3029897064932db75991ca59f1530ab5d4380cfc91338376dc0e95272440de70[.]zip

3029897064932db75991ca59f1530ab5d4380cfc91338376dc0e95272440de70.zip

.rar

!Premium--SatUp/Data/Config/DisplayLanguageNames.de_CH.txt

!Premium--SatUp/Data/Config/DisplayLanguageNames.el_GR_PREEURO.txt

!Premium--SatUp/Data/Config/code6.txt

!Premium--SatUp/Data/Config/custom-hg-hello.txt

!Premium--SatUp/Data/Config/example.com_noroot_v1.0.1.txt

!Premium--SatUp/Data/Config/github.com_dmitshur-test_modtest5_v0.5.0-alpha.txt

!Premium--SatUp/Data/Config/mod_convert_glide.txt

!Premium--SatUp/Data/Config/mod_run_issue52331.txt

!Premium--SatUp/Data/Config/msg_30.txt

.eml

attachment-1

!Premium--SatUp/Data/Config/test_vendor.txt

.js

!Premium--SatUp/Data/Config/todo.txt

!Premium--SatUp/Data/Config/work_use_issue55952.txt

!Premium--SatUp/Data/DOMCharacterData_data_error_002.phpt

.js

!Premium--SatUp/Data/Microsoft.Azure.ActiveDirectory.GraphClient.dll

.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Code Sign

33:00:00:00:70:f4:18:bf:23:21:fc:50:9d:00:00:00:00:00:70
Certificate

Issuer

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

20/03/2015, 17:32

Not After

20/06/2016, 17:32

Subject

CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:F528-3777-8A76,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

33:00:00:01:0a:2c:79:ae:d7:79:7b:a6:ac:00:01:00:00:01:0a
Certificate

Issuer

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

04/06/2015, 17:42

Not After

04/09/2016, 17:42

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:33:26:1a:00:00:00:00:00:31
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

31/08/2010, 22:19

Not After

31/08/2020, 22:29

Subject

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

61:16:68:34:00:00:00:00:00:1c
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

03/04/2007, 12:53

Not After

03/04/2021, 13:03

Subject

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

5e:de:6d:6c:75:e6:b4:46:e8:c6:bd:38:7b:26:8e:f5:11:aa:4d:83
Signer

Actual PE Digest

5e:de:6d:6c:75:e6:b4:46:e8:c6:bd:38:7b:26:8e:f5:11:aa:4d:83

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

IMAGE_DLLCHARACTERISTICS_NO_SEH

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_32BIT_MACHINE

IMAGE_FILE_DLL

PDB Paths

x:\bt\541172\repo\src\dev\RestServices\GraphClientLibrary\Version1.5s\obj\amd64\Microsoft.Azure.ActiveDirectory.GraphClient.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 536KB - Virtual size: 536KB

IMAGE_SCN_CNT_CODE

IMAGE_SCN_MEM_EXECUTE

IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_DISCARDABLE

IMAGE_SCN_MEM_READ

!Premium--SatUp/Data/add_007.phpt

.js

!Premium--SatUp/Data/array_multisort_basic2.phpt

!Premium--SatUp/Data/bug47254.phpt

!Premium--SatUp/Data/bug75420.7.phpt

!Premium--SatUp/Data/bug76601-reload-child-signals.phpt

!Premium--SatUp/Data/const.h

!Premium--SatUp/Data/cpu_usage.png

.png

!Premium--SatUp/Data/create_new_phar_b.phpt

!Premium--SatUp/Data/dom_test.inc

.ps1

!Premium--SatUp/Data/ftp_mlsd_missing_directory.phpt

!Premium--SatUp/Data/magic_methods_014.phpt

!Premium--SatUp/Data/msenvico.dll

.dll windows:6 windows x64 arch:x64

Code Sign

33:00:00:03:4e:b5:3c:7a:c1:84:6f:eb:2b:00:00:00:00:03:4e
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

16/03/2023, 18:43

Not After

14/03/2024, 18:43

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08/07/2011, 20:59

Not After

08/07/2026, 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

f0:f2:91:eb:b3:05:d4:71:70:e1:7e:2e:00:7e:2b:d5:e1:12:7c:59:14:5b:38:2e:c2:d6:21:77:f8:c2:1e:e2
Signer

Actual PE Digest

f0:f2:91:eb:b3:05:d4:71:70:e1:7e:2e:00:7e:2b:d5:e1:12:7c:59:14:5b:38:2e:c2:d6:21:77:f8:c2:1e:e2

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_LARGE_ADDRESS_AWARE

IMAGE_FILE_DLL

Sections

.rdata
Size: 512B - Virtual size: 160B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.rsrc
Size: 672KB - Virtual size: 672KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

!Premium--SatUp/Data/php_libmagic.h

!Premium--SatUp/Data/readonly_class_missing_type1.phpt

!Premium--SatUp/Data/serialization_objects_009.phpt

.js

!Premium--SatUp/Data/session_set_save_handler_variation4.phpt

!Premium--SatUp/Data/skipLazyInitialization_default.phpt

.js

!Premium--SatUp/Data/zend_ini_scanner_defs.h

!Premium--SatUp/MigrationService/System.Web.Extensions.Design.VisualStudio.15.0.dll

.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Code Sign

33:00:00:03:4e:b5:3c:7a:c1:84:6f:eb:2b:00:00:00:00:03:4e
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

16/03/2023, 18:43

Not After

14/03/2024, 18:43

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08/07/2011, 20:59

Not After

08/07/2026, 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

93:2c:22:41:88:8f:fd:c9:8c:68:fd:42:5d:39:ff:4c:c1:4b:69:19:b4:3b:97:92:eb:f2:f8:56:8f:c7:57:1b
Signer

Actual PE Digest

93:2c:22:41:88:8f:fd:c9:8c:68:fd:42:5d:39:ff:4c:c1:4b:69:19:b4:3b:97:92:eb:f2:f8:56:8f:c7:57:1b

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

IMAGE_DLLCHARACTERISTICS_NO_SEH

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_LARGE_ADDRESS_AWARE

IMAGE_FILE_DLL

PDB Paths

D:\dbs\sh\ddvsm\0726_105248\cmd\e\out\Intermediate\vsip\system.web.extensions.design.visualstudio.csproj_34353DAD\objr\x86\System.Web.Extensions.Design.VisualStudio.15.0.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 175KB - Virtual size: 174KB

IMAGE_SCN_CNT_CODE

IMAGE_SCN_MEM_EXECUTE

IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_DISCARDABLE

IMAGE_SCN_MEM_READ

!Premium--SatUp/MigrationService/dvatemporalxmp.dll

.dll windows:5 windows x64 arch:x64

892a6a56a33d14639bb506d992f28935

Code Sign

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

21/12/2012, 00:00

Not After

30/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign

KeyUsageCRLSign

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

18/10/2012, 00:00

Not After

29/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

6c:59:ef:a9:e1:00:e1:0e:e3:06:ba:8f:e0:29:25:59
Certificate

Issuer

Not Before

07/06/2012, 00:00

Not After

06/06/2022, 23:59

Subject

CN=Symantec Class 3 Extended Validation Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageClientAuth

ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign

KeyUsageCRLSign

35:a8:4f:a5:03:f8:9b:49:83:96:bb:48:91:68:a5:80
Certificate

Issuer

CN=Symantec Class 3 Extended Validation Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Not Before

14/01/2014, 00:00

Not After

07/01/2016, 23:59

Subject

SERIALNUMBER=2748129,CN=Adobe Systems Incorporated,OU=Photoshop\, Bridge - SHA256,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130844656c6177617265,1.3.6.1.4.1.311.60.2.1.3=#13025553

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

d1:0a:c0:92:13:70:87:1d:dd:36:b4:12:75:e0:c5:31:4c:39:96:59
Signer

Actual PE Digest

d1:0a:c0:92:13:70:87:1d:dd:36:b4:12:75:e0:c5:31:4c:39:96:59

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_LARGE_ADDRESS_AWARE

IMAGE_FILE_DLL

PDB Paths

D:\DynamicLinkMediaServer8\releases\2014.03\shared\adobe\dvatemporalxmp\lib\win\release\64\dvatemporalxmp.pdb

Imports

boost_system

?system_category@system@boost@@YAAEBVerror_category@12@XZ

dvacore

??1?$basic_string@GU?$char_traits@G@std@@V?$STLAllocator@G@SmallBlockAllocator@utility@dvacore@@@std@@QEAA@XZ

??0Guid@utility@dvacore@@QEAA@KGGEEEEEEEE@Z

??4?$basic_string@GU?$char_traits@G@std@@V?$STLAllocator@G@SmallBlockAllocator@utility@dvacore@@@std@@QEAAAEAV01@AEBV01@@Z

?MixInData@MixHash@utility@dvacore@@CAXAEAVHashValue@23@PEBE_K@Z

??0?$basic_string@GU?$char_traits@G@std@@V?$STLAllocator@G@SmallBlockAllocator@utility@dvacore@@@std@@QEAA@$$QEAV01@@Z

?AsUTF8String@Guid@utility@dvacore@@QEBA?AV?$basic_string@EU?$char_traits@E@std@@V?$STLAllocator@E@SmallBlockAllocator@utility@dvacore@@@std@@XZ

?CreateUnique@Guid@utility@dvacore@@SA?AV123@XZ

??0?$basic_string@GU?$char_traits@G@std@@V?$STLAllocator@G@SmallBlockAllocator@utility@dvacore@@@std@@QEAA@XZ

?c_str@?$basic_string@EU?$char_traits@E@std@@V?$STLAllocator@E@SmallBlockAllocator@utility@dvacore@@@std@@QEBAPEBEXZ

?Dispose@SmallBlockAllocator@utility@dvacore@@YAXPEAX_K@Z

??Y?$basic_string@EU?$char_traits@E@std@@V?$STLAllocator@E@SmallBlockAllocator@utility@dvacore@@@std@@QEAAAEAV01@AEBV01@@Z

?reserve@?$basic_string@EU?$char_traits@E@std@@V?$STLAllocator@E@SmallBlockAllocator@utility@dvacore@@@std@@QEAAX_K@Z

??0?$basic_string@EU?$char_traits@E@std@@V?$STLAllocator@E@SmallBlockAllocator@utility@dvacore@@@std@@QEAA@XZ

??0?$basic_string@EU?$char_traits@E@std@@V?$STLAllocator@E@SmallBlockAllocator@utility@dvacore@@@std@@QEAA@$$QEAV01@@Z

?append@?$basic_string@EU?$char_traits@E@std@@V?$STLAllocator@E@SmallBlockAllocator@utility@dvacore@@@std@@QEAAAEAV12@AEBV12@@Z

?UTF8to16@utility@dvacore@@YA?AV?$basic_string@GU?$char_traits@G@std@@V?$STLAllocator@G@SmallBlockAllocator@utility@dvacore@@@std@@AEBV?$basic_string@EU?$char_traits@E@std@@V?$STLAllocator@E@SmallBlockAllocator@utility@dvacore@@@4@PEAW4UnicodeErrorCode@12@PEA_K@Z

?UTF16to8@utility@dvacore@@YA?AV?$basic_string@EU?$char_traits@E@std@@V?$STLAllocator@E@SmallBlockAllocator@utility@dvacore@@@std@@AEBV?$basic_string@GU?$char_traits@G@std@@V?$STLAllocator@G@SmallBlockAllocator@utility@dvacore@@@4@@Z

??0?$basic_string@GU?$char_traits@G@std@@V?$STLAllocator@G@SmallBlockAllocator@utility@dvacore@@@std@@QEAA@AEBV01@@Z

?compare@?$basic_string@GU?$char_traits@G@std@@V?$STLAllocator@G@SmallBlockAllocator@utility@dvacore@@@std@@QEBAHAEBV12@@Z

?GetJSONUTF8String@serialization@dvacore@@YA?AV?$basic_string@EU?$char_traits@E@std@@V?$STLAllocator@E@SmallBlockAllocator@utility@dvacore@@@std@@AEBVany@boost@@@Z

?_Myptr@?$basic_string@EU?$char_traits@E@std@@V?$STLAllocator@E@SmallBlockAllocator@utility@dvacore@@@std@@QEBAPEBEXZ

?JSONParse@serialization@dvacore@@YA?AV?$shared_ptr@Vany@boost@@@boost@@PEBE@Z

?ObjectHasProperty@serialization@dvacore@@YA_NAEBV?$map@V?$basic_string@EU?$char_traits@E@std@@V?$STLAllocator@E@SmallBlockAllocator@utility@dvacore@@@std@@V?$shared_ptr@Vany@boost@@@boost@@U?$less@V?$basic_string@EU?$char_traits@E@std@@V?$STLAllocator@E@SmallBlockAllocator@utility@dvacore@@@std@@@2@@SmallBlockAllocator@utility@2@PEBD@Z

?GetVariantInObject@serialization@dvacore@@YA?AV?$shared_ptr@Vany@boost@@@boost@@AEBV?$map@V?$basic_string@EU?$char_traits@E@std@@V?$STLAllocator@E@SmallBlockAllocator@utility@dvacore@@@std@@V?$shared_ptr@Vany@boost@@@boost@@U?$less@V?$basic_string@EU?$char_traits@E@std@@V?$STLAllocator@E@SmallBlockAllocator@utility@dvacore@@@std@@@2@@SmallBlockAllocator@utility@2@PEBD@Z

?AddToObject@serialization@dvacore@@YAXAEAVany@boost@@PEBDAEBV34@@Z

??0?$basic_string@EU?$char_traits@E@std@@V?$STLAllocator@E@SmallBlockAllocator@utility@dvacore@@@std@@QEAA@PEBE@Z

??1?$basic_string@EU?$char_traits@E@std@@V?$STLAllocator@E@SmallBlockAllocator@utility@dvacore@@@std@@QEAA@XZ

??0?$basic_string@EU?$char_traits@E@std@@V?$STLAllocator@E@SmallBlockAllocator@utility@dvacore@@@std@@QEAA@AEBV01@@Z

?Allocate@SmallBlockAllocator@utility@dvacore@@YAPEAX_K@Z

adobexmp

ord17

ord76

ord75

ord74

ord73

ord72

ord71

ord70

ord69

ord68

ord66

ord50

ord61

ord37

ord23

ord22

ord21

ord20

ord16

ord15

ord104

ord107

ord4

ord103

ord116

ord106

ord101

ord92

ord90

ord89

ord88

ord1

ord2

ord3

ord5

ord6

ord7

ord8

ord9

ord10

ord11

ord13

ord14

ord18

ord19

ord24

ord25

ord26

ord27

ord28

ord29

ord30

ord31

ord32

ord33

ord34

ord35

ord36

ord40

ord41

ord42

ord43

ord44

ord45

ord46

ord47

ord48

ord49

ord38

ord39

ord60

ord51

ord54

ord55

ord56

ord57

ord59

ord52

ord53

ord58

ord124

ord125

ord126

ord65

ord64

ord63

ord62

ord67

ord78

ord79

ord80

ord81

ord82

ord83

ord84

ord85

ord86

ord87

ord91

ord93

ord123

ord94

ord95

ord96

ord97

ord98

ord99

ord100

ord102

ord108

ord109

ord105

ord110

ord111

ord112

ord113

ord114

ord115

ord117

ord118

ord119

ord120

ord77

dvametadata

?NamespaceDefinition@dvametadata@@YA?AV?$shared_ptr@USchemaDefinition@dvametadata@@@boost@@AEBV?$basic_string@EU?$char_traits@E@std@@V?$STLAllocator@E@SmallBlockAllocator@utility@dvacore@@@std@@@Z

kernel32

QueryPerformanceCounter

QueryPerformanceFrequency

CloseHandle

CreateEventA

GetSystemTimeAsFileTime

WaitForSingleObject

SetEvent

EncodePointer

DecodePointer

Sleep

TerminateProcess

GetCurrentProcess

UnhandledExceptionFilter

SetUnhandledExceptionFilter

IsDebuggerPresent

RtlVirtualUnwind

RtlLookupFunctionEntry

RtlCaptureContext

DisableThreadLibraryCalls

GetCurrentThreadId

GetCurrentProcessId

GetTickCount

msvcp100

?_BADOFF@std@@3_JB

?exceptions@ios_base@std@@QEAAXH@Z

??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@H@Z

??0?$basic_ios@DU?$char_traits@D@std@@@std@@IEAA@XZ

??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z

??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAA@XZ

??1?$basic_ios@DU?$char_traits@D@std@@@std@@UEAA@XZ

?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAPEADXZ

??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UEAA@XZ

?pbump@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXH@Z

?gbump@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXH@Z

?gptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ

?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAXAEBVlocale@2@@Z

?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ

?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAPEAV12@PEAD_J@Z

?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEBD_J@Z

?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEAD_J@Z

?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ

?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JXZ

?_Xlength_error@std@@YAXPEBD@Z

?_Xout_of_range@std@@YAXPEBD@Z

?_Orphan_all@_Container_base0@std@@QEAAXXZ

?_Swap_all@_Container_base0@std@@QEAAXAEAU12@@Z

??0id@locale@std@@QEAA@_K@Z

?pptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ

??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAA@XZ

?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ

?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ

msvcr100

_unlock

__dllonexit

_lock

_onexit

?terminate@@YAXXZ

_malloc_crt

_initterm

_initterm_e

free

??0exception@std@@QEAA@AEBV01@@Z

_encoded_null

_amsg_exit

__CppXcptFilter

?_type_info_dtor_internal_method@type_info@@QEAAXXZ

__crt_debugger_hook

__clean_type_info_names_internal

??0exception@std@@QEAA@AEBQEBDH@Z

__C_specific_handler

??3@YAXPEAX@Z

??0exception@std@@QEAA@AEBQEBD@Z

?what@exception@std@@UEBAPEBDXZ

??1exception@std@@UEAA@XZ

??2@YAPEAX_K@Z

_CxxThrowException

fopen

memcpy

memmove

__CxxFrameHandler3

printf

fflush

__iob_func

memcmp

memchr

memset

_strtoi64

sprintf

_purecall

??0bad_cast@std@@QEAA@PEBD@Z

??1bad_cast@std@@UEAA@XZ

??8type_info@@QEBA_NAEBV0@@Z

??0bad_cast@std@@QEAA@AEBV01@@Z

fclose

strncpy

fread

??_V@YAXPEAX@Z

Exports

??0Marker@dvatemporalxmp@@QEAA@AEBV01@@Z

??0Marker@dvatemporalxmp@@QEAA@AEBV01@_N@Z

??0Marker@dvatemporalxmp@@QEAA@AEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z

??0Marker@dvatemporalxmp@@QEAA@XZ

??0MarkerTypeFilter@dvatemporalxmp@@QEAA@XZ

??0XMPCuePointParam@dvatemporalxmp@@QEAA@PEBD0@Z

??0XMPDocOpsTemporal@dvatemporalxmp@@QEAA@XZ

??0XMPKeywordData@dvatemporalxmp@@QEAA@AEBV01@_N@Z

??0XMPKeywordData@dvatemporalxmp@@QEAA@AEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AEBVXMPKeywordExtension@1@@Z

??0XMPTemporalMetadataCollector@dvatemporalxmp@@QEAA@AEBV?$TXMPMeta@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@@_J1@Z

??0XMPTemporalMetadataCollector@dvatemporalxmp@@QEAA@EAEBV?$TXMPMeta@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@@_J1@Z

??0XMPTemporalMetadataInfo@dvatemporalxmp@@QEAA@PEBD0_J10000AEBV?$vector@VXMPCuePointParam@dvatemporalxmp@@V?$allocator@VXMPCuePointParam@dvatemporalxmp@@@std@@@std@@000@Z

??0XMPTemporalMetadataInfo@dvatemporalxmp@@QEAA@PEBD0_J111110000AEBV?$vector@VXMPCuePointParam@dvatemporalxmp@@V?$allocator@VXMPCuePointParam@dvatemporalxmp@@@std@@@std@@000@Z

??0XMPTrack@dvatemporalxmp@@QEAA@PEBD0_J1@Z

??0XMPTrack@dvatemporalxmp@@QEAA@PEBD_J1@Z

??0XMPTrack@dvatemporalxmp@@QEAA@XZ

??0XMPTrack@dvatemporalxmp@@QEAA@_J0@Z

??0XMPTrack@dvatemporalxmp@@QEAA@_J@Z

??1Marker@dvatemporalxmp@@QEAA@XZ

??1MarkerTypeFilter@dvatemporalxmp@@UEAA@XZ

??1XMPCuePointParam@dvatemporalxmp@@QEAA@XZ

??1XMPDocOpsTemporal@dvatemporalxmp@@QEAA@XZ

??1XMPTemporalMetadataCollector@dvatemporalxmp@@QEAA@XZ

??1XMPTemporalMetadataInfo@dvatemporalxmp@@QEAA@XZ

??1XMPTrack@dvatemporalxmp@@QEAA@XZ

??2?$Allocated@VMarkerTypeFilter@dvatemporalxmp@@@SmallBlockAllocator@utility@dvacore@@SAPEAX_K@Z

??2?$Allocated@VMarkerTypeFilter@dvatemporalxmp@@@SmallBlockAllocator@utility@dvacore@@SAPEAX_KPEAX@Z

??2?$Allocated@VMarkerTypeFilter@dvatemporalxmp@@@SmallBlockAllocator@utility@dvacore@@SAPEAX_KUnothrow_t@std@@@Z

??3?$Allocated@VMarkerTypeFilter@dvatemporalxmp@@@SmallBlockAllocator@utility@dvacore@@SAXPEAX_K@Z

??4?$Allocated@VMarkerTypeFilter@dvatemporalxmp@@@SmallBlockAllocator@utility@dvacore@@QEAAAEAV0123@AEBV0123@@Z

??4Marker@dvatemporalxmp@@QEAAAEAV01@AEBV01@@Z

??8Marker@dvatemporalxmp@@QEBA_NAEBV01@@Z

??9Marker@dvatemporalxmp@@QEBA_NAEBV01@@Z

??_7MarkerTypeFilter@dvatemporalxmp@@6B@

?AddIngredientXMP@XMPDocOpsTemporal@dvatemporalxmp@@QEAAXAEBV?$TXMPMeta@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@@PEBD111111111@Z

?AddIngredientXMPTemporal@XMPDocOpsTemporal@dvatemporalxmp@@QEAAXAEBV?$TXMPMeta@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@@_J11111111111PEBD22_N3@Z

?AddIngredientXMPTemporal@XMPDocOpsTemporal@dvatemporalxmp@@QEAAXAEBV?$TXMPMeta@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@@_J11111111111PEBD22_N@Z

?AddIngredientXMPTemporal@XMPDocOpsTemporal@dvatemporalxmp@@QEAAXAEBV?$TXMPMeta@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@@_J111PEBD22@Z

?AddKeyword@XMPTemporalMetadataInfo@dvatemporalxmp@@QEAAXAEBVXMPKeywordData@2@@Z

?AddMarker@XMPTrack@dvatemporalxmp@@QEAAXAEBVXMPTemporalMetadataInfo@2@@Z

?AddMarker@XMPTrack@dvatemporalxmp@@QEAAXV?$_Tree_iterator@V?$_Tree_val@V?$_Tmap_traits@_JVXMPTemporalMetadataInfo@dvatemporalxmp@@U?$less@_J@std@@V?$allocator@U?$pair@$$CB_JVXMPTemporalMetadataInfo@dvatemporalxmp@@@std@@@4@$00@std@@@std@@@std@@AEBVXMPTemporalMetadataInfo@2@@Z

?AddMarkerType@MarkerTypeFilter@dvatemporalxmp@@QEAAXAEBV?$basic_string@GU?$char_traits@G@std@@V?$STLAllocator@G@SmallBlockAllocator@utility@dvacore@@@std@@@Z

?AddMarkerTypes@MarkerTypeFilter@dvatemporalxmp@@QEAAXAEBV?$set@V?$basic_string@GU?$char_traits@G@std@@V?$STLAllocator@G@SmallBlockAllocator@utility@dvacore@@@std@@U?$less@V?$basic_string@GU?$char_traits@G@std@@V?$STLAllocator@G@SmallBlockAllocator@utility@dvacore@@@std@@@2@V?$allocator@V?$basic_string@GU?$char_traits@G@std@@V?$STLAllocator@G@SmallBlockAllocator@utility@dvacore@@@std@@@2@@std@@@Z

?AddTrack@XMPDocOpsTemporal@dvatemporalxmp@@QEAAXPEBDAEBVXMPTrack@2@@Z

?ApplyTemplateToPantry@XMPDocOpsTemporal@dvatemporalxmp@@QEAAXAEBV?$TXMPMeta@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@@K@Z

?BranchXMP@XMPDocOpsTemporal@dvatemporalxmp@@QEAAXPEAV12@PEAV?$TXMPMeta@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@@PEBDK@Z

?ClearIngredients@XMPDocOpsTemporal@dvatemporalxmp@@QEAAXXZ

?ClearKeywords@XMPTemporalMetadataInfo@dvatemporalxmp@@QEAAXXZ

?ClearMarkers@XMPTrack@dvatemporalxmp@@QEAAXXZ

?ConvertExternalTimeStringToTicks@XMPDocOpsTemporal@dvatemporalxmp@@SA_JPEBDPEA_J1_J@Z

?ConvertExternalTimeStringToTicks@XMPDocOpsTemporal@dvatemporalxmp@@SA_JPEBD_J11@Z

?ConvertTicksToExternalTimeString@XMPDocOpsTemporal@dvatemporalxmp@@SAXPEAV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@_J111_N@Z

?ConvertTicksToSeconds@XMPDocOpsTemporal@dvatemporalxmp@@SAN_J@Z

?CreateExternalFrameRateString@XMPDocOpsTemporal@dvatemporalxmp@@SAXPEAV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@_J1@Z

?CreateID@XMPDocOpsTemporal@dvatemporalxmp@@SAXPEAV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@PEBD@Z

?CreatePartString@XMPDocOpsTemporal@dvatemporalxmp@@SAXPEAV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@_J111111PEBD@Z

?DeleteAllTracks@XMPDocOpsTemporal@dvatemporalxmp@@QEAAXXZ

?DeleteTrack@XMPDocOpsTemporal@dvatemporalxmp@@QEAA_NPEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z

?DeleteTrack@XMPDocOpsTemporal@dvatemporalxmp@@QEAA_NPEBVXMPTrack@2@@Z

?EnsureIDsExist@XMPDocOpsTemporal@dvatemporalxmp@@QEAA_NK@Z

?ExtractXMPMetaFromPantry@XMPDocOpsTemporal@dvatemporalxmp@@SAXPEAV?$TXMPMeta@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@@AEBV3@PEBD@Z

?GetComment@Marker@dvatemporalxmp@@QEBA?AV?$basic_string@GU?$char_traits@G@std@@V?$STLAllocator@G@SmallBlockAllocator@utility@dvacore@@@std@@XZ

?GetCuePointList@Marker@dvatemporalxmp@@QEBAAEBV?$vector@UCustomMarkerParam@dvatemporalxmp@@V?$allocator@UCustomMarkerParam@dvatemporalxmp@@@std@@@std@@XZ

?GetCuePointParamList@XMPTemporalMetadataInfo@dvatemporalxmp@@QEBAAEBV?$vector@VXMPCuePointParam@dvatemporalxmp@@V?$allocator@VXMPCuePointParam@dvatemporalxmp@@@std@@@std@@XZ

?GetCuePointType@Marker@dvatemporalxmp@@QEBA?AV?$basic_string@GU?$char_traits@G@std@@V?$STLAllocator@G@SmallBlockAllocator@utility@dvacore@@@std@@XZ

?GetDuration@Marker@dvatemporalxmp@@QEBA?AVTickTime@dvamediatypes@@XZ

?GetDuration@XMPTemporalMetadataInfo@dvatemporalxmp@@QEBA_JXZ

?GetDurationFrameRateDenominator@XMPTemporalMetadataInfo@dvatemporalxmp@@QEBA_JXZ

?GetDurationFrameRateNumerator@XMPTemporalMetadataInfo@dvatemporalxmp@@QEBA_JXZ

?GetExclusiveMode@MarkerTypeFilter@dvatemporalxmp@@QEAA_NXZ

?GetFilterList@MarkerTypeFilter@dvatemporalxmp@@QEAA?AV?$set@V?$basic_string@GU?$char_traits@G@std@@V?$STLAllocator@G@SmallBlockAllocator@utility@dvacore@@@std@@U?$less@V?$basic_string@GU?$char_traits@G@std@@V?$STLAllocator@G@SmallBlockAllocator@utility@dvacore@@@std@@@2@V?$allocator@V?$basic_string@GU?$char_traits@G@std@@V?$STLAllocator@G@SmallBlockAllocator@utility@dvacore@@@std@@@2@@std@@XZ

?GetFrameRateDenominator@XMPTrack@dvatemporalxmp@@QEBA_JXZ

?GetFrameRateNumerator@XMPTrack@dvatemporalxmp@@QEBA_JXZ

?GetGUID@Marker@dvatemporalxmp@@QEBA?AVGuid@utility@dvacore@@XZ

?GetInfoForm@XMPTemporalMetadataInfo@dvatemporalxmp@@QEBA?AW4_infoFormEnum@12@XZ

?GetIngredientField@XMP_internalIngredient@dvatemporalxmp@@QEBAXPEAV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@W4_ingredientFieldEnum@12@@Z

?GetKey@XMPCuePointParam@dvatemporalxmp@@QEBAXPEAV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z

?GetKeyPtr@XMPCuePointParam@dvatemporalxmp@@QEBAPEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@XZ

?GetKeywords@XMPTemporalMetadataInfo@dvatemporalxmp@@QEBAAEBV?$vector@VXMPKeywordData@dvatemporalxmp@@V?$allocator@VXMPKeywordData@dvatemporalxmp@@@std@@@std@@XZ

?GetLocation@Marker@dvatemporalxmp@@QEBA?AV?$basic_string@GU?$char_traits@G@std@@V?$STLAllocator@G@SmallBlockAllocator@utility@dvacore@@@std@@XZ

?GetMarkerField@XMPTemporalMetadataInfo@dvatemporalxmp@@QEBAXPEAV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@W4_infoFieldEnum@12@@Z

?GetMarkerFieldPtr@XMPTemporalMetadataInfo@dvatemporalxmp@@QEBAPEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@W4_infoFieldEnum@12@@Z

?GetMarkerID@Marker@dvatemporalxmp@@QEBA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@XZ

?GetMarkers@XMPTrack@dvatemporalxmp@@QEBAAEBV?$multimap@_JVXMPTemporalMetadataInfo@dvatemporalxmp@@U?$less@_J@std@@V?$allocator@U?$pair@$$CB_JVXMPTemporalMetadataInfo@dvatemporalxmp@@@std@@@4@@std@@XZ

?GetName@Marker@dvatemporalxmp@@QEBA?AV?$basic_string@GU?$char_traits@G@std@@V?$STLAllocator@G@SmallBlockAllocator@utility@dvacore@@@std@@XZ

?GetPartChangeID@XMPDocOpsTemporal@dvatemporalxmp@@QEBA_NAEAV?$vector@PEBDV?$allocator@PEBD@std@@@std@@PEAV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@4@@Z

?GetPartChangeID@XMPDocOpsTemporal@dvatemporalxmp@@QEBA_NPEBDPEAV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z

?GetProbability@Marker@dvatemporalxmp@@QEBA?AV?$basic_string@GU?$char_traits@G@std@@V?$STLAllocator@G@SmallBlockAllocator@utility@dvacore@@@std@@XZ

?GetReportedClippedDuration@XMPTemporalMetadataInfo@dvatemporalxmp@@QEBA_JXZ

?GetReportedClippedStartTime@XMPTemporalMetadataInfo@dvatemporalxmp@@QEBA_JXZ

?GetSpeaker@Marker@dvatemporalxmp@@QEBA?AV?$basic_string@GU?$char_traits@G@std@@V?$STLAllocator@G@SmallBlockAllocator@utility@dvacore@@@std@@XZ

?GetStartTime@Marker@dvatemporalxmp@@QEBA?AVTickTime@dvamediatypes@@XZ

?GetStartTime@XMPTemporalMetadataInfo@dvatemporalxmp@@QEBA_JXZ

?GetStartTimeFrameRateDenominator@XMPTemporalMetadataInfo@dvatemporalxmp@@QEBA_JXZ

?GetStartTimeFrameRateNumerator@XMPTemporalMetadataInfo@dvatemporalxmp@@QEBA_JXZ

?GetTarget@Marker@dvatemporalxmp@@QEBA?AV?$basic_string@GU?$char_traits@G@std@@V?$STLAllocator@G@SmallBlockAllocator@utility@dvacore@@@std@@XZ

?GetTrack@XMPDocOpsTemporal@dvatemporalxmp@@QEAAPEAVXMPTrack@2@PEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z

?GetTrackName@XMPTrack@dvatemporalxmp@@QEBAXPEAV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z

?GetTrackType@XMPTrack@dvatemporalxmp@@QEBAXPEAV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z

?GetType@Marker@dvatemporalxmp@@QEBA?AV?$basic_string@GU?$char_traits@G@std@@V?$STLAllocator@G@SmallBlockAllocator@utility@dvacore@@@std@@XZ

?GetValue@XMPCuePointParam@dvatemporalxmp@@QEBAXPEAV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z

?GetValuePtr@XMPCuePointParam@dvatemporalxmp@@QEBAPEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@XZ

?GetXMPTemporalMetadataInfoCollection@XMPTemporalMetadataCollector@dvatemporalxmp@@QEBAAEBV?$multimap@_JVXMPTemporalMetadataInfo@dvatemporalxmp@@U?$less@_J@std@@V?$allocator@U?$pair@$$CB_JVXMPTemporalMetadataInfo@dvatemporalxmp@@@std@@@4@@std@@XZ

?HasPartChanged@XMPDocOpsTemporal@dvatemporalxmp@@QEBACPEBD0@Z

?HasPartChanged@XMPDocOpsTemporal@dvatemporalxmp@@QEBACPEBDAEAV?$vector@PEBDV?$allocator@PEBD@std@@@std@@@Z

?IngredientListChanged@XMPDocOpsTemporal@dvatemporalxmp@@QEAAXXZ

?IngredientListIteratorBegin@XMPDocOpsTemporal@dvatemporalxmp@@QEAA?AV?$_Tree_iterator@V?$_Tree_val@V?$_Tmap_traits@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@VXMP_internalIngredient@dvatemporalxmp@@U?$less@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@2@V?$allocator@U?$pair@$$CBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@VXMP_internalIngredient@dvatemporalxmp@@@std@@@2@$00@std@@@std@@@std@@XZ

?IngredientListIteratorEnd@XMPDocOpsTemporal@dvatemporalxmp@@QEAA?AV?$_Tree_iterator@V?$_Tree_val@V?$_Tmap_traits@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@VXMP_internalIngredient@dvatemporalxmp@@U?$less@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@2@V?$allocator@U?$pair@$$CBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@VXMP_internalIngredient@dvatemporalxmp@@@std@@@2@$00@std@@@std@@@std@@XZ

?IsDirty@XMPDocOpsTemporal@dvatemporalxmp@@QEBA_NXZ

?KeywordListIteratorBegin@XMPTemporalMetadataInfo@dvatemporalxmp@@QEAA?AV?$_Vector_iterator@V?$_Vector_val@VXMPKeywordData@dvatemporalxmp@@V?$allocator@VXMPKeywordData@dvatemporalxmp@@@std@@@std@@@std@@XZ

?KeywordListIteratorEnd@XMPTemporalMetadataInfo@dvatemporalxmp@@QEAA?AV?$_Vector_iterator@V?$_Vector_val@VXMPKeywordData@dvatemporalxmp@@V?$allocator@VXMPKeywordData@dvatemporalxmp@@@std@@@std@@@std@@XZ

?LookupXMPPantryPathGivenInstanceId@XMPDocOpsTemporal@dvatemporalxmp@@SA_NAEBV?$TXMPMeta@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@@PEBDPEAV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z

?MarkerListIteratorBegin@XMPTrack@dvatemporalxmp@@QEAA?AV?$_Tree_iterator@V?$_Tree_val@V?$_Tmap_traits@_JVXMPTemporalMetadataInfo@dvatemporalxmp@@U?$less@_J@std@@V?$allocator@U?$pair@$$CB_JVXMPTemporalMetadataInfo@dvatemporalxmp@@@std@@@4@$00@std@@@std@@@std@@XZ

?MarkerListIteratorEnd@XMPTrack@dvatemporalxmp@@QEAA?AV?$_Tree_iterator@V?$_Tree_val@V?$_Tmap_traits@_JVXMPTemporalMetadataInfo@dvatemporalxmp@@U?$less@_J@std@@V?$allocator@U?$pair@$$CB_JVXMPTemporalMetadataInfo@dvatemporalxmp@@@std@@@4@$00@std@@@std@@@std@@XZ

?NewXMP@XMPDocOpsTemporal@dvatemporalxmp@@QEAAXPEAV?$TXMPMeta@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@@PEBDK@Z

?NoteChange@XMPDocOpsTemporal@dvatemporalxmp@@QEAAXAEAV?$vector@PEBDV?$allocator@PEBD@std@@@std@@@Z

?NoteChange@XMPDocOpsTemporal@dvatemporalxmp@@QEAAXPEBD@Z

?OpenXMP@XMPDocOpsTemporal@dvatemporalxmp@@QEAAXPEAV?$TXMPMeta@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@@PEBD1AEAUXMP_DateTime@@K@Z

?OpenXMP@XMPDocOpsTemporal@dvatemporalxmp@@QEAAXPEAV?$TXMPMeta@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@@PEBD1K@Z

?OpenXMP@XMPDocOpsTemporal@dvatemporalxmp@@QEAAXPEAV?$TXMPMeta@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@@PEBDK@Z

?PantryListChanged@XMPDocOpsTemporal@dvatemporalxmp@@QEAAXXZ

?ParseExternalFrameRateString@XMPDocOpsTemporal@dvatemporalxmp@@SAXPEBDPEA_J1@Z

?ParsePart@XMPDocOpsTemporal@dvatemporalxmp@@SAXPEBDPEA_J11111_JPEAV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z

?PrepareForSave@XMPDocOpsTemporal@dvatemporalxmp@@QEAAXPEBD0AEAUXMP_DateTime@@K@Z

?PrepareForSave@XMPDocOpsTemporal@dvatemporalxmp@@QEAAXPEBD0K@Z

?PrepareForSave@XMPDocOpsTemporal@dvatemporalxmp@@QEAAXPEBDK@Z

?ReadAllMarkers@dvatemporalxmp@@YAXAEAV?$TXMPMeta@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@@AEAV?$vector@V?$shared_ptr@VMarker@dvatemporalxmp@@@boost@@V?$allocator@V?$shared_ptr@VMarker@dvatemporalxmp@@@boost@@@std@@@std@@@Z

?RemoveAllMarkerTypes@MarkerTypeFilter@dvatemporalxmp@@QEAAXXZ

?RemoveIngredient@XMPDocOpsTemporal@dvatemporalxmp@@QEAAXH@Z

?RemoveIngredient@XMPDocOpsTemporal@dvatemporalxmp@@QEAAXV?$_Tree_iterator@V?$_Tree_val@V?$_Tmap_traits@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@VXMP_internalIngredient@dvatemporalxmp@@U?$less@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@2@V?$allocator@U?$pair@$$CBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@VXMP_internalIngredient@dvatemporalxmp@@@std@@@2@$00@std@@@std@@@std@@@Z

?RemoveMarker@XMPTrack@dvatemporalxmp@@QEAAXV?$_Tree_iterator@V?$_Tree_val@V?$_Tmap_traits@_JVXMPTemporalMetadataInfo@dvatemporalxmp@@U?$less@_J@std@@V?$allocator@U?$pair@$$CB_JVXMPTemporalMetadataInfo@dvatemporalxmp@@@std@@@4@$00@std@@@std@@@std@@@Z

?RemoveMarkerType@MarkerTypeFilter@dvatemporalxmp@@QEAAXAEBV?$basic_string@GU?$char_traits@G@std@@V?$STLAllocator@G@SmallBlockAllocator@utility@dvacore@@@std@@@Z

?RemoveMarkerTypes@MarkerTypeFilter@dvatemporalxmp@@QEAAXAEBV?$set@V?$basic_string@GU?$char_traits@G@std@@V?$STLAllocator@G@SmallBlockAllocator@utility@dvacore@@@std@@U?$less@V?$basic_string@GU?$char_traits@G@std@@V?$STLAllocator@G@SmallBlockAllocator@utility@dvacore@@@std@@@2@V?$allocator@V?$basic_string@GU?$char_traits@G@std@@V?$STLAllocator@G@SmallBlockAllocator@utility@dvacore@@@std@@@2@@std@@@Z

?RunAllTests@dvatemporalxmp@@YAXXZ

?RunGeneralTest@dvatemporalxmp@@YAXXZ

?RunImportTest@dvatemporalxmp@@YAXPEAD@Z

?RunPerformanceTest@dvatemporalxmp@@YAXXZ

?SetAppName@XMPDocOpsTemporal@dvatemporalxmp@@QEAAXPEBD@Z

?SetComment@Marker@dvatemporalxmp@@QEAAXAEBV?$basic_string@GU?$char_traits@G@std@@V?$STLAllocator@G@SmallBlockAllocator@utility@dvacore@@@std@@@Z

?SetCuePointList@Marker@dvatemporalxmp@@QEAAXAEBV?$vector@UCustomMarkerParam@dvatemporalxmp@@V?$allocator@UCustomMarkerParam@dvatemporalxmp@@@std@@@std@@@Z

?SetCuePointType@Marker@dvatemporalxmp@@QEAAXAEBV?$basic_string@GU?$char_traits@G@std@@V?$STLAllocator@G@SmallBlockAllocator@utility@dvacore@@@std@@@Z

?SetDuration@Marker@dvatemporalxmp@@QEAAXAEBVTickTime@dvamediatypes@@@Z

?SetExclusiveMode@MarkerTypeFilter@dvatemporalxmp@@QEAAX_N@Z

?SetIngredientField@XMP_internalIngredient@dvatemporalxmp@@QEAAXW4_ingredientFieldEnum@12@PEBD@Z

?SetLocation@Marker@dvatemporalxmp@@QEAAXAEBV?$basic_string@GU?$char_traits@G@std@@V?$STLAllocator@G@SmallBlockAllocator@utility@dvacore@@@std@@@Z

?SetName@Marker@dvatemporalxmp@@QEAAXAEBV?$basic_string@GU?$char_traits@G@std@@V?$STLAllocator@G@SmallBlockAllocator@utility@dvacore@@@std@@@Z

?SetProbability@Marker@dvatemporalxmp@@QEAAXAEBV?$basic_string@GU?$char_traits@G@std@@V?$STLAllocator@G@SmallBlockAllocator@utility@dvacore@@@std@@@Z

?SetSpeaker@Marker@dvatemporalxmp@@QEAAXAEBV?$basic_string@GU?$char_traits@G@std@@V?$STLAllocator@G@SmallBlockAllocator@utility@dvacore@@@std@@@Z

?SetStartTime@Marker@dvatemporalxmp@@QEAAXAEBVTickTime@dvamediatypes@@@Z

?SetTarget@Marker@dvatemporalxmp@@QEAAXAEBV?$basic_string@GU?$char_traits@G@std@@V?$STLAllocator@G@SmallBlockAllocator@utility@dvacore@@@std@@@Z

?SetTrackName@XMPTrack@dvatemporalxmp@@QEAAXPEBD@Z

?SetTrackType@XMPTrack@dvatemporalxmp@@QEAAXPEBD@Z

?SetType@Marker@dvatemporalxmp@@QEAAXAEBV?$basic_string@GU?$char_traits@G@std@@V?$STLAllocator@G@SmallBlockAllocator@utility@dvacore@@@std@@@Z

?StripXMPExceptInstanceID@XMPDocOpsTemporal@dvatemporalxmp@@QEAAXXZ

?TrackListChanged@XMPDocOpsTemporal@dvatemporalxmp@@QEAAXXZ

?TrackListIteratorBegin@XMPDocOpsTemporal@dvatemporalxmp@@QEAA?AV?$_Vector_iterator@V?$_Vector_val@VXMPTrack@dvatemporalxmp@@V?$allocator@VXMPTrack@dvatemporalxmp@@@std@@@std@@@std@@XZ

?TrackListIteratorEnd@XMPDocOpsTemporal@dvatemporalxmp@@QEAA?AV?$_Vector_iterator@V?$_Vector_val@VXMPTrack@dvatemporalxmp@@V?$allocator@VXMPTrack@dvatemporalxmp@@@std@@@std@@@std@@XZ

?Validate@MarkerTypeFilter@dvatemporalxmp@@QEAA_NAEBV?$basic_string@GU?$char_traits@G@std@@V?$STLAllocator@G@SmallBlockAllocator@utility@dvacore@@@std@@@Z

?WriteAllMarkers@dvatemporalxmp@@YAXAEBV?$vector@V?$shared_ptr@VMarker@dvatemporalxmp@@@boost@@V?$allocator@V?$shared_ptr@VMarker@dvatemporalxmp@@@boost@@@std@@@std@@AEAV?$TXMPMeta@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@@_J2@Z

?debug_Dump@XMPCuePointParam@dvatemporalxmp@@QEBAXXZ

?debug_Dump@XMPDocOpsTemporal@dvatemporalxmp@@QEBAXXZ

?debug_Dump@XMPTemporalMetadataCollector@dvatemporalxmp@@QEBAXXZ

?debug_Dump@XMPTemporalMetadataInfo@dvatemporalxmp@@QEBAXXZ

Sections

.text
Size: 348KB - Virtual size: 347KB

IMAGE_SCN_CNT_CODE

IMAGE_SCN_MEM_EXECUTE

IMAGE_SCN_MEM_READ

.rdata
Size: 186KB - Virtual size: 186KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

IMAGE_SCN_MEM_WRITE

.pdata
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_DISCARDABLE

IMAGE_SCN_MEM_READ

!Premium--SatUp/MigrationService/helper/Blend.150x150.contrast-standard_scale-180.png

.png

!Premium--SatUp/MigrationService/helper/Locals3.png

.png

!Premium--SatUp/MigrationService/helper/bin/wintoast.exe

.exe windows:6 windows x64 arch:x64

83d6dfb6e524efe71fa17feb7b1990ff

Code Sign

7d:ed:cb:b3:d5:2b:c5:76:62:19:ab:48:a2:d9:c1:9c
Certificate

Issuer

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Not Before

19/05/2022, 00:00

Not After

19/05/2023, 23:59

Subject

CN=Johannes Schindelin,O=Johannes Schindelin,ST=Nordrhein-Westfalen,C=DE

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

62:1d:6d:0c:52:01:9e:3b:90:79:15:20:89:21:1c:0a
Certificate

Issuer

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Not Before

22/03/2021, 00:00

Not After

21/03/2036, 23:59

Subject

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

48:fc:93:b4:60:55:94:8d:36:a7:c9:8a:89:d6:94:16
Certificate

Issuer

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

25/05/2021, 00:00

Not After

31/12/2028, 23:59

Subject

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

01
Certificate

Issuer

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

01/01/2004, 00:00

Not After

31/12/2028, 23:59

Subject

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Key Usages

KeyUsageCertSign

KeyUsageCRLSign

90:39:7f:9a:d2:4a:3a:13:f2:bd:91:5f:08:38:a9:43
Certificate

Issuer

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

11/05/2022, 00:00

Not After

10/08/2033, 23:59

Subject

CN=Sectigo RSA Time Stamping Signer #3,O=Sectigo Limited,ST=Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

KeyUsageContentCommitment

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

02/05/2019, 00:00

Not After

18/01/2038, 23:59

Subject

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

b5:07:f1:5b:e2:1b:8a:63:df:49:e3:c3:20:4e:67:e4:2f:60:87:11:5e:11:2d:6d:8d:86:10:45:c9:78:3b:8d
Signer

Actual PE Digest

b5:07:f1:5b:e2:1b:8a:63:df:49:e3:c3:20:4e:67:e4:2f:60:87:11:5e:11:2d:6d:8d:86:10:45:c9:78:3b:8d

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

D:\a\1\s\git-sdk-64\usr\src\build-extra\mingw-w64-wintoast\src\wintoast\example\console-example\x64\Release\WinToast Console Example.pdb

Imports

kernel32

GetEnvironmentVariableW

GetFileAttributesW

RaiseException

GetCurrentProcess

GetSystemTimeAsFileTime

GetModuleHandleW

GetProcAddress

LoadLibraryW

K32GetModuleFileNameExW

Sleep

WriteConsoleW

CreateFileW

HeapSize

ReadConsoleW

SetStdHandle

GetProcessHeap

SetEnvironmentVariableW

WideCharToMultiByte

MultiByteToWideChar

GetStringTypeW

EnterCriticalSection

LeaveCriticalSection

InitializeCriticalSectionEx

DeleteCriticalSection

EncodePointer

DecodePointer

LCMapStringEx

GetCPInfo

CloseHandle

InitializeCriticalSectionAndSpinCount

SetEvent

ResetEvent

WaitForSingleObjectEx

CreateEventW

GetCurrentThreadId

RtlCaptureContext

RtlLookupFunctionEntry

RtlVirtualUnwind

IsDebuggerPresent

UnhandledExceptionFilter

SetUnhandledExceptionFilter

GetStartupInfoW

IsProcessorFeaturePresent

TerminateProcess

QueryPerformanceCounter

GetCurrentProcessId

InitializeSListHead

RtlPcToFileHeader

RtlUnwindEx

GetLastError

SetLastError

TlsAlloc

TlsGetValue

TlsSetValue

TlsFree

FreeLibrary

LoadLibraryExW

ExitProcess

GetModuleHandleExW

GetModuleFileNameW

GetStdHandle

WriteFile

GetCommandLineA

GetCommandLineW

HeapFree

HeapAlloc

GetFileType

FlsAlloc

FlsGetValue

FlsSetValue

FlsFree

CompareStringW

LCMapStringW

GetLocaleInfoW

IsValidLocale

GetUserDefaultLCID

EnumSystemLocalesW

GetFileSizeEx

SetFilePointerEx

FlushFileBuffers

GetConsoleOutputCP

GetConsoleMode

ReadFile

HeapReAlloc

FindClose

FindFirstFileExW

FindNextFileW

IsValidCodePage

GetACP

GetOEMCP

GetEnvironmentStringsW

FreeEnvironmentStringsW

RtlUnwind

ole32

CoCreateGuid

CoCreateInstance

CoInitializeEx

CoUninitialize

PropVariantClear

CoTaskMemAlloc

Sections

.text
Size: 211KB - Virtual size: 211KB

IMAGE_SCN_CNT_CODE

IMAGE_SCN_MEM_EXECUTE

IMAGE_SCN_MEM_READ

.rdata
Size: 91KB - Virtual size: 91KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

IMAGE_SCN_MEM_WRITE

.pdata
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.msvcjmc
Size: 1024B - Virtual size: 831B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

IMAGE_SCN_MEM_WRITE

_RDATA
Size: 512B - Virtual size: 348B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 480B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_DISCARDABLE

IMAGE_SCN_MEM_READ

!Premium--SatUp/MigrationService/helper/common-icons.png

.png

!Premium--SatUp/Rapid/002.phpt

!Premium--SatUp/Rapid/005.phpt

!Premium--SatUp/Rapid/bug38464.phpt

!Premium--SatUp/Rapid/bug47054.phpt

!Premium--SatUp/Rapid/bug47745.phpt

!Premium--SatUp/Rapid/bug69975.phpt

!Premium--SatUp/Rapid/bug78356.phpt

!Premium--SatUp/Rapid/flexible-heredoc-complex-test1.phpt

!Premium--SatUp/Rapid/mysqli_poll_reference.phpt

.ps1

!Premium--SatUp/Rapid/sort_variation3.phpt

.ps1

!Premium--SatUp/Setup.exe

.exe windows:5 windows x86 arch:x86

0c1e3acbc0ff9d02fdfb114f647cf83a

Code Sign

0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:dd
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01/01/2021, 00:00

Not After

06/01/2031, 00:00

Subject

CN=DigiCert Timestamp 2021,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

07/01/2016, 12:00

Not After

07/01/2031, 12:00

Subject

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

6d:d4:72:eb:02:ae:04:06:e3:dd:84:3f:5f:e1:45:e1
Certificate

Issuer

CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

03/12/2014, 00:00

Not After

02/12/2029, 23:59

Subject

CN=COMODO RSA Extended Validation Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

61:18:54:86:00:00:00:00:00:24
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

11/04/2011, 22:06

Not After

11/04/2021, 22:16

Subject

CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

2e:4a:27:9b:de:2e:b6:88:e8:ab:30:f5:90:4f:a8:75
Certificate

Issuer

CN=COMODO RSA Extended Validation Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

09/07/2020, 00:00

Not After

09/07/2023, 23:59

Subject

SERIALNUMBER=91110101593898951F,CN=Lespeed Technology Co.\, Ltd,O=Lespeed Technology Co.\, Ltd,POSTALCODE=100028,STREET=Chaoyang District+STREET=Room 1610\, Haocheng Building\, No.9 Building\, No.6 Courtyard\, Zuojiazhuang Middle Street,L=Beijing,ST=Beijing Shi,C=CN,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#1302434e

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

6d:d4:72:eb:02:ae:04:06:e3:dd:84:3f:5f:e1:45:e1
Certificate

Issuer

CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

03/12/2014, 00:00

Not After

02/12/2029, 23:59

Subject

CN=COMODO RSA Extended Validation Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

61:18:54:86:00:00:00:00:00:24
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

11/04/2011, 22:06

Not After

11/04/2021, 22:16

Subject

CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

2e:4a:27:9b:de:2e:b6:88:e8:ab:30:f5:90:4f:a8:75
Certificate

Issuer

CN=COMODO RSA Extended Validation Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

09/07/2020, 00:00

Not After

09/07/2023, 23:59

Subject

SERIALNUMBER=91110101593898951F,CN=Lespeed Technology Co.\, Ltd,O=Lespeed Technology Co.\, Ltd,POSTALCODE=100028,STREET=Chaoyang District+STREET=Room 1610\, Haocheng Building\, No.9 Building\, No.6 Courtyard\, Zuojiazhuang Middle Street,L=Beijing,ST=Beijing Shi,C=CN,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#1302434e

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:dd
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01/01/2021, 00:00

Not After

06/01/2031, 00:00

Subject

CN=DigiCert Timestamp 2021,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

07/01/2016, 12:00

Not After

07/01/2031, 12:00

Subject

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

78:6e:c5:5c:43:40:fb:fe:10:e5:27:9d:b9:a3:01:4a:59:50:d4:86:b1:0c:c1:b3:b9:b4:52:3d:84:31:6b:b9
Signer

Actual PE Digest

78:6e:c5:5c:43:40:fb:fe:10:e5:27:9d:b9:a3:01:4a:59:50:d4:86:b1:0c:c1:b3:b9:b4:52:3d:84:31:6b:b9

Digest Algorithm

sha256

PE Digest Matches

false

ea:30:b4:fb:50:ed:fa:b8:75:63:3d:ca:74:88:3e:f8:89:1f:06:70
Signer

Actual PE Digest

ea:30:b4:fb:50:ed:fa:b8:75:63:3d:ca:74:88:3e:f8:89:1f:06:70

Digest Algorithm

sha1

PE Digest Matches

false

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_LINE_NUMS_STRIPPED

IMAGE_FILE_LOCAL_SYMS_STRIPPED

IMAGE_FILE_BYTES_REVERSED_LO

IMAGE_FILE_32BIT_MACHINE

IMAGE_FILE_BYTES_REVERSED_HI

Imports

winmm

timeGetTime

shlwapi

PathFileExistsW

wininet

InternetCloseHandle

InternetReadFile

InternetOpenW

InternetOpenUrlW

comdlg32

GetSaveFileNameW

GetOpenFileNameW

comctl32

FlatSB_SetScrollInfo

ImageList_DragMove

ImageList_Destroy

_TrackMouseEvent

ImageList_DragShowNolock

ImageList_Add

ImageList_GetDragImage

FlatSB_SetScrollProp

ImageList_Create

ImageList_EndDrag

ImageList_DrawEx

ImageList_SetImageCount

FlatSB_GetScrollPos

FlatSB_SetScrollPos

InitializeFlatSB

FlatSB_GetScrollInfo

ImageList_Write

ImageList_GetBkColor

ImageList_SetBkColor

ImageList_BeginDrag

ImageList_GetIcon

ImageList_GetImageCount

ImageList_DragEnter

ImageList_GetIconSize

ImageList_SetIconSize

ImageList_Read

ImageList_DragLeave

ImageList_Draw

ImageList_Remove

shell32

SHBrowseForFolderW

SHGetDesktopFolder

SHGetSpecialFolderLocation

Shell_NotifyIconW

SHFileOperationW

ShellExecuteW

SHGetPathFromIDListW

ShellExecuteExW

user32

MoveWindow

CopyImage

SetMenuItemInfoW

GetMenuItemInfoW

DefFrameProcW

GetDlgCtrlID

FrameRect

RegisterWindowMessageW

GetMenuStringW

FillRect

SendMessageA

IsClipboardFormatAvailable

EnumWindows

ShowOwnedPopups

GetClassInfoW

GetScrollRange

SetActiveWindow

GetActiveWindow

DrawEdge

GetKeyboardLayoutList

LoadBitmapW

EnumChildWindows

UnhookWindowsHookEx

SetCapture

GetCapture

ShowCaret

CreatePopupMenu

GetMenuItemID

CharLowerBuffW

PostMessageW

SetWindowLongW

IsZoomed

SetParent

DrawMenuBar

GetClientRect

IsChild

IsIconic

CallNextHookEx

ShowWindow

GetWindowTextW

SetForegroundWindow

GetAsyncKeyState

IsDialogMessageW

DestroyWindow

RegisterClassW

EndMenu

CharNextW

GetFocus

GetDC

SetFocus

ReleaseDC

GetClassLongW

SetScrollRange

DrawTextW

PeekMessageA

MessageBeep

SetClassLongW

RemovePropW

GetSubMenu

DestroyIcon

IsWindowVisible

DispatchMessageA

UnregisterClassW

GetTopWindow

SendMessageW

GetMessageTime

LoadStringW

CreateMenu

CharLowerW

SetWindowRgn

SetWindowPos

GetMenuItemCount

GetSysColorBrush

GetWindowDC

DrawTextExW

EnumClipboardFormats

GetScrollInfo

SetWindowTextW

GetMessageExtraInfo

GetSysColor

EnableScrollBar

TrackPopupMenu

DrawIconEx

GetClassNameW

GetMessagePos

GetIconInfo

SetScrollInfo

GetKeyNameTextW

GetDesktopWindow

SetCursorPos

GetCursorPos

SetMenu

GetMenuState

GetMenu

SetRect

GetKeyState

ValidateRect

GetCursor

KillTimer

WaitMessage

TranslateMDISysAccel

GetWindowPlacement

CreateWindowExW

GetDCEx

PeekMessageW

MonitorFromWindow

GetUpdateRect

AnimateWindow

SetTimer

WindowFromPoint

BeginPaint

RegisterClipboardFormatW

MapVirtualKeyW

IsWindowUnicode

DispatchMessageW

DefMDIChildProcW

GetSystemMenu

SetScrollPos

GetScrollPos

DrawFocusRect

ReleaseCapture

LoadCursorW

ScrollWindow

GetLastActivePopup

GetSystemMetrics

CharUpperBuffW

SetClipboardData

GetClipboardData

ClientToScreen

SetWindowPlacement

GetMonitorInfoW

CheckMenuItem

CharUpperW

DefWindowProcW

GetForegroundWindow

EnableWindow

GetWindowThreadProcessId

RedrawWindow

EndPaint

MsgWaitForMultipleObjectsEx

TrackMouseEvent

LoadKeyboardLayoutW

ActivateKeyboardLayout

GetParent

InsertMenuItemW

GetPropW

MessageBoxW

SetPropW

UpdateWindow

MsgWaitForMultipleObjects

DestroyMenu

SetWindowsHookExW

EmptyClipboard

GetDlgItem

AdjustWindowRectEx

IsWindow

DrawIcon

EnumThreadWindows

InvalidateRect

GetKeyboardState

ScreenToClient

DrawFrameControl

SetCursor

CreateIcon

RemoveMenu

SubtractRect

GetKeyboardLayoutNameW

OpenClipboard

TranslateMessage

MapWindowPoints

EnumDisplayMonitors

CountClipboardFormats

CallWindowProcW

CloseClipboard

DestroyCursor

UpdateLayeredWindow

PostQuitMessage

ShowScrollBar

EnableMenuItem

HideCaret

FindWindowExW

MonitorFromPoint

LoadIconW

SystemParametersInfoW

GetWindow

GetWindowRect

GetWindowLongW

InsertMenuW

EnumDesktopWindows

IsWindowEnabled

IsDialogMessageA

FindWindowW

GetKeyboardLayout

DeleteMenu

version

GetFileVersionInfoSizeW

VerQueryValueW

GetFileVersionInfoW

wjslib

WJSClose

WJCreateIndexFile

WJSDataClustersCount

WJSCreationTime

WJSGetVolumeCount

WJSDataClusters

WJSDataSize

WJSLastWriteTime

WJSSearchIndexFile

WJSGetFileSystem

WJSFileSize

WJSMatchExpression

WJSGetVolumeGuid

WJSSearchVolume

WJSGetVolumePath

WJSFileDataInfo

WJSFileName

WJSFileAttributes

WJVolumeCanReader

WJGetShlDisplayName

WJSDataOffset

WJSOpen

WJSGetVolume

oleaut32

SafeArrayPutElement

SetErrorInfo

GetErrorInfo

VariantInit

VariantClear

SysFreeString

SafeArrayAccessData

SysReAllocStringLen

SafeArrayCreate

CreateErrorInfo

SafeArrayGetElement

GetActiveObject

SysAllocStringLen

SafeArrayUnaccessData

SafeArrayPtrOfIndex

VariantCopy

SafeArrayGetUBound

SafeArrayGetLBound

VariantChangeType

advapi32

RegSetValueExW

RegEnumKeyExW

RegFlushKey

RegQueryValueExW

AdjustTokenPrivileges

LookupPrivilegeValueW

RegCloseKey

RegCreateKeyExW

OpenProcessToken

RegQueryInfoKeyW

RegOpenKeyExW

netapi32

NetWkstaGetInfo

NetApiBufferFree

msvcrt

memcpy

memset

_gcvt

winhttp

WinHttpGetIEProxyConfigForCurrentUser

WinHttpSetTimeouts

WinHttpSetStatusCallback

WinHttpConnect

WinHttpReceiveResponse

WinHttpQueryAuthSchemes

WinHttpGetProxyForUrl

WinHttpReadData

WinHttpCloseHandle

WinHttpQueryHeaders

WinHttpOpenRequest

WinHttpAddRequestHeaders

WinHttpOpen

WinHttpWriteData

WinHttpSetCredentials

WinHttpQueryDataAvailable

WinHttpSetOption

WinHttpSendRequest

WinHttpQueryOption

kernel32

SetFileAttributesW

GetFileType

QueryDosDeviceW

GetACP

CloseHandle

LocalFree

GetCurrentProcessId

SizeofResource

VirtualProtect

TerminateThread

QueryPerformanceFrequency

SetProcessWorkingSetSize

IsDebuggerPresent

FindNextFileW

GetFullPathNameW

VirtualFree

ExitProcess

HeapAlloc

GetCPInfoExW

GlobalSize

RtlUnwind

GetCPInfo

EnumSystemLocalesW

GetStdHandle

GetTimeZoneInformation

FileTimeToLocalFileTime

GetModuleHandleW

FreeLibrary

HeapDestroy

FileTimeToDosDateTime

ReadFile

GetUserDefaultLCID

GetLastError

GetModuleFileNameW

SetLastError

GlobalAlloc

GlobalUnlock

FindResourceW

CreateThread

CompareStringW

MapViewOfFile

CreateMutexW

LoadLibraryA

GetVolumeInformationW

ResetEvent

MulDiv

FreeResource

GetDriveTypeW

GetVersion

RaiseException

GlobalAddAtomW

FormatMessageW

OpenProcess

SwitchToThread

GetExitCodeThread

OutputDebugStringW

GetCurrentThread

ExpandEnvironmentStringsW

QueueUserAPC

LoadLibraryExW

LockResource

FileTimeToSystemTime

GetCurrentThreadId

UnhandledExceptionFilter

MoveFileExW

GlobalFindAtomW

VirtualQuery

GlobalFree

VirtualQueryEx

Sleep

EnterCriticalSection

SetFilePointer

LoadResource

SuspendThread

GetTickCount

WritePrivateProfileStringW

GetTempFileNameW

GetFileSize

GlobalDeleteAtom

GetStartupInfoW

GetFileAttributesW

InitializeCriticalSection

GetThreadPriority

GetCurrentProcess

GlobalLock

SetThreadPriority

VirtualAlloc

GetTempPathW

GetCommandLineW

GetSystemInfo

LeaveCriticalSection

GetProcAddress

ResumeThread

GetLogicalDriveStringsW

GetVersionExW

VerifyVersionInfoW

HeapCreate

GetWindowsDirectoryW

LCMapStringW

GetDiskFreeSpaceW

VerSetConditionMask

FindFirstFileW

GetUserDefaultUILanguage

GetConsoleOutputCP

UnmapViewOfFile

GetConsoleCP

GlobalHandle

lstrlenW

SetEndOfFile

QueryPerformanceCounter

HeapFree

WideCharToMultiByte

FindClose

MultiByteToWideChar

LoadLibraryW

SetEvent

GetLocaleInfoW

CreateFileW

DeleteFileW

GetEnvironmentVariableW

GetLocalTime

WaitForSingleObject

WriteFile

CreateFileMappingW

ExitThread

DeleteCriticalSection

GetDateFormatW

TlsGetValue

SetErrorMode

GetComputerNameW

IsValidLocale

SleepEx

TlsSetValue

CreateDirectoryW

GetSystemDefaultUILanguage

EnumCalendarInfoW

LocalAlloc

RemoveDirectoryW

CreateEventW

GetPrivateProfileStringW

WaitForMultipleObjectsEx

GetThreadLocale

SetThreadLocale

wsock32

send

ole32

IsAccelerator

CoCreateGuid

CoCreateInstance

CoUninitialize

CLSIDFromString

IsEqualGUID

CreateStreamOnHGlobal

OleInitialize

ProgIDFromCLSID

CLSIDFromProgID

OleUninitialize

CoGetClassObject

CoInitialize

CoTaskMemFree

OleDraw

CoTaskMemAlloc

StringFromCLSID

OleSetMenuDescriptor

gdi32

AddFontMemResourceEx

Pie

SetBkMode

CreateCompatibleBitmap

CreatePolygonRgn

BeginPath

GetEnhMetaFileHeader

CloseEnhMetaFile

RectVisible

AngleArc

ResizePalette

SetTextColor

StretchBlt

SelectClipRgn

RoundRect

RestoreDC

SetRectRgn

FillPath

GetTextMetricsW

GetWindowOrgEx

CreatePalette

PolyBezierTo

GetStockObject

CreateSolidBrush

Polygon

MoveToEx

PlayEnhMetaFile

Ellipse

GetBitmapBits

GetSystemPaletteEntries

GetEnhMetaFileBits

GetEnhMetaFilePaletteEntries

CreatePenIndirect

SetMapMode

CreateFontIndirectW

PolyBezier

LPtoDP

RemoveFontResourceExW

GetObjectW

GetCurrentObject

GetWinMetaFileBits

GetTextExtentExPointW

SetROP2

GetOutlineTextMetricsW

GetEnhMetaFileDescriptionW

ArcTo

GetKerningPairs

CreateEnhMetaFileW

Arc

SelectPalette

ExcludeClipRect

MaskBlt

SetWindowOrgEx

EndPath

DeleteEnhMetaFile

Chord

SetDIBits

SetViewportOrgEx

CreateRectRgn

RealizePalette

SetDIBColorTable

GetDIBColorTable

GetGlyphOutlineW

CreateBrushIndirect

PatBlt

SetEnhMetaFileBits

Rectangle

SaveDC

DeleteDC

BitBlt

FrameRgn

GetDeviceCaps

GetTextExtentPoint32W

GetClipBox

IntersectClipRect

Polyline

CreateBitmap

CombineRgn

SetWinMetaFileBits

GetStretchBltMode

CreateDIBitmap

SetStretchBltMode

GetDIBits

CreateDIBSection

LineTo

GetRgnBox

CreateHalftonePalette

SelectObject

DeleteObject

ExtFloodFill

UnrealizeObject

CopyEnhMetaFileW

SetBkColor

CreateCompatibleDC

GetBrushOrgEx

GetCurrentPositionEx

GetNearestPaletteIndex

RemoveFontMemResourceEx

GetTextExtentPointW

ExtTextOutW

SetBrushOrgEx

GetPixel

GdiFlush

SetPixel

EnumFontFamiliesExW

StretchDIBits

GetPath

GetPaletteEntries

Exports

TMethodImplementationIntercept

__dbk_fcall_wrapper

dbkFCallWrapperAddr

Sections

.text
Size: 6.1MB - Virtual size: 6.1MB

IMAGE_SCN_CNT_CODE

IMAGE_SCN_MEM_EXECUTE

IMAGE_SCN_MEM_READ

.itext
Size: 15KB - Virtual size: 14KB

IMAGE_SCN_CNT_CODE

IMAGE_SCN_MEM_EXECUTE

IMAGE_SCN_MEM_READ

.data
Size: 73KB - Virtual size: 72KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 222KB

IMAGE_SCN_MEM_READ

IMAGE_SCN_MEM_WRITE

.idata
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

IMAGE_SCN_MEM_WRITE

.didata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 159B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.tls
Size: - Virtual size: 80B

IMAGE_SCN_MEM_READ

IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 93B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.reloc
Size: 566KB - Virtual size: 566KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_DISCARDABLE

IMAGE_SCN_MEM_READ

.rsrc
Size: 1.2MB - Virtual size: 1.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

!Premium--SatUp/WJSLib.dll

.dll windows:5 windows x86 arch:x86

a4a247e9bcf5678a14b8b8f4cae857eb

Code Sign

6d:d4:72:eb:02:ae:04:06:e3:dd:84:3f:5f:e1:45:e1
Certificate

Issuer

CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

03/12/2014, 00:00

Not After

02/12/2029, 23:59

Subject

CN=COMODO RSA Extended Validation Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

61:18:54:86:00:00:00:00:00:24
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

11/04/2011, 22:06

Not After

11/04/2021, 22:16

Subject

CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

2e:4a:27:9b:de:2e:b6:88:e8:ab:30:f5:90:4f:a8:75
Certificate

Issuer

CN=COMODO RSA Extended Validation Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

09/07/2020, 00:00

Not After

09/07/2023, 23:59

Subject

SERIALNUMBER=91110101593898951F,CN=Lespeed Technology Co.\, Ltd,O=Lespeed Technology Co.\, Ltd,POSTALCODE=100028,STREET=Chaoyang District+STREET=Room 1610\, Haocheng Building\, No.9 Building\, No.6 Courtyard\, Zuojiazhuang Middle Street,L=Beijing,ST=Beijing Shi,C=CN,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#1302434e

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

6d:d4:72:eb:02:ae:04:06:e3:dd:84:3f:5f:e1:45:e1
Certificate

Issuer

CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

03/12/2014, 00:00

Not After

02/12/2029, 23:59

Subject

CN=COMODO RSA Extended Validation Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

61:18:54:86:00:00:00:00:00:24
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

11/04/2011, 22:06

Not After

11/04/2021, 22:16

Subject

CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

2e:4a:27:9b:de:2e:b6:88:e8:ab:30:f5:90:4f:a8:75
Certificate

Issuer

CN=COMODO RSA Extended Validation Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

09/07/2020, 00:00

Not After

09/07/2023, 23:59

Subject

SERIALNUMBER=91110101593898951F,CN=Lespeed Technology Co.\, Ltd,O=Lespeed Technology Co.\, Ltd,POSTALCODE=100028,STREET=Chaoyang District+STREET=Room 1610\, Haocheng Building\, No.9 Building\, No.6 Courtyard\, Zuojiazhuang Middle Street,L=Beijing,ST=Beijing Shi,C=CN,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#1302434e

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:dd
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01/01/2021, 00:00

Not After

06/01/2031, 00:00

Subject

CN=DigiCert Timestamp 2021,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

07/01/2016, 12:00

Not After

07/01/2031, 12:00

Subject

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

ff:32:00:32:c9:62:cb:53:c5:87:e2:98:e7:34:9c:5d:5c:88:38:d9:50:48:a3:78:30:9e:5e:98:ce:e9:aa:62
Signer

Actual PE Digest

ff:32:00:32:c9:62:cb:53:c5:87:e2:98:e7:34:9c:5d:5c:88:38:d9:50:48:a3:78:30:9e:5e:98:ce:e9:aa:62

Digest Algorithm

sha256

PE Digest Matches

true

0b:15:7c:75:8e:69:59:d1:b7:2c:71:f9:43:36:10:4a:c4:67:f3:ea
Signer

Actual PE Digest

0b:15:7c:75:8e:69:59:d1:b7:2c:71:f9:43:36:10:4a:c4:67:f3:ea

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_32BIT_MACHINE

IMAGE_FILE_DLL

Imports

shlwapi

PathFileExistsW

kernel32

LeaveCriticalSection

DeleteCriticalSection

GetLastError

GetFileAttributesExW

LocalFileTimeToFileTime

CreateEventW

OutputDebugStringW

CreateFileW

GetVolumeNameForVolumeMountPointW

GetVolumePathNamesForVolumeNameW

VerSetConditionMask

VerifyVersionInfoW

GetProcAddress

GetModuleHandleW

GetVolumeInformationW

MultiByteToWideChar

WideCharToMultiByte

ReadFile

DosDateTimeToFileTime

WriteFile

DeviceIoControl

WaitForSingleObject

DeleteFileW

GetFileSizeEx

EnterCriticalSection

SetEndOfFile

CreateFileMappingW

MapViewOfFile

UnmapViewOfFile

FlushViewOfFile

GetCurrentProcess

GetModuleFileNameW

GetCurrentThreadId

GetCurrentProcessId

Sleep

GetTickCount

SetUnhandledExceptionFilter

ResumeThread

CreateThread

TerminateThread

SetStdHandle

CloseHandle

SetEvent

InitializeCriticalSection

FindVolumeClose

FindNextVolumeW

FindFirstVolumeW

FlushFileBuffers

WriteConsoleW

SetFilePointerEx

GetConsoleMode

GetConsoleCP

SetFilePointer

LoadLibraryW

DecodePointer

EncodePointer

HeapReAlloc

HeapFree

HeapAlloc

InterlockedDecrement

InterlockedIncrement

GetCommandLineA

TerminateProcess

UnhandledExceptionFilter

IsDebuggerPresent

RaiseException

GetStdHandle

HeapCreate

HeapDestroy

IsProcessorFeaturePresent

ExitProcess

GetCPInfo

TlsAlloc

TlsGetValue

TlsSetValue

TlsFree

SetLastError

InitializeCriticalSectionAndSpinCount

GetACP

GetOEMCP

IsValidCodePage

GetStringTypeW

RtlUnwind

LCMapStringW

SetHandleCount

GetFileType

GetStartupInfoW

GetModuleFileNameA

FreeEnvironmentStringsW

GetEnvironmentStringsW

QueryPerformanceCounter

GetSystemTimeAsFileTime

HeapSize

shell32

SHGetFileInfoW

Exports

WJCreateIndexFile

WJGetShlDisplayName

WJSChangeTime

WJSClose

WJSCloseHandle

WJSCreateMftReader

WJSCreationTime

WJSDataClusters

WJSDataClustersCount

WJSDataOffset

WJSDataSize

WJSEnumDeleteFiles

WJSEnumMftFiles

WJSFileAttributes

WJSFileDataInfo

WJSFileName

WJSFileReferences

WJSFileSize

WJSGetBytesPerSector

WJSGetFile

WJSGetFileSystem

WJSGetMediaType

WJSGetSectorsPerCluster

WJSGetTotalCluster

WJSGetTotalSize

WJSGetVolume

WJSGetVolumeCount

WJSGetVolumeGuid

WJSGetVolumeLabel

WJSGetVolumePath

WJSIsDir

WJSLastAccessTime

WJSLastWriteTime

WJSMatchExpression

WJSOpen

WJSOpenHandle

WJSParentDircetoryReferences

WJSReadCluster

WJSReadSector

WJSSearchDeletedFile

WJSSearchIndexFile

WJSSearchVolume

WJVolumeCanReader

Sections

.text
Size: 75KB - Virtual size: 75KB

IMAGE_SCN_CNT_CODE

IMAGE_SCN_MEM_EXECUTE

IMAGE_SCN_MEM_READ

.rdata
Size: 19KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_DISCARDABLE

IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

dae02f32a21e03ce65412f6e56942daa

Code Sign

33:00:00:00:70:f4:18:bf:23:21:fc:50:9d:00:00:00:00:00:70Certificate

Extended Key Usages

33:00:00:01:0a:2c:79:ae:d7:79:7b:a6:ac:00:01:00:00:01:0aCertificate

Extended Key Usages

61:33:26:1a:00:00:00:00:00:31Certificate

Key Usages

61:16:68:34:00:00:00:00:00:1cCertificate

Extended Key Usages

Key Usages

5e:de:6d:6c:75:e6:b4:46:e8:c6:bd:38:7b:26:8e:f5:11:aa:4d:83Signer

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

mscoree

Sections

.text Size: 536KB - Virtual size: 536KB

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 512B - Virtual size: 12B

Code Sign

33:00:00:03:4e:b5:3c:7a:c1:84:6f:eb:2b:00:00:00:00:03:4eCertificate

Extended Key Usages

61:0e:90:d2:00:00:00:00:00:03Certificate

Key Usages

f0:f2:91:eb:b3:05:d4:71:70:e1:7e:2e:00:7e:2b:d5:e1:12:7c:59:14:5b:38:2e:c2:d6:21:77:f8:c2:1e:e2Signer

Headers

DLL Characteristics

File Characteristics

Sections

.rdata Size: 512B - Virtual size: 160B

.rsrc Size: 672KB - Virtual size: 672KB

dae02f32a21e03ce65412f6e56942daa

Code Sign

33:00:00:03:4e:b5:3c:7a:c1:84:6f:eb:2b:00:00:00:00:03:4eCertificate

Extended Key Usages

61:0e:90:d2:00:00:00:00:00:03Certificate

Key Usages

93:2c:22:41:88:8f:fd:c9:8c:68:fd:42:5d:39:ff:4c:c1:4b:69:19:b4:3b:97:92:eb:f2:f8:56:8f:c7:57:1bSigner

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

mscoree

Sections

.text Size: 175KB - Virtual size: 174KB

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 512B - Virtual size: 12B

892a6a56a33d14639bb506d992f28935

Code Sign

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3bCertificate

Extended Key Usages

Key Usages

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50Certificate

Extended Key Usages

Key Usages

6c:59:ef:a9:e1:00:e1:0e:e3:06:ba:8f:e0:29:25:59Certificate

Extended Key Usages

Key Usages

35:a8:4f:a5:03:f8:9b:49:83:96:bb:48:91:68:a5:80Certificate

Extended Key Usages

Key Usages

d1:0a:c0:92:13:70:87:1d:dd:36:b4:12:75:e0:c5:31:4c:39:96:59Signer

Headers

File Characteristics

PDB Paths

Imports

boost_system

dvacore

adobexmp

dvametadata

kernel32

33:00:00:00:70:f4:18:bf:23:21:fc:50:9d:00:00:00:00:00:70
Certificate

33:00:00:01:0a:2c:79:ae:d7:79:7b:a6:ac:00:01:00:00:01:0a
Certificate

61:33:26:1a:00:00:00:00:00:31
Certificate

61:16:68:34:00:00:00:00:00:1c
Certificate

5e:de:6d:6c:75:e6:b4:46:e8:c6:bd:38:7b:26:8e:f5:11:aa:4d:83
Signer

.text
Size: 536KB - Virtual size: 536KB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 512B - Virtual size: 12B

33:00:00:03:4e:b5:3c:7a:c1:84:6f:eb:2b:00:00:00:00:03:4e
Certificate

61:0e:90:d2:00:00:00:00:00:03
Certificate

f0:f2:91:eb:b3:05:d4:71:70:e1:7e:2e:00:7e:2b:d5:e1:12:7c:59:14:5b:38:2e:c2:d6:21:77:f8:c2:1e:e2
Signer

.rdata
Size: 512B - Virtual size: 160B

.rsrc
Size: 672KB - Virtual size: 672KB

33:00:00:03:4e:b5:3c:7a:c1:84:6f:eb:2b:00:00:00:00:03:4e
Certificate

61:0e:90:d2:00:00:00:00:00:03
Certificate

93:2c:22:41:88:8f:fd:c9:8c:68:fd:42:5d:39:ff:4c:c1:4b:69:19:b4:3b:97:92:eb:f2:f8:56:8f:c7:57:1b
Signer

.text
Size: 175KB - Virtual size: 174KB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 512B - Virtual size: 12B

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

6c:59:ef:a9:e1:00:e1:0e:e3:06:ba:8f:e0:29:25:59
Certificate

35:a8:4f:a5:03:f8:9b:49:83:96:bb:48:91:68:a5:80
Certificate

d1:0a:c0:92:13:70:87:1d:dd:36:b4:12:75:e0:c5:31:4c:39:96:59
Signer

.text
Size: 348KB - Virtual size: 347KB

.rdata
Size: 186KB - Virtual size: 186KB

.data
Size: 4KB - Virtual size: 5KB

.pdata
Size: 20KB - Virtual size: 19KB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 2KB - Virtual size: 1KB

7d:ed:cb:b3:d5:2b:c5:76:62:19:ab:48:a2:d9:c1:9c
Certificate

62:1d:6d:0c:52:01:9e:3b:90:79:15:20:89:21:1c:0a
Certificate

48:fc:93:b4:60:55:94:8d:36:a7:c9:8a:89:d6:94:16
Certificate

01
Certificate

90:39:7f:9a:d2:4a:3a:13:f2:bd:91:5f:08:38:a9:43
Certificate

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9
Certificate

b5:07:f1:5b:e2:1b:8a:63:df:49:e3:c3:20:4e:67:e4:2f:60:87:11:5e:11:2d:6d:8d:86:10:45:c9:78:3b:8d
Signer

.text
Size: 211KB - Virtual size: 211KB

.rdata
Size: 91KB - Virtual size: 91KB

.data
Size: 16KB - Virtual size: 23KB

.pdata
Size: 11KB - Virtual size: 11KB

.msvcjmc
Size: 1024B - Virtual size: 831B

_RDATA
Size: 512B - Virtual size: 348B

.rsrc
Size: 512B - Virtual size: 480B

.reloc
Size: 3KB - Virtual size: 2KB

0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:dd
Certificate

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

6d:d4:72:eb:02:ae:04:06:e3:dd:84:3f:5f:e1:45:e1
Certificate

61:18:54:86:00:00:00:00:00:24
Certificate

2e:4a:27:9b:de:2e:b6:88:e8:ab:30:f5:90:4f:a8:75
Certificate

6d:d4:72:eb:02:ae:04:06:e3:dd:84:3f:5f:e1:45:e1
Certificate

61:18:54:86:00:00:00:00:00:24
Certificate

2e:4a:27:9b:de:2e:b6:88:e8:ab:30:f5:90:4f:a8:75
Certificate