setup[.]exe | Triage

Sharing

Copy URL

Twitter E-mail

General

Target

setup.exe
Size

12.3MB
MD5

76954d7dbf005d6db5e38d64f25a8c20
SHA1

054ad10803aa95f512a2c56293be7d1a287696f7
SHA256

e9e2eb114941f9f9157b4fb139e5588665fb89b709df82d4a8346ae66ccf03e1
SHA512

49e77880255470096830059bda1baf1d955f7f33659118995495aa6a6e090e32c798a8568504f213a90c4d3c3c81db41c22c54359d0689adb7b233c96c4fff4a
SSDEEP

196608:UNxQRuR6vMEQO4voQ0HrBGQIPvunb5VVAc6ysyl/8gl32tVT2rZ7MibIZDey1Iju:+QuRAJrlXbPVcysyl/8osIrZVil71

Score

3^/10

Malware Config

Signatures

Unsigned PE 115 IoCs

Checks for missing Authenticode signature.

Processes:

resource
unpack001/$PLUGINSDIR/Dialer.dll
unpack001/$PLUGINSDIR/KillProcDLL.dll
unpack001/$PLUGINSDIR/LangDLL.dll
unpack001/$PLUGINSDIR/System.dll
unpack001/$PLUGINSDIR/execDos.dll
unpack001/$PLUGINSDIR/extstrip.dll
unpack001/$PLUGINSDIR/nsDialogs.dll
unpack001/$PLUGINSDIR/nsExec.dll
unpack001/$PLUGINSDIR/nsis_winamp.dll
unpack001/Components/ssdp.w6c
unpack001/Plugins/ReplayGainAnalysis.dll
unpack001/Plugins/dsp_sps.dll
unpack001/Plugins/enc_fhgaac.dll
unpack001/Plugins/enc_flac.dll
unpack001/Plugins/enc_lame.dll
unpack001/Plugins/enc_vorbis.dll
unpack001/Plugins/enc_wav.dll
unpack001/Plugins/enc_wma.dll
unpack001/Plugins/freeform/wacs/freetype/freetype.wac
unpack001/Plugins/gen_crasher.dll
unpack001/Plugins/gen_ff.dll
unpack001/Plugins/gen_hotkeys.dll
unpack001/Plugins/gen_jumpex.dll
unpack001/Plugins/gen_ml.dll
unpack001/Plugins/gen_tray.dll
unpack001/Plugins/in_avi.dll
unpack001/Plugins/in_cdda.dll
unpack001/Plugins/in_dshow.dll
unpack001/Plugins/in_flac.dll
unpack001/Plugins/in_flv.dll
unpack001/Plugins/in_midi.dll
unpack001/Plugins/in_mkv.dll
unpack001/Plugins/in_mod.dll
unpack001/Plugins/in_mp3.dll
unpack001/Plugins/in_mp4.dll
unpack001/Plugins/in_nsv.dll
unpack001/Plugins/in_swf.dll
unpack001/Plugins/in_vorbis.dll
unpack001/Plugins/in_wave.dll
unpack001/Plugins/in_wm.dll
unpack001/Plugins/lame_enc.dll
unpack001/Plugins/ml_autotag.dll
unpack001/Plugins/ml_bookmarks.dll
unpack001/Plugins/ml_devices.dll
unpack001/Plugins/ml_disc.dll
unpack001/Plugins/ml_downloads.dll
unpack001/Plugins/ml_history.dll
unpack001/Plugins/ml_impex.dll
unpack001/Plugins/ml_local.dll
unpack001/Plugins/ml_nowplaying.dll
unpack001/Plugins/ml_online.dll
unpack001/Plugins/ml_playlists.dll
unpack001/Plugins/ml_plg.dll
unpack001/Plugins/ml_pmp.dll
unpack001/Plugins/ml_rg.dll
unpack001/Plugins/ml_transcode.dll
unpack001/Plugins/ml_wire.dll
unpack001/Plugins/nsvdec_vp3.dll
unpack001/Plugins/nsvdec_vp5.dll
unpack001/Plugins/out_disk.dll
unpack001/Plugins/out_ds.dll
unpack001/Plugins/out_wave.dll
unpack001/Plugins/pmp_activesync.dll
unpack001/Plugins/pmp_android.dll

Files

setup.exe
.exe windows:5 windows x86 arch:x86

Password: 123456

32f3282581436269b3a75b6675fe3e08

Code Sign

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

21-12-2012 00:00

Not After

30-12-2020 23:59

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

07
Certificate

Issuer

CN=America Online Root Certification Authority 1,O=America Online Inc.,C=US

Not Before

04-06-2004 17:26

Not After

04-06-2029 17:26

Subject

CN=AOL Member CA,O=America Online Inc.,L=Dulles,ST=Virginia,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

5a:a8:c9:c3:87:71:9f:49:a1:6a:f2:40:65:56:55:50
Certificate

Issuer

CN=AOL Member CA,O=America Online Inc.,L=Dulles,ST=Virginia,C=US

Not Before

15-03-2011 18:25

Not After

14-03-2016 18:25

Subject

CN=Nullsoft Inc.,OU=Winamp,O=Nullsoft Inc.,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

18-10-2012 00:00

Not After

29-12-2020 23:59

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

15:95:27:e2:e2:93:a9:15:ec:97:8a:e8:4c:96:7a:af:6e:22:98:fc
Signer

Actual PE Digest

15:95:27:e2:e2:93:a9:15:ec:97:8a:e8:4c:96:7a:af:6e:22:98:fc

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetFileTime
CompareFileTime
SearchPathW
GetShortPathNameW
GetFullPathNameW
MoveFileW
SetCurrentDirectoryW
GetFileAttributesW
GetLastError
CreateDirectoryW
SetFileAttributesW
Sleep
GetTickCount
CreateFileW
GetFileSize
GetModuleFileNameW
GetCurrentProcess
CopyFileW
ExitProcess
GetWindowsDirectoryW
GetTempPathW
GetCommandLineW
SetErrorMode
CloseHandle
lstrlenW
lstrcpynW
GetDiskFreeSpaceW
GlobalUnlock
GlobalLock
CreateThread
LoadLibraryW
CreateProcessW
lstrcmpiA
GetTempFileNameW
lstrcatW
GetProcAddress
LoadLibraryA
GetModuleHandleA
OpenProcess
lstrcpyW
GetVersionExW
GetSystemDirectoryW
GetVersion
lstrcpyA
RemoveDirectoryW
lstrcmpA
lstrcmpiW
lstrcmpW
ExpandEnvironmentStringsW
GlobalAlloc
WaitForSingleObject
GetExitCodeProcess
GlobalFree
GetModuleHandleW
LoadLibraryExW
FreeLibrary
WritePrivateProfileStringW
GetPrivateProfileStringW
WideCharToMultiByte
lstrlenA
MulDiv
WriteFile
ReadFile
MultiByteToWideChar
SetFilePointer
FindClose
FindNextFileW
FindFirstFileW
DeleteFileW
lstrcpynA

user32

GetAsyncKeyState
IsDlgButtonChecked
ScreenToClient
GetMessagePos
CallWindowProcW
IsWindowVisible
LoadBitmapW
CloseClipboard
SetClipboardData
EmptyClipboard
OpenClipboard
TrackPopupMenu
GetWindowRect
AppendMenuW
CreatePopupMenu
GetSystemMetrics
EndDialog
EnableMenuItem
GetSystemMenu
SetClassLongW
IsWindowEnabled
SetWindowPos
DialogBoxParamW
CheckDlgButton
CreateWindowExW
SystemParametersInfoW
RegisterClassW
SetDlgItemTextW
GetDlgItemTextW
MessageBoxIndirectW
CharNextA
CharUpperW
CharPrevW
wvsprintfW
DispatchMessageW
PeekMessageW
wsprintfA
DestroyWindow
CreateDialogParamW
SetTimer
SetWindowTextW
PostQuitMessage
SetForegroundWindow
ShowWindow
wsprintfW
SendMessageTimeoutW
LoadCursorW
SetCursor
GetWindowLongW
GetSysColor
CharNextW
GetClassInfoW
ExitWindowsEx
IsWindow
GetDlgItem
SetWindowLongW
LoadImageW
GetDC
EnableWindow
InvalidateRect
SendMessageW
DefWindowProcW
BeginPaint
GetClientRect
FillRect
DrawTextW
EndPaint
FindWindowExW

gdi32

SetBkColor
GetDeviceCaps
DeleteObject
CreateBrushIndirect
CreateFontIndirectW
SetBkMode
SetTextColor
SelectObject

shell32

SHBrowseForFolderW
SHGetPathFromIDListW
SHGetFileInfoW
ShellExecuteW
SHFileOperationW
SHGetSpecialFolderLocation

advapi32

RegEnumKeyW
RegOpenKeyExW
RegCloseKey
RegDeleteKeyW
RegDeleteValueW
RegCreateKeyExW
RegSetValueExW
RegQueryValueExW
RegEnumValueW

comctl32

ImageList_AddMasked
ImageList_Destroy
ord17
ImageList_Create

ole32

CoTaskMemFree
OleInitialize
OleUninitialize
CoCreateInstance

version

GetFileVersionInfoSizeW
GetFileVersionInfoW
VerQueryValueW

Sections

.text
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 415KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ndata
Size: - Virtual size: 2.0MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 189KB - Virtual size: 189KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$PLUGINSDIR/Dialer.dll
.dll windows:5 windows x86 arch:x86

Password: 123456

08b0635362e7aeb50569ca1a61d5a13f

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetProcAddress
LoadLibraryW
FreeLibrary
lstrcpynW
GlobalAlloc

Exports

Exports

AttemptConnect
AutodialHangup
AutodialOnline
AutodialUnattended
GetConnectedState

Sections

.text
Size: 1024B - Virtual size: 571B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 551B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 210B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$PLUGINSDIR/KillProcDLL.dll
.dll windows:5 windows x86 arch:x86

Password: 123456

546198d07fec5699a0cbb9e36bbd921c

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

shlwapi

PathFindFileNameW
StrToIntExW

kernel32

FreeLibrary
CloseHandle
GetProcAddress
HeapAlloc
HeapFree
GetProcessHeap
GlobalAlloc
GetVersionExW
lstrcpynW
GlobalFree
lstrcpyW
CompareStringW
QueryFullProcessImageNameW
OpenProcess
LoadLibraryW
TerminateProcess

user32

wsprintfW

Exports

Exports

KillProc
KillProcEx
KillProcess_KillByName

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 881B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 182B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$PLUGINSDIR/LangDLL.dll
.dll windows:5 windows x86 arch:x86

Password: 123456

e981c0ab92cb1f191bb5e23392e14796

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GlobalFree
lstrlenW
GlobalAlloc
lstrcmpW
GetModuleHandleW
MulDiv
lstrcpyW
lstrcpynW

user32

SetWindowTextW
SetDlgItemTextW
EndDialog
SendDlgItemMessageW
DialogBoxParamW
LoadIconW
SendMessageW
ShowWindow
GetDC

gdi32

CreateFontIndirectW
GetDeviceCaps
DeleteObject

Exports

Exports

LangDialog

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 729B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 352B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 350B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$PLUGINSDIR/PrimoRedist/PXSDKPLS.DLL
.dll windows:4 windows x86 arch:x86

Password: 123456

41383b944cb04edcb21b7aa16b803117

Code Sign

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

15-06-2007 00:00

Not After

14-06-2012 23:59

Subject

CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04-12-2003 00:00

Not After

03-12-2013 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

41:91:a1:5a:39:78:df:cf:49:65:66:38:1d:4c:75:c2
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

16-07-2004 00:00

Not After

15-07-2014 23:59

Subject

CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

45:9f:81:c4:54:6f:de:fc:ff:2f:1a:11:05:a6:ef:bd
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US

Not Before

22-04-2009 00:00

Not After

18-06-2012 23:59

Subject

CN=Sonic Solutions,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Sonic Solutions,ST=California,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

61:0c:12:06:00:00:00:00:00:1b
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

23-05-2006 17:01

Not After

23-05-2016 17:11

Subject

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

45:37:38:c1:dd:bb:6d:01:b5:23:b4:18:03:33:c4:fb:08:74:ef:d4
Signer

Actual PE Digest

45:37:38:c1:dd:bb:6d:01:b5:23:b4:18:03:33:c4:fb:08:74:ef:d4

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

d:\build\Pxsdkrel428\Code\Storage\run\w32\PXSDKPLS.pdb

Imports

version

GetFileVersionInfoSizeA
GetFileVersionInfoA
VerQueryValueA
GetFileVersionInfoSizeW
GetFileVersionInfoW
VerQueryValueW

kernel32

GetProcAddress
LoadLibraryA
LoadLibraryW
GetCurrentProcess
GetPrivateProfileStringA
GetTempPathA
lstrcpyA
GetModuleFileNameA
FindClose
FindFirstFileW
OutputDebugStringA
lstrcpynW
GetTempPathW
GetModuleFileNameW
lstrcpynA
GetVersionExA
GlobalLock
GlobalAlloc
GlobalFree
GlobalUnlock
GlobalHandle
GetFileAttributesA
DeleteFileA
FindFirstFileA
GetTempFileNameA
CloseHandle
CreateFileA
SetFilePointer
ReadFile
GetCurrentDirectoryA
WaitForSingleObject
CreateEventA
GetTimeZoneInformation
FileTimeToSystemTime
FileTimeToLocalFileTime
GetSystemTimeAsFileTime
GetFileSize
WriteFile
GetLastError
FreeLibrary
GetEnvironmentStrings
FreeEnvironmentStringsA
GetStartupInfoA
GetFileType
GetStdHandle
SetHandleCount
HeapSize
TerminateProcess
IsBadWritePtr
VirtualFree
HeapCreate
HeapDestroy
GetStringTypeW
GetStringTypeA
IsValidCodePage
IsValidLocale
EnumSystemLocalesA
GetLocaleInfoA
GetUserDefaultLCID
DeleteCriticalSection
GetCPInfo
GetOEMCP
GetACP
LCMapStringW
LCMapStringA
VirtualQuery
GetSystemInfo
VirtualAlloc
VirtualProtect
LeaveCriticalSection
EnterCriticalSection
FreeEnvironmentStringsW
GetEnvironmentStringsW
UnhandledExceptionFilter
SetEnvironmentVariableA
CompareStringW
CompareStringA
GetModuleHandleA
GetLocaleInfoW
SetEndOfFile
CreateFileW
FlushFileBuffers
SetStdHandle
SetUnhandledExceptionFilter
InterlockedExchange
IsBadReadPtr
IsBadCodePtr
TlsGetValue
TlsSetValue
TlsFree
CreateMutexA
ReleaseMutex
GetTickCount
VirtualUnlock
VirtualLock
ExitProcess
RtlUnwind
WideCharToMultiByte
MultiByteToWideChar
HeapFree
HeapAlloc
GetCurrentThreadId
GetCommandLineA
GetCurrentDirectoryW
GetFullPathNameW
GetDriveTypeA
GetFullPathNameA
GetCurrentProcessId
HeapReAlloc
RaiseException
QueryPerformanceCounter
TlsAlloc
SetLastError
InitializeCriticalSection

user32

wsprintfA
DispatchMessageA
PeekMessageA
TranslateMessage
GetQueueStatus
CharUpperA
wvsprintfA

Exports

Exports

PrimoSDK_AddAudioEffect
PrimoSDK_AddAudioStream
PrimoSDK_AddAudioTrack
PrimoSDK_AddAudioTrackEx
PrimoSDK_AddAudioTrackExWcs
PrimoSDK_AddAudioTrackWcs
PrimoSDK_AddBootable
PrimoSDK_AddBootableEx
PrimoSDK_AddBootableExWcs
PrimoSDK_AddCDText
PrimoSDK_AddCDTextEJ
PrimoSDK_AddFile
PrimoSDK_AddFileStreamWCS
PrimoSDK_AddFileWCS
PrimoSDK_AddFolder
PrimoSDK_AddFolderWCS
PrimoSDK_AddTrackToStream
PrimoSDK_AddVideoCDStream
PrimoSDK_AddVideoCDStreamWcs
PrimoSDK_CDTextInfo
PrimoSDK_CDTextInfoEJ
PrimoSDK_CheckAudioPlaylist
PrimoSDK_CloseAudio
PrimoSDK_CloseImage
PrimoSDK_CloseReadDisc
PrimoSDK_CloseVideoCD
PrimoSDK_Command
PrimoSDK_CopyDisc
PrimoSDK_DiscInfo
PrimoSDK_DiscInfo2
PrimoSDK_DiscInfoEx
PrimoSDK_End
PrimoSDK_EraseMedium
PrimoSDK_ExtractAudioToBuffer
PrimoSDK_ExtractAudioTrack
PrimoSDK_ExtractAudioTrackWcs
PrimoSDK_GIInfo
PrimoSDK_GIInfoEx
PrimoSDK_GIInfoExWcs
PrimoSDK_GetAudioTrackInfo
PrimoSDK_GetDVDType
PrimoSDK_GetDiscSpeed
PrimoSDK_GetDiscSpeedList
PrimoSDK_GetHandle
PrimoSDK_GetISRC
PrimoSDK_GetPositionAudio
PrimoSDK_GetSpaceUsed
PrimoSDK_Init
PrimoSDK_InitLimited
PrimoSDK_InitStreamFileSystem
PrimoSDK_ListSupportedUnits
PrimoSDK_MakeGIWcs
PrimoSDK_MakeOtherCDImageWcs
PrimoSDK_MoveMedium
PrimoSDK_MungeName
PrimoSDK_NewAudio
PrimoSDK_NewAudioPlaylist
PrimoSDK_NewImage
PrimoSDK_NewImageWCS
PrimoSDK_NewVideoCD
PrimoSDK_NextExtractAudioBuffer
PrimoSDK_OpenReadDisc
PrimoSDK_OpenReadDiscEx
PrimoSDK_PauseResumeAudio
PrimoSDK_PlayAudio
PrimoSDK_ReadDisc
PrimoSDK_ReadGI
PrimoSDK_RegisterDeviceState
PrimoSDK_ReleaseHandle
PrimoSDK_RunningStatus
PrimoSDK_SaveGI
PrimoSDK_SaveGIWcs
PrimoSDK_SaveImage
PrimoSDK_SaveImageWcs
PrimoSDK_SetAudioLibraryCallback
PrimoSDK_SetProperty
PrimoSDK_StopAudio
PrimoSDK_StreamData
PrimoSDK_StreamDisc
PrimoSDK_StreamGetBlocks
PrimoSDK_StreamPutBlocks
PrimoSDK_Trace
PrimoSDK_TrackInfo
PrimoSDK_UnitAIN
PrimoSDK_UnitInfo
PrimoSDK_UnitInfo2
PrimoSDK_UnitLock
PrimoSDK_UnitReady
PrimoSDK_UnitSpeeds
PrimoSDK_UnitStatus
PrimoSDK_UnitVxBlock
PrimoSDK_VerifyDisc
PrimoSDK_VerifyGI
PrimoSDK_VerifyGIWcs
PrimoSDK_VerifyImage
PrimoSDK_VerifyOtherCDImage
PrimoSDK_VerifyOtherCDImageWcs
PrimoSDK_WriteAudio
PrimoSDK_WriteAudioEx
PrimoSDK_WriteAudioTrack
PrimoSDK_WriteAudioTrackStream
PrimoSDK_WriteAudioTrackWcs
PrimoSDK_WriteGI
PrimoSDK_WriteGIWcs
PrimoSDK_WriteImage
PrimoSDK_WriteOtherCDImage
PrimoSDK_WriteOtherCDImageWcs
PrimoSDK_WriteVideoCD

Sections

.text
Size: 140KB - Virtual size: 136KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 24KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 12KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$PLUGINSDIR/PrimoRedist/PxCpyA64.exe
.exe windows:4 windows x64 arch:x64

Password: 123456

96c2bc7a58a4b0386f55fdb529cc7a53

Code Sign

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

15-06-2007 00:00

Not After

14-06-2012 23:59

Subject

CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04-12-2003 00:00

Not After

03-12-2013 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

41:91:a1:5a:39:78:df:cf:49:65:66:38:1d:4c:75:c2
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

16-07-2004 00:00

Not After

15-07-2014 23:59

Subject

CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

45:9f:81:c4:54:6f:de:fc:ff:2f:1a:11:05:a6:ef:bd
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US

Not Before

22-04-2009 00:00

Not After

18-06-2012 23:59

Subject

CN=Sonic Solutions,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Sonic Solutions,ST=California,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

61:0c:12:06:00:00:00:00:00:1b
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

23-05-2006 17:01

Not After

23-05-2016 17:11

Subject

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

d7:5c:32:39:ed:a3:96:d6:9f:5a:61:c0:e3:22:9e:01:7c:ec:67:c9
Signer

Actual PE Digest

d7:5c:32:39:ed:a3:96:d6:9f:5a:61:c0:e3:22:9e:01:7c:ec:67:c9

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

advapi32

RegCloseKey
RegSetValueExA
RegCreateKeyExA
RegDeleteValueA
RegQueryValueExA
RegOpenKeyA
RegCreateKeyA

version

GetFileVersionInfoA
VerQueryValueA
GetFileVersionInfoSizeA

kernel32

SetEndOfFile
ReadFile
GetStringTypeW
GetStringTypeA
VirtualQuery
GetSystemInfo
VirtualProtect
GetLocaleInfoA
InitializeCriticalSection
FlushFileBuffers
SetStdHandle
SetFilePointer
GetSystemDirectoryA
CloseHandle
GetExitCodeProcess
WaitForSingleObject
CreateProcessA
lstrcpyA
GetWindowsDirectoryA
GetModuleFileNameA
GetLastError
DeleteFileA
SetFileAttributesA
CreateFileA
CompareFileTime
GetFileTime
CopyFileA
MoveFileExA
GetTempFileNameA
GetTempPathA
FindClose
FindFirstFileA
FreeLibrary
GetProcAddress
LoadLibraryA
Sleep
GetCurrentProcess
GetVersionExA
MultiByteToWideChar
WideCharToMultiByte
GetCommandLineA
HeapFree
HeapAlloc
GetProcessHeap
GetStartupInfoA
RtlUnwindEx
EnterCriticalSection
LeaveCriticalSection
LCMapStringA
LCMapStringW
TlsAlloc
SetLastError
GetCurrentThreadId
TlsFree
TlsSetValue
TlsGetValue
GetModuleHandleA
GetACP
GetOEMCP
GetCPInfo
ExitProcess
WriteFile
GetStdHandle
UnhandledExceptionFilter
FreeEnvironmentStringsW
FreeEnvironmentStringsA
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetFileType
DeleteCriticalSection
HeapSetInformation
HeapCreate

Sections

.text
Size: 39KB - Virtual size: 38KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
$PLUGINSDIR/PrimoRedist/PxCpyI64.exe
$PLUGINSDIR/PrimoRedist/PxHelp64.sys
$PLUGINSDIR/PrimoRedist/PxHlpa64.sys
.sys windows:4 windows x64 arch:x64

038711414e37860cec378a3e5265a294

Code Sign

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

15-06-2007 00:00

Not After

14-06-2012 23:59

Subject

CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04-12-2003 00:00

Not After

03-12-2013 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

41:91:a1:5a:39:78:df:cf:49:65:66:38:1d:4c:75:c2
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

16-07-2004 00:00

Not After

15-07-2014 23:59

Subject

CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

45:9f:81:c4:54:6f:de:fc:ff:2f:1a:11:05:a6:ef:bd
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US

Not Before

22-04-2009 00:00

Not After

18-06-2012 23:59

Subject

CN=Sonic Solutions,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Sonic Solutions,ST=California,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

61:0c:12:06:00:00:00:00:00:1b
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

23-05-2006 17:01

Not After

23-05-2016 17:11

Subject

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

38:5a:c6:b5:43:42:5c:6c:57:9d:2f:8f:75:65:0d:4e:7d:95:7d:03
Signer

Actual PE Digest

38:5a:c6:b5:43:42:5c:6c:57:9d:2f:8f:75:65:0d:4e:7d:95:7d:03

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

D:\build\PXHELP\CODE\Storage\Devices\pxhelp\dev\run\amd64\PXHLPa64.PDB

Imports

ntoskrnl.exe

ExAllocatePoolWithTag
ExFreePoolWithTag
KeSetEvent
IoFreeIrp
IoFreeMdl
MmUnlockPages
KeWaitForSingleObject
IoBuildAsynchronousFsdRequest
KeInitializeEvent
IoStartTimer
IoStopTimer
KeClearEvent
IofCallDriver
IoBuildDeviceIoControlRequest
RtlCompareMemory
IoReleaseRemoveLockEx
IoAcquireRemoveLockEx
KeReleaseSpinLock
KeAcquireSpinLockRaiseToDpc
IofCompleteRequest
IoIs32bitProcess
MmMapLockedPagesSpecifyCache
IoDeleteSymbolicLink
RtlInitUnicodeString
IoInitializeTimer
IoCreateSymbolicLink
MmUnmapLockedPages
sprintf
__C_specific_handler
ProbeForWrite
IoReleaseCancelSpinLock
MmBuildMdlForNonPagedPool
IoAllocateMdl
KeCancelTimer
KeSetTimer
MmProbeAndLockPages
IoAllocateIrp
ZwOpenKey
ZwQueryValueKey
ZwClose
ObfDereferenceObject
IoGetDeviceObjectPointer
RtlInitAnsiString
swprintf
IoGetAttachedDeviceReference
PoCallDriver
PoStartNextPowerIrp
_wcsnicmp
KeInitializeDpc
KeInitializeTimer
IoInitializeRemoveLockEx
IoDeleteDevice
IoAttachDeviceToDeviceStack
IoCreateDevice
IoDetachDevice
IoReleaseRemoveLockAndWaitEx
PsGetVersion
MmFreeContiguousMemory
MmAllocateContiguousMemory
InitSafeBootMode
MmIsAddressValid

Sections

.text
Size: 36KB - Virtual size: 36KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

INIT
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 832B - Virtual size: 824B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$PLUGINSDIR/PrimoRedist/PxInsA64.exe
.exe windows:4 windows x64 arch:x64

Password: 123456

493c53d06fad6dec2e394681e5b3a502

Code Sign

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

15-06-2007 00:00

Not After

14-06-2012 23:59

Subject

CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04-12-2003 00:00

Not After

03-12-2013 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

41:91:a1:5a:39:78:df:cf:49:65:66:38:1d:4c:75:c2
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

16-07-2004 00:00

Not After

15-07-2014 23:59

Subject

CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

45:9f:81:c4:54:6f:de:fc:ff:2f:1a:11:05:a6:ef:bd
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US

Not Before

22-04-2009 00:00

Not After

18-06-2012 23:59

Subject

CN=Sonic Solutions,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Sonic Solutions,ST=California,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

61:0c:12:06:00:00:00:00:00:1b
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

23-05-2006 17:01

Not After

23-05-2016 17:11

Subject

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

6a:f4:80:7b:20:45:02:6a:84:e9:95:fe:39:d4:1f:ba:58:65:d4:fe
Signer

Actual PE Digest

6a:f4:80:7b:20:45:02:6a:84:e9:95:fe:39:d4:1f:ba:58:65:d4:fe

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

advapi32

RegCloseKey
RegOpenKeyA
RegFlushKey
RegSetValueExA
RegDeleteValueA
RegQueryValueExA
RegOpenKeyExA
CloseServiceHandle
OpenSCManagerA
QueryServiceConfigA
OpenServiceA
StartServiceA
DeleteService
QueryServiceStatus
ControlService
CreateServiceA

user32

wsprintfW
wsprintfA
DefWindowProcA
SetTimer
PeekMessageA
TranslateMessage
DispatchMessageA
KillTimer
DestroyWindow
UnregisterClassA
RegisterClassExA
CreateWindowExA
ShowWindow
UpdateWindow

setupapi

SetupInstallServicesFromInfSectionA
SetupOpenInfFileA
SetupDiGetDeviceInstallParamsA
SetupDiCreateDeviceInfoList
SetupDiGetClassDevsA
SetupDiEnumDeviceInfo
SetupDiDestroyDeviceInfoList
SetupDiSetClassInstallParamsA
SetupDiCallClassInstaller
SetupCloseInfFile

kernel32

InitializeCriticalSection
FlushFileBuffers
SetStdHandle
GetStringTypeW
GetStringTypeA
VirtualQuery
GetSystemInfo
VirtualProtect
GetLocaleInfoA
SetFilePointer
HeapCreate
HeapSetInformation
DeleteCriticalSection
GetFileType
CloseHandle
GetExitCodeProcess
WaitForSingleObject
CreateProcessA
GetSystemDirectoryA
lstrcpyA
GetProcAddress
LoadLibraryA
FreeLibrary
GetSystemDirectoryW
GetVersionExA
FindClose
FindFirstFileA
lstrcmpiA
lstrlenA
DeleteFileA
GetWindowsDirectoryA
CreateFileA
GetLastError
Sleep
GetCurrentProcess
SetFileAttributesA
MultiByteToWideChar
WideCharToMultiByte
GetCommandLineA
HeapFree
HeapAlloc
GetProcessHeap
GetStartupInfoA
LCMapStringA
LCMapStringW
TlsAlloc
SetLastError
GetCurrentThreadId
TlsFree
TlsSetValue
TlsGetValue
GetModuleHandleA
RtlUnwindEx
EnterCriticalSection
LeaveCriticalSection
GetACP
GetOEMCP
GetCPInfo
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameA
UnhandledExceptionFilter
FreeEnvironmentStringsW
FreeEnvironmentStringsA
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount

Sections

.text
Size: 38KB - Virtual size: 38KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
$PLUGINSDIR/PrimoRedist/PxInsI64.exe
$PLUGINSDIR/PrimoRedist/cdr4.inf
$PLUGINSDIR/PrimoRedist/cdr4_2k.sys
.sys windows:5 windows x86 arch:x86

Code Sign

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

15-06-2007 00:00

Not After

14-06-2012 23:59

Subject

CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04-12-2003 00:00

Not After

03-12-2013 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

41:91:a1:5a:39:78:df:cf:49:65:66:38:1d:4c:75:c2
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

16-07-2004 00:00

Not After

15-07-2014 23:59

Subject

CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

45:9f:81:c4:54:6f:de:fc:ff:2f:1a:11:05:a6:ef:bd
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US

Not Before

22-04-2009 00:00

Not After

18-06-2012 23:59

Subject

CN=Sonic Solutions,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Sonic Solutions,ST=California,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

61:0c:12:06:00:00:00:00:00:1b
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

23-05-2006 17:01

Not After

23-05-2016 17:11

Subject

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

86:00:f0:19:0b:9e:c6:ea:2e:8f:6d:8a:d4:ba:ad:77:cb:03:22:31
Signer

Actual PE Digest

86:00:f0:19:0b:9e:c6:ea:2e:8f:6d:8a:d4:ba:ad:77:cb:03:22:31

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Sonic\code\CDRTC\drivers\src\CDR4\Release\i386\cdr4.pdb

Sections

.text
Size: 128B - Virtual size: 39B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 128B - Virtual size: 111B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 1008B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 128B - Virtual size: 14B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$PLUGINSDIR/PrimoRedist/cdr4_xp.64
.sys windows:5 windows x64 arch:x64

Code Sign

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

15-06-2007 00:00

Not After

14-06-2012 23:59

Subject

CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04-12-2003 00:00

Not After

03-12-2013 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

41:91:a1:5a:39:78:df:cf:49:65:66:38:1d:4c:75:c2
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

16-07-2004 00:00

Not After

15-07-2014 23:59

Subject

CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

45:9f:81:c4:54:6f:de:fc:ff:2f:1a:11:05:a6:ef:bd
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US

Not Before

22-04-2009 00:00

Not After

18-06-2012 23:59

Subject

CN=Sonic Solutions,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Sonic Solutions,ST=California,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

61:0c:12:06:00:00:00:00:00:1b
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

23-05-2006 17:01

Not After

23-05-2016 17:11

Subject

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

6d:6e:67:e8:cd:49:8a:0e:0f:11:a1:11:d4:69:08:66:a1:f9:1d:1f
Signer

Actual PE Digest

6d:6e:67:e8:cd:49:8a:0e:0f:11:a1:11:d4:69:08:66:a1:f9:1d:1f

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Sonic\code\CDRTC\drivers\src\CDR4\Release\amd64\cdr4.pdb

Sections

.text
Size: 512B - Virtual size: 37B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 112B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$PLUGINSDIR/PrimoRedist/cdr4_xp.sys
.sys windows:5 windows x86 arch:x86

Code Sign

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

15-06-2007 00:00

Not After

14-06-2012 23:59

Subject

CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04-12-2003 00:00

Not After

03-12-2013 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

41:91:a1:5a:39:78:df:cf:49:65:66:38:1d:4c:75:c2
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

16-07-2004 00:00

Not After

15-07-2014 23:59

Subject

CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

45:9f:81:c4:54:6f:de:fc:ff:2f:1a:11:05:a6:ef:bd
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US

Not Before

22-04-2009 00:00

Not After

18-06-2012 23:59

Subject

CN=Sonic Solutions,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Sonic Solutions,ST=California,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

61:0c:12:06:00:00:00:00:00:1b
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

23-05-2006 17:01

Not After

23-05-2016 17:11

Subject

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

86:00:f0:19:0b:9e:c6:ea:2e:8f:6d:8a:d4:ba:ad:77:cb:03:22:31
Signer

Actual PE Digest

86:00:f0:19:0b:9e:c6:ea:2e:8f:6d:8a:d4:ba:ad:77:cb:03:22:31

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Sonic\code\CDRTC\drivers\src\CDR4\Release\i386\cdr4.pdb

Sections

.text
Size: 128B - Virtual size: 39B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 128B - Virtual size: 111B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 1008B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 128B - Virtual size: 14B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$PLUGINSDIR/PrimoRedist/cdr4x64.cat
$PLUGINSDIR/PrimoRedist/cdr4x86.cat
$PLUGINSDIR/PrimoRedist/cdral.inf
$PLUGINSDIR/PrimoRedist/cdralw2k.64
.sys windows:5 windows x64 arch:x64

Code Sign

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

15-06-2007 00:00

Not After

14-06-2012 23:59

Subject

CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04-12-2003 00:00

Not After

03-12-2013 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

41:91:a1:5a:39:78:df:cf:49:65:66:38:1d:4c:75:c2
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

16-07-2004 00:00

Not After

15-07-2014 23:59

Subject

CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

45:9f:81:c4:54:6f:de:fc:ff:2f:1a:11:05:a6:ef:bd
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US

Not Before

22-04-2009 00:00

Not After

18-06-2012 23:59

Subject

CN=Sonic Solutions,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Sonic Solutions,ST=California,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

61:0c:12:06:00:00:00:00:00:1b
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

23-05-2006 17:01

Not After

23-05-2016 17:11

Subject

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

5a:d6:eb:ee:0c:f8:41:8f:56:ee:22:d2:d7:d1:a8:e6:63:c1:99:9f
Signer

Actual PE Digest

5a:d6:eb:ee:0c:f8:41:8f:56:ee:22:d2:d7:d1:a8:e6:63:c1:99:9f

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Sonic\code\CDRAL\drivers\src\Release\amd64\cdralw2k.pdb

Sections

.text
Size: 512B - Virtual size: 37B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 111B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$PLUGINSDIR/PrimoRedist/cdralw2k.sys
.sys windows:5 windows x86 arch:x86

Code Sign

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

15-06-2007 00:00

Not After

14-06-2012 23:59

Subject

CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04-12-2003 00:00

Not After

03-12-2013 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

41:91:a1:5a:39:78:df:cf:49:65:66:38:1d:4c:75:c2
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

16-07-2004 00:00

Not After

15-07-2014 23:59

Subject

CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

45:9f:81:c4:54:6f:de:fc:ff:2f:1a:11:05:a6:ef:bd
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US

Not Before

22-04-2009 00:00

Not After

18-06-2012 23:59

Subject

CN=Sonic Solutions,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Sonic Solutions,ST=California,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

61:0c:12:06:00:00:00:00:00:1b
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

23-05-2006 17:01

Not After

23-05-2016 17:11

Subject

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

48:c3:63:a2:b4:c9:08:70:f4:68:d5:d7:e5:b7:a3:e8:26:1b:e7:4b
Signer

Actual PE Digest

48:c3:63:a2:b4:c9:08:70:f4:68:d5:d7:e5:b7:a3:e8:26:1b:e7:4b

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Sonic\code\CDRAL\drivers\src\Release\i386\cdralw2k.pdb

Sections

.text
Size: 128B - Virtual size: 39B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 128B - Virtual size: 110B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 128B - Virtual size: 14B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$PLUGINSDIR/PrimoRedist/cdralx64.cat
$PLUGINSDIR/PrimoRedist/cdralx86.cat
$PLUGINSDIR/PrimoRedist/pconfig.dcf
$PLUGINSDIR/PrimoRedist/px.dll
.dll windows:4 windows x86 arch:x86

Password: 123456

d59b7e9c4a26843c2f8160282b5fc90d

Code Sign

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

15-06-2007 00:00

Not After

14-06-2012 23:59

Subject

CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04-12-2003 00:00

Not After

03-12-2013 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

41:91:a1:5a:39:78:df:cf:49:65:66:38:1d:4c:75:c2
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

16-07-2004 00:00

Not After

15-07-2014 23:59

Subject

CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

45:9f:81:c4:54:6f:de:fc:ff:2f:1a:11:05:a6:ef:bd
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US

Not Before

22-04-2009 00:00

Not After

18-06-2012 23:59

Subject

CN=Sonic Solutions,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Sonic Solutions,ST=California,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

61:0c:12:06:00:00:00:00:00:1b
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

23-05-2006 17:01

Not After

23-05-2016 17:11

Subject

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

cc:69:b6:82:13:83:47:96:8c:28:e0:27:6b:3f:8a:cf:17:d4:d8:e2
Signer

Actual PE Digest

cc:69:b6:82:13:83:47:96:8c:28:e0:27:6b:3f:8a:cf:17:d4:d8:e2

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

d:\build\PXSDKREL428\CODE\Storage\run\w32\Px.pdb

Imports

shlwapi

PathRemoveFileSpecA

kernel32

SetEnvironmentVariableA
GetSystemDirectoryA
LoadLibraryA
GetProcAddress
FreeLibrary
GetModuleFileNameA
GetPrivateProfileStringA
SystemTimeToFileTime
GetACP
WideCharToMultiByte
DeleteFileA
MulDiv
GetTickCount
Sleep
LoadLibraryW
GetCurrentProcess
CloseHandle
DeviceIoControl
CreateFileW
CreateFileA
GetDriveTypeA
GetVersionExA
WaitForSingleObject
GetLastError
CreateEventA
GetModuleHandleA
FindClose
FindFirstFileA
lstrcmpiA
lstrlenA
GetWindowsDirectoryA
WaitForMultipleObjects
ReleaseMutex
SetEvent
ResetEvent
GetCurrentProcessId
lstrlenW
CreateThread
CreateMutexA
GetVolumeInformationW
GetTempPathW
GetTempPathA
VirtualUnlock
VirtualLock
LeaveCriticalSection
EnterCriticalSection
ResumeThread
SetThreadPriority
SuspendThread
InitializeCriticalSection
DeleteCriticalSection
FindFirstFileW
GetFullPathNameW
GetFullPathNameA
FindNextFileW
FindNextFileA
HeapAlloc
HeapFree
GetSystemTimeAsFileTime
HeapReAlloc
GetCurrentThreadId
GetCommandLineA
GetProcessHeap
MultiByteToWideChar
InterlockedIncrement
InterlockedDecrement
ExitThread
SetFilePointer
DeleteFileW
CompareStringW
RaiseException
GetCPInfo
GetOEMCP
IsValidCodePage
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
VirtualFree
VirtualAlloc
HeapDestroy
HeapCreate
ExitProcess
WriteFile
GetStdHandle
HeapSize
SetHandleCount
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetTimeZoneInformation
LCMapStringA
LCMapStringW
RtlUnwind
GetUserDefaultLCID
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale
GetStringTypeA
GetStringTypeW
GetCurrentDirectoryA
GetConsoleCP
GetConsoleMode
FlushFileBuffers
ReadFile
SetStdHandle
GetLocaleInfoW
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
SetEndOfFile
CompareStringA
GetFileAttributesW

user32

CharUpperBuffA
PeekMessageA
TranslateMessage
DispatchMessageA
wsprintfA

advapi32

RegFlushKey
RegSetValueExA
QueryServiceConfigA
OpenServiceA
RegOpenKeyExA
RegQueryValueExA
RegCloseKey
CloseServiceHandle
RegDeleteValueA
OpenSCManagerA

oleaut32

SysFreeString
SysStringLen
SafeArrayDestroy
SysAllocString

Sections

.text
Size: 584KB - Virtual size: 583KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 48KB - Virtual size: 44KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 107KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 20KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$PLUGINSDIR/PrimoRedist/pxafs.dll
.dll windows:4 windows x86 arch:x86

Password: 123456

781ec734a2e624da8790d557a1ba9979

Code Sign

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

15-06-2007 00:00

Not After

14-06-2012 23:59

Subject

CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04-12-2003 00:00

Not After

03-12-2013 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

41:91:a1:5a:39:78:df:cf:49:65:66:38:1d:4c:75:c2
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

16-07-2004 00:00

Not After

15-07-2014 23:59

Subject

CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

45:9f:81:c4:54:6f:de:fc:ff:2f:1a:11:05:a6:ef:bd
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US

Not Before

22-04-2009 00:00

Not After

18-06-2012 23:59

Subject

CN=Sonic Solutions,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Sonic Solutions,ST=California,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

61:0c:12:06:00:00:00:00:00:1b
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

23-05-2006 17:01

Not After

23-05-2016 17:11

Subject

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

b8:21:c6:01:3d:a1:e7:e7:83:33:41:2f:19:ea:ba:ce:b3:19:57:9a
Signer

Actual PE Digest

b8:21:c6:01:3d:a1:e7:e7:83:33:41:2f:19:ea:ba:ce:b3:19:57:9a

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

d:\build\Pxsdkrel428\Code\Storage\run\w32\PxAFS.pdb

Imports

kernel32

FreeLibrary
GetProcAddress
LoadLibraryA
lstrlenA
InterlockedDecrement
InterlockedIncrement
GetModuleFileNameA
WaitForSingleObject
ReleaseMutex
CloseHandle
CreateMutexA
lstrlenW
InitializeCriticalSection
DeleteCriticalSection
LeaveCriticalSection
UnmapViewOfFile
MapViewOfFile
CreateFileMappingA
CreateFileA
OpenFileMappingA
GetTempPathA
GetCurrentProcessId
WideCharToMultiByte
MultiByteToWideChar
GetVersionExA
GetThreadLocale
GetLocaleInfoA
GetACP
EnterCriticalSection
InterlockedExchange
ExitProcess
RtlUnwind
RaiseException
GetLastError
DeleteFileW
GetCurrentThreadId
GetCommandLineA
HeapAlloc
HeapFree
QueryPerformanceCounter
GetTickCount
GetSystemTimeAsFileTime
TlsAlloc
SetLastError
TlsFree
TlsSetValue
TlsGetValue
GetModuleHandleA
SetUnhandledExceptionFilter
HeapReAlloc
TerminateProcess
GetCurrentProcess
HeapSize
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
HeapDestroy
HeapCreate
VirtualFree
UnhandledExceptionFilter
WriteFile
VirtualAlloc
IsBadWritePtr
VirtualQuery
IsBadReadPtr
IsBadCodePtr
GetOEMCP
GetCPInfo
GetStringTypeA
GetStringTypeW
SetFilePointer
SetStdHandle
FlushFileBuffers
LCMapStringA
LCMapStringW
VirtualProtect
GetSystemInfo
SetEndOfFile
ReadFile

advapi32

RegOpenKeyExA
RegQueryValueExA
RegCloseKey

shell32

ShellExecuteExA

Sections

.text
Size: 56KB - Virtual size: 54KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 48KB - Virtual size: 47KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 872B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$PLUGINSDIR/PrimoRedist/pxdrv.dll
.dll windows:4 windows x86 arch:x86

5c54715227e960c5019e7a45d4b9d02a

Code Sign

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

15-06-2007 00:00

Not After

14-06-2012 23:59

Subject

CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04-12-2003 00:00

Not After

03-12-2013 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

41:91:a1:5a:39:78:df:cf:49:65:66:38:1d:4c:75:c2
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

16-07-2004 00:00

Not After

15-07-2014 23:59

Subject

CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

45:9f:81:c4:54:6f:de:fc:ff:2f:1a:11:05:a6:ef:bd
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US

Not Before

22-04-2009 00:00

Not After

18-06-2012 23:59

Subject

CN=Sonic Solutions,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Sonic Solutions,ST=California,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

61:0c:12:06:00:00:00:00:00:1b
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

23-05-2006 17:01

Not After

23-05-2016 17:11

Subject

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

da:0e:d2:81:7a:df:df:04:33:a6:da:de:cf:4a:ec:f2:65:53:7f:95
Signer

Actual PE Digest

da:0e:d2:81:7a:df:df:04:33:a6:da:de:cf:4a:ec:f2:65:53:7f:95

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetCommandLineA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
GetLastError
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
DeleteCriticalSection
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
GetModuleHandleA
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
HeapFree
WriteFile
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
HeapAlloc
GetCPInfo
GetACP
GetOEMCP
VirtualAlloc
HeapReAlloc
GetProcAddress
LoadLibraryA
RtlUnwind
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
InterlockedDecrement
InterlockedIncrement

Sections

.text
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512KB - Virtual size: 512KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 960B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$PLUGINSDIR/PrimoRedist/pxhelp.inf
$PLUGINSDIR/PrimoRedist/pxhelp20.inf
$PLUGINSDIR/PrimoRedist/pxhelp20.sys
.sys windows:4 windows x86 arch:x86

84c3e6eb15b6d9986b22dfa9e882d5ee

Code Sign

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

15-06-2007 00:00

Not After

14-06-2012 23:59

Subject

CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04-12-2003 00:00

Not After

03-12-2013 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

41:91:a1:5a:39:78:df:cf:49:65:66:38:1d:4c:75:c2
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

16-07-2004 00:00

Not After

15-07-2014 23:59

Subject

CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

45:9f:81:c4:54:6f:de:fc:ff:2f:1a:11:05:a6:ef:bd
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US

Not Before

22-04-2009 00:00

Not After

18-06-2012 23:59

Subject

CN=Sonic Solutions,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Sonic Solutions,ST=California,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

61:0c:12:06:00:00:00:00:00:1b
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

23-05-2006 17:01

Not After

23-05-2016 17:11

Subject

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

60:ef:96:7c:93:e5:b1:82:8a:b8:12:77:f0:5d:86:b1:e3:06:a9:ba
Signer

Actual PE Digest

60:ef:96:7c:93:e5:b1:82:8a:b8:12:77:f0:5d:86:b1:e3:06:a9:ba

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

ntoskrnl.exe

IoFreeMdl
MmUnlockPages
KeWaitForSingleObject
IoBuildAsynchronousFsdRequest
ExAllocatePoolWithTag
KeInitializeEvent
InterlockedIncrement
IoFreeIrp
IoStopTimer
KeClearEvent
IofCallDriver
IoBuildDeviceIoControlRequest
RtlCompareMemory
InterlockedDecrement
IoReleaseRemoveLockEx
IoAcquireRemoveLockEx
ExFreePool
IoStartTimer
KeQueryInterruptTime
IofCompleteRequest
MmMapLockedPagesSpecifyCache
InterlockedExchange
IoDeleteSymbolicLink
RtlInitUnicodeString
IoInitializeTimer
IoCreateSymbolicLink
sprintf
ProbeForWrite
IoReleaseCancelSpinLock
MmUnmapLockedPages
MmBuildMdlForNonPagedPool
IoAllocateMdl
KeCancelTimer
KeSetTimer
MmProbeAndLockPages
IoAllocateIrp
ZwOpenKey
ZwQueryValueKey
ZwClose
ObfDereferenceObject
IoGetDeviceObjectPointer
RtlInitAnsiString
swprintf
IoGetAttachedDeviceReference
PoCallDriver
PoStartNextPowerIrp
InterlockedCompareExchange
_wcsnicmp
KeInitializeSpinLock
KeInitializeDpc
KeInitializeTimer
IoInitializeRemoveLockEx
IoDeleteDevice
IoAttachDeviceToDeviceStack
IoCreateDevice
IoDetachDevice
IoReleaseRemoveLockAndWaitEx
KeSetEvent
RtlUnwind
PsGetVersion
MmFreeContiguousMemory
MmAllocateContiguousMemory
InitSafeBootMode
MmIsAddressValid

hal

KfReleaseSpinLock
KfAcquireSpinLock

Sections

.text
Size: 27KB - Virtual size: 27KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 500B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

INIT
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 832B - Virtual size: 824B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$PLUGINSDIR/PrimoRedist/pxhelper.inf
$PLUGINSDIR/PrimoRedist/pxhelper.sys
.sys windows:4 windows x86 arch:x86

4959a4a64e2cacb5feeded0eae34dce4

Code Sign

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

15-06-2007 00:00

Not After

14-06-2012 23:59

Subject

CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04-12-2003 00:00

Not After

03-12-2013 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

41:91:a1:5a:39:78:df:cf:49:65:66:38:1d:4c:75:c2
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

16-07-2004 00:00

Not After

15-07-2014 23:59

Subject

CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

45:9f:81:c4:54:6f:de:fc:ff:2f:1a:11:05:a6:ef:bd
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US

Not Before

22-04-2009 00:00

Not After

18-06-2012 23:59

Subject

CN=Sonic Solutions,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Sonic Solutions,ST=California,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

61:0c:12:06:00:00:00:00:00:1b
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

23-05-2006 17:01

Not After

23-05-2016 17:11

Subject

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

9b:c4:0a:2d:39:22:af:9f:6b:f0:7f:71:65:8e:4f:2e:da:a2:ef:39
Signer

Actual PE Digest

9b:c4:0a:2d:39:22:af:9f:6b:f0:7f:71:65:8e:4f:2e:da:a2:ef:39

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

ntoskrnl.exe

RtlInitUnicodeString
ExAllocatePoolWithTag
MmAllocateContiguousMemory
IoFreeMdl
MmMapLockedPages
MmBuildMdlForNonPagedPool
IoAllocateMdl
ExFreePool
MmFreeContiguousMemory
MmUnmapLockedPages
ObfDereferenceObject
sprintf
RtlFreeUnicodeString
IoGetDeviceObjectPointer
RtlAnsiStringToUnicodeString
RtlInitString
KeWaitForSingleObject
IofCallDriver
IoBuildDeviceIoControlRequest
RtlInitAnsiString
ObReferenceObjectByHandle
ZwCreateFile
IofCompleteRequest
IoDeleteDevice
IoDeleteSymbolicLink
IoCreateSymbolicLink
IoCreateDevice
IoAttachDevice
IoDetachDevice
MmUnlockPages
MmProbeAndLockPages
IoFreeIrp
IoAllocateIrp
IoBuildAsynchronousFsdRequest
RtlUnwind
ZwClose
KeInitializeEvent

Sections

.text
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 320B - Virtual size: 312B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 17KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

INIT
Size: 992B - Virtual size: 982B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 832B - Virtual size: 816B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$PLUGINSDIR/PrimoRedist/pxhlpa64.cat
$PLUGINSDIR/PrimoRedist/pxhlpx86.cat
$PLUGINSDIR/PrimoRedist/pxhpinst.exe
.exe windows:4 windows x86 arch:x86

8936c663e52c3c2feed2efc1354f6ef0

Code Sign

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

15-06-2007 00:00

Not After

14-06-2012 23:59

Subject

CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04-12-2003 00:00

Not After

03-12-2013 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

41:91:a1:5a:39:78:df:cf:49:65:66:38:1d:4c:75:c2
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

16-07-2004 00:00

Not After

15-07-2014 23:59

Subject

CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

45:9f:81:c4:54:6f:de:fc:ff:2f:1a:11:05:a6:ef:bd
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US

Not Before

22-04-2009 00:00

Not After

18-06-2012 23:59

Subject

CN=Sonic Solutions,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Sonic Solutions,ST=California,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

61:0c:12:06:00:00:00:00:00:1b
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

23-05-2006 17:01

Not After

23-05-2016 17:11

Subject

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

5b:3d:92:1c:8f:cf:12:d9:65:74:86:03:8b:28:2a:79:ea:de:3c:76
Signer

Actual PE Digest

5b:3d:92:1c:8f:cf:12:d9:65:74:86:03:8b:28:2a:79:ea:de:3c:76

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegCloseKey
RegQueryValueExA
RegOpenKeyA
RegFlushKey
RegSetValueExA
RegDeleteValueA
RegOpenKeyExA
CloseServiceHandle
OpenSCManagerA
QueryServiceConfigA
OpenServiceA
StartServiceA
CreateServiceA
DeleteService
QueryServiceStatus
ControlService

user32

SetTimer
TranslateMessage
DispatchMessageA
KillTimer
DestroyWindow
UnregisterClassA
RegisterClassExA
CreateWindowExA
ShowWindow
UpdateWindow
DefWindowProcA
wsprintfA
wsprintfW
PeekMessageA

setupapi

SetupDiSetClassInstallParamsA
SetupDiCallClassInstaller
SetupDiGetDeviceInstallParamsA
SetupDiEnumDeviceInfo
SetupDiCreateDeviceInfoList
SetupDiGetClassDevsA
SetupDiDestroyDeviceInfoList
SetupOpenInfFileA
SetupInstallServicesFromInfSectionA
SetupCloseInfFile

kernel32

FlushFileBuffers
SetStdHandle
GetStringTypeW
GetStringTypeA
HeapReAlloc
VirtualAlloc
SetFilePointer
WriteFile
RtlUnwind
VirtualFree
HeapCreate
HeapDestroy
GetEnvironmentVariableA
GetProcAddress
LoadLibraryA
FreeLibrary
GetSystemDirectoryW
lstrcpyA
CloseHandle
GetExitCodeProcess
WaitForSingleObject
CreateProcessA
GetSystemDirectoryA
GetVersionExA
FindClose
FindFirstFileA
lstrcmpiA
lstrlenA
DeleteFileA
GetWindowsDirectoryA
GetLastError
Sleep
GetCurrentProcess
InterlockedDecrement
InterlockedIncrement
MultiByteToWideChar
WideCharToMultiByte
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
HeapFree
HeapAlloc
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
LCMapStringA
LCMapStringW
GetCPInfo
GetACP
GetOEMCP
GetCurrentThreadId
TlsSetValue
TlsAlloc
SetLastError
TlsGetValue
TerminateProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType

Sections

.text
Size: 32KB - Virtual size: 29KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
$PLUGINSDIR/PrimoRedist/pxmas.dll
.dll windows:4 windows x86 arch:x86

964a824816bfcc25f8824cef0b0c08ac

Code Sign

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

15-06-2007 00:00

Not After

14-06-2012 23:59

Subject

CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04-12-2003 00:00

Not After

03-12-2013 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

41:91:a1:5a:39:78:df:cf:49:65:66:38:1d:4c:75:c2
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

16-07-2004 00:00

Not After

15-07-2014 23:59

Subject

CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

45:9f:81:c4:54:6f:de:fc:ff:2f:1a:11:05:a6:ef:bd
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US

Not Before

22-04-2009 00:00

Not After

18-06-2012 23:59

Subject

CN=Sonic Solutions,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Sonic Solutions,ST=California,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

61:0c:12:06:00:00:00:00:00:1b
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

23-05-2006 17:01

Not After

23-05-2016 17:11

Subject

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

ea:69:75:4c:d3:38:6e:22:45:a5:bf:20:43:84:3e:b8:9c:05:e6:e4
Signer

Actual PE Digest

ea:69:75:4c:d3:38:6e:22:45:a5:bf:20:43:84:3e:b8:9c:05:e6:e4

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

d:\build\PXSDKREL428\CODE\Storage\run\w32\pxmas.pdb

Imports

kernel32

GetVersionExA
GetTimeZoneInformation
FileTimeToSystemTime
CreateMutexA
CloseHandle
WaitForSingleObject
ReleaseMutex
Sleep
CreateThread
GetProcAddress
GetSystemTimeAsFileTime
DeleteFileA
CompareFileTime
MultiByteToWideChar
GetACP
FindClose
FindFirstFileW
FindFirstFileA
WideCharToMultiByte
SetEvent
IsBadWritePtr
FileTimeToLocalFileTime
CreateEventA
SetEndOfFile
GetLocaleInfoW
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
CreateFileW
InterlockedIncrement
InterlockedDecrement
RtlUnwind
GetLastError
SetFilePointer
HeapAlloc
HeapFree
GetCurrentThreadId
GetCommandLineA
GetProcessHeap
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetCPInfo
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
GetModuleHandleA
ExitProcess
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
GetOEMCP
IsValidCodePage
GetUserDefaultLCID
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale
GetStringTypeA
GetStringTypeW
RaiseException
ReadFile
WriteFile
GetConsoleCP
GetConsoleMode
FlushFileBuffers
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
SetStdHandle
VirtualFree
VirtualAlloc
HeapReAlloc
HeapDestroy
HeapCreate
GetModuleFileNameA
LCMapStringA
LCMapStringW
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
InitializeCriticalSection
LoadLibraryA
HeapSize
CreateFileA

user32

PeekMessageA
DispatchMessageA
TranslateMessage
CharUpperA
CharToOemA
wsprintfA

Sections

.text
Size: 156KB - Virtual size: 154KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 20KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$PLUGINSDIR/PrimoRedist/pxsetup.exe
.exe windows:4 windows x86 arch:x86

e0649a8d891a84be8f89eedc30b58862

Code Sign

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

15-06-2007 00:00

Not After

14-06-2012 23:59

Subject

CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04-12-2003 00:00

Not After

03-12-2013 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

41:91:a1:5a:39:78:df:cf:49:65:66:38:1d:4c:75:c2
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

16-07-2004 00:00

Not After

15-07-2014 23:59

Subject

CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

45:9f:81:c4:54:6f:de:fc:ff:2f:1a:11:05:a6:ef:bd
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US

Not Before

22-04-2009 00:00

Not After

18-06-2012 23:59

Subject

CN=Sonic Solutions,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Sonic Solutions,ST=California,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

61:0c:12:06:00:00:00:00:00:1b
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

23-05-2006 17:01

Not After

23-05-2016 17:11

Subject

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0b:2f:ca:7d:38:f8:74:59:2e:11:c7:5d:ab:f1:6b:b2:68:e6:f2:83
Signer

Actual PE Digest

0b:2f:ca:7d:38:f8:74:59:2e:11:c7:5d:ab:f1:6b:b2:68:e6:f2:83

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegCloseKey
RegDeleteValueA
RegSetValueExA
RegQueryValueExA
RegOpenKeyA
RegCreateKeyA

version

GetFileVersionInfoA
VerQueryValueA
GetFileVersionInfoSizeA

psapi

EnumProcesses
GetModuleFileNameExA

kernel32

SetEndOfFile
ReadFile
GetStringTypeW
GetStringTypeA
FlushFileBuffers
SetStdHandle
SetFilePointer
HeapReAlloc
VirtualAlloc
WriteFile
RtlUnwind
VirtualFree
HeapCreate
HeapDestroy
GetEnvironmentVariableA
GetFileType
GetStdHandle
SetHandleCount
CloseHandle
OpenProcess
GetCurrentProcessId
GetSystemDirectoryA
GetModuleFileNameA
CreateDirectoryA
GetProcAddress
LoadLibraryA
GetExitCodeProcess
WaitForSingleObject
CreateProcessA
GetWindowsDirectoryA
CreateFileA
lstrcpyA
GetCurrentDirectoryA
GetLastError
DeleteFileA
SetFileAttributesA
CopyFileA
MoveFileExA
CompareFileTime
GetFileTime
GetTempFileNameA
GetTempPathA
FindClose
FindFirstFileA
FreeLibrary
GetCurrentProcess
GetVersionExA
InterlockedDecrement
InterlockedIncrement
MultiByteToWideChar
WideCharToMultiByte
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
HeapFree
HeapAlloc
LCMapStringA
LCMapStringW
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
GetCPInfo
GetACP
GetOEMCP
GetCurrentThreadId
TlsSetValue
TlsAlloc
SetLastError
TlsGetValue
TerminateProcess
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW

Sections

.text
Size: 36KB - Virtual size: 34KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 146KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
$PLUGINSDIR/PrimoRedist/pxsfs.dll
.dll windows:4 windows x86 arch:x86

7625b5173edb44c3728d811b95b155bc

Code Sign

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

15-06-2007 00:00

Not After

14-06-2012 23:59

Subject

CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04-12-2003 00:00

Not After

03-12-2013 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

41:91:a1:5a:39:78:df:cf:49:65:66:38:1d:4c:75:c2
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

16-07-2004 00:00

Not After

15-07-2014 23:59

Subject

CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

45:9f:81:c4:54:6f:de:fc:ff:2f:1a:11:05:a6:ef:bd
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US

Not Before

22-04-2009 00:00

Not After

18-06-2012 23:59

Subject

CN=Sonic Solutions,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Sonic Solutions,ST=California,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

61:0c:12:06:00:00:00:00:00:1b
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

23-05-2006 17:01

Not After

23-05-2016 17:11

Subject

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

46:1a:76:fe:8e:be:d0:e6:0c:d1:bd:ae:5f:56:8a:8e:b0:3d:c6:02
Signer

Actual PE Digest

46:1a:76:fe:8e:be:d0:e6:0c:d1:bd:ae:5f:56:8a:8e:b0:3d:c6:02

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

d:\build\PXSDKREL428\CODE\Storage\Devices\pxsfs\pxsfs_2005__Build\Win32\StaticRTL_Release\pxsfs.pdb

Imports

kernel32

FindFirstFileA
GetFullPathNameA
FindNextFileW
FindNextFileA
GetVersion
CopyFileExA
CreateDirectoryA
CreateFileA
DeleteFileA
GetCurrentDirectoryA
GetDiskFreeSpaceExA
GetDriveTypeA
GetFileAttributesExA
GetTempPathA
GetVolumeInformationA
InterlockedDecrement
InterlockedIncrement
OutputDebugStringA
Sleep
EnterCriticalSection
LeaveCriticalSection
CloseHandle
DeleteCriticalSection
GetCurrentThreadId
GetExitCodeThread
GetLastError
ResumeThread
SetThreadPriority
SuspendThread
WaitForSingleObject
InitializeCriticalSection
FileTimeToSystemTime
FileTimeToLocalFileTime
LocalFileTimeToFileTime
SystemTimeToFileTime
GetTimeZoneInformation
GetLocalTime
GetFileSize
SetFilePointer
DeviceIoControl
SetFileTime
SetEndOfFile
FlushFileBuffers
ReadFile
WriteFile
LocalFree
FreeLibrary
CreateMutexA
ReleaseMutex
GetCurrentProcessId
LoadLibraryA
GetCurrentProcess
SetErrorMode
InterlockedExchange
GetFullPathNameW
RtlUnwind
RaiseException
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetCommandLineA
HeapFree
HeapAlloc
GetProcessHeap
ExitThread
CreateThread
SetStdHandle
GetFileType
GetSystemTimeAsFileTime
LCMapStringA
GetModuleHandleA
ExitProcess
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
GetACP
GetOEMCP
GetUserDefaultLCID
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale
GetStringTypeA
GetConsoleCP
GetConsoleMode
SetHandleCount
GetStdHandle
GetStartupInfoA
HeapSize
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
HeapDestroy
HeapCreate
VirtualFree
QueryPerformanceCounter
GetTickCount
VirtualAlloc
HeapReAlloc
WriteConsoleA
GetConsoleOutputCP
CompareStringA
GetWindowsDirectoryA
GetSystemDirectoryA
GetThreadLocale
FindFirstFileW
FindClose
GetVersionExA
CreateEventA
ResetEvent
SetEvent
QueryPerformanceFrequency

user32

CharLowerBuffA

ole32

CoCreateInstance
CoInitializeEx
CoUninitialize
CoInitialize

oleaut32

SysAllocStringLen
SysFreeString

Sections

.text
Size: 1.3MB - Virtual size: 1.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 492KB - Virtual size: 489KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 52KB - Virtual size: 80KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 168KB - Virtual size: 166KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$PLUGINSDIR/PrimoRedist/pxwave.dll
.dll windows:4 windows x86 arch:x86

c9be3dbfcf81435e7765eabc1fa1b269

Code Sign

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

15-06-2007 00:00

Not After

14-06-2012 23:59

Subject

CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04-12-2003 00:00

Not After

03-12-2013 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

41:91:a1:5a:39:78:df:cf:49:65:66:38:1d:4c:75:c2
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

16-07-2004 00:00

Not After

15-07-2014 23:59

Subject

CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

45:9f:81:c4:54:6f:de:fc:ff:2f:1a:11:05:a6:ef:bd
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US

Not Before

22-04-2009 00:00

Not After

18-06-2012 23:59

Subject

CN=Sonic Solutions,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Sonic Solutions,ST=California,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

61:0c:12:06:00:00:00:00:00:1b
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

23-05-2006 17:01

Not After

23-05-2016 17:11

Subject

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

57:7e:d2:6a:de:2d:82:f2:4c:44:44:d1:b4:fa:f3:f8:82:c6:8f:ae
Signer

Actual PE Digest

57:7e:d2:6a:de:2d:82:f2:4c:44:44:d1:b4:fa:f3:f8:82:c6:8f:ae

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

d:\build\PXSDKREL428\CODE\Storage\run\w32\PxWave.pdb

Imports

version

GetFileVersionInfoA
GetFileVersionInfoSizeA
VerQueryValueA

winmm

waveInAddBuffer
waveInGetNumDevs
waveInUnprepareHeader
waveInClose
waveInReset
waveInStart
mmioOpenW
mmioDescend
mmioClose
mmioRead
mmioAscend
mmioSeek
waveInPrepareHeader
waveInOpen
mmioOpenA

kernel32

GetLocaleInfoW
CreateFileW
CreateFileA
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
InitializeCriticalSection
GetCurrentDirectoryA
GetTimeZoneInformation
GetStringTypeW
GetStringTypeA
IsValidLocale
EnumSystemLocalesA
GetLocaleInfoA
SetEvent
ResetEvent
WaitForMultipleObjects
FreeLibrary
LoadLibraryW
GetCurrentProcess
GetProcAddress
SetEndOfFile
TerminateThread
WaitForSingleObject
CloseHandle
WideCharToMultiByte
CreateThread
MultiByteToWideChar
GetVersionExA
Sleep
GlobalLock
GlobalAlloc
GlobalFree
GlobalUnlock
ReleaseMutex
CreateEventA
GetSystemDirectoryA
CreateMutexA
GetModuleFileNameA
GetLastError
GetCurrentProcessId
GetModuleHandleA
GetUserDefaultLCID
CompareStringA
CompareStringW
LoadLibraryA
LeaveCriticalSection
GetTempPathW
GetTempPathA
GetTickCount
FindClose
GetFullPathNameW
GetFullPathNameA
HeapFree
HeapAlloc
RtlUnwind
GetCurrentThreadId
GetCommandLineA
GetProcessHeap
GetFileAttributesA
EnterCriticalSection
SetEnvironmentVariableA
UnhandledExceptionFilter
SetUnhandledExceptionFilter
SetFilePointer
InterlockedIncrement
InterlockedDecrement
GetSystemTimeAsFileTime
GetDriveTypeA
DeleteFileW
DeleteFileA
RaiseException
HeapDestroy
HeapCreate
VirtualFree
DeleteCriticalSection
VirtualAlloc
HeapReAlloc
ExitProcess
WriteFile
GetStdHandle
TerminateProcess
IsDebuggerPresent
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
HeapSize
SetHandleCount
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
LCMapStringA
LCMapStringW
GetConsoleCP
GetConsoleMode
FlushFileBuffers
ReadFile
SetStdHandle

user32

wsprintfA

advapi32

RegOpenKeyExA
RegQueryValueExA
RegCloseKey

Sections

.text
Size: 296KB - Virtual size: 295KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 80KB - Virtual size: 79KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 228KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 28KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$PLUGINSDIR/PrimoRedist/pxwma.dll
.dll windows:4 windows x86 arch:x86

e8277672ac0cb2229996f25d76ee8d92

Code Sign

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

15-06-2007 00:00

Not After

14-06-2012 23:59

Subject

CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04-12-2003 00:00

Not After

03-12-2013 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

41:91:a1:5a:39:78:df:cf:49:65:66:38:1d:4c:75:c2
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

16-07-2004 00:00

Not After

15-07-2014 23:59

Subject

CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

45:9f:81:c4:54:6f:de:fc:ff:2f:1a:11:05:a6:ef:bd
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US

Not Before

22-04-2009 00:00

Not After

18-06-2012 23:59

Subject

CN=Sonic Solutions,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Sonic Solutions,ST=California,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

61:0c:12:06:00:00:00:00:00:1b
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

23-05-2006 17:01

Not After

23-05-2016 17:11

Subject

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

12:27:f3:af:cd:8a:83:5e:ed:a1:ab:0f:71:e7:2a:c3:49:c5:0f:26
Signer

Actual PE Digest

12:27:f3:af:cd:8a:83:5e:ed:a1:ab:0f:71:e7:2a:c3:49:c5:0f:26

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

d:\build\PXSDKREL428\CODE\Storage\run\w32\PXWMA.pdb

Imports

wmvcore

WMCreateReader

kernel32

GetCommandLineA
GetVersionExA
UnhandledExceptionFilter
GetProcAddress
GetModuleHandleA
ExitProcess
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetLastError
InterlockedDecrement
GetCurrentThreadId
HeapFree
HeapAlloc
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
DeleteCriticalSection
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
HeapDestroy
HeapCreate
VirtualFree
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
WriteFile
LeaveCriticalSection
EnterCriticalSection
OutputDebugStringA
LoadLibraryA
InitializeCriticalSection
GetModuleHandleW
GetCPInfo
GetACP
GetOEMCP
Sleep
VirtualAlloc
HeapReAlloc
TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter
RtlUnwind
GetLocaleInfoA
GetStringTypeA
MultiByteToWideChar
GetStringTypeW
LCMapStringA
LCMapStringW
VirtualProtect
GetSystemInfo
VirtualQuery

Sections

.text
Size: 24KB - Virtual size: 23KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$PLUGINSDIR/PrimoRedist/vxblock.dll
.dll windows:4 windows x86 arch:x86

01d6e16f3805ea2ee055a7663e5faa78

Code Sign

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

15-06-2007 00:00

Not After

14-06-2012 23:59

Subject

CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04-12-2003 00:00

Not After

03-12-2013 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

41:91:a1:5a:39:78:df:cf:49:65:66:38:1d:4c:75:c2
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

16-07-2004 00:00

Not After

15-07-2014 23:59

Subject

CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

45:9f:81:c4:54:6f:de:fc:ff:2f:1a:11:05:a6:ef:bd
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US

Not Before

22-04-2009 00:00

Not After

18-06-2012 23:59

Subject

CN=Sonic Solutions,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Sonic Solutions,ST=California,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

61:0c:12:06:00:00:00:00:00:1b
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

23-05-2006 17:01

Not After

23-05-2016 17:11

Subject

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

c6:1f:75:04:0d:1c:1c:7f:bc:43:d6:42:7e:6a:78:44:fe:b4:4d:7e
Signer

Actual PE Digest

c6:1f:75:04:0d:1c:1c:7f:bc:43:d6:42:7e:6a:78:44:fe:b4:4d:7e

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

d:\build\block\code\storage\devices\block\vxblock_sln\vxblock_sln_2005__build\win32\release\vxblock.pdb

Imports

kernel32

DeviceIoControl
CreateFileA
GetVersionExA
CreateMutexA
GetModuleHandleA
MapViewOfFile
CreateFileMappingA
GetCurrentProcessId
UnmapViewOfFile
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
QueryDosDeviceA
OpenProcess
CloseHandle
GetLastError
GetDriveTypeA
GetProcAddress
Sleep
FreeLibrary
SetErrorMode
GetSystemDirectoryA
OpenFileMappingA
LoadLibraryA
FlushFileBuffers
HeapSize
RtlUnwind
GetCurrentThreadId
GetCommandLineA
HeapFree
HeapAlloc
GetProcessHeap
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetCPInfo
InterlockedIncrement
InterlockedDecrement
GetACP
GetOEMCP
IsValidCodePage
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
LCMapStringA
WideCharToMultiByte
MultiByteToWideChar
LCMapStringW
ExitProcess
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
HeapDestroy
HeapCreate
VirtualFree
QueryPerformanceCounter
GetTickCount
GetSystemTimeAsFileTime
SetFilePointer
WriteFile
GetConsoleCP
GetConsoleMode
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
RaiseException
VirtualAlloc
HeapReAlloc
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW

advapi32

SetSecurityDescriptorDacl
RegCreateKeyExA
RegDeleteValueA
RegOpenKeyA
RegQueryValueExA
RegSetValueExA
RegOpenKeyExA
RegEnumValueA
RegCloseKey
InitializeSecurityDescriptor

ole32

CoCreateInstance
CoUninitialize
CoInitializeEx

oleaut32

SysFreeString

Exports

Exports

LockUnlockCd
LockUnlockCdEx
NotifyOfDriverUse
QueryCd
QueryCdEx

Sections

.text
Size: 56KB - Virtual size: 53KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 16KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 732B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$PLUGINSDIR/System.dll
.dll windows:5 windows x86 arch:x86

039bcbc605477e8e87ec550c2e60e748

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GlobalAlloc
GlobalFree
GlobalSize
GetLastError
lstrcpyW
lstrcpynW
GetProcAddress
WideCharToMultiByte
lstrcatW
lstrlenW
lstrcmpiW
LoadLibraryW
GetModuleHandleW
MultiByteToWideChar
VirtualAlloc
VirtualProtect
FreeLibrary

user32

wsprintfW

ole32

CLSIDFromString
StringFromGUID2

Exports

Exports

Alloc
Call
Copy
Free
Get
Int64Op
Store
StrAlloc

Sections

.text
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 963B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 64B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1024B - Virtual size: 588B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$PLUGINSDIR/execDos.dll
.dll windows:5 windows x86 arch:x86

a5d239ed12c9442d63c73cb9ff7cad0e

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GlobalFree
Sleep
lstrcatW
lstrcmpiW
TerminateProcess
ReadFile
GetExitCodeProcess
PeekNamedPipe
CreateFileW
FlushFileBuffers
WriteFile
lstrlenW
CloseHandle
CreateProcessW
DuplicateHandle
GetCurrentProcess
CreatePipe
GetProcAddress
GetModuleHandleW
GlobalAlloc
GetExitCodeThread
WaitForSingleObject
CreateThread
lstrcpyW
lstrcpynW

user32

wsprintfW
GetClassNameW
GetDlgItem
FindWindowExW
SendMessageW

Exports

Exports

exec
isdone
wait

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 20B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 334B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$PLUGINSDIR/extstrip.dll
.dll windows:4 windows x86 arch:x86

5602f0ac2754ef49527e794f8ca94c65

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

c:\program files\nsis\unicode\plugins\extstrip.pdb

Imports

kernel32

lstrcmpiW
GlobalFree
lstrcatW
lstrlenW

user32

CharNextW

Exports

Exports

add
remove

Sections

.text
Size: 512B - Virtual size: 370B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 399B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 46B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$PLUGINSDIR/modern-header.bmp
$PLUGINSDIR/modern-wizard.bmp
$PLUGINSDIR/nsDialogs.dll
.dll windows:5 windows x86 arch:x86

9ea5bdc8c90dfcffe309465c26c89758

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GlobalAlloc
MulDiv
lstrlenW
HeapFree
GetProcessHeap
lstrcmpiW
HeapReAlloc
lstrcpynW
GetFileAttributesW
lstrcpyW
GetCurrentDirectoryW
SetCurrentDirectoryW
HeapAlloc
GlobalFree

user32

LoadCursorW
RemovePropW
DrawFocusRect
GetPropW
DrawTextW
GetWindowTextW
GetDlgItem
SetWindowLongW
SetWindowPos
CreateDialogParamW
MapWindowPoints
GetWindowRect
SetCursor
CreateWindowExW
IsWindow
SetTimer
KillTimer
DispatchMessageW
TranslateMessage
GetMessageW
IsDialogMessageW
ShowWindow
wsprintfW
GetClientRect
CharPrevW
CallWindowProcW
SetPropW
DestroyWindow
MapDialogRect
CharNextW
SendMessageW
GetWindowLongW

gdi32

SetTextColor

shell32

SHGetPathFromIDListW
SHBrowseForFolderW

comdlg32

GetSaveFileNameW
CommDlgExtendedError
GetOpenFileNameW

ole32

CoTaskMemFree

Exports

Exports

Create
CreateControl
CreateItem
CreateTimer
GetUserData
KillTimer
OnBack
OnChange
OnClick
OnNotify
SelectFileDialog
SelectFolderDialog
SetRTL
SetUserData
Show

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 48B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 152B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 590B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$PLUGINSDIR/nsExec.dll
.dll windows:5 windows x86 arch:x86

8700d0ebbb41c81ea52718af1ab70a93

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

lstrcpyW
MultiByteToWideChar
lstrlenA
lstrcmpiW
lstrlenW
ExitProcess
CloseHandle
GetExitCodeProcess
WaitForSingleObject
CreateProcessW
lstrcpynW
GetCommandLineW
Sleep
TerminateProcess
GlobalReAlloc
GlobalUnlock
GlobalSize
ReadFile
GetModuleHandleW
GetTickCount
GetStartupInfoW
CreatePipe
GetVersionExW
GlobalLock
DeleteFileW
lstrcatW
UnmapViewOfFile
MapViewOfFile
CreateFileMappingW
CreateFileW
CopyFileW
GetTempFileNameW
GlobalFree
GlobalAlloc
GetModuleFileNameW
GetProcAddress
PeekNamedPipe
GetCurrentProcess

user32

CharPrevW
CharNextW
SendMessageW
FindWindowExW
wsprintfW

advapi32

InitializeSecurityDescriptor
SetSecurityDescriptorDacl

Exports

Exports

Exec
ExecToLog
ExecToStack

Sections

.text
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 454B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$PLUGINSDIR/nsis_winamp.dll
.dll windows:4 windows x86 arch:x86

a88d5dd1652a6846cfc944c29f1e3538

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

c:\nullsoft\nsis_winamp\Release\nsis_winamp.pdb

Imports

shlwapi

PathCanonicalizeW
PathCombineW
StrToIntW
PathFindFileNameW
PathIsRelativeW

kernel32

GetPrivateProfileStringW
GlobalAlloc
lstrcpynW
lstrcpyW
GlobalFree
GetEnvironmentVariableW

user32

CharNextW

shell32

SHGetSpecialFolderPathW

Exports

Exports

GetCWD
GetFullPath
GetIniFile
GetIniPath
GetM3uBase
GetM3uPath
GetWAClassName
ReadSettings

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 988B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 246B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$R0/Bento/screenshot.png
.png
$R0/Bento/scripts/mcvcore.maki
$R0/Bento/skin.xml
.xml
$R0/Bento/window/aol_radio_alb_art.jpg
.jpg
$R0/Bento/window/config.png
.png
$R0/Bento/window/controls.png
.png
$R0/Bento/window/equalizer.png
.png
$R0/Bento/window/menu_file.png
.png
$R0/Bento/window/menu_help.png
.png
$R0/Bento/window/menu_options.png
.png
$R0/Bento/window/menu_play.png
.png
$R0/Bento/window/menu_view.png
.png
$R0/Bento/window/numfont.png
.png
$R0/Bento/window/player.png
.png
$R0/Bento/window/sc_alb_art.jpg
.jpg
$R0/Bento/window/shade.png
.png
$R0/Bento/window/sui.png
.png
$R0/Bento/window/window.png
.png
$R0/Bento/xml/config.xml
$R0/Bento/xml/player-elements.xml
$R0/Bento/xml/player-normal-group.xml
$R0/Bento/xml/player-normal-mcv.xml
$R0/Bento/xml/player-normal-sui.xml
$R0/Bento/xml/player-normal.xml
$R0/Bento/xml/player-shade.xml
$R0/Bento/xml/player.xml
$R0/Bento/xml/standardframe.xml
$R0/Big Bento/about/about.maki
$R0/Big Bento/about/about.xml
$R0/Big Bento/about/about_fg.jpg
.jpg
$R0/Big Bento/about/nibbles/fixedsys.png
.png
$R0/Big Bento/about/nibbles/info.png
.png
$R0/Big Bento/about/nibbles/info2.png
.png
$R0/Big Bento/about/nibbles/level1.png
.png
$R0/Big Bento/about/nibbles/level10.png
.png
$R0/Big Bento/about/nibbles/level2.png
.png
$R0/Big Bento/about/nibbles/level3.png
.png
$R0/Big Bento/about/nibbles/level4.png
.png
$R0/Big Bento/about/nibbles/level5.png
.png
$R0/Big Bento/about/nibbles/level6.png
.png
$R0/Big Bento/about/nibbles/level7.png
.png
$R0/Big Bento/about/nibbles/level8.png
.png
$R0/Big Bento/about/nibbles/level9.png
.png
$R0/Big Bento/about/nibbles/llama.png
.png
$R0/Big Bento/about/nibbles/nibbles.xml
$R0/Big Bento/about/nibbles/sammy.png
.png
$R0/Big Bento/screenshot.png
.png
$R0/Big Bento/scripts/albumart.maki
$R0/Big Bento/scripts/beatvisualization.maki
$R0/Big Bento/scripts/cbuttons.maki
$R0/Big Bento/scripts/colorthemes.maki
$R0/Big Bento/scripts/configtarget.maki
$R0/Big Bento/scripts/coverflow.maki
$R0/Big Bento/scripts/eq.maki
$R0/Big Bento/scripts/fileinfo.maki
$R0/Big Bento/scripts/gen_dropbox.maki
$R0/Big Bento/scripts/hoverstimulate.maki
$R0/Big Bento/scripts/imagecontrol.maki
$R0/Big Bento/scripts/infoline.maki
$R0/Big Bento/scripts/loadattribs.maki
$R0/Big Bento/scripts/mainmenu.maki
$R0/Big Bento/scripts/maximize.maki
$R0/Big Bento/scripts/mcvcore.maki
$R0/Big Bento/scripts/mute.maki
$R0/Big Bento/scripts/notifier.maki
$R0/Big Bento/scripts/pledit.maki
$R0/Big Bento/scripts/seek.maki
$R0/Big Bento/scripts/shadelinks.maki
$R0/Big Bento/scripts/shadesize.maki
$R0/Big Bento/scripts/simplemaximize.maki
$R0/Big Bento/scripts/songinfo.maki
$R0/Big Bento/scripts/songticker.maki
$R0/Big Bento/scripts/standardframe.maki
$R0/Big Bento/scripts/suicore.maki
$R0/Big Bento/scripts/syncbutton.maki
$R0/Big Bento/scripts/tabbutton.maki
$R0/Big Bento/scripts/tabcontrol.maki
$R0/Big Bento/scripts/timecontrol.maki
$R0/Big Bento/scripts/videoresize.maki
$R0/Big Bento/scripts/visbuttons.maki
$R0/Big Bento/scripts/visualizer.maki
$R0/Big Bento/skin.xml
.xml
$R0/Big Bento/window/Scrollgrips.png
.png
$R0/Big Bento/window/aol_radio_alb_art.jpg
.jpg
$R0/Big Bento/window/beatvis.png
.png
$R0/Big Bento/window/branding.png
.png
$R0/Big Bento/window/compcontrols.png
.png
$R0/Big Bento/window/componentcontrols.png
.png
$R0/Big Bento/window/config.png
.png
$R0/Big Bento/window/equalizer.png
.png
$R0/Big Bento/window/menu_file.png
.png
$R0/Big Bento/window/menu_help.png
.png
$R0/Big Bento/window/menu_options.png
.png
$R0/Big Bento/window/menu_play.png
.png
$R0/Big Bento/window/menu_view.png
.png
$R0/Big Bento/window/no_alb_art_big.png
.png
$R0/Big Bento/window/notfound.png
.png
$R0/Big Bento/window/notfoundXXL.png
.png
$R0/Big Bento/window/notifier.png
.png
$R0/Big Bento/window/numfont.png
.png
$R0/Big Bento/window/pl_btn_icons.png
.png
$R0/Big Bento/window/player.png
.png
$R0/Big Bento/window/rating.png
.png
$R0/Big Bento/window/sc_alb_art.jpg
.jpg
$R0/Big Bento/window/scrollbars.png
.png
$R0/Big Bento/window/shade.png
.png
$R0/Big Bento/window/songinfo.png
.png
$R0/Big Bento/window/window-elements.png
.png
$R0/Big Bento/window/window-gradient.png
.png
$R0/Big Bento/window/window.png
.png
$R0/Big Bento/xml/color-presets.xml
$R0/Big Bento/xml/config.xml
$R0/Big Bento/xml/notifier-elements.xml
$R0/Big Bento/xml/notifier-normal.xml
$R0/Big Bento/xml/notifier.xml
$R0/Big Bento/xml/player-elements.xml
$R0/Big Bento/xml/player-normal-group.xml
$R0/Big Bento/xml/player-normal-mcv.xml
$R0/Big Bento/xml/player-normal-sui.xml
$R0/Big Bento/xml/player-normal.xml
$R0/Big Bento/xml/player-shade.xml
$R0/Big Bento/xml/player.xml
$R0/Big Bento/xml/standardframe.xml
$R0/Big Bento/xml/system-colors.xml
$R0/Big Bento/xml/system-elements.xml
$R0/Big Bento/xml/window-overrides.xml
$R0/Winamp Modern/about/about.maki
$R0/Winamp Modern/about/about.xml
$R0/Winamp Modern/about/about_bg.png
.png
$R0/Winamp Modern/about/about_bolt.png
.png
$R0/Winamp Modern/about/about_fg.png
.png
$R0/Winamp Modern/about/about_star.png
.png
$R0/Winamp Modern/about/eye.png
.png
$R0/Winamp Modern/notifier/aol_radio_alb_art.jpg
.jpg
$R0/Winamp Modern/notifier/notif-bg-alpha.png
.png
$R0/Winamp Modern/notifier/notif-bg.png
.png
$R0/Winamp Modern/notifier/sc_alb_art.jpg
.jpg
$R0/Winamp Modern/player/Eq_bg.png
.png
$R0/Winamp Modern/player/Options_buttons.png
.png
$R0/Winamp Modern/player/Options_elements.PNG
.png
$R0/Winamp Modern/player/Songtickerfont.png
.png
$R0/Winamp Modern/player/beat_displayoverlay.png
.png
$R0/Winamp Modern/player/beat_l2.png
.png
$R0/Winamp Modern/player/beat_left.png
.png
$R0/Winamp Modern/player/beat_r2.png
.png
$R0/Winamp Modern/player/beat_right.png
.png
$R0/Winamp Modern/player/beat_textoverlay.png
.png
$R0/Winamp Modern/player/bolt.png
.png
$R0/Winamp Modern/player/button_balance.png
.png
$R0/Winamp Modern/player/button_config_drawer.png
.png
$R0/Winamp Modern/player/button_ct_switch.png
.png
$R0/Winamp Modern/player/button_eq.png
.png
$R0/Winamp Modern/player/button_mute.png
.png
$R0/Winamp Modern/player/button_mute_bg.PNG
.png
$R0/Winamp Modern/player/button_repeat2.png
.png
$R0/Winamp Modern/player/button_shufflerepeat.png
.png
$R0/Winamp Modern/player/button_videoavs.png
.png
$R0/Winamp Modern/player/button_volume.png
.png
$R0/Winamp Modern/player/buttons_detach.png
.png
$R0/Winamp Modern/player/buttons_eq.png
.png
$R0/Winamp Modern/player/buttons_mlpl.png
.png
$R0/Winamp Modern/player/buttons_mlpl_bg.png
.png
$R0/Winamp Modern/player/buttons_pl.png
.png
$R0/Winamp Modern/player/buttons_switchto.png
.png
$R0/Winamp Modern/player/buttons_video.png
.png
$R0/Winamp Modern/player/buttons_vis.png
.png
$R0/Winamp Modern/player/config_tabs.png
.png
$R0/Winamp Modern/player/ct_background.png
.png
$R0/Winamp Modern/player/ct_bg.png
.png
$R0/Winamp Modern/player/display.PNG
.png
$R0/Winamp Modern/player/displayoverlay.png
.png
$R0/Winamp Modern/player/drawer_bg.PNG
.png
$R0/Winamp Modern/player/drawer_bg_regions.png
.png
$R0/Winamp Modern/player/drawer_shadow.PNG
.png
$R0/Winamp Modern/player/eq_balance.png
.png
$R0/Winamp Modern/player/eq_labels.png
.png
$R0/Winamp Modern/player/eq_textoverlay.png
.png
$R0/Winamp Modern/player/main_bg.png
.png
$R0/Winamp Modern/player/mainregions.png
.png
$R0/Winamp Modern/player/menubar.PNG
.png
$R0/Winamp Modern/player/numfont.png
.png
$R0/Winamp Modern/player/openclose_overlay.png
.png
$R0/Winamp Modern/player/options_bg.PNG
.png
$R0/Winamp Modern/player/options_buttons2.png
.png
$R0/Winamp Modern/player/options_more.png
.png
$R0/Winamp Modern/player/options_scrollbuttons.PNG
.png
$R0/Winamp Modern/player/options_slider.png
.png
$R0/Winamp Modern/player/pe_time.png
.png
$R0/Winamp Modern/player/pe_time_font.png
.png
$R0/Winamp Modern/player/playbackstatus.png
.png
$R0/Winamp Modern/player/player_buttons.png
.png
$R0/Winamp Modern/player/player_buttons_status.png
.png
$R0/Winamp Modern/player/progressbar.PNG
.png
$R0/Winamp Modern/player/resize_pl.png
.png
$R0/Winamp Modern/player/resizer.png
.png
$R0/Winamp Modern/player/seekbar.png
.png
$R0/Winamp Modern/player/seekpos.png
.png
$R0/Winamp Modern/player/shufflerepeat_bg.PNG
.png
$R0/Winamp Modern/player/shufflerepeat_led.png
.png
$R0/Winamp Modern/player/smallfont.PNG
.png
$R0/Winamp Modern/player/songinfo.png
.png
$R0/Winamp Modern/player/songinfofont.png
.png
$R0/Winamp Modern/player/txt_config.PNG
.png
$R0/Winamp Modern/player/videoavs_bg.png
.png
$R0/Winamp Modern/player/videoavs_button_bg.png
.png
$R0/Winamp Modern/player/videoavs_button_bg2.png
.png
$R0/Winamp Modern/player/videoavs_button_overlay.png
.png
$R0/Winamp Modern/player/videoavs_buttonup_bg.png
.png
$R0/Winamp Modern/player/videoavs_buttonup_bg2.png
.png
$R0/Winamp Modern/player/visualization_background.png
.png
$R0/Winamp Modern/player/visualization_overlay.png
.png
$R0/Winamp Modern/player/volume_bar_bg.png
.png
$R0/Winamp Modern/screenshot.png
.png
$R0/Winamp Modern/scripts/albumart.maki
$R0/Winamp Modern/scripts/beatvisualization.maki
$R0/Winamp Modern/scripts/configtabs.maki
$R0/Winamp Modern/scripts/configtarget.maki
$R0/Winamp Modern/scripts/crossfade.maki
$R0/Winamp Modern/scripts/display.maki
$R0/Winamp Modern/scripts/eq.maki
$R0/Winamp Modern/scripts/mainmenu.maki
$R0/Winamp Modern/scripts/mainmenuoverlay.maki
$R0/Winamp Modern/scripts/menualign.maki
$R0/Winamp Modern/scripts/mlmenu.maki
$R0/Winamp Modern/scripts/mute.maki
$R0/Winamp Modern/scripts/notifications_fade_times.maki
$R0/Winamp Modern/scripts/notifier.maki
$R0/Winamp Modern/scripts/plmenu.maki
$R0/Winamp Modern/scripts/pltime.maki
$R0/Winamp Modern/scripts/seek.maki
$R0/Winamp Modern/scripts/seekshade.maki
$R0/Winamp Modern/scripts/shadecontrol.maki
$R0/Winamp Modern/scripts/shadelinks.maki
$R0/Winamp Modern/scripts/shadesizepos.maki
$R0/Winamp Modern/scripts/songinfo.maki
$R0/Winamp Modern/scripts/standardframe.maki
$R0/Winamp Modern/scripts/titlebar.maki
$R0/Winamp Modern/scripts/video.maki
$R0/Winamp Modern/scripts/videoavs.maki
$R0/Winamp Modern/scripts/vis.maki
$R0/Winamp Modern/scripts/visualizer.maki
$R0/Winamp Modern/shade/bg_overlay.png
.png
$R0/Winamp Modern/shade/buttons.png
.png
$R0/Winamp Modern/shade/buttons2.PNG
.png
$R0/Winamp Modern/shade/buttons_bg.png
.png
$R0/Winamp Modern/shade/corners.png
.png
$R0/Winamp Modern/shade/display_overlay.png
.png
$R0/Winamp Modern/shade/led.png
.png
$R0/Winamp Modern/shade/nowplaying.png
.png
$R0/Winamp Modern/shade/pl_shade.png
.png
$R0/Winamp Modern/shade/playbackstatus.png
.png
$R0/Winamp Modern/shade/seek.png
.png
$R0/Winamp Modern/shade/shade_bg.PNG
.png
$R0/Winamp Modern/shade/songtickerfont.PNG
.png
$R0/Winamp Modern/shade/volume.png
.png
$R0/Winamp Modern/skin.xml
.xml
$R0/Winamp Modern/standardframe/standardframe-elements.xml
$R0/Winamp Modern/standardframe/standardframe.xml
$R0/Winamp Modern/standardframe/window_menus.xml
$R0/Winamp Modern/titlebar/titlebar.xml
$R0/Winamp Modern/window/Scrollgrips.png
.png
$R0/Winamp Modern/window/background.png
.png
$R0/Winamp Modern/window/main.png
.png
$R0/Winamp Modern/window/main2.png
.png
$R0/Winamp Modern/window/menu.png
.png
$R0/Winamp Modern/window/menu/file.png
.png
$R0/Winamp Modern/window/menu/help.png
.png
$R0/Winamp Modern/window/menu/options.png
.png
$R0/Winamp Modern/window/menu/play.png
.png
$R0/Winamp Modern/window/menu/playlist.png
.png
$R0/Winamp Modern/window/menu/sort.png
.png
$R0/Winamp Modern/window/menu/view.png
.png
$R0/Winamp Modern/window/menu_elements.png
.png
$R0/Winamp Modern/window/mlwindow.png
.png
$R0/Winamp Modern/window/plwindow.png
.png
$R0/Winamp Modern/window/scrollbars.png
.png
$R0/Winamp Modern/window/titlebar.png
.png
$R0/Winamp Modern/window/titlebar_overlay.png
.png
$R0/Winamp Modern/window/wasabi_window.PNG
.png
$R0/Winamp Modern/window/window-elements.png
.png
$R0/Winamp Modern/xml/albumart.xml
$R0/Winamp Modern/xml/color-presets.xml
$R0/Winamp Modern/xml/configdrawer.xml
$R0/Winamp Modern/xml/ml-normal.xml
$R0/Winamp Modern/xml/ml.xml
$R0/Winamp Modern/xml/notifier-elements.xml
$R0/Winamp Modern/xml/notifier-normal.xml
$R0/Winamp Modern/xml/notifier.xml
$R0/Winamp Modern/xml/player-elements-shade.xml
$R0/Winamp Modern/xml/player-elements.xml
$R0/Winamp Modern/xml/player-normal-group.xml
$R0/Winamp Modern/xml/player-normal.xml
$R0/Winamp Modern/xml/player-shade-group.xml
$R0/Winamp Modern/xml/player-shade.xml
$R0/Winamp Modern/xml/player.xml
$R0/Winamp Modern/xml/pledit-normal.xml
$R0/Winamp Modern/xml/pledit-shade-group.xml
$R0/Winamp Modern/xml/pledit-shade.xml
$R0/Winamp Modern/xml/pledit.xml
$R0/Winamp Modern/xml/system-colors.xml
$R0/Winamp Modern/xml/video-normal.xml
$R0/Winamp Modern/xml/video.xml
$R0/Winamp Modern/xml/vis-normal.xml
$R0/Winamp Modern/xml/vis.xml
$_12_/links.xml
.xml
$_15_
$_16_/demo.mp3
Components/ssdp.w6c
.dll windows:5 windows x86 arch:x86

d37b3ab742a9558a53496b4e1d8bbc38

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

f:\sandbox\20131120_103959\replicant\ssdp\Release\ssdp.pdb

Imports

kernel32

InitializeCriticalSection
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
Sleep
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
DisableThreadLibraryCalls
InterlockedCompareExchange
InterlockedExchange
CloseHandle
WaitForMultipleObjects
CreateEventW
CreateSemaphoreW
ReleaseSemaphore

nxlite

NXURIRetain
NXStringGetBytes
NXThreadCreate
NXSleep
NXStringGetBytesSize
NXStringGetBytesDirect
NXURICreateWithUTF8
NXStringKeywordCompareWithCString
NXStringRelease
NXURIGetNXString
NXURIRelease
NXStringRetain
NXStringCreateWithUTF8

jnetlib

jnl_udp_send
jnl_httpu_request_get_method
jnl_udp_set_peer_address
jnl_httpu_request_get_header
jnl_httpu_request_process
jnl_udp_create_multicast_listener
jnl_udp_get_address
jnl_httpu_request_create
jnl_udp_release
jnl_dns_resolve_now
jnl_udp_run
jnl_quit
jnl_init

msvcr90

memset
_crt_debugger_hook
__clean_type_info_names_internal
?_type_info_dtor_internal_method@type_info@@QAEXXZ
?terminate@@YAXXZ
_except_handler4_common
__CppXcptFilter
sprintf
_strnicmp
free
malloc
_snprintf
??_V@YAXPAX@Z
_purecall
??3@YAXPAX@Z
realloc
strtoul
_time64
memmove
??2@YAPAXI@Z
_unlock
__dllonexit
_encode_pointer
_lock
_onexit
_decode_pointer
_malloc_crt
_encoded_null
_initterm
_initterm_e
_amsg_exit
_adjust_fdiv
__CxxFrameHandler3

Exports

Exports

GetWasabi2Component

Sections

.text
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Elevator.exe
.exe windows:5 windows x86 arch:x86

1432be6aab5bce5c63a2a2f58745dfed

Code Sign

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

21-12-2012 00:00

Not After

30-12-2020 23:59

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

07
Certificate

Issuer

CN=America Online Root Certification Authority 1,O=America Online Inc.,C=US

Not Before

04-06-2004 17:26

Not After

04-06-2029 17:26

Subject

CN=AOL Member CA,O=America Online Inc.,L=Dulles,ST=Virginia,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

5a:a8:c9:c3:87:71:9f:49:a1:6a:f2:40:65:56:55:50
Certificate

Issuer

CN=AOL Member CA,O=America Online Inc.,L=Dulles,ST=Virginia,C=US

Not Before

15-03-2011 18:25

Not After

14-03-2016 18:25

Subject

CN=Nullsoft Inc.,OU=Winamp,O=Nullsoft Inc.,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

18-10-2012 00:00

Not After

29-12-2020 23:59

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

2d:eb:c7:85:58:39:68:47:8a:24:35:f4:0f:79:9f:63:68:a5:2f:a0
Signer

Actual PE Digest

2d:eb:c7:85:58:39:68:47:8a:24:35:f4:0f:79:9f:63:68:a5:2f:a0

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

f:\sandbox\20131120_103959\Elevator\Release\Elevator.pdb

Imports

shlwapi

PathCombineW

kernel32

GetSystemTimeAsFileTime
GetCurrentProcessId
TerminateProcess
GetTickCount
QueryPerformanceCounter
SetUnhandledExceptionFilter
GetCurrentProcess
DeleteFileW
FindNextFileW
RemoveDirectoryW
FindClose
GetVersionExW
MoveFileExW
CreateProcessW
FindFirstFileW
lstrlenW
GetModuleFileNameW
UnhandledExceptionFilter
GetCurrentThreadId
IsDebuggerPresent
GetStartupInfoA
InterlockedCompareExchange
Sleep
InterlockedExchange

user32

GetMessageW
SendMessageW
DispatchMessageW
PostQuitMessage
TranslateMessage
FindWindowW
CharUpperW

advapi32

RegOpenKeyW
RegQueryValueExW
RegEnumKeyW
RegCreateKeyW
RegSetValueExW
RegCloseKey
RegEnumKeyExW
RegOpenKeyExW
ConvertStringSecurityDescriptorToSecurityDescriptorW
GetSecurityDescriptorLength
RegDeleteKeyW
RegCreateKeyExW
RegSetValueExA
RegDeleteValueW

shell32

SHFileOperationW

ole32

StringFromGUID2
CoInitialize
CoRevokeClassObject
CoRegisterClassObject
CoCreateInstance
CoUninitialize

msvcr90

_crt_debugger_hook
_controlfp_s
_invoke_watson
_except_handler4_common
_decode_pointer
strstr
_vsnwprintf
memcmp
??3@YAXPAX@Z
_wcsicmp
wcslen
memset
wcsncmp
wcscmp
towupper
_stricmp
_amsg_exit
__getmainargs
_cexit
_exit
_XcptFilter
_ismbblead
exit
_acmdln
_initterm
_initterm_e
_configthreadlocale
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
_encode_pointer
__set_app_type
?terminate@@YAXXZ
?_type_info_dtor_internal_method@type_info@@QAEXXZ
_unlock
__dllonexit
_lock
_onexit

Sections

.text
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 63KB - Virtual size: 63KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Microsoft.VC90.CRT/Microsoft.VC90.CRT.manifest
.xml
Microsoft.VC90.CRT/msvcr90.dll
.dll windows:5 windows x86 arch:x86

0453db624ecaef7c4f3da938cd1d0fc5

Code Sign

2e:ab:11:dc:50:ff:5c:9d:cb:c0
Certificate

Issuer

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

Not Before

22-08-2007 22:31

Not After

25-08-2012 07:00

Subject

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:01:b2:9b:00:00:00:00:00:15
Certificate

Issuer

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

21-02-2011 20:53

Not After

21-05-2012 20:53

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

6a:0b:99:4f:c0:00:25:ab:11:db:45:1f:58:7a:67:a2
Certificate

Issuer

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

Not Before

16-09-2006 01:04

Not After

15-09-2019 07:00

Subject

CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:05:a2:30:00:00:00:00:00:08
Certificate

Issuer

CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

25-07-2008 19:01

Not After

25-07-2013 19:11

Subject

CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:85D3-305C-5BCF,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

82:a8:fd:81:95:b8:5c:73:58:49:38:42:b4:59:3c:50:b4:87:cc:be
Signer

Actual PE Digest

82:a8:fd:81:95:b8:5c:73:58:49:38:42:b4:59:3c:50:b4:87:cc:be

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

msvcr90.i386.pdb

Imports

kernel32

GetModuleFileNameA
GetModuleFileNameW
GetModuleHandleW
Sleep
GetProcAddress
ExitProcess
WriteFile
GetStdHandle
GetSystemWindowsDirectoryW
GetSystemDirectoryW
GetLongPathNameW
GetCurrentThreadId
TlsGetValue
DebugBreak
OutputDebugStringA
GetCommandLineA
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
ExitThread
CloseHandle
GetLastError
ResumeThread
CreateThread
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
InterlockedDecrement
GetCurrentThread
FindNextFileA
FindFirstFileA
FindClose
FindNextFileW
FindFirstFileW
GetLogicalDrives
GetDiskFreeSpaceA
FileTimeToSystemTime
FileTimeToLocalFileTime
SetErrorMode
Beep
GetFileAttributesA
SetFileAttributesA
SetEnvironmentVariableA
GetCurrentDirectoryA
SetCurrentDirectoryA
GetFullPathNameA
GetDriveTypeA
GetCurrentProcessId
CreateDirectoryA
MoveFileA
RemoveDirectoryA
DeleteFileA
GetFileAttributesW
SetEnvironmentVariableW
GetCurrentDirectoryW
SetCurrentDirectoryW
SetFileAttributesW
GetFullPathNameW
CreateDirectoryW
MoveFileW
RemoveDirectoryW
GetDriveTypeW
DeleteFileW
GetExitCodeProcess
WaitForSingleObject
CreateProcessA
LoadLibraryA
FreeLibrary
CreateProcessW
ReadFile
DuplicateHandle
GetCurrentProcess
GetSystemTimeAsFileTime
GetTimeZoneInformation
GetLocalTime
WideCharToMultiByte
SetFileTime
LocalFileTimeToFileTime
SystemTimeToFileTime
SetLocalTime
MultiByteToWideChar
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
GetTimeFormatA
GetDateFormatA
RtlUnwind
RaiseException
HeapFree
HeapAlloc
GetProcessHeap
GetEnvironmentVariableA
HeapDestroy
HeapCreate
VirtualFree
HeapSize
HeapReAlloc
VirtualAlloc
HeapValidate
HeapCompact
HeapWalk
VirtualProtect
GetSystemInfo
VirtualQuery
SetHandleCount
GetFileType
GetStartupInfoA
GetFileInformationByHandle
PeekNamedPipe
CreateFileA
CreateFileW
SetFilePointer
GetConsoleCP
GetConsoleMode
FlushFileBuffers
CreatePipe
SetStdHandle
ReadConsoleInputA
SetConsoleMode
PeekConsoleInputA
GetNumberOfConsoleInputEvents
ReadConsoleInputW
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
IsDBCSLeadByteEx
ReadConsoleA
ReadConsoleW
SetEndOfFile
InterlockedExchange
LockFile
UnlockFile
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
SetConsoleCtrlHandler
InitializeCriticalSectionAndSpinCount
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
FreeEnvironmentStringsA
GetEnvironmentStrings
QueryPerformanceCounter
GetTickCount
GetStringTypeW
GetStringTypeA
LCMapStringA
LCMapStringW
CompareStringA
CompareStringW
GetLocaleInfoW
GetLocaleInfoA
GetUserDefaultLCID
EnumSystemLocalesA
IsValidLocale
LoadLibraryW
GetModuleHandleA

Exports

Exports

$I10_OUTPUT
??0__non_rtti_object@std@@QAE@ABV01@@Z
??0bad_cast@std@@QAE@ABV01@@Z
??0bad_cast@std@@QAE@PBD@Z
??0bad_typeid@std@@QAE@ABV01@@Z
??0bad_typeid@std@@QAE@PBD@Z
??0exception@std@@QAE@ABQBD@Z
??0exception@std@@QAE@ABQBDH@Z
??0exception@std@@QAE@ABV01@@Z
??0exception@std@@QAE@XZ
??1__non_rtti_object@std@@UAE@XZ
??1bad_cast@std@@UAE@XZ
??1bad_typeid@std@@UAE@XZ
??1exception@std@@UAE@XZ
??1type_info@@UAE@XZ
??2@YAPAXI@Z
??2@YAPAXIHPBDH@Z
??3@YAXPAX@Z
??4__non_rtti_object@std@@QAEAAV01@ABV01@@Z
??4bad_cast@std@@QAEAAV01@ABV01@@Z
??4bad_typeid@std@@QAEAAV01@ABV01@@Z
??4exception@std@@QAEAAV01@ABV01@@Z
??8type_info@@QBE_NABV0@@Z
??9type_info@@QBE_NABV0@@Z
??_7__non_rtti_object@std@@6B@
??_7bad_cast@std@@6B@
??_7bad_typeid@std@@6B@
??_7exception@@6B@
??_7exception@std@@6B@
??_Fbad_cast@std@@QAEXXZ
??_Fbad_typeid@std@@QAEXXZ
??_U@YAPAXI@Z
??_U@YAPAXIHPBDH@Z
??_V@YAXPAX@Z
?_Name_base@type_info@@CAPBDPBV1@PAU__type_info_node@@@Z
?_Name_base_internal@type_info@@CAPBDPBV1@PAU__type_info_node@@@Z
?_Type_info_dtor@type_info@@CAXPAV1@@Z
?_Type_info_dtor_internal@type_info@@CAXPAV1@@Z
?_ValidateExecute@@YAHP6GHXZ@Z
?_ValidateRead@@YAHPBXI@Z
?_ValidateWrite@@YAHPAXI@Z
?_inconsistency@@YAXXZ
?_invalid_parameter@@YAXPBG00II@Z
?_is_exception_typeof@@YAHABVtype_info@@PAU_EXCEPTION_POINTERS@@@Z
?_name_internal_method@type_info@@QBEPBDPAU__type_info_node@@@Z
?_open@@YAHPBDHH@Z
?_query_new_handler@@YAP6AHI@ZXZ
?_query_new_mode@@YAHXZ
?_set_new_handler@@YAP6AHI@ZH@Z
?_set_new_handler@@YAP6AHI@ZP6AHI@Z@Z
?_set_new_mode@@YAHH@Z
?_set_se_translator@@YAP6AXIPAU_EXCEPTION_POINTERS@@@ZH@Z
?_set_se_translator@@YAP6AXIPAU_EXCEPTION_POINTERS@@@ZP6AXI0@Z@Z
?_sopen@@YAHPBDHHH@Z
?_type_info_dtor_internal_method@type_info@@QAEXXZ
?_wopen@@YAHPB_WHH@Z
?_wsopen@@YAHPB_WHHH@Z
?before@type_info@@QBEHABV1@@Z
?name@type_info@@QBEPBDPAU__type_info_node@@@Z
?raw_name@type_info@@QBEPBDXZ
?set_new_handler@@YAP6AXXZP6AXXZ@Z
?set_terminate@@YAP6AXXZH@Z
?set_terminate@@YAP6AXXZP6AXXZ@Z
?set_unexpected@@YAP6AXXZH@Z
?set_unexpected@@YAP6AXXZP6AXXZ@Z
?swprintf@@YAHPAGIPBGZZ
?swprintf@@YAHPA_WIPB_WZZ
?terminate@@YAXXZ
?unexpected@@YAXXZ
?vswprintf@@YAHPA_WIPB_WPAD@Z
?what@exception@std@@UBEPBDXZ
_CIacos
_CIasin
_CIatan
_CIatan2
_CIcos
_CIcosh
_CIexp
_CIfmod
_CIlog
_CIlog10
_CIpow
_CIsin
_CIsinh
_CIsqrt
_CItan
_CItanh
_CRT_RTC_INIT
_CRT_RTC_INITW
_CreateFrameInfo
_CxxThrowException
_EH_prolog
_FindAndUnlinkFrame
_Getdays
_Getmonths
_Gettnames
_HUGE
_IsExceptionObjectToBeDestroyed
_NLG_Dispatch2
_NLG_Return
_NLG_Return2
_Strftime
_XcptFilter
__AdjustPointer
__BuildCatchObject
__BuildCatchObjectHelper
__CppXcptFilter
__CxxCallUnwindDelDtor
__CxxCallUnwindDtor
__CxxCallUnwindStdDelDtor
__CxxCallUnwindVecDtor
__CxxDetectRethrow
__CxxExceptionFilter
__CxxFrameHandler
__CxxFrameHandler2
__CxxFrameHandler3
__CxxLongjmpUnwind
__CxxQueryExceptionSize
__CxxRegisterExceptionObject
__CxxUnregisterExceptionObject
__DestructExceptionObject
__FrameUnwindFilter
__RTCastToVoid
__RTDynamicCast
__RTtypeid
__STRINGTOLD
__STRINGTOLD_L
__TypeMatch
___fls_getvalue@4
___fls_setvalue@8
___lc_codepage_func
___lc_collate_cp_func
___lc_handle_func
___mb_cur_max_func
___mb_cur_max_l_func
___setlc_active_func
___unguarded_readlc_active_add_func
__argc
__argv
__badioinfo
__clean_type_info_names_internal
__control87_2
__create_locale
__crtCompareStringA
__crtCompareStringW
__crtGetLocaleInfoW
__crtGetStringTypeW
__crtLCMapStringA
__crtLCMapStringW
__daylight
__dllonexit
__doserrno
__dstbias
__fpecode
__free_locale
__get_app_type
__get_current_locale
__get_flsindex
__get_tlsindex
__getmainargs
__initenv
__iob_func
__isascii
__iscsym
__iscsymf
__iswcsym
__iswcsymf
__lc_clike
__lc_codepage
__lc_collate_cp
__lc_handle
__lconv
__lconv_init
__libm_sse2_acos
__libm_sse2_acosf
__libm_sse2_asin
__libm_sse2_asinf
__libm_sse2_atan
__libm_sse2_atan2
__libm_sse2_atanf
__libm_sse2_cos
__libm_sse2_cosf
__libm_sse2_exp
__libm_sse2_expf
__libm_sse2_log
__libm_sse2_log10
__libm_sse2_log10f
__libm_sse2_logf
__libm_sse2_pow
__libm_sse2_powf
__libm_sse2_sin
__libm_sse2_sinf
__libm_sse2_tan
__libm_sse2_tanf
__mb_cur_max
__p___argc
__p___argv
__p___initenv
__p___mb_cur_max
__p___wargv
__p___winitenv
__p__acmdln
__p__amblksiz
__p__commode
__p__daylight
__p__dstbias
__p__environ
__p__fmode
__p__iob
__p__mbcasemap
__p__mbctype
__p__pctype
__p__pgmptr
__p__pwctype
__p__timezone
__p__tzname
__p__wcmdln
__p__wenviron
__p__wpgmptr
__pctype_func
__pioinfo
__pwctype_func
__pxcptinfoptrs
__report_gsfailure
__set_app_type
__set_flsgetvalue
__setlc_active
__setusermatherr
__strncnt
__swprintf_l
__sys_errlist
__sys_nerr
__threadhandle
__threadid
__timezone
__toascii
__tzname
__unDName
__unDNameEx
__unDNameHelper
__uncaught_exception
__unguarded_readlc_active
__vswprintf_l
__wargv
__wcserror
__wcserror_s
__wcsncnt
__wgetmainargs
__winitenv
_abnormal_termination
_abs64
_access
_access_s
_acmdln
_adj_fdiv_m16i
_adj_fdiv_m32
_adj_fdiv_m32i
_adj_fdiv_m64
_adj_fdiv_r
_adj_fdivr_m16i
_adj_fdivr_m32
_adj_fdivr_m32i
_adj_fdivr_m64
_adj_fpatan
_adj_fprem
_adj_fprem1
_adj_fptan
_adjust_fdiv
_aexit_rtn
_aligned_free
_aligned_malloc
_aligned_msize
_aligned_offset_malloc
_aligned_offset_realloc
_aligned_offset_recalloc
_aligned_realloc
_aligned_recalloc
_amsg_exit
_assert
_atodbl
_atodbl_l
_atof_l
_atoflt
_atoflt_l
_atoi64
_atoi64_l
_atoi_l
_atol_l
_atoldbl
_atoldbl_l
_beep
_beginthread
_beginthreadex
_byteswap_uint64
_byteswap_ulong
_byteswap_ushort
_c_exit
_cabs
_callnewh
_calloc_crt
_cexit
_cgets
_cgets_s
_cgetws
_cgetws_s
_chdir
_chdrive
_chgsign
_chkesp
_chmod
_chsize
_chsize_s
_clearfp
_close
_commit
_commode
_configthreadlocale
_control87
_controlfp
_controlfp_s
_copysign
_cprintf
_cprintf_l
_cprintf_p
_cprintf_p_l
_cprintf_s
_cprintf_s_l
_cputs
_cputws
_creat
_create_locale
_crt_debugger_hook
_cscanf
_cscanf_l
_cscanf_s
_cscanf_s_l
_ctime32
_ctime32_s
_ctime64
_ctime64_s
_cwait
_cwprintf
_cwprintf_l
_cwprintf_p
_cwprintf_p_l
_cwprintf_s
_cwprintf_s_l
_cwscanf
_cwscanf_l
_cwscanf_s
_cwscanf_s_l
_daylight
_decode_pointer
_difftime32
_difftime64
_dosmaperr
_dstbias
_dup
_dup2
_dupenv_s
_ecvt
_ecvt_s
_encode_pointer
_encoded_null
_endthread
_endthreadex
_environ
_eof
_errno
_except_handler2
_except_handler3
_except_handler4_common
_execl
_execle
_execlp
_execlpe
_execv
_execve
_execvp
_execvpe
_exit
_expand
_fclose_nolock
_fcloseall
_fcvt
_fcvt_s
_fdopen
_fflush_nolock
_fgetchar
_fgetwc_nolock
_fgetwchar
_filbuf
_filelength
_filelengthi64
_fileno
_findclose
_findfirst32
_findfirst32i64
_findfirst64
_findfirst64i32
_findnext32
_findnext32i64
_findnext64
_findnext64i32
_finite
_flsbuf
_flushall
_fmode
_fpclass
_fpieee_flt
_fpreset
_fprintf_l
_fprintf_p
_fprintf_p_l
_fprintf_s_l
_fputchar
_fputwc_nolock
_fputwchar
_fread_nolock
_fread_nolock_s
_free_locale
_freea
_freea_s
_freefls
_fscanf_l
_fscanf_s_l
_fseek_nolock
_fseeki64
_fseeki64_nolock
_fsopen
_fstat32
_fstat32i64
_fstat64
_fstat64i32
_ftell_nolock
_ftelli64
_ftelli64_nolock
_ftime32
_ftime32_s
_ftime64
_ftime64_s
_ftol
_fullpath
_futime32
_futime64
_fwprintf_l
_fwprintf_p
_fwprintf_p_l
_fwprintf_s_l
_fwrite_nolock
_fwscanf_l
_fwscanf_s_l
_gcvt
_gcvt_s
_get_amblksiz
_get_current_locale
_get_daylight
_get_doserrno
_get_dstbias
_get_errno
_get_fmode
_get_heap_handle
_get_invalid_parameter_handler
_get_osfhandle
_get_output_format
_get_pgmptr
_get_printf_count_output
_get_purecall_handler
_get_sbh_threshold
_get_terminate
_get_timezone
_get_tzname
_get_unexpected
_get_wpgmptr
_getc_nolock
_getch
_getch_nolock
_getche
_getche_nolock
_getcwd
_getdcwd
_getdcwd_nolock
_getdiskfree
_getdllprocaddr
_getdrive
_getdrives
_getmaxstdio
_getmbcp
_getpid
_getptd
_getsystime
_getw
_getwch
_getwch_nolock
_getwche
_getwche_nolock
_getws
_getws_s
_global_unwind2
_gmtime32

Sections

.text
Size: 599KB - Virtual size: 598KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 17KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 976B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Plugins/DSP_SPS/cockos - octave down.sps
Plugins/DSP_SPS/cockos - octave up.sps
Plugins/DSP_SPS/cockos - pitch down.sps
Plugins/DSP_SPS/cockos - variable length delay.sps
Plugins/DSP_SPS/justin - delay (with feedback).sps
Plugins/DSP_SPS/justin - huge massive speederupper.sps
Plugins/DSP_SPS/justin - loop sampler.sps
Plugins/DSP_SPS/justin - low res delay.sps
Plugins/DSP_SPS/justin - mix to mono.sps
Plugins/DSP_SPS/justin - resolution reduction.sps
Plugins/DSP_SPS/justin - reverseness.sps
Plugins/DSP_SPS/justin - simple delay.sps
Plugins/DSP_SPS/justin - simple pitch and tempo (half-2x) control.sps
Plugins/DSP_SPS/justin - simple volume control.sps
Plugins/DSP_SPS/justin - stereo channel swap.sps
Plugins/DSP_SPS/justin - stupid stereo voice removal.sps
Plugins/DSP_SPS/justin - tremolo and pingpong.sps
Plugins/ReplayGainAnalysis.dll
.dll windows:5 windows x86 arch:x86

42a5b89c05bbbff7375d9fe67133ee03

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

f:\sandbox\20131120_103959\ReplayGainAnalysis\Release\ReplayGainAnalysis.pdb

Imports

nsutil

nsutil_stats_RMS_F32
nsutil_iir_Filter_F32_IP
nsutil_iir_Create_F32
nsutil_iir_Destroy_F32
nsutil_iir_Reset_F32
nsutil_iir_Filter_F32

msvcr90

_initterm
_initterm_e
_amsg_exit
_adjust_fdiv
_decode_pointer
__clean_type_info_names_internal
_unlock
memcpy
_lock
_onexit
_except_handler4_common
_crt_debugger_hook
_encoded_null
_malloc_crt
_encode_pointer
calloc
free
ceil
memmove
memset
_CIlog10
__CppXcptFilter
__dllonexit

kernel32

GetCurrentProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
DisableThreadLibraryCalls
InterlockedCompareExchange
Sleep
InterlockedExchange
TerminateProcess

Exports

Exports

WAAnalyzeSamples
WACreateRGContext
WAFreeRGContext
WAGetAlbumGain
WAGetTitleGain
WAInitGainAnalysis
WAResetSampleFrequency

Sections

.text
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 864B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 462B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Plugins/dsp_sps.dll
.dll windows:4 windows x86 arch:x86

14b932d8b5975e792820c72f9da58788

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

DisableThreadLibraryCalls
GlobalAlloc
VirtualAlloc
GetSystemInfo
lstrcpynA
VirtualFree
VirtualQuery
GetPrivateProfileStringA
GetPrivateProfileIntA
CreateDirectoryA
LoadLibraryA
GetModuleFileNameA
WritePrivateProfileStringA
GlobalFree
lstrlenA
SetCurrentDirectoryA
GetCurrentDirectoryA
LeaveCriticalSection
EnterCriticalSection
LockResource
LoadResource
FindResourceA
InitializeCriticalSection
DeleteCriticalSection
WritePrivateProfileStructA
GetPrivateProfileStructA

user32

EnableWindow
SetWindowLongA
SetForegroundWindow
GetWindowRect
EndDialog
GetWindowLongA
GetDlgItem
KillTimer
GetDlgItemTextA
IsDlgButtonChecked
MessageBoxA
SetTimer
CharUpperA
SendDlgItemMessageA
DestroyWindow
SendMessageTimeoutA
PostMessageA
ShowWindow
IsWindow
SendMessageA
wsprintfA
IsCharAlphaNumericA
IsCharAlphaA
SetWindowPos
SetDlgItemTextA
CheckDlgButton
SetWindowTextA

comdlg32

GetSaveFileNameA
GetOpenFileNameA

msvcrt

strrchr
atoi
calloc
malloc
free
realloc
fabs
rand
asin
acos
atof
atan
atan2
pow
exp
floor
ceil
_ftol
_strnicmp
_strcmpi

Exports

Exports

winampDSPGetHeader2
winampUninstallPlugin

Sections

.text
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 119KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Plugins/enc_fhgaac.dll
.dll windows:5 windows x86 arch:x86

b72aed293c95b7b85ae1d48a24f4f794

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

f:\sandbox\20131120_103959\enc_fhgaac\Release\enc_fhgaac.pdb

Imports

shlwapi

PathIsURLW
StrChrW

msvcr90

_except_handler4_common
_onexit
_lock
__dllonexit
_unlock
__clean_type_info_names_internal
?_type_info_dtor_internal_method@type_info@@QAEXXZ
?terminate@@YAXXZ
__CppXcptFilter
_adjust_fdiv
_CIsinh
_amsg_exit
_initterm_e
_initterm
_decode_pointer
_encoded_null
_malloc_crt
_encode_pointer
_vsnwprintf
_strdup
memset
strchr
_stricmp
_vsnprintf
calloc
??2@YAPAXI@Z
exit
ldexp
_CIatan2
strncmp
_CIasin
__iob_func
_CIacos
_CItan
_CIlog10
_CIatan
fclose
_controlfp
_CIpow
_CIexp
_CIcos
_CIsin
memmove
_CIsqrt
_CIlog
??3@YAXPAX@Z
_purecall
malloc
free
ceil
memcpy
_crt_debugger_hook
floor
sprintf
vsprintf
strrchr
strncpy

kernel32

IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
DisableThreadLibraryCalls
InterlockedCompareExchange
Sleep
InterlockedExchange
MoveFileW
GetTempPathW
CopyFileW
lstrlenA
GetTempFileNameW
lstrcpyW
FindNextFileW
FindClose
lstrcmpiA
MultiByteToWideChar
WideCharToMultiByte
VirtualQuery
lstrcpynA
GetPrivateProfileIntA
WritePrivateProfileStringA
FindFirstFileW
DeleteFileW

user32

LoadCursorW
EnableWindow
SetDlgItemTextW
ShowWindow
GetDlgItem
SetDlgItemTextA
SendDlgItemMessageW
SetWindowLongW
GetWindowLongW
LoadImageW
GetDlgItemInt
CallWindowProcW
GetPropW
SetCursor
DrawTextW
SendMessageW
SetPropW
GetDlgItemTextW

gdi32

MoveToEx
LineTo
SetTextColor
DeleteObject
SelectObject
CreatePen

libmp4v2

MP4MakeIsmaCompliant
MP4Create
MP4Close
MP4SetAudioProfileLevel
MP4SetTimeScale
MP4SetMetadataTool
MP4AddAudioTrack
MP4WriteSample
MP4SetTrackESConfiguration
MP4SetMetadataFreeForm

nsutil

nsutil_pcm_IntToFloat_Interleaved

Exports

Exports

ConfigAudio3
CreateAudio3
FinishAudio3
FinishAudio3W
GetAudioTypes3
GetConfigItem
PrepareToFinish
PrepareToFinishW
SetWinampHWND

Sections

.text
Size: 750KB - Virtual size: 750KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 209KB - Virtual size: 208KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 20KB - Virtual size: 92KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 18KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 21KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Plugins/enc_flac.dll
.dll windows:5 windows x86 arch:x86

ad62033eeb176efa5be2402c298957f2

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

f:\sandbox\20131120_103959\enc_flac2\Release\enc_flac.pdb

Imports

shlwapi

PathRemoveFileSpecW
PathIsURLW
PathAppendW
StrChrW

kernel32

CreateFileW
GetTempPathW
MoveFileW
CloseHandle
DeleteFileW
FindFirstFileW
VirtualQuery
GetPrivateProfileIntA
WideCharToMultiByte
LoadLibraryW
GetModuleFileNameW
MultiByteToWideChar
GetProcAddress
FindClose
WritePrivateProfileStringA
FindNextFileW
CopyFileW
SetFilePointer
WriteFile
GetLastError
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
DisableThreadLibraryCalls
InterlockedCompareExchange
Sleep
RaiseException
LoadLibraryA
InterlockedExchange
FreeLibrary
GetTempFileNameW
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
lstrcpyW
IsDebuggerPresent
LocalAlloc

user32

GetDlgItem
SetWindowLongW
GetDlgItemTextW
SetPropW
GetPropW
SetDlgItemTextA
CallWindowProcW
LoadCursorW
DrawTextW
SetCursor
SendMessageW

gdi32

LineTo
SetTextColor
DeleteObject
SelectObject
CreatePen
MoveToEx

msvcr90

_stricmp
free
malloc
strchr
memset
_vsnprintf
_strdup
??2@YAPAXI@Z
_encode_pointer
_malloc_crt
_encoded_null
_decode_pointer
_initterm
_initterm_e
_amsg_exit
_adjust_fdiv
__CppXcptFilter
?terminate@@YAXXZ
?_type_info_dtor_internal_method@type_info@@QAEXXZ
__clean_type_info_names_internal
_unlock
__dllonexit
_lock
_onexit
_except_handler4_common
_crt_debugger_hook
_purecall
??3@YAXPAX@Z

Exports

Exports

ConfigAudio3
CreateAudio3
FinishAudio3
FinishAudio3W
GetAudioTypes3
GetConfigItem
PrepareToFinish
PrepareToFinishW
SetConfigItem
SetWinampHWND

Sections

.text
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Plugins/enc_lame.dll
.dll windows:5 windows x86 arch:x86

23660243c331132e34c4583c1005ed18

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

f:\sandbox\20131120_103959\enc_lame\Release\enc_lame.pdb

Imports

kernel32

lstrlenA
WritePrivateProfileStructA
VirtualQuery
lstrcpynA
lstrcmpiA
GetProcAddress
LoadLibraryA
GetPrivateProfileStructA
GetModuleFileNameA
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
DisableThreadLibraryCalls
InterlockedCompareExchange
Sleep
InterlockedExchange
IsDebuggerPresent

user32

SendDlgItemMessageA
SendMessageA
SetWindowLongA
GetDlgItem
SendDlgItemMessageW
SetDlgItemTextW
EnableWindow
SetDlgItemTextA

msvcr90

_vsnprintf
??3@YAXPAX@Z
??2@YAPAXI@Z
memset
_purecall
_encode_pointer
_malloc_crt
_vsnwprintf
_decode_pointer
_initterm
_initterm_e
_amsg_exit
_adjust_fdiv
__CppXcptFilter
?terminate@@YAXXZ
?_type_info_dtor_internal_method@type_info@@QAEXXZ
__clean_type_info_names_internal
_unlock
__dllonexit
_lock
_onexit
_except_handler4_common
_crt_debugger_hook
atoi
free
malloc
memcpy
_encoded_null

Exports

Exports

ConfigAudio3
CreateAudio3
FinishAudio3
GetAudioTypes3
GetConfigItem
PrepareToFinish
SetConfigItem
SetWinampHWND

Sections

.text
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 896B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Plugins/enc_vorbis.dll
.dll windows:5 windows x86 arch:x86

a1ea9ca06554f283104a7b633a9a8943

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

f:\sandbox\20131120_103959\enc_vorbis\Release\enc_vorbis.pdb

Imports

kernel32

FreeLibrary
GetProcAddress
LocalAlloc
LoadLibraryA
InterlockedExchange
GetLastError
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
RaiseException
GetPrivateProfileStructA
GetTickCount
VirtualQuery
WritePrivateProfileStructA

user32

SetCursor
SendDlgItemMessageA
DrawTextW
SendMessageA
SetPropW
SetWindowLongA
GetWindowLongA
GetDlgItem
SetWindowLongW
GetDlgItemTextW
LoadCursorA
GetPropW
SetDlgItemTextA
CallWindowProcW

gdi32

SetTextColor
DeleteObject
SelectObject
CreatePen
MoveToEx
LineTo

msvcr90

memset
_CIexp
_CIsqrt
malloc
_vsnprintf
_purecall
??3@YAXPAX@Z
_strdup
??2@YAPAXI@Z
memmove
calloc
realloc
ceil
ldexp
qsort
exit
?terminate@@YAXXZ
?_type_info_dtor_internal_method@type_info@@QAEXXZ
_except_handler4_common
_crt_debugger_hook
_CIcos
floor
_CIatan
_CIpow
_CIsin
_CIlog
free
memcpy

Exports

Exports

ConfigAudio3
CreateAudio3
FinishAudio3
GetAudioTypes3
SetWinampHWND

Sections

.text
Size: 94KB - Virtual size: 93KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1.5MB - Virtual size: 1.5MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Plugins/enc_wav.dll
.dll windows:5 windows x86 arch:x86

fbdd25b05ee4e017623093b696caf8e7

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

f:\sandbox\20131120_103959\enc_wav\Release\enc_wav.pdb

Imports

msacm32

acmStreamUnprepareHeader
acmStreamClose
acmStreamPrepareHeader
acmFormatChooseA
acmFormatDetailsA
acmFormatTagDetailsA
acmFormatSuggest
acmStreamConvert
acmStreamOpen

shlwapi

StrChrW
PathIsURLW

kernel32

SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsDebuggerPresent
lstrcpyW
FindNextFileW
GetPrivateProfileStructA
GetPrivateProfileStringA
FindClose
MultiByteToWideChar
WideCharToMultiByte
GetFileSize
SetFilePointer
WriteFile
CreateFileW
CloseHandle
WritePrivateProfileStructA
WritePrivateProfileStringA
FindFirstFileW
VirtualQuery
lstrcpynA
GetPrivateProfileIntA

user32

GetWindowLongA
SendDlgItemMessageA
IsDlgButtonChecked
GetDlgItemTextA
SetDlgItemTextA
SendMessageA
CheckDlgButton
SetWindowLongA

msvcr90

_crt_debugger_hook
_except_handler4_common
?_type_info_dtor_internal_method@type_info@@QAEXXZ
?terminate@@YAXXZ
??2@YAPAXI@Z
_strdup
memcpy
free
malloc
memset
_purecall
??3@YAXPAX@Z
_vsnprintf
_stricmp
strchr

Exports

Exports

ConfigAudio3
CreateAudio3
FinishAudio3
FinishAudio3W
GetAudioTypes3
GetConfigItem
SetWinampHWND

Sections

.text
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 968B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 620B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Plugins/enc_wma.dll
.dll windows:5 windows x86 arch:x86

3917823fe7ce671446f64650d18e2d45

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

f:\sandbox\20131120_103959\enc_wma\Release\enc_wma.pdb

Imports

wmvcore

WMCreateProfileManager
WMCreateWriterFileSink
WMCreateIndexer
WMCreateWriter

shlwapi

StrChrW
PathIsURLW

kernel32

TerminateProcess
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
lstrcpyW
FindNextFileW
FindClose
GetTempFileNameW
WaitForSingleObject
SetEvent
GetPrivateProfileStructW
CreateEventA
MultiByteToWideChar
GetTempPathW
MoveFileW
CloseHandle
DeleteFileW
WritePrivateProfileStructA
WideCharToMultiByte
WritePrivateProfileStructW
GetLastError
GetPrivateProfileStructA
FindFirstFileW
VirtualQuery
lstrcmpiA

user32

GetWindowLongA
SendDlgItemMessageA
SetDlgItemTextW
wsprintfW
SendMessageA
SendDlgItemMessageW
SetWindowLongA
MessageBoxW

msvcr90

_crt_debugger_hook
_except_handler4_common
?_type_info_dtor_internal_method@type_info@@QAEXXZ
__CxxFrameHandler3
?terminate@@YAXXZ
_vsnprintf
strchr
_stricmp
_strdup
wcsncpy
strstr
memcpy
memcmp
free
malloc
memset
_purecall
??3@YAXPAX@Z
??2@YAPAXI@Z
calloc

Exports

Exports

ConfigAudio3
CreateAudio3
FinishAudio3
FinishAudio3W
GetAudioTypes3
GetConfigItem
PrepareToFinish
PrepareToFinishW
SetConfigItem
SetWinampHWND

Sections

.text
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 770B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Plugins/freeform/wacs/freetype/freetype.wac
.dll windows:5 windows x86 arch:x86

4e7879cccc841c939fb2e03a206b7c5a

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

f:\sandbox\20131120_103959\freetypewac\Release\freetypewac.pdb

Imports

kernel32

FreeLibrary
GetStringTypeExW
MulDiv
LoadLibraryA
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
DisableThreadLibraryCalls
InterlockedCompareExchange
InterlockedExchange
CompareStringW
OutputDebugStringA
GetTickCount
QueryPerformanceCounter
Sleep
QueryPerformanceFrequency
GetFileSize
ReadFile
GetLastError
GetCurrentThreadId

tataki

?blit@SkinBitmap@@QAEXPAVifc_canvas@@HH@Z
?setHasAlpha@SkinBitmap@@QAEXH@Z
??1SkinBitmap@@QAE@XZ
??0SkinBitmap@@QAE@HHK@Z
Quit
?BLEND_MUL_MMX@Blenders@@SAIIH@Z
?BLEND_ADJ1@Blenders@@SAIIIH@Z
?BLEND_MUL@Blenders@@SAIIH@Z
?mmx_available@Blenders@@2HA
Init

msvcr90

malloc
memmove
realloc
memcpy
strlen
vsprintf_s
strstr
strncpy
free
qsort
strrchr
longjmp
fopen
fread
ftell
fseek
fclose
strncmp
atol
sprintf
memchr
_unlock
__dllonexit
_encode_pointer
_lock
_onexit
_decode_pointer
_malloc_crt
_encoded_null
_initterm
_initterm_e
_amsg_exit
_adjust_fdiv
__CppXcptFilter
_except_handler4_common
?terminate@@YAXXZ
?_type_info_dtor_internal_method@type_info@@QAEXXZ
__clean_type_info_names_internal
_crt_debugger_hook
memset
wcscmp
_purecall
memcmp
sin
_wtoi_l
wcscpy
tan
wcslen
wcsncpy
isspace
_create_locale
cos
wcscat
??2@YAPAXI@Z
??3@YAXPAX@Z
_setjmp3
__CxxFrameHandler3

Exports

Exports

WAC_enumComponent
WAC_getVersion
WAC_init

Sections

.text
Size: 224KB - Virtual size: 224KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 92KB - Virtual size: 91KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Plugins/freeform/xml/about/BarcodeFont.ttf
Plugins/freeform/xml/about/BarcodeFont.txt
Plugins/freeform/xml/about/about.m
Plugins/freeform/xml/about/about.maki
Plugins/freeform/xml/about/about.xml
.xml
Plugins/freeform/xml/about/title.png
.png
Plugins/freeform/xml/about/wasabi.png
.png
Plugins/freeform/xml/checkbox/checkbox.xml
.xml
Plugins/freeform/xml/combobox/combobox.xml
.xml
Plugins/freeform/xml/dropdownlist/dropdownlist.xml
.xml
Plugins/freeform/xml/guiobjects.xml
.xml
Plugins/freeform/xml/historyeditbox/historyeditbox.m
Plugins/freeform/xml/historyeditbox/historyeditbox.maki
Plugins/freeform/xml/historyeditbox/historyeditbox.xml
.xml
Plugins/freeform/xml/menubutton/menubutton.m
Plugins/freeform/xml/menubutton/menubutton.maki
Plugins/freeform/xml/menubutton/menubutton.xml
.xml
Plugins/freeform/xml/msgbox/msgbox.xml
.xml
Plugins/freeform/xml/pathpicker/pathpicker.xml
.xml
Plugins/freeform/xml/popupmenu/popupitem.m
Plugins/freeform/xml/popupmenu/popupitem.maki
Plugins/freeform/xml/popupmenu/popupmenu.xml
.xml
Plugins/freeform/xml/statusbar/statusbar.xml
.xml
Plugins/freeform/xml/tabsheet/buttons.png
.png
Plugins/freeform/xml/tabsheet/tabsheet.xml
.xml
Plugins/freeform/xml/titlebox/titlebox.xml
.xml
Plugins/freeform/xml/tooltips/tooltips-elements.png
.png
Plugins/freeform/xml/tooltips/tooltips-elements.xml
Plugins/freeform/xml/tooltips/tooltips.m
Plugins/freeform/xml/tooltips/tooltips.maki
Plugins/freeform/xml/tooltips/tooltips.xml
.xml
Plugins/freeform/xml/wasabi/Scripts/debug.sym
Plugins/freeform/xml/wasabi/Scripts/standardframe.m
Plugins/freeform/xml/wasabi/Scripts/standardframe.maki
Plugins/freeform/xml/wasabi/Scripts/titlebar.m
Plugins/freeform/xml/wasabi/Scripts/titlebar.maki
Plugins/freeform/xml/wasabi/fonts/button-font-normal.png
.png
Plugins/freeform/xml/wasabi/fonts/button-font-small.png
.png
Plugins/freeform/xml/wasabi/fonts/default-font.png
.png
Plugins/freeform/xml/wasabi/fonts/titlebar-font.png
.png
Plugins/freeform/xml/wasabi/garbage/seekbar-button-pressed.png
.png
Plugins/freeform/xml/wasabi/garbage/seekbar-button.png
.png
Plugins/freeform/xml/wasabi/garbage/seekbar-left.png
.png
Plugins/freeform/xml/wasabi/garbage/seekbar-middle.png
.png
Plugins/freeform/xml/wasabi/garbage/seekbar-right.png
.png
Plugins/freeform/xml/wasabi/garbage/text_bg.png
.png
Plugins/freeform/xml/wasabi/menu/background.png
.png
Plugins/freeform/xml/wasabi/menu/selbar.png
.png
Plugins/freeform/xml/wasabi/menu/window-elements.png
.png
Plugins/freeform/xml/wasabi/wasabi.xml
.xml
Plugins/freeform/xml/wasabi/window/background.png
.png
Plugins/freeform/xml/wasabi/window/error.png
.png
Plugins/freeform/xml/wasabi/window/framewnd-windowshade.png
.png
Plugins/freeform/xml/wasabi/window/scrollgrips.png
.png
Plugins/freeform/xml/wasabi/window/transparent.png
.png
Plugins/freeform/xml/wasabi/window/tree-sort-icon.png
.png
Plugins/freeform/xml/wasabi/window/window-elements.png
.png
Plugins/freeform/xml/wasabi/xml/components.xml
Plugins/freeform/xml/wasabi/xml/garbage-elements.xml
Plugins/freeform/xml/wasabi/xml/groups/buttonbar.xml
Plugins/freeform/xml/wasabi/xml/groups/objectframe.xml
Plugins/freeform/xml/wasabi/xml/groups/panel.xml
Plugins/freeform/xml/wasabi/xml/groups/window-embedded.xml
Plugins/freeform/xml/wasabi/xml/groups/window.xml
Plugins/freeform/xml/wasabi/xml/old.system-colors.xml
Plugins/freeform/xml/wasabi/xml/old.system-elements.xml
Plugins/freeform/xml/wasabi/xml/system-colors.xml
Plugins/freeform/xml/wasabi/xml/system-element-aliases.xml
Plugins/freeform/xml/wasabi/xml/system-elements.xml
Plugins/freeform/xml/wasabi/xml/system-groups.xml
Plugins/freeform/xml/wasabi/xml/xui/browser/IconTextButton.m
Plugins/freeform/xml/wasabi/xml/xui/browser/IconTextButton.maki
Plugins/freeform/xml/wasabi/xml/xui/browser/browser.m
Plugins/freeform/xml/wasabi/xml/xui/browser/browser.maki
Plugins/freeform/xml/wasabi/xml/xui/browser/browser.png
.png
Plugins/freeform/xml/wasabi/xml/xui/browser/browser.xml
Plugins/freeform/xml/wasabi/xml/xui/browser/browser2.png
.png
Plugins/freeform/xml/wasabi/xml/xui/browser/buttonpos.m
Plugins/freeform/xml/wasabi/xml/xui/browser/gen_pageguids.m
Plugins/freeform/xml/wasabi/xml/xui/browser/icontextbutton.xml
Plugins/freeform/xml/wasabi/xml/xui/browser/init_browser.m
Plugins/freeform/xml/wasabi/xml/xui/browser/stringtable.xml
Plugins/freeform/xml/wasabi/xml/xui/button/button.xml
Plugins/freeform/xml/wasabi/xml/xui/editbox/editbox.xml
Plugins/freeform/xml/wasabi/xml/xui/slider/slider.xml
Plugins/freeform/xml/wasabi/xml/xui/standardframe/standardframe-elements.xml
Plugins/freeform/xml/wasabi/xml/xui/standardframe/standardframe.xml
Plugins/freeform/xml/wasabi/xml/xui/text/text.xml
Plugins/freeform/xml/wasabi/xml/xui/titlebar/titlebar.xml
Plugins/freeform/xml/wasabi/xml/xui/xuiobjects.xml
Plugins/freeform/xml/winamp/cover/cover.xml
.xml
Plugins/freeform/xml/winamp/cover/notfound.png
.png
Plugins/freeform/xml/winamp/cover/notfound60.png
.png
Plugins/freeform/xml/winamp/cover/notfound90.png
.png
Plugins/freeform/xml/winamp/thinger/library-hilited.png
.png
Plugins/freeform/xml/winamp/thinger/library-selected.png
.png
Plugins/freeform/xml/winamp/thinger/library-unselected.png
.png
Plugins/freeform/xml/winamp/thinger/pledit-hover.png
.png
Plugins/freeform/xml/winamp/thinger/pledit-selected.png
.png
Plugins/freeform/xml/winamp/thinger/pledit-unselected.png
.png
Plugins/freeform/xml/winamp/thinger/thinger.xml
.xml
Plugins/freeform/xml/winamp/thinger/video-hilited.png
.png
Plugins/freeform/xml/winamp/thinger/video-selected.png
.png
Plugins/freeform/xml/winamp/thinger/video-unselected.png
.png
Plugins/freeform/xml/winamp/thinger/vis-hilited.png
.png
Plugins/freeform/xml/winamp/thinger/vis-selected.png
.png
Plugins/freeform/xml/winamp/thinger/vis-unselected.png
.png
Plugins/gen_crasher.dll
.dll windows:5 windows x86 arch:x86

a6e60a9940c199196af89375fb017fe4

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

f:\sandbox\20131120_103959\gen_crasher\Release\gen_crasher.pdb

Imports

shlwapi

PathCombineW

version

VerQueryValueW
GetFileVersionInfoW
GetFileVersionInfoSizeW

kernel32

InterlockedExchange
IsDebuggerPresent
UnhandledExceptionFilter
TerminateProcess
GetFileSize
GetPrivateProfileStringW
WriteFile
CreateFileW
lstrcmpW
MultiByteToWideChar
lstrlenW
WritePrivateProfileStringW
GetPrivateProfileIntW
GetLastError
CloseHandle
DeleteFileW
FreeLibrary
LoadLibraryW
GetModuleFileNameW
GetProcAddress
lstrcmpiW
CreateProcessW
FileTimeToDosDateTime
GlobalMemoryStatus
SetFilePointer
VirtualQuery
GetCurrentProcess
GetSystemTimeAsFileTime
RaiseException
GetSystemInfo
GetFileTime
GetCurrentThreadId
FileTimeToLocalFileTime
GetCurrentProcessId
GetVersionExW
lstrcpyW
SetUnhandledExceptionFilter
lstrcpynW
CreateDirectoryW
GetTickCount
QueryPerformanceCounter
DisableThreadLibraryCalls
Sleep
InterlockedCompareExchange

user32

GetWindowRect
GetParent
OffsetRect
EndDialog
GetDesktopWindow
CopyRect
GetMessageW
SendMessageA
TranslateMessage
IsDialogMessageW
CreateDialogParamW
IsWindow
DispatchMessageW
wsprintfW
DestroyWindow
SetTimer
LoadImageW
KillTimer
SendDlgItemMessageW
UpdateWindow
CharNextW
PostMessageW
GetWindowTextW
GetClassNameW
GetDlgItem
CheckDlgButton
EnumChildWindows
MessageBoxW
SetDlgItemTextW
SendMessageW
EnableWindow
SetWindowTextW
SetWindowPos

advapi32

GetUserNameW

shell32

SHGetMalloc
SHBrowseForFolderW
SHGetPathFromIDListW

msvcr90

__CxxFrameHandler3
_crt_debugger_hook
__clean_type_info_names_internal
?_type_info_dtor_internal_method@type_info@@QAEXXZ
?terminate@@YAXXZ
_except_handler4_common
__CppXcptFilter
_adjust_fdiv
_amsg_exit
_initterm_e
_initterm
_encoded_null
_malloc_crt
_decode_pointer
_onexit
_lock
wcslen
_encode_pointer
__dllonexit
_unlock
_itow
_wtoi
memcmp
??2@YAPAXI@Z
memset
memcpy
??3@YAXPAX@Z
_purecall
_vswprintf
_except_handler3
wcsrchr
_vsnwprintf
free
malloc
_vswprintf_c_l

Exports

Exports

StartHandler
winampGetGeneralPurposePlugin

Sections

.text
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 33KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Plugins/gen_ff.dll
.dll windows:5 windows x86 arch:x86

ce20e14eb801867e29bbaf678d2eac71

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

f:\sandbox\20131120_103959\gen_ff\Release\gen_ff.pdb

Imports

shlwapi

PathRemoveExtensionW
StrCmpNIW
PathAddExtensionW
PathFindFileNameA
PathFileExistsW
PathRemoveFileSpecW
PathRemoveBackslashW
PathStripPathW
StrStrIW
PathFindFileNameW
PathFindExtensionW
PathIsRootW
PathAddBackslashW
PathCombineW
PathFindExtensionA

kernel32

SetWaitableTimer
GetTickCount
GetLastError
FindFirstFileW
FindNextFileW
FindClose
FindAtomA
AddAtomA
DeleteAtom
GetCurrentThread
GetThreadPriority
SetThreadPriority
CompareStringW
CreateEventA
InterlockedExchange
WaitForSingleObject
SetEvent
Sleep
GetVersionExA
MulDiv
GetFileAttributesW
GetCurrentThreadId
ExitProcess
GlobalAlloc
GlobalLock
GlobalUnlock
lstrcmpiA
GetFileSizeEx
OutputDebugStringW
SetFilePointer
ReadFile
WriteFile
GetFileSize
GlobalAddAtomW
GlobalDeleteAtom
GetProcAddress
FreeLibrary
LoadLibraryW
GetModuleHandleW
CreateMutexW
ReleaseMutex
OutputDebugStringA
CreateSemaphoreA
ReleaseSemaphore
InterlockedIncrement
DeleteFileW
CopyFileW
MoveFileW
GetTempFileNameW
GetTempPathW
InterlockedDecrement
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
InterlockedCompareExchange
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSection
LCMapStringW
GetStringTypeExW
SetCurrentDirectoryW
GetCurrentDirectoryW
QueryPerformanceCounter
LoadLibraryA
QueryPerformanceFrequency
WritePrivateProfileStringA
GetPrivateProfileStringW
lstrcpynW
CreateDirectoryW
WaitForMultipleObjectsEx
CloseHandle
QueueUserAPC
WideCharToMultiByte
MultiByteToWideChar
lstrlenW
CreateFileW
GetModuleFileNameW
WritePrivateProfileStringW
GetPrivateProfileIntW
GetModuleHandleA
CreateWaitableTimerA

user32

GetSysColor
ShowCursor
FindWindowExW
IsWindowEnabled
GetWindowLongW
RemovePropW
SetPropW
SendMessageA
GetClassInfoA
RegisterClassA
GetPropW
CreateWindowExA
SetWindowLongA
IsWindow
DestroyWindow
DefWindowProcA
GetWindowLongA
RegisterClassW
GetClassInfoW
ScreenToClient
ClientToScreen
GetUpdateRgn
ValidateRgn
ValidateRect
InvalidateRgn
ReplyMessage
UpdateLayeredWindow
SetLayeredWindowAttributes
IsCharAlphaW
GetDoubleClickTime
SendMessageW
GetDlgItem
InvalidateRect
CallWindowProcW
ShowWindow
GetWindowRect
SetRectEmpty
SetWindowPos
RedrawWindow
GetDesktopWindow
CallWindowProcA
SetForegroundWindow
PostMessageA
GetAncestor
GetParent
IsWindowVisible
KillTimer
SetTimer
CheckMenuItem
EnableMenuItem
GetSubMenu
SetFocus
LoadImageW
IsIconic
SetWindowLongW
wsprintfW
SetParent
GetClientRect
EndDialog
MessageBoxIndirectW
SetCursor
LoadCursorA
GetMessagePos
ModifyMenuW
GetMenuItemInfoW
RemoveMenu
InsertMenuItemW
GetMenuItemCount
InsertMenuW
InsertMenuA
SetDlgItemTextW
UpdateWindow
CharNextW
CharNextA
CreatePopupMenu
InsertMenuItemA
DeleteMenu
DestroyMenu
MessageBoxA
wsprintfA
EnumChildWindows
TrackPopupMenu
EnableWindow
SetDlgItemTextA
GetDC
SendDlgItemMessageA
ReleaseDC
CheckDlgButton
SendDlgItemMessageW
SetDlgItemInt
IsDlgButtonChecked
GetDlgItemInt
GetClassNameA
GetWindow
GetWindowTextW
GetAsyncKeyState
SetCapture
GetForegroundWindow
BeginDeferWindowPos
DeferWindowPos
EndDeferWindowPos
WindowFromPoint
TrackPopupMenuEx
OffsetRect
GetCursorPos
PtInRect
GetActiveWindow
FlashWindowEx
MessageBeep
BringWindowToTop
SetActiveWindow
GetCapture
ReleaseCapture
TrackMouseEvent
RegisterWindowMessageW
GetClassNameW
GetUpdateRect
MapWindowPoints
ChildWindowFromPointEx
GetFocus
IsChild
DefWindowProcW
GetMessageA
TranslateAcceleratorA
TranslateMessage
DispatchMessageA
CreateWindowExW
MoveWindow
SetWindowTextW
DrawFocusRect
SubtractRect
SystemParametersInfoA
DrawTextW
DrawEdge
CharUpperW
CharLowerW
CallNextHookEx
SetWindowsHookExA
UnhookWindowsHookEx
SetWindowRgn
OpenClipboard
EmptyClipboard
SetClipboardData
CloseClipboard
GetWindowRgn
GetSystemMetrics
PeekMessageA
GetKeyState
MessageBoxW
FindWindowA
EnumWindows
DestroyCursor
CopyRect
SetRect
PostMessageW
GetCursor

gdi32

GetClipBox
ExtTextOutW
BitBlt
GetObjectA
CreateCompatibleDC
CreateSolidBrush
SetBkColor
SetTextColor
GetStockObject
FillRgn
RestoreDC
SaveDC
StretchBlt
GetTextExtentPoint32W
SelectObject
DeleteObject
CreateDIBSection
CreatePen
SetROP2
MoveToEx
LineTo
GetFontData
RemoveFontResourceW
AddFontResourceW
CreateRectRgnIndirect
CreateRectRgn
CombineRgn
CreateFontW
TextOutW
DeleteDC

advapi32

RegDeleteValueW
RegSetValueExW
RegCreateKeyExW
RegCloseKey
RegQueryValueExW
RegOpenKeyA

shell32

DragQueryFileW
ShellExecuteW
SHGetPathFromIDListW
SHBrowseForFolderW
SHGetMalloc
DragQueryFileA
DragQueryPoint
SHAppBarMessage
SHGetFolderPathW
SHGetSpecialFolderPathW

ole32

RegisterDragDrop
OleInitialize
OleUninitialize
CoCreateInstance
CoCreateGuid
RevokeDragDrop

oleaut32

SysAllocString
VariantInit
VariantClear
SysFreeString

tataki

Init
Quit
?lineDraw@Canvas@@QAEXHHHH@Z
?getPixel@SkinBitmap@@QAEKHH@Z
?fillRectAlpha@Canvas@@QAEXPBUtagRECT@@KH@Z
?iteratorValid@SkinColor@@QAEHXZ
?makeWindowRegion@RegionI@@QAEPAUHRGN__@@XZ
?getBitmapName@SkinBitmap@@QAEPB_WXZ
?textOutWrapped@Canvas@@QAEXHHHHPB_WPBUFontInfo@Wasabi@@@Z
?getSkinBitmap@BltCanvas@@QAEPAVSkinBitmap@@XZ
?hflip@BltCanvas@@QAEXH@Z
?vflip@BltCanvas@@QAEXH@Z
?ptInRegion@RegionI@@QAE_NPBUtagPOINT@@@Z
?setResamplingMode@AutoSkinBitmap@@QAEXH@Z
?blitRectToTile@SkinBitmap@@QAEXPAVifc_canvas@@PAUtagRECT@@1HHH@Z
?getBits@Canvas@@QAEPAXXZ
?scale@RegionI@@QAEXNN_N@Z
??0FilteredColor@@QAE@KPB_W@Z
?BLEND_MUL@Blenders@@SAIIH@Z
?BLEND4@Blenders@@SAIPAIIHH@Z
?BLEND_MUL_MMX@Blenders@@SAIIH@Z
?BLEND_ADJ1_MMX@Blenders@@SAIIIH@Z
?BLEND4_MMX@Blenders@@SAIPAIIHH@Z
?mmx_available@Blenders@@2HA
?blit@SkinBitmap@@QAEXPAVifc_canvas@@HH@Z
??_FFilteredColor@@QAEXXZ
??_FSkinColor@@QAEXXZ
?getColor@FilteredColor@@QAEKXZ
??1FilteredColor@@UAE@XZ
?_dispatch@AutoSkinBitmap@@MAEHHPAXPAPAXH@Z
?reset@AutoSkinBitmap@@QAEXXZ
?setBitmap@AutoSkinBitmap@@QAEPB_WPB_W@Z
??0BltCanvas@@QAE@XZ
?getBox@RegionI@@QAEXPAUtagRECT@@@Z
??0RegionI@@QAE@PAVCanvas@@PAUtagRECT@@@Z
?getClipBox@Canvas@@QAEHPAUtagRECT@@@Z
?getBitmapName@AutoSkinBitmap@@QAEPB_WXZ
?blitToRect@SkinBitmap@@QAEXPAVifc_canvas@@PAUtagRECT@@1H@Z
??4AutoSkinBitmap@@QAEAAV0@ABV0@@Z
?doesIntersectRgn@RegionI@@QAEHPBVapi_region@@@Z
?subtractRegion@RegionI@@QAEXPBVapi_region@@@Z
?antiAliasTo@Canvas@@QAEXPAV1@HHH@Z
?maskColor@BltCanvas@@QAEXKK@Z
?clone@BaseCloneCanvas@@QAEHPAVifc_canvas@@@Z
?popPen@Canvas@@QAEXXZ
?lineTo@Canvas@@QAEXHH@Z
?moveTo@Canvas@@QAEXHH@Z
?stretchToRect@SkinBitmap@@QAEXPAVifc_canvas@@PAUtagRECT@@@Z
?drawRect@Canvas@@QAEXPBUtagRECT@@HKH@Z
?pushPen@Canvas@@QAEXHHK@Z
?doesIntersectRect@RegionI@@QAEHPBUtagRECT@@@Z
?subtractRect@RegionI@@QAEXPBUtagRECT@@@Z
?isInvalid@SkinBitmap@@QAEHXZ
??0SkinBitmap@@QAE@PB_WH@Z
?setColorGroup@FilteredColor@@UAEXPB_W@Z
?setElementName@SkinColor@@QAEXPB_W@Z
?getTextHeight@Canvas@@QAEHPBUFontInfo@Wasabi@@@Z
?textOut@Canvas@@QAEXHHPB_WPBUFontInfo@Wasabi@@@Z
?isFixedCoords@Canvas@@QAE_NXZ
?beginPaintNC@PaintBltCanvas@@QAEHPAVBaseWnd@@@Z
?blitToRect@Canvas@@QAEXPAVifc_canvas@@PAUtagRECT@@1H@Z
?stretchToRect@AutoSkinBitmap@@QAEXPAVifc_canvas@@PAUtagRECT@@@Z
?textOutEllipsed@Canvas@@QAEXHHHHPB_WPBUFontInfo@Wasabi@@@Z
?textOut@Canvas@@QAEXHHHHPB_WPBUFontInfo@Wasabi@@@Z
?textOutCentered@Canvas@@QAEXPAUtagRECT@@PB_WPBUFontInfo@Wasabi@@@Z
?stretchToRectAlpha@SkinBitmap@@QAEXPAVifc_canvas@@PAUtagRECT@@H@Z
?drawSysObject@Canvas@@QAEXPBUtagRECT@@HH@Z
?stretchToRectAlpha@SkinBitmap@@QAEXPAVifc_canvas@@PAUtagRECT@@1H@Z
?blitTile@SkinBitmap@@QAEXPAVifc_canvas@@PAUtagRECT@@HHH@Z
?beginPaint@PaintBltCanvas@@QAEHPAVBaseWnd@@@Z
??1PaintBltCanvas@@UAE@XZ
??0PaintBltCanvas@@QAE@XZ
?getTextHeight@Canvas@@QAEHPB_WPBUFontInfo@Wasabi@@@Z
?getTextWidth@Canvas@@QAEHPB_WPBUFontInfo@Wasabi@@@Z
??4AutoSkinBitmap@@QAEHH@Z
??0RegionI@@QAE@PAVSkinBitmap@@PAUtagRECT@@HH_NHDHH@Z
??4SkinColor@@QAEPB_WPB_W@Z
?DestructiveResize@BltCanvas@@QAEXHHH@Z
?stretchToRectAlpha@Canvas@@QAEXPAVifc_canvas@@PAUtagRECT@@1H@Z
?getBaseWnd@Canvas@@UAEPAVBaseWnd@@XZ
?_dispatch@Canvas@@MAEHHPAXPAPAXH@Z
?_dispatch@RegionI@@MAEHHPAXPAPAXH@Z
?empty@RegionI@@QAEXXZ
?stretchblit@Canvas@@QAEXHHHHPAV1@HHHH@Z
?attachToClient@WndCanvas@@QAEHPAVBaseWnd@@@Z
??0WndCanvas@@QAE@XZ
?setRect@RegionI@@QAEXPBUtagRECT@@@Z
?getRcPaint@PaintCanvas@@QAEXPAUtagRECT@@@Z
?getOSHandle@RegionI@@QAEPAUHRGN__@@XZ
?disposeClone@RegionI@@QAEXPAVapi_region@@@Z
?clone@RegionI@@QAEPAVapi_region@@XZ
?isEmpty@RegionI@@QAEHXZ
?offset@RegionI@@QAEXHH@Z
?addRect@RegionI@@QAEXPBUtagRECT@@@Z
?setBaseWnd@Canvas@@QAEXPAVBaseWnd@@@Z
?beginPaint@PaintCanvas@@QAEHPAVBaseWnd@@@Z
??1PaintCanvas@@UAE@XZ
??0PaintCanvas@@QAE@XZ
?getHDC@Canvas@@QAEPAUHDC__@@XZ
??1DCCanvas@@UAE@XZ
??0DCCanvas@@QAE@PAUHDC__@@PAVBaseWnd@@@Z
?getSystemFontScale@Canvas@@QAENXZ
??1TextInfoCanvas@@UAE@XZ
??0TextInfoCanvas@@QAE@PAVBaseWnd@@@Z
?addRegion@RegionI@@QAEXPBVapi_region@@@Z
?stretchToRectAlpha@AutoSkinBitmap@@QAEXPAVifc_canvas@@PAUtagRECT@@1H@Z
?selectClipRgn@Canvas@@QAEXPAVapi_region@@@Z
?andRegion@RegionI@@QAEXPBVapi_region@@@Z
?getClipRgn@Canvas@@QAEHPAVapi_region@@@Z
??0RegionI@@QAE@PBUtagRECT@@@Z
??1RegionI@@UAE@XZ
??0RegionI@@QAE@XZ
?getWidth@AutoSkinBitmap@@QAEHXZ
?getHeight@AutoSkinBitmap@@QAEHXZ
?fillRect@Canvas@@QAEXPBUtagRECT@@K@Z
??1BaseCloneCanvas@@UAE@XZ
??0BaseCloneCanvas@@QAE@PAVifc_canvas@@@Z
?getTextExtent@Canvas@@QAEXPB_WPAH1PBUFontInfo@Wasabi@@@Z
??1WndCanvas@@UAE@XZ
??0WndCanvas@@QAE@PAVBaseWnd@@@Z
?BLEND_ADJ1@Blenders@@SAIIIH@Z
?fillBits@BltCanvas@@QAEXK@Z
?getDim@Canvas@@QAE_NPAH00@Z
?getBits@BltCanvas@@QAEPAXXZ
?blit@Canvas@@QAEXHHPAV1@HHHH@Z
??0SysCanvas@@QAE@XZ
??1BltCanvas@@UAE@XZ
??0BltCanvas@@QAE@HHPAUHWND__@@H@Z
?blitAlpha@SkinBitmap@@QAEXPAVifc_canvas@@HHH@Z
?blitAlpha@Canvas@@QAEXPAVifc_canvas@@HHH@Z
??1SkinColor@@UAE@XZ
??0SkinColor@@QAE@PB_W0@Z
??BSkinColor@@QAEHXZ
??0SkinBitmap@@QAE@PAKHH_N@Z
?getBits@SkinBitmap@@UAEPAXXZ
?getBitmap@AutoSkinBitmap@@QAEPAVSkinBitmap@@XZ
??1SkinBitmap@@QAE@XZ
??4AutoSkinBitmap@@QAEPB_WPB_W@Z
??1AutoSkinBitmap@@UAE@XZ
??0AutoSkinBitmap@@QAE@PB_W@Z
?v@SkinColor@@QAEKK@Z
??1SysCanvas@@UAE@XZ

msvcr90

_decode_pointer
_onexit
_lock
_encode_pointer
__dllonexit
?terminate@@YAXXZ
iswxdigit
strtok
vsprintf_s
_stricmp
strncpy
wcstok
srand
_itow
_wsetlocale
realloc
memmove
fwrite
fflush
labs
feof
fgets
wcstol
rand
atan
acos
asin
tan
wcsftime
wcsncat
fclose
fputws
_wfopen
_wasctime
_localtime64
_time64
wcscpy
cos
atan2
sin
swscanf
_wtof_l
floor
_read
?_wopen@@YAHPB_WHH@Z
_wunlink
wcsncpy
towupper
wcschr
sqrt
ceil
log10
wcscat
log
pow
_wtoi
abs
wcsstr
_vsnwprintf
_create_locale
_wtoi_l
strlen
wcscmp
_strnicmp
strcmp
strstr
_wcsnicmp
wcslen
_vswprintf_c_l
_waccess
toupper
_wcsicmp
memset
memcmp
memcpy
malloc
free
_wcsdup
??2@YAPAXI@Z
??3@YAXPAX@Z
_purecall
_malloc_crt
_encoded_null
_initterm
_initterm_e
_amsg_exit
_adjust_fdiv
__CppXcptFilter
?_type_info_dtor_internal_method@type_info@@QAEXXZ
_except_handler4_common
__clean_type_info_names_internal
_crt_debugger_hook
_lseek
_tell
_close
__CxxFrameHandler3
_unlock
_except_handler3

Exports

Exports

_DllMain@12
winampGetGeneralPurposePlugin

Sections

.text
Size: 859KB - Virtual size: 859KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 459KB - Virtual size: 459KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 118KB - Virtual size: 228KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 218KB - Virtual size: 218KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Plugins/gen_hotkeys.dll
.dll windows:5 windows x86 arch:x86

761cb2bee17a4cef3742652e0ee6815d

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

f:\sandbox\20131120_103959\gen_hotkeys\Release\gen_hotkeys.pdb

Imports

comctl32

ImageList_Create
ImageList_AddMasked

kernel32

GetPrivateProfileStringW
lstrlenW
WritePrivateProfileStringW
GetLastError
DisableThreadLibraryCalls
GetModuleFileNameA
lstrcmpiW
CreateMutexA
GlobalDeleteAtom
GetTickCount
GlobalAddAtomW
lstrlenA
lstrcpynA
GlobalLock
GlobalAlloc
lstrcpynW
MultiByteToWideChar
GlobalUnlock
SetLastError
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetPrivateProfileIntW
IsDebuggerPresent

user32

SetTimer
RegisterHotKey
UnregisterHotKey
SetWindowTextW
GetKeyNameTextW
IsWindow
MapVirtualKeyA
GetWindowThreadProcessId
SetClipboardData
IsWindowVisible
OpenClipboard
ShowWindow
EmptyClipboard
GetForegroundWindow
SetForegroundWindow
CharNextW
CloseClipboard
KillTimer
RegisterWindowMessageA
GetWindowLongA
IsWindowUnicode
SetWindowLongW
DeregisterShellHookWindow
MessageBoxW
CallWindowProcA
CallWindowProcW
RegisterShellHookWindow
GetFocus
LoadBitmapA
GetClientRect
SendMessageA
GetAsyncKeyState
InvalidateRect
GetWindowTextW
GetDlgItem
CheckDlgButton
GetSystemMetrics
SendMessageW
EnableWindow
TranslateMessage
DispatchMessageW
SetWindowLongA

gdi32

DeleteObject

msvcr90

?_type_info_dtor_internal_method@type_info@@QAEXXZ
?terminate@@YAXXZ
_strdup
memcpy
_wcsdup
_vsnwprintf
wcslen
malloc
free
??2@YAPAXI@Z
??3@YAXPAX@Z
_vsnprintf
memset
_purecall
__CxxFrameHandler3
_crt_debugger_hook
_except_handler4_common

Exports

Exports

winampGetGeneralPurposePlugin

Sections

.text
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Plugins/gen_jumpex.dll
.dll windows:5 windows x86 arch:x86

9229c1cafd94d229f7620398779b7d6a

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

d:\Dev\git_dro\winamp-plug-ins\gen_jumpex\Release\gen_jumpex.pdb

Imports

shlwapi

PathCombineW
PathIsURLW
PathStripPathW
PathRemoveExtensionW
PathFileExistsW

powrprof

IsPwrSuspendAllowed
IsPwrHibernateAllowed

kernel32

GetLastError
GetLocalTime
DeleteFileW
SetFilePointer
SetEndOfFile
WriteFile
CreateFileW
CreateDirectoryW
GetTempPathW
lstrcmpiA
MoveFileW
RemoveDirectoryW
VirtualQuery
VirtualProtect
LocalUnlock
LocalReAlloc
LocalHandle
LocalLock
LocalAlloc
GetVersionExW
LocalFree
GetPrivateProfileStringW
WideCharToMultiByte
MultiByteToWideChar
GetProcAddress
VirtualFree
OpenProcess
VirtualAlloc
WaitForSingleObject
CreateEventW
Module32FirstW
CreateToolhelp32Snapshot
GetCurrentThreadId
Module32NextW
GetCurrentProcessId
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
GetSystemTimeAsFileTime
QueryPerformanceCounter
InterlockedCompareExchange
InterlockedExchange
GetCurrentProcess
FindNextFileW
FindClose
DisableThreadLibraryCalls
SetThreadPriority
lstrcmpW
GetModuleFileNameW
SetSystemPowerState
MulDiv
GetTickCount
SetErrorMode
FindFirstFileW
CompareStringA
CompareStringW
GetStringTypeExW
lstrlenA
CreateThread
LCMapStringW
ResumeThread
SuspendThread
CloseHandle
DeleteCriticalSection
EnterCriticalSection
lstrcpynW
LeaveCriticalSection
Sleep
InitializeCriticalSection
lstrcmpiW
GlobalFree
LoadLibraryW
GetModuleHandleW
FreeLibrary
GetPrivateProfileIntW
WritePrivateProfileStringW
lstrlenW

user32

IsMenu
SetTimer
GetSystemMenu
GetUpdateRgn
GetDlgItemInt
SetCursor
ClientToScreen
MonitorFromRect
GetMonitorInfoW
IsWindowUnicode
MonitorFromWindow
SystemParametersInfoW
SetWindowLongA
GetMonitorInfoA
CreateDialogParamW
EnumWindows
GetWindowThreadProcessId
GetActiveWindow
DestroyCursor
UnhookWindowsHookEx
SetWindowsHookExW
CallNextHookEx
WindowFromDC
FrameRect
SetActiveWindow
MapDialogRect
RegisterWindowMessageW
SetCapture
KillTimer
GetKeyState
GetSubMenu
SetForegroundWindow
GetFocus
InvalidateRgn
LoadCursorW
CharPrevW
WindowFromPoint
GetTabbedTextExtentW
SetParent
CreateAcceleratorTableW
ExitWindowsEx
SetFocus
GetMenuItemInfoW
PtInRect
GetUpdateRect
GetDC
GetCapture
SetDlgItemInt
TrackPopupMenuEx
SetRect
MessageBoxA
GetDCEx
EnableMenuItem
RedrawWindow
GetCursorPos
LoadStringW
CheckDlgButton
CreatePopupMenu
SetMenuDefaultItem
CheckRadioButton
DeferWindowPos
MessageBoxW
ReleaseCapture
BeginDeferWindowPos
GetSystemMetrics
ValidateRgn
UpdateWindow
DestroyMenu
SetWindowTextW
EndDeferWindowPos
SetMenuItemInfoW
ValidateRect
GetWindow
CharNextW
EndPaint
DestroyWindow
ScreenToClient
GetWindowRect
FillRect
LoadImageW
PostMessageW
DrawTextW
DrawIconEx
GetClientRect
BeginPaint
DrawFocusRect
InvalidateRect
GetWindowTextW
GetDlgItem
SetWindowLongW
EndDialog
SendDlgItemMessageW
GetSysColor
IsDlgButtonChecked
IsWindow
CreateWindowExW
GetDlgItemTextW
SetDlgItemTextW
MapWindowPoints
EnableWindow
GetDlgCtrlID
CallWindowProcW
CopyRect
RemovePropW
GetMenuItemID
DeleteMenu
GetParent
SetPropW
InsertMenuItemW
GetWindowLongW
SetWindowPos
ShowWindow
IsWindowVisible
SendMessageW
GetPropW
CheckMenuItem
ReleaseDC

gdi32

GetPixel
SetBkMode
DeleteObject
CreatePen
GetNearestColor
SetBkColor
SetTextColor
CreateRectRgn
CreateHatchBrush
GetBkColor
MoveToEx
BitBlt
GetTextExtentPoint32W
GetTextMetricsW
LineTo
DeleteDC
CreateFontIndirectW
GetDeviceCaps
StretchBlt
ExcludeClipRect
SelectObject
CreateCompatibleDC
CreateRectRgnIndirect
CombineRgn
CreateBrushIndirect
OffsetRgn
FillRgn
SetStretchBltMode
CreateSolidBrush

comdlg32

GetOpenFileNameW
ChooseColorW
GetSaveFileNameW

advapi32

RegDeleteKeyW
OpenProcessToken
LookupPrivilegeValueW
AdjustTokenPrivileges
RegCreateKeyExW
RegQueryValueExW
RegOpenKeyExW
RegSetValueExW
RegNotifyChangeKeyValue

shell32

DragFinish
ShellExecuteW
DragQueryFileW
DragAcceptFiles
SHChangeNotify

msvcr90

_lock
_crt_debugger_hook
__clean_type_info_names_internal
?_type_info_dtor_internal_method@type_info@@QAEXXZ
?terminate@@YAXXZ
_except_handler4_common
memcmp
_vsnwprintf
free
memset
_wcsdup
wcsstr
_vsnprintf
_purecall
memcpy
_wtoi
_strdup
??3@YAXPAX@Z
??2@YAPAXI@Z
_unlock
__dllonexit
_encode_pointer
__CxxFrameHandler3
_onexit
_decode_pointer
_malloc_crt
_encoded_null
_initterm
_initterm_e
_amsg_exit
_adjust_fdiv
__CppXcptFilter

Exports

Exports

winampGetGeneralPurposePlugin
winampUninstallPlugin

Sections

.text
Size: 120KB - Virtual size: 119KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 18KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 78KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 32KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Plugins/gen_ml.dll
.dll windows:5 windows x86 arch:x86

5ce506bb832630f2cd47c8a6cd68f1c2

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

f:\sandbox\20131120_103959\gen_ml\Release\gen_ml.pdb

Imports

comctl32

ImageList_DragLeave
ImageList_EndDrag
ImageList_GetIconSize
ImageList_BeginDrag
ImageList_DragEnter
ImageList_DragShowNolock
ImageList_Destroy
ImageList_Remove
ImageList_Replace
ImageList_DrawIndirect
ImageList_Draw
_TrackMouseEvent
ImageList_Add
ImageList_Create
ImageList_DrawEx
ImageList_DragMove
ImageList_GetImageInfo

shlwapi

StrCmpNIW
StrStrIW
PathFindExtensionW
PathFindFileNameW
PathFileExistsW
PathAppendW
PathRemoveFileSpecW
PathStripPathW
PathCombineW
StrChrW
PathIsURLW
StrToInt64ExW
ColorAdjustLuma
StrToIntExW

rpcrt4

UuidFromStringW

kernel32

CreateEventA
CompareStringW
GetTickCount
GetModuleFileNameW
LoadLibraryExW
CreateFileW
SetFilePointer
QueryPerformanceCounter
LoadLibraryW
WriteFile
QueryPerformanceFrequency
GetModuleHandleW
HeapAlloc
GetProcessHeap
HeapFree
HeapReAlloc
GetLastError
GetVersionExA
GetVersion
Sleep
MulDiv
FindResourceW
LoadResource
SizeofResource
LockResource
GetFileSize
ReadFile
TlsSetValue
TlsAlloc
SetLastError
TlsGetValue
GetCurrentThreadId
lstrcmpW
SleepEx
CompareFileTime
SetErrorMode
GlobalFree
FileTimeToSystemTime
GetDateFormatW
GetTimeFormatW
SetThreadPriority
WaitForMultipleObjectsEx
ResetEvent
CreateThread
CreateMutexW
ReleaseMutex
TerminateThread
ReleaseSemaphore
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
GetSystemTimeAsFileTime
DisableThreadLibraryCalls
InterlockedCompareExchange
RaiseException
InterlockedExchange
LocalFree
LocalAlloc
LoadLibraryA
GetProcAddress
FreeLibrary
WideCharToMultiByte
GetShortPathNameW
GetPrivateProfileIntW
WritePrivateProfileStringW
WritePrivateProfileStringA
GetPrivateProfileStringW
lstrcpynW
GetPrivateProfileStringA
lstrcpynA
GlobalAddAtomW
GlobalDeleteAtom
MultiByteToWideChar
GetCurrentProcessId
GetModuleFileNameA
VirtualQuery
lstrcmpiW
FindClose
FindNextFileW
lstrcpyW
FindFirstFileW
CreateDirectoryW
lstrlenW
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
InterlockedIncrement
InterlockedDecrement
CloseHandle
SetEvent
WaitForSingleObject
GetCurrentThread
GetCurrentProcess
DuplicateHandle
QueueUserAPC
CreateSemaphoreA

user32

GetClassInfoW
RegisterClassW
CharUpperBuffW
RemoveMenu
DestroyMenu
CheckRadioButton
DestroyCursor
ShowCursor
ReplyMessage
PostThreadMessageA
MsgWaitForMultipleObjectsEx
DispatchMessageW
SendMessageTimeoutA
IsDialogMessageW
TranslateMessage
SetParent
CopyIcon
SendInput
TrackMouseEvent
GetComboBoxInfo
DrawFocusRect
GetSysColor
SetRectEmpty
GetGUIThreadInfo
GetActiveWindow
CopyRect
PtInRect
SystemParametersInfoW
CopyImage
LoadStringW
LoadImageW
EnumChildWindows
EndPaint
BeginPaint
PeekMessageW
GetSubMenu
GetWindowLongA
SendNotifyMessageW
GetClassNameW
SetPropA
GetPropA
ReleaseCapture
RemovePropA
SetCapture
SetTimer
RedrawWindow
EndDeferWindowPos
DeferWindowPos
BeginDeferWindowPos
GetUpdateRgn
GetUpdateRect
InvalidateRgn
GetMenuItemInfoA
DeleteMenu
CreateMenu
InsertMenuItemA
GetDlgItemInt
SetDlgItemInt
GetWindow
GetWindowTextW
EndDialog
GetDlgItemTextA
IsDlgButtonChecked
SendDlgItemMessageW
CheckDlgButton
SendDlgItemMessageA
GetDC
SetScrollRange
InflateRect
GetWindowRect
GetDlgItemTextW
GetDlgItem
OffsetRect
DrawTextW
IntersectRect
RealGetWindowClassW
ScrollWindowEx
SetScrollInfo
GetCursor
GetMenuItemRect
SystemParametersInfoA
MenuItemFromPoint
GetClassLongW
SetClassLongW
SetMenuInfo
GetMenuInfo
CallNextHookEx
SetWindowsHookExA
UnhookWindowsHookEx
GetForegroundWindow
GetScrollInfo
UpdateWindow
EnableWindow
SetWindowPos
CreateWindowExW
GetSystemMetrics
KillTimer
GetDlgCtrlID
FindWindowExW
GetParent
ValidateRect
SetRect
ReleaseDC
FrameRect
GetDCEx
GetCursorPos
InvalidateRect
CopyAcceleratorTableA
SetMenuItemInfoW
GetMenuItemInfoW
MapVirtualKeyA
GetKeyNameTextW
CharNextW
TrackPopupMenuEx
InsertMenuItemW
GetMenuItemID
DestroyWindow
SetWindowTextW
MessageBoxW
PostMessageW
CheckMenuItem
PostMessageA
ShowWindow
GetFocus
IsIconic
GetAncestor
IsWindowVisible
SetFocus
MapWindowPoints
ScreenToClient
GetAsyncKeyState
IsChild
GetWindowThreadProcessId
SendMessageW
RegisterWindowMessageW
WindowFromPoint
LoadCursorA
SetCursor
SendMessageA
AppendMenuW
GetMenuItemCount
CreatePopupMenu
SetPropW
SetWindowLongA
IsWindow
CallWindowProcA
CallWindowProcW
SetWindowLongW
RemovePropW
GetWindowLongW
FillRect
GetClientRect
DefWindowProcA
DefWindowProcW
IsWindowUnicode
GetPropW
GetListBoxInfo
GetMessagePos
GetWindowDC
ValidateRgn
SetWindowRgn
GetWindowRgn
GetCaretPos
GetSysColorBrush
SetCaretPos
IsRectEmpty
IsWindowEnabled
GetCapture
SetForegroundWindow

gdi32

GetPixel
SetBkColor
BitBlt
DeleteDC
CreateDIBSection
CreateFontA
ExtTextOutW
SetTextColor
CreateFontIndirectW
GetTextMetricsW
CreateCompatibleBitmap
CreatePen
MoveToEx
LineTo
GetTextExtentPoint32W
CreateRectRgn
SelectObject
CreateRectRgnIndirect
SetRectRgn
CombineRgn
GetNearestColor
SetStretchBltMode
FillRgn
CreateBrushIndirect
SetBkMode
StretchBlt
GdiAlphaBlend
GetTextColor
GetBkColor
GetDIBits
SetBrushOrgEx
IntersectClipRect
SelectClipRgn
GetStockObject
SetDCPenColor
GetTextMetricsA
GetCharABCWidthsW
GetCharWidth32W
OffsetViewportOrgEx
ExcludeClipRect
ExtTextOutA
StretchDIBits
GetClipRgn
SetViewportOrgEx
RoundRect
GetViewportOrgEx
CreatePatternBrush
PatBlt
RectVisible
GetCurrentObject
CreateCompatibleDC
CreateBitmap
GetObjectW
DeleteObject
OffsetRgn
CreateSolidBrush

advapi32

RegSetValueExW
RegDeleteValueW
RegCloseKey
RegCreateKeyExW

shell32

DragQueryPoint
DragFinish
DragQueryFileW
ShellExecuteW

ole32

CoTaskMemAlloc
CoTaskMemFree
CoFreeUnusedLibraries
OleUninitialize
OleInitialize
OleRun
CoUninitialize
CoInitialize
CoCreateInstance

oleaut32

VariantInit
SysFreeString
SysAllocString
VariantClear
VariantCopyInd
SafeArrayCreateVector
SafeArrayAccessData
SafeArrayUnaccessData
SafeArrayDestroy

msvcr90

_vsnwprintf
_strdup
_wcsdup
free
memset
_amsg_exit
_initterm_e
_initterm
_encoded_null
_malloc_crt
__CxxFrameHandler3
_decode_pointer
_onexit
_lock
_encode_pointer
wcscmp
strcmp
malloc
strlen
realloc
memcpy
wcslen
??2@YAPAXI@Z
??3@YAXPAX@Z
_wcsicmp
_vsnprintf
_stricmp
strchr
??_V@YAXPAX@Z
memcmp
tolower
calloc
_itow
_wtoi
wcschr
strrchr
_vswprintf
??_U@YAPAXI@Z
memmove
labs
abs
qsort
bsearch
_CxxThrowException
__dllonexit
_unlock
_adjust_fdiv
__CppXcptFilter
_except_handler4_common
?terminate@@YAXXZ
?_type_info_dtor_internal_method@type_info@@QAEXXZ
__clean_type_info_names_internal
_crt_debugger_hook
_purecall

Exports

Exports

MlEnableSkinnedPopup
MlGetSkinColor
MlInitSkinnedPopupHook
MlIsSkinnedPopupEnabled
MlRatingCalcMinRect
MlRatingDraw
MlRatingHitTest
MlRemoveSkinnedPopupHook
MlResetSkinColor
MlSkinWindow
MlSkinWindowEx
MlTrackSkinnedPopupMenuEx
MlUnskinWindow
RegisterSetup
winampGetGeneralPurposePlugin

Sections

.text
Size: 240KB - Virtual size: 240KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 34KB - Virtual size: 33KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 24KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 19KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Plugins/gen_tray.dll
.dll windows:5 windows x86 arch:x86

e0d99c84b0ed994e8037bc1e8f804170

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

f:\sandbox\20131120_103959\gen_tray\Release\gen_tray.pdb

Imports

shlwapi

PathFileExistsW
StrStrIW

kernel32

DisableThreadLibraryCalls
VirtualAllocEx
GetProcAddress
lstrcmpiW
FindNextFileW
CloseHandle
GetPrivateProfileIntW
WritePrivateProfileStringW
lstrlenW
GetModuleFileNameW
lstrcpynW
GetVersionExW
ReadProcessMemory
VirtualFreeEx
OpenProcess
GetPrivateProfileStringW
GetModuleHandleW
GetCurrentProcess
FindFirstFileW
FindClose

user32

GetClassNameW
SetWindowLongA
CreateIcon
LoadIconW
GetDC
GetIconInfo
CreateIconIndirect
SetPropW
PtInRect
SetFocus
FindWindowW
CharPrevW
LoadCursorW
SetForegroundWindow
GetKeyState
DrawTextW
LoadImageW
RegisterWindowMessageW
SetActiveWindow
GetWindowRect
SetCursor
IsWindowUnicode
GetDlgItem
SetWindowLongW
EndDialog
SendDlgItemMessageW
GetCursorPos
CheckDlgButton
EnumChildWindows
IsDlgButtonChecked
IsWindow
MessageBoxW
GetDlgItemTextW
SetDlgItemTextW
SendMessageW
MapWindowPoints
EnableWindow
DestroyIcon
GetPropW
CallWindowProcW
CopyRect
GetWindowThreadProcessId
ReleaseDC

gdi32

GetObjectW
SetPixel
GetCurrentObject
SetStretchBltMode
CreateFontIndirectW
DeleteDC
SetTextColor
StretchBlt
GetPixel
DeleteObject
SelectObject
CreateCompatibleDC
CreateCompatibleBitmap
CreateBitmap

comdlg32

GetOpenFileNameW

shell32

Shell_NotifyIconW

msvcr90

_vsnwprintf
memset

Exports

Exports

winampGetGeneralPurposePlugin
winampUninstallPlugin

Sections

.text
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Plugins/in_avi.dll
.dll windows:5 windows x86 arch:x86

341ad77d23fb57faac86f2beab96a336

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

f:\sandbox\20131120_103959\in_avi\Release\in_avi.pdb

Imports

shlwapi

PathCombineW
PathIsURLW

kernel32

Sleep
MultiByteToWideChar
lstrlenW
GetLastError
WideCharToMultiByte
WaitForMultipleObjects
FreeLibrary
WaitForSingleObject
SetEvent
GetModuleHandleW
GetTickCount
SetThreadPriority
InterlockedExchange
ResetEvent
CreateEventW
CreateThread
GetDriveTypeW
InterlockedCompareExchange
LoadLibraryW
MulDiv
GetProcAddress
QueueUserAPC
CloseHandle
InitializeCriticalSection
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
GetFileSize
SetFilePointer
ReadFile
CreateFileW
InterlockedExchangeAdd
DisableThreadLibraryCalls
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
QueryPerformanceCounter
GetCurrentThreadId

user32

PostMessageW
IsWindow
MessageBoxIndirectW
DestroyWindow
GetWindowRect
GetFocus
GetClientRect
SetFocus
GetWindowLongW
GetDlgItem
SetWindowLongW
EndDialog
SetWindowPos
ShowWindow
SendMessageW
MapWindowPoints

gdi32

DeleteObject

msvcr90

memcpy
_amsg_exit
_crt_debugger_hook
__clean_type_info_names_internal
_except_handler4_common
?_type_info_dtor_internal_method@type_info@@QAEXXZ
?terminate@@YAXXZ
_initterm_e
_adjust_fdiv
memset
_stricmp
_wcsicmp
_vsnwprintf
_atoi64
free
malloc
strstr
wcsstr
_vsnprintf
_purecall
_strdup
_wcsdup
??3@YAXPAX@Z
strtoul
isxdigit
??2@YAPAXI@Z
calloc
realloc
_unlock
__dllonexit
_encode_pointer
_lock
_onexit
_decode_pointer
_malloc_crt
_encoded_null
_initterm
__CppXcptFilter

Exports

Exports

winampGetExtendedFileInfoW
winampGetInModule2

Sections

.text
Size: 31KB - Virtual size: 31KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 24KB - Virtual size: 89KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Plugins/in_cdda.dll
.dll windows:5 windows x86 arch:x86

ddd99433efed1ace676da742332872a5

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

f:\sandbox\20131120_103959\in_cdda\Release\in_cdda.pdb

Imports

kernel32

GetCurrentThreadId
CompareStringW
TlsGetValue
CreateEventW
TlsAlloc
TlsSetValue
ResetEvent
InterlockedIncrement
InterlockedDecrement
MulDiv
LoadLibraryW
GetProcAddress
FreeLibrary
MultiByteToWideChar
GetPrivateProfileIntA
WritePrivateProfileStringA
GetModuleFileNameA
GlobalAlloc
GlobalFree
WideCharToMultiByte
lstrcmpiW
lstrcpynW
lstrlenA
GetModuleHandleW
SetEvent
GetLastError
ResumeThread
LoadLibraryA
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
QueryPerformanceCounter
DisableThreadLibraryCalls
InterlockedCompareExchange
RaiseException
InterlockedExchange
LocalFree
LocalAlloc
GetTickCount
DeleteCriticalSection
InitializeCriticalSection
LeaveCriticalSection
EnterCriticalSection
lstrlenW
CloseHandle
Sleep
WaitForSingleObject
SetThreadPriority
CreateThread
lstrcpynA

user32

GetDC
ReleaseDC
SendDlgItemMessageW
PtInRect
GetCursorPos
SetCursor
LoadCursorW
EnumWindows
CharNextExA
GetSysColor
LoadImageW
InvalidateRect
PostMessageW
SetActiveWindow
WaitMessage
IsDialogMessageW
AttachThreadInput
MessageBeep
FlashWindowEx
GetForegroundWindow
GetWindowLongW
GetWindow
IsWindowEnabled
wsprintfA
MapDialogRect
SetTimer
EnableWindow
GetDlgItem
SetDlgItemTextW
KillTimer
SetForegroundWindow
UpdateWindow
DestroyWindow
SetWindowTextW
ShowWindow
DefWindowProcW
SetPropW
SetWindowLongW
ShowWindowAsync
RemovePropW
CallWindowProcA
CallWindowProcW
GetPropW
UnhookWindowsHookEx
SetWindowsHookExW
PostQuitMessage
CallMsgFilterW
MsgWaitForMultipleObjectsEx
PostThreadMessageW
GetWindowThreadProcessId
CallNextHookEx
SetWindowPos
IsWindowVisible
FindWindowExW
GetClassNameW
MapWindowPoints
CheckDlgButton
MessageBoxA
CharPrevA
CharNextA
MessageBoxIndirectW
GetWindowTextW
SetDlgItemInt
EndDialog
GetDialogBaseUnits
GetWindowRect
GetClientRect
GetParent
GetMonitorInfoW
MonitorFromRect
SetRect
OffsetRect
SendMessageW
GetDesktopWindow
IsWindow
TranslateMessage
IsWindowUnicode
PeekMessageW
DispatchMessageW
FillRect
IsDlgButtonChecked

gdi32

CreateCompatibleDC
ExcludeClipRect
RectVisible
DeleteObject
CreateFontIndirectW
GetDeviceCaps
GetObjectW
GetStockObject
DeleteDC
BitBlt
SelectObject

ole32

CoInitializeEx
CoUninitialize
CoCreateInstance
CoInitialize

oleaut32

SysFreeString
SysAllocString

msvcr90

_decode_pointer
_onexit
_lock
_encode_pointer
__dllonexit
_unlock
?terminate@@YAXXZ
_CxxThrowException
_purecall
toupper
_wcsdup
_wcsicmp
_wcsnicmp
_itow
atoi
_strnicmp
_stricmp
??2@YAPAXI@Z
_vsnprintf
strcpy
strlen
strncpy
memmove
memcmp
_wtoi
wcscmp
_vsnwprintf
free
malloc
??3@YAXPAX@Z
memcpy
memset
_malloc_crt
_encoded_null
_initterm
_initterm_e
_amsg_exit
_adjust_fdiv
__CppXcptFilter
_except_handler4_common
?_type_info_dtor_internal_method@type_info@@QAEXXZ
__clean_type_info_names_internal
__CxxFrameHandler3
_crt_debugger_hook

shlwapi

PathAppendW
PathFindFileNameW
PathFindExtensionW
PathRemoveFileSpecA
PathAppendA
PathCombineA
PathCombineW

Exports

Exports

winampAddUnifiedFileInfoPane
winampGetExtendedFileInfoW
winampGetExtendedRead_close
winampGetExtendedRead_getData
winampGetExtendedRead_lasterror
winampGetExtendedRead_open
winampGetInModule2
winampSetExtendedFileInfoW
winampUseUnifiedFileInfoDlg
winampWriteExtendedFileInfo

Sections

.text
Size: 55KB - Virtual size: 55KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 65KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Plugins/in_dshow.dll
.dll windows:5 windows x86 arch:x86

3e3e4f5ff5dfc592402158670cbb56f5

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

f:\sandbox\20131120_103959\in_dshow\Release\in_dshow.pdb

Imports

kernel32

WritePrivateProfileStringA
lstrcpynA
GetPrivateProfileStringA
GetFileSize
GetLastError
CreateFileW
CloseHandle
lstrcpynW
GetTickCount
MultiByteToWideChar
WideCharToMultiByte
Sleep
GetModuleHandleA
lstrcmpiA
GetFileAttributesExW
CompareFileTime
lstrcmpiW
CompareStringW
InitializeCriticalSection
DeleteCriticalSection
SetEvent
EnterCriticalSection
LeaveCriticalSection
ResetEvent
WaitForMultipleObjects
GetCurrentThreadId
lstrcmpW
ReadFile
SetFilePointer
MulDiv
lstrlenW
InterlockedIncrement
InterlockedDecrement
FreeLibrary
LoadLibraryA
GetProcAddress
CreateEventA
GetThreadPriority
GetCurrentThread
SetThreadPriority
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
QueryPerformanceCounter
InterlockedCompareExchange
RaiseException
InterlockedExchange
LocalAlloc

user32

SetDlgItemTextA
SendDlgItemMessageA
GetDlgItemTextA
EndDialog
SetDlgItemTextW
SendDlgItemMessageW
RegisterWindowMessageA
MsgWaitForMultipleObjects
PostThreadMessageA
GetQueueStatus
PeekMessageA
CreateWindowExA
RegisterClassA
DefWindowProcA
DestroyWindow
KillTimer
IsWindow
MessageBoxIndirectW
CharNextW
PostMessageA
SetTimer
SendMessageA

ole32

CoTaskMemAlloc
CoInitialize
CoFreeUnusedLibraries
CoUninitialize
CoTaskMemFree
CoCreateInstance

oleaut32

OleCreatePropertyFrame

shlwapi

PathFindExtensionW
PathFindFileNameW
PathStripPathW
PathRemoveExtensionW

msvcr90

_crt_debugger_hook
__clean_type_info_names_internal
?_type_info_dtor_internal_method@type_info@@QAEXXZ
?terminate@@YAXXZ
_except_handler4_common
__CppXcptFilter
_adjust_fdiv
_amsg_exit
_initterm_e
_initterm
__CxxFrameHandler3
_encoded_null
_malloc_crt
_decode_pointer
_onexit
_lock
_encode_pointer
__dllonexit
_unlock
??_U@YAPAXI@Z
??_V@YAXPAX@Z
_vsnprintf
_purecall
_wcsdup
memcmp
??2@YAPAXI@Z
??3@YAXPAX@Z
_strnicmp
_wcsicmp
memset
_vsnwprintf
fabs
labs
free
malloc
memcpy

Exports

Exports

winampGetExtendedFileInfoW
winampGetInModule2

Sections

.text
Size: 42KB - Virtual size: 42KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 15KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Plugins/in_flac.dll
.dll windows:5 windows x86 arch:x86

1a6f2907c538bd1f71d1cfe95bd1794b

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

f:\sandbox\20131120_103959\in_flac\Release\in_flac.pdb

Imports

shlwapi

PathFindExtensionW

kernel32

DisableThreadLibraryCalls
LoadLibraryW
GetProcAddress
GetModuleHandleA
GetPrivateProfileStringW
lstrcmpiW
WaitForSingleObject
SetEvent
WaitForMultipleObjectsEx
CompareFileTime
WideCharToMultiByte
CompareStringW
MultiByteToWideChar
GetLastError
GetFileAttributesExW
lstrcpynW
CreateEventA
SetThreadPriority
GetPrivateProfileIntW
QueueUserAPC
ResetEvent
CloseHandle
CreateThread
GetTempFileNameW
SetFilePointer
lstrcpynA
WriteFile
CopyFileW
ReadFile
CreateFileW
GetTempPathW
MoveFileW
DeleteFileW
WritePrivateProfileStringW
GetFileSize
LocalAlloc
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
FreeLibrary
InterlockedCompareExchange
Sleep
RaiseException
LoadLibraryA
InterlockedExchange

user32

CheckDlgButton
IsDlgButtonChecked
IsWindow
GetParent
SetPropW
SetWindowLongA
GetWindowLongA
EndDialog
MessageBoxW
GetDlgItemTextW
SetDlgItemTextW
EnableWindow
SendMessageA
PostMessageA
MessageBoxIndirectW
GetDlgItem

msvcr90

_vsnwprintf
wcschr
_wcsicmp
_purecall
_CIpow
free
malloc
strchr
_stricmp
_wtoi
atoi
_vsnprintf
??3@YAXPAX@Z
_wcsdup
??2@YAPAXI@Z
memmove
calloc
wcsstr
_strdup
realloc
_unlock
__dllonexit
_encode_pointer
_lock
_onexit
_decode_pointer
__CxxFrameHandler3
_malloc_crt
_encoded_null
_initterm
_initterm_e
_amsg_exit
_adjust_fdiv
__CppXcptFilter
_except_handler4_common
?terminate@@YAXXZ
?_type_info_dtor_internal_method@type_info@@QAEXXZ
__clean_type_info_names_internal
_crt_debugger_hook
memcpy
memset
_atof_l

Exports

Exports

winampAddUnifiedFileInfoPane
winampGetExtendedFileInfoW
winampGetExtendedRead_close
winampGetExtendedRead_getData
winampGetExtendedRead_openW
winampGetInModule2
winampSetExtendedFileInfoW
winampUseUnifiedFileInfoDlg
winampWriteExtendedFileInfo
winampWriteExtendedGetLastError

Sections

.text
Size: 29KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Plugins/in_flv.dll
.dll windows:5 windows x86 arch:x86

238df058d3a3ff0cbfd505be29e7e715

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

f:\sandbox\20131120_103959\in_flv\Release\in_flv.pdb

Imports

shlwapi

PathStripPathW
PathCombineW
PathIsURLW

kernel32

GetSystemTimeAsFileTime
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
InterlockedIncrement
InterlockedDecrement
WideCharToMultiByte
Sleep
lstrlenW
GetCurrentThread
GetCurrentProcess
DuplicateHandle
GetCurrentThreadId
CloseHandle
QueueUserAPC
CreateThread
SetThreadPriority
WaitForSingleObject
InitializeCriticalSection
DeleteCriticalSection
CreateEventW
FreeLibrary
EnterCriticalSection
LeaveCriticalSection
lstrcpynW
ResetEvent
GetTickCount
SetEvent
GetModuleHandleW
MultiByteToWideChar
GetDateFormatW
GetTimeFormatW
SetFilePointer
GetLastError
GetFileSize
CreateFileW
ReadFile
GetTempPathW
GetTempFileNameW
DeleteFileW
WriteFile
LoadLibraryW
GetProcAddress
WaitForMultipleObjects
InterlockedExchangeAdd
InterlockedExchange
TerminateProcess
InterlockedCompareExchange
GetCurrentProcessId
QueryPerformanceCounter
DisableThreadLibraryCalls

user32

IsWindow
SendMessageW
MessageBoxIndirectW
PostMessageW

oleaut32

SafeArrayUnaccessData
SafeArrayAccessData
SafeArrayCreate
SysAllocString
VariantInit

msvcr90

_localtime64
_crt_debugger_hook
__clean_type_info_names_internal
_except_handler4_common
?_type_info_dtor_internal_method@type_info@@QAEXXZ
??3@YAXPAX@Z
memcmp
wcscmp
_wcsdup
free
??2@YAPAXI@Z
malloc
_vsnprintf
strstr
strlen
_stricmp
_wcsicmp
_purecall
_vsnwprintf
memset
memcpy
__CxxFrameHandler3
realloc
_unlock
__dllonexit
_encode_pointer
_lock
_onexit
_decode_pointer
?terminate@@YAXXZ
_malloc_crt
_encoded_null
_initterm
_initterm_e
_amsg_exit
_adjust_fdiv
__CppXcptFilter

Exports

Exports

winampGetExtendedFileInfoW
winampGetInModule2

Sections

.text
Size: 26KB - Virtual size: 26KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 67KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Plugins/in_midi.dll
.dll windows:5 windows x86 arch:x86

9246f40f27048a8d6651e7060842b00e

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

f:\sandbox\20131120_103959\in_midi\Release\in_midi.pdb

Imports

shlwapi

PathCombineW
PathFindExtensionW
PathIsURLW

kernel32

GetCurrentThreadId
GetModuleHandleA
CreateThread
SetThreadPriority
ResumeThread
WaitForSingleObject
TerminateThread
lstrcmpA
WritePrivateProfileStructA
GetPrivateProfileIntA
GetPrivateProfileStringA
WritePrivateProfileStringA
GetPrivateProfileStructA
lstrcpyA
WideCharToMultiByte
MultiByteToWideChar
GetFileSize
GetShortPathNameW
CompareStringW
lstrcpynW
lstrcpynA
EnterCriticalSection
GetTempPathA
lstrlenA
lstrcatA
LoadLibraryW
GetProcAddress
FreeLibrary
SetFilePointer
Sleep
DisableThreadLibraryCalls
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
QueryPerformanceCounter
InterlockedCompareExchange
RaiseException
LoadLibraryA
GetLastError
InterlockedExchange
LocalAlloc
LeaveCriticalSection
InitializeCriticalSection
DeleteCriticalSection
MulDiv
DeleteFileA
CloseHandle
GetModuleFileNameA
ReadFile
WriteFile
CreateFileA
GetTickCount

user32

GetWindowTextLengthA
GetWindowTextA
SendMessageA
KillTimer
IsWindow
DispatchMessageA
GetMessageA
IsZoomed
RegisterClassA
ValidateRect
ReleaseDC
DrawEdge
GetDC
MessageBoxIndirectW
MessageBoxW
MessageBoxA
MapWindowPoints
GetClientRect
EndDialog
GetParent
SendMessageW
EnumChildWindows
EnableWindow
SetWindowTextW
LoadCursorA
SetWindowTextA
wsprintfA
SetDlgItemInt
GetDlgItemTextA
GetWindowRect
IsIconic
GetDlgItemInt
SendDlgItemMessageA
SetWindowPos
GetSystemMetrics
GetDlgItem
ShowWindow
CreateWindowExA
MapDialogRect
SetDlgItemTextA
SetWindowLongA
PostMessageA
DestroyWindow
DefWindowProcA
GetWindowLongA
wsprintfW
SetTimer

gdi32

CreateDIBSection
GetObjectA
SelectObject
CreateCompatibleDC
DeleteObject
DeleteDC
BitBlt

comdlg32

GetOpenFileNameA
GetSaveFileNameA

advapi32

RegQueryValueExA

ole32

CoCreateInstance
CoUninitialize
CoInitialize

msvcr90

_malloc_crt
_decode_pointer
_onexit
_lock
_encode_pointer
__dllonexit
_unlock
?terminate@@YAXXZ
_itow
_strnicmp
_vsnprintf
wcscmp
atoi
_vswprintf_c_l
strstr
strcpy
_purecall
_itoa
pow
log
wcscat
wcsncpy
_encoded_null
_initterm
_initterm_e
_amsg_exit
_adjust_fdiv
__CppXcptFilter
_except_handler4_common
?_type_info_dtor_internal_method@type_info@@QAEXXZ
__clean_type_info_names_internal
_crt_debugger_hook
strrchr
??2@YAPAXI@Z
free
__CxxFrameHandler3
log10
tolower
??3@YAXPAX@Z
mbstowcs
malloc
memcpy
memcmp
memset
_stricmp
strlen
realloc

Exports

Exports

winampGetExtendedFileInfoW
winampGetInModule2

Sections

.text
Size: 70KB - Virtual size: 69KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 15KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Plugins/in_mkv.dll
.dll windows:5 windows x86 arch:x86

22f15ff2237b727e4533aec1e8bf96f6

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

f:\sandbox\20131120_103959\in_mkv\Release\in_mkv.pdb

Imports

ws2_32

htons

kernel32

lstrlenW
MultiByteToWideChar
WaitForSingleObject
GetModuleHandleW
SetThreadPriority
GetLastError
DeleteCriticalSection
CreateThread
SetEvent
InitializeCriticalSection
ResetEvent
CreateEventW
WaitForMultipleObjects
InterlockedExchange
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
DisableThreadLibraryCalls
InterlockedCompareExchange
Sleep

user32

PostMessageW
IsWindow
MessageBoxIndirectW
DestroyWindow
GetWindowRect
GetFocus
GetClientRect
SetFocus
GetWindowLongW
GetDlgItem
SetWindowLongW
EndDialog
SetWindowPos
ShowWindow
SendMessageW
MapWindowPoints

gdi32

DeleteObject

msvcr90

_crt_debugger_hook
_except_handler4_common
_onexit
_lock
memset
_wcsdup
memcpy
_stricmp
_wcsicmp
free
_vsnwprintf
??3@YAXPAX@Z
malloc
??2@YAPAXI@Z
_wfopen
printf
__CxxFrameHandler3
fgetpos
_fseeki64
fsetpos
fread
fseek
fclose
realloc
_encode_pointer
_malloc_crt
_encoded_null
_decode_pointer
_initterm
_initterm_e
_amsg_exit
_adjust_fdiv
__CppXcptFilter
?terminate@@YAXXZ
?_type_info_dtor_internal_method@type_info@@QAEXXZ
__clean_type_info_names_internal
_unlock
__dllonexit

Exports

Exports

winampGetExtendedFileInfoW
winampGetInModule2

Sections

.text
Size: 28KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Plugins/in_mod.dll
.dll windows:5 windows x86 arch:x86

e7391c9df61a75c4bf840c5af98bff05

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

f:\sandbox\20131120_103959\in_mod\mikamp\Release\in_mod (mikamp).pdb

Imports

shlwapi

PathFindExtensionW
PathIsURLW

kernel32

IsDebuggerPresent
GetPrivateProfileIntA
CompareStringW
MultiByteToWideChar
WritePrivateProfileStringA
GetModuleHandleA
Sleep
MulDiv
lstrlenA
lstrcpynA
WaitForSingleObject
WideCharToMultiByte
TerminateThread
lstrcpynW
SetThreadPriority
lstrcmpiA
DisableThreadLibraryCalls
GetTempFileNameA
GetShortPathNameW
CloseHandle
GetTempPathA
DeleteFileA
CreateThread
lstrcpyA
FreeLibrary
GetProcAddress
LoadLibraryA
GetModuleFileNameA
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
InterlockedCompareExchange
InterlockedExchange
DeleteCriticalSection
EnterCriticalSection
HeapCreate
LeaveCriticalSection
HeapDestroy
InitializeCriticalSection
HeapFree
HeapAlloc
HeapReAlloc

user32

IsWindow
DestroyWindow
SetTimer
GetWindowRect
SetActiveWindow
KillTimer
GetActiveWindow
PostMessageA
GetSystemMetrics
SetWindowTextA
MoveWindow
GetParent
SendMessageA
SetWindowLongA
MessageBoxA
GetDlgItem
EndDialog
SetWindowPos
CheckDlgButton
ShowWindow
IsDlgButtonChecked
MessageBoxIndirectW
SendMessageW
EnableWindow
GetDlgCtrlID
GetDlgItemTextA
SetWindowTextW
SetDlgItemTextA
GetDialogBaseUnits
SetForegroundWindow
GetWindowLongA

comdlg32

GetSaveFileNameA

msvcr90

_crt_debugger_hook
_except_handler4_common
__clean_type_info_names_internal
_onexit
_lock
__dllonexit
_unlock
__CppXcptFilter
_adjust_fdiv
_amsg_exit
_initterm_e
memset
calloc
free
memcpy
malloc
strstr
strchr
_vsnwprintf
_vsnprintf
atof
_stricmp
_strnicmp
strncmp
atoi
_vswprintf_c_l
_itow
strrchr
strncpy
??3@YAXPAX@Z
??2@YAPAXI@Z
fputc
feof
fgetc
fopen
fread
fwrite
ftell
fseek
fclose
rand
_encode_pointer
_malloc_crt
_encoded_null
_decode_pointer
_initterm

Exports

Exports

winampGetExtendedFileInfoW
winampGetExtendedRead_close
winampGetExtendedRead_getData
winampGetExtendedRead_open
winampGetInModule2

Sections

.text
Size: 96KB - Virtual size: 95KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 35KB - Virtual size: 43KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Plugins/in_mp3.dll
.dll windows:5 windows x86 arch:x86

d29fa5c2d4e755b888a93d4b95d5fb11

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

f:\sandbox\20131120_103959\in_mp3\Release\in_mp3.pdb

Imports

shlwapi

PathRemoveExtensionW
PathStripPathW
PathIsURLW
PathFindExtensionW

kernel32

MulDiv
InitializeCriticalSection
DeleteCriticalSection
lstrcpynW
CreateThread
SetThreadPriority
WaitForSingleObject
CloseHandle
InterlockedExchangeAdd
InterlockedExchange
QueryPerformanceCounter
Sleep
EnterCriticalSection
LeaveCriticalSection
SetFilePointer
GetLastError
GetTickCount
lstrcpynA
GetPrivateProfileIntA
GetPrivateProfileStringA
WideCharToMultiByte
CreateFileW
GetFileTime
ReadFile
WritePrivateProfileStringA
CreateFileA
WriteFile
MultiByteToWideChar
lstrcmpW
lstrcmpiW
GetFileAttributesExW
CompareFileTime
lstrlenW
MoveFileW
CopyFileW
DeleteFileW
GetFileAttributesW
SetEndOfFile
GetModuleFileNameA
GetModuleHandleW
lstrcmpA
GetProcAddress
LocalAlloc
FreeLibrary
LoadLibraryA
RaiseException
InterlockedCompareExchange
DisableThreadLibraryCalls
GetCurrentThreadId
GetCurrentProcessId
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime

user32

MessageBoxIndirectW
SetDlgItemInt
ReleaseDC
SetWindowTextA
DrawTextA
GetClientRect
GetDC
GetDlgItemInt
wsprintfW
EnumChildWindows
SetWindowTextW
GetClassNameW
GetDlgItemTextW
IsDlgButtonChecked
CheckDlgButton
SetPropW
GetParent
GetPropW
MessageBoxW
SetWindowPos
SetTimer
EnableWindow
GetDlgItem
SetDlgItemTextW
CharNextW
SendDlgItemMessageW
KillTimer
PtInRect
GetWindowRect
SystemParametersInfoW
GetMonitorInfoA
MonitorFromWindow
MonitorFromRect
SetFocus
EndDialog
GetDlgItemTextA
SetDlgItemTextA
GetWindowLongW
SetWindowLongW
SendMessageTimeoutW
wsprintfA
PostMessageW
SendMessageW
IsWindow

gdi32

SelectObject
DeleteObject

shell32

SHGetMalloc
SHGetPathFromIDListA
SHBrowseForFolderW
SHGetFolderPathA

msvcr90

_CIsqrt
_CIlog
_CIpow
_CIcos
_CIsin
floor
__CxxFrameHandler3
memset
_CIlog10
memcmp
_crt_debugger_hook
__clean_type_info_names_internal
?_type_info_dtor_internal_method@type_info@@QAEXXZ
?terminate@@YAXXZ
_except_handler4_common
__CppXcptFilter
_adjust_fdiv
_amsg_exit
_initterm_e
_initterm
_encoded_null
_malloc_crt
_decode_pointer
_onexit
_lock
_encode_pointer
__dllonexit
_unlock
wcslen
ceil
strcmp
fopen
fread
_CIatan
wcscmp
memcpy
strncmp
strlen
_wcsdup
??3@YAXPAX@Z
_wcsicmp
??2@YAPAXI@Z
memmove
_vswprintf_c_l
_wcsnicmp
_purecall
free
malloc
calloc
_strnicmp
_vsnprintf
_vsnwprintf
_wtof_l
strncpy
strstr
strcspn
strchr
strtoul
_strdup
atoi
wcsstr
??_U@YAPAXI@Z
??_V@YAXPAX@Z
_stricmp
_wtoi
wcschr
wcsncpy
wcstoul
fclose

Exports

Exports

CreateAudioDecoder
DeleteAudioDecoder
winampAddUnifiedFileInfoPane
winampClearExtendedFileInfoW
winampGetExtendedFileInfoW
winampGetExtendedRead_close
winampGetExtendedRead_getData
winampGetExtendedRead_openW
winampGetExtendedRead_openW_float
winampGetExtendedRead_setTime
winampGetInModule2
winampSetExtendedFileInfoW
winampUseUnifiedFileInfoDlg
winampWriteExtendedFileInfo

Sections

.text
Size: 157KB - Virtual size: 156KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 58KB - Virtual size: 58KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 19KB - Virtual size: 84KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Plugins/in_mp4.dll
.dll windows:5 windows x86 arch:x86

d4d732768716d76da14f2aa79d089473

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

f:\sandbox\20131120_103959\in_mp4\Release\in_mp4.pdb

Imports

shlwapi

PathFindExtensionW
PathCombineW
PathAppendW
PathStripPathW
PathRemoveExtensionW
PathFileExistsW

kernel32

Sleep
FreeLibrary
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetPrivateProfileStringW
WideCharToMultiByte
WritePrivateProfileStringW
MultiByteToWideChar
GetLastError
lstrcmpA
GetFileAttributesExW
CompareFileTime
CompareStringW
lstrcmpiW
lstrcpynW
lstrlenA
MulDiv
GetModuleHandleW
GetTickCount
CreateEventW
CreateDirectoryW
CloseHandle
SetEvent
ResetEvent
CreateThread
SetThreadPriority
WaitForSingleObject
InterlockedExchangeAdd
InterlockedExchange
InitializeCriticalSection
DeleteCriticalSection
WaitForMultipleObjects
EnterCriticalSection
LeaveCriticalSection
SleepEx
SetFilePointer
GetTempPathW
GetTempFileNameW
CreateFileW
DeleteFileW
ReadFile
WriteFile
CancelIo
GetFileSize
GetOverlappedResult
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
QueryPerformanceCounter
DisableThreadLibraryCalls
InterlockedCompareExchange
LoadLibraryA
RaiseException
GetProcAddress
LocalAlloc

user32

EndDialog
MessageBoxIndirectW
SendMessageW
IsWindow
PostMessageW
SetDlgItemTextW
GetDlgItemTextW

msvcr90

_purecall
malloc
__CxxFrameHandler3
_vsnprintf
_vsnwprintf
memset
_stricmp
atoi
log10
wcstoul
_wcstoui64
_wtoi
strncmp
??2@YAPAXI@Z
??3@YAXPAX@Z
strlen
memcmp
_wcsnicmp
_wtof_l
pow
??_V@YAXPAX@Z
realloc
strstr
_strdup
_strtoui64
_unlock
__dllonexit
_encode_pointer
_lock
_onexit
_decode_pointer
_malloc_crt
_encoded_null
_initterm
_initterm_e
_amsg_exit
_adjust_fdiv
__CppXcptFilter
_except_handler4_common
?terminate@@YAXXZ
?_type_info_dtor_internal_method@type_info@@QAEXXZ
__clean_type_info_names_internal
_crt_debugger_hook
memcpy
_wcsicmp
wcschr
_except_handler3
free

Exports

Exports

winampGetExtendedFileInfoW
winampGetExtendedRead_close
winampGetExtendedRead_getData
winampGetExtendedRead_openW
winampGetExtendedRead_openW_float
winampGetExtendedRead_setTime
winampGetInModule2
winampSetExtendedFileInfoW
winampUseUnifiedFileInfoDlg
winampWriteExtendedFileInfo

Sections

.text
Size: 34KB - Virtual size: 33KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Plugins/in_nsv.dll
.dll windows:5 windows x86 arch:x86

d3fb20e52c88aa7d1bc95277404b149a

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

f:\sandbox\20131120_103959\in_nsv\Release\in_nsv.pdb

Imports

shlwapi

PathFindExtensionW
PathIsURLW

kernel32

GetTempPathA
CreateFileA
GetFileSize
SetFilePointer
WriteFile
LeaveCriticalSection
MulDiv
ReadFile
lstrcmpiA
EnterCriticalSection
MoveFileA
CloseHandle
DeleteFileA
FindFirstFileW
CompareFileTime
WaitForSingleObject
GetTickCount
InitializeCriticalSection
WideCharToMultiByte
TerminateThread
Sleep
lstrcpynW
CompareStringW
MultiByteToWideChar
SetThreadPriority
GetFileAttributesExW
DeleteCriticalSection
GetShortPathNameW
CreateThread
QueryPerformanceCounter
QueryPerformanceFrequency
FindNextFileA
GetPrivateProfileStringA
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
DisableThreadLibraryCalls
InterlockedCompareExchange
InterlockedExchange
IsDebuggerPresent
SetUnhandledExceptionFilter
GetPrivateProfileIntA
WritePrivateProfileStringA
GetModuleFileNameA
lstrcpynA
FreeLibrary
CreateDirectoryA
FindFirstFileA
GetProcAddress
FindClose
LoadLibraryA
GetLastError

user32

TranslateMessage
GetAsyncKeyState
PeekMessageA
ReleaseDC
SendMessageTimeoutA
IsWindow
PostMessageA
DispatchMessageA
LoadImageA
SetTimer
SendDlgItemMessageA
KillTimer
GetDC
MessageBoxA
GetDlgItem
SetDlgItemTextW
EnableWindow
GetDlgItemTextA
SetDlgItemTextA
GetDlgItemInt
wsprintfA
SendMessageA
SetDlgItemInt
EndDialog
CheckDlgButton
IsDlgButtonChecked
DrawTextA
GetParent

gdi32

BitBlt
SetTextColor
DeleteDC
CreateDIBSection
SetBkMode
DeleteObject
SelectObject
CreateCompatibleDC
TextOutA

advapi32

RegCloseKey
RegOpenKeyExA
RegQueryValueExA

msvcr90

_initterm_e
_initterm
_decode_pointer
_encoded_null
_malloc_crt
_encode_pointer
strcmp
__CxxFrameHandler3
_adjust_fdiv
__CppXcptFilter
?terminate@@YAXXZ
?_type_info_dtor_internal_method@type_info@@QAEXXZ
__clean_type_info_names_internal
_unlock
__dllonexit
_lock
_onexit
_except_handler4_common
_crt_debugger_hook
_amsg_exit
_strnicmp
strlen
strcpy
strncpy
memcpy
strncat
_purecall
??3@YAXPAX@Z
strcat
??2@YAPAXI@Z
_stricmp
strncmp
free
malloc
strstr
strchr
atoi
memset
_strdup
realloc
atan2
_wcsicmp
sqrt
cos
rand
_vsnwprintf
_vsnprintf
fabs
sin
sprintf
_atof_l

Exports

Exports

winampGetExtendedFileInfoW
winampGetInModule2
winampSetExtendedFileInfo
winampWriteExtendedFileInfo

Sections

.text
Size: 45KB - Virtual size: 45KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 15KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Plugins/in_swf.dll
.dll windows:5 windows x86 arch:x86

bc63d88770a50cb601d87f7289eb5e55

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

f:\sandbox\20131120_103959\in_swf\Release\in_swf.pdb

Imports

shlwapi

PathFindExtensionW
PathRemoveFileSpecW
PathIsURLW
PathAppendW

kernel32

GetModuleHandleW
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
CompareStringW
CompareStringA
LeaveCriticalSection
EnterCriticalSection
InterlockedExchange
InitializeCriticalSection
GetModuleFileNameW
DeleteCriticalSection
lstrcpynW
lstrlenW
DisableThreadLibraryCalls
InterlockedCompareExchange
Sleep

user32

CharPrevW
CharNextW
SetWindowLongW
IsWindow
MessageBoxIndirectW
SendMessageW
PostMessageW
CopyRect
GetClientRect
CallWindowProcW
BeginPaint
EndPaint

ole32

CoUninitialize
CoInitializeEx
CoCreateInstance

msvcr90

malloc
_crt_debugger_hook
__clean_type_info_names_internal
?_type_info_dtor_internal_method@type_info@@QAEXXZ
?terminate@@YAXXZ
_except_handler4_common
__CppXcptFilter
_adjust_fdiv
_amsg_exit
_initterm_e
_initterm
_encoded_null
_malloc_crt
_decode_pointer
_onexit
_lock
wcslen
wcscmp
_wcsicmp
free
_wcsnicmp
__CxxFrameHandler3
memset
_vsnwprintf
??3@YAXPAX@Z
??2@YAPAXI@Z
memcpy
memcmp
wcsstr
_wcsdup
_wtof_l
wcstoul
_create_locale
wcsncmp
_unlock
__dllonexit
_encode_pointer

Exports

Exports

winampGetExtendedFileInfoW
winampGetInModule2

Sections

.text
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Plugins/in_vorbis.dll
.dll windows:5 windows x86 arch:x86

85341fd80d26a8f0bbe37cf3143c0b58

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

f:\sandbox\20131120_103959\in_vorbis\Release\in_vorbis.pdb

Imports

shlwapi

PathIsURLW
PathFindFileNameW
PathFindExtensionW
PathCombineW

kernel32

EnterCriticalSection
LeaveCriticalSection
lstrcpynW
GetTickCount
MulDiv
SetFilePointer
lstrcpynA
WritePrivateProfileStringA
lstrcmpiA
GetPrivateProfileIntA
WritePrivateProfileStructA
GetPrivateProfileStructA
GetPrivateProfileStringA
MoveFileW
DeleteFileW
SetFileAttributesW
Sleep
GetProcAddress
GetModuleHandleA
GetDiskFreeSpaceA
GetFileSize
GetTempPathW
GetCurrentProcessId
GetFileTime
SetFileTime
CopyFileW
lstrcmpiW
GetFileAttributesExW
CompareFileTime
CompareStringW
GetVersionExA
InitializeCriticalSection
DeleteCriticalSection
CreateThread
SetThreadPriority
ResumeThread
WaitForSingleObject
TerminateThread
WriteFile
ReadFile
CreateFileW
CloseHandle
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentThreadId
QueryPerformanceCounter
DisableThreadLibraryCalls
InterlockedCompareExchange
InterlockedExchange
MultiByteToWideChar
GetLastError
WideCharToMultiByte
GetCurrentProcess

user32

IsDlgButtonChecked
SetDlgItemInt
EnumChildWindows
GetClassNameA
RegisterClassA
LoadCursorA
PostMessageA
CharNextW
DefWindowProcA
ReleaseDC
DrawEdge
GetDC
LoadBitmapA
KillTimer
RedrawWindow
SetTimer
SetPropW
GetDlgItemTextW
MessageBoxA
ShowWindow
SendDlgItemMessageA
SetDlgItemTextA
GetDlgItemInt
SendMessageW
SetActiveWindow
GetMessageA
EnableWindow
IsWindowEnabled
DispatchMessageA
TranslateMessage
IsDialogMessageA
GetClientRect
SetWindowLongA
GetSystemMetrics
GetWindowLongA
GetWindowRect
CreateWindowExA
GetDlgItem
EndDialog
DestroyWindow
SetWindowPos
SetDlgItemTextW
SetWindowTextW
GetWindowTextW
GetWindowTextLengthW
SendMessageA
GetWindowTextA
wsprintfA
GetDlgItemTextA
IsWindow
GetParent

gdi32

DeleteObject
GetObjectA
GetStockObject
DeleteDC
TextOutA
SetTextAlign
SetBkMode
SetTextColor
BitBlt
SelectObject
CreateCompatibleDC
CreateFontIndirectA

shell32

SHGetPathFromIDListW
SHBrowseForFolderW
SHGetMalloc
SHGetFolderPathA

msvcr90

?terminate@@YAXXZ
__CppXcptFilter
_adjust_fdiv
_amsg_exit
_initterm_e
_initterm
_encoded_null
_malloc_crt
_decode_pointer
_onexit
_lock
_encode_pointer
__dllonexit
_unlock
memchr
exit
ceil
qsort
ldexp
memmove
toupper
fseek
_errno
_wtoi
wcschr
wcsrchr
strncpy
fclose
ftell
fread
_fseeki64
_strdup
_except_handler4_common
__CxxFrameHandler3
__clean_type_info_names_internal
_crt_debugger_hook
_CIexp
_CIsqrt
_CIcos
floor
_CIatan
_CIsin
_CIlog
_CIpow
?_type_info_dtor_internal_method@type_info@@QAEXXZ
log10
atoi
strstr
_atof_l
_stricmp
strlen
malloc
calloc
free
memcpy
vsprintf
_vswprintf_c_l
memset
realloc
_vsnprintf
_purecall
??2@YAPAXI@Z
strchr
_wcsdup
??3@YAXPAX@Z
wcsstr
_wcsicmp
_itoa
sprintf
wcscmp
fabs
strcmp
_vsnwprintf
abs
memcmp
pow

Exports

Exports

winampAddUnifiedFileInfoPane
winampGetExtendedFileInfoW
winampGetExtendedRead_close
winampGetExtendedRead_getData
winampGetExtendedRead_openW
winampGetExtendedRead_openW_float
winampGetExtendedRead_setTime
winampGetInModule2
winampSetExtendedFileInfoW
winampUseUnifiedFileInfoDlg
winampWriteExtendedFileInfo

Sections

.text
Size: 132KB - Virtual size: 131KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 73KB - Virtual size: 72KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 26KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Plugins/in_wave.dll
.dll windows:5 windows x86 arch:x86

71788ddff67bb8fe41063436d251c90c

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

f:\sandbox\20131120_103959\in_wave\Release\in_wave.pdb

Imports

shlwapi

PathIsURLW
PathStripPathW
PathFindExtensionW

kernel32

IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
WaitForSingleObject
SetEvent
SleepEx
WaitForMultipleObjectsEx
CreateEventA
MulDiv
SetThreadPriority
ResetEvent
CloseHandle
CreateThread
lstrlenA
lstrcpynA
lstrcatA
CompareStringW
MultiByteToWideChar
lstrcmpiA
CompareStringA
lstrcpynW
GetLastError
QueueUserAPC
GetPrivateProfileStringA
WritePrivateProfileStringA
GetModuleHandleA
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
DisableThreadLibraryCalls
InterlockedCompareExchange
Sleep
RaiseException
LoadLibraryA
InterlockedExchange
GetProcAddress
LocalAlloc
FreeLibrary

user32

CharPrevA
CharNextA
SendMessageA
MessageBoxIndirectW
EndDialog
GetDlgItemTextA
SetDlgItemTextA
PostMessageA
IsWindow
MessageBoxA
GetDlgItem

msvcr90

_vsnwprintf
_vsnprintf
_purecall
??3@YAXPAX@Z
??2@YAPAXI@Z
_stricmp
_unlock
__dllonexit
_encode_pointer
_lock
_onexit
_decode_pointer
_malloc_crt
_encoded_null
_initterm
_initterm_e
_amsg_exit
_adjust_fdiv
__CppXcptFilter
_except_handler4_common
?terminate@@YAXXZ
?_type_info_dtor_internal_method@type_info@@QAEXXZ
__clean_type_info_names_internal
_crt_debugger_hook
memset
malloc
free
_wcsicmp

Exports

Exports

winampGetExtendedFileInfoW
winampGetExtendedRead_close
winampGetExtendedRead_getData
winampGetExtendedRead_openW
winampGetExtendedRead_setTime
winampGetInModule2

Sections

.text
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Plugins/in_wm.dll
.dll windows:5 windows x86 arch:x86

30304e7527b67c6efbb6fdbfe959c52d

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

f:\sandbox\20131120_103959\in_wmvdrm\Release\in_wmvdrm.pdb

Imports

shlwapi

PathIsRootW
PathCombineW
PathCanonicalizeW
PathFileExistsW
PathIsURLW
PathRemoveFileSpecW
StrRChrW
PathFindExtensionW

kernel32

WritePrivateProfileStringW
GetPrivateProfileIntW
DeleteCriticalSection
CreateEventW
ResetEvent
SetEvent
WaitForSingleObject
MultiByteToWideChar
EnterCriticalSection
LeaveCriticalSection
GetPrivateProfileStringW
InitializeCriticalSection
WideCharToMultiByte
lstrcmpiW
QueueUserAPC
CreateThread
SetThreadPriority
WaitForSingleObjectEx
CloseHandle
Sleep
GetModuleHandleW
GlobalAddAtomW
GlobalDeleteAtom
InterlockedIncrement
InterlockedDecrement
GetLastError
MulDiv
WaitForMultipleObjects
LocalFree
GetTickCount
GetVersion
WritePrivateProfileStructW
GetPrivateProfileStructW
GlobalAlloc
GlobalLock
GlobalUnlock
GetCurrentThread
LocalAlloc
OutputDebugStringA
CreateFileW
ReadFile
LoadLibraryA
GetModuleHandleA
InterlockedExchange
QueryPerformanceCounter
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
HeapAlloc
GetProcessHeap
HeapFree
HeapSize
InterlockedCompareExchange
GetVersionExA
DeviceIoControl
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
GetDiskFreeSpaceA
GlobalMemoryStatus
GetLocalTime
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsProcessorFeaturePresent
lstrlenA
CompareStringW
lstrcpynW
lstrlenW
FreeLibrary
GetProcAddress
DisableThreadLibraryCalls
RaiseException
WriteFile
SetFilePointer
DeleteFileW
GetTempPathW
LoadResource
FindResourceExW
GetTimeFormatW
CreateEventA
LoadLibraryW

user32

MessageBoxIndirectW
wsprintfW
IsWindow
SendMessageW
CharNextW
SetWindowPos
CloseClipboard
SetClipboardData
EmptyClipboard
OpenClipboard
GetDlgItemInt
EnableWindow
SendDlgItemMessageW
wsprintfA
DestroyWindow
SetTimer
KillTimer
GetClassInfoW
CreateWindowExW
RegisterClassW
MessageBoxW
DialogBoxParamW
SetPropW
SetFocus
GetWindowLongW
SetWindowLongW
DefWindowProcW
SetRect
GetWindowRect
ShowWindow
CopyRect
SendMessageA
DispatchMessageW
PeekMessageW
GetSystemMetrics
EndPaint
FillRect
ScreenToClient
BeginPaint
EnumDisplaySettingsW
ClientToScreen
InvalidateRect
GetClientRect
SetWindowTextW
EndDialog
SetDlgItemTextW
GetDlgItemTextW
IsDlgButtonChecked
GetDlgItem
SetDlgItemInt
CheckDlgButton
UpdateWindow
PostMessageA
LoadBitmapW
GetSysColorBrush
LoadStringW
BringWindowToTop
SetWindowLongA
InflateRect
TranslateMessage
IsDialogMessageA
RegisterWindowMessageA
MessageBeep
SetForegroundWindow
DialogBoxIndirectParamW
DrawTextW
SendNotifyMessageA
SendDlgItemMessageA
CreateDialogIndirectParamW
PostQuitMessage
GetMessageW
GetParent
PostMessageW
CharPrevW

gdi32

Rectangle
CreateBrushIndirect
GetStockObject
SetPixel
GetPixel
StretchBlt
BitBlt
DeleteObject
CreateSolidBrush
CreateCompatibleDC
SelectObject
SetBkMode
CreateDIBSection
DeleteDC
SetTextColor
RectVisible
CreatePen

advapi32

RegCreateKeyExA
RegSetValueExA
RegQueryValueExA
RegCloseKey

ole32

CoUninitialize
CoTaskMemAlloc
CoInitializeEx
CoTaskMemFree
CoCreateInstance

oleaut32

SafeArrayDestroy
SafeArrayUnaccessData
SafeArrayAccessData
SafeArrayCreateVector
SysFreeString
VariantInit
SysAllocString

msvcr90

?_type_info_dtor_internal_method@type_info@@QAEXXZ
_except_handler4_common
__CppXcptFilter
_adjust_fdiv
_amsg_exit
_initterm_e
_initterm
_encoded_null
_malloc_crt
?terminate@@YAXXZ
_decode_pointer
_onexit
_lock
_encode_pointer
__dllonexit
_unlock
??0exception@std@@QAE@XZ
__CxxFrameHandler3
_CxxThrowException
_except_handler3
_CIpow
_strnicmp
toupper
_i64tow_s
log
sqrt
_wtof_l
pow
fabs
wcschr
wcstoul
strlen
_wcstoui64
_stricmp
log10
realloc
swscanf
_itow
memcpy
_vsnprintf
calloc
_wcsnicmp
_wtoi
_wcsicmp
malloc
_vsnwprintf
_wcsdup
wcsstr
memmove
free
wcslen
_vswprintf_c_l
memmove_s
??0exception@std@@QAE@ABQBD@Z
__clean_type_info_names_internal
??_V@YAXPAX@Z
memset
_purecall
??2@YAPAXI@Z
??3@YAXPAX@Z
memcpy_s
??0exception@std@@QAE@ABV01@@Z
?what@exception@std@@UBEPBDXZ
??1exception@std@@UAE@XZ
memcmp

Exports

Exports

GetDS
GetWave
burn_doBurn
winampAddUnifiedFileInfoPane
winampClearExtendedFileInfoW
winampGetExtendedFileInfoW
winampGetExtendedRead_close
winampGetExtendedRead_getData
winampGetExtendedRead_openW
winampGetInModule2
winampSetExtendedFileInfoW
winampUseUnifiedFileInfoDlg
winampWriteExtendedFileInfo

Sections

.text
Size: 226KB - Virtual size: 225KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 38KB - Virtual size: 37KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 10KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 21KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Plugins/lame_enc.dll
.dll windows:5 windows x86 arch:x86

db1263e4d1403a0175a12caa5a870cb3

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetPrivateProfileIntA
GetModuleFileNameA
OutputDebugStringA
FormatMessageA
GetThreadLocale
LoadLibraryA
HeapAlloc
GetLastError
HeapFree
GetCurrentThreadId
GetCommandLineA
EnterCriticalSection
LeaveCriticalSection
GetModuleHandleW
Sleep
GetProcAddress
ExitProcess
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RtlUnwind
SetFilePointer
MultiByteToWideChar
ReadFile
DeleteCriticalSection
VirtualFree
VirtualAlloc
HeapReAlloc
HeapCreate
HeapDestroy
WriteFile
GetStdHandle
WideCharToMultiByte
GetConsoleCP
GetConsoleMode
CloseHandle
SetHandleCount
GetFileType
GetStartupInfoA
GetModuleHandleA
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
InterlockedDecrement
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
FlushFileBuffers
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
LCMapStringA
LCMapStringW
InitializeCriticalSectionAndSpinCount
CreateFileA
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
HeapSize
SetEndOfFile
GetProcessHeap

user32

MessageBoxA

Exports

Exports

beCloseStream
beDeinitStream
beEncodeChunk
beEncodeChunkFloatS16NI
beFlushNoGap
beInitStream
beVersion
beWriteInfoTag
beWriteVBRHeader
lame_close
lame_encode_buffer_interleaved
lame_encode_flush
lame_get_in_samplerate
lame_get_num_channels
lame_get_num_samples
lame_get_out_samplerate
lame_get_scale
lame_get_scale_left
lame_get_scale_right
lame_init
lame_init_params
lame_mp3_tags_fid
lame_set_in_samplerate
lame_set_num_channels
lame_set_num_samples
lame_set_out_samplerate
lame_set_scale
lame_set_scale_left
lame_set_scale_right

Sections

.text
Size: 311KB - Virtual size: 311KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 140KB - Virtual size: 139KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 11KB - Virtual size: 203KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.trace
Size: 17KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 436B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 18KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Plugins/ml_autotag.dll
.dll windows:5 windows x86 arch:x86

ca679418b1ff7bdc39a241b3ebb4b0a3

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

f:\sandbox\20131120_103959\ml_autotag\Release\ml_autotag.pdb

Imports

kernel32

lstrlenW
MultiByteToWideChar
InterlockedExchange
Sleep
LocalFree
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
DisableThreadLibraryCalls
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
InterlockedCompareExchange

user32

EndDialog
SendDlgItemMessageW
ShowWindow
SetDlgItemTextW
EnableWindow
SetWindowLongW
SetWindowPos
MessageBoxW
GetDlgItem
GetParent
KillTimer
SetTimer
SendMessageW
IsWindow
GetWindowLongW

gdi32

DeleteObject

ole32

CoCreateInstance
OleRun

oleaut32

SysFreeString

msvcr90

memset
_except_handler4_common
memcpy
_CxxThrowException
_onexit
_lock
__dllonexit
_unlock
__clean_type_info_names_internal
_vswprintf_c_l
??3@YAXPAX@Z
??2@YAPAXI@Z
_wcsicmp
free
malloc
__CxxFrameHandler3
_wcsdup
_itow
_encode_pointer
_malloc_crt
_encoded_null
_decode_pointer
_initterm
_initterm_e
_amsg_exit
_adjust_fdiv
__CppXcptFilter
_crt_debugger_hook
?terminate@@YAXXZ
?_type_info_dtor_internal_method@type_info@@QAEXXZ

Exports

Exports

winampGetMediaLibraryPlugin
winampUninstallPlugin

Sections

.text
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Plugins/ml_bookmarks.dll
.dll windows:5 windows x86 arch:x86

c2a2fb9b744284daa5ff7cc827e851e3

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

f:\sandbox\20131120_103959\ml_bookmarks\Release\ml_bookmarks.pdb

Imports

shlwapi

PathCombineW
PathIsURLW

kernel32

WideCharToMultiByte
Sleep
lstrcpynW
lstrlenW
GlobalFree
GetShortPathNameW
WritePrivateProfileStringW
GetPrivateProfileIntW
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
DisableThreadLibraryCalls
InterlockedCompareExchange
InterlockedExchange
MultiByteToWideChar
GetModuleHandleA
CreateDirectoryW
lstrlenA

user32

CharNextW
MapVirtualKeyA
GetKeyNameTextW
ClientToScreen
SetCursor
GetUpdateRgn
ScreenToClient
GetWindowRect
GetMenuItemID
SetCapture
KillTimer
GetSubMenu
DeleteMenu
InvalidateRgn
WindowFromPoint
CopyAcceleratorTableA
GetClientRect
GetMenuItemInfoW
SetRectEmpty
PtInRect
GetUpdateRect
GetCapture
GetAsyncKeyState
SetRect
SetWindowLongA
InvalidateRect
GetWindowLongA
GetWindowTextW
PeekMessageA
EnableMenuItem
GetDlgItem
EndDialog
RedrawWindow
CreatePopupMenu
GetMenuItemCount
IsWindow
PostMessageA
DeferWindowPos
ReleaseCapture
BeginDeferWindowPos
IsWindowVisible
GetDlgItemTextW
SetDlgItemTextW
ValidateRgn
MapWindowPoints
EnableWindow
DestroyMenu
EndDeferWindowPos
SetMenuItemInfoW
ValidateRect
SendMessageA
SetWindowLongW
DefWindowProcA
SendMessageW
LoadCursorA
CallWindowProcW
SetTimer

gdi32

CombineRgn
DeleteObject
CreateRectRgn
OffsetRgn

comdlg32

GetOpenFileNameW

shell32

DragQueryFileW

msvcr90

_except_handler4_common
?terminate@@YAXXZ
__CppXcptFilter
_adjust_fdiv
?_type_info_dtor_internal_method@type_info@@QAEXXZ
_initterm_e
_initterm
_encoded_null
_malloc_crt
_decode_pointer
_onexit
_lock
_encode_pointer
__dllonexit
_unlock
tolower
_wcsdup
_strdup
realloc
memset
fgets
wcslen
strlen
feof
memcpy
??2@YAPAXI@Z
??3@YAXPAX@Z
_vsnwprintf
malloc
free
__clean_type_info_names_internal
fclose
fprintf
_wfopen
_crt_debugger_hook
_amsg_exit
__CxxFrameHandler3

Exports

Exports

winampGetMediaLibraryPlugin

Sections

.text
Size: 18KB - Virtual size: 18KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Plugins/ml_devices.dll
.dll windows:5 windows x86 arch:x86

936b4802c08839de03e5a63e4fd98de9

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

f:\sandbox\20131120_103959\ml_devices\Release\ml_devices.pdb

Imports

shlwapi

PathFindNextComponentW
ColorRGBToHLS
ColorHLSToRGB
StrToIntExA
PathAppendW
PathCombineW

kernel32

GetPrivateProfileIntA
WritePrivateProfileStringA
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
QueryPerformanceCounter
DisableThreadLibraryCalls
InterlockedCompareExchange
Sleep
InterlockedExchange
CompareStringA
InterlockedIncrement
InterlockedDecrement
GetCurrentThreadId
GlobalAddAtomW
GetModuleHandleW
GetLastError
SetLastError
GetVersionExW
MulDiv
CompareStringW
lstrcmpiA
MultiByteToWideChar
lstrlenW
GetTickCount
GlobalDeleteAtom
WideCharToMultiByte
lstrcpynW
SetErrorMode
CreateDirectoryW
GetModuleFileNameW
GetPrivateProfileStringA
lstrlenA

user32

RegisterWindowMessageW
TrackMouseEvent
IsWindow
ScrollWindowEx
SetScrollInfo
DrawTextExW
GetSysColor
GetSysColorBrush
GetSubMenu
EnableMenuItem
SetMenuDefaultItem
EndPaint
BeginPaint
GetWindowTextW
GetDlgItem
BeginDeferWindowPos
EnableWindow
EndDeferWindowPos
GetMenuItemInfoW
InsertMenuItemW
GetMenuItemCount
FillRect
InflateRect
CreatePopupMenu
MessageBoxW
DestroyMenu
EqualRect
SetTimer
GetWindowDC
IsChild
SetCapture
KillTimer
GetFocus
GetParent
SetFocus
GetClassLongW
PtInRect
GetDoubleClickTime
SendMessageW
ReleaseDC
GetCapture
GetAsyncKeyState
GetScrollInfo
InvalidateRect
GetClassNameW
RedrawWindow
GetCursorPos
ShowWindow
ReleaseCapture
UpdateWindow
EndMenu
IsRectEmpty
IntersectRect
CopyRect
SystemParametersInfoW
ReplyMessage
GetClassInfoExW
RegisterClassExW
PeekMessageW
CreateWindowExW
DestroyWindow
SetCursor
RemovePropW
GetWindowRect
LoadCursorW
CallNextHookEx
GetClientRect
SetRectEmpty
SetPropW
OffsetRect
GetWindowLongW
GetAncestor
SetWindowLongW
SetWindowPos
SetWindowsHookExW
UnhookWindowsHookEx
MapWindowPoints
GetPropW
CallWindowProcW
DefWindowProcW
PostMessageW
DrawTextW
SetRect
GetDCEx
DeferWindowPos

gdi32

GetTextColor
GetObjectW
GetBkColor
ExtTextOutW
CreateCompatibleBitmap
CreateCompatibleDC
SelectObject
DeleteDC
GetBkMode
SetTextColor
SetBkColor
BitBlt
CreateSolidBrush
FillRgn
CombineRgn
CreatePolyPolygonRgn
GetTextMetricsW
CreateRectRgn
SetRectRgn
GetTextExtentPointA
GetDeviceCaps
CreateFontIndirectW
SetStretchBltMode
GdiAlphaBlend
CreateDIBSection
SetViewportOrgEx
GetTextExtentPoint32W
CreateRectRgnIndirect
OffsetViewportOrgEx
SetBkMode
DeleteObject
GetCurrentObject

ole32

CoCreateInstance

msvcr90

malloc
_vsnprintf
??2@YAPAXI@Z
??3@YAXPAX@Z
free
memmove
memcpy
qsort
bsearch
_vsnwprintf
_unlock
__dllonexit
_encode_pointer
_lock
_onexit
_decode_pointer
_malloc_crt
_encoded_null
_initterm
_initterm_e
_amsg_exit
_adjust_fdiv
__CppXcptFilter
floor
?_type_info_dtor_internal_method@type_info@@QAEXXZ
_except_handler4_common
__clean_type_info_names_internal
_crt_debugger_hook
_wcsnicmp
ceil
memset
?terminate@@YAXXZ
__CxxFrameHandler3

Exports

Exports

winampGetMediaLibraryPlugin

Sections

.text
Size: 96KB - Virtual size: 96KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 107KB - Virtual size: 106KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Plugins/ml_disc.dll
.dll windows:5 windows x86 arch:x86

4647b2d4f9d2432d2af721e65f0901ec

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

f:\sandbox\20131120_103959\ml_disc\Release\ml_disc.pdb

Imports

shlwapi

StrToIntW
StrChrW
PathFindExtensionW
PathIsSameRootA
PathIsUNCA
PathAddBackslashA
PathCommonPrefixA
PathRemoveExtensionW
PathRemoveBlanksW
StrFormatByteSizeW
PathFindFileNameW
PathStripToRootW
PathFindNextComponentW
PathGetDriveNumberW
PathQuoteSpacesW
PathUnquoteSpacesW
SHStrDupW
PathAddBackslashW
PathIsURLW
PathCombineW
PathCombineA
PathRemoveFileSpecA

comctl32

ImageList_Draw

winmm

mciSendCommandW

kernel32

lstrcmpiA
lstrlenA
GlobalFree
lstrcmpiW
lstrlenW
FindFirstFileA
FindClose
lstrcpynW
lstrcmpW
FindFirstFileW
FindNextFileA
FindNextFileW
Sleep
GlobalAlloc
GetCurrentDirectoryW
GetShortPathNameW
CreateDirectoryA
CreateDirectoryW
QueueUserAPC
GetTempPathW
GetTempFileNameW
MulDiv
CopyFileW
DeleteFileW
GetPrivateProfileIntW
WritePrivateProfileStringW
CompareStringW
GetPrivateProfileStringW
EnterCriticalSection
LeaveCriticalSection
lstrcmpA
DeleteCriticalSection
InterlockedIncrement
InterlockedDecrement
CloseHandle
CreateFileW
GetFileSizeEx
SetLastError
GetDiskFreeSpaceExW
GetFileAttributesW
SetFileAttributesW
CopyFileExW
MoveFileExW
CreateThread
FormatMessageW
LocalFree
GetFileInformationByHandle
FileTimeToSystemTime
GetDateFormatW
GetTimeFormatW
GetModuleHandleW
WaitForSingleObject
TerminateThread
GetCurrentProcess
DuplicateHandle
GetCurrentThread
SetErrorMode
LoadLibraryW
GetProcAddress
FreeLibrary
QueryDosDeviceW
GetDriveTypeA
SetThreadPriority
GetCurrentThreadId
SleepEx
DeviceIoControl
GetVolumeInformationW
GetLogicalDrives
QueryPerformanceCounter
QueryPerformanceFrequency
lstrcpyA
GetVolumeInformationA
WritePrivateProfileStringA
WaitForSingleObjectEx
CreateEventW
SetEvent
lstrcpyW
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
DisableThreadLibraryCalls
InterlockedCompareExchange
RaiseException
LoadLibraryA
InterlockedExchange
LocalAlloc
GetTempFileNameA
lstrcpynA
GetTempPathA
GetTickCount
WideCharToMultiByte
GetLastError
MultiByteToWideChar
IsDebuggerPresent
InitializeCriticalSection

user32

SendMessageA
SetDlgItemInt
GetDlgCtrlID
SetDlgItemTextA
IsWindowEnabled
InsertMenuItemW
DeleteMenu
IsWindowVisible
CharPrevA
GetClassNameW
GetWindowTextLengthW
SetForegroundWindow
MessageBeep
FlashWindowEx
LoadIconW
wsprintfA
CopyAcceleratorTableW
MapVirtualKeyW
GetKeyNameTextW
RegisterWindowMessageW
GetCursorPos
MapWindowPoints
SetMenuItemInfoW
CopyRect
CallWindowProcW
EndPaint
ValidateRect
IntersectRect
BeginPaint
GetWindowTextW
GetSystemMetrics
CharPrevW
CharLowerBuffW
CharUpperBuffW
IsCharUpperW
IsCharLowerW
DefWindowProcW
PostQuitMessage
MsgWaitForMultipleObjectsEx
PostThreadMessageW
UnregisterClassW
CreateWindowExW
SendMessageW
PostMessageW
MessageBoxW
GetDlgItemTextW
DrawTextW
ShowWindow
RegisterClassW
GetClassInfoW
DrawFocusRect
GetFocus
FillRect
GetDC
OffsetRect
SetRect
GetSysColor
RedrawWindow
GetAncestor
GetDCEx
RemovePropW
SetWindowLongW
InvalidateRect
InflateRect
GetClientRect
SetWindowPos
EndDeferWindowPos
DeferWindowPos
GetMenuItemCount
BeginDeferWindowPos
GetMenuItemInfoW
CharLowerW
CharUpperW
SendNotifyMessageW
RegisterWindowMessageA
SetPropW
CharNextA
DispatchMessageW
TranslateMessage
GetMessageW
DestroyWindow
IsWindow
ReleaseCapture
GetCapture
ScreenToClient
SetCapture
GetAsyncKeyState
PtInRect
SetRectEmpty
GetWindowLongW
ClientToScreen
PeekMessageW
CheckMenuItem
GetWindowRect
GetSubMenu
SetTimer
KillTimer
EnumChildWindows
EnableWindow
LoadImageW
GetParent
GetWindowThreadProcessId
GetPropW
FindWindowExW
CharNextW
UpdateWindow
SetDlgItemTextW
EndDialog
IsDlgButtonChecked
CheckDlgButton
SendDlgItemMessageW
SetWindowTextW
GetDlgItem
ReleaseDC

gdi32

GetObjectW
CreateFontIndirectW
CreateCompatibleBitmap
CreateCompatibleDC
BitBlt
CreateSolidBrush
DeleteDC
SetBkColor
CreateRectRgn
CombineRgn
GetTextMetricsW
StretchBlt
SetBkMode
CreateBitmap
GetTextExtentPoint32W
GetDeviceCaps
CreateFontW
GetTextColor
GetStockObject
DeleteObject
GetBkColor
LineTo
MoveToEx
SetTextColor
CreatePen
SelectClipRgn
ExcludeClipRect
ExtTextOutW
SelectObject

comdlg32

GetOpenFileNameW

advapi32

RegCloseKey
RegOpenKeyW
RegQueryValueExW

shell32

DragQueryFileA
SHBrowseForFolderW
SHGetFolderPathW
SHGetMalloc
DragFinish
SHGetPathFromIDListW
ShellExecuteW

ole32

CoTaskMemFree
CoCreateInstance
CoTaskMemAlloc
CoInitializeEx
CoUninitialize

oleaut32

SysFreeString

msvcr90

_initterm_e
_initterm
_encoded_null
_malloc_crt
_decode_pointer
_onexit
_lock
_encode_pointer
__dllonexit
_unlock
_aligned_malloc
strchr
calloc
_strdup
tolower
strncpy
wcschr
memmove
realloc
_wfopen
_purecall
_wcsnicmp
_wcsicmp
_strnicmp
_stricmp
_wcsdup
wcsstr
memcpy
_wtoi
atoi
strstr
fclose
fprintf
fopen
memcmp
toupper
??2@YAPAXI@Z
_unlink
memset
_vsnwprintf
_vsnprintf
free
malloc
wcslen
strlen
wcsncpy
??3@YAXPAX@Z
_crt_debugger_hook
__clean_type_info_names_internal
?_type_info_dtor_internal_method@type_info@@QAEXXZ
?terminate@@YAXXZ
_except_handler4_common
__CppXcptFilter
_adjust_fdiv
_amsg_exit
__CxxFrameHandler3

Exports

Exports

winampGetMediaLibraryPlugin

Sections

.text
Size: 116KB - Virtual size: 115KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 17KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 49KB - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Plugins/ml_downloads.dll
.dll windows:5 windows x86 arch:x86

cbf987de8e2aec9149634a42e21ff821

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

f:\sandbox\20131120_103959\ml_downloads\Release\ml_downloads.pdb

Imports

shlwapi

PathFileExistsW
PathCombineW

kernel32

LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
lstrcpynW
MulDiv
InterlockedIncrement
InterlockedDecrement
MultiByteToWideChar
lstrlenW
GlobalDeleteAtom
GetModuleHandleW
GetCurrentThread
CompareStringW
GetPrivateProfileIntW
TlsAlloc
GlobalAddAtomW
InitializeCriticalSection
GetDateFormatW
DeleteFileW
FindFirstFileW
FileTimeToSystemTime
FindClose
ReadFile
CreateFileW
CloseHandle
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
DisableThreadLibraryCalls
InterlockedCompareExchange
Sleep
InterlockedExchange
SetUnhandledExceptionFilter
IsDebuggerPresent
GetLastError

user32

PostMessageW
EndDeferWindowPos
MapWindowPoints
BeginDeferWindowPos
DeferWindowPos
RedrawWindow
SetWindowLongW
GetDlgItem
GetWindowLongW
SetRectEmpty
GetWindowRect
GetUpdateRgn
ClientToScreen
GetMenuItemID
SetCapture
GetSubMenu
DeleteMenu
InvalidateRgn
GetClientRect
PtInRect
GetUpdateRect
GetCapture
GetAsyncKeyState
SetRect
GetWindowTextW
EnableMenuItem
ReleaseCapture
IsWindowVisible
ValidateRgn
EnableWindow
DestroyMenu
ValidateRect
SetDlgItemTextW
SetWindowTextW
CopyAcceleratorTableW
MapVirtualKeyW
CharNextW
GetMenuItemInfoW
GetMenuItemCount
GetKeyNameTextW
SetMenuItemInfoW
SetTimer
KillTimer
LoadCursorW
MessageBoxW
InvalidateRect
IsWindow
SendMessageW

gdi32

DeleteObject
OffsetRgn
CombineRgn
CreateRectRgn

shell32

SHGetPathFromIDListW
SHGetMalloc
SHGetSpecialFolderLocation

msvcr90

_except_handler4_common
__CppXcptFilter
_adjust_fdiv
_amsg_exit
_initterm_e
_initterm
_encoded_null
_malloc_crt
?terminate@@YAXXZ
_decode_pointer
_onexit
_lock
_encode_pointer
__dllonexit
_unlock
fclose
fwrite
_itow
fputws
_wfopen
fputwc
fwprintf
wcslen
wcsncpy
memmove_s
_localtime64
_wtoi
_mktime64
?_type_info_dtor_internal_method@type_info@@QAEXXZ
__clean_type_info_names_internal
_crt_debugger_hook
__CxxFrameHandler3
??_U@YAPAXI@Z
_wcsdup
??3@YAXPAX@Z
??_V@YAXPAX@Z
free
realloc
_wcsicmp
memcpy
tolower
memset
??2@YAPAXI@Z
_time64
_purecall
malloc
_vsnwprintf

Exports

Exports

winampGetMediaLibraryPlugin

Sections

.text
Size: 30KB - Virtual size: 30KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Plugins/ml_history.dll
.dll windows:5 windows x86 arch:x86

d189271003672c7e828a5c10e8c92a03

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

f:\sandbox\20131120_103959\ml_history\Release\ml_history.pdb

Imports

shlwapi

PathIsURLW
PathCombineW

kernel32

LocalAlloc
GetProcAddress
FreeLibrary
InterlockedExchange
CreateDirectoryW
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
lstrlenW
lstrcpynW
MultiByteToWideChar
WideCharToMultiByte
GetShortPathNameW
GetDateFormatW
GetTimeFormatW
FindFirstFileW
FindClose
WaitForSingleObject
CloseHandle
CreateThread
Sleep
DeleteFileW
GetPrivateProfileIntW
WritePrivateProfileStringW
WritePrivateProfileStringA
GetPrivateProfileStringA
InterlockedIncrement
InterlockedDecrement
GetLastError
LoadLibraryA
RaiseException
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
DisableThreadLibraryCalls
InterlockedCompareExchange

user32

CopyAcceleratorTableA
MapVirtualKeyA
GetKeyNameTextW
SetWindowTextA
MessageBoxW
SetCapture
SetWindowLongA
SendDlgItemMessageA
SetDlgItemTextA
ReleaseCapture
GetCapture
IsWindow
PeekMessageA
EnableMenuItem
PtInRect
SetRectEmpty
ClientToScreen
DeleteMenu
SetWindowPos
ValidateRgn
RedrawWindow
EndDeferWindowPos
DeferWindowPos
BeginDeferWindowPos
InvalidateRgn
GetUpdateRgn
GetUpdateRect
ValidateRect
IsWindowVisible
GetWindowLongA
GetWindowRect
GetDlgItemTextW
InvalidateRect
SetRect
GetClientRect
SetMenuItemInfoW
GetMenuItemInfoW
GetMenuItemID
GetMenuItemCount
GetWindowTextW
GetWindowTextLengthA
GetParent
SetDlgItemTextW
SetFocus
CharPrevW
CharNextW
GetDlgItemInt
SetDlgItemInt
SendDlgItemMessageW
CheckDlgButton
GetDlgItem
EnableWindow
IsDlgButtonChecked
CallWindowProcW
GetAsyncKeyState
SetWindowLongW
DestroyWindow
SetTimer
KillTimer
GetSubMenu
SendMessageA
PostMessageA
SendMessageW
MapWindowPoints
DestroyMenu
UpdateWindow

gdi32

CreateRectRgn
CombineRgn
DeleteObject
OffsetRgn

oleaut32

VariantInit
SysAllocString
SystemTimeToVariantTime

msvcr90

memset
memcpy
_except_handler3
_wcsicmp
_wtoi
free
_wcsnicmp
wcsstr
_crt_debugger_hook
__clean_type_info_names_internal
?_type_info_dtor_internal_method@type_info@@QAEXXZ
?terminate@@YAXXZ
_except_handler4_common
__CppXcptFilter
_adjust_fdiv
_amsg_exit
_initterm_e
_initterm
_encoded_null
_malloc_crt
_decode_pointer
_onexit
_lock
_encode_pointer
__dllonexit
_unlock
tolower
_purecall
wcsncpy
_time64
realloc
_localtime64
_vsnwprintf
malloc
_strdup
??2@YAPAXI@Z
_wcsdup
??3@YAXPAX@Z
__CxxFrameHandler3

Exports

Exports

winampGetMediaLibraryPlugin

Sections

.text
Size: 35KB - Virtual size: 35KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Plugins/ml_impex.dll
.dll windows:5 windows x86 arch:x86

dd91e06f4eddf96bda99913c7d6698fa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

f:\sandbox\20131120_103959\ml_impex\Release\ml_impex.pdb

Imports

shlwapi

PathAppendW
PathCombineW

kernel32

WaitForSingleObject
GetModuleHandleW
GlobalAlloc
WideCharToMultiByte
MultiByteToWideChar
GetCurrentDirectoryW
SetCurrentDirectoryW
CloseHandle
CreateThread
GetFileAttributesW
ReadFile
CreateFileW
lstrcpynW
GetPrivateProfileIntW
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
SetUnhandledExceptionFilter
DisableThreadLibraryCalls
InterlockedCompareExchange
InterlockedExchange
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
Sleep
QueryPerformanceFrequency
IsDebuggerPresent
GetCurrentProcessId
OutputDebugStringW
CompareStringW
GetStringTypeExW

user32

PostMessageW
KillTimer
GetSubMenu
SetForegroundWindow
GetParent
GetMenuItemInfoW
InsertMenuItemW
GetWindowLongW
GetDlgItem
SetWindowLongW
EndDialog
SendDlgItemMessageW
CheckDlgButton
LoadImageW
IsWindow
GetSystemMetrics
SetDlgItemTextW
SendMessageW
SetWindowTextW
CallWindowProcW
SetTimer
CharNextW
IsCharAlphaW
ShowWindow

comdlg32

GetOpenFileNameW
GetSaveFileNameW

shell32

SHGetSpecialFolderPathW

msvcr90

malloc
wcslen
memset
wcsftime
_vsnwprintf
_wtoi64
_purecall
??3@YAXPAX@Z
_i64tow
??2@YAPAXI@Z
_wcsnicmp
_wcsdup
memcpy
_wcstoui64
free
strlen
strncpy
realloc
_aligned_malloc
_wtof_l
_mkgmtime64
_wtoi
_create_locale
wcsncpy
wcstok
__CxxFrameHandler3
vsprintf_s
iswxdigit
_wfopen
fflush
fclose
fwrite
memmove
_unlock
__dllonexit
_encode_pointer
_lock
_onexit
_decode_pointer
_malloc_crt
_encoded_null
_initterm
_initterm_e
_amsg_exit
_adjust_fdiv
__CppXcptFilter
_except_handler4_common
?terminate@@YAXXZ
?_type_info_dtor_internal_method@type_info@@QAEXXZ
__clean_type_info_names_internal
_crt_debugger_hook
_gmtime64
_wcsicmp

Exports

Exports

winampGetMediaLibraryPlugin

Sections

.text
Size: 32KB - Virtual size: 31KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Plugins/ml_local.dll
.dll windows:5 windows x86 arch:x86

233518e046165effcabd34a98de54522

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

f:\sandbox\20131120_103959\ml_local\Release\ml_local.pdb

Imports

comctl32

ImageList_Create
ImageList_GetIconSize

shlwapi

SHAutoComplete
PathAppendW
PathFileExistsW
wnsprintfW
PathCombineW
PathRemoveExtensionW
PathFindFileNameW
PathFindExtensionW
PathRemoveFileSpecW
StrCmpNIW
StrStrW
PathIsURLW
StrChrW

kernel32

GetFileTime
CloseHandle
EnterCriticalSection
LeaveCriticalSection
WaitForMultipleObjectsEx
CompareStringW
FindFirstFileW
lstrcmpiW
FindNextFileW
FindClose
GetFileAttributesW
ResetEvent
SetEvent
GlobalFree
CreateEventA
CreateThread
SignalObjectAndWait
QueueUserAPC
GetModuleHandleW
MultiByteToWideChar
lstrcpynW
WideCharToMultiByte
GetShortPathNameW
GetPrivateProfileIntW
WritePrivateProfileStringW
WritePrivateProfileStringA
GetPrivateProfileStringW
GetPrivateProfileStringA
lstrcpynA
GetTickCount
GetSystemTime
lstrcpyW
GetTempPathW
GetTempFileNameW
SetFilePointer
ReadFile
DeleteFileW
InitializeCriticalSection
DeleteCriticalSection
MoveFileW
CreateDirectoryW
GetModuleHandleA
MulDiv
WaitForSingleObject
lstrlenW
GlobalAddAtomW
GlobalDeleteAtom
GetDateFormatW
GetTimeFormatW
QueryPerformanceCounter
Sleep
GetProcAddress
QueryPerformanceFrequency
lstrcmpW
lstrcmpiA
LoadLibraryW
FreeLibrary
InitializeCriticalSectionAndSpinCount
CreateSemaphoreA
ReleaseSemaphore
CreateFileW
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
DisableThreadLibraryCalls
InterlockedCompareExchange
RaiseException
LoadLibraryA
IsDebuggerPresent
InterlockedExchange
LocalAlloc
GetLastError
GetLongPathNameW
GetLongPathNameA
GetFileSize
GetFileAttributesExW

user32

ReleaseDC
RemoveMenu
TrackPopupMenu
GetClassNameA
EnumChildWindows
FindWindowExW
FrameRect
GetSysColor
ValidateRect
IsWindowVisible
SetRect
ReleaseCapture
SetCapture
CallWindowProcW
RemovePropW
DefWindowProcA
DefWindowProcW
GetPropW
SetPropW
IsWindowUnicode
GetWindowTextW
SetFocus
SetMenuItemInfoW
GetMenuItemInfoW
CharLowerW
CharPrevW
CallWindowProcA
SetActiveWindow
SetScrollPos
GetScrollInfo
ShowScrollBar
FillRect
GetFocus
CreateWindowExW
OffsetRect
InflateRect
DrawTextW
IntersectRect
CopyAcceleratorTableA
MapVirtualKeyA
GetKeyNameTextW
FindWindowW
DeleteMenu
DrawFocusRect
CopyRect
EnableMenuItem
DrawTextA
GetWindowLongW
CheckMenuItem
GetUpdateRect
SetRectEmpty
PeekMessageA
SetScrollInfo
GetWindow
RegisterWindowMessageW
SetWindowTextA
MapWindowPoints
GetAncestor
CheckRadioButton
LoadImageA
GetClientRect
LoadCursorA
InsertMenuItemW
GetSubMenu
SetWindowLongW
wsprintfA
DestroyWindow
LoadStringA
GetAsyncKeyState
CharNextW
SetMenuItemInfoA
SetMenuInfo
GetMenuItemInfoA
GetMenuItemCount
GetMenuInfo
TrackPopupMenuEx
GetCursorPos
AppendMenuW
CreatePopupMenu
SetDlgItemInt
SetDlgItemTextA
GetDlgItemInt
InvalidateRect
IsWindowEnabled
ShowWindow
SendMessageW
SendDlgItemMessageW
SystemParametersInfoA
GetMonitorInfoA
MonitorFromWindow
MonitorFromRect
PostMessageW
EnableWindow
CheckDlgButton
PtInRect
ScreenToClient
MessageBoxW
GetDlgItemTextA
GetDlgItemTextW
IsDlgButtonChecked
GetParent
GetDlgItem
wsprintfW
GetWindowRect
KillTimer
GetWindowLongA
SetWindowPos
SetTimer
SendDlgItemMessageA
EndDialog
SetWindowLongA
SetDlgItemTextW
PostMessageA
SetWindowTextW
IsWindow
SendMessageA
DestroyMenu
GetDlgCtrlID
ClientToScreen
GetCapture
UpdateWindow
CreateWindowExA
SetCursorPos
ValidateRgn
RedrawWindow
EndDeferWindowPos
DeferWindowPos
BeginDeferWindowPos
InvalidateRgn
GetUpdateRgn
GetDC
SetCursor

gdi32

OffsetRgn
CombineRgn
DeleteObject
GetObjectW
CreateCompatibleDC
CreateDIBSection
SelectObject
BitBlt
DeleteDC
SetTextColor
CreatePen
MoveToEx
LineTo
GetCharWidth32A
ExtTextOutW
SetBkColor
GetCurrentObject
GetObjectA
CreateFontIndirectA
CreateCompatibleBitmap
GetStockObject
GetTextMetricsA
CreateSolidBrush
IntersectClipRect
CreateRectRgn

shell32

SHGetPathFromIDListW
ShellExecuteA
DragQueryFileW
DragFinish
ShellExecuteW
SHGetDesktopFolder
SHBrowseForFolderW
SHGetSpecialFolderLocation
SHGetFileInfoW
SHFileOperationW

ole32

CoTaskMemFree
CoInitialize
CoCreateInstance
CoUninitialize

oleaut32

SafeArrayUnaccessData
SafeArrayCreateVector
SafeArrayAccessData
VariantInit

msvcr90

_itow
_wtof_l
rand
srand
towupper
_snprintf
_strnicmp
_snwprintf
qsort
_i64toa
_itoa
_aligned_malloc
_aligned_realloc
_aligned_free
_purecall
fclose
fwprintf
fwrite
_wfopen
fputwc
fputws
??_V@YAXPAX@Z
??_U@YAPAXI@Z
_wtoi64
strstr
strchr
_stricmp
_wcsnicmp
realloc
strncpy
wcschr
_localtime64
wcsncpy
atoi
_strdup
malloc
_vsnwprintf
??2@YAPAXI@Z
??3@YAXPAX@Z
free
_wcsdup
wcsstr
_time64
_wtoi
_wcsicmp
_vsnprintf
tolower
memmove
calloc
_unlock
__clean_type_info_names_internal
_crt_debugger_hook
__dllonexit
_encode_pointer
_lock
_decode_pointer
_malloc_crt
_encoded_null
_initterm
_initterm_e
_amsg_exit
_adjust_fdiv
__CppXcptFilter
_except_handler4_common
?terminate@@YAXXZ
_onexit
memset
__CxxFrameHandler3
memcpy
_except_handler3
?_type_info_dtor_internal_method@type_info@@QAEXXZ

Exports

Exports

winampGetMediaLibraryPlugin

Sections

.text
Size: 204KB - Virtual size: 204KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 36KB - Virtual size: 35KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 33KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 52KB - Virtual size: 51KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 22KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Plugins/ml_nowplaying.dll
.dll windows:5 windows x86 arch:x86

6d84c7f498a241179914938dfbfd35a8

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

f:\sandbox\20131120_103959\ml_nowplaying\Release\ml_nowplaying.pdb

Imports

shlwapi

PathCombineW

kernel32

GetModuleHandleW
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
lstrlenW
lstrlenA
WideCharToMultiByte
MultiByteToWideChar
GetPrivateProfileStringA
InterlockedIncrement
InterlockedDecrement
lstrcpynW
InterlockedExchange
CreateDirectoryW
CompareStringW
GetProcAddress
GetModuleFileNameW
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
DisableThreadLibraryCalls
InterlockedCompareExchange
Sleep

user32

GetClassNameW
ShowWindow
MapWindowPoints
GetPropW
GetSubMenu
DeleteMenu
SetMenuDefaultItem
SetPropW
GetMenuItemInfoW
InsertMenuItemW
EnableMenuItem
CreatePopupMenu
GetMenuItemCount
SendMessageW
GetWindowRect
RemovePropW
DestroyMenu

oleaut32

VariantInit

msvcr90

_vsnwprintf
_crt_debugger_hook
__clean_type_info_names_internal
_except_handler4_common
?_type_info_dtor_internal_method@type_info@@QAEXXZ
?terminate@@YAXXZ
__CppXcptFilter
_adjust_fdiv
_amsg_exit
_initterm_e
_initterm
_encoded_null
memset
__CxxFrameHandler3
??3@YAXPAX@Z
??2@YAPAXI@Z
memcpy
free
malloc
strcmp
_wcsicmp
memcmp
_wcsnicmp
_purecall
_unlock
__dllonexit
_encode_pointer
_lock
_onexit
_decode_pointer
_malloc_crt

Exports

Exports

winampGetMediaLibraryPlugin

Sections

.text
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Plugins/ml_online.dll
.dll windows:5 windows x86 arch:x86

ced20e741c248343308a35a3adc96ca4

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

f:\sandbox\20131120_103959\ml_online\Release\ml_online.pdb

Imports

shlwapi

PathIsURLW
PathIsRelativeW
UrlEscapeW
PathAppendW
PathRemoveFileSpecW
ColorAdjustLuma
StrToIntExW
PathCombineW
StrToIntExA

kernel32

DuplicateHandle
CloseHandle
CreateThread
LeaveCriticalSection
CompareStringW
EnterCriticalSection
GlobalDeleteAtom
GlobalAddAtomW
SetEvent
InitializeCriticalSection
GetLastError
DeleteCriticalSection
LoadLibraryExW
GetModuleFileNameW
ResetEvent
CreateEventW
GetDateFormatW
lstrlenA
FindResourceW
FindFirstFileW
CreateDirectoryW
WriteFile
ReadFile
CreateFileW
FindClose
FindNextFileW
DeleteFileW
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
DisableThreadLibraryCalls
GetCurrentThreadId
InterlockedExchange
InterlockedIncrement
InterlockedDecrement
GetPrivateProfileIntA
WideCharToMultiByte
MultiByteToWideChar
GetPrivateProfileStringA
WritePrivateProfileStringA
CompareStringA
lstrlenW
FreeLibrary
LoadLibraryW
GetVersionExW
InterlockedCompareExchange
GetProcAddress
GetCurrentProcess
GetCurrentThread
Sleep
QueueUserAPC

user32

wsprintfA
CheckDlgButton
IsDlgButtonChecked
GetDlgItemTextA
SetDlgItemTextA
GetClassNameW
SetTimer
KillTimer
SetMenuInfo
SetMenuDefaultItem
GetMenuInfo
GetWindowTextW
EndDialog
CharNextA
IsWindowEnabled
CharLowerBuffW
MessageBoxW
IsWindowVisible
GetWindowThreadProcessId
SendMessageW
PostMessageW
TranslateAcceleratorW
PostQuitMessage
TranslateMessage
IsDialogMessageW
PeekMessageW
RedrawWindow
MsgWaitForMultipleObjectsEx
DispatchMessageW
FillRect
SetCapture
GetSubMenu
GetFocus
TrackMouseEvent
PtInRect
GetCapture
IsWindowUnicode
DefWindowProcA
ReleaseCapture
CallWindowProcA
GetDlgCtrlID
DrawFrameControl
CallWindowProcW
DefWindowProcW
CopyRect
LoadImageW
DrawFocusRect
OffsetRect
TrackPopupMenuEx
SetRect
GetSysColor
GetSysColorBrush
UpdateWindow
DestroyMenu
RemovePropW
SetRectEmpty
SetPropW
GetAncestor
GetDCEx
ReleaseDC
GetDlgItem
CreateWindowExW
MapWindowPoints
GetPropW
GetClientRect
InvalidateRect
GetWindowLongW
SetWindowLongW
ShowWindow
SetWindowTextW
IsWindow
GetWindowRect
GetParent
SetWindowPos
CharNextW
SetMenuItemInfoW
GetMenuItemInfoW
InsertMenuItemW
EnableMenuItem
CreatePopupMenu
GetMenuItemCount
DestroyWindow

gdi32

CreateFontIndirectW
DeleteObject
SelectObject
GetObjectW
GetTextMetricsW
FillRgn
ExtTextOutW
GetCurrentObject
SetTextAlign
GetBkColor
CreateRectRgn
GetTextColor
BitBlt
DeleteDC
CreateDIBSection
CreateCompatibleDC
StretchDIBits
GetTextExtentPoint32W
SetTextColor
SetBkColor
SetRectRgn
CreateRectRgnIndirect
CombineRgn
PaintRgn

comdlg32

GetOpenFileNameW
CommDlgExtendedError

shell32

ShellExecuteW

ole32

CoInitialize

oleaut32

SafeArrayUnaccessData
SysAllocString
VariantInit
SysAllocStringLen
SysFreeString
VariantClear
SafeArrayCreateVector
SafeArrayAccessData

msvcr90

?terminate@@YAXXZ
atoi
strcmp
iswxdigit
_wcsnicmp
abs
qsort
_localtime64
_mktime64
_purecall
wcslen
wcstoul
_time64
realloc
strlen
_endthread
memmove
memcpy
_vsnwprintf
memset
_wcsdup
wcscmp
_strdup
_vsnprintf
malloc
free
memcmp
_unlock
__dllonexit
_encode_pointer
_lock
_onexit
_malloc_crt
_encoded_null
_initterm
_initterm_e
_amsg_exit
_adjust_fdiv
__CppXcptFilter
?_type_info_dtor_internal_method@type_info@@QAEXXZ
_except_handler4_common
__clean_type_info_names_internal
_crt_debugger_hook
_decode_pointer
__CxxFrameHandler3

Exports

Exports

RegisterSetup
winampGetMediaLibraryPlugin

Sections

.text
Size: 87KB - Virtual size: 86KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 18KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 19KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Plugins/ml_playlists.dll
.dll windows:5 windows x86 arch:x86

efaeb75c2b45215e84cb250997633637

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

f:\sandbox\20131120_103959\ml_playlists\Release\ml_playlists.pdb

Imports

shlwapi

PathFindFileNameW
PathIsFileSpecW
PathFileExistsW
PathCombineW
StrChrW
PathRemoveExtensionW
PathStripPathW
PathRemoveFileSpecW
PathFindExtensionW
PathIsDirectoryW
PathIsURLW

kernel32

CreateFileW
FreeLibrary
InterlockedExchange
GetLastError
LoadLibraryA
RaiseException
InterlockedCompareExchange
DisableThreadLibraryCalls
WideCharToMultiByte
GetShortPathNameW
GetPrivateProfileIntW
WritePrivateProfileStringW
WritePrivateProfileStringA
GetPrivateProfileStringW
lstrcpynW
GetCurrentDirectoryW
SetCurrentDirectoryW
MultiByteToWideChar
GlobalFree
GetPrivateProfileIntA
GlobalAlloc
lstrlenW
CreateDirectoryW
lstrcmpiW
GetModuleHandleW
GetTempPathW
GetTempFileNameW
LocalAlloc
SetFilePointer
ReadFile
CloseHandle
DeleteFileW
LoadLibraryW
GetProcAddress
CompareStringW
lstrlenA
Sleep
lstrcpyW
FindFirstFileW
FindNextFileW
FindClose
GetTickCount
lstrcmpW
GetProfileIntW
CopyFileW
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
QueryPerformanceCounter

user32

DefWindowProcW
InsertMenuW
CreateMenu
RemoveMenu
SetCursor
OffsetRect
WindowFromPoint
GetMenuItemID
RemovePropW
MoveWindow
CreateWindowExW
GetParent
CreatePopupMenu
UpdateWindow
ValidateRgn
RedrawWindow
EndDeferWindowPos
DeferWindowPos
BeginDeferWindowPos
GetUpdateRgn
GetUpdateRect
ValidateRect
IsWindowVisible
GetWindowTextW
SetRect
PtInRect
SetRectEmpty
GetWindowLongW
ReleaseCapture
ClientToScreen
GetCapture
SetCapture
DrawFocusRect
CopyRect
SetWindowLongW
CallWindowProcW
GetCursorPos
EnableWindow
GetClassNameW
ScreenToClient
GetWindowRect
GetClientRect
SetFocus
SetPropW
SendDlgItemMessageW
PeekMessageW
DestroyMenu
DeleteMenu
MapWindowPoints
EnableMenuItem
InvalidateRect
CharPrevW
GetDlgItemTextW
EndDialog
GetDlgItem
SetDlgItemTextW
SetTimer
KillTimer
GetAsyncKeyState
IsWindow
InsertMenuItemW
GetSubMenu
LoadCursorW
CopyAcceleratorTableW
SetMenuItemInfoW
GetMenuItemInfoW
GetMenuItemCount
MapVirtualKeyW
GetKeyNameTextW
CharNextW
PostMessageW
EnumChildWindows
SetWindowPos
ShowWindow
FindWindowExW
SetWindowTextW
IsDlgButtonChecked
CheckDlgButton
GetPropW
SendMessageW
MessageBoxW
InvalidateRgn

gdi32

DeleteObject
CombineRgn
OffsetRgn
CreateRectRgn

comdlg32

CommDlgExtendedError
GetSaveFileNameW
GetOpenFileNameW

shell32

SHGetMalloc
SHBrowseForFolderW
DragFinish
SHFileOperationW
DragQueryFileW
DragQueryPoint
SHGetPathFromIDListW
ShellExecuteW

oleaut32

SafeArrayCreateVector
SafeArrayUnaccessData
VariantInit
SafeArrayAccessData

msvcr90

_vsnprintf
wcscmp
_strdup
_wcsdup
free
memset
_vsnwprintf
__CxxFrameHandler3
_crt_debugger_hook
__clean_type_info_names_internal
_except_handler4_common
?_type_info_dtor_internal_method@type_info@@QAEXXZ
?terminate@@YAXXZ
__CppXcptFilter
_adjust_fdiv
_amsg_exit
_initterm_e
_initterm
_encoded_null
_malloc_crt
_decode_pointer
_onexit
_lock
_encode_pointer
__dllonexit
_unlock
fputc
fprintf
strchr
_wcsicmp
_stricmp
strlen
realloc
memmove_s
_wcsnicmp
memmove
memcpy
wcslen
_wtoi
fclose
fwprintf
_wfopen
fputwc
fputws
??_U@YAPAXI@Z
??_V@YAXPAX@Z
memcmp
wcsstr
_vswprintf_c_l
tolower
??3@YAXPAX@Z
??2@YAPAXI@Z
_purecall
malloc

Exports

Exports

winampGetMediaLibraryPlugin

Sections

.text
Size: 71KB - Virtual size: 71KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 15KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Plugins/ml_plg.dll
.dll windows:5 windows x86 arch:x86

b131b34a859ab883e3799b9b6e390c3e

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

f:\sandbox\20131120_103959\ml_plg\Release\ml_plg.pdb

Imports

shlwapi

PathAppendA
PathCombineA
PathAppendW
PathCombineW
PathFindFileNameW
StrFormatByteSizeW

kernel32

InterlockedExchange
InterlockedCompareExchange
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
LocalFree
DisableThreadLibraryCalls
QueryPerformanceCounter
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
IsDebuggerPresent
GetTempFileNameW
GetTickCount
lstrlenW
GetTempPathW
DeleteFileW
GetDateFormatW
GetTimeFormatW
GetPrivateProfileIntW
WritePrivateProfileStringA
CompareStringW
WideCharToMultiByte
MultiByteToWideChar
WaitForSingleObject
GetPrivateProfileIntA
WritePrivateProfileStringW
GetLastError
GetPrivateProfileStringA
CreateEventW
lstrcpynW
CreateDirectoryW
SetEvent
Sleep
DeleteFileA
TerminateProcess

user32

GetWindow
SendMessageW
SetDlgItemTextW
PtInRect
GetMonitorInfoA
MonitorFromWindow
MonitorFromRect
SendMessageA
DeleteMenu
InsertMenuItemW
RedrawWindow
IsDlgButtonChecked
SetDlgItemTextA
GetDlgItemTextA
ShowWindow
LoadImageW
SendDlgItemMessageW
SetPropW
SystemParametersInfoW
LoadCursorW
SetCursor
ScreenToClient
GetCursorPos
GetPropW
CallWindowProcW
GetAsyncKeyState
SetTimer
KillTimer
EnableWindow
CheckDlgButton
InvalidateRect
SetWindowLongW
GetWindowLongW
SetWindowPos
GetWindowRect
EndDialog
MessageBoxW
GetDlgItemTextW
GetDlgItem
PostMessageW

gdi32

CreateFontIndirectW

ole32

OleRun
CoCreateInstance

oleaut32

SysFreeString
SysAllocString
VariantInit
SafeArrayCreateVector
SafeArrayAccessData
SafeArrayUnaccessData

msvcr90

_vsnwprintf
_wcsicmp
??3@YAXPAX@Z
_vsnprintf
_wtoi
free
??2@YAPAXI@Z
_purecall
_itow
_wcsdup
_ltow
memmove_s
__CxxFrameHandler3
malloc
__clean_type_info_names_internal
?_type_info_dtor_internal_method@type_info@@QAEXXZ
?terminate@@YAXXZ
_crt_debugger_hook
_except_handler4_common
__CppXcptFilter
_adjust_fdiv
_amsg_exit
_initterm_e
_initterm
_encoded_null
_malloc_crt
_decode_pointer
_onexit
_lock
_encode_pointer
__dllonexit
_unlock
memset
_CxxThrowException
memmove
memcpy
_wcsnicmp
_itoa

Exports

Exports

winampGetMediaLibraryPlugin
winampUninstallPlugin

Sections

.text
Size: 35KB - Virtual size: 35KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 30KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Plugins/ml_pmp.dll
.dll windows:5 windows x86 arch:x86

c8ae66638d557e0e3a571e59e9667c24

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

f:\sandbox\20131120_103959\ml_pmp\Release\ml_pmp.pdb

Imports

shlwapi

PathCombineW
PathRemoveFileSpecW
PathStripPathW
PathFileExistsW
PathIsNetworkPathW
PathIsURLW
PathFindExtensionW
PathAppendW

comctl32

ImageList_GetIconSize
ImageList_Create

kernel32

GetStringTypeW
GlobalFree
lstrcpynW
GetProcAddress
GetTempPathW
GetTempFileNameW
Sleep
CreateThread
EnterCriticalSection
LeaveCriticalSection
GetLastError
GlobalAddAtomW
GetCurrentThread
GetModuleHandleW
GlobalDeleteAtom
QueueUserAPC
SleepEx
GetLogicalDrives
SetErrorMode
GetDriveTypeW
lstrcmpA
GetModuleFileNameW
GetFileSize
GetFileAttributesExW
CreateFileW
GetFileTime
SetFilePointer
FreeLibrary
QueryPerformanceCounter
WriteFile
LoadLibraryW
FindNextFileW
QueryPerformanceFrequency
LoadLibraryExW
GetLocalTime
GetTimeFormatW
TryEnterCriticalSection
GetFileAttributesW
FindResourceW
LoadResource
SizeofResource
LockResource
FileTimeToSystemTime
GetDateFormatW
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
DisableThreadLibraryCalls
InterlockedCompareExchange
RaiseException
LoadLibraryA
InterlockedExchange
LocalAlloc
GetPrivateProfileIntW
lstrlenW
WritePrivateProfileStringW
GetPrivateProfileStringW
lstrcmpW
InterlockedIncrement
InterlockedDecrement
MultiByteToWideChar
CreateEventW
InitializeCriticalSection
CloseHandle
DeleteCriticalSection
lstrcmpiA
CreateDirectoryW
lstrcmpiW
WaitForSingleObject
SetEvent
WideCharToMultiByte
FindFirstFileW
FindClose
CompareStringW

user32

CallWindowProcA
DefWindowProcA
SetWindowLongA
IsWindowUnicode
ValidateRgn
EndDeferWindowPos
DeferWindowPos
BeginDeferWindowPos
InvalidateRgn
GetUpdateRgn
GetUpdateRect
ValidateRect
GetWindowTextW
GetDlgCtrlID
FillRect
LoadImageW
UpdateWindow
SetCursorPos
DestroyMenu
InsertMenuItemW
CreatePopupMenu
SetCapture
ReleaseCapture
GetCapture
PeekMessageW
WindowFromPoint
wsprintfW
SendMessageW
RedrawWindow
GetMenuItemID
SetMenuInfo
GetMenuInfo
GetDCEx
GetAsyncKeyState
OffsetRect
DrawFocusRect
GetSysColor
IntersectRect
SetRect
CopyAcceleratorTableW
GetMenuItemCount
MapVirtualKeyW
GetKeyNameTextW
InvalidateRect
CharUpperBuffA
CharLowerW
ShowWindow
GetTabbedTextExtentW
CharLowerBuffW
CharUpperBuffW
IsCharUpperW
IsCharLowerW
DrawTextW
SetCursor
LoadCursorW
CallWindowProcW
InflateRect
CheckRadioButton
SetDlgItemTextA
GetDlgItemTextA
EnumChildWindows
GetClassNameW
GetClientRect
MapWindowPoints
SetFocus
SetForegroundWindow
CheckMenuItem
RemovePropW
SetPropW
GetPropW
SetWindowPos
CopyRect
GetMonitorInfoW
MonitorFromWindow
IsChild
IsWindowVisible
DefWindowProcW
IsWindow
DestroyWindow
SetMenuItemInfoW
GetMenuItemInfoW
CreateWindowExW
RegisterClassW
GetClipboardData
CloseClipboard
SetClipboardData
EmptyClipboard
OpenClipboard
TrackPopupMenu
IsClipboardFormatAvailable
GetCursorPos
SetDlgItemTextW
SetWindowLongW
ReleaseDC
GetDC
CheckDlgButton
PtInRect
ScreenToClient
GetWindowRect
IsWindowEnabled
GetDlgItem
EnableWindow
GetDlgItemTextW
IsDlgButtonChecked
GetWindowLongW
GetParent
EndDialog
KillTimer
SetTimer
SendDlgItemMessageW
SetWindowTextW
EnableMenuItem
DeleteMenu
AppendMenuW
GetSubMenu
MessageBoxW
CharNextW
PostMessageW
GetFocus

gdi32

SetTextColor
GetDIBits
DeleteObject
CreatePen
SelectObject
MoveToEx
GetTextMetricsW
GetTextExtentPointA
CreateSolidBrush
CreateRectRgn
OffsetRgn
CombineRgn
LineTo
GetCharWidth32W
ExtTextOutW
BitBlt
DeleteDC
CreateFontIndirectW
GetObjectW
GetCurrentObject
CreateCompatibleDC
SetBkColor
CreateCompatibleBitmap
SetDIBits
GetStockObject

comdlg32

GetSaveFileNameW
GetOpenFileNameW

shell32

SHGetMalloc
SHGetFolderPathW
SHBrowseForFolderW
SHGetPathFromIDListW
SHFileOperationW
ShellExecuteW
DragQueryFileW

ole32

CoCreateGuid

msvcr90

iswalnum
tolower
wcscat
wcstok
wcschr
memcmp
_vswprintf
_aligned_malloc
_stricmp
wcsncmp
strrchr
_strnicmp
_wcsnicmp
wcsncpy
fwrite
wcsstr
fread
ftell
fseek
labs
??_U@YAPAXI@Z
_wunlink
realloc
_wtoi
swscanf
wcsrchr
strcmp
memmove
fputws
wcscmp
wcslen
fgetws
fclose
_wfopen
_difftime64
??_V@YAXPAX@Z
memset
_vsnwprintf
_vsnprintf
_purecall
??3@YAXPAX@Z
??2@YAPAXI@Z
atoi
strncpy
strlen
_wcsdup
_time64
wcscat_s
qsort
calloc
_wcsicmp
memcpy
free
malloc
towupper
_unlock
_encode_pointer
_lock
_onexit
_decode_pointer
?terminate@@YAXXZ
_malloc_crt
_encoded_null
_initterm
_initterm_e
_amsg_exit
_adjust_fdiv
__CppXcptFilter
?_type_info_dtor_internal_method@type_info@@QAEXXZ
_except_handler4_common
_crt_debugger_hook
__dllonexit
__clean_type_info_names_internal
__CxxFrameHandler3

Exports

Exports

winampGetMediaLibraryPlugin
winampUninstallPlugin

Sections

.text
Size: 188KB - Virtual size: 187KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 29KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 41KB - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 15KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Plugins/ml_rg.dll
.dll windows:5 windows x86 arch:x86

3f3bebb5875e339b18b1f4665bd06f30

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

f:\sandbox\20131120_103959\ml_rg\Release\ml_rg.pdb

Imports

shlwapi

PathFindFileNameW
PathAppendA
PathRemoveFileSpecA
PathAppendW
PathIsURLW
StrChrW
PathRemoveFileSpecW

kernel32

InterlockedExchange
Sleep
InterlockedCompareExchange
DisableThreadLibraryCalls
QueryPerformanceCounter
GetTickCount
WritePrivateProfileStringA
lstrlenW
FindFirstFileW
FreeLibrary
GetModuleHandleW
GetPrivateProfileIntA
WideCharToMultiByte
lstrcpynW
GetModuleFileNameW
MultiByteToWideChar
FindClose
FindNextFileW
DeleteFileW
lstrcpyW
CreateThread
SetThreadPriority
ResumeThread
CloseHandle
WaitForSingleObject
GetModuleFileNameA
LoadLibraryA
GetProcAddress
GetCurrentProcessId
GetSystemTimeAsFileTime
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetCurrentThreadId

user32

IsWindow
SendMessageW
DestroyWindow
GetWindowLongA
ShowWindow
SetWindowPos
SetWindowLongA
SetDlgItemTextW
PtInRect
GetWindowRect
SystemParametersInfoA
GetMonitorInfoA
MonitorFromWindow
MonitorFromRect
PostMessageA
MessageBoxW
SendMessageA
EndDialog
CheckDlgButton
GetDlgItem
EnableWindow
IsDlgButtonChecked
MessageBoxA

gdi32

DeleteObject

msvcr90

__CxxFrameHandler3
_CIpow
_unlock
__dllonexit
_encode_pointer
_lock
_onexit
_decode_pointer
_crt_debugger_hook
__clean_type_info_names_internal
?_type_info_dtor_internal_method@type_info@@QAEXXZ
_except_handler4_common
__CppXcptFilter
?terminate@@YAXXZ
_adjust_fdiv
_amsg_exit
_initterm_e
_initterm
_malloc_crt
memset
_stricmp
free
strchr
_vsnwprintf
_purecall
??3@YAXPAX@Z
_strdup
_wcsdup
??2@YAPAXI@Z
_vsnprintf
_snwprintf_l
_wtof_l
_encoded_null

Exports

Exports

winampGetMediaLibraryPlugin
winampUninstallPlugin

Sections

.text
Size: 25KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Plugins/ml_transcode.dll
.dll windows:5 windows x86 arch:x86

899fbcc0a6bb8d171e42a635ac59fe9c

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

f:\sandbox\20131120_103959\ml_transcode\Release\ml_transcode.pdb

Imports

shlwapi

PathCombineW
PathStripPathW
PathRemoveExtensionW
PathIsFileSpecW
PathFindFileNameW
PathFileExistsW

kernel32

GetPrivateProfileIntW
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
InitializeCriticalSection
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
lstrcpynA
WideCharToMultiByte
lstrcpynW
MultiByteToWideChar
WritePrivateProfileStringW
InterlockedExchange
GetLastError
GetPrivateProfileStringA
WritePrivateProfileStringA
lstrcmpiW
DeleteFileW
CreateDirectoryW
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
DisableThreadLibraryCalls
InterlockedCompareExchange
Sleep

user32

PtInRect
CharLowerW
GetMonitorInfoA
SystemParametersInfoW
GetClassNameW
MonitorFromWindow
GetDlgItem
EndDialog
SendDlgItemMessageW
PostMessageW
CheckDlgButton
EnumChildWindows
ShowWindow
IsDlgButtonChecked
IsWindow
MessageBoxW
GetDlgItemTextW
SetDlgItemTextW
SendMessageW
EnableWindow
SetWindowTextW
MonitorFromRect
GetWindowRect
ScreenToClient
CharUpperW
CharNextW
SetWindowPos

shell32

SHGetPathFromIDListW
SHGetMalloc
SHGetFolderPathW
SHBrowseForFolderW

msvcr90

wcsncpy
_crt_debugger_hook
__clean_type_info_names_internal
?_type_info_dtor_internal_method@type_info@@QAEXXZ
?terminate@@YAXXZ
_except_handler4_common
__CppXcptFilter
_adjust_fdiv
_amsg_exit
_initterm_e
_initterm
_encoded_null
_malloc_crt
_decode_pointer
_onexit
_lock
_encode_pointer
__dllonexit
_unlock
_aligned_malloc
atoi
_wtoi
_wcsnicmp
__CxxFrameHandler3
wcslen
wcsstr
_wcsdup
??3@YAXPAX@Z
??2@YAPAXI@Z
free
calloc
malloc
strlen
wcsrchr
memset
_vsnwprintf
_purecall
wcscmp
wcsncmp
memcpy
realloc
_stricmp
_wcsicmp

Exports

Exports

winampGetMediaLibraryPlugin
winampUninstallPlugin

Sections

.text
Size: 18KB - Virtual size: 18KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Plugins/ml_wire.dll
.dll windows:5 windows x86 arch:x86

a7fac2397b7c70b2ecfd0bf5aac970fa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

f:\sandbox\20131120_103959\ml_wire\Release\ml_wire.pdb

Imports

comctl32

ImageList_Add
ImageList_Replace
ImageList_Create
ImageList_GetImageCount
ImageList_Destroy

shlwapi

PathAppendW
PathFileExistsW
PathFindNextComponentW
StrCmpNW
PathCombineW

kernel32

InitializeCriticalSection
DeleteCriticalSection
lstrcpynW
MulDiv
InterlockedIncrement
InterlockedDecrement
CompareStringW
lstrlenW
GlobalDeleteAtom
CreateDirectoryW
SetEvent
SleepEx
GetModuleHandleW
GetCurrentThread
CopyFileW
QueueUserAPC
MoveFileW
TlsAlloc
GlobalAddAtomW
WideCharToMultiByte
MultiByteToWideChar
lstrcmpiW
GetModuleFileNameW
SetWaitableTimer
CreateWaitableTimerW
CloseHandle
SetErrorMode
GetLastError
SetLastError
GetDateFormatW
GetTimeFormatW
WaitForSingleObject
CreateEventW
GetPrivateProfileIntW
DeleteFileW
FindFirstFileW
FileTimeToSystemTime
FindClose
Sleep
ReadFile
CreateFileW
WriteFile
CreateThread
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
DisableThreadLibraryCalls
InterlockedCompareExchange
RaiseException
EnterCriticalSection
InterlockedExchange
FreeLibrary
GetProcAddress
LocalAlloc
IsDebuggerPresent
LoadLibraryA
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
LeaveCriticalSection

user32

ShowWindow
CopyRect
ClientToScreen
GetMenuItemID
SetCapture
DeleteMenu
InvalidateRgn
GetClientRect
PtInRect
GetUpdateRect
GetCapture
GetAsyncKeyState
SetRect
GetWindowTextW
EnableMenuItem
ReleaseCapture
IsWindowVisible
ValidateRgn
ValidateRect
GetWindowTextLengthW
RemovePropW
SetPropW
EndDialog
SendDlgItemMessageW
SetWindowPos
CheckRadioButton
EnableWindow
GetCursorPos
CharPrevW
GetClassNameW
CheckDlgButton
EnumChildWindows
IsDlgButtonChecked
GetDlgItemTextW
SetDlgItemTextW
SetWindowTextW
CopyAcceleratorTableW
MapVirtualKeyW
CharNextW
GetMenuItemInfoW
GetMenuItemCount
GetKeyNameTextW
SetMenuItemInfoW
GetSubMenu
LoadCursorW
MessageBoxW
DestroyMenu
InvalidateRect
IsWindow
SendMessageW
GetUpdateRgn
GetWindowRect
SetRectEmpty
GetWindowLongW
GetDlgItem
SetWindowLongW
RedrawWindow
DeferWindowPos
BeginDeferWindowPos
MapWindowPoints
EndDeferWindowPos
PostMessageW
GetParent
GetFocus
KillTimer
DestroyWindow
GetPropW
SetTimer

gdi32

CreateRectRgnIndirect
GetObjectW
DeleteObject
SetRectRgn
CombineRgn
OffsetRgn
CreateRectRgn

shell32

SHBrowseForFolderW
SHGetPathFromIDListW
SHGetMalloc
SHGetSpecialFolderLocation

oleaut32

SysFreeString
SysAllocStringLen
VariantInit

msvcr90

_adjust_fdiv
_amsg_exit
_initterm_e
_initterm
_encoded_null
_malloc_crt
?terminate@@YAXXZ
_decode_pointer
_onexit
_lock
_encode_pointer
__dllonexit
_unlock
wcscpy_s
_fwprintf_l
fclose
fwrite
fputws
_wfopen
fputwc
fwprintf
wcsncpy
_vsnprintf
_wtof_l
memmove_s
iswdigit
iswspace
__timezone
_gmtime64
_mktime64
wcschr
_wtoi
iswxdigit
wcslen
_aligned_malloc
realloc
__CxxFrameHandler3
_wcsicmp
__CppXcptFilter
_except_handler4_common
?_type_info_dtor_internal_method@type_info@@QAEXXZ
_crt_debugger_hook
_wcsnicmp
_tzset
__clean_type_info_names_internal
memcpy
tolower
malloc
_i64tow
_localtime64
_wtoi64
memset
_purecall
??2@YAPAXI@Z
wcscmp
_time64
free
??_V@YAXPAX@Z
??3@YAXPAX@Z
_wcsdup
??_U@YAPAXI@Z
_vsnwprintf
memcmp

Exports

Exports

winampGetMediaLibraryPlugin

Sections

.text
Size: 81KB - Virtual size: 80KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 18KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Plugins/nsvdec_vp3.dll
.dll windows:5 windows x86 arch:x86

d0eee4d36b07c487dded5839c269c8db

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

f:\sandbox\20131120_103959\nsvdec_vp3\Release\nsvdec_vp3.pdb

Imports

msvcr90

_lock
_onexit
_except_handler4_common
_crt_debugger_hook
__dllonexit
_unlock
__clean_type_info_names_internal
?_type_info_dtor_internal_method@type_info@@QAEXXZ
?terminate@@YAXXZ
__CppXcptFilter
_adjust_fdiv
_amsg_exit
_initterm_e
_initterm
_decode_pointer
_encoded_null
free
_malloc_crt
_purecall
strncmp
malloc
calloc
_except_handler3
_ftol
_encode_pointer
??2@YAPAXI@Z
??3@YAXPAX@Z
sscanf

kernel32

GetTickCount
GlobalFree
GlobalAlloc
QueryPerformanceFrequency
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetVersionExA
QueryPerformanceCounter
DisableThreadLibraryCalls
InterlockedCompareExchange
Sleep
InterlockedExchange

winmm

timeGetTime

user32

MessageBoxA

Exports

Exports

CreateVideoDecoder

Sections

.text
Size: 67KB - Virtual size: 67KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 24KB - Virtual size: 72KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Plugins/nsvdec_vp5.dll
.dll windows:5 windows x86 arch:x86

9e309bf086ab29ffc192276ab5ce9b8e

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

f:\sandbox\20131120_103959\nsvdec_vp5\Release\nsvdec_vp5.pdb

Imports

msvcr90

_crt_debugger_hook
_except_handler4_common
_onexit
_lock
__dllonexit
_unlock
_CIexp
__CxxFrameHandler3
_vsnprintf
malloc
__clean_type_info_names_internal
?_type_info_dtor_internal_method@type_info@@QAEXXZ
?terminate@@YAXXZ
_CIsqrt
memset
__CppXcptFilter
_adjust_fdiv
_amsg_exit
_initterm_e
_initterm
_decode_pointer
_encoded_null
free
_malloc_crt
_encode_pointer
??2@YAPAXI@Z
??3@YAXPAX@Z
rand
strncmp
_purecall
_except_handler3
memcpy

kernel32

IsDebuggerPresent
QueryPerformanceFrequency
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
InterlockedExchange
Sleep
InterlockedCompareExchange
DisableThreadLibraryCalls
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime

winmm

timeGetTime

gdi32

CreateBitmap
BitBlt
SetTextColor
DeleteDC
CreateFontA
SetBkColor
ExtTextOutA
SetBkMode
DeleteObject
SelectObject
CreateCompatibleDC
GetPixel

Exports

Exports

CreateVideoDecoder

Sections

.text
Size: 128KB - Virtual size: 127KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 30KB - Virtual size: 38KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Plugins/out_disk.dll
.dll windows:5 windows x86 arch:x86

db1a4210355358dc16c926adde0d58cf

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

f:\sandbox\20131120_103959\out_disk\Release\out_disk.pdb

Imports

msvcr90

memcpy
_unlock
_crt_debugger_hook
__clean_type_info_names_internal
_except_handler4_common
__CppXcptFilter
_adjust_fdiv
_amsg_exit
_initterm_e
_initterm
_encoded_null
_malloc_crt
_decode_pointer
_onexit
_lock
_encode_pointer
memmove
memcmp
free
malloc
memset
strrchr
_vsnprintf
_vsnwprintf
__dllonexit

shlwapi

PathCombineA

kernel32

GetProcAddress
FreeLibrary
LoadLibraryA
LocalAlloc
DeleteCriticalSection
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
InterlockedCompareExchange
InterlockedExchange
DeleteFileA
CloseHandle
RaiseException
GetModuleHandleA
CreateFileA
GetFileSize
SetFilePointer
WritePrivateProfileStructA
lstrcpynA
SetEndOfFile
GetCurrentThread
WriteFile
InitializeCriticalSection
GetPrivateProfileIntA
Sleep
LeaveCriticalSection
MulDiv
ReadFile
SetThreadPriority
GetLastError
SetLastError
lstrcmpiA
EnterCriticalSection
DisableThreadLibraryCalls
GetPrivateProfileStringA
WritePrivateProfileStringA
GetPrivateProfileStructA

user32

DrawTextA
SendDlgItemMessageA
GetClassNameA
GetClientRect
SendMessageA
GetDC
ReleaseDC
GetDlgItem
EndDialog
PostMessageA
MessageBoxW
MessageBoxIndirectW
SetWindowTextA
SendMessageW
EnableWindow
GetDlgItemTextA
SetWindowTextW
SetDlgItemTextA
EnumChildWindows

gdi32

SelectObject

comdlg32

GetSaveFileNameA
GetOpenFileNameA

shell32

SHBrowseForFolderW
SHGetPathFromIDListA
SHGetFolderPathA
SHGetMalloc

Exports

Exports

winampGetOutModule

Sections

.text
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Plugins/out_ds.dll
.dll windows:5 windows x86 arch:x86

f7608273befed96807e512405af2d575

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

f:\sandbox\20131120_103959\out_ds\Release\out_ds.pdb

Imports

kernel32

WritePrivateProfileStructA
GetPrivateProfileStructA
lstrcpyA
lstrcpynA
lstrlenA
lstrcmpiA
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
SetEvent
GetTickCount
Sleep
WaitForSingleObject
LoadLibraryA
GetProcAddress
FreeLibrary
CreateEventA
CreateThread
SetThreadPriority
WritePrivateProfileStringA
MulDiv
GetVersion
GetModuleHandleA
GetModuleFileNameA
DisableThreadLibraryCalls
GetModuleHandleW
GlobalAlloc
GlobalLock
GlobalUnlock
lstrcatA
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
QueryPerformanceCounter
InterlockedCompareExchange
InterlockedExchange
CloseHandle
GetPrivateProfileIntA

user32

EndDialog
SetFocus
SetDlgItemTextW
SetWindowPos
SetWindowTextW
GetClientRect
CloseClipboard
SetClipboardData
EmptyClipboard
InvalidateRect
SetWindowLongA
GetDlgItemInt
GetWindowLongA
GetDlgItemTextA
ShowWindow
EnableWindow
SetDlgItemTextA
SendDlgItemMessageA
DestroyWindow
CreateWindowExA
RegisterClassA
GetClassInfoA
SetTimer
KillTimer
DefWindowProcA
SetDlgItemInt
CheckDlgButton
MessageBoxA
CharNextA
CharPrevA
SendMessageA
IsWindow
wsprintfW
MessageBoxIndirectW
GetDlgItem
PostMessageA
wsprintfA
OpenClipboard

msvcr90

?_type_info_dtor_internal_method@type_info@@QAEXXZ
?terminate@@YAXXZ
_except_handler4_common
__CppXcptFilter
_adjust_fdiv
_amsg_exit
_initterm_e
_initterm
_encoded_null
_malloc_crt
_decode_pointer
_onexit
_lock
_encode_pointer
__CxxFrameHandler3
__dllonexit
_unlock
sprintf_s
_i64toa_s
_snprintf
log
_vswprintf_c_l
sqrt
log10
fabs
_crt_debugger_hook
__clean_type_info_names_internal
strlen
malloc
free
memcpy
memset
realloc
_vsnprintf
??2@YAPAXI@Z
calloc
??3@YAXPAX@Z
memcmp
pow

Exports

Exports

winampGetOutModule

Sections

.text
Size: 29KB - Virtual size: 29KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Plugins/out_wave.dll
.dll windows:5 windows x86 arch:x86

b2fbf027d99fdeb66516e7b841b8d39c

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

f:\sandbox\20131120_103959\out_wave\Release\out_wave.pdb

Imports

kernel32

FreeLibrary
InitializeCriticalSection
Sleep
LeaveCriticalSection
MulDiv
MultiByteToWideChar
GetProcAddress
EnterCriticalSection
DisableThreadLibraryCalls
GetModuleHandleA
DeleteCriticalSection
LocalFree
GetPrivateProfileStringA
WritePrivateProfileStringA
GetModuleFileNameA
lstrlenA
WaitForSingleObject
SetEvent
GetCurrentThread
CreateEventA
SetThreadPriority
LocalAlloc
CloseHandle
CreateThread
lstrcpyA
GetLastError
LoadLibraryA
RaiseException
InterlockedExchange

user32

SetTimer
SendDlgItemMessageA
KillTimer
wsprintfA
GetWindowLongA
GetDlgItem
EndDialog
EnableWindow
SetWindowTextW
SetDlgItemTextA
SendMessageA
IsWindow
MessageBoxW
MessageBoxIndirectW
wsprintfW

msvcr90

memcpy
_CIlog
memset
_CIpow
strrchr
strchr
??2@YAPAXI@Z
??3@YAXPAX@Z
_vswprintf_c_l
malloc
free

Exports

Exports

winampGetOutModule

Sections

.text
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Plugins/pmp_activesync.dll
.dll windows:5 windows x86 arch:x86

ddd7de9ce03d1aff8d55350172f69cca

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

f:\sandbox\20131120_103959\pmp_activesync\Release\pmp_activesync.pdb

Imports

kernel32

FindFirstFileW
GetPrivateProfileStringW
WideCharToMultiByte
lstrcpynW
MultiByteToWideChar
WritePrivateProfileStringW
FindClose
lstrcmpiW
SetEvent
WaitForSingleObjectEx
InitializeCriticalSection
TerminateThread
LeaveCriticalSection
EnterCriticalSection
CreateEventW
DeleteCriticalSection
CloseHandle
CreateThread
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
DisableThreadLibraryCalls
InterlockedCompareExchange
InterlockedExchange
Sleep

user32

wsprintfW
SendMessageW
SetDlgItemTextW
GetDlgItemTextW
CharNextW

ole32

CoCreateInstance
CoUninitialize
CoInitializeEx

oleaut32

SysFreeString

msvcr90

wcscat
wcstoul
memcmp
_snwprintf
free
malloc
strlen
wcsncpy
_wfopen
wcslen
wcsrchr
fread
_wcsicmp
??3@YAXPAX@Z
_wunlink
fwrite
ftell
wcscmp
fseek
fclose
_wcsdup
??2@YAPAXI@Z
_vswprintf_c_l
memcpy
memset
memmove
_unlock
__dllonexit
_encode_pointer
_lock
_onexit
_decode_pointer
_malloc_crt
_encoded_null
_initterm
_initterm_e
_amsg_exit
_adjust_fdiv
__CppXcptFilter
?terminate@@YAXXZ
?_type_info_dtor_internal_method@type_info@@QAEXXZ
_except_handler4_common
__clean_type_info_names_internal
_crt_debugger_hook
memmove_s
_purecall
__CxxFrameHandler3

Exports

Exports

winampGetPMPDevicePlugin
winampUninstallPlugin

Sections

.text
Size: 17KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Plugins/pmp_android.dll
.dll windows:5 windows x86 arch:x86

58d8ee6ef866df01257832d4c15cca7b

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

f:\sandbox\20131120_103959\pmp_android\Release\pmp_android.pdb

Imports

shlwapi

PathFindExtensionW
PathFindFileNameW
PathFileExistsW
PathRemoveFileSpecW
PathSkipRootW
PathRemoveExtensionW

kernel32

SetEvent
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
FindFirstFileW
CompareFileTime
CreateDirectoryW
GetPrivateProfileStringW
InitializeCriticalSection
LeaveCriticalSection
lstrcpynW
CompareStringW
lstrlenW
WritePrivateProfileStringW
GetPrivateProfileIntW
MoveFileW
EnterCriticalSection
FindClose
RemoveDirectoryW
lstrcmpiW
FindNextFileW
GetFileAttributesExW
DeleteCriticalSection
GetDiskFreeSpaceExW
SetFileAttributesW
InterlockedIncrement
InterlockedDecrement
WaitForSingleObject
LocalAlloc
ResetEvent
CreateEventW
CloseHandle
GetDriveTypeW
Sleep
CreateFileW
GetLastError
DeviceIoControl
CopyFileExW
DeleteFileW
SetErrorMode
GetPrivateProfileIntA
WideCharToMultiByte
MultiByteToWideChar
GetPrivateProfileStringA
WritePrivateProfileStringA
GetVolumeInformationW
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
DisableThreadLibraryCalls
InterlockedCompareExchange
RaiseException
LoadLibraryA
InterlockedExchange
FreeLibrary
GetProcAddress

user32

EnableWindow
UnregisterDeviceNotification
wsprintfW
PostMessageW
MessageBoxA
EndDialog
SendDlgItemMessageW
CheckDlgButton
EnumChildWindows
IsDlgButtonChecked
MessageBoxW
GetDlgItemTextW
SetDlgItemTextW
SendMessageW
GetDlgItem
GetWindowTextW
KillTimer
SetTimer
CharNextW
GetClassNameW

shell32

SHGetPathFromIDListW
SHGetMalloc
SHBrowseForFolderW

msvcr90

wcschr
_crt_debugger_hook
__clean_type_info_names_internal
_except_handler4_common
?_type_info_dtor_internal_method@type_info@@QAEXXZ
?terminate@@YAXXZ
__CppXcptFilter
_adjust_fdiv
_amsg_exit
_initterm_e
_initterm
_encoded_null
memcpy
__CxxFrameHandler3
_wcsicmp
_wtoi
free
wcsncpy
_errno
wcslen
wcsrchr
wcsstr
??_V@YAXPAX@Z
_vsnwprintf
_purecall
??3@YAXPAX@Z
_wunlink
wcscmp
_wcsdup
??2@YAPAXI@Z
towupper
memset
memcmp
printf
malloc
_vsnprintf
memmove
towlower
_wcsnicmp
wcsncmp
_unlock
__dllonexit
_encode_pointer
_lock
_onexit
_decode_pointer
_malloc_crt

Exports

Exports

winampGetPMPDevicePlugin

Sections

.text
Size: 29KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Plugins/pmp_ipod.dll
.dll windows:5 windows x86 arch:x86

c1d4a58befe887fe1af0f593122cfc37

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

f:\sandbox\20131120_103959\pmp_ipod\Release\pmp_ipod.pdb

Imports

shlwapi

PathCombineW

kernel32

GetStringTypeExW
IsDebuggerPresent
InterlockedIncrement
InterlockedDecrement
WaitForSingleObject
SetEvent
InitializeCriticalSection
LeaveCriticalSection
EnterCriticalSection
ResetEvent
CreateEventW
DeleteCriticalSection
CloseHandle
GetDriveTypeW
Sleep
CreateFileW
GetLastError
DeviceIoControl
CopyFileExW
DeleteFileW
WideCharToMultiByte
lstrcpynW
MultiByteToWideChar
lstrlenW
InterlockedExchange
lstrcmpiW
CreateFileA
FindFirstFileW
SetFilePointer
CreateDirectoryW
UnlockFile
LockFile
GetTickCount
WriteFile
GetFileAttributesW
WritePrivateProfileStringW
GetPrivateProfileIntW
CreateDirectoryA
SetVolumeLabelW
FindClose
GetDiskFreeSpaceExW
CompareStringW
GetVolumeInformationW
GetFileAttributesA
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
DisableThreadLibraryCalls
InterlockedCompareExchange
RaiseException
FreeLibrary
LocalAlloc
OutputDebugStringW
GetCurrentThreadId
QueryPerformanceCounter
GetProcAddress
QueryPerformanceFrequency
LoadLibraryA

user32

BringWindowToTop
GetWindowLongW
SetWindowLongW
GetDlgItemTextW
EnableWindow
SetTimer
KillTimer
GetDlgItem
EndDialog
SendDlgItemMessageW
SetWindowPos
CheckDlgButton
ShowWindow
SendMessageA
MessageBoxW
SetDlgItemTextW
CharNextW
wsprintfW
SendMessageW
SendNotifyMessageA
IsDlgButtonChecked

ole32

CoCreateGuid

msvcr90

printf
_vsnwprintf
memcpy
free
malloc
memset
memmove_s
_strnicmp
??_U@YAPAXI@Z
_wfopen
wcslen
??_V@YAXPAX@Z
fwrite
fclose
??2@YAPAXI@Z
_wcsicmp
_wtoi
strlen
wcsncpy
rand
_purecall
__timezone
_tzset
towupper
_time64
rename
wcscat
_wtof
calloc
pow
strstr
_wmkdir
wcsrchr
fopen
fread
srand
_wtoi64
__CxxFrameHandler3
_unlink
wcscmp
strtoul
fseek
_difftime64
wcschr
_wcsnicmp
fgetws
fprintf
log10
realloc
_vswprintf_c_l
_wunlink
memmove
_gmtime64
wcsftime
_i64tow
_wtof_l
_mkgmtime64
_create_locale
_unlock
__dllonexit
_encode_pointer
_lock
_onexit
_decode_pointer
_malloc_crt
_encoded_null
_initterm
_initterm_e
_amsg_exit
_adjust_fdiv
__CppXcptFilter
?terminate@@YAXXZ
?_type_info_dtor_internal_method@type_info@@QAEXXZ
_except_handler4_common
__clean_type_info_names_internal
_crt_debugger_hook
??3@YAXPAX@Z
memcmp
_wcsdup
ftell

Exports

Exports

winampGetPMPDevicePlugin
winampUninstallPlugin

Sections

.text
Size: 93KB - Virtual size: 93KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 25KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 26KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Plugins/pmp_njb.dll
.dll windows:5 windows x86 arch:x86

1a714b49a18d55b2123195705b58e9e7

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

f:\sandbox\20131120_103959\pmp_njb\Release\pmp_njb.pdb

Imports

kernel32

MultiByteToWideChar
FindFirstFileW
InitializeCriticalSection
Sleep
LeaveCriticalSection
lstrcpynW
EnterCriticalSection
FindClose
DeleteCriticalSection
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
DisableThreadLibraryCalls
InterlockedCompareExchange
InterlockedExchange

user32

PostMessageW
DefWindowProcW
SendMessageW
RegisterClassW
DestroyWindow
wsprintfW
CreateWindowExW

ole32

CoCreateInstance
OleInitialize
OleUninitialize

oleaut32

SysFreeString
SysAllocString

msvcr90

_crt_debugger_hook
__clean_type_info_names_internal
memcpy
free
malloc
realloc
_vswprintf_c_l
??3@YAXPAX@Z
??2@YAPAXI@Z
_stricmp
_wcsicmp
calloc
strlen
memset
_wcsdup
towlower
wcscat
qsort
wcsncpy
strcpy
wcslen
wcsrchr
_purecall
_wunlink
bsearch
wcscmp
_unlock
__dllonexit
_encode_pointer
_lock
_onexit
_decode_pointer
_malloc_crt
_encoded_null
_initterm
_initterm_e
_amsg_exit
_adjust_fdiv
__CppXcptFilter
_except_handler4_common
?terminate@@YAXXZ
?_type_info_dtor_internal_method@type_info@@QAEXXZ
__CxxFrameHandler3

Exports

Exports

winampGetPMPDevicePlugin
winampUninstallPlugin

Sections

.text
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Plugins/pmp_p4s.dll
.dll windows:5 windows x86 arch:x86

c8620009f5451871eeb61fe64f25f55b

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

f:\sandbox\20131120_103959\pmp_p4s\Release\pmp_p4s.pdb

Imports

kernel32

LeaveCriticalSection
EnterCriticalSection
ResetEvent
CreateEventW
DeleteCriticalSection
CloseHandle
GetCurrentThread
GetVersionExW
GetModuleFileNameW
WideCharToMultiByte
FindFirstFileW
lstrcpynW
FindClose
lstrcmpiW
HeapAlloc
GetProcessHeap
HeapFree
InterlockedExchange
GetProcAddress
InitializeCriticalSection
GetVersionExA
DeviceIoControl
FreeEnvironmentStringsA
FreeEnvironmentStringsW
lstrlenA
lstrlenW
GetEnvironmentStrings
GetEnvironmentStringsW
GetDiskFreeSpaceA
GlobalMemoryStatus
QueryPerformanceCounter
GetLocalTime
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
LoadLibraryA
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
SetEvent
WaitForSingleObject
InterlockedDecrement
GetModuleHandleW
InterlockedIncrement
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
DisableThreadLibraryCalls
InterlockedCompareExchange
Sleep
RaiseException
GetLastError
FreeLibrary
LocalAlloc

user32

SendMessageW
wsprintfW

advapi32

RegQueryValueExA
RegCloseKey
RegCreateKeyExA
RegSetValueExA

ole32

PropVariantClear
CoCreateInstance
CoTaskMemFree
CoUninitialize
CoInitialize

msvcr90

free
malloc
realloc
wcsstr
_vsnwprintf
_wcsicmp
calloc
memset
_wcsdup
wcschr
_mktime64
wcscat
_wtoi
qsort
_wcsnicmp
wcslen
wcsrchr
fopen
_purecall
_wunlink
bsearch
iswalnum
ftell
wcscmp
_localtime64
fseek
fclose
_difftime64
_unlock
__dllonexit
_encode_pointer
_lock
_onexit
_decode_pointer
_malloc_crt
_encoded_null
_initterm
_initterm_e
_amsg_exit
_adjust_fdiv
__CppXcptFilter
_except_handler4_common
?terminate@@YAXXZ
?_type_info_dtor_internal_method@type_info@@QAEXXZ
__clean_type_info_names_internal
_crt_debugger_hook
memcpy
??2@YAPAXI@Z
??3@YAXPAX@Z
memcmp
__CxxFrameHandler3

Exports

Exports

winampGetPMPDevicePlugin
winampUninstallPlugin

Sections

.text
Size: 74KB - Virtual size: 74KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Plugins/pmp_usb.dll
.dll windows:5 windows x86 arch:x86

31fcc1103eae24faaf669480b11e3303

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

f:\sandbox\20131120_103959\pmp_usb2\Release\pmp_usb2.pdb

Imports

shlwapi

PathSkipRootW
PathRemoveFileSpecW
PathFindFileNameW
PathFindExtensionW
PathRemoveExtensionW
PathFileExistsW

kernel32

GetProcAddress
FreeLibrary
InterlockedExchange
LoadLibraryA
RaiseException
InterlockedCompareExchange
InterlockedIncrement
InterlockedDecrement
WaitForSingleObject
SetEvent
InitializeCriticalSection
LeaveCriticalSection
EnterCriticalSection
ResetEvent
CreateEventW
DeleteCriticalSection
CloseHandle
GetDriveTypeW
Sleep
CreateFileW
GetLastError
DeviceIoControl
CopyFileExW
DeleteFileW
FindFirstFileW
SetErrorMode
GetPrivateProfileIntA
WideCharToMultiByte
MultiByteToWideChar
FindClose
GetPrivateProfileStringA
WritePrivateProfileStringA
GetDiskFreeSpaceExW
GetVolumeInformationW
CreateThread
CompareFileTime
GetPrivateProfileStringW
lstrcpynW
lstrlenW
WritePrivateProfileStringW
GetPrivateProfileIntW
MoveFileW
RemoveDirectoryW
lstrcmpiW
FindNextFileW
GetFileAttributesExW
SetFileAttributesW
CreateDirectoryW
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
DisableThreadLibraryCalls
LocalAlloc

user32

PostMessageW
wsprintfW
UnregisterDeviceNotification
EnableWindow
SetDlgItemTextW
MessageBoxW
CharNextW
GetClassNameW
CheckDlgButton
EnumChildWindows
IsDlgButtonChecked
GetDlgItemTextW
SetTimer
SendDlgItemMessageW
KillTimer
MessageBoxA
GetWindowTextW
GetDlgItem
EndDialog
SendMessageW

shell32

SHGetPathFromIDListW
SHGetMalloc
SHBrowseForFolderW

tataki

?getBits@SkinBitmap@@UAEPAXXZ
??1SkinBitmap@@QAE@XZ
??0SkinBitmap@@QAE@PAKHH_N@Z
??1DCCanvas@@UAE@XZ
?stretch@SkinBitmap@@QAEXPAVifc_canvas@@HHHH@Z
??0DCCanvas@@QAE@PAUHDC__@@PAVBaseWnd@@@Z

msvcr90

_malloc_crt
_encoded_null
_initterm
__CxxFrameHandler3
_initterm_e
_decode_pointer
_onexit
_crt_debugger_hook
__clean_type_info_names_internal
_lock
_encode_pointer
__dllonexit
_unlock
_except_handler4_common
?_type_info_dtor_internal_method@type_info@@QAEXXZ
?terminate@@YAXXZ
__CppXcptFilter
fclose
_adjust_fdiv
memcmp
??3@YAXPAX@Z
??2@YAPAXI@Z
printf
_vsnwprintf
free
malloc
??_V@YAXPAX@Z
_vsnprintf
wcscmp
towupper
_wcsdup
memcpy
_wcsicmp
memset
wcschr
_wtoi
_errno
wcslen
wcsrchr
wcsstr
_purecall
_wunlink
towlower
_wcsnicmp
_wfopen
wcsncmp
_amsg_exit

Exports

Exports

winampGetPMPDevicePlugin

Sections

.text
Size: 29KB - Virtual size: 29KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Plugins/pmp_wifi.dll
.dll windows:5 windows x86 arch:x86

29ae90f51ae686a7b1c5158a435656a1

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

f:\sandbox\20131120_103959\pmp_wifi\Release\pmp_wifi.pdb

Imports

shlwapi

PathFindExtensionW
PathCombineW

kernel32

SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
IsDebuggerPresent
GetTickCount
QueryPerformanceCounter
DisableThreadLibraryCalls
InterlockedCompareExchange
RaiseException
LocalAlloc
GetCurrentThreadId
InterlockedExchange
LoadLibraryA
GetProcAddress
FreeLibrary
MultiByteToWideChar
FindFirstFileW
InterlockedIncrement
InterlockedDecrement
WaitForSingleObject
FindClose
CreateEventW
DeleteFileW
InitializeCriticalSection
WideCharToMultiByte
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
GetComputerNameW
GetModuleFileNameW
GetLastError
CompareStringW
WritePrivateProfileStringW
GetPrivateProfileIntW
SetEvent
CloseHandle
Sleep
MulDiv
WriteFile
CreateFileW

user32

SendMessageW
PostMessageW

advapi32

GetUserNameW

msvcr90

_initterm_e
_amsg_exit
_adjust_fdiv
__CppXcptFilter
?terminate@@YAXXZ
?_type_info_dtor_internal_method@type_info@@QAEXXZ
_except_handler4_common
__clean_type_info_names_internal
_initterm
_encoded_null
_malloc_crt
_crt_debugger_hook
??3@YAXPAX@Z
_wcsicmp
free
wcsncat
_vsnwprintf
_vsnprintf
_purecall
__CxxFrameHandler3
wcscmp
_wcsdup
??2@YAPAXI@Z
_wtoi64
_wcstoui64
??_U@YAPAXI@Z
malloc
??_V@YAXPAX@Z
memset
strlen
memcpy
strstr
strcpy
_wfopen
fread
ftell
fseek
fclose
memmove
_strtoui64
_wtoi
memcmp
strcmp
_strdup
_unlock
__dllonexit
_encode_pointer
_lock
_onexit
_decode_pointer

Exports

Exports

winampGetPMPDevicePlugin

Sections

.text
Size: 28KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 29KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Plugins/read_file.dll
.dll windows:4 windows x86 arch:x86

7b9197cb192d549610776bfb9b2d0d53

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetCPInfo
CreateFileA
CloseHandle
ReadFile
SetFilePointer
WideCharToMultiByte
IsDBCSLeadByte
GetLastError
GetVersion
FindClose
FindNextFileW
FindFirstFileW
DisableThreadLibraryCalls

user32

CharLowerA
CharNextA

msvcrt

fread
fseek
_stricmp
memset
__CxxFrameHandler
free
strcmp
malloc
strcat
strlen
strncpy
realloc
_errno
??2@YAPAXI@Z
strcpy
memcpy
strrchr
memmove
abs
getc
_fsopen
_strdup
ftell
fclose
fopen
fwrite
_fdopen
strchr
fputc
calloc
strstr
_wfsopen
mbstowcs
??1type_info@@UAE@XZ
strncmp
wcscpy
_initterm
_adjust_fdiv

Exports

Exports

RF_create
gzip_writefile
readerSource

Sections

.text
Size: 65KB - Virtual size: 64KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 6KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Plugins/reporter.exe
.exe windows:5 windows x86 arch:x86

8eb725bcc9a6a7d1ca99970d0aae30ef

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

f:\sandbox\20131120_103959\gen_crasher\feedback\Release\feedback.pdb

Imports

comctl32

InitCommonControlsEx

rpcrt4

UuidCreate

kernel32

MultiByteToWideChar
GetLastError
WideCharToMultiByte
GetPrivateProfileIntW
lstrcmpW
lstrlenW
GetPrivateProfileStringW
CreateFileW
WriteFile
CloseHandle
GetFileSize
DeleteFileW
CreateDirectoryW
FileTimeToSystemTime
GetFileType
GetFileInformationByHandle
SetFilePointer
ReadFile
FileTimeToDosDateTime
GetCurrentProcess
UnmapViewOfFile
GetLocalTime
SystemTimeToFileTime
lstrlenA
GetTimeZoneInformation
lstrcpynW
GetTimeFormatW
GetTickCount
lstrcpyW
lstrcatW
OutputDebugStringW
GetComputerNameW
lstrcmpiA
RaiseException
LoadLibraryA
GetProcAddress
FreeLibrary
CompareStringW
CompareStringA
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
SetStdHandle
GetModuleHandleA
GetConsoleMode
GetConsoleCP
GetLocaleInfoA
GetStringTypeW
GetStringTypeA
LCMapStringW
CreateProcessW
GetModuleFileNameW
SetEnvironmentVariableA
CreateFileA
GetDateFormatW
LCMapStringA
InitializeCriticalSectionAndSpinCount
GetSystemTimeAsFileTime
GetCurrentProcessId
QueryPerformanceCounter
GetStartupInfoA
FlushFileBuffers
SetHandleCount
GetCommandLineW
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetModuleFileNameA
GetStdHandle
VirtualAlloc
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
HeapFree
HeapAlloc
GetStartupInfoW
RtlUnwind
GetModuleHandleW
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
Sleep
HeapSize
ExitProcess
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
HeapReAlloc
HeapCreate
VirtualFree

user32

MessageBoxW
CharPrevW
GetDlgItem
SendMessageW
SetDlgItemTextW
ShowWindow
UpdateWindow
DialogBoxParamW
EndDialog
CharNextW
SetActiveWindow
ReleaseCapture
EnableWindow
SetFocus
SetCapture
wsprintfW
KillTimer
SetTimer

advapi32

RegCreateKeyExW
RegOpenKeyExW
RegCloseKey
RegQueryValueExW

shell32

SHOpenFolderAndSelectItems
SHGetDesktopFolder

wsock32

getservbyname
htons
WSAStartup
ioctlsocket
gethostbyname
connect
shutdown
closesocket
select
recv
send
socket

shlwapi

PathRemoveFileSpecW
PathAppendW

Sections

.text
Size: 97KB - Virtual size: 97KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 6KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 73KB - Virtual size: 73KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Plugins/tataki.dll
.dll windows:5 windows x86 arch:x86

e4e6cad233ef266efbf07621466e1ab9

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

f:\sandbox\20131120_103959\tataki\Release\tataki.pdb

Imports

nsutil

nsutil_alpha_PremultiplyValue_RGB8
nsutil_alpha_Premultiply_RGB32
nsutil_image_FillRectAlpha_RGB32

kernel32

GetStringTypeExW
InterlockedExchange
InterlockedCompareExchange
GetCurrentProcessId
GetSystemTimeAsFileTime
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
LocalAlloc
Sleep
TlsSetValue
TlsGetValue
TlsFree
TlsAlloc
FreeLibrary
RaiseException
GetLastError
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
GetProcAddress
LoadLibraryA
QueryPerformanceFrequency
OutputDebugStringA

user32

SetRect
OffsetRect
GetWindowRect
GetDCEx
BeginPaint
EndPaint
ReleaseDC
GetDC
PtInRect
IsRectEmpty
DrawFrameControl
IntersectRect

gdi32

GetObjectA
InvertRgn
GetRegionData
CreateRectRgnIndirect
RectInRegion
GetRgnBox
OffsetRgn
PtInRegion
ExtCreateRegion
SetRectRgn
CombineRgn
CreateRectRgn
GetDeviceCaps
StretchBlt
SetStretchBltMode
BitBlt
GetClipRgn
GetClipBox
SelectClipRgn
LineTo
MoveToEx
Rectangle
CreatePen
SelectObject
DeleteObject
DeleteDC
CreateCompatibleDC
CreateDIBSection
CreateSolidBrush
FillRgn
SetBkColor
ExtTextOutW
GetStockObject

msvcr90

memcpy
__CxxFrameHandler3
?terminate@@YAXXZ
_unlock
__dllonexit
_encode_pointer
_lock
_onexit
_decode_pointer
_malloc_crt
_encoded_null
_initterm
_initterm_e
_amsg_exit
_adjust_fdiv
__CppXcptFilter
_except_handler4_common
?_type_info_dtor_internal_method@type_info@@QAEXXZ
__clean_type_info_names_internal
_crt_debugger_hook
realloc
memmove
memset
malloc
vsprintf_s
wcslen
strlen
_wcsdup
free
??2@YAPAXI@Z
_purecall
??_V@YAXPAX@Z
??3@YAXPAX@Z
_except_handler3

Exports

Exports

??0AutoSkinBitmap@@QAE@ABV0@@Z
??0AutoSkinBitmap@@QAE@PB_W@Z
??0BaseCloneCanvas@@QAE@ABV0@@Z
??0BaseCloneCanvas@@QAE@PAVifc_canvas@@@Z
??0BitsCanvas@@QAE@ABV0@@Z
??0BitsCanvas@@QAE@PAXHH@Z
??0BltCanvas@@QAE@ABV0@@Z
??0BltCanvas@@QAE@HHPAUHWND__@@H@Z
??0BltCanvas@@QAE@PAUHBITMAP__@@@Z
??0BltCanvas@@QAE@XZ
??0Canvas@@IAE@XZ
??0Canvas@@QAE@ABV0@@Z
??0DCBltCanvas@@QAE@ABV0@@Z
??0DCBltCanvas@@QAE@XZ
??0DCCanvas@@QAE@ABV0@@Z
??0DCCanvas@@QAE@PAUHDC__@@PAVBaseWnd@@@Z
??0DCExBltCanvas@@QAE@ABV0@@Z
??0DCExBltCanvas@@QAE@PAUHWND__@@PAUHRGN__@@K@Z
??0DDSurfaceCanvas@@QAE@ABV0@@Z
??0DDSurfaceCanvas@@QAE@PAUIDirectDrawSurface@@HH@Z
??0FilteredColor@@QAE@ABV0@@Z
??0FilteredColor@@QAE@KPB_W@Z
??0MemCanvas@@QAE@ABV0@@Z
??0MemCanvas@@QAE@XZ
??0PaintBltCanvas@@QAE@ABV0@@Z
??0PaintBltCanvas@@QAE@XZ
??0PaintCanvas@@QAE@ABV0@@Z
??0PaintCanvas@@QAE@XZ
??0RegionI@@QAE@ABV0@@Z
??0RegionI@@QAE@HHHH@Z
??0RegionI@@QAE@PAUHRGN__@@@Z
??0RegionI@@QAE@PAVCanvas@@PAUtagRECT@@@Z
??0RegionI@@QAE@PAVSkinBitmap@@PAUtagRECT@@HH_NHDHH@Z
??0RegionI@@QAE@PBUtagRECT@@@Z
??0RegionI@@QAE@PBV0@@Z
??0RegionI@@QAE@XZ
??0RegionServerI@@QAE@ABV0@@Z
??0RegionServerI@@QAE@XZ
??0SkinBitmap@@QAE@ABV0@@Z
??0SkinBitmap@@QAE@HHK@Z
??0SkinBitmap@@QAE@PAKHH_N@Z
??0SkinBitmap@@QAE@PAUHBITMAP__@@@Z
??0SkinBitmap@@QAE@PAUHBITMAP__@@PAUHDC__@@HPAX@Z
??0SkinBitmap@@QAE@PAUHINSTANCE__@@HPB_W@Z
??0SkinBitmap@@QAE@PAVifc_canvas@@@Z
??0SkinBitmap@@QAE@PB_WH@Z
??0SkinColor@@QAE@ABV0@@Z
??0SkinColor@@QAE@PB_W0@Z
??0SysCanvas@@QAE@ABV0@@Z
??0SysCanvas@@QAE@XZ
??0TextInfoCanvas@@QAE@ABV0@@Z
??0TextInfoCanvas@@QAE@PAVBaseWnd@@@Z
??0WndCanvas@@QAE@ABV0@@Z
??0WndCanvas@@QAE@PAVBaseWnd@@@Z
??0WndCanvas@@QAE@XZ
??1AutoSkinBitmap@@UAE@XZ
??1BaseCloneCanvas@@UAE@XZ
??1BitsCanvas@@UAE@XZ
??1BltCanvas@@UAE@XZ
??1Canvas@@UAE@XZ
??1DCBltCanvas@@UAE@XZ
??1DCCanvas@@UAE@XZ
??1DCExBltCanvas@@UAE@XZ
??1DDSurfaceCanvas@@UAE@XZ
??1FilteredColor@@UAE@XZ
??1MemCanvas@@UAE@XZ
??1PaintBltCanvas@@UAE@XZ
??1PaintCanvas@@UAE@XZ
??1RegionI@@UAE@XZ
??1RegionServerI@@UAE@XZ
??1SkinBitmap@@QAE@XZ
??1SkinColor@@UAE@XZ
??1SysCanvas@@UAE@XZ
??1TextInfoCanvas@@UAE@XZ
??1WndCanvas@@UAE@XZ
??4AutoSkinBitmap@@QAEAAV0@ABV0@@Z
??4AutoSkinBitmap@@QAEHH@Z
??4AutoSkinBitmap@@QAEPB_WPB_W@Z
??4BaseCloneCanvas@@QAEAAV0@ABV0@@Z
??4BitsCanvas@@QAEAAV0@ABV0@@Z
??4Blenders@@QAEAAV0@ABV0@@Z
??4BltCanvas@@QAEAAV0@ABV0@@Z
??4Canvas@@QAEAAV0@ABV0@@Z
??4DCBltCanvas@@QAEAAV0@ABV0@@Z
??4DCCanvas@@QAEAAV0@ABV0@@Z
??4DCExBltCanvas@@QAEAAV0@ABV0@@Z
??4DDSurfaceCanvas@@QAEAAV0@ABV0@@Z
??4FilteredColor@@QAEAAV0@ABV0@@Z
??4MemCanvas@@QAEAAV0@ABV0@@Z
??4PaintBltCanvas@@QAEAAV0@ABV0@@Z
??4PaintCanvas@@QAEAAV0@ABV0@@Z
??4RegionI@@QAEAAV0@ABV0@@Z
??4RegionServerI@@QAEAAV0@ABV0@@Z
??4SkinBitmap@@QAEAAV0@ABV0@@Z
??4SkinColor@@QAEAAV0@ABV0@@Z
??4SkinColor@@QAEPB_WPB_W@Z
??4SysCanvas@@QAEAAV0@ABV0@@Z
??4TextInfoCanvas@@QAEAAV0@ABV0@@Z
??4WndCanvas@@QAEAAV0@ABV0@@Z
??BAutoSkinBitmap@@QAEPAVSkinBitmap@@XZ
??BSkinColor@@QAEHXZ
??_7AutoSkinBitmap@@6B@
??_7BaseCloneCanvas@@6B@
??_7BitsCanvas@@6B@
??_7BltCanvas@@6B@
??_7DCBltCanvas@@6B@
??_7DCCanvas@@6B@
??_7DCExBltCanvas@@6B@
??_7DDSurfaceCanvas@@6B@
??_7FilteredColor@@6B@
??_7MemCanvas@@6B@
??_7PaintBltCanvas@@6B@
??_7PaintCanvas@@6B@
??_7RegionI@@6B@
??_7RegionServerI@@6B@
??_7SkinBitmap@@6B@
??_7SkinColor@@6B@
??_7SysCanvas@@6B@
??_7TextInfoCanvas@@6B@
??_7WndCanvas@@6B@
??_FAutoSkinBitmap@@QAEXXZ
??_FBaseCloneCanvas@@QAEXXZ
??_FDCCanvas@@QAEXXZ
??_FFilteredColor@@QAEXXZ
??_FSkinColor@@QAEXXZ
?AddRef@SkinBitmap@@QAEXXZ
?AllocBitmap@BltCanvas@@AAEXHHH@Z
?BLEND4@Blenders@@SAIPAIIHH@Z
?BLEND4_MMX@Blenders@@SAIPAIIHH@Z
?BLEND_ADJ1@Blenders@@SAIIIH@Z
?BLEND_ADJ1_MMX@Blenders@@SAIIIH@Z
?BLEND_ADJ2@Blenders@@SAIII@Z
?BLEND_ADJ2_MMX@Blenders@@SAIII@Z
?BLEND_ADJ3@Blenders@@SAIIIH@Z
?BLEND_ADJ3_MMX@Blenders@@SAIIIH@Z
?BLEND_AVG@Blenders@@SAIII@Z
?BLEND_AVG_MMX@Blenders@@SAIII@Z
?BLEND_MMX_END@Blenders@@SAXXZ
?BLEND_MUL@Blenders@@SAIIH@Z
?BLEND_MUL_MMX@Blenders@@SAIIH@Z
?DestructiveResize@BltCanvas@@QAEXHHH@Z
?GetColor@SkinColor@@SAKPB_W0K@Z
?MMX_AVAILABLE@Blenders@@SAHXZ
?Release@SkinBitmap@@QAEXXZ
?TryGetColor@SkinColor@@SA_NPAKPB_W1@Z
?_dispatch@AutoSkinBitmap@@MAEHHPAXPAPAXH@Z
?_dispatch@Canvas@@MAEHHPAXPAPAXH@Z
?_dispatch@RegionI@@MAEHHPAXPAPAXH@Z
?_dispatch@RegionServerI@@MAEHHPAXPAPAXH@Z
?addRect@RegionI@@QAEXPBUtagRECT@@@Z
?addRef@RegionServerI@@UAEXPAX@Z
?addRegion@RegionI@@QAEXPBVapi_region@@@Z
?alphaToRegionRect@RegionI@@AAEPAUHRGN__@@PAVSkinBitmap@@HH_NHHHH1HEHH@Z
?alphaToRegionRect@RegionI@@QAEPAUHRGN__@@PAXHHHHHHHH_NHHHH1HEHH@Z
?alphatable@Blenders@@2PAY0BAA@EA
?andRegion@RegionI@@QAEXPBVapi_region@@@Z
?antiAliasTo@Canvas@@QAEXPAV1@HHH@Z
?attachToClient@WndCanvas@@QAEHPAVBaseWnd@@@Z
?beginPaint@PaintBltCanvas@@QAEHPAVBaseWnd@@@Z
?beginPaint@PaintCanvas@@QAEHPAUHWND__@@@Z
?beginPaint@PaintCanvas@@QAEHPAVBaseWnd@@@Z
?beginPaintNC@PaintBltCanvas@@QAEHPAVBaseWnd@@@Z
?blit@Canvas@@QAEXHHPAV1@HHHH@Z
?blit@SkinBitmap@@QAEXPAVifc_canvas@@HH@Z
?blitAlpha@AutoSkinBitmap@@QAEXPAVifc_canvas@@HHH@Z
?blitAlpha@Canvas@@QAEXPAVifc_canvas@@HHH@Z
?blitAlpha@SkinBitmap@@QAEXPAVifc_canvas@@HHH@Z
?blitRectToTile@SkinBitmap@@QAEXPAVifc_canvas@@PAUtagRECT@@1HHH@Z
?blitTile@SkinBitmap@@QAEXPAVifc_canvas@@PAUtagRECT@@HHH@Z
?blitToRect@Canvas@@QAEXPAVifc_canvas@@PAUtagRECT@@1H@Z
?blitToRect@SkinBitmap@@QAEXPAVifc_canvas@@PAUtagRECT@@1H@Z
?bmpToBits@SkinBitmap@@AAEXPAUHBITMAP__@@PAUHDC__@@@Z
?clone@BaseCloneCanvas@@QAEHPAVifc_canvas@@@Z
?clone@RegionI@@QAEPAVapi_region@@XZ
?cloneDC@DCBltCanvas@@QAEHPAUHDC__@@PAUtagRECT@@PAVBaseWnd@@@Z
?cloneDC@DCCanvas@@QAEHPAUHDC__@@PAVBaseWnd@@@Z
?colorToColor@Canvas@@QAEXKKPAUtagRECT@@@Z
?commitDC@DCBltCanvas@@QAEHXZ
?createCompatible@MemCanvas@@QAEHPAVCanvas@@@Z
?debug@Canvas@@QAEXXZ
?debug@RegionI@@QAEXH@Z
?delRef@RegionServerI@@UAEXPAX@Z
?deoptimize@RegionI@@AAEXXZ
?disposeClone@RegionI@@QAEXPAVapi_region@@@Z
?disposeSkinBitmap@BltCanvas@@QAEXPAVSkinBitmap@@@Z
?doesIntersectRect@RegionI@@QAEHPBUtagRECT@@@Z
?doesIntersectRgn@RegionI@@QAEHPBVapi_region@@@Z
?drawRect@Canvas@@QAEXPBUtagRECT@@HKH@Z
?drawSysObject@Canvas@@QAEXPBUtagRECT@@HH@Z
?empty@RegionI@@QAEXXZ
?enclosed@RegionI@@QAEHPBVapi_region@@PAV2@@Z
?ensureFiltered@FilteredColor@@AAEXXZ
?enter@DDSurfaceCanvas@@QAEXXZ
?enumRect@RegionI@@QAEHHPAUtagRECT@@@Z
?equals@RegionI@@QAEHPBVapi_region@@@Z
?exit@DDSurfaceCanvas@@QAEXXZ
?fillBits@BltCanvas@@QAEXK@Z
?fillRect@Canvas@@QAEXPBUtagRECT@@K@Z
?fillRectAlpha@Canvas@@QAEXPBUtagRECT@@KH@Z
?fillRgn@Canvas@@QAEXPAVRegionI@@K@Z
?getAlpha@SkinBitmap@@QBEHXZ
?getBaseWnd@Canvas@@UAEPAVBaseWnd@@XZ
?getBitmap@AutoSkinBitmap@@QAEPAVSkinBitmap@@XZ
?getBitmap@BltCanvas@@QAEPAUHBITMAP__@@XZ
?getBitmapName@AutoSkinBitmap@@QAEPB_WXZ
?getBitmapName@SkinBitmap@@QAEPB_WXZ
?getBits@BltCanvas@@QAEPAXXZ
?getBits@Canvas@@QAEPAXXZ
?getBits@PaintBltCanvas@@QAEPAXXZ
?getBits@SkinBitmap@@UAEPAXXZ
?getBox@RegionI@@QAEXPAUtagRECT@@@Z
?getBpp@SkinBitmap@@QBEHXZ
?getClipBox@Canvas@@QAEHPAUtagRECT@@@Z
?getClipRgn@Canvas@@QAEHPAVapi_region@@@Z
?getColor@FilteredColor@@QAEKXZ
?getColorName@FilteredColor@@UAEPB_WXZ
?getColorName@SkinColor@@UAEPB_WXZ
?getColorRef@FilteredColor@@QAEPAKXZ
?getDim@Canvas@@QAE_NPAH00@Z
?getEventType@AutoSkinBitmap@@IAEKXZ
?getFontInfo@Canvas@@IAEPBUFontInfo@Wasabi@@XZ
?getFullHeight@SkinBitmap@@QBEHXZ
?getFullWidth@SkinBitmap@@QBEHXZ
?getHDC@Canvas@@QAEPAUHDC__@@XZ
?getHeight@AutoSkinBitmap@@QAEHXZ
?getHeight@SkinBitmap@@QBEHXZ
?getNumRects@RegionI@@QAEHXZ
?getNumRefs@RegionServerI@@UAEHXZ
?getOSHandle@RegionI@@QAEPAUHRGN__@@XZ
?getOffsets@Canvas@@QAEXPAH0@Z
?getPenColor@Canvas@@QAEKXZ
?getPenStyle@Canvas@@QAEHXZ
?getPenWidth@Canvas@@QAEHXZ
?getPixel@SkinBitmap@@QAEKHH@Z
?getRcPaint@PaintBltCanvas@@QAEXPAUtagRECT@@@Z
?getRcPaint@PaintCanvas@@QAEXPAUtagRECT@@@Z
?getResamplingMode@AutoSkinBitmap@@QAEHXZ
?getRootWnd@Canvas@@QAEPAVifc_window@@XZ
?getSkinBitmap@BltCanvas@@QAEPAVSkinBitmap@@XZ
?getSystemFontScale@Canvas@@QAENXZ
?getTextAlign@Canvas@@QAEHXZ
?getTextAntialias@Canvas@@QAEHXZ
?getTextBkColor@Canvas@@QAEKXZ
?getTextBold@Canvas@@QAEHXZ
?getTextColor@Canvas@@QAEKXZ
?getTextExtent@Canvas@@QAEXPB_WPAH1PBUFontInfo@Wasabi@@@Z
?getTextFont@Canvas@@QAEPB_WXZ
?getTextHeight@Canvas@@QAEHPBUFontInfo@Wasabi@@@Z
?getTextHeight@Canvas@@QAEHPB_WPBUFontInfo@Wasabi@@@Z
?getTextItalic@Canvas@@QAEHXZ
?getTextOpaque@Canvas@@QAEHXZ
?getTextSize@Canvas@@QAEHXZ
?getTextUnderline@Canvas@@QAEHXZ
?getTextWidth@Canvas@@QAEHPB_WPBUFontInfo@Wasabi@@@Z
?getWidth@AutoSkinBitmap@@QAEHXZ
?getWidth@SkinBitmap@@QBEHXZ
?getX@SkinBitmap@@QBEHXZ
?getXOffset@Canvas@@QBEHXZ
?getY@SkinBitmap@@QBEHXZ
?getYOffset@Canvas@@QBEHXZ
?hflip@BltCanvas@@QAEXH@Z
?init@Blenders@@SAXXZ
?init@RegionI@@AAEXXZ
?intersectRect@RegionI@@QAEHPBUtagRECT@@PAVapi_region@@@Z
?intersectRgn@RegionI@@QAEHPBVapi_region@@PAV2@@Z
?isEmpty@RegionI@@QAEHXZ
?isFixedCoords@Canvas@@QAE_NXZ
?isInvalid@SkinBitmap@@QAEHXZ
?isRect@RegionI@@QAEHXZ
?isready@DDSurfaceCanvas@@QAEHXZ
?iteratorValid@SkinColor@@QAEHXZ
?lineDraw@Canvas@@QAEXHHHH@Z
?lineTo@Canvas@@QAEXHH@Z
?makeAlpha@BltCanvas@@QAEXH@Z
?makeSkinBitmap@BltCanvas@@QAEPAVSkinBitmap@@XZ
?makeWindowRegion@RegionI@@QAEPAUHRGN__@@XZ
?maskColor@BltCanvas@@QAEXKK@Z
?mmx_available@Blenders@@2HA
?moveTo@Canvas@@QAEXHH@Z
?notify@AutoSkinBitmap@@IAEHHHH@Z
?offset@RegionI@@QAEXHH@Z
?offsetRect@Canvas@@QAEXPAUtagRECT@@@Z
?optimize@RegionI@@AAEXXZ
?popPen@Canvas@@QAEXXZ
?premultiply@Canvas@@SAXPAKHH@Z
?ptInRegion@RegionI@@QAE_NPBUtagPOINT@@@Z
?pushPen@Canvas@@QAEXHHK@Z
?pushPen@Canvas@@QAEXK@Z
?reload@AutoSkinBitmap@@QAEXXZ
?reset@AutoSkinBitmap@@QAEXXZ
?scale@RegionI@@QAEXNN_N@Z
?selectClipRgn@Canvas@@QAEXPAVapi_region@@@Z
?setBaseWnd@Canvas@@QAEXPAVBaseWnd@@@Z
?setBitmap@AutoSkinBitmap@@QAEHH@Z
?setBitmap@AutoSkinBitmap@@QAEPB_WPB_W@Z
?setColor@FilteredColor@@UAEXK@Z
?setColor@SkinColor@@UAEXK@Z
?setColorGroup@FilteredColor@@UAEXPB_W@Z
?setElementName@SkinColor@@QAEXPB_W@Z
?setHInstance@AutoSkinBitmap@@QAEXPAUHINSTANCE__@@@Z
?setHInstanceBitmapColorGroup@AutoSkinBitmap@@QAEXPB_W@Z
?setHasAlpha@SkinBitmap@@QAEXH@Z
?setOrigDC@DCBltCanvas@@QAEHPAUHDC__@@@Z
?setRect@RegionI@@QAEXPBUtagRECT@@@Z
?setResamplingMode@AutoSkinBitmap@@QAEXH@Z
?skincb_onReset@AutoSkinBitmap@@IAEHXZ
?stretch@Canvas@@QAEXPAVifc_canvas@@HHHH@Z
?stretch@SkinBitmap@@QAEXPAVifc_canvas@@HHHH@Z
?stretchRectToRect@SkinBitmap@@QAEXPAVifc_canvas@@PAUtagRECT@@1@Z
?stretchToRect@AutoSkinBitmap@@QAEXPAVifc_canvas@@PAUtagRECT@@@Z
?stretchToRect@SkinBitmap@@QAEXPAVifc_canvas@@PAUtagRECT@@@Z
?stretchToRectAlpha@AutoSkinBitmap@@QAEXPAVifc_canvas@@PAUtagRECT@@1H@Z
?stretchToRectAlpha@AutoSkinBitmap@@QAEXPAVifc_canvas@@PAUtagRECT@@H@Z
?stretchToRectAlpha@Canvas@@QAEXPAVifc_canvas@@PAUtagRECT@@1H@Z
?stretchToRectAlpha@SkinBitmap@@QAEXPAVifc_canvas@@PAUtagRECT@@1H@Z
?stretchToRectAlpha@SkinBitmap@@QAEXPAVifc_canvas@@PAUtagRECT@@H@Z
?stretchblit@Canvas@@QAEXHHHHPAV1@HHHH@Z
?subtractRect@RegionI@@QAEXPBUtagRECT@@@Z
?subtractRegion@RegionI@@QAEXPBVapi_region@@@Z
?textOut@Canvas@@QAEXHHHHPB_WPBUFontInfo@Wasabi@@@Z
?textOut@Canvas@@QAEXHHPB_WPBUFontInfo@Wasabi@@@Z
?textOutCentered@Canvas@@QAEXPAUtagRECT@@PB_WPBUFontInfo@Wasabi@@@Z
?textOutEllipsed@Canvas@@QAEXHHHHPB_WPBUFontInfo@Wasabi@@@Z
?textOutWrapped@Canvas@@QAEXHHHHPB_WPBUFontInfo@Wasabi@@@Z
?textOutWrappedPathed@Canvas@@QAEXHHHPB_WPBUFontInfo@Wasabi@@@Z
?v@SkinColor@@QAEKK@Z
?vflip@BltCanvas@@QAEXH@Z
Init
Quit

Sections

.text
Size: 56KB - Virtual size: 55KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 22KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 66KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Plugins/vis_avs.dll
.dll windows:4 windows x86 arch:x86

b22503e9a91679580d9ee73befd57c02

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

TerminateThread
Sleep
GetModuleFileNameA
GetVersion
CreateDirectoryA
GetPrivateProfileIntA
WritePrivateProfileStringA
WaitForMultipleObjects
lstrcpynA
SetCurrentDirectoryA
GetCurrentDirectoryA
LoadLibraryA
GetProcAddress
MulDiv
VirtualFree
VirtualAlloc
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSection
DeleteCriticalSection
GlobalAlloc
GetTickCount
DisableThreadLibraryCalls
FindFirstFileA
FindNextFileA
FindClose
GetSystemTimeAsFileTime
GetCurrentThreadId
GetThreadPriority
GetCurrentThread
SetThreadPriority
WaitForSingleObject
CreateEventA
CreateThread
GetFileSize
ReadFile
CreateFileA
WriteFile
CloseHandle
SetEvent
lstrcmpiA
FreeLibrary
ExitProcess
GlobalFree
GetPrivateProfileStringA

user32

GetDlgItemInt
CreatePopupMenu
InsertMenuItemA
GetWindowRect
SetDlgItemInt
GetCursorPos
GetWindowTextA
SetWindowTextA
LoadImageA
ShowWindow
SendMessageTimeoutA
PostMessageA
IsWindow
InvalidateRect
SetDlgItemTextA
KillTimer
TrackPopupMenu
DestroyMenu
DrawTextA
SetTimer
SendMessageA
GetAsyncKeyState
SendDlgItemMessageA
GetDlgItemTextA
CheckDlgButton
GetDlgItem
EnableWindow
IsDlgButtonChecked
CreateDialogParamA
GetDC
wsprintfA
DialogBoxParamA
EndDialog
ReleaseDC
FindWindowA
DestroyWindow
MessageBoxA
PtInRect
PostQuitMessage
UpdateWindow
CheckMenuItem
UnregisterClassA
SetParent
ShowCursor
CharPrevA
BeginPaint
GetClientRect
EndPaint
ReleaseCapture
SetSysColors
SystemParametersInfoA
RegisterClassA
GetSysColor
GetSystemMetrics
SetForegroundWindow
CreateWindowExA
CallWindowProcA
GetClassNameA
GetWindowLongA
GetParent
SetCursor
SetCapture
LoadCursorA
SetWindowPos
SetWindowLongA
ScreenToClient
GetMenuItemCount
GetMenuItemInfoA
IsWindowVisible
SetFocus
EnableMenuItem
ClientToScreen
EnumDisplaySettingsA
DefWindowProcA

gdi32

SelectObject
CreateCompatibleBitmap
GetDIBits
DeleteObject
Rectangle
CreateBrushIndirect
CreatePen
GetObjectA
StretchBlt
SetStretchBltMode
CreateSolidBrush
SetBkColor
SetBkMode
SetTextColor
CreateFontIndirectA
SetDIBits
GetTextExtentPoint32A
GetStockObject
BitBlt
CreateCompatibleDC
DeleteDC

comdlg32

GetOpenFileNameA
GetSaveFileNameA
ChooseFontA
ChooseColorA

advapi32

RegSetValueExA
RegQueryValueExA
RegOpenKeyA

shell32

DragQueryFileA
DragFinish

ddraw

DirectDrawCreate

msvfw32

DrawDibDraw
DrawDibClose
DrawDibOpen

avifil32

AVIFileInit
AVIStreamGetFrameClose
AVIFileExit
AVIStreamRelease
AVIStreamGetFrameOpen
AVIStreamGetFrame
AVIStreamLength
AVIStreamOpenFromFileA

msvcrt

_initterm
strncmp
_adjust_fdiv
_endthreadex
_except_handler3
_beginthreadex
__mb_cur_max
_isctype
atof
strncpy
calloc
_pctype
toupper
free
malloc
fabs
asin
realloc
atan
acos
atan2
pow
exp
floor
ceil
strlen
memcpy
strstr
sprintf
atoi
_itoa
memmove
time
srand
rand
_ftol
??2@YAPAXI@Z
??3@YAXPAX@Z
_purecall
_strnicmp
_strcmpi
_stricmp

Exports

Exports

winampVisGetHeader

Sections

.text
Size: 276KB - Virtual size: 272KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 32KB - Virtual size: 124KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 52KB - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 20KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Plugins/vis_nsfs.dll
.dll windows:5 windows x86 arch:x86

2d209f76ff5ee84b3ee7e3cc8808a04f

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

f:\sandbox\20131120_103959\vis_nsfs\Release\vis_nsfs.pdb

Imports

ddraw

DirectDrawCreate

kernel32

InterlockedExchange
GlobalAlloc
GlobalFree
Sleep
WritePrivateProfileStringW
GetPrivateProfileIntW
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
QueryPerformanceCounter
DisableThreadLibraryCalls
InterlockedCompareExchange
VirtualQuery
GetPrivateProfileStructW
WritePrivateProfileStructW
MulDiv
GetVersionExA
GetTickCount

user32

EndPaint
SetTimer
PostQuitMessage
CharNextW
DrawTextW
CharPrevW
wsprintfA
BeginPaint
GetDC
InvalidateRect
GetWindowTextW
CreateWindowExA
ReleaseDC
DefWindowProcA
CheckDlgButton
IsDlgButtonChecked
PostMessageA
RegisterClassW
SetWindowTextA
DestroyWindow
GetDlgItemInt
SendDlgItemMessageA
RegisterWindowMessageW
IsIconic
UnregisterClassW
SetForegroundWindow
GetClientRect
SendMessageA
PtInRect
wsprintfW
ShowCursor
SetDlgItemInt
MessageBoxA
GetWindowLongW
GetDlgItem
SetWindowLongW
EndDialog
ShowWindow
SendMessageW
MapWindowPoints
SetCursor

gdi32

DeleteObject
SelectObject
Rectangle
SetBkMode
GetStockObject
CreateSolidBrush
SetTextColor
SetBkColor
CreateFontW
GetDeviceCaps

comdlg32

ChooseColorW

msvcr90

__dllonexit
__clean_type_info_names_internal
__CppXcptFilter
_adjust_fdiv
_amsg_exit
_initterm_e
_initterm
_decode_pointer
_encoded_null
free
_malloc_crt
_encode_pointer
_lock
_onexit
_CIsqrt
_except_handler4_common
_crt_debugger_hook
_CItan
memset
_CIsin
_CIcos
memcpy
_CIatan2
_unlock
_CIatan

Exports

Exports

winampVisGetHeader

Sections

.text
Size: 19KB - Virtual size: 19KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Plugins/winampFLV.swf
System/UnicodeTaskbarFix.w5s
.dll windows:5 windows x86 arch:x86

98ec545a6351a3625be56e5e57eb322f

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

d:\Dev\git_dro\winamp-plug-ins\UnicodeTaskbarFix\ReleaseUnicodeTaskbarFix.pdb

Imports

shlwapi

PathStripPathW

kernel32

MultiByteToWideChar
IsDebuggerPresent
VirtualQuery
GetVersionExW
lstrcmpiA
VirtualProtect
GetModuleHandleW
lstrcpynW
TerminateProcess
DisableThreadLibraryCalls
lstrcmpiW
GetCurrentThreadId
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess

user32

SetWindowLongW
IsWindow
GetWindow
EnumThreadWindows
GetClassNameW
SetWindowLongA

msvcr90

??2@YAPAXI@Z
_crt_debugger_hook
?_type_info_dtor_internal_method@type_info@@QAEXXZ
?terminate@@YAXXZ
??3@YAXPAX@Z
__CxxFrameHandler3
free
_wcsnicmp
malloc
_unlock
__dllonexit
_encode_pointer
_lock
_onexit
_decode_pointer
_except_handler4_common

Exports

Exports

GetWinamp5SystemComponent

Sections

.text
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 944B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 570B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
System/aacdec.w5s
.dll windows:5 windows x86 arch:x86

e34e348d4dac19d6ba3f74a3af405a52

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

f:\sandbox\20131120_103959\aacdec\Release\aacdec.pdb

Imports

nsutil

nsutil_pcm_FloatToInt_Interleaved_Gain

msvcr90

_initterm_e
_amsg_exit
_adjust_fdiv
__CppXcptFilter
_initterm
__clean_type_info_names_internal
_crt_debugger_hook
_encoded_null
free
_malloc_crt
_decode_pointer
_onexit
_lock
_encode_pointer
__CxxFrameHandler3
__dllonexit
_unlock
??2@YAPAXI@Z
??3@YAXPAX@Z
_purecall
vsprintf
_except_handler4_common
memset
memcpy
memmove
_CIpow
_CIsin
_CIsqrt
_CIacos
_CIexp
_CIcos
_CIatan2
_CIatan
_CIlog
ceil
_CItan
malloc
floor
strncmp
strrchr

kernel32

GetCurrentProcessId
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
DisableThreadLibraryCalls
InterlockedCompareExchange
Sleep
InterlockedExchange

Exports

Exports

GetWinamp5SystemComponent

Sections

.text
Size: 426KB - Virtual size: 425KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 358KB - Virtual size: 358KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 103KB - Virtual size: 109KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
System/aacdec.wbm
System/adpcm.w5s
.dll windows:5 windows x86 arch:x86

d2b8fffc14754673c14f5c72904b3cef

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

f:\sandbox\20131120_103959\adpcm\Release\adpcm.pdb

Imports

msvcr90

_adjust_fdiv
__CppXcptFilter
_amsg_exit
?_type_info_dtor_internal_method@type_info@@QAEXXZ
_except_handler4_common
__clean_type_info_names_internal
_crt_debugger_hook
_initterm_e
_initterm
_encoded_null
free
_malloc_crt
_decode_pointer
_onexit
_lock
_encode_pointer
__dllonexit
_unlock
_purecall
??2@YAPAXI@Z
?terminate@@YAXXZ
??3@YAXPAX@Z

kernel32

SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
DisableThreadLibraryCalls
InterlockedCompareExchange
Sleep
InterlockedExchange
IsDebuggerPresent

Exports

Exports

GetWinamp5SystemComponent

Sections

.text
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
System/adpcm.wbm
System/alac.w5s
.dll windows:5 windows x86 arch:x86

569ffb797fc822eaea3b3a905ebc5579

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

msvcr90

__CppXcptFilter
?terminate@@YAXXZ
_adjust_fdiv
_except_handler4_common
__clean_type_info_names_internal
_crt_debugger_hook
_amsg_exit
_initterm_e
_initterm
_encoded_null
_malloc_crt
_decode_pointer
_onexit
_lock
_encode_pointer
__dllonexit
_unlock
_purecall
??3@YAXPAX@Z
??2@YAPAXI@Z
strcmp
fprintf
memset
__iob_func
malloc
free
?_type_info_dtor_internal_method@type_info@@QAEXXZ
memcpy

kernel32

SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
DisableThreadLibraryCalls
InterlockedCompareExchange
Sleep
RaiseException
LoadLibraryA
GetLastError
InterlockedExchange
FreeLibrary
GetProcAddress
LocalAlloc
IsDebuggerPresent

Exports

Exports

GetWinamp5SystemComponent

Sections

.text
Size: 15KB - Virtual size: 14KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 950B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
System/alac.wbm
System/albumart.w5s
.dll windows:5 windows x86 arch:x86

423354ab79f5118fabdfa8073f568292

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

f:\sandbox\20131120_103959\albumart\Release\albumart.pdb

Imports

shlwapi

PathCombineW
PathIsURLW
PathRemoveFileSpecW
PathRemoveExtensionW

kernel32

UnhandledExceptionFilter
TerminateProcess
GetSystemTimeAsFileTime
IsDebuggerPresent
SetUnhandledExceptionFilter
GetFileSize
FindFirstFileW
MapViewOfFile
UnmapViewOfFile
CopyFileW
lstrcpynW
ReadFile
CreateFileW
FindClose
CreateFileMappingW
FindNextFileW
CloseHandle
DeleteFileW
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
DisableThreadLibraryCalls
InterlockedCompareExchange
Sleep
InterlockedExchange
GetCurrentProcess

msvcr90

_wtoi
free
_wcsdup
_purecall
_unlock
__CxxFrameHandler3
_encode_pointer
_lock
_onexit
_decode_pointer
_malloc_crt
_encoded_null
_initterm
_initterm_e
_amsg_exit
_adjust_fdiv
__CppXcptFilter
?terminate@@YAXXZ
?_type_info_dtor_internal_method@type_info@@QAEXXZ
_except_handler4_common
__clean_type_info_names_internal
_crt_debugger_hook
fclose
fwrite
??3@YAXPAX@Z
_vsnwprintf
wcsstr
_wfopen
wcsncpy
_wcsicmp
memcpy
memset
??2@YAPAXI@Z
__dllonexit

Exports

Exports

GetWinamp5SystemComponent

Sections

.text
Size: 17KB - Virtual size: 17KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
System/auth.w5s
.dll windows:5 windows x86 arch:x86

3176ef1e5e46acf78ec1c45e359f65bb

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

f:\sandbox\20131120_103959\auth\Release\auth.pdb

Imports

shlwapi

PathIsURLW
PathRemoveFileSpecW
PathAppendW
ColorAdjustLuma
StrToIntExW
ColorRGBToHLS
ColorHLSToRGB
PathFindNextComponentW
PathCombineW

rpcrt4

RpcStringFreeA
UuidToStringA
UuidFromStringW
UuidFromStringA

urlmon

IsValidURL

wininet

InternetCanonicalizeUrlW

comctl32

ImageList_Remove
ImageList_GetImageCount
ImageList_Create
ImageList_Destroy
ImageList_GetIconSize
ImageList_Add
ImageList_DrawIndirect

kernel32

InterlockedIncrement
InterlockedDecrement
InitializeCriticalSection
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
GetFileSize
FreeResource
FindResourceW
LoadResource
LoadLibraryExW
SizeofResource
ReadFile
CreateFileW
LockResource
CloseHandle
WaitForSingleObject
WaitForSingleObjectEx
CompareStringA
GetPrivateProfileIntA
GetPrivateProfileStringA
WritePrivateProfileStringA
OutputDebugStringA
FreeLibrary
LoadLibraryW
GlobalAddAtomW
GetStringTypeW
CopyFileW
GetFileSizeEx
GetCurrentProcess
SetEvent
CreateEventW
DuplicateHandle
ResumeThread
CreateThread
GetSystemTime
WritePrivateProfileSectionA
GetShortPathNameW
Sleep
GetSystemTimeAsFileTime
GetCurrentProcessId
DisableThreadLibraryCalls
InterlockedCompareExchange
InterlockedExchange
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
GlobalLock
GetTickCount
GetStringTypeExW
lstrlenW
GlobalUnlock
WideCharToMultiByte
MultiByteToWideChar
GetLastError
QueryPerformanceCounter
SleepEx
GetCurrentThreadId
QueryPerformanceFrequency
lstrlenA
SetErrorMode
SystemTimeToFileTime
CreateDirectoryW
GetModuleHandleW
GetVersionExW
MulDiv
CompareStringW
SetLastError
GetProcAddress

user32

SetWindowsHookExW
CallNextHookEx
DefDlgProcW
IsChild
KillTimer
SetTimer
UnhookWindowsHookEx
GetWindowThreadProcessId
SetWindowTextW
GetMenuItemID
SetCapture
TrackMouseEvent
WindowFromPoint
PtInRect
InsertMenuItemW
GetCapture
DrawFocusRect
InflateRect
OffsetRect
GetMenuItemRect
IntersectRect
GetMenuState
GetCursorPos
CreatePopupMenu
WindowFromDC
SetMenuInfo
GetMenuItemCount
GetMenuInfo
EqualRect
ReleaseCapture
DestroyMenu
MonitorFromRect
SetWindowRgn
GetClassInfoW
GetWindowRgn
EnumChildWindows
CreateWindowExW
RegisterClassW
GetNextDlgTabItem
EndPaint
DestroyWindow
MapDialogRect
FillRect
ReplyMessage
GetFocus
IsWindowEnabled
GetClientRect
SetRectEmpty
BeginPaint
DefWindowProcW
CallWindowProcW
GetPropW
TrackPopupMenuEx
EnableMenuItem
MonitorFromWindow
EndDialog
RedrawWindow
GetSysColor
ShowWindow
GetSysColorBrush
BeginDeferWindowPos
GetSystemMetrics
IsWindowVisible
MapWindowPoints
UpdateWindow
EnableWindow
EndDeferWindowPos
DrawFrameControl
GetMonitorInfoW
IsRectEmpty
GetAncestor
SetCursor
GetWindowRect
DrawTextW
LoadCursorW
MessageBeep
SetRect
SystemParametersInfoW
GetDCEx
ReleaseDC
GetDlgItem
DeferWindowPos
CopyRect
RegisterWindowMessageW
PostMessageW
SetWindowPos
CharUpperBuffW
GetWindowTextLengthW
MapVirtualKeyW
RemovePropW
CharNextW
CharPrevW
GetDoubleClickTime
SetPropW
GetAsyncKeyState
SetWindowLongA
InvalidateRect
GetWindowLongW
GetWindowTextW
IsWindowUnicode
SetWindowLongW
DefWindowProcA
IsWindow
SendMessageW
CallWindowProcA
GetSubMenu

gdi32

CreateCompatibleDC
DeleteObject
StretchBlt
CreateDIBSection
DeleteDC
GdiAlphaBlend
FillRgn
ExtSelectClipRgn
CreateRoundRectRgn
GetBkColor
OffsetRgn
SetStretchBltMode
GetObjectW
GetTextExtentPoint32W
GetTextMetricsW
SelectObject
GetTextExtentPointA
CreateRectRgn
SetViewportOrgEx
SelectClipRgn
GetDCBrushColor
GetClipRgn
GetDeviceCaps
CreateFontIndirectW
SetTextAlign
GdiGradientFill
CreatePatternBrush
GetTextExtentPointW
SetTextColor
SetBkMode
GetCurrentObject
SetBrushOrgEx
SetBkColor
SetRectRgn
CreateRectRgnIndirect
CombineRgn
RectInRegion
CreateCompatibleBitmap
ExtTextOutW
BitBlt

shell32

ShellExecuteW

ole32

ReleaseStgMedium
OleGetClipboard

oleaut32

SysAllocString
VariantInit
SysFreeString

msvcr90

??_V@YAXPAX@Z
??_U@YAPAXI@Z
_time64
wcstoul
_purecall
_wcsdup
wcscmp
labs
memmove
sqrt
_vsnprintf
_vsnwprintf
abs
??2@YAPAXI@Z
??3@YAXPAX@Z
memcmp
realloc
_msize
memcpy
memset
malloc
free
wcschr
_atoi64
strlen
_strdup
isxdigit
strstr
?terminate@@YAXXZ
_unlock
__dllonexit
_encode_pointer
_onexit
_decode_pointer
_malloc_crt
_encoded_null
_initterm
_initterm_e
_amsg_exit
_adjust_fdiv
__CppXcptFilter
?_type_info_dtor_internal_method@type_info@@QAEXXZ
_except_handler4_common
__clean_type_info_names_internal
_crt_debugger_hook
_lock
__CxxFrameHandler3

Exports

Exports

GetWinamp5SystemComponent

Sections

.text
Size: 119KB - Virtual size: 118KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 21KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
System/bmp.w5s
.dll windows:5 windows x86 arch:x86

2de40877667c682fd06e62186b3564d5

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

f:\sandbox\20131120_103959\bmp\Release\bmp.pdb

Imports

kernel32

SetUnhandledExceptionFilter
lstrcpynW
GetTempPathW
GetTempFileNameW
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
DisableThreadLibraryCalls
InterlockedCompareExchange
Sleep
InterlockedExchange
IsDebuggerPresent

user32

LoadImageW

gdi32

CreateCompatibleDC
BitBlt
DeleteDC
CreateDIBSection
DeleteObject
SelectObject
GetObjectW

zlib

inflateInit_
inflateReset
inflate
inflateEnd

msvcr90

_wunlink
fwrite
abs
fclose
free
malloc
wcslen
__dllonexit
_encode_pointer
_lock
_onexit
_decode_pointer
_malloc_crt
_encoded_null
_initterm
_initterm_e
_amsg_exit
_adjust_fdiv
__CppXcptFilter
_except_handler4_common
?terminate@@YAXXZ
?_type_info_dtor_internal_method@type_info@@QAEXXZ
__clean_type_info_names_internal
_crt_debugger_hook
_wfopen
_wcsicmp
??2@YAPAXI@Z
??3@YAXPAX@Z
memset
memcpy
_unlock

Exports

Exports

GetWinamp5SystemComponent

Sections

.text
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
System/devices.w5s
.dll windows:5 windows x86 arch:x86

ff9adbccafc7ae35ca4c4fd5abad65a0

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

f:\sandbox\20131120_103959\devices\Release\devices.pdb

Imports

shlwapi

PathCombineW
PathIsRelativeW

kernel32

IsDebuggerPresent
UnhandledExceptionFilter
GetCurrentProcess
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InterlockedIncrement
InterlockedDecrement
CompareStringW
lstrlenA
CompareStringA
lstrlenW
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
InterlockedCompareExchange
Sleep
InterlockedExchange
SetUnhandledExceptionFilter

msvcr90

__dllonexit
_encode_pointer
_unlock
_onexit
__CxxFrameHandler3
_malloc_crt
_encoded_null
_initterm
_initterm_e
_amsg_exit
_adjust_fdiv
__CppXcptFilter
?terminate@@YAXXZ
?_type_info_dtor_internal_method@type_info@@QAEXXZ
_except_handler4_common
__clean_type_info_names_internal
_crt_debugger_hook
qsort
bsearch_s
malloc
_purecall
??2@YAPAXI@Z
??3@YAXPAX@Z
free
memmove
memset
memcpy
_lock
_decode_pointer

Exports

Exports

GetWinamp5SystemComponent

Sections

.text
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
System/dlmgr.w5s
.dll windows:5 windows x86 arch:x86

fd4fc97a17c79b2ad196559e5ddcdeee

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

f:\sandbox\20131120_103959\dlmgr\Release\dlmgr.pdb

Imports

kernel32

GetTempFileNameW
InterlockedIncrement
InterlockedDecrement
WaitForSingleObject
SetEvent
GetTickCount
WriteFile
InitializeCriticalSection
WideCharToMultiByte
CreateEventA
LeaveCriticalSection
CreateFileW
GetTempPathW
EnterCriticalSection
DeleteCriticalSection
CloseHandle
DeleteFileW
SetWaitableTimer
CreateWaitableTimerA
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
QueryPerformanceCounter
DisableThreadLibraryCalls
InterlockedCompareExchange
Sleep
IsDebuggerPresent
InterlockedExchange

msvcr90

__dllonexit
_encode_pointer
_lock
_onexit
_decode_pointer
_malloc_crt
_encoded_null
_initterm
_initterm_e
_amsg_exit
_adjust_fdiv
__CppXcptFilter
?terminate@@YAXXZ
?_type_info_dtor_internal_method@type_info@@QAEXXZ
_except_handler4_common
__clean_type_info_names_internal
_crt_debugger_hook
_unlock
??2@YAPAXI@Z
realloc
??3@YAXPAX@Z
_vsnprintf
strcpy_s
strstr
strlen
malloc
free
memcpy
memmove
__CxxFrameHandler3
memset

Exports

Exports

GetWinamp5SystemComponent

Sections

.text
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
System/f263.w5s
.dll windows:5 windows x86 arch:x86

c455a9d69d9845c6d4dce305b452fbe5

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

f:\sandbox\20131120_103959\f263\Release\f263.w5s.pdb

Imports

msvcr90

_initterm
_initterm_e
_amsg_exit
_adjust_fdiv
__CppXcptFilter
_encoded_null
?terminate@@YAXXZ
?_type_info_dtor_internal_method@type_info@@QAEXXZ
_except_handler4_common
__clean_type_info_names_internal
_crt_debugger_hook
_malloc_crt
_decode_pointer
_onexit
_lock
_encode_pointer
__dllonexit
_unlock
exit
malloc
free
strcmp
_purecall
??2@YAPAXI@Z
??3@YAXPAX@Z

kernel32

SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
DisableThreadLibraryCalls
InterlockedCompareExchange
Sleep
InterlockedExchange
IsDebuggerPresent

Exports

Exports

GetWinamp5SystemComponent

Sections

.text
Size: 18KB - Virtual size: 17KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 27KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
System/f263.wbm
System/filereader.w5s
.dll windows:5 windows x86 arch:x86

692b6df107c4559e66c53c25cbbd648f

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

f:\sandbox\20131120_103959\filereader\Release\filereader.pdb

Imports

shlwapi

StrStrIA

kernel32

SetUnhandledExceptionFilter
IsDebuggerPresent
WideCharToMultiByte
Sleep
FindResourceA
FreeResource
LoadResource
SizeofResource
lstrcpynW
LockResource
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
DisableThreadLibraryCalls
InterlockedCompareExchange
InterlockedExchange
UnhandledExceptionFilter

msvcr90

??2@YAPAXI@Z
memcpy
_wtoi
_strdup
__CxxFrameHandler3
__dllonexit
_encode_pointer
_lock
_onexit
_decode_pointer
_malloc_crt
_encoded_null
_initterm
_initterm_e
_amsg_exit
_adjust_fdiv
__CppXcptFilter
?terminate@@YAXXZ
?_type_info_dtor_internal_method@type_info@@QAEXXZ
_except_handler4_common
__clean_type_info_names_internal
_crt_debugger_hook
??3@YAXPAX@Z
atoi
strstr
strlen
malloc
_wcsnicmp
_strtoui64
free
_strnicmp
sprintf
_wtoi64
_unlock

Exports

Exports

GetWinamp5SystemComponent

Sections

.text
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 906B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
System/gif.w5s
.dll windows:5 windows x86 arch:x86

c1a25add55f504e815c8ebcc3ea8f7c4

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

f:\sandbox\20131120_103959\gif\Release\gif.pdb

Imports

kernel32

lstrcpynW
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
DisableThreadLibraryCalls
InterlockedCompareExchange
Sleep
InterlockedExchange
IsDebuggerPresent

msvcr90

fwrite
calloc
qsort
__iob_func
fprintf
_unlock
__dllonexit
_encode_pointer
_lock
_onexit
_malloc_crt
_encoded_null
_initterm
_initterm_e
_amsg_exit
_adjust_fdiv
__CppXcptFilter
_except_handler4_common
?terminate@@YAXXZ
?_type_info_dtor_internal_method@type_info@@QAEXXZ
__clean_type_info_names_internal
_crt_debugger_hook
strlen
fclose
realloc
fread
memset
malloc
free
wcslen
strncmp
_wcsicmp
memcpy
??2@YAPAXI@Z
??3@YAXPAX@Z
_decode_pointer

Exports

Exports

GetWinamp5SystemComponent

Sections

.text
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 1010B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
System/h264.w5s
.dll windows:5 windows x86 arch:x86

7d8a0d16d18119993382da9dc6bad864

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

f:\sandbox\20131120_103959\h264\Release IPP\h264.pdb

Imports

ws2_32

htonl
htons

msvcr90

_onexit
_decode_pointer
_malloc_crt
_encoded_null
_initterm
_initterm_e
_amsg_exit
_lock
__CppXcptFilter
_except_handler3
?_type_info_dtor_internal_method@type_info@@QAEXXZ
_except_handler4_common
__clean_type_info_names_internal
_crt_debugger_hook
_encode_pointer
__dllonexit
_unlock
fprintf
__iob_func
exit
qsort
_snprintf
printf
_aligned_malloc
_aligned_free
memmove
calloc
_purecall
??2@YAPAXI@Z
??3@YAXPAX@Z
malloc
free
__CxxFrameHandler3
_CIexp
_adjust_fdiv
?terminate@@YAXXZ
memcpy
memset
realloc

kernel32

SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
DisableThreadLibraryCalls
InterlockedCompareExchange
Sleep
LoadLibraryA
GetLastError
InterlockedExchange
FreeLibrary
GetProcAddress
LocalAlloc
RaiseException
IsDebuggerPresent

Exports

Exports

GetWinamp5SystemComponent

Sections

.text
Size: 579KB - Virtual size: 578KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 67KB - Virtual size: 67KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
System/h264.wbm
System/jnetlib.w5s
.dll windows:5 windows x86 arch:x86

a12c03b9541120a956ec6451831b12ca

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

f:\sandbox\20131120_103959\jnetlib\Release\jnetlib.pdb

Imports

kernel32

FlushConsoleInputBuffer
CreateThread
CloseHandle
WaitForSingleObject
LoadLibraryA
GetProcAddress
GetSystemDirectoryA
InterlockedDecrement
InterlockedIncrement
FreeLibrary
lstrcpynA
lstrlenA
InterlockedExchangeAdd
InterlockedExchange
SetLastError
GetVersionExA
GlobalMemoryStatus
GetStdHandle
GetFileType
GetVersion
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
DisableThreadLibraryCalls
InterlockedCompareExchange
Sleep
RaiseException
GetLastError
LocalAlloc

advapi32

CryptAcquireContextA
CryptReleaseContext
RegisterEventSourceA
ReportEventA
DeregisterEventSource
CryptGenRandom

msvcr90

?terminate@@YAXXZ
?_type_info_dtor_internal_method@type_info@@QAEXXZ
_except_handler4_common
__clean_type_info_names_internal
_crt_debugger_hook
__CppXcptFilter
_adjust_fdiv
_amsg_exit
_initterm_e
_initterm
_encoded_null
_malloc_crt
_decode_pointer
_onexit
_lock
_encode_pointer
__dllonexit
_unlock
_time64
_stricmp
sprintf
strncpy_s
strcat_s
realloc
_vsnprintf
strcpy_s
memset
calloc
_stat32
_gmtime32
signal
fputs
sprintf_s
strcat
_purecall
atoi
strcpy
strlen
strncmp
_strnicmp
strtoul
strcspn
_strdup
strcmp
strncpy
strchr
strerror
getenv
wcsstr
vfprintf
_iob
abort
memchr
isdigit
qsort
fprintf
fclose
fread
fwrite
fflush
fopen
_setmode
ftell
fseek
fgets
_errno
isspace
isxdigit
memmove
_time32
strstr
malloc
free
memcpy
_fileno
tolower
isupper
sscanf
_getch

user32

GetDesktopWindow
GetProcessWindowStation
GetUserObjectInformationW
MessageBoxA

Exports

Exports

GetWinamp5SystemComponent

Sections

.text
Size: 386KB - Virtual size: 385KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 129KB - Virtual size: 129KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 58KB - Virtual size: 66KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 1016B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 34KB - Virtual size: 34KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
System/jpeg.w5s
.dll windows:5 windows x86 arch:x86

59775181cea61bd17d62eb7bf828a8fd

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

f:\sandbox\20131120_103959\jpeg\Release\jpeg.pdb

Imports

shlwapi

PathFindExtensionW

kernel32

IsDebuggerPresent
UnhandledExceptionFilter
lstrcpynW
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
DisableThreadLibraryCalls
InterlockedCompareExchange
Sleep
InterlockedExchange
SetUnhandledExceptionFilter

msvcr90

strcmp
memset
sprintf
__iob_func
fprintf
exit
sscanf
getenv
_unlock
__dllonexit
_encode_pointer
_lock
_vsnwprintf
_setjmp3
_malloc_crt
_encoded_null
_initterm
_initterm_e
_amsg_exit
_adjust_fdiv
__CppXcptFilter
_except_handler4_common
?terminate@@YAXXZ
?_type_info_dtor_internal_method@type_info@@QAEXXZ
__clean_type_info_names_internal
_crt_debugger_hook
malloc
free
_wtoi
memcpy
memcmp
_wcsicmp
??2@YAPAXI@Z
??3@YAXPAX@Z
_purecall
longjmp
strlen
__CxxFrameHandler3
_onexit
_decode_pointer

Exports

Exports

GetWinamp5SystemComponent

Sections

.text
Size: 134KB - Virtual size: 133KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
System/mp4v.w5s
.dll windows:5 windows x86 arch:x86

dc1c4a1ce7cc1c0b3fecaf5383750e71

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

f:\sandbox\20131120_103959\mp4v\Release\mp4v.pdb

Imports

ws2_32

htonl

msvcr90

?terminate@@YAXXZ
?_type_info_dtor_internal_method@type_info@@QAEXXZ
__clean_type_info_names_internal
memcpy
__CppXcptFilter
_adjust_fdiv
_amsg_exit
_initterm_e
_initterm
_encoded_null
_malloc_crt
_decode_pointer
_onexit
_lock
_encode_pointer
__dllonexit
_unlock
calloc
puts
_purecall
??2@YAPAXI@Z
??3@YAXPAX@Z
malloc
free
__CxxFrameHandler3
_except_handler4_common
_crt_debugger_hook
realloc
memset

kernel32

SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
DisableThreadLibraryCalls
InterlockedCompareExchange
Sleep
RaiseException
LoadLibraryA
GetLastError
InterlockedExchange
FreeLibrary
GetProcAddress
LocalAlloc
DebugBreak
IsDebuggerPresent

Exports

Exports

GetWinamp5SystemComponent

Sections

.text
Size: 164KB - Virtual size: 164KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 30KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
System/mp4v.wbm
System/ombrowser.w5s
.dll windows:5 windows x86 arch:x86

f79a969e8d761e09123382db2a46002d

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

f:\sandbox\20131120_103959\omBrowser\Release\omBrowser.pdb

Imports

shlwapi

PathFindNextComponentW
PathFileExistsW
PathCommonPrefixW
PathIsURLW
PathFindFileNameW
PathIsRelativeW
ColorAdjustLuma
PathRemoveBlanksW
PathStripPathW
StrCmpNIW
StrStrIW
StrToIntExW
PathFindExtensionW
PathAppendW
PathRemoveFileSpecW
PathIsDirectoryW
SHDeleteKeyW
UrlEscapeW
PathCombineW
PathCanonicalizeW

comctl32

ImageList_Add
ImageList_GetImageCount
ImageList_Create
ImageList_GetIconSize
ImageList_DrawIndirect
ImageList_Destroy

rpcrt4

UuidToStringW
RpcStringFreeW
UuidCreate

wininet

InternetSetOptionW
InternetCanonicalizeUrlW

msimg32

AlphaBlend

urlmon

UrlMkGetSessionOption
UrlMkSetSessionOption

kernel32

GetCurrentThreadId
CloseHandle
GetCurrentProcessId
WaitForSingleObject
GetTickCount
CreateThread
GetCurrentProcess
DuplicateHandle
FindFirstFileW
GetPrivateProfileIntW
CreateEventW
FindNextFileW
CompareStringA
SetFilePointer
ReadFile
CreateFileW
WritePrivateProfileSectionA
GetPrivateProfileIntA
WideCharToMultiByte
MultiByteToWideChar
GetPrivateProfileStringA
WritePrivateProfileStringA
GetShortPathNameW
WaitForSingleObjectEx
DeleteFileW
GlobalDeleteAtom
CreateMutexW
GetModuleHandleW
LoadLibraryW
GetVersionExW
GetProcAddress
ReleaseMutex
GlobalAddAtomW
GetPrivateProfileStringW
WritePrivateProfileStringW
GetStringTypeExW
lstrlenA
GlobalLock
GlobalAlloc
GlobalUnlock
MulDiv
QueueUserAPC
CopyFileW
GetFileSize
FreeResource
LoadResource
SizeofResource
LockResource
SetErrorMode
CreateDirectoryW
InterlockedCompareExchange
Sleep
InterlockedExchange
SetLastError
SetThreadPriority
GetCurrentThread
SetEvent
DeleteCriticalSection
EnterCriticalSection
GetLastError
LeaveCriticalSection
InitializeCriticalSection
InterlockedDecrement
InterlockedIncrement
OutputDebugStringA
lstrlenW
CompareStringW
GetModuleFileNameW
LoadLibraryExW
FreeLibrary
FindResourceW
QueryPerformanceCounter
GetSystemTimeAsFileTime
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
FindClose

user32

InvalidateRect
CheckMenuRadioItem
GetCapture
PtInRect
AnimateWindow
SetCapture
GetMessagePos
SetClipboardData
OpenClipboard
EmptyClipboard
GetWindowTextW
InflateRect
CloseClipboard
GetWindowTextLengthW
DrawFocusRect
CallWindowProcA
DefWindowProcA
IsWindowUnicode
SetWindowLongA
GetCursorInfo
GetDoubleClickTime
ShowCaret
LoadImageW
HideCaret
MapVirtualKeyW
IsRectEmpty
IntersectRect
OffsetRect
GetMenuState
GetMenuStringW
SystemParametersInfoW
SetWindowRgn
EndDialog
MonitorFromWindow
GetMonitorInfoA
SendNotifyMessageW
SetMenuItemInfoW
GetSubMenu
GetMenuInfo
SetMenuInfo
GetDCEx
ReleaseDC
EqualRect
ReleaseCapture
CheckMenuItem
CharUpperBuffW
CharNextW
CharPrevW
EnableMenuItem
SetCursor
SetRectEmpty
GetUpdateRect
ShowCursor
SetRect
DestroyCursor
GetCursor
CallWindowProcW
InsertMenuItemW
TrackPopupMenuEx
CreatePopupMenu
GetSystemMetrics
DestroyMenu
CopyAcceleratorTableW
TrackMouseEvent
CreateAcceleratorTableW
DeferWindowPos
BeginDeferWindowPos
EndDeferWindowPos
GetWindow
PostQuitMessage
RegisterWindowMessageW
CallNextHookEx
WindowFromPoint
TranslateMessage
IsDialogMessageW
CallMsgFilterW
PeekMessageW
MsgWaitForMultipleObjectsEx
PostThreadMessageW
SetWindowsHookExW
UnhookWindowsHookEx
DispatchMessageW
GetNextDlgTabItem
RemovePropW
GetWindowRect
SetActiveWindow
ShowWindowAsync
GetFocus
ChildWindowFromPointEx
IsWindowEnabled
SetFocus
ActivateKeyboardLayout
SendMessageW
MessageBoxW
GetMenuItemCount
LoadStringW
GetSysColor
GetAsyncKeyState
GetMenuItemInfoW
GetParent
DeleteMenu
SetPropW
BringWindowToTop
GetAncestor
GetClassNameW
GetDlgItem
GetDesktopWindow
SetWindowPos
GetCursorPos
ShowWindow
SendMessageTimeoutW
GetActiveWindow
FindWindowExW
IsWindowVisible
MapWindowPoints
SetWindowTextW
GetPropW
GetMonitorInfoW
CopyRect
MonitorFromRect
EndPaint
DestroyWindow
TranslateAcceleratorW
SetTimer
IsChild
KillTimer
ReplyMessage
AttachThreadInput
LoadCursorW
SetParent
GetClientRect
BeginPaint
GetClassInfoW
GetKeyboardLayout
GetWindowLongW
SetWindowLongW
RedrawWindow
IsWindow
CreateWindowExW
RegisterClassW
EnableWindow
GetDlgCtrlID
DefWindowProcW
GetWindowThreadProcessId
PostMessageW
DestroyAcceleratorTable

gdi32

SaveDC
FillRgn
SelectObject
GetObjectW
SetTextColor
GetTextMetricsW
DeleteObject
CreateRectRgn
RestoreDC
GetTextColor
CreateSolidBrush
StretchDIBits
GetBkColor
CreateFontIndirectW
SetStretchBltMode
CreateCompatibleDC
SelectClipRgn
ExcludeClipRect
SetRectRgn
CreateRectRgnIndirect
CombineRgn
StretchBlt
DeleteDC
OffsetRgn
SetBkColor
SetTextAlign
SetGraphicsMode
CreateCompatibleBitmap
SetWorldTransform
ModifyWorldTransform
CreateDIBSection
GetStockObject
CreatePolygonRgn
GetPixel
GetTextExtentPoint32W
SetBkMode
GetClipRgn
BitBlt
ExtTextOutW

advapi32

RegCloseKey
RegSetValueExW
RegDeleteValueW
RegQueryValueExW
RegOpenKeyExW
RegCreateKeyExW

ole32

OleInitialize
CoGetInterfaceAndReleaseStream
OleUninitialize
CoTaskMemAlloc
CoTaskMemFree
CoCreateInstance
ReleaseStgMedium
OleGetClipboard
CoMarshalInterThreadInterfaceInStream

oleaut32

VariantInit
SysFreeString
SysAllocString
VariantClear
SafeArrayCreateVector
SafeArrayAccessData
SafeArrayDestroy
SafeArrayUnaccessData
SysStringLen

msvcr90

??_U@YAPAXI@Z
realloc
memmove
_vsnprintf
memcpy
_purecall
??_V@YAXPAX@Z
free
??2@YAPAXI@Z
??3@YAXPAX@Z
_vsnwprintf
memset
memcmp
malloc
qsort
_crt_debugger_hook
__clean_type_info_names_internal
_except_handler4_common
?_type_info_dtor_internal_method@type_info@@QAEXXZ
?terminate@@YAXXZ
__CppXcptFilter
_adjust_fdiv
_amsg_exit
bsearch
abs
cos
ceil
_hypot
sin
_unlock
__dllonexit
_encode_pointer
_lock
_onexit
_decode_pointer
_malloc_crt
_encoded_null
_initterm
_initterm_e
__CxxFrameHandler3

Exports

Exports

GetWinamp5SystemComponent

Sections

.text
Size: 188KB - Virtual size: 187KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 40KB - Virtual size: 39KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 7KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 49KB - Virtual size: 49KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
System/pcm.w5s
.dll windows:5 windows x86 arch:x86

b30677cd6dfd2b103d993f02c286051d

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

f:\sandbox\20131120_103959\pcm\Release\pcm.pdb

Imports

msvcr90

_adjust_fdiv
__CppXcptFilter
_amsg_exit
?_type_info_dtor_internal_method@type_info@@QAEXXZ
_except_handler4_common
__clean_type_info_names_internal
_crt_debugger_hook
_initterm_e
_initterm
_encoded_null
free
_malloc_crt
_decode_pointer
_onexit
_lock
_encode_pointer
__dllonexit
_unlock
_purecall
??2@YAPAXI@Z
?terminate@@YAXXZ
??3@YAXPAX@Z
memcpy

kernel32

SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
DisableThreadLibraryCalls
InterlockedCompareExchange
Sleep
InterlockedExchange
IsDebuggerPresent

Exports

Exports

GetWinamp5SystemComponent

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 850B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
System/pcm.wbm
System/playlist.w5s
.dll windows:5 windows x86 arch:x86

6b0edaea2fd1f649aaa2a5e0d8da48ea

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

f:\sandbox\20131120_103959\playlist\Release\playlist.pdb

Imports

shlwapi

PathCombineW
PathCommonPrefixW
PathAddBackslashW
PathIsUNCW
PathIsSameRootW
PathIsURLW
PathIsRootW
PathCanonicalizeW
PathRemoveFileSpecW
PathFindExtensionW
StrRChrW
PathRemoveBackslashW
PathCombineA
PathAppendW
PathFileExistsW
PathStripPathW
PathFindFileNameW
PathIsFileSpecW

kernel32

CloseHandle
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
DisableThreadLibraryCalls
InterlockedCompareExchange
RaiseException
InterlockedExchange
FreeLibrary
LocalAlloc
InterlockedIncrement
InterlockedDecrement
lstrcpynW
CompareStringW
LoadLibraryW
GetProcAddress
lstrlenW
lstrlenA
lstrcpynA
GetLastError
WideCharToMultiByte
CreateFileW
ReadFile
MultiByteToWideChar
GetPrivateProfileStringW
GetPrivateProfileIntA
GetPrivateProfileStringA
lstrcmpiW
FindFirstFileW
GetLongPathNameW
FindClose
FindNextFileW
DeleteCriticalSection
InitializeCriticalSection
CreateDirectoryW
MoveFileW
EnterCriticalSection
LeaveCriticalSection
CopyFileW
lstrcmpW
QueryPerformanceFrequency
LoadLibraryA
Sleep
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId

user32

CharNextW
CharPrevA
CharUpperBuffW
CharNextA

oleaut32

VariantInit
SysAllocString
SysFreeString

msvcr90

__CppXcptFilter
_except_handler4_common
?_type_info_dtor_internal_method@type_info@@QAEXXZ
__clean_type_info_names_internal
_crt_debugger_hook
__CxxFrameHandler3
_adjust_fdiv
_amsg_exit
_initterm_e
_initterm
_encoded_null
_malloc_crt
_decode_pointer
_onexit
_lock
_encode_pointer
__dllonexit
_unlock
?terminate@@YAXXZ
free
_wcsdup
wcscmp
??3@YAXPAX@Z
memcmp
??2@YAPAXI@Z
_wtoi
_vsnwprintf
_purecall
wcslen
_wcsnicmp
memmove_s
malloc
memcpy
memmove
strstr
_strdup
wcsstr
_vsnprintf
_wcsicmp
_wfopen
fseek
ftell
fclose
fread
feof
fgets
strncmp
strlen
atoi
strtok
strcspn
memset
fprintf
fputs
fwrite
??_V@YAXPAX@Z
fputws
fputwc
fwprintf
??_U@YAPAXI@Z
_wtoi64
swscanf
wcschr
realloc

Exports

Exports

GetWinamp5SystemComponent

Sections

.text
Size: 52KB - Virtual size: 52KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 19KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
System/png.w5s
.dll windows:5 windows x86 arch:x86

2ce582f7354e8d76caee782578c63dc8

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

f:\sandbox\20131120_103959\png\Release\png.pdb

Imports

kernel32

lstrcpynW
LoadLibraryA
GetLastError
FreeLibrary
GetProcAddress
LocalAlloc
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
DisableThreadLibraryCalls
InterlockedCompareExchange
Sleep
InterlockedExchange
lstrlenA
ExitProcess
RaiseException

msvcr90

_unlock
__dllonexit
_encode_pointer
_lock
_onexit
_decode_pointer
_malloc_crt
_encoded_null
malloc
_initterm_e
_amsg_exit
_adjust_fdiv
__CppXcptFilter
_except_handler4_common
?terminate@@YAXXZ
?_type_info_dtor_internal_method@type_info@@QAEXXZ
__clean_type_info_names_internal
_crt_debugger_hook
free
fwrite
fflush
fprintf
__iob_func
fread
pow
memcmp
floor
memset
memcpy
longjmp
wcslen
memmove
_wcsicmp
??2@YAPAXI@Z
??3@YAXPAX@Z
_initterm
_setjmp3

Exports

Exports

GetWinamp5SystemComponent

Sections

.text
Size: 64KB - Virtual size: 63KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
System/primo.w5s
.dll windows:5 windows x86 arch:x86

9721b9ce2bda48f4978c11d559145454

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

f:\sandbox\20131120_103959\primo\Release\primo.pdb

Imports

kernel32

FreeLibrary
SetErrorMode
InitializeCriticalSection
LoadLibraryW
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
DisableThreadLibraryCalls
InterlockedCompareExchange
Sleep
RaiseException
LoadLibraryA
GetLastError
InterlockedExchange
GetProcAddress
IsDebuggerPresent
LocalAlloc

msvcr90

__clean_type_info_names_internal
_crt_debugger_hook
?_type_info_dtor_internal_method@type_info@@QAEXXZ
?terminate@@YAXXZ
__CppXcptFilter
_adjust_fdiv
_amsg_exit
_initterm_e
_initterm
_encoded_null
free
_malloc_crt
_decode_pointer
_onexit
_lock
_encode_pointer
__dllonexit
_unlock
_purecall
??2@YAPAXI@Z
??3@YAXPAX@Z
_except_handler4_common

Exports

Exports

GetWinamp5SystemComponent

Sections

.text
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
System/tagz.w5s
.dll windows:5 windows x86 arch:x86

6660c488928a83599077100be944819f

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

f:\sandbox\20131120_103959\tagz\Release\tagz.pdb

Imports

shlwapi

PathStripPathW
PathFindExtensionW
StrStrW
PathFindFileNameW
PathRemoveFileSpecW
PathAddBackslashW
PathFindNextComponentW
StrCmpIW
PathRemoveBackslashW
StrCmpNIW

kernel32

IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
DisableThreadLibraryCalls
VirtualQuery
GetStringTypeExW
lstrcpynW
MulDiv
CompareStringW
lstrlenW
GetLocalTime
InterlockedCompareExchange
Sleep
InterlockedExchange

user32

CharUpperW
CharLowerW
CharPrevW
CharUpperBuffW
CharNextW

msvcr90

_crt_debugger_hook
__clean_type_info_names_internal
memcmp
free
_wcsdup
_wtoi
wcslen
wcsstr
_vsnwprintf
memset
malloc
realloc
_wcsicmp
??3@YAXPAX@Z
??2@YAPAXI@Z
_purecall
_unlock
__dllonexit
_encode_pointer
_lock
_onexit
_decode_pointer
_malloc_crt
_encoded_null
_initterm
_initterm_e
_amsg_exit
_adjust_fdiv
__CppXcptFilter
_except_handler4_common
?terminate@@YAXXZ
?_type_info_dtor_internal_method@type_info@@QAEXXZ

Exports

Exports

GetWinamp5SystemComponent

Sections

.text
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
System/theora.w5s
.dll windows:5 windows x86 arch:x86

5ffeeae97669d79127ae0ad7d6c54923

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

f:\sandbox\20131120_103959\theora\Release\theora.pdb

Imports

msvcr90

_initterm
_initterm_e
_amsg_exit
_adjust_fdiv
__CppXcptFilter
_encoded_null
?terminate@@YAXXZ
?_type_info_dtor_internal_method@type_info@@QAEXXZ
__clean_type_info_names_internal
_crt_debugger_hook
_malloc_crt
_decode_pointer
_onexit
_lock
_encode_pointer
__dllonexit
_unlock
calloc
malloc
free
??2@YAPAXI@Z
_except_handler4_common
??3@YAXPAX@Z
memset
memcpy
__CxxFrameHandler3

kernel32

SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
DisableThreadLibraryCalls
InterlockedCompareExchange
Sleep
InterlockedExchange
IsDebuggerPresent

Exports

Exports

GetWinamp5SystemComponent

Sections

.text
Size: 45KB - Virtual size: 45KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
System/theora.wbm
System/timer.w5s
.dll windows:5 windows x86 arch:x86

c054e439603d4c631698ceea0f863505

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

f:\sandbox\20131120_103959\timer\Release\timer.pdb

Imports

user32

SetTimer
KillTimer

msvcr90

_unlock
__dllonexit
_encode_pointer
_onexit
_decode_pointer
_malloc_crt
_encoded_null
_initterm
_initterm_e
_amsg_exit
_adjust_fdiv
__CppXcptFilter
_except_handler4_common
?terminate@@YAXXZ
?_type_info_dtor_internal_method@type_info@@QAEXXZ
__CxxFrameHandler3
_crt_debugger_hook
wcslen
memcpy
realloc
memmove
memset
malloc
free
_create_locale
_wtoi_l
memcmp
_purecall
??2@YAPAXI@Z
??3@YAXPAX@Z
_except_handler3
_lock
__clean_type_info_names_internal

kernel32

DisableThreadLibraryCalls
InterlockedExchange
CompareStringW
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
Sleep
QueryPerformanceFrequency
GetCurrentProcessId
GetSystemTimeAsFileTime
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
InterlockedCompareExchange

Exports

Exports

GetWinamp5SystemComponent

Sections

.text
Size: 18KB - Virtual size: 17KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
System/vlb.w5s
.dll windows:5 windows x86 arch:x86

1bf20438a92833a1f214d680b54ec158

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

msvcr90

_initterm_e
_amsg_exit
_adjust_fdiv
__CppXcptFilter
_initterm
_except_handler4_common
__clean_type_info_names_internal
_crt_debugger_hook
_encoded_null
_malloc_crt
_decode_pointer
_onexit
_lock
_encode_pointer
__dllonexit
_unlock
?terminate@@YAXXZ
malloc
free
_purecall
??3@YAXPAX@Z
?_type_info_dtor_internal_method@type_info@@QAEXXZ
??2@YAPAXI@Z
memcpy
_CIsin
_CIcos
_CIpow
_CIsqrt
memset
__CxxFrameHandler3
_CxxThrowException

kernel32

SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
DisableThreadLibraryCalls
InterlockedCompareExchange
Sleep
InterlockedExchange
IsDebuggerPresent

Exports

Exports

GetWinamp5SystemComponent

Sections

.text
Size: 40KB - Virtual size: 39KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 66KB - Virtual size: 66KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 10KB - Virtual size: 52KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
System/vlb.wbm
System/vp6.w5s
.dll windows:5 windows x86 arch:x86

287c252a1b8181703aa71ca23e95c919

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

f:\sandbox\20131120_103959\vp6\Release\vp6.pdb

Imports

msvcr90

_CIexp
_crt_debugger_hook
__clean_type_info_names_internal
_except_handler4_common
?_type_info_dtor_internal_method@type_info@@QAEXXZ
?terminate@@YAXXZ
??3@YAXPAX@Z
__CppXcptFilter
_adjust_fdiv
_amsg_exit
_initterm_e
_initterm
_encoded_null
free
_malloc_crt
_decode_pointer
_onexit
memset
memcpy
_lock
_encode_pointer
__dllonexit
_unlock
toupper
_vsnprintf
_purecall
??2@YAPAXI@Z
malloc
rand
strncmp
_CIsqrt
_except_handler3
__CxxFrameHandler3

winmm

timeGetTime

kernel32

DisableThreadLibraryCalls
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
InterlockedCompareExchange
InterlockedExchange
QueryPerformanceFrequency
Sleep
QueryPerformanceCounter

gdi32

CreateBitmap
BitBlt
SetTextColor
DeleteDC
CreateFontA
SetBkColor
ExtTextOutA
SetBkMode
DeleteObject
SelectObject
CreateCompatibleDC
GetPixel

Exports

Exports

GetWinamp5SystemComponent

Sections

.text
Size: 142KB - Virtual size: 141KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 17KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
System/vp6.wbm
System/vp8.w5s
.dll windows:5 windows x86 arch:x86

cdab3e88d4a304a2fc92511f0d8dd34a

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

f:\sandbox\20131120_103959\vp8x\Release\vp8.pdb

Imports

msvcr90

_crt_debugger_hook
__clean_type_info_names_internal
?_type_info_dtor_internal_method@type_info@@QAEXXZ
?terminate@@YAXXZ
_except_handler4_common
__CppXcptFilter
_adjust_fdiv
_amsg_exit
_initterm_e
_initterm
_encoded_null
free
malloc
calloc
longjmp
_setjmp3
memset
memcpy
_beginthreadex
rand
_CIsqrt
_CIexp
strtol
getenv
_vsnprintf
_malloc_crt
_decode_pointer
_onexit
_lock
_encode_pointer
__dllonexit
_unlock
??2@YAPAXI@Z
??3@YAXPAX@Z
_purecall

kernel32

GetCurrentProcess
EnterCriticalSection
LeaveCriticalSection
GetModuleHandleW
GetProcAddress
GetSystemInfo
CloseHandle
CreateSemaphoreW
WaitForSingleObject
ReleaseSemaphore
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
DisableThreadLibraryCalls
InterlockedCompareExchange
InterlockedExchange
Sleep

Exports

Exports

GetWinamp5SystemComponent

Sections

.text
Size: 163KB - Virtual size: 163KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 52KB - Virtual size: 52KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rodata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
System/vp8.wbm
System/wasabi2.w5s
.dll windows:5 windows x86 arch:x86

4893c0432b434047d1e1a77746dad992

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

f:\sandbox\20131120_103959\Wasabi2\Release\wasabi2.pdb

Imports

shlwapi

PathRemoveFileSpecW
PathAppendW

kernel32

GetSystemTimeAsFileTime
InitializeCriticalSection
IsDebuggerPresent
GetModuleFileNameW
GetVersionExW
FindFirstFileW
FreeLibrary
LoadLibraryW
GetProcAddress
FindClose
FindNextFileW
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
DeleteCriticalSection
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
DisableThreadLibraryCalls
InterlockedCompareExchange
Sleep
InterlockedExchange
CloseHandle
CreateSemaphoreW
ReleaseSemaphore
WaitForSingleObject
EnterCriticalSection
LeaveCriticalSection

nxlite

NXOnce
NXDataSetSourceStat
NXStringGetBytes
NXURICreateRemovingFilename
NXStringGetBytesSize
NXPathMatchExtension
NXFile_stat
NXDataCreateFromURI
NXDataSetSourceURI
NXDataCreateEmpty
NXStringKeywordCompare
NXDataCreate
NXDataSetMIME
NXURICreateWithNXString
NXURIRetain
NXURICreateFromPath
NXStringRelease
NXStringCreateWithFormatting
NXStringCreateWithUTF16
NXStringRetain
NXURIRelease
NXStringCreateWithUTF8
NXOnceInit
NXDataRelease

msvcr90

??2@YAPAXI@Z
memset
_crt_debugger_hook
__clean_type_info_names_internal
?_type_info_dtor_internal_method@type_info@@QAEXXZ
?terminate@@YAXXZ
_purecall
??3@YAXPAX@Z
_vsnprintf
??_U@YAPAXI@Z
??_V@YAXPAX@Z
_wstat64
free
malloc
_vsnwprintf
__CxxFrameHandler3
memmove
realloc
_unlock
__dllonexit
_encode_pointer
_lock
_onexit
_decode_pointer
_malloc_crt
_encoded_null
_initterm
_initterm_e
_amsg_exit
_adjust_fdiv
__CppXcptFilter
_except_handler4_common

Exports

Exports

GetWinamp5SystemComponent

Sections

.text
Size: 22KB - Virtual size: 21KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
System/xml.w5s
.dll windows:5 windows x86 arch:x86

5a498736f6aaabe47c6509a5174dc6fd

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

f:\sandbox\20131120_103959\xml\Release\xml.pdb

Imports

kernel32

DisableThreadLibraryCalls
MultiByteToWideChar
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsDebuggerPresent

user32

CharUpperW

msvcr90

memmove
free
_wcsicmp
malloc
wcslen
wcsrchr
memset
memcpy
memcmp
rand
srand
realloc
_time64
?terminate@@YAXXZ
?_type_info_dtor_internal_method@type_info@@QAEXXZ
_except_handler4_common
_crt_debugger_hook
??2@YAPAXI@Z
??3@YAXPAX@Z
_wcsdup

Exports

Exports

GetWinamp5SystemComponent

Sections

.text
Size: 67KB - Virtual size: 67KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
System/xspf.w5s
.dll windows:5 windows x86 arch:x86

4a2c34887c13eee798958cae8549cea6

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

f:\sandbox\20131120_103959\xspf\Release\xspf.pdb

Imports

shlwapi

PathIsURLW

kernel32

SetUnhandledExceptionFilter
IsDebuggerPresent
VirtualQuery
GetFileAttributesW
ReadFile
CreateFileW
CloseHandle
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
DisableThreadLibraryCalls
InterlockedCompareExchange
Sleep
InterlockedExchange
UnhandledExceptionFilter

msvcr90

realloc
_wcsdup
wcslen
_purecall
??3@YAXPAX@Z
??2@YAPAXI@Z
memset
wcscmp
__CxxFrameHandler3
__dllonexit
_encode_pointer
_lock
_onexit
_decode_pointer
_malloc_crt
_encoded_null
_initterm
_initterm_e
_amsg_exit
_adjust_fdiv
__CppXcptFilter
_except_handler4_common
?terminate@@YAXXZ
?_type_info_dtor_internal_method@type_info@@QAEXXZ
__clean_type_info_names_internal
_crt_debugger_hook
free
_wcsicmp
memcpy
_vsnwprintf
_unlock

Exports

Exports

GetWinamp5SystemComponent

Sections

.text
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
burnlib.dll
.dll windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.rsrc
Size: 82KB - Virtual size: 81KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
elevatorps.dll
.dll regsvr32 windows:5 windows x86 arch:x86

9f3831678d0daf3d99f5ed0c1c329375

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

f:\sandbox\20131120_103959\Elevator\ReleasePS\ElevatorPS.pdb

Imports

kernel32

DisableThreadLibraryCalls
HeapSize
LCMapStringW
LCMapStringA
GetStringTypeW
MultiByteToWideChar
GetStringTypeA
GetLocaleInfoA
RtlUnwind
InitializeCriticalSectionAndSpinCount
LoadLibraryA
GetCurrentThreadId
GetCommandLineA
GetModuleHandleW
GetProcAddress
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetLastError
InterlockedDecrement
HeapFree
Sleep
ExitProcess
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
DeleteCriticalSection
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
HeapCreate
HeapDestroy
VirtualFree
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
LeaveCriticalSection
EnterCriticalSection
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
HeapAlloc
VirtualAlloc
HeapReAlloc
WriteFile
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent

rpcrt4

CStdStubBuffer_Connect
CStdStubBuffer_Invoke
CStdStubBuffer_IsIIDSupported
CStdStubBuffer_Disconnect
CStdStubBuffer_DebugServerRelease
IUnknown_AddRef_Proxy
CStdStubBuffer_QueryInterface
CStdStubBuffer_DebugServerQueryInterface
IUnknown_Release_Proxy
CStdStubBuffer_CountRefs
NdrOleAllocate
NdrOleFree
IUnknown_QueryInterface_Proxy
CStdStubBuffer_AddRef
NdrDllUnregisterProxy
NdrDllGetClassObject
NdrDllCanUnloadNow
NdrDllRegisterProxy
NdrCStdStubBuffer_Release

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
GetProxyDllInfo

Sections

.text
Size: 31KB - Virtual size: 30KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.orpc
Size: 512B - Virtual size: 45B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
jnetlib.dll
.dll windows:5 windows x86 arch:x86

50813cae0f3c35a7d5b342fe460ac67d

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

f:\sandbox\20131120_103959\replicant\jnetlib\Release\jnetlib.pdb

Imports

ws2_32

gethostbyaddr
WSASetLastError
getservbyname
getservbyport
WSAStartup
WSACleanup
recvfrom
sendto
bind
listen
accept
gethostname
WSAAddressToStringA
ioctlsocket
connect
select
getsockname
shutdown
setsockopt
recv
socket
__WSAFDIsSet
closesocket
send
getsockopt
inet_ntoa
inet_addr
htonl
WSAGetLastError
htons
ntohs
gethostbyname

kernel32

FlushConsoleInputBuffer
SetLastError
GetVersionExA
GlobalMemoryStatus
GetStdHandle
GetFileType
GetVersion
GetLastError
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
FreeLibrary
WaitForSingleObject
GetSystemDirectoryA
GetProcAddress
LoadLibraryA
CloseHandle
CreateThread
lstrcpynA
InitializeCriticalSection
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
LoadLibraryW
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
DisableThreadLibraryCalls
InterlockedCompareExchange
Sleep
InterlockedExchange

advapi32

ReportEventA
RegisterEventSourceA
DeregisterEventSource
CryptGenRandom
CryptReleaseContext
CryptAcquireContextW

zlib

inflateEnd
inflate
inflateInit2_

msvcr90

sprintf_s
free
calloc
malloc
strlen
strchr
memset
strcpy_s
strcmp
strtoul
strcat_s
strncpy_s
_time64
memcpy
_purecall
_gmtime32
??2@YAPAXI@Z
isspace
strcpy
realloc
_strtoui64
sprintf
atoi
_vsnprintf
strncmp
strcat
strncpy
strcspn
memmove
_unlock
__dllonexit
_encode_pointer
_lock
_onexit
_decode_pointer
__CxxFrameHandler3
_getch
_encoded_null
_initterm
_initterm_e
_amsg_exit
_adjust_fdiv
__CppXcptFilter
?terminate@@YAXXZ
?_type_info_dtor_internal_method@type_info@@QAEXXZ
_except_handler4_common
__clean_type_info_names_internal
_crt_debugger_hook
_stricmp
vfprintf
_iob
abort
memchr
signal
fputs
sscanf
isdigit
qsort
fprintf
fclose
fread
fwrite
fflush
fopen
_setmode
ftell
fseek
wcsstr
getenv
strerror
_strdup
_stat32
isxdigit
_time32
fgets
_errno
strstr
_fileno
tolower
_strnicmp
isupper
??3@YAXPAX@Z
_malloc_crt

user32

MessageBoxA
GetDesktopWindow
GetProcessWindowStation
GetUserObjectInformationW

Exports

Exports

jnl_connection_get_state
jnl_connection_receive
jnl_connection_release
jnl_connection_send
jnl_connection_send_bytes_available
jnl_connection_send_bytes_in_queue
jnl_dns_create
jnl_dns_freeaddrinfo
jnl_dns_gethostname
jnl_dns_ntop
jnl_dns_release
jnl_dns_resolve
jnl_dns_resolve_now
jnl_htt_request_get_keep_alive
jnl_http_addheader
jnl_http_addheadervalue
jnl_http_allow_accept_all_reply_codes
jnl_http_allow_compression
jnl_http_bytes_available
jnl_http_connect
jnl_http_content_length
jnl_http_create
jnl_http_get_all_headers
jnl_http_get_bytes
jnl_http_get_connection
jnl_http_get_status
jnl_http_get_url
jnl_http_getheader
jnl_http_getreply
jnl_http_getreplycode
jnl_http_peek_bytes
jnl_http_release
jnl_http_request_addheader
jnl_http_request_create
jnl_http_request_get_connection
jnl_http_request_get_header
jnl_http_request_get_method
jnl_http_request_get_parameter
jnl_http_request_get_uri
jnl_http_request_release
jnl_http_request_reset
jnl_http_request_run
jnl_http_request_send_reply
jnl_http_request_set_reply_string
jnl_http_reset_headers
jnl_http_retain
jnl_http_run
jnl_http_set_persistent
jnl_http_set_proxy
jnl_http_set_recv_buffer_size
jnl_httpu_request_create
jnl_httpu_request_get_header
jnl_httpu_request_get_method
jnl_httpu_request_get_uri
jnl_httpu_request_process
jnl_httpu_request_release
jnl_init
jnl_listen_create
jnl_listen_create_from_address
jnl_listen_get_connection
jnl_listen_get_port
jnl_listen_release
jnl_quit
jnl_udp_create_multicast_listener
jnl_udp_get_address
jnl_udp_recv_bytes
jnl_udp_release
jnl_udp_run
jnl_udp_send
jnl_udp_set_peer
jnl_udp_set_peer_address

Sections

.text
Size: 383KB - Virtual size: 382KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 130KB - Virtual size: 130KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 57KB - Virtual size: 65KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 33KB - Virtual size: 33KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
libFLAC.dll
.dll windows:5 windows x86 arch:x86

c457b8a63992de37335bf1b5815f46cc

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

f:\sandbox\20131120_103959\replicant\libFLAC\src\libFLAC\Release\libFLAC_dynamic.pdb

Imports

kernel32

MultiByteToWideChar
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
DisableThreadLibraryCalls
InterlockedCompareExchange
Sleep
InterlockedExchange
IsDebuggerPresent

msvcr90

fwrite
strrchr
fclose
memchr
__iob_func
_fileno
ferror
_fstat64
_setmode
strtod
strncmp
strchr
fread
_wchmod
_wfopen
_wstat64
_wunlink
_wutime64
_wrename
_vsnprintf_s
_encode_pointer
_malloc_crt
_encoded_null
_decode_pointer
_initterm
_initterm_e
_amsg_exit
_adjust_fdiv
__CppXcptFilter
__clean_type_info_names_internal
_unlock
__dllonexit
_lock
_onexit
_except_handler4_common
_crt_debugger_hook
_errno
_fseeki64
feof
_ftelli64
frexp
_copysign
qsort
realloc
malloc
calloc
free
memmove
_strdup
_strnicmp
_CIcos
_CIexp
memcpy
memset
_CIlog
_except_handler3

Exports

Exports

FLAC_API_SUPPORTS_OGG_FLAC
FLAC__ChannelAssignmentString
FLAC__ENTROPY_CODING_METHOD_PARTITIONED_RICE2_ESCAPE_PARAMETER
FLAC__ENTROPY_CODING_METHOD_PARTITIONED_RICE2_PARAMETER_LEN
FLAC__ENTROPY_CODING_METHOD_PARTITIONED_RICE_ESCAPE_PARAMETER
FLAC__ENTROPY_CODING_METHOD_PARTITIONED_RICE_ORDER_LEN
FLAC__ENTROPY_CODING_METHOD_PARTITIONED_RICE_PARAMETER_LEN
FLAC__ENTROPY_CODING_METHOD_PARTITIONED_RICE_RAW_LEN
FLAC__ENTROPY_CODING_METHOD_TYPE_LEN
FLAC__EntropyCodingMethodTypeString
FLAC__FRAME_FOOTER_CRC_LEN
FLAC__FRAME_HEADER_BITS_PER_SAMPLE_LEN
FLAC__FRAME_HEADER_BLOCKING_STRATEGY_LEN
FLAC__FRAME_HEADER_BLOCK_SIZE_LEN
FLAC__FRAME_HEADER_CHANNEL_ASSIGNMENT_LEN
FLAC__FRAME_HEADER_CRC_LEN
FLAC__FRAME_HEADER_RESERVED_LEN
FLAC__FRAME_HEADER_SAMPLE_RATE_LEN
FLAC__FRAME_HEADER_SYNC
FLAC__FRAME_HEADER_SYNC_LEN
FLAC__FRAME_HEADER_ZERO_PAD_LEN
FLAC__FrameNumberTypeString
FLAC__MetadataTypeString
FLAC__Metadata_ChainStatusString
FLAC__Metadata_SimpleIteratorStatusString
FLAC__STREAM_METADATA_APPLICATION_ID_LEN
FLAC__STREAM_METADATA_CUESHEET_INDEX_NUMBER_LEN
FLAC__STREAM_METADATA_CUESHEET_INDEX_OFFSET_LEN
FLAC__STREAM_METADATA_CUESHEET_INDEX_RESERVED_LEN
FLAC__STREAM_METADATA_CUESHEET_IS_CD_LEN
FLAC__STREAM_METADATA_CUESHEET_LEAD_IN_LEN
FLAC__STREAM_METADATA_CUESHEET_MEDIA_CATALOG_NUMBER_LEN
FLAC__STREAM_METADATA_CUESHEET_NUM_TRACKS_LEN
FLAC__STREAM_METADATA_CUESHEET_RESERVED_LEN
FLAC__STREAM_METADATA_CUESHEET_TRACK_ISRC_LEN
FLAC__STREAM_METADATA_CUESHEET_TRACK_NUMBER_LEN
FLAC__STREAM_METADATA_CUESHEET_TRACK_NUM_INDICES_LEN
FLAC__STREAM_METADATA_CUESHEET_TRACK_OFFSET_LEN
FLAC__STREAM_METADATA_CUESHEET_TRACK_PRE_EMPHASIS_LEN
FLAC__STREAM_METADATA_CUESHEET_TRACK_RESERVED_LEN
FLAC__STREAM_METADATA_CUESHEET_TRACK_TYPE_LEN
FLAC__STREAM_METADATA_IS_LAST_LEN
FLAC__STREAM_METADATA_LENGTH_LEN
FLAC__STREAM_METADATA_PICTURE_COLORS_LEN
FLAC__STREAM_METADATA_PICTURE_DATA_LENGTH_LEN
FLAC__STREAM_METADATA_PICTURE_DEPTH_LEN
FLAC__STREAM_METADATA_PICTURE_DESCRIPTION_LENGTH_LEN
FLAC__STREAM_METADATA_PICTURE_HEIGHT_LEN
FLAC__STREAM_METADATA_PICTURE_MIME_TYPE_LENGTH_LEN
FLAC__STREAM_METADATA_PICTURE_TYPE_LEN
FLAC__STREAM_METADATA_PICTURE_WIDTH_LEN
FLAC__STREAM_METADATA_SEEKPOINT_FRAME_SAMPLES_LEN
FLAC__STREAM_METADATA_SEEKPOINT_PLACEHOLDER
FLAC__STREAM_METADATA_SEEKPOINT_SAMPLE_NUMBER_LEN
FLAC__STREAM_METADATA_SEEKPOINT_STREAM_OFFSET_LEN
FLAC__STREAM_METADATA_STREAMINFO_BITS_PER_SAMPLE_LEN
FLAC__STREAM_METADATA_STREAMINFO_CHANNELS_LEN
FLAC__STREAM_METADATA_STREAMINFO_MAX_BLOCK_SIZE_LEN
FLAC__STREAM_METADATA_STREAMINFO_MAX_FRAME_SIZE_LEN
FLAC__STREAM_METADATA_STREAMINFO_MD5SUM_LEN
FLAC__STREAM_METADATA_STREAMINFO_MIN_BLOCK_SIZE_LEN
FLAC__STREAM_METADATA_STREAMINFO_MIN_FRAME_SIZE_LEN
FLAC__STREAM_METADATA_STREAMINFO_SAMPLE_RATE_LEN
FLAC__STREAM_METADATA_STREAMINFO_TOTAL_SAMPLES_LEN
FLAC__STREAM_METADATA_TYPE_LEN
FLAC__STREAM_METADATA_VORBIS_COMMENT_ENTRY_LENGTH_LEN
FLAC__STREAM_METADATA_VORBIS_COMMENT_NUM_COMMENTS_LEN
FLAC__STREAM_SYNC
FLAC__STREAM_SYNC_LEN
FLAC__STREAM_SYNC_STRING
FLAC__SUBFRAME_LPC_QLP_COEFF_PRECISION_LEN
FLAC__SUBFRAME_LPC_QLP_SHIFT_LEN
FLAC__SUBFRAME_TYPE_CONSTANT_BYTE_ALIGNED_MASK
FLAC__SUBFRAME_TYPE_FIXED_BYTE_ALIGNED_MASK
FLAC__SUBFRAME_TYPE_LEN
FLAC__SUBFRAME_TYPE_LPC_BYTE_ALIGNED_MASK
FLAC__SUBFRAME_TYPE_VERBATIM_BYTE_ALIGNED_MASK
FLAC__SUBFRAME_WASTED_BITS_FLAG_LEN
FLAC__SUBFRAME_ZERO_PAD_LEN
FLAC__StreamDecoderErrorStatusString
FLAC__StreamDecoderInitStatusString
FLAC__StreamDecoderLengthStatusString
FLAC__StreamDecoderReadStatusString
FLAC__StreamDecoderSeekStatusString
FLAC__StreamDecoderStateString
FLAC__StreamDecoderTellStatusString
FLAC__StreamDecoderWriteStatusString
FLAC__StreamEncoderInitStatusString
FLAC__StreamEncoderReadStatusString
FLAC__StreamEncoderSeekStatusString
FLAC__StreamEncoderStateString
FLAC__StreamEncoderTellStatusString
FLAC__StreamEncoderWriteStatusString
FLAC__StreamMetadata_Picture_TypeString
FLAC__SubframeTypeString
FLAC__VENDOR_STRING
FLAC__VERSION_STRING
FLAC__format_blocksize_is_subset
FLAC__format_cuesheet_is_legal
FLAC__format_picture_is_legal
FLAC__format_sample_rate_is_subset
FLAC__format_sample_rate_is_valid
FLAC__format_seektable_is_legal
FLAC__format_seektable_sort
FLAC__format_vorbiscomment_entry_is_legal
FLAC__format_vorbiscomment_entry_name_is_legal
FLAC__format_vorbiscomment_entry_value_is_legal
FLAC__metadata_chain_check_if_tempfile_needed
FLAC__metadata_chain_delete
FLAC__metadata_chain_merge_padding
FLAC__metadata_chain_new
FLAC__metadata_chain_read
FLAC__metadata_chain_read_ogg
FLAC__metadata_chain_read_ogg_with_callbacks
FLAC__metadata_chain_read_with_callbacks
FLAC__metadata_chain_sort_padding
FLAC__metadata_chain_status
FLAC__metadata_chain_write
FLAC__metadata_chain_write_with_callbacks
FLAC__metadata_chain_write_with_callbacks_and_tempfile
FLAC__metadata_get_cuesheet
FLAC__metadata_get_picture
FLAC__metadata_get_streaminfo
FLAC__metadata_get_tags
FLAC__metadata_iterator_delete
FLAC__metadata_iterator_delete_block
FLAC__metadata_iterator_get_block
FLAC__metadata_iterator_get_block_type
FLAC__metadata_iterator_init
FLAC__metadata_iterator_insert_block_after
FLAC__metadata_iterator_insert_block_before
FLAC__metadata_iterator_new
FLAC__metadata_iterator_next
FLAC__metadata_iterator_prev
FLAC__metadata_iterator_set_block
FLAC__metadata_object_application_set_data
FLAC__metadata_object_clone
FLAC__metadata_object_cuesheet_calculate_cddb_id
FLAC__metadata_object_cuesheet_delete_track
FLAC__metadata_object_cuesheet_insert_blank_track
FLAC__metadata_object_cuesheet_insert_track
FLAC__metadata_object_cuesheet_is_legal
FLAC__metadata_object_cuesheet_resize_tracks
FLAC__metadata_object_cuesheet_set_track
FLAC__metadata_object_cuesheet_track_clone
FLAC__metadata_object_cuesheet_track_delete
FLAC__metadata_object_cuesheet_track_delete_index
FLAC__metadata_object_cuesheet_track_insert_blank_index
FLAC__metadata_object_cuesheet_track_insert_index
FLAC__metadata_object_cuesheet_track_new
FLAC__metadata_object_cuesheet_track_resize_indices
FLAC__metadata_object_delete
FLAC__metadata_object_is_equal
FLAC__metadata_object_new
FLAC__metadata_object_picture_is_legal
FLAC__metadata_object_picture_set_data
FLAC__metadata_object_picture_set_description
FLAC__metadata_object_picture_set_mime_type
FLAC__metadata_object_seektable_delete_point
FLAC__metadata_object_seektable_insert_point
FLAC__metadata_object_seektable_is_legal
FLAC__metadata_object_seektable_resize_points
FLAC__metadata_object_seektable_set_point
FLAC__metadata_object_seektable_template_append_placeholders
FLAC__metadata_object_seektable_template_append_point
FLAC__metadata_object_seektable_template_append_points
FLAC__metadata_object_seektable_template_append_spaced_points
FLAC__metadata_object_seektable_template_append_spaced_points_by_samples
FLAC__metadata_object_seektable_template_sort
FLAC__metadata_object_vorbiscomment_append_comment
FLAC__metadata_object_vorbiscomment_delete_comment
FLAC__metadata_object_vorbiscomment_entry_from_name_value_pair
FLAC__metadata_object_vorbiscomment_entry_matches
FLAC__metadata_object_vorbiscomment_entry_to_name_value_pair
FLAC__metadata_object_vorbiscomment_find_entry_from
FLAC__metadata_object_vorbiscomment_insert_comment
FLAC__metadata_object_vorbiscomment_remove_entries_matching
FLAC__metadata_object_vorbiscomment_remove_entry_matching
FLAC__metadata_object_vorbiscomment_replace_comment
FLAC__metadata_object_vorbiscomment_resize_comments
FLAC__metadata_object_vorbiscomment_set_comment
FLAC__metadata_object_vorbiscomment_set_vendor_string
FLAC__metadata_simple_iterator_delete
FLAC__metadata_simple_iterator_delete_block
FLAC__metadata_simple_iterator_get_application_id
FLAC__metadata_simple_iterator_get_block
FLAC__metadata_simple_iterator_get_block_length
FLAC__metadata_simple_iterator_get_block_offset
FLAC__metadata_simple_iterator_get_block_type
FLAC__metadata_simple_iterator_init
FLAC__metadata_simple_iterator_insert_block_after
FLAC__metadata_simple_iterator_is_last
FLAC__metadata_simple_iterator_is_writable
FLAC__metadata_simple_iterator_new
FLAC__metadata_simple_iterator_next
FLAC__metadata_simple_iterator_prev
FLAC__metadata_simple_iterator_set_block
FLAC__metadata_simple_iterator_status
FLAC__stream_decoder_delete
FLAC__stream_decoder_finish
FLAC__stream_decoder_flush
FLAC__stream_decoder_get_bits_per_sample
FLAC__stream_decoder_get_blocksize
FLAC__stream_decoder_get_channel_assignment
FLAC__stream_decoder_get_channels
FLAC__stream_decoder_get_decode_position
FLAC__stream_decoder_get_md5_checking
FLAC__stream_decoder_get_resolved_state_string
FLAC__stream_decoder_get_sample_rate
FLAC__stream_decoder_get_state
FLAC__stream_decoder_get_total_samples
FLAC__stream_decoder_init_FILE
FLAC__stream_decoder_init_file
FLAC__stream_decoder_init_ogg_FILE
FLAC__stream_decoder_init_ogg_file
FLAC__stream_decoder_init_ogg_stream
FLAC__stream_decoder_init_stream
FLAC__stream_decoder_new
FLAC__stream_decoder_process_single
FLAC__stream_decoder_process_until_end_of_metadata
FLAC__stream_decoder_process_until_end_of_stream
FLAC__stream_decoder_reset
FLAC__stream_decoder_seek_absolute
FLAC__stream_decoder_set_md5_checking
FLAC__stream_decoder_set_metadata_ignore
FLAC__stream_decoder_set_metadata_ignore_all
FLAC__stream_decoder_set_metadata_ignore_application
FLAC__stream_decoder_set_metadata_respond
FLAC__stream_decoder_set_metadata_respond_all
FLAC__stream_decoder_set_metadata_respond_application
FLAC__stream_decoder_set_ogg_serial_number
FLAC__stream_decoder_skip_single_frame
FLAC__stream_encoder_delete
FLAC__stream_encoder_disable_constant_subframes
FLAC__stream_encoder_disable_fixed_subframes
FLAC__stream_encoder_disable_verbatim_subframes
FLAC__stream_encoder_finish
FLAC__stream_encoder_get_bits_per_sample
FLAC__stream_encoder_get_blocksize
FLAC__stream_encoder_get_channels
FLAC__stream_encoder_get_do_escape_coding
FLAC__stream_encoder_get_do_exhaustive_model_search
FLAC__stream_encoder_get_do_md5
FLAC__stream_encoder_get_do_mid_side_stereo
FLAC__stream_encoder_get_do_qlp_coeff_prec_search
FLAC__stream_encoder_get_loose_mid_side_stereo
FLAC__stream_encoder_get_max_lpc_order
FLAC__stream_encoder_get_max_residual_partition_order
FLAC__stream_encoder_get_min_residual_partition_order
FLAC__stream_encoder_get_qlp_coeff_precision
FLAC__stream_encoder_get_resolved_state_string
FLAC__stream_encoder_get_rice_parameter_search_dist
FLAC__stream_encoder_get_sample_rate
FLAC__stream_encoder_get_state
FLAC__stream_encoder_get_streamable_subset
FLAC__stream_encoder_get_total_samples_estimate
FLAC__stream_encoder_get_verify
FLAC__stream_encoder_get_verify_decoder_error_stats
FLAC__stream_encoder_get_verify_decoder_state
FLAC__stream_encoder_init_FILE
FLAC__stream_encoder_init_file
FLAC__stream_encoder_init_ogg_FILE
FLAC__stream_encoder_init_ogg_file
FLAC__stream_encoder_init_ogg_stream
FLAC__stream_encoder_init_stream
FLAC__stream_encoder_new
FLAC__stream_encoder_process
FLAC__stream_encoder_process_interleaved
FLAC__stream_encoder_set_apodization
FLAC__stream_encoder_set_bits_per_sample
FLAC__stream_encoder_set_blocksize
FLAC__stream_encoder_set_channels
FLAC__stream_encoder_set_compression_level
FLAC__stream_encoder_set_do_escape_coding
FLAC__stream_encoder_set_do_exhaustive_model_search
FLAC__stream_encoder_set_do_md5
FLAC__stream_encoder_set_do_mid_side_stereo
FLAC__stream_encoder_set_do_qlp_coeff_prec_search
FLAC__stream_encoder_set_loose_mid_side_stereo
FLAC__stream_encoder_set_max_lpc_order
FLAC__stream_encoder_set_max_residual_partition_order
FLAC__stream_encoder_set_metadata
FLAC__stream_encoder_set_min_residual_partition_order
FLAC__stream_encoder_set_ogg_serial_number
FLAC__stream_encoder_set_qlp_coeff_precision
FLAC__stream_encoder_set_rice_parameter_search_dist
FLAC__stream_encoder_set_sample_rate
FLAC__stream_encoder_set_streamable_subset
FLAC__stream_encoder_set_total_samples_estimate
FLAC__stream_encoder_set_verify

Sections

.text
Size: 102KB - Virtual size: 102KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 27KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
libmp4v2.dll
.dll windows:5 windows x86 arch:x86

bc928945f2d846d007405e740d0af648

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

f:\sandbox\20131120_103959\libmp4v2\Release\libmp4v2.pdb

Imports

wsock32

htonl
ntohl
htons

kernel32

SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsDebuggerPresent
MultiByteToWideChar
GetTempPathW
GetTempFileNameW
DeleteFileW
MoveFileW
CopyFileW
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
DisableThreadLibraryCalls
InterlockedCompareExchange
Sleep
InterlockedExchange
UnhandledExceptionFilter

msvcr90

_purecall
strlen
memset
strncpy
_stricmp
__iob_func
fprintf
isalnum
strcmp
wcscpy
wcslen
_wfopen
memcmp
strcpy
fgetpos
fsetpos
fread
feof
fwrite
sprintf
realloc
strncmp
__CxxFrameHandler3
fopen
fclose
tolower
sscanf
_ftime64
_fstat64
_encode_pointer
_malloc_crt
_encoded_null
_decode_pointer
_initterm
_initterm_e
_amsg_exit
_adjust_fdiv
__CppXcptFilter
?terminate@@YAXXZ
?_type_info_dtor_internal_method@type_info@@QAEXXZ
__clean_type_info_names_internal
_unlock
__dllonexit
_lock
_onexit
_except_handler4_common
_crt_debugger_hook
_errno
free
memcpy
_snprintf
memmove
malloc
_vsnprintf
??3@YAXPAX@Z
??2@YAPAXI@Z
_fileno
_CxxThrowException
ceil
strchr

Exports

Exports

MP4AddAudioTrack
MP4Close
MP4ConvertFromTrackTimestamp
MP4ConvertToTrackDuration
MP4Create
MP4Delete3GPMetadata
MP4DeleteMetadataAlbum
MP4DeleteMetadataAlbumArtist
MP4DeleteMetadataArtist
MP4DeleteMetadataComment
MP4DeleteMetadataCoverArt
MP4DeleteMetadataDisk
MP4DeleteMetadataFreeForm
MP4DeleteMetadataGenre
MP4DeleteMetadataGrouping
MP4DeleteMetadataName
MP4DeleteMetadataRating
MP4DeleteMetadataTempo
MP4DeleteMetadataTool
MP4DeleteMetadataTrack
MP4DeleteMetadataWriter
MP4DeleteMetadataYear
MP4FindTrackId
MP4Free
MP4Get3GPMetadata
MP4Get3GPMetadataInteger
MP4GetChunkIdFromTime
MP4GetMetadataAlbum
MP4GetMetadataAlbumArtist
MP4GetMetadataArtist
MP4GetMetadataComment
MP4GetMetadataCompilation
MP4GetMetadataCoverArt
MP4GetMetadataDisk
MP4GetMetadataFreeForm
MP4GetMetadataGenre
MP4GetMetadataGrouping
MP4GetMetadataName
MP4GetMetadataRating
MP4GetMetadataTempo
MP4GetMetadataTool
MP4GetMetadataTrack
MP4GetMetadataWriter
MP4GetMetadataYear
MP4GetNumberOfTracks
MP4GetSampleIdFromTime
MP4GetSampleTime
MP4GetStringProperty
MP4GetTrackAudioMpeg4Type
MP4GetTrackBitRate
MP4GetTrackBytesProperty
MP4GetTrackDuration
MP4GetTrackESConfiguration
MP4GetTrackEsdsObjectTypeId
MP4GetTrackH264LengthSize
MP4GetTrackH264ProfileLevel
MP4GetTrackH264SeqPictHeaders
MP4GetTrackIntegerProperty
MP4GetTrackMaxSampleSize
MP4GetTrackMediaDataName
MP4GetTrackNumberOfChunks
MP4GetTrackNumberOfSamples
MP4GetTrackTimeScale
MP4GetTrackType
MP4GetTrackVideoHeight
MP4GetTrackVideoMetadata
MP4GetTrackVideoWidth
MP4GetVideoProfileLevel
MP4MakeIsmaCompliant
MP4Modify
MP4Optimize
MP4PrintAudioInfo
MP4PrintVideoInfo
MP4Read
MP4ReadChunk
MP4ReadEx
MP4ReadSample
MP4Set3GPMetadata
MP4Set3GPMetadataInteger
MP4SetAudioProfileLevel
MP4SetMetadataAlbum
MP4SetMetadataAlbumArtist
MP4SetMetadataArtist
MP4SetMetadataComment
MP4SetMetadataCompilation
MP4SetMetadataCoverArt
MP4SetMetadataDisk
MP4SetMetadataFreeForm
MP4SetMetadataGenre
MP4SetMetadataGrouping
MP4SetMetadataName
MP4SetMetadataRating
MP4SetMetadataTempo
MP4SetMetadataTool
MP4SetMetadataTrack
MP4SetMetadataWriter
MP4SetMetadataYear
MP4SetTimeScale
MP4SetTrackESConfiguration
MP4WriteSample

Sections

.text
Size: 135KB - Virtual size: 135KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 50KB - Virtual size: 49KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 1016B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
libsndfile.dll
.dll windows:5 windows x86 arch:x86

57e967ce3ecc184c21c152d332959e2b

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetLastError
CreateFileW
CreateFileA
FormatMessageA
LocalFree
GetStdHandle
SetFilePointer
ReadFile
WriteFile
CloseHandle
GetFileType
GetFileSize
SetEndOfFile
WideCharToMultiByte
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
DisableThreadLibraryCalls
InterlockedCompareExchange
Sleep
InterlockedExchange
IsDebuggerPresent

msvcr90

strrchr
isdigit
_vsnprintf
memset
_encode_pointer
_malloc_crt
_encoded_null
_decode_pointer
_initterm
_initterm_e
_amsg_exit
_adjust_fdiv
__CppXcptFilter
__clean_type_info_names_internal
_unlock
__dllonexit
_lock
_onexit
_except_handler4_common
_crt_debugger_hook
_gmtime64
wcsrchr
wcsncpy
strtol
printf
isprint
sscanf
strstr
_errno
frexp
strncpy
strncat
malloc
free
calloc
_time64
tolower
_CIfmod
_CIpow
memcpy
floor

Exports

Exports

sf_close
sf_command
sf_get_string
sf_open
sf_open_virtual
sf_read_double
sf_read_float
sf_read_int
sf_read_raw
sf_read_short
sf_readf_double
sf_readf_float
sf_readf_int
sf_readf_short
sf_seek
sf_set_string
sf_wchar_open

Sections

.text
Size: 192KB - Virtual size: 192KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 38KB - Virtual size: 37KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 15KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 1024B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
nde.dll
.dll windows:5 windows x86 arch:x86

c6603071dd855830894ed4befcd489f8

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

f:\sandbox\20131120_103959\nde\Release\nde.pdb

Imports

kernel32

LoadLibraryW
GetProcAddress
FreeLibrary
InterlockedIncrement
InterlockedDecrement
HeapCreate
InterlockedExchange
OutputDebugStringA
OutputDebugStringW
GetCurrentProcessId
DeleteFileW
MoveFileW
CreateMutexW
LocalFree
MultiByteToWideChar
CreateFileW
GetLastError
Sleep
GetFileSize
CloseHandle
ReadFile
WriteFile
CopyFileW
WaitForSingleObject
DebugBreak
ReleaseMutex
WideCharToMultiByte
DisableThreadLibraryCalls
InterlockedCompareExchange
IsDebuggerPresent
GetFileAttributesW
CompareStringW
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter

user32

CharLowerW
MessageBoxA

advapi32

ConvertStringSecurityDescriptorToSecurityDescriptorW

nxlite

NXStringMalloc
NXStringSetHeap
NXStringRelease
NXStringRetain
NXStringCreateWithUTF16
NXStringCreateWithBytes

msvcr90

??2@YAPAXI@Z
free
malloc
calloc
memmove
_wcsicmp
_wtoi
wcsstr
wcschr
_wtoi64
iswxdigit
_vsnwprintf
realloc
strchr
strstr
_localtime64
_mktime64
_time64
wcsncpy
wcstol
?terminate@@YAXXZ
_encode_pointer
_malloc_crt
_encoded_null
_decode_pointer
_initterm
_initterm_e
_amsg_exit
_adjust_fdiv
__CppXcptFilter
_except_handler4_common
?_type_info_dtor_internal_method@type_info@@QAEXXZ
__clean_type_info_names_internal
_unlock
__dllonexit
_lock
_onexit
_crt_debugger_hook
memcpy
memset
??3@YAXPAX@Z
__CxxFrameHandler3

Exports

Exports

??0LinkedListEntry@@QAE@ABV0@@Z
??0LinkedListEntry@@QAE@XZ
??0Scanner@@QAE@ABV0@@Z
??0Scanner@@QAE@PAVTable@@@Z
??1LinkedListEntry@@UAE@XZ
??1Scanner@@MAE@XZ
??4LinkedListEntry@@QAEAAV0@ABV0@@Z
??4Scanner@@QAEAAV0@ABV0@@Z
??_7LinkedListEntry@@6B@
??_7Scanner@@6B@
?AddFilterById@Scanner@@QAEHEPAVField@@E@Z
?AddFilterByName@Scanner@@QAEHPB_WPAVField@@E@Z
?AddFilterOp@Scanner@@QAEHE@Z
?Bof@Scanner@@QAEHXZ
?CacheLastLocate@Scanner@@IAEXHHPAVField@@PAVIndex@@H@Z
?Cancel@Scanner@@QAEXXZ
?CheckFilters@Scanner@@IAEHXZ
?CheckIndexing@Table@@QAEHXZ
?ClearDirtyBit@Scanner@@QAEXXZ
?Delete@Scanner@@QAEXXZ
?DeleteField@Scanner@@QAEXPAVField@@@Z
?DeleteFieldById@Scanner@@QAEXE@Z
?DeleteFieldByName@Scanner@@QAEXPB_W@Z
?Edit@Scanner@@QAEXXZ
?EnableRowCache@Table@@QAEXXZ
?Eof@Scanner@@QAEHXZ
?First@Scanner@@QAEXPAH@Z
?FragmentationLevel@Scanner@@QAEMXZ
?GetColumnById@Scanner@@QAEPAVColumnField@@E@Z
?GetColumnByName@Scanner@@QAEPAVColumnField@@PB_W@Z
?GetColumns@Table@@QAEPAVRecord@@XZ
?GetCurrentRecord@Scanner@@IAEXXZ
?GetFieldById@Scanner@@QAEPAVField@@E@Z
?GetFieldByName@Scanner@@QAEPAVField@@PB_W@Z
?GetIndex@Scanner@@QAEPAVIndex@@XZ
?GetLastFilter@Scanner@@QAEPAVFilter@@XZ
?GetLastQuery@Scanner@@QAEPB_WXZ
?GetNext@LinkedListEntry@@QBEPAV1@XZ
?GetPrevious@LinkedListEntry@@QBEPAV1@XZ
?GetRecord@Scanner@@QAEPAVRecord@@H@Z
?GetRecordById@Scanner@@QAEXHH@Z
?GetRecordId@Scanner@@QAEHXZ
?GetRecordsCount@Scanner@@QAEHXZ
?GetTable@Scanner@@QAEPAVTable@@XZ
?HasIndexChanged@Scanner@@QAEHXZ
?IndexModified@Scanner@@QAEXXZ
?Insert@Scanner@@QAEXXZ
?Last@Scanner@@QAEXPAH@Z
?LocateById@Scanner@@QAEHHHPAVField@@PAH@Z
?LocateByIdEx@Scanner@@QAEHHHPAVField@@PAHH@Z
?LocateByName@Scanner@@QAEHPB_WHPAVField@@PAH@Z
?MatchFilter@Scanner@@QAE_NPAVFilter@@@Z
?MatchFilters@Scanner@@IAE_NXZ
?MatchSearch@Scanner@@IAE_NABV?$ValueSet@EV?$ValueSetComp@E@@@@PAVStringField@@@Z
?MatchSearches@Scanner@@IAE_NXZ
?New@Scanner@@QAEXXZ
?NewFieldById@Scanner@@QAEPAVField@@EE@Z
?NewFieldByName@Scanner@@QAEPAVField@@PB_WE@Z
?NewFieldByType@Scanner@@QAEPAVField@@EEE@Z
?Next@Scanner@@QAEHPAH@Z
?Post@Scanner@@QAEXXZ
?Previous@Scanner@@QAEHPAH@Z
?Query@Scanner@@QAEHPB_W@Z
?Query_CleanUp@Scanner@@IAEXXZ
?Query_EatSpace@Scanner@@SAPB_WPB_W@Z
?Query_GetNextToken@Scanner@@SAHPB_WPAHPAPA_WH@Z
?Query_LookupToken@Scanner@@KAHPB_W@Z
?Query_Parse@Scanner@@QAEHPB_W@Z
?Query_ProbeAlphaNum@Scanner@@SAPA_WPA_W@Z
?Query_ProbeNonAlphaNum@Scanner@@SAPB_WPB_W@Z
?Query_ProbeSpace@Scanner@@SAPA_WPA_W@Z
?Query_SyntaxError@Scanner@@IAEXH@Z
?Query_isControlChar@Scanner@@SAH_W@Z
?RemoveFilters@Scanner@@QAEXXZ
?Search@Scanner@@QAEXPB_W@Z
?SetWorkingIndexById@Scanner@@QAEHE@Z
?SetWorkingIndexByName@Scanner@@QAEHPB_W@Z
?WalkFields@Record@@QAEXP6A_NPAV1@PAVField@@PAX@Z2@Z
?WalkFields@Scanner@@QAEXP6A_NPAVRecord@@PAVField@@PAX@Z2@Z
?WalkFilters@Scanner@@QAEXP6A_NPAV1@PAVFilter@@PAX@Z2@Z
NDE_BinaryField_GetData
NDE_BinaryField_SetData
NDE_ColumnField_GetDataType
NDE_ColumnField_GetFieldID
NDE_ColumnField_GetFieldName
NDE_CreateDatabase
NDE_Database_CloseTable
NDE_Database_OpenTable
NDE_DestroyDatabase
NDE_Field_GetID
NDE_Field_GetType
NDE_Filter_GetData
NDE_Filter_GetID
NDE_Filter_GetOp
NDE_Init
NDE_Int128Field_SetValue
NDE_Int64Field_Create
NDE_Int64Field_GetValue
NDE_Int64Field_SetValue
NDE_IntegerField_Create
NDE_IntegerField_GetValue
NDE_IntegerField_SetValue
NDE_Quit
NDE_Scanner_AddFilterByID
NDE_Scanner_BOF
NDE_Scanner_Delete
NDE_Scanner_DeleteField
NDE_Scanner_EOF
NDE_Scanner_Edit
NDE_Scanner_First
NDE_Scanner_GetFieldByID
NDE_Scanner_GetFieldByName
NDE_Scanner_GetLastQuery
NDE_Scanner_GetRecordsCount
NDE_Scanner_LocateField
NDE_Scanner_LocateFilename
NDE_Scanner_LocateInteger
NDE_Scanner_LocateNDEFilename
NDE_Scanner_LocateNDEString
NDE_Scanner_LocateString
NDE_Scanner_New
NDE_Scanner_NewFieldByID
NDE_Scanner_NewFieldByName
NDE_Scanner_NewFieldByType
NDE_Scanner_Next
NDE_Scanner_Post
NDE_Scanner_Query
NDE_Scanner_RemoveFilters
NDE_Scanner_Search
NDE_Scanner_WalkFields
NDE_StringField_GetString
NDE_StringField_SetNDEString
NDE_StringField_SetString
NDE_Table_AddIndexByID
NDE_Table_AddIndexByIDW
NDE_Table_Compact
NDE_Table_CreateScanner
NDE_Table_DestroyScanner
NDE_Table_GetColumnByID
NDE_Table_GetColumnByName
NDE_Table_GetRecordsCount
NDE_Table_NewColumn
NDE_Table_NewColumnW
NDE_Table_PostColumns
NDE_Table_SetColumnSearchableByID
NDE_Table_Sync
NDE_Time_ApplyConversion
nde_wcsicmp_fn
ndestring_get_string
ndestring_malloc
ndestring_release
ndestring_retain
ndestring_wcsdup
ndestring_wcsndup

Sections

.text
Size: 61KB - Virtual size: 61KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
nsutil.dll
.dll windows:5 windows x86 arch:x86

6cff952b80426ac0809a76fd3589ec62

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

f:\sandbox\20131120_103959\nsutil\Release\nsutil.pdb

Imports

msvcr90

_adjust_fdiv
__CppXcptFilter
__clean_type_info_names_internal
_amsg_exit
__dllonexit
_lock
_onexit
_except_handler4_common
_crt_debugger_hook
_initterm_e
_initterm
_decode_pointer
_encoded_null
_malloc_crt
_encode_pointer
sin
exp
sqrt
cos
_aligned_malloc
calloc
_unlock
free
malloc
realloc

kernel32

SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
DisableThreadLibraryCalls
InterlockedCompareExchange
Sleep
InterlockedExchange
IsDebuggerPresent

Exports

Exports

nsutil_alpha_PremultiplyValue_RGB8
nsutil_alpha_Premultiply_RGB32
nsutil_fft_Create_F32R
nsutil_fft_Forward_F32R_IP
nsutil_iir_Create_F32
nsutil_iir_Create_F64
nsutil_iir_Destroy_F32
nsutil_iir_Destroy_F64
nsutil_iir_Filter_F32
nsutil_iir_Filter_F32_IP
nsutil_iir_Filter_F64_IP
nsutil_iir_Reset_F32
nsutil_iir_Reset_F64
nsutil_image_ConvertFlipped_RGB24_RGB32
nsutil_image_Convert_RGB24_RGB32
nsutil_image_Convert_YUV420_RGB32
nsutil_image_CopyFlipped_U8
nsutil_image_Copy_U8
nsutil_image_FillRectAlpha_RGB32
nsutil_image_PaletteFlipped_RGB32
nsutil_image_Palette_RGB32
nsutil_image_Recolor_RGB32
nsutil_pcm_FloatToInt_Interleaved
nsutil_pcm_FloatToInt_Interleaved_Gain
nsutil_pcm_IntToFloat_Interleaved
nsutil_pcm_IntToFloat_Interleaved_Gain
nsutil_pcm_S8ToS16_Interleaved
nsutil_pcm_U8ToS16_Interleaved
nsutil_stats_RMS_F32
nsutil_window_FillHann_F32_IP
nsutil_window_FillKaiser_F32_IP
nsutil_window_Hann_F32_IP
nsutil_window_Multiply_F32_IP

Sections

.text
Size: 397KB - Virtual size: 396KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
nxlite.dll
.dll windows:5 windows x86 arch:x86

13a1a81bfd09aa095fc471ce536c2497

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

f:\sandbox\20131120_103959\replicant\nx\Release\nxlite.pdb

Imports

kernel32

CopyFileW
ReplaceFileW
MoveFileW
DeleteFileW
DeleteCriticalSection
InitializeCriticalSection
LeaveCriticalSection
EnterCriticalSection
CompareStringW
Sleep
HeapReAlloc
HeapAlloc
HeapFree
GetProcessHeap
WideCharToMultiByte
MultiByteToWideChar
GetLastError
LCMapStringW
WaitForSingleObject
GetCurrentThread
SetThreadPriority
GetExitCodeThread
CloseHandle
CreateThread
GetTickCount
GetTempPathW
GetCurrentThreadId
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
QueryPerformanceCounter
DisableThreadLibraryCalls
InterlockedCompareExchange
RaiseException
LoadLibraryA
FreeLibrary
GetProcAddress
LocalAlloc
InterlockedExchange
CreateEventW
SetEvent
SetUnhandledExceptionFilter
IsDebuggerPresent
UnhandledExceptionFilter

user32

wsprintfW

msvcr90

??3@YAXPAX@Z
fwrite
fclose
sprintf
??_V@YAXPAX@Z
realloc
_purecall
swscanf
vsprintf
wcstol
wcstod
_ui64tow
_vscprintf
_i64tow
rand
_aligned_malloc
??2@YAPAXI@Z
__CxxFrameHandler3
_encode_pointer
_malloc_crt
_encoded_null
_decode_pointer
_initterm
_initterm_e
_amsg_exit
_adjust_fdiv
__CppXcptFilter
?terminate@@YAXXZ
?_type_info_dtor_internal_method@type_info@@QAEXXZ
__clean_type_info_names_internal
_unlock
__dllonexit
_lock
_onexit
_except_handler4_common
_crt_debugger_hook
_close
_read
fread
fgetc
_errno
_wfopen
fflush
_fseeki64
_chsize_s
ungetc
calloc
feof
_fstat64
_fileno
_wstat64
malloc
free
_wopen
_strdup
memcpy
_time64
memset

shlwapi

UrlGetPartW
PathIsURLW
PathCombineW

Exports

Exports

NXDataCreate
NXDataCreateEmpty
NXDataCreateFromURI
NXDataCreateWithSize
NXDataGet
NXDataGetDescription
NXDataGetMIME
NXDataGetSourceStat
NXDataGetSourceURI
NXDataRelease
NXDataRetain
NXDataSetDescription
NXDataSetMIME
NXDataSetSourceStat
NXDataSetSourceURI
NXDataSize
NXFileEndOfFile
NXFileLength
NXFileLockRegion
NXFileOpenFile
NXFileOpenProgressiveDownloader
NXFilePeekByte
NXFileProgressiveDownloaderAvailable
NXFileRead
NXFileRelease
NXFileRetain
NXFileSeek
NXFileStat
NXFileSync
NXFileTell
NXFileTruncate
NXFileUnlockRegion
NXFileWrite
NXFile_fstat
NXFile_move
NXFile_stat
NXFile_statFILE
NXFile_unlink
NXOnce
NXOnceInit
NXPathIsURL
NXPathMatchExtension
NXPathMatchExtensionList
NXPathProtocol
NXSleep
NXSleepYield
NXStringCompare
NXStringCreate
NXStringCreateBasePathFromFilename
NXStringCreateEmpty
NXStringCreateFromPath
NXStringCreateFromUInt64
NXStringCreateFromUTF8
NXStringCreateWithBytes
NXStringCreateWithCString
NXStringCreateWithFormatting
NXStringCreateWithHeap
NXStringCreateWithInt64
NXStringCreateWithUInt64
NXStringCreateWithUTF16
NXStringCreateWithUTF8
NXStringGetBytes
NXStringGetBytesDirect
NXStringGetBytesSize
NXStringGetCString
NXStringGetDoubleValue
NXStringGetGUIDValue
NXStringGetIntegerValue
NXStringGetLength
NXStringKeywordCaseCompare
NXStringKeywordCompare
NXStringKeywordCompareWithCString
NXStringMalloc
NXStringMallocWithHeap
NXStringRealloc
NXStringRelease
NXStringRetain
NXStringSetHeap
NXThreadCreate
NXThreadCurrentSetPriority
NXThreadJoin
NXURICreateFromPath
NXURICreateRemovingFilename
NXURICreateTemp
NXURICreateTempForFilepath
NXURICreateTempWithExtension
NXURICreateWithNXString
NXURICreateWithPath
NXURICreateWithUTF8
NXURIGetLength
NXURIGetNXString
NXURIMalloc
NXURIRelease
NXURIRetain

Sections

.text
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
pconfig.dcf
pxsdkpls.DLL
.dll windows:4 windows x86 arch:x86

41383b944cb04edcb21b7aa16b803117

Code Sign

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

15-06-2007 00:00

Not After

14-06-2012 23:59

Subject

CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04-12-2003 00:00

Not After

03-12-2013 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

41:91:a1:5a:39:78:df:cf:49:65:66:38:1d:4c:75:c2
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

16-07-2004 00:00

Not After

15-07-2014 23:59

Subject

CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

45:9f:81:c4:54:6f:de:fc:ff:2f:1a:11:05:a6:ef:bd
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US

Not Before

22-04-2009 00:00

Not After

18-06-2012 23:59

Subject

CN=Sonic Solutions,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Sonic Solutions,ST=California,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

61:0c:12:06:00:00:00:00:00:1b
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

23-05-2006 17:01

Not After

23-05-2016 17:11

Subject

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

45:37:38:c1:dd:bb:6d:01:b5:23:b4:18:03:33:c4:fb:08:74:ef:d4
Signer

Actual PE Digest

45:37:38:c1:dd:bb:6d:01:b5:23:b4:18:03:33:c4:fb:08:74:ef:d4

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

d:\build\Pxsdkrel428\Code\Storage\run\w32\PXSDKPLS.pdb

Imports

version

GetFileVersionInfoSizeA
GetFileVersionInfoA
VerQueryValueA
GetFileVersionInfoSizeW
GetFileVersionInfoW
VerQueryValueW

kernel32

GetProcAddress
LoadLibraryA
LoadLibraryW
GetCurrentProcess
GetPrivateProfileStringA
GetTempPathA
lstrcpyA
GetModuleFileNameA
FindClose
FindFirstFileW
OutputDebugStringA
lstrcpynW
GetTempPathW
GetModuleFileNameW
lstrcpynA
GetVersionExA
GlobalLock
GlobalAlloc
GlobalFree
GlobalUnlock
GlobalHandle
GetFileAttributesA
DeleteFileA
FindFirstFileA
GetTempFileNameA
CloseHandle
CreateFileA
SetFilePointer
ReadFile
GetCurrentDirectoryA
WaitForSingleObject
CreateEventA
GetTimeZoneInformation
FileTimeToSystemTime
FileTimeToLocalFileTime
GetSystemTimeAsFileTime
GetFileSize
WriteFile
GetLastError
FreeLibrary
GetEnvironmentStrings
FreeEnvironmentStringsA
GetStartupInfoA
GetFileType
GetStdHandle
SetHandleCount
HeapSize
TerminateProcess
IsBadWritePtr
VirtualFree
HeapCreate
HeapDestroy
GetStringTypeW
GetStringTypeA
IsValidCodePage
IsValidLocale
EnumSystemLocalesA
GetLocaleInfoA
GetUserDefaultLCID
DeleteCriticalSection
GetCPInfo
GetOEMCP
GetACP
LCMapStringW
LCMapStringA
VirtualQuery
GetSystemInfo
VirtualAlloc
VirtualProtect
LeaveCriticalSection
EnterCriticalSection
FreeEnvironmentStringsW
GetEnvironmentStringsW
UnhandledExceptionFilter
SetEnvironmentVariableA
CompareStringW
CompareStringA
GetModuleHandleA
GetLocaleInfoW
SetEndOfFile
CreateFileW
FlushFileBuffers
SetStdHandle
SetUnhandledExceptionFilter
InterlockedExchange
IsBadReadPtr
IsBadCodePtr
TlsGetValue
TlsSetValue
TlsFree
CreateMutexA
ReleaseMutex
GetTickCount
VirtualUnlock
VirtualLock
ExitProcess
RtlUnwind
WideCharToMultiByte
MultiByteToWideChar
HeapFree
HeapAlloc
GetCurrentThreadId
GetCommandLineA
GetCurrentDirectoryW
GetFullPathNameW
GetDriveTypeA
GetFullPathNameA
GetCurrentProcessId
HeapReAlloc
RaiseException
QueryPerformanceCounter
TlsAlloc
SetLastError
InitializeCriticalSection

user32

wsprintfA
DispatchMessageA
PeekMessageA
TranslateMessage
GetQueueStatus
CharUpperA
wvsprintfA

Exports

Exports

PrimoSDK_AddAudioEffect
PrimoSDK_AddAudioStream
PrimoSDK_AddAudioTrack
PrimoSDK_AddAudioTrackEx
PrimoSDK_AddAudioTrackExWcs
PrimoSDK_AddAudioTrackWcs
PrimoSDK_AddBootable
PrimoSDK_AddBootableEx
PrimoSDK_AddBootableExWcs
PrimoSDK_AddCDText
PrimoSDK_AddCDTextEJ
PrimoSDK_AddFile
PrimoSDK_AddFileStreamWCS
PrimoSDK_AddFileWCS
PrimoSDK_AddFolder
PrimoSDK_AddFolderWCS
PrimoSDK_AddTrackToStream
PrimoSDK_AddVideoCDStream
PrimoSDK_AddVideoCDStreamWcs
PrimoSDK_CDTextInfo
PrimoSDK_CDTextInfoEJ
PrimoSDK_CheckAudioPlaylist
PrimoSDK_CloseAudio
PrimoSDK_CloseImage
PrimoSDK_CloseReadDisc
PrimoSDK_CloseVideoCD
PrimoSDK_Command
PrimoSDK_CopyDisc
PrimoSDK_DiscInfo
PrimoSDK_DiscInfo2
PrimoSDK_DiscInfoEx
PrimoSDK_End
PrimoSDK_EraseMedium
PrimoSDK_ExtractAudioToBuffer
PrimoSDK_ExtractAudioTrack
PrimoSDK_ExtractAudioTrackWcs
PrimoSDK_GIInfo
PrimoSDK_GIInfoEx
PrimoSDK_GIInfoExWcs
PrimoSDK_GetAudioTrackInfo
PrimoSDK_GetDVDType
PrimoSDK_GetDiscSpeed
PrimoSDK_GetDiscSpeedList
PrimoSDK_GetHandle
PrimoSDK_GetISRC
PrimoSDK_GetPositionAudio
PrimoSDK_GetSpaceUsed
PrimoSDK_Init
PrimoSDK_InitLimited
PrimoSDK_InitStreamFileSystem
PrimoSDK_ListSupportedUnits
PrimoSDK_MakeGIWcs
PrimoSDK_MakeOtherCDImageWcs
PrimoSDK_MoveMedium
PrimoSDK_MungeName
PrimoSDK_NewAudio
PrimoSDK_NewAudioPlaylist
PrimoSDK_NewImage
PrimoSDK_NewImageWCS
PrimoSDK_NewVideoCD
PrimoSDK_NextExtractAudioBuffer
PrimoSDK_OpenReadDisc
PrimoSDK_OpenReadDiscEx
PrimoSDK_PauseResumeAudio
PrimoSDK_PlayAudio
PrimoSDK_ReadDisc
PrimoSDK_ReadGI
PrimoSDK_RegisterDeviceState
PrimoSDK_ReleaseHandle
PrimoSDK_RunningStatus
PrimoSDK_SaveGI
PrimoSDK_SaveGIWcs
PrimoSDK_SaveImage
PrimoSDK_SaveImageWcs
PrimoSDK_SetAudioLibraryCallback
PrimoSDK_SetProperty
PrimoSDK_StopAudio
PrimoSDK_StreamData
PrimoSDK_StreamDisc
PrimoSDK_StreamGetBlocks
PrimoSDK_StreamPutBlocks
PrimoSDK_Trace
PrimoSDK_TrackInfo
PrimoSDK_UnitAIN
PrimoSDK_UnitInfo
PrimoSDK_UnitInfo2
PrimoSDK_UnitLock
PrimoSDK_UnitReady
PrimoSDK_UnitSpeeds
PrimoSDK_UnitStatus
PrimoSDK_UnitVxBlock
PrimoSDK_VerifyDisc
PrimoSDK_VerifyGI
PrimoSDK_VerifyGIWcs
PrimoSDK_VerifyImage
PrimoSDK_VerifyOtherCDImage
PrimoSDK_VerifyOtherCDImageWcs
PrimoSDK_WriteAudio
PrimoSDK_WriteAudioEx
PrimoSDK_WriteAudioTrack
PrimoSDK_WriteAudioTrackStream
PrimoSDK_WriteAudioTrackWcs
PrimoSDK_WriteGI
PrimoSDK_WriteGIWcs
PrimoSDK_WriteImage
PrimoSDK_WriteOtherCDImage
PrimoSDK_WriteOtherCDImageWcs
PrimoSDK_WriteVideoCD

Sections

.text
Size: 140KB - Virtual size: 136KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 24KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 12KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
tataki.dll
.dll windows:5 windows x86 arch:x86

e4e6cad233ef266efbf07621466e1ab9

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

f:\sandbox\20131120_103959\tataki\Release\tataki.pdb

Imports

nsutil

nsutil_alpha_PremultiplyValue_RGB8
nsutil_alpha_Premultiply_RGB32
nsutil_image_FillRectAlpha_RGB32

kernel32

GetStringTypeExW
InterlockedExchange
InterlockedCompareExchange
GetCurrentProcessId
GetSystemTimeAsFileTime
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
LocalAlloc
Sleep
TlsSetValue
TlsGetValue
TlsFree
TlsAlloc
FreeLibrary
RaiseException
GetLastError
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
GetProcAddress
LoadLibraryA
QueryPerformanceFrequency
OutputDebugStringA

user32

SetRect
OffsetRect
GetWindowRect
GetDCEx
BeginPaint
EndPaint
ReleaseDC
GetDC
PtInRect
IsRectEmpty
DrawFrameControl
IntersectRect

gdi32

GetObjectA
InvertRgn
GetRegionData
CreateRectRgnIndirect
RectInRegion
GetRgnBox
OffsetRgn
PtInRegion
ExtCreateRegion
SetRectRgn
CombineRgn
CreateRectRgn
GetDeviceCaps
StretchBlt
SetStretchBltMode
BitBlt
GetClipRgn
GetClipBox
SelectClipRgn
LineTo
MoveToEx
Rectangle
CreatePen
SelectObject
DeleteObject
DeleteDC
CreateCompatibleDC
CreateDIBSection
CreateSolidBrush
FillRgn
SetBkColor
ExtTextOutW
GetStockObject

msvcr90

memcpy
__CxxFrameHandler3
?terminate@@YAXXZ
_unlock
__dllonexit
_encode_pointer
_lock
_onexit
_decode_pointer
_malloc_crt
_encoded_null
_initterm
_initterm_e
_amsg_exit
_adjust_fdiv
__CppXcptFilter
_except_handler4_common
?_type_info_dtor_internal_method@type_info@@QAEXXZ
__clean_type_info_names_internal
_crt_debugger_hook
realloc
memmove
memset
malloc
vsprintf_s
wcslen
strlen
_wcsdup
free
??2@YAPAXI@Z
_purecall
??_V@YAXPAX@Z
??3@YAXPAX@Z
_except_handler3

Exports

Exports

??0AutoSkinBitmap@@QAE@ABV0@@Z
??0AutoSkinBitmap@@QAE@PB_W@Z
??0BaseCloneCanvas@@QAE@ABV0@@Z
??0BaseCloneCanvas@@QAE@PAVifc_canvas@@@Z
??0BitsCanvas@@QAE@ABV0@@Z
??0BitsCanvas@@QAE@PAXHH@Z
??0BltCanvas@@QAE@ABV0@@Z
??0BltCanvas@@QAE@HHPAUHWND__@@H@Z
??0BltCanvas@@QAE@PAUHBITMAP__@@@Z
??0BltCanvas@@QAE@XZ
??0Canvas@@IAE@XZ
??0Canvas@@QAE@ABV0@@Z
??0DCBltCanvas@@QAE@ABV0@@Z
??0DCBltCanvas@@QAE@XZ
??0DCCanvas@@QAE@ABV0@@Z
??0DCCanvas@@QAE@PAUHDC__@@PAVBaseWnd@@@Z
??0DCExBltCanvas@@QAE@ABV0@@Z
??0DCExBltCanvas@@QAE@PAUHWND__@@PAUHRGN__@@K@Z
??0DDSurfaceCanvas@@QAE@ABV0@@Z
??0DDSurfaceCanvas@@QAE@PAUIDirectDrawSurface@@HH@Z
??0FilteredColor@@QAE@ABV0@@Z
??0FilteredColor@@QAE@KPB_W@Z
??0MemCanvas@@QAE@ABV0@@Z
??0MemCanvas@@QAE@XZ
??0PaintBltCanvas@@QAE@ABV0@@Z
??0PaintBltCanvas@@QAE@XZ
??0PaintCanvas@@QAE@ABV0@@Z
??0PaintCanvas@@QAE@XZ
??0RegionI@@QAE@ABV0@@Z
??0RegionI@@QAE@HHHH@Z
??0RegionI@@QAE@PAUHRGN__@@@Z
??0RegionI@@QAE@PAVCanvas@@PAUtagRECT@@@Z
??0RegionI@@QAE@PAVSkinBitmap@@PAUtagRECT@@HH_NHDHH@Z
??0RegionI@@QAE@PBUtagRECT@@@Z
??0RegionI@@QAE@PBV0@@Z
??0RegionI@@QAE@XZ
??0RegionServerI@@QAE@ABV0@@Z
??0RegionServerI@@QAE@XZ
??0SkinBitmap@@QAE@ABV0@@Z
??0SkinBitmap@@QAE@HHK@Z
??0SkinBitmap@@QAE@PAKHH_N@Z
??0SkinBitmap@@QAE@PAUHBITMAP__@@@Z
??0SkinBitmap@@QAE@PAUHBITMAP__@@PAUHDC__@@HPAX@Z
??0SkinBitmap@@QAE@PAUHINSTANCE__@@HPB_W@Z
??0SkinBitmap@@QAE@PAVifc_canvas@@@Z
??0SkinBitmap@@QAE@PB_WH@Z
??0SkinColor@@QAE@ABV0@@Z
??0SkinColor@@QAE@PB_W0@Z
??0SysCanvas@@QAE@ABV0@@Z
??0SysCanvas@@QAE@XZ
??0TextInfoCanvas@@QAE@ABV0@@Z
??0TextInfoCanvas@@QAE@PAVBaseWnd@@@Z
??0WndCanvas@@QAE@ABV0@@Z
??0WndCanvas@@QAE@PAVBaseWnd@@@Z
??0WndCanvas@@QAE@XZ
??1AutoSkinBitmap@@UAE@XZ
??1BaseCloneCanvas@@UAE@XZ
??1BitsCanvas@@UAE@XZ
??1BltCanvas@@UAE@XZ
??1Canvas@@UAE@XZ
??1DCBltCanvas@@UAE@XZ
??1DCCanvas@@UAE@XZ
??1DCExBltCanvas@@UAE@XZ
??1DDSurfaceCanvas@@UAE@XZ
??1FilteredColor@@UAE@XZ
??1MemCanvas@@UAE@XZ
??1PaintBltCanvas@@UAE@XZ
??1PaintCanvas@@UAE@XZ
??1RegionI@@UAE@XZ
??1RegionServerI@@UAE@XZ
??1SkinBitmap@@QAE@XZ
??1SkinColor@@UAE@XZ
??1SysCanvas@@UAE@XZ
??1TextInfoCanvas@@UAE@XZ
??1WndCanvas@@UAE@XZ
??4AutoSkinBitmap@@QAEAAV0@ABV0@@Z
??4AutoSkinBitmap@@QAEHH@Z
??4AutoSkinBitmap@@QAEPB_WPB_W@Z
??4BaseCloneCanvas@@QAEAAV0@ABV0@@Z
??4BitsCanvas@@QAEAAV0@ABV0@@Z
??4Blenders@@QAEAAV0@ABV0@@Z
??4BltCanvas@@QAEAAV0@ABV0@@Z
??4Canvas@@QAEAAV0@ABV0@@Z
??4DCBltCanvas@@QAEAAV0@ABV0@@Z
??4DCCanvas@@QAEAAV0@ABV0@@Z
??4DCExBltCanvas@@QAEAAV0@ABV0@@Z
??4DDSurfaceCanvas@@QAEAAV0@ABV0@@Z
??4FilteredColor@@QAEAAV0@ABV0@@Z
??4MemCanvas@@QAEAAV0@ABV0@@Z
??4PaintBltCanvas@@QAEAAV0@ABV0@@Z
??4PaintCanvas@@QAEAAV0@ABV0@@Z
??4RegionI@@QAEAAV0@ABV0@@Z
??4RegionServerI@@QAEAAV0@ABV0@@Z
??4SkinBitmap@@QAEAAV0@ABV0@@Z
??4SkinColor@@QAEAAV0@ABV0@@Z
??4SkinColor@@QAEPB_WPB_W@Z
??4SysCanvas@@QAEAAV0@ABV0@@Z
??4TextInfoCanvas@@QAEAAV0@ABV0@@Z
??4WndCanvas@@QAEAAV0@ABV0@@Z
??BAutoSkinBitmap@@QAEPAVSkinBitmap@@XZ
??BSkinColor@@QAEHXZ
??_7AutoSkinBitmap@@6B@
??_7BaseCloneCanvas@@6B@
??_7BitsCanvas@@6B@
??_7BltCanvas@@6B@
??_7DCBltCanvas@@6B@
??_7DCCanvas@@6B@
??_7DCExBltCanvas@@6B@
??_7DDSurfaceCanvas@@6B@
??_7FilteredColor@@6B@
??_7MemCanvas@@6B@
??_7PaintBltCanvas@@6B@
??_7PaintCanvas@@6B@
??_7RegionI@@6B@
??_7RegionServerI@@6B@
??_7SkinBitmap@@6B@
??_7SkinColor@@6B@
??_7SysCanvas@@6B@
??_7TextInfoCanvas@@6B@
??_7WndCanvas@@6B@
??_FAutoSkinBitmap@@QAEXXZ
??_FBaseCloneCanvas@@QAEXXZ
??_FDCCanvas@@QAEXXZ
??_FFilteredColor@@QAEXXZ
??_FSkinColor@@QAEXXZ
?AddRef@SkinBitmap@@QAEXXZ
?AllocBitmap@BltCanvas@@AAEXHHH@Z
?BLEND4@Blenders@@SAIPAIIHH@Z
?BLEND4_MMX@Blenders@@SAIPAIIHH@Z
?BLEND_ADJ1@Blenders@@SAIIIH@Z
?BLEND_ADJ1_MMX@Blenders@@SAIIIH@Z
?BLEND_ADJ2@Blenders@@SAIII@Z
?BLEND_ADJ2_MMX@Blenders@@SAIII@Z
?BLEND_ADJ3@Blenders@@SAIIIH@Z
?BLEND_ADJ3_MMX@Blenders@@SAIIIH@Z
?BLEND_AVG@Blenders@@SAIII@Z
?BLEND_AVG_MMX@Blenders@@SAIII@Z
?BLEND_MMX_END@Blenders@@SAXXZ
?BLEND_MUL@Blenders@@SAIIH@Z
?BLEND_MUL_MMX@Blenders@@SAIIH@Z
?DestructiveResize@BltCanvas@@QAEXHHH@Z
?GetColor@SkinColor@@SAKPB_W0K@Z
?MMX_AVAILABLE@Blenders@@SAHXZ
?Release@SkinBitmap@@QAEXXZ
?TryGetColor@SkinColor@@SA_NPAKPB_W1@Z
?_dispatch@AutoSkinBitmap@@MAEHHPAXPAPAXH@Z
?_dispatch@Canvas@@MAEHHPAXPAPAXH@Z
?_dispatch@RegionI@@MAEHHPAXPAPAXH@Z
?_dispatch@RegionServerI@@MAEHHPAXPAPAXH@Z
?addRect@RegionI@@QAEXPBUtagRECT@@@Z
?addRef@RegionServerI@@UAEXPAX@Z
?addRegion@RegionI@@QAEXPBVapi_region@@@Z
?alphaToRegionRect@RegionI@@AAEPAUHRGN__@@PAVSkinBitmap@@HH_NHHHH1HEHH@Z
?alphaToRegionRect@RegionI@@QAEPAUHRGN__@@PAXHHHHHHHH_NHHHH1HEHH@Z
?alphatable@Blenders@@2PAY0BAA@EA
?andRegion@RegionI@@QAEXPBVapi_region@@@Z
?antiAliasTo@Canvas@@QAEXPAV1@HHH@Z
?attachToClient@WndCanvas@@QAEHPAVBaseWnd@@@Z
?beginPaint@PaintBltCanvas@@QAEHPAVBaseWnd@@@Z
?beginPaint@PaintCanvas@@QAEHPAUHWND__@@@Z
?beginPaint@PaintCanvas@@QAEHPAVBaseWnd@@@Z
?beginPaintNC@PaintBltCanvas@@QAEHPAVBaseWnd@@@Z
?blit@Canvas@@QAEXHHPAV1@HHHH@Z
?blit@SkinBitmap@@QAEXPAVifc_canvas@@HH@Z
?blitAlpha@AutoSkinBitmap@@QAEXPAVifc_canvas@@HHH@Z
?blitAlpha@Canvas@@QAEXPAVifc_canvas@@HHH@Z
?blitAlpha@SkinBitmap@@QAEXPAVifc_canvas@@HHH@Z
?blitRectToTile@SkinBitmap@@QAEXPAVifc_canvas@@PAUtagRECT@@1HHH@Z
?blitTile@SkinBitmap@@QAEXPAVifc_canvas@@PAUtagRECT@@HHH@Z
?blitToRect@Canvas@@QAEXPAVifc_canvas@@PAUtagRECT@@1H@Z
?blitToRect@SkinBitmap@@QAEXPAVifc_canvas@@PAUtagRECT@@1H@Z
?bmpToBits@SkinBitmap@@AAEXPAUHBITMAP__@@PAUHDC__@@@Z
?clone@BaseCloneCanvas@@QAEHPAVifc_canvas@@@Z
?clone@RegionI@@QAEPAVapi_region@@XZ
?cloneDC@DCBltCanvas@@QAEHPAUHDC__@@PAUtagRECT@@PAVBaseWnd@@@Z
?cloneDC@DCCanvas@@QAEHPAUHDC__@@PAVBaseWnd@@@Z
?colorToColor@Canvas@@QAEXKKPAUtagRECT@@@Z
?commitDC@DCBltCanvas@@QAEHXZ
?createCompatible@MemCanvas@@QAEHPAVCanvas@@@Z
?debug@Canvas@@QAEXXZ
?debug@RegionI@@QAEXH@Z
?delRef@RegionServerI@@UAEXPAX@Z
?deoptimize@RegionI@@AAEXXZ
?disposeClone@RegionI@@QAEXPAVapi_region@@@Z
?disposeSkinBitmap@BltCanvas@@QAEXPAVSkinBitmap@@@Z
?doesIntersectRect@RegionI@@QAEHPBUtagRECT@@@Z
?doesIntersectRgn@RegionI@@QAEHPBVapi_region@@@Z
?drawRect@Canvas@@QAEXPBUtagRECT@@HKH@Z
?drawSysObject@Canvas@@QAEXPBUtagRECT@@HH@Z
?empty@RegionI@@QAEXXZ
?enclosed@RegionI@@QAEHPBVapi_region@@PAV2@@Z
?ensureFiltered@FilteredColor@@AAEXXZ
?enter@DDSurfaceCanvas@@QAEXXZ
?enumRect@RegionI@@QAEHHPAUtagRECT@@@Z
?equals@RegionI@@QAEHPBVapi_region@@@Z
?exit@DDSurfaceCanvas@@QAEXXZ
?fillBits@BltCanvas@@QAEXK@Z
?fillRect@Canvas@@QAEXPBUtagRECT@@K@Z
?fillRectAlpha@Canvas@@QAEXPBUtagRECT@@KH@Z
?fillRgn@Canvas@@QAEXPAVRegionI@@K@Z
?getAlpha@SkinBitmap@@QBEHXZ
?getBaseWnd@Canvas@@UAEPAVBaseWnd@@XZ
?getBitmap@AutoSkinBitmap@@QAEPAVSkinBitmap@@XZ
?getBitmap@BltCanvas@@QAEPAUHBITMAP__@@XZ
?getBitmapName@AutoSkinBitmap@@QAEPB_WXZ
?getBitmapName@SkinBitmap@@QAEPB_WXZ
?getBits@BltCanvas@@QAEPAXXZ
?getBits@Canvas@@QAEPAXXZ
?getBits@PaintBltCanvas@@QAEPAXXZ
?getBits@SkinBitmap@@UAEPAXXZ
?getBox@RegionI@@QAEXPAUtagRECT@@@Z
?getBpp@SkinBitmap@@QBEHXZ
?getClipBox@Canvas@@QAEHPAUtagRECT@@@Z
?getClipRgn@Canvas@@QAEHPAVapi_region@@@Z
?getColor@FilteredColor@@QAEKXZ
?getColorName@FilteredColor@@UAEPB_WXZ
?getColorName@SkinColor@@UAEPB_WXZ
?getColorRef@FilteredColor@@QAEPAKXZ
?getDim@Canvas@@QAE_NPAH00@Z
?getEventType@AutoSkinBitmap@@IAEKXZ
?getFontInfo@Canvas@@IAEPBUFontInfo@Wasabi@@XZ
?getFullHeight@SkinBitmap@@QBEHXZ
?getFullWidth@SkinBitmap@@QBEHXZ
?getHDC@Canvas@@QAEPAUHDC__@@XZ
?getHeight@AutoSkinBitmap@@QAEHXZ
?getHeight@SkinBitmap@@QBEHXZ
?getNumRects@RegionI@@QAEHXZ
?getNumRefs@RegionServerI@@UAEHXZ
?getOSHandle@RegionI@@QAEPAUHRGN__@@XZ
?getOffsets@Canvas@@QAEXPAH0@Z
?getPenColor@Canvas@@QAEKXZ
?getPenStyle@Canvas@@QAEHXZ
?getPenWidth@Canvas@@QAEHXZ
?getPixel@SkinBitmap@@QAEKHH@Z
?getRcPaint@PaintBltCanvas@@QAEXPAUtagRECT@@@Z
?getRcPaint@PaintCanvas@@QAEXPAUtagRECT@@@Z
?getResamplingMode@AutoSkinBitmap@@QAEHXZ
?getRootWnd@Canvas@@QAEPAVifc_window@@XZ
?getSkinBitmap@BltCanvas@@QAEPAVSkinBitmap@@XZ
?getSystemFontScale@Canvas@@QAENXZ
?getTextAlign@Canvas@@QAEHXZ
?getTextAntialias@Canvas@@QAEHXZ
?getTextBkColor@Canvas@@QAEKXZ
?getTextBold@Canvas@@QAEHXZ
?getTextColor@Canvas@@QAEKXZ
?getTextExtent@Canvas@@QAEXPB_WPAH1PBUFontInfo@Wasabi@@@Z
?getTextFont@Canvas@@QAEPB_WXZ
?getTextHeight@Canvas@@QAEHPBUFontInfo@Wasabi@@@Z
?getTextHeight@Canvas@@QAEHPB_WPBUFontInfo@Wasabi@@@Z
?getTextItalic@Canvas@@QAEHXZ
?getTextOpaque@Canvas@@QAEHXZ
?getTextSize@Canvas@@QAEHXZ
?getTextUnderline@Canvas@@QAEHXZ
?getTextWidth@Canvas@@QAEHPB_WPBUFontInfo@Wasabi@@@Z
?getWidth@AutoSkinBitmap@@QAEHXZ
?getWidth@SkinBitmap@@QBEHXZ
?getX@SkinBitmap@@QBEHXZ
?getXOffset@Canvas@@QBEHXZ
?getY@SkinBitmap@@QBEHXZ
?getYOffset@Canvas@@QBEHXZ
?hflip@BltCanvas@@QAEXH@Z
?init@Blenders@@SAXXZ
?init@RegionI@@AAEXXZ
?intersectRect@RegionI@@QAEHPBUtagRECT@@PAVapi_region@@@Z
?intersectRgn@RegionI@@QAEHPBVapi_region@@PAV2@@Z
?isEmpty@RegionI@@QAEHXZ
?isFixedCoords@Canvas@@QAE_NXZ
?isInvalid@SkinBitmap@@QAEHXZ
?isRect@RegionI@@QAEHXZ
?isready@DDSurfaceCanvas@@QAEHXZ
?iteratorValid@SkinColor@@QAEHXZ
?lineDraw@Canvas@@QAEXHHHH@Z
?lineTo@Canvas@@QAEXHH@Z
?makeAlpha@BltCanvas@@QAEXH@Z
?makeSkinBitmap@BltCanvas@@QAEPAVSkinBitmap@@XZ
?makeWindowRegion@RegionI@@QAEPAUHRGN__@@XZ
?maskColor@BltCanvas@@QAEXKK@Z
?mmx_available@Blenders@@2HA
?moveTo@Canvas@@QAEXHH@Z
?notify@AutoSkinBitmap@@IAEHHHH@Z
?offset@RegionI@@QAEXHH@Z
?offsetRect@Canvas@@QAEXPAUtagRECT@@@Z
?optimize@RegionI@@AAEXXZ
?popPen@Canvas@@QAEXXZ
?premultiply@Canvas@@SAXPAKHH@Z
?ptInRegion@RegionI@@QAE_NPBUtagPOINT@@@Z
?pushPen@Canvas@@QAEXHHK@Z
?pushPen@Canvas@@QAEXK@Z
?reload@AutoSkinBitmap@@QAEXXZ
?reset@AutoSkinBitmap@@QAEXXZ
?scale@RegionI@@QAEXNN_N@Z
?selectClipRgn@Canvas@@QAEXPAVapi_region@@@Z
?setBaseWnd@Canvas@@QAEXPAVBaseWnd@@@Z
?setBitmap@AutoSkinBitmap@@QAEHH@Z
?setBitmap@AutoSkinBitmap@@QAEPB_WPB_W@Z
?setColor@FilteredColor@@UAEXK@Z
?setColor@SkinColor@@UAEXK@Z
?setColorGroup@FilteredColor@@UAEXPB_W@Z
?setElementName@SkinColor@@QAEXPB_W@Z
?setHInstance@AutoSkinBitmap@@QAEXPAUHINSTANCE__@@@Z
?setHInstanceBitmapColorGroup@AutoSkinBitmap@@QAEXPB_W@Z
?setHasAlpha@SkinBitmap@@QAEXH@Z
?setOrigDC@DCBltCanvas@@QAEHPAUHDC__@@@Z
?setRect@RegionI@@QAEXPBUtagRECT@@@Z
?setResamplingMode@AutoSkinBitmap@@QAEXH@Z
?skincb_onReset@AutoSkinBitmap@@IAEHXZ
?stretch@Canvas@@QAEXPAVifc_canvas@@HHHH@Z
?stretch@SkinBitmap@@QAEXPAVifc_canvas@@HHHH@Z
?stretchRectToRect@SkinBitmap@@QAEXPAVifc_canvas@@PAUtagRECT@@1@Z
?stretchToRect@AutoSkinBitmap@@QAEXPAVifc_canvas@@PAUtagRECT@@@Z
?stretchToRect@SkinBitmap@@QAEXPAVifc_canvas@@PAUtagRECT@@@Z
?stretchToRectAlpha@AutoSkinBitmap@@QAEXPAVifc_canvas@@PAUtagRECT@@1H@Z
?stretchToRectAlpha@AutoSkinBitmap@@QAEXPAVifc_canvas@@PAUtagRECT@@H@Z
?stretchToRectAlpha@Canvas@@QAEXPAVifc_canvas@@PAUtagRECT@@1H@Z
?stretchToRectAlpha@SkinBitmap@@QAEXPAVifc_canvas@@PAUtagRECT@@1H@Z
?stretchToRectAlpha@SkinBitmap@@QAEXPAVifc_canvas@@PAUtagRECT@@H@Z
?stretchblit@Canvas@@QAEXHHHHPAV1@HHHH@Z
?subtractRect@RegionI@@QAEXPBUtagRECT@@@Z
?subtractRegion@RegionI@@QAEXPBVapi_region@@@Z
?textOut@Canvas@@QAEXHHHHPB_WPBUFontInfo@Wasabi@@@Z
?textOut@Canvas@@QAEXHHPB_WPBUFontInfo@Wasabi@@@Z
?textOutCentered@Canvas@@QAEXPAUtagRECT@@PB_WPBUFontInfo@Wasabi@@@Z
?textOutEllipsed@Canvas@@QAEXHHHHPB_WPBUFontInfo@Wasabi@@@Z
?textOutWrapped@Canvas@@QAEXHHHHPB_WPBUFontInfo@Wasabi@@@Z
?textOutWrappedPathed@Canvas@@QAEXHHHPB_WPBUFontInfo@Wasabi@@@Z
?v@SkinColor@@QAEKK@Z
?vflip@BltCanvas@@QAEXH@Z
Init
Quit

Sections

.text
Size: 56KB - Virtual size: 55KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 22KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 66KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
whatsnew.txt
winamp.exe
.exe windows:5 windows x86 arch:x86

2fe034f1971c8bdf7d0ae3b13cc3f8fc

Code Sign

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

21-12-2012 00:00

Not After

30-12-2020 23:59

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

07
Certificate

Issuer

CN=America Online Root Certification Authority 1,O=America Online Inc.,C=US

Not Before

04-06-2004 17:26

Not After

04-06-2029 17:26

Subject

CN=AOL Member CA,O=America Online Inc.,L=Dulles,ST=Virginia,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

5a:a8:c9:c3:87:71:9f:49:a1:6a:f2:40:65:56:55:50
Certificate

Issuer

CN=AOL Member CA,O=America Online Inc.,L=Dulles,ST=Virginia,C=US

Not Before

15-03-2011 18:25

Not After

14-03-2016 18:25

Subject

CN=Nullsoft Inc.,OU=Winamp,O=Nullsoft Inc.,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

18-10-2012 00:00

Not After

29-12-2020 23:59

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

a1:3d:4b:91:68:b3:a8:82:f8:fe:1c:75:0f:50:cd:5b:15:0b:d6:df
Signer

Actual PE Digest

a1:3d:4b:91:68:b3:a8:82:f8:fe:1c:75:0f:50:cd:5b:15:0b:d6:df

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

f:\sandbox\20131120_103959\Winamp\Release\winampv6.pdb

Imports

shlwapi

PathRemoveFileSpecW
PathUnquoteSpacesW
UrlGetPartW
UrlIsW
PathFindFileNameA
PathIsRootW
PathIsNetworkPathW
StrCmpIW
StrCmpNW
PathFindExtensionW
StrCmpNIW
PathStripPathW
PathCanonicalizeW
StrToIntExW
PathIsSameRootW
PathIsUNCW
PathAddBackslashW
PathCommonPrefixW
StrToIntW
ord29
PathCreateFromUrlA
PathIsURLA
PathQuoteSpacesA
StrChrW
PathQuoteSpacesW
PathRemoveBackslashW
PathFileExistsW
PathRemoveBlanksW
PathIsRelativeW
PathIsFileSpecW
PathStripToRootW
PathCombineW
PathIsURLW
PathIsDirectoryW
PathFindFileNameW
PathAddExtensionW
PathRemoveExtensionW
PathAppendW

rpcrt4

UuidFromStringW
UuidToStringW
RpcStringFreeW
UuidCreate

kernel32

CopyFileW
LeaveCriticalSection
GetTempPathW
lstrcmpiA
EnterCriticalSection
GetPrivateProfileStringA
WritePrivateProfileStringA
GetModuleFileNameA
lstrcmpiW
DeleteCriticalSection
GetShortPathNameW
GetVersionExA
GlobalAddAtomW
lstrcpyW
FindFirstFileW
FindNextFileW
FindClose
LoadLibraryW
GetProcAddress
FreeLibrary
GetPrivateProfileIntW
WriteFile
CreateFileA
CreateThread
SetThreadPriority
MulDiv
LoadLibraryA
GetCurrentThreadId
CompareStringW
CreateProcessW
MoveFileExW
GetVersionExW
RemoveDirectoryW
Sleep
lstrcpynA
GetFileAttributesW
SetFileAttributesW
WritePrivateProfileStringW
GlobalLock
GlobalUnlock
GetCurrentDirectoryW
SetCurrentDirectoryW
GetEnvironmentVariableW
GetPrivateProfileStringW
SetPriorityClass
GetCurrentProcess
GetVersion
GetModuleHandleW
GetStringTypeExA
GetStringTypeExW
CreateWaitableTimerA
SetWaitableTimer
GetSystemTime
SystemTimeToFileTime
GetSystemDirectoryW
SetThreadExecutionState
GetModuleHandleA
QueryPerformanceCounter
SetFilePointer
GetFileSize
CreateFileMappingA
MapViewOfFile
UnmapViewOfFile
InitializeCriticalSectionAndSpinCount
ReadFile
LocalAlloc
LocalFree
SetEndOfFile
MoveFileW
WaitForMultipleObjects
GetCurrentThread
ResetEvent
GetLongPathNameW
lstrcmpW
LoadLibraryExW
GetCommandLineW
SetErrorMode
ReadProcessMemory
CreateSemaphoreA
CreateProcessA
ReleaseSemaphore
GetExitCodeThread
CreateEventW
QueryPerformanceFrequency
DuplicateHandle
GetVolumeInformationW
GetLogicalDrives
GetDriveTypeW
SetCurrentDirectoryA
GetShortPathNameA
TlsAlloc
OutputDebugStringA
GetCurrentProcessId
GetPrivateProfileStructA
WritePrivateProfileStructA
TlsGetValue
TlsSetValue
WaitForMultipleObjectsEx
TryEnterCriticalSection
VirtualQuery
QueueUserAPC
GetPrivateProfileIntA
CompareStringA
WritePrivateProfileSectionW
FreeResource
FindResourceW
HeapAlloc
GetProcessHeap
HeapFree
OutputDebugStringW
MultiByteToWideChar
GlobalAlloc
GlobalFree
lstrlenA
lstrlenW
lstrcpynW
GetModuleFileNameW
SetEvent
CreateEventA
InitializeCriticalSection
CreateDirectoryW
SetEnvironmentVariableW
GlobalDeleteAtom
GetLastError
IsDebuggerPresent
UnhandledExceptionFilter
GetSystemTimeAsFileTime
SetUnhandledExceptionFilter
GetStartupInfoA
InterlockedCompareExchange
RaiseException
InterlockedExchange
FindResourceExW
GetLocalTime
GetTimeFormatW
WaitForSingleObject
GetLocaleInfoW
CloseHandle
GetTickCount
InterlockedIncrement
InterlockedDecrement
WideCharToMultiByte
OpenEventW
GetTempFileNameW
CreateFileW
FindResourceA
LoadResource
SizeofResource
LockResource
ExitProcess
DeleteFileW
OpenProcess
TerminateProcess
GetFullPathNameW
SetLastError

user32

RemovePropA
DrawMenuBar
GetMenu
LoadAcceleratorsA
LoadMenuW
LoadMenuA
DialogBoxParamA
LoadStringA
AttachThreadInput
SystemParametersInfoW
AdjustWindowRectEx
MapDialogRect
GetDesktopWindow
SendMessageCallbackA
ReplyMessage
SetPropA
CreateIconIndirect
SetWindowsHookExA
CallNextHookEx
GetClassLongW
TranslateAcceleratorW
UnhookWindowsHookEx
IsMenu
InsertMenuItemA
RegisterClassA
GetMenuItemInfoW
GetKeyboardState
GetClassNameA
RegisterWindowMessageA
SendMessageTimeoutA
LoadStringW
MessageBoxIndirectW
SetMenuItemInfoW
EnumChildWindows
DrawIconEx
InflateRect
GetDlgItemInt
SetDlgItemInt
DeleteMenu
LoadAcceleratorsW
ShowWindowAsync
IsDialogMessageW
CharUpperBuffA
PostMessageW
CheckDlgButton
IsDlgButtonChecked
GetClipboardData
SetClipboardData
EmptyClipboard
OpenClipboard
GetSystemMenu
EqualRect
EnumDisplaySettingsA
GetWindowRgn
DrawTextA
GetKeyState
IsIconic
BringWindowToTop
MessageBeep
FlashWindowEx
GetWindow
MonitorFromWindow
MonitorFromRect
TrackPopupMenu
DestroyIcon
CharPrevA
CharNextA
CreateDialogParamA
DispatchMessageW
TranslateMessage
PostQuitMessage
CallMsgFilterA
SetForegroundWindow
SetWindowPos
ShowWindow
SendMessageA
DestroyWindow
IsWindow
CreateDialogParamW
GetWindowRect
GetDlgItem
ScreenToClient
InvalidateRect
GetDlgItemTextW
DrawTextW
SetDlgItemTextA
PeekMessageW
MsgWaitForMultipleObjectsEx
SetCursorPos
ShowCursor
GetActiveWindow
OffsetRect
IsWindowUnicode
LoadImageW
DestroyCursor
SetWindowRgn
EndDeferWindowPos
GetMessageW
CreateDialogIndirectParamW
DialogBoxIndirectParamW
IsDialogMessageA
GetSysColorBrush
LoadBitmapW
GetClientRect
MapWindowPoints
PtInRect
SetWindowLongA
GetAsyncKeyState
IsWindowEnabled
GetParent
CallWindowProcW
GetWindowTextLengthW
SendDlgItemMessageW
CharUpperBuffW
SendDlgItemMessageA
MessageBoxW
SetWindowLongW
CharNextW
EnableWindow
SetDlgItemTextW
SendMessageW
RegisterWindowMessageW
SetActiveWindow
GetWindowDC
ReleaseDC
LoadImageA
GetDC
EndDialog
PostMessageA
SetParent
GetWindowLongA
PostThreadMessageA
FindWindowExW
LoadIconA
SetClassLongA
DeferWindowPos
BeginDeferWindowPos
SendNotifyMessageA
CharPrevW
RegisterClipboardFormatA
GetWindowTextA
ChildWindowFromPoint
WindowFromPoint
IsCharAlphaA
SystemParametersInfoA
GetMenuItemRect
GetMonitorInfoA
MonitorFromPoint
InsertMenuA
DestroyMenu
ModifyMenuW
InsertMenuW
CheckMenuItem
SetMenuItemInfoA
EnableMenuItem
RemoveMenu
GetMenuItemInfoA
InsertMenuItemW
CreatePopupMenu
AppendMenuW
GetMenuItemID
GetMenuState
GetSubMenu
GetMenuStringW
AppendMenuA
GetMenuItemCount
CallWindowProcA
PeekMessageA
GetDlgItemTextA
DispatchMessageA
GetMessageA
GetForegroundWindow
SetWindowTextA
wsprintfW
DefWindowProcA
SetTimer
KillTimer
RegisterClassW
GetClassInfoW
FindWindowW
CharUpperW
CreateWindowExW
GetAncestor
GetClassNameW
GetNextDlgTabItem
GetWindowLongW
ChildWindowFromPointEx
GetMessagePos
IsChild
RedrawWindow
GetUpdateRgn
GetUpdateRect
ValidateRect
GetPropW
FindWindowExA
RemovePropW
SetPropW
ReleaseCapture
GetCursorPos
EnumThreadWindows
UpdateWindow
IsWindowVisible
ClientToScreen
MessageBoxA
GetClassLongA
SetWindowTextW
GetSystemMetrics
CharLowerBuffW
FindWindowA
SetCursor
SetCapture
GetCapture
GetFocus
TrackMouseEvent
EndPaint
BeginPaint
SetRect
DefWindowProcW
GetDlgCtrlID
DrawFocusRect
CopyRect
FillRect
GetDCEx
GetWindowTextW
SetRectEmpty
GetSysColor
RegisterClassExW
LoadCursorA
GetClassInfoExW
GetWindowThreadProcessId
DialogBoxParamW
SetFocus
CloseClipboard

gdi32

GetDIBits
SelectObject
CreateCompatibleDC
GetDeviceCaps
SetBkMode
SetTextColor
LineTo
MoveToEx
CreateRectRgn
OffsetRgn
CombineRgn
CreateFontIndirectA
GetTextExtentPoint32A
CreatePolyPolygonRgn
GetDIBColorTable
CreateSolidBrush
CreateFontA
CreateCompatibleBitmap
Rectangle
GetStockObject
GetObjectA
CreateRectRgnIndirect
FillRgn
StretchBlt
GetPixel
SetPixel
DeleteDC
DeleteObject
CreatePalette
CreateDIBSection
SelectPalette
RealizePalette
BitBlt
UpdateColors
SetBkColor
GetTextExtentPoint32W
GetTextMetricsW
ExtTextOutA
GetTextMetricsA
SetTextAlign
CreatePen
GetCurrentObject
CreatePatternBrush
SetBrushOrgEx
CreateFontIndirectW
GetObjectW
GetFontLanguageInfo
ExtSelectClipRgn
IntersectClipRect
EnumFontsA
SaveDC
CreateFontW
RestoreDC
RectVisible
GetNearestColor
SetStretchBltMode
SetDIBits
CreateBrushIndirect
ExtTextOutW

advapi32

RegQueryValueExW
RegOpenKeyW
RegOpenKeyA
RegCloseKey
RegOpenKeyExW
RegCreateKeyW
RegEnumKeyW
RegCreateKeyExW
RegDeleteKeyW
RegDeleteValueW
RegSetValueExW
CryptAcquireContextA
CryptGenRandom
CryptReleaseContext
RegQueryValueExA

shell32

DragQueryPoint
SHGetPathFromIDListW
SHBrowseForFolderW
Shell_NotifyIconW
SHGetSpecialFolderPathW
ShellExecuteW
SHChangeNotify
DragFinish
DragQueryFileW
SHAppBarMessage
SHFileOperationW
ord680
SHOpenFolderAndSelectItems
SHGetDesktopFolder
SHGetFolderPathW

ole32

CoCreateInstance
StringFromGUID2
CoGetObject
CoTaskMemFree
OleInitialize
RegisterDragDrop
CoRegisterClassObject
RevokeDragDrop
CoRevokeClassObject
OleUninitialize
CoInitializeEx
CoUninitialize
CoCreateGuid
CoTaskMemAlloc
OleRun
CoInitialize

oleaut32

SafeArrayCopy
SysAllocStringLen
SafeArrayUnaccessData
SafeArrayAccessData
SafeArrayCreateVector
SysAllocString
SysFreeString
VariantClear
DispGetParam
VariantInit

tataki

??1RegionI@@UAE@XZ
??0DCCanvas@@QAE@PAUHDC__@@PAVBaseWnd@@@Z
??1DCCanvas@@UAE@XZ
?fillBits@BltCanvas@@QAEXK@Z
?getBits@Canvas@@QAEPAXXZ
?selectClipRgn@Canvas@@QAEXPAVapi_region@@@Z
?blitAlpha@Canvas@@QAEXPAVifc_canvas@@HHH@Z
?getBits@BltCanvas@@QAEPAXXZ
?stretch@SkinBitmap@@QAEXPAVifc_canvas@@HHHH@Z
??0SkinBitmap@@QAE@PAKHH_N@Z
??1SkinBitmap@@QAE@XZ
??0RegionI@@QAE@PBUtagRECT@@@Z
?getBaseWnd@Canvas@@UAEPAVBaseWnd@@XZ
?_dispatch@Canvas@@MAEHHPAXPAPAXH@Z
?stretchToRectAlpha@Canvas@@QAEXPAVifc_canvas@@PAUtagRECT@@1H@Z
?drawRect@Canvas@@QAEXPBUtagRECT@@HKH@Z
??1BltCanvas@@UAE@XZ
??0BltCanvas@@QAE@PAUHBITMAP__@@@Z
?getHDC@Canvas@@QAEPAUHDC__@@XZ
?DestructiveResize@BltCanvas@@QAEXHHH@Z
??0BltCanvas@@QAE@HHPAUHWND__@@H@Z
Quit
Init
??0RegionI@@QAE@PAUHRGN__@@@Z
?getNumRefs@RegionServerI@@UAEHXZ
?delRef@RegionServerI@@UAEXPAX@Z
?addRef@RegionServerI@@UAEXPAX@Z
?_dispatch@RegionServerI@@MAEHHPAXPAPAXH@Z
??1RegionServerI@@UAE@XZ
??0RegionServerI@@QAE@XZ
??0SkinBitmap@@QAE@PB_WH@Z
?blit@SkinBitmap@@QAEXPAVifc_canvas@@HH@Z
?getBitmap@BltCanvas@@QAEPAUHBITMAP__@@XZ
?TryGetColor@SkinColor@@SA_NPAKPB_W1@Z
?getBits@SkinBitmap@@UAEPAXXZ

msvcr90

_amsg_exit
?terminate@@YAXXZ
_decode_pointer
_onexit
_lock
_encode_pointer
__dllonexit
_unlock
vsprintf_s
strlen
wcslen
_i64tow_s
memcpy
memset
_wsetlocale
_configthreadlocale
_wchmod
_itow
wcscpy_s
fputs
_create_locale
_wtoi_l
swscanf
_msize
strncmp
_wtof_l
_vswprintf
wcsrchr
fwrite
ferror
fopen
_fseeki64
_ftelli64
sscanf
strtol
wcschr
memmove
strncat
_wcsdup
_aligned_malloc
realloc
_waccess
_strnicmp
atoi
fputc
fprintf
wcsnlen
towupper
_strdup
strchr
_stricmp
wcstok
_purecall
_vsnprintf
_wcsicmp
ceil
_wtoi
_wcsnicmp
??_U@YAPAXI@Z
??_V@YAXPAX@Z
strrchr
??2@YAPAXI@Z
_vsnwprintf
wcsncmp
fclose
_wfopen
wcsstr
??3@YAXPAX@Z
fgets
feof
fgetws
fseek
fread
strstr
free
malloc
__getmainargs
_cexit
_exit
_XcptFilter
_ismbblead
exit
_acmdln
_initterm
_initterm_e
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler4_common
?_type_info_dtor_internal_method@type_info@@QAEXXZ
_invoke_watson
_crt_debugger_hook
_CxxThrowException
__CxxFrameHandler3
_except_handler3
_CIsqrt
_CIsin
_CIcos
_CIpow
_CIatan
_CItan
_controlfp_s
floor

Exports

Exports

plstring_malloc
plstring_release
plstring_retain
plstring_wcsdup

Sections

.text
Size: 614KB - Virtual size: 613KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 98KB - Virtual size: 97KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 21KB - Virtual size: 109KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 25B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1.4MB - Virtual size: 1.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 64KB - Virtual size: 64KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
winampa.exe
.exe windows:5 windows x86 arch:x86

6b6de861145e3ced2a5c9a7aeb0c4f44

Code Sign

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

21-12-2012 00:00

Not After

30-12-2020 23:59

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

07
Certificate

Issuer

CN=America Online Root Certification Authority 1,O=America Online Inc.,C=US

Not Before

04-06-2004 17:26

Not After

04-06-2029 17:26

Subject

CN=AOL Member CA,O=America Online Inc.,L=Dulles,ST=Virginia,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

5a:a8:c9:c3:87:71:9f:49:a1:6a:f2:40:65:56:55:50
Certificate

Issuer

CN=AOL Member CA,O=America Online Inc.,L=Dulles,ST=Virginia,C=US

Not Before

15-03-2011 18:25

Not After

14-03-2016 18:25

Subject

CN=Nullsoft Inc.,OU=Winamp,O=Nullsoft Inc.,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

18-10-2012 00:00

Not After

29-12-2020 23:59

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

54:43:73:3f:d4:23:45:c6:89:f4:38:95:b9:ec:b9:ab:35:7e:4f:6f
Signer

Actual PE Digest

54:43:73:3f:d4:23:45:c6:89:f4:38:95:b9:ec:b9:ab:35:7e:4f:6f

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

f:\sandbox\20131120_103959\winampa\Release\winampa.pdb

Imports

shlwapi

StrToIntW
PathFileExistsW

kernel32

GetDriveTypeW
SetErrorMode
FreeLibrary
LoadLibraryExW
GetLogicalDrives
GetModuleHandleW
GetTickCount
GetPrivateProfileStringW
GlobalAlloc
CopyFileW
lstrcpynW
ReadFile
GetModuleFileNameW
CreateFileW
MultiByteToWideChar
lstrlenW
SetFilePointer
GetProcAddress
lstrcmpiW
CloseHandle
GetVolumeInformationW
GetEnvironmentVariableW
IsDebuggerPresent
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
QueryPerformanceCounter
SetUnhandledExceptionFilter
GetStartupInfoA
InterlockedCompareExchange
Sleep
InterlockedExchange
ExitProcess
GetPrivateProfileIntW

user32

DestroyWindow
GetMessageW
PostQuitMessage
CharNextW
TrackPopupMenu
RegisterWindowMessageW
LoadImageW
SetForegroundWindow
CharPrevW
FindWindowW
EnumWindows
InsertMenuItemW
GetAsyncKeyState
GetWindowTextW
GetClassNameW
EnableMenuItem
GetCursorPos
LoadStringW
ShowWindow
CreatePopupMenu
IsWindow
CreateWindowExW
SetMenuDefaultItem
MessageBoxW
RegisterClassW
SendMessageW
DestroyMenu
DestroyIcon
DefWindowProcW
GetWindow
DispatchMessageW

advapi32

RegCloseKey
RegDeleteValueW
RegOpenKeyW
RegQueryValueExW

shell32

Shell_NotifyIconW
SHGetSpecialFolderPathW
ShellExecuteW

msvcr90

_invoke_watson
_except_handler4_common
_decode_pointer
_onexit
_lock
__dllonexit
_unlock
?terminate@@YAXXZ
__set_app_type
_encode_pointer
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_configthreadlocale
exit
_controlfp_s
_crt_debugger_hook
_acmdln
_initterm
memset
_ismbblead
_XcptFilter
_exit
_cexit
__getmainargs
_amsg_exit
_vsnwprintf
free
malloc
wcslen
_initterm_e

Sections

.text
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 63KB - Virtual size: 63KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
zlib.dll
.dll windows:5 windows x86 arch:x86

b520855a58e7b8f1d826cff71e3b9462

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

f:\sandbox\20131120_103959\zlib\Release\zlib.pdb

Imports

kernel32

DisableThreadLibraryCalls

msvcr90

memset
free
malloc
memcpy

Exports

Exports

adler32
adler32_combine
compress
compress2
compressBound
crc32
crc32_combine
deflate
deflateBound
deflateCopy
deflateEnd
deflateInit2_
deflateInit_
deflateParams
deflatePending
deflatePrime
deflateReset
deflateResetKeep
deflateSetDictionary
deflateSetHeader
deflateTune
get_crc_table
inflate
inflateCopy
inflateEnd
inflateGetDictionary
inflateGetHeader
inflateInit2_
inflateInit_
inflateMark
inflatePrime
inflateReset
inflateReset2
inflateResetKeep
inflateSetDictionary
inflateSync
inflateSyncPoint
inflateUndermine
uncompress
zError
zlibCompileFlags
zlibVersion

Sections

.text
Size: 24KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 15KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 64B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 992B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 566B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

Password: 123456

32f3282581436269b3a75b6675fe3e08

Code Sign

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3bCertificate

Extended Key Usages

Key Usages

07Certificate

Key Usages

5a:a8:c9:c3:87:71:9f:49:a1:6a:f2:40:65:56:55:50Certificate

Extended Key Usages

Key Usages

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50Certificate

Extended Key Usages

Key Usages

15:95:27:e2:e2:93:a9:15:ec:97:8a:e8:4c:96:7a:af:6e:22:98:fcSigner

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

shell32

advapi32

comctl32

ole32

version

Sections

.text Size: 28KB - Virtual size: 27KB

.rdata Size: 11KB - Virtual size: 10KB

.data Size: 512B - Virtual size: 415KB

.ndata Size: - Virtual size: 2.0MB

.rsrc Size: 189KB - Virtual size: 189KB

.reloc Size: 4KB - Virtual size: 3KB

Password: 123456

08b0635362e7aeb50569ca1a61d5a13f

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

Exports

Exports

Sections

.text Size: 1024B - Virtual size: 571B

.rdata Size: 1024B - Virtual size: 551B

.data Size: - Virtual size: 16B

.reloc Size: 512B - Virtual size: 210B

Password: 123456

546198d07fec5699a0cbb9e36bbd921c

Headers

DLL Characteristics

File Characteristics

Imports

shlwapi

kernel32

user32

Exports

Exports

Sections

.text Size: 1KB - Virtual size: 1KB

.rdata Size: 1024B - Virtual size: 881B

.data Size: - Virtual size: 12B

.reloc Size: 512B - Virtual size: 182B

Password: 123456

e981c0ab92cb1f191bb5e23392e14796

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

Exports

Exports

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

07
Certificate

5a:a8:c9:c3:87:71:9f:49:a1:6a:f2:40:65:56:55:50
Certificate

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

15:95:27:e2:e2:93:a9:15:ec:97:8a:e8:4c:96:7a:af:6e:22:98:fc
Signer

.text
Size: 28KB - Virtual size: 27KB

.rdata
Size: 11KB - Virtual size: 10KB

.data
Size: 512B - Virtual size: 415KB

.ndata
Size: - Virtual size: 2.0MB

.rsrc
Size: 189KB - Virtual size: 189KB

.reloc
Size: 4KB - Virtual size: 3KB

.text
Size: 1024B - Virtual size: 571B

.rdata
Size: 1024B - Virtual size: 551B

.data
Size: - Virtual size: 16B

.reloc
Size: 512B - Virtual size: 210B

.text
Size: 1KB - Virtual size: 1KB

.rdata
Size: 1024B - Virtual size: 881B

.data
Size: - Virtual size: 12B

.reloc
Size: 512B - Virtual size: 182B

.text
Size: 2KB - Virtual size: 1KB

.rdata
Size: 1024B - Virtual size: 729B

.data
Size: - Virtual size: 6KB

.rsrc
Size: 512B - Virtual size: 352B

.reloc
Size: 512B - Virtual size: 350B

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Certificate

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

41:91:a1:5a:39:78:df:cf:49:65:66:38:1d:4c:75:c2
Certificate

45:9f:81:c4:54:6f:de:fc:ff:2f:1a:11:05:a6:ef:bd
Certificate

61:0c:12:06:00:00:00:00:00:1b
Certificate

45:37:38:c1:dd:bb:6d:01:b5:23:b4:18:03:33:c4:fb:08:74:ef:d4
Signer

.text
Size: 140KB - Virtual size: 136KB

.rdata
Size: 24KB - Virtual size: 22KB

.data
Size: 4KB - Virtual size: 27KB

.rsrc
Size: 4KB - Virtual size: 1KB

.reloc
Size: 12KB - Virtual size: 9KB

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Certificate

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

41:91:a1:5a:39:78:df:cf:49:65:66:38:1d:4c:75:c2
Certificate

45:9f:81:c4:54:6f:de:fc:ff:2f:1a:11:05:a6:ef:bd
Certificate

61:0c:12:06:00:00:00:00:00:1b
Certificate

d7:5c:32:39:ed:a3:96:d6:9f:5a:61:c0:e3:22:9e:01:7c:ec:67:c9
Signer

.text
Size: 39KB - Virtual size: 38KB

.rdata
Size: 11KB - Virtual size: 11KB

.data
Size: 4KB - Virtual size: 11KB

.pdata
Size: 2KB - Virtual size: 1KB

.rsrc
Size: 2KB - Virtual size: 1KB