Alloc
Call
Copy
Free
Get
Int64Op
Store
StrAlloc
Overview
overview
10Static
static
3SecuriteIn...14.exe
windows7-x64
10SecuriteIn...14.exe
windows10-2004-x64
10$PLUGINSDI...em.dll
windows7-x64
3$PLUGINSDI...em.dll
windows10-2004-x64
3CommApi.dll
windows7-x64
1CommApi.dll
windows10-2004-x64
1CustomHotk...in.dll
windows7-x64
1CustomHotk...in.dll
windows10-2004-x64
1Gajim.exe
windows7-x64
1Gajim.exe
windows10-2004-x64
1NMPluginBase.dll
windows7-x64
3NMPluginBase.dll
windows10-2004-x64
3System.Pri...nq.dll
windows7-x64
1System.Pri...nq.dll
windows10-2004-x64
1agRichEdit.dll
windows7-x64
3agRichEdit.dll
windows10-2004-x64
3dbdata.dll
windows7-x64
1dbdata.dll
windows10-2004-x64
1lang-1025.dll
windows7-x64
1lang-1025.dll
windows10-2004-x64
1libtiff-5.dll
windows7-x64
1libtiff-5.dll
windows10-2004-x64
1uUDFImporter.dll
windows7-x64
3uUDFImporter.dll
windows10-2004-x64
3vsocklib_x86.dll
windows7-x64
3vsocklib_x86.dll
windows10-2004-x64
3Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
SecuriteInfo.com.W32.AIDetect.malware2.29314.exe
Resource
win7-20241023-en
windows7-x64
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
SecuriteInfo.com.W32.AIDetect.malware2.29314.exe
Resource
win10v2004-20241007-en
windows10-2004-x64
5 signatures
150 seconds
Behavioral task
behavioral3
Sample
$PLUGINSDIR/System.dll
Resource
win7-20240729-en
windows7-x64
3 signatures
150 seconds
Behavioral task
behavioral4
Sample
$PLUGINSDIR/System.dll
Resource
win10v2004-20241007-en
windows10-2004-x64
3 signatures
150 seconds
Behavioral task
behavioral5
Sample
CommApi.dll
Resource
win7-20240903-en
windows7-x64
0 signatures
150 seconds
Behavioral task
behavioral6
Sample
CommApi.dll
Resource
win10v2004-20241007-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral7
Sample
CustomHotkeyPlugin.dll
Resource
win7-20241010-en
windows7-x64
0 signatures
150 seconds
Behavioral task
behavioral8
Sample
CustomHotkeyPlugin.dll
Resource
win10v2004-20241007-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral9
Sample
Gajim.exe
Resource
win7-20240903-en
windows7-x64
0 signatures
150 seconds
Behavioral task
behavioral10
Sample
Gajim.exe
Resource
win10v2004-20241007-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral11
Sample
NMPluginBase.dll
Resource
win7-20240903-en
windows7-x64
3 signatures
150 seconds
Behavioral task
behavioral12
Sample
NMPluginBase.dll
Resource
win10v2004-20241007-en
windows10-2004-x64
3 signatures
150 seconds
Behavioral task
behavioral13
Sample
System.Private.Xml.Linq.dll
Resource
win7-20240903-en
windows7-x64
0 signatures
150 seconds
Behavioral task
behavioral14
Sample
System.Private.Xml.Linq.dll
Resource
win10v2004-20241007-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral15
Sample
agRichEdit.dll
Resource
win7-20241010-en
windows7-x64
2 signatures
150 seconds
Behavioral task
behavioral16
Sample
agRichEdit.dll
Resource
win10v2004-20241007-en
windows10-2004-x64
2 signatures
150 seconds
Behavioral task
behavioral17
Sample
dbdata.dll
Resource
win7-20240729-en
windows7-x64
1 signatures
150 seconds
Behavioral task
behavioral18
Sample
dbdata.dll
Resource
win10v2004-20241007-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral19
Sample
lang-1025.dll
Resource
win7-20241023-en
windows7-x64
0 signatures
150 seconds
Behavioral task
behavioral20
Sample
lang-1025.dll
Resource
win10v2004-20241007-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral21
Sample
libtiff-5.dll
Resource
win7-20240729-en
windows7-x64
0 signatures
150 seconds
Behavioral task
behavioral22
Sample
libtiff-5.dll
Resource
win10v2004-20241007-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral23
Sample
uUDFImporter.dll
Resource
win7-20241010-en
windows7-x64
3 signatures
150 seconds
Behavioral task
behavioral24
Sample
uUDFImporter.dll
Resource
win10v2004-20241007-en
windows10-2004-x64
3 signatures
150 seconds
Behavioral task
behavioral25
Sample
vsocklib_x86.dll
Resource
win7-20240903-en
windows7-x64
2 signatures
150 seconds
Behavioral task
behavioral26
Sample
vsocklib_x86.dll
Resource
win10v2004-20241007-en
windows10-2004-x64
2 signatures
150 seconds
General
-
Target
JaffaCakes118_91bf580d7d1bc2ee8e9aecd67be0cbc3cdad83a0ce1b44291ab9f2e9c34cf1a6
-
Size
1.3MB
-
MD5
9a2945af69a2bfb4e7e3ecd94461e2df
-
SHA1
f1da92010737db5054b5f59ffb3e4fcbc2483f69
-
SHA256
91bf580d7d1bc2ee8e9aecd67be0cbc3cdad83a0ce1b44291ab9f2e9c34cf1a6
-
SHA512
c3148264089b6682b56ba5320a430d43e93ebeae3ac79cdea25c562f38d55d9857d60a85e32f4426794f6a6395c044480a6de4887c93b3403dcd53acd1a5f9f1
-
SSDEEP
24576:xaiPifjq6EdPP0na1hyPO2Egoxe139Xncd/9p0r8eUy4YzwfGa:xhifUPPH+O2Ele13lnOgr8e0YzwfGa
Score
3/10
Malware Config
Signatures
-
Unsigned PE 7 IoCs
Checks for missing Authenticode signature.
resource unpack001/SecuriteInfo.com.W32.AIDetect.malware2.29314.26015 unpack002/$PLUGINSDIR/System.dll unpack002/Gajim.exe unpack002/agRichEdit.ocx unpack002/dbdata.dll unpack002/libtiff-5.dll unpack002/vsocklib_x86.dll
Files
-
JaffaCakes118_91bf580d7d1bc2ee8e9aecd67be0cbc3cdad83a0ce1b44291ab9f2e9c34cf1a6.zip
Password: infected
-
SecuriteInfo.com.W32.AIDetect.malware2.29314.26015.exe windows:4 windows x86 arch:x86
56a78d55f3f7af51443e58e0ce2fb5f6
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
advapi32
RegCreateKeyExW
RegEnumKeyW
RegQueryValueExW
RegSetValueExW
RegCloseKey
RegDeleteValueW
RegDeleteKeyW
AdjustTokenPrivileges
LookupPrivilegeValueW
OpenProcessToken
SetFileSecurityW
RegOpenKeyExW
RegEnumValueW
shell32
SHGetSpecialFolderLocation
SHFileOperationW
SHBrowseForFolderW
SHGetPathFromIDListW
ShellExecuteExW
SHGetFileInfoW
ole32
OleInitialize
OleUninitialize
CoCreateInstance
IIDFromString
CoTaskMemFree
comctl32
ord17
ImageList_Create
ImageList_Destroy
ImageList_AddMasked
user32
GetClientRect
EndPaint
DrawTextW
IsWindowEnabled
DispatchMessageW
wsprintfA
CharNextA
CharPrevW
MessageBoxIndirectW
GetDlgItemTextW
SetDlgItemTextW
GetSystemMetrics
FillRect
AppendMenuW
TrackPopupMenu
OpenClipboard
SetClipboardData
CloseClipboard
IsWindowVisible
CallWindowProcW
GetMessagePos
CheckDlgButton
LoadCursorW
SetCursor
GetSysColor
SetWindowPos
GetWindowLongW
PeekMessageW
SetClassLongW
GetSystemMenu
EnableMenuItem
GetWindowRect
ScreenToClient
EndDialog
RegisterClassW
SystemParametersInfoW
CreateWindowExW
GetClassInfoW
DialogBoxParamW
CharNextW
ExitWindowsEx
DestroyWindow
CreateDialogParamW
SetTimer
SetWindowTextW
PostQuitMessage
SetForegroundWindow
ShowWindow
wsprintfW
SendMessageTimeoutW
FindWindowExW
IsWindow
GetDlgItem
SetWindowLongW
LoadImageW
GetDC
ReleaseDC
EnableWindow
InvalidateRect
SendMessageW
DefWindowProcW
BeginPaint
EmptyClipboard
CreatePopupMenu
gdi32
SetBkMode
SetBkColor
GetDeviceCaps
CreateFontIndirectW
CreateBrushIndirect
DeleteObject
SetTextColor
SelectObject
kernel32
GetExitCodeProcess
WaitForSingleObject
GetModuleHandleA
GetProcAddress
GetSystemDirectoryW
lstrcatW
Sleep
lstrcpyA
WriteFile
GetTempFileNameW
CreateFileW
lstrcmpiA
RemoveDirectoryW
CreateProcessW
CreateDirectoryW
GetLastError
CreateThread
GlobalLock
GlobalUnlock
GetDiskFreeSpaceW
WideCharToMultiByte
lstrcpynW
lstrlenW
SetErrorMode
GetVersionExW
GetCommandLineW
GetTempPathW
GetWindowsDirectoryW
SetEnvironmentVariableW
CopyFileW
ExitProcess
GetCurrentProcess
GetModuleFileNameW
GetFileSize
GetTickCount
MulDiv
SetFileAttributesW
GetFileAttributesW
SetCurrentDirectoryW
MoveFileW
GetFullPathNameW
GetShortPathNameW
SearchPathW
CompareFileTime
SetFileTime
CloseHandle
lstrcmpiW
lstrcmpW
ExpandEnvironmentStringsW
GlobalFree
GlobalAlloc
GetModuleHandleW
LoadLibraryExW
MoveFileExW
FreeLibrary
WritePrivateProfileStringW
GetPrivateProfileStringW
lstrlenA
MultiByteToWideChar
ReadFile
SetFilePointer
FindClose
FindNextFileW
FindFirstFileW
DeleteFileW
Sections
.text Size: 26KB - Virtual size: 26KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1KB - Virtual size: 172KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ndata Size: - Virtual size: 180KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 161KB - Virtual size: 161KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
$PLUGINSDIR/System.dll.dll windows:4 windows x86 arch:x86
fc0224e99e736751432961db63a41b76
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
GetModuleHandleW
GlobalFree
GlobalSize
lstrcpynW
lstrcpyW
GetProcAddress
WideCharToMultiByte
VirtualFree
FreeLibrary
lstrlenW
LoadLibraryW
GlobalAlloc
MultiByteToWideChar
VirtualAlloc
VirtualProtect
GetLastError
user32
wsprintfW
ole32
StringFromGUID2
CLSIDFromString
Exports
Exports
Sections
.text Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 867B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 120B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 1024B - Virtual size: 662B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
Boo.wav
-
CommApi.dll.dll windows:5 windows x64 arch:x64
7fc45e7937a40f7ca9a41d345955e049
Code Sign
46:7c:40:2c:26:fa:b7:42:48:4f:70:e0:a0:e6:6c:cdCertificate
IssuerCN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=USNot Before24-02-2012 00:00Not After23-02-2015 23:59SubjectCN=Qualcomm Atheros,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Qualcomm Atheros,L=San Jose,ST=California,C=USExtended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7Certificate
IssuerCN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=USNot Before08-02-2010 00:00Not After07-02-2020 23:59SubjectCN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=USExtended Key Usages
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
Key Usages
KeyUsageCertSign
KeyUsageCRLSign
eb:01:54:b4:0c:6c:11:2b:9b:3a:da:cb:c4:74:2b:fe:6a:d0:15:8fSigner
Actual PE Digesteb:01:54:b4:0c:6c:11:2b:9b:3a:da:cb:c4:74:2b:fe:6a:d0:15:8fDigest Algorithmsha1PE Digest MatchestrueHeaders
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB Paths
f:\bluetooth8.0.1.57\sw\src\WIN8_Mainline\ExtArch\Bin\x64\Release\CommApi.pdb
Imports
ipc
ord3
ord2
ord4
ord1
kernel32
QueryPerformanceCounter
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
GetSystemTimeAsFileTime
InitializeSRWLock
AcquireSRWLockExclusive
ReleaseSRWLockExclusive
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
Sleep
DecodePointer
EncodePointer
DisableThreadLibraryCalls
ole32
StringFromCLSID
CoTaskMemFree
msvcp100
?_Xout_of_range@std@@YAXPEBD@Z
?_Xlength_error@std@@YAXPEBD@Z
msvcr100
??0exception@std@@QEAA@AEBQEBD@Z
?what@exception@std@@UEBAPEBDXZ
_malloc_crt
_initterm
_initterm_e
_CxxThrowException
_amsg_exit
__C_specific_handler
__CppXcptFilter
__crt_debugger_hook
malloc
?terminate@@YAXXZ
?_type_info_dtor_internal_method@type_info@@QEAAXXZ
__clean_type_info_names_internal
_unlock
__dllonexit
_lock
_onexit
free
ldiv
??2@YAPEAX_K@Z
??3@YAXPEAX@Z
??0exception@std@@QEAA@AEBV01@@Z
memmove
??1exception@std@@UEAA@XZ
memcpy
memset
__CxxFrameHandler3
wcscpy_s
_encoded_null
Exports
Exports
CallApi
CallApiTray
DeRegisterCallback
DeRegisterCallbackTray
GetServerStatus
GetServerTrayStatus
InitApi
InitApiTray
RegisterCallback
RegisterCallbackTray
RegisterCallbackTrayWithContext
RegisterCallbackWithContext
UnInitApi
UnInitApiTray
Sections
.text Size: 16KB - Virtual size: 15KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 164B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
CustomHotkeyPlugin.dll.dll windows:6 windows x64 arch:x64
bee8f205fada62aa8ae9349280200591
Code Sign
01:ee:5f:16:9d:ff:97:35:2b:64:65:d6:6aCertificate
IssuerCN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BENot Before19-09-2018 00:00Not After28-01-2028 12:00SubjectCN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSignKey Usages
KeyUsageCertSign
KeyUsageCRLSign
48:1b:6a:07:a9:42:4c:1e:aa:fe:f3:cd:f1:0fCertificate
IssuerCN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSignNot Before15-06-2016 00:00Not After15-06-2024 00:00SubjectCN=GlobalSign Extended Validation CodeSigning CA - SHA256 - G3,O=GlobalSign nv-sa,C=BEExtended Key Usages
ExtKeyUsageCodeSigning
ExtKeyUsageOCSPSigning
Key Usages
KeyUsageCertSign
KeyUsageCRLSign
32:b5:c7:f8:c1:8a:7a:2b:fb:b5:27:46Certificate
IssuerCN=GlobalSign Extended Validation CodeSigning CA - SHA256 - G3,O=GlobalSign nv-sa,C=BENot Before04-06-2019 05:45Not After04-06-2022 05:45SubjectSERIALNUMBER=23638777,CN=ASUSTEK COMPUTER INCORPORATION,O=ASUSTEK COMPUTER INCORPORATION,STREET=4F\, NO. 150\, LI-TE RD.\, PEI TOU,L=TAIPEI,ST=TAIPEI,C=TW,1.3.6.1.4.1.311.60.2.1.3=#13025457,2.5.4.15=#131450726976617465204f7267616e697a6174696f6eExtended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:ddCertificate
IssuerCN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=USNot Before01-01-2021 00:00Not After06-01-2031 00:00SubjectCN=DigiCert Timestamp 2021,O=DigiCert\, Inc.,C=USExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15Certificate
IssuerCN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=USNot Before07-01-2016 12:00Not After07-01-2031 12:00SubjectCN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=USExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ac:34:4a:11:f3:57:45:3c:5d:23:cf:4f:41:48:c2:e4:dc:e3:35:49:a6:1e:b9:68:97:b4:56:df:4e:e4:9d:48Signer
Actual PE Digestac:34:4a:11:f3:57:45:3c:5d:23:cf:4f:41:48:c2:e4:dc:e3:35:49:a6:1e:b9:68:97:b4:56:df:4e:e4:9d:48Digest Algorithmsha256PE Digest MatchestrueHeaders
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB Paths
D:\SourceCode\gc3.customhotkey\production_V4.2\Service\ServiceSDK\Release\CustomHotkeyPlugin\CustomHotkeyPlugin.pdb
Imports
kernel32
WritePrivateProfileStringW
GetPrivateProfileIntW
CreateMutexW
ReleaseMutex
GetEnvironmentVariableW
CreateDirectoryW
DeleteFileW
FindFirstFileW
CopyFileW
FindNextFileW
GetPrivateProfileStringW
ExpandEnvironmentStringsW
FindClose
CreateFileW
GetFileAttributesW
Sleep
lstrlenW
DeviceIoControl
InitializeSListHead
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
IsDebuggerPresent
IsProcessorFeaturePresent
TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
RtlVirtualUnwind
WaitForSingleObject
CancelIo
GetOverlappedResult
FreeLibrary
CreateFileA
GetProcAddress
LoadLibraryA
GetLastError
FormatMessageW
LocalFree
CloseHandle
GetModuleHandleW
RtlCaptureContext
RtlLookupFunctionEntry
CreateEventW
user32
PostQuitMessage
ChangeWindowMessageFilterEx
DispatchMessageW
TranslateMessage
DefWindowProcW
RegisterRawInputDevices
CreateWindowExW
GetRawInputData
wsprintfW
RegisterWindowMessageW
GetMessageW
RegisterClassW
advapi32
RegEnumKeyExW
SetSecurityDescriptorDacl
RegOpenKeyExW
RegQueryValueExW
RegCloseKey
RegDeleteKeyExW
InitializeSecurityDescriptor
msvcp140
?_Getcat@?$codecvt@DDU_Mbstatet@@@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z
?sputn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QEAA_JPEB_W_J@Z
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAA@XZ
?getloc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEBA?AVlocale@2@XZ
?sputc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QEAAG_W@Z
?unshift@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEAD1AEAPEAD@Z
?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXXZ
??0?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEAA@XZ
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IEAA@XZ
?_Osfx@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAXXZ
?flush@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV12@XZ
??0?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
?in@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAD3AEAPEAD@Z
?out@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAD3AEAPEAD@Z
?id@?$collate@D@std@@2V0locale@2@A
?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAPEADXZ
?_Pninc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEAAPEA_WXZ
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z
?setstate@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QEAAXH_N@Z
??0?$basic_ios@_WU?$char_traits@_W@std@@@std@@IEAA@XZ
??0?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAA@PEAV?$basic_streambuf@_WU?$char_traits@_W@std@@@1@_N@Z
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAA@XZ
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JXZ
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEAD_J@Z
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEBD_J@Z
??1?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UEAA@XZ
?_Lock@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UEAAXXZ
?_Unlock@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UEAAXXZ
?showmanyc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAA_JXZ
?uflow@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAAGXZ
?xsgetn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAA_JPEA_W_J@Z
?xsputn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAA_JPEB_W_J@Z
?setbuf@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAAPEAV12@PEA_W_J@Z
?sync@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAAHXZ
?imbue@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAAXAEBVlocale@2@@Z
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UEAA@XZ
??1?$basic_ios@_WU?$char_traits@_W@std@@@std@@UEAA@XZ
??1?$basic_ostream@_WU?$char_traits@_W@std@@@std@@UEAA@XZ
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@P6AAEAVios_base@1@AEAV21@@Z@Z
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@H@Z
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@I@Z
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@_K@Z
??1?$basic_istream@DU?$char_traits@D@std@@@std@@UEAA@XZ
?getline@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@PEAD_J@Z
?getloc@ios_base@std@@QEBA?AVlocale@2@XZ
?_Getcat@?$ctype@_W@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z
?widen@?$ctype@_W@std@@QEBA_WD@Z
?_Getcat@?$ctype@D@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z
?tolower@?$ctype@D@std@@QEBAPEBDPEADPEBD@Z
?tolower@?$ctype@D@std@@QEBADD@Z
?always_noconv@codecvt_base@std@@QEBA_NXZ
??1facet@locale@std@@MEAA@XZ
??0facet@locale@std@@IEAA@_K@Z
?_Decref@facet@locale@std@@UEAAPEAV_Facet_base@3@XZ
?_Incref@facet@locale@std@@UEAAXXZ
??Bid@locale@std@@QEAA_KXZ
?_Getcoll@_Locinfo@std@@QEBA?AU_Collvec@@XZ
??1_Locinfo@std@@QEAA@XZ
??0_Locinfo@std@@QEAA@PEBD@Z
?_Xbad_function_call@std@@YAXXZ
_Cnd_do_broadcast_at_thread_exit
?id@?$ctype@_W@std@@2V0locale@2@A
?id@?$codecvt@DDU_Mbstatet@@@std@@2V0locale@2@A
?id@?$ctype@D@std@@2V0locale@2@A
?_Fiopen@std@@YAPEAU_iobuf@@PEB_WHH@Z
?uncaught_exception@std@@YA_NXZ
?_Throw_Cpp_error@std@@YAXH@Z
?_Xbad_alloc@std@@YAXXZ
?_Getgloballocale@locale@std@@CAPEAV_Locimp@12@XZ
?_Init@locale@std@@CAPEAV_Locimp@12@_N@Z
_Strxfrm
_Strcoll
??1_Lockit@std@@QEAA@XZ
??0_Lockit@std@@QEAA@H@Z
?_Xout_of_range@std@@YAXPEBD@Z
?_Xinvalid_argument@std@@YAXPEBD@Z
?_Xlength_error@std@@YAXPEBD@Z
?_Xregex_error@std@@YAXW4error_type@regex_constants@1@@Z
shlwapi
PathFileExistsW
setupapi
SetupDiGetClassDevsA
SetupDiEnumDeviceInterfaces
SetupDiEnumDeviceInfo
SetupDiGetDeviceRegistryPropertyA
SetupDiDestroyDeviceInfoList
SetupDiGetDeviceInterfaceDetailA
api-ms-win-core-path-l1-1-0
PathAllocCombine
vcruntime140
strstr
__std_exception_copy
__std_terminate
strchr
__C_specific_handler
__std_type_info_destroy_list
memcmp
memset
memmove
memcpy
__CxxFrameHandler3
_CxxThrowException
_purecall
__std_exception_destroy
vcruntime140_1
__CxxFrameHandler4
api-ms-win-crt-heap-l1-1-0
realloc
malloc
free
calloc
_callnewh
api-ms-win-crt-string-l1-1-0
towlower
wcscpy_s
_wcsicmp
wcsncpy_s
strcmp
_wcsdup
strncpy
wcscat_s
api-ms-win-crt-convert-l1-1-0
strtol
_wtoi
api-ms-win-crt-stdio-l1-1-0
__stdio_common_vswprintf_s
fgetc
__stdio_common_vsprintf_s
fputc
fclose
_get_stream_buffer_pointers
fread
fwrite
fgetpos
_fseeki64
fsetpos
setvbuf
fflush
ungetc
__stdio_common_vswprintf
api-ms-win-crt-runtime-l1-1-0
_initterm_e
_seh_filter_dll
_configure_narrow_argv
_initialize_narrow_environment
_initialize_onexit_table
_register_onexit_function
_execute_onexit_table
_crt_atexit
_cexit
_initterm
_beginthreadex
_invalid_parameter_noinfo
_errno
_invalid_parameter_noinfo_noreturn
api-ms-win-crt-filesystem-l1-1-0
_unlock_file
_lock_file
api-ms-win-crt-math-l1-1-0
ceilf
Exports
Exports
QueryLibrary
Sections
.text Size: 143KB - Virtual size: 143KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 47KB - Virtual size: 47KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 668B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
Gajim.exe.exe windows:4 windows x64 arch:x64
fb32c52eb9fe127b75b54847db8159e5
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
Imports
libpython3.9
PyRun_SimpleStringFlags
PySys_SetArgvEx
Py_DontWriteBytecodeFlag
Py_Finalize
Py_FrozenFlag
Py_IgnoreEnvironmentFlag
Py_Initialize
Py_NoUserSiteDirectory
kernel32
DeleteCriticalSection
EnterCriticalSection
GetCommandLineW
GetLastError
GetStartupInfoA
InitializeCriticalSection
IsDBCSLeadByteEx
LeaveCriticalSection
MultiByteToWideChar
SetUnhandledExceptionFilter
Sleep
TlsGetValue
VirtualProtect
VirtualQuery
WideCharToMultiByte
msvcrt
__C_specific_handler
___lc_codepage_func
___mb_cur_max_func
__argc
__getmainargs
__initenv
__iob_func
__set_app_type
__setusermatherr
_acmdln
_amsg_exit
_cexit
_commode
_errno
_fmode
_initterm
_lock
_onexit
_unlock
abort
calloc
exit
fprintf
fputc
free
fwrite
localeconv
malloc
memcpy
memset
signal
strerror
strlen
strncmp
vfprintf
wcslen
shell32
CommandLineToArgvW
Sections
.text Size: 27KB - Virtual size: 27KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 240B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.pdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.xdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.bss Size: - Virtual size: 2KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.CRT Size: 512B - Virtual size: 96B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 16B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 295KB - Virtual size: 295KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 140B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
NMPluginBase.dll.dll regsvr32 windows:5 windows x86 arch:x86
c377e7056fba1d84e19fcc578636e63d
Code Sign
7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3bCertificate
IssuerCN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZANot Before21-12-2012 00:00Not After30-12-2020 23:59SubjectCN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=USExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageCertSign
KeyUsageCRLSign
0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50Certificate
IssuerCN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=USNot Before18-10-2012 00:00Not After29-12-2020 23:59SubjectCN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=USExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
4d:7a:5e:95:c9:2e:17:b8:e5:b3:1a:2b:d0:45:3a:49Certificate
IssuerCN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=USNot Before14-04-2015 00:00Not After13-07-2018 23:59SubjectCN=Nero AG,O=Nero AG,L=Karlsruhe,ST=Baden Wuerttemberg,C=DEExtended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
3d:78:d7:f9:76:49:60:b2:61:7d:f4:f0:1e:ca:86:2aCertificate
IssuerCN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=USNot Before10-12-2013 00:00Not After09-12-2023 23:59SubjectCN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=USExtended Key Usages
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
Key Usages
KeyUsageCertSign
KeyUsageCRLSign
ab:2b:9c:43:86:ca:f3:49:a6:06:53:c1:61:17:59:5b:03:53:82:7eSigner
Actual PE Digestab:2b:9c:43:86:ca:f3:49:a6:06:53:c1:61:17:59:5b:03:53:82:7eDigest Algorithmsha1PE Digest MatchestrueHeaders
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
D:\2016Builds\218\N2\HO_NSC_g_2016_r_0\Sources\src\Common\NMPluginBase\Release\NMPluginBase.pdb
Imports
kernel32
GetProcAddress
RaiseException
LoadResource
SizeofResource
lstrcmpiW
LoadLibraryExW
GetModuleHandleW
FindResourceW
MultiByteToWideChar
SetErrorMode
FindClose
LoadLibraryW
FreeLibrary
FindNextFileW
EncodePointer
DecodePointer
GetThreadLocale
SetThreadLocale
InterlockedCompareExchange
InitializeCriticalSection
WideCharToMultiByte
GetModuleFileNameW
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
LeaveCriticalSection
EnterCriticalSection
GetLastError
InterlockedDecrement
FindFirstFileW
InterlockedIncrement
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
HeapFree
GetProcessHeap
ResetEvent
SetEvent
WaitForSingleObject
CloseHandle
OpenEventA
CreateEventA
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
IsProcessorFeaturePresent
IsDebuggerPresent
lstrlenW
FormatMessageW
LocalFree
LocalAlloc
FormatMessageA
user32
CharUpperBuffW
CharNextW
wsprintfW
advapi32
RegQueryInfoKeyW
RegOpenKeyExW
RegEnumKeyExW
RegDeleteValueW
RegDeleteKeyW
RegCreateKeyExW
RegCloseKey
RegSetValueExW
ole32
CoTaskMemRealloc
StringFromCLSID
CoCreateInstance
CoTaskMemFree
CLSIDFromString
StringFromGUID2
CoTaskMemAlloc
oleaut32
UnRegisterTypeLi
RegisterTypeLi
VarUI4FromStr
BSTR_UserSize
LoadTypeLi
LoadRegTypeLi
SysAllocString
SysStringByteLen
SysAllocStringByteLen
SysStringLen
BSTR_UserMarshal
BSTR_UserUnmarshal
BSTR_UserFree
SysFreeString
rpcrt4
CStdStubBuffer_Connect
CStdStubBuffer_AddRef
NdrDllUnregisterProxy
NdrDllRegisterProxy
NdrDllCanUnloadNow
NdrDllGetClassObject
NdrCStdStubBuffer_Release
IUnknown_Release_Proxy
IUnknown_AddRef_Proxy
IUnknown_QueryInterface_Proxy
CStdStubBuffer_DebugServerRelease
CStdStubBuffer_DebugServerQueryInterface
CStdStubBuffer_CountRefs
CStdStubBuffer_IsIIDSupported
CStdStubBuffer_Invoke
CStdStubBuffer_QueryInterface
NdrStubForwardingFunction
NdrOleFree
NdrOleAllocate
NdrStubCall2
NdrCStdStubBuffer2_Release
CStdStubBuffer_Disconnect
msvcr110
fclose
??0exception@std@@QAE@XZ
??0exception@std@@QAE@ABV01@@Z
??1exception@std@@UAE@XZ
?terminate@@YAXXZ
??1type_info@@UAE@XZ
_crt_debugger_hook
__crtUnhandledException
_vsnprintf_s
_lock
_unlock
_calloc_crt
__dllonexit
_wfopen_s
__CppXcptFilter
_amsg_exit
_malloc_crt
_initterm
_initterm_e
_except_handler4_common
__clean_type_info_names_internal
sscanf_s
ftell
fseek
fread
??_U@YAPAXI@Z
wprintf
wcscat_s
memset
memcpy
_wcsicmp
wcsstr
wcsncpy_s
wcscpy_s
memcpy_s
_wtol
_recalloc
malloc
__CxxFrameHandler3
_CxxThrowException
memmove
??_V@YAXPAX@Z
free
__crtTerminateProcess
??2@YAPAXI@Z
??3@YAXPAX@Z
memcmp
atoi
memchr
_wassert
isalpha
isspace
isalnum
tolower
strchr
strncmp
??0exception@std@@QAE@ABQBD@Z
??0exception@std@@QAE@ABQBDH@Z
?what@exception@std@@UBEPBDXZ
strerror
_onexit
fputc
fprintf
fopen_s
ferror
atof
shlwapi
PathAppendW
PathRemoveFileSpecW
PathFindExtensionW
msvcp110
?_Add_vtordisp2@?$basic_ostream@DU?$char_traits@D@std@@@std@@UAEXXZ
?peek@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEHXZ
?get@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEHXZ
??_7?$basic_ios@DU?$char_traits@D@std@@@std@@6B@
??_7ios_base@std@@6B@
?_BADOFF@std@@3_JB
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPBD_J@Z
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPAD_J@Z
?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JXZ
?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEPAV12@PAD_J@Z
?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEXABVlocale@2@@Z
?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ
?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ
?_Add_vtordisp1@?$basic_ios@DU?$char_traits@D@std@@@std@@UAEXXZ
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@XZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@H@Z
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEXXZ
??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UAE@XZ
??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UAE@XZ
?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEPADXZ
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAE_JPBD_J@Z
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHD@Z
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAE@XZ
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAE@XZ
?_Ios_base_dtor@ios_base@std@@CAXPAV12@@Z
?uncaught_exception@std@@YA_NXZ
?_Winerror_map@std@@YAPBDH@Z
?_Syserror_map@std@@YAPBDH@Z
??0id@locale@std@@QAE@I@Z
?_Xout_of_range@std@@YAXPBD@Z
?_Xlength_error@std@@YAXPBD@Z
?_Xbad_alloc@std@@YAXXZ
?_Orphan_all@_Container_base0@std@@QAEXXZ
Exports
Exports
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Sections
.orpc Size: 512B - Virtual size: 292B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.text Size: 120KB - Virtual size: 120KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 37KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 5KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 2B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 14KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
PROFITERE.cox
-
SourceCodePro-BlackIt.otf
-
System.Private.Xml.Linq.dll.dll windows:4 windows x64 arch:x64
Code Sign
33:00:00:02:13:8c:0c:1c:31:35:bc:d2:5f:00:00:00:00:02:13Certificate
IssuerCN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USNot Before11-02-2021 20:09Not After10-02-2022 20:09SubjectCN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USExtended Key Usages
ExtKeyUsageCodeSigning
61:0e:90:d2:00:00:00:00:00:03Certificate
IssuerCN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USNot Before08-07-2011 20:59Not After08-07-2026 21:09SubjectCN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USKey Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
d5:c0:ff:f3:e6:13:fc:3f:5e:3b:a5:bc:79:90:c5:97:f9:0f:d3:95:00:4b:61:06:41:17:54:aa:32:d7:3e:59Signer
Actual PE Digestd5:c0:ff:f3:e6:13:fc:3f:5e:3b:a5:bc:79:90:c5:97:f9:0f:d3:95:00:4b:61:06:41:17:54:aa:32:d7:3e:59Digest Algorithmsha256PE Digest MatchestrueHeaders
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB Paths
System.Private.Xml.Linq.ni.pdb
D:\a\_work\1\s\artifacts\obj\System.Private.Xml.Linq\net6.0-Release\System.Private.Xml.Linq.pdb
Sections
.text Size: 358KB - Virtual size: 358KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 24KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
Telemechanics7.Kam
-
agRichEdit.ocx.dll regsvr32 windows:4 windows x86 arch:x86
07fa4bee8e72e2d62aafedd08619fba6
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
msvbvm50
EVENT_SINK_GetIDsOfNames
__vbaStrI2
_CIcos
_adj_fptan
__vbaStrI4
__vbaVarMove
__vbaAryMove
__vbaFreeVar
__vbaLenBstr
__vbaStrVarMove
__vbaFreeVarList
_adj_fdiv_m64
EVENT_SINK_Invoke
__vbaRaiseEvent
ord622
__vbaFreeObjList
ord516
_adj_fprem1
__vbaRecAnsiToUni
__vbaI2Abs
__vbaI4Sgn
__vbaCopyBytes
__vbaStrCat
__vbaRecDestruct
__vbaSetSystemError
__vbaHresultCheckObj
__vbaVargVarCopy
_adj_fdiv_m32
Zombie_GetTypeInfo
__vbaAryDestruct
EVENT_SINK2_Release
__vbaI4Abs
ord301
ord595
__vbaOnError
__vbaObjSet
_adj_fdiv_m16i
__vbaObjSetAddref
_adj_fdivr_m16i
__vbaBoolVar
ord307
__vbaBoolVarNull
_CIsin
ord631
__vbaErase
__vbaVargVarMove
__vbaChkstk
__vbaCyVar
EVENT_SINK_AddRef
ord527
__vbaGenerateBoundsError
__vbaStrCmp
__vbaI2I4
DllFunctionCall
__vbaCastObjVar
__vbaRedimPreserve
_adj_fpatan
__vbaLateIdCallLd
Zombie_GetTypeInfoCount
__vbaRedim
__vbaRecUniToAnsi
EVENT_SINK_Release
__vbaNew
__vbaUI1I2
_CIsqrt
__vbaObjIs
EVENT_SINK_QueryInterface
__vbaUI1I4
__vbaExceptHandler
__vbaStrToUnicode
ord606
_adj_fprem
_adj_fdivr_m64
__vbaFailedFriend
__vbaFPException
__vbaUbound
__vbaStrVarVal
__vbaI2Var
ord644
ord537
_CIlog
__vbaErrorOverflow
__vbaVar2Vec
__vbaInStr
__vbaNew2
__vbaCyMulI2
_adj_fdiv_m32i
_adj_fdivr_m32i
__vbaStrCopy
EVENT_SINK2_AddRef
__vbaI4Str
__vbaVarNot
__vbaFreeStrList
_adj_fdivr_m32
_adj_fdiv_r
ord685
ord101
ord102
__vbaI4Var
ord103
ord104
ord105
__vbaAryLock
__vbaStrToAnsi
ord616
__vbaFpI4
__vbaRecDestructAnsi
__vbaLateMemCallLd
_CIatan
__vbaCastObj
__vbaStrMove
__vbaI4Cy
_allmul
__vbaLateIdSt
_CItan
__vbaAryUnlock
_CIexp
__vbaFreeObj
__vbaFreeStr
Exports
Exports
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Sections
.text Size: 113KB - Virtual size: 113KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 35KB - Virtual size: 35KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 11KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
dbdata.dll.dll windows:4 windows x64 arch:x64
223069e75fbee50e53d04e45e77a5c10
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
Imports
kernel32
DeleteCriticalSection
EnterCriticalSection
GetLastError
InitializeCriticalSection
LeaveCriticalSection
Sleep
TlsGetValue
VirtualProtect
VirtualQuery
msvcrt
__iob_func
_amsg_exit
_assert
_initterm
_lock
_unlock
abort
calloc
free
fwrite
memcpy
memset
realloc
strlen
strncmp
vfprintf
Exports
Exports
sqlite3_dbdata_init
Sections
.text Size: 11KB - Virtual size: 11KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 320B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.pdata Size: 1024B - Virtual size: 684B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.xdata Size: 1024B - Virtual size: 524B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.bss Size: - Virtual size: 272B
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.edata Size: 512B - Virtual size: 81B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 1024B - Virtual size: 960B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.CRT Size: 512B - Virtual size: 88B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 16B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 116B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
/4 Size: 1024B - Virtual size: 768B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
/19 Size: 32KB - Virtual size: 31KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
/31 Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
/45 Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
/57 Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
/70 Size: 1024B - Virtual size: 807B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
/81 Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
/92 Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
iso_3166-1.xml.xml
-
lang-1025.dll.dll windows:6 windows x86 arch:x86
Code Sign
04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08Certificate
IssuerCN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=USNot Before22-10-2013 12:00Not After22-10-2028 12:00SubjectCN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=USExtended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
02:fa:99:4d:66:0d:e6:59:ee:90:37:ec:b4:37:d7:66Certificate
IssuerCN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=USNot Before14-10-2019 00:00Not After18-10-2022 12:00SubjectCN=Piriform Software Ltd,OU=RE 901,O=Piriform Software Ltd,L=London,C=GBExtended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
61:1c:b2:8a:00:00:00:00:00:26Certificate
IssuerCN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USNot Before15-04-2011 19:41Not After15-04-2021 19:51SubjectCN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=USKey Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:ddCertificate
IssuerCN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=USNot Before01-01-2021 00:00Not After06-01-2031 00:00SubjectCN=DigiCert Timestamp 2021,O=DigiCert\, Inc.,C=USExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15Certificate
IssuerCN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=USNot Before07-01-2016 12:00Not After07-01-2031 12:00SubjectCN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=USExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
bf:b6:62:bf:14:7f:b0:79:d2:dc:5c:14:be:30:8e:d6:ff:82:7b:08:f3:72:5a:8d:6e:70:e9:08:ab:60:09:3fSigner
Actual PE Digestbf:b6:62:bf:14:7f:b0:79:d2:dc:5c:14:be:30:8e:d6:ff:82:7b:08:f3:72:5a:8d:6e:70:e9:08:ab:60:09:3fDigest Algorithmsha256PE Digest MatchestrueHeaders
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
.rdata Size: 512B - Virtual size: 112B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 138KB - Virtual size: 137KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
libtiff-5.dll.dll windows:4 windows x64 arch:x64
75ac40004458d0107e610aca0b5aca92
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL
Imports
libdeflate
libdeflate_alloc_compressor
libdeflate_alloc_decompressor
libdeflate_free_compressor
libdeflate_free_decompressor
libdeflate_zlib_compress
libdeflate_zlib_compress_bound
libdeflate_zlib_decompress
libjbig-0
jbg_dec_free
jbg_dec_getimage
jbg_dec_getsize
jbg_dec_in
jbg_dec_init
jbg_enc_free
jbg_enc_init
jbg_enc_out
jbg_newlen
jbg_strerror
libjpeg-8
jpeg_CreateCompress
jpeg_CreateDecompress
jpeg_abort
jpeg_destroy
jpeg_finish_compress
jpeg_finish_decompress
jpeg_has_multiple_scans
jpeg_read_header
jpeg_read_raw_data
jpeg_read_scanlines
jpeg_resync_to_restart
jpeg_set_colorspace
jpeg_set_defaults
jpeg_set_quality
jpeg_start_compress
jpeg_start_decompress
jpeg_std_error
jpeg_suppress_tables
jpeg_write_raw_data
jpeg_write_scanlines
jpeg_write_tables
liblerc
lerc_decode
lerc_encodeForVersion
lerc_getBlobInfo
liblzma-5
lzma_code
lzma_end
lzma_lzma_preset
lzma_memusage
lzma_stream_decoder
lzma_stream_encoder
libwebp-7
WebPConfigInitInternal
WebPEncode
WebPFreeDecBuffer
WebPIAppend
WebPIDecGetRGB
WebPIDelete
WebPINewDecoder
WebPInitDecBufferInternal
WebPPictureFree
WebPPictureImportRGB
WebPPictureImportRGBA
WebPPictureInitInternal
WebPValidateConfig
zlib1
deflate
deflateEnd
deflateInit_
deflateParams
deflateReset
inflate
inflateEnd
inflateInit_
inflateReset
libzstd
ZSTD_compress
ZSTD_compressBound
ZSTD_compressStream
ZSTD_createCStream
ZSTD_createDStream
ZSTD_decompress
ZSTD_decompressStream
ZSTD_endStream
ZSTD_freeCStream
ZSTD_freeDStream
ZSTD_getErrorName
ZSTD_initCStream
ZSTD_initDStream
ZSTD_isError
ZSTD_maxCLevel
kernel32
CloseHandle
CreateFileA
CreateFileMappingA
CreateFileW
DeleteCriticalSection
EnterCriticalSection
GetFileSizeEx
GetLastError
InitializeCriticalSection
IsDBCSLeadByteEx
LeaveCriticalSection
MapViewOfFile
MultiByteToWideChar
ReadFile
SetFilePointer
Sleep
TlsGetValue
UnmapViewOfFile
VirtualProtect
VirtualQuery
WideCharToMultiByte
WriteFile
msvcrt
___lc_codepage_func
___mb_cur_max_func
__iob_func
__setusermatherr
_amsg_exit
_assert
_errno
_initterm
_lock
_setjmp
_unlock
abort
atoi
bsearch
calloc
fputc
fputs
free
fwrite
getenv
isprint
localeconv
longjmp
malloc
memcmp
memcpy
memmove
memset
qsort
realloc
rand
strcmp
strcpy
strerror
strlen
strncmp
vfprintf
wcslen
Exports
Exports
LogL10fromY
LogL10toY
LogL16fromY
LogL16toY
LogLuv24fromXYZ
LogLuv24toXYZ
LogLuv32fromXYZ
LogLuv32toXYZ
TIFFAccessTagMethods
TIFFCIELabToRGBInit
TIFFCIELabToXYZ
TIFFCheckTile
TIFFCheckpointDirectory
TIFFCleanup
TIFFClientOpen
TIFFClientdata
TIFFClose
TIFFComputeStrip
TIFFComputeTile
TIFFCreateCustomDirectory
TIFFCreateDirectory
TIFFCreateEXIFDirectory
TIFFCreateGPSDirectory
TIFFCurrentDirOffset
TIFFCurrentDirectory
TIFFCurrentRow
TIFFCurrentStrip
TIFFCurrentTile
TIFFDataWidth
TIFFDefaultDirectory
TIFFDefaultStripSize
TIFFDefaultTileSize
TIFFDeferStrileArrayWriting
TIFFError
TIFFErrorExt
TIFFFaxBlackCodes
TIFFFaxBlackTable
TIFFFaxMainTable
TIFFFaxWhiteCodes
TIFFFaxWhiteTable
TIFFFdOpen
TIFFFieldDataType
TIFFFieldName
TIFFFieldPassCount
TIFFFieldReadCount
TIFFFieldTag
TIFFFieldWithName
TIFFFieldWithTag
TIFFFieldWriteCount
TIFFFileName
TIFFFileno
TIFFFillStrip
TIFFFillTile
TIFFFindCODEC
TIFFFindField
TIFFFlush
TIFFFlushData
TIFFFlushData1
TIFFForceStrileArrayWriting
TIFFFreeDirectory
TIFFGetBitRevTable
TIFFGetClientInfo
TIFFGetCloseProc
TIFFGetConfiguredCODECs
TIFFGetField
TIFFGetFieldDefaulted
TIFFGetMapFileProc
TIFFGetMode
TIFFGetReadProc
TIFFGetSeekProc
TIFFGetSizeProc
TIFFGetStrileByteCount
TIFFGetStrileByteCountWithErr
TIFFGetStrileOffset
TIFFGetStrileOffsetWithErr
TIFFGetTagListCount
TIFFGetTagListEntry
TIFFGetUnmapFileProc
TIFFGetVersion
TIFFGetWriteProc
TIFFInitCCITTFax3
TIFFInitCCITTFax4
TIFFInitCCITTRLE
TIFFInitCCITTRLEW
TIFFInitDumpMode
TIFFInitJBIG
TIFFInitJPEG
TIFFInitLERC
TIFFInitLZMA
TIFFInitLZW
TIFFInitNeXT
TIFFInitOJPEG
TIFFInitPackBits
TIFFInitPixarLog
TIFFInitSGILog
TIFFInitThunderScan
TIFFInitWebP
TIFFInitZIP
TIFFInitZSTD
TIFFIsBigEndian
TIFFIsByteSwapped
TIFFIsCODECConfigured
TIFFIsMSB2LSB
TIFFIsTiled
TIFFIsUpSampled
TIFFJPEGIsFullStripRequired
TIFFLastDirectory
TIFFMergeFieldInfo
TIFFNumberOfDirectories
TIFFNumberOfStrips
TIFFNumberOfTiles
TIFFOpen
TIFFOpenW
TIFFPredictorCleanup
TIFFPredictorInit
TIFFPrintDirectory
TIFFRGBAImageBegin
TIFFRGBAImageEnd
TIFFRGBAImageGet
TIFFRGBAImageOK
TIFFRasterScanlineSize
TIFFRasterScanlineSize64
TIFFRawStripSize
TIFFRawStripSize64
TIFFReadBufferSetup
TIFFReadCustomDirectory
TIFFReadDirectory
TIFFReadEXIFDirectory
TIFFReadEncodedStrip
TIFFReadEncodedTile
TIFFReadFromUserBuffer
TIFFReadGPSDirectory
TIFFReadRGBAImage
TIFFReadRGBAImageOriented
TIFFReadRGBAStrip
TIFFReadRGBAStripExt
TIFFReadRGBATile
TIFFReadRGBATileExt
TIFFReadRawStrip
TIFFReadRawTile
TIFFReadScanline
TIFFReadTile
TIFFRegisterCODEC
TIFFReverseBits
TIFFRewriteDirectory
TIFFScanlineSize
TIFFScanlineSize64
TIFFSetClientInfo
TIFFSetClientdata
TIFFSetCompressionScheme
TIFFSetDirectory
TIFFSetErrorHandler
TIFFSetErrorHandlerExt
TIFFSetField
TIFFSetFileName
TIFFSetFileno
TIFFSetMode
TIFFSetSubDirectory
TIFFSetTagExtender
TIFFSetWarningHandler
TIFFSetWarningHandlerExt
TIFFSetWriteOffset
TIFFSetupStrips
TIFFStripSize
TIFFStripSize64
TIFFSwabArrayOfDouble
TIFFSwabArrayOfFloat
TIFFSwabArrayOfLong
TIFFSwabArrayOfLong8
TIFFSwabArrayOfShort
TIFFSwabArrayOfTriples
TIFFSwabDouble
TIFFSwabFloat
TIFFSwabLong
TIFFSwabLong8
TIFFSwabShort
TIFFTileRowSize
TIFFTileRowSize64
TIFFTileSize
TIFFTileSize64
TIFFUnRegisterCODEC
TIFFUnlinkDirectory
TIFFUnsetField
TIFFVGetField
TIFFVGetFieldDefaulted
TIFFVSetField
TIFFVStripSize
TIFFVStripSize64
TIFFVTileSize
TIFFVTileSize64
TIFFWarning
TIFFWarningExt
TIFFWriteBufferSetup
TIFFWriteCheck
TIFFWriteCustomDirectory
TIFFWriteDirectory
TIFFWriteEncodedStrip
TIFFWriteEncodedTile
TIFFWriteRawStrip
TIFFWriteRawTile
TIFFWriteScanline
TIFFWriteTile
TIFFXYZToRGB
TIFFYCbCrToRGBInit
TIFFYCbCrtoRGB
XYZtoRGB24
_TIFFBuiltinCODECS
_TIFFCastUInt64ToSSize
_TIFFCheckFieldIsValidForCodec
_TIFFCheckMalloc
_TIFFCheckRealloc
_TIFFClampDoubleToFloat
_TIFFCreateAnonField
_TIFFDataSize
_TIFFDefaultStripSize
_TIFFDefaultTileSize
_TIFFFax3fillruns
_TIFFFillStriles
_TIFFFindOrRegisterField
_TIFFGetExifFields
_TIFFGetFields
_TIFFGetGpsFields
_TIFFMergeFields
_TIFFMultiply32
_TIFFMultiply64
_TIFFMultiplySSize
_TIFFNoPostDecode
_TIFFNoPreCode
_TIFFNoRowDecode
_TIFFNoRowEncode
_TIFFNoSeek
_TIFFNoStripDecode
_TIFFNoStripEncode
_TIFFNoTileDecode
_TIFFNoTileEncode
_TIFFPrintFieldInfo
_TIFFReadEncodedStripAndAllocBuffer
_TIFFReadEncodedTileAndAllocBuffer
_TIFFReadTileAndAllocBuffer
_TIFFRewriteField
_TIFFSeekOK
_TIFFSetDefaultCompressionState
_TIFFSetGetFieldSize
_TIFFSetupFields
_TIFFSwab16BitData
_TIFFSwab24BitData
_TIFFSwab32BitData
_TIFFSwab64BitData
_TIFFUInt64ToDouble
_TIFFUInt64ToFloat
_TIFFcalloc
_TIFFerrorHandler
_TIFFerrorHandlerExt
_TIFFfree
_TIFFgetMode
_TIFFmalloc
_TIFFmemcmp
_TIFFmemcpy
_TIFFmemset
_TIFFprintAscii
_TIFFprintAsciiTag
_TIFFrealloc
_TIFFsetByteArray
_TIFFsetDoubleArray
_TIFFsetFloatArray
_TIFFsetLongArray
_TIFFsetShortArray
_TIFFsetString
_TIFFwarningHandler
_TIFFwarningHandlerExt
uv_decode
uv_encode
Sections
.text Size: 310KB - Virtual size: 310KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 224B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 173KB - Virtual size: 173KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.pdata Size: 9KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.xdata Size: 9KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.bss Size: - Virtual size: 3KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.edata Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.CRT Size: 512B - Virtual size: 88B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 16B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 1024B - Virtual size: 988B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
uUDFImporter.dll.dll windows:6 windows x86 arch:x86
27a13694a42dd69759b2f57a03f9f325
Code Sign
7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3bCertificate
IssuerCN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZANot Before21-12-2012 00:00Not After30-12-2020 23:59SubjectCN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=USExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageCertSign
KeyUsageCRLSign
0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50Certificate
IssuerCN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=USNot Before18-10-2012 00:00Not After29-12-2020 23:59SubjectCN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=USExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
4d:7a:5e:95:c9:2e:17:b8:e5:b3:1a:2b:d0:45:3a:49Certificate
IssuerCN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=USNot Before14-04-2015 00:00Not After13-07-2018 23:59SubjectCN=Nero AG,O=Nero AG,L=Karlsruhe,ST=Baden Wuerttemberg,C=DEExtended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
3d:78:d7:f9:76:49:60:b2:61:7d:f4:f0:1e:ca:86:2aCertificate
IssuerCN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=USNot Before10-12-2013 00:00Not After09-12-2023 23:59SubjectCN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=USExtended Key Usages
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
Key Usages
KeyUsageCertSign
KeyUsageCRLSign
4d:7a:5e:95:c9:2e:17:b8:e5:b3:1a:2b:d0:45:3a:49Certificate
IssuerCN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=USNot Before14-04-2015 00:00Not After13-07-2018 23:59SubjectCN=Nero AG,O=Nero AG,L=Karlsruhe,ST=Baden Wuerttemberg,C=DEExtended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
3d:78:d7:f9:76:49:60:b2:61:7d:f4:f0:1e:ca:86:2aCertificate
IssuerCN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=USNot Before10-12-2013 00:00Not After09-12-2023 23:59SubjectCN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=USExtended Key Usages
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
Key Usages
KeyUsageCertSign
KeyUsageCRLSign
7b:05:b1:d4:49:68:51:44:f7:c9:89:d2:9c:19:9d:12Certificate
IssuerCN=VeriSign Universal Root Certification Authority,OU=VeriSign Trust Network+OU=(c) 2008 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=USNot Before12-01-2016 00:00Not After11-01-2031 23:59SubjectCN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=USExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageCertSign
KeyUsageCRLSign
54:f3:7d:a1:71:67:51:bc:6a:8d:0a:d2:74:b2:8b:13Certificate
IssuerCN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=USNot Before12-01-2016 00:00Not After11-04-2027 23:59SubjectCN=Symantec SHA256 TimeStamping Signer - G1,OU=Symantec Trust Network,O=Symantec Corporation,C=USExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
b4:d2:f2:65:42:23:fd:e3:1f:90:79:bb:16:72:35:a5:32:e5:e2:f2:b2:44:c5:24:fb:c7:61:bf:e4:96:66:03Signer
Actual PE Digestb4:d2:f2:65:42:23:fd:e3:1f:90:79:bb:16:72:35:a5:32:e5:e2:f2:b2:44:c5:24:fb:c7:61:bf:e4:96:66:03Digest Algorithmsha256PE Digest Matchestrue10:64:53:74:73:0c:48:dd:a9:2b:b4:7b:4f:a6:60:ed:a1:68:b7:c2Signer
Actual PE Digest10:64:53:74:73:0c:48:dd:a9:2b:b4:7b:4f:a6:60:ed:a1:68:b7:c2Digest Algorithmsha1PE Digest MatchestrueHeaders
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
C:\Builds\78\N2\HO_NBR_g_2016_r_2016\Sources\Nero\bin\Release\uUDFImporter.pdb
Imports
kernel32
SetLastError
GetModuleFileNameW
MultiByteToWideChar
WideCharToMultiByte
GetVersion
GlobalMemoryStatus
LocalFree
GetLastError
Sleep
FormatMessageW
GetSystemDefaultLangID
SystemTimeToFileTime
FileTimeToLocalFileTime
LocalFileTimeToFileTime
FileTimeToSystemTime
GetTickCount
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
IsProcessorFeaturePresent
IsDebuggerPresent
DecodePointer
EncodePointer
DisableThreadLibraryCalls
msvcp110
?width@ios_base@std@@QBE_JXZ
?width@ios_base@std@@QAE_J_J@Z
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHD@Z
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAE_JPBD_J@Z
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
?tie@?$basic_ios@DU?$char_traits@D@std@@@std@@QBEPAV?$basic_ostream@DU?$char_traits@D@std@@@2@XZ
?rdbuf@?$basic_ios@DU?$char_traits@D@std@@@std@@QBEPAV?$basic_streambuf@DU?$char_traits@D@std@@@2@XZ
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEXXZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@I@Z
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@XZ
?cout@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@G@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@H@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@J@Z
?cerr@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAE@XZ
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAE@XZ
?gptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBEPADXZ
?pptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBEPADXZ
?gbump@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXH@Z
?pbump@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXH@Z
?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEPADXZ
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UAE@XZ
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IAE@XZ
??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UAE@XZ
?_Add_vtordisp2@?$basic_ostream@DU?$char_traits@D@std@@@std@@UAEXXZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAV01@AAV01@@Z@Z
?endl@std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@1@AAV21@@Z
?setw@std@@YA?AU?$_Smanip@_J@1@_J@Z
?_Add_vtordisp1@?$basic_ios@DU?$char_traits@D@std@@@std@@UAEXXZ
?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ
?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ
?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEXABVlocale@2@@Z
?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEPAV12@PAD_J@Z
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JXZ
?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPAD_J@Z
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPBD_J@Z
?_BADOFF@std@@3_JB
?classic@locale@std@@SAABV12@XZ
?setf@ios_base@std@@QAEHH@Z
?setf@ios_base@std@@QAEHHH@Z
?imbue@?$basic_ios@DU?$char_traits@D@std@@@std@@QAE?AVlocale@2@ABV32@@Z
?flags@ios_base@std@@QBEHXZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@PBX@Z
?setiosflags@std@@YA?AU?$_Smanip@H@1@H@Z
?_Winerror_map@std@@YAPBDH@Z
?_Orphan_all@_Container_base0@std@@QAEXXZ
?_Xbad_alloc@std@@YAXXZ
?_Xlength_error@std@@YAXPBD@Z
?_Xout_of_range@std@@YAXPBD@Z
??0id@locale@std@@QAE@I@Z
?_Syserror_map@std@@YAPBDH@Z
?uncaught_exception@std@@YA_NXZ
?good@ios_base@std@@QBE_NXZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAVios_base@1@AAV21@@Z@Z
msvcr110
fwprintf
_vsnwprintf_s
_wfopen_s
wcscat_s
wcscpy_s
wcslen
wcsncpy_s
wcsftime
strlen
fclose
fflush
_localtime64_s
_time64
strncmp
memcmp
strncpy_s
memcpy_s
strcpy
strcmp
rand
srand
div
vswprintf_s
sprintf_s
isprint
strftime
_getmbcp
_gmtime64_s
_mktime64
??1type_info@@UAE@XZ
_lock
_unlock
_calloc_crt
__dllonexit
_onexit
?terminate@@YAXXZ
__CppXcptFilter
_amsg_exit
free
_malloc_crt
_initterm
_initterm_e
_crt_debugger_hook
__crtUnhandledException
__crtTerminateProcess
_except_handler4_common
__clean_type_info_names_internal
__CxxFrameHandler3
_CxxThrowException
??_V@YAXPAX@Z
memset
memcpy
memmove
??3@YAXPAX@Z
??2@YAPAXI@Z
_purecall
Exports
Exports
??0?$CExtensionCollector@VINeroMediumDriver@@VINeroFileSystemMediumExtension@@W4NeroFSExtensionsType@@@@QAE@ABV0@@Z
??0?$CExtensionCollector@VINeroMediumDriver@@VINeroFileSystemMediumExtension@@W4NeroFSExtensionsType@@@@QAE@XZ
??0CNeroFileSystemString@@QAE@ABV0@@Z
??0CNeroFileSystemString@@QAE@PBD@Z
??0CNeroFileSystemString@@QAE@PB_W@Z
??0CNeroFileSystemString@@QAE@XZ
??0CStateSubject@@IAE@XZ
??0CStateSubject@@QAE@ABV0@@Z
??0CUDFFileSystemDriver@@QAE@ABV0@@Z
??0CUDFFileSystemDriver@@QAE@PAVINeroFileSystemBlockAccess@@H@Z
??0MountRainierBlockReadWriter@@QAE@ABV0@@Z
??0MountRainierBlockReadWriter@@QAE@PAVINeroFileSystemBlockAccess@@PAVUDFStateHandler@@_N@Z
??0MountRainierBlockReadWriter@@QAE@PAVINeroFileSystemBlockReader@@PAVUDFStateHandler@@_N@Z
??0StateContainer@@QAE@ABV0@@Z
??0StateContainer@@QAE@XZ
??0UDFState@@QAE@ABV0@@Z
??0UDFState@@QAE@XZ
??0UDFStateHandler@@QAE@ABV0@@Z
??0UDFStateHandler@@QAE@XZ
??0UDF_FSReader@@IAE@PAVINeroFileSystemBlockAccess@@HPAVVDSContainer@@@Z
??0UDF_FSReader@@QAE@ABV0@@Z
??1?$CExtensionCollector@VINeroMediumDriver@@VINeroFileSystemMediumExtension@@W4NeroFSExtensionsType@@@@UAE@XZ
??1CNeroFileSystemString@@UAE@XZ
??1CStateSubject@@UAE@XZ
??1CUDFFileSystemDriver@@UAE@XZ
??1MountRainierBlockReadWriter@@UAE@XZ
??1StateContainer@@UAE@XZ
??1UDFState@@UAE@XZ
??1UDFStateHandler@@QAE@XZ
??1UDF_FSReader@@IAE@XZ
??4?$CExtensionCollector@VINeroMediumDriver@@VINeroFileSystemMediumExtension@@W4NeroFSExtensionsType@@@@QAEAAV0@ABV0@@Z
??4CNeroFileSystemString@@QAEAAV0@ABV0@@Z
??4CStateSubject@@QAEAAV0@ABV0@@Z
??4CUDFFileSystemDriver@@QAEAAV0@ABV0@@Z
??4MountRainierBlockReadWriter@@QAEAAV0@ABV0@@Z
??4StateContainer@@QAEAAV0@ABV0@@Z
??4UDFState@@QAEAAV0@ABV0@@Z
??4UDFStateHandler@@QAEAAV0@ABV0@@Z
??4UDF_FSReader@@QAEAAV0@ABV0@@Z
??_7?$CExtensionCollector@VINeroMediumDriver@@VINeroFileSystemMediumExtension@@W4NeroFSExtensionsType@@@@6B@
??_7CNeroFileSystemString@@6B@
??_7CStateSubject@@6B@
??_7CUDFFileSystemDriver@@6B?$CExtensionCollector@VINeroMediumDriver@@VINeroFileSystemMediumExtension@@W4NeroFSExtensionsType@@@@@
??_7CUDFFileSystemDriver@@6BISwitchSessionNotificationSink@@@
??_7MountRainierBlockReadWriter@@6B@
??_7StateContainer@@6B@
??_7UDFState@@6B@
?AddBool@StateContainer@@UAEXPBDH@Z
?AddByte@StateContainer@@UAEXPBDE@Z
?AddData@StateContainer@@UAEXPBDIPAXI@Z
?AddExtension@?$CExtensionCollector@VINeroMediumDriver@@VINeroFileSystemMediumExtension@@W4NeroFSExtensionsType@@@@QAEXPAVINeroFileSystemMediumExtension@@@Z
?AddInt64@StateContainer@@UAEXPBD_J@Z
?AddPointer@StateContainer@@UAEXPBDPAX@Z
?AddString@StateContainer@@UAEXPBDABVINeroFileSystemString@@@Z
?AddUint16@StateContainer@@UAEXPBDG@Z
?AddUint32@StateContainer@@UAEXPBDI@Z
?Attach@CStateSubject@@UAEXPAVIStateObserver@@@Z
?CalcLogicalBlock@UDF_FSReader@@QAE?AW4NeroFSError@@_JAAIAAG@Z
?CheckVATFileEntry@UDF_FSReader@@QAEHPAVCUDF_BasicFileEntry@UDFImporterLowlevelStructures@@@Z
?ClearPercent@UDFStateHandler@@QAEXXZ
?ConvertToHex@StateContainer@@IAEXPADHAAV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
?CreateWriteBuffers@UDF_FSReader@@QAE?AW4NeroFSError@@PAE_JABV?$vector@_JV?$allocator@_J@std@@@std@@AAV?$vector@UUDF_SectorWriteBuffer@@V?$allocator@UUDF_SectorWriteBuffer@@@std@@@4@@Z
?DeInitialize@CUDFFileSystemDriver@@IAEXXZ
?Detach@CStateSubject@@UAEXPAVIStateObserver@@@Z
?DetachINode@UDF_FSReader@@QAEXPAVINode@@@Z
?DisableUpdate@UDFStateHandler@@QAEXXZ
?DumpDescriptor@UDF_FSReader@@QAEHAAUUDF_SectorWriteBuffer@@PAVCUDF_DescriptorTag@UDFImporterLowlevelStructures@@@Z
?EnableUpdate@UDFStateHandler@@QAEXXZ
?FindData@StateContainer@@IAEHPBDAAV?$_Vector_iterator@V?$_Vector_val@U?$_Simple_types@Ustatedata@@@std@@@std@@@std@@@Z
?FindVATFileEntry@UDF_FSReader@@AAEPAVCUDF_BasicFileEntry@UDFImporterLowlevelStructures@@_J@Z
?FlushSectorCache@MountRainierBlockReadWriter@@UAEXXZ
?GetAVDP@CUDFFileSystemDriver@@IAE_NXZ
?GetBlockReader@UDF_FSReader@@QAEPAVINeroFileSystemBlockAccess@@XZ
?GetBlockWriterType@MountRainierBlockReadWriter@@UAE?AW4InterfaceType@@XZ
?GetBool@StateContainer@@UAEHPBDAAH@Z
?GetBufferMode@UDF_FSReader@@QAEHXZ
?GetByte@StateContainer@@UAEHPBDAAE@Z
?GetData@StateContainer@@UAEHPBDIAAPAXAAI@Z
?GetExtendedSectorAllocator@UDF_FSReader@@QAEPAVSectorAllocator@@XZ
?GetFileEntryFileData@UDF_FSReader@@QAE?AW4NeroFSError@@PAVCUDF_BasicFileEntry@UDFImporterLowlevelStructures@@AAPAEAA_J@Z
?GetFileEntrySectorList@UDF_FSReader@@QAE?AW4NeroFSError@@PAVCUDF_BasicFileEntry@UDFImporterLowlevelStructures@@AAV?$vector@_JV?$allocator@_J@std@@@std@@PAVUDF_Allocator@@@Z
?GetFileExtension@?$CExtensionCollector@VINeroMediumDriver@@VINeroFileSystemMediumExtension@@W4NeroFSExtensionsType@@@@UAEPAVINeroFileSystemMediumExtension@@W4NeroFSExtensionsType@@@Z
?GetFileExtension@MountRainierBlockReadWriter@@UAEPAVINeroFileSystemBlockAccessExtension@@W4NeroFSBlockAccessExtensionsType@@@Z
?GetFileExtensionByNumber@?$CExtensionCollector@VINeroMediumDriver@@VINeroFileSystemMediumExtension@@W4NeroFSExtensionsType@@@@UAEPAVINeroFileSystemMediumExtension@@H@Z
?GetFileExtensionByNumber@MountRainierBlockReadWriter@@UAEPAVINeroFileSystemBlockAccessExtension@@H@Z
?GetFileSystemPreferences@UDF_FSReader@@QAEPAVFileSystemPreferences@@XZ
?GetINode@UDF_FSReader@@QAEPAVINode@@PAVCUDF_BasicFileEntry@UDFImporterLowlevelStructures@@@Z
?GetINodeMap@UDF_FSReader@@QAEPAVINodeMap@@XZ
?GetInt64@StateContainer@@UAEHPBDAA_J@Z
?GetLogicalBlockSize@UDF_FSReader@@QBE_JXZ
?GetLongAllocDescTranslation@UDF_FSReader@@QAE_JABUUDF_LONG_ALLOCATION_DESCRIPTOR@UDFImporterLowlevelStructures@@IAA_J@Z
?GetLongAllocDescTranslationCount@UDF_FSReader@@QAEIABUUDF_LONG_ALLOCATION_DESCRIPTOR@UDFImporterLowlevelStructures@@@Z
?GetMetadataBitmapFileEntry@UDF_FSReader@@QAE?AW4NeroFSError@@AAPAVCUDF_BasicFileEntry@UDFImporterLowlevelStructures@@@Z
?GetMetadataFileEntry@UDF_FSReader@@QAEPAVCUDF_BasicFileEntry@UDFImporterLowlevelStructures@@XZ
?GetMetadataFreeSpace@UDF_FSReader@@QAE?AW4NeroFSError@@GAAI@Z
?GetMetadataMirrorFileEntry@UDF_FSReader@@QAEPAVCUDF_BasicFileEntry@UDFImporterLowlevelStructures@@XZ
?GetMetadataMirrorSector@UDF_FSReader@@QAE?AW4NeroFSError@@_JAA_J@Z
?GetMetadataPartitionBitmap@UDF_FSReader@@QAE?AW4NeroFSError@@AAPAVCUDF_SpaceBitmapDescriptor@UDFImporterLowlevelStructures@@@Z
?GetMetadataPartitionFileEntry@UDF_FSReader@@QAE?AW4NeroFSError@@IGAAPAVCUDF_BasicFileEntry@UDFImporterLowlevelStructures@@@Z
?GetMetadataPartitionMap@UDF_FSReader@@QAEXAAPAVCUDF_Type2MetaDataPartitionMap@UDFImporterLowlevelStructures@@@Z
?GetMetadataPartitionNumber@UDF_FSReader@@QBEHXZ
?GetMetadataPartitionReference@UDF_FSReader@@QBEHAAG@Z
?GetMetadataSize@UDF_FSReader@@QAE?AW4NeroFSError@@GAAI@Z
?GetMetadataSize@UDF_FSReader@@QAE_JXZ
?GetNASManager@UDF_FSReader@@QAEPAVNonAllocatableSpaceManager@@XZ
?GetNumPartitions@MountRainierBlockReadWriter@@UAEHXZ
?GetNumSupportedExtensions@?$CExtensionCollector@VINeroMediumDriver@@VINeroFileSystemMediumExtension@@W4NeroFSExtensionsType@@@@UAEKXZ
?GetNumSupportedExtensions@MountRainierBlockReadWriter@@UAEKXZ
?GetNumberOfPartitions@UDF_FSReader@@QBEIXZ
?GetNumberOfVolumes@CUDFFileSystemDriver@@UAEHXZ
?GetPartitionForSector@MountRainierBlockReadWriter@@UAEABUNeroFSPartitionInfo@@_J@Z
?GetPartitionInfo@MountRainierBlockReadWriter@@UAEABUNeroFSPartitionInfo@@H@Z
?GetPartitionLastSec@UDF_FSReader@@QAE_JXZ
?GetPartitionStartSec@UDF_FSReader@@QAE_JXZ
?GetPartitionType@UDF_FSReader@@QAE?AW4UDF_PARTITION_TYPE@@H@Z
?GetPhysicalPartitionDescriptor@UDF_FSReader@@QAEPAVCUDF_PartitionDescriptor@UDFImporterLowlevelStructures@@XZ
?GetPhysicalPartitionDescriptorIndex@UDF_FSReader@@QBEHXZ
?GetPhysicalPartitionDescriptorReferenceNumber@UDF_FSReader@@QAEGXZ
?GetPointer@StateContainer@@UAEHPBDAAPAX@Z
?GetPreferredPartition@UDF_FSReader@@QBEGXZ
?GetSectorAllocator@UDF_FSReader@@QAEPAVISectorAllocator@@H@Z
?GetSparingTableManager@UDF_FSReader@@QAEPAVSparingTableManager@@XZ
?GetState@UDFState@@UAEXAAPAVIStateContainer@@@Z
?GetStateHandler@UDFStateHandler@@QAEPAVIStateHandler@@XZ
?GetString@StateContainer@@UAEHPBDAAVINeroFileSystemString@@@Z
?GetStringContent@CNeroFileSystemString@@UBEPBDXZ
?GetUDFRevision@UDF_FSReader@@QAEGXZ
?GetUint16@StateContainer@@UAEHPBDAAG@Z
?GetUint32@StateContainer@@UAEHPBDAAI@Z
?GetUniqueIdMappingStream@UDF_FSReader@@QAEPAVUniqueIdMappingStream@@XZ
?GetVAT@UDF_FSReader@@QAEPAVCUDF_BasicVAT@UDFImporterLowlevelStructures@@XZ
?GetVATFileEntry@UDF_FSReader@@QAEHAAPAVCUDF_BasicFileEntry@UDFImporterLowlevelStructures@@@Z
?GetVATFileEntryLocation@UDF_FSReader@@QAE_JXZ
?GetVolume@CUDFFileSystemDriver@@UAEPAVINeroFileSystemVolume@@H@Z
?GetVolumeDescriptorSequencePtr@UDF_FSReader@@QAEPAVVDSContainer@@XZ
?GetVolumeIntegrityManager@UDF_FSReader@@QAEPAVVolumeIntegrityManager@@XZ
?GetVolumeSpaceAllocator@UDF_FSReader@@QAEPAVVolumeSpaceAllocator@@XZ
?GetWideStringContent@CNeroFileSystemString@@UBEPB_WXZ
?HasMetadataMirror@UDF_FSReader@@QBE_NXZ
?HasMetadataPartition@UDF_FSReader@@QBE_NXZ
?InitBDRPOWTrackManager@UDF_FSReader@@IAE_NXZ
?InitMetadataPartition@UDF_FSReader@@QAEHXZ
?InitWriteSupport@UDF_FSReader@@IAE?AW4NeroFSError@@XZ
?Initialize@CUDFFileSystemDriver@@IAEXXZ
?Initialize@MountRainierBlockReadWriter@@IAEHPAVINeroFileSystemBlockReader@@PAVUDFStateHandler@@_N@Z
?InitializeUDFRevision@UDF_FSReader@@AAEXXZ
?LogicalBlock2Sector@UDF_FSReader@@QAE?AW4NeroFSError@@IH_JAA_J@Z
?MRWCheck@CUDFFileSystemDriver@@IAEHXZ
?Notify@CStateSubject@@UAEXXZ
?NumSectorAllocators@UDF_FSReader@@QBEIXZ
?PrintToStream@StateContainer@@QAEXAAV?$basic_ostream@DU?$char_traits@D@std@@@std@@@Z
?ReLoadStructures@CUDFFileSystemDriver@@UAEXXZ
?ReadDescriptor@UDF_FSReader@@QAE?AW4NeroFSError@@UUDF_EXTENDED_ALLOCATION_DESCRIPTOR@UDFImporterLowlevelStructures@@AAPAVCUDF_DescriptorTag@4@AAV?$vector@_JV?$allocator@_J@std@@@std@@AA_JG@Z
?ReadDescriptor@UDF_FSReader@@QAE?AW4NeroFSError@@UUDF_LONG_ALLOCATION_DESCRIPTOR@UDFImporterLowlevelStructures@@AAPAVCUDF_DescriptorTag@4@AAV?$vector@_JV?$allocator@_J@std@@@std@@AA_JG@Z
?ReadDescriptor@UDF_FSReader@@QAE?AW4NeroFSError@@UUDF_SHORT_ALLOCATION_DESCRIPTOR@@AAPAVCUDF_DescriptorTag@UDFImporterLowlevelStructures@@AAV?$vector@_JV?$allocator@_J@std@@@std@@AA_JG@Z
?ReadDescriptor@UDF_FSReader@@QAE?AW4NeroFSError@@UUDF_SHORT_ALLOCATION_DESCRIPTOR@@HAAPAVCUDF_DescriptorTag@UDFImporterLowlevelStructures@@AAV?$vector@_JV?$allocator@_J@std@@@std@@AA_JG@Z
?ReadLongAllocDesc@UDF_FSReader@@QAE?AW4NeroFSError@@ABUUDF_LONG_ALLOCATION_DESCRIPTOR@UDFImporterLowlevelStructures@@AAPAEAA_J@Z
?ReadSectors@UDF_FSReader@@QAE?AW4NeroFSError@@AAV?$vector@_JV?$allocator@_J@std@@@std@@AAPAEAA_J@Z
?ReadSectorsBuffered@MountRainierBlockReadWriter@@UAE?AW4NeroFSError@@PAX_J1AA_J@Z
?ReadSectorsUnBuffered@MountRainierBlockReadWriter@@UAE?AW4NeroFSError@@PAX_J1AA_J@Z
?ReadSparablePartitionTables@UDF_FSReader@@QAEHXZ
?ReadVAT@UDF_FSReader@@QAEHXZ
?RemoveEntry@StateContainer@@UAEHPBD@Z
?RemoveExtension@?$CExtensionCollector@VINeroMediumDriver@@VINeroFileSystemMediumExtension@@W4NeroFSExtensionsType@@@@UAEXPAVINeroFileSystemMediumExtension@@@Z
?ReplaceBool@StateContainer@@UAEHPBDH@Z
?ReplaceByte@StateContainer@@UAEHPBDE@Z
?ReplaceData@StateContainer@@UAEHPBDIPAXI@Z
?ReplaceInt64@StateContainer@@UAEHPBD_J@Z
?ReplacePointer@StateContainer@@UAEHPBDPAX@Z
?ReplaceString@StateContainer@@UAEHPBDABVINeroFileSystemString@@@Z
?ReplaceUint16@StateContainer@@UAEHPBDG@Z
?ReplaceUint32@StateContainer@@UAEHPBDI@Z
?SectorsPerLogicalBlock@UDF_FSReader@@QAE_JXZ
?SetAction@UDFStateHandler@@QAEXIV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
?SetBufferMode@UDF_FSReader@@QAEHH@Z
?SetCurrentSector@UDFStateHandler@@QAEX_J@Z
?SetCurrentSectorCount@UDFStateHandler@@QAEX_J@Z
?SetError@UDFStateHandler@@QAEXIV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
?SetInformation@UDFStateHandler@@QAEXV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
?SetNASManager@UDF_FSReader@@QAEXPAVNonAllocatableSpaceManager@@@Z
?SetPercentCompleted@UDFStateHandler@@QAEXI@Z
?SetPercentLimits@UDFStateHandler@@QAEXII@Z
?SetPercentValue@UDFStateHandler@@QAEXI@Z
?SetSectorLimits@UDFStateHandler@@QAEX_J0@Z
?SetState@UDFState@@UAEXPAVIStateContainer@@@Z
?SetStringContent@CNeroFileSystemString@@UAEXPBD@Z
?SetStringContent@CNeroFileSystemString@@UAEXPB_W@Z
?SetUniqueIdMappingStream@UDF_FSReader@@QAEXPAVUniqueIdMappingStream@@@Z
?TranslateExtendedAllocDesc@UDF_FSReader@@QAE?AW4NeroFSError@@ABUUDF_EXTENDED_ALLOCATION_DESCRIPTOR@UDFImporterLowlevelStructures@@AAV?$vector@_JV?$allocator@_J@std@@@std@@AA_J@Z
?TranslateLongAllocDesc@UDF_FSReader@@QAE?AW4NeroFSError@@ABUUDF_LONG_ALLOCATION_DESCRIPTOR@UDFImporterLowlevelStructures@@AAV?$vector@_JV?$allocator@_J@std@@@std@@AA_J@Z
?TranslateSector2LogicalBlock@UDF_FSReader@@QAE?AW4NeroFSError@@_JAA_JAAH_N@Z
?TranslateSector@UDF_FSReader@@QAE?AW4NeroFSError@@_JHAA_JH@Z
?TranslateSectorList@UDF_FSReader@@QAE?AW4NeroFSError@@_J0HAAV?$vector@_JV?$allocator@_J@std@@@std@@H@Z
?TranslateShortAllocDescEx@UDF_FSReader@@QAE?AW4NeroFSError@@ABUUDF_SHORT_ALLOCATION_DESCRIPTOR@@HAAV?$vector@_JV?$allocator@_J@std@@@std@@AA_J@Z
?TryRelocating@UDF_FSReader@@AAE?AW4NeroFSError@@AAV?$vector@UUDF_SectorWriteBuffer@@V?$allocator@UUDF_SectorWriteBuffer@@@std@@@std@@H_N@Z
?UpdateIfNecessary@UDFStateHandler@@QAEXXZ
?WriteBuffersToDisk@UDF_FSReader@@QAE?AW4NeroFSError@@AAV?$vector@UUDF_SectorWriteBuffer@@V?$allocator@UUDF_SectorWriteBuffer@@@std@@@std@@_N1@Z
?WriteSectorsBuffered@MountRainierBlockReadWriter@@UAE?AW4NeroFSError@@PBX_J1AA_J@Z
?WriteSectorsUnBuffered@MountRainierBlockReadWriter@@UAE?AW4NeroFSError@@PBX_J1AA_J@Z
?getReader@MountRainierBlockReadWriter@@IAEPAVINeroFileSystemBlockReader@@XZ
?iCreateDesc@UDF_FSReader@@AAE?AW4NeroFSError@@PAEIHAAPAVCUDF_DescriptorTag@UDFImporterLowlevelStructures@@AAV?$vector@_JV?$allocator@_J@std@@@std@@AA_JG@Z
?readSectorsRaw@MountRainierBlockReadWriter@@IAE?AW4NeroFSError@@PAX_J1AA_J_N@Z
?repairSIP@MountRainierBlockReadWriter@@IAEHXZ
CompressUnicode
NERO_PLUGIN_GetInterfaceVersion
NERO_PLUGIN_GetPluginName
NERO_PLUGIN_GetPluginType
NERO_PLUGIN_GetVersion
NERO_PLUGIN_SetInterfaceVersion
NERO_PLUGIN_SetVendorInformations
NeroFileSystemDriver_Create
UDFDateTime2Nero
UDFTransName
UncompressUnicode
Sections
.text Size: 354KB - Virtual size: 353KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 94KB - Virtual size: 93KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 18KB - Virtual size: 23KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 19KB - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
vsocklib_x86.dll.dll windows:6 windows x86 arch:x86
ba117f90f709b3b6e3fc59edb89aad22
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
d:\build\ob\bora-16460229\bora-vmsoft\build\release\apps\vsockLib\vsocklib.pdb
Imports
kernel32
CreateFileW
CloseHandle
DeviceIoControl
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
GetModuleHandleW
GetProcAddress
IsDebuggerPresent
InitializeSListHead
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
IsProcessorFeaturePresent
TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
api-ms-win-crt-string-l1-1-0
wcscpy_s
memset
api-ms-win-crt-runtime-l1-1-0
_initterm
_initialize_onexit_table
_execute_onexit_table
_cexit
_initialize_narrow_environment
_configure_narrow_argv
_seh_filter_dll
_initterm_e
vcruntime140
__std_type_info_destroy_list
memcpy
_except_handler4_common
Exports
Exports
WSPStartup
Sections
.text Size: 10KB - Virtual size: 9KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 576B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ