ailurophile | 𝘾𝙤𝙢𝙥𝙡𝙚𝙩𝙚📀𝘿𝙤𝙬𝙣𝙡𝙤𝙖𝙙+𝙎𝙚𝙩𝙪𝙥_(𝟸𝟶𝟸𝟻)[.]zip

Resubmissions

13-02-2025 00:07

250213-aetjqazndp 10

13-02-2025 00:06

250213-adthbs1jbt 10

13-02-2025 00:02

250213-abyn9szrhw 10

Sharing

Copy URL

Twitter E-mail

General

Target

𝘾𝙤𝙢𝙥𝙡𝙚𝙩𝙚📀𝘿𝙤𝙬𝙣𝙡𝙤𝙖𝙙+𝙎𝙚𝙩𝙪𝙥_(𝟸𝟶𝟸𝟻).zip
Size

44.6MB
MD5

eae56879fdf409a70b0bf4e0730e99d9
SHA1

9da60aaed3bb7b2150dae7be1fe954ff3d79d6cf
SHA256

901884e985e590851ff222852431adae8373029c703ef7587186fd961ad83be6
SHA512

5577f298f601820e6bd91874c5fd00d810507c261dd03498b9db352cbfdcc842190e4e3ddcaef1798150a7ecced6a24a1be47a3ef8700e8606e50ad0738828fb
SSDEEP

786432:A/lDESg/aC+n09Tzef95bXRqE9qz2ABF4wD6VpFbTrKrOz1N:KmS2SQzgQ6tfOyL

Score

10^/10

ailurophile

Malware Config

Signatures

Ailurophile family
ailurophile

Detects Ailurophile payload 1 IoCs

Ailurophile is stealer written in Delphi.

resource	yara_rule
static1/unpack002/setup.exe	family_ailurophile

Unsigned PE 12 IoCs

Checks for missing Authenticode signature.

resource
unpack002/All Files/Assets/Backup/ICQLiteShell.dll
unpack002/All Files/Assets/Backup/ICQRT.dll
unpack002/All Files/Assets/Backup/Language/LiteRes.dll
unpack002/All Files/Assets/Data/insights.dll
unpack002/All Files/Assets/MigrationService/legal/bin/odt2txt.exe
unpack002/All Files/Assets/MigrationService/legal/bin/sexp-conv.exe
unpack002/All Files/Assets/MigrationService/legal/bin/wish.exe
unpack002/All Files/Assets/MigrationService/libsmi-2.dll
unpack002/All Files/Plugins/cache/ICQLiteShell.dll
unpack002/All Files/Plugins/cache/ICQRT.dll
unpack002/All Files/Plugins/cache/Language/LiteRes.dll
unpack002/All Files/files/insights.dll

Files

𝘾𝙤𝙢𝙥𝙡𝙚𝙩𝙚📀𝘿𝙤𝙬𝙣𝙡𝙤𝙖𝙙+𝙎𝙚𝙩𝙪𝙥_(𝟸𝟶𝟸𝟻).zip
.zip

Password: 2025
𝙄𝙉𝙎𝙏𝘼𝙇𝙇💾𝙁𝙍𝙀𝙀+𝙋𝘾_𝙎𝙀𝙏𝙐𝙋_(𝟸𝟶𝟸𝟻).7z
.7z

Password: 2025
All Files/2025.png
.png

Password: 2025
All Files/Assets/Backup/Fips34.json
All Files/Assets/Backup/ICQLiteShell.dll
.dll regsvr32 windows:4 windows x86 arch:x86

Password: 2025

36da04e9d80185202c5dff27d69487ef

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

mfc42

ord2818
ord540
ord2915
ord537
ord800
ord941
ord861
ord823
ord6467
ord1131
ord2725
ord3953
ord825
ord561
ord3738
ord4424
ord4622
ord4080
ord3079
ord3825
ord3831
ord3830
ord2976
ord3081
ord2985
ord3262
ord3136
ord4465
ord3259
ord3147
ord2982
ord5714
ord5289
ord5307
ord4698
ord535
ord4160
ord5302
ord2396
ord269
ord5199
ord1577
ord600
ord4274
ord1182
ord5300
ord1255
ord1253
ord1578
ord1197
ord4079
ord1570
ord1243
ord342
ord815
ord6375
ord4486
ord2554
ord2512
ord5731
ord1116
ord1176
ord1575
ord1168
ord3922
ord826
ord3346
ord1089

msvcrt

_initterm
??1type_info@@UAE@XZ
_stricmp
memcpy
__CxxFrameHandler
free
malloc
realloc
memset
memcmp
strlen
_snprintf
strcat
strncpy
?terminate@@YAXXZ
_except_handler3
__dllonexit
_onexit
_adjust_fdiv

kernel32

GetLastError
LoadLibraryA
GetModuleFileNameA
GetModuleHandleA
GetShortPathNameA
lstrlenA
MultiByteToWideChar
lstrlenW
InterlockedDecrement
EnterCriticalSection
InterlockedIncrement
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSection
WideCharToMultiByte
FreeLibrary
SizeofResource
LoadResource
FindResourceA
LoadLibraryExA
lstrcmpiA
lstrcpynA
IsDBCSLeadByte
HeapDestroy
GetProcAddress
lstrcpyA
lstrcatA
GetVersionExA
CloseHandle
OpenMutexA
LocalFree
LocalAlloc

user32

CreateMenu
InsertMenuItemA
LoadBitmapA
InsertMenuA
wsprintfA
CharNextA

gdi32

DeleteObject

advapi32

RegOpenKeyExA
RegEnumValueA
RegQueryInfoKeyA
RegSetValueExA
RegEnumKeyExA
RegCloseKey
RegDeleteValueA
RegCreateKeyExA
RegDeleteKeyA

shell32

DragQueryFileA

ole32

CoTaskMemRealloc
CoTaskMemAlloc
CoCreateInstance
CoTaskMemFree

oleaut32

BSTR_UserMarshal
RegisterTypeLi
SysAllocStringLen
BSTR_UserFree
BSTR_UserUnmarshal
LoadTypeLi
BSTR_UserSize
SysAllocString
SysFreeString
VarUI4FromStr

rpcrt4

CStdStubBuffer_CountRefs
CStdStubBuffer_Invoke
CStdStubBuffer_Disconnect
CStdStubBuffer_Connect
CStdStubBuffer_AddRef
CStdStubBuffer_QueryInterface
IUnknown_Release_Proxy
IUnknown_AddRef_Proxy
IUnknown_QueryInterface_Proxy
NdrOleFree
NdrOleAllocate
NdrDllGetClassObject
NdrDllCanUnloadNow
NdrCStdStubBuffer_Release
NdrDllRegisterProxy
NdrDllUnregisterProxy
CStdStubBuffer_IsIIDSupported
CStdStubBuffer_DebugServerQueryInterface
CStdStubBuffer_DebugServerRelease

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 20KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.orpc
Size: 4KB - Virtual size: 89B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
All Files/Assets/Backup/ICQRT.dll
.dll windows:4 windows x86 arch:x86

Password: 2025

eea1a54f9a41b7445dc95356daf71d0a

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

EnterCriticalSection
Sleep
InitializeCriticalSection
InterlockedExchange
DeleteCriticalSection
LeaveCriticalSection
DisableThreadLibraryCalls

msvcrt

__CxxFrameHandler
_CxxThrowException
?what@exception@@UBEPBDXZ
strlen
??0exception@@QAE@ABQBD@Z
??1exception@@UAE@XZ
memcpy
??4exception@@QAEAAV0@ABV0@@Z
??3@YAXPAX@Z
wcslen
iswctype
??2@YAPAXI@Z
??0exception@@QAE@ABV0@@Z
memcmp
memchr
memset
??1type_info@@UAE@XZ
_except_handler3
?terminate@@YAXXZ
__dllonexit
_onexit
free
_initterm
malloc
_adjust_fdiv
memmove

Exports

Exports

??4?$numeric_limits@C@std@@QAEAAV01@ABV01@@Z
??4?$numeric_limits@D@std@@QAEAAV01@ABV01@@Z
??4?$numeric_limits@E@std@@QAEAAV01@ABV01@@Z
??4?$numeric_limits@F@std@@QAEAAV01@ABV01@@Z
??4?$numeric_limits@G@std@@QAEAAV01@ABV01@@Z
??4?$numeric_limits@H@std@@QAEAAV01@ABV01@@Z
??4?$numeric_limits@I@std@@QAEAAV01@ABV01@@Z
??4?$numeric_limits@J@std@@QAEAAV01@ABV01@@Z
??4?$numeric_limits@K@std@@QAEAAV01@ABV01@@Z
??4?$numeric_limits@M@std@@QAEAAV01@ABV01@@Z
??4?$numeric_limits@N@std@@QAEAAV01@ABV01@@Z
??4?$numeric_limits@O@std@@QAEAAV01@ABV01@@Z
??4?$numeric_limits@_N@std@@QAEAAV01@ABV01@@Z
??4_Num_base@std@@QAEAAU01@ABU01@@Z
??4_Num_float_base@std@@QAEAAU01@ABU01@@Z
??4_Num_int_base@std@@QAEAAU01@ABU01@@Z
?denorm_min@?$numeric_limits@C@std@@SACXZ
?denorm_min@?$numeric_limits@D@std@@SADXZ
?denorm_min@?$numeric_limits@E@std@@SAEXZ
?denorm_min@?$numeric_limits@F@std@@SAFXZ
?denorm_min@?$numeric_limits@G@std@@SAGXZ
?denorm_min@?$numeric_limits@H@std@@SAHXZ
?denorm_min@?$numeric_limits@I@std@@SAIXZ
?denorm_min@?$numeric_limits@J@std@@SAJXZ
?denorm_min@?$numeric_limits@K@std@@SAKXZ
?denorm_min@?$numeric_limits@M@std@@SAMXZ
?denorm_min@?$numeric_limits@N@std@@SANXZ
?denorm_min@?$numeric_limits@O@std@@SAOXZ
?denorm_min@?$numeric_limits@_N@std@@SA_NXZ
?epsilon@?$numeric_limits@C@std@@SACXZ
?epsilon@?$numeric_limits@D@std@@SADXZ
?epsilon@?$numeric_limits@E@std@@SAEXZ
?epsilon@?$numeric_limits@F@std@@SAFXZ
?epsilon@?$numeric_limits@G@std@@SAGXZ
?epsilon@?$numeric_limits@H@std@@SAHXZ
?epsilon@?$numeric_limits@I@std@@SAIXZ
?epsilon@?$numeric_limits@J@std@@SAJXZ
?epsilon@?$numeric_limits@K@std@@SAKXZ
?epsilon@?$numeric_limits@M@std@@SAMXZ
?epsilon@?$numeric_limits@N@std@@SANXZ
?epsilon@?$numeric_limits@O@std@@SAOXZ
?epsilon@?$numeric_limits@_N@std@@SA_NXZ
?infinity@?$numeric_limits@C@std@@SACXZ
?infinity@?$numeric_limits@D@std@@SADXZ
?infinity@?$numeric_limits@E@std@@SAEXZ
?infinity@?$numeric_limits@F@std@@SAFXZ
?infinity@?$numeric_limits@G@std@@SAGXZ
?infinity@?$numeric_limits@H@std@@SAHXZ
?infinity@?$numeric_limits@I@std@@SAIXZ
?infinity@?$numeric_limits@J@std@@SAJXZ
?infinity@?$numeric_limits@K@std@@SAKXZ
?infinity@?$numeric_limits@M@std@@SAMXZ
?infinity@?$numeric_limits@N@std@@SANXZ
?infinity@?$numeric_limits@O@std@@SAOXZ
?infinity@?$numeric_limits@_N@std@@SA_NXZ
?max@?$numeric_limits@C@std@@SACXZ
?max@?$numeric_limits@D@std@@SADXZ
?max@?$numeric_limits@E@std@@SAEXZ
?max@?$numeric_limits@F@std@@SAFXZ
?max@?$numeric_limits@G@std@@SAGXZ
?max@?$numeric_limits@H@std@@SAHXZ
?max@?$numeric_limits@I@std@@SAIXZ
?max@?$numeric_limits@J@std@@SAJXZ
?max@?$numeric_limits@K@std@@SAKXZ
?max@?$numeric_limits@M@std@@SAMXZ
?max@?$numeric_limits@N@std@@SANXZ
?max@?$numeric_limits@O@std@@SAOXZ
?max@?$numeric_limits@_N@std@@SA_NXZ
?min@?$numeric_limits@C@std@@SACXZ
?min@?$numeric_limits@D@std@@SADXZ
?min@?$numeric_limits@E@std@@SAEXZ
?min@?$numeric_limits@F@std@@SAFXZ
?min@?$numeric_limits@G@std@@SAGXZ
?min@?$numeric_limits@H@std@@SAHXZ
?min@?$numeric_limits@I@std@@SAIXZ
?min@?$numeric_limits@J@std@@SAJXZ
?min@?$numeric_limits@K@std@@SAKXZ
?min@?$numeric_limits@M@std@@SAMXZ
?min@?$numeric_limits@N@std@@SANXZ
?min@?$numeric_limits@O@std@@SAOXZ
?min@?$numeric_limits@_N@std@@SA_NXZ
?quiet_NaN@?$numeric_limits@C@std@@SACXZ
?quiet_NaN@?$numeric_limits@D@std@@SADXZ
?quiet_NaN@?$numeric_limits@E@std@@SAEXZ
?quiet_NaN@?$numeric_limits@F@std@@SAFXZ
?quiet_NaN@?$numeric_limits@G@std@@SAGXZ
?quiet_NaN@?$numeric_limits@H@std@@SAHXZ
?quiet_NaN@?$numeric_limits@I@std@@SAIXZ
?quiet_NaN@?$numeric_limits@J@std@@SAJXZ
?quiet_NaN@?$numeric_limits@K@std@@SAKXZ
?quiet_NaN@?$numeric_limits@M@std@@SAMXZ
?quiet_NaN@?$numeric_limits@N@std@@SANXZ
?quiet_NaN@?$numeric_limits@O@std@@SAOXZ
?quiet_NaN@?$numeric_limits@_N@std@@SA_NXZ
?round_error@?$numeric_limits@C@std@@SACXZ
?round_error@?$numeric_limits@D@std@@SADXZ
?round_error@?$numeric_limits@E@std@@SAEXZ
?round_error@?$numeric_limits@F@std@@SAFXZ
?round_error@?$numeric_limits@G@std@@SAGXZ
?round_error@?$numeric_limits@H@std@@SAHXZ
?round_error@?$numeric_limits@I@std@@SAIXZ
?round_error@?$numeric_limits@J@std@@SAJXZ
?round_error@?$numeric_limits@K@std@@SAKXZ
?round_error@?$numeric_limits@M@std@@SAMXZ
?round_error@?$numeric_limits@N@std@@SANXZ
?round_error@?$numeric_limits@O@std@@SAOXZ
?round_error@?$numeric_limits@_N@std@@SA_NXZ
?signaling_NaN@?$numeric_limits@C@std@@SACXZ
?signaling_NaN@?$numeric_limits@D@std@@SADXZ
?signaling_NaN@?$numeric_limits@E@std@@SAEXZ
?signaling_NaN@?$numeric_limits@F@std@@SAFXZ
?signaling_NaN@?$numeric_limits@G@std@@SAGXZ
?signaling_NaN@?$numeric_limits@H@std@@SAHXZ
?signaling_NaN@?$numeric_limits@I@std@@SAIXZ
?signaling_NaN@?$numeric_limits@J@std@@SAJXZ
?signaling_NaN@?$numeric_limits@K@std@@SAKXZ
?signaling_NaN@?$numeric_limits@M@std@@SAMXZ
?signaling_NaN@?$numeric_limits@N@std@@SANXZ
?signaling_NaN@?$numeric_limits@O@std@@SAOXZ
?signaling_NaN@?$numeric_limits@_N@std@@SA_NXZ

Sections

.text
Size: 17KB - Virtual size: 17KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
All Files/Assets/Backup/Language/LiteRes.dll
.dll windows:4 windows x86 arch:x86

Password: 2025

ce6ef31899b31809ae0c71c094c6f083

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

mfc42

ord1253
ord342
ord823
ord1182
ord1168

msvcrt

free
_initterm
malloc
_adjust_fdiv

Sections

.text
Size: 512B - Virtual size: 480B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 308B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 76B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 732KB - Virtual size: 731KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 420B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
All Files/Assets/Backup/Language/WinRar.exe
.exe windows:5 windows x64 arch:x64

Password: 2025

629fae0a56e3262e208711dda6ae6b1d

Code Sign

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

21-12-2012 00:00

Not After

30-12-2020 23:59

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

18-10-2012 00:00

Not After

29-12-2020 23:59

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

52:9e:3f:9f:cf:7d:58:d5:20:d6:07:ab:74:39:50:02
Certificate

Issuer

CN=COMODO RSA Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

02-06-2017 00:00

Not After

01-06-2020 23:59

Subject

CN=win.rar GmbH,O=win.rar GmbH,POSTALCODE=10117,STREET=Marienstrasse 12,L=Berlin,ST=Berlin,C=DE

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

27:66:ee:56:eb:49:f3:8e:ab:d7:70:a2:fc:84:de:22
Certificate

Issuer

CN=AddTrust External CA Root,OU=AddTrust External TTP Network,O=AddTrust AB,C=SE

Not Before

30-05-2000 10:48

Not After

30-05-2020 10:48

Subject

CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

2e:7c:87:cc:0e:93:4a:52:fe:94:fd:1c:b7:cd:34:af
Certificate

Issuer

CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

09-05-2013 00:00

Not After

08-05-2028 23:59

Subject

CN=COMODO RSA Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

52:9e:3f:9f:cf:7d:58:d5:20:d6:07:ab:74:39:50:02
Certificate

Issuer

CN=COMODO RSA Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

02-06-2017 00:00

Not After

01-06-2020 23:59

Subject

CN=win.rar GmbH,O=win.rar GmbH,POSTALCODE=10117,STREET=Marienstrasse 12,L=Berlin,ST=Berlin,C=DE

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

27:66:ee:56:eb:49:f3:8e:ab:d7:70:a2:fc:84:de:22
Certificate

Issuer

CN=AddTrust External CA Root,OU=AddTrust External TTP Network,O=AddTrust AB,C=SE

Not Before

30-05-2000 10:48

Not After

30-05-2020 10:48

Subject

CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

2e:7c:87:cc:0e:93:4a:52:fe:94:fd:1c:b7:cd:34:af
Certificate

Issuer

CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

09-05-2013 00:00

Not After

08-05-2028 23:59

Subject

CN=COMODO RSA Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

7b:05:b1:d4:49:68:51:44:f7:c9:89:d2:9c:19:9d:12
Certificate

Issuer

CN=VeriSign Universal Root Certification Authority,OU=VeriSign Trust Network+OU=(c) 2008 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

12-01-2016 00:00

Not After

11-01-2031 23:59

Subject

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

7b:d4:e5:af:ba:cc:07:3f:a1:01:23:04:22:41:4d:12
Certificate

Issuer

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Not Before

23-12-2017 00:00

Not After

22-03-2029 23:59

Subject

CN=Symantec SHA256 TimeStamping Signer - G3,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

ca:05:77:9a:83:94:f1:c2:84:3b:d1:35:92:02:9e:08:73:69:34:94:e8:62:49:32:6d:ca:10:c8:55:9e:d9:9b
Signer

Actual PE Digest

ca:05:77:9a:83:94:f1:c2:84:3b:d1:35:92:02:9e:08:73:69:34:94:e8:62:49:32:6d:ca:10:c8:55:9e:d9:9b

Digest Algorithm

sha256

PE Digest Matches

true

ed:14:78:6d:47:d9:55:27:5a:d1:dd:f1:22:3e:ed:fc:47:98:f7:f9
Signer

Actual PE Digest

ed:14:78:6d:47:d9:55:27:5a:d1:dd:f1:22:3e:ed:fc:47:98:f7:f9

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

D:\Projects\WinRAR\sfx\setup\build\sfxrar64\Release\sfxrar.pdb

Imports

kernel32

GetLastError
SetLastError
GetCurrentProcess
DeviceIoControl
SetFileTime
CloseHandle
CreateDirectoryW
RemoveDirectoryW
CreateFileW
DeleteFileW
CreateHardLinkW
GetShortPathNameW
GetLongPathNameW
MoveFileW
GetFileType
GetStdHandle
WriteFile
ReadFile
FlushFileBuffers
SetEndOfFile
SetFilePointer
SetFileAttributesW
GetFileAttributesW
FindClose
FindFirstFileW
FindNextFileW
GetVersionExW
GetCurrentDirectoryW
GetFullPathNameW
FoldStringW
GetModuleFileNameW
GetModuleHandleW
FindResourceW
FreeLibrary
GetProcAddress
GetCurrentProcessId
ExitProcess
SetThreadExecutionState
Sleep
LoadLibraryW
GetSystemDirectoryW
CompareStringW
AllocConsole
FreeConsole
AttachConsole
WriteConsoleW
GetProcessAffinityMask
CreateThread
SetThreadPriority
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
SetEvent
ResetEvent
ReleaseSemaphore
WaitForSingleObject
CreateEventW
CreateSemaphoreW
GetSystemTime
SystemTimeToTzSpecificLocalTime
TzSpecificLocalTimeToSystemTime
SystemTimeToFileTime
FileTimeToLocalFileTime
LocalFileTimeToFileTime
FileTimeToSystemTime
GetCPInfo
IsDBCSLeadByte
MultiByteToWideChar
WideCharToMultiByte
GlobalAlloc
GetTickCount
LockResource
GlobalLock
GlobalUnlock
GlobalFree
LoadResource
SizeofResource
SetCurrentDirectoryW
GetExitCodeProcess
GetLocalTime
MapViewOfFile
UnmapViewOfFile
CreateFileMappingW
OpenFileMappingW
GetCommandLineW
SetEnvironmentVariableW
ExpandEnvironmentStringsW
GetTempPathW
MoveFileExW
GetLocaleInfoW
GetTimeFormatW
GetDateFormatW
GetNumberFormatW
SetFilePointerEx
GetConsoleMode
GetConsoleCP
HeapSize
SetStdHandle
GetProcessHeap
FreeEnvironmentStringsW
RaiseException
GetSystemInfo
VirtualProtect
VirtualQuery
LoadLibraryExA
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
IsDebuggerPresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetStartupInfoW
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
RtlPcToFileHeader
EncodePointer
RtlUnwindEx
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
LoadLibraryExW
QueryPerformanceFrequency
TerminateProcess
GetModuleHandleExW
GetModuleFileNameA
GetACP
HeapFree
HeapAlloc
HeapReAlloc
GetStringTypeW
LCMapStringW
FindFirstFileExA
FindNextFileA
IsValidCodePage
GetOEMCP
GetCommandLineA
GetEnvironmentStringsW

gdiplus

GdiplusShutdown
GdiplusStartup
GdipCreateHBITMAPFromBitmap
GdipCreateBitmapFromStream
GdipDisposeImage
GdipCloneImage
GdipFree
GdipAlloc

Sections

.text
Size: 203KB - Virtual size: 203KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 61KB - Virtual size: 60KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 136KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.gfids
Size: 512B - Virtual size: 208B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 152KB - Virtual size: 156KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
All Files/Assets/Backup/Language/an.txt
All Files/Assets/Backup/Language/ar.txt
All Files/Assets/Backup/Language/az.txt
All Files/Assets/Backup/Language/ba.txt
All Files/Assets/Backup/Language/be.txt
All Files/Assets/Backup/Language/bg.txt
All Files/Assets/Backup/Language/bn.txt
All Files/Assets/Backup/Language/ca.txt
All Files/Assets/Backup/Language/co.txt
All Files/Assets/Backup/Language/cs.txt
All Files/Assets/Backup/Language/da.txt
All Files/Assets/Backup/Language/de.txt
All Files/Assets/Backup/Language/el.txt
All Files/Assets/Backup/Language/eng.txt
All Files/Assets/Backup/Language/es.txt
All Files/Assets/Backup/Language/et.txt
All Files/Assets/Backup/Language/eu.txt
All Files/Assets/Backup/Language/ext.txt
All Files/Assets/Backup/Language/fa.txt
All Files/Assets/Backup/Language/fi.txt
All Files/Assets/Backup/Language/fr.txt
All Files/Assets/Backup/Language/fur.txt
All Files/Assets/Backup/Language/fy.txt
All Files/Assets/Backup/Language/ga.txt
All Files/Assets/Backup/Language/gl.txt
All Files/Assets/Backup/Language/gu.txt
All Files/Assets/Backup/Language/he.pak
All Files/Assets/Backup/Language/he.txt
All Files/Assets/Backup/Language/hi.pak
All Files/Assets/Backup/Language/hi.txt
All Files/Assets/Backup/Language/hr.pak
All Files/Assets/Backup/Language/hr.txt
All Files/Assets/Backup/Language/hu.pak
All Files/Assets/Backup/Language/hu.txt
All Files/Assets/Backup/Language/hy.txt
All Files/Assets/Backup/Language/id.txt
All Files/Assets/Backup/Language/is.txt
All Files/Assets/Backup/Language/it.txt
All Files/Assets/Backup/Language/ja.txt
All Files/Assets/Backup/Language/ka.txt
All Files/Assets/Backup/Language/kaa.txt
All Files/Assets/Backup/Language/kab.txt
All Files/Assets/Backup/Language/kk.txt
All Files/Assets/Backup/Language/ko.txt
All Files/Assets/Backup/Language/ku-ckb.txt
All Files/Assets/Backup/Language/ky.txt
All Files/Assets/Backup/Language/lij.txt
All Files/Assets/Backup/Language/lt.txt
All Files/Assets/Backup/Language/madHcNet32.dll
.dll windows:5 windows x86 arch:x86

Password: 2025

1e157842e5cd99d6e1fd082c5f35c9fa

Code Sign

04:00:00:00:00:01:2f:4e:e1:52:d7
Certificate

Issuer

CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE

Not Before

13-04-2011 10:00

Not After

28-01-2028 12:00

Subject

CN=GlobalSign Timestamping CA - G2,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

04:00:00:00:00:01:2f:4e:e1:35:5c
Certificate

Issuer

CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE

Not Before

13-04-2011 10:00

Not After

13-04-2019 10:00

Subject

CN=GlobalSign CodeSigning CA - G2,O=GlobalSign nv-sa,C=BE

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

11:21:d6:99:a7:64:97:3e:f1:f8:42:7e:e9:19:cc:53:41:14
Certificate

Issuer

CN=GlobalSign Timestamping CA - G2,O=GlobalSign nv-sa,C=BE

Not Before

24-05-2016 00:00

Not After

24-06-2027 00:00

Subject

CN=GlobalSign TSA for MS Authenticode - G2,O=GMO GlobalSign Pte Ltd,C=SG

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

11:21:32:2d:39:bd:45:ac:62:3d:37:5b:22:c2:43:d6:07:6b
Certificate

Issuer

CN=GlobalSign CodeSigning CA - G2,O=GlobalSign nv-sa,C=BE

Not Before

24-11-2015 16:39

Not After

24-12-2018 16:39

Subject

CN=Systemsoftware Mathias Rauen (Mathias Rauen),O=Systemsoftware Mathias Rauen (Mathias Rauen),L=Hamburg,ST=Hamburg,C=DE,1.2.840.113549.1.9.1=#0c106d616473686940676d61696c2e636f6d

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

04:00:00:00:00:01:25:07:1d:f9:af
Certificate

Issuer

CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE

Not Before

18-11-2009 10:00

Not After

18-03-2019 10:00

Subject

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

48:1b:6a:07:26:d2:e8:3f:26:02:d4:82:5a:cd
Certificate

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Not Before

15-06-2016 00:00

Not After

15-06-2024 00:00

Subject

CN=GlobalSign CodeSigning CA - SHA256 - G3,O=GlobalSign nv-sa,C=BE

Extended Key Usages

ExtKeyUsageCodeSigning
ExtKeyUsageOCSPSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

16:98:0f:59:4c:d4:ee:7b:44:e0:8d:bb
Certificate

Issuer

CN=GlobalSign CodeSigning CA - SHA256 - G3,O=GlobalSign nv-sa,C=BE

Not Before

30-08-2016 13:11

Not After

24-12-2018 16:39

Subject

CN=Systemsoftware Mathias Rauen (Mathias Rauen),O=Systemsoftware Mathias Rauen (Mathias Rauen),L=Hamburg,ST=Hamburg,C=DE,1.2.840.113549.1.9.1=#0c106d616473686940676d61696c2e636f6d

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

11:21:b4:55:35:1e:bb:1a:b2:4f:97:ef:07:fe:2a:b3:0b:8a
Certificate

Issuer

CN=GlobalSign Timestamping CA - G2,O=GlobalSign nv-sa,C=BE

Not Before

24-05-2016 00:00

Not After

24-06-2027 00:00

Subject

CN=GlobalSign TSA for Standard - G2,O=GMO GlobalSign Pte Ltd,C=SG

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

04:00:00:00:00:01:2f:4e:e1:52:d7
Certificate

Issuer

CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE

Not Before

13-04-2011 10:00

Not After

28-01-2028 12:00

Subject

CN=GlobalSign Timestamping CA - G2,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

56:33:a8:5c:fd:08:d1:07:b4:19:5c:8c:4e:4f:aa:0d:61:82:2c:4e:c7:2b:cd:48:76:75:68:4e:98:8d:d9:75
Signer

Actual PE Digest

56:33:a8:5c:fd:08:d1:07:b4:19:5c:8c:4e:4f:aa:0d:61:82:2c:4e:c7:2b:cd:48:76:75:68:4e:98:8d:d9:75

Digest Algorithm

sha256

PE Digest Matches

true

f9:b1:33:5f:66:ed:06:7c:40:bb:f3:ad:cf:3d:6f:fd:35:14:53:b9
Signer

Actual PE Digest

f9:b1:33:5f:66:ed:06:7c:40:bb:f3:ad:cf:3d:6f:fd:35:14:53:b9

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Imports

oleaut32

SysFreeString
SysReAllocStringLen
SysAllocStringLen
SafeArrayPtrOfIndex
SafeArrayGetUBound
SafeArrayGetLBound
SafeArrayCreate
VariantChangeType
VariantCopy
VariantClear
VariantInit

advapi32

RegQueryValueExW
RegOpenKeyExW
RegCloseKey
SetSecurityDescriptorDacl
RegSetValueExA
RegSetValueExW
RegQueryValueExA
RegQueryValueExW
RegQueryInfoKeyA
RegOpenKeyExA
RegOpenKeyExW
RegEnumKeyA
RegEnumKeyExW
RegDeleteValueA
RegDeleteValueW
RegCreateKeyExA
RegCreateKeyExW
RegCloseKey
OpenProcessToken
LookupPrivilegeValueA
InitializeSecurityDescriptor
GetUserNameA
GetUserNameW
GetTokenInformation
FreeSid
AllocateAndInitializeSid
AdjustTokenPrivileges

user32

CharNextW
LoadStringW
SetWindowLongW
GetWindowLongW
CreateWindowExA
CreateWindowExW
WindowFromPoint
WaitForInputIdle
UnregisterClassA
TranslateMessage
SystemParametersInfoW
ShowWindow
SetWindowTextA
SetWindowTextW
SetWindowPos
SetTimer
SetRect
SetForegroundWindow
SetFocus
SetCursor
SetClipboardData
SetCapture
SetActiveWindow
SendMessageTimeoutA
SendMessageA
SendMessageW
ScreenToClient
RemoveMenu
ReleaseDC
ReleaseCapture
RegisterWindowMessageW
RegisterClassA
RegisterClassW
PostThreadMessageA
PostThreadMessageW
PostQuitMessage
PostMessageA
PostMessageW
PeekMessageA
PeekMessageW
OpenClipboard
OffsetRect
MsgWaitForMultipleObjects
MessageBoxA
MessageBoxW
MessageBeep
LoadStringW
LoadImageA
LoadImageW
LoadCursorW
KillTimer
IsWindowVisible
IsWindowUnicode
IsWindowEnabled
IsWindow
IsIconic
IsDialogMessageW
InvalidateRect
InflateRect
GetWindowThreadProcessId
GetWindowTextA
GetWindowTextW
GetWindowRect
GetWindowPlacement
GetWindowDC
GetSystemMetrics
GetSystemMenu
GetSysColorBrush
GetSysColor
GetWindow
GetMessageA
GetMessageW
GetKeyState
GetIconInfo
GetFocus
GetDC
GetCursorPos
GetCursor
GetClientRect
GetClassNameA
GetCapture
FrameRect
FindWindowA
FillRect
EnumWindows
EnumDisplayDevicesW
EndPaint
EnableWindow
EmptyClipboard
DrawTextA
DrawTextW
DrawIconEx
DrawFrameControl
DrawFocusRect
DispatchMessageW
DestroyWindow
DestroyIcon
DefWindowProcA
DefWindowProcW
CreateIconIndirect
CloseClipboard
CharUpperBuffW
CharUpperW
CallWindowProcA
CallWindowProcW
BringWindowToTop
BeginPaint
AttachThreadInput
GetMonitorInfoW

kernel32

Sleep
VirtualFree
VirtualAlloc
lstrlenW
VirtualQuery
GetTickCount
GetSystemInfo
GetVersion
CompareStringW
IsDBCSLeadByteEx
IsValidLocale
SetThreadLocale
GetSystemDefaultUILanguage
GetUserDefaultUILanguage
GetLocaleInfoW
WideCharToMultiByte
MultiByteToWideChar
GetConsoleOutputCP
GetConsoleCP
GetACP
LoadLibraryExW
GetStartupInfoW
GetProcAddress
GetModuleHandleW
GetModuleFileNameW
GetCommandLineW
FreeLibrary
GetLastError
UnhandledExceptionFilter
RtlUnwind
RaiseException
ExitProcess
SwitchToThread
GetCurrentThreadId
CreateThread
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
InitializeCriticalSection
FindFirstFileW
FindClose
WriteFile
SetFilePointer
SetEndOfFile
ReadFile
GetFileType
GetFileSize
CreateFileW
GetStdHandle
CloseHandle
GetProcAddress
RaiseException
LoadLibraryA
GetLastError
TlsSetValue
TlsGetValue
TlsFree
TlsAlloc
LocalFree
LocalAlloc
FreeLibrary
lstrlenW
lstrcpyW
lstrcmpiW
lstrcmpA
WriteFile
WideCharToMultiByte
WaitForSingleObject
WaitForMultipleObjects
VirtualQuery
VirtualProtect
VirtualFree
VirtualAlloc
VerSetConditionMask
VerifyVersionInfoW
UnmapViewOfFile
TerminateThread
TerminateProcess
SystemTimeToFileTime
SuspendThread
Sleep
SizeofResource
SetUnhandledExceptionFilter
SetThreadPriority
SetNamedPipeHandleState
SetLastError
SetFilePointer
SetFileAttributesA
SetFileAttributesW
SetEvent
SetErrorMode
SetEndOfFile
ResumeThread
ResetEvent
RemoveDirectoryA
RemoveDirectoryW
ReleaseSemaphore
ReleaseMutex
ReadProcessMemory
ReadFile
RaiseException
QueryPerformanceFrequency
QueryPerformanceCounter
OpenProcess
OpenFileMappingA
OpenFileMappingW
OpenEventW
MapViewOfFile
LockResource
LocalSize
LocalFree
LocalAlloc
LoadResource
LoadLibraryA
LoadLibraryW
LoadLibraryExA
LeaveCriticalSection
IsValidLocale
IsBadReadPtr
InitializeCriticalSection
GlobalUnlock
GlobalMemoryStatus
GlobalLock
GlobalFree
GlobalAlloc
GetWindowsDirectoryA
GetVersionExA
GetVersionExW
GetVersion
GetTickCount
GetThreadPriority
GetThreadLocale
GetThreadContext
GetTempPathA
GetTempPathW
GetSystemTime
GetSystemDirectoryW
GetStdHandle
GetProcAddress
GetPriorityClass
GetModuleHandleA
GetModuleHandleW
GetModuleFileNameA
GetModuleFileNameW
GetLocaleInfoA
GetLocaleInfoW
GetLocalTime
GetLastError
GetFileTime
GetFileSize
GetFileAttributesA
GetFileAttributesW
GetExitCodeThread
GetDiskFreeSpaceA
GetDiskFreeSpaceW
GetDateFormatW
GetCurrentThreadId
GetCurrentThread
GetCurrentProcessId
GetCurrentProcess
GetCurrentDirectoryA
GetCurrentDirectoryW
GetComputerNameA
GetComputerNameW
GetCommandLineA
GetCommandLineW
GetCPInfo
FreeResource
InterlockedIncrement
InterlockedDecrement
FreeLibrary
FormatMessageA
FormatMessageW
FlushInstructionCache
FindResourceA
FindResourceW
FindNextFileA
FindNextFileW
FindFirstFileA
FindFirstFileW
FindClose
FileTimeToSystemTime
FileTimeToLocalFileTime
FileTimeToDosDateTime
ExpandEnvironmentStringsA
ExpandEnvironmentStringsW
ExitThread
ExitProcess
EnumSystemLocalesW
EnumCalendarInfoW
EnterCriticalSection
DuplicateHandle
DeleteFileA
DeleteFileW
DeleteCriticalSection
CreateThread
CreateSemaphoreW
CreateProcessA
CreateProcessW
CreatePipe
CreateMutexA
CreateMutexW
CreateFileMappingA
CreateFileMappingW
CreateFileA
CreateFileW
CreateEventA
CreateEventW
CreateDirectoryA
CreateDirectoryW
CopyFileA
CopyFileW
CompareStringW
CloseHandle
Beep
Sleep
RtlUnwind
OpenThread

gdi32

TextOutA
TextOutW
StartPage
StartDocA
StartDocW
SetTextColor
SetMapMode
SetBkMode
SetBkColor
SelectObject
SelectClipRgn
MoveToEx
LineTo
GetTextMetricsW
GetTextFaceA
GetTextExtentPoint32A
GetTextExtentPoint32W
GetStockObject
GetRgnBox
GetObjectW
GetDeviceCaps
GetDIBits
GdiFlush
EndPage
EndDoc
DeleteObject
DeleteDC
CreateSolidBrush
CreateRectRgnIndirect
CreatePen
CreateFontA
CreateFontW
CreateDIBSection
CreateDCW
CreateCompatibleDC
CombineRgn
BitBlt

version

VerQueryValueA
VerQueryValueW
GetFileVersionInfoSizeA
GetFileVersionInfoSizeW
GetFileVersionInfoA
GetFileVersionInfoW

netapi32

NetWkstaGetInfo
NetApiBufferFree
NetServerEnum

ole32

CoInitialize

comctl32

ImageList_GetIcon
ImageList_Destroy
ImageList_Create
InitCommonControls

shell32

SHGetFileInfoW
ShellExecuteExA
ShellExecuteA
SHGetPathFromIDListA
SHGetSpecialFolderLocation
SHGetMalloc

comdlg32

PrintDlgW
GetSaveFileNameA
GetSaveFileNameW

wsock32

WSACleanup
WSAStartup
WSAGetLastError
gethostbyname
socket
shutdown
setsockopt
sendto
send
select
recvfrom
recv
listen
ioctlsocket
inet_ntoa
inet_addr
htons
getsockname
getpeername
connect
closesocket
bind
accept

dnsapi

DnsRecordListFree
DnsQuery_A

iphlpapi

IcmpParseReplies
IcmpSendEcho2
IcmpCloseHandle
IcmpCreateFile
GetAdaptersInfo
GetAdaptersAddresses
GetIpNetTable

Exports

Exports

AutoNet_AddConnectionCallback
AutoNet_Announce
AutoNet_Broadcast
AutoNet_BufToIcon
AutoNet_Connect
AutoNet_DecodeHello
AutoNet_DelConnectionCallback
AutoNet_EncodeHello
AutoNet_FinalComponent
AutoNet_GetHello
AutoNet_GetStorage
AutoNet_InitComponent
AutoNet_Listen
AutoNet_Search
AutoNet_Send
AutoNet_WaitForSearchCompletion
Localize_ConnectDialog
Localize_IpAddressDialog
Ping
madGetCurrentIpAddr
madGetFreezeReport
madGetGpuRamSize
madGetGpuUserModeDrivers
madGetMonitorInfo
madHandleException
madNameThread
madTraceProcess
madVR_BlindConnect
madVR_Connect
madVR_ConnectDialog
madVR_ConnectEx
madVR_ConnectToInstance
madVR_ConnectToIp
madVR_Convert3dlutFile
madVR_ConvertHdr3dlutFile
madVR_Create3dlutFileFromArray256
madVR_Create3dlutFileFromArray65
madVR_CreateHdr3dlutFileFromArray256
madVR_CreateHdr3dlutFileFromArray65
madVR_Disable3dlut
madVR_DisableFseMode
madVR_Disconnect
madVR_Enable3dlut
madVR_EnableFseMode
madVR_EnterFullscreen
madVR_Find
madVR_Find_Async
madVR_GetBlackAndWhiteLevel
madVR_GetDeviceGammaRamp
madVR_GetPatternConfig
madVR_GetSelected3dlut
madVR_GetVersion
madVR_GetWindowSize
madVR_IsDisableOsdButtonPressed
madVR_IsFseModeEnabled
madVR_IsFullscreen
madVR_IsHdrButtonPressed
madVR_IsLocal
madVR_IsMaximized
madVR_IsMinimized
madVR_IsRestored
madVR_IsStayOnTopButtonPressed
madVR_IsUseFullscreenButtonPressed
madVR_LeaveFullscreen
madVR_Load3dlutFile
madVR_Load3dlutFromArray256
madVR_Load3dlutFromArray65
madVR_LoadHdr3dlutFile
madVR_LoadHdr3dlutFromArray256
madVR_LoadHdr3dlutFromArray65
madVR_Maximize
madVR_Minimize
madVR_Quit
madVR_Restore
madVR_SetBackground
madVR_SetDeviceGammaRamp
madVR_SetDisableOsdButton
madVR_SetHdrButton
madVR_SetHdrMetadata
madVR_SetOsdText
madVR_SetPatternConfig
madVR_SetProgressBarPos
madVR_SetSelected3dlut
madVR_SetStayOnTopButton
madVR_SetUseFullscreenButton
madVR_SetWindowSize
madVR_ShowProgressBar
madVR_ShowRGB
madVR_ShowRGBEx

Sections

.text
Size: 785KB - Virtual size: 785KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.itext
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 30KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 24KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.didata
Size: 512B - Virtual size: 456B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 68B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 51KB - Virtual size: 50KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rsrc
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
All Files/Assets/Backup/Language/mk.txt
All Files/Assets/Backup/Language/mn.txt
All Files/Assets/Backup/Language/mng.txt
All Files/Assets/Backup/Language/mng2.txt
All Files/Assets/Backup/Language/mr.txt
All Files/Assets/Backup/Language/ne.txt
All Files/Assets/Backup/Language/nl.txt
All Files/Assets/Backup/Language/nolimetangere.pkg
All Files/Assets/Backup/Language/pa-in.txt
All Files/Assets/Backup/Language/pl.txt
All Files/Assets/Backup/Language/ps.txt
All Files/Assets/Backup/Language/pt-br.txt
All Files/Assets/Backup/Language/pt.txt
All Files/Assets/Backup/Language/ro.txt
All Files/Assets/Backup/Language/ru.txt
All Files/Assets/Backup/Language/sa.txt
All Files/Assets/Backup/Language/si.txt
All Files/Assets/Backup/Language/sk.txt
All Files/Assets/Backup/Language/sl.txt
All Files/Assets/Backup/Language/sr-spc.txt
All Files/Assets/Backup/Language/sr-spl.txt
All Files/Assets/Backup/Language/sv.txt
All Files/Assets/Backup/Language/sw.txt
All Files/Assets/Backup/Language/ta.txt
All Files/Assets/Backup/Language/tg.txt
All Files/Assets/Backup/Language/th.txt
All Files/Assets/Backup/Language/tk.txt
All Files/Assets/Backup/Language/tr.txt
All Files/Assets/Backup/Language/tt.txt
All Files/Assets/Backup/Language/ug.txt
All Files/Assets/Backup/Language/uk.txt
All Files/Assets/Backup/Language/unrar.dll
.dll windows:5 windows x86 arch:x86

Password: 2025

97687a07538d3932fb9baf861b959f5d

Code Sign

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

29-04-2021 00:00

Not After

28-04-2036 23:59

Subject

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

04:8b:08:39:9e:c7:03:62:3c:72:cd:20:77:ad:65:d9
Certificate

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Not Before

08-08-2023 00:00

Not After

07-08-2026 23:59

Subject

SERIALNUMBER=HRB 109885,CN=win.rar GmbH,O=win.rar GmbH,L=Berlin,ST=Berlin,C=DE,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.1=#130e436861726c6f7474656e62757267,1.3.6.1.4.1.311.60.2.1.2=#13064265726c696e,1.3.6.1.4.1.311.60.2.1.3=#13024445

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16
Certificate

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Not Before

14-07-2023 00:00

Not After

13-10-2034 23:59

Subject

CN=DigiCert Timestamp 2023,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

23-03-2022 00:00

Not After

22-03-2037 23:59

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01-08-2022 00:00

Not After

09-11-2031 23:59

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

56:58:06:a8:5c:dd:b1:06:22:da:21:e6:d3:4a:2f:33:85:e8:1a:85:0f:f7:41:85:fa:76:48:ff:e6:e8:20:a2
Signer

Actual PE Digest

56:58:06:a8:5c:dd:b1:06:22:da:21:e6:d3:4a:2f:33:85:e8:1a:85:0f:f7:41:85:fa:76:48:ff:e6:e8:20:a2

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

D:\Projects\WinRAR\rar\build\unrardll32\Release\UnRAR.pdb

Imports

kernel32

CreateFileW
DeleteFileW
CreateHardLinkW
GetShortPathNameW
GetLongPathNameW
MoveFileW
WriteFile
ReadFile
FlushFileBuffers
SetEndOfFile
SetFilePointer
GetCurrentProcessId
CreateDirectoryW
SetFileAttributesW
GetFileAttributesW
FindClose
FindFirstFileW
FindNextFileW
InterlockedDecrement
GetVersionExW
GetCurrentDirectoryW
GetFullPathNameW
FoldStringW
FreeLibrary
GetProcAddress
SetThreadPriority
SetThreadExecutionState
RemoveDirectoryW
LoadLibraryW
GetModuleHandleW
GetSystemDirectoryW
GetProcessAffinityMask
CreateThread
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
SetEvent
ResetEvent
ReleaseSemaphore
WaitForSingleObject
CreateSemaphoreW
GetSystemTime
SystemTimeToTzSpecificLocalTime
TzSpecificLocalTimeToSystemTime
SystemTimeToFileTime
FileTimeToLocalFileTime
LocalFileTimeToFileTime
FileTimeToSystemTime
GetCPInfo
IsDBCSLeadByte
MultiByteToWideChar
WideCharToMultiByte
CompareStringW
DecodePointer
WriteConsoleW
SetFilePointerEx
HeapSize
GetConsoleCP
GetProcessHeap
CloseHandle
GetCommandLineW
SetFileTime
DeviceIoControl
GetCurrentProcess
Sleep
SetLastError
GetLastError
AreFileApisANSI
GetConsoleMode
GetStdHandle
GetFileType
CreateEventW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineA
GetOEMCP
IsValidCodePage
FindNextFileA
FindFirstFileExA
HeapReAlloc
SetStdHandle
LocalFree
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
IsProcessorFeaturePresent
InitializeCriticalSectionAndSpinCount
WaitForSingleObjectEx
IsDebuggerPresent
GetStartupInfoW
QueryPerformanceCounter
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
RaiseException
RtlUnwind
InterlockedFlushSList
EncodePointer
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
LoadLibraryExW
QueryPerformanceFrequency
ExitProcess
GetModuleHandleExW
GetModuleFileNameA
GetStringTypeW
GetACP
HeapFree
HeapAlloc
LCMapStringW

user32

CharUpperW
CharToOemA
OemToCharBuffA
OemToCharA
CharLowerW
CharToOemBuffW

advapi32

CheckTokenMembership
FreeSid
AllocateAndInitializeSid
LookupPrivilegeValueW
SetFileSecurityW
AdjustTokenPrivileges
OpenProcessToken

ole32

CoCreateInstance
CoSetProxyBlanket

oleaut32

VariantClear
SysFreeString
SysAllocString

Exports

Exports

RARCloseArchive
RARGetDllVersion
RAROpenArchive
RAROpenArchiveEx
RARProcessFile
RARProcessFileW
RARReadHeader
RARReadHeaderEx
RARSetCallback
RARSetChangeVolProc
RARSetPassword
RARSetProcessDataProc

Sections

.text
Size: 242KB - Virtual size: 242KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 36KB - Virtual size: 35KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 35KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
All Files/Assets/Backup/Language/uz-cyrl.txt
All Files/Assets/Backup/Language/uz.txt
All Files/Assets/Backup/Language/va.txt
All Files/Assets/Backup/Language/vi.txt
All Files/Assets/Backup/Language/yo.txt
All Files/Assets/Backup/Language/zh-cn.txt
All Files/Assets/Backup/Language/zh-tw.txt
All Files/Assets/Backup/acceptancy.svg
All Files/Assets/Backup/cgame.dll
.dll windows:4 windows x86 arch:x86

d6c38e965367a686e74b0b12a0cf6e1e

Code Sign

01:00:21
Certificate

Issuer

CN=Certum CA,O=Unizeto Sp. z o.o.,C=PL

Not Before

12-07-2002 16:31

Not After

12-07-2012 16:31

Subject

CN=Certum Level I,O=Unizeto Sp. z o.o.,C=PL

02:2f:0d
Certificate

Issuer

CN=Certum CA,O=Unizeto Sp. z o.o.,C=PL

Not Before

28-08-2002 17:05

Not After

28-08-2012 17:05

Subject

CN=Certum Time-Stamping Authority,O=Unizeto Sp. z o.o.,C=PL

Extended Key Usages

ExtKeyUsageTimeStamping

03:47:36
Certificate

Issuer

CN=Certum Level I,O=Unizeto Sp. z o.o.,C=PL

Not Before

13-07-2006 21:54

Not After

11-10-2006 21:54

Subject

CN=Wei Dai,O=Free Object Signing,C=US,1.2.840.113549.1.9.1=#0c1163657274756d407765696461692e636f6d

Extended Key Usages

ExtKeyUsageCodeSigning

ae:19:cb:fe:f7:ce:fd:00:e5:51:28:96:af:9f:0a:6e:9c:88:a1:e8
Signer

Actual PE Digest

ae:19:cb:fe:f7:ce:fd:00:e5:51:28:96:af:9f:0a:6e:9c:88:a1:e8

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

c:\cvs\c5\Win32\dll_output\release\cryptopp.pdb

Imports

kernel32

GetModuleFileNameW
GetModuleHandleW
GetModuleFileNameA
IsDebuggerPresent
OutputDebugStringA
TlsAlloc
TlsFree
TlsSetValue
TlsGetValue
GetModuleHandleA
GetProcAddress
GetLastError
VirtualQuery
InterlockedIncrement
InterlockedDecrement
Sleep
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
HeapFree
HeapAlloc
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCommandLineA
GetVersionExA
GetProcessHeap
RaiseException
RtlUnwind
WideCharToMultiByte
ExitProcess
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetCPInfo
WriteFile
GetStdHandle
SetLastError
GetACP
GetOEMCP
HeapSize
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
HeapReAlloc
SetHandleCount
GetFileType
GetStartupInfoA
GetConsoleCP
GetConsoleMode
SetFilePointer
FlushFileBuffers
CloseHandle
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
LoadLibraryA
GetUserDefaultLCID
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale
IsValidCodePage
GetStringTypeA
GetStringTypeW
GetLocaleInfoW
ReadFile
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
SetStdHandle
CreateFileA
CreateFileW
SetEndOfFile

advapi32

CryptReleaseContext
CryptAcquireContextA
CryptGenRandom

Exports

Exports

??0?$AbstractEuclideanDomain@VInteger@CryptoPP@@@CryptoPP@@QAE@ABV01@@Z
??0?$AbstractEuclideanDomain@VInteger@CryptoPP@@@CryptoPP@@QAE@XZ
??0?$AbstractEuclideanDomain@VPolynomialMod2@CryptoPP@@@CryptoPP@@QAE@ABV01@@Z
??0?$AbstractEuclideanDomain@VPolynomialMod2@CryptoPP@@@CryptoPP@@QAE@XZ
??0?$AbstractGroup@UEC2NPoint@CryptoPP@@@CryptoPP@@QAE@ABV01@@Z
??0?$AbstractGroup@UEC2NPoint@CryptoPP@@@CryptoPP@@QAE@XZ
??0?$AbstractGroup@UECPPoint@CryptoPP@@@CryptoPP@@QAE@ABV01@@Z
??0?$AbstractGroup@UECPPoint@CryptoPP@@@CryptoPP@@QAE@XZ
??0?$AbstractGroup@VInteger@CryptoPP@@@CryptoPP@@QAE@ABV01@@Z
??0?$AbstractGroup@VInteger@CryptoPP@@@CryptoPP@@QAE@XZ
??0?$AbstractGroup@VPolynomialMod2@CryptoPP@@@CryptoPP@@QAE@ABV01@@Z
??0?$AbstractGroup@VPolynomialMod2@CryptoPP@@@CryptoPP@@QAE@XZ
??0?$AbstractPolicyHolder@UAdditiveCipherAbstractPolicy@CryptoPP@@V?$TwoBases@V?$SimpleKeyedTransformation@VStreamTransformation@CryptoPP@@@CryptoPP@@VRandomNumberGenerator@2@@2@@CryptoPP@@QAE@ABV01@@Z
??0?$AbstractPolicyHolder@UAdditiveCipherAbstractPolicy@CryptoPP@@V?$TwoBases@V?$SimpleKeyedTransformation@VStreamTransformation@CryptoPP@@@CryptoPP@@VRandomNumberGenerator@2@@2@@CryptoPP@@QAE@XZ
??0?$AbstractPolicyHolder@UAdditiveCipherAbstractPolicy@CryptoPP@@VCTR_ModePolicy@2@@CryptoPP@@QAE@ABV01@@Z
??0?$AbstractPolicyHolder@UAdditiveCipherAbstractPolicy@CryptoPP@@VCTR_ModePolicy@2@@CryptoPP@@QAE@XZ
??0?$AbstractPolicyHolder@UAdditiveCipherAbstractPolicy@CryptoPP@@VOFB_ModePolicy@2@@CryptoPP@@QAE@ABV01@@Z
??0?$AbstractPolicyHolder@UAdditiveCipherAbstractPolicy@CryptoPP@@VOFB_ModePolicy@2@@CryptoPP@@QAE@XZ
??0?$AbstractPolicyHolder@VCFB_CipherAbstractPolicy@CryptoPP@@V?$SimpleKeyedTransformation@VStreamTransformation@CryptoPP@@@2@@CryptoPP@@QAE@ABV01@@Z
??0?$AbstractPolicyHolder@VCFB_CipherAbstractPolicy@CryptoPP@@V?$SimpleKeyedTransformation@VStreamTransformation@CryptoPP@@@2@@CryptoPP@@QAE@XZ
??0?$AbstractPolicyHolder@VCFB_CipherAbstractPolicy@CryptoPP@@VCFB_ModePolicy@2@@CryptoPP@@QAE@ABV01@@Z
??0?$AbstractPolicyHolder@VCFB_CipherAbstractPolicy@CryptoPP@@VCFB_ModePolicy@2@@CryptoPP@@QAE@XZ
??0?$AbstractRing@VInteger@CryptoPP@@@CryptoPP@@QAE@ABV01@@Z
??0?$AbstractRing@VInteger@CryptoPP@@@CryptoPP@@QAE@XZ
??0?$AbstractRing@VPolynomialMod2@CryptoPP@@@CryptoPP@@QAE@ABV01@@Z
??0?$AbstractRing@VPolynomialMod2@CryptoPP@@@CryptoPP@@QAE@XZ
??0?$AdditiveCipherTemplate@V?$AbstractPolicyHolder@UAdditiveCipherAbstractPolicy@CryptoPP@@V?$TwoBases@V?$SimpleKeyedTransformation@VStreamTransformation@CryptoPP@@@CryptoPP@@VRandomNumberGenerator@2@@2@@CryptoPP@@@CryptoPP@@QAE@ABV01@@Z
??0?$AdditiveCipherTemplate@V?$AbstractPolicyHolder@UAdditiveCipherAbstractPolicy@CryptoPP@@V?$TwoBases@V?$SimpleKeyedTransformation@VStreamTransformation@CryptoPP@@@CryptoPP@@VRandomNumberGenerator@2@@2@@CryptoPP@@@CryptoPP@@QAE@XZ
??0?$AdditiveCipherTemplate@V?$AbstractPolicyHolder@UAdditiveCipherAbstractPolicy@CryptoPP@@VCTR_ModePolicy@2@@CryptoPP@@@CryptoPP@@QAE@ABV01@@Z
??0?$AdditiveCipherTemplate@V?$AbstractPolicyHolder@UAdditiveCipherAbstractPolicy@CryptoPP@@VCTR_ModePolicy@2@@CryptoPP@@@CryptoPP@@QAE@XZ
??0?$AdditiveCipherTemplate@V?$AbstractPolicyHolder@UAdditiveCipherAbstractPolicy@CryptoPP@@VOFB_ModePolicy@2@@CryptoPP@@@CryptoPP@@QAE@ABV01@@Z
??0?$AdditiveCipherTemplate@V?$AbstractPolicyHolder@UAdditiveCipherAbstractPolicy@CryptoPP@@VOFB_ModePolicy@2@@CryptoPP@@@CryptoPP@@QAE@XZ
??0?$AlgorithmImpl@V?$IteratedHash@IU?$EnumToType@W4ByteOrder@CryptoPP@@$00@CryptoPP@@$0EA@VHashTransformation@2@@CryptoPP@@VSHA1@2@@CryptoPP@@QAE@ABV01@@Z
??0?$AlgorithmImpl@V?$IteratedHash@IU?$EnumToType@W4ByteOrder@CryptoPP@@$00@CryptoPP@@$0EA@VHashTransformation@2@@CryptoPP@@VSHA1@2@@CryptoPP@@QAE@XZ
??0?$AlgorithmImpl@V?$IteratedHash@IU?$EnumToType@W4ByteOrder@CryptoPP@@$00@CryptoPP@@$0EA@VHashTransformation@2@@CryptoPP@@VSHA224@2@@CryptoPP@@QAE@ABV01@@Z
??0?$AlgorithmImpl@V?$IteratedHash@IU?$EnumToType@W4ByteOrder@CryptoPP@@$00@CryptoPP@@$0EA@VHashTransformation@2@@CryptoPP@@VSHA224@2@@CryptoPP@@QAE@XZ
??0?$AlgorithmImpl@V?$IteratedHash@IU?$EnumToType@W4ByteOrder@CryptoPP@@$00@CryptoPP@@$0EA@VHashTransformation@2@@CryptoPP@@VSHA256@2@@CryptoPP@@QAE@ABV01@@Z
??0?$AlgorithmImpl@V?$IteratedHash@IU?$EnumToType@W4ByteOrder@CryptoPP@@$00@CryptoPP@@$0EA@VHashTransformation@2@@CryptoPP@@VSHA256@2@@CryptoPP@@QAE@XZ
??0?$AlgorithmImpl@V?$IteratedHash@_KU?$EnumToType@W4ByteOrder@CryptoPP@@$00@CryptoPP@@$0IA@VHashTransformation@2@@CryptoPP@@VSHA384@2@@CryptoPP@@QAE@ABV01@@Z
??0?$AlgorithmImpl@V?$IteratedHash@_KU?$EnumToType@W4ByteOrder@CryptoPP@@$00@CryptoPP@@$0IA@VHashTransformation@2@@CryptoPP@@VSHA384@2@@CryptoPP@@QAE@XZ
??0?$AlgorithmImpl@V?$IteratedHash@_KU?$EnumToType@W4ByteOrder@CryptoPP@@$00@CryptoPP@@$0IA@VHashTransformation@2@@CryptoPP@@VSHA512@2@@CryptoPP@@QAE@ABV01@@Z
??0?$AlgorithmImpl@V?$IteratedHash@_KU?$EnumToType@W4ByteOrder@CryptoPP@@$00@CryptoPP@@$0IA@VHashTransformation@2@@CryptoPP@@VSHA512@2@@CryptoPP@@QAE@XZ
??0?$AlgorithmImpl@V?$SimpleKeyingInterfaceImpl@V?$TwoBases@V?$SimpleKeyedTransformation@VBlockTransformation@CryptoPP@@@CryptoPP@@UDES_EDE2_Info@2@@CryptoPP@@V12@@CryptoPP@@V12@@CryptoPP@@QAE@ABV01@@Z
??0?$AlgorithmImpl@V?$SimpleKeyingInterfaceImpl@V?$TwoBases@V?$SimpleKeyedTransformation@VBlockTransformation@CryptoPP@@@CryptoPP@@UDES_EDE2_Info@2@@CryptoPP@@V12@@CryptoPP@@V12@@CryptoPP@@QAE@XZ
??0?$AlgorithmImpl@V?$SimpleKeyingInterfaceImpl@V?$TwoBases@V?$SimpleKeyedTransformation@VBlockTransformation@CryptoPP@@@CryptoPP@@UDES_EDE3_Info@2@@CryptoPP@@V12@@CryptoPP@@V12@@CryptoPP@@QAE@ABV01@@Z
??0?$AlgorithmImpl@V?$SimpleKeyingInterfaceImpl@V?$TwoBases@V?$SimpleKeyedTransformation@VBlockTransformation@CryptoPP@@@CryptoPP@@UDES_EDE3_Info@2@@CryptoPP@@V12@@CryptoPP@@V12@@CryptoPP@@QAE@XZ
??0?$AlgorithmImpl@V?$SimpleKeyingInterfaceImpl@V?$TwoBases@V?$SimpleKeyedTransformation@VBlockTransformation@CryptoPP@@@CryptoPP@@URijndael_Info@2@@CryptoPP@@V12@@CryptoPP@@V12@@CryptoPP@@QAE@ABV01@@Z
??0?$AlgorithmImpl@V?$SimpleKeyingInterfaceImpl@V?$TwoBases@V?$SimpleKeyedTransformation@VBlockTransformation@CryptoPP@@@CryptoPP@@URijndael_Info@2@@CryptoPP@@V12@@CryptoPP@@V12@@CryptoPP@@QAE@XZ
??0?$AlgorithmImpl@V?$SimpleKeyingInterfaceImpl@V?$TwoBases@V?$SimpleKeyedTransformation@VBlockTransformation@CryptoPP@@@CryptoPP@@USKIPJACK_Info@2@@CryptoPP@@V12@@CryptoPP@@V12@@CryptoPP@@QAE@ABV01@@Z
??0?$AlgorithmImpl@V?$SimpleKeyingInterfaceImpl@V?$TwoBases@V?$SimpleKeyedTransformation@VBlockTransformation@CryptoPP@@@CryptoPP@@USKIPJACK_Info@2@@CryptoPP@@V12@@CryptoPP@@V12@@CryptoPP@@QAE@XZ
??0?$AutoSeededX917RNG@VDES_EDE3@CryptoPP@@@CryptoPP@@QAE@_N@Z
??0?$AutoSignaling@V?$InputRejecting@VBufferedTransformation@CryptoPP@@@CryptoPP@@@CryptoPP@@QAE@ABV01@@Z
??0?$AutoSignaling@V?$InputRejecting@VBufferedTransformation@CryptoPP@@@CryptoPP@@@CryptoPP@@QAE@H@Z
??0?$AutoSignaling@VBufferedTransformation@CryptoPP@@@CryptoPP@@QAE@ABV01@@Z
??0?$AutoSignaling@VBufferedTransformation@CryptoPP@@@CryptoPP@@QAE@H@Z
??0?$BlockCipherImpl@UDES_EDE2_Info@CryptoPP@@V?$SimpleKeyedTransformation@VBlockTransformation@CryptoPP@@@2@@CryptoPP@@QAE@ABV01@@Z
??0?$BlockCipherImpl@UDES_EDE2_Info@CryptoPP@@V?$SimpleKeyedTransformation@VBlockTransformation@CryptoPP@@@2@@CryptoPP@@QAE@XZ
??0?$BlockCipherImpl@UDES_EDE3_Info@CryptoPP@@V?$SimpleKeyedTransformation@VBlockTransformation@CryptoPP@@@2@@CryptoPP@@QAE@ABV01@@Z
??0?$BlockCipherImpl@UDES_EDE3_Info@CryptoPP@@V?$SimpleKeyedTransformation@VBlockTransformation@CryptoPP@@@2@@CryptoPP@@QAE@XZ
??0?$BlockCipherImpl@URijndael_Info@CryptoPP@@V?$SimpleKeyedTransformation@VBlockTransformation@CryptoPP@@@2@@CryptoPP@@QAE@ABV01@@Z
??0?$BlockCipherImpl@URijndael_Info@CryptoPP@@V?$SimpleKeyedTransformation@VBlockTransformation@CryptoPP@@@2@@CryptoPP@@QAE@XZ
??0?$BlockCipherImpl@USKIPJACK_Info@CryptoPP@@V?$SimpleKeyedTransformation@VBlockTransformation@CryptoPP@@@2@@CryptoPP@@QAE@ABV01@@Z
??0?$BlockCipherImpl@USKIPJACK_Info@CryptoPP@@V?$SimpleKeyedTransformation@VBlockTransformation@CryptoPP@@@2@@CryptoPP@@QAE@XZ
??0?$Bufferless@VBufferedTransformation@CryptoPP@@@CryptoPP@@QAE@ABV01@@Z
??0?$Bufferless@VBufferedTransformation@CryptoPP@@@CryptoPP@@QAE@XZ
??0?$Bufferless@VFilter@CryptoPP@@@CryptoPP@@QAE@XZ
??0?$Bufferless@VSink@CryptoPP@@@CryptoPP@@QAE@ABV01@@Z
??0?$Bufferless@VSink@CryptoPP@@@CryptoPP@@QAE@XZ
??0?$CFB_CipherTemplate@V?$AbstractPolicyHolder@VCFB_CipherAbstractPolicy@CryptoPP@@V?$SimpleKeyedTransformation@VStreamTransformation@CryptoPP@@@2@@CryptoPP@@@CryptoPP@@QAE@ABV01@@Z
??0?$CFB_CipherTemplate@V?$AbstractPolicyHolder@VCFB_CipherAbstractPolicy@CryptoPP@@V?$SimpleKeyedTransformation@VStreamTransformation@CryptoPP@@@2@@CryptoPP@@@CryptoPP@@QAE@XZ
??0?$CFB_CipherTemplate@V?$AbstractPolicyHolder@VCFB_CipherAbstractPolicy@CryptoPP@@VCFB_ModePolicy@2@@CryptoPP@@@CryptoPP@@QAE@ABV01@@Z
??0?$CFB_CipherTemplate@V?$AbstractPolicyHolder@VCFB_CipherAbstractPolicy@CryptoPP@@VCFB_ModePolicy@2@@CryptoPP@@@CryptoPP@@QAE@XZ
??0?$CFB_DecryptionTemplate@V?$AbstractPolicyHolder@VCFB_CipherAbstractPolicy@CryptoPP@@V?$SimpleKeyedTransformation@VStreamTransformation@CryptoPP@@@2@@CryptoPP@@@CryptoPP@@QAE@ABV01@@Z
??0?$CFB_DecryptionTemplate@V?$AbstractPolicyHolder@VCFB_CipherAbstractPolicy@CryptoPP@@V?$SimpleKeyedTransformation@VStreamTransformation@CryptoPP@@@2@@CryptoPP@@@CryptoPP@@QAE@XZ
??0?$CFB_DecryptionTemplate@V?$AbstractPolicyHolder@VCFB_CipherAbstractPolicy@CryptoPP@@VCFB_ModePolicy@2@@CryptoPP@@@CryptoPP@@QAE@ABV01@@Z
??0?$CFB_DecryptionTemplate@V?$AbstractPolicyHolder@VCFB_CipherAbstractPolicy@CryptoPP@@VCFB_ModePolicy@2@@CryptoPP@@@CryptoPP@@QAE@XZ
??0?$CFB_EncryptionTemplate@V?$AbstractPolicyHolder@VCFB_CipherAbstractPolicy@CryptoPP@@V?$SimpleKeyedTransformation@VStreamTransformation@CryptoPP@@@2@@CryptoPP@@@CryptoPP@@QAE@ABV01@@Z
??0?$CFB_EncryptionTemplate@V?$AbstractPolicyHolder@VCFB_CipherAbstractPolicy@CryptoPP@@V?$SimpleKeyedTransformation@VStreamTransformation@CryptoPP@@@2@@CryptoPP@@@CryptoPP@@QAE@XZ
??0?$CFB_EncryptionTemplate@V?$AbstractPolicyHolder@VCFB_CipherAbstractPolicy@CryptoPP@@VCFB_ModePolicy@2@@CryptoPP@@@CryptoPP@@QAE@ABV01@@Z
??0?$CFB_EncryptionTemplate@V?$AbstractPolicyHolder@VCFB_CipherAbstractPolicy@CryptoPP@@VCFB_ModePolicy@2@@CryptoPP@@@CryptoPP@@QAE@XZ
??0?$CipherModeFinalTemplate_ExternalCipher@VCBC_CTS_Decryption@CryptoPP@@@CryptoPP@@QAE@AAV?$SimpleKeyedTransformation@VBlockTransformation@CryptoPP@@@1@@Z
??0?$CipherModeFinalTemplate_ExternalCipher@VCBC_CTS_Decryption@CryptoPP@@@CryptoPP@@QAE@AAV?$SimpleKeyedTransformation@VBlockTransformation@CryptoPP@@@1@PBEH@Z
??0?$CipherModeFinalTemplate_ExternalCipher@VCBC_CTS_Decryption@CryptoPP@@@CryptoPP@@QAE@ABV01@@Z
??0?$CipherModeFinalTemplate_ExternalCipher@VCBC_CTS_Decryption@CryptoPP@@@CryptoPP@@QAE@XZ
??0?$CipherModeFinalTemplate_ExternalCipher@VCBC_CTS_Encryption@CryptoPP@@@CryptoPP@@QAE@AAV?$SimpleKeyedTransformation@VBlockTransformation@CryptoPP@@@1@@Z
??0?$CipherModeFinalTemplate_ExternalCipher@VCBC_CTS_Encryption@CryptoPP@@@CryptoPP@@QAE@AAV?$SimpleKeyedTransformation@VBlockTransformation@CryptoPP@@@1@PBEH@Z
??0?$CipherModeFinalTemplate_ExternalCipher@VCBC_CTS_Encryption@CryptoPP@@@CryptoPP@@QAE@ABV01@@Z
??0?$CipherModeFinalTemplate_ExternalCipher@VCBC_CTS_Encryption@CryptoPP@@@CryptoPP@@QAE@XZ
??0?$CipherModeFinalTemplate_ExternalCipher@VCBC_Decryption@CryptoPP@@@CryptoPP@@QAE@AAV?$SimpleKeyedTransformation@VBlockTransformation@CryptoPP@@@1@@Z
??0?$CipherModeFinalTemplate_ExternalCipher@VCBC_Decryption@CryptoPP@@@CryptoPP@@QAE@AAV?$SimpleKeyedTransformation@VBlockTransformation@CryptoPP@@@1@PBEH@Z
??0?$CipherModeFinalTemplate_ExternalCipher@VCBC_Decryption@CryptoPP@@@CryptoPP@@QAE@ABV01@@Z
??0?$CipherModeFinalTemplate_ExternalCipher@VCBC_Decryption@CryptoPP@@@CryptoPP@@QAE@XZ
??0?$CipherModeFinalTemplate_ExternalCipher@VCBC_Encryption@CryptoPP@@@CryptoPP@@QAE@AAV?$SimpleKeyedTransformation@VBlockTransformation@CryptoPP@@@1@@Z
??0?$CipherModeFinalTemplate_ExternalCipher@VCBC_Encryption@CryptoPP@@@CryptoPP@@QAE@AAV?$SimpleKeyedTransformation@VBlockTransformation@CryptoPP@@@1@PBEH@Z
??0?$CipherModeFinalTemplate_ExternalCipher@VCBC_Encryption@CryptoPP@@@CryptoPP@@QAE@ABV01@@Z
??0?$CipherModeFinalTemplate_ExternalCipher@VCBC_Encryption@CryptoPP@@@CryptoPP@@QAE@XZ
??0?$CipherModeFinalTemplate_ExternalCipher@VECB_OneWay@CryptoPP@@@CryptoPP@@QAE@AAV?$SimpleKeyedTransformation@VBlockTransformation@CryptoPP@@@1@@Z
??0?$CipherModeFinalTemplate_ExternalCipher@VECB_OneWay@CryptoPP@@@CryptoPP@@QAE@AAV?$SimpleKeyedTransformation@VBlockTransformation@CryptoPP@@@1@PBEH@Z
??0?$CipherModeFinalTemplate_ExternalCipher@VECB_OneWay@CryptoPP@@@CryptoPP@@QAE@ABV01@@Z
??0?$CipherModeFinalTemplate_ExternalCipher@VECB_OneWay@CryptoPP@@@CryptoPP@@QAE@XZ
??0?$ClonableImpl@VSHA1@CryptoPP@@V?$AlgorithmImpl@V?$IteratedHash@IU?$EnumToType@W4ByteOrder@CryptoPP@@$00@CryptoPP@@$0EA@VHashTransformation@2@@CryptoPP@@VSHA1@2@@2@@CryptoPP@@QAE@ABV01@@Z
??0?$ClonableImpl@VSHA1@CryptoPP@@V?$AlgorithmImpl@V?$IteratedHash@IU?$EnumToType@W4ByteOrder@CryptoPP@@$00@CryptoPP@@$0EA@VHashTransformation@2@@CryptoPP@@VSHA1@2@@2@@CryptoPP@@QAE@XZ
??0?$ClonableImpl@VSHA224@CryptoPP@@V?$AlgorithmImpl@V?$IteratedHash@IU?$EnumToType@W4ByteOrder@CryptoPP@@$00@CryptoPP@@$0EA@VHashTransformation@2@@CryptoPP@@VSHA224@2@@2@@CryptoPP@@QAE@ABV01@@Z
??0?$ClonableImpl@VSHA224@CryptoPP@@V?$AlgorithmImpl@V?$IteratedHash@IU?$EnumToType@W4ByteOrder@CryptoPP@@$00@CryptoPP@@$0EA@VHashTransformation@2@@CryptoPP@@VSHA224@2@@2@@CryptoPP@@QAE@XZ
??0?$ClonableImpl@VSHA256@CryptoPP@@V?$AlgorithmImpl@V?$IteratedHash@IU?$EnumToType@W4ByteOrder@CryptoPP@@$00@CryptoPP@@$0EA@VHashTransformation@2@@CryptoPP@@VSHA256@2@@2@@CryptoPP@@QAE@ABV01@@Z
??0?$ClonableImpl@VSHA256@CryptoPP@@V?$AlgorithmImpl@V?$IteratedHash@IU?$EnumToType@W4ByteOrder@CryptoPP@@$00@CryptoPP@@$0EA@VHashTransformation@2@@CryptoPP@@VSHA256@2@@2@@CryptoPP@@QAE@XZ
??0?$ClonableImpl@VSHA384@CryptoPP@@V?$AlgorithmImpl@V?$IteratedHash@_KU?$EnumToType@W4ByteOrder@CryptoPP@@$00@CryptoPP@@$0IA@VHashTransformation@2@@CryptoPP@@VSHA384@2@@2@@CryptoPP@@QAE@ABV01@@Z
??0?$ClonableImpl@VSHA384@CryptoPP@@V?$AlgorithmImpl@V?$IteratedHash@_KU?$EnumToType@W4ByteOrder@CryptoPP@@$00@CryptoPP@@$0IA@VHashTransformation@2@@CryptoPP@@VSHA384@2@@2@@CryptoPP@@QAE@XZ
??0?$ClonableImpl@VSHA512@CryptoPP@@V?$AlgorithmImpl@V?$IteratedHash@_KU?$EnumToType@W4ByteOrder@CryptoPP@@$00@CryptoPP@@$0IA@VHashTransformation@2@@CryptoPP@@VSHA512@2@@2@@CryptoPP@@QAE@ABV01@@Z
??0?$ClonableImpl@VSHA512@CryptoPP@@V?$AlgorithmImpl@V?$IteratedHash@_KU?$EnumToType@W4ByteOrder@CryptoPP@@$00@CryptoPP@@$0IA@VHashTransformation@2@@CryptoPP@@VSHA512@2@@2@@CryptoPP@@QAE@XZ
??0?$CustomFlushPropagation@VFilter@CryptoPP@@@CryptoPP@@QAE@XZ
??0?$CustomFlushPropagation@VSink@CryptoPP@@@CryptoPP@@QAE@ABV01@@Z
??0?$CustomFlushPropagation@VSink@CryptoPP@@@CryptoPP@@QAE@XZ
??0?$CustomSignalPropagation@VSink@CryptoPP@@@CryptoPP@@QAE@ABV01@@Z
??0?$CustomSignalPropagation@VSink@CryptoPP@@@CryptoPP@@QAE@XZ
??0?$DH_Domain@VDL_GroupParameters_GFP_DefaultSafePrime@CryptoPP@@U?$EnumToType@W4CofactorMultiplicationOption@CryptoPP@@$0A@@2@@CryptoPP@@QAE@AAVBufferedTransformation@1@@Z
??0?$DH_Domain@VDL_GroupParameters_GFP_DefaultSafePrime@CryptoPP@@U?$EnumToType@W4CofactorMultiplicationOption@CryptoPP@@$0A@@2@@CryptoPP@@QAE@ABV01@@Z
??0?$DH_Domain@VDL_GroupParameters_GFP_DefaultSafePrime@CryptoPP@@U?$EnumToType@W4CofactorMultiplicationOption@CryptoPP@@$0A@@2@@CryptoPP@@QAE@ABVDL_GroupParameters_GFP_DefaultSafePrime@1@@Z
??0?$DH_Domain@VDL_GroupParameters_GFP_DefaultSafePrime@CryptoPP@@U?$EnumToType@W4CofactorMultiplicationOption@CryptoPP@@$0A@@2@@CryptoPP@@QAE@XZ
??0?$DL_Algorithm_GDSA@UEC2NPoint@CryptoPP@@@CryptoPP@@QAE@ABV01@@Z
??0?$DL_Algorithm_GDSA@UEC2NPoint@CryptoPP@@@CryptoPP@@QAE@XZ
??0?$DL_Algorithm_GDSA@UECPPoint@CryptoPP@@@CryptoPP@@QAE@ABV01@@Z
??0?$DL_Algorithm_GDSA@UECPPoint@CryptoPP@@@CryptoPP@@QAE@XZ
??0?$DL_Algorithm_GDSA@VInteger@CryptoPP@@@CryptoPP@@QAE@ABV01@@Z
??0?$DL_Algorithm_GDSA@VInteger@CryptoPP@@@CryptoPP@@QAE@XZ
??0?$DL_ElgamalLikeSignatureAlgorithm@UEC2NPoint@CryptoPP@@@CryptoPP@@QAE@ABV01@@Z
??0?$DL_ElgamalLikeSignatureAlgorithm@UEC2NPoint@CryptoPP@@@CryptoPP@@QAE@XZ
??0?$DL_ElgamalLikeSignatureAlgorithm@UECPPoint@CryptoPP@@@CryptoPP@@QAE@ABV01@@Z
??0?$DL_ElgamalLikeSignatureAlgorithm@UECPPoint@CryptoPP@@@CryptoPP@@QAE@XZ
??0?$DL_ElgamalLikeSignatureAlgorithm@VInteger@CryptoPP@@@CryptoPP@@QAE@ABV01@@Z
??0?$DL_ElgamalLikeSignatureAlgorithm@VInteger@CryptoPP@@@CryptoPP@@QAE@XZ
??0?$DL_FixedBasePrecomputation@UEC2NPoint@CryptoPP@@@CryptoPP@@QAE@ABV01@@Z
??0?$DL_FixedBasePrecomputation@UEC2NPoint@CryptoPP@@@CryptoPP@@QAE@XZ
??0?$DL_FixedBasePrecomputation@UECPPoint@CryptoPP@@@CryptoPP@@QAE@ABV01@@Z
??0?$DL_FixedBasePrecomputation@UECPPoint@CryptoPP@@@CryptoPP@@QAE@XZ
??0?$DL_FixedBasePrecomputation@VInteger@CryptoPP@@@CryptoPP@@QAE@ABV01@@Z
??0?$DL_FixedBasePrecomputation@VInteger@CryptoPP@@@CryptoPP@@QAE@XZ
??0?$DL_FixedBasePrecomputationImpl@UEC2NPoint@CryptoPP@@@CryptoPP@@QAE@ABV01@@Z
??0?$DL_FixedBasePrecomputationImpl@UEC2NPoint@CryptoPP@@@CryptoPP@@QAE@XZ
??0?$DL_FixedBasePrecomputationImpl@UECPPoint@CryptoPP@@@CryptoPP@@QAE@ABV01@@Z
??0?$DL_FixedBasePrecomputationImpl@UECPPoint@CryptoPP@@@CryptoPP@@QAE@XZ
??0?$DL_FixedBasePrecomputationImpl@VInteger@CryptoPP@@@CryptoPP@@QAE@ABV01@@Z
??0?$DL_FixedBasePrecomputationImpl@VInteger@CryptoPP@@@CryptoPP@@QAE@XZ
??0?$DL_GroupParameters@UEC2NPoint@CryptoPP@@@CryptoPP@@QAE@ABV01@@Z
??0?$DL_GroupParameters@UEC2NPoint@CryptoPP@@@CryptoPP@@QAE@XZ
??0?$DL_GroupParameters@UECPPoint@CryptoPP@@@CryptoPP@@QAE@ABV01@@Z
??0?$DL_GroupParameters@UECPPoint@CryptoPP@@@CryptoPP@@QAE@XZ
??0?$DL_GroupParameters@VInteger@CryptoPP@@@CryptoPP@@QAE@ABV01@@Z
??0?$DL_GroupParameters@VInteger@CryptoPP@@@CryptoPP@@QAE@XZ
??0?$DL_GroupParametersImpl@V?$EcPrecomputation@VEC2N@CryptoPP@@@CryptoPP@@V?$DL_FixedBasePrecomputationImpl@UEC2NPoint@CryptoPP@@@2@V?$DL_GroupParameters@UEC2NPoint@CryptoPP@@@2@@CryptoPP@@QAE@ABV01@@Z
??0?$DL_GroupParametersImpl@V?$EcPrecomputation@VEC2N@CryptoPP@@@CryptoPP@@V?$DL_FixedBasePrecomputationImpl@UEC2NPoint@CryptoPP@@@2@V?$DL_GroupParameters@UEC2NPoint@CryptoPP@@@2@@CryptoPP@@QAE@XZ
??0?$DL_GroupParametersImpl@V?$EcPrecomputation@VECP@CryptoPP@@@CryptoPP@@V?$DL_FixedBasePrecomputationImpl@UECPPoint@CryptoPP@@@2@V?$DL_GroupParameters@UECPPoint@CryptoPP@@@2@@CryptoPP@@QAE@ABV01@@Z
??0?$DL_GroupParametersImpl@V?$EcPrecomputation@VECP@CryptoPP@@@CryptoPP@@V?$DL_FixedBasePrecomputationImpl@UECPPoint@CryptoPP@@@2@V?$DL_GroupParameters@UECPPoint@CryptoPP@@@2@@CryptoPP@@QAE@XZ
??0?$DL_GroupParametersImpl@VModExpPrecomputation@CryptoPP@@V?$DL_FixedBasePrecomputationImpl@VInteger@CryptoPP@@@2@VDL_GroupParameters_IntegerBased@2@@CryptoPP@@QAE@ABV01@@Z
??0?$DL_GroupParametersImpl@VModExpPrecomputation@CryptoPP@@V?$DL_FixedBasePrecomputationImpl@VInteger@CryptoPP@@@2@VDL_GroupParameters_IntegerBased@2@@CryptoPP@@QAE@XZ
??0?$DL_GroupParameters_EC@VEC2N@CryptoPP@@@CryptoPP@@QAE@AAVBufferedTransformation@1@@Z
??0?$DL_GroupParameters_EC@VEC2N@CryptoPP@@@CryptoPP@@QAE@ABV01@@Z
??0?$DL_GroupParameters_EC@VEC2N@CryptoPP@@@CryptoPP@@QAE@ABVEC2N@1@ABUEC2NPoint@1@ABVInteger@1@2@Z
??0?$DL_GroupParameters_EC@VEC2N@CryptoPP@@@CryptoPP@@QAE@ABVOID@1@@Z
??0?$DL_GroupParameters_EC@VEC2N@CryptoPP@@@CryptoPP@@QAE@XZ
??0?$DL_GroupParameters_EC@VECP@CryptoPP@@@CryptoPP@@QAE@AAVBufferedTransformation@1@@Z
??0?$DL_GroupParameters_EC@VECP@CryptoPP@@@CryptoPP@@QAE@ABV01@@Z
??0?$DL_GroupParameters_EC@VECP@CryptoPP@@@CryptoPP@@QAE@ABVECP@1@ABUECPPoint@1@ABVInteger@1@2@Z
??0?$DL_GroupParameters_EC@VECP@CryptoPP@@@CryptoPP@@QAE@ABVOID@1@@Z
??0?$DL_GroupParameters_EC@VECP@CryptoPP@@@CryptoPP@@QAE@XZ
??0?$DL_GroupParameters_IntegerBasedImpl@VModExpPrecomputation@CryptoPP@@V?$DL_FixedBasePrecomputationImpl@VInteger@CryptoPP@@@2@@CryptoPP@@QAE@ABV01@@Z
??0?$DL_GroupParameters_IntegerBasedImpl@VModExpPrecomputation@CryptoPP@@V?$DL_FixedBasePrecomputationImpl@VInteger@CryptoPP@@@2@@CryptoPP@@QAE@XZ
??0?$DL_GroupPrecomputation@UEC2NPoint@CryptoPP@@@CryptoPP@@QAE@ABV01@@Z
??0?$DL_GroupPrecomputation@UEC2NPoint@CryptoPP@@@CryptoPP@@QAE@XZ
??0?$DL_GroupPrecomputation@UECPPoint@CryptoPP@@@CryptoPP@@QAE@ABV01@@Z
??0?$DL_GroupPrecomputation@UECPPoint@CryptoPP@@@CryptoPP@@QAE@XZ
??0?$DL_Key@UEC2NPoint@CryptoPP@@@CryptoPP@@QAE@ABV01@@Z
??0?$DL_Key@UEC2NPoint@CryptoPP@@@CryptoPP@@QAE@XZ
??0?$DL_Key@UECPPoint@CryptoPP@@@CryptoPP@@QAE@ABV01@@Z
??0?$DL_Key@UECPPoint@CryptoPP@@@CryptoPP@@QAE@XZ
??0?$DL_Key@VInteger@CryptoPP@@@CryptoPP@@QAE@ABV01@@Z
??0?$DL_Key@VInteger@CryptoPP@@@CryptoPP@@QAE@XZ
??0?$DL_KeyImpl@VPKCS8PrivateKey@CryptoPP@@V?$DL_GroupParameters_EC@VEC2N@CryptoPP@@@2@VOID@2@@CryptoPP@@QAE@ABV01@@Z
??0?$DL_KeyImpl@VPKCS8PrivateKey@CryptoPP@@V?$DL_GroupParameters_EC@VEC2N@CryptoPP@@@2@VOID@2@@CryptoPP@@QAE@XZ
??0?$DL_KeyImpl@VPKCS8PrivateKey@CryptoPP@@V?$DL_GroupParameters_EC@VECP@CryptoPP@@@2@VOID@2@@CryptoPP@@QAE@ABV01@@Z
??0?$DL_KeyImpl@VPKCS8PrivateKey@CryptoPP@@V?$DL_GroupParameters_EC@VECP@CryptoPP@@@2@VOID@2@@CryptoPP@@QAE@XZ
??0?$DL_KeyImpl@VPKCS8PrivateKey@CryptoPP@@VDL_GroupParameters_DSA@2@VOID@2@@CryptoPP@@QAE@ABV01@@Z
??0?$DL_KeyImpl@VPKCS8PrivateKey@CryptoPP@@VDL_GroupParameters_DSA@2@VOID@2@@CryptoPP@@QAE@XZ
??0?$DL_KeyImpl@VX509PublicKey@CryptoPP@@V?$DL_GroupParameters_EC@VEC2N@CryptoPP@@@2@VOID@2@@CryptoPP@@QAE@ABV01@@Z
??0?$DL_KeyImpl@VX509PublicKey@CryptoPP@@V?$DL_GroupParameters_EC@VEC2N@CryptoPP@@@2@VOID@2@@CryptoPP@@QAE@XZ
??0?$DL_KeyImpl@VX509PublicKey@CryptoPP@@V?$DL_GroupParameters_EC@VECP@CryptoPP@@@2@VOID@2@@CryptoPP@@QAE@ABV01@@Z
??0?$DL_KeyImpl@VX509PublicKey@CryptoPP@@V?$DL_GroupParameters_EC@VECP@CryptoPP@@@2@VOID@2@@CryptoPP@@QAE@XZ
??0?$DL_KeyImpl@VX509PublicKey@CryptoPP@@VDL_GroupParameters_DSA@2@VOID@2@@CryptoPP@@QAE@ABV01@@Z
??0?$DL_KeyImpl@VX509PublicKey@CryptoPP@@VDL_GroupParameters_DSA@2@VOID@2@@CryptoPP@@QAE@XZ
??0?$DL_PrivateKey@UEC2NPoint@CryptoPP@@@CryptoPP@@QAE@ABV01@@Z
??0?$DL_PrivateKey@UEC2NPoint@CryptoPP@@@CryptoPP@@QAE@XZ
??0?$DL_PrivateKey@UECPPoint@CryptoPP@@@CryptoPP@@QAE@ABV01@@Z
??0?$DL_PrivateKey@UECPPoint@CryptoPP@@@CryptoPP@@QAE@XZ
??0?$DL_PrivateKey@VInteger@CryptoPP@@@CryptoPP@@QAE@ABV01@@Z
??0?$DL_PrivateKey@VInteger@CryptoPP@@@CryptoPP@@QAE@XZ
??0?$DL_PrivateKeyImpl@V?$DL_GroupParameters_EC@VEC2N@CryptoPP@@@CryptoPP@@@CryptoPP@@QAE@ABV01@@Z
??0?$DL_PrivateKeyImpl@V?$DL_GroupParameters_EC@VEC2N@CryptoPP@@@CryptoPP@@@CryptoPP@@QAE@XZ
??0?$DL_PrivateKeyImpl@V?$DL_GroupParameters_EC@VECP@CryptoPP@@@CryptoPP@@@CryptoPP@@QAE@ABV01@@Z
??0?$DL_PrivateKeyImpl@V?$DL_GroupParameters_EC@VECP@CryptoPP@@@CryptoPP@@@CryptoPP@@QAE@XZ
??0?$DL_PrivateKeyImpl@VDL_GroupParameters_DSA@CryptoPP@@@CryptoPP@@QAE@ABV01@@Z
??0?$DL_PrivateKeyImpl@VDL_GroupParameters_DSA@CryptoPP@@@CryptoPP@@QAE@XZ
??0?$DL_PrivateKey_EC@VEC2N@CryptoPP@@@CryptoPP@@QAE@ABV01@@Z
??0?$DL_PrivateKey_EC@VEC2N@CryptoPP@@@CryptoPP@@QAE@XZ
??0?$DL_PrivateKey_EC@VECP@CryptoPP@@@CryptoPP@@QAE@ABV01@@Z
??0?$DL_PrivateKey_EC@VECP@CryptoPP@@@CryptoPP@@QAE@XZ
??0?$DL_PrivateKey_GFP@VDL_GroupParameters_DSA@CryptoPP@@@CryptoPP@@QAE@ABV01@@Z
??0?$DL_PrivateKey_GFP@VDL_GroupParameters_DSA@CryptoPP@@@CryptoPP@@QAE@XZ
??0?$DL_PrivateKey_WithSignaturePairwiseConsistencyTest@V?$DL_PrivateKey_EC@VEC2N@CryptoPP@@@CryptoPP@@U?$ECDSA@VEC2N@CryptoPP@@VSHA1@2@@2@@CryptoPP@@QAE@ABV01@@Z
??0?$DL_PrivateKey_WithSignaturePairwiseConsistencyTest@V?$DL_PrivateKey_EC@VEC2N@CryptoPP@@@CryptoPP@@U?$ECDSA@VEC2N@CryptoPP@@VSHA1@2@@2@@CryptoPP@@QAE@XZ
??0?$DL_PrivateKey_WithSignaturePairwiseConsistencyTest@V?$DL_PrivateKey_EC@VECP@CryptoPP@@@CryptoPP@@U?$ECDSA@VECP@CryptoPP@@VSHA1@2@@2@@CryptoPP@@QAE@ABV01@@Z
??0?$DL_PrivateKey_WithSignaturePairwiseConsistencyTest@V?$DL_PrivateKey_EC@VECP@CryptoPP@@@CryptoPP@@U?$ECDSA@VECP@CryptoPP@@VSHA1@2@@2@@CryptoPP@@QAE@XZ
??0?$DL_PrivateKey_WithSignaturePairwiseConsistencyTest@V?$DL_PrivateKey_GFP@VDL_GroupParameters_DSA@CryptoPP@@@CryptoPP@@UDSA@2@@CryptoPP@@QAE@ABV01@@Z
??0?$DL_PrivateKey_WithSignaturePairwiseConsistencyTest@V?$DL_PrivateKey_GFP@VDL_GroupParameters_DSA@CryptoPP@@@CryptoPP@@UDSA@2@@CryptoPP@@QAE@XZ
??0?$DL_PublicKey@UEC2NPoint@CryptoPP@@@CryptoPP@@QAE@ABV01@@Z
??0?$DL_PublicKey@UEC2NPoint@CryptoPP@@@CryptoPP@@QAE@XZ
??0?$DL_PublicKey@UECPPoint@CryptoPP@@@CryptoPP@@QAE@ABV01@@Z
??0?$DL_PublicKey@UECPPoint@CryptoPP@@@CryptoPP@@QAE@XZ
??0?$DL_PublicKey@VInteger@CryptoPP@@@CryptoPP@@QAE@ABV01@@Z
??0?$DL_PublicKey@VInteger@CryptoPP@@@CryptoPP@@QAE@XZ
??0?$DL_PublicKeyImpl@V?$DL_GroupParameters_EC@VEC2N@CryptoPP@@@CryptoPP@@@CryptoPP@@QAE@ABV01@@Z
??0?$DL_PublicKeyImpl@V?$DL_GroupParameters_EC@VEC2N@CryptoPP@@@CryptoPP@@@CryptoPP@@QAE@XZ
??0?$DL_PublicKeyImpl@V?$DL_GroupParameters_EC@VECP@CryptoPP@@@CryptoPP@@@CryptoPP@@QAE@ABV01@@Z
??0?$DL_PublicKeyImpl@V?$DL_GroupParameters_EC@VECP@CryptoPP@@@CryptoPP@@@CryptoPP@@QAE@XZ
??0?$DL_PublicKeyImpl@VDL_GroupParameters_DSA@CryptoPP@@@CryptoPP@@QAE@ABV01@@Z
??0?$DL_PublicKeyImpl@VDL_GroupParameters_DSA@CryptoPP@@@CryptoPP@@QAE@XZ
??0?$DL_PublicKey_EC@VEC2N@CryptoPP@@@CryptoPP@@QAE@ABV01@@Z
??0?$DL_PublicKey_EC@VEC2N@CryptoPP@@@CryptoPP@@QAE@XZ
??0?$DL_PublicKey_EC@VECP@CryptoPP@@@CryptoPP@@QAE@ABV01@@Z
??0?$DL_PublicKey_EC@VECP@CryptoPP@@@CryptoPP@@QAE@XZ
??0?$DL_PublicKey_GFP@VDL_GroupParameters_DSA@CryptoPP@@@CryptoPP@@QAE@ABV01@@Z
??0?$DL_PublicKey_GFP@VDL_GroupParameters_DSA@CryptoPP@@@CryptoPP@@QAE@XZ
??0?$DL_SimpleKeyAgreementDomainBase@VInteger@CryptoPP@@@CryptoPP@@QAE@ABV01@@Z
??0?$DL_SimpleKeyAgreementDomainBase@VInteger@CryptoPP@@@CryptoPP@@QAE@XZ
??0?$EMSA2HashIdLookup@VPK_DeterministicSignatureMessageEncodingMethod@CryptoPP@@@CryptoPP@@QAE@ABV01@@Z
??0?$EMSA2HashIdLookup@VPK_DeterministicSignatureMessageEncodingMethod@CryptoPP@@@CryptoPP@@QAE@XZ
??0?$EuclideanDomainOf@VPolynomialMod2@CryptoPP@@@CryptoPP@@QAE@ABV01@@Z
??0?$EuclideanDomainOf@VPolynomialMod2@CryptoPP@@@CryptoPP@@QAE@XZ
??0?$InputRejecting@VBufferedTransformation@CryptoPP@@@CryptoPP@@QAE@ABV01@@Z
??0?$InputRejecting@VBufferedTransformation@CryptoPP@@@CryptoPP@@QAE@XZ
??0?$InputRejecting@VFilter@CryptoPP@@@CryptoPP@@QAE@XZ
??0?$IteratedHash@IU?$EnumToType@W4ByteOrder@CryptoPP@@$00@CryptoPP@@$0EA@VHashTransformation@2@@CryptoPP@@IAE@XZ
??0?$IteratedHash@IU?$EnumToType@W4ByteOrder@CryptoPP@@$00@CryptoPP@@$0EA@VHashTransformation@2@@CryptoPP@@QAE@ABV01@@Z
??0?$IteratedHash@_KU?$EnumToType@W4ByteOrder@CryptoPP@@$00@CryptoPP@@$0IA@VHashTransformation@2@@CryptoPP@@IAE@XZ
??0?$IteratedHash@_KU?$EnumToType@W4ByteOrder@CryptoPP@@$00@CryptoPP@@$0IA@VHashTransformation@2@@CryptoPP@@QAE@ABV01@@Z
??0?$IteratedHashBase@IVHashTransformation@CryptoPP@@@CryptoPP@@QAE@ABV01@@Z
??0?$IteratedHashBase@IVHashTransformation@CryptoPP@@@CryptoPP@@QAE@XZ
??0?$IteratedHashBase@_KVHashTransformation@CryptoPP@@@CryptoPP@@QAE@ABV01@@Z
??0?$IteratedHashBase@_KVHashTransformation@CryptoPP@@@CryptoPP@@QAE@XZ
??0?$IteratedHashWithStaticTransform@IU?$EnumToType@W4ByteOrder@CryptoPP@@$00@CryptoPP@@$0EA@$0BE@VSHA1@2@$0BE@@CryptoPP@@IAE@XZ
??0?$IteratedHashWithStaticTransform@IU?$EnumToType@W4ByteOrder@CryptoPP@@$00@CryptoPP@@$0EA@$0BE@VSHA1@2@$0BE@@CryptoPP@@QAE@ABV01@@Z
??0?$IteratedHashWithStaticTransform@IU?$EnumToType@W4ByteOrder@CryptoPP@@$00@CryptoPP@@$0EA@$0CA@VSHA224@2@$0BM@@CryptoPP@@IAE@XZ
??0?$IteratedHashWithStaticTransform@IU?$EnumToType@W4ByteOrder@CryptoPP@@$00@CryptoPP@@$0EA@$0CA@VSHA224@2@$0BM@@CryptoPP@@QAE@ABV01@@Z
??0?$IteratedHashWithStaticTransform@IU?$EnumToType@W4ByteOrder@CryptoPP@@$00@CryptoPP@@$0EA@$0CA@VSHA256@2@$0CA@@CryptoPP@@IAE@XZ
??0?$IteratedHashWithStaticTransform@IU?$EnumToType@W4ByteOrder@CryptoPP@@$00@CryptoPP@@$0EA@$0CA@VSHA256@2@$0CA@@CryptoPP@@QAE@ABV01@@Z
??0?$IteratedHashWithStaticTransform@_KU?$EnumToType@W4ByteOrder@CryptoPP@@$00@CryptoPP@@$0IA@$0EA@VSHA384@2@$0DA@@CryptoPP@@IAE@XZ
??0?$IteratedHashWithStaticTransform@_KU?$EnumToType@W4ByteOrder@CryptoPP@@$00@CryptoPP@@$0IA@$0EA@VSHA384@2@$0DA@@CryptoPP@@QAE@ABV01@@Z
??0?$IteratedHashWithStaticTransform@_KU?$EnumToType@W4ByteOrder@CryptoPP@@$00@CryptoPP@@$0IA@$0EA@VSHA512@2@$0EA@@CryptoPP@@IAE@XZ
??0?$IteratedHashWithStaticTransform@_KU?$EnumToType@W4ByteOrder@CryptoPP@@$00@CryptoPP@@$0IA@$0EA@VSHA512@2@$0EA@@CryptoPP@@QAE@ABV01@@Z
??0?$ModePolicyCommonTemplate@UAdditiveCipherAbstractPolicy@CryptoPP@@@CryptoPP@@QAE@ABV01@@Z
??0?$ModePolicyCommonTemplate@UAdditiveCipherAbstractPolicy@CryptoPP@@@CryptoPP@@QAE@XZ
??0?$ModePolicyCommonTemplate@VCFB_CipherAbstractPolicy@CryptoPP@@@CryptoPP@@QAE@ABV01@@Z
??0?$ModePolicyCommonTemplate@VCFB_CipherAbstractPolicy@CryptoPP@@@CryptoPP@@QAE@XZ
??0?$Multichannel@VFilter@CryptoPP@@@CryptoPP@@QAE@XZ
??0?$Multichannel@VSink@CryptoPP@@@CryptoPP@@QAE@ABV01@@Z
??0?$Multichannel@VSink@CryptoPP@@@CryptoPP@@QAE@XZ
??0?$OAEP@VSHA1@CryptoPP@@VP1363_MGF1@2@@CryptoPP@@QAE@ABV01@@Z
??0?$OAEP@VSHA1@CryptoPP@@VP1363_MGF1@2@@CryptoPP@@QAE@XZ
??0?$PK_FixedLengthCryptoSystemImpl@VPK_Decryptor@CryptoPP@@@CryptoPP@@QAE@ABV01@@Z
??0?$PK_FixedLengthCryptoSystemImpl@VPK_Decryptor@CryptoPP@@@CryptoPP@@QAE@XZ
??0?$PK_FixedLengthCryptoSystemImpl@VPK_Encryptor@CryptoPP@@@CryptoPP@@QAE@ABV01@@Z
??0?$PK_FixedLengthCryptoSystemImpl@VPK_Encryptor@CryptoPP@@@CryptoPP@@QAE@XZ
??0?$QuotientRing@V?$EuclideanDomainOf@VPolynomialMod2@CryptoPP@@@CryptoPP@@@CryptoPP@@QAE@ABV01@@Z
??0?$QuotientRing@V?$EuclideanDomainOf@VPolynomialMod2@CryptoPP@@@CryptoPP@@@CryptoPP@@QAE@ABV?$EuclideanDomainOf@VPolynomialMod2@CryptoPP@@@1@ABVPolynomialMod2@1@@Z
??0?$SimpleKeyedTransformation@VBlockTransformation@CryptoPP@@@CryptoPP@@QAE@ABV01@@Z
??0?$SimpleKeyedTransformation@VBlockTransformation@CryptoPP@@@CryptoPP@@QAE@XZ
??0?$SimpleKeyedTransformation@VHashTransformation@CryptoPP@@@CryptoPP@@QAE@ABV01@@Z
??0?$SimpleKeyedTransformation@VHashTransformation@CryptoPP@@@CryptoPP@@QAE@XZ
??0?$SimpleKeyedTransformation@VStreamTransformation@CryptoPP@@@CryptoPP@@QAE@ABV01@@Z
??0?$SimpleKeyedTransformation@VStreamTransformation@CryptoPP@@@CryptoPP@@QAE@XZ
??0?$SimpleKeyingInterfaceImpl@V?$TwoBases@V?$SimpleKeyedTransformation@VBlockTransformation@CryptoPP@@@CryptoPP@@UDES_EDE2_Info@2@@CryptoPP@@V12@@CryptoPP@@QAE@ABV01@@Z
??0?$SimpleKeyingInterfaceImpl@V?$TwoBases@V?$SimpleKeyedTransformation@VBlockTransformation@CryptoPP@@@CryptoPP@@UDES_EDE2_Info@2@@CryptoPP@@V12@@CryptoPP@@QAE@XZ
??0?$SimpleKeyingInterfaceImpl@V?$TwoBases@V?$SimpleKeyedTransformation@VBlockTransformation@CryptoPP@@@CryptoPP@@UDES_EDE3_Info@2@@CryptoPP@@V12@@CryptoPP@@QAE@ABV01@@Z
??0?$SimpleKeyingInterfaceImpl@V?$TwoBases@V?$SimpleKeyedTransformation@VBlockTransformation@CryptoPP@@@CryptoPP@@UDES_EDE3_Info@2@@CryptoPP@@V12@@CryptoPP@@QAE@XZ
??0?$SimpleKeyingInterfaceImpl@V?$TwoBases@V?$SimpleKeyedTransformation@VBlockTransformation@CryptoPP@@@CryptoPP@@URijndael_Info@2@@CryptoPP@@V12@@CryptoPP@@QAE@ABV01@@Z
??0?$SimpleKeyingInterfaceImpl@V?$TwoBases@V?$SimpleKeyedTransformation@VBlockTransformation@CryptoPP@@@CryptoPP@@URijndael_Info@2@@CryptoPP@@V12@@CryptoPP@@QAE@XZ
??0?$SimpleKeyingInterfaceImpl@V?$TwoBases@V?$SimpleKeyedTransformation@VBlockTransformation@CryptoPP@@@CryptoPP@@USKIPJACK_Info@2@@CryptoPP@@V12@@CryptoPP@@QAE@ABV01@@Z
??0?$SimpleKeyingInterfaceImpl@V?$TwoBases@V?$SimpleKeyedTransformation@VBlockTransformation@CryptoPP@@@CryptoPP@@USKIPJACK_Info@2@@CryptoPP@@V12@@CryptoPP@@QAE@XZ
??0?$SourceTemplate@VFileStore@CryptoPP@@@CryptoPP@@QAE@PAVBufferedTransformation@1@@Z
??0?$SourceTemplate@VRandomNumberStore@CryptoPP@@@CryptoPP@@QAE@PAVBufferedTransformation@1@@Z
??0?$SourceTemplate@VStringStore@CryptoPP@@@CryptoPP@@QAE@PAVBufferedTransformation@1@@Z
??0?$StringSinkTemplate@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@CryptoPP@@QAE@AAV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
??0?$StringSinkTemplate@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@CryptoPP@@QAE@ABV01@@Z
??0?$TF_Base@VRandomizedTrapdoorFunction@CryptoPP@@VPK_EncryptionMessageEncodingMethod@2@@CryptoPP@@QAE@ABV01@@Z
??0?$TF_Base@VRandomizedTrapdoorFunction@CryptoPP@@VPK_EncryptionMessageEncodingMethod@2@@CryptoPP@@QAE@XZ
??0?$TF_Base@VRandomizedTrapdoorFunctionInverse@CryptoPP@@VPK_SignatureMessageEncodingMethod@2@@CryptoPP@@QAE@ABV01@@Z
??0?$TF_Base@VRandomizedTrapdoorFunctionInverse@CryptoPP@@VPK_SignatureMessageEncodingMethod@2@@CryptoPP@@QAE@XZ
??0?$TF_Base@VTrapdoorFunction@CryptoPP@@VPK_SignatureMessageEncodingMethod@2@@CryptoPP@@QAE@ABV01@@Z
??0?$TF_Base@VTrapdoorFunction@CryptoPP@@VPK_SignatureMessageEncodingMethod@2@@CryptoPP@@QAE@XZ
??0?$TF_Base@VTrapdoorFunctionInverse@CryptoPP@@VPK_EncryptionMessageEncodingMethod@2@@CryptoPP@@QAE@ABV01@@Z
??0?$TF_Base@VTrapdoorFunctionInverse@CryptoPP@@VPK_EncryptionMessageEncodingMethod@2@@CryptoPP@@QAE@XZ
??0?$TF_CryptoSystemBase@VPK_Decryptor@CryptoPP@@V?$TF_Base@VTrapdoorFunctionInverse@CryptoPP@@VPK_EncryptionMessageEncodingMethod@2@@2@@CryptoPP@@QAE@ABV01@@Z
??0?$TF_CryptoSystemBase@VPK_Decryptor@CryptoPP@@V?$TF_Base@VTrapdoorFunctionInverse@CryptoPP@@VPK_EncryptionMessageEncodingMethod@2@@2@@CryptoPP@@QAE@XZ
??0?$TF_CryptoSystemBase@VPK_Encryptor@CryptoPP@@V?$TF_Base@VRandomizedTrapdoorFunction@CryptoPP@@VPK_EncryptionMessageEncodingMethod@2@@2@@CryptoPP@@QAE@ABV01@@Z
??0?$TF_CryptoSystemBase@VPK_Encryptor@CryptoPP@@V?$TF_Base@VRandomizedTrapdoorFunction@CryptoPP@@VPK_EncryptionMessageEncodingMethod@2@@2@@CryptoPP@@QAE@XZ
??0?$TF_SignatureSchemeBase@VPK_Signer@CryptoPP@@V?$TF_Base@VRandomizedTrapdoorFunctionInverse@CryptoPP@@VPK_SignatureMessageEncodingMethod@2@@2@@CryptoPP@@QAE@ABV01@@Z
??0?$TF_SignatureSchemeBase@VPK_Signer@CryptoPP@@V?$TF_Base@VRandomizedTrapdoorFunctionInverse@CryptoPP@@VPK_SignatureMessageEncodingMethod@2@@2@@CryptoPP@@QAE@XZ
??0?$TF_SignatureSchemeBase@VPK_Verifier@CryptoPP@@V?$TF_Base@VTrapdoorFunction@CryptoPP@@VPK_SignatureMessageEncodingMethod@2@@2@@CryptoPP@@QAE@ABV01@@Z
??0?$TF_SignatureSchemeBase@VPK_Verifier@CryptoPP@@V?$TF_Base@VTrapdoorFunction@CryptoPP@@VPK_SignatureMessageEncodingMethod@2@@2@@CryptoPP@@QAE@XZ
??0?$TwoBases@V?$SimpleKeyedTransformation@VBlockTransformation@CryptoPP@@@CryptoPP@@UDES_EDE2_Info@2@@CryptoPP@@QAE@ABV01@@Z
??0?$TwoBases@V?$SimpleKeyedTransformation@VBlockTransformation@CryptoPP@@@CryptoPP@@UDES_EDE2_Info@2@@CryptoPP@@QAE@XZ
??0?$TwoBases@V?$SimpleKeyedTransformation@VBlockTransformation@CryptoPP@@@CryptoPP@@UDES_EDE3_Info@2@@CryptoPP@@QAE@ABV01@@Z
??0?$TwoBases@V?$SimpleKeyedTransformation@VBlockTransformation@CryptoPP@@@CryptoPP@@UDES_EDE3_Info@2@@CryptoPP@@QAE@XZ
??0?$TwoBases@V?$SimpleKeyedTransformation@VBlockTransformation@CryptoPP@@@CryptoPP@@URijndael_Info@2@@CryptoPP@@QAE@ABV01@@Z
??0?$TwoBases@V?$SimpleKeyedTransformation@VBlockTransformation@CryptoPP@@@CryptoPP@@URijndael_Info@2@@CryptoPP@@QAE@XZ
??0?$TwoBases@V?$SimpleKeyedTransformation@VBlockTransformation@CryptoPP@@@CryptoPP@@USKIPJACK_Info@2@@CryptoPP@@QAE@ABV01@@Z
??0?$TwoBases@V?$SimpleKeyedTransformation@VBlockTransformation@CryptoPP@@@CryptoPP@@USKIPJACK_Info@2@@CryptoPP@@QAE@XZ
??0?$TwoBases@V?$SimpleKeyedTransformation@VStreamTransformation@CryptoPP@@@CryptoPP@@VRandomNumberGenerator@2@@CryptoPP@@QAE@ABV01@@Z
??0?$TwoBases@V?$SimpleKeyedTransformation@VStreamTransformation@CryptoPP@@@CryptoPP@@VRandomNumberGenerator@2@@CryptoPP@@QAE@XZ
??0?$Unflushable@V?$Multichannel@VFilter@CryptoPP@@@CryptoPP@@@CryptoPP@@QAE@XZ
??0?$Unflushable@VFilter@CryptoPP@@@CryptoPP@@QAE@XZ
??0ASN1CryptoMaterial@CryptoPP@@QAE@ABV01@@Z
??0ASN1CryptoMaterial@CryptoPP@@QAE@XZ
??0ASN1Key@CryptoPP@@QAE@ABV01@@Z
??0ASN1Key@CryptoPP@@QAE@XZ
??0ASN1Object@CryptoPP@@QAE@ABV01@@Z
??0ASN1Object@CryptoPP@@QAE@XZ
??0AdditiveCipherAbstractPolicy@CryptoPP@@QAE@ABU01@@Z
??0AdditiveCipherAbstractPolicy@CryptoPP@@QAE@XZ
??0Algorithm@CryptoPP@@QAE@ABV01@@Z
??0Algorithm@CryptoPP@@QAE@_N@Z
??0AlgorithmParametersBase@CryptoPP@@QAE@ABV01@@Z
??0AlgorithmParametersBase@CryptoPP@@QAE@PBD_N@Z
??0ArraySink@CryptoPP@@QAE@ABV01@@Z
??0ArraySink@CryptoPP@@QAE@ABVNameValuePairs@1@@Z
??0ArraySink@CryptoPP@@QAE@PAEI@Z
??0ArrayXorSink@CryptoPP@@QAE@ABV01@@Z
??0ArrayXorSink@CryptoPP@@QAE@PAEI@Z
??0AsymmetricAlgorithm@CryptoPP@@QAE@ABV01@@Z
??0AsymmetricAlgorithm@CryptoPP@@QAE@XZ
??0AuthenticatedKeyAgreementDomain@CryptoPP@@QAE@ABV01@@Z
??0AuthenticatedKeyAgreementDomain@CryptoPP@@QAE@XZ
??0AutoSeededRandomPool@CryptoPP@@QAE@ABV01@@Z
??0AutoSeededRandomPool@CryptoPP@@QAE@_NI@Z
??0BERDecodeErr@CryptoPP@@QAE@ABV01@@Z
??0BERDecodeErr@CryptoPP@@QAE@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
??0BERDecodeErr@CryptoPP@@QAE@XZ
??0BERGeneralDecoder@CryptoPP@@QAE@AAV01@E@Z
??0BERGeneralDecoder@CryptoPP@@QAE@AAVBufferedTransformation@1@E@Z
??0BERGeneralDecoder@CryptoPP@@QAE@ABV01@@Z
??0BERSequenceDecoder@CryptoPP@@QAE@AAV01@E@Z
??0BERSequenceDecoder@CryptoPP@@QAE@AAVBufferedTransformation@1@E@Z
??0BERSetDecoder@CryptoPP@@QAE@AAV01@E@Z
??0BERSetDecoder@CryptoPP@@QAE@AAVBufferedTransformation@1@E@Z
??0Base@DES_EDE2@CryptoPP@@QAE@ABV012@@Z
??0Base@DES_EDE2@CryptoPP@@QAE@XZ
??0Base@DES_EDE3@CryptoPP@@QAE@ABV012@@Z
??0Base@DES_EDE3@CryptoPP@@QAE@XZ
??0Base@Rijndael@CryptoPP@@QAE@ABV012@@Z
??0Base@Rijndael@CryptoPP@@QAE@XZ
??0Base@SKIPJACK@CryptoPP@@QAE@ABV012@@Z
??0Base@SKIPJACK@CryptoPP@@QAE@XZ
??0BaseN_Decoder@CryptoPP@@QAE@PAVBufferedTransformation@1@@Z
??0BaseN_Decoder@CryptoPP@@QAE@PBHHPAVBufferedTransformation@1@@Z
??0BaseN_Encoder@CryptoPP@@QAE@PAVBufferedTransformation@1@@Z
??0BaseN_Encoder@CryptoPP@@QAE@PBEHPAVBufferedTransformation@1@H@Z
??0BitBucket@CryptoPP@@QAE@ABV01@@Z
??0BitBucket@CryptoPP@@QAE@XZ
??0BlockOrientedCipherModeBase@CryptoPP@@QAE@ABV01@@Z
??0BlockOrientedCipherModeBase@CryptoPP@@QAE@XZ
??0BlockTransformation@CryptoPP@@QAE@ABV01@@Z
??0BlockTransformation@CryptoPP@@QAE@XZ
??0BufferedTransformation@CryptoPP@@QAE@ABV01@@Z
??0BufferedTransformation@CryptoPP@@QAE@XZ
??0ByteQueue@CryptoPP@@QAE@ABV01@@Z
??0ByteQueue@CryptoPP@@QAE@I@Z
??0CBC_CTS_Decryption@CryptoPP@@QAE@ABV01@@Z
??0CBC_CTS_Decryption@CryptoPP@@QAE@XZ
??0CBC_CTS_Encryption@CryptoPP@@QAE@ABV01@@Z
??0CBC_CTS_Encryption@CryptoPP@@QAE@XZ
??0CBC_Decryption@CryptoPP@@QAE@ABV01@@Z
??0CBC_Decryption@CryptoPP@@QAE@XZ
??0CBC_Encryption@CryptoPP@@QAE@ABV01@@Z
??0CBC_Encryption@CryptoPP@@QAE@XZ
??0CBC_MAC_Base@CryptoPP@@QAE@ABV01@@Z
??0CBC_MAC_Base@CryptoPP@@QAE@XZ
??0CBC_ModeBase@CryptoPP@@QAE@ABV01@@Z
??0CBC_ModeBase@CryptoPP@@QAE@XZ
??0CFB_CipherAbstractPolicy@CryptoPP@@QAE@ABV01@@Z
??0CFB_CipherAbstractPolicy@CryptoPP@@QAE@XZ
??0CFB_ModePolicy@CryptoPP@@QAE@ABV01@@Z
??0CFB_ModePolicy@CryptoPP@@QAE@XZ
??0CTR_ModePolicy@CryptoPP@@QAE@ABV01@@Z
??0CTR_ModePolicy@CryptoPP@@QAE@XZ
??0CannotFlush@CryptoPP@@QAE@ABV01@@Z
??0CannotFlush@CryptoPP@@QAE@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
??0ChannelSwitch@CryptoPP@@QAE@AAVBufferedTransformation@1@@Z
??0ChannelSwitch@CryptoPP@@QAE@AAVBufferedTransformation@1@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
??0ChannelSwitch@CryptoPP@@QAE@ABV01@@Z
??0ChannelSwitch@CryptoPP@@QAE@XZ
??0CipherModeBase@CryptoPP@@QAE@ABV01@@Z
??0CipherModeBase@CryptoPP@@QAE@XZ
??0Clonable@CryptoPP@@QAE@ABV01@@Z
??0Clonable@CryptoPP@@QAE@XZ
??0CombinedNameValuePairs@CryptoPP@@QAE@ABV01@@Z
??0CombinedNameValuePairs@CryptoPP@@QAE@ABVNameValuePairs@1@0@Z
??0CryptoMaterial@CryptoPP@@QAE@ABV01@@Z
??0CryptoMaterial@CryptoPP@@QAE@XZ
??0CryptoParameters@CryptoPP@@QAE@ABV01@@Z
??0CryptoParameters@CryptoPP@@QAE@XZ
??0DERGeneralEncoder@CryptoPP@@QAE@AAV01@E@Z
??0DERGeneralEncoder@CryptoPP@@QAE@AAVBufferedTransformation@1@E@Z
??0DERSequenceEncoder@CryptoPP@@QAE@AAV01@E@Z
??0DERSequenceEncoder@CryptoPP@@QAE@AAVBufferedTransformation@1@E@Z
??0DERSetEncoder@CryptoPP@@QAE@AAV01@E@Z
??0DERSetEncoder@CryptoPP@@QAE@AAVBufferedTransformation@1@E@Z
??0DL_GroupParameters_DSA@CryptoPP@@QAE@ABV01@@Z
??0DL_GroupParameters_DSA@CryptoPP@@QAE@XZ
??0DL_GroupParameters_GFP@CryptoPP@@QAE@ABV01@@Z
??0DL_GroupParameters_GFP@CryptoPP@@QAE@XZ
??0DL_GroupParameters_GFP_DefaultSafePrime@CryptoPP@@QAE@ABV01@@Z
??0DL_GroupParameters_GFP_DefaultSafePrime@CryptoPP@@QAE@XZ
??0DL_GroupParameters_IntegerBased@CryptoPP@@QAE@ABV01@@Z
??0DL_GroupParameters_IntegerBased@CryptoPP@@QAE@XZ
??0DL_SignatureMessageEncodingMethod_DSA@CryptoPP@@QAE@ABV01@@Z
??0DL_SignatureMessageEncodingMethod_DSA@CryptoPP@@QAE@XZ
??0DL_SignatureMessageEncodingMethod_NR@CryptoPP@@QAE@ABV01@@Z
??0DL_SignatureMessageEncodingMethod_NR@CryptoPP@@QAE@XZ
??0Dec@Rijndael@CryptoPP@@QAE@ABV012@@Z
??0Dec@Rijndael@CryptoPP@@QAE@XZ
??0Dec@SKIPJACK@CryptoPP@@QAE@ABV012@@Z
??0Dec@SKIPJACK@CryptoPP@@QAE@XZ
??0DecodingResult@CryptoPP@@QAE@I@Z
??0DecodingResult@CryptoPP@@QAE@XZ
??0EC2N@CryptoPP@@QAE@AAVBufferedTransformation@1@@Z
??0EC2N@CryptoPP@@QAE@ABV01@@Z
??0EC2N@CryptoPP@@QAE@ABVGF2NP@1@ABVPolynomialMod2@1@1@Z
??0EC2N@CryptoPP@@QAE@XZ
??0EC2NPoint@CryptoPP@@QAE@ABU01@@Z
??0EC2NPoint@CryptoPP@@QAE@ABVPolynomialMod2@1@0@Z
??0EC2NPoint@CryptoPP@@QAE@XZ
??0ECB_OneWay@CryptoPP@@QAE@ABV01@@Z
??0ECB_OneWay@CryptoPP@@QAE@XZ
??0ECP@CryptoPP@@QAE@AAVBufferedTransformation@1@@Z
??0ECP@CryptoPP@@QAE@ABV01@_N@Z
??0ECP@CryptoPP@@QAE@ABVInteger@1@00@Z
??0ECP@CryptoPP@@QAE@XZ
??0ECPPoint@CryptoPP@@QAE@ABU01@@Z
??0ECPPoint@CryptoPP@@QAE@ABVInteger@1@0@Z
??0ECPPoint@CryptoPP@@QAE@XZ
??0EMSA2Pad@CryptoPP@@QAE@ABV01@@Z
??0EMSA2Pad@CryptoPP@@QAE@XZ
??0Enc@Rijndael@CryptoPP@@QAE@ABV012@@Z
??0Enc@Rijndael@CryptoPP@@QAE@XZ
??0Enc@SKIPJACK@CryptoPP@@QAE@ABV012@@Z
??0Enc@SKIPJACK@CryptoPP@@QAE@XZ
??0EqualityComparisonFilter@CryptoPP@@QAE@PAVBufferedTransformation@1@_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2@Z
??0Exception@CryptoPP@@QAE@ABV01@@Z
??0Exception@CryptoPP@@QAE@W4ErrorType@01@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
??0FileSink@CryptoPP@@QAE@AAV?$basic_ostream@DU?$char_traits@D@std@@@std@@@Z
??0FileSink@CryptoPP@@QAE@PBD_N@Z
??0FileSink@CryptoPP@@QAE@XZ
??0FileSource@CryptoPP@@QAE@AAV?$basic_istream@DU?$char_traits@D@std@@@std@@_NPAVBufferedTransformation@1@@Z
??0FileSource@CryptoPP@@QAE@PAVBufferedTransformation@1@@Z
??0FileSource@CryptoPP@@QAE@PBD_NPAVBufferedTransformation@1@1@Z
??0FileStore@CryptoPP@@QAE@AAV?$basic_istream@DU?$char_traits@D@std@@@std@@@Z
??0FileStore@CryptoPP@@QAE@PBD@Z
??0FileStore@CryptoPP@@QAE@XZ
??0Filter@CryptoPP@@QAE@PAVBufferedTransformation@1@@Z
??0FilterPutSpaceHelper@CryptoPP@@QAE@ABU01@@Z
??0FilterPutSpaceHelper@CryptoPP@@QAE@XZ
??0FilterWithBufferedInput@CryptoPP@@QAE@IIIPAVBufferedTransformation@1@@Z
??0FilterWithBufferedInput@CryptoPP@@QAE@PAVBufferedTransformation@1@@Z
??0FilterWithInputQueue@CryptoPP@@QAE@PAVBufferedTransformation@1@@Z
??0GF2NP@CryptoPP@@QAE@ABV01@@Z
??0GF2NP@CryptoPP@@QAE@ABVPolynomialMod2@1@@Z
??0GF2NPP@CryptoPP@@QAE@ABV01@@Z
??0GF2NPP@CryptoPP@@QAE@IIIII@Z
??0GF2NT@CryptoPP@@QAE@ABV01@@Z
??0GF2NT@CryptoPP@@QAE@III@Z
??0GeneratableCryptoMaterial@CryptoPP@@QAE@ABV01@@Z
??0GeneratableCryptoMaterial@CryptoPP@@QAE@XZ
??0Grouper@CryptoPP@@QAE@HABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@0PAVBufferedTransformation@1@@Z
??0Grouper@CryptoPP@@QAE@PAVBufferedTransformation@1@@Z
??0HMAC_Base@CryptoPP@@QAE@ABV01@@Z
??0HMAC_Base@CryptoPP@@QAE@XZ
??0HashFilter@CryptoPP@@QAE@AAVHashTransformation@1@PAVBufferedTransformation@1@_NH@Z
??0HashInputTooLong@CryptoPP@@QAE@ABV01@@Z
??0HashInputTooLong@CryptoPP@@QAE@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
??0HashTransformation@CryptoPP@@QAE@ABV01@@Z
??0HashTransformation@CryptoPP@@QAE@XZ
??0HashVerificationFilter@CryptoPP@@QAE@AAVHashTransformation@1@PAVBufferedTransformation@1@I@Z
??0HexDecoder@CryptoPP@@QAE@PAVBufferedTransformation@1@@Z
??0HexEncoder@CryptoPP@@QAE@PAVBufferedTransformation@1@_NHABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2@Z
??0Integer@CryptoPP@@AAE@II@Z
??0Integer@CryptoPP@@QAE@AAVBufferedTransformation@1@@Z
??0Integer@CryptoPP@@QAE@AAVBufferedTransformation@1@IW4Signedness@01@@Z
??0Integer@CryptoPP@@QAE@AAVRandomNumberGenerator@1@ABV01@1W4RandomNumberType@01@11@Z
??0Integer@CryptoPP@@QAE@AAVRandomNumberGenerator@1@I@Z
??0Integer@CryptoPP@@QAE@ABV01@@Z
??0Integer@CryptoPP@@QAE@J@Z

Sections

.text
Size: 548KB - Virtual size: 546KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 556KB - Virtual size: 553KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 64KB - Virtual size: 71KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 68KB - Virtual size: 65KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
All Files/Assets/Backup/fullware.dll
.dll windows:5 windows x64 arch:x64

102189c70f88ab5bc50aff1219eadbea

Code Sign

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

21-12-2012 00:00

Not After

30-12-2020 23:59

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

18-10-2012 00:00

Not After

29-12-2020 23:59

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

6c:59:ef:a9:e1:00:e1:0e:e3:06:ba:8f:e0:29:25:59
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

07-06-2012 00:00

Not After

06-06-2022 23:59

Subject

CN=Symantec Class 3 Extended Validation Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

35:a8:4f:a5:03:f8:9b:49:83:96:bb:48:91:68:a5:80
Certificate

Issuer

CN=Symantec Class 3 Extended Validation Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Not Before

14-01-2014 00:00

Not After

07-01-2016 23:59

Subject

SERIALNUMBER=2748129,CN=Adobe Systems Incorporated,OU=Photoshop\, Bridge - SHA256,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130844656c6177617265,1.3.6.1.4.1.311.60.2.1.3=#13025553

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

20:b9:3d:43:59:ff:c2:d6:82:e9:ea:e1:34:7d:29:9f:68:be:57:79
Signer

Actual PE Digest

20:b9:3d:43:59:ff:c2:d6:82:e9:ea:e1:34:7d:29:9f:68:be:57:79

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

E:\bslave-ngproducts\builddir\build\mc_adobe_sdk_dbginfo_win64_x64_release\mc_enc_mpa.pdb

Imports

kernel32

GetLastError
HeapFree
HeapAlloc
GetCurrentThreadId
FlsSetValue
GetCommandLineA
EncodePointer
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
HeapSetInformation
GetVersion
HeapCreate
HeapDestroy
GetProcAddress
GetModuleHandleW
ExitProcess
DecodePointer
WriteFile
GetStdHandle
GetModuleFileNameW
RtlUnwindEx
FlsGetValue
FlsFree
SetLastError
FlsAlloc
Sleep
SetHandleCount
InitializeCriticalSectionAndSpinCount
GetFileType
GetStartupInfoW
DeleteCriticalSection
GetModuleFileNameA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
LeaveCriticalSection
EnterCriticalSection
LoadLibraryW
RaiseException
HeapReAlloc
LCMapStringW
MultiByteToWideChar
GetStringTypeW
HeapSize

Exports

Exports

mpegOutAudioCheckFirst
mpegOutAudioCheckNext
mpegOutAudioCheckSettings
mpegOutAudioChkSettings
mpegOutAudioDefaults
mpegOutAudioDone
mpegOutAudioFree
mpegOutAudioGetAPIExt
mpegOutAudioGetLastErrString
mpegOutAudioInit
mpegOutAudioNew
mpegOutAudioPutBytes

Sections

.text
Size: 86KB - Virtual size: 86KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 19KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 111KB - Virtual size: 115KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

text
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE

data
Size: 25KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
All Files/Assets/Backup/izanptp
.exe windows:6 windows x86 arch:x86

a7e73ef2207e9ee97c678506145e1258

Code Sign

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

21-12-2012 00:00

Not After

30-12-2020 23:59

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

18-10-2012 00:00

Not After

29-12-2020 23:59

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

4f:be:0a:02:42:6e:bd:20:c2:62:44:b5:ec:a6:52:a3
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Not Before

09-07-2018 00:00

Not After

10-07-2019 23:59

Subject

CN=NVIDIA Corporation,OU=IT-MIS,O=NVIDIA Corporation,L=Santa Clara,ST=California,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

61:19:93:e4:00:00:00:00:00:1c
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

22-02-2011 19:25

Not After

22-02-2021 19:35

Subject

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

08-02-2010 00:00

Not After

07-02-2020 23:59

Subject

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

62:e7:45:e9:21:65:21:3c:97:1f:5c:49:0a:ea:12:a5
Certificate

Issuer

CN=Symantec Class 3 SHA256 Code Signing CA - G2,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Not Before

09-07-2018 00:00

Not After

09-07-2021 23:59

Subject

CN=NVIDIA Corporation,OU=IT-MIS,O=NVIDIA Corporation,L=Santa Clara,ST=California,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

7c:1b:35:35:4a:e7:db:74:e7:41:5f:11:69:ca:6b:a8
Certificate

Issuer

CN=VeriSign Universal Root Certification Authority,OU=VeriSign Trust Network+OU=(c) 2008 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

22-07-2014 00:00

Not After

21-07-2024 23:59

Subject

CN=Symantec Class 3 SHA256 Code Signing CA - G2,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

61:2d:23:cb:00:00:00:00:00:21
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

22-02-2011 19:46

Not After

22-02-2021 19:56

Subject

CN=VeriSign Universal Root Certification Authority,OU=VeriSign Trust Network+OU=(c) 2008 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

7b:05:b1:d4:49:68:51:44:f7:c9:89:d2:9c:19:9d:12
Certificate

Issuer

CN=VeriSign Universal Root Certification Authority,OU=VeriSign Trust Network+OU=(c) 2008 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

12-01-2016 00:00

Not After

11-01-2031 23:59

Subject

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

7b:d4:e5:af:ba:cc:07:3f:a1:01:23:04:22:41:4d:12
Certificate

Issuer

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Not Before

23-12-2017 00:00

Not After

22-03-2029 23:59

Subject

CN=Symantec SHA256 TimeStamping Signer - G3,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

54:cb:ab:94:75:80:97:ed:a8:bb:b7:bd:5b:5f:9b:d9:c4:b8:e5:05:1b:74:5b:83:60:86:a9:f7:ca:58:97:d7
Signer

Actual PE Digest

54:cb:ab:94:75:80:97:ed:a8:bb:b7:bd:5b:5f:9b:d9:c4:b8:e5:05:1b:74:5b:83:60:86:a9:f7:ca:58:97:d7

Digest Algorithm

sha256

PE Digest Matches

true

7f:01:56:fd:7c:3f:56:65:ab:41:e1:66:0d:22:36:1d:f4:00:d1:24
Signer

Actual PE Digest

7f:01:56:fd:7c:3f:56:65:ab:41:e1:66:0d:22:36:1d:f4:00:d1:24

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\dvs\p4\build\sw\rel\gpu_drv\r415\r415_00\drivers\stereo_vision\Apps\GeForce3DVisionSetupWizard\release\NvStWiz.pdb

Imports

user32

GetDesktopWindow
PostQuitMessage
GetUserObjectInformationW
SetCursor
LoadCursorW
TranslateMessage
OpenInputDesktop
ValidateRect
PeekMessageW
EnumDisplaySettingsExW
DestroyIcon
EnumDisplaySettingsW
CloseDesktop
ChangeDisplaySettingsW
ShowWindow
DestroyCursor
RegisterClassExW
SendMessageW
CreateWindowExW
MessageBoxW
DestroyWindow
DefWindowProcW
ChangeDisplaySettingsExW
UpdateWindow
LoadImageW
SetCursorPos
DispatchMessageW
GetCursorPos

shell32

SHGetFolderPathW
ShellExecuteW
SHGetKnownFolderPath

ole32

CoTaskMemFree
CreateStreamOnHGlobal
CoCreateInstance
CoUninitialize
CoInitialize

d3d9

Direct3DCreate9

d3d10

D3D10CreateDevice

gdiplus

GdipLoadImageFromStream
GdipSetStringFormatFlags
GdipGetImageWidth
GdipSetStringFormatAlign
GdiplusStartup
GdipCreatePen1
GdipCreateStringFormat
GdipDeleteFontFamily
GdipGetImageHeight
GdipSetImageAttributesColorMatrix
GdipDeleteFont
GdipSetCompositingMode
GdipDeleteStringFormat
GdipDeleteGraphics
GdiplusShutdown
GdipMeasureString
GdipCloneBrush
GdipSetTextRenderingHint
GdipCreateFromHDC
GdipDrawString
GdipFree
GdipGetGenericFontFamilySansSerif
GdipCreateImageAttributes
GdipDrawLine
GdipCreateSolidFill
GdipCreateFont
GdipDisposeImage
GdipDisposeImageAttributes
GdipDrawImageRectI
GdipAlloc
GdipDeleteBrush
GdipCloneImage
GdipDrawImageRectRect
GdipCreateFontFamilyFromName
GdipDeletePen

kernel32

GetConsoleCP
FlushFileBuffers
SetStdHandle
GetProcessHeap
LCMapStringW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCPInfo
GetOEMCP
IsValidCodePage
FindNextFileA
FindFirstFileExA
GetStringTypeW
GetFileType
HeapAlloc
HeapFree
GetACP
WriteFile
GetStdHandle
HeapSize
MultiByteToWideChar
GetModuleFileNameA
GetModuleHandleExW
ExitProcess
GetCommandLineW
GetCommandLineA
EncodePointer
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
InitializeCriticalSectionAndSpinCount
RaiseException
RtlUnwind
InitializeSListHead
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
GetStartupInfoW
IsDebuggerPresent
IsProcessorFeaturePresent
TerminateProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
WaitForSingleObjectEx
ResetEvent
SetEvent
GetConsoleMode
HeapReAlloc
SetFilePointerEx
SetEndOfFile
ReadFile
ReadConsoleW
DecodePointer
WideCharToMultiByte
SizeofResource
FindFirstFileW
GetSystemDefaultLCID
FindNextFileW
lstrcpynW
GetThreadLocale
GetUserDefaultUILanguage
GetTempPathW
FindClose
GetLocaleInfoW
GetFileAttributesW
GetVersionExW
GetSystemDirectoryW
FreeResource
CreateEventW
Sleep
GetLastError
LockResource
GlobalAlloc
GlobalFree
CloseHandle
LoadLibraryW
FindResourceExW
LoadResource
FindResourceW
GetProcAddress
GlobalLock
WriteConsoleW
FreeLibrary
lstrcmpiW
GlobalUnlock
LoadLibraryExW
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
VerSetConditionMask
ExpandEnvironmentStringsW
CreateFileW
GetFullPathNameW
SetLastError
GetCurrentProcess
GetModuleHandleA
LocalAlloc
LocalFree
lstrcmpW
VerifyVersionInfoW
GetModuleHandleW

advapi32

RegQueryValueExW
RegOpenKeyExA
InitializeSecurityDescriptor
RegSetValueExA
RegQueryValueExA
RegCloseKey
SetSecurityDescriptorDacl
RegOpenKeyExW

Sections

.text
Size: 182KB - Virtual size: 182KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 62KB - Virtual size: 62KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 152KB - Virtual size: 151KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 15KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
All Files/Assets/Data/017.phpt
.js
All Files/Assets/Data/EppManifest.dll
.dll windows:10 windows x64 arch:x64

Code Sign

33:00:00:01:c4:22:b2:f7:9b:79:3d:ac:b2:00:00:00:00:01:c4
Certificate

Issuer

CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

03-07-2018 20:45

Not After

26-07-2019 20:45

Subject

CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:07:76:56:00:00:00:00:00:08
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

19-10-2011 18:41

Not After

19-10-2026 18:51

Subject

CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

ee:93:81:eb:45:9f:3b:62:54:0e:32:f5:17:9f:92:e2:a2:93:72:d9:64:2f:b1:54:0c:7c:37:13:15:8e:e2:e0
Signer

Actual PE Digest

ee:93:81:eb:45:9f:3b:62:54:0e:32:f5:17:9f:92:e2:a2:93:72:d9:64:2f:b1:54:0c:7c:37:13:15:8e:e2:e0

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Sections

.rdata
Size: 512B - Virtual size: 176B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 706KB - Virtual size: 706KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
All Files/Assets/Data/Fips34.json
All Files/Assets/Data/NuGet.Packaging.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Code Sign

33:00:00:03:4e:b5:3c:7a:c1:84:6f:eb:2b:00:00:00:00:03:4e
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

16-03-2023 18:43

Not After

14-03-2024 18:43

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08-07-2011 20:59

Not After

08-07-2026 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

09:ca:c3:b7:b2:26:d3:ba:50:bf:f7:87:ce:44:71:15:fc:b8:3b:93:49:74:1d:1f:ab:7b:9b:d5:3d:9b:dd:36
Signer

Actual PE Digest

09:ca:c3:b7:b2:26:d3:ba:50:bf:f7:87:ce:44:71:15:fc:b8:3b:93:49:74:1d:1f:ab:7b:9b:d5:3d:9b:dd:36

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

D:\a\_work\1\s\artifacts\NuGet.Packaging\obj\release\net472\NuGet.Packaging.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 658KB - Virtual size: 657KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 92KB - Virtual size: 92KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
All Files/Assets/Data/ReflectionParameter_isDefaultValueAvailable_Internal.phpt
All Files/Assets/Data/StartupHelper
.exe windows:5 windows x86 arch:x86

d21794f0d47bb5c7f5977a6500854d85

Code Sign

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

29-04-2021 00:00

Not After

28-04-2036 23:59

Subject

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

04:28:14:36:98:54:a8:5f:9b:8f:90:12:67:c0:3c:f2
Certificate

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Not Before

17-08-2022 00:00

Not After

29-07-2025 23:59

Subject

SERIALNUMBER=91110108680456115E,CN=Glarysoft Ltd,O=Glarysoft Ltd,ST=Beijing,C=CN,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.1=#13104861696469616e204469737472696374,1.3.6.1.4.1.311.60.2.1.2=#13074265696a696e67,1.3.6.1.4.1.311.60.2.1.3=#1302434e

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16
Certificate

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Not Before

14-07-2023 00:00

Not After

13-10-2034 23:59

Subject

CN=DigiCert Timestamp 2023,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

23-03-2022 00:00

Not After

22-03-2037 23:59

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01-08-2022 00:00

Not After

09-11-2031 23:59

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

29-04-2021 00:00

Not After

28-04-2036 23:59

Subject

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

04:28:14:36:98:54:a8:5f:9b:8f:90:12:67:c0:3c:f2
Certificate

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Not Before

17-08-2022 00:00

Not After

29-07-2025 23:59

Subject

SERIALNUMBER=91110108680456115E,CN=Glarysoft Ltd,O=Glarysoft Ltd,ST=Beijing,C=CN,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.1=#13104861696469616e204469737472696374,1.3.6.1.4.1.311.60.2.1.2=#13074265696a696e67,1.3.6.1.4.1.311.60.2.1.3=#1302434e

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16
Certificate

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Not Before

14-07-2023 00:00

Not After

13-10-2034 23:59

Subject

CN=DigiCert Timestamp 2023,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

23-03-2022 00:00

Not After

22-03-2037 23:59

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01-08-2022 00:00

Not After

09-11-2031 23:59

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

cc:08:bb:49:63:6e:cf:3f:72:bf:92:cf:45:8b:91:0e:90:0f:7d:11:28:70:03:90:0a:af:8b:19:89:f5:2f:7b
Signer

Actual PE Digest

cc:08:bb:49:63:6e:cf:3f:72:bf:92:cf:45:8b:91:0e:90:0f:7d:11:28:70:03:90:0a:af:8b:19:89:f5:2f:7b

Digest Algorithm

sha256

PE Digest Matches

true

b2:c8:9c:70:dd:00:70:00:00:18:3b:25:00:02:8e:c2:fc:f9:28:b7
Signer

Actual PE Digest

b2:c8:9c:70:dd:00:70:00:00:18:3b:25:00:02:8e:c2:fc:f9:28:b7

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

D:\winapps\mh\trunk\exe\vc\StartupHelper\sourcecode\Release\StartupHelper.pdb

Imports

mfc90u

ord404
ord2597
ord2141
ord4131
ord6635
ord4044
ord611
ord595
ord3489
ord5664
ord4652
ord1493
ord6411
ord3355
ord1665
ord5939
ord4405
ord1607
ord3220
ord5632
ord5167
ord5324
ord1810
ord1809
ord1675
ord3353
ord6408
ord1754
ord1751
ord4345
ord1492
ord4664
ord5602
ord2074
ord5512
ord6800
ord4603
ord3743
ord5154
ord4702
ord1728
ord6466
ord5685
ord5683
ord960
ord965
ord969
ord967
ord971
ord2615
ord2635
ord2619
ord2625
ord2623
ord2621
ord2638
ord2633
ord2617
ord2640
ord2628
ord2610
ord2612
ord2630
ord2375
ord2368
ord1641
ord6802
ord4174
ord6804
ord3682
ord5404
ord6376
ord3226
ord1442
ord5625
ord2139
ord1792
ord1791
ord1727
ord5650
ord3140
ord4910
ord4682
ord3515
ord2593
ord5653
ord6091
ord4774
ord4815
ord5078
ord613
ord337
ord4631
ord2901
ord4741
ord1533
ord3537
ord6095
ord3622
ord6187
ord6094
ord333
ord3488
ord1354
ord1353
ord2097
ord3543
ord1183
ord3486
ord4527
ord6579
ord4543
ord6577
ord2592
ord744
ord524
ord2069
ord1063
ord663
ord2146
ord1166
ord1064
ord6604
ord4530
ord2904
ord1047
ord2596
ord5008
ord1108
ord367
ord586
ord4000
ord374
ord2130
ord3577
ord2282
ord4512
ord4442
ord4448
ord4423
ord6801
ord4173
ord6803
ord4747
ord2251
ord2206
ord6035
ord4179
ord1048
ord5548
ord6741
ord5830
ord4213
ord2087
ord3217
ord5674
ord5676
ord4347
ord4996
ord5680
ord5663
ord6018
ord2771
ord2983
ord3112
ord799
ord265
ord266
ord1272
ord1137
ord1254
ord686
ord436
ord792
ord587
ord4728
ord2966
ord3115
ord2774
ord2893
ord2764
ord4080
ord4081
ord4071
ord2891
ord4348
ord4905
ord4681
ord3670
ord2447
ord636
ord790
ord639
ord2208
ord6482
ord1098
ord4211
ord794
ord589
ord4043
ord4967
ord1318
ord2327
ord316
ord601
ord899
ord1315
ord938
ord1603
ord2478
ord5979
ord6687
ord285
ord5535
ord6079
ord6813
ord1552
ord2551
ord946
ord821
ord2470
ord6096
ord4541
ord4410
ord290
ord1088
ord6659
ord2243
ord6204
ord339
ord289
ord288
ord6164
ord1599
ord809
ord6013
ord935
ord936
ord2702
ord286
ord5851
ord3637
ord2106
ord811
ord280
ord2326
ord2694
ord6529
ord813
ord2537
ord600
ord1143
ord296
ord1248
ord2084
ord1250
ord801

msvcr90

memcpy
memset
towupper
__CxxFrameHandler3
?_type_info_dtor_internal_method@type_info@@QAEXXZ
_crt_debugger_hook
_controlfp_s
_invoke_watson
_except_handler4_common
_decode_pointer
_onexit
_lock
__dllonexit
_unlock
?terminate@@YAXXZ
__set_app_type
_encode_pointer
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_configthreadlocale
_initterm_e
_initterm
_wcmdln
exit
_XcptFilter
_exit
_cexit
__wgetmainargs
_amsg_exit
__wargv
__argc
setlocale
_resetstkoflw
?what@exception@std@@UBEPBDXZ
_msize
_purecall
_set_errno
_get_errno
_wtoi64
realloc
_gcvt_s
_fpclass
_HUGE
iswspace
wcsrchr
wcschr
_ui64toa_s
_i64toa_s
isspace
_itoa_s
wcsncmp
wcstod
wcstol
_wcstoui64
_wcstoi64
strtol
_wtoi
wcsnlen
_wcsicmp
_scwprintf
_ultoa_s
strncmp
_strlwr_s
_recalloc
calloc
_itow_s
swprintf_s
_CxxThrowException
malloc
wcscpy_s
wcsncpy_s
_invalid_parameter_noinfo
??0exception@std@@QAE@ABV01@@Z
free
??0exception@std@@QAE@XZ
??1exception@std@@UAE@XZ
??0exception@std@@QAE@ABQBD@Z
memmove_s
memcpy_s

kernel32

GetPrivateProfileSectionW
LocalFree
GetCurrentProcessId
InterlockedCompareExchange
GetStartupInfoW
SetUnhandledExceptionFilter
QueryPerformanceCounter
GetCurrentThreadId
GetSystemTimeAsFileTime
TerminateProcess
SetLastError
LoadLibraryW
GetCurrentProcess
UnhandledExceptionFilter
IsDebuggerPresent
EnterCriticalSection
GetProcAddress
GetModuleHandleW
Sleep
GetTickCount
GetCommandLineW
InterlockedExchange
CreateMutexW
CloseHandle
HeapReAlloc
GetPrivateProfileIntW
HeapFree
GetProcessHeap
HeapAlloc
WideCharToMultiByte
lstrlenA
MultiByteToWideChar
GetLastError
GetModuleFileNameW
lstrlenW
WaitForSingleObject
HeapDestroy
HeapSize
DeleteCriticalSection
InitializeCriticalSection
LeaveCriticalSection

user32

SendMessageW
AppendMenuW
GetSystemMenu
GetWindowRect
MessageBoxW
GetWindowLongW
SetWindowLongW
UnionRect
GetMenuBarInfo
GetMenuItemID
GetMenuItemCount
GetSysColor
OffsetRect
FrameRect
DrawFrameControl
CopyRect
EnableWindow
IsWindow
InvalidateRect
KillTimer
PtInRect
ReleaseDC
FillRect
GetDC
SystemParametersInfoW
EndPaint
BeginPaint
DrawIcon
GetSystemMetrics
IsIconic
SetTimer
GetClientRect
LoadIconW

gdi32

CreatePen
CreateCompatibleBitmap
CreateSolidBrush
GetObjectW
SetDIBColorTable
GetTextExtentPoint32W
SetBkMode
CreateRoundRectRgn
GetCurrentObject
GetBkMode
CreatePatternBrush
SetBrushOrgEx
FillRgn
FrameRgn
SelectObject
CreateFontW
GetDIBColorTable
StretchBlt
CreateDIBSection
BitBlt
CreateCompatibleDC
DeleteDC
DeleteObject

msimg32

TransparentBlt
GradientFill
AlphaBlend

advapi32

RegQueryValueExW
RegOpenKeyExW

shell32

ShellExecuteW
CommandLineToArgvW

comctl32

_TrackMouseEvent
InitCommonControlsEx

shlwapi

PathFileExistsW

ole32

OleInitialize
CoUninitialize
CoInitialize
CoCreateInstance

oleaut32

SysAllocStringLen
VariantClear
SysAllocString
VariantInit
SysFreeString

msvcp90

??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBD@Z
?npos@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@2IB
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
?swap@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEXAAV12@@Z
?find_last_not_of@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBEIPB_WI@Z
?find_first_not_of@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBEIPB_WI@Z
?clear@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEXXZ
?erase@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV12@II@Z
??4?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV01@PB_W@Z
??4?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV01@ABV01@@Z
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@ABV01@@Z
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@XZ
??1?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@XZ

ws2_32

WSASetLastError
GetAddrInfoW
WSAStartup
WSACleanup
closesocket
WSACloseEvent
WSASocketW
WSAGetLastError
WSAConnect
WSAEnumNetworkEvents
WSAResetEvent
WSASend
WSAGetOverlappedResult
WSARecv
WSACreateEvent
WSASetEvent
WSAEventSelect
FreeAddrInfoW

boottime

ord2
GetSetupTime
ord1

gdiplus

GdipDisposeImage
GdipFree
GdiplusShutdown
GdipGetImageGraphicsContext
GdipDeleteGraphics
GdipDrawImageI
GdipCloneImage
GdipGetImageWidth
GdipGetImageHeight
GdipGetImagePixelFormat
GdipGetImagePaletteSize
GdipGetImagePalette
GdipCreateBitmapFromFile
GdipCreateBitmapFromScan0
GdipBitmapLockBits
GdipBitmapUnlockBits
GdiplusStartup
GdipAlloc

languages

ord5
ord3
ord6
ord8
ord4

config

ord13
ord11

Sections

.text
Size: 122KB - Virtual size: 121KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 38KB - Virtual size: 38KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 161KB - Virtual size: 161KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 17KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
All Files/Assets/Data/TMRegEx64.dll
.dll windows:6 windows x64 arch:x64

bf6afcf5326566d732e53a448764be7a

Code Sign

33:00:00:05:00:27:d6:32:6f:43:73:7b:87:00:00:00:00:05:00
Certificate

Issuer

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

16-02-2023 20:11

Not After

31-01-2024 20:11

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0c:52:4c:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

06-07-2010 20:40

Not After

06-07-2025 20:50

Subject

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

d4:b8:44:2f:87:cd:eb:09:6e:5a:18:6c:3b:b5:33:8d:fd:83:57:3a:10:9a:ed:a1:00:d2:d7:9d:c1:74:2a:42
Signer

Actual PE Digest

d4:b8:44:2f:87:cd:eb:09:6e:5a:18:6c:3b:b5:33:8d:fd:83:57:3a:10:9a:ed:a1:00:d2:d7:9d:c1:74:2a:42

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

D:\a\_work\1\s\bin\Productivity\TMRegEx64\Release\TMRegEx64.pdb

Imports

oleaut32

SysFreeString
SysAllocStringLen

kernel32

WriteConsoleW
CreateFileW
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
GetStartupInfoW
GetModuleHandleW
CloseHandle
RtlUnwindEx
InterlockedFlushSList
GetLastError
SetLastError
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
GetProcAddress
LoadLibraryExW
EncodePointer
RaiseException
RtlPcToFileHeader
ExitProcess
GetModuleHandleExW
GetModuleFileNameW
HeapFree
HeapAlloc
HeapReAlloc
GetStdHandle
GetFileType
FlsAlloc
FlsGetValue
FlsSetValue
FlsFree
LCMapStringW
FlushFileBuffers
WriteFile
GetConsoleOutputCP
GetConsoleMode
FindClose
FindFirstFileExW
FindNextFileW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
GetCommandLineA
GetCommandLineW
MultiByteToWideChar
WideCharToMultiByte
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetProcessHeap
GetFileSizeEx
SetFilePointerEx
GetStringTypeW
SetStdHandle
HeapSize

Exports

Exports

CreateLineText
CreateRegEx
FreeLineText
FreeRegEx
GroupNumberFromName
MatchRegEx
OnigDefaultCaseFoldFlag
OnigDefaultSyntax
OnigEncodingASCII
OnigEncodingBIG5
OnigEncodingCP1251
OnigEncodingEUC_CN
OnigEncodingEUC_JP
OnigEncodingEUC_KR
OnigEncodingEUC_TW
OnigEncodingGB18030
OnigEncodingISO_8859_1
OnigEncodingISO_8859_10
OnigEncodingISO_8859_11
OnigEncodingISO_8859_13
OnigEncodingISO_8859_14
OnigEncodingISO_8859_15
OnigEncodingISO_8859_16
OnigEncodingISO_8859_2
OnigEncodingISO_8859_3
OnigEncodingISO_8859_4
OnigEncodingISO_8859_5
OnigEncodingISO_8859_6
OnigEncodingISO_8859_7
OnigEncodingISO_8859_8
OnigEncodingISO_8859_9
OnigEncodingKOI8
OnigEncodingSJIS
OnigEncodingUTF16_LE
OnigEncodingUTF8
OnigSyntaxASIS
OnigSyntaxEmacs
OnigSyntaxGnuRegex
OnigSyntaxGrep
OnigSyntaxJava
OnigSyntaxOniguruma
OnigSyntaxPerl
OnigSyntaxPerl_NG
OnigSyntaxPosixBasic
OnigSyntaxPosixExtended
OnigSyntaxPython
OnigSyntaxRuby
SetRetryLimit
onig_builtin_cmp
onig_builtin_count
onig_builtin_error
onig_builtin_fail
onig_builtin_max
onig_builtin_mismatch
onig_builtin_total_count
onig_callout_tag_is_exist_at_callout_num
onig_capture_tree_traverse
onig_copy_encoding
onig_copy_syntax
onig_copyright
onig_end
onig_error_code_to_str
onig_foreach_name
onig_free
onig_free_body
onig_free_match_param
onig_free_match_param_content
onig_get_arg_by_callout_args
onig_get_args_num_by_callout_args
onig_get_callback_each_match
onig_get_callout_data
onig_get_callout_data_by_callout_args
onig_get_callout_data_by_callout_args_self
onig_get_callout_data_by_callout_args_self_dont_clear_old
onig_get_callout_data_by_tag
onig_get_callout_data_by_tag_dont_clear_old
onig_get_callout_data_dont_clear_old
onig_get_callout_in_by_callout_args
onig_get_callout_name_by_name_id
onig_get_callout_num_by_callout_args
onig_get_callout_num_by_tag
onig_get_callout_tag_end
onig_get_callout_tag_start
onig_get_capture_range_in_callout
onig_get_capture_tree
onig_get_case_fold_flag
onig_get_contents_by_callout_args
onig_get_contents_end_by_callout_args
onig_get_current_by_callout_args
onig_get_default_case_fold_flag
onig_get_encoding
onig_get_match_stack_limit_size
onig_get_name_id_by_callout_args
onig_get_options
onig_get_parse_depth_limit
onig_get_passed_args_num_by_callout_args
onig_get_progress_callout
onig_get_regex_by_callout_args
onig_get_retraction_callout
onig_get_retry_counter_by_callout_args
onig_get_retry_limit_in_match
onig_get_retry_limit_in_search
onig_get_right_range_by_callout_args
onig_get_start_by_callout_args
onig_get_string_by_callout_args
onig_get_string_end_by_callout_args
onig_get_subexp_call_limit_in_search
onig_get_subexp_call_max_nest_level
onig_get_syntax
onig_get_syntax_behavior
onig_get_syntax_op
onig_get_syntax_op2
onig_get_syntax_options
onig_get_used_stack_size_in_callout
onig_init
onig_initialize
onig_initialize_encoding
onig_initialize_match_param
onig_is_error_code_needs_param
onig_match
onig_match_with_param
onig_name_to_backref_number
onig_name_to_group_numbers
onig_new
onig_new_deluxe
onig_new_match_param
onig_noname_group_capture_is_active
onig_number_of_capture_histories
onig_number_of_captures
onig_number_of_names
onig_posix_reg_foreach_name
onig_posix_reg_name_to_group_numbers
onig_posix_reg_number_of_names
onig_posix_reg_set_encoding
onig_posix_regcomp
onig_posix_regerror
onig_posix_regexec
onig_posix_regfree
onig_reg_init
onig_region_clear
onig_region_copy
onig_region_free
onig_region_init
onig_region_new
onig_region_resize
onig_region_set
onig_regset_add
onig_regset_free
onig_regset_get_regex
onig_regset_get_region
onig_regset_new
onig_regset_number_of_regex
onig_regset_replace
onig_regset_search
onig_regset_search_with_param
onig_scan
onig_search
onig_search_with_param
onig_set_callback_each_match
onig_set_callout_data
onig_set_callout_data_by_callout_args
onig_set_callout_data_by_callout_args_self
onig_set_callout_data_by_tag
onig_set_callout_of_name
onig_set_callout_user_data_of_match_param
onig_set_capture_num_limit
onig_set_default_case_fold_flag
onig_set_default_syntax
onig_set_match_stack_limit_size
onig_set_match_stack_limit_size_of_match_param
onig_set_meta_char
onig_set_parse_depth_limit
onig_set_progress_callout
onig_set_progress_callout_of_match_param
onig_set_retraction_callout
onig_set_retraction_callout_of_match_param
onig_set_retry_limit_in_match
onig_set_retry_limit_in_match_of_match_param
onig_set_retry_limit_in_search
onig_set_retry_limit_in_search_of_match_param
onig_set_subexp_call_limit_in_search
onig_set_subexp_call_max_nest_level
onig_set_syntax_behavior
onig_set_syntax_op
onig_set_syntax_op2
onig_set_syntax_options
onig_set_verb_warn_func
onig_set_warn_func
onig_setup_builtin_monitors_by_ascii_encoded_name
onig_unicode_define_user_property
onig_version
onigenc_get_default_encoding
onigenc_get_left_adjust_char_head
onigenc_get_prev_char_head
onigenc_get_right_adjust_char_head
onigenc_get_right_adjust_char_head_with_prev
onigenc_init
onigenc_is_valid_mbc_string
onigenc_set_default_caseconv_table
onigenc_set_default_encoding
onigenc_step_back
onigenc_str_bytelen_null
onigenc_strdup
onigenc_strlen
onigenc_strlen_null
re_adjust_startpos
re_alloc_pattern
re_compile_pattern
re_free_pattern
re_free_registers
re_match
re_mbcinit
re_search
re_set_casetable

Sections

.text
Size: 382KB - Virtual size: 381KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 330KB - Virtual size: 329KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 61KB - Virtual size: 66KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

_RDATA
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 920B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
All Files/Assets/Data/bug18556.phpt
.js
All Files/Assets/Data/bug41337_2.wsdl
.xml
All Files/Assets/Data/bug77812-readline.phpt
All Files/Assets/Data/ens.phpt
All Files/Assets/Data/fputcsv_variation18.phpt
All Files/Assets/Data/gh10043-015.phpt
All Files/Assets/Data/header_redirection_006.phpt
All Files/Assets/Data/immunochemistry.tiff
All Files/Assets/Data/input.json
All Files/Assets/Data/insights.dll
.dll regsvr32 windows:4 windows x86 arch:x86

36da04e9d80185202c5dff27d69487ef

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

mfc42

ord2818
ord540
ord2915
ord537
ord800
ord941
ord861
ord823
ord6467
ord1131
ord2725
ord3953
ord825
ord561
ord3738
ord4424
ord4622
ord4080
ord3079
ord3825
ord3831
ord3830
ord2976
ord3081
ord2985
ord3262
ord3136
ord4465
ord3259
ord3147
ord2982
ord5714
ord5289
ord5307
ord4698
ord535
ord4160
ord5302
ord2396
ord269
ord5199
ord1577
ord600
ord4274
ord1182
ord5300
ord1255
ord1253
ord1578
ord1197
ord4079
ord1570
ord1243
ord342
ord815
ord6375
ord4486
ord2554
ord2512
ord5731
ord1116
ord1176
ord1575
ord1168
ord3922
ord826
ord3346
ord1089

msvcrt

_initterm
??1type_info@@UAE@XZ
_stricmp
memcpy
__CxxFrameHandler
free
malloc
realloc
memset
memcmp
strlen
_snprintf
strcat
strncpy
?terminate@@YAXXZ
_except_handler3
__dllonexit
_onexit
_adjust_fdiv

kernel32

GetLastError
LoadLibraryA
GetModuleFileNameA
GetModuleHandleA
GetShortPathNameA
lstrlenA
MultiByteToWideChar
lstrlenW
InterlockedDecrement
EnterCriticalSection
InterlockedIncrement
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSection
WideCharToMultiByte
FreeLibrary
SizeofResource
LoadResource
FindResourceA
LoadLibraryExA
lstrcmpiA
lstrcpynA
IsDBCSLeadByte
HeapDestroy
GetProcAddress
lstrcpyA
lstrcatA
GetVersionExA
CloseHandle
OpenMutexA
LocalFree
LocalAlloc

user32

CreateMenu
InsertMenuItemA
LoadBitmapA
InsertMenuA
wsprintfA
CharNextA

gdi32

DeleteObject

advapi32

RegOpenKeyExA
RegEnumValueA
RegQueryInfoKeyA
RegSetValueExA
RegEnumKeyExA
RegCloseKey
RegDeleteValueA
RegCreateKeyExA
RegDeleteKeyA

shell32

DragQueryFileA

ole32

CoTaskMemRealloc
CoTaskMemAlloc
CoCreateInstance
CoTaskMemFree

oleaut32

BSTR_UserMarshal
RegisterTypeLi
SysAllocStringLen
BSTR_UserFree
BSTR_UserUnmarshal
LoadTypeLi
BSTR_UserSize
SysAllocString
SysFreeString
VarUI4FromStr

rpcrt4

CStdStubBuffer_CountRefs
CStdStubBuffer_Invoke
CStdStubBuffer_Disconnect
CStdStubBuffer_Connect
CStdStubBuffer_AddRef
CStdStubBuffer_QueryInterface
IUnknown_Release_Proxy
IUnknown_AddRef_Proxy
IUnknown_QueryInterface_Proxy
NdrOleFree
NdrOleAllocate
NdrDllGetClassObject
NdrDllCanUnloadNow
NdrCStdStubBuffer_Release
NdrDllRegisterProxy
NdrDllUnregisterProxy
CStdStubBuffer_IsIIDSupported
CStdStubBuffer_DebugServerQueryInterface
CStdStubBuffer_DebugServerRelease

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 20KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.orpc
Size: 4KB - Virtual size: 89B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
All Files/Assets/Data/installed.dll
.dll windows:6 windows x86 arch:x86

Code Sign

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

29-04-2021 00:00

Not After

28-04-2036 23:59

Subject

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

05:75:e1:f7:ec:9b:d8:a6:7a:3f:61:89:c6:3e:97:bb
Certificate

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Not Before

16-09-2022 00:00

Not After

17-09-2025 23:59

Subject

CN=PIRIFORM SOFTWARE LIMITED,O=PIRIFORM SOFTWARE LIMITED,L=London,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16
Certificate

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Not Before

14-07-2023 00:00

Not After

13-10-2034 23:59

Subject

CN=DigiCert Timestamp 2023,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

23-03-2022 00:00

Not After

22-03-2037 23:59

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01-08-2022 00:00

Not After

09-11-2031 23:59

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

47:61:59:f6:b7:42:45:ca:c9:25:78:ae:bc:3c:f6:ba:c3:c2:15:e8:6d:ed:75:4a:cd:f7:6c:5e:97:9a:9e:e5
Signer

Actual PE Digest

47:61:59:f6:b7:42:45:ca:c9:25:78:ae:bc:3c:f6:ba:c3:c2:15:e8:6d:ed:75:4a:cd:f7:6c:5e:97:9a:9e:e5

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.rdata
Size: 512B - Virtual size: 160B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 247KB - Virtual size: 246KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
All Files/Assets/Data/izanptp
.exe windows:6 windows x86 arch:x86

a7e73ef2207e9ee97c678506145e1258

Code Sign

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

21-12-2012 00:00

Not After

30-12-2020 23:59

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

18-10-2012 00:00

Not After

29-12-2020 23:59

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

4f:be:0a:02:42:6e:bd:20:c2:62:44:b5:ec:a6:52:a3
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Not Before

09-07-2018 00:00

Not After

10-07-2019 23:59

Subject

CN=NVIDIA Corporation,OU=IT-MIS,O=NVIDIA Corporation,L=Santa Clara,ST=California,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

61:19:93:e4:00:00:00:00:00:1c
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

22-02-2011 19:25

Not After

22-02-2021 19:35

Subject

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

08-02-2010 00:00

Not After

07-02-2020 23:59

Subject

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

62:e7:45:e9:21:65:21:3c:97:1f:5c:49:0a:ea:12:a5
Certificate

Issuer

CN=Symantec Class 3 SHA256 Code Signing CA - G2,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Not Before

09-07-2018 00:00

Not After

09-07-2021 23:59

Subject

CN=NVIDIA Corporation,OU=IT-MIS,O=NVIDIA Corporation,L=Santa Clara,ST=California,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

7c:1b:35:35:4a:e7:db:74:e7:41:5f:11:69:ca:6b:a8
Certificate

Issuer

CN=VeriSign Universal Root Certification Authority,OU=VeriSign Trust Network+OU=(c) 2008 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

22-07-2014 00:00

Not After

21-07-2024 23:59

Subject

CN=Symantec Class 3 SHA256 Code Signing CA - G2,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

61:2d:23:cb:00:00:00:00:00:21
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

22-02-2011 19:46

Not After

22-02-2021 19:56

Subject

CN=VeriSign Universal Root Certification Authority,OU=VeriSign Trust Network+OU=(c) 2008 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

7b:05:b1:d4:49:68:51:44:f7:c9:89:d2:9c:19:9d:12
Certificate

Issuer

CN=VeriSign Universal Root Certification Authority,OU=VeriSign Trust Network+OU=(c) 2008 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

12-01-2016 00:00

Not After

11-01-2031 23:59

Subject

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

7b:d4:e5:af:ba:cc:07:3f:a1:01:23:04:22:41:4d:12
Certificate

Issuer

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Not Before

23-12-2017 00:00

Not After

22-03-2029 23:59

Subject

CN=Symantec SHA256 TimeStamping Signer - G3,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

54:cb:ab:94:75:80:97:ed:a8:bb:b7:bd:5b:5f:9b:d9:c4:b8:e5:05:1b:74:5b:83:60:86:a9:f7:ca:58:97:d7
Signer

Actual PE Digest

54:cb:ab:94:75:80:97:ed:a8:bb:b7:bd:5b:5f:9b:d9:c4:b8:e5:05:1b:74:5b:83:60:86:a9:f7:ca:58:97:d7

Digest Algorithm

sha256

PE Digest Matches

true

7f:01:56:fd:7c:3f:56:65:ab:41:e1:66:0d:22:36:1d:f4:00:d1:24
Signer

Actual PE Digest

7f:01:56:fd:7c:3f:56:65:ab:41:e1:66:0d:22:36:1d:f4:00:d1:24

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\dvs\p4\build\sw\rel\gpu_drv\r415\r415_00\drivers\stereo_vision\Apps\GeForce3DVisionSetupWizard\release\NvStWiz.pdb

Imports

user32

GetDesktopWindow
PostQuitMessage
GetUserObjectInformationW
SetCursor
LoadCursorW
TranslateMessage
OpenInputDesktop
ValidateRect
PeekMessageW
EnumDisplaySettingsExW
DestroyIcon
EnumDisplaySettingsW
CloseDesktop
ChangeDisplaySettingsW
ShowWindow
DestroyCursor
RegisterClassExW
SendMessageW
CreateWindowExW
MessageBoxW
DestroyWindow
DefWindowProcW
ChangeDisplaySettingsExW
UpdateWindow
LoadImageW
SetCursorPos
DispatchMessageW
GetCursorPos

shell32

SHGetFolderPathW
ShellExecuteW
SHGetKnownFolderPath

ole32

CoTaskMemFree
CreateStreamOnHGlobal
CoCreateInstance
CoUninitialize
CoInitialize

d3d9

Direct3DCreate9

d3d10

D3D10CreateDevice

gdiplus

GdipLoadImageFromStream
GdipSetStringFormatFlags
GdipGetImageWidth
GdipSetStringFormatAlign
GdiplusStartup
GdipCreatePen1
GdipCreateStringFormat
GdipDeleteFontFamily
GdipGetImageHeight
GdipSetImageAttributesColorMatrix
GdipDeleteFont
GdipSetCompositingMode
GdipDeleteStringFormat
GdipDeleteGraphics
GdiplusShutdown
GdipMeasureString
GdipCloneBrush
GdipSetTextRenderingHint
GdipCreateFromHDC
GdipDrawString
GdipFree
GdipGetGenericFontFamilySansSerif
GdipCreateImageAttributes
GdipDrawLine
GdipCreateSolidFill
GdipCreateFont
GdipDisposeImage
GdipDisposeImageAttributes
GdipDrawImageRectI
GdipAlloc
GdipDeleteBrush
GdipCloneImage
GdipDrawImageRectRect
GdipCreateFontFamilyFromName
GdipDeletePen

kernel32

GetConsoleCP
FlushFileBuffers
SetStdHandle
GetProcessHeap
LCMapStringW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCPInfo
GetOEMCP
IsValidCodePage
FindNextFileA
FindFirstFileExA
GetStringTypeW
GetFileType
HeapAlloc
HeapFree
GetACP
WriteFile
GetStdHandle
HeapSize
MultiByteToWideChar
GetModuleFileNameA
GetModuleHandleExW
ExitProcess
GetCommandLineW
GetCommandLineA
EncodePointer
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
InitializeCriticalSectionAndSpinCount
RaiseException
RtlUnwind
InitializeSListHead
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
GetStartupInfoW
IsDebuggerPresent
IsProcessorFeaturePresent
TerminateProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
WaitForSingleObjectEx
ResetEvent
SetEvent
GetConsoleMode
HeapReAlloc
SetFilePointerEx
SetEndOfFile
ReadFile
ReadConsoleW
DecodePointer
WideCharToMultiByte
SizeofResource
FindFirstFileW
GetSystemDefaultLCID
FindNextFileW
lstrcpynW
GetThreadLocale
GetUserDefaultUILanguage
GetTempPathW
FindClose
GetLocaleInfoW
GetFileAttributesW
GetVersionExW
GetSystemDirectoryW
FreeResource
CreateEventW
Sleep
GetLastError
LockResource
GlobalAlloc
GlobalFree
CloseHandle
LoadLibraryW
FindResourceExW
LoadResource
FindResourceW
GetProcAddress
GlobalLock
WriteConsoleW
FreeLibrary
lstrcmpiW
GlobalUnlock
LoadLibraryExW
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
VerSetConditionMask
ExpandEnvironmentStringsW
CreateFileW
GetFullPathNameW
SetLastError
GetCurrentProcess
GetModuleHandleA
LocalAlloc
LocalFree
lstrcmpW
VerifyVersionInfoW
GetModuleHandleW

advapi32

RegQueryValueExW
RegOpenKeyExA
InitializeSecurityDescriptor
RegSetValueExA
RegQueryValueExA
RegCloseKey
SetSecurityDescriptorDacl
RegOpenKeyExW

Sections

.text
Size: 182KB - Virtual size: 182KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 62KB - Virtual size: 62KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 152KB - Virtual size: 151KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 15KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
All Files/Assets/Data/list_keyed_evaluation_order.phpt
All Files/Assets/Data/lowSshC32.dll
.dll windows:5 windows x86 arch:x86

84d46400eaae645a88dad66ce90b9fb3

Code Sign

48:fc:93:b4:60:55:94:8d:36:a7:c9:8a:89:d6:94:16
Certificate

Issuer

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

25-05-2021 00:00

Not After

31-12-2028 23:59

Subject

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

62:1d:6d:0c:52:01:9e:3b:90:79:15:20:89:21:1c:0a
Certificate

Issuer

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Not Before

22-03-2021 00:00

Not After

21-03-2036 23:59

Subject

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

62:f7:4e:68:b8:19:7a:cb:17:aa:18:42:39:28:b3:7f
Certificate

Issuer

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Not Before

19-09-2023 00:00

Not After

18-09-2026 23:59

Subject

CN=Bitvise Limited,O=Bitvise Limited,ST=Texas,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16
Certificate

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Not Before

14-07-2023 00:00

Not After

13-10-2034 23:59

Subject

CN=DigiCert Timestamp 2023,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

23-03-2022 00:00

Not After

22-03-2037 23:59

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01-08-2022 00:00

Not After

09-11-2031 23:59

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

48:fc:93:b4:60:55:94:8d:36:a7:c9:8a:89:d6:94:16
Certificate

Issuer

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

25-05-2021 00:00

Not After

31-12-2028 23:59

Subject

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

62:1d:6d:0c:52:01:9e:3b:90:79:15:20:89:21:1c:0a
Certificate

Issuer

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Not Before

22-03-2021 00:00

Not After

21-03-2036 23:59

Subject

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

62:f7:4e:68:b8:19:7a:cb:17:aa:18:42:39:28:b3:7f
Certificate

Issuer

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Not Before

19-09-2023 00:00

Not After

18-09-2026 23:59

Subject

CN=Bitvise Limited,O=Bitvise Limited,ST=Texas,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16
Certificate

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Not Before

14-07-2023 00:00

Not After

13-10-2034 23:59

Subject

CN=DigiCert Timestamp 2023,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

23-03-2022 00:00

Not After

22-03-2037 23:59

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01-08-2022 00:00

Not After

09-11-2031 23:59

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

13:6f:83:2f:df:8a:b4:17:8e:49:88:14:96:61:90:46:88:d4:87:45:77:68:69:7c:1a:dd:0c:ab:3c:a3:5f:44
Signer

Actual PE Digest

13:6f:83:2f:df:8a:b4:17:8e:49:88:14:96:61:90:46:88:d4:87:45:77:68:69:7c:1a:dd:0c:ab:3c:a3:5f:44

Digest Algorithm

sha256

PE Digest Matches

true

c1:13:af:96:11:4d:6b:6c:16:e5:76:7a:69:4c:eb:68:52:c3:f4:7b
Signer

Actual PE Digest

c1:13:af:96:11:4d:6b:6c:16:e5:76:7a:69:4c:eb:68:52:c3:f4:7b

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

D:\repos\main\SSH2\Release\pdbs\FlowSshC32.pdb

Imports

ws2_32

gethostbyaddr
WSAGetLastError
getservbyname
htons
WSAStartup
closesocket
WSAEnumProtocolsW
WSCGetProviderPath
WSASocketW
listen
ioctlsocket
accept
setsockopt
bind
getsockname
inet_addr
inet_ntoa
WSASetLastError
ntohl
WSAStringToAddressW
htonl
ntohs
connect
WSACleanup
WSAEnumNetworkEvents
WSAGetOverlappedResult
WSASend
shutdown
getpeername
WSARecv
WSAEventSelect
gethostbyname
getservbyport

kernel32

RemoveDirectoryW
GetFileSize
SetFileTime
WaitForMultipleObjectsEx
GetConsoleOutputCP
GetOverlappedResult
GetNumberFormatW
ExpandEnvironmentStringsW
OpenEventW
InterlockedIncrement
InterlockedDecrement
InterlockedCompareExchange
SwitchToThread
InitializeCriticalSection
EnterCriticalSection
TryEnterCriticalSection
LeaveCriticalSection
InterlockedExchange
InterlockedExchangeAdd
IsDebuggerPresent
DebugBreak
GetModuleFileNameA
GetCurrentProcessId
WideCharToMultiByte
MultiByteToWideChar
GetFileSizeEx
ReadFile
GetModuleHandleW
GetProcAddress
LocalFree
lstrlenW
FormatMessageW
FreeLibrary
VerSetConditionMask
GetSystemDirectoryW
LoadLibraryW
GetModuleHandleA
CompareStringW
GetModuleHandleExW
GetModuleFileNameW
GetFileAttributesW
CreateThread
ReleaseMutex
OutputDebugStringA
GetStdHandle
CreateFileA
WriteFile
RtlCaptureStackBackTrace
GetTickCount
Sleep
FoldStringW
GetSystemTimeAsFileTime
SystemTimeToTzSpecificLocalTime
GetEnvironmentVariableW
LoadLibraryA
GetSystemDirectoryA
LoadLibraryExW
FindClose
DeleteFileW
FlushFileBuffers
GetFileTime
SetFilePointerEx
SetEndOfFile
QueryPerformanceFrequency
QueryPerformanceCounter
FileTimeToSystemTime
LocalAlloc
LocalSize
CreateDirectoryW
ConvertThreadToFiber
ConvertFiberToThread
CreateFiberEx
DeleteFiber
SwitchToFiber
GetFileType
OutputDebugStringW
WriteConsoleW
GetSystemTime
CancelIo
CreateFileMappingA
MapViewOfFile
UnmapViewOfFile
WaitNamedPipeW
SetHandleInformation
GetStringTypeW
EncodePointer
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
LCMapStringW
GetLocaleInfoW
GetCPInfo
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
IsProcessorFeaturePresent
WaitForSingleObjectEx
InitializeSListHead
GetStartupInfoW
InterlockedPushEntrySList
InterlockedFlushSList
RtlUnwind
GetConsoleMode
ExitThread
FreeLibraryAndExitThread
HeapAlloc
HeapReAlloc
HeapFree
GetACP
GetTimeZoneInformation
GetDateFormatW
GetTimeFormatW
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
HeapSize
GetProcessHeap
FindFirstFileExA
FindNextFileA
IsValidCodePage
GetOEMCP
GetCommandLineA
GetCommandLineW
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableA
SetStdHandle
ReadConsoleW
GetConsoleCP
DeleteCriticalSection
DecodePointer
RaiseException
InitializeCriticalSectionAndSpinCount
GetCurrentThread
GetCurrentProcess
DuplicateHandle
ResetEvent
SetEvent
SetFilePointer
CreateFileW
CreateEventW
GetLastError
SetLastError
GetCurrentThreadId
WaitForSingleObject
ExitProcess
CloseHandle
WaitForMultipleObjects
GetTempPathW

user32

MessageBoxW
MessageBoxA
GetUserObjectInformationW
GetProcessWindowStation
wsprintfA
FindWindowW
SendMessageW

ole32

CoTaskMemFree
CoTaskMemAlloc

oleaut32

SysAllocStringByteLen

iphlpapi

GetTcpTable

advapi32

CryptGenRandom
CryptReleaseContext
CryptAcquireContextA
RegQueryValueExW
RegOpenKeyExW
RegCloseKey
GetNamedSecurityInfoW
IsValidSid
GetSidSubAuthority
OpenProcessToken
EqualSid
GetLengthSid
CopySid
GetSidLengthRequired
InitializeSid
AddAccessAllowedAceEx
GetAclInformation
InitializeSecurityDescriptor
SetSecurityDescriptorOwner
SetSecurityDescriptorDacl
SetSecurityDescriptorControl
GetTokenInformation

Exports

Exports

FlowSshC_ClientSessionChannel_AddRef
FlowSshC_ClientSessionChannel_Close
FlowSshC_ClientSessionChannel_Create
FlowSshC_ClientSessionChannel_ExecRequest
FlowSshC_ClientSessionChannel_OpenRequest
FlowSshC_ClientSessionChannel_PtyRequest
FlowSshC_ClientSessionChannel_Receive
FlowSshC_ClientSessionChannel_Release
FlowSshC_ClientSessionChannel_Send
FlowSshC_ClientSessionChannel_SetCloseHandler
FlowSshC_ClientSessionChannel_SetExitHandler
FlowSshC_ClientSessionChannel_ShellRequest
FlowSshC_ClientSessionChannel_Signal
FlowSshC_ClientSftpChannel_AddRef
FlowSshC_ClientSftpChannel_Close
FlowSshC_ClientSftpChannel_Create
FlowSshC_ClientSftpChannel_Download
FlowSshC_ClientSftpChannel_Download2
FlowSshC_ClientSftpChannel_List
FlowSshC_ClientSftpChannel_MkDir
FlowSshC_ClientSftpChannel_Open
FlowSshC_ClientSftpChannel_Open2
FlowSshC_ClientSftpChannel_RealPath
FlowSshC_ClientSftpChannel_Release
FlowSshC_ClientSftpChannel_Remove
FlowSshC_ClientSftpChannel_Rename
FlowSshC_ClientSftpChannel_RmDir
FlowSshC_ClientSftpChannel_SetCloseHandler
FlowSshC_ClientSftpChannel_SetStat
FlowSshC_ClientSftpChannel_SetVersionHandler
FlowSshC_ClientSftpChannel_Stat
FlowSshC_ClientSftpChannel_Upload
FlowSshC_ClientSftpChannel_Upload2
FlowSshC_Client_AddForwarding
FlowSshC_Client_AddForwardingExt
FlowSshC_Client_AddRef
FlowSshC_Client_CancelForwarding
FlowSshC_Client_Connect
FlowSshC_Client_Create
FlowSshC_Client_DisableProxyForwarding
FlowSshC_Client_Disconnect
FlowSshC_Client_EnableProxyForwarding
FlowSshC_Client_InviteForwardings
FlowSshC_Client_Release
FlowSshC_Client_SetAppName
FlowSshC_Client_SetBannerHandler
FlowSshC_Client_SetCompressionAlgs
FlowSshC_Client_SetConnectInterface
FlowSshC_Client_SetDebugFile
FlowSshC_Client_SetDisconnectHandler
FlowSshC_Client_SetEncryptionAlgs
FlowSshC_Client_SetForwardingLogHandler
FlowSshC_Client_SetHost
FlowSshC_Client_SetHostKeyAlgs
FlowSshC_Client_SetHostKeyHandler
FlowSshC_Client_SetHostKeySyncHandler
FlowSshC_Client_SetKexDoneHandler
FlowSshC_Client_SetKeyExchangeAlgs
FlowSshC_Client_SetKeypair
FlowSshC_Client_SetMacAlgs
FlowSshC_Client_SetObfuscation
FlowSshC_Client_SetOptions
FlowSshC_Client_SetOptions2
FlowSshC_Client_SetPassword
FlowSshC_Client_SetPort
FlowSshC_Client_SetPreferredIPVersion
FlowSshC_Client_SetProxyHost
FlowSshC_Client_SetProxyOptions
FlowSshC_Client_SetProxyPassword
FlowSshC_Client_SetProxyPort
FlowSshC_Client_SetProxyType
FlowSshC_Client_SetProxyUserName
FlowSshC_Client_SetRequireStrictKex
FlowSshC_Client_SetSessionId
FlowSshC_Client_SetSessionIdReplyHandler
FlowSshC_Client_SetSocketProvider
FlowSshC_Client_SetUserAuthHandler
FlowSshC_Client_SetUserName
FlowSshC_Client_SetVersionHandler
FlowSshC_FurtherAuth_HavePartialSuccess
FlowSshC_FurtherAuth_IsPasswordRemaining
FlowSshC_FurtherAuth_IsPublicKeyRemaining
FlowSshC_FurtherAuth_SetKeypair
FlowSshC_FurtherAuth_SetPassword
FlowSshC_FurtherAuth_SetUserName
FlowSshC_GetVersion
FlowSshC_Initialize
FlowSshC_Keypair_AddRef
FlowSshC_Keypair_CreateCopy
FlowSshC_Keypair_CreateFromData
FlowSshC_Keypair_CreateNew
FlowSshC_Keypair_GetBitviseData
FlowSshC_Keypair_GetOpenSshData
FlowSshC_Keypair_GetPuttyData
FlowSshC_Keypair_Release
FlowSshC_Keypair_SetPassphrase
FlowSshC_PasswordChange_GetPrompt
FlowSshC_PasswordChange_SetNewPassword
FlowSshC_PublicKey_AddRef
FlowSshC_PublicKey_CreateCopy
FlowSshC_PublicKey_CreateFromData
FlowSshC_PublicKey_CreateFromKeypair
FlowSshC_PublicKey_GetAlg
FlowSshC_PublicKey_GetBitCount
FlowSshC_PublicKey_GetBubbleBabble
FlowSshC_PublicKey_GetEffectiveSecurity
FlowSshC_PublicKey_GetMd5
FlowSshC_PublicKey_GetOpenSshData
FlowSshC_PublicKey_GetSha256
FlowSshC_PublicKey_GetSsh2Data
FlowSshC_PublicKey_IsEqual
FlowSshC_PublicKey_Release
FlowSshC_SetActCode
FlowSshC_Shutdown

Sections

.text
Size: 3.9MB - Virtual size: 3.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1.4MB - Virtual size: 1.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 95KB - Virtual size: 109KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 9B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 272KB - Virtual size: 272KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
All Files/Assets/Data/mc_enc_mpa.dll
.dll windows:5 windows x64 arch:x64

102189c70f88ab5bc50aff1219eadbea

Code Sign

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

21-12-2012 00:00

Not After

30-12-2020 23:59

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

18-10-2012 00:00

Not After

29-12-2020 23:59

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

6c:59:ef:a9:e1:00:e1:0e:e3:06:ba:8f:e0:29:25:59
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

07-06-2012 00:00

Not After

06-06-2022 23:59

Subject

CN=Symantec Class 3 Extended Validation Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

35:a8:4f:a5:03:f8:9b:49:83:96:bb:48:91:68:a5:80
Certificate

Issuer

CN=Symantec Class 3 Extended Validation Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Not Before

14-01-2014 00:00

Not After

07-01-2016 23:59

Subject

SERIALNUMBER=2748129,CN=Adobe Systems Incorporated,OU=Photoshop\, Bridge - SHA256,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130844656c6177617265,1.3.6.1.4.1.311.60.2.1.3=#13025553

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

20:b9:3d:43:59:ff:c2:d6:82:e9:ea:e1:34:7d:29:9f:68:be:57:79
Signer

Actual PE Digest

20:b9:3d:43:59:ff:c2:d6:82:e9:ea:e1:34:7d:29:9f:68:be:57:79

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

E:\bslave-ngproducts\builddir\build\mc_adobe_sdk_dbginfo_win64_x64_release\mc_enc_mpa.pdb

Imports

kernel32

GetLastError
HeapFree
HeapAlloc
GetCurrentThreadId
FlsSetValue
GetCommandLineA
EncodePointer
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
HeapSetInformation
GetVersion
HeapCreate
HeapDestroy
GetProcAddress
GetModuleHandleW
ExitProcess
DecodePointer
WriteFile
GetStdHandle
GetModuleFileNameW
RtlUnwindEx
FlsGetValue
FlsFree
SetLastError
FlsAlloc
Sleep
SetHandleCount
InitializeCriticalSectionAndSpinCount
GetFileType
GetStartupInfoW
DeleteCriticalSection
GetModuleFileNameA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
LeaveCriticalSection
EnterCriticalSection
LoadLibraryW
RaiseException
HeapReAlloc
LCMapStringW
MultiByteToWideChar
GetStringTypeW
HeapSize

Exports

Exports

mpegOutAudioCheckFirst
mpegOutAudioCheckNext
mpegOutAudioCheckSettings
mpegOutAudioChkSettings
mpegOutAudioDefaults
mpegOutAudioDone
mpegOutAudioFree
mpegOutAudioGetAPIExt
mpegOutAudioGetLastErrString
mpegOutAudioInit
mpegOutAudioNew
mpegOutAudioPutBytes

Sections

.text
Size: 86KB - Virtual size: 86KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 19KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 111KB - Virtual size: 115KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

text
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE

data
Size: 25KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
All Files/Assets/Data/msm.dll
.dll windows:6 windows x64 arch:x64

af830f17c37c70c8578ff418ac3a0dc3

Code Sign

33:00:00:03:4e:b5:3c:7a:c1:84:6f:eb:2b:00:00:00:00:03:4e
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

16-03-2023 18:43

Not After

14-03-2024 18:43

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08-07-2011 20:59

Not After

08-07-2026 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

ef:3b:60:d1:82:54:48:0f:5b:58:14:ed:cd:48:7a:42:82:c5:0f:45:f5:4a:27:8d:0e:20:e5:5b:7f:d6:e7:d9
Signer

Actual PE Digest

ef:3b:60:d1:82:54:48:0f:5b:58:14:ed:cd:48:7a:42:82:c5:0f:45:f5:4a:27:8d:0e:20:e5:5b:7f:d6:e7:d9

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

D:\dbs\sh\ddvsm\1001_131954\cmd\4t\out\binaries\amd64ret\bin\amd64\VSPMsg.pdb

Imports

kernel32

DisableThreadLibraryCalls
WriteConsoleW
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
GetStartupInfoW
GetModuleHandleW
RtlUnwindEx
InterlockedFlushSList
GetLastError
SetLastError
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
GetProcAddress
LoadLibraryExW
RaiseException
ExitProcess
GetModuleHandleExW
GetModuleFileNameA
MultiByteToWideChar
WideCharToMultiByte
LCMapStringW
HeapAlloc
HeapFree
FindClose
FindFirstFileExA
FindNextFileA
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
GetCommandLineA
GetCommandLineW
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetProcessHeap
GetStdHandle
GetFileType
GetStringTypeW
HeapSize
HeapReAlloc
SetStdHandle
WriteFile
FlushFileBuffers
GetConsoleCP
GetConsoleMode
SetFilePointerEx
CloseHandle
CreateFileW

Exports

Exports

GetErrorMessageModule
SetErrorMessageModule

Sections

.text
Size: 40KB - Virtual size: 39KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 36KB - Virtual size: 35KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

_RDATA
Size: 512B - Virtual size: 348B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 95KB - Virtual size: 95KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
All Files/Assets/Data/mug_2.wsdl
.xml
All Files/Assets/Data/ns.phpt
All Files/Assets/Data/openssl.phpt
All Files/Assets/Data/portable.phpt
.js
All Files/Assets/Data/socket-close-on-exec.phpt
All Files/Assets/Data/test_vendor.txt
.js
All Files/Assets/MigrationService/legal/Balloon 3.png
.png
All Files/Assets/MigrationService/legal/L0.png
.png
All Files/Assets/MigrationService/legal/bin/odt2txt.exe
.exe windows:4 windows x64 arch:x64

dcab26b1458894101da61b1c77002ddb

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED

Imports

libiconv-2

libiconv
libiconv_close
libiconv_open
libiconvlist

kernel32

DeleteCriticalSection
EnterCriticalSection
GetACP
GetLastError
GetStartupInfoA
InitializeCriticalSection
IsDBCSLeadByteEx
LeaveCriticalSection
MultiByteToWideChar
SetUnhandledExceptionFilter
Sleep
TlsGetValue
VirtualProtect
VirtualQuery
WideCharToMultiByte

msvcrt

__C_specific_handler
___lc_codepage_func
___mb_cur_max_func
__getmainargs
__initenv
__iob_func
__set_app_type
__setusermatherr
_acmdln
_amsg_exit
_cexit
_close
_commode
_errno
_fmode
_initterm
_lock
_onexit
_open
_stat64
_unlock
abort
atoi
calloc
exit
fclose
feof
ferror
fopen
fprintf
fputc
fputs
fread
free
fseek
ftell
fwrite
getc
_write
localeconv
malloc
memcpy
memmove
memset
putc
realloc
setlocale
signal
strcmp
strerror
strlen
strncmp
strncpy
strstr
vfprintf
wcslen

libpcreposix-0

regcomp
regerror
regexec
regfree

zlib1

crc32
inflate
inflateEnd
inflateInit2_

Sections

.text
Size: 37KB - Virtual size: 36KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.pdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.xdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 96B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 312B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
All Files/Assets/MigrationService/legal/bin/sexp-conv.exe
.exe windows:4 windows x64 arch:x64

64a7bea5b5ee65f1dc3b07344a450d91

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED

Imports

libnettle-8

nettle_base16
nettle_base64
nettle_buffer_clear
nettle_buffer_grow
nettle_buffer_init
nettle_buffer_reset
nettle_md5
nettle_sha1
nettle_sha256

kernel32

DeleteCriticalSection
EnterCriticalSection
GetCurrentProcess
GetLastError
GetModuleHandleW
GetProcAddress
InitializeCriticalSection
IsDBCSLeadByteEx
IsProcessorFeaturePresent
LeaveCriticalSection
LoadLibraryW
MultiByteToWideChar
SetUnhandledExceptionFilter
Sleep
TerminateProcess
TlsGetValue
VirtualProtect
VirtualQuery
WideCharToMultiByte

msvcrt

__C_specific_handler
___lc_codepage_func
___mb_cur_max_func
__getmainargs
__initenv
__iob_func
__set_app_type
__setusermatherr
_amsg_exit
_assert
_cexit
_commode
_errno
_fmode
_initterm
_lock
_onexit
_unlock
_write
abort
calloc
exit
ferror
fflush
fprintf
fputc
free
fwrite
getc
getenv
localeconv
malloc
memcpy
memset
putc
signal
strchr
strcmp
strerror
strlen
strncmp
strtol
vfprintf
wcslen

Sections

.text
Size: 39KB - Virtual size: 38KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 240B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.pdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.xdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 96B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 176B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
All Files/Assets/MigrationService/legal/bin/wish.exe
.exe windows:4 windows x64 arch:x64

c4e380968f76f51c7a4ea05ed50512e6

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

DeleteCriticalSection
EnterCriticalSection
GetLastError
GetStartupInfoW
InitializeCriticalSection
LeaveCriticalSection
SetUnhandledExceptionFilter
Sleep
TlsGetValue
VirtualProtect
VirtualQuery
__C_specific_handler

msvcrt

__argc
__iob_func
__set_app_type
__setusermatherr
__wargv
__wgetmainargs
__winitenv
_amsg_exit
_cexit
_commode
_fmode
_initterm
_onexit
_wcmdln
abort
calloc
exit
fprintf
free
fwrite
malloc
memcpy
setlocale
signal
strlen
strncmp
vfprintf

tcl86

Tcl_CreateInterp
Tcl_FindExecutable
Tcl_Init
Tcl_NewStringObj
Tcl_ObjSetVar2
Tcl_StaticPackage

tk86

Tk_CreateConsoleWindow
Tk_Init
Tk_MainExW
Tk_SafeInit

Sections

.text
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 176B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.pdata
Size: 1024B - Virtual size: 564B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.xdata
Size: 512B - Virtual size: 420B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 416B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 96B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 47KB - Virtual size: 46KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 136B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
All Files/Assets/MigrationService/legal/condition.png
.png
All Files/Assets/MigrationService/legal/pkcs11-vision.png
.png
All Files/Assets/MigrationService/libsmi-2.dll
.dll windows:4 windows x64 arch:x64

d9734a6518811e0dd1f2b9c609c8e1b1

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

kernel32

DeleteCriticalSection
EnterCriticalSection
FreeLibrary
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetLastError
GetModuleHandleA
GetProcAddress
GetSystemTimeAsFileTime
GetTickCount
InitializeCriticalSection
LeaveCriticalSection
LoadLibraryA
QueryPerformanceCounter
RtlAddFunctionTable
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
SetUnhandledExceptionFilter
Sleep
TerminateProcess
TlsGetValue
UnhandledExceptionFilter
VirtualProtect
VirtualQuery

msvcrt

_access
_fileno
_isatty
_putenv
_strdup
__dllonexit
__iob_func
_amsg_exit
_errno
_gmtime64
_initterm
_lock
_mktime64
_onexit
_stricmp
_time64
_unlock
_vsnprintf
abort
atoi
calloc
clearerr
exit
fclose
feof
ferror
fgetc
fgets
fopen
fprintf
fputc
fread
free
fwrite
getc
getenv
islower
isprint
isspace
isupper
malloc
memcmp
memcpy
memset
realloc
rewind
signal
sprintf
strcat
strchr
strcmp
strcpy
strcspn
strerror
strlen
strncmp
strncpy
strstr
strtok
strtol
strtoul
tolower
vfprintf

Exports

Exports

_iterate
absoluteSchemaNodeid
abstractValidation
addAttribute
addCTExtNode
addClass
addElementToList
addEvent
addHandle
addIdentity
addImport
addImportFlags
addImportedModule
addLastElementToList
addMacro
addModule
addNode
addObject
addObjectFlags
addRevision
addSubmodule
addType
addTypeFlags
addView
addYangNode
applyRefine
applyRefinements
asnprintf
asprintf
buildIdentifier
checkDate
checkImports
checkObjectFlags
checkUnknownStatement
cleanDQString
cleanSQString
concatTmp
copyModule
copySubtree
countChildNodesByTypeAndValue
countChoiceChildNodesByTypeAndValue
createIdentifierRef
createListElement
createModuleInfo
createNodes
createNodesByOidString
createReferenceNode
createTypeInfo
currentParser
deleteObjectFlags
deleteTypeFlags
descendantSchemaNodeid
duplicateObject
duplicateType
duplicateTypeToAttribute
expandAugment
expandAugments
expandDeviation
expandGroupings
expandInheritance
expandInstance
externalModule
findChildNodeByType
findChildNodeByTypeAndValue
findClassByModuleAndName
findClassByModulenameAndName
findHandleByName
findIdentityByModuleAndName
findIdentityByModulenameAndName
findIdentityByName
findImportByModulenameAndName
findImportByName
findMacroByModuleAndName
findMacroByName
findModuleByName
findNamedNumberByName
findNextObjectByName
findNextTypeByName
findNodeByOid
findNodeByOidString
findNodeByParentAndSubid
findObjectByModuleAndName
findObjectByModuleAndNode
findObjectByModulenameAndName
findObjectByModulenameAndNode
findObjectByName
findObjectByNode
findTargetNode
findTypeByModuleAndName
findTypeByModulenameAndName
findTypeByName
findTypeNamedNumber
findYangModuleByName
findYangModuleByPrefix
freeIdentiferList
freeList
freeUniqueList
freeYangNode
getBuiltInType
getCardinality
getIdentifier
getIdentifierGroup
getKeyList
getModuleInfo
getModuleName
getNumberOfCR
getParentNode
getPrefix
getUniqueList
getXPathNode
initMap
instanceListValidation
isAbsoluteSchemaNodeid
isAllowedStatement
isAlpha
isComplexTypeDefinition
isDataDefNode
isDataDefinitionNode
isDescendantSchemaNodeid
isDigit
isInList
isInView
isMandatory
isNonNegativeInteger
isNumericalType
isPositiveInteger
isPossibleAugmentTargetNode
isSchemaNode
isSeparator
isSingleton
isValidDeviation
isWSP
iterate
keyValidation
lineAdjust
listIdentifierRef
listImport
listNode
loadModule
loadYangModule
map
nodeIdentifier
presenceNodeKind
processUniqueList
removeHandle
removeYangNode
resolveNodeByTypeAndValue
resolveReference
resolveReferences
resolveXPath
sameModules
semanticAnalysis
setAttributeAccess
setAttributeDecl
setAttributeList
setAttributeName
setAttributeParentClass
setAttributeParentType
setClassDecl
setClassDescription
setClassParent
setClassReference
setClassStatus
setConfig
setDescription
setIdentityDecl
setIdentityDescription
setIdentityParent
setIdentityReference
setIdentityStatus
setImportModulename
setMacroAbnf
setMacroDecl
setMacroDescription
setMacroLine
setMacroReference
setMacroStatus
setModuleContactInfo
setModuleDescription
setModuleIdentityObject
setModuleLastUpdated
setModuleOrganization
setModuleReference
setObjectAccess
setObjectCreate
setObjectDecl
setObjectDescription
setObjectFormat
setObjectImplied
setObjectIndexkind
setObjectLine
setObjectList
setObjectName
setObjectNodekind
setObjectReference
setObjectRelated
setObjectStatus
setObjectType
setObjectUniqueness
setObjectUnits
setObjectValue
setReference
setRevisionLine
setStatus
setTypeBasetype
setTypeDecl
setTypeDescription
setTypeFormat
setTypeLine
setTypeList
setTypeName
setTypeParent
setTypeReference
setTypeStatus
setTypeUnits
setTypeValue
smiAccessAsString
smiAsprintf
smiBasetypeAsString
smiCheckAugment
smiCheckComplianceStatus
smiCheckDefault
smiCheckFormat
smiCheckGroupMembers
smiCheckGroupMembership
smiCheckIndex
smiCheckModuleIdentityRegistration
smiCheckNamedNumberRedefinition
smiCheckNamedNumberSubtyping
smiCheckNamedNumbersOrder
smiCheckNotificationMembers
smiCheckNotificationOid
smiCheckObjectName
smiCheckObjectReuse
smiCheckRowMembers
smiCheckTypeFormat
smiCheckTypeName
smiCheckTypeRanges
smiCheckTypeUsage
smiCheckUniqueness
smiCheckValueType
smiDeclAsString
smiDepth
smiEnterLexRecursion
smiErrorHandler
smiExit
smiFree
smiFreeData
smiGetAttribute
smiGetAttributeFirstNamedNumber
smiGetAttributeFirstRange
smiGetAttributeLine
smiGetAttributeNextNamedNumber
smiGetAttributeNextRange
smiGetAttributeParentClass
smiGetAttributeParentType
smiGetClass
smiGetClassLine
smiGetClassModule
smiGetElementNode
smiGetErrorDescription
smiGetErrorMsg
smiGetErrorSeverity
smiGetErrorTag
smiGetEventLine
smiGetFirstAttribute
smiGetFirstChildNode
smiGetFirstClass
smiGetFirstElement
smiGetFirstEvent
smiGetFirstIdentity
smiGetFirstImport
smiGetFirstMacro
smiGetFirstModule
smiGetFirstNamedNumber
smiGetFirstNode
smiGetFirstOption
smiGetFirstRange
smiGetFirstRefinement
smiGetFirstRevision
smiGetFirstType
smiGetFirstUniqueAttribute
smiGetFirstUniquenessElement
smiGetFlags
smiGetIdentity
smiGetIdentityLine
smiGetIdentityModule
smiGetMacro
smiGetMacroLine
smiGetMacroModule
smiGetMaxSize
smiGetMinMaxRange
smiGetMinSize
smiGetModule
smiGetModuleIdentityNode
smiGetModulePath
smiGetNextAttribute
smiGetNextChildNode
smiGetNextClass
smiGetNextElement
smiGetNextEvent
smiGetNextIdentity
smiGetNextImport
smiGetNextMacro
smiGetNextModule
smiGetNextNamedNumber
smiGetNextNode
smiGetNextOption
smiGetNextRange
smiGetNextRefinement
smiGetNextRevision
smiGetNextType
smiGetNextUniqueAttribute
smiGetNode
smiGetNodeByOID
smiGetNodeLine
smiGetNodeModule
smiGetNodeType
smiGetOptionLine
smiGetOptionNode
smiGetParentClass
smiGetParentIdentity
smiGetParentNode
smiGetParentType
smiGetPath
smiGetRefinementLine
smiGetRefinementNode
smiGetRefinementType
smiGetRefinementWriteType
smiGetRelatedNode
smiGetRevisionLine
smiGetType
smiGetTypeLine
smiGetTypeModule
smiGuessFileLanguage
smiGuessModuleLanguage
smiHandle
smiInit
smiInitData
smiIsClassScalar
smiIsImported
smiIsLoaded
smiIsPath
smiLanguageAsString
smiLeaveLexRecursion
smiLoadModule
smiMalloc
smiNodekindAsString
smiPrintError
smiPrintErrorAtLine
smiReadConfig
smiRealloc
smiRenderNode
smiRenderOID
smiRenderType
smiRenderValue
smiSetErrorHandler
smiSetErrorLevel
smiSetErrorSeverity
smiSetFlags
smiSetPath
smiSetSeverity
smiStatusAsString
smiStrdup
smiStrndup
smiTypeDerivedFrom
smiUnpack
smiValueAsString
smiVasprintf
smi_create_buffer
smi_delete_buffer
smi_flex_debug
smi_flush_buffer
smi_library_version
smi_scan_buffer
smi_scan_bytes
smi_scan_string
smi_switch_to_buffer
smi_version_string
smialloc
smidebug
smifree
smiget_debug
smiget_in
smiget_leng
smiget_lineno
smiget_out
smiget_text
smiin
smileng
smilex
smilex_destroy
smilineno
sming_flex_debug
smingin
smingleng
sminglineno
smingout
smingtext
smiout
smiparse
smipop_buffer_state
smipush_buffer_state
smirealloc
smirestart
smiset_debug
smiset_in
smiset_lineno
smiset_out
smitext
smiyyerror
timegm
typeHandler
uniqueNames
uniqueNodeKind
uniqueSubmoduleDefinitions
validateConfigProperties
validateDefaultStatements
validateInclude
validateLists
validateNodeUniqueness
validatePrefixes
vasnprintf
vasprintf
yangBuiltInTypeNames
yangDeclAsString
yangEnterLexRecursion
yangFreeData
yangGetFirstChildNode
yangGetFirstModule
yangGetModule
yangGetModuleFromSmiModule
yangGetNextChildNode
yangGetNextModule
yangIsModule
yangIsTrueConf
yangLeaveLexRecursion
yangStatusAsString
yang_create_buffer
yang_delete_buffer
yang_flex_debug
yang_flush_buffer
yang_scan_buffer
yang_scan_bytes
yang_scan_string
yang_switch_to_buffer
yangalloc
yangdebug
yangfree
yangget_debug
yangget_in
yangget_leng
yangget_lineno
yangget_out
yangget_text
yangin
yangleng
yanglex
yanglex_destroy
yanglineno
yangout
yangparse
yangpop_buffer_state
yangpush_buffer_state
yangrealloc
yangrestart
yangset_debug
yangset_in
yangset_lineno
yangset_out
yangtext

Sections

.text
Size: 231KB - Virtual size: 230KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 19KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 380KB - Virtual size: 380KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 88B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 72B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/4
Size: 512B - Virtual size: 48B

IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/19
Size: 512B - Virtual size: 65B

IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/35
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/47
Size: 1024B - Virtual size: 652B

IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/61
Size: 512B - Virtual size: 453B

IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/73
Size: 512B - Virtual size: 192B

IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/86
Size: 512B - Virtual size: 77B

IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/97
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/108
Size: 512B - Virtual size: 400B

IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
All Files/Assets/MigrationService/msm.dll
.dll windows:6 windows x64 arch:x64

af830f17c37c70c8578ff418ac3a0dc3

Code Sign

33:00:00:03:4e:b5:3c:7a:c1:84:6f:eb:2b:00:00:00:00:03:4e
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

16-03-2023 18:43

Not After

14-03-2024 18:43

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08-07-2011 20:59

Not After

08-07-2026 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

ef:3b:60:d1:82:54:48:0f:5b:58:14:ed:cd:48:7a:42:82:c5:0f:45:f5:4a:27:8d:0e:20:e5:5b:7f:d6:e7:d9
Signer

Actual PE Digest

ef:3b:60:d1:82:54:48:0f:5b:58:14:ed:cd:48:7a:42:82:c5:0f:45:f5:4a:27:8d:0e:20:e5:5b:7f:d6:e7:d9

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

D:\dbs\sh\ddvsm\1001_131954\cmd\4t\out\binaries\amd64ret\bin\amd64\VSPMsg.pdb

Imports

kernel32

DisableThreadLibraryCalls
WriteConsoleW
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
GetStartupInfoW
GetModuleHandleW
RtlUnwindEx
InterlockedFlushSList
GetLastError
SetLastError
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
GetProcAddress
LoadLibraryExW
RaiseException
ExitProcess
GetModuleHandleExW
GetModuleFileNameA
MultiByteToWideChar
WideCharToMultiByte
LCMapStringW
HeapAlloc
HeapFree
FindClose
FindFirstFileExA
FindNextFileA
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
GetCommandLineA
GetCommandLineW
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetProcessHeap
GetStdHandle
GetFileType
GetStringTypeW
HeapSize
HeapReAlloc
SetStdHandle
WriteFile
FlushFileBuffers
GetConsoleCP
GetConsoleMode
SetFilePointerEx
CloseHandle
CreateFileW

Exports

Exports

GetErrorMessageModule
SetErrorMessageModule

Sections

.text
Size: 40KB - Virtual size: 39KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 36KB - Virtual size: 35KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

_RDATA
Size: 512B - Virtual size: 348B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 95KB - Virtual size: 95KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
All Files/Assets/b2b.wsdl
.xml
All Files/Assets/ens.phpt
All Files/Filesss/IMG.png
.png
All Files/Filesss/LATEST.png
.png
All Files/Filesss/file code.png
.png
All Files/PICS/1.png
.png
All Files/PICS/1728281172004.png
.png
All Files/PICS/2.png
.png
All Files/PICS/2025 (2).png
.png
All Files/PICS/2025--.jpg
.jpg
All Files/PICS/3.png
.png
All Files/PICS/4.png
.png
All Files/PICS/5.png
.png
All Files/PICS/9.png
.png
All Files/PICS/Data/2025 (2).png
.png
All Files/PICS/Data/IMG.png
.png
All Files/PICS/Data/win.png
.png
All Files/PICS/cb (2).png
.png
All Files/PICS/cb.png
.png
All Files/PICS/d (2).jpg
.jpg
All Files/PICS/gettyimages-1816467185-640x640.jpg
.jpg
All Files/Plugins/PICS/1.png
.png
All Files/Plugins/PICS/1728281172004.png
.png
All Files/Plugins/PICS/2.png
.png
All Files/Plugins/PICS/2025 (2).png
.png
All Files/Plugins/PICS/2025--.jpg
.jpg
All Files/Plugins/PICS/3.png
.png
All Files/Plugins/PICS/4.png
.png
All Files/Plugins/PICS/5.png
.png
All Files/Plugins/PICS/9.png
.png
All Files/Plugins/PICS/Data/2025 (2).png
.png
All Files/Plugins/PICS/Data/IMG.png
.png
All Files/Plugins/PICS/Data/win.png
.png
All Files/Plugins/PICS/Password 2025.png
.png
All Files/Plugins/PICS/Star.jpg
.jpg
All Files/Plugins/PICS/cb (2).png
.png
All Files/Plugins/PICS/cb.png
.png
All Files/Plugins/PICS/d (2).jpg
.jpg
All Files/Plugins/PICS/gettyimages-1816467185-640x640.jpg
.jpg
All Files/Plugins/PICS/pngtree-2025-3d-gold-text-effect-png-image_14406263.png
.png
All Files/Plugins/PICS/sn.png
.png
All Files/Plugins/PICS/vc.png
.png
All Files/Plugins/PICS/wei.png
.png
All Files/Plugins/StartupHelper
.exe windows:5 windows x86 arch:x86

d21794f0d47bb5c7f5977a6500854d85

Code Sign

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

29-04-2021 00:00

Not After

28-04-2036 23:59

Subject

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

04:28:14:36:98:54:a8:5f:9b:8f:90:12:67:c0:3c:f2
Certificate

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Not Before

17-08-2022 00:00

Not After

29-07-2025 23:59

Subject

SERIALNUMBER=91110108680456115E,CN=Glarysoft Ltd,O=Glarysoft Ltd,ST=Beijing,C=CN,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.1=#13104861696469616e204469737472696374,1.3.6.1.4.1.311.60.2.1.2=#13074265696a696e67,1.3.6.1.4.1.311.60.2.1.3=#1302434e

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16
Certificate

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Not Before

14-07-2023 00:00

Not After

13-10-2034 23:59

Subject

CN=DigiCert Timestamp 2023,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

23-03-2022 00:00

Not After

22-03-2037 23:59

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01-08-2022 00:00

Not After

09-11-2031 23:59

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

29-04-2021 00:00

Not After

28-04-2036 23:59

Subject

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

04:28:14:36:98:54:a8:5f:9b:8f:90:12:67:c0:3c:f2
Certificate

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Not Before

17-08-2022 00:00

Not After

29-07-2025 23:59

Subject

SERIALNUMBER=91110108680456115E,CN=Glarysoft Ltd,O=Glarysoft Ltd,ST=Beijing,C=CN,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.1=#13104861696469616e204469737472696374,1.3.6.1.4.1.311.60.2.1.2=#13074265696a696e67,1.3.6.1.4.1.311.60.2.1.3=#1302434e

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16
Certificate

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Not Before

14-07-2023 00:00

Not After

13-10-2034 23:59

Subject

CN=DigiCert Timestamp 2023,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

23-03-2022 00:00

Not After

22-03-2037 23:59

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01-08-2022 00:00

Not After

09-11-2031 23:59

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

cc:08:bb:49:63:6e:cf:3f:72:bf:92:cf:45:8b:91:0e:90:0f:7d:11:28:70:03:90:0a:af:8b:19:89:f5:2f:7b
Signer

Actual PE Digest

cc:08:bb:49:63:6e:cf:3f:72:bf:92:cf:45:8b:91:0e:90:0f:7d:11:28:70:03:90:0a:af:8b:19:89:f5:2f:7b

Digest Algorithm

sha256

PE Digest Matches

true

b2:c8:9c:70:dd:00:70:00:00:18:3b:25:00:02:8e:c2:fc:f9:28:b7
Signer

Actual PE Digest

b2:c8:9c:70:dd:00:70:00:00:18:3b:25:00:02:8e:c2:fc:f9:28:b7

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

D:\winapps\mh\trunk\exe\vc\StartupHelper\sourcecode\Release\StartupHelper.pdb

Imports

mfc90u

ord404
ord2597
ord2141
ord4131
ord6635
ord4044
ord611
ord595
ord3489
ord5664
ord4652
ord1493
ord6411
ord3355
ord1665
ord5939
ord4405
ord1607
ord3220
ord5632
ord5167
ord5324
ord1810
ord1809
ord1675
ord3353
ord6408
ord1754
ord1751
ord4345
ord1492
ord4664
ord5602
ord2074
ord5512
ord6800
ord4603
ord3743
ord5154
ord4702
ord1728
ord6466
ord5685
ord5683
ord960
ord965
ord969
ord967
ord971
ord2615
ord2635
ord2619
ord2625
ord2623
ord2621
ord2638
ord2633
ord2617
ord2640
ord2628
ord2610
ord2612
ord2630
ord2375
ord2368
ord1641
ord6802
ord4174
ord6804
ord3682
ord5404
ord6376
ord3226
ord1442
ord5625
ord2139
ord1792
ord1791
ord1727
ord5650
ord3140
ord4910
ord4682
ord3515
ord2593
ord5653
ord6091
ord4774
ord4815
ord5078
ord613
ord337
ord4631
ord2901
ord4741
ord1533
ord3537
ord6095
ord3622
ord6187
ord6094
ord333
ord3488
ord1354
ord1353
ord2097
ord3543
ord1183
ord3486
ord4527
ord6579
ord4543
ord6577
ord2592
ord744
ord524
ord2069
ord1063
ord663
ord2146
ord1166
ord1064
ord6604
ord4530
ord2904
ord1047
ord2596
ord5008
ord1108
ord367
ord586
ord4000
ord374
ord2130
ord3577
ord2282
ord4512
ord4442
ord4448
ord4423
ord6801
ord4173
ord6803
ord4747
ord2251
ord2206
ord6035
ord4179
ord1048
ord5548
ord6741
ord5830
ord4213
ord2087
ord3217
ord5674
ord5676
ord4347
ord4996
ord5680
ord5663
ord6018
ord2771
ord2983
ord3112
ord799
ord265
ord266
ord1272
ord1137
ord1254
ord686
ord436
ord792
ord587
ord4728
ord2966
ord3115
ord2774
ord2893
ord2764
ord4080
ord4081
ord4071
ord2891
ord4348
ord4905
ord4681
ord3670
ord2447
ord636
ord790
ord639
ord2208
ord6482
ord1098
ord4211
ord794
ord589
ord4043
ord4967
ord1318
ord2327
ord316
ord601
ord899
ord1315
ord938
ord1603
ord2478
ord5979
ord6687
ord285
ord5535
ord6079
ord6813
ord1552
ord2551
ord946
ord821
ord2470
ord6096
ord4541
ord4410
ord290
ord1088
ord6659
ord2243
ord6204
ord339
ord289
ord288
ord6164
ord1599
ord809
ord6013
ord935
ord936
ord2702
ord286
ord5851
ord3637
ord2106
ord811
ord280
ord2326
ord2694
ord6529
ord813
ord2537
ord600
ord1143
ord296
ord1248
ord2084
ord1250
ord801

msvcr90

memcpy
memset
towupper
__CxxFrameHandler3
?_type_info_dtor_internal_method@type_info@@QAEXXZ
_crt_debugger_hook
_controlfp_s
_invoke_watson
_except_handler4_common
_decode_pointer
_onexit
_lock
__dllonexit
_unlock
?terminate@@YAXXZ
__set_app_type
_encode_pointer
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_configthreadlocale
_initterm_e
_initterm
_wcmdln
exit
_XcptFilter
_exit
_cexit
__wgetmainargs
_amsg_exit
__wargv
__argc
setlocale
_resetstkoflw
?what@exception@std@@UBEPBDXZ
_msize
_purecall
_set_errno
_get_errno
_wtoi64
realloc
_gcvt_s
_fpclass
_HUGE
iswspace
wcsrchr
wcschr
_ui64toa_s
_i64toa_s
isspace
_itoa_s
wcsncmp
wcstod
wcstol
_wcstoui64
_wcstoi64
strtol
_wtoi
wcsnlen
_wcsicmp
_scwprintf
_ultoa_s
strncmp
_strlwr_s
_recalloc
calloc
_itow_s
swprintf_s
_CxxThrowException
malloc
wcscpy_s
wcsncpy_s
_invalid_parameter_noinfo
??0exception@std@@QAE@ABV01@@Z
free
??0exception@std@@QAE@XZ
??1exception@std@@UAE@XZ
??0exception@std@@QAE@ABQBD@Z
memmove_s
memcpy_s

kernel32

GetPrivateProfileSectionW
LocalFree
GetCurrentProcessId
InterlockedCompareExchange
GetStartupInfoW
SetUnhandledExceptionFilter
QueryPerformanceCounter
GetCurrentThreadId
GetSystemTimeAsFileTime
TerminateProcess
SetLastError
LoadLibraryW
GetCurrentProcess
UnhandledExceptionFilter
IsDebuggerPresent
EnterCriticalSection
GetProcAddress
GetModuleHandleW
Sleep
GetTickCount
GetCommandLineW
InterlockedExchange
CreateMutexW
CloseHandle
HeapReAlloc
GetPrivateProfileIntW
HeapFree
GetProcessHeap
HeapAlloc
WideCharToMultiByte
lstrlenA
MultiByteToWideChar
GetLastError
GetModuleFileNameW
lstrlenW
WaitForSingleObject
HeapDestroy
HeapSize
DeleteCriticalSection
InitializeCriticalSection
LeaveCriticalSection

user32

SendMessageW
AppendMenuW
GetSystemMenu
GetWindowRect
MessageBoxW
GetWindowLongW
SetWindowLongW
UnionRect
GetMenuBarInfo
GetMenuItemID
GetMenuItemCount
GetSysColor
OffsetRect
FrameRect
DrawFrameControl
CopyRect
EnableWindow
IsWindow
InvalidateRect
KillTimer
PtInRect
ReleaseDC
FillRect
GetDC
SystemParametersInfoW
EndPaint
BeginPaint
DrawIcon
GetSystemMetrics
IsIconic
SetTimer
GetClientRect
LoadIconW

gdi32

CreatePen
CreateCompatibleBitmap
CreateSolidBrush
GetObjectW
SetDIBColorTable
GetTextExtentPoint32W
SetBkMode
CreateRoundRectRgn
GetCurrentObject
GetBkMode
CreatePatternBrush
SetBrushOrgEx
FillRgn
FrameRgn
SelectObject
CreateFontW
GetDIBColorTable
StretchBlt
CreateDIBSection
BitBlt
CreateCompatibleDC
DeleteDC
DeleteObject

msimg32

TransparentBlt
GradientFill
AlphaBlend

advapi32

RegQueryValueExW
RegOpenKeyExW

shell32

ShellExecuteW
CommandLineToArgvW

comctl32

_TrackMouseEvent
InitCommonControlsEx

shlwapi

PathFileExistsW

ole32

OleInitialize
CoUninitialize
CoInitialize
CoCreateInstance

oleaut32

SysAllocStringLen
VariantClear
SysAllocString
VariantInit
SysFreeString

msvcp90

??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBD@Z
?npos@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@2IB
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
?swap@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEXAAV12@@Z
?find_last_not_of@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBEIPB_WI@Z
?find_first_not_of@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBEIPB_WI@Z
?clear@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEXXZ
?erase@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV12@II@Z
??4?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV01@PB_W@Z
??4?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV01@ABV01@@Z
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@ABV01@@Z
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@XZ
??1?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@XZ

ws2_32

WSASetLastError
GetAddrInfoW
WSAStartup
WSACleanup
closesocket
WSACloseEvent
WSASocketW
WSAGetLastError
WSAConnect
WSAEnumNetworkEvents
WSAResetEvent
WSASend
WSAGetOverlappedResult
WSARecv
WSACreateEvent
WSASetEvent
WSAEventSelect
FreeAddrInfoW

boottime

ord2
GetSetupTime
ord1

gdiplus

GdipDisposeImage
GdipFree
GdiplusShutdown
GdipGetImageGraphicsContext
GdipDeleteGraphics
GdipDrawImageI
GdipCloneImage
GdipGetImageWidth
GdipGetImageHeight
GdipGetImagePixelFormat
GdipGetImagePaletteSize
GdipGetImagePalette
GdipCreateBitmapFromFile
GdipCreateBitmapFromScan0
GdipBitmapLockBits
GdipBitmapUnlockBits
GdiplusStartup
GdipAlloc

languages

ord5
ord3
ord6
ord8
ord4

config

ord13
ord11

Sections

.text
Size: 122KB - Virtual size: 121KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 38KB - Virtual size: 38KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 161KB - Virtual size: 161KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 17KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
All Files/Plugins/cache/ICQLiteShell.dll
.dll regsvr32 windows:4 windows x86 arch:x86

36da04e9d80185202c5dff27d69487ef

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

mfc42

ord2818
ord540
ord2915
ord537
ord800
ord941
ord861
ord823
ord6467
ord1131
ord2725
ord3953
ord825
ord561
ord3738
ord4424
ord4622
ord4080
ord3079
ord3825
ord3831
ord3830
ord2976
ord3081
ord2985
ord3262
ord3136
ord4465
ord3259
ord3147
ord2982
ord5714
ord5289
ord5307
ord4698
ord535
ord4160
ord5302
ord2396
ord269
ord5199
ord1577
ord600
ord4274
ord1182
ord5300
ord1255
ord1253
ord1578
ord1197
ord4079
ord1570
ord1243
ord342
ord815
ord6375
ord4486
ord2554
ord2512
ord5731
ord1116
ord1176
ord1575
ord1168
ord3922
ord826
ord3346
ord1089

msvcrt

_initterm
??1type_info@@UAE@XZ
_stricmp
memcpy
__CxxFrameHandler
free
malloc
realloc
memset
memcmp
strlen
_snprintf
strcat
strncpy
?terminate@@YAXXZ
_except_handler3
__dllonexit
_onexit
_adjust_fdiv

kernel32

GetLastError
LoadLibraryA
GetModuleFileNameA
GetModuleHandleA
GetShortPathNameA
lstrlenA
MultiByteToWideChar
lstrlenW
InterlockedDecrement
EnterCriticalSection
InterlockedIncrement
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSection
WideCharToMultiByte
FreeLibrary
SizeofResource
LoadResource
FindResourceA
LoadLibraryExA
lstrcmpiA
lstrcpynA
IsDBCSLeadByte
HeapDestroy
GetProcAddress
lstrcpyA
lstrcatA
GetVersionExA
CloseHandle
OpenMutexA
LocalFree
LocalAlloc

user32

CreateMenu
InsertMenuItemA
LoadBitmapA
InsertMenuA
wsprintfA
CharNextA

gdi32

DeleteObject

advapi32

RegOpenKeyExA
RegEnumValueA
RegQueryInfoKeyA
RegSetValueExA
RegEnumKeyExA
RegCloseKey
RegDeleteValueA
RegCreateKeyExA
RegDeleteKeyA

shell32

DragQueryFileA

ole32

CoTaskMemRealloc
CoTaskMemAlloc
CoCreateInstance
CoTaskMemFree

oleaut32

BSTR_UserMarshal
RegisterTypeLi
SysAllocStringLen
BSTR_UserFree
BSTR_UserUnmarshal
LoadTypeLi
BSTR_UserSize
SysAllocString
SysFreeString
VarUI4FromStr

rpcrt4

CStdStubBuffer_CountRefs
CStdStubBuffer_Invoke
CStdStubBuffer_Disconnect
CStdStubBuffer_Connect
CStdStubBuffer_AddRef
CStdStubBuffer_QueryInterface
IUnknown_Release_Proxy
IUnknown_AddRef_Proxy
IUnknown_QueryInterface_Proxy
NdrOleFree
NdrOleAllocate
NdrDllGetClassObject
NdrDllCanUnloadNow
NdrCStdStubBuffer_Release
NdrDllRegisterProxy
NdrDllUnregisterProxy
CStdStubBuffer_IsIIDSupported
CStdStubBuffer_DebugServerQueryInterface
CStdStubBuffer_DebugServerRelease

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 20KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.orpc
Size: 4KB - Virtual size: 89B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
All Files/Plugins/cache/ICQRT.dll
.dll windows:4 windows x86 arch:x86

eea1a54f9a41b7445dc95356daf71d0a

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

EnterCriticalSection
Sleep
InitializeCriticalSection
InterlockedExchange
DeleteCriticalSection
LeaveCriticalSection
DisableThreadLibraryCalls

msvcrt

__CxxFrameHandler
_CxxThrowException
?what@exception@@UBEPBDXZ
strlen
??0exception@@QAE@ABQBD@Z
??1exception@@UAE@XZ
memcpy
??4exception@@QAEAAV0@ABV0@@Z
??3@YAXPAX@Z
wcslen
iswctype
??2@YAPAXI@Z
??0exception@@QAE@ABV0@@Z
memcmp
memchr
memset
??1type_info@@UAE@XZ
_except_handler3
?terminate@@YAXXZ
__dllonexit
_onexit
free
_initterm
malloc
_adjust_fdiv
memmove

Exports

Exports

??4?$numeric_limits@C@std@@QAEAAV01@ABV01@@Z
??4?$numeric_limits@D@std@@QAEAAV01@ABV01@@Z
??4?$numeric_limits@E@std@@QAEAAV01@ABV01@@Z
??4?$numeric_limits@F@std@@QAEAAV01@ABV01@@Z
??4?$numeric_limits@G@std@@QAEAAV01@ABV01@@Z
??4?$numeric_limits@H@std@@QAEAAV01@ABV01@@Z
??4?$numeric_limits@I@std@@QAEAAV01@ABV01@@Z
??4?$numeric_limits@J@std@@QAEAAV01@ABV01@@Z
??4?$numeric_limits@K@std@@QAEAAV01@ABV01@@Z
??4?$numeric_limits@M@std@@QAEAAV01@ABV01@@Z
??4?$numeric_limits@N@std@@QAEAAV01@ABV01@@Z
??4?$numeric_limits@O@std@@QAEAAV01@ABV01@@Z
??4?$numeric_limits@_N@std@@QAEAAV01@ABV01@@Z
??4_Num_base@std@@QAEAAU01@ABU01@@Z
??4_Num_float_base@std@@QAEAAU01@ABU01@@Z
??4_Num_int_base@std@@QAEAAU01@ABU01@@Z
?denorm_min@?$numeric_limits@C@std@@SACXZ
?denorm_min@?$numeric_limits@D@std@@SADXZ
?denorm_min@?$numeric_limits@E@std@@SAEXZ
?denorm_min@?$numeric_limits@F@std@@SAFXZ
?denorm_min@?$numeric_limits@G@std@@SAGXZ
?denorm_min@?$numeric_limits@H@std@@SAHXZ
?denorm_min@?$numeric_limits@I@std@@SAIXZ
?denorm_min@?$numeric_limits@J@std@@SAJXZ
?denorm_min@?$numeric_limits@K@std@@SAKXZ
?denorm_min@?$numeric_limits@M@std@@SAMXZ
?denorm_min@?$numeric_limits@N@std@@SANXZ
?denorm_min@?$numeric_limits@O@std@@SAOXZ
?denorm_min@?$numeric_limits@_N@std@@SA_NXZ
?epsilon@?$numeric_limits@C@std@@SACXZ
?epsilon@?$numeric_limits@D@std@@SADXZ
?epsilon@?$numeric_limits@E@std@@SAEXZ
?epsilon@?$numeric_limits@F@std@@SAFXZ
?epsilon@?$numeric_limits@G@std@@SAGXZ
?epsilon@?$numeric_limits@H@std@@SAHXZ
?epsilon@?$numeric_limits@I@std@@SAIXZ
?epsilon@?$numeric_limits@J@std@@SAJXZ
?epsilon@?$numeric_limits@K@std@@SAKXZ
?epsilon@?$numeric_limits@M@std@@SAMXZ
?epsilon@?$numeric_limits@N@std@@SANXZ
?epsilon@?$numeric_limits@O@std@@SAOXZ
?epsilon@?$numeric_limits@_N@std@@SA_NXZ
?infinity@?$numeric_limits@C@std@@SACXZ
?infinity@?$numeric_limits@D@std@@SADXZ
?infinity@?$numeric_limits@E@std@@SAEXZ
?infinity@?$numeric_limits@F@std@@SAFXZ
?infinity@?$numeric_limits@G@std@@SAGXZ
?infinity@?$numeric_limits@H@std@@SAHXZ
?infinity@?$numeric_limits@I@std@@SAIXZ
?infinity@?$numeric_limits@J@std@@SAJXZ
?infinity@?$numeric_limits@K@std@@SAKXZ
?infinity@?$numeric_limits@M@std@@SAMXZ
?infinity@?$numeric_limits@N@std@@SANXZ
?infinity@?$numeric_limits@O@std@@SAOXZ
?infinity@?$numeric_limits@_N@std@@SA_NXZ
?max@?$numeric_limits@C@std@@SACXZ
?max@?$numeric_limits@D@std@@SADXZ
?max@?$numeric_limits@E@std@@SAEXZ
?max@?$numeric_limits@F@std@@SAFXZ
?max@?$numeric_limits@G@std@@SAGXZ
?max@?$numeric_limits@H@std@@SAHXZ
?max@?$numeric_limits@I@std@@SAIXZ
?max@?$numeric_limits@J@std@@SAJXZ
?max@?$numeric_limits@K@std@@SAKXZ
?max@?$numeric_limits@M@std@@SAMXZ
?max@?$numeric_limits@N@std@@SANXZ
?max@?$numeric_limits@O@std@@SAOXZ
?max@?$numeric_limits@_N@std@@SA_NXZ
?min@?$numeric_limits@C@std@@SACXZ
?min@?$numeric_limits@D@std@@SADXZ
?min@?$numeric_limits@E@std@@SAEXZ
?min@?$numeric_limits@F@std@@SAFXZ
?min@?$numeric_limits@G@std@@SAGXZ
?min@?$numeric_limits@H@std@@SAHXZ
?min@?$numeric_limits@I@std@@SAIXZ
?min@?$numeric_limits@J@std@@SAJXZ
?min@?$numeric_limits@K@std@@SAKXZ
?min@?$numeric_limits@M@std@@SAMXZ
?min@?$numeric_limits@N@std@@SANXZ
?min@?$numeric_limits@O@std@@SAOXZ
?min@?$numeric_limits@_N@std@@SA_NXZ
?quiet_NaN@?$numeric_limits@C@std@@SACXZ
?quiet_NaN@?$numeric_limits@D@std@@SADXZ
?quiet_NaN@?$numeric_limits@E@std@@SAEXZ
?quiet_NaN@?$numeric_limits@F@std@@SAFXZ
?quiet_NaN@?$numeric_limits@G@std@@SAGXZ
?quiet_NaN@?$numeric_limits@H@std@@SAHXZ
?quiet_NaN@?$numeric_limits@I@std@@SAIXZ
?quiet_NaN@?$numeric_limits@J@std@@SAJXZ
?quiet_NaN@?$numeric_limits@K@std@@SAKXZ
?quiet_NaN@?$numeric_limits@M@std@@SAMXZ
?quiet_NaN@?$numeric_limits@N@std@@SANXZ
?quiet_NaN@?$numeric_limits@O@std@@SAOXZ
?quiet_NaN@?$numeric_limits@_N@std@@SA_NXZ
?round_error@?$numeric_limits@C@std@@SACXZ
?round_error@?$numeric_limits@D@std@@SADXZ
?round_error@?$numeric_limits@E@std@@SAEXZ
?round_error@?$numeric_limits@F@std@@SAFXZ
?round_error@?$numeric_limits@G@std@@SAGXZ
?round_error@?$numeric_limits@H@std@@SAHXZ
?round_error@?$numeric_limits@I@std@@SAIXZ
?round_error@?$numeric_limits@J@std@@SAJXZ
?round_error@?$numeric_limits@K@std@@SAKXZ
?round_error@?$numeric_limits@M@std@@SAMXZ
?round_error@?$numeric_limits@N@std@@SANXZ
?round_error@?$numeric_limits@O@std@@SAOXZ
?round_error@?$numeric_limits@_N@std@@SA_NXZ
?signaling_NaN@?$numeric_limits@C@std@@SACXZ
?signaling_NaN@?$numeric_limits@D@std@@SADXZ
?signaling_NaN@?$numeric_limits@E@std@@SAEXZ
?signaling_NaN@?$numeric_limits@F@std@@SAFXZ
?signaling_NaN@?$numeric_limits@G@std@@SAGXZ
?signaling_NaN@?$numeric_limits@H@std@@SAHXZ
?signaling_NaN@?$numeric_limits@I@std@@SAIXZ
?signaling_NaN@?$numeric_limits@J@std@@SAJXZ
?signaling_NaN@?$numeric_limits@K@std@@SAKXZ
?signaling_NaN@?$numeric_limits@M@std@@SAMXZ
?signaling_NaN@?$numeric_limits@N@std@@SANXZ
?signaling_NaN@?$numeric_limits@O@std@@SAOXZ
?signaling_NaN@?$numeric_limits@_N@std@@SA_NXZ

Sections

.text
Size: 17KB - Virtual size: 17KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
All Files/Plugins/cache/Language/LiteRes.dll
.dll windows:4 windows x86 arch:x86

ce6ef31899b31809ae0c71c094c6f083

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

mfc42

ord1253
ord342
ord823
ord1182
ord1168

msvcrt

free
_initterm
malloc
_adjust_fdiv

Sections

.text
Size: 512B - Virtual size: 480B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 308B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 76B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 732KB - Virtual size: 731KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 420B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
All Files/Plugins/cache/Language/WinRar.exe
.exe windows:5 windows x64 arch:x64

629fae0a56e3262e208711dda6ae6b1d

Code Sign

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

21-12-2012 00:00

Not After

30-12-2020 23:59

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

18-10-2012 00:00

Not After

29-12-2020 23:59

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

52:9e:3f:9f:cf:7d:58:d5:20:d6:07:ab:74:39:50:02
Certificate

Issuer

CN=COMODO RSA Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

02-06-2017 00:00

Not After

01-06-2020 23:59

Subject

CN=win.rar GmbH,O=win.rar GmbH,POSTALCODE=10117,STREET=Marienstrasse 12,L=Berlin,ST=Berlin,C=DE

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

27:66:ee:56:eb:49:f3:8e:ab:d7:70:a2:fc:84:de:22
Certificate

Issuer

CN=AddTrust External CA Root,OU=AddTrust External TTP Network,O=AddTrust AB,C=SE

Not Before

30-05-2000 10:48

Not After

30-05-2020 10:48

Subject

CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

2e:7c:87:cc:0e:93:4a:52:fe:94:fd:1c:b7:cd:34:af
Certificate

Issuer

CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

09-05-2013 00:00

Not After

08-05-2028 23:59

Subject

CN=COMODO RSA Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

52:9e:3f:9f:cf:7d:58:d5:20:d6:07:ab:74:39:50:02
Certificate

Issuer

CN=COMODO RSA Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

02-06-2017 00:00

Not After

01-06-2020 23:59

Subject

CN=win.rar GmbH,O=win.rar GmbH,POSTALCODE=10117,STREET=Marienstrasse 12,L=Berlin,ST=Berlin,C=DE

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

27:66:ee:56:eb:49:f3:8e:ab:d7:70:a2:fc:84:de:22
Certificate

Issuer

CN=AddTrust External CA Root,OU=AddTrust External TTP Network,O=AddTrust AB,C=SE

Not Before

30-05-2000 10:48

Not After

30-05-2020 10:48

Subject

CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

2e:7c:87:cc:0e:93:4a:52:fe:94:fd:1c:b7:cd:34:af
Certificate

Issuer

CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

09-05-2013 00:00

Not After

08-05-2028 23:59

Subject

CN=COMODO RSA Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

7b:05:b1:d4:49:68:51:44:f7:c9:89:d2:9c:19:9d:12
Certificate

Issuer

CN=VeriSign Universal Root Certification Authority,OU=VeriSign Trust Network+OU=(c) 2008 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

12-01-2016 00:00

Not After

11-01-2031 23:59

Subject

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

7b:d4:e5:af:ba:cc:07:3f:a1:01:23:04:22:41:4d:12
Certificate

Issuer

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Not Before

23-12-2017 00:00

Not After

22-03-2029 23:59

Subject

CN=Symantec SHA256 TimeStamping Signer - G3,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

ca:05:77:9a:83:94:f1:c2:84:3b:d1:35:92:02:9e:08:73:69:34:94:e8:62:49:32:6d:ca:10:c8:55:9e:d9:9b
Signer

Actual PE Digest

ca:05:77:9a:83:94:f1:c2:84:3b:d1:35:92:02:9e:08:73:69:34:94:e8:62:49:32:6d:ca:10:c8:55:9e:d9:9b

Digest Algorithm

sha256

PE Digest Matches

true

ed:14:78:6d:47:d9:55:27:5a:d1:dd:f1:22:3e:ed:fc:47:98:f7:f9
Signer

Actual PE Digest

ed:14:78:6d:47:d9:55:27:5a:d1:dd:f1:22:3e:ed:fc:47:98:f7:f9

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

D:\Projects\WinRAR\sfx\setup\build\sfxrar64\Release\sfxrar.pdb

Imports

kernel32

GetLastError
SetLastError
GetCurrentProcess
DeviceIoControl
SetFileTime
CloseHandle
CreateDirectoryW
RemoveDirectoryW
CreateFileW
DeleteFileW
CreateHardLinkW
GetShortPathNameW
GetLongPathNameW
MoveFileW
GetFileType
GetStdHandle
WriteFile
ReadFile
FlushFileBuffers
SetEndOfFile
SetFilePointer
SetFileAttributesW
GetFileAttributesW
FindClose
FindFirstFileW
FindNextFileW
GetVersionExW
GetCurrentDirectoryW
GetFullPathNameW
FoldStringW
GetModuleFileNameW
GetModuleHandleW
FindResourceW
FreeLibrary
GetProcAddress
GetCurrentProcessId
ExitProcess
SetThreadExecutionState
Sleep
LoadLibraryW
GetSystemDirectoryW
CompareStringW
AllocConsole
FreeConsole
AttachConsole
WriteConsoleW
GetProcessAffinityMask
CreateThread
SetThreadPriority
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
SetEvent
ResetEvent
ReleaseSemaphore
WaitForSingleObject
CreateEventW
CreateSemaphoreW
GetSystemTime
SystemTimeToTzSpecificLocalTime
TzSpecificLocalTimeToSystemTime
SystemTimeToFileTime
FileTimeToLocalFileTime
LocalFileTimeToFileTime
FileTimeToSystemTime
GetCPInfo
IsDBCSLeadByte
MultiByteToWideChar
WideCharToMultiByte
GlobalAlloc
GetTickCount
LockResource
GlobalLock
GlobalUnlock
GlobalFree
LoadResource
SizeofResource
SetCurrentDirectoryW
GetExitCodeProcess
GetLocalTime
MapViewOfFile
UnmapViewOfFile
CreateFileMappingW
OpenFileMappingW
GetCommandLineW
SetEnvironmentVariableW
ExpandEnvironmentStringsW
GetTempPathW
MoveFileExW
GetLocaleInfoW
GetTimeFormatW
GetDateFormatW
GetNumberFormatW
SetFilePointerEx
GetConsoleMode
GetConsoleCP
HeapSize
SetStdHandle
GetProcessHeap
FreeEnvironmentStringsW
RaiseException
GetSystemInfo
VirtualProtect
VirtualQuery
LoadLibraryExA
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
IsDebuggerPresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetStartupInfoW
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
RtlPcToFileHeader
EncodePointer
RtlUnwindEx
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
LoadLibraryExW
QueryPerformanceFrequency
TerminateProcess
GetModuleHandleExW
GetModuleFileNameA
GetACP
HeapFree
HeapAlloc
HeapReAlloc
GetStringTypeW
LCMapStringW
FindFirstFileExA
FindNextFileA
IsValidCodePage
GetOEMCP
GetCommandLineA
GetEnvironmentStringsW

gdiplus

GdiplusShutdown
GdiplusStartup
GdipCreateHBITMAPFromBitmap
GdipCreateBitmapFromStream
GdipDisposeImage
GdipCloneImage
GdipFree
GdipAlloc

Sections

.text
Size: 203KB - Virtual size: 203KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 61KB - Virtual size: 60KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 136KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.gfids
Size: 512B - Virtual size: 208B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 152KB - Virtual size: 156KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
All Files/Plugins/cache/Language/an.txt
All Files/Plugins/cache/Language/ar.txt
All Files/Plugins/cache/Language/az.txt
All Files/Plugins/cache/Language/ba.txt
All Files/Plugins/cache/Language/be.txt
All Files/Plugins/cache/Language/bg.txt
All Files/Plugins/cache/Language/bn.txt
All Files/Plugins/cache/Language/ca.txt
All Files/Plugins/cache/Language/co.txt
All Files/Plugins/cache/Language/cs.txt
All Files/Plugins/cache/Language/da.txt
All Files/Plugins/cache/Language/de.txt
All Files/Plugins/cache/Language/el.txt
All Files/Plugins/cache/Language/eng.txt
All Files/Plugins/cache/Language/es.txt
All Files/Plugins/cache/Language/et.txt
All Files/Plugins/cache/Language/eu.txt
All Files/Plugins/cache/Language/ext.txt
All Files/Plugins/cache/Language/fa.txt
All Files/Plugins/cache/Language/fi.txt
All Files/Plugins/cache/Language/fr.txt
All Files/Plugins/cache/Language/fur.txt
All Files/Plugins/cache/Language/fy.txt
All Files/Plugins/cache/Language/ga.txt
All Files/Plugins/cache/Language/gl.txt
All Files/Plugins/cache/Language/gu.txt
All Files/Plugins/cache/Language/he.pak
All Files/Plugins/cache/Language/he.txt
All Files/Plugins/cache/Language/hi.pak
All Files/Plugins/cache/Language/hi.txt
All Files/Plugins/cache/Language/hr.pak
All Files/Plugins/cache/Language/hr.txt
All Files/Plugins/cache/Language/hu.pak
All Files/Plugins/cache/Language/hu.txt
All Files/Plugins/cache/Language/hy.txt
All Files/Plugins/cache/Language/id.txt
All Files/Plugins/cache/Language/is.txt
All Files/Plugins/cache/Language/it.txt
All Files/Plugins/cache/Language/ja.txt
All Files/Plugins/cache/Language/ka.txt
All Files/Plugins/cache/Language/kaa.txt
All Files/Plugins/cache/Language/kab.txt
All Files/Plugins/cache/Language/kk.txt
All Files/Plugins/cache/Language/ko.txt
All Files/Plugins/cache/Language/ku-ckb.txt
All Files/Plugins/cache/Language/ky.txt
All Files/Plugins/cache/Language/lij.txt
All Files/Plugins/cache/Language/lt.txt
All Files/Plugins/cache/Language/madHcNet32.dll
.dll windows:5 windows x86 arch:x86

1e157842e5cd99d6e1fd082c5f35c9fa

Code Sign

04:00:00:00:00:01:2f:4e:e1:52:d7
Certificate

Issuer

CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE

Not Before

13-04-2011 10:00

Not After

28-01-2028 12:00

Subject

CN=GlobalSign Timestamping CA - G2,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

04:00:00:00:00:01:2f:4e:e1:35:5c
Certificate

Issuer

CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE

Not Before

13-04-2011 10:00

Not After

13-04-2019 10:00

Subject

CN=GlobalSign CodeSigning CA - G2,O=GlobalSign nv-sa,C=BE

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

11:21:d6:99:a7:64:97:3e:f1:f8:42:7e:e9:19:cc:53:41:14
Certificate

Issuer

CN=GlobalSign Timestamping CA - G2,O=GlobalSign nv-sa,C=BE

Not Before

24-05-2016 00:00

Not After

24-06-2027 00:00

Subject

CN=GlobalSign TSA for MS Authenticode - G2,O=GMO GlobalSign Pte Ltd,C=SG

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

11:21:32:2d:39:bd:45:ac:62:3d:37:5b:22:c2:43:d6:07:6b
Certificate

Issuer

CN=GlobalSign CodeSigning CA - G2,O=GlobalSign nv-sa,C=BE

Not Before

24-11-2015 16:39

Not After

24-12-2018 16:39

Subject

CN=Systemsoftware Mathias Rauen (Mathias Rauen),O=Systemsoftware Mathias Rauen (Mathias Rauen),L=Hamburg,ST=Hamburg,C=DE,1.2.840.113549.1.9.1=#0c106d616473686940676d61696c2e636f6d

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

04:00:00:00:00:01:25:07:1d:f9:af
Certificate

Issuer

CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE

Not Before

18-11-2009 10:00

Not After

18-03-2019 10:00

Subject

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

48:1b:6a:07:26:d2:e8:3f:26:02:d4:82:5a:cd
Certificate

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Not Before

15-06-2016 00:00

Not After

15-06-2024 00:00

Subject

CN=GlobalSign CodeSigning CA - SHA256 - G3,O=GlobalSign nv-sa,C=BE

Extended Key Usages

ExtKeyUsageCodeSigning
ExtKeyUsageOCSPSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

16:98:0f:59:4c:d4:ee:7b:44:e0:8d:bb
Certificate

Issuer

CN=GlobalSign CodeSigning CA - SHA256 - G3,O=GlobalSign nv-sa,C=BE

Not Before

30-08-2016 13:11

Not After

24-12-2018 16:39

Subject

CN=Systemsoftware Mathias Rauen (Mathias Rauen),O=Systemsoftware Mathias Rauen (Mathias Rauen),L=Hamburg,ST=Hamburg,C=DE,1.2.840.113549.1.9.1=#0c106d616473686940676d61696c2e636f6d

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

11:21:b4:55:35:1e:bb:1a:b2:4f:97:ef:07:fe:2a:b3:0b:8a
Certificate

Issuer

CN=GlobalSign Timestamping CA - G2,O=GlobalSign nv-sa,C=BE

Not Before

24-05-2016 00:00

Not After

24-06-2027 00:00

Subject

CN=GlobalSign TSA for Standard - G2,O=GMO GlobalSign Pte Ltd,C=SG

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

04:00:00:00:00:01:2f:4e:e1:52:d7
Certificate

Issuer

CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE

Not Before

13-04-2011 10:00

Not After

28-01-2028 12:00

Subject

CN=GlobalSign Timestamping CA - G2,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

56:33:a8:5c:fd:08:d1:07:b4:19:5c:8c:4e:4f:aa:0d:61:82:2c:4e:c7:2b:cd:48:76:75:68:4e:98:8d:d9:75
Signer

Actual PE Digest

56:33:a8:5c:fd:08:d1:07:b4:19:5c:8c:4e:4f:aa:0d:61:82:2c:4e:c7:2b:cd:48:76:75:68:4e:98:8d:d9:75

Digest Algorithm

sha256

PE Digest Matches

true

f9:b1:33:5f:66:ed:06:7c:40:bb:f3:ad:cf:3d:6f:fd:35:14:53:b9
Signer

Actual PE Digest

f9:b1:33:5f:66:ed:06:7c:40:bb:f3:ad:cf:3d:6f:fd:35:14:53:b9

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Imports

oleaut32

SysFreeString
SysReAllocStringLen
SysAllocStringLen
SafeArrayPtrOfIndex
SafeArrayGetUBound
SafeArrayGetLBound
SafeArrayCreate
VariantChangeType
VariantCopy
VariantClear
VariantInit

advapi32

RegQueryValueExW
RegOpenKeyExW
RegCloseKey
SetSecurityDescriptorDacl
RegSetValueExA
RegSetValueExW
RegQueryValueExA
RegQueryValueExW
RegQueryInfoKeyA
RegOpenKeyExA
RegOpenKeyExW
RegEnumKeyA
RegEnumKeyExW
RegDeleteValueA
RegDeleteValueW
RegCreateKeyExA
RegCreateKeyExW
RegCloseKey
OpenProcessToken
LookupPrivilegeValueA
InitializeSecurityDescriptor
GetUserNameA
GetUserNameW
GetTokenInformation
FreeSid
AllocateAndInitializeSid
AdjustTokenPrivileges

user32

CharNextW
LoadStringW
SetWindowLongW
GetWindowLongW
CreateWindowExA
CreateWindowExW
WindowFromPoint
WaitForInputIdle
UnregisterClassA
TranslateMessage
SystemParametersInfoW
ShowWindow
SetWindowTextA
SetWindowTextW
SetWindowPos
SetTimer
SetRect
SetForegroundWindow
SetFocus
SetCursor
SetClipboardData
SetCapture
SetActiveWindow
SendMessageTimeoutA
SendMessageA
SendMessageW
ScreenToClient
RemoveMenu
ReleaseDC
ReleaseCapture
RegisterWindowMessageW
RegisterClassA
RegisterClassW
PostThreadMessageA
PostThreadMessageW
PostQuitMessage
PostMessageA
PostMessageW
PeekMessageA
PeekMessageW
OpenClipboard
OffsetRect
MsgWaitForMultipleObjects
MessageBoxA
MessageBoxW
MessageBeep
LoadStringW
LoadImageA
LoadImageW
LoadCursorW
KillTimer
IsWindowVisible
IsWindowUnicode
IsWindowEnabled
IsWindow
IsIconic
IsDialogMessageW
InvalidateRect
InflateRect
GetWindowThreadProcessId
GetWindowTextA
GetWindowTextW
GetWindowRect
GetWindowPlacement
GetWindowDC
GetSystemMetrics
GetSystemMenu
GetSysColorBrush
GetSysColor
GetWindow
GetMessageA
GetMessageW
GetKeyState
GetIconInfo
GetFocus
GetDC
GetCursorPos
GetCursor
GetClientRect
GetClassNameA
GetCapture
FrameRect
FindWindowA
FillRect
EnumWindows
EnumDisplayDevicesW
EndPaint
EnableWindow
EmptyClipboard
DrawTextA
DrawTextW
DrawIconEx
DrawFrameControl
DrawFocusRect
DispatchMessageW
DestroyWindow
DestroyIcon
DefWindowProcA
DefWindowProcW
CreateIconIndirect
CloseClipboard
CharUpperBuffW
CharUpperW
CallWindowProcA
CallWindowProcW
BringWindowToTop
BeginPaint
AttachThreadInput
GetMonitorInfoW

kernel32

Sleep
VirtualFree
VirtualAlloc
lstrlenW
VirtualQuery
GetTickCount
GetSystemInfo
GetVersion
CompareStringW
IsDBCSLeadByteEx
IsValidLocale
SetThreadLocale
GetSystemDefaultUILanguage
GetUserDefaultUILanguage
GetLocaleInfoW
WideCharToMultiByte
MultiByteToWideChar
GetConsoleOutputCP
GetConsoleCP
GetACP
LoadLibraryExW
GetStartupInfoW
GetProcAddress
GetModuleHandleW
GetModuleFileNameW
GetCommandLineW
FreeLibrary
GetLastError
UnhandledExceptionFilter
RtlUnwind
RaiseException
ExitProcess
SwitchToThread
GetCurrentThreadId
CreateThread
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
InitializeCriticalSection
FindFirstFileW
FindClose
WriteFile
SetFilePointer
SetEndOfFile
ReadFile
GetFileType
GetFileSize
CreateFileW
GetStdHandle
CloseHandle
GetProcAddress
RaiseException
LoadLibraryA
GetLastError
TlsSetValue
TlsGetValue
TlsFree
TlsAlloc
LocalFree
LocalAlloc
FreeLibrary
lstrlenW
lstrcpyW
lstrcmpiW
lstrcmpA
WriteFile
WideCharToMultiByte
WaitForSingleObject
WaitForMultipleObjects
VirtualQuery
VirtualProtect
VirtualFree
VirtualAlloc
VerSetConditionMask
VerifyVersionInfoW
UnmapViewOfFile
TerminateThread
TerminateProcess
SystemTimeToFileTime
SuspendThread
Sleep
SizeofResource
SetUnhandledExceptionFilter
SetThreadPriority
SetNamedPipeHandleState
SetLastError
SetFilePointer
SetFileAttributesA
SetFileAttributesW
SetEvent
SetErrorMode
SetEndOfFile
ResumeThread
ResetEvent
RemoveDirectoryA
RemoveDirectoryW
ReleaseSemaphore
ReleaseMutex
ReadProcessMemory
ReadFile
RaiseException
QueryPerformanceFrequency
QueryPerformanceCounter
OpenProcess
OpenFileMappingA
OpenFileMappingW
OpenEventW
MapViewOfFile
LockResource
LocalSize
LocalFree
LocalAlloc
LoadResource
LoadLibraryA
LoadLibraryW
LoadLibraryExA
LeaveCriticalSection
IsValidLocale
IsBadReadPtr
InitializeCriticalSection
GlobalUnlock
GlobalMemoryStatus
GlobalLock
GlobalFree
GlobalAlloc
GetWindowsDirectoryA
GetVersionExA
GetVersionExW
GetVersion
GetTickCount
GetThreadPriority
GetThreadLocale
GetThreadContext
GetTempPathA
GetTempPathW
GetSystemTime
GetSystemDirectoryW
GetStdHandle
GetProcAddress
GetPriorityClass
GetModuleHandleA
GetModuleHandleW
GetModuleFileNameA
GetModuleFileNameW
GetLocaleInfoA
GetLocaleInfoW
GetLocalTime
GetLastError
GetFileTime
GetFileSize
GetFileAttributesA
GetFileAttributesW
GetExitCodeThread
GetDiskFreeSpaceA
GetDiskFreeSpaceW
GetDateFormatW
GetCurrentThreadId
GetCurrentThread
GetCurrentProcessId
GetCurrentProcess
GetCurrentDirectoryA
GetCurrentDirectoryW
GetComputerNameA
GetComputerNameW
GetCommandLineA
GetCommandLineW
GetCPInfo
FreeResource
InterlockedIncrement
InterlockedDecrement
FreeLibrary
FormatMessageA
FormatMessageW
FlushInstructionCache
FindResourceA
FindResourceW
FindNextFileA
FindNextFileW
FindFirstFileA
FindFirstFileW
FindClose
FileTimeToSystemTime
FileTimeToLocalFileTime
FileTimeToDosDateTime
ExpandEnvironmentStringsA
ExpandEnvironmentStringsW
ExitThread
ExitProcess
EnumSystemLocalesW
EnumCalendarInfoW
EnterCriticalSection
DuplicateHandle
DeleteFileA
DeleteFileW
DeleteCriticalSection
CreateThread
CreateSemaphoreW
CreateProcessA
CreateProcessW
CreatePipe
CreateMutexA
CreateMutexW
CreateFileMappingA
CreateFileMappingW
CreateFileA
CreateFileW
CreateEventA
CreateEventW
CreateDirectoryA
CreateDirectoryW
CopyFileA
CopyFileW
CompareStringW
CloseHandle
Beep
Sleep
RtlUnwind
OpenThread

gdi32

TextOutA
TextOutW
StartPage
StartDocA
StartDocW
SetTextColor
SetMapMode
SetBkMode
SetBkColor
SelectObject
SelectClipRgn
MoveToEx
LineTo
GetTextMetricsW
GetTextFaceA
GetTextExtentPoint32A
GetTextExtentPoint32W
GetStockObject
GetRgnBox
GetObjectW
GetDeviceCaps
GetDIBits
GdiFlush
EndPage
EndDoc
DeleteObject
DeleteDC
CreateSolidBrush
CreateRectRgnIndirect
CreatePen
CreateFontA
CreateFontW
CreateDIBSection
CreateDCW
CreateCompatibleDC
CombineRgn
BitBlt

version

VerQueryValueA
VerQueryValueW
GetFileVersionInfoSizeA
GetFileVersionInfoSizeW
GetFileVersionInfoA
GetFileVersionInfoW

netapi32

NetWkstaGetInfo
NetApiBufferFree
NetServerEnum

ole32

CoInitialize

comctl32

ImageList_GetIcon
ImageList_Destroy
ImageList_Create
InitCommonControls

shell32

SHGetFileInfoW
ShellExecuteExA
ShellExecuteA
SHGetPathFromIDListA
SHGetSpecialFolderLocation
SHGetMalloc

comdlg32

PrintDlgW
GetSaveFileNameA
GetSaveFileNameW

wsock32

WSACleanup
WSAStartup
WSAGetLastError
gethostbyname
socket
shutdown
setsockopt
sendto
send
select
recvfrom
recv
listen
ioctlsocket
inet_ntoa
inet_addr
htons
getsockname
getpeername
connect
closesocket
bind
accept

dnsapi

DnsRecordListFree
DnsQuery_A

iphlpapi

IcmpParseReplies
IcmpSendEcho2
IcmpCloseHandle
IcmpCreateFile
GetAdaptersInfo
GetAdaptersAddresses
GetIpNetTable

Exports

Exports

AutoNet_AddConnectionCallback
AutoNet_Announce
AutoNet_Broadcast
AutoNet_BufToIcon
AutoNet_Connect
AutoNet_DecodeHello
AutoNet_DelConnectionCallback
AutoNet_EncodeHello
AutoNet_FinalComponent
AutoNet_GetHello
AutoNet_GetStorage
AutoNet_InitComponent
AutoNet_Listen
AutoNet_Search
AutoNet_Send
AutoNet_WaitForSearchCompletion
Localize_ConnectDialog
Localize_IpAddressDialog
Ping
madGetCurrentIpAddr
madGetFreezeReport
madGetGpuRamSize
madGetGpuUserModeDrivers
madGetMonitorInfo
madHandleException
madNameThread
madTraceProcess
madVR_BlindConnect
madVR_Connect
madVR_ConnectDialog
madVR_ConnectEx
madVR_ConnectToInstance
madVR_ConnectToIp
madVR_Convert3dlutFile
madVR_ConvertHdr3dlutFile
madVR_Create3dlutFileFromArray256
madVR_Create3dlutFileFromArray65
madVR_CreateHdr3dlutFileFromArray256
madVR_CreateHdr3dlutFileFromArray65
madVR_Disable3dlut
madVR_DisableFseMode
madVR_Disconnect
madVR_Enable3dlut
madVR_EnableFseMode
madVR_EnterFullscreen
madVR_Find
madVR_Find_Async
madVR_GetBlackAndWhiteLevel
madVR_GetDeviceGammaRamp
madVR_GetPatternConfig
madVR_GetSelected3dlut
madVR_GetVersion
madVR_GetWindowSize
madVR_IsDisableOsdButtonPressed
madVR_IsFseModeEnabled
madVR_IsFullscreen
madVR_IsHdrButtonPressed
madVR_IsLocal
madVR_IsMaximized
madVR_IsMinimized
madVR_IsRestored
madVR_IsStayOnTopButtonPressed
madVR_IsUseFullscreenButtonPressed
madVR_LeaveFullscreen
madVR_Load3dlutFile
madVR_Load3dlutFromArray256
madVR_Load3dlutFromArray65
madVR_LoadHdr3dlutFile
madVR_LoadHdr3dlutFromArray256
madVR_LoadHdr3dlutFromArray65
madVR_Maximize
madVR_Minimize
madVR_Quit
madVR_Restore
madVR_SetBackground
madVR_SetDeviceGammaRamp
madVR_SetDisableOsdButton
madVR_SetHdrButton
madVR_SetHdrMetadata
madVR_SetOsdText
madVR_SetPatternConfig
madVR_SetProgressBarPos
madVR_SetSelected3dlut
madVR_SetStayOnTopButton
madVR_SetUseFullscreenButton
madVR_SetWindowSize
madVR_ShowProgressBar
madVR_ShowRGB
madVR_ShowRGBEx

Sections

.text
Size: 785KB - Virtual size: 785KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.itext
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 30KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 24KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.didata
Size: 512B - Virtual size: 456B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 68B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 51KB - Virtual size: 50KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rsrc
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
All Files/Plugins/cache/Language/mk.txt
All Files/Plugins/cache/Language/mn.txt
All Files/Plugins/cache/Language/mng.txt
All Files/Plugins/cache/Language/mng2.txt
All Files/Plugins/cache/Language/mr.txt
All Files/Plugins/cache/Language/ne.txt
All Files/Plugins/cache/Language/nl.txt
All Files/Plugins/cache/Language/nolimetangere.pkg
All Files/Plugins/cache/Language/pa-in.txt
All Files/Plugins/cache/Language/pl.txt
All Files/Plugins/cache/Language/ps.txt
All Files/Plugins/cache/Language/pt-br.txt
All Files/Plugins/cache/Language/pt.txt
All Files/Plugins/cache/Language/ro.txt
All Files/Plugins/cache/Language/ru.txt
All Files/Plugins/cache/Language/sa.txt
All Files/Plugins/cache/Language/si.txt
All Files/Plugins/cache/Language/sk.txt
All Files/Plugins/cache/Language/sl.txt
All Files/Plugins/cache/Language/sr-spc.txt
All Files/Plugins/cache/Language/sr-spl.txt
All Files/Plugins/cache/Language/sv.txt
All Files/Plugins/cache/Language/sw.txt
All Files/Plugins/cache/Language/ta.txt
All Files/Plugins/cache/Language/tg.txt
All Files/Plugins/cache/Language/th.txt
All Files/Plugins/cache/Language/tk.txt
All Files/Plugins/cache/Language/tr.txt
All Files/Plugins/cache/Language/tt.txt
All Files/Plugins/cache/Language/ug.txt
All Files/Plugins/cache/Language/uk.txt
All Files/Plugins/cache/Language/unrar.dll
.dll windows:5 windows x86 arch:x86

97687a07538d3932fb9baf861b959f5d

Code Sign

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

29-04-2021 00:00

Not After

28-04-2036 23:59

Subject

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

04:8b:08:39:9e:c7:03:62:3c:72:cd:20:77:ad:65:d9
Certificate

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Not Before

08-08-2023 00:00

Not After

07-08-2026 23:59

Subject

SERIALNUMBER=HRB 109885,CN=win.rar GmbH,O=win.rar GmbH,L=Berlin,ST=Berlin,C=DE,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.1=#130e436861726c6f7474656e62757267,1.3.6.1.4.1.311.60.2.1.2=#13064265726c696e,1.3.6.1.4.1.311.60.2.1.3=#13024445

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16
Certificate

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Not Before

14-07-2023 00:00

Not After

13-10-2034 23:59

Subject

CN=DigiCert Timestamp 2023,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

23-03-2022 00:00

Not After

22-03-2037 23:59

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01-08-2022 00:00

Not After

09-11-2031 23:59

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

56:58:06:a8:5c:dd:b1:06:22:da:21:e6:d3:4a:2f:33:85:e8:1a:85:0f:f7:41:85:fa:76:48:ff:e6:e8:20:a2
Signer

Actual PE Digest

56:58:06:a8:5c:dd:b1:06:22:da:21:e6:d3:4a:2f:33:85:e8:1a:85:0f:f7:41:85:fa:76:48:ff:e6:e8:20:a2

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

D:\Projects\WinRAR\rar\build\unrardll32\Release\UnRAR.pdb

Imports

kernel32

CreateFileW
DeleteFileW
CreateHardLinkW
GetShortPathNameW
GetLongPathNameW
MoveFileW
WriteFile
ReadFile
FlushFileBuffers
SetEndOfFile
SetFilePointer
GetCurrentProcessId
CreateDirectoryW
SetFileAttributesW
GetFileAttributesW
FindClose
FindFirstFileW
FindNextFileW
InterlockedDecrement
GetVersionExW
GetCurrentDirectoryW
GetFullPathNameW
FoldStringW
FreeLibrary
GetProcAddress
SetThreadPriority
SetThreadExecutionState
RemoveDirectoryW
LoadLibraryW
GetModuleHandleW
GetSystemDirectoryW
GetProcessAffinityMask
CreateThread
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
SetEvent
ResetEvent
ReleaseSemaphore
WaitForSingleObject
CreateSemaphoreW
GetSystemTime
SystemTimeToTzSpecificLocalTime
TzSpecificLocalTimeToSystemTime
SystemTimeToFileTime
FileTimeToLocalFileTime
LocalFileTimeToFileTime
FileTimeToSystemTime
GetCPInfo
IsDBCSLeadByte
MultiByteToWideChar
WideCharToMultiByte
CompareStringW
DecodePointer
WriteConsoleW
SetFilePointerEx
HeapSize
GetConsoleCP
GetProcessHeap
CloseHandle
GetCommandLineW
SetFileTime
DeviceIoControl
GetCurrentProcess
Sleep
SetLastError
GetLastError
AreFileApisANSI
GetConsoleMode
GetStdHandle
GetFileType
CreateEventW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineA
GetOEMCP
IsValidCodePage
FindNextFileA
FindFirstFileExA
HeapReAlloc
SetStdHandle
LocalFree
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
IsProcessorFeaturePresent
InitializeCriticalSectionAndSpinCount
WaitForSingleObjectEx
IsDebuggerPresent
GetStartupInfoW
QueryPerformanceCounter
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
RaiseException
RtlUnwind
InterlockedFlushSList
EncodePointer
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
LoadLibraryExW
QueryPerformanceFrequency
ExitProcess
GetModuleHandleExW
GetModuleFileNameA
GetStringTypeW
GetACP
HeapFree
HeapAlloc
LCMapStringW

user32

CharUpperW
CharToOemA
OemToCharBuffA
OemToCharA
CharLowerW
CharToOemBuffW

advapi32

CheckTokenMembership
FreeSid
AllocateAndInitializeSid
LookupPrivilegeValueW
SetFileSecurityW
AdjustTokenPrivileges
OpenProcessToken

ole32

CoCreateInstance
CoSetProxyBlanket

oleaut32

VariantClear
SysFreeString
SysAllocString

Exports

Exports

RARCloseArchive
RARGetDllVersion
RAROpenArchive
RAROpenArchiveEx
RARProcessFile
RARProcessFileW
RARReadHeader
RARReadHeaderEx
RARSetCallback
RARSetChangeVolProc
RARSetPassword
RARSetProcessDataProc

Sections

.text
Size: 242KB - Virtual size: 242KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 36KB - Virtual size: 35KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 35KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
All Files/Plugins/cache/Language/uz-cyrl.txt
All Files/Plugins/cache/Language/uz.txt
All Files/Plugins/cache/Language/va.txt
All Files/Plugins/cache/Language/vi.txt
All Files/Plugins/cache/Language/yo.txt
All Files/Plugins/cache/Language/zh-cn.txt
All Files/Plugins/cache/Language/zh-tw.txt
All Files/Plugins/cache/acceptancy.svg
All Files/Plugins/cache/opengl64
All Files/Plugins/lang-1058.dll
.dll windows:6 windows x86 arch:x86

Code Sign

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

29-04-2021 00:00

Not After

28-04-2036 23:59

Subject

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

05:75:e1:f7:ec:9b:d8:a6:7a:3f:61:89:c6:3e:97:bb
Certificate

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Not Before

16-09-2022 00:00

Not After

17-09-2025 23:59

Subject

CN=PIRIFORM SOFTWARE LIMITED,O=PIRIFORM SOFTWARE LIMITED,L=London,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16
Certificate

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Not Before

14-07-2023 00:00

Not After

13-10-2034 23:59

Subject

CN=DigiCert Timestamp 2023,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

23-03-2022 00:00

Not After

22-03-2037 23:59

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01-08-2022 00:00

Not After

09-11-2031 23:59

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

79:ad:e0:64:e4:e6:2d:91:c0:f1:bf:7f:f7:1a:3d:a5:01:8f:45:2b:7e:ff:ba:4b:f0:59:d2:18:e7:a8:32:e4
Signer

Actual PE Digest

79:ad:e0:64:e4:e6:2d:91:c0:f1:bf:7f:f7:1a:3d:a5:01:8f:45:2b:7e:ff:ba:4b:f0:59:d2:18:e7:a8:32:e4

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.rdata
Size: 512B - Virtual size: 160B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 251KB - Virtual size: 250KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
All Files/about_BeforeEach_AfterEach.help.txt
All Files/files/Anee
.exe windows:6 windows x86 arch:x86

a7e73ef2207e9ee97c678506145e1258

Code Sign

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

21-12-2012 00:00

Not After

30-12-2020 23:59

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

18-10-2012 00:00

Not After

29-12-2020 23:59

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

4f:be:0a:02:42:6e:bd:20:c2:62:44:b5:ec:a6:52:a3
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Not Before

09-07-2018 00:00

Not After

10-07-2019 23:59

Subject

CN=NVIDIA Corporation,OU=IT-MIS,O=NVIDIA Corporation,L=Santa Clara,ST=California,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

61:19:93:e4:00:00:00:00:00:1c
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

22-02-2011 19:25

Not After

22-02-2021 19:35

Subject

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

08-02-2010 00:00

Not After

07-02-2020 23:59

Subject

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

62:e7:45:e9:21:65:21:3c:97:1f:5c:49:0a:ea:12:a5
Certificate

Issuer

CN=Symantec Class 3 SHA256 Code Signing CA - G2,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Not Before

09-07-2018 00:00

Not After

09-07-2021 23:59

Subject

CN=NVIDIA Corporation,OU=IT-MIS,O=NVIDIA Corporation,L=Santa Clara,ST=California,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

7c:1b:35:35:4a:e7:db:74:e7:41:5f:11:69:ca:6b:a8
Certificate

Issuer

CN=VeriSign Universal Root Certification Authority,OU=VeriSign Trust Network+OU=(c) 2008 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

22-07-2014 00:00

Not After

21-07-2024 23:59

Subject

CN=Symantec Class 3 SHA256 Code Signing CA - G2,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

61:2d:23:cb:00:00:00:00:00:21
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

22-02-2011 19:46

Not After

22-02-2021 19:56

Subject

CN=VeriSign Universal Root Certification Authority,OU=VeriSign Trust Network+OU=(c) 2008 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

7b:05:b1:d4:49:68:51:44:f7:c9:89:d2:9c:19:9d:12
Certificate

Issuer

CN=VeriSign Universal Root Certification Authority,OU=VeriSign Trust Network+OU=(c) 2008 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

12-01-2016 00:00

Not After

11-01-2031 23:59

Subject

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

7b:d4:e5:af:ba:cc:07:3f:a1:01:23:04:22:41:4d:12
Certificate

Issuer

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Not Before

23-12-2017 00:00

Not After

22-03-2029 23:59

Subject

CN=Symantec SHA256 TimeStamping Signer - G3,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

54:cb:ab:94:75:80:97:ed:a8:bb:b7:bd:5b:5f:9b:d9:c4:b8:e5:05:1b:74:5b:83:60:86:a9:f7:ca:58:97:d7
Signer

Actual PE Digest

54:cb:ab:94:75:80:97:ed:a8:bb:b7:bd:5b:5f:9b:d9:c4:b8:e5:05:1b:74:5b:83:60:86:a9:f7:ca:58:97:d7

Digest Algorithm

sha256

PE Digest Matches

true

7f:01:56:fd:7c:3f:56:65:ab:41:e1:66:0d:22:36:1d:f4:00:d1:24
Signer

Actual PE Digest

7f:01:56:fd:7c:3f:56:65:ab:41:e1:66:0d:22:36:1d:f4:00:d1:24

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\dvs\p4\build\sw\rel\gpu_drv\r415\r415_00\drivers\stereo_vision\Apps\GeForce3DVisionSetupWizard\release\NvStWiz.pdb

Imports

user32

GetDesktopWindow
PostQuitMessage
GetUserObjectInformationW
SetCursor
LoadCursorW
TranslateMessage
OpenInputDesktop
ValidateRect
PeekMessageW
EnumDisplaySettingsExW
DestroyIcon
EnumDisplaySettingsW
CloseDesktop
ChangeDisplaySettingsW
ShowWindow
DestroyCursor
RegisterClassExW
SendMessageW
CreateWindowExW
MessageBoxW
DestroyWindow
DefWindowProcW
ChangeDisplaySettingsExW
UpdateWindow
LoadImageW
SetCursorPos
DispatchMessageW
GetCursorPos

shell32

SHGetFolderPathW
ShellExecuteW
SHGetKnownFolderPath

ole32

CoTaskMemFree
CreateStreamOnHGlobal
CoCreateInstance
CoUninitialize
CoInitialize

d3d9

Direct3DCreate9

d3d10

D3D10CreateDevice

gdiplus

GdipLoadImageFromStream
GdipSetStringFormatFlags
GdipGetImageWidth
GdipSetStringFormatAlign
GdiplusStartup
GdipCreatePen1
GdipCreateStringFormat
GdipDeleteFontFamily
GdipGetImageHeight
GdipSetImageAttributesColorMatrix
GdipDeleteFont
GdipSetCompositingMode
GdipDeleteStringFormat
GdipDeleteGraphics
GdiplusShutdown
GdipMeasureString
GdipCloneBrush
GdipSetTextRenderingHint
GdipCreateFromHDC
GdipDrawString
GdipFree
GdipGetGenericFontFamilySansSerif
GdipCreateImageAttributes
GdipDrawLine
GdipCreateSolidFill
GdipCreateFont
GdipDisposeImage
GdipDisposeImageAttributes
GdipDrawImageRectI
GdipAlloc
GdipDeleteBrush
GdipCloneImage
GdipDrawImageRectRect
GdipCreateFontFamilyFromName
GdipDeletePen

kernel32

GetConsoleCP
FlushFileBuffers
SetStdHandle
GetProcessHeap
LCMapStringW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCPInfo
GetOEMCP
IsValidCodePage
FindNextFileA
FindFirstFileExA
GetStringTypeW
GetFileType
HeapAlloc
HeapFree
GetACP
WriteFile
GetStdHandle
HeapSize
MultiByteToWideChar
GetModuleFileNameA
GetModuleHandleExW
ExitProcess
GetCommandLineW
GetCommandLineA
EncodePointer
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
InitializeCriticalSectionAndSpinCount
RaiseException
RtlUnwind
InitializeSListHead
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
GetStartupInfoW
IsDebuggerPresent
IsProcessorFeaturePresent
TerminateProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
WaitForSingleObjectEx
ResetEvent
SetEvent
GetConsoleMode
HeapReAlloc
SetFilePointerEx
SetEndOfFile
ReadFile
ReadConsoleW
DecodePointer
WideCharToMultiByte
SizeofResource
FindFirstFileW
GetSystemDefaultLCID
FindNextFileW
lstrcpynW
GetThreadLocale
GetUserDefaultUILanguage
GetTempPathW
FindClose
GetLocaleInfoW
GetFileAttributesW
GetVersionExW
GetSystemDirectoryW
FreeResource
CreateEventW
Sleep
GetLastError
LockResource
GlobalAlloc
GlobalFree
CloseHandle
LoadLibraryW
FindResourceExW
LoadResource
FindResourceW
GetProcAddress
GlobalLock
WriteConsoleW
FreeLibrary
lstrcmpiW
GlobalUnlock
LoadLibraryExW
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
VerSetConditionMask
ExpandEnvironmentStringsW
CreateFileW
GetFullPathNameW
SetLastError
GetCurrentProcess
GetModuleHandleA
LocalAlloc
LocalFree
lstrcmpW
VerifyVersionInfoW
GetModuleHandleW

advapi32

RegQueryValueExW
RegOpenKeyExA
InitializeSecurityDescriptor
RegSetValueExA
RegQueryValueExA
RegCloseKey
SetSecurityDescriptorDacl
RegOpenKeyExW

Sections

.text
Size: 182KB - Virtual size: 182KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 62KB - Virtual size: 62KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 152KB - Virtual size: 151KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 15KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
All Files/files/StartupHelper
.exe windows:5 windows x86 arch:x86

d21794f0d47bb5c7f5977a6500854d85

Code Sign

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

29-04-2021 00:00

Not After

28-04-2036 23:59

Subject

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

04:28:14:36:98:54:a8:5f:9b:8f:90:12:67:c0:3c:f2
Certificate

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Not Before

17-08-2022 00:00

Not After

29-07-2025 23:59

Subject

SERIALNUMBER=91110108680456115E,CN=Glarysoft Ltd,O=Glarysoft Ltd,ST=Beijing,C=CN,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.1=#13104861696469616e204469737472696374,1.3.6.1.4.1.311.60.2.1.2=#13074265696a696e67,1.3.6.1.4.1.311.60.2.1.3=#1302434e

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16
Certificate

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Not Before

14-07-2023 00:00

Not After

13-10-2034 23:59

Subject

CN=DigiCert Timestamp 2023,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

23-03-2022 00:00

Not After

22-03-2037 23:59

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01-08-2022 00:00

Not After

09-11-2031 23:59

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

29-04-2021 00:00

Not After

28-04-2036 23:59

Subject

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

04:28:14:36:98:54:a8:5f:9b:8f:90:12:67:c0:3c:f2
Certificate

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Not Before

17-08-2022 00:00

Not After

29-07-2025 23:59

Subject

SERIALNUMBER=91110108680456115E,CN=Glarysoft Ltd,O=Glarysoft Ltd,ST=Beijing,C=CN,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.1=#13104861696469616e204469737472696374,1.3.6.1.4.1.311.60.2.1.2=#13074265696a696e67,1.3.6.1.4.1.311.60.2.1.3=#1302434e

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16
Certificate

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Not Before

14-07-2023 00:00

Not After

13-10-2034 23:59

Subject

CN=DigiCert Timestamp 2023,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

23-03-2022 00:00

Not After

22-03-2037 23:59

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01-08-2022 00:00

Not After

09-11-2031 23:59

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

cc:08:bb:49:63:6e:cf:3f:72:bf:92:cf:45:8b:91:0e:90:0f:7d:11:28:70:03:90:0a:af:8b:19:89:f5:2f:7b
Signer

Actual PE Digest

cc:08:bb:49:63:6e:cf:3f:72:bf:92:cf:45:8b:91:0e:90:0f:7d:11:28:70:03:90:0a:af:8b:19:89:f5:2f:7b

Digest Algorithm

sha256

PE Digest Matches

true

b2:c8:9c:70:dd:00:70:00:00:18:3b:25:00:02:8e:c2:fc:f9:28:b7
Signer

Actual PE Digest

b2:c8:9c:70:dd:00:70:00:00:18:3b:25:00:02:8e:c2:fc:f9:28:b7

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

D:\winapps\mh\trunk\exe\vc\StartupHelper\sourcecode\Release\StartupHelper.pdb

Imports

mfc90u

ord404
ord2597
ord2141
ord4131
ord6635
ord4044
ord611
ord595
ord3489
ord5664
ord4652
ord1493
ord6411
ord3355
ord1665
ord5939
ord4405
ord1607
ord3220
ord5632
ord5167
ord5324
ord1810
ord1809
ord1675
ord3353
ord6408
ord1754
ord1751
ord4345
ord1492
ord4664
ord5602
ord2074
ord5512
ord6800
ord4603
ord3743
ord5154
ord4702
ord1728
ord6466
ord5685
ord5683
ord960
ord965
ord969
ord967
ord971
ord2615
ord2635
ord2619
ord2625
ord2623
ord2621
ord2638
ord2633
ord2617
ord2640
ord2628
ord2610
ord2612
ord2630
ord2375
ord2368
ord1641
ord6802
ord4174
ord6804
ord3682
ord5404
ord6376
ord3226
ord1442
ord5625
ord2139
ord1792
ord1791
ord1727
ord5650
ord3140
ord4910
ord4682
ord3515
ord2593
ord5653
ord6091
ord4774
ord4815
ord5078
ord613
ord337
ord4631
ord2901
ord4741
ord1533
ord3537
ord6095
ord3622
ord6187
ord6094
ord333
ord3488
ord1354
ord1353
ord2097
ord3543
ord1183
ord3486
ord4527
ord6579
ord4543
ord6577
ord2592
ord744
ord524
ord2069
ord1063
ord663
ord2146
ord1166
ord1064
ord6604
ord4530
ord2904
ord1047
ord2596
ord5008
ord1108
ord367
ord586
ord4000
ord374
ord2130
ord3577
ord2282
ord4512
ord4442
ord4448
ord4423
ord6801
ord4173
ord6803
ord4747
ord2251
ord2206
ord6035
ord4179
ord1048
ord5548
ord6741
ord5830
ord4213
ord2087
ord3217
ord5674
ord5676
ord4347
ord4996
ord5680
ord5663
ord6018
ord2771
ord2983
ord3112
ord799
ord265
ord266
ord1272
ord1137
ord1254
ord686
ord436
ord792
ord587
ord4728
ord2966
ord3115
ord2774
ord2893
ord2764
ord4080
ord4081
ord4071
ord2891
ord4348
ord4905
ord4681
ord3670
ord2447
ord636
ord790
ord639
ord2208
ord6482
ord1098
ord4211
ord794
ord589
ord4043
ord4967
ord1318
ord2327
ord316
ord601
ord899
ord1315
ord938
ord1603
ord2478
ord5979
ord6687
ord285
ord5535
ord6079
ord6813
ord1552
ord2551
ord946
ord821
ord2470
ord6096
ord4541
ord4410
ord290
ord1088
ord6659
ord2243
ord6204
ord339
ord289
ord288
ord6164
ord1599
ord809
ord6013
ord935
ord936
ord2702
ord286
ord5851
ord3637
ord2106
ord811
ord280
ord2326
ord2694
ord6529
ord813
ord2537
ord600
ord1143
ord296
ord1248
ord2084
ord1250
ord801

msvcr90

memcpy
memset
towupper
__CxxFrameHandler3
?_type_info_dtor_internal_method@type_info@@QAEXXZ
_crt_debugger_hook
_controlfp_s
_invoke_watson
_except_handler4_common
_decode_pointer
_onexit
_lock
__dllonexit
_unlock
?terminate@@YAXXZ
__set_app_type
_encode_pointer
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_configthreadlocale
_initterm_e
_initterm
_wcmdln
exit
_XcptFilter
_exit
_cexit
__wgetmainargs
_amsg_exit
__wargv
__argc
setlocale
_resetstkoflw
?what@exception@std@@UBEPBDXZ
_msize
_purecall
_set_errno
_get_errno
_wtoi64
realloc
_gcvt_s
_fpclass
_HUGE
iswspace
wcsrchr
wcschr
_ui64toa_s
_i64toa_s
isspace
_itoa_s
wcsncmp
wcstod
wcstol
_wcstoui64
_wcstoi64
strtol
_wtoi
wcsnlen
_wcsicmp
_scwprintf
_ultoa_s
strncmp
_strlwr_s
_recalloc
calloc
_itow_s
swprintf_s
_CxxThrowException
malloc
wcscpy_s
wcsncpy_s
_invalid_parameter_noinfo
??0exception@std@@QAE@ABV01@@Z
free
??0exception@std@@QAE@XZ
??1exception@std@@UAE@XZ
??0exception@std@@QAE@ABQBD@Z
memmove_s
memcpy_s

kernel32

GetPrivateProfileSectionW
LocalFree
GetCurrentProcessId
InterlockedCompareExchange
GetStartupInfoW
SetUnhandledExceptionFilter
QueryPerformanceCounter
GetCurrentThreadId
GetSystemTimeAsFileTime
TerminateProcess
SetLastError
LoadLibraryW
GetCurrentProcess
UnhandledExceptionFilter
IsDebuggerPresent
EnterCriticalSection
GetProcAddress
GetModuleHandleW
Sleep
GetTickCount
GetCommandLineW
InterlockedExchange
CreateMutexW
CloseHandle
HeapReAlloc
GetPrivateProfileIntW
HeapFree
GetProcessHeap
HeapAlloc
WideCharToMultiByte
lstrlenA
MultiByteToWideChar
GetLastError
GetModuleFileNameW
lstrlenW
WaitForSingleObject
HeapDestroy
HeapSize
DeleteCriticalSection
InitializeCriticalSection
LeaveCriticalSection

user32

SendMessageW
AppendMenuW
GetSystemMenu
GetWindowRect
MessageBoxW
GetWindowLongW
SetWindowLongW
UnionRect
GetMenuBarInfo
GetMenuItemID
GetMenuItemCount
GetSysColor
OffsetRect
FrameRect
DrawFrameControl
CopyRect
EnableWindow
IsWindow
InvalidateRect
KillTimer
PtInRect
ReleaseDC
FillRect
GetDC
SystemParametersInfoW
EndPaint
BeginPaint
DrawIcon
GetSystemMetrics
IsIconic
SetTimer
GetClientRect
LoadIconW

gdi32

CreatePen
CreateCompatibleBitmap
CreateSolidBrush
GetObjectW
SetDIBColorTable
GetTextExtentPoint32W
SetBkMode
CreateRoundRectRgn
GetCurrentObject
GetBkMode
CreatePatternBrush
SetBrushOrgEx
FillRgn
FrameRgn
SelectObject
CreateFontW
GetDIBColorTable
StretchBlt
CreateDIBSection
BitBlt
CreateCompatibleDC
DeleteDC
DeleteObject

msimg32

TransparentBlt
GradientFill
AlphaBlend

advapi32

RegQueryValueExW
RegOpenKeyExW

shell32

ShellExecuteW
CommandLineToArgvW

comctl32

_TrackMouseEvent
InitCommonControlsEx

shlwapi

PathFileExistsW

ole32

OleInitialize
CoUninitialize
CoInitialize
CoCreateInstance

oleaut32

SysAllocStringLen
VariantClear
SysAllocString
VariantInit
SysFreeString

msvcp90

??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBD@Z
?npos@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@2IB
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
?swap@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEXAAV12@@Z
?find_last_not_of@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBEIPB_WI@Z
?find_first_not_of@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBEIPB_WI@Z
?clear@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEXXZ
?erase@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV12@II@Z
??4?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV01@PB_W@Z
??4?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV01@ABV01@@Z
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@ABV01@@Z
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@XZ
??1?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@XZ

ws2_32

WSASetLastError
GetAddrInfoW
WSAStartup
WSACleanup
closesocket
WSACloseEvent
WSASocketW
WSAGetLastError
WSAConnect
WSAEnumNetworkEvents
WSAResetEvent
WSASend
WSAGetOverlappedResult
WSARecv
WSACreateEvent
WSASetEvent
WSAEventSelect
FreeAddrInfoW

boottime

ord2
GetSetupTime
ord1

gdiplus

GdipDisposeImage
GdipFree
GdiplusShutdown
GdipGetImageGraphicsContext
GdipDeleteGraphics
GdipDrawImageI
GdipCloneImage
GdipGetImageWidth
GdipGetImageHeight
GdipGetImagePixelFormat
GdipGetImagePaletteSize
GdipGetImagePalette
GdipCreateBitmapFromFile
GdipCreateBitmapFromScan0
GdipBitmapLockBits
GdipBitmapUnlockBits
GdiplusStartup
GdipAlloc

languages

ord5
ord3
ord6
ord8
ord4

config

ord13
ord11

Sections

.text
Size: 122KB - Virtual size: 121KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 38KB - Virtual size: 38KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 161KB - Virtual size: 161KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 17KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
All Files/files/VisualStudio.VsWebProtocol
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Code Sign

33:00:00:03:4e:b5:3c:7a:c1:84:6f:eb:2b:00:00:00:00:03:4e
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

16-03-2023 18:43

Not After

14-03-2024 18:43

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08-07-2011 20:59

Not After

08-07-2026 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

5f:af:0c:58:d2:42:9a:e0:4a:81:ab:97:5c:6c:f6:e8:7d:30:0a:ad:18:b9:59:1c:3f:a4:76:78:f5:ef:fd:00
Signer

Actual PE Digest

5f:af:0c:58:d2:42:9a:e0:4a:81:ab:97:5c:6c:f6:e8:7d:30:0a:ad:18:b9:59:1c:3f:a4:76:78:f5:ef:fd:00

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

D:\dbs\el\ddvsm\out\Intermediate\appid\microsoft.visualstudio.vswebprotocolselector_x86Retail_E59B6BE4\Release\net472\Microsoft.VisualStudio.VsWebProtocolSelector.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 471KB - Virtual size: 470KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 179KB - Virtual size: 178KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
All Files/files/ZBRpre-intsalled.phpt
.js
All Files/files/gmssl.phpt
All Files/files/input.json
All Files/files/insights.dll
.dll regsvr32 windows:4 windows x86 arch:x86

36da04e9d80185202c5dff27d69487ef

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

mfc42

ord2818
ord540
ord2915
ord537
ord800
ord941
ord861
ord823
ord6467
ord1131
ord2725
ord3953
ord825
ord561
ord3738
ord4424
ord4622
ord4080
ord3079
ord3825
ord3831
ord3830
ord2976
ord3081
ord2985
ord3262
ord3136
ord4465
ord3259
ord3147
ord2982
ord5714
ord5289
ord5307
ord4698
ord535
ord4160
ord5302
ord2396
ord269
ord5199
ord1577
ord600
ord4274
ord1182
ord5300
ord1255
ord1253
ord1578
ord1197
ord4079
ord1570
ord1243
ord342
ord815
ord6375
ord4486
ord2554
ord2512
ord5731
ord1116
ord1176
ord1575
ord1168
ord3922
ord826
ord3346
ord1089

msvcrt

_initterm
??1type_info@@UAE@XZ
_stricmp
memcpy
__CxxFrameHandler
free
malloc
realloc
memset
memcmp
strlen
_snprintf
strcat
strncpy
?terminate@@YAXXZ
_except_handler3
__dllonexit
_onexit
_adjust_fdiv

kernel32

GetLastError
LoadLibraryA
GetModuleFileNameA
GetModuleHandleA
GetShortPathNameA
lstrlenA
MultiByteToWideChar
lstrlenW
InterlockedDecrement
EnterCriticalSection
InterlockedIncrement
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSection
WideCharToMultiByte
FreeLibrary
SizeofResource
LoadResource
FindResourceA
LoadLibraryExA
lstrcmpiA
lstrcpynA
IsDBCSLeadByte
HeapDestroy
GetProcAddress
lstrcpyA
lstrcatA
GetVersionExA
CloseHandle
OpenMutexA
LocalFree
LocalAlloc

user32

CreateMenu
InsertMenuItemA
LoadBitmapA
InsertMenuA
wsprintfA
CharNextA

gdi32

DeleteObject

advapi32

RegOpenKeyExA
RegEnumValueA
RegQueryInfoKeyA
RegSetValueExA
RegEnumKeyExA
RegCloseKey
RegDeleteValueA
RegCreateKeyExA
RegDeleteKeyA

shell32

DragQueryFileA

ole32

CoTaskMemRealloc
CoTaskMemAlloc
CoCreateInstance
CoTaskMemFree

oleaut32

BSTR_UserMarshal
RegisterTypeLi
SysAllocStringLen
BSTR_UserFree
BSTR_UserUnmarshal
LoadTypeLi
BSTR_UserSize
SysAllocString
SysFreeString
VarUI4FromStr

rpcrt4

CStdStubBuffer_CountRefs
CStdStubBuffer_Invoke
CStdStubBuffer_Disconnect
CStdStubBuffer_Connect
CStdStubBuffer_AddRef
CStdStubBuffer_QueryInterface
IUnknown_Release_Proxy
IUnknown_AddRef_Proxy
IUnknown_QueryInterface_Proxy
NdrOleFree
NdrOleAllocate
NdrDllGetClassObject
NdrDllCanUnloadNow
NdrCStdStubBuffer_Release
NdrDllRegisterProxy
NdrDllUnregisterProxy
CStdStubBuffer_IsIIDSupported
CStdStubBuffer_DebugServerQueryInterface
CStdStubBuffer_DebugServerRelease

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 20KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.orpc
Size: 4KB - Virtual size: 89B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
All Files/files/installed.dll
.dll windows:6 windows x86 arch:x86

Code Sign

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

29-04-2021 00:00

Not After

28-04-2036 23:59

Subject

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

05:75:e1:f7:ec:9b:d8:a6:7a:3f:61:89:c6:3e:97:bb
Certificate

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Not Before

16-09-2022 00:00

Not After

17-09-2025 23:59

Subject

CN=PIRIFORM SOFTWARE LIMITED,O=PIRIFORM SOFTWARE LIMITED,L=London,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16
Certificate

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Not Before

14-07-2023 00:00

Not After

13-10-2034 23:59

Subject

CN=DigiCert Timestamp 2023,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

23-03-2022 00:00

Not After

22-03-2037 23:59

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01-08-2022 00:00

Not After

09-11-2031 23:59

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

47:61:59:f6:b7:42:45:ca:c9:25:78:ae:bc:3c:f6:ba:c3:c2:15:e8:6d:ed:75:4a:cd:f7:6c:5e:97:9a:9e:e5
Signer

Actual PE Digest

47:61:59:f6:b7:42:45:ca:c9:25:78:ae:bc:3c:f6:ba:c3:c2:15:e8:6d:ed:75:4a:cd:f7:6c:5e:97:9a:9e:e5

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.rdata
Size: 512B - Virtual size: 160B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 247KB - Virtual size: 246KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
All Files/files/izanptp
.exe windows:6 windows x86 arch:x86

a7e73ef2207e9ee97c678506145e1258

Code Sign

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

21-12-2012 00:00

Not After

30-12-2020 23:59

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

18-10-2012 00:00

Not After

29-12-2020 23:59

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

4f:be:0a:02:42:6e:bd:20:c2:62:44:b5:ec:a6:52:a3
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Not Before

09-07-2018 00:00

Not After

10-07-2019 23:59

Subject

CN=NVIDIA Corporation,OU=IT-MIS,O=NVIDIA Corporation,L=Santa Clara,ST=California,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

61:19:93:e4:00:00:00:00:00:1c
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

22-02-2011 19:25

Not After

22-02-2021 19:35

Subject

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

08-02-2010 00:00

Not After

07-02-2020 23:59

Subject

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

62:e7:45:e9:21:65:21:3c:97:1f:5c:49:0a:ea:12:a5
Certificate

Issuer

CN=Symantec Class 3 SHA256 Code Signing CA - G2,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Not Before

09-07-2018 00:00

Not After

09-07-2021 23:59

Subject

CN=NVIDIA Corporation,OU=IT-MIS,O=NVIDIA Corporation,L=Santa Clara,ST=California,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

7c:1b:35:35:4a:e7:db:74:e7:41:5f:11:69:ca:6b:a8
Certificate

Issuer

CN=VeriSign Universal Root Certification Authority,OU=VeriSign Trust Network+OU=(c) 2008 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

22-07-2014 00:00

Not After

21-07-2024 23:59

Subject

CN=Symantec Class 3 SHA256 Code Signing CA - G2,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

61:2d:23:cb:00:00:00:00:00:21
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

22-02-2011 19:46

Not After

22-02-2021 19:56

Subject

CN=VeriSign Universal Root Certification Authority,OU=VeriSign Trust Network+OU=(c) 2008 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

7b:05:b1:d4:49:68:51:44:f7:c9:89:d2:9c:19:9d:12
Certificate

Issuer

CN=VeriSign Universal Root Certification Authority,OU=VeriSign Trust Network+OU=(c) 2008 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

12-01-2016 00:00

Not After

11-01-2031 23:59

Subject

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

7b:d4:e5:af:ba:cc:07:3f:a1:01:23:04:22:41:4d:12
Certificate

Issuer

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Not Before

23-12-2017 00:00

Not After

22-03-2029 23:59

Subject

CN=Symantec SHA256 TimeStamping Signer - G3,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

54:cb:ab:94:75:80:97:ed:a8:bb:b7:bd:5b:5f:9b:d9:c4:b8:e5:05:1b:74:5b:83:60:86:a9:f7:ca:58:97:d7
Signer

Actual PE Digest

54:cb:ab:94:75:80:97:ed:a8:bb:b7:bd:5b:5f:9b:d9:c4:b8:e5:05:1b:74:5b:83:60:86:a9:f7:ca:58:97:d7

Digest Algorithm

sha256

PE Digest Matches

true

7f:01:56:fd:7c:3f:56:65:ab:41:e1:66:0d:22:36:1d:f4:00:d1:24
Signer

Actual PE Digest

7f:01:56:fd:7c:3f:56:65:ab:41:e1:66:0d:22:36:1d:f4:00:d1:24

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\dvs\p4\build\sw\rel\gpu_drv\r415\r415_00\drivers\stereo_vision\Apps\GeForce3DVisionSetupWizard\release\NvStWiz.pdb

Imports

user32

GetDesktopWindow
PostQuitMessage
GetUserObjectInformationW
SetCursor
LoadCursorW
TranslateMessage
OpenInputDesktop
ValidateRect
PeekMessageW
EnumDisplaySettingsExW
DestroyIcon
EnumDisplaySettingsW
CloseDesktop
ChangeDisplaySettingsW
ShowWindow
DestroyCursor
RegisterClassExW
SendMessageW
CreateWindowExW
MessageBoxW
DestroyWindow
DefWindowProcW
ChangeDisplaySettingsExW
UpdateWindow
LoadImageW
SetCursorPos
DispatchMessageW
GetCursorPos

shell32

SHGetFolderPathW
ShellExecuteW
SHGetKnownFolderPath

ole32

CoTaskMemFree
CreateStreamOnHGlobal
CoCreateInstance
CoUninitialize
CoInitialize

d3d9

Direct3DCreate9

d3d10

D3D10CreateDevice

gdiplus

GdipLoadImageFromStream
GdipSetStringFormatFlags
GdipGetImageWidth
GdipSetStringFormatAlign
GdiplusStartup
GdipCreatePen1
GdipCreateStringFormat
GdipDeleteFontFamily
GdipGetImageHeight
GdipSetImageAttributesColorMatrix
GdipDeleteFont
GdipSetCompositingMode
GdipDeleteStringFormat
GdipDeleteGraphics
GdiplusShutdown
GdipMeasureString
GdipCloneBrush
GdipSetTextRenderingHint
GdipCreateFromHDC
GdipDrawString
GdipFree
GdipGetGenericFontFamilySansSerif
GdipCreateImageAttributes
GdipDrawLine
GdipCreateSolidFill
GdipCreateFont
GdipDisposeImage
GdipDisposeImageAttributes
GdipDrawImageRectI
GdipAlloc
GdipDeleteBrush
GdipCloneImage
GdipDrawImageRectRect
GdipCreateFontFamilyFromName
GdipDeletePen

kernel32

GetConsoleCP
FlushFileBuffers
SetStdHandle
GetProcessHeap
LCMapStringW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCPInfo
GetOEMCP
IsValidCodePage
FindNextFileA
FindFirstFileExA
GetStringTypeW
GetFileType
HeapAlloc
HeapFree
GetACP
WriteFile
GetStdHandle
HeapSize
MultiByteToWideChar
GetModuleFileNameA
GetModuleHandleExW
ExitProcess
GetCommandLineW
GetCommandLineA
EncodePointer
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
InitializeCriticalSectionAndSpinCount
RaiseException
RtlUnwind
InitializeSListHead
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
GetStartupInfoW
IsDebuggerPresent
IsProcessorFeaturePresent
TerminateProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
WaitForSingleObjectEx
ResetEvent
SetEvent
GetConsoleMode
HeapReAlloc
SetFilePointerEx
SetEndOfFile
ReadFile
ReadConsoleW
DecodePointer
WideCharToMultiByte
SizeofResource
FindFirstFileW
GetSystemDefaultLCID
FindNextFileW
lstrcpynW
GetThreadLocale
GetUserDefaultUILanguage
GetTempPathW
FindClose
GetLocaleInfoW
GetFileAttributesW
GetVersionExW
GetSystemDirectoryW
FreeResource
CreateEventW
Sleep
GetLastError
LockResource
GlobalAlloc
GlobalFree
CloseHandle
LoadLibraryW
FindResourceExW
LoadResource
FindResourceW
GetProcAddress
GlobalLock
WriteConsoleW
FreeLibrary
lstrcmpiW
GlobalUnlock
LoadLibraryExW
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
VerSetConditionMask
ExpandEnvironmentStringsW
CreateFileW
GetFullPathNameW
SetLastError
GetCurrentProcess
GetModuleHandleA
LocalAlloc
LocalFree
lstrcmpW
VerifyVersionInfoW
GetModuleHandleW

advapi32

RegQueryValueExW
RegOpenKeyExA
InitializeSecurityDescriptor
RegSetValueExA
RegQueryValueExA
RegCloseKey
SetSecurityDescriptorDacl
RegOpenKeyExW

Sections

.text
Size: 182KB - Virtual size: 182KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 62KB - Virtual size: 62KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 152KB - Virtual size: 151KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 15KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
All Files/files/lang-1058.dll
.dll windows:6 windows x86 arch:x86

Code Sign

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

29-04-2021 00:00

Not After

28-04-2036 23:59

Subject

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

05:75:e1:f7:ec:9b:d8:a6:7a:3f:61:89:c6:3e:97:bb
Certificate

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Not Before

16-09-2022 00:00

Not After

17-09-2025 23:59

Subject

CN=PIRIFORM SOFTWARE LIMITED,O=PIRIFORM SOFTWARE LIMITED,L=London,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16
Certificate

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Not Before

14-07-2023 00:00

Not After

13-10-2034 23:59

Subject

CN=DigiCert Timestamp 2023,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

23-03-2022 00:00

Not After

22-03-2037 23:59

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01-08-2022 00:00

Not After

09-11-2031 23:59

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

79:ad:e0:64:e4:e6:2d:91:c0:f1:bf:7f:f7:1a:3d:a5:01:8f:45:2b:7e:ff:ba:4b:f0:59:d2:18:e7:a8:32:e4
Signer

Actual PE Digest

79:ad:e0:64:e4:e6:2d:91:c0:f1:bf:7f:f7:1a:3d:a5:01:8f:45:2b:7e:ff:ba:4b:f0:59:d2:18:e7:a8:32:e4

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.rdata
Size: 512B - Virtual size: 160B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 251KB - Virtual size: 250KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
All Files/files/mc_enc_mpa.dll
.dll windows:5 windows x64 arch:x64

102189c70f88ab5bc50aff1219eadbea

Code Sign

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

21-12-2012 00:00

Not After

30-12-2020 23:59

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

18-10-2012 00:00

Not After

29-12-2020 23:59

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

6c:59:ef:a9:e1:00:e1:0e:e3:06:ba:8f:e0:29:25:59
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

07-06-2012 00:00

Not After

06-06-2022 23:59

Subject

CN=Symantec Class 3 Extended Validation Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

35:a8:4f:a5:03:f8:9b:49:83:96:bb:48:91:68:a5:80
Certificate

Issuer

CN=Symantec Class 3 Extended Validation Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Not Before

14-01-2014 00:00

Not After

07-01-2016 23:59

Subject

SERIALNUMBER=2748129,CN=Adobe Systems Incorporated,OU=Photoshop\, Bridge - SHA256,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130844656c6177617265,1.3.6.1.4.1.311.60.2.1.3=#13025553

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

20:b9:3d:43:59:ff:c2:d6:82:e9:ea:e1:34:7d:29:9f:68:be:57:79
Signer

Actual PE Digest

20:b9:3d:43:59:ff:c2:d6:82:e9:ea:e1:34:7d:29:9f:68:be:57:79

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

E:\bslave-ngproducts\builddir\build\mc_adobe_sdk_dbginfo_win64_x64_release\mc_enc_mpa.pdb

Imports

kernel32

GetLastError
HeapFree
HeapAlloc
GetCurrentThreadId
FlsSetValue
GetCommandLineA
EncodePointer
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
HeapSetInformation
GetVersion
HeapCreate
HeapDestroy
GetProcAddress
GetModuleHandleW
ExitProcess
DecodePointer
WriteFile
GetStdHandle
GetModuleFileNameW
RtlUnwindEx
FlsGetValue
FlsFree
SetLastError
FlsAlloc
Sleep
SetHandleCount
InitializeCriticalSectionAndSpinCount
GetFileType
GetStartupInfoW
DeleteCriticalSection
GetModuleFileNameA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
LeaveCriticalSection
EnterCriticalSection
LoadLibraryW
RaiseException
HeapReAlloc
LCMapStringW
MultiByteToWideChar
GetStringTypeW
HeapSize

Exports

Exports

mpegOutAudioCheckFirst
mpegOutAudioCheckNext
mpegOutAudioCheckSettings
mpegOutAudioChkSettings
mpegOutAudioDefaults
mpegOutAudioDone
mpegOutAudioFree
mpegOutAudioGetAPIExt
mpegOutAudioGetLastErrString
mpegOutAudioInit
mpegOutAudioNew
mpegOutAudioPutBytes

Sections

.text
Size: 86KB - Virtual size: 86KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 19KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 111KB - Virtual size: 115KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

text
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE

data
Size: 25KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
All Files/files/msm.dll
.dll windows:6 windows x64 arch:x64

af830f17c37c70c8578ff418ac3a0dc3

Code Sign

33:00:00:03:4e:b5:3c:7a:c1:84:6f:eb:2b:00:00:00:00:03:4e
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

16-03-2023 18:43

Not After

14-03-2024 18:43

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08-07-2011 20:59

Not After

08-07-2026 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

ef:3b:60:d1:82:54:48:0f:5b:58:14:ed:cd:48:7a:42:82:c5:0f:45:f5:4a:27:8d:0e:20:e5:5b:7f:d6:e7:d9
Signer

Actual PE Digest

ef:3b:60:d1:82:54:48:0f:5b:58:14:ed:cd:48:7a:42:82:c5:0f:45:f5:4a:27:8d:0e:20:e5:5b:7f:d6:e7:d9

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

D:\dbs\sh\ddvsm\1001_131954\cmd\4t\out\binaries\amd64ret\bin\amd64\VSPMsg.pdb

Imports

kernel32

DisableThreadLibraryCalls
WriteConsoleW
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
GetStartupInfoW
GetModuleHandleW
RtlUnwindEx
InterlockedFlushSList
GetLastError
SetLastError
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
GetProcAddress
LoadLibraryExW
RaiseException
ExitProcess
GetModuleHandleExW
GetModuleFileNameA
MultiByteToWideChar
WideCharToMultiByte
LCMapStringW
HeapAlloc
HeapFree
FindClose
FindFirstFileExA
FindNextFileA
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
GetCommandLineA
GetCommandLineW
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetProcessHeap
GetStdHandle
GetFileType
GetStringTypeW
HeapSize
HeapReAlloc
SetStdHandle
WriteFile
FlushFileBuffers
GetConsoleCP
GetConsoleMode
SetFilePointerEx
CloseHandle
CreateFileW

Exports

Exports

GetErrorMessageModule
SetErrorMessageModule

Sections

.text
Size: 40KB - Virtual size: 39KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 36KB - Virtual size: 35KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

_RDATA
Size: 512B - Virtual size: 348B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 95KB - Virtual size: 95KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
All Files/files/wall.wsdl
.xml
All Files/files/𝑆𝑡𝑒𝑝-𝑏𝑦-𝑆𝑡𝑒𝑝 𝐺𝑢𝑖𝑑𝑒.txt
Backup/Anee
.exe windows:6 windows x86 arch:x86

a7e73ef2207e9ee97c678506145e1258

Code Sign

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

21-12-2012 00:00

Not After

30-12-2020 23:59

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

18-10-2012 00:00

Not After

29-12-2020 23:59

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

4f:be:0a:02:42:6e:bd:20:c2:62:44:b5:ec:a6:52:a3
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Not Before

09-07-2018 00:00

Not After

10-07-2019 23:59

Subject

CN=NVIDIA Corporation,OU=IT-MIS,O=NVIDIA Corporation,L=Santa Clara,ST=California,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

61:19:93:e4:00:00:00:00:00:1c
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

22-02-2011 19:25

Not After

22-02-2021 19:35

Subject

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

08-02-2010 00:00

Not After

07-02-2020 23:59

Subject

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

62:e7:45:e9:21:65:21:3c:97:1f:5c:49:0a:ea:12:a5
Certificate

Issuer

CN=Symantec Class 3 SHA256 Code Signing CA - G2,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Not Before

09-07-2018 00:00

Not After

09-07-2021 23:59

Subject

CN=NVIDIA Corporation,OU=IT-MIS,O=NVIDIA Corporation,L=Santa Clara,ST=California,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

7c:1b:35:35:4a:e7:db:74:e7:41:5f:11:69:ca:6b:a8
Certificate

Issuer

CN=VeriSign Universal Root Certification Authority,OU=VeriSign Trust Network+OU=(c) 2008 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

22-07-2014 00:00

Not After

21-07-2024 23:59

Subject

CN=Symantec Class 3 SHA256 Code Signing CA - G2,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

61:2d:23:cb:00:00:00:00:00:21
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

22-02-2011 19:46

Not After

22-02-2021 19:56

Subject

CN=VeriSign Universal Root Certification Authority,OU=VeriSign Trust Network+OU=(c) 2008 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

7b:05:b1:d4:49:68:51:44:f7:c9:89:d2:9c:19:9d:12
Certificate

Issuer

CN=VeriSign Universal Root Certification Authority,OU=VeriSign Trust Network+OU=(c) 2008 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

12-01-2016 00:00

Not After

11-01-2031 23:59

Subject

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

7b:d4:e5:af:ba:cc:07:3f:a1:01:23:04:22:41:4d:12
Certificate

Issuer

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Not Before

23-12-2017 00:00

Not After

22-03-2029 23:59

Subject

CN=Symantec SHA256 TimeStamping Signer - G3,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

54:cb:ab:94:75:80:97:ed:a8:bb:b7:bd:5b:5f:9b:d9:c4:b8:e5:05:1b:74:5b:83:60:86:a9:f7:ca:58:97:d7
Signer

Actual PE Digest

54:cb:ab:94:75:80:97:ed:a8:bb:b7:bd:5b:5f:9b:d9:c4:b8:e5:05:1b:74:5b:83:60:86:a9:f7:ca:58:97:d7

Digest Algorithm

sha256

PE Digest Matches

true

7f:01:56:fd:7c:3f:56:65:ab:41:e1:66:0d:22:36:1d:f4:00:d1:24
Signer

Actual PE Digest

7f:01:56:fd:7c:3f:56:65:ab:41:e1:66:0d:22:36:1d:f4:00:d1:24

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\dvs\p4\build\sw\rel\gpu_drv\r415\r415_00\drivers\stereo_vision\Apps\GeForce3DVisionSetupWizard\release\NvStWiz.pdb

Imports

user32

GetDesktopWindow
PostQuitMessage
GetUserObjectInformationW
SetCursor
LoadCursorW
TranslateMessage
OpenInputDesktop
ValidateRect
PeekMessageW
EnumDisplaySettingsExW
DestroyIcon
EnumDisplaySettingsW
CloseDesktop
ChangeDisplaySettingsW
ShowWindow
DestroyCursor
RegisterClassExW
SendMessageW
CreateWindowExW
MessageBoxW
DestroyWindow
DefWindowProcW
ChangeDisplaySettingsExW
UpdateWindow
LoadImageW
SetCursorPos
DispatchMessageW
GetCursorPos

shell32

SHGetFolderPathW
ShellExecuteW
SHGetKnownFolderPath

ole32

CoTaskMemFree
CreateStreamOnHGlobal
CoCreateInstance
CoUninitialize
CoInitialize

d3d9

Direct3DCreate9

d3d10

D3D10CreateDevice

gdiplus

GdipLoadImageFromStream
GdipSetStringFormatFlags
GdipGetImageWidth
GdipSetStringFormatAlign
GdiplusStartup
GdipCreatePen1
GdipCreateStringFormat
GdipDeleteFontFamily
GdipGetImageHeight
GdipSetImageAttributesColorMatrix
GdipDeleteFont
GdipSetCompositingMode
GdipDeleteStringFormat
GdipDeleteGraphics
GdiplusShutdown
GdipMeasureString
GdipCloneBrush
GdipSetTextRenderingHint
GdipCreateFromHDC
GdipDrawString
GdipFree
GdipGetGenericFontFamilySansSerif
GdipCreateImageAttributes
GdipDrawLine
GdipCreateSolidFill
GdipCreateFont
GdipDisposeImage
GdipDisposeImageAttributes
GdipDrawImageRectI
GdipAlloc
GdipDeleteBrush
GdipCloneImage
GdipDrawImageRectRect
GdipCreateFontFamilyFromName
GdipDeletePen

kernel32

GetConsoleCP
FlushFileBuffers
SetStdHandle
GetProcessHeap
LCMapStringW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCPInfo
GetOEMCP
IsValidCodePage
FindNextFileA
FindFirstFileExA
GetStringTypeW
GetFileType
HeapAlloc
HeapFree
GetACP
WriteFile
GetStdHandle
HeapSize
MultiByteToWideChar
GetModuleFileNameA
GetModuleHandleExW
ExitProcess
GetCommandLineW
GetCommandLineA
EncodePointer
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
InitializeCriticalSectionAndSpinCount
RaiseException
RtlUnwind
InitializeSListHead
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
GetStartupInfoW
IsDebuggerPresent
IsProcessorFeaturePresent
TerminateProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
WaitForSingleObjectEx
ResetEvent
SetEvent
GetConsoleMode
HeapReAlloc
SetFilePointerEx
SetEndOfFile
ReadFile
ReadConsoleW
DecodePointer
WideCharToMultiByte
SizeofResource
FindFirstFileW
GetSystemDefaultLCID
FindNextFileW
lstrcpynW
GetThreadLocale
GetUserDefaultUILanguage
GetTempPathW
FindClose
GetLocaleInfoW
GetFileAttributesW
GetVersionExW
GetSystemDirectoryW
FreeResource
CreateEventW
Sleep
GetLastError
LockResource
GlobalAlloc
GlobalFree
CloseHandle
LoadLibraryW
FindResourceExW
LoadResource
FindResourceW
GetProcAddress
GlobalLock
WriteConsoleW
FreeLibrary
lstrcmpiW
GlobalUnlock
LoadLibraryExW
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
VerSetConditionMask
ExpandEnvironmentStringsW
CreateFileW
GetFullPathNameW
SetLastError
GetCurrentProcess
GetModuleHandleA
LocalAlloc
LocalFree
lstrcmpW
VerifyVersionInfoW
GetModuleHandleW

advapi32

RegQueryValueExW
RegOpenKeyExA
InitializeSecurityDescriptor
RegSetValueExA
RegQueryValueExA
RegCloseKey
SetSecurityDescriptorDacl
RegOpenKeyExW

Sections

.text
Size: 182KB - Virtual size: 182KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 62KB - Virtual size: 62KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 152KB - Virtual size: 151KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 15KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Backup/IMG/1.png
.png
Backup/IMG/1728281172004.png
.png
Backup/IMG/2.png
.png
Backup/IMG/2025 (2).png
.png
Backup/IMG/2025--.jpg
.jpg
Backup/IMG/3.png
.png
Backup/IMG/4.png
.png
Backup/IMG/5.png
.png
Backup/IMG/9.png
.png
Backup/IMG/Data/2025 (2).png
.png
Backup/IMG/Data/IMG.png
.png
Backup/IMG/Data/win.png
.png
Backup/IMG/Password 2025.png
.png
Backup/IMG/Star.jpg
.jpg
Backup/IMG/cb (2).png
.png
Backup/IMG/cb.png
.png
Backup/IMG/d (2).jpg
.jpg
Backup/IMG/gettyimages-1816467185-640x640.jpg
.jpg
Backup/IMG/pngtree-2025-3d-gold-text-effect-png-image_14406263.png
.png
Backup/IMG/sn.png
.png
Backup/IMG/vc.png
.png
Backup/IMG/wei.png
.png
Backup/Images/cb (2).png
.png
Backup/Images/cb.png
.png
Backup/Images/d (2).jpg
.jpg
Backup/Images/dsfe.png
.png
Backup/Images/fe.png
.png
Backup/Images/vc.png
.png
Backup/Images/wei.png
.png
Backup/Qest/11.png
.png
Backup/Qest/12.png
.png
Backup/Qest/Anee
.exe windows:6 windows x86 arch:x86

a7e73ef2207e9ee97c678506145e1258

Code Sign

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

21-12-2012 00:00

Not After

30-12-2020 23:59

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

18-10-2012 00:00

Not After

29-12-2020 23:59

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

4f:be:0a:02:42:6e:bd:20:c2:62:44:b5:ec:a6:52:a3
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Not Before

09-07-2018 00:00

Not After

10-07-2019 23:59

Subject

CN=NVIDIA Corporation,OU=IT-MIS,O=NVIDIA Corporation,L=Santa Clara,ST=California,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

61:19:93:e4:00:00:00:00:00:1c
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

22-02-2011 19:25

Not After

22-02-2021 19:35

Subject

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

08-02-2010 00:00

Not After

07-02-2020 23:59

Subject

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

62:e7:45:e9:21:65:21:3c:97:1f:5c:49:0a:ea:12:a5
Certificate

Issuer

CN=Symantec Class 3 SHA256 Code Signing CA - G2,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Not Before

09-07-2018 00:00

Not After

09-07-2021 23:59

Subject

CN=NVIDIA Corporation,OU=IT-MIS,O=NVIDIA Corporation,L=Santa Clara,ST=California,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

7c:1b:35:35:4a:e7:db:74:e7:41:5f:11:69:ca:6b:a8
Certificate

Issuer

CN=VeriSign Universal Root Certification Authority,OU=VeriSign Trust Network+OU=(c) 2008 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

22-07-2014 00:00

Not After

21-07-2024 23:59

Subject

CN=Symantec Class 3 SHA256 Code Signing CA - G2,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

61:2d:23:cb:00:00:00:00:00:21
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

22-02-2011 19:46

Not After

22-02-2021 19:56

Subject

CN=VeriSign Universal Root Certification Authority,OU=VeriSign Trust Network+OU=(c) 2008 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

7b:05:b1:d4:49:68:51:44:f7:c9:89:d2:9c:19:9d:12
Certificate

Issuer

CN=VeriSign Universal Root Certification Authority,OU=VeriSign Trust Network+OU=(c) 2008 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

12-01-2016 00:00

Not After

11-01-2031 23:59

Subject

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

7b:d4:e5:af:ba:cc:07:3f:a1:01:23:04:22:41:4d:12
Certificate

Issuer

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Not Before

23-12-2017 00:00

Not After

22-03-2029 23:59

Subject

CN=Symantec SHA256 TimeStamping Signer - G3,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

54:cb:ab:94:75:80:97:ed:a8:bb:b7:bd:5b:5f:9b:d9:c4:b8:e5:05:1b:74:5b:83:60:86:a9:f7:ca:58:97:d7
Signer

Actual PE Digest

54:cb:ab:94:75:80:97:ed:a8:bb:b7:bd:5b:5f:9b:d9:c4:b8:e5:05:1b:74:5b:83:60:86:a9:f7:ca:58:97:d7

Digest Algorithm

sha256

PE Digest Matches

true

7f:01:56:fd:7c:3f:56:65:ab:41:e1:66:0d:22:36:1d:f4:00:d1:24
Signer

Actual PE Digest

7f:01:56:fd:7c:3f:56:65:ab:41:e1:66:0d:22:36:1d:f4:00:d1:24

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\dvs\p4\build\sw\rel\gpu_drv\r415\r415_00\drivers\stereo_vision\Apps\GeForce3DVisionSetupWizard\release\NvStWiz.pdb

Imports

user32

GetDesktopWindow
PostQuitMessage
GetUserObjectInformationW
SetCursor
LoadCursorW
TranslateMessage
OpenInputDesktop
ValidateRect
PeekMessageW
EnumDisplaySettingsExW
DestroyIcon
EnumDisplaySettingsW
CloseDesktop
ChangeDisplaySettingsW
ShowWindow
DestroyCursor
RegisterClassExW
SendMessageW
CreateWindowExW
MessageBoxW
DestroyWindow
DefWindowProcW
ChangeDisplaySettingsExW
UpdateWindow
LoadImageW
SetCursorPos
DispatchMessageW
GetCursorPos

shell32

SHGetFolderPathW
ShellExecuteW
SHGetKnownFolderPath

ole32

CoTaskMemFree
CreateStreamOnHGlobal
CoCreateInstance
CoUninitialize
CoInitialize

d3d9

Direct3DCreate9

d3d10

D3D10CreateDevice

gdiplus

GdipLoadImageFromStream
GdipSetStringFormatFlags
GdipGetImageWidth
GdipSetStringFormatAlign
GdiplusStartup
GdipCreatePen1
GdipCreateStringFormat
GdipDeleteFontFamily
GdipGetImageHeight
GdipSetImageAttributesColorMatrix
GdipDeleteFont
GdipSetCompositingMode
GdipDeleteStringFormat
GdipDeleteGraphics
GdiplusShutdown
GdipMeasureString
GdipCloneBrush
GdipSetTextRenderingHint
GdipCreateFromHDC
GdipDrawString
GdipFree
GdipGetGenericFontFamilySansSerif
GdipCreateImageAttributes
GdipDrawLine
GdipCreateSolidFill
GdipCreateFont
GdipDisposeImage
GdipDisposeImageAttributes
GdipDrawImageRectI
GdipAlloc
GdipDeleteBrush
GdipCloneImage
GdipDrawImageRectRect
GdipCreateFontFamilyFromName
GdipDeletePen

kernel32

GetConsoleCP
FlushFileBuffers
SetStdHandle
GetProcessHeap
LCMapStringW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCPInfo
GetOEMCP
IsValidCodePage
FindNextFileA
FindFirstFileExA
GetStringTypeW
GetFileType
HeapAlloc
HeapFree
GetACP
WriteFile
GetStdHandle
HeapSize
MultiByteToWideChar
GetModuleFileNameA
GetModuleHandleExW
ExitProcess
GetCommandLineW
GetCommandLineA
EncodePointer
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
InitializeCriticalSectionAndSpinCount
RaiseException
RtlUnwind
InitializeSListHead
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
GetStartupInfoW
IsDebuggerPresent
IsProcessorFeaturePresent
TerminateProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
WaitForSingleObjectEx
ResetEvent
SetEvent
GetConsoleMode
HeapReAlloc
SetFilePointerEx
SetEndOfFile
ReadFile
ReadConsoleW
DecodePointer
WideCharToMultiByte
SizeofResource
FindFirstFileW
GetSystemDefaultLCID
FindNextFileW
lstrcpynW
GetThreadLocale
GetUserDefaultUILanguage
GetTempPathW
FindClose
GetLocaleInfoW
GetFileAttributesW
GetVersionExW
GetSystemDirectoryW
FreeResource
CreateEventW
Sleep
GetLastError
LockResource
GlobalAlloc
GlobalFree
CloseHandle
LoadLibraryW
FindResourceExW
LoadResource
FindResourceW
GetProcAddress
GlobalLock
WriteConsoleW
FreeLibrary
lstrcmpiW
GlobalUnlock
LoadLibraryExW
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
VerSetConditionMask
ExpandEnvironmentStringsW
CreateFileW
GetFullPathNameW
SetLastError
GetCurrentProcess
GetModuleHandleA
LocalAlloc
LocalFree
lstrcmpW
VerifyVersionInfoW
GetModuleHandleW

advapi32

RegQueryValueExW
RegOpenKeyExA
InitializeSecurityDescriptor
RegSetValueExA
RegQueryValueExA
RegCloseKey
SetSecurityDescriptorDacl
RegOpenKeyExW

Sections

.text
Size: 182KB - Virtual size: 182KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 62KB - Virtual size: 62KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 152KB - Virtual size: 151KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 15KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Backup/Qest/StartupHelper
.exe windows:5 windows x86 arch:x86

d21794f0d47bb5c7f5977a6500854d85

Code Sign

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

29-04-2021 00:00

Not After

28-04-2036 23:59

Subject

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

04:28:14:36:98:54:a8:5f:9b:8f:90:12:67:c0:3c:f2
Certificate

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Not Before

17-08-2022 00:00

Not After

29-07-2025 23:59

Subject

SERIALNUMBER=91110108680456115E,CN=Glarysoft Ltd,O=Glarysoft Ltd,ST=Beijing,C=CN,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.1=#13104861696469616e204469737472696374,1.3.6.1.4.1.311.60.2.1.2=#13074265696a696e67,1.3.6.1.4.1.311.60.2.1.3=#1302434e

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16
Certificate

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Not Before

14-07-2023 00:00

Not After

13-10-2034 23:59

Subject

CN=DigiCert Timestamp 2023,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

23-03-2022 00:00

Not After

22-03-2037 23:59

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01-08-2022 00:00

Not After

09-11-2031 23:59

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

29-04-2021 00:00

Not After

28-04-2036 23:59

Subject

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

04:28:14:36:98:54:a8:5f:9b:8f:90:12:67:c0:3c:f2
Certificate

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Not Before

17-08-2022 00:00

Not After

29-07-2025 23:59

Subject

SERIALNUMBER=91110108680456115E,CN=Glarysoft Ltd,O=Glarysoft Ltd,ST=Beijing,C=CN,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.1=#13104861696469616e204469737472696374,1.3.6.1.4.1.311.60.2.1.2=#13074265696a696e67,1.3.6.1.4.1.311.60.2.1.3=#1302434e

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16
Certificate

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Not Before

14-07-2023 00:00

Not After

13-10-2034 23:59

Subject

CN=DigiCert Timestamp 2023,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

23-03-2022 00:00

Not After

22-03-2037 23:59

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01-08-2022 00:00

Not After

09-11-2031 23:59

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

cc:08:bb:49:63:6e:cf:3f:72:bf:92:cf:45:8b:91:0e:90:0f:7d:11:28:70:03:90:0a:af:8b:19:89:f5:2f:7b
Signer

Actual PE Digest

cc:08:bb:49:63:6e:cf:3f:72:bf:92:cf:45:8b:91:0e:90:0f:7d:11:28:70:03:90:0a:af:8b:19:89:f5:2f:7b

Digest Algorithm

sha256

PE Digest Matches

true

b2:c8:9c:70:dd:00:70:00:00:18:3b:25:00:02:8e:c2:fc:f9:28:b7
Signer

Actual PE Digest

b2:c8:9c:70:dd:00:70:00:00:18:3b:25:00:02:8e:c2:fc:f9:28:b7

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

D:\winapps\mh\trunk\exe\vc\StartupHelper\sourcecode\Release\StartupHelper.pdb

Imports

mfc90u

ord404
ord2597
ord2141
ord4131
ord6635
ord4044
ord611
ord595
ord3489
ord5664
ord4652
ord1493
ord6411
ord3355
ord1665
ord5939
ord4405
ord1607
ord3220
ord5632
ord5167
ord5324
ord1810
ord1809
ord1675
ord3353
ord6408
ord1754
ord1751
ord4345
ord1492
ord4664
ord5602
ord2074
ord5512
ord6800
ord4603
ord3743
ord5154
ord4702
ord1728
ord6466
ord5685
ord5683
ord960
ord965
ord969
ord967
ord971
ord2615
ord2635
ord2619
ord2625
ord2623
ord2621
ord2638
ord2633
ord2617
ord2640
ord2628
ord2610
ord2612
ord2630
ord2375
ord2368
ord1641
ord6802
ord4174
ord6804
ord3682
ord5404
ord6376
ord3226
ord1442
ord5625
ord2139
ord1792
ord1791
ord1727
ord5650
ord3140
ord4910
ord4682
ord3515
ord2593
ord5653
ord6091
ord4774
ord4815
ord5078
ord613
ord337
ord4631
ord2901
ord4741
ord1533
ord3537
ord6095
ord3622
ord6187
ord6094
ord333
ord3488
ord1354
ord1353
ord2097
ord3543
ord1183
ord3486
ord4527
ord6579
ord4543
ord6577
ord2592
ord744
ord524
ord2069
ord1063
ord663
ord2146
ord1166
ord1064
ord6604
ord4530
ord2904
ord1047
ord2596
ord5008
ord1108
ord367
ord586
ord4000
ord374
ord2130
ord3577
ord2282
ord4512
ord4442
ord4448
ord4423
ord6801
ord4173
ord6803
ord4747
ord2251
ord2206
ord6035
ord4179
ord1048
ord5548
ord6741
ord5830
ord4213
ord2087
ord3217
ord5674
ord5676
ord4347
ord4996
ord5680
ord5663
ord6018
ord2771
ord2983
ord3112
ord799
ord265
ord266
ord1272
ord1137
ord1254
ord686
ord436
ord792
ord587
ord4728
ord2966
ord3115
ord2774
ord2893
ord2764
ord4080
ord4081
ord4071
ord2891
ord4348
ord4905
ord4681
ord3670
ord2447
ord636
ord790
ord639
ord2208
ord6482
ord1098
ord4211
ord794
ord589
ord4043
ord4967
ord1318
ord2327
ord316
ord601
ord899
ord1315
ord938
ord1603
ord2478
ord5979
ord6687
ord285
ord5535
ord6079
ord6813
ord1552
ord2551
ord946
ord821
ord2470
ord6096
ord4541
ord4410
ord290
ord1088
ord6659
ord2243
ord6204
ord339
ord289
ord288
ord6164
ord1599
ord809
ord6013
ord935
ord936
ord2702
ord286
ord5851
ord3637
ord2106
ord811
ord280
ord2326
ord2694
ord6529
ord813
ord2537
ord600
ord1143
ord296
ord1248
ord2084
ord1250
ord801

msvcr90

memcpy
memset
towupper
__CxxFrameHandler3
?_type_info_dtor_internal_method@type_info@@QAEXXZ
_crt_debugger_hook
_controlfp_s
_invoke_watson
_except_handler4_common
_decode_pointer
_onexit
_lock
__dllonexit
_unlock
?terminate@@YAXXZ
__set_app_type
_encode_pointer
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_configthreadlocale
_initterm_e
_initterm
_wcmdln
exit
_XcptFilter
_exit
_cexit
__wgetmainargs
_amsg_exit
__wargv
__argc
setlocale
_resetstkoflw
?what@exception@std@@UBEPBDXZ
_msize
_purecall
_set_errno
_get_errno
_wtoi64
realloc
_gcvt_s
_fpclass
_HUGE
iswspace
wcsrchr
wcschr
_ui64toa_s
_i64toa_s
isspace
_itoa_s
wcsncmp
wcstod
wcstol
_wcstoui64
_wcstoi64
strtol
_wtoi
wcsnlen
_wcsicmp
_scwprintf
_ultoa_s
strncmp
_strlwr_s
_recalloc
calloc
_itow_s
swprintf_s
_CxxThrowException
malloc
wcscpy_s
wcsncpy_s
_invalid_parameter_noinfo
??0exception@std@@QAE@ABV01@@Z
free
??0exception@std@@QAE@XZ
??1exception@std@@UAE@XZ
??0exception@std@@QAE@ABQBD@Z
memmove_s
memcpy_s

kernel32

GetPrivateProfileSectionW
LocalFree
GetCurrentProcessId
InterlockedCompareExchange
GetStartupInfoW
SetUnhandledExceptionFilter
QueryPerformanceCounter
GetCurrentThreadId
GetSystemTimeAsFileTime
TerminateProcess
SetLastError
LoadLibraryW
GetCurrentProcess
UnhandledExceptionFilter
IsDebuggerPresent
EnterCriticalSection
GetProcAddress
GetModuleHandleW
Sleep
GetTickCount
GetCommandLineW
InterlockedExchange
CreateMutexW
CloseHandle
HeapReAlloc
GetPrivateProfileIntW
HeapFree
GetProcessHeap
HeapAlloc
WideCharToMultiByte
lstrlenA
MultiByteToWideChar
GetLastError
GetModuleFileNameW
lstrlenW
WaitForSingleObject
HeapDestroy
HeapSize
DeleteCriticalSection
InitializeCriticalSection
LeaveCriticalSection

user32

SendMessageW
AppendMenuW
GetSystemMenu
GetWindowRect
MessageBoxW
GetWindowLongW
SetWindowLongW
UnionRect
GetMenuBarInfo
GetMenuItemID
GetMenuItemCount
GetSysColor
OffsetRect
FrameRect
DrawFrameControl
CopyRect
EnableWindow
IsWindow
InvalidateRect
KillTimer
PtInRect
ReleaseDC
FillRect
GetDC
SystemParametersInfoW
EndPaint
BeginPaint
DrawIcon
GetSystemMetrics
IsIconic
SetTimer
GetClientRect
LoadIconW

gdi32

CreatePen
CreateCompatibleBitmap
CreateSolidBrush
GetObjectW
SetDIBColorTable
GetTextExtentPoint32W
SetBkMode
CreateRoundRectRgn
GetCurrentObject
GetBkMode
CreatePatternBrush
SetBrushOrgEx
FillRgn
FrameRgn
SelectObject
CreateFontW
GetDIBColorTable
StretchBlt
CreateDIBSection
BitBlt
CreateCompatibleDC
DeleteDC
DeleteObject

msimg32

TransparentBlt
GradientFill
AlphaBlend

advapi32

RegQueryValueExW
RegOpenKeyExW

shell32

ShellExecuteW
CommandLineToArgvW

comctl32

_TrackMouseEvent
InitCommonControlsEx

shlwapi

PathFileExistsW

ole32

OleInitialize
CoUninitialize
CoInitialize
CoCreateInstance

oleaut32

SysAllocStringLen
VariantClear
SysAllocString
VariantInit
SysFreeString

msvcp90

??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBD@Z
?npos@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@2IB
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
?swap@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEXAAV12@@Z
?find_last_not_of@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBEIPB_WI@Z
?find_first_not_of@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBEIPB_WI@Z
?clear@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEXXZ
?erase@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV12@II@Z
??4?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV01@PB_W@Z
??4?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV01@ABV01@@Z
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@ABV01@@Z
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@XZ
??1?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@XZ

ws2_32

WSASetLastError
GetAddrInfoW
WSAStartup
WSACleanup
closesocket
WSACloseEvent
WSASocketW
WSAGetLastError
WSAConnect
WSAEnumNetworkEvents
WSAResetEvent
WSASend
WSAGetOverlappedResult
WSARecv
WSACreateEvent
WSASetEvent
WSAEventSelect
FreeAddrInfoW

boottime

ord2
GetSetupTime
ord1

gdiplus

GdipDisposeImage
GdipFree
GdiplusShutdown
GdipGetImageGraphicsContext
GdipDeleteGraphics
GdipDrawImageI
GdipCloneImage
GdipGetImageWidth
GdipGetImageHeight
GdipGetImagePixelFormat
GdipGetImagePaletteSize
GdipGetImagePalette
GdipCreateBitmapFromFile
GdipCreateBitmapFromScan0
GdipBitmapLockBits
GdipBitmapUnlockBits
GdiplusStartup
GdipAlloc

languages

ord5
ord3
ord6
ord8
ord4

config

ord13
ord11

Sections

.text
Size: 122KB - Virtual size: 121KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 38KB - Virtual size: 38KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 161KB - Virtual size: 161KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 17KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Backup/Qest/VisualStudio.VsWebProtocol
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Code Sign

33:00:00:03:4e:b5:3c:7a:c1:84:6f:eb:2b:00:00:00:00:03:4e
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

16-03-2023 18:43

Not After

14-03-2024 18:43

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08-07-2011 20:59

Not After

08-07-2026 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

5f:af:0c:58:d2:42:9a:e0:4a:81:ab:97:5c:6c:f6:e8:7d:30:0a:ad:18:b9:59:1c:3f:a4:76:78:f5:ef:fd:00
Signer

Actual PE Digest

5f:af:0c:58:d2:42:9a:e0:4a:81:ab:97:5c:6c:f6:e8:7d:30:0a:ad:18:b9:59:1c:3f:a4:76:78:f5:ef:fd:00

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

D:\dbs\el\ddvsm\out\Intermediate\appid\microsoft.visualstudio.vswebprotocolselector_x86Retail_E59B6BE4\Release\net472\Microsoft.VisualStudio.VsWebProtocolSelector.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 471KB - Virtual size: 470KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 179KB - Virtual size: 178KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Backup/Qest/ZBRpre-intsalled.phpt
.js
Backup/Qest/gmssl.phpt
Backup/Qest/lang-1058.dll
.dll windows:6 windows x86 arch:x86

Code Sign

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

29-04-2021 00:00

Not After

28-04-2036 23:59

Subject

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

05:75:e1:f7:ec:9b:d8:a6:7a:3f:61:89:c6:3e:97:bb
Certificate

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Not Before

16-09-2022 00:00

Not After

17-09-2025 23:59

Subject

CN=PIRIFORM SOFTWARE LIMITED,O=PIRIFORM SOFTWARE LIMITED,L=London,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16
Certificate

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Not Before

14-07-2023 00:00

Not After

13-10-2034 23:59

Subject

CN=DigiCert Timestamp 2023,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

23-03-2022 00:00

Not After

22-03-2037 23:59

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01-08-2022 00:00

Not After

09-11-2031 23:59

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

79:ad:e0:64:e4:e6:2d:91:c0:f1:bf:7f:f7:1a:3d:a5:01:8f:45:2b:7e:ff:ba:4b:f0:59:d2:18:e7:a8:32:e4
Signer

Actual PE Digest

79:ad:e0:64:e4:e6:2d:91:c0:f1:bf:7f:f7:1a:3d:a5:01:8f:45:2b:7e:ff:ba:4b:f0:59:d2:18:e7:a8:32:e4

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.rdata
Size: 512B - Virtual size: 160B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 251KB - Virtual size: 250KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Backup/Qest/wall.wsdl
.xml
Backup/Qest/xz.jpg
.jpg
Backup/Qest/𝑆𝑡𝑒𝑝-𝑏𝑦-𝑆𝑡𝑒𝑝 𝐺𝑢𝑖𝑑𝑒.txt
Backup/StartupHelper
.exe windows:5 windows x86 arch:x86

d21794f0d47bb5c7f5977a6500854d85

Code Sign

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

29-04-2021 00:00

Not After

28-04-2036 23:59

Subject

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

04:28:14:36:98:54:a8:5f:9b:8f:90:12:67:c0:3c:f2
Certificate

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Not Before

17-08-2022 00:00

Not After

29-07-2025 23:59

Subject

SERIALNUMBER=91110108680456115E,CN=Glarysoft Ltd,O=Glarysoft Ltd,ST=Beijing,C=CN,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.1=#13104861696469616e204469737472696374,1.3.6.1.4.1.311.60.2.1.2=#13074265696a696e67,1.3.6.1.4.1.311.60.2.1.3=#1302434e

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16
Certificate

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Not Before

14-07-2023 00:00

Not After

13-10-2034 23:59

Subject

CN=DigiCert Timestamp 2023,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

23-03-2022 00:00

Not After

22-03-2037 23:59

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01-08-2022 00:00

Not After

09-11-2031 23:59

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

29-04-2021 00:00

Not After

28-04-2036 23:59

Subject

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

04:28:14:36:98:54:a8:5f:9b:8f:90:12:67:c0:3c:f2
Certificate

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Not Before

17-08-2022 00:00

Not After

29-07-2025 23:59

Subject

SERIALNUMBER=91110108680456115E,CN=Glarysoft Ltd,O=Glarysoft Ltd,ST=Beijing,C=CN,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.1=#13104861696469616e204469737472696374,1.3.6.1.4.1.311.60.2.1.2=#13074265696a696e67,1.3.6.1.4.1.311.60.2.1.3=#1302434e

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16
Certificate

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Not Before

14-07-2023 00:00

Not After

13-10-2034 23:59

Subject

CN=DigiCert Timestamp 2023,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

23-03-2022 00:00

Not After

22-03-2037 23:59

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01-08-2022 00:00

Not After

09-11-2031 23:59

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

cc:08:bb:49:63:6e:cf:3f:72:bf:92:cf:45:8b:91:0e:90:0f:7d:11:28:70:03:90:0a:af:8b:19:89:f5:2f:7b
Signer

Actual PE Digest

cc:08:bb:49:63:6e:cf:3f:72:bf:92:cf:45:8b:91:0e:90:0f:7d:11:28:70:03:90:0a:af:8b:19:89:f5:2f:7b

Digest Algorithm

sha256

PE Digest Matches

true

b2:c8:9c:70:dd:00:70:00:00:18:3b:25:00:02:8e:c2:fc:f9:28:b7
Signer

Actual PE Digest

b2:c8:9c:70:dd:00:70:00:00:18:3b:25:00:02:8e:c2:fc:f9:28:b7

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

D:\winapps\mh\trunk\exe\vc\StartupHelper\sourcecode\Release\StartupHelper.pdb

Imports

mfc90u

ord404
ord2597
ord2141
ord4131
ord6635
ord4044
ord611
ord595
ord3489
ord5664
ord4652
ord1493
ord6411
ord3355
ord1665
ord5939
ord4405
ord1607
ord3220
ord5632
ord5167
ord5324
ord1810
ord1809
ord1675
ord3353
ord6408
ord1754
ord1751
ord4345
ord1492
ord4664
ord5602
ord2074
ord5512
ord6800
ord4603
ord3743
ord5154
ord4702
ord1728
ord6466
ord5685
ord5683
ord960
ord965
ord969
ord967
ord971
ord2615
ord2635
ord2619
ord2625
ord2623
ord2621
ord2638
ord2633
ord2617
ord2640
ord2628
ord2610
ord2612
ord2630
ord2375
ord2368
ord1641
ord6802
ord4174
ord6804
ord3682
ord5404
ord6376
ord3226
ord1442
ord5625
ord2139
ord1792
ord1791
ord1727
ord5650
ord3140
ord4910
ord4682
ord3515
ord2593
ord5653
ord6091
ord4774
ord4815
ord5078
ord613
ord337
ord4631
ord2901
ord4741
ord1533
ord3537
ord6095
ord3622
ord6187
ord6094
ord333
ord3488
ord1354
ord1353
ord2097
ord3543
ord1183
ord3486
ord4527
ord6579
ord4543
ord6577
ord2592
ord744
ord524
ord2069
ord1063
ord663
ord2146
ord1166
ord1064
ord6604
ord4530
ord2904
ord1047
ord2596
ord5008
ord1108
ord367
ord586
ord4000
ord374
ord2130
ord3577
ord2282
ord4512
ord4442
ord4448
ord4423
ord6801
ord4173
ord6803
ord4747
ord2251
ord2206
ord6035
ord4179
ord1048
ord5548
ord6741
ord5830
ord4213
ord2087
ord3217
ord5674
ord5676
ord4347
ord4996
ord5680
ord5663
ord6018
ord2771
ord2983
ord3112
ord799
ord265
ord266
ord1272
ord1137
ord1254
ord686
ord436
ord792
ord587
ord4728
ord2966
ord3115
ord2774
ord2893
ord2764
ord4080
ord4081
ord4071
ord2891
ord4348
ord4905
ord4681
ord3670
ord2447
ord636
ord790
ord639
ord2208
ord6482
ord1098
ord4211
ord794
ord589
ord4043
ord4967
ord1318
ord2327
ord316
ord601
ord899
ord1315
ord938
ord1603
ord2478
ord5979
ord6687
ord285
ord5535
ord6079
ord6813
ord1552
ord2551
ord946
ord821
ord2470
ord6096
ord4541
ord4410
ord290
ord1088
ord6659
ord2243
ord6204
ord339
ord289
ord288
ord6164
ord1599
ord809
ord6013
ord935
ord936
ord2702
ord286
ord5851
ord3637
ord2106
ord811
ord280
ord2326
ord2694
ord6529
ord813
ord2537
ord600
ord1143
ord296
ord1248
ord2084
ord1250
ord801

msvcr90

memcpy
memset
towupper
__CxxFrameHandler3
?_type_info_dtor_internal_method@type_info@@QAEXXZ
_crt_debugger_hook
_controlfp_s
_invoke_watson
_except_handler4_common
_decode_pointer
_onexit
_lock
__dllonexit
_unlock
?terminate@@YAXXZ
__set_app_type
_encode_pointer
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_configthreadlocale
_initterm_e
_initterm
_wcmdln
exit
_XcptFilter
_exit
_cexit
__wgetmainargs
_amsg_exit
__wargv
__argc
setlocale
_resetstkoflw
?what@exception@std@@UBEPBDXZ
_msize
_purecall
_set_errno
_get_errno
_wtoi64
realloc
_gcvt_s
_fpclass
_HUGE
iswspace
wcsrchr
wcschr
_ui64toa_s
_i64toa_s
isspace
_itoa_s
wcsncmp
wcstod
wcstol
_wcstoui64
_wcstoi64
strtol
_wtoi
wcsnlen
_wcsicmp
_scwprintf
_ultoa_s
strncmp
_strlwr_s
_recalloc
calloc
_itow_s
swprintf_s
_CxxThrowException
malloc
wcscpy_s
wcsncpy_s
_invalid_parameter_noinfo
??0exception@std@@QAE@ABV01@@Z
free
??0exception@std@@QAE@XZ
??1exception@std@@UAE@XZ
??0exception@std@@QAE@ABQBD@Z
memmove_s
memcpy_s

kernel32

GetPrivateProfileSectionW
LocalFree
GetCurrentProcessId
InterlockedCompareExchange
GetStartupInfoW
SetUnhandledExceptionFilter
QueryPerformanceCounter
GetCurrentThreadId
GetSystemTimeAsFileTime
TerminateProcess
SetLastError
LoadLibraryW
GetCurrentProcess
UnhandledExceptionFilter
IsDebuggerPresent
EnterCriticalSection
GetProcAddress
GetModuleHandleW
Sleep
GetTickCount
GetCommandLineW
InterlockedExchange
CreateMutexW
CloseHandle
HeapReAlloc
GetPrivateProfileIntW
HeapFree
GetProcessHeap
HeapAlloc
WideCharToMultiByte
lstrlenA
MultiByteToWideChar
GetLastError
GetModuleFileNameW
lstrlenW
WaitForSingleObject
HeapDestroy
HeapSize
DeleteCriticalSection
InitializeCriticalSection
LeaveCriticalSection

user32

SendMessageW
AppendMenuW
GetSystemMenu
GetWindowRect
MessageBoxW
GetWindowLongW
SetWindowLongW
UnionRect
GetMenuBarInfo
GetMenuItemID
GetMenuItemCount
GetSysColor
OffsetRect
FrameRect
DrawFrameControl
CopyRect
EnableWindow
IsWindow
InvalidateRect
KillTimer
PtInRect
ReleaseDC
FillRect
GetDC
SystemParametersInfoW
EndPaint
BeginPaint
DrawIcon
GetSystemMetrics
IsIconic
SetTimer
GetClientRect
LoadIconW

gdi32

CreatePen
CreateCompatibleBitmap
CreateSolidBrush
GetObjectW
SetDIBColorTable
GetTextExtentPoint32W
SetBkMode
CreateRoundRectRgn
GetCurrentObject
GetBkMode
CreatePatternBrush
SetBrushOrgEx
FillRgn
FrameRgn
SelectObject
CreateFontW
GetDIBColorTable
StretchBlt
CreateDIBSection
BitBlt
CreateCompatibleDC
DeleteDC
DeleteObject

msimg32

TransparentBlt
GradientFill
AlphaBlend

advapi32

RegQueryValueExW
RegOpenKeyExW

shell32

ShellExecuteW
CommandLineToArgvW

comctl32

_TrackMouseEvent
InitCommonControlsEx

shlwapi

PathFileExistsW

ole32

OleInitialize
CoUninitialize
CoInitialize
CoCreateInstance

oleaut32

SysAllocStringLen
VariantClear
SysAllocString
VariantInit
SysFreeString

msvcp90

??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBD@Z
?npos@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@2IB
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
?swap@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEXAAV12@@Z
?find_last_not_of@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBEIPB_WI@Z
?find_first_not_of@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBEIPB_WI@Z
?clear@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEXXZ
?erase@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV12@II@Z
??4?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV01@PB_W@Z
??4?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV01@ABV01@@Z
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@ABV01@@Z
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@XZ
??1?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@XZ

ws2_32

WSASetLastError
GetAddrInfoW
WSAStartup
WSACleanup
closesocket
WSACloseEvent
WSASocketW
WSAGetLastError
WSAConnect
WSAEnumNetworkEvents
WSAResetEvent
WSASend
WSAGetOverlappedResult
WSARecv
WSACreateEvent
WSASetEvent
WSAEventSelect
FreeAddrInfoW

boottime

ord2
GetSetupTime
ord1

gdiplus

GdipDisposeImage
GdipFree
GdiplusShutdown
GdipGetImageGraphicsContext
GdipDeleteGraphics
GdipDrawImageI
GdipCloneImage
GdipGetImageWidth
GdipGetImageHeight
GdipGetImagePixelFormat
GdipGetImagePaletteSize
GdipGetImagePalette
GdipCreateBitmapFromFile
GdipCreateBitmapFromScan0
GdipBitmapLockBits
GdipBitmapUnlockBits
GdiplusStartup
GdipAlloc

languages

ord5
ord3
ord6
ord8
ord4

config

ord13
ord11

Sections

.text
Size: 122KB - Virtual size: 121KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 38KB - Virtual size: 38KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 161KB - Virtual size: 161KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 17KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Backup/UIRenderer.dll
.dll windows:4 windows x86 arch:x86

d6c38e965367a686e74b0b12a0cf6e1e

Code Sign

01:00:21
Certificate

Issuer

CN=Certum CA,O=Unizeto Sp. z o.o.,C=PL

Not Before

12-07-2002 16:31

Not After

12-07-2012 16:31

Subject

CN=Certum Level I,O=Unizeto Sp. z o.o.,C=PL

02:2f:0d
Certificate

Issuer

CN=Certum CA,O=Unizeto Sp. z o.o.,C=PL

Not Before

28-08-2002 17:05

Not After

28-08-2012 17:05

Subject

CN=Certum Time-Stamping Authority,O=Unizeto Sp. z o.o.,C=PL

Extended Key Usages

ExtKeyUsageTimeStamping

03:47:36
Certificate

Issuer

CN=Certum Level I,O=Unizeto Sp. z o.o.,C=PL

Not Before

13-07-2006 21:54

Not After

11-10-2006 21:54

Subject

CN=Wei Dai,O=Free Object Signing,C=US,1.2.840.113549.1.9.1=#0c1163657274756d407765696461692e636f6d

Extended Key Usages

ExtKeyUsageCodeSigning

ae:19:cb:fe:f7:ce:fd:00:e5:51:28:96:af:9f:0a:6e:9c:88:a1:e8
Signer

Actual PE Digest

ae:19:cb:fe:f7:ce:fd:00:e5:51:28:96:af:9f:0a:6e:9c:88:a1:e8

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

c:\cvs\c5\Win32\dll_output\release\cryptopp.pdb

Imports

kernel32

GetModuleFileNameW
GetModuleHandleW
GetModuleFileNameA
IsDebuggerPresent
OutputDebugStringA
TlsAlloc
TlsFree
TlsSetValue
TlsGetValue
GetModuleHandleA
GetProcAddress
GetLastError
VirtualQuery
InterlockedIncrement
InterlockedDecrement
Sleep
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
HeapFree
HeapAlloc
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCommandLineA
GetVersionExA
GetProcessHeap
RaiseException
RtlUnwind
WideCharToMultiByte
ExitProcess
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetCPInfo
WriteFile
GetStdHandle
SetLastError
GetACP
GetOEMCP
HeapSize
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
HeapReAlloc
SetHandleCount
GetFileType
GetStartupInfoA
GetConsoleCP
GetConsoleMode
SetFilePointer
FlushFileBuffers
CloseHandle
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
LoadLibraryA
GetUserDefaultLCID
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale
IsValidCodePage
GetStringTypeA
GetStringTypeW
GetLocaleInfoW
ReadFile
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
SetStdHandle
CreateFileA
CreateFileW
SetEndOfFile

advapi32

CryptReleaseContext
CryptAcquireContextA
CryptGenRandom

Exports

Exports

??0?$AbstractEuclideanDomain@VInteger@CryptoPP@@@CryptoPP@@QAE@ABV01@@Z
??0?$AbstractEuclideanDomain@VInteger@CryptoPP@@@CryptoPP@@QAE@XZ
??0?$AbstractEuclideanDomain@VPolynomialMod2@CryptoPP@@@CryptoPP@@QAE@ABV01@@Z
??0?$AbstractEuclideanDomain@VPolynomialMod2@CryptoPP@@@CryptoPP@@QAE@XZ
??0?$AbstractGroup@UEC2NPoint@CryptoPP@@@CryptoPP@@QAE@ABV01@@Z
??0?$AbstractGroup@UEC2NPoint@CryptoPP@@@CryptoPP@@QAE@XZ
??0?$AbstractGroup@UECPPoint@CryptoPP@@@CryptoPP@@QAE@ABV01@@Z
??0?$AbstractGroup@UECPPoint@CryptoPP@@@CryptoPP@@QAE@XZ
??0?$AbstractGroup@VInteger@CryptoPP@@@CryptoPP@@QAE@ABV01@@Z
??0?$AbstractGroup@VInteger@CryptoPP@@@CryptoPP@@QAE@XZ
??0?$AbstractGroup@VPolynomialMod2@CryptoPP@@@CryptoPP@@QAE@ABV01@@Z
??0?$AbstractGroup@VPolynomialMod2@CryptoPP@@@CryptoPP@@QAE@XZ
??0?$AbstractPolicyHolder@UAdditiveCipherAbstractPolicy@CryptoPP@@V?$TwoBases@V?$SimpleKeyedTransformation@VStreamTransformation@CryptoPP@@@CryptoPP@@VRandomNumberGenerator@2@@2@@CryptoPP@@QAE@ABV01@@Z
??0?$AbstractPolicyHolder@UAdditiveCipherAbstractPolicy@CryptoPP@@V?$TwoBases@V?$SimpleKeyedTransformation@VStreamTransformation@CryptoPP@@@CryptoPP@@VRandomNumberGenerator@2@@2@@CryptoPP@@QAE@XZ
??0?$AbstractPolicyHolder@UAdditiveCipherAbstractPolicy@CryptoPP@@VCTR_ModePolicy@2@@CryptoPP@@QAE@ABV01@@Z
??0?$AbstractPolicyHolder@UAdditiveCipherAbstractPolicy@CryptoPP@@VCTR_ModePolicy@2@@CryptoPP@@QAE@XZ
??0?$AbstractPolicyHolder@UAdditiveCipherAbstractPolicy@CryptoPP@@VOFB_ModePolicy@2@@CryptoPP@@QAE@ABV01@@Z
??0?$AbstractPolicyHolder@UAdditiveCipherAbstractPolicy@CryptoPP@@VOFB_ModePolicy@2@@CryptoPP@@QAE@XZ
??0?$AbstractPolicyHolder@VCFB_CipherAbstractPolicy@CryptoPP@@V?$SimpleKeyedTransformation@VStreamTransformation@CryptoPP@@@2@@CryptoPP@@QAE@ABV01@@Z
??0?$AbstractPolicyHolder@VCFB_CipherAbstractPolicy@CryptoPP@@V?$SimpleKeyedTransformation@VStreamTransformation@CryptoPP@@@2@@CryptoPP@@QAE@XZ
??0?$AbstractPolicyHolder@VCFB_CipherAbstractPolicy@CryptoPP@@VCFB_ModePolicy@2@@CryptoPP@@QAE@ABV01@@Z
??0?$AbstractPolicyHolder@VCFB_CipherAbstractPolicy@CryptoPP@@VCFB_ModePolicy@2@@CryptoPP@@QAE@XZ
??0?$AbstractRing@VInteger@CryptoPP@@@CryptoPP@@QAE@ABV01@@Z
??0?$AbstractRing@VInteger@CryptoPP@@@CryptoPP@@QAE@XZ
??0?$AbstractRing@VPolynomialMod2@CryptoPP@@@CryptoPP@@QAE@ABV01@@Z
??0?$AbstractRing@VPolynomialMod2@CryptoPP@@@CryptoPP@@QAE@XZ
??0?$AdditiveCipherTemplate@V?$AbstractPolicyHolder@UAdditiveCipherAbstractPolicy@CryptoPP@@V?$TwoBases@V?$SimpleKeyedTransformation@VStreamTransformation@CryptoPP@@@CryptoPP@@VRandomNumberGenerator@2@@2@@CryptoPP@@@CryptoPP@@QAE@ABV01@@Z
??0?$AdditiveCipherTemplate@V?$AbstractPolicyHolder@UAdditiveCipherAbstractPolicy@CryptoPP@@V?$TwoBases@V?$SimpleKeyedTransformation@VStreamTransformation@CryptoPP@@@CryptoPP@@VRandomNumberGenerator@2@@2@@CryptoPP@@@CryptoPP@@QAE@XZ
??0?$AdditiveCipherTemplate@V?$AbstractPolicyHolder@UAdditiveCipherAbstractPolicy@CryptoPP@@VCTR_ModePolicy@2@@CryptoPP@@@CryptoPP@@QAE@ABV01@@Z
??0?$AdditiveCipherTemplate@V?$AbstractPolicyHolder@UAdditiveCipherAbstractPolicy@CryptoPP@@VCTR_ModePolicy@2@@CryptoPP@@@CryptoPP@@QAE@XZ
??0?$AdditiveCipherTemplate@V?$AbstractPolicyHolder@UAdditiveCipherAbstractPolicy@CryptoPP@@VOFB_ModePolicy@2@@CryptoPP@@@CryptoPP@@QAE@ABV01@@Z
??0?$AdditiveCipherTemplate@V?$AbstractPolicyHolder@UAdditiveCipherAbstractPolicy@CryptoPP@@VOFB_ModePolicy@2@@CryptoPP@@@CryptoPP@@QAE@XZ
??0?$AlgorithmImpl@V?$IteratedHash@IU?$EnumToType@W4ByteOrder@CryptoPP@@$00@CryptoPP@@$0EA@VHashTransformation@2@@CryptoPP@@VSHA1@2@@CryptoPP@@QAE@ABV01@@Z
??0?$AlgorithmImpl@V?$IteratedHash@IU?$EnumToType@W4ByteOrder@CryptoPP@@$00@CryptoPP@@$0EA@VHashTransformation@2@@CryptoPP@@VSHA1@2@@CryptoPP@@QAE@XZ
??0?$AlgorithmImpl@V?$IteratedHash@IU?$EnumToType@W4ByteOrder@CryptoPP@@$00@CryptoPP@@$0EA@VHashTransformation@2@@CryptoPP@@VSHA224@2@@CryptoPP@@QAE@ABV01@@Z
??0?$AlgorithmImpl@V?$IteratedHash@IU?$EnumToType@W4ByteOrder@CryptoPP@@$00@CryptoPP@@$0EA@VHashTransformation@2@@CryptoPP@@VSHA224@2@@CryptoPP@@QAE@XZ
??0?$AlgorithmImpl@V?$IteratedHash@IU?$EnumToType@W4ByteOrder@CryptoPP@@$00@CryptoPP@@$0EA@VHashTransformation@2@@CryptoPP@@VSHA256@2@@CryptoPP@@QAE@ABV01@@Z
??0?$AlgorithmImpl@V?$IteratedHash@IU?$EnumToType@W4ByteOrder@CryptoPP@@$00@CryptoPP@@$0EA@VHashTransformation@2@@CryptoPP@@VSHA256@2@@CryptoPP@@QAE@XZ
??0?$AlgorithmImpl@V?$IteratedHash@_KU?$EnumToType@W4ByteOrder@CryptoPP@@$00@CryptoPP@@$0IA@VHashTransformation@2@@CryptoPP@@VSHA384@2@@CryptoPP@@QAE@ABV01@@Z
??0?$AlgorithmImpl@V?$IteratedHash@_KU?$EnumToType@W4ByteOrder@CryptoPP@@$00@CryptoPP@@$0IA@VHashTransformation@2@@CryptoPP@@VSHA384@2@@CryptoPP@@QAE@XZ
??0?$AlgorithmImpl@V?$IteratedHash@_KU?$EnumToType@W4ByteOrder@CryptoPP@@$00@CryptoPP@@$0IA@VHashTransformation@2@@CryptoPP@@VSHA512@2@@CryptoPP@@QAE@ABV01@@Z
??0?$AlgorithmImpl@V?$IteratedHash@_KU?$EnumToType@W4ByteOrder@CryptoPP@@$00@CryptoPP@@$0IA@VHashTransformation@2@@CryptoPP@@VSHA512@2@@CryptoPP@@QAE@XZ
??0?$AlgorithmImpl@V?$SimpleKeyingInterfaceImpl@V?$TwoBases@V?$SimpleKeyedTransformation@VBlockTransformation@CryptoPP@@@CryptoPP@@UDES_EDE2_Info@2@@CryptoPP@@V12@@CryptoPP@@V12@@CryptoPP@@QAE@ABV01@@Z
??0?$AlgorithmImpl@V?$SimpleKeyingInterfaceImpl@V?$TwoBases@V?$SimpleKeyedTransformation@VBlockTransformation@CryptoPP@@@CryptoPP@@UDES_EDE2_Info@2@@CryptoPP@@V12@@CryptoPP@@V12@@CryptoPP@@QAE@XZ
??0?$AlgorithmImpl@V?$SimpleKeyingInterfaceImpl@V?$TwoBases@V?$SimpleKeyedTransformation@VBlockTransformation@CryptoPP@@@CryptoPP@@UDES_EDE3_Info@2@@CryptoPP@@V12@@CryptoPP@@V12@@CryptoPP@@QAE@ABV01@@Z
??0?$AlgorithmImpl@V?$SimpleKeyingInterfaceImpl@V?$TwoBases@V?$SimpleKeyedTransformation@VBlockTransformation@CryptoPP@@@CryptoPP@@UDES_EDE3_Info@2@@CryptoPP@@V12@@CryptoPP@@V12@@CryptoPP@@QAE@XZ
??0?$AlgorithmImpl@V?$SimpleKeyingInterfaceImpl@V?$TwoBases@V?$SimpleKeyedTransformation@VBlockTransformation@CryptoPP@@@CryptoPP@@URijndael_Info@2@@CryptoPP@@V12@@CryptoPP@@V12@@CryptoPP@@QAE@ABV01@@Z
??0?$AlgorithmImpl@V?$SimpleKeyingInterfaceImpl@V?$TwoBases@V?$SimpleKeyedTransformation@VBlockTransformation@CryptoPP@@@CryptoPP@@URijndael_Info@2@@CryptoPP@@V12@@CryptoPP@@V12@@CryptoPP@@QAE@XZ
??0?$AlgorithmImpl@V?$SimpleKeyingInterfaceImpl@V?$TwoBases@V?$SimpleKeyedTransformation@VBlockTransformation@CryptoPP@@@CryptoPP@@USKIPJACK_Info@2@@CryptoPP@@V12@@CryptoPP@@V12@@CryptoPP@@QAE@ABV01@@Z
??0?$AlgorithmImpl@V?$SimpleKeyingInterfaceImpl@V?$TwoBases@V?$SimpleKeyedTransformation@VBlockTransformation@CryptoPP@@@CryptoPP@@USKIPJACK_Info@2@@CryptoPP@@V12@@CryptoPP@@V12@@CryptoPP@@QAE@XZ
??0?$AutoSeededX917RNG@VDES_EDE3@CryptoPP@@@CryptoPP@@QAE@_N@Z
??0?$AutoSignaling@V?$InputRejecting@VBufferedTransformation@CryptoPP@@@CryptoPP@@@CryptoPP@@QAE@ABV01@@Z
??0?$AutoSignaling@V?$InputRejecting@VBufferedTransformation@CryptoPP@@@CryptoPP@@@CryptoPP@@QAE@H@Z
??0?$AutoSignaling@VBufferedTransformation@CryptoPP@@@CryptoPP@@QAE@ABV01@@Z
??0?$AutoSignaling@VBufferedTransformation@CryptoPP@@@CryptoPP@@QAE@H@Z
??0?$BlockCipherImpl@UDES_EDE2_Info@CryptoPP@@V?$SimpleKeyedTransformation@VBlockTransformation@CryptoPP@@@2@@CryptoPP@@QAE@ABV01@@Z
??0?$BlockCipherImpl@UDES_EDE2_Info@CryptoPP@@V?$SimpleKeyedTransformation@VBlockTransformation@CryptoPP@@@2@@CryptoPP@@QAE@XZ
??0?$BlockCipherImpl@UDES_EDE3_Info@CryptoPP@@V?$SimpleKeyedTransformation@VBlockTransformation@CryptoPP@@@2@@CryptoPP@@QAE@ABV01@@Z
??0?$BlockCipherImpl@UDES_EDE3_Info@CryptoPP@@V?$SimpleKeyedTransformation@VBlockTransformation@CryptoPP@@@2@@CryptoPP@@QAE@XZ
??0?$BlockCipherImpl@URijndael_Info@CryptoPP@@V?$SimpleKeyedTransformation@VBlockTransformation@CryptoPP@@@2@@CryptoPP@@QAE@ABV01@@Z
??0?$BlockCipherImpl@URijndael_Info@CryptoPP@@V?$SimpleKeyedTransformation@VBlockTransformation@CryptoPP@@@2@@CryptoPP@@QAE@XZ
??0?$BlockCipherImpl@USKIPJACK_Info@CryptoPP@@V?$SimpleKeyedTransformation@VBlockTransformation@CryptoPP@@@2@@CryptoPP@@QAE@ABV01@@Z
??0?$BlockCipherImpl@USKIPJACK_Info@CryptoPP@@V?$SimpleKeyedTransformation@VBlockTransformation@CryptoPP@@@2@@CryptoPP@@QAE@XZ
??0?$Bufferless@VBufferedTransformation@CryptoPP@@@CryptoPP@@QAE@ABV01@@Z
??0?$Bufferless@VBufferedTransformation@CryptoPP@@@CryptoPP@@QAE@XZ
??0?$Bufferless@VFilter@CryptoPP@@@CryptoPP@@QAE@XZ
??0?$Bufferless@VSink@CryptoPP@@@CryptoPP@@QAE@ABV01@@Z
??0?$Bufferless@VSink@CryptoPP@@@CryptoPP@@QAE@XZ
??0?$CFB_CipherTemplate@V?$AbstractPolicyHolder@VCFB_CipherAbstractPolicy@CryptoPP@@V?$SimpleKeyedTransformation@VStreamTransformation@CryptoPP@@@2@@CryptoPP@@@CryptoPP@@QAE@ABV01@@Z
??0?$CFB_CipherTemplate@V?$AbstractPolicyHolder@VCFB_CipherAbstractPolicy@CryptoPP@@V?$SimpleKeyedTransformation@VStreamTransformation@CryptoPP@@@2@@CryptoPP@@@CryptoPP@@QAE@XZ
??0?$CFB_CipherTemplate@V?$AbstractPolicyHolder@VCFB_CipherAbstractPolicy@CryptoPP@@VCFB_ModePolicy@2@@CryptoPP@@@CryptoPP@@QAE@ABV01@@Z
??0?$CFB_CipherTemplate@V?$AbstractPolicyHolder@VCFB_CipherAbstractPolicy@CryptoPP@@VCFB_ModePolicy@2@@CryptoPP@@@CryptoPP@@QAE@XZ
??0?$CFB_DecryptionTemplate@V?$AbstractPolicyHolder@VCFB_CipherAbstractPolicy@CryptoPP@@V?$SimpleKeyedTransformation@VStreamTransformation@CryptoPP@@@2@@CryptoPP@@@CryptoPP@@QAE@ABV01@@Z
??0?$CFB_DecryptionTemplate@V?$AbstractPolicyHolder@VCFB_CipherAbstractPolicy@CryptoPP@@V?$SimpleKeyedTransformation@VStreamTransformation@CryptoPP@@@2@@CryptoPP@@@CryptoPP@@QAE@XZ
??0?$CFB_DecryptionTemplate@V?$AbstractPolicyHolder@VCFB_CipherAbstractPolicy@CryptoPP@@VCFB_ModePolicy@2@@CryptoPP@@@CryptoPP@@QAE@ABV01@@Z
??0?$CFB_DecryptionTemplate@V?$AbstractPolicyHolder@VCFB_CipherAbstractPolicy@CryptoPP@@VCFB_ModePolicy@2@@CryptoPP@@@CryptoPP@@QAE@XZ
??0?$CFB_EncryptionTemplate@V?$AbstractPolicyHolder@VCFB_CipherAbstractPolicy@CryptoPP@@V?$SimpleKeyedTransformation@VStreamTransformation@CryptoPP@@@2@@CryptoPP@@@CryptoPP@@QAE@ABV01@@Z
??0?$CFB_EncryptionTemplate@V?$AbstractPolicyHolder@VCFB_CipherAbstractPolicy@CryptoPP@@V?$SimpleKeyedTransformation@VStreamTransformation@CryptoPP@@@2@@CryptoPP@@@CryptoPP@@QAE@XZ
??0?$CFB_EncryptionTemplate@V?$AbstractPolicyHolder@VCFB_CipherAbstractPolicy@CryptoPP@@VCFB_ModePolicy@2@@CryptoPP@@@CryptoPP@@QAE@ABV01@@Z
??0?$CFB_EncryptionTemplate@V?$AbstractPolicyHolder@VCFB_CipherAbstractPolicy@CryptoPP@@VCFB_ModePolicy@2@@CryptoPP@@@CryptoPP@@QAE@XZ
??0?$CipherModeFinalTemplate_ExternalCipher@VCBC_CTS_Decryption@CryptoPP@@@CryptoPP@@QAE@AAV?$SimpleKeyedTransformation@VBlockTransformation@CryptoPP@@@1@@Z
??0?$CipherModeFinalTemplate_ExternalCipher@VCBC_CTS_Decryption@CryptoPP@@@CryptoPP@@QAE@AAV?$SimpleKeyedTransformation@VBlockTransformation@CryptoPP@@@1@PBEH@Z
??0?$CipherModeFinalTemplate_ExternalCipher@VCBC_CTS_Decryption@CryptoPP@@@CryptoPP@@QAE@ABV01@@Z
??0?$CipherModeFinalTemplate_ExternalCipher@VCBC_CTS_Decryption@CryptoPP@@@CryptoPP@@QAE@XZ
??0?$CipherModeFinalTemplate_ExternalCipher@VCBC_CTS_Encryption@CryptoPP@@@CryptoPP@@QAE@AAV?$SimpleKeyedTransformation@VBlockTransformation@CryptoPP@@@1@@Z
??0?$CipherModeFinalTemplate_ExternalCipher@VCBC_CTS_Encryption@CryptoPP@@@CryptoPP@@QAE@AAV?$SimpleKeyedTransformation@VBlockTransformation@CryptoPP@@@1@PBEH@Z
??0?$CipherModeFinalTemplate_ExternalCipher@VCBC_CTS_Encryption@CryptoPP@@@CryptoPP@@QAE@ABV01@@Z
??0?$CipherModeFinalTemplate_ExternalCipher@VCBC_CTS_Encryption@CryptoPP@@@CryptoPP@@QAE@XZ
??0?$CipherModeFinalTemplate_ExternalCipher@VCBC_Decryption@CryptoPP@@@CryptoPP@@QAE@AAV?$SimpleKeyedTransformation@VBlockTransformation@CryptoPP@@@1@@Z
??0?$CipherModeFinalTemplate_ExternalCipher@VCBC_Decryption@CryptoPP@@@CryptoPP@@QAE@AAV?$SimpleKeyedTransformation@VBlockTransformation@CryptoPP@@@1@PBEH@Z
??0?$CipherModeFinalTemplate_ExternalCipher@VCBC_Decryption@CryptoPP@@@CryptoPP@@QAE@ABV01@@Z
??0?$CipherModeFinalTemplate_ExternalCipher@VCBC_Decryption@CryptoPP@@@CryptoPP@@QAE@XZ
??0?$CipherModeFinalTemplate_ExternalCipher@VCBC_Encryption@CryptoPP@@@CryptoPP@@QAE@AAV?$SimpleKeyedTransformation@VBlockTransformation@CryptoPP@@@1@@Z
??0?$CipherModeFinalTemplate_ExternalCipher@VCBC_Encryption@CryptoPP@@@CryptoPP@@QAE@AAV?$SimpleKeyedTransformation@VBlockTransformation@CryptoPP@@@1@PBEH@Z
??0?$CipherModeFinalTemplate_ExternalCipher@VCBC_Encryption@CryptoPP@@@CryptoPP@@QAE@ABV01@@Z
??0?$CipherModeFinalTemplate_ExternalCipher@VCBC_Encryption@CryptoPP@@@CryptoPP@@QAE@XZ
??0?$CipherModeFinalTemplate_ExternalCipher@VECB_OneWay@CryptoPP@@@CryptoPP@@QAE@AAV?$SimpleKeyedTransformation@VBlockTransformation@CryptoPP@@@1@@Z
??0?$CipherModeFinalTemplate_ExternalCipher@VECB_OneWay@CryptoPP@@@CryptoPP@@QAE@AAV?$SimpleKeyedTransformation@VBlockTransformation@CryptoPP@@@1@PBEH@Z
??0?$CipherModeFinalTemplate_ExternalCipher@VECB_OneWay@CryptoPP@@@CryptoPP@@QAE@ABV01@@Z
??0?$CipherModeFinalTemplate_ExternalCipher@VECB_OneWay@CryptoPP@@@CryptoPP@@QAE@XZ
??0?$ClonableImpl@VSHA1@CryptoPP@@V?$AlgorithmImpl@V?$IteratedHash@IU?$EnumToType@W4ByteOrder@CryptoPP@@$00@CryptoPP@@$0EA@VHashTransformation@2@@CryptoPP@@VSHA1@2@@2@@CryptoPP@@QAE@ABV01@@Z
??0?$ClonableImpl@VSHA1@CryptoPP@@V?$AlgorithmImpl@V?$IteratedHash@IU?$EnumToType@W4ByteOrder@CryptoPP@@$00@CryptoPP@@$0EA@VHashTransformation@2@@CryptoPP@@VSHA1@2@@2@@CryptoPP@@QAE@XZ
??0?$ClonableImpl@VSHA224@CryptoPP@@V?$AlgorithmImpl@V?$IteratedHash@IU?$EnumToType@W4ByteOrder@CryptoPP@@$00@CryptoPP@@$0EA@VHashTransformation@2@@CryptoPP@@VSHA224@2@@2@@CryptoPP@@QAE@ABV01@@Z
??0?$ClonableImpl@VSHA224@CryptoPP@@V?$AlgorithmImpl@V?$IteratedHash@IU?$EnumToType@W4ByteOrder@CryptoPP@@$00@CryptoPP@@$0EA@VHashTransformation@2@@CryptoPP@@VSHA224@2@@2@@CryptoPP@@QAE@XZ
??0?$ClonableImpl@VSHA256@CryptoPP@@V?$AlgorithmImpl@V?$IteratedHash@IU?$EnumToType@W4ByteOrder@CryptoPP@@$00@CryptoPP@@$0EA@VHashTransformation@2@@CryptoPP@@VSHA256@2@@2@@CryptoPP@@QAE@ABV01@@Z
??0?$ClonableImpl@VSHA256@CryptoPP@@V?$AlgorithmImpl@V?$IteratedHash@IU?$EnumToType@W4ByteOrder@CryptoPP@@$00@CryptoPP@@$0EA@VHashTransformation@2@@CryptoPP@@VSHA256@2@@2@@CryptoPP@@QAE@XZ
??0?$ClonableImpl@VSHA384@CryptoPP@@V?$AlgorithmImpl@V?$IteratedHash@_KU?$EnumToType@W4ByteOrder@CryptoPP@@$00@CryptoPP@@$0IA@VHashTransformation@2@@CryptoPP@@VSHA384@2@@2@@CryptoPP@@QAE@ABV01@@Z
??0?$ClonableImpl@VSHA384@CryptoPP@@V?$AlgorithmImpl@V?$IteratedHash@_KU?$EnumToType@W4ByteOrder@CryptoPP@@$00@CryptoPP@@$0IA@VHashTransformation@2@@CryptoPP@@VSHA384@2@@2@@CryptoPP@@QAE@XZ
??0?$ClonableImpl@VSHA512@CryptoPP@@V?$AlgorithmImpl@V?$IteratedHash@_KU?$EnumToType@W4ByteOrder@CryptoPP@@$00@CryptoPP@@$0IA@VHashTransformation@2@@CryptoPP@@VSHA512@2@@2@@CryptoPP@@QAE@ABV01@@Z
??0?$ClonableImpl@VSHA512@CryptoPP@@V?$AlgorithmImpl@V?$IteratedHash@_KU?$EnumToType@W4ByteOrder@CryptoPP@@$00@CryptoPP@@$0IA@VHashTransformation@2@@CryptoPP@@VSHA512@2@@2@@CryptoPP@@QAE@XZ
??0?$CustomFlushPropagation@VFilter@CryptoPP@@@CryptoPP@@QAE@XZ
??0?$CustomFlushPropagation@VSink@CryptoPP@@@CryptoPP@@QAE@ABV01@@Z
??0?$CustomFlushPropagation@VSink@CryptoPP@@@CryptoPP@@QAE@XZ
??0?$CustomSignalPropagation@VSink@CryptoPP@@@CryptoPP@@QAE@ABV01@@Z
??0?$CustomSignalPropagation@VSink@CryptoPP@@@CryptoPP@@QAE@XZ
??0?$DH_Domain@VDL_GroupParameters_GFP_DefaultSafePrime@CryptoPP@@U?$EnumToType@W4CofactorMultiplicationOption@CryptoPP@@$0A@@2@@CryptoPP@@QAE@AAVBufferedTransformation@1@@Z
??0?$DH_Domain@VDL_GroupParameters_GFP_DefaultSafePrime@CryptoPP@@U?$EnumToType@W4CofactorMultiplicationOption@CryptoPP@@$0A@@2@@CryptoPP@@QAE@ABV01@@Z
??0?$DH_Domain@VDL_GroupParameters_GFP_DefaultSafePrime@CryptoPP@@U?$EnumToType@W4CofactorMultiplicationOption@CryptoPP@@$0A@@2@@CryptoPP@@QAE@ABVDL_GroupParameters_GFP_DefaultSafePrime@1@@Z
??0?$DH_Domain@VDL_GroupParameters_GFP_DefaultSafePrime@CryptoPP@@U?$EnumToType@W4CofactorMultiplicationOption@CryptoPP@@$0A@@2@@CryptoPP@@QAE@XZ
??0?$DL_Algorithm_GDSA@UEC2NPoint@CryptoPP@@@CryptoPP@@QAE@ABV01@@Z
??0?$DL_Algorithm_GDSA@UEC2NPoint@CryptoPP@@@CryptoPP@@QAE@XZ
??0?$DL_Algorithm_GDSA@UECPPoint@CryptoPP@@@CryptoPP@@QAE@ABV01@@Z
??0?$DL_Algorithm_GDSA@UECPPoint@CryptoPP@@@CryptoPP@@QAE@XZ
??0?$DL_Algorithm_GDSA@VInteger@CryptoPP@@@CryptoPP@@QAE@ABV01@@Z
??0?$DL_Algorithm_GDSA@VInteger@CryptoPP@@@CryptoPP@@QAE@XZ
??0?$DL_ElgamalLikeSignatureAlgorithm@UEC2NPoint@CryptoPP@@@CryptoPP@@QAE@ABV01@@Z
??0?$DL_ElgamalLikeSignatureAlgorithm@UEC2NPoint@CryptoPP@@@CryptoPP@@QAE@XZ
??0?$DL_ElgamalLikeSignatureAlgorithm@UECPPoint@CryptoPP@@@CryptoPP@@QAE@ABV01@@Z
??0?$DL_ElgamalLikeSignatureAlgorithm@UECPPoint@CryptoPP@@@CryptoPP@@QAE@XZ
??0?$DL_ElgamalLikeSignatureAlgorithm@VInteger@CryptoPP@@@CryptoPP@@QAE@ABV01@@Z
??0?$DL_ElgamalLikeSignatureAlgorithm@VInteger@CryptoPP@@@CryptoPP@@QAE@XZ
??0?$DL_FixedBasePrecomputation@UEC2NPoint@CryptoPP@@@CryptoPP@@QAE@ABV01@@Z
??0?$DL_FixedBasePrecomputation@UEC2NPoint@CryptoPP@@@CryptoPP@@QAE@XZ
??0?$DL_FixedBasePrecomputation@UECPPoint@CryptoPP@@@CryptoPP@@QAE@ABV01@@Z
??0?$DL_FixedBasePrecomputation@UECPPoint@CryptoPP@@@CryptoPP@@QAE@XZ
??0?$DL_FixedBasePrecomputation@VInteger@CryptoPP@@@CryptoPP@@QAE@ABV01@@Z
??0?$DL_FixedBasePrecomputation@VInteger@CryptoPP@@@CryptoPP@@QAE@XZ
??0?$DL_FixedBasePrecomputationImpl@UEC2NPoint@CryptoPP@@@CryptoPP@@QAE@ABV01@@Z
??0?$DL_FixedBasePrecomputationImpl@UEC2NPoint@CryptoPP@@@CryptoPP@@QAE@XZ
??0?$DL_FixedBasePrecomputationImpl@UECPPoint@CryptoPP@@@CryptoPP@@QAE@ABV01@@Z
??0?$DL_FixedBasePrecomputationImpl@UECPPoint@CryptoPP@@@CryptoPP@@QAE@XZ
??0?$DL_FixedBasePrecomputationImpl@VInteger@CryptoPP@@@CryptoPP@@QAE@ABV01@@Z
??0?$DL_FixedBasePrecomputationImpl@VInteger@CryptoPP@@@CryptoPP@@QAE@XZ
??0?$DL_GroupParameters@UEC2NPoint@CryptoPP@@@CryptoPP@@QAE@ABV01@@Z
??0?$DL_GroupParameters@UEC2NPoint@CryptoPP@@@CryptoPP@@QAE@XZ
??0?$DL_GroupParameters@UECPPoint@CryptoPP@@@CryptoPP@@QAE@ABV01@@Z
??0?$DL_GroupParameters@UECPPoint@CryptoPP@@@CryptoPP@@QAE@XZ
??0?$DL_GroupParameters@VInteger@CryptoPP@@@CryptoPP@@QAE@ABV01@@Z
??0?$DL_GroupParameters@VInteger@CryptoPP@@@CryptoPP@@QAE@XZ
??0?$DL_GroupParametersImpl@V?$EcPrecomputation@VEC2N@CryptoPP@@@CryptoPP@@V?$DL_FixedBasePrecomputationImpl@UEC2NPoint@CryptoPP@@@2@V?$DL_GroupParameters@UEC2NPoint@CryptoPP@@@2@@CryptoPP@@QAE@ABV01@@Z
??0?$DL_GroupParametersImpl@V?$EcPrecomputation@VEC2N@CryptoPP@@@CryptoPP@@V?$DL_FixedBasePrecomputationImpl@UEC2NPoint@CryptoPP@@@2@V?$DL_GroupParameters@UEC2NPoint@CryptoPP@@@2@@CryptoPP@@QAE@XZ
??0?$DL_GroupParametersImpl@V?$EcPrecomputation@VECP@CryptoPP@@@CryptoPP@@V?$DL_FixedBasePrecomputationImpl@UECPPoint@CryptoPP@@@2@V?$DL_GroupParameters@UECPPoint@CryptoPP@@@2@@CryptoPP@@QAE@ABV01@@Z
??0?$DL_GroupParametersImpl@V?$EcPrecomputation@VECP@CryptoPP@@@CryptoPP@@V?$DL_FixedBasePrecomputationImpl@UECPPoint@CryptoPP@@@2@V?$DL_GroupParameters@UECPPoint@CryptoPP@@@2@@CryptoPP@@QAE@XZ
??0?$DL_GroupParametersImpl@VModExpPrecomputation@CryptoPP@@V?$DL_FixedBasePrecomputationImpl@VInteger@CryptoPP@@@2@VDL_GroupParameters_IntegerBased@2@@CryptoPP@@QAE@ABV01@@Z
??0?$DL_GroupParametersImpl@VModExpPrecomputation@CryptoPP@@V?$DL_FixedBasePrecomputationImpl@VInteger@CryptoPP@@@2@VDL_GroupParameters_IntegerBased@2@@CryptoPP@@QAE@XZ
??0?$DL_GroupParameters_EC@VEC2N@CryptoPP@@@CryptoPP@@QAE@AAVBufferedTransformation@1@@Z
??0?$DL_GroupParameters_EC@VEC2N@CryptoPP@@@CryptoPP@@QAE@ABV01@@Z
??0?$DL_GroupParameters_EC@VEC2N@CryptoPP@@@CryptoPP@@QAE@ABVEC2N@1@ABUEC2NPoint@1@ABVInteger@1@2@Z
??0?$DL_GroupParameters_EC@VEC2N@CryptoPP@@@CryptoPP@@QAE@ABVOID@1@@Z
??0?$DL_GroupParameters_EC@VEC2N@CryptoPP@@@CryptoPP@@QAE@XZ
??0?$DL_GroupParameters_EC@VECP@CryptoPP@@@CryptoPP@@QAE@AAVBufferedTransformation@1@@Z
??0?$DL_GroupParameters_EC@VECP@CryptoPP@@@CryptoPP@@QAE@ABV01@@Z
??0?$DL_GroupParameters_EC@VECP@CryptoPP@@@CryptoPP@@QAE@ABVECP@1@ABUECPPoint@1@ABVInteger@1@2@Z
??0?$DL_GroupParameters_EC@VECP@CryptoPP@@@CryptoPP@@QAE@ABVOID@1@@Z
??0?$DL_GroupParameters_EC@VECP@CryptoPP@@@CryptoPP@@QAE@XZ
??0?$DL_GroupParameters_IntegerBasedImpl@VModExpPrecomputation@CryptoPP@@V?$DL_FixedBasePrecomputationImpl@VInteger@CryptoPP@@@2@@CryptoPP@@QAE@ABV01@@Z
??0?$DL_GroupParameters_IntegerBasedImpl@VModExpPrecomputation@CryptoPP@@V?$DL_FixedBasePrecomputationImpl@VInteger@CryptoPP@@@2@@CryptoPP@@QAE@XZ
??0?$DL_GroupPrecomputation@UEC2NPoint@CryptoPP@@@CryptoPP@@QAE@ABV01@@Z
??0?$DL_GroupPrecomputation@UEC2NPoint@CryptoPP@@@CryptoPP@@QAE@XZ
??0?$DL_GroupPrecomputation@UECPPoint@CryptoPP@@@CryptoPP@@QAE@ABV01@@Z
??0?$DL_GroupPrecomputation@UECPPoint@CryptoPP@@@CryptoPP@@QAE@XZ
??0?$DL_Key@UEC2NPoint@CryptoPP@@@CryptoPP@@QAE@ABV01@@Z
??0?$DL_Key@UEC2NPoint@CryptoPP@@@CryptoPP@@QAE@XZ
??0?$DL_Key@UECPPoint@CryptoPP@@@CryptoPP@@QAE@ABV01@@Z
??0?$DL_Key@UECPPoint@CryptoPP@@@CryptoPP@@QAE@XZ
??0?$DL_Key@VInteger@CryptoPP@@@CryptoPP@@QAE@ABV01@@Z
??0?$DL_Key@VInteger@CryptoPP@@@CryptoPP@@QAE@XZ
??0?$DL_KeyImpl@VPKCS8PrivateKey@CryptoPP@@V?$DL_GroupParameters_EC@VEC2N@CryptoPP@@@2@VOID@2@@CryptoPP@@QAE@ABV01@@Z
??0?$DL_KeyImpl@VPKCS8PrivateKey@CryptoPP@@V?$DL_GroupParameters_EC@VEC2N@CryptoPP@@@2@VOID@2@@CryptoPP@@QAE@XZ
??0?$DL_KeyImpl@VPKCS8PrivateKey@CryptoPP@@V?$DL_GroupParameters_EC@VECP@CryptoPP@@@2@VOID@2@@CryptoPP@@QAE@ABV01@@Z
??0?$DL_KeyImpl@VPKCS8PrivateKey@CryptoPP@@V?$DL_GroupParameters_EC@VECP@CryptoPP@@@2@VOID@2@@CryptoPP@@QAE@XZ
??0?$DL_KeyImpl@VPKCS8PrivateKey@CryptoPP@@VDL_GroupParameters_DSA@2@VOID@2@@CryptoPP@@QAE@ABV01@@Z
??0?$DL_KeyImpl@VPKCS8PrivateKey@CryptoPP@@VDL_GroupParameters_DSA@2@VOID@2@@CryptoPP@@QAE@XZ
??0?$DL_KeyImpl@VX509PublicKey@CryptoPP@@V?$DL_GroupParameters_EC@VEC2N@CryptoPP@@@2@VOID@2@@CryptoPP@@QAE@ABV01@@Z
??0?$DL_KeyImpl@VX509PublicKey@CryptoPP@@V?$DL_GroupParameters_EC@VEC2N@CryptoPP@@@2@VOID@2@@CryptoPP@@QAE@XZ
??0?$DL_KeyImpl@VX509PublicKey@CryptoPP@@V?$DL_GroupParameters_EC@VECP@CryptoPP@@@2@VOID@2@@CryptoPP@@QAE@ABV01@@Z
??0?$DL_KeyImpl@VX509PublicKey@CryptoPP@@V?$DL_GroupParameters_EC@VECP@CryptoPP@@@2@VOID@2@@CryptoPP@@QAE@XZ
??0?$DL_KeyImpl@VX509PublicKey@CryptoPP@@VDL_GroupParameters_DSA@2@VOID@2@@CryptoPP@@QAE@ABV01@@Z
??0?$DL_KeyImpl@VX509PublicKey@CryptoPP@@VDL_GroupParameters_DSA@2@VOID@2@@CryptoPP@@QAE@XZ
??0?$DL_PrivateKey@UEC2NPoint@CryptoPP@@@CryptoPP@@QAE@ABV01@@Z
??0?$DL_PrivateKey@UEC2NPoint@CryptoPP@@@CryptoPP@@QAE@XZ
??0?$DL_PrivateKey@UECPPoint@CryptoPP@@@CryptoPP@@QAE@ABV01@@Z
??0?$DL_PrivateKey@UECPPoint@CryptoPP@@@CryptoPP@@QAE@XZ
??0?$DL_PrivateKey@VInteger@CryptoPP@@@CryptoPP@@QAE@ABV01@@Z
??0?$DL_PrivateKey@VInteger@CryptoPP@@@CryptoPP@@QAE@XZ
??0?$DL_PrivateKeyImpl@V?$DL_GroupParameters_EC@VEC2N@CryptoPP@@@CryptoPP@@@CryptoPP@@QAE@ABV01@@Z
??0?$DL_PrivateKeyImpl@V?$DL_GroupParameters_EC@VEC2N@CryptoPP@@@CryptoPP@@@CryptoPP@@QAE@XZ
??0?$DL_PrivateKeyImpl@V?$DL_GroupParameters_EC@VECP@CryptoPP@@@CryptoPP@@@CryptoPP@@QAE@ABV01@@Z
??0?$DL_PrivateKeyImpl@V?$DL_GroupParameters_EC@VECP@CryptoPP@@@CryptoPP@@@CryptoPP@@QAE@XZ
??0?$DL_PrivateKeyImpl@VDL_GroupParameters_DSA@CryptoPP@@@CryptoPP@@QAE@ABV01@@Z
??0?$DL_PrivateKeyImpl@VDL_GroupParameters_DSA@CryptoPP@@@CryptoPP@@QAE@XZ
??0?$DL_PrivateKey_EC@VEC2N@CryptoPP@@@CryptoPP@@QAE@ABV01@@Z
??0?$DL_PrivateKey_EC@VEC2N@CryptoPP@@@CryptoPP@@QAE@XZ
??0?$DL_PrivateKey_EC@VECP@CryptoPP@@@CryptoPP@@QAE@ABV01@@Z
??0?$DL_PrivateKey_EC@VECP@CryptoPP@@@CryptoPP@@QAE@XZ
??0?$DL_PrivateKey_GFP@VDL_GroupParameters_DSA@CryptoPP@@@CryptoPP@@QAE@ABV01@@Z
??0?$DL_PrivateKey_GFP@VDL_GroupParameters_DSA@CryptoPP@@@CryptoPP@@QAE@XZ
??0?$DL_PrivateKey_WithSignaturePairwiseConsistencyTest@V?$DL_PrivateKey_EC@VEC2N@CryptoPP@@@CryptoPP@@U?$ECDSA@VEC2N@CryptoPP@@VSHA1@2@@2@@CryptoPP@@QAE@ABV01@@Z
??0?$DL_PrivateKey_WithSignaturePairwiseConsistencyTest@V?$DL_PrivateKey_EC@VEC2N@CryptoPP@@@CryptoPP@@U?$ECDSA@VEC2N@CryptoPP@@VSHA1@2@@2@@CryptoPP@@QAE@XZ
??0?$DL_PrivateKey_WithSignaturePairwiseConsistencyTest@V?$DL_PrivateKey_EC@VECP@CryptoPP@@@CryptoPP@@U?$ECDSA@VECP@CryptoPP@@VSHA1@2@@2@@CryptoPP@@QAE@ABV01@@Z
??0?$DL_PrivateKey_WithSignaturePairwiseConsistencyTest@V?$DL_PrivateKey_EC@VECP@CryptoPP@@@CryptoPP@@U?$ECDSA@VECP@CryptoPP@@VSHA1@2@@2@@CryptoPP@@QAE@XZ
??0?$DL_PrivateKey_WithSignaturePairwiseConsistencyTest@V?$DL_PrivateKey_GFP@VDL_GroupParameters_DSA@CryptoPP@@@CryptoPP@@UDSA@2@@CryptoPP@@QAE@ABV01@@Z
??0?$DL_PrivateKey_WithSignaturePairwiseConsistencyTest@V?$DL_PrivateKey_GFP@VDL_GroupParameters_DSA@CryptoPP@@@CryptoPP@@UDSA@2@@CryptoPP@@QAE@XZ
??0?$DL_PublicKey@UEC2NPoint@CryptoPP@@@CryptoPP@@QAE@ABV01@@Z
??0?$DL_PublicKey@UEC2NPoint@CryptoPP@@@CryptoPP@@QAE@XZ
??0?$DL_PublicKey@UECPPoint@CryptoPP@@@CryptoPP@@QAE@ABV01@@Z
??0?$DL_PublicKey@UECPPoint@CryptoPP@@@CryptoPP@@QAE@XZ
??0?$DL_PublicKey@VInteger@CryptoPP@@@CryptoPP@@QAE@ABV01@@Z
??0?$DL_PublicKey@VInteger@CryptoPP@@@CryptoPP@@QAE@XZ
??0?$DL_PublicKeyImpl@V?$DL_GroupParameters_EC@VEC2N@CryptoPP@@@CryptoPP@@@CryptoPP@@QAE@ABV01@@Z
??0?$DL_PublicKeyImpl@V?$DL_GroupParameters_EC@VEC2N@CryptoPP@@@CryptoPP@@@CryptoPP@@QAE@XZ
??0?$DL_PublicKeyImpl@V?$DL_GroupParameters_EC@VECP@CryptoPP@@@CryptoPP@@@CryptoPP@@QAE@ABV01@@Z
??0?$DL_PublicKeyImpl@V?$DL_GroupParameters_EC@VECP@CryptoPP@@@CryptoPP@@@CryptoPP@@QAE@XZ
??0?$DL_PublicKeyImpl@VDL_GroupParameters_DSA@CryptoPP@@@CryptoPP@@QAE@ABV01@@Z
??0?$DL_PublicKeyImpl@VDL_GroupParameters_DSA@CryptoPP@@@CryptoPP@@QAE@XZ
??0?$DL_PublicKey_EC@VEC2N@CryptoPP@@@CryptoPP@@QAE@ABV01@@Z
??0?$DL_PublicKey_EC@VEC2N@CryptoPP@@@CryptoPP@@QAE@XZ
??0?$DL_PublicKey_EC@VECP@CryptoPP@@@CryptoPP@@QAE@ABV01@@Z
??0?$DL_PublicKey_EC@VECP@CryptoPP@@@CryptoPP@@QAE@XZ
??0?$DL_PublicKey_GFP@VDL_GroupParameters_DSA@CryptoPP@@@CryptoPP@@QAE@ABV01@@Z
??0?$DL_PublicKey_GFP@VDL_GroupParameters_DSA@CryptoPP@@@CryptoPP@@QAE@XZ
??0?$DL_SimpleKeyAgreementDomainBase@VInteger@CryptoPP@@@CryptoPP@@QAE@ABV01@@Z
??0?$DL_SimpleKeyAgreementDomainBase@VInteger@CryptoPP@@@CryptoPP@@QAE@XZ
??0?$EMSA2HashIdLookup@VPK_DeterministicSignatureMessageEncodingMethod@CryptoPP@@@CryptoPP@@QAE@ABV01@@Z
??0?$EMSA2HashIdLookup@VPK_DeterministicSignatureMessageEncodingMethod@CryptoPP@@@CryptoPP@@QAE@XZ
??0?$EuclideanDomainOf@VPolynomialMod2@CryptoPP@@@CryptoPP@@QAE@ABV01@@Z
??0?$EuclideanDomainOf@VPolynomialMod2@CryptoPP@@@CryptoPP@@QAE@XZ
??0?$InputRejecting@VBufferedTransformation@CryptoPP@@@CryptoPP@@QAE@ABV01@@Z
??0?$InputRejecting@VBufferedTransformation@CryptoPP@@@CryptoPP@@QAE@XZ
??0?$InputRejecting@VFilter@CryptoPP@@@CryptoPP@@QAE@XZ
??0?$IteratedHash@IU?$EnumToType@W4ByteOrder@CryptoPP@@$00@CryptoPP@@$0EA@VHashTransformation@2@@CryptoPP@@IAE@XZ
??0?$IteratedHash@IU?$EnumToType@W4ByteOrder@CryptoPP@@$00@CryptoPP@@$0EA@VHashTransformation@2@@CryptoPP@@QAE@ABV01@@Z
??0?$IteratedHash@_KU?$EnumToType@W4ByteOrder@CryptoPP@@$00@CryptoPP@@$0IA@VHashTransformation@2@@CryptoPP@@IAE@XZ
??0?$IteratedHash@_KU?$EnumToType@W4ByteOrder@CryptoPP@@$00@CryptoPP@@$0IA@VHashTransformation@2@@CryptoPP@@QAE@ABV01@@Z
??0?$IteratedHashBase@IVHashTransformation@CryptoPP@@@CryptoPP@@QAE@ABV01@@Z
??0?$IteratedHashBase@IVHashTransformation@CryptoPP@@@CryptoPP@@QAE@XZ
??0?$IteratedHashBase@_KVHashTransformation@CryptoPP@@@CryptoPP@@QAE@ABV01@@Z
??0?$IteratedHashBase@_KVHashTransformation@CryptoPP@@@CryptoPP@@QAE@XZ
??0?$IteratedHashWithStaticTransform@IU?$EnumToType@W4ByteOrder@CryptoPP@@$00@CryptoPP@@$0EA@$0BE@VSHA1@2@$0BE@@CryptoPP@@IAE@XZ
??0?$IteratedHashWithStaticTransform@IU?$EnumToType@W4ByteOrder@CryptoPP@@$00@CryptoPP@@$0EA@$0BE@VSHA1@2@$0BE@@CryptoPP@@QAE@ABV01@@Z
??0?$IteratedHashWithStaticTransform@IU?$EnumToType@W4ByteOrder@CryptoPP@@$00@CryptoPP@@$0EA@$0CA@VSHA224@2@$0BM@@CryptoPP@@IAE@XZ
??0?$IteratedHashWithStaticTransform@IU?$EnumToType@W4ByteOrder@CryptoPP@@$00@CryptoPP@@$0EA@$0CA@VSHA224@2@$0BM@@CryptoPP@@QAE@ABV01@@Z
??0?$IteratedHashWithStaticTransform@IU?$EnumToType@W4ByteOrder@CryptoPP@@$00@CryptoPP@@$0EA@$0CA@VSHA256@2@$0CA@@CryptoPP@@IAE@XZ
??0?$IteratedHashWithStaticTransform@IU?$EnumToType@W4ByteOrder@CryptoPP@@$00@CryptoPP@@$0EA@$0CA@VSHA256@2@$0CA@@CryptoPP@@QAE@ABV01@@Z
??0?$IteratedHashWithStaticTransform@_KU?$EnumToType@W4ByteOrder@CryptoPP@@$00@CryptoPP@@$0IA@$0EA@VSHA384@2@$0DA@@CryptoPP@@IAE@XZ
??0?$IteratedHashWithStaticTransform@_KU?$EnumToType@W4ByteOrder@CryptoPP@@$00@CryptoPP@@$0IA@$0EA@VSHA384@2@$0DA@@CryptoPP@@QAE@ABV01@@Z
??0?$IteratedHashWithStaticTransform@_KU?$EnumToType@W4ByteOrder@CryptoPP@@$00@CryptoPP@@$0IA@$0EA@VSHA512@2@$0EA@@CryptoPP@@IAE@XZ
??0?$IteratedHashWithStaticTransform@_KU?$EnumToType@W4ByteOrder@CryptoPP@@$00@CryptoPP@@$0IA@$0EA@VSHA512@2@$0EA@@CryptoPP@@QAE@ABV01@@Z
??0?$ModePolicyCommonTemplate@UAdditiveCipherAbstractPolicy@CryptoPP@@@CryptoPP@@QAE@ABV01@@Z
??0?$ModePolicyCommonTemplate@UAdditiveCipherAbstractPolicy@CryptoPP@@@CryptoPP@@QAE@XZ
??0?$ModePolicyCommonTemplate@VCFB_CipherAbstractPolicy@CryptoPP@@@CryptoPP@@QAE@ABV01@@Z
??0?$ModePolicyCommonTemplate@VCFB_CipherAbstractPolicy@CryptoPP@@@CryptoPP@@QAE@XZ
??0?$Multichannel@VFilter@CryptoPP@@@CryptoPP@@QAE@XZ
??0?$Multichannel@VSink@CryptoPP@@@CryptoPP@@QAE@ABV01@@Z
??0?$Multichannel@VSink@CryptoPP@@@CryptoPP@@QAE@XZ
??0?$OAEP@VSHA1@CryptoPP@@VP1363_MGF1@2@@CryptoPP@@QAE@ABV01@@Z
??0?$OAEP@VSHA1@CryptoPP@@VP1363_MGF1@2@@CryptoPP@@QAE@XZ
??0?$PK_FixedLengthCryptoSystemImpl@VPK_Decryptor@CryptoPP@@@CryptoPP@@QAE@ABV01@@Z
??0?$PK_FixedLengthCryptoSystemImpl@VPK_Decryptor@CryptoPP@@@CryptoPP@@QAE@XZ
??0?$PK_FixedLengthCryptoSystemImpl@VPK_Encryptor@CryptoPP@@@CryptoPP@@QAE@ABV01@@Z
??0?$PK_FixedLengthCryptoSystemImpl@VPK_Encryptor@CryptoPP@@@CryptoPP@@QAE@XZ
??0?$QuotientRing@V?$EuclideanDomainOf@VPolynomialMod2@CryptoPP@@@CryptoPP@@@CryptoPP@@QAE@ABV01@@Z
??0?$QuotientRing@V?$EuclideanDomainOf@VPolynomialMod2@CryptoPP@@@CryptoPP@@@CryptoPP@@QAE@ABV?$EuclideanDomainOf@VPolynomialMod2@CryptoPP@@@1@ABVPolynomialMod2@1@@Z
??0?$SimpleKeyedTransformation@VBlockTransformation@CryptoPP@@@CryptoPP@@QAE@ABV01@@Z
??0?$SimpleKeyedTransformation@VBlockTransformation@CryptoPP@@@CryptoPP@@QAE@XZ
??0?$SimpleKeyedTransformation@VHashTransformation@CryptoPP@@@CryptoPP@@QAE@ABV01@@Z
??0?$SimpleKeyedTransformation@VHashTransformation@CryptoPP@@@CryptoPP@@QAE@XZ
??0?$SimpleKeyedTransformation@VStreamTransformation@CryptoPP@@@CryptoPP@@QAE@ABV01@@Z
??0?$SimpleKeyedTransformation@VStreamTransformation@CryptoPP@@@CryptoPP@@QAE@XZ
??0?$SimpleKeyingInterfaceImpl@V?$TwoBases@V?$SimpleKeyedTransformation@VBlockTransformation@CryptoPP@@@CryptoPP@@UDES_EDE2_Info@2@@CryptoPP@@V12@@CryptoPP@@QAE@ABV01@@Z
??0?$SimpleKeyingInterfaceImpl@V?$TwoBases@V?$SimpleKeyedTransformation@VBlockTransformation@CryptoPP@@@CryptoPP@@UDES_EDE2_Info@2@@CryptoPP@@V12@@CryptoPP@@QAE@XZ
??0?$SimpleKeyingInterfaceImpl@V?$TwoBases@V?$SimpleKeyedTransformation@VBlockTransformation@CryptoPP@@@CryptoPP@@UDES_EDE3_Info@2@@CryptoPP@@V12@@CryptoPP@@QAE@ABV01@@Z
??0?$SimpleKeyingInterfaceImpl@V?$TwoBases@V?$SimpleKeyedTransformation@VBlockTransformation@CryptoPP@@@CryptoPP@@UDES_EDE3_Info@2@@CryptoPP@@V12@@CryptoPP@@QAE@XZ
??0?$SimpleKeyingInterfaceImpl@V?$TwoBases@V?$SimpleKeyedTransformation@VBlockTransformation@CryptoPP@@@CryptoPP@@URijndael_Info@2@@CryptoPP@@V12@@CryptoPP@@QAE@ABV01@@Z
??0?$SimpleKeyingInterfaceImpl@V?$TwoBases@V?$SimpleKeyedTransformation@VBlockTransformation@CryptoPP@@@CryptoPP@@URijndael_Info@2@@CryptoPP@@V12@@CryptoPP@@QAE@XZ
??0?$SimpleKeyingInterfaceImpl@V?$TwoBases@V?$SimpleKeyedTransformation@VBlockTransformation@CryptoPP@@@CryptoPP@@USKIPJACK_Info@2@@CryptoPP@@V12@@CryptoPP@@QAE@ABV01@@Z
??0?$SimpleKeyingInterfaceImpl@V?$TwoBases@V?$SimpleKeyedTransformation@VBlockTransformation@CryptoPP@@@CryptoPP@@USKIPJACK_Info@2@@CryptoPP@@V12@@CryptoPP@@QAE@XZ
??0?$SourceTemplate@VFileStore@CryptoPP@@@CryptoPP@@QAE@PAVBufferedTransformation@1@@Z
??0?$SourceTemplate@VRandomNumberStore@CryptoPP@@@CryptoPP@@QAE@PAVBufferedTransformation@1@@Z
??0?$SourceTemplate@VStringStore@CryptoPP@@@CryptoPP@@QAE@PAVBufferedTransformation@1@@Z
??0?$StringSinkTemplate@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@CryptoPP@@QAE@AAV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
??0?$StringSinkTemplate@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@CryptoPP@@QAE@ABV01@@Z
??0?$TF_Base@VRandomizedTrapdoorFunction@CryptoPP@@VPK_EncryptionMessageEncodingMethod@2@@CryptoPP@@QAE@ABV01@@Z
??0?$TF_Base@VRandomizedTrapdoorFunction@CryptoPP@@VPK_EncryptionMessageEncodingMethod@2@@CryptoPP@@QAE@XZ
??0?$TF_Base@VRandomizedTrapdoorFunctionInverse@CryptoPP@@VPK_SignatureMessageEncodingMethod@2@@CryptoPP@@QAE@ABV01@@Z
??0?$TF_Base@VRandomizedTrapdoorFunctionInverse@CryptoPP@@VPK_SignatureMessageEncodingMethod@2@@CryptoPP@@QAE@XZ
??0?$TF_Base@VTrapdoorFunction@CryptoPP@@VPK_SignatureMessageEncodingMethod@2@@CryptoPP@@QAE@ABV01@@Z
??0?$TF_Base@VTrapdoorFunction@CryptoPP@@VPK_SignatureMessageEncodingMethod@2@@CryptoPP@@QAE@XZ
??0?$TF_Base@VTrapdoorFunctionInverse@CryptoPP@@VPK_EncryptionMessageEncodingMethod@2@@CryptoPP@@QAE@ABV01@@Z
??0?$TF_Base@VTrapdoorFunctionInverse@CryptoPP@@VPK_EncryptionMessageEncodingMethod@2@@CryptoPP@@QAE@XZ
??0?$TF_CryptoSystemBase@VPK_Decryptor@CryptoPP@@V?$TF_Base@VTrapdoorFunctionInverse@CryptoPP@@VPK_EncryptionMessageEncodingMethod@2@@2@@CryptoPP@@QAE@ABV01@@Z
??0?$TF_CryptoSystemBase@VPK_Decryptor@CryptoPP@@V?$TF_Base@VTrapdoorFunctionInverse@CryptoPP@@VPK_EncryptionMessageEncodingMethod@2@@2@@CryptoPP@@QAE@XZ
??0?$TF_CryptoSystemBase@VPK_Encryptor@CryptoPP@@V?$TF_Base@VRandomizedTrapdoorFunction@CryptoPP@@VPK_EncryptionMessageEncodingMethod@2@@2@@CryptoPP@@QAE@ABV01@@Z
??0?$TF_CryptoSystemBase@VPK_Encryptor@CryptoPP@@V?$TF_Base@VRandomizedTrapdoorFunction@CryptoPP@@VPK_EncryptionMessageEncodingMethod@2@@2@@CryptoPP@@QAE@XZ
??0?$TF_SignatureSchemeBase@VPK_Signer@CryptoPP@@V?$TF_Base@VRandomizedTrapdoorFunctionInverse@CryptoPP@@VPK_SignatureMessageEncodingMethod@2@@2@@CryptoPP@@QAE@ABV01@@Z
??0?$TF_SignatureSchemeBase@VPK_Signer@CryptoPP@@V?$TF_Base@VRandomizedTrapdoorFunctionInverse@CryptoPP@@VPK_SignatureMessageEncodingMethod@2@@2@@CryptoPP@@QAE@XZ
??0?$TF_SignatureSchemeBase@VPK_Verifier@CryptoPP@@V?$TF_Base@VTrapdoorFunction@CryptoPP@@VPK_SignatureMessageEncodingMethod@2@@2@@CryptoPP@@QAE@ABV01@@Z
??0?$TF_SignatureSchemeBase@VPK_Verifier@CryptoPP@@V?$TF_Base@VTrapdoorFunction@CryptoPP@@VPK_SignatureMessageEncodingMethod@2@@2@@CryptoPP@@QAE@XZ
??0?$TwoBases@V?$SimpleKeyedTransformation@VBlockTransformation@CryptoPP@@@CryptoPP@@UDES_EDE2_Info@2@@CryptoPP@@QAE@ABV01@@Z
??0?$TwoBases@V?$SimpleKeyedTransformation@VBlockTransformation@CryptoPP@@@CryptoPP@@UDES_EDE2_Info@2@@CryptoPP@@QAE@XZ
??0?$TwoBases@V?$SimpleKeyedTransformation@VBlockTransformation@CryptoPP@@@CryptoPP@@UDES_EDE3_Info@2@@CryptoPP@@QAE@ABV01@@Z
??0?$TwoBases@V?$SimpleKeyedTransformation@VBlockTransformation@CryptoPP@@@CryptoPP@@UDES_EDE3_Info@2@@CryptoPP@@QAE@XZ
??0?$TwoBases@V?$SimpleKeyedTransformation@VBlockTransformation@CryptoPP@@@CryptoPP@@URijndael_Info@2@@CryptoPP@@QAE@ABV01@@Z
??0?$TwoBases@V?$SimpleKeyedTransformation@VBlockTransformation@CryptoPP@@@CryptoPP@@URijndael_Info@2@@CryptoPP@@QAE@XZ
??0?$TwoBases@V?$SimpleKeyedTransformation@VBlockTransformation@CryptoPP@@@CryptoPP@@USKIPJACK_Info@2@@CryptoPP@@QAE@ABV01@@Z
??0?$TwoBases@V?$SimpleKeyedTransformation@VBlockTransformation@CryptoPP@@@CryptoPP@@USKIPJACK_Info@2@@CryptoPP@@QAE@XZ
??0?$TwoBases@V?$SimpleKeyedTransformation@VStreamTransformation@CryptoPP@@@CryptoPP@@VRandomNumberGenerator@2@@CryptoPP@@QAE@ABV01@@Z
??0?$TwoBases@V?$SimpleKeyedTransformation@VStreamTransformation@CryptoPP@@@CryptoPP@@VRandomNumberGenerator@2@@CryptoPP@@QAE@XZ
??0?$Unflushable@V?$Multichannel@VFilter@CryptoPP@@@CryptoPP@@@CryptoPP@@QAE@XZ
??0?$Unflushable@VFilter@CryptoPP@@@CryptoPP@@QAE@XZ
??0ASN1CryptoMaterial@CryptoPP@@QAE@ABV01@@Z
??0ASN1CryptoMaterial@CryptoPP@@QAE@XZ
??0ASN1Key@CryptoPP@@QAE@ABV01@@Z
??0ASN1Key@CryptoPP@@QAE@XZ
??0ASN1Object@CryptoPP@@QAE@ABV01@@Z
??0ASN1Object@CryptoPP@@QAE@XZ
??0AdditiveCipherAbstractPolicy@CryptoPP@@QAE@ABU01@@Z
??0AdditiveCipherAbstractPolicy@CryptoPP@@QAE@XZ
??0Algorithm@CryptoPP@@QAE@ABV01@@Z
??0Algorithm@CryptoPP@@QAE@_N@Z
??0AlgorithmParametersBase@CryptoPP@@QAE@ABV01@@Z
??0AlgorithmParametersBase@CryptoPP@@QAE@PBD_N@Z
??0ArraySink@CryptoPP@@QAE@ABV01@@Z
??0ArraySink@CryptoPP@@QAE@ABVNameValuePairs@1@@Z
??0ArraySink@CryptoPP@@QAE@PAEI@Z
??0ArrayXorSink@CryptoPP@@QAE@ABV01@@Z
??0ArrayXorSink@CryptoPP@@QAE@PAEI@Z
??0AsymmetricAlgorithm@CryptoPP@@QAE@ABV01@@Z
??0AsymmetricAlgorithm@CryptoPP@@QAE@XZ
??0AuthenticatedKeyAgreementDomain@CryptoPP@@QAE@ABV01@@Z
??0AuthenticatedKeyAgreementDomain@CryptoPP@@QAE@XZ
??0AutoSeededRandomPool@CryptoPP@@QAE@ABV01@@Z
??0AutoSeededRandomPool@CryptoPP@@QAE@_NI@Z
??0BERDecodeErr@CryptoPP@@QAE@ABV01@@Z
??0BERDecodeErr@CryptoPP@@QAE@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
??0BERDecodeErr@CryptoPP@@QAE@XZ
??0BERGeneralDecoder@CryptoPP@@QAE@AAV01@E@Z
??0BERGeneralDecoder@CryptoPP@@QAE@AAVBufferedTransformation@1@E@Z
??0BERGeneralDecoder@CryptoPP@@QAE@ABV01@@Z
??0BERSequenceDecoder@CryptoPP@@QAE@AAV01@E@Z
??0BERSequenceDecoder@CryptoPP@@QAE@AAVBufferedTransformation@1@E@Z
??0BERSetDecoder@CryptoPP@@QAE@AAV01@E@Z
??0BERSetDecoder@CryptoPP@@QAE@AAVBufferedTransformation@1@E@Z
??0Base@DES_EDE2@CryptoPP@@QAE@ABV012@@Z
??0Base@DES_EDE2@CryptoPP@@QAE@XZ
??0Base@DES_EDE3@CryptoPP@@QAE@ABV012@@Z
??0Base@DES_EDE3@CryptoPP@@QAE@XZ
??0Base@Rijndael@CryptoPP@@QAE@ABV012@@Z
??0Base@Rijndael@CryptoPP@@QAE@XZ
??0Base@SKIPJACK@CryptoPP@@QAE@ABV012@@Z
??0Base@SKIPJACK@CryptoPP@@QAE@XZ
??0BaseN_Decoder@CryptoPP@@QAE@PAVBufferedTransformation@1@@Z
??0BaseN_Decoder@CryptoPP@@QAE@PBHHPAVBufferedTransformation@1@@Z
??0BaseN_Encoder@CryptoPP@@QAE@PAVBufferedTransformation@1@@Z
??0BaseN_Encoder@CryptoPP@@QAE@PBEHPAVBufferedTransformation@1@H@Z
??0BitBucket@CryptoPP@@QAE@ABV01@@Z
??0BitBucket@CryptoPP@@QAE@XZ
??0BlockOrientedCipherModeBase@CryptoPP@@QAE@ABV01@@Z
??0BlockOrientedCipherModeBase@CryptoPP@@QAE@XZ
??0BlockTransformation@CryptoPP@@QAE@ABV01@@Z
??0BlockTransformation@CryptoPP@@QAE@XZ
??0BufferedTransformation@CryptoPP@@QAE@ABV01@@Z
??0BufferedTransformation@CryptoPP@@QAE@XZ
??0ByteQueue@CryptoPP@@QAE@ABV01@@Z
??0ByteQueue@CryptoPP@@QAE@I@Z
??0CBC_CTS_Decryption@CryptoPP@@QAE@ABV01@@Z
??0CBC_CTS_Decryption@CryptoPP@@QAE@XZ
??0CBC_CTS_Encryption@CryptoPP@@QAE@ABV01@@Z
??0CBC_CTS_Encryption@CryptoPP@@QAE@XZ
??0CBC_Decryption@CryptoPP@@QAE@ABV01@@Z
??0CBC_Decryption@CryptoPP@@QAE@XZ
??0CBC_Encryption@CryptoPP@@QAE@ABV01@@Z
??0CBC_Encryption@CryptoPP@@QAE@XZ
??0CBC_MAC_Base@CryptoPP@@QAE@ABV01@@Z
??0CBC_MAC_Base@CryptoPP@@QAE@XZ
??0CBC_ModeBase@CryptoPP@@QAE@ABV01@@Z
??0CBC_ModeBase@CryptoPP@@QAE@XZ
??0CFB_CipherAbstractPolicy@CryptoPP@@QAE@ABV01@@Z
??0CFB_CipherAbstractPolicy@CryptoPP@@QAE@XZ
??0CFB_ModePolicy@CryptoPP@@QAE@ABV01@@Z
??0CFB_ModePolicy@CryptoPP@@QAE@XZ
??0CTR_ModePolicy@CryptoPP@@QAE@ABV01@@Z
??0CTR_ModePolicy@CryptoPP@@QAE@XZ
??0CannotFlush@CryptoPP@@QAE@ABV01@@Z
??0CannotFlush@CryptoPP@@QAE@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
??0ChannelSwitch@CryptoPP@@QAE@AAVBufferedTransformation@1@@Z
??0ChannelSwitch@CryptoPP@@QAE@AAVBufferedTransformation@1@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
??0ChannelSwitch@CryptoPP@@QAE@ABV01@@Z
??0ChannelSwitch@CryptoPP@@QAE@XZ
??0CipherModeBase@CryptoPP@@QAE@ABV01@@Z
??0CipherModeBase@CryptoPP@@QAE@XZ
??0Clonable@CryptoPP@@QAE@ABV01@@Z
??0Clonable@CryptoPP@@QAE@XZ
??0CombinedNameValuePairs@CryptoPP@@QAE@ABV01@@Z
??0CombinedNameValuePairs@CryptoPP@@QAE@ABVNameValuePairs@1@0@Z
??0CryptoMaterial@CryptoPP@@QAE@ABV01@@Z
??0CryptoMaterial@CryptoPP@@QAE@XZ
??0CryptoParameters@CryptoPP@@QAE@ABV01@@Z
??0CryptoParameters@CryptoPP@@QAE@XZ
??0DERGeneralEncoder@CryptoPP@@QAE@AAV01@E@Z
??0DERGeneralEncoder@CryptoPP@@QAE@AAVBufferedTransformation@1@E@Z
??0DERSequenceEncoder@CryptoPP@@QAE@AAV01@E@Z
??0DERSequenceEncoder@CryptoPP@@QAE@AAVBufferedTransformation@1@E@Z
??0DERSetEncoder@CryptoPP@@QAE@AAV01@E@Z
??0DERSetEncoder@CryptoPP@@QAE@AAVBufferedTransformation@1@E@Z
??0DL_GroupParameters_DSA@CryptoPP@@QAE@ABV01@@Z
??0DL_GroupParameters_DSA@CryptoPP@@QAE@XZ
??0DL_GroupParameters_GFP@CryptoPP@@QAE@ABV01@@Z
??0DL_GroupParameters_GFP@CryptoPP@@QAE@XZ
??0DL_GroupParameters_GFP_DefaultSafePrime@CryptoPP@@QAE@ABV01@@Z
??0DL_GroupParameters_GFP_DefaultSafePrime@CryptoPP@@QAE@XZ
??0DL_GroupParameters_IntegerBased@CryptoPP@@QAE@ABV01@@Z
??0DL_GroupParameters_IntegerBased@CryptoPP@@QAE@XZ
??0DL_SignatureMessageEncodingMethod_DSA@CryptoPP@@QAE@ABV01@@Z
??0DL_SignatureMessageEncodingMethod_DSA@CryptoPP@@QAE@XZ
??0DL_SignatureMessageEncodingMethod_NR@CryptoPP@@QAE@ABV01@@Z
??0DL_SignatureMessageEncodingMethod_NR@CryptoPP@@QAE@XZ
??0Dec@Rijndael@CryptoPP@@QAE@ABV012@@Z
??0Dec@Rijndael@CryptoPP@@QAE@XZ
??0Dec@SKIPJACK@CryptoPP@@QAE@ABV012@@Z
??0Dec@SKIPJACK@CryptoPP@@QAE@XZ
??0DecodingResult@CryptoPP@@QAE@I@Z
??0DecodingResult@CryptoPP@@QAE@XZ
??0EC2N@CryptoPP@@QAE@AAVBufferedTransformation@1@@Z
??0EC2N@CryptoPP@@QAE@ABV01@@Z
??0EC2N@CryptoPP@@QAE@ABVGF2NP@1@ABVPolynomialMod2@1@1@Z
??0EC2N@CryptoPP@@QAE@XZ
??0EC2NPoint@CryptoPP@@QAE@ABU01@@Z
??0EC2NPoint@CryptoPP@@QAE@ABVPolynomialMod2@1@0@Z
??0EC2NPoint@CryptoPP@@QAE@XZ
??0ECB_OneWay@CryptoPP@@QAE@ABV01@@Z
??0ECB_OneWay@CryptoPP@@QAE@XZ
??0ECP@CryptoPP@@QAE@AAVBufferedTransformation@1@@Z
??0ECP@CryptoPP@@QAE@ABV01@_N@Z
??0ECP@CryptoPP@@QAE@ABVInteger@1@00@Z
??0ECP@CryptoPP@@QAE@XZ
??0ECPPoint@CryptoPP@@QAE@ABU01@@Z
??0ECPPoint@CryptoPP@@QAE@ABVInteger@1@0@Z
??0ECPPoint@CryptoPP@@QAE@XZ
??0EMSA2Pad@CryptoPP@@QAE@ABV01@@Z
??0EMSA2Pad@CryptoPP@@QAE@XZ
??0Enc@Rijndael@CryptoPP@@QAE@ABV012@@Z
??0Enc@Rijndael@CryptoPP@@QAE@XZ
??0Enc@SKIPJACK@CryptoPP@@QAE@ABV012@@Z
??0Enc@SKIPJACK@CryptoPP@@QAE@XZ
??0EqualityComparisonFilter@CryptoPP@@QAE@PAVBufferedTransformation@1@_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2@Z
??0Exception@CryptoPP@@QAE@ABV01@@Z
??0Exception@CryptoPP@@QAE@W4ErrorType@01@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
??0FileSink@CryptoPP@@QAE@AAV?$basic_ostream@DU?$char_traits@D@std@@@std@@@Z
??0FileSink@CryptoPP@@QAE@PBD_N@Z
??0FileSink@CryptoPP@@QAE@XZ
??0FileSource@CryptoPP@@QAE@AAV?$basic_istream@DU?$char_traits@D@std@@@std@@_NPAVBufferedTransformation@1@@Z
??0FileSource@CryptoPP@@QAE@PAVBufferedTransformation@1@@Z
??0FileSource@CryptoPP@@QAE@PBD_NPAVBufferedTransformation@1@1@Z
??0FileStore@CryptoPP@@QAE@AAV?$basic_istream@DU?$char_traits@D@std@@@std@@@Z
??0FileStore@CryptoPP@@QAE@PBD@Z
??0FileStore@CryptoPP@@QAE@XZ
??0Filter@CryptoPP@@QAE@PAVBufferedTransformation@1@@Z
??0FilterPutSpaceHelper@CryptoPP@@QAE@ABU01@@Z
??0FilterPutSpaceHelper@CryptoPP@@QAE@XZ
??0FilterWithBufferedInput@CryptoPP@@QAE@IIIPAVBufferedTransformation@1@@Z
??0FilterWithBufferedInput@CryptoPP@@QAE@PAVBufferedTransformation@1@@Z
??0FilterWithInputQueue@CryptoPP@@QAE@PAVBufferedTransformation@1@@Z
??0GF2NP@CryptoPP@@QAE@ABV01@@Z
??0GF2NP@CryptoPP@@QAE@ABVPolynomialMod2@1@@Z
??0GF2NPP@CryptoPP@@QAE@ABV01@@Z
??0GF2NPP@CryptoPP@@QAE@IIIII@Z
??0GF2NT@CryptoPP@@QAE@ABV01@@Z
??0GF2NT@CryptoPP@@QAE@III@Z
??0GeneratableCryptoMaterial@CryptoPP@@QAE@ABV01@@Z
??0GeneratableCryptoMaterial@CryptoPP@@QAE@XZ
??0Grouper@CryptoPP@@QAE@HABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@0PAVBufferedTransformation@1@@Z
??0Grouper@CryptoPP@@QAE@PAVBufferedTransformation@1@@Z
??0HMAC_Base@CryptoPP@@QAE@ABV01@@Z
??0HMAC_Base@CryptoPP@@QAE@XZ
??0HashFilter@CryptoPP@@QAE@AAVHashTransformation@1@PAVBufferedTransformation@1@_NH@Z
??0HashInputTooLong@CryptoPP@@QAE@ABV01@@Z
??0HashInputTooLong@CryptoPP@@QAE@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
??0HashTransformation@CryptoPP@@QAE@ABV01@@Z
??0HashTransformation@CryptoPP@@QAE@XZ
??0HashVerificationFilter@CryptoPP@@QAE@AAVHashTransformation@1@PAVBufferedTransformation@1@I@Z
??0HexDecoder@CryptoPP@@QAE@PAVBufferedTransformation@1@@Z
??0HexEncoder@CryptoPP@@QAE@PAVBufferedTransformation@1@_NHABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2@Z
??0Integer@CryptoPP@@AAE@II@Z
??0Integer@CryptoPP@@QAE@AAVBufferedTransformation@1@@Z
??0Integer@CryptoPP@@QAE@AAVBufferedTransformation@1@IW4Signedness@01@@Z
??0Integer@CryptoPP@@QAE@AAVRandomNumberGenerator@1@ABV01@1W4RandomNumberType@01@11@Z
??0Integer@CryptoPP@@QAE@AAVRandomNumberGenerator@1@I@Z
??0Integer@CryptoPP@@QAE@ABV01@@Z
??0Integer@CryptoPP@@QAE@J@Z

Sections

.text
Size: 548KB - Virtual size: 546KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 556KB - Virtual size: 553KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 64KB - Virtual size: 71KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 68KB - Virtual size: 65KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Backup/VisualStudio.VsWebProtocol
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Code Sign

33:00:00:03:4e:b5:3c:7a:c1:84:6f:eb:2b:00:00:00:00:03:4e
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

16-03-2023 18:43

Not After

14-03-2024 18:43

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08-07-2011 20:59

Not After

08-07-2026 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

5f:af:0c:58:d2:42:9a:e0:4a:81:ab:97:5c:6c:f6:e8:7d:30:0a:ad:18:b9:59:1c:3f:a4:76:78:f5:ef:fd:00
Signer

Actual PE Digest

5f:af:0c:58:d2:42:9a:e0:4a:81:ab:97:5c:6c:f6:e8:7d:30:0a:ad:18:b9:59:1c:3f:a4:76:78:f5:ef:fd:00

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

D:\dbs\el\ddvsm\out\Intermediate\appid\microsoft.visualstudio.vswebprotocolselector_x86Retail_E59B6BE4\Release\net472\Microsoft.VisualStudio.VsWebProtocolSelector.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 471KB - Virtual size: 470KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 179KB - Virtual size: 178KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Backup/WaveProcessor.dll
.dll windows:4 windows x86 arch:x86

d6c38e965367a686e74b0b12a0cf6e1e

Code Sign

01:00:21
Certificate

Issuer

CN=Certum CA,O=Unizeto Sp. z o.o.,C=PL

Not Before

12-07-2002 16:31

Not After

12-07-2012 16:31

Subject

CN=Certum Level I,O=Unizeto Sp. z o.o.,C=PL

02:2f:0d
Certificate

Issuer

CN=Certum CA,O=Unizeto Sp. z o.o.,C=PL

Not Before

28-08-2002 17:05

Not After

28-08-2012 17:05

Subject

CN=Certum Time-Stamping Authority,O=Unizeto Sp. z o.o.,C=PL

Extended Key Usages

ExtKeyUsageTimeStamping

03:47:36
Certificate

Issuer

CN=Certum Level I,O=Unizeto Sp. z o.o.,C=PL

Not Before

13-07-2006 21:54

Not After

11-10-2006 21:54

Subject

CN=Wei Dai,O=Free Object Signing,C=US,1.2.840.113549.1.9.1=#0c1163657274756d407765696461692e636f6d

Extended Key Usages

ExtKeyUsageCodeSigning

ae:19:cb:fe:f7:ce:fd:00:e5:51:28:96:af:9f:0a:6e:9c:88:a1:e8
Signer

Actual PE Digest

ae:19:cb:fe:f7:ce:fd:00:e5:51:28:96:af:9f:0a:6e:9c:88:a1:e8

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

c:\cvs\c5\Win32\dll_output\release\cryptopp.pdb

Imports

kernel32

GetModuleFileNameW
GetModuleHandleW
GetModuleFileNameA
IsDebuggerPresent
OutputDebugStringA
TlsAlloc
TlsFree
TlsSetValue
TlsGetValue
GetModuleHandleA
GetProcAddress
GetLastError
VirtualQuery
InterlockedIncrement
InterlockedDecrement
Sleep
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
HeapFree
HeapAlloc
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCommandLineA
GetVersionExA
GetProcessHeap
RaiseException
RtlUnwind
WideCharToMultiByte
ExitProcess
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetCPInfo
WriteFile
GetStdHandle
SetLastError
GetACP
GetOEMCP
HeapSize
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
HeapReAlloc
SetHandleCount
GetFileType
GetStartupInfoA
GetConsoleCP
GetConsoleMode
SetFilePointer
FlushFileBuffers
CloseHandle
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
LoadLibraryA
GetUserDefaultLCID
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale
IsValidCodePage
GetStringTypeA
GetStringTypeW
GetLocaleInfoW
ReadFile
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
SetStdHandle
CreateFileA
CreateFileW
SetEndOfFile

advapi32

CryptReleaseContext
CryptAcquireContextA
CryptGenRandom

Exports

Exports

??0?$AbstractEuclideanDomain@VInteger@CryptoPP@@@CryptoPP@@QAE@ABV01@@Z
??0?$AbstractEuclideanDomain@VInteger@CryptoPP@@@CryptoPP@@QAE@XZ
??0?$AbstractEuclideanDomain@VPolynomialMod2@CryptoPP@@@CryptoPP@@QAE@ABV01@@Z
??0?$AbstractEuclideanDomain@VPolynomialMod2@CryptoPP@@@CryptoPP@@QAE@XZ
??0?$AbstractGroup@UEC2NPoint@CryptoPP@@@CryptoPP@@QAE@ABV01@@Z
??0?$AbstractGroup@UEC2NPoint@CryptoPP@@@CryptoPP@@QAE@XZ
??0?$AbstractGroup@UECPPoint@CryptoPP@@@CryptoPP@@QAE@ABV01@@Z
??0?$AbstractGroup@UECPPoint@CryptoPP@@@CryptoPP@@QAE@XZ
??0?$AbstractGroup@VInteger@CryptoPP@@@CryptoPP@@QAE@ABV01@@Z
??0?$AbstractGroup@VInteger@CryptoPP@@@CryptoPP@@QAE@XZ
??0?$AbstractGroup@VPolynomialMod2@CryptoPP@@@CryptoPP@@QAE@ABV01@@Z
??0?$AbstractGroup@VPolynomialMod2@CryptoPP@@@CryptoPP@@QAE@XZ
??0?$AbstractPolicyHolder@UAdditiveCipherAbstractPolicy@CryptoPP@@V?$TwoBases@V?$SimpleKeyedTransformation@VStreamTransformation@CryptoPP@@@CryptoPP@@VRandomNumberGenerator@2@@2@@CryptoPP@@QAE@ABV01@@Z
??0?$AbstractPolicyHolder@UAdditiveCipherAbstractPolicy@CryptoPP@@V?$TwoBases@V?$SimpleKeyedTransformation@VStreamTransformation@CryptoPP@@@CryptoPP@@VRandomNumberGenerator@2@@2@@CryptoPP@@QAE@XZ
??0?$AbstractPolicyHolder@UAdditiveCipherAbstractPolicy@CryptoPP@@VCTR_ModePolicy@2@@CryptoPP@@QAE@ABV01@@Z
??0?$AbstractPolicyHolder@UAdditiveCipherAbstractPolicy@CryptoPP@@VCTR_ModePolicy@2@@CryptoPP@@QAE@XZ
??0?$AbstractPolicyHolder@UAdditiveCipherAbstractPolicy@CryptoPP@@VOFB_ModePolicy@2@@CryptoPP@@QAE@ABV01@@Z
??0?$AbstractPolicyHolder@UAdditiveCipherAbstractPolicy@CryptoPP@@VOFB_ModePolicy@2@@CryptoPP@@QAE@XZ
??0?$AbstractPolicyHolder@VCFB_CipherAbstractPolicy@CryptoPP@@V?$SimpleKeyedTransformation@VStreamTransformation@CryptoPP@@@2@@CryptoPP@@QAE@ABV01@@Z
??0?$AbstractPolicyHolder@VCFB_CipherAbstractPolicy@CryptoPP@@V?$SimpleKeyedTransformation@VStreamTransformation@CryptoPP@@@2@@CryptoPP@@QAE@XZ
??0?$AbstractPolicyHolder@VCFB_CipherAbstractPolicy@CryptoPP@@VCFB_ModePolicy@2@@CryptoPP@@QAE@ABV01@@Z
??0?$AbstractPolicyHolder@VCFB_CipherAbstractPolicy@CryptoPP@@VCFB_ModePolicy@2@@CryptoPP@@QAE@XZ
??0?$AbstractRing@VInteger@CryptoPP@@@CryptoPP@@QAE@ABV01@@Z
??0?$AbstractRing@VInteger@CryptoPP@@@CryptoPP@@QAE@XZ
??0?$AbstractRing@VPolynomialMod2@CryptoPP@@@CryptoPP@@QAE@ABV01@@Z
??0?$AbstractRing@VPolynomialMod2@CryptoPP@@@CryptoPP@@QAE@XZ
??0?$AdditiveCipherTemplate@V?$AbstractPolicyHolder@UAdditiveCipherAbstractPolicy@CryptoPP@@V?$TwoBases@V?$SimpleKeyedTransformation@VStreamTransformation@CryptoPP@@@CryptoPP@@VRandomNumberGenerator@2@@2@@CryptoPP@@@CryptoPP@@QAE@ABV01@@Z
??0?$AdditiveCipherTemplate@V?$AbstractPolicyHolder@UAdditiveCipherAbstractPolicy@CryptoPP@@V?$TwoBases@V?$SimpleKeyedTransformation@VStreamTransformation@CryptoPP@@@CryptoPP@@VRandomNumberGenerator@2@@2@@CryptoPP@@@CryptoPP@@QAE@XZ
??0?$AdditiveCipherTemplate@V?$AbstractPolicyHolder@UAdditiveCipherAbstractPolicy@CryptoPP@@VCTR_ModePolicy@2@@CryptoPP@@@CryptoPP@@QAE@ABV01@@Z
??0?$AdditiveCipherTemplate@V?$AbstractPolicyHolder@UAdditiveCipherAbstractPolicy@CryptoPP@@VCTR_ModePolicy@2@@CryptoPP@@@CryptoPP@@QAE@XZ
??0?$AdditiveCipherTemplate@V?$AbstractPolicyHolder@UAdditiveCipherAbstractPolicy@CryptoPP@@VOFB_ModePolicy@2@@CryptoPP@@@CryptoPP@@QAE@ABV01@@Z
??0?$AdditiveCipherTemplate@V?$AbstractPolicyHolder@UAdditiveCipherAbstractPolicy@CryptoPP@@VOFB_ModePolicy@2@@CryptoPP@@@CryptoPP@@QAE@XZ
??0?$AlgorithmImpl@V?$IteratedHash@IU?$EnumToType@W4ByteOrder@CryptoPP@@$00@CryptoPP@@$0EA@VHashTransformation@2@@CryptoPP@@VSHA1@2@@CryptoPP@@QAE@ABV01@@Z
??0?$AlgorithmImpl@V?$IteratedHash@IU?$EnumToType@W4ByteOrder@CryptoPP@@$00@CryptoPP@@$0EA@VHashTransformation@2@@CryptoPP@@VSHA1@2@@CryptoPP@@QAE@XZ
??0?$AlgorithmImpl@V?$IteratedHash@IU?$EnumToType@W4ByteOrder@CryptoPP@@$00@CryptoPP@@$0EA@VHashTransformation@2@@CryptoPP@@VSHA224@2@@CryptoPP@@QAE@ABV01@@Z
??0?$AlgorithmImpl@V?$IteratedHash@IU?$EnumToType@W4ByteOrder@CryptoPP@@$00@CryptoPP@@$0EA@VHashTransformation@2@@CryptoPP@@VSHA224@2@@CryptoPP@@QAE@XZ
??0?$AlgorithmImpl@V?$IteratedHash@IU?$EnumToType@W4ByteOrder@CryptoPP@@$00@CryptoPP@@$0EA@VHashTransformation@2@@CryptoPP@@VSHA256@2@@CryptoPP@@QAE@ABV01@@Z
??0?$AlgorithmImpl@V?$IteratedHash@IU?$EnumToType@W4ByteOrder@CryptoPP@@$00@CryptoPP@@$0EA@VHashTransformation@2@@CryptoPP@@VSHA256@2@@CryptoPP@@QAE@XZ
??0?$AlgorithmImpl@V?$IteratedHash@_KU?$EnumToType@W4ByteOrder@CryptoPP@@$00@CryptoPP@@$0IA@VHashTransformation@2@@CryptoPP@@VSHA384@2@@CryptoPP@@QAE@ABV01@@Z
??0?$AlgorithmImpl@V?$IteratedHash@_KU?$EnumToType@W4ByteOrder@CryptoPP@@$00@CryptoPP@@$0IA@VHashTransformation@2@@CryptoPP@@VSHA384@2@@CryptoPP@@QAE@XZ
??0?$AlgorithmImpl@V?$IteratedHash@_KU?$EnumToType@W4ByteOrder@CryptoPP@@$00@CryptoPP@@$0IA@VHashTransformation@2@@CryptoPP@@VSHA512@2@@CryptoPP@@QAE@ABV01@@Z
??0?$AlgorithmImpl@V?$IteratedHash@_KU?$EnumToType@W4ByteOrder@CryptoPP@@$00@CryptoPP@@$0IA@VHashTransformation@2@@CryptoPP@@VSHA512@2@@CryptoPP@@QAE@XZ
??0?$AlgorithmImpl@V?$SimpleKeyingInterfaceImpl@V?$TwoBases@V?$SimpleKeyedTransformation@VBlockTransformation@CryptoPP@@@CryptoPP@@UDES_EDE2_Info@2@@CryptoPP@@V12@@CryptoPP@@V12@@CryptoPP@@QAE@ABV01@@Z
??0?$AlgorithmImpl@V?$SimpleKeyingInterfaceImpl@V?$TwoBases@V?$SimpleKeyedTransformation@VBlockTransformation@CryptoPP@@@CryptoPP@@UDES_EDE2_Info@2@@CryptoPP@@V12@@CryptoPP@@V12@@CryptoPP@@QAE@XZ
??0?$AlgorithmImpl@V?$SimpleKeyingInterfaceImpl@V?$TwoBases@V?$SimpleKeyedTransformation@VBlockTransformation@CryptoPP@@@CryptoPP@@UDES_EDE3_Info@2@@CryptoPP@@V12@@CryptoPP@@V12@@CryptoPP@@QAE@ABV01@@Z
??0?$AlgorithmImpl@V?$SimpleKeyingInterfaceImpl@V?$TwoBases@V?$SimpleKeyedTransformation@VBlockTransformation@CryptoPP@@@CryptoPP@@UDES_EDE3_Info@2@@CryptoPP@@V12@@CryptoPP@@V12@@CryptoPP@@QAE@XZ
??0?$AlgorithmImpl@V?$SimpleKeyingInterfaceImpl@V?$TwoBases@V?$SimpleKeyedTransformation@VBlockTransformation@CryptoPP@@@CryptoPP@@URijndael_Info@2@@CryptoPP@@V12@@CryptoPP@@V12@@CryptoPP@@QAE@ABV01@@Z
??0?$AlgorithmImpl@V?$SimpleKeyingInterfaceImpl@V?$TwoBases@V?$SimpleKeyedTransformation@VBlockTransformation@CryptoPP@@@CryptoPP@@URijndael_Info@2@@CryptoPP@@V12@@CryptoPP@@V12@@CryptoPP@@QAE@XZ
??0?$AlgorithmImpl@V?$SimpleKeyingInterfaceImpl@V?$TwoBases@V?$SimpleKeyedTransformation@VBlockTransformation@CryptoPP@@@CryptoPP@@USKIPJACK_Info@2@@CryptoPP@@V12@@CryptoPP@@V12@@CryptoPP@@QAE@ABV01@@Z
??0?$AlgorithmImpl@V?$SimpleKeyingInterfaceImpl@V?$TwoBases@V?$SimpleKeyedTransformation@VBlockTransformation@CryptoPP@@@CryptoPP@@USKIPJACK_Info@2@@CryptoPP@@V12@@CryptoPP@@V12@@CryptoPP@@QAE@XZ
??0?$AutoSeededX917RNG@VDES_EDE3@CryptoPP@@@CryptoPP@@QAE@_N@Z
??0?$AutoSignaling@V?$InputRejecting@VBufferedTransformation@CryptoPP@@@CryptoPP@@@CryptoPP@@QAE@ABV01@@Z
??0?$AutoSignaling@V?$InputRejecting@VBufferedTransformation@CryptoPP@@@CryptoPP@@@CryptoPP@@QAE@H@Z
??0?$AutoSignaling@VBufferedTransformation@CryptoPP@@@CryptoPP@@QAE@ABV01@@Z
??0?$AutoSignaling@VBufferedTransformation@CryptoPP@@@CryptoPP@@QAE@H@Z
??0?$BlockCipherImpl@UDES_EDE2_Info@CryptoPP@@V?$SimpleKeyedTransformation@VBlockTransformation@CryptoPP@@@2@@CryptoPP@@QAE@ABV01@@Z
??0?$BlockCipherImpl@UDES_EDE2_Info@CryptoPP@@V?$SimpleKeyedTransformation@VBlockTransformation@CryptoPP@@@2@@CryptoPP@@QAE@XZ
??0?$BlockCipherImpl@UDES_EDE3_Info@CryptoPP@@V?$SimpleKeyedTransformation@VBlockTransformation@CryptoPP@@@2@@CryptoPP@@QAE@ABV01@@Z
??0?$BlockCipherImpl@UDES_EDE3_Info@CryptoPP@@V?$SimpleKeyedTransformation@VBlockTransformation@CryptoPP@@@2@@CryptoPP@@QAE@XZ
??0?$BlockCipherImpl@URijndael_Info@CryptoPP@@V?$SimpleKeyedTransformation@VBlockTransformation@CryptoPP@@@2@@CryptoPP@@QAE@ABV01@@Z
??0?$BlockCipherImpl@URijndael_Info@CryptoPP@@V?$SimpleKeyedTransformation@VBlockTransformation@CryptoPP@@@2@@CryptoPP@@QAE@XZ
??0?$BlockCipherImpl@USKIPJACK_Info@CryptoPP@@V?$SimpleKeyedTransformation@VBlockTransformation@CryptoPP@@@2@@CryptoPP@@QAE@ABV01@@Z
??0?$BlockCipherImpl@USKIPJACK_Info@CryptoPP@@V?$SimpleKeyedTransformation@VBlockTransformation@CryptoPP@@@2@@CryptoPP@@QAE@XZ
??0?$Bufferless@VBufferedTransformation@CryptoPP@@@CryptoPP@@QAE@ABV01@@Z
??0?$Bufferless@VBufferedTransformation@CryptoPP@@@CryptoPP@@QAE@XZ
??0?$Bufferless@VFilter@CryptoPP@@@CryptoPP@@QAE@XZ
??0?$Bufferless@VSink@CryptoPP@@@CryptoPP@@QAE@ABV01@@Z
??0?$Bufferless@VSink@CryptoPP@@@CryptoPP@@QAE@XZ
??0?$CFB_CipherTemplate@V?$AbstractPolicyHolder@VCFB_CipherAbstractPolicy@CryptoPP@@V?$SimpleKeyedTransformation@VStreamTransformation@CryptoPP@@@2@@CryptoPP@@@CryptoPP@@QAE@ABV01@@Z
??0?$CFB_CipherTemplate@V?$AbstractPolicyHolder@VCFB_CipherAbstractPolicy@CryptoPP@@V?$SimpleKeyedTransformation@VStreamTransformation@CryptoPP@@@2@@CryptoPP@@@CryptoPP@@QAE@XZ
??0?$CFB_CipherTemplate@V?$AbstractPolicyHolder@VCFB_CipherAbstractPolicy@CryptoPP@@VCFB_ModePolicy@2@@CryptoPP@@@CryptoPP@@QAE@ABV01@@Z
??0?$CFB_CipherTemplate@V?$AbstractPolicyHolder@VCFB_CipherAbstractPolicy@CryptoPP@@VCFB_ModePolicy@2@@CryptoPP@@@CryptoPP@@QAE@XZ
??0?$CFB_DecryptionTemplate@V?$AbstractPolicyHolder@VCFB_CipherAbstractPolicy@CryptoPP@@V?$SimpleKeyedTransformation@VStreamTransformation@CryptoPP@@@2@@CryptoPP@@@CryptoPP@@QAE@ABV01@@Z
??0?$CFB_DecryptionTemplate@V?$AbstractPolicyHolder@VCFB_CipherAbstractPolicy@CryptoPP@@V?$SimpleKeyedTransformation@VStreamTransformation@CryptoPP@@@2@@CryptoPP@@@CryptoPP@@QAE@XZ
??0?$CFB_DecryptionTemplate@V?$AbstractPolicyHolder@VCFB_CipherAbstractPolicy@CryptoPP@@VCFB_ModePolicy@2@@CryptoPP@@@CryptoPP@@QAE@ABV01@@Z
??0?$CFB_DecryptionTemplate@V?$AbstractPolicyHolder@VCFB_CipherAbstractPolicy@CryptoPP@@VCFB_ModePolicy@2@@CryptoPP@@@CryptoPP@@QAE@XZ
??0?$CFB_EncryptionTemplate@V?$AbstractPolicyHolder@VCFB_CipherAbstractPolicy@CryptoPP@@V?$SimpleKeyedTransformation@VStreamTransformation@CryptoPP@@@2@@CryptoPP@@@CryptoPP@@QAE@ABV01@@Z
??0?$CFB_EncryptionTemplate@V?$AbstractPolicyHolder@VCFB_CipherAbstractPolicy@CryptoPP@@V?$SimpleKeyedTransformation@VStreamTransformation@CryptoPP@@@2@@CryptoPP@@@CryptoPP@@QAE@XZ
??0?$CFB_EncryptionTemplate@V?$AbstractPolicyHolder@VCFB_CipherAbstractPolicy@CryptoPP@@VCFB_ModePolicy@2@@CryptoPP@@@CryptoPP@@QAE@ABV01@@Z
??0?$CFB_EncryptionTemplate@V?$AbstractPolicyHolder@VCFB_CipherAbstractPolicy@CryptoPP@@VCFB_ModePolicy@2@@CryptoPP@@@CryptoPP@@QAE@XZ
??0?$CipherModeFinalTemplate_ExternalCipher@VCBC_CTS_Decryption@CryptoPP@@@CryptoPP@@QAE@AAV?$SimpleKeyedTransformation@VBlockTransformation@CryptoPP@@@1@@Z
??0?$CipherModeFinalTemplate_ExternalCipher@VCBC_CTS_Decryption@CryptoPP@@@CryptoPP@@QAE@AAV?$SimpleKeyedTransformation@VBlockTransformation@CryptoPP@@@1@PBEH@Z
??0?$CipherModeFinalTemplate_ExternalCipher@VCBC_CTS_Decryption@CryptoPP@@@CryptoPP@@QAE@ABV01@@Z
??0?$CipherModeFinalTemplate_ExternalCipher@VCBC_CTS_Decryption@CryptoPP@@@CryptoPP@@QAE@XZ
??0?$CipherModeFinalTemplate_ExternalCipher@VCBC_CTS_Encryption@CryptoPP@@@CryptoPP@@QAE@AAV?$SimpleKeyedTransformation@VBlockTransformation@CryptoPP@@@1@@Z
??0?$CipherModeFinalTemplate_ExternalCipher@VCBC_CTS_Encryption@CryptoPP@@@CryptoPP@@QAE@AAV?$SimpleKeyedTransformation@VBlockTransformation@CryptoPP@@@1@PBEH@Z
??0?$CipherModeFinalTemplate_ExternalCipher@VCBC_CTS_Encryption@CryptoPP@@@CryptoPP@@QAE@ABV01@@Z
??0?$CipherModeFinalTemplate_ExternalCipher@VCBC_CTS_Encryption@CryptoPP@@@CryptoPP@@QAE@XZ
??0?$CipherModeFinalTemplate_ExternalCipher@VCBC_Decryption@CryptoPP@@@CryptoPP@@QAE@AAV?$SimpleKeyedTransformation@VBlockTransformation@CryptoPP@@@1@@Z
??0?$CipherModeFinalTemplate_ExternalCipher@VCBC_Decryption@CryptoPP@@@CryptoPP@@QAE@AAV?$SimpleKeyedTransformation@VBlockTransformation@CryptoPP@@@1@PBEH@Z
??0?$CipherModeFinalTemplate_ExternalCipher@VCBC_Decryption@CryptoPP@@@CryptoPP@@QAE@ABV01@@Z
??0?$CipherModeFinalTemplate_ExternalCipher@VCBC_Decryption@CryptoPP@@@CryptoPP@@QAE@XZ
??0?$CipherModeFinalTemplate_ExternalCipher@VCBC_Encryption@CryptoPP@@@CryptoPP@@QAE@AAV?$SimpleKeyedTransformation@VBlockTransformation@CryptoPP@@@1@@Z
??0?$CipherModeFinalTemplate_ExternalCipher@VCBC_Encryption@CryptoPP@@@CryptoPP@@QAE@AAV?$SimpleKeyedTransformation@VBlockTransformation@CryptoPP@@@1@PBEH@Z
??0?$CipherModeFinalTemplate_ExternalCipher@VCBC_Encryption@CryptoPP@@@CryptoPP@@QAE@ABV01@@Z
??0?$CipherModeFinalTemplate_ExternalCipher@VCBC_Encryption@CryptoPP@@@CryptoPP@@QAE@XZ
??0?$CipherModeFinalTemplate_ExternalCipher@VECB_OneWay@CryptoPP@@@CryptoPP@@QAE@AAV?$SimpleKeyedTransformation@VBlockTransformation@CryptoPP@@@1@@Z
??0?$CipherModeFinalTemplate_ExternalCipher@VECB_OneWay@CryptoPP@@@CryptoPP@@QAE@AAV?$SimpleKeyedTransformation@VBlockTransformation@CryptoPP@@@1@PBEH@Z
??0?$CipherModeFinalTemplate_ExternalCipher@VECB_OneWay@CryptoPP@@@CryptoPP@@QAE@ABV01@@Z
??0?$CipherModeFinalTemplate_ExternalCipher@VECB_OneWay@CryptoPP@@@CryptoPP@@QAE@XZ
??0?$ClonableImpl@VSHA1@CryptoPP@@V?$AlgorithmImpl@V?$IteratedHash@IU?$EnumToType@W4ByteOrder@CryptoPP@@$00@CryptoPP@@$0EA@VHashTransformation@2@@CryptoPP@@VSHA1@2@@2@@CryptoPP@@QAE@ABV01@@Z
??0?$ClonableImpl@VSHA1@CryptoPP@@V?$AlgorithmImpl@V?$IteratedHash@IU?$EnumToType@W4ByteOrder@CryptoPP@@$00@CryptoPP@@$0EA@VHashTransformation@2@@CryptoPP@@VSHA1@2@@2@@CryptoPP@@QAE@XZ
??0?$ClonableImpl@VSHA224@CryptoPP@@V?$AlgorithmImpl@V?$IteratedHash@IU?$EnumToType@W4ByteOrder@CryptoPP@@$00@CryptoPP@@$0EA@VHashTransformation@2@@CryptoPP@@VSHA224@2@@2@@CryptoPP@@QAE@ABV01@@Z
??0?$ClonableImpl@VSHA224@CryptoPP@@V?$AlgorithmImpl@V?$IteratedHash@IU?$EnumToType@W4ByteOrder@CryptoPP@@$00@CryptoPP@@$0EA@VHashTransformation@2@@CryptoPP@@VSHA224@2@@2@@CryptoPP@@QAE@XZ
??0?$ClonableImpl@VSHA256@CryptoPP@@V?$AlgorithmImpl@V?$IteratedHash@IU?$EnumToType@W4ByteOrder@CryptoPP@@$00@CryptoPP@@$0EA@VHashTransformation@2@@CryptoPP@@VSHA256@2@@2@@CryptoPP@@QAE@ABV01@@Z
??0?$ClonableImpl@VSHA256@CryptoPP@@V?$AlgorithmImpl@V?$IteratedHash@IU?$EnumToType@W4ByteOrder@CryptoPP@@$00@CryptoPP@@$0EA@VHashTransformation@2@@CryptoPP@@VSHA256@2@@2@@CryptoPP@@QAE@XZ
??0?$ClonableImpl@VSHA384@CryptoPP@@V?$AlgorithmImpl@V?$IteratedHash@_KU?$EnumToType@W4ByteOrder@CryptoPP@@$00@CryptoPP@@$0IA@VHashTransformation@2@@CryptoPP@@VSHA384@2@@2@@CryptoPP@@QAE@ABV01@@Z
??0?$ClonableImpl@VSHA384@CryptoPP@@V?$AlgorithmImpl@V?$IteratedHash@_KU?$EnumToType@W4ByteOrder@CryptoPP@@$00@CryptoPP@@$0IA@VHashTransformation@2@@CryptoPP@@VSHA384@2@@2@@CryptoPP@@QAE@XZ
??0?$ClonableImpl@VSHA512@CryptoPP@@V?$AlgorithmImpl@V?$IteratedHash@_KU?$EnumToType@W4ByteOrder@CryptoPP@@$00@CryptoPP@@$0IA@VHashTransformation@2@@CryptoPP@@VSHA512@2@@2@@CryptoPP@@QAE@ABV01@@Z
??0?$ClonableImpl@VSHA512@CryptoPP@@V?$AlgorithmImpl@V?$IteratedHash@_KU?$EnumToType@W4ByteOrder@CryptoPP@@$00@CryptoPP@@$0IA@VHashTransformation@2@@CryptoPP@@VSHA512@2@@2@@CryptoPP@@QAE@XZ
??0?$CustomFlushPropagation@VFilter@CryptoPP@@@CryptoPP@@QAE@XZ
??0?$CustomFlushPropagation@VSink@CryptoPP@@@CryptoPP@@QAE@ABV01@@Z
??0?$CustomFlushPropagation@VSink@CryptoPP@@@CryptoPP@@QAE@XZ
??0?$CustomSignalPropagation@VSink@CryptoPP@@@CryptoPP@@QAE@ABV01@@Z
??0?$CustomSignalPropagation@VSink@CryptoPP@@@CryptoPP@@QAE@XZ
??0?$DH_Domain@VDL_GroupParameters_GFP_DefaultSafePrime@CryptoPP@@U?$EnumToType@W4CofactorMultiplicationOption@CryptoPP@@$0A@@2@@CryptoPP@@QAE@AAVBufferedTransformation@1@@Z
??0?$DH_Domain@VDL_GroupParameters_GFP_DefaultSafePrime@CryptoPP@@U?$EnumToType@W4CofactorMultiplicationOption@CryptoPP@@$0A@@2@@CryptoPP@@QAE@ABV01@@Z
??0?$DH_Domain@VDL_GroupParameters_GFP_DefaultSafePrime@CryptoPP@@U?$EnumToType@W4CofactorMultiplicationOption@CryptoPP@@$0A@@2@@CryptoPP@@QAE@ABVDL_GroupParameters_GFP_DefaultSafePrime@1@@Z
??0?$DH_Domain@VDL_GroupParameters_GFP_DefaultSafePrime@CryptoPP@@U?$EnumToType@W4CofactorMultiplicationOption@CryptoPP@@$0A@@2@@CryptoPP@@QAE@XZ
??0?$DL_Algorithm_GDSA@UEC2NPoint@CryptoPP@@@CryptoPP@@QAE@ABV01@@Z
??0?$DL_Algorithm_GDSA@UEC2NPoint@CryptoPP@@@CryptoPP@@QAE@XZ
??0?$DL_Algorithm_GDSA@UECPPoint@CryptoPP@@@CryptoPP@@QAE@ABV01@@Z
??0?$DL_Algorithm_GDSA@UECPPoint@CryptoPP@@@CryptoPP@@QAE@XZ
??0?$DL_Algorithm_GDSA@VInteger@CryptoPP@@@CryptoPP@@QAE@ABV01@@Z
??0?$DL_Algorithm_GDSA@VInteger@CryptoPP@@@CryptoPP@@QAE@XZ
??0?$DL_ElgamalLikeSignatureAlgorithm@UEC2NPoint@CryptoPP@@@CryptoPP@@QAE@ABV01@@Z
??0?$DL_ElgamalLikeSignatureAlgorithm@UEC2NPoint@CryptoPP@@@CryptoPP@@QAE@XZ
??0?$DL_ElgamalLikeSignatureAlgorithm@UECPPoint@CryptoPP@@@CryptoPP@@QAE@ABV01@@Z
??0?$DL_ElgamalLikeSignatureAlgorithm@UECPPoint@CryptoPP@@@CryptoPP@@QAE@XZ
??0?$DL_ElgamalLikeSignatureAlgorithm@VInteger@CryptoPP@@@CryptoPP@@QAE@ABV01@@Z
??0?$DL_ElgamalLikeSignatureAlgorithm@VInteger@CryptoPP@@@CryptoPP@@QAE@XZ
??0?$DL_FixedBasePrecomputation@UEC2NPoint@CryptoPP@@@CryptoPP@@QAE@ABV01@@Z
??0?$DL_FixedBasePrecomputation@UEC2NPoint@CryptoPP@@@CryptoPP@@QAE@XZ
??0?$DL_FixedBasePrecomputation@UECPPoint@CryptoPP@@@CryptoPP@@QAE@ABV01@@Z
??0?$DL_FixedBasePrecomputation@UECPPoint@CryptoPP@@@CryptoPP@@QAE@XZ
??0?$DL_FixedBasePrecomputation@VInteger@CryptoPP@@@CryptoPP@@QAE@ABV01@@Z
??0?$DL_FixedBasePrecomputation@VInteger@CryptoPP@@@CryptoPP@@QAE@XZ
??0?$DL_FixedBasePrecomputationImpl@UEC2NPoint@CryptoPP@@@CryptoPP@@QAE@ABV01@@Z
??0?$DL_FixedBasePrecomputationImpl@UEC2NPoint@CryptoPP@@@CryptoPP@@QAE@XZ
??0?$DL_FixedBasePrecomputationImpl@UECPPoint@CryptoPP@@@CryptoPP@@QAE@ABV01@@Z
??0?$DL_FixedBasePrecomputationImpl@UECPPoint@CryptoPP@@@CryptoPP@@QAE@XZ
??0?$DL_FixedBasePrecomputationImpl@VInteger@CryptoPP@@@CryptoPP@@QAE@ABV01@@Z
??0?$DL_FixedBasePrecomputationImpl@VInteger@CryptoPP@@@CryptoPP@@QAE@XZ
??0?$DL_GroupParameters@UEC2NPoint@CryptoPP@@@CryptoPP@@QAE@ABV01@@Z
??0?$DL_GroupParameters@UEC2NPoint@CryptoPP@@@CryptoPP@@QAE@XZ
??0?$DL_GroupParameters@UECPPoint@CryptoPP@@@CryptoPP@@QAE@ABV01@@Z
??0?$DL_GroupParameters@UECPPoint@CryptoPP@@@CryptoPP@@QAE@XZ
??0?$DL_GroupParameters@VInteger@CryptoPP@@@CryptoPP@@QAE@ABV01@@Z
??0?$DL_GroupParameters@VInteger@CryptoPP@@@CryptoPP@@QAE@XZ
??0?$DL_GroupParametersImpl@V?$EcPrecomputation@VEC2N@CryptoPP@@@CryptoPP@@V?$DL_FixedBasePrecomputationImpl@UEC2NPoint@CryptoPP@@@2@V?$DL_GroupParameters@UEC2NPoint@CryptoPP@@@2@@CryptoPP@@QAE@ABV01@@Z
??0?$DL_GroupParametersImpl@V?$EcPrecomputation@VEC2N@CryptoPP@@@CryptoPP@@V?$DL_FixedBasePrecomputationImpl@UEC2NPoint@CryptoPP@@@2@V?$DL_GroupParameters@UEC2NPoint@CryptoPP@@@2@@CryptoPP@@QAE@XZ
??0?$DL_GroupParametersImpl@V?$EcPrecomputation@VECP@CryptoPP@@@CryptoPP@@V?$DL_FixedBasePrecomputationImpl@UECPPoint@CryptoPP@@@2@V?$DL_GroupParameters@UECPPoint@CryptoPP@@@2@@CryptoPP@@QAE@ABV01@@Z
??0?$DL_GroupParametersImpl@V?$EcPrecomputation@VECP@CryptoPP@@@CryptoPP@@V?$DL_FixedBasePrecomputationImpl@UECPPoint@CryptoPP@@@2@V?$DL_GroupParameters@UECPPoint@CryptoPP@@@2@@CryptoPP@@QAE@XZ
??0?$DL_GroupParametersImpl@VModExpPrecomputation@CryptoPP@@V?$DL_FixedBasePrecomputationImpl@VInteger@CryptoPP@@@2@VDL_GroupParameters_IntegerBased@2@@CryptoPP@@QAE@ABV01@@Z
??0?$DL_GroupParametersImpl@VModExpPrecomputation@CryptoPP@@V?$DL_FixedBasePrecomputationImpl@VInteger@CryptoPP@@@2@VDL_GroupParameters_IntegerBased@2@@CryptoPP@@QAE@XZ
??0?$DL_GroupParameters_EC@VEC2N@CryptoPP@@@CryptoPP@@QAE@AAVBufferedTransformation@1@@Z
??0?$DL_GroupParameters_EC@VEC2N@CryptoPP@@@CryptoPP@@QAE@ABV01@@Z
??0?$DL_GroupParameters_EC@VEC2N@CryptoPP@@@CryptoPP@@QAE@ABVEC2N@1@ABUEC2NPoint@1@ABVInteger@1@2@Z
??0?$DL_GroupParameters_EC@VEC2N@CryptoPP@@@CryptoPP@@QAE@ABVOID@1@@Z
??0?$DL_GroupParameters_EC@VEC2N@CryptoPP@@@CryptoPP@@QAE@XZ
??0?$DL_GroupParameters_EC@VECP@CryptoPP@@@CryptoPP@@QAE@AAVBufferedTransformation@1@@Z
??0?$DL_GroupParameters_EC@VECP@CryptoPP@@@CryptoPP@@QAE@ABV01@@Z
??0?$DL_GroupParameters_EC@VECP@CryptoPP@@@CryptoPP@@QAE@ABVECP@1@ABUECPPoint@1@ABVInteger@1@2@Z
??0?$DL_GroupParameters_EC@VECP@CryptoPP@@@CryptoPP@@QAE@ABVOID@1@@Z
??0?$DL_GroupParameters_EC@VECP@CryptoPP@@@CryptoPP@@QAE@XZ
??0?$DL_GroupParameters_IntegerBasedImpl@VModExpPrecomputation@CryptoPP@@V?$DL_FixedBasePrecomputationImpl@VInteger@CryptoPP@@@2@@CryptoPP@@QAE@ABV01@@Z
??0?$DL_GroupParameters_IntegerBasedImpl@VModExpPrecomputation@CryptoPP@@V?$DL_FixedBasePrecomputationImpl@VInteger@CryptoPP@@@2@@CryptoPP@@QAE@XZ
??0?$DL_GroupPrecomputation@UEC2NPoint@CryptoPP@@@CryptoPP@@QAE@ABV01@@Z
??0?$DL_GroupPrecomputation@UEC2NPoint@CryptoPP@@@CryptoPP@@QAE@XZ
??0?$DL_GroupPrecomputation@UECPPoint@CryptoPP@@@CryptoPP@@QAE@ABV01@@Z
??0?$DL_GroupPrecomputation@UECPPoint@CryptoPP@@@CryptoPP@@QAE@XZ
??0?$DL_Key@UEC2NPoint@CryptoPP@@@CryptoPP@@QAE@ABV01@@Z
??0?$DL_Key@UEC2NPoint@CryptoPP@@@CryptoPP@@QAE@XZ
??0?$DL_Key@UECPPoint@CryptoPP@@@CryptoPP@@QAE@ABV01@@Z
??0?$DL_Key@UECPPoint@CryptoPP@@@CryptoPP@@QAE@XZ
??0?$DL_Key@VInteger@CryptoPP@@@CryptoPP@@QAE@ABV01@@Z
??0?$DL_Key@VInteger@CryptoPP@@@CryptoPP@@QAE@XZ
??0?$DL_KeyImpl@VPKCS8PrivateKey@CryptoPP@@V?$DL_GroupParameters_EC@VEC2N@CryptoPP@@@2@VOID@2@@CryptoPP@@QAE@ABV01@@Z
??0?$DL_KeyImpl@VPKCS8PrivateKey@CryptoPP@@V?$DL_GroupParameters_EC@VEC2N@CryptoPP@@@2@VOID@2@@CryptoPP@@QAE@XZ
??0?$DL_KeyImpl@VPKCS8PrivateKey@CryptoPP@@V?$DL_GroupParameters_EC@VECP@CryptoPP@@@2@VOID@2@@CryptoPP@@QAE@ABV01@@Z
??0?$DL_KeyImpl@VPKCS8PrivateKey@CryptoPP@@V?$DL_GroupParameters_EC@VECP@CryptoPP@@@2@VOID@2@@CryptoPP@@QAE@XZ
??0?$DL_KeyImpl@VPKCS8PrivateKey@CryptoPP@@VDL_GroupParameters_DSA@2@VOID@2@@CryptoPP@@QAE@ABV01@@Z
??0?$DL_KeyImpl@VPKCS8PrivateKey@CryptoPP@@VDL_GroupParameters_DSA@2@VOID@2@@CryptoPP@@QAE@XZ
??0?$DL_KeyImpl@VX509PublicKey@CryptoPP@@V?$DL_GroupParameters_EC@VEC2N@CryptoPP@@@2@VOID@2@@CryptoPP@@QAE@ABV01@@Z
??0?$DL_KeyImpl@VX509PublicKey@CryptoPP@@V?$DL_GroupParameters_EC@VEC2N@CryptoPP@@@2@VOID@2@@CryptoPP@@QAE@XZ
??0?$DL_KeyImpl@VX509PublicKey@CryptoPP@@V?$DL_GroupParameters_EC@VECP@CryptoPP@@@2@VOID@2@@CryptoPP@@QAE@ABV01@@Z
??0?$DL_KeyImpl@VX509PublicKey@CryptoPP@@V?$DL_GroupParameters_EC@VECP@CryptoPP@@@2@VOID@2@@CryptoPP@@QAE@XZ
??0?$DL_KeyImpl@VX509PublicKey@CryptoPP@@VDL_GroupParameters_DSA@2@VOID@2@@CryptoPP@@QAE@ABV01@@Z
??0?$DL_KeyImpl@VX509PublicKey@CryptoPP@@VDL_GroupParameters_DSA@2@VOID@2@@CryptoPP@@QAE@XZ
??0?$DL_PrivateKey@UEC2NPoint@CryptoPP@@@CryptoPP@@QAE@ABV01@@Z
??0?$DL_PrivateKey@UEC2NPoint@CryptoPP@@@CryptoPP@@QAE@XZ
??0?$DL_PrivateKey@UECPPoint@CryptoPP@@@CryptoPP@@QAE@ABV01@@Z
??0?$DL_PrivateKey@UECPPoint@CryptoPP@@@CryptoPP@@QAE@XZ
??0?$DL_PrivateKey@VInteger@CryptoPP@@@CryptoPP@@QAE@ABV01@@Z
??0?$DL_PrivateKey@VInteger@CryptoPP@@@CryptoPP@@QAE@XZ
??0?$DL_PrivateKeyImpl@V?$DL_GroupParameters_EC@VEC2N@CryptoPP@@@CryptoPP@@@CryptoPP@@QAE@ABV01@@Z
??0?$DL_PrivateKeyImpl@V?$DL_GroupParameters_EC@VEC2N@CryptoPP@@@CryptoPP@@@CryptoPP@@QAE@XZ
??0?$DL_PrivateKeyImpl@V?$DL_GroupParameters_EC@VECP@CryptoPP@@@CryptoPP@@@CryptoPP@@QAE@ABV01@@Z
??0?$DL_PrivateKeyImpl@V?$DL_GroupParameters_EC@VECP@CryptoPP@@@CryptoPP@@@CryptoPP@@QAE@XZ
??0?$DL_PrivateKeyImpl@VDL_GroupParameters_DSA@CryptoPP@@@CryptoPP@@QAE@ABV01@@Z
??0?$DL_PrivateKeyImpl@VDL_GroupParameters_DSA@CryptoPP@@@CryptoPP@@QAE@XZ
??0?$DL_PrivateKey_EC@VEC2N@CryptoPP@@@CryptoPP@@QAE@ABV01@@Z
??0?$DL_PrivateKey_EC@VEC2N@CryptoPP@@@CryptoPP@@QAE@XZ
??0?$DL_PrivateKey_EC@VECP@CryptoPP@@@CryptoPP@@QAE@ABV01@@Z
??0?$DL_PrivateKey_EC@VECP@CryptoPP@@@CryptoPP@@QAE@XZ
??0?$DL_PrivateKey_GFP@VDL_GroupParameters_DSA@CryptoPP@@@CryptoPP@@QAE@ABV01@@Z
??0?$DL_PrivateKey_GFP@VDL_GroupParameters_DSA@CryptoPP@@@CryptoPP@@QAE@XZ
??0?$DL_PrivateKey_WithSignaturePairwiseConsistencyTest@V?$DL_PrivateKey_EC@VEC2N@CryptoPP@@@CryptoPP@@U?$ECDSA@VEC2N@CryptoPP@@VSHA1@2@@2@@CryptoPP@@QAE@ABV01@@Z
??0?$DL_PrivateKey_WithSignaturePairwiseConsistencyTest@V?$DL_PrivateKey_EC@VEC2N@CryptoPP@@@CryptoPP@@U?$ECDSA@VEC2N@CryptoPP@@VSHA1@2@@2@@CryptoPP@@QAE@XZ
??0?$DL_PrivateKey_WithSignaturePairwiseConsistencyTest@V?$DL_PrivateKey_EC@VECP@CryptoPP@@@CryptoPP@@U?$ECDSA@VECP@CryptoPP@@VSHA1@2@@2@@CryptoPP@@QAE@ABV01@@Z
??0?$DL_PrivateKey_WithSignaturePairwiseConsistencyTest@V?$DL_PrivateKey_EC@VECP@CryptoPP@@@CryptoPP@@U?$ECDSA@VECP@CryptoPP@@VSHA1@2@@2@@CryptoPP@@QAE@XZ
??0?$DL_PrivateKey_WithSignaturePairwiseConsistencyTest@V?$DL_PrivateKey_GFP@VDL_GroupParameters_DSA@CryptoPP@@@CryptoPP@@UDSA@2@@CryptoPP@@QAE@ABV01@@Z
??0?$DL_PrivateKey_WithSignaturePairwiseConsistencyTest@V?$DL_PrivateKey_GFP@VDL_GroupParameters_DSA@CryptoPP@@@CryptoPP@@UDSA@2@@CryptoPP@@QAE@XZ
??0?$DL_PublicKey@UEC2NPoint@CryptoPP@@@CryptoPP@@QAE@ABV01@@Z
??0?$DL_PublicKey@UEC2NPoint@CryptoPP@@@CryptoPP@@QAE@XZ
??0?$DL_PublicKey@UECPPoint@CryptoPP@@@CryptoPP@@QAE@ABV01@@Z
??0?$DL_PublicKey@UECPPoint@CryptoPP@@@CryptoPP@@QAE@XZ
??0?$DL_PublicKey@VInteger@CryptoPP@@@CryptoPP@@QAE@ABV01@@Z
??0?$DL_PublicKey@VInteger@CryptoPP@@@CryptoPP@@QAE@XZ
??0?$DL_PublicKeyImpl@V?$DL_GroupParameters_EC@VEC2N@CryptoPP@@@CryptoPP@@@CryptoPP@@QAE@ABV01@@Z
??0?$DL_PublicKeyImpl@V?$DL_GroupParameters_EC@VEC2N@CryptoPP@@@CryptoPP@@@CryptoPP@@QAE@XZ
??0?$DL_PublicKeyImpl@V?$DL_GroupParameters_EC@VECP@CryptoPP@@@CryptoPP@@@CryptoPP@@QAE@ABV01@@Z
??0?$DL_PublicKeyImpl@V?$DL_GroupParameters_EC@VECP@CryptoPP@@@CryptoPP@@@CryptoPP@@QAE@XZ
??0?$DL_PublicKeyImpl@VDL_GroupParameters_DSA@CryptoPP@@@CryptoPP@@QAE@ABV01@@Z
??0?$DL_PublicKeyImpl@VDL_GroupParameters_DSA@CryptoPP@@@CryptoPP@@QAE@XZ
??0?$DL_PublicKey_EC@VEC2N@CryptoPP@@@CryptoPP@@QAE@ABV01@@Z
??0?$DL_PublicKey_EC@VEC2N@CryptoPP@@@CryptoPP@@QAE@XZ
??0?$DL_PublicKey_EC@VECP@CryptoPP@@@CryptoPP@@QAE@ABV01@@Z
??0?$DL_PublicKey_EC@VECP@CryptoPP@@@CryptoPP@@QAE@XZ
??0?$DL_PublicKey_GFP@VDL_GroupParameters_DSA@CryptoPP@@@CryptoPP@@QAE@ABV01@@Z
??0?$DL_PublicKey_GFP@VDL_GroupParameters_DSA@CryptoPP@@@CryptoPP@@QAE@XZ
??0?$DL_SimpleKeyAgreementDomainBase@VInteger@CryptoPP@@@CryptoPP@@QAE@ABV01@@Z
??0?$DL_SimpleKeyAgreementDomainBase@VInteger@CryptoPP@@@CryptoPP@@QAE@XZ
??0?$EMSA2HashIdLookup@VPK_DeterministicSignatureMessageEncodingMethod@CryptoPP@@@CryptoPP@@QAE@ABV01@@Z
??0?$EMSA2HashIdLookup@VPK_DeterministicSignatureMessageEncodingMethod@CryptoPP@@@CryptoPP@@QAE@XZ
??0?$EuclideanDomainOf@VPolynomialMod2@CryptoPP@@@CryptoPP@@QAE@ABV01@@Z
??0?$EuclideanDomainOf@VPolynomialMod2@CryptoPP@@@CryptoPP@@QAE@XZ
??0?$InputRejecting@VBufferedTransformation@CryptoPP@@@CryptoPP@@QAE@ABV01@@Z
??0?$InputRejecting@VBufferedTransformation@CryptoPP@@@CryptoPP@@QAE@XZ
??0?$InputRejecting@VFilter@CryptoPP@@@CryptoPP@@QAE@XZ
??0?$IteratedHash@IU?$EnumToType@W4ByteOrder@CryptoPP@@$00@CryptoPP@@$0EA@VHashTransformation@2@@CryptoPP@@IAE@XZ
??0?$IteratedHash@IU?$EnumToType@W4ByteOrder@CryptoPP@@$00@CryptoPP@@$0EA@VHashTransformation@2@@CryptoPP@@QAE@ABV01@@Z
??0?$IteratedHash@_KU?$EnumToType@W4ByteOrder@CryptoPP@@$00@CryptoPP@@$0IA@VHashTransformation@2@@CryptoPP@@IAE@XZ
??0?$IteratedHash@_KU?$EnumToType@W4ByteOrder@CryptoPP@@$00@CryptoPP@@$0IA@VHashTransformation@2@@CryptoPP@@QAE@ABV01@@Z
??0?$IteratedHashBase@IVHashTransformation@CryptoPP@@@CryptoPP@@QAE@ABV01@@Z
??0?$IteratedHashBase@IVHashTransformation@CryptoPP@@@CryptoPP@@QAE@XZ
??0?$IteratedHashBase@_KVHashTransformation@CryptoPP@@@CryptoPP@@QAE@ABV01@@Z
??0?$IteratedHashBase@_KVHashTransformation@CryptoPP@@@CryptoPP@@QAE@XZ
??0?$IteratedHashWithStaticTransform@IU?$EnumToType@W4ByteOrder@CryptoPP@@$00@CryptoPP@@$0EA@$0BE@VSHA1@2@$0BE@@CryptoPP@@IAE@XZ
??0?$IteratedHashWithStaticTransform@IU?$EnumToType@W4ByteOrder@CryptoPP@@$00@CryptoPP@@$0EA@$0BE@VSHA1@2@$0BE@@CryptoPP@@QAE@ABV01@@Z
??0?$IteratedHashWithStaticTransform@IU?$EnumToType@W4ByteOrder@CryptoPP@@$00@CryptoPP@@$0EA@$0CA@VSHA224@2@$0BM@@CryptoPP@@IAE@XZ
??0?$IteratedHashWithStaticTransform@IU?$EnumToType@W4ByteOrder@CryptoPP@@$00@CryptoPP@@$0EA@$0CA@VSHA224@2@$0BM@@CryptoPP@@QAE@ABV01@@Z
??0?$IteratedHashWithStaticTransform@IU?$EnumToType@W4ByteOrder@CryptoPP@@$00@CryptoPP@@$0EA@$0CA@VSHA256@2@$0CA@@CryptoPP@@IAE@XZ
??0?$IteratedHashWithStaticTransform@IU?$EnumToType@W4ByteOrder@CryptoPP@@$00@CryptoPP@@$0EA@$0CA@VSHA256@2@$0CA@@CryptoPP@@QAE@ABV01@@Z
??0?$IteratedHashWithStaticTransform@_KU?$EnumToType@W4ByteOrder@CryptoPP@@$00@CryptoPP@@$0IA@$0EA@VSHA384@2@$0DA@@CryptoPP@@IAE@XZ
??0?$IteratedHashWithStaticTransform@_KU?$EnumToType@W4ByteOrder@CryptoPP@@$00@CryptoPP@@$0IA@$0EA@VSHA384@2@$0DA@@CryptoPP@@QAE@ABV01@@Z
??0?$IteratedHashWithStaticTransform@_KU?$EnumToType@W4ByteOrder@CryptoPP@@$00@CryptoPP@@$0IA@$0EA@VSHA512@2@$0EA@@CryptoPP@@IAE@XZ
??0?$IteratedHashWithStaticTransform@_KU?$EnumToType@W4ByteOrder@CryptoPP@@$00@CryptoPP@@$0IA@$0EA@VSHA512@2@$0EA@@CryptoPP@@QAE@ABV01@@Z
??0?$ModePolicyCommonTemplate@UAdditiveCipherAbstractPolicy@CryptoPP@@@CryptoPP@@QAE@ABV01@@Z
??0?$ModePolicyCommonTemplate@UAdditiveCipherAbstractPolicy@CryptoPP@@@CryptoPP@@QAE@XZ
??0?$ModePolicyCommonTemplate@VCFB_CipherAbstractPolicy@CryptoPP@@@CryptoPP@@QAE@ABV01@@Z
??0?$ModePolicyCommonTemplate@VCFB_CipherAbstractPolicy@CryptoPP@@@CryptoPP@@QAE@XZ
??0?$Multichannel@VFilter@CryptoPP@@@CryptoPP@@QAE@XZ
??0?$Multichannel@VSink@CryptoPP@@@CryptoPP@@QAE@ABV01@@Z
??0?$Multichannel@VSink@CryptoPP@@@CryptoPP@@QAE@XZ
??0?$OAEP@VSHA1@CryptoPP@@VP1363_MGF1@2@@CryptoPP@@QAE@ABV01@@Z
??0?$OAEP@VSHA1@CryptoPP@@VP1363_MGF1@2@@CryptoPP@@QAE@XZ
??0?$PK_FixedLengthCryptoSystemImpl@VPK_Decryptor@CryptoPP@@@CryptoPP@@QAE@ABV01@@Z
??0?$PK_FixedLengthCryptoSystemImpl@VPK_Decryptor@CryptoPP@@@CryptoPP@@QAE@XZ
??0?$PK_FixedLengthCryptoSystemImpl@VPK_Encryptor@CryptoPP@@@CryptoPP@@QAE@ABV01@@Z
??0?$PK_FixedLengthCryptoSystemImpl@VPK_Encryptor@CryptoPP@@@CryptoPP@@QAE@XZ
??0?$QuotientRing@V?$EuclideanDomainOf@VPolynomialMod2@CryptoPP@@@CryptoPP@@@CryptoPP@@QAE@ABV01@@Z
??0?$QuotientRing@V?$EuclideanDomainOf@VPolynomialMod2@CryptoPP@@@CryptoPP@@@CryptoPP@@QAE@ABV?$EuclideanDomainOf@VPolynomialMod2@CryptoPP@@@1@ABVPolynomialMod2@1@@Z
??0?$SimpleKeyedTransformation@VBlockTransformation@CryptoPP@@@CryptoPP@@QAE@ABV01@@Z
??0?$SimpleKeyedTransformation@VBlockTransformation@CryptoPP@@@CryptoPP@@QAE@XZ
??0?$SimpleKeyedTransformation@VHashTransformation@CryptoPP@@@CryptoPP@@QAE@ABV01@@Z
??0?$SimpleKeyedTransformation@VHashTransformation@CryptoPP@@@CryptoPP@@QAE@XZ
??0?$SimpleKeyedTransformation@VStreamTransformation@CryptoPP@@@CryptoPP@@QAE@ABV01@@Z
??0?$SimpleKeyedTransformation@VStreamTransformation@CryptoPP@@@CryptoPP@@QAE@XZ
??0?$SimpleKeyingInterfaceImpl@V?$TwoBases@V?$SimpleKeyedTransformation@VBlockTransformation@CryptoPP@@@CryptoPP@@UDES_EDE2_Info@2@@CryptoPP@@V12@@CryptoPP@@QAE@ABV01@@Z
??0?$SimpleKeyingInterfaceImpl@V?$TwoBases@V?$SimpleKeyedTransformation@VBlockTransformation@CryptoPP@@@CryptoPP@@UDES_EDE2_Info@2@@CryptoPP@@V12@@CryptoPP@@QAE@XZ
??0?$SimpleKeyingInterfaceImpl@V?$TwoBases@V?$SimpleKeyedTransformation@VBlockTransformation@CryptoPP@@@CryptoPP@@UDES_EDE3_Info@2@@CryptoPP@@V12@@CryptoPP@@QAE@ABV01@@Z
??0?$SimpleKeyingInterfaceImpl@V?$TwoBases@V?$SimpleKeyedTransformation@VBlockTransformation@CryptoPP@@@CryptoPP@@UDES_EDE3_Info@2@@CryptoPP@@V12@@CryptoPP@@QAE@XZ
??0?$SimpleKeyingInterfaceImpl@V?$TwoBases@V?$SimpleKeyedTransformation@VBlockTransformation@CryptoPP@@@CryptoPP@@URijndael_Info@2@@CryptoPP@@V12@@CryptoPP@@QAE@ABV01@@Z
??0?$SimpleKeyingInterfaceImpl@V?$TwoBases@V?$SimpleKeyedTransformation@VBlockTransformation@CryptoPP@@@CryptoPP@@URijndael_Info@2@@CryptoPP@@V12@@CryptoPP@@QAE@XZ
??0?$SimpleKeyingInterfaceImpl@V?$TwoBases@V?$SimpleKeyedTransformation@VBlockTransformation@CryptoPP@@@CryptoPP@@USKIPJACK_Info@2@@CryptoPP@@V12@@CryptoPP@@QAE@ABV01@@Z
??0?$SimpleKeyingInterfaceImpl@V?$TwoBases@V?$SimpleKeyedTransformation@VBlockTransformation@CryptoPP@@@CryptoPP@@USKIPJACK_Info@2@@CryptoPP@@V12@@CryptoPP@@QAE@XZ
??0?$SourceTemplate@VFileStore@CryptoPP@@@CryptoPP@@QAE@PAVBufferedTransformation@1@@Z
??0?$SourceTemplate@VRandomNumberStore@CryptoPP@@@CryptoPP@@QAE@PAVBufferedTransformation@1@@Z
??0?$SourceTemplate@VStringStore@CryptoPP@@@CryptoPP@@QAE@PAVBufferedTransformation@1@@Z
??0?$StringSinkTemplate@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@CryptoPP@@QAE@AAV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
??0?$StringSinkTemplate@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@CryptoPP@@QAE@ABV01@@Z
??0?$TF_Base@VRandomizedTrapdoorFunction@CryptoPP@@VPK_EncryptionMessageEncodingMethod@2@@CryptoPP@@QAE@ABV01@@Z
??0?$TF_Base@VRandomizedTrapdoorFunction@CryptoPP@@VPK_EncryptionMessageEncodingMethod@2@@CryptoPP@@QAE@XZ
??0?$TF_Base@VRandomizedTrapdoorFunctionInverse@CryptoPP@@VPK_SignatureMessageEncodingMethod@2@@CryptoPP@@QAE@ABV01@@Z
??0?$TF_Base@VRandomizedTrapdoorFunctionInverse@CryptoPP@@VPK_SignatureMessageEncodingMethod@2@@CryptoPP@@QAE@XZ
??0?$TF_Base@VTrapdoorFunction@CryptoPP@@VPK_SignatureMessageEncodingMethod@2@@CryptoPP@@QAE@ABV01@@Z
??0?$TF_Base@VTrapdoorFunction@CryptoPP@@VPK_SignatureMessageEncodingMethod@2@@CryptoPP@@QAE@XZ
??0?$TF_Base@VTrapdoorFunctionInverse@CryptoPP@@VPK_EncryptionMessageEncodingMethod@2@@CryptoPP@@QAE@ABV01@@Z
??0?$TF_Base@VTrapdoorFunctionInverse@CryptoPP@@VPK_EncryptionMessageEncodingMethod@2@@CryptoPP@@QAE@XZ
??0?$TF_CryptoSystemBase@VPK_Decryptor@CryptoPP@@V?$TF_Base@VTrapdoorFunctionInverse@CryptoPP@@VPK_EncryptionMessageEncodingMethod@2@@2@@CryptoPP@@QAE@ABV01@@Z
??0?$TF_CryptoSystemBase@VPK_Decryptor@CryptoPP@@V?$TF_Base@VTrapdoorFunctionInverse@CryptoPP@@VPK_EncryptionMessageEncodingMethod@2@@2@@CryptoPP@@QAE@XZ
??0?$TF_CryptoSystemBase@VPK_Encryptor@CryptoPP@@V?$TF_Base@VRandomizedTrapdoorFunction@CryptoPP@@VPK_EncryptionMessageEncodingMethod@2@@2@@CryptoPP@@QAE@ABV01@@Z
??0?$TF_CryptoSystemBase@VPK_Encryptor@CryptoPP@@V?$TF_Base@VRandomizedTrapdoorFunction@CryptoPP@@VPK_EncryptionMessageEncodingMethod@2@@2@@CryptoPP@@QAE@XZ
??0?$TF_SignatureSchemeBase@VPK_Signer@CryptoPP@@V?$TF_Base@VRandomizedTrapdoorFunctionInverse@CryptoPP@@VPK_SignatureMessageEncodingMethod@2@@2@@CryptoPP@@QAE@ABV01@@Z
??0?$TF_SignatureSchemeBase@VPK_Signer@CryptoPP@@V?$TF_Base@VRandomizedTrapdoorFunctionInverse@CryptoPP@@VPK_SignatureMessageEncodingMethod@2@@2@@CryptoPP@@QAE@XZ
??0?$TF_SignatureSchemeBase@VPK_Verifier@CryptoPP@@V?$TF_Base@VTrapdoorFunction@CryptoPP@@VPK_SignatureMessageEncodingMethod@2@@2@@CryptoPP@@QAE@ABV01@@Z
??0?$TF_SignatureSchemeBase@VPK_Verifier@CryptoPP@@V?$TF_Base@VTrapdoorFunction@CryptoPP@@VPK_SignatureMessageEncodingMethod@2@@2@@CryptoPP@@QAE@XZ
??0?$TwoBases@V?$SimpleKeyedTransformation@VBlockTransformation@CryptoPP@@@CryptoPP@@UDES_EDE2_Info@2@@CryptoPP@@QAE@ABV01@@Z
??0?$TwoBases@V?$SimpleKeyedTransformation@VBlockTransformation@CryptoPP@@@CryptoPP@@UDES_EDE2_Info@2@@CryptoPP@@QAE@XZ
??0?$TwoBases@V?$SimpleKeyedTransformation@VBlockTransformation@CryptoPP@@@CryptoPP@@UDES_EDE3_Info@2@@CryptoPP@@QAE@ABV01@@Z
??0?$TwoBases@V?$SimpleKeyedTransformation@VBlockTransformation@CryptoPP@@@CryptoPP@@UDES_EDE3_Info@2@@CryptoPP@@QAE@XZ
??0?$TwoBases@V?$SimpleKeyedTransformation@VBlockTransformation@CryptoPP@@@CryptoPP@@URijndael_Info@2@@CryptoPP@@QAE@ABV01@@Z
??0?$TwoBases@V?$SimpleKeyedTransformation@VBlockTransformation@CryptoPP@@@CryptoPP@@URijndael_Info@2@@CryptoPP@@QAE@XZ
??0?$TwoBases@V?$SimpleKeyedTransformation@VBlockTransformation@CryptoPP@@@CryptoPP@@USKIPJACK_Info@2@@CryptoPP@@QAE@ABV01@@Z
??0?$TwoBases@V?$SimpleKeyedTransformation@VBlockTransformation@CryptoPP@@@CryptoPP@@USKIPJACK_Info@2@@CryptoPP@@QAE@XZ
??0?$TwoBases@V?$SimpleKeyedTransformation@VStreamTransformation@CryptoPP@@@CryptoPP@@VRandomNumberGenerator@2@@CryptoPP@@QAE@ABV01@@Z
??0?$TwoBases@V?$SimpleKeyedTransformation@VStreamTransformation@CryptoPP@@@CryptoPP@@VRandomNumberGenerator@2@@CryptoPP@@QAE@XZ
??0?$Unflushable@V?$Multichannel@VFilter@CryptoPP@@@CryptoPP@@@CryptoPP@@QAE@XZ
??0?$Unflushable@VFilter@CryptoPP@@@CryptoPP@@QAE@XZ
??0ASN1CryptoMaterial@CryptoPP@@QAE@ABV01@@Z
??0ASN1CryptoMaterial@CryptoPP@@QAE@XZ
??0ASN1Key@CryptoPP@@QAE@ABV01@@Z
??0ASN1Key@CryptoPP@@QAE@XZ
??0ASN1Object@CryptoPP@@QAE@ABV01@@Z
??0ASN1Object@CryptoPP@@QAE@XZ
??0AdditiveCipherAbstractPolicy@CryptoPP@@QAE@ABU01@@Z
??0AdditiveCipherAbstractPolicy@CryptoPP@@QAE@XZ
??0Algorithm@CryptoPP@@QAE@ABV01@@Z
??0Algorithm@CryptoPP@@QAE@_N@Z
??0AlgorithmParametersBase@CryptoPP@@QAE@ABV01@@Z
??0AlgorithmParametersBase@CryptoPP@@QAE@PBD_N@Z
??0ArraySink@CryptoPP@@QAE@ABV01@@Z
??0ArraySink@CryptoPP@@QAE@ABVNameValuePairs@1@@Z
??0ArraySink@CryptoPP@@QAE@PAEI@Z
??0ArrayXorSink@CryptoPP@@QAE@ABV01@@Z
??0ArrayXorSink@CryptoPP@@QAE@PAEI@Z
??0AsymmetricAlgorithm@CryptoPP@@QAE@ABV01@@Z
??0AsymmetricAlgorithm@CryptoPP@@QAE@XZ
??0AuthenticatedKeyAgreementDomain@CryptoPP@@QAE@ABV01@@Z
??0AuthenticatedKeyAgreementDomain@CryptoPP@@QAE@XZ
??0AutoSeededRandomPool@CryptoPP@@QAE@ABV01@@Z
??0AutoSeededRandomPool@CryptoPP@@QAE@_NI@Z
??0BERDecodeErr@CryptoPP@@QAE@ABV01@@Z
??0BERDecodeErr@CryptoPP@@QAE@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
??0BERDecodeErr@CryptoPP@@QAE@XZ
??0BERGeneralDecoder@CryptoPP@@QAE@AAV01@E@Z
??0BERGeneralDecoder@CryptoPP@@QAE@AAVBufferedTransformation@1@E@Z
??0BERGeneralDecoder@CryptoPP@@QAE@ABV01@@Z
??0BERSequenceDecoder@CryptoPP@@QAE@AAV01@E@Z
??0BERSequenceDecoder@CryptoPP@@QAE@AAVBufferedTransformation@1@E@Z
??0BERSetDecoder@CryptoPP@@QAE@AAV01@E@Z
??0BERSetDecoder@CryptoPP@@QAE@AAVBufferedTransformation@1@E@Z
??0Base@DES_EDE2@CryptoPP@@QAE@ABV012@@Z
??0Base@DES_EDE2@CryptoPP@@QAE@XZ
??0Base@DES_EDE3@CryptoPP@@QAE@ABV012@@Z
??0Base@DES_EDE3@CryptoPP@@QAE@XZ
??0Base@Rijndael@CryptoPP@@QAE@ABV012@@Z
??0Base@Rijndael@CryptoPP@@QAE@XZ
??0Base@SKIPJACK@CryptoPP@@QAE@ABV012@@Z
??0Base@SKIPJACK@CryptoPP@@QAE@XZ
??0BaseN_Decoder@CryptoPP@@QAE@PAVBufferedTransformation@1@@Z
??0BaseN_Decoder@CryptoPP@@QAE@PBHHPAVBufferedTransformation@1@@Z
??0BaseN_Encoder@CryptoPP@@QAE@PAVBufferedTransformation@1@@Z
??0BaseN_Encoder@CryptoPP@@QAE@PBEHPAVBufferedTransformation@1@H@Z
??0BitBucket@CryptoPP@@QAE@ABV01@@Z
??0BitBucket@CryptoPP@@QAE@XZ
??0BlockOrientedCipherModeBase@CryptoPP@@QAE@ABV01@@Z
??0BlockOrientedCipherModeBase@CryptoPP@@QAE@XZ
??0BlockTransformation@CryptoPP@@QAE@ABV01@@Z
??0BlockTransformation@CryptoPP@@QAE@XZ
??0BufferedTransformation@CryptoPP@@QAE@ABV01@@Z
??0BufferedTransformation@CryptoPP@@QAE@XZ
??0ByteQueue@CryptoPP@@QAE@ABV01@@Z
??0ByteQueue@CryptoPP@@QAE@I@Z
??0CBC_CTS_Decryption@CryptoPP@@QAE@ABV01@@Z
??0CBC_CTS_Decryption@CryptoPP@@QAE@XZ
??0CBC_CTS_Encryption@CryptoPP@@QAE@ABV01@@Z
??0CBC_CTS_Encryption@CryptoPP@@QAE@XZ
??0CBC_Decryption@CryptoPP@@QAE@ABV01@@Z
??0CBC_Decryption@CryptoPP@@QAE@XZ
??0CBC_Encryption@CryptoPP@@QAE@ABV01@@Z
??0CBC_Encryption@CryptoPP@@QAE@XZ
??0CBC_MAC_Base@CryptoPP@@QAE@ABV01@@Z
??0CBC_MAC_Base@CryptoPP@@QAE@XZ
??0CBC_ModeBase@CryptoPP@@QAE@ABV01@@Z
??0CBC_ModeBase@CryptoPP@@QAE@XZ
??0CFB_CipherAbstractPolicy@CryptoPP@@QAE@ABV01@@Z
??0CFB_CipherAbstractPolicy@CryptoPP@@QAE@XZ
??0CFB_ModePolicy@CryptoPP@@QAE@ABV01@@Z
??0CFB_ModePolicy@CryptoPP@@QAE@XZ
??0CTR_ModePolicy@CryptoPP@@QAE@ABV01@@Z
??0CTR_ModePolicy@CryptoPP@@QAE@XZ
??0CannotFlush@CryptoPP@@QAE@ABV01@@Z
??0CannotFlush@CryptoPP@@QAE@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
??0ChannelSwitch@CryptoPP@@QAE@AAVBufferedTransformation@1@@Z
??0ChannelSwitch@CryptoPP@@QAE@AAVBufferedTransformation@1@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
??0ChannelSwitch@CryptoPP@@QAE@ABV01@@Z
??0ChannelSwitch@CryptoPP@@QAE@XZ
??0CipherModeBase@CryptoPP@@QAE@ABV01@@Z
??0CipherModeBase@CryptoPP@@QAE@XZ
??0Clonable@CryptoPP@@QAE@ABV01@@Z
??0Clonable@CryptoPP@@QAE@XZ
??0CombinedNameValuePairs@CryptoPP@@QAE@ABV01@@Z
??0CombinedNameValuePairs@CryptoPP@@QAE@ABVNameValuePairs@1@0@Z
??0CryptoMaterial@CryptoPP@@QAE@ABV01@@Z
??0CryptoMaterial@CryptoPP@@QAE@XZ
??0CryptoParameters@CryptoPP@@QAE@ABV01@@Z
??0CryptoParameters@CryptoPP@@QAE@XZ
??0DERGeneralEncoder@CryptoPP@@QAE@AAV01@E@Z
??0DERGeneralEncoder@CryptoPP@@QAE@AAVBufferedTransformation@1@E@Z
??0DERSequenceEncoder@CryptoPP@@QAE@AAV01@E@Z
??0DERSequenceEncoder@CryptoPP@@QAE@AAVBufferedTransformation@1@E@Z
??0DERSetEncoder@CryptoPP@@QAE@AAV01@E@Z
??0DERSetEncoder@CryptoPP@@QAE@AAVBufferedTransformation@1@E@Z
??0DL_GroupParameters_DSA@CryptoPP@@QAE@ABV01@@Z
??0DL_GroupParameters_DSA@CryptoPP@@QAE@XZ
??0DL_GroupParameters_GFP@CryptoPP@@QAE@ABV01@@Z
??0DL_GroupParameters_GFP@CryptoPP@@QAE@XZ
??0DL_GroupParameters_GFP_DefaultSafePrime@CryptoPP@@QAE@ABV01@@Z
??0DL_GroupParameters_GFP_DefaultSafePrime@CryptoPP@@QAE@XZ
??0DL_GroupParameters_IntegerBased@CryptoPP@@QAE@ABV01@@Z
??0DL_GroupParameters_IntegerBased@CryptoPP@@QAE@XZ
??0DL_SignatureMessageEncodingMethod_DSA@CryptoPP@@QAE@ABV01@@Z
??0DL_SignatureMessageEncodingMethod_DSA@CryptoPP@@QAE@XZ
??0DL_SignatureMessageEncodingMethod_NR@CryptoPP@@QAE@ABV01@@Z
??0DL_SignatureMessageEncodingMethod_NR@CryptoPP@@QAE@XZ
??0Dec@Rijndael@CryptoPP@@QAE@ABV012@@Z
??0Dec@Rijndael@CryptoPP@@QAE@XZ
??0Dec@SKIPJACK@CryptoPP@@QAE@ABV012@@Z
??0Dec@SKIPJACK@CryptoPP@@QAE@XZ
??0DecodingResult@CryptoPP@@QAE@I@Z
??0DecodingResult@CryptoPP@@QAE@XZ
??0EC2N@CryptoPP@@QAE@AAVBufferedTransformation@1@@Z
??0EC2N@CryptoPP@@QAE@ABV01@@Z
??0EC2N@CryptoPP@@QAE@ABVGF2NP@1@ABVPolynomialMod2@1@1@Z
??0EC2N@CryptoPP@@QAE@XZ
??0EC2NPoint@CryptoPP@@QAE@ABU01@@Z
??0EC2NPoint@CryptoPP@@QAE@ABVPolynomialMod2@1@0@Z
??0EC2NPoint@CryptoPP@@QAE@XZ
??0ECB_OneWay@CryptoPP@@QAE@ABV01@@Z
??0ECB_OneWay@CryptoPP@@QAE@XZ
??0ECP@CryptoPP@@QAE@AAVBufferedTransformation@1@@Z
??0ECP@CryptoPP@@QAE@ABV01@_N@Z
??0ECP@CryptoPP@@QAE@ABVInteger@1@00@Z
??0ECP@CryptoPP@@QAE@XZ
??0ECPPoint@CryptoPP@@QAE@ABU01@@Z
??0ECPPoint@CryptoPP@@QAE@ABVInteger@1@0@Z
??0ECPPoint@CryptoPP@@QAE@XZ
??0EMSA2Pad@CryptoPP@@QAE@ABV01@@Z
??0EMSA2Pad@CryptoPP@@QAE@XZ
??0Enc@Rijndael@CryptoPP@@QAE@ABV012@@Z
??0Enc@Rijndael@CryptoPP@@QAE@XZ
??0Enc@SKIPJACK@CryptoPP@@QAE@ABV012@@Z
??0Enc@SKIPJACK@CryptoPP@@QAE@XZ
??0EqualityComparisonFilter@CryptoPP@@QAE@PAVBufferedTransformation@1@_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2@Z
??0Exception@CryptoPP@@QAE@ABV01@@Z
??0Exception@CryptoPP@@QAE@W4ErrorType@01@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
??0FileSink@CryptoPP@@QAE@AAV?$basic_ostream@DU?$char_traits@D@std@@@std@@@Z
??0FileSink@CryptoPP@@QAE@PBD_N@Z
??0FileSink@CryptoPP@@QAE@XZ
??0FileSource@CryptoPP@@QAE@AAV?$basic_istream@DU?$char_traits@D@std@@@std@@_NPAVBufferedTransformation@1@@Z
??0FileSource@CryptoPP@@QAE@PAVBufferedTransformation@1@@Z
??0FileSource@CryptoPP@@QAE@PBD_NPAVBufferedTransformation@1@1@Z
??0FileStore@CryptoPP@@QAE@AAV?$basic_istream@DU?$char_traits@D@std@@@std@@@Z
??0FileStore@CryptoPP@@QAE@PBD@Z
??0FileStore@CryptoPP@@QAE@XZ
??0Filter@CryptoPP@@QAE@PAVBufferedTransformation@1@@Z
??0FilterPutSpaceHelper@CryptoPP@@QAE@ABU01@@Z
??0FilterPutSpaceHelper@CryptoPP@@QAE@XZ
??0FilterWithBufferedInput@CryptoPP@@QAE@IIIPAVBufferedTransformation@1@@Z
??0FilterWithBufferedInput@CryptoPP@@QAE@PAVBufferedTransformation@1@@Z
??0FilterWithInputQueue@CryptoPP@@QAE@PAVBufferedTransformation@1@@Z
??0GF2NP@CryptoPP@@QAE@ABV01@@Z
??0GF2NP@CryptoPP@@QAE@ABVPolynomialMod2@1@@Z
??0GF2NPP@CryptoPP@@QAE@ABV01@@Z
??0GF2NPP@CryptoPP@@QAE@IIIII@Z
??0GF2NT@CryptoPP@@QAE@ABV01@@Z
??0GF2NT@CryptoPP@@QAE@III@Z
??0GeneratableCryptoMaterial@CryptoPP@@QAE@ABV01@@Z
??0GeneratableCryptoMaterial@CryptoPP@@QAE@XZ
??0Grouper@CryptoPP@@QAE@HABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@0PAVBufferedTransformation@1@@Z
??0Grouper@CryptoPP@@QAE@PAVBufferedTransformation@1@@Z
??0HMAC_Base@CryptoPP@@QAE@ABV01@@Z
??0HMAC_Base@CryptoPP@@QAE@XZ
??0HashFilter@CryptoPP@@QAE@AAVHashTransformation@1@PAVBufferedTransformation@1@_NH@Z
??0HashInputTooLong@CryptoPP@@QAE@ABV01@@Z
??0HashInputTooLong@CryptoPP@@QAE@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
??0HashTransformation@CryptoPP@@QAE@ABV01@@Z
??0HashTransformation@CryptoPP@@QAE@XZ
??0HashVerificationFilter@CryptoPP@@QAE@AAVHashTransformation@1@PAVBufferedTransformation@1@I@Z
??0HexDecoder@CryptoPP@@QAE@PAVBufferedTransformation@1@@Z
??0HexEncoder@CryptoPP@@QAE@PAVBufferedTransformation@1@_NHABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2@Z
??0Integer@CryptoPP@@AAE@II@Z
??0Integer@CryptoPP@@QAE@AAVBufferedTransformation@1@@Z
??0Integer@CryptoPP@@QAE@AAVBufferedTransformation@1@IW4Signedness@01@@Z
??0Integer@CryptoPP@@QAE@AAVRandomNumberGenerator@1@ABV01@1W4RandomNumberType@01@11@Z
??0Integer@CryptoPP@@QAE@AAVRandomNumberGenerator@1@I@Z
??0Integer@CryptoPP@@QAE@ABV01@@Z
??0Integer@CryptoPP@@QAE@J@Z

Sections

.text
Size: 548KB - Virtual size: 546KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 556KB - Virtual size: 553KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 64KB - Virtual size: 71KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 68KB - Virtual size: 65KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Backup/ZBRpre-intsalled.phpt
.js
Backup/files/Anee
.exe windows:6 windows x86 arch:x86

a7e73ef2207e9ee97c678506145e1258

Code Sign

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

21-12-2012 00:00

Not After

30-12-2020 23:59

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

18-10-2012 00:00

Not After

29-12-2020 23:59

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

4f:be:0a:02:42:6e:bd:20:c2:62:44:b5:ec:a6:52:a3
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Not Before

09-07-2018 00:00

Not After

10-07-2019 23:59

Subject

CN=NVIDIA Corporation,OU=IT-MIS,O=NVIDIA Corporation,L=Santa Clara,ST=California,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

61:19:93:e4:00:00:00:00:00:1c
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

22-02-2011 19:25

Not After

22-02-2021 19:35

Subject

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

08-02-2010 00:00

Not After

07-02-2020 23:59

Subject

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

62:e7:45:e9:21:65:21:3c:97:1f:5c:49:0a:ea:12:a5
Certificate

Issuer

CN=Symantec Class 3 SHA256 Code Signing CA - G2,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Not Before

09-07-2018 00:00

Not After

09-07-2021 23:59

Subject

CN=NVIDIA Corporation,OU=IT-MIS,O=NVIDIA Corporation,L=Santa Clara,ST=California,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

7c:1b:35:35:4a:e7:db:74:e7:41:5f:11:69:ca:6b:a8
Certificate

Issuer

CN=VeriSign Universal Root Certification Authority,OU=VeriSign Trust Network+OU=(c) 2008 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

22-07-2014 00:00

Not After

21-07-2024 23:59

Subject

CN=Symantec Class 3 SHA256 Code Signing CA - G2,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

61:2d:23:cb:00:00:00:00:00:21
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

22-02-2011 19:46

Not After

22-02-2021 19:56

Subject

CN=VeriSign Universal Root Certification Authority,OU=VeriSign Trust Network+OU=(c) 2008 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

7b:05:b1:d4:49:68:51:44:f7:c9:89:d2:9c:19:9d:12
Certificate

Issuer

CN=VeriSign Universal Root Certification Authority,OU=VeriSign Trust Network+OU=(c) 2008 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

12-01-2016 00:00

Not After

11-01-2031 23:59

Subject

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

7b:d4:e5:af:ba:cc:07:3f:a1:01:23:04:22:41:4d:12
Certificate

Issuer

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Not Before

23-12-2017 00:00

Not After

22-03-2029 23:59

Subject

CN=Symantec SHA256 TimeStamping Signer - G3,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

54:cb:ab:94:75:80:97:ed:a8:bb:b7:bd:5b:5f:9b:d9:c4:b8:e5:05:1b:74:5b:83:60:86:a9:f7:ca:58:97:d7
Signer

Actual PE Digest

54:cb:ab:94:75:80:97:ed:a8:bb:b7:bd:5b:5f:9b:d9:c4:b8:e5:05:1b:74:5b:83:60:86:a9:f7:ca:58:97:d7

Digest Algorithm

sha256

PE Digest Matches

true

7f:01:56:fd:7c:3f:56:65:ab:41:e1:66:0d:22:36:1d:f4:00:d1:24
Signer

Actual PE Digest

7f:01:56:fd:7c:3f:56:65:ab:41:e1:66:0d:22:36:1d:f4:00:d1:24

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\dvs\p4\build\sw\rel\gpu_drv\r415\r415_00\drivers\stereo_vision\Apps\GeForce3DVisionSetupWizard\release\NvStWiz.pdb

Imports

user32

GetDesktopWindow
PostQuitMessage
GetUserObjectInformationW
SetCursor
LoadCursorW
TranslateMessage
OpenInputDesktop
ValidateRect
PeekMessageW
EnumDisplaySettingsExW
DestroyIcon
EnumDisplaySettingsW
CloseDesktop
ChangeDisplaySettingsW
ShowWindow
DestroyCursor
RegisterClassExW
SendMessageW
CreateWindowExW
MessageBoxW
DestroyWindow
DefWindowProcW
ChangeDisplaySettingsExW
UpdateWindow
LoadImageW
SetCursorPos
DispatchMessageW
GetCursorPos

shell32

SHGetFolderPathW
ShellExecuteW
SHGetKnownFolderPath

ole32

CoTaskMemFree
CreateStreamOnHGlobal
CoCreateInstance
CoUninitialize
CoInitialize

d3d9

Direct3DCreate9

d3d10

D3D10CreateDevice

gdiplus

GdipLoadImageFromStream
GdipSetStringFormatFlags
GdipGetImageWidth
GdipSetStringFormatAlign
GdiplusStartup
GdipCreatePen1
GdipCreateStringFormat
GdipDeleteFontFamily
GdipGetImageHeight
GdipSetImageAttributesColorMatrix
GdipDeleteFont
GdipSetCompositingMode
GdipDeleteStringFormat
GdipDeleteGraphics
GdiplusShutdown
GdipMeasureString
GdipCloneBrush
GdipSetTextRenderingHint
GdipCreateFromHDC
GdipDrawString
GdipFree
GdipGetGenericFontFamilySansSerif
GdipCreateImageAttributes
GdipDrawLine
GdipCreateSolidFill
GdipCreateFont
GdipDisposeImage
GdipDisposeImageAttributes
GdipDrawImageRectI
GdipAlloc
GdipDeleteBrush
GdipCloneImage
GdipDrawImageRectRect
GdipCreateFontFamilyFromName
GdipDeletePen

kernel32

GetConsoleCP
FlushFileBuffers
SetStdHandle
GetProcessHeap
LCMapStringW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCPInfo
GetOEMCP
IsValidCodePage
FindNextFileA
FindFirstFileExA
GetStringTypeW
GetFileType
HeapAlloc
HeapFree
GetACP
WriteFile
GetStdHandle
HeapSize
MultiByteToWideChar
GetModuleFileNameA
GetModuleHandleExW
ExitProcess
GetCommandLineW
GetCommandLineA
EncodePointer
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
InitializeCriticalSectionAndSpinCount
RaiseException
RtlUnwind
InitializeSListHead
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
GetStartupInfoW
IsDebuggerPresent
IsProcessorFeaturePresent
TerminateProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
WaitForSingleObjectEx
ResetEvent
SetEvent
GetConsoleMode
HeapReAlloc
SetFilePointerEx
SetEndOfFile
ReadFile
ReadConsoleW
DecodePointer
WideCharToMultiByte
SizeofResource
FindFirstFileW
GetSystemDefaultLCID
FindNextFileW
lstrcpynW
GetThreadLocale
GetUserDefaultUILanguage
GetTempPathW
FindClose
GetLocaleInfoW
GetFileAttributesW
GetVersionExW
GetSystemDirectoryW
FreeResource
CreateEventW
Sleep
GetLastError
LockResource
GlobalAlloc
GlobalFree
CloseHandle
LoadLibraryW
FindResourceExW
LoadResource
FindResourceW
GetProcAddress
GlobalLock
WriteConsoleW
FreeLibrary
lstrcmpiW
GlobalUnlock
LoadLibraryExW
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
VerSetConditionMask
ExpandEnvironmentStringsW
CreateFileW
GetFullPathNameW
SetLastError
GetCurrentProcess
GetModuleHandleA
LocalAlloc
LocalFree
lstrcmpW
VerifyVersionInfoW
GetModuleHandleW

advapi32

RegQueryValueExW
RegOpenKeyExA
InitializeSecurityDescriptor
RegSetValueExA
RegQueryValueExA
RegCloseKey
SetSecurityDescriptorDacl
RegOpenKeyExW

Sections

.text
Size: 182KB - Virtual size: 182KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 62KB - Virtual size: 62KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 152KB - Virtual size: 151KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 15KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Backup/files/Dat-a/cb (2).png
.png
Backup/files/Dat-a/cb.png
.png
Backup/files/Dat-a/d (2).jpg
.jpg
Backup/files/Dat-a/vc.png
.png
Backup/files/Dat-a/wei.png
.png
Backup/files/StartupHelper
.exe windows:5 windows x86 arch:x86

d21794f0d47bb5c7f5977a6500854d85

Code Sign

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

29-04-2021 00:00

Not After

28-04-2036 23:59

Subject

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

04:28:14:36:98:54:a8:5f:9b:8f:90:12:67:c0:3c:f2
Certificate

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Not Before

17-08-2022 00:00

Not After

29-07-2025 23:59

Subject

SERIALNUMBER=91110108680456115E,CN=Glarysoft Ltd,O=Glarysoft Ltd,ST=Beijing,C=CN,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.1=#13104861696469616e204469737472696374,1.3.6.1.4.1.311.60.2.1.2=#13074265696a696e67,1.3.6.1.4.1.311.60.2.1.3=#1302434e

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16
Certificate

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Not Before

14-07-2023 00:00

Not After

13-10-2034 23:59

Subject

CN=DigiCert Timestamp 2023,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

23-03-2022 00:00

Not After

22-03-2037 23:59

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01-08-2022 00:00

Not After

09-11-2031 23:59

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

29-04-2021 00:00

Not After

28-04-2036 23:59

Subject

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

04:28:14:36:98:54:a8:5f:9b:8f:90:12:67:c0:3c:f2
Certificate

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Not Before

17-08-2022 00:00

Not After

29-07-2025 23:59

Subject

SERIALNUMBER=91110108680456115E,CN=Glarysoft Ltd,O=Glarysoft Ltd,ST=Beijing,C=CN,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.1=#13104861696469616e204469737472696374,1.3.6.1.4.1.311.60.2.1.2=#13074265696a696e67,1.3.6.1.4.1.311.60.2.1.3=#1302434e

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16
Certificate

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Not Before

14-07-2023 00:00

Not After

13-10-2034 23:59

Subject

CN=DigiCert Timestamp 2023,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

23-03-2022 00:00

Not After

22-03-2037 23:59

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01-08-2022 00:00

Not After

09-11-2031 23:59

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

cc:08:bb:49:63:6e:cf:3f:72:bf:92:cf:45:8b:91:0e:90:0f:7d:11:28:70:03:90:0a:af:8b:19:89:f5:2f:7b
Signer

Actual PE Digest

cc:08:bb:49:63:6e:cf:3f:72:bf:92:cf:45:8b:91:0e:90:0f:7d:11:28:70:03:90:0a:af:8b:19:89:f5:2f:7b

Digest Algorithm

sha256

PE Digest Matches

true

b2:c8:9c:70:dd:00:70:00:00:18:3b:25:00:02:8e:c2:fc:f9:28:b7
Signer

Actual PE Digest

b2:c8:9c:70:dd:00:70:00:00:18:3b:25:00:02:8e:c2:fc:f9:28:b7

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

D:\winapps\mh\trunk\exe\vc\StartupHelper\sourcecode\Release\StartupHelper.pdb

Imports

mfc90u

ord404
ord2597
ord2141
ord4131
ord6635
ord4044
ord611
ord595
ord3489
ord5664
ord4652
ord1493
ord6411
ord3355
ord1665
ord5939
ord4405
ord1607
ord3220
ord5632
ord5167
ord5324
ord1810
ord1809
ord1675
ord3353
ord6408
ord1754
ord1751
ord4345
ord1492
ord4664
ord5602
ord2074
ord5512
ord6800
ord4603
ord3743
ord5154
ord4702
ord1728
ord6466
ord5685
ord5683
ord960
ord965
ord969
ord967
ord971
ord2615
ord2635
ord2619
ord2625
ord2623
ord2621
ord2638
ord2633
ord2617
ord2640
ord2628
ord2610
ord2612
ord2630
ord2375
ord2368
ord1641
ord6802
ord4174
ord6804
ord3682
ord5404
ord6376
ord3226
ord1442
ord5625
ord2139
ord1792
ord1791
ord1727
ord5650
ord3140
ord4910
ord4682
ord3515
ord2593
ord5653
ord6091
ord4774
ord4815
ord5078
ord613
ord337
ord4631
ord2901
ord4741
ord1533
ord3537
ord6095
ord3622
ord6187
ord6094
ord333
ord3488
ord1354
ord1353
ord2097
ord3543
ord1183
ord3486
ord4527
ord6579
ord4543
ord6577
ord2592
ord744
ord524
ord2069
ord1063
ord663
ord2146
ord1166
ord1064
ord6604
ord4530
ord2904
ord1047
ord2596
ord5008
ord1108
ord367
ord586
ord4000
ord374
ord2130
ord3577
ord2282
ord4512
ord4442
ord4448
ord4423
ord6801
ord4173
ord6803
ord4747
ord2251
ord2206
ord6035
ord4179
ord1048
ord5548
ord6741
ord5830
ord4213
ord2087
ord3217
ord5674
ord5676
ord4347
ord4996
ord5680
ord5663
ord6018
ord2771
ord2983
ord3112
ord799
ord265
ord266
ord1272
ord1137
ord1254
ord686
ord436
ord792
ord587
ord4728
ord2966
ord3115
ord2774
ord2893
ord2764
ord4080
ord4081
ord4071
ord2891
ord4348
ord4905
ord4681
ord3670
ord2447
ord636
ord790
ord639
ord2208
ord6482
ord1098
ord4211
ord794
ord589
ord4043
ord4967
ord1318
ord2327
ord316
ord601
ord899
ord1315
ord938
ord1603
ord2478
ord5979
ord6687
ord285
ord5535
ord6079
ord6813
ord1552
ord2551
ord946
ord821
ord2470
ord6096
ord4541
ord4410
ord290
ord1088
ord6659
ord2243
ord6204
ord339
ord289
ord288
ord6164
ord1599
ord809
ord6013
ord935
ord936
ord2702
ord286
ord5851
ord3637
ord2106
ord811
ord280
ord2326
ord2694
ord6529
ord813
ord2537
ord600
ord1143
ord296
ord1248
ord2084
ord1250
ord801

msvcr90

memcpy
memset
towupper
__CxxFrameHandler3
?_type_info_dtor_internal_method@type_info@@QAEXXZ
_crt_debugger_hook
_controlfp_s
_invoke_watson
_except_handler4_common
_decode_pointer
_onexit
_lock
__dllonexit
_unlock
?terminate@@YAXXZ
__set_app_type
_encode_pointer
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_configthreadlocale
_initterm_e
_initterm
_wcmdln
exit
_XcptFilter
_exit
_cexit
__wgetmainargs
_amsg_exit
__wargv
__argc
setlocale
_resetstkoflw
?what@exception@std@@UBEPBDXZ
_msize
_purecall
_set_errno
_get_errno
_wtoi64
realloc
_gcvt_s
_fpclass
_HUGE
iswspace
wcsrchr
wcschr
_ui64toa_s
_i64toa_s
isspace
_itoa_s
wcsncmp
wcstod
wcstol
_wcstoui64
_wcstoi64
strtol
_wtoi
wcsnlen
_wcsicmp
_scwprintf
_ultoa_s
strncmp
_strlwr_s
_recalloc
calloc
_itow_s
swprintf_s
_CxxThrowException
malloc
wcscpy_s
wcsncpy_s
_invalid_parameter_noinfo
??0exception@std@@QAE@ABV01@@Z
free
??0exception@std@@QAE@XZ
??1exception@std@@UAE@XZ
??0exception@std@@QAE@ABQBD@Z
memmove_s
memcpy_s

kernel32

GetPrivateProfileSectionW
LocalFree
GetCurrentProcessId
InterlockedCompareExchange
GetStartupInfoW
SetUnhandledExceptionFilter
QueryPerformanceCounter
GetCurrentThreadId
GetSystemTimeAsFileTime
TerminateProcess
SetLastError
LoadLibraryW
GetCurrentProcess
UnhandledExceptionFilter
IsDebuggerPresent
EnterCriticalSection
GetProcAddress
GetModuleHandleW
Sleep
GetTickCount
GetCommandLineW
InterlockedExchange
CreateMutexW
CloseHandle
HeapReAlloc
GetPrivateProfileIntW
HeapFree
GetProcessHeap
HeapAlloc
WideCharToMultiByte
lstrlenA
MultiByteToWideChar
GetLastError
GetModuleFileNameW
lstrlenW
WaitForSingleObject
HeapDestroy
HeapSize
DeleteCriticalSection
InitializeCriticalSection
LeaveCriticalSection

user32

SendMessageW
AppendMenuW
GetSystemMenu
GetWindowRect
MessageBoxW
GetWindowLongW
SetWindowLongW
UnionRect
GetMenuBarInfo
GetMenuItemID
GetMenuItemCount
GetSysColor
OffsetRect
FrameRect
DrawFrameControl
CopyRect
EnableWindow
IsWindow
InvalidateRect
KillTimer
PtInRect
ReleaseDC
FillRect
GetDC
SystemParametersInfoW
EndPaint
BeginPaint
DrawIcon
GetSystemMetrics
IsIconic
SetTimer
GetClientRect
LoadIconW

gdi32

CreatePen
CreateCompatibleBitmap
CreateSolidBrush
GetObjectW
SetDIBColorTable
GetTextExtentPoint32W
SetBkMode
CreateRoundRectRgn
GetCurrentObject
GetBkMode
CreatePatternBrush
SetBrushOrgEx
FillRgn
FrameRgn
SelectObject
CreateFontW
GetDIBColorTable
StretchBlt
CreateDIBSection
BitBlt
CreateCompatibleDC
DeleteDC
DeleteObject

msimg32

TransparentBlt
GradientFill
AlphaBlend

advapi32

RegQueryValueExW
RegOpenKeyExW

shell32

ShellExecuteW
CommandLineToArgvW

comctl32

_TrackMouseEvent
InitCommonControlsEx

shlwapi

PathFileExistsW

ole32

OleInitialize
CoUninitialize
CoInitialize
CoCreateInstance

oleaut32

SysAllocStringLen
VariantClear
SysAllocString
VariantInit
SysFreeString

msvcp90

??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBD@Z
?npos@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@2IB
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
?swap@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEXAAV12@@Z
?find_last_not_of@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBEIPB_WI@Z
?find_first_not_of@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBEIPB_WI@Z
?clear@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEXXZ
?erase@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV12@II@Z
??4?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV01@PB_W@Z
??4?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV01@ABV01@@Z
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@ABV01@@Z
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@XZ
??1?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@XZ

ws2_32

WSASetLastError
GetAddrInfoW
WSAStartup
WSACleanup
closesocket
WSACloseEvent
WSASocketW
WSAGetLastError
WSAConnect
WSAEnumNetworkEvents
WSAResetEvent
WSASend
WSAGetOverlappedResult
WSARecv
WSACreateEvent
WSASetEvent
WSAEventSelect
FreeAddrInfoW

boottime

ord2
GetSetupTime
ord1

gdiplus

GdipDisposeImage
GdipFree
GdiplusShutdown
GdipGetImageGraphicsContext
GdipDeleteGraphics
GdipDrawImageI
GdipCloneImage
GdipGetImageWidth
GdipGetImageHeight
GdipGetImagePixelFormat
GdipGetImagePaletteSize
GdipGetImagePalette
GdipCreateBitmapFromFile
GdipCreateBitmapFromScan0
GdipBitmapLockBits
GdipBitmapUnlockBits
GdiplusStartup
GdipAlloc

languages

ord5
ord3
ord6
ord8
ord4

config

ord13
ord11

Sections

.text
Size: 122KB - Virtual size: 121KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 38KB - Virtual size: 38KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 161KB - Virtual size: 161KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 17KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Backup/files/VisualStudio.VsWebProtocol
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Code Sign

33:00:00:03:4e:b5:3c:7a:c1:84:6f:eb:2b:00:00:00:00:03:4e
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

16-03-2023 18:43

Not After

14-03-2024 18:43

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08-07-2011 20:59

Not After

08-07-2026 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

5f:af:0c:58:d2:42:9a:e0:4a:81:ab:97:5c:6c:f6:e8:7d:30:0a:ad:18:b9:59:1c:3f:a4:76:78:f5:ef:fd:00
Signer

Actual PE Digest

5f:af:0c:58:d2:42:9a:e0:4a:81:ab:97:5c:6c:f6:e8:7d:30:0a:ad:18:b9:59:1c:3f:a4:76:78:f5:ef:fd:00

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

D:\dbs\el\ddvsm\out\Intermediate\appid\microsoft.visualstudio.vswebprotocolselector_x86Retail_E59B6BE4\Release\net472\Microsoft.VisualStudio.VsWebProtocolSelector.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 471KB - Virtual size: 470KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 179KB - Virtual size: 178KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Backup/files/ZBRpre-intsalled.phpt
.js
Backup/files/gmssl.phpt
Backup/files/wall.wsdl
.xml
Backup/gmssl.phpt
Backup/lang-1058.dll
.dll windows:6 windows x86 arch:x86

Code Sign

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

29-04-2021 00:00

Not After

28-04-2036 23:59

Subject

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

05:75:e1:f7:ec:9b:d8:a6:7a:3f:61:89:c6:3e:97:bb
Certificate

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Not Before

16-09-2022 00:00

Not After

17-09-2025 23:59

Subject

CN=PIRIFORM SOFTWARE LIMITED,O=PIRIFORM SOFTWARE LIMITED,L=London,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16
Certificate

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Not Before

14-07-2023 00:00

Not After

13-10-2034 23:59

Subject

CN=DigiCert Timestamp 2023,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

23-03-2022 00:00

Not After

22-03-2037 23:59

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01-08-2022 00:00

Not After

09-11-2031 23:59

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

79:ad:e0:64:e4:e6:2d:91:c0:f1:bf:7f:f7:1a:3d:a5:01:8f:45:2b:7e:ff:ba:4b:f0:59:d2:18:e7:a8:32:e4
Signer

Actual PE Digest

79:ad:e0:64:e4:e6:2d:91:c0:f1:bf:7f:f7:1a:3d:a5:01:8f:45:2b:7e:ff:ba:4b:f0:59:d2:18:e7:a8:32:e4

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.rdata
Size: 512B - Virtual size: 160B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 251KB - Virtual size: 250KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Backup/wall.wsdl
.xml
Read Me!.txt
bcod.phpt
open-64.dll
.dll windows:5 windows x64 arch:x64

102189c70f88ab5bc50aff1219eadbea

Code Sign

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

21-12-2012 00:00

Not After

30-12-2020 23:59

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

18-10-2012 00:00

Not After

29-12-2020 23:59

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

6c:59:ef:a9:e1:00:e1:0e:e3:06:ba:8f:e0:29:25:59
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

07-06-2012 00:00

Not After

06-06-2022 23:59

Subject

CN=Symantec Class 3 Extended Validation Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

35:a8:4f:a5:03:f8:9b:49:83:96:bb:48:91:68:a5:80
Certificate

Issuer

CN=Symantec Class 3 Extended Validation Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Not Before

14-01-2014 00:00

Not After

07-01-2016 23:59

Subject

SERIALNUMBER=2748129,CN=Adobe Systems Incorporated,OU=Photoshop\, Bridge - SHA256,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130844656c6177617265,1.3.6.1.4.1.311.60.2.1.3=#13025553

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

20:b9:3d:43:59:ff:c2:d6:82:e9:ea:e1:34:7d:29:9f:68:be:57:79
Signer

Actual PE Digest

20:b9:3d:43:59:ff:c2:d6:82:e9:ea:e1:34:7d:29:9f:68:be:57:79

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

E:\bslave-ngproducts\builddir\build\mc_adobe_sdk_dbginfo_win64_x64_release\mc_enc_mpa.pdb

Imports

kernel32

GetLastError
HeapFree
HeapAlloc
GetCurrentThreadId
FlsSetValue
GetCommandLineA
EncodePointer
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
HeapSetInformation
GetVersion
HeapCreate
HeapDestroy
GetProcAddress
GetModuleHandleW
ExitProcess
DecodePointer
WriteFile
GetStdHandle
GetModuleFileNameW
RtlUnwindEx
FlsGetValue
FlsFree
SetLastError
FlsAlloc
Sleep
SetHandleCount
InitializeCriticalSectionAndSpinCount
GetFileType
GetStartupInfoW
DeleteCriticalSection
GetModuleFileNameA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
LeaveCriticalSection
EnterCriticalSection
LoadLibraryW
RaiseException
HeapReAlloc
LCMapStringW
MultiByteToWideChar
GetStringTypeW
HeapSize

Exports

Exports

mpegOutAudioCheckFirst
mpegOutAudioCheckNext
mpegOutAudioCheckSettings
mpegOutAudioChkSettings
mpegOutAudioDefaults
mpegOutAudioDone
mpegOutAudioFree
mpegOutAudioGetAPIExt
mpegOutAudioGetLastErrString
mpegOutAudioInit
mpegOutAudioNew
mpegOutAudioPutBytes

Sections

.text
Size: 86KB - Virtual size: 86KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 19KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 111KB - Virtual size: 115KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

text
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE

data
Size: 25KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
pre-installed.dll
.exe windows:6 windows x86 arch:x86

a7e73ef2207e9ee97c678506145e1258

Code Sign

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

21-12-2012 00:00

Not After

30-12-2020 23:59

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

18-10-2012 00:00

Not After

29-12-2020 23:59

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

4f:be:0a:02:42:6e:bd:20:c2:62:44:b5:ec:a6:52:a3
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Not Before

09-07-2018 00:00

Not After

10-07-2019 23:59

Subject

CN=NVIDIA Corporation,OU=IT-MIS,O=NVIDIA Corporation,L=Santa Clara,ST=California,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

61:19:93:e4:00:00:00:00:00:1c
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

22-02-2011 19:25

Not After

22-02-2021 19:35

Subject

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

08-02-2010 00:00

Not After

07-02-2020 23:59

Subject

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

62:e7:45:e9:21:65:21:3c:97:1f:5c:49:0a:ea:12:a5
Certificate

Issuer

CN=Symantec Class 3 SHA256 Code Signing CA - G2,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Not Before

09-07-2018 00:00

Not After

09-07-2021 23:59

Subject

CN=NVIDIA Corporation,OU=IT-MIS,O=NVIDIA Corporation,L=Santa Clara,ST=California,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

7c:1b:35:35:4a:e7:db:74:e7:41:5f:11:69:ca:6b:a8
Certificate

Issuer

CN=VeriSign Universal Root Certification Authority,OU=VeriSign Trust Network+OU=(c) 2008 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

22-07-2014 00:00

Not After

21-07-2024 23:59

Subject

CN=Symantec Class 3 SHA256 Code Signing CA - G2,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

61:2d:23:cb:00:00:00:00:00:21
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

22-02-2011 19:46

Not After

22-02-2021 19:56

Subject

CN=VeriSign Universal Root Certification Authority,OU=VeriSign Trust Network+OU=(c) 2008 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

7b:05:b1:d4:49:68:51:44:f7:c9:89:d2:9c:19:9d:12
Certificate

Issuer

CN=VeriSign Universal Root Certification Authority,OU=VeriSign Trust Network+OU=(c) 2008 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

12-01-2016 00:00

Not After

11-01-2031 23:59

Subject

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

7b:d4:e5:af:ba:cc:07:3f:a1:01:23:04:22:41:4d:12
Certificate

Issuer

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Not Before

23-12-2017 00:00

Not After

22-03-2029 23:59

Subject

CN=Symantec SHA256 TimeStamping Signer - G3,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

54:cb:ab:94:75:80:97:ed:a8:bb:b7:bd:5b:5f:9b:d9:c4:b8:e5:05:1b:74:5b:83:60:86:a9:f7:ca:58:97:d7
Signer

Actual PE Digest

54:cb:ab:94:75:80:97:ed:a8:bb:b7:bd:5b:5f:9b:d9:c4:b8:e5:05:1b:74:5b:83:60:86:a9:f7:ca:58:97:d7

Digest Algorithm

sha256

PE Digest Matches

true

7f:01:56:fd:7c:3f:56:65:ab:41:e1:66:0d:22:36:1d:f4:00:d1:24
Signer

Actual PE Digest

7f:01:56:fd:7c:3f:56:65:ab:41:e1:66:0d:22:36:1d:f4:00:d1:24

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\dvs\p4\build\sw\rel\gpu_drv\r415\r415_00\drivers\stereo_vision\Apps\GeForce3DVisionSetupWizard\release\NvStWiz.pdb

Imports

user32

GetDesktopWindow
PostQuitMessage
GetUserObjectInformationW
SetCursor
LoadCursorW
TranslateMessage
OpenInputDesktop
ValidateRect
PeekMessageW
EnumDisplaySettingsExW
DestroyIcon
EnumDisplaySettingsW
CloseDesktop
ChangeDisplaySettingsW
ShowWindow
DestroyCursor
RegisterClassExW
SendMessageW
CreateWindowExW
MessageBoxW
DestroyWindow
DefWindowProcW
ChangeDisplaySettingsExW
UpdateWindow
LoadImageW
SetCursorPos
DispatchMessageW
GetCursorPos

shell32

SHGetFolderPathW
ShellExecuteW
SHGetKnownFolderPath

ole32

CoTaskMemFree
CreateStreamOnHGlobal
CoCreateInstance
CoUninitialize
CoInitialize

d3d9

Direct3DCreate9

d3d10

D3D10CreateDevice

gdiplus

GdipLoadImageFromStream
GdipSetStringFormatFlags
GdipGetImageWidth
GdipSetStringFormatAlign
GdiplusStartup
GdipCreatePen1
GdipCreateStringFormat
GdipDeleteFontFamily
GdipGetImageHeight
GdipSetImageAttributesColorMatrix
GdipDeleteFont
GdipSetCompositingMode
GdipDeleteStringFormat
GdipDeleteGraphics
GdiplusShutdown
GdipMeasureString
GdipCloneBrush
GdipSetTextRenderingHint
GdipCreateFromHDC
GdipDrawString
GdipFree
GdipGetGenericFontFamilySansSerif
GdipCreateImageAttributes
GdipDrawLine
GdipCreateSolidFill
GdipCreateFont
GdipDisposeImage
GdipDisposeImageAttributes
GdipDrawImageRectI
GdipAlloc
GdipDeleteBrush
GdipCloneImage
GdipDrawImageRectRect
GdipCreateFontFamilyFromName
GdipDeletePen

kernel32

GetConsoleCP
FlushFileBuffers
SetStdHandle
GetProcessHeap
LCMapStringW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCPInfo
GetOEMCP
IsValidCodePage
FindNextFileA
FindFirstFileExA
GetStringTypeW
GetFileType
HeapAlloc
HeapFree
GetACP
WriteFile
GetStdHandle
HeapSize
MultiByteToWideChar
GetModuleFileNameA
GetModuleHandleExW
ExitProcess
GetCommandLineW
GetCommandLineA
EncodePointer
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
InitializeCriticalSectionAndSpinCount
RaiseException
RtlUnwind
InitializeSListHead
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
GetStartupInfoW
IsDebuggerPresent
IsProcessorFeaturePresent
TerminateProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
WaitForSingleObjectEx
ResetEvent
SetEvent
GetConsoleMode
HeapReAlloc
SetFilePointerEx
SetEndOfFile
ReadFile
ReadConsoleW
DecodePointer
WideCharToMultiByte
SizeofResource
FindFirstFileW
GetSystemDefaultLCID
FindNextFileW
lstrcpynW
GetThreadLocale
GetUserDefaultUILanguage
GetTempPathW
FindClose
GetLocaleInfoW
GetFileAttributesW
GetVersionExW
GetSystemDirectoryW
FreeResource
CreateEventW
Sleep
GetLastError
LockResource
GlobalAlloc
GlobalFree
CloseHandle
LoadLibraryW
FindResourceExW
LoadResource
FindResourceW
GetProcAddress
GlobalLock
WriteConsoleW
FreeLibrary
lstrcmpiW
GlobalUnlock
LoadLibraryExW
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
VerSetConditionMask
ExpandEnvironmentStringsW
CreateFileW
GetFullPathNameW
SetLastError
GetCurrentProcess
GetModuleHandleA
LocalAlloc
LocalFree
lstrcmpW
VerifyVersionInfoW
GetModuleHandleW

advapi32

RegQueryValueExW
RegOpenKeyExA
InitializeSecurityDescriptor
RegSetValueExA
RegQueryValueExA
RegCloseKey
SetSecurityDescriptorDacl
RegOpenKeyExW

Sections

.text
Size: 182KB - Virtual size: 182KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 62KB - Virtual size: 62KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 152KB - Virtual size: 151KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 15KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
setup.exe
.exe windows:5 windows x86 arch:x86

841df9baf321574d4449d661fcc4a66a

Code Sign

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

21-12-2012 00:00

Not After

30-12-2020 23:59

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

18-10-2012 00:00

Not After

29-12-2020 23:59

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

14:78:1b:c8:62:e8:dc:50:3a:55:93:46:f5:dc:c5:18
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Not Before

28-07-2015 00:00

Not After

26-07-2018 23:59

Subject

CN=NVIDIA Corporation,O=NVIDIA Corporation,L=SANTA CLARA,ST=California,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

61:19:93:e4:00:00:00:00:00:1c
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

22-02-2011 19:25

Not After

22-02-2021 19:35

Subject

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

08-02-2010 00:00

Not After

07-02-2020 23:59

Subject

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

7b:c1:5a:f2:13:67:d0:75:8b:ed:dc:ca:11:86:42:de
Certificate

Issuer

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Not Before

13-07-2015 00:00

Not After

13-07-2018 23:59

Subject

CN=NVIDIA Corporation,OU=IT MIIS,O=NVIDIA Corporation,L=Santa Clara,ST=California,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

3d:78:d7:f9:76:49:60:b2:61:7d:f4:f0:1e:ca:86:2a
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

10-12-2013 00:00

Not After

09-12-2023 23:59

Subject

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

61:19:93:e4:00:00:00:00:00:1c
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

22-02-2011 19:25

Not After

22-02-2021 19:35

Subject

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

32:58:e8:ee:54:af:5c:27
Certificate

Issuer

CN=Starfield Services Root Certificate Authority,OU=http://certificates.starfieldtech.com/repository/,O=Starfield Technologies\, Inc.,L=Scottsdale,ST=Arizona,C=US

Not Before

13-12-2016 07:00

Not After

13-12-2021 07:00

Subject

CN=Starfield Services Timestamp Authority - G1,O=Starfield Technologies\, Inc.,L=Scottsdale,ST=Arizona,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

eb:a0:9a:92:87:fe:05:4d:80:b3:75:a0:f2:61:43:48:80:d4:f6:8a:65:8f:de:4b:67:e3:c8:d4:1b:de:1c:b8
Signer

Actual PE Digest

eb:a0:9a:92:87:fe:05:4d:80:b3:75:a0:f2:61:43:48:80:d4:f6:8a:65:8f:de:4b:67:e3:c8:d4:1b:de:1c:b8

Digest Algorithm

sha256

PE Digest Matches

false

e6:d2:25:8e:d4:f9:10:6a:96:70:7c:d1:e1:09:6a:c1:a6:ba:e1:46
Signer

Actual PE Digest

e6:d2:25:8e:d4:f9:10:6a:96:70:7c:d1:e1:09:6a:c1:a6:ba:e1:46

Digest Algorithm

sha1

PE Digest Matches

false

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_BYTES_REVERSED_HI

Imports

mpr

WNetGetUniversalNameW

winmm

timeGetTime

shlwapi

SHCreateStreamOnFileW

winspool.drv

DocumentPropertiesW
ClosePrinter
OpenPrinterW
GetDefaultPrinterW
EnumPrintersW

comctl32

ImageList_GetImageInfo
FlatSB_SetScrollInfo
InitCommonControls
ImageList_DragMove
ImageList_Destroy
_TrackMouseEvent
ImageList_DragShowNolock
ImageList_Add
FlatSB_SetScrollProp
ImageList_GetDragImage
ImageList_Create
ImageList_EndDrag
ImageList_DrawEx
ImageList_SetImageCount
FlatSB_GetScrollPos
FlatSB_SetScrollPos
InitializeFlatSB
ImageList_Copy
FlatSB_GetScrollInfo
ImageList_Write
ImageList_DrawIndirect
ImageList_SetBkColor
ImageList_GetBkColor
ImageList_BeginDrag
ImageList_GetIcon
ImageList_Replace
ImageList_GetImageCount
ImageList_DragEnter
ImageList_GetIconSize
ImageList_SetIconSize
ImageList_Read
ImageList_DragLeave
ImageList_LoadImageW
ImageList_Draw
ImageList_Remove
ImageList_ReplaceIcon
ImageList_SetOverlayImage

shell32

Shell_NotifyIconW
ShellExecuteW

user32

CopyImage
SetMenuItemInfoW
GetMenuItemInfoW
SetCaretPos
GetCaretPos
DefFrameProcW
ScrollWindowEx
GetDlgCtrlID
FrameRect
RegisterWindowMessageW
GetMenuStringW
FillRect
SendMessageA
IsClipboardFormatAvailable
EnumWindows
ShowOwnedPopups
GetClassInfoW
GetScrollRange
SetActiveWindow
GetActiveWindow
DrawEdge
GetKeyboardLayoutList
LoadBitmapW
EnumChildWindows
GetScrollBarInfo
UnhookWindowsHookEx
SetCapture
GetCapture
ShowCaret
CreatePopupMenu
GetMenuItemID
DestroyCaret
CharLowerBuffW
PostMessageW
SetWindowLongW
IsZoomed
SetParent
DrawMenuBar
GetClientRect
IsChild
IsIconic
CallNextHookEx
ShowWindow
GetWindowTextW
SetForegroundWindow
IsDialogMessageW
DestroyWindow
RegisterClassW
EndMenu
CharNextW
GetFocus
GetDC
SetFocus
ReleaseDC
GetClassLongW
SetScrollRange
DrawTextW
PeekMessageA
MessageBeep
SetClassLongW
RemovePropW
GetSubMenu
DestroyIcon
IsWindowVisible
DispatchMessageA
UnregisterClassW
GetTopWindow
SendMessageW
GetMessageTime
LoadStringW
CreateMenu
CharLowerW
SetWindowRgn
SetWindowPos
GetMenuItemCount
GetSysColorBrush
GetWindowDC
DrawTextExW
EnumClipboardFormats
GetScrollInfo
SetWindowTextW
GetMessageExtraInfo
GetSysColor
EnableScrollBar
TrackPopupMenu
DrawIconEx
GetClassNameW
GetMessagePos
GetIconInfo
SetScrollInfo
GetKeyNameTextW
GetDesktopWindow
SetCursorPos
GetCursorPos
SetMenu
GetMenuState
GetMenu
SetRect
GetKeyState
ValidateRect
IsCharAlphaW
GetCursor
KillTimer
WaitMessage
TranslateMDISysAccel
GetWindowPlacement
CreateIconIndirect
CreateWindowExW
ChildWindowFromPoint
GetMessageW
GetDCEx
PeekMessageW
MonitorFromWindow
SetTimer
WindowFromPoint
BeginPaint
RegisterClipboardFormatW
MapVirtualKeyW
OffsetRect
IsWindowUnicode
DispatchMessageW
CreateAcceleratorTableW
DefMDIChildProcW
GetSystemMenu
SetScrollPos
GetScrollPos
DrawFocusRect
ReleaseCapture
LoadCursorW
ScrollWindow
GetLastActivePopup
GetSystemMetrics
CharUpperBuffW
SetClipboardData
GetClipboardData
ClientToScreen
SetWindowPlacement
GetMonitorInfoW
CheckMenuItem
CharUpperW
DefWindowProcW
GetForegroundWindow
EnableWindow
GetWindowThreadProcessId
RedrawWindow
EndPaint
MsgWaitForMultipleObjectsEx
LoadKeyboardLayoutW
ActivateKeyboardLayout
GetParent
CreateCaret
MonitorFromRect
InsertMenuItemW
GetPropW
MessageBoxW
SetPropW
UpdateWindow
MsgWaitForMultipleObjects
DestroyMenu
SetWindowsHookExW
GetDoubleClickTime
EmptyClipboard
AdjustWindowRectEx
IsWindow
DrawIcon
EnumThreadWindows
InvalidateRect
SetKeyboardState
GetKeyboardState
ScreenToClient
DrawFrameControl
IsCharAlphaNumericW
SetCursor
CreateIcon
RemoveMenu
GetKeyboardLayoutNameW
OpenClipboard
TranslateMessage
MapWindowPoints
EnumDisplayMonitors
CallWindowProcW
CountClipboardFormats
CloseClipboard
DestroyCursor
CopyIcon
PostQuitMessage
ShowScrollBar
EnableMenuItem
HideCaret
FindWindowExW
MonitorFromPoint
LoadIconW
SystemParametersInfoW
GetWindow
GetWindowRect
GetWindowLongW
InsertMenuW
PostThreadMessageW
IsWindowEnabled
IsDialogMessageA
FindWindowW
GetKeyboardLayout
DeleteMenu

version

GetFileVersionInfoSizeW
VerQueryValueW
GetFileVersionInfoW

oleaut32

SafeArrayPutElement
LoadTypeLib
VariantClear
SysReAllocStringLen
DispGetIDsOfNames
CreateErrorInfo
GetActiveObject
SafeArrayGetLBound
SafeArrayGetUBound
VariantCopy
SafeArrayAccessData
SysFreeString
VariantInit
GetErrorInfo
SetErrorInfo
SafeArrayCreate
SafeArrayGetElement
SafeArrayUnaccessData
SysAllocStringLen
SafeArrayPtrOfIndex
DispInvoke
RegisterTypeLib
VariantChangeType
VariantCopyInd

msvcrt

memcpy
memset

advapi32

CloseServiceHandle
RegSetValueExW
RegSetValueExA
ControlService
RegConnectRegistryW
CreateServiceW
StartServiceCtrlDispatcherW
DeregisterEventSource
RegQueryInfoKeyW
SetServiceStatus
RegUnLoadKeyW
RegSaveKeyW
DeleteService
StartServiceW
RegReplaceKeyW
RegisterEventSourceW
RegCreateKeyExW
RegisterServiceCtrlHandlerW
OpenServiceW
RevertToSelf
RegLoadKeyW
RegEnumKeyExW
QueryServiceStatus
AdjustTokenPrivileges
RegDeleteKeyW
LookupPrivilegeValueW
OpenSCManagerW
RegOpenKeyExW
OpenProcessToken
RegDeleteValueW
ReportEventW
RegNotifyChangeKeyValue
RegFlushKey
RegQueryValueExW
RegQueryValueExA
RegEnumValueW
RegCloseKey
RegRestoreKeyW

netapi32

NetWkstaGetInfo
NetApiBufferFree

kernel32

GetFileType
QueryDosDeviceW
Process32FirstW
GetACP
CloseHandle
LocalFree
GetCurrentProcessId
SizeofResource
VirtualProtect
CreateSemaphoreW
SetEnvironmentVariableW
QueryPerformanceFrequency
SetProcessWorkingSetSize
IsDebuggerPresent
FindNextFileW
GetFullPathNameW
VirtualFree
HeapAlloc
ExitProcess
GetCPInfoExW
GlobalSize
GetSystemTime
RtlUnwind
GetCPInfo
EnumSystemLocalesW
CreateWaitableTimerW
GetStdHandle
GetTimeZoneInformation
FileTimeToLocalFileTime
GetModuleHandleW
FreeLibrary
TryEnterCriticalSection
HeapDestroy
FileTimeToDosDateTime
ReadFile
GetUserDefaultLCID
GetLastError
GetModuleFileNameW
SetLastError
GlobalAlloc
GlobalUnlock
FindResourceW
OpenMutexW
CreateThread
CompareStringW
MapViewOfFile
CreateMutexW
LoadLibraryA
ResetEvent
MulDiv
FreeResource
GetVersion
RaiseException
MoveFileW
GlobalAddAtomW
FormatMessageW
OpenProcess
SwitchToThread
GetExitCodeThread
GetCurrentThread
ExpandEnvironmentStringsW
LoadLibraryExW
TerminateProcess
LockResource
GetShortPathNameW
GetCurrentThreadId
UnhandledExceptionFilter
GlobalFindAtomW
VirtualQuery
GlobalFree
VirtualQueryEx
Sleep
EnterCriticalSection
SetFilePointer
ReleaseMutex
LoadResource
SuspendThread
GetTickCount
WaitForMultipleObjects
GetTempFileNameW
GetFileSize
GlobalDeleteAtom
GetStartupInfoW
GetFileAttributesW
InitializeCriticalSection
GetThreadPriority
GetCurrentProcess
GlobalLock
SetThreadPriority
VirtualAlloc
GetTempPathW
GetCommandLineW
GetSystemInfo
DuplicateHandle
LeaveCriticalSection
GetProcAddress
ResumeThread
SetWaitableTimer
GetVersionExW
GetModuleHandleA
VerifyVersionInfoW
HeapCreate
DeviceIoControl
GetDiskFreeSpaceW
VerSetConditionMask
FindFirstFileW
GetUserDefaultUILanguage
GetConsoleOutputCP
UnmapViewOfFile
GetConsoleCP
GlobalHandle
Process32NextW
lstrlenW
SetEndOfFile
QueryPerformanceCounter
lstrcmpW
HeapFree
WideCharToMultiByte
FindClose
MultiByteToWideChar
CreateToolhelp32Snapshot
LoadLibraryW
SetEvent
ReleaseSemaphore
GetLocaleInfoW
CreateFileW
EnumResourceNamesW
DeleteFileW
IsDBCSLeadByteEx
GetEnvironmentVariableW
GetLocalTime
WaitForSingleObject
GetSystemPowerStatus
Module32FirstW
WriteFile
CreateFileMappingW
ExitThread
DeleteCriticalSection
GetDateFormatW
TlsGetValue
SetErrorMode
GetComputerNameW
PulseEvent
IsValidLocale
TlsSetValue
CreateDirectoryW
GetSystemDefaultUILanguage
EnumCalendarInfoW
LocalAlloc
RemoveDirectoryW
SetConsoleCtrlHandler
CreateEventW
WaitForMultipleObjectsEx
GetThreadLocale
SetThreadLocale

shfolder

SHGetFolderPathW

ole32

OleRegEnumVerbs
StgCreateDocfile
CoCreateGuid
CoCreateInstance
CLSIDFromString
IsEqualGUID
CreateStreamOnHGlobal
CLSIDFromProgID
CoGetClassObject
CoInitialize
OleDraw
CoTaskMemAlloc
StringFromCLSID
CoMarshalInterThreadInterfaceInStream
CoRevokeClassObject
IsAccelerator
CoGetInterfaceAndReleaseStream
CoRegisterClassObject
CoUninitialize
StgOpenStorage
CoLockObjectExternal
OleInitialize
ProgIDFromCLSID
CoInitializeEx
OleUninitialize
CoDisconnectObject
StgIsStorageFile
CoImpersonateClient
CoInitializeSecurity
CoTaskMemFree
OleSetMenuDescriptor

gdi32

Pie
SetBkMode
CreateCompatibleBitmap
GetEnhMetaFileHeader
CloseEnhMetaFile
RectVisible
AngleArc
ResizePalette
SetAbortProc
SetTextColor
StretchBlt
RoundRect
SelectClipRgn
RestoreDC
SetRectRgn
GetTextMetricsW
GetWindowOrgEx
CreatePalette
CreateDCW
PolyBezierTo
CreateICW
GetStockObject
CreateSolidBrush
Polygon
MoveToEx
PlayEnhMetaFile
Ellipse
StartPage
GetBitmapBits
StartDocW
AbortDoc
GetSystemPaletteEntries
GetEnhMetaFileBits
GetEnhMetaFilePaletteEntries
CreatePenIndirect
SetMapMode
CreateFontIndirectW
PolyBezier
ExtCreatePen
LPtoDP
GetNearestColor
EndDoc
GetObjectW
GetCharWidthW
GetWinMetaFileBits
SetROP2
GetOutlineTextMetricsW
GetEnhMetaFileDescriptionW
ArcTo
CreateEnhMetaFileW
Arc
SelectPalette
ExcludeClipRect
MaskBlt
SetWindowOrgEx
EndPage
DeleteEnhMetaFile
Chord
SetDIBits
SetViewportOrgEx
CreateRectRgn
RealizePalette
SetDIBColorTable
GetDIBColorTable
CreateBrushIndirect
PatBlt
SetEnhMetaFileBits
Rectangle
SaveDC
DeleteDC
BitBlt
FrameRgn
GetDeviceCaps
GetTextExtentPoint32W
GetClipBox
IntersectClipRect
Polyline
CreateBitmap
SetWinMetaFileBits
GetStretchBltMode
CreateDIBitmap
CreateDIBSection
SetStretchBltMode
GetDIBits
LineTo
GetRgnBox
EnumFontsW
SetWindowExtEx
CreateHalftonePalette
SelectObject
DeleteObject
ExtFloodFill
UnrealizeObject
CopyEnhMetaFileW
SetBkColor
CreateCompatibleDC
GetBrushOrgEx
GetCurrentPositionEx
GetNearestPaletteIndex
GetTextExtentPointW
ExtTextOutW
SetBrushOrgEx
GetPixel
GdiFlush
SetViewportExtEx
SetPixel
PolyPolyline
EnumFontFamiliesExW
StretchDIBits
GetPaletteEntries

Exports

Exports

TMethodImplementationIntercept
__dbk_fcall_wrapper
dbkFCallWrapperAddr

Sections

.text
Size: 4.3MB - Virtual size: 4.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.itext
Size: 25KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 61KB - Virtual size: 60KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 32KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.didata
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 156B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tls
Size: - Virtual size: 84B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 93B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 294KB - Virtual size: 294KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.debug
Size: 11.9MB - Virtual size: 11.9MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
𝙵𝚒𝚕𝚎 𝙿𝚊𝚜𝚜𝚠𝚘𝚛𝚍 = 𝟸𝟶𝟸𝟻.rtf
.rtf

Resubmissions

Sharing

General

Malware Config

Signatures

Files

Password: 2025

Password: 2025

Password: 2025

Password: 2025

36da04e9d80185202c5dff27d69487ef

Headers

File Characteristics

Imports

mfc42

msvcrt

kernel32

user32

gdi32

advapi32

shell32

ole32

oleaut32

rpcrt4

Exports

Exports

Sections

.text Size: 20KB - Virtual size: 16KB

.orpc Size: 4KB - Virtual size: 89B

.rdata Size: 12KB - Virtual size: 10KB

.data Size: 4KB - Virtual size: 5KB

.rsrc Size: 8KB - Virtual size: 7KB

.reloc Size: 4KB - Virtual size: 1KB

Password: 2025

eea1a54f9a41b7445dc95356daf71d0a

Headers

File Characteristics

Imports

kernel32

msvcrt

Exports

Exports

Sections

.text Size: 17KB - Virtual size: 17KB

.rdata Size: 11KB - Virtual size: 10KB

.data Size: 1024B - Virtual size: 1KB

.reloc Size: 1KB - Virtual size: 1KB

Password: 2025

ce6ef31899b31809ae0c71c094c6f083

Headers

File Characteristics

Imports

mfc42

msvcrt

Sections

.text Size: 512B - Virtual size: 480B

.rdata Size: 512B - Virtual size: 308B

.data Size: 512B - Virtual size: 76B

.rsrc Size: 732KB - Virtual size: 731KB

.reloc Size: 512B - Virtual size: 420B

Password: 2025

629fae0a56e3262e208711dda6ae6b1d

Code Sign

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3bCertificate

Extended Key Usages

Key Usages

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50Certificate

Extended Key Usages

Key Usages

52:9e:3f:9f:cf:7d:58:d5:20:d6:07:ab:74:39:50:02Certificate

Extended Key Usages

Key Usages

27:66:ee:56:eb:49:f3:8e:ab:d7:70:a2:fc:84:de:22Certificate

Key Usages

2e:7c:87:cc:0e:93:4a:52:fe:94:fd:1c:b7:cd:34:afCertificate

Extended Key Usages

Key Usages

52:9e:3f:9f:cf:7d:58:d5:20:d6:07:ab:74:39:50:02Certificate

Extended Key Usages

Key Usages

.text
Size: 20KB - Virtual size: 16KB

.orpc
Size: 4KB - Virtual size: 89B

.rdata
Size: 12KB - Virtual size: 10KB

.data
Size: 4KB - Virtual size: 5KB

.rsrc
Size: 8KB - Virtual size: 7KB

.reloc
Size: 4KB - Virtual size: 1KB

.text
Size: 17KB - Virtual size: 17KB

.rdata
Size: 11KB - Virtual size: 10KB

.data
Size: 1024B - Virtual size: 1KB

.reloc
Size: 1KB - Virtual size: 1KB

.text
Size: 512B - Virtual size: 480B

.rdata
Size: 512B - Virtual size: 308B

.data
Size: 512B - Virtual size: 76B

.rsrc
Size: 732KB - Virtual size: 731KB

.reloc
Size: 512B - Virtual size: 420B

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

52:9e:3f:9f:cf:7d:58:d5:20:d6:07:ab:74:39:50:02
Certificate

27:66:ee:56:eb:49:f3:8e:ab:d7:70:a2:fc:84:de:22
Certificate

2e:7c:87:cc:0e:93:4a:52:fe:94:fd:1c:b7:cd:34:af
Certificate

52:9e:3f:9f:cf:7d:58:d5:20:d6:07:ab:74:39:50:02
Certificate

27:66:ee:56:eb:49:f3:8e:ab:d7:70:a2:fc:84:de:22
Certificate

2e:7c:87:cc:0e:93:4a:52:fe:94:fd:1c:b7:cd:34:af
Certificate

7b:05:b1:d4:49:68:51:44:f7:c9:89:d2:9c:19:9d:12
Certificate

7b:d4:e5:af:ba:cc:07:3f:a1:01:23:04:22:41:4d:12
Certificate

ca:05:77:9a:83:94:f1:c2:84:3b:d1:35:92:02:9e:08:73:69:34:94:e8:62:49:32:6d:ca:10:c8:55:9e:d9:9b
Signer

ed:14:78:6d:47:d9:55:27:5a:d1:dd:f1:22:3e:ed:fc:47:98:f7:f9
Signer

.text
Size: 203KB - Virtual size: 203KB

.rdata
Size: 61KB - Virtual size: 60KB

.data
Size: 4KB - Virtual size: 136KB

.pdata
Size: 10KB - Virtual size: 9KB

.gfids
Size: 512B - Virtual size: 208B

.rsrc
Size: 152KB - Virtual size: 156KB

.reloc
Size: 2KB - Virtual size: 1KB

04:00:00:00:00:01:2f:4e:e1:52:d7
Certificate

04:00:00:00:00:01:2f:4e:e1:35:5c
Certificate

11:21:d6:99:a7:64:97:3e:f1:f8:42:7e:e9:19:cc:53:41:14
Certificate

11:21:32:2d:39:bd:45:ac:62:3d:37:5b:22:c2:43:d6:07:6b
Certificate

04:00:00:00:00:01:25:07:1d:f9:af
Certificate

48:1b:6a:07:26:d2:e8:3f:26:02:d4:82:5a:cd
Certificate

16:98:0f:59:4c:d4:ee:7b:44:e0:8d:bb
Certificate

11:21:b4:55:35:1e:bb:1a:b2:4f:97:ef:07:fe:2a:b3:0b:8a
Certificate

04:00:00:00:00:01:2f:4e:e1:52:d7
Certificate

56:33:a8:5c:fd:08:d1:07:b4:19:5c:8c:4e:4f:aa:0d:61:82:2c:4e:c7:2b:cd:48:76:75:68:4e:98:8d:d9:75
Signer

f9:b1:33:5f:66:ed:06:7c:40:bb:f3:ad:cf:3d:6f:fd:35:14:53:b9
Signer