpty
SetWindowLongW
DestroyWindow
SetCapture
CharNextW
IsWindow
UpdateWindow
GetWindowTextLengthW
GetDlgCtrlID
GetParent
CreateWindowExW
GetWindowLongPtrW
GetDC
OffsetRect
SetWindowTextW
ReleaseCapture
ScreenToClient
EndDialog
GetClientRect
SetWindowLongPtrW
GetCapture
GetCursorPos
SendMessageW
DrawFocusRect
LoadCursorW
SetFocus
UnregisterClassA
SetTimer
gdi32
LineTo
MoveToEx
GetDIBits
RestoreDC
SaveDC
GetTextExtentPointW
TextOutW
PtInRegion
SetTextColor
CreateFontIndirectW
SetBkMode
GetStockObject
SelectObject
GetObjectW
DeleteDC
CreatePolygonRgn
SetStretchBltMode
CombineRgn
StretchDIBits
BitBlt
CreateCompatibleDC
CreatePen
CreateSolidBrush
GetPixel
CreateCompatibleBitmap
SetPixel
Ellipse
PatBlt
GetDeviceCaps
CreateDIBSection
Rectangle
CreateRectRgn
CreateFontW
ExtCreateRegion
GetTextMetricsW
FrameRgn
FillRgn
SetBkColor
CreateRoundRectRgn
DeleteObject
advapi32
IsTextUnicode
GetSecurityDescriptorSacl
ConvertStringSecurityDescriptorToSecurityDescriptorW
SetSecurityInfo
SetEntriesInAclW
BuildExplicitAccessWithNameW
GetSecurityInfo
GetUserNameW
FreeSid
EqualSid
AllocateAndInitializeSid
ConvertSidToStringSidW
GetTokenInformation
LookupAccountNameW
RegSetValueExW
LookupAccountSidW
OpenProcessToken
RegOpenKeyExA
RegQueryValueExA
RegCreateKeyExW
RegCloseKey
RegOpenKeyExW
RegQueryValueExW
shell32
DragQueryFileW
SHGetSpecialFolderPathW
SHCreateDirectoryExW
ShellExecuteExW
Shell_NotifyIconW
ShellExecuteW
SHFileOperationW
ole32
CoCreateGuid
CoInitialize
StringFromGUID2
CoUninitialize
StgOpenStorageOnILockBytes
CreateILockBytesOnHGlobal
StgOpenStorage
StgCreateDocfile
CoTaskMemFree
oleaut32
SysAllocStringLen
VariantTimeToSystemTime
SystemTimeToVariantTime
shlwapi
PathRemoveFileSpecW
PathFindFileNameW
PathFileExistsW
msimg32
TransparentBlt
version
VerQueryValueW
GetFileVersionInfoW
GetFileVersionInfoSizeW
netapi32
NetApiBufferFree
NetWkstaTransportEnum
Netbios
Exports
Exports
ImeConfigure
ImeConversionList
ImeDestroy
ImeEnumRegisterWord
ImeEscape
ImeGetRegisterWordStyle
ImeInquire
ImeProcessKey
ImeRegisterWord
ImeSelect
ImeSetActiveContext
ImeSetCompositionString
ImeToAsciiEx
ImeUnregisterWord
NotifyIME
Sections
.text Size: 3.5MB - Virtual size: 3.5MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 788KB - Virtual size: 788KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 72KB - Virtual size: 106KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 250KB - Virtual size: 249KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.ShareDa Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 217KB - Virtual size: 220KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 30KB - Virtual size: 30KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
uninst.exe.exe windows:4 windows x86 arch:x86
099c0646ea7282d232219f8807883be0
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CompareFileTime
SearchPathA
GetShortPathNameA
GetFullPathNameA
MoveFileA
SetCurrentDirectoryA
GetFileAttributesA
GetLastError
CreateDirectoryA
SetFileAttributesA
Sleep
GetTickCount
CreateFileA
GetFileSize
GetModuleFileNameA
GetCurrentProcess
CopyFileA
ExitProcess
SetFileTime
GetTempPathA
GetCommandLineA
SetErrorMode
LoadLibraryA
lstrcpynA
GetDiskFreeSpaceA
GlobalUnlock
GlobalLock
CreateThread
CreateProcessA
RemoveDirectoryA
GetTempFileNameA
lstrlenA
lstrcatA
GetSystemDirectoryA
GetVersion
CloseHandle
lstrcmpiA
lstrcmpA
ExpandEnvironmentStringsA
GlobalFree
GlobalAlloc
WaitForSingleObject
GetExitCodeProcess
GetModuleHandleA
LoadLibraryExA
GetProcAddress
FreeLibrary
MultiByteToWideChar
WritePrivateProfileStringA
GetPrivateProfileStringA
WriteFile
ReadFile
MulDiv
SetFilePointer
FindClose
FindNextFileA
FindFirstFileA
DeleteFileA
GetWindowsDirectoryA
user32
EndDialog
ScreenToClient
GetWindowRect
EnableMenuItem
GetSystemMenu
SetClassLongA
IsWindowEnabled
SetWindowPos
GetSysColor
GetWindowLongA
SetCursor
LoadCursorA
CheckDlgButton
GetMessagePos
LoadBitmapA
CallWindowProcA
IsWindowVisible
CloseClipboard
SetClipboardData
EmptyClipboard
RegisterClassA
TrackPopupMenu
AppendMenuA
CreatePopupMenu
GetSystemMetrics
SetDlgItemTextA
GetDlgItemTextA
MessageBoxIndirectA
CharPrevA
DispatchMessageA
PeekMessageA
DestroyWindow
CreateDialogParamA
SetTimer
SetWindowTextA
PostQuitMessage
SetForegroundWindow
wsprintfA
SendMessageTimeoutA
FindWindowExA
SystemParametersInfoA
CreateWindowExA
GetClassInfoA
DialogBoxParamA
CharNextA
OpenClipboard
ExitWindowsEx
IsWindow
GetDlgItem
SetWindowLongA
LoadImageA
GetDC
EnableWindow
InvalidateRect
SendMessageA
DefWindowProcA
BeginPaint
GetClientRect
FillRect
DrawTextA
EndPaint
ShowWindow
gdi32
SetBkColor
GetDeviceCaps
DeleteObject
CreateBrushIndirect
CreateFontIndirectA
SetBkMode
SetTextColor
SelectObject
shell32
SHGetPathFromIDListA
SHBrowseForFolderA
SHGetFileInfoA
ShellExecuteA
SHFileOperationA
SHGetSpecialFolderLocation
advapi32
RegQueryValueExA
RegSetValueExA
RegEnumKeyA
RegEnumValueA
RegOpenKeyExA
RegDeleteKeyA
RegDeleteValueA
RegCloseKey
RegCreateKeyExA
comctl32
ImageList_AddMasked
ImageList_Destroy
ord17
ImageList_Create
ole32
CoTaskMemFree
OleInitialize
OleUninitialize
CoCreateInstance
version
GetFileVersionInfoSizeA
GetFileVersionInfoA
VerQueryValueA
Sections
.text Size: 23KB - Virtual size: 22KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 107KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ndata Size: - Virtual size: 36KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 21KB - Virtual size: 21KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
ûñ/Settings.reg
-
ûñ/cdictlist.ini
-
װ˵.txt
-
QQ.url