filename | WDExpress.exe | |
---|---|---|
size | 480400 (0x75490) | |
md5 | 67162742c39326a4b96df4566e394d8e | |
type | PE32 executable (GUI) Intel 80386, for MS Windows | |
mimetype | application/x-dosexec | |
clamav | OK | |
virustotal | → scan with virustotal.com | |
histogram |
MZ Header
signature | MZ |
bytes_in_last_block | 0x90 |
blocks_in_file | 3 |
num_relocs | 0 |
header_paragraphs | 4 |
min_extra_paragraphs | 0 |
max_extra_paragraphs | 0xffff |
ss | 0 |
sp | 0xb8 |
checksum | 0 |
ip | 0 |
cs | 0 |
reloc_table_offset | 0x40 |
overlay_number | 0 |
reserved0 | 0 |
oem_id | 0 |
oem_info | 0 |
reserved2 | 0 |
reserved3 | 0 |
reserved4 | 0 |
reserved5 | 0 |
reserved6 | 0 |
lfanew | 0x110 |
Rich Header
lib id | version | times used |
---|---|---|
206 | 65501 | 5 |
208 | 65501 | 1 |
221 | 21005 | 4 |
223 | 21005 | 9 |
224 | 21005 | 32 |
203 | 65501 | 25 |
1 | 0 | 506 |
225 | 21005 | 65 |
207 | 40602 | 1 |
229 | 21005 | 60 |
220 | 21005 | 1 |
219 | 21005 | 1 |
222 | 21005 | 1 |
DOS stub
00000000: 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 |........!..L.!Th| 00000010: 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f |is program canno| 00000020: 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 |t be run in DOS | 00000030: 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 |mode....$.......|
PE Header
Packer / Compiler
Sections
Data Directory
TLS
raw start | raw end | index | callbks | zero fill | flags | |
---|---|---|---|---|---|---|
0x44f000 | 0x44f008 | 0x44a27c | 0x4010c0 | 0 | 0x300000 |
id | lang | string |
---|---|---|
6630 | 1033 | Microsoft Visual Studio Express 2013 for Windows Desktop |
6631 | 1033 | Cannot find one or more components. Please reinstall the application. |
6633 | 1033 | WDExpress |
6634 | 1033 | M 191.99,0 C191.99,0 90.39,101.60 90.39,101.60 90.39,101.60 25.59,51.20 25.59,51.20 25.59,51.20 0,63.99 0,63.99 0,63.99 0,191.99 0,191.99 0,191.99 25.59,204.79 25.59,204.79 25.59,204.79 90.39,154.39 90.39,154.39 90.39,154.39 191.99,256 191.99,256 191.99,256 256,230.39 256,230.39 256,230.39 256,25.59 256,25.59 256,25.59 191.99,0 191.99,0 zM 25.59,166.39 C25.59,166.39 25.59,89.59 25.59,89.59 25.59,89.59 64.00,127.99 64.00,127.99 64.00,127.99 25.59,166.39 25.59,166.39 zM 124.34,127.99 C124.34,127.99 191.99,75.37 191.99,75.37 191.99,75.37 191.99,180.62 191.99,180.62 191.99,180.62 124.34,127.99 124.34,127.99 z |
module_name | hint | ord | function_name |
---|---|---|---|
ADVAPI32.dll | 596 | RegCloseKey | |
ADVAPI32.dll | 645 | RegOpenKeyExW | |
ADVAPI32.dll | 658 | RegQueryValueExW | |
ADVAPI32.dll | 674 | RegSetValueExW | |
ADVAPI32.dll | 616 | RegDeleteKeyW | |
ADVAPI32.dll | 620 | RegDeleteValueW | |
ADVAPI32.dll | 605 | RegCreateKeyExW | |
ADVAPI32.dll | 652 | RegQueryInfoKeyW | |
ADVAPI32.dll | 627 | RegEnumKeyExW | |
ADVAPI32.dll | 123 | ConvertSidToStringSidW | |
ADVAPI32.dll | 412 | IsValidSid | |
ADVAPI32.dll | 367 | GetTokenInformation | |
ADVAPI32.dll | 530 | OpenProcessToken | |
ADVAPI32.dll | 628 | RegEnumKeyW | |
ADVAPI32.dll | 307 | FreeSid | |
ADVAPI32.dll | 95 | CheckTokenMembership | |
ADVAPI32.dll | 32 | AllocateAndInitializeSid | |
ADVAPI32.dll | 290 | EventUnregister | |
ADVAPI32.dll | 288 | EventRegister | |
ADVAPI32.dll | 291 | EventWrite | |
ADVAPI32.dll | 287 | EventProviderEnabled | |
ADVAPI32.dll | 651 | RegQueryInfoKeyA | |
ADVAPI32.dll | 630 | RegEnumValueW | |
ADVAPI32.dll | 629 | RegEnumValueA | |
ADVAPI32.dll | 626 | RegEnumKeyExA | |
ADVAPI32.dll | 619 | RegDeleteValueA | |
ADVAPI32.dll | 657 | RegQueryValueExA | |
ADVAPI32.dll | 644 | RegOpenKeyExA | |
ADVAPI32.dll | 604 | RegCreateKeyExA | |
ADVAPI32.dll | 230 | CryptVerifySignatureW | |
ADVAPI32.dll | 216 | CryptHashData | |
ADVAPI32.dll | 195 | CryptCreateHash | |
ADVAPI32.dll | 218 | CryptImportKey | |
ADVAPI32.dll | 193 | CryptAcquireContextW | |
ADVAPI32.dll | 219 | CryptReleaseContext | |
ADVAPI32.dll | 199 | CryptDestroyKey | |
ADVAPI32.dll | 198 | CryptDestroyHash | |
ADVAPI32.dll | 129 | ConvertStringSecurityDescriptorToSecurityDescriptorW | |
KERNEL32.dll | 1370 | SwitchToThread | |
KERNEL32.dll | 772 | GetVersionExA | |
KERNEL32.dll | 715 | GetSystemDefaultUILanguage | |
KERNEL32.dll | 722 | GetSystemPreferredUILanguages | |
KERNEL32.dll | 402 | FlushFileBuffers | |
KERNEL32.dll | 571 | GetFileSize | |
KERNEL32.dll | 191 | CreateFileMappingW | |
KERNEL32.dll | 960 | MapViewOfFile | |
KERNEL32.dll | 1411 | UnmapViewOfFile | |
KERNEL32.dll | 882 | IsValidCodePage | |
KERNEL32.dll | 420 | GetACP | |
KERNEL32.dll | 186 | CreateFileA | |
KERNEL32.dll | 934 | LoadLibraryExA | |
KERNEL32.dll | 178 | CreateDirectoryW | |
KERNEL32.dll | 976 | MulDiv | |
KERNEL32.dll | 1275 | SetFilePointer | |
KERNEL32.dll | 612 | GetModuleHandleA | |
KERNEL32.dll | 599 | GetLogicalDrives | |
KERNEL32.dll | 543 | GetDriveTypeW | |
KERNEL32.dll | 538 | GetDiskFreeSpaceExW | |
KERNEL32.dll | 1167 | ReleaseSemaphore | |
KERNEL32.dll | 771 | GetVersion | |
KERNEL32.dll | 254 | DecodePointer | |
KERNEL32.dll | 1255 | SetDllDirectoryW | |
KERNEL32.dll | 823 | HeapSetInformation | |
KERNEL32.dll | 611 | GetModuleFileNameW | |
KERNEL32.dll | 935 | LoadLibraryExW | |
KERNEL32.dll | 1536 | lstrcmpiW | |
KERNEL32.dll | 414 | FreeLibrary | |
KERNEL32.dll | 930 | LeaveCriticalSection | |
KERNEL32.dll | 293 | EnterCriticalSection | |
KERNEL32.dll | 261 | DeleteCriticalSection | |
KERNEL32.dll | 592 | GetLastError | |
KERNEL32.dll | 977 | MultiByteToWideChar | |
KERNEL32.dll | 393 | FindResourceW | |
KERNEL32.dll | 939 | LoadResource | |
KERNEL32.dll | 957 | LockResource | |
KERNEL32.dll | 1359 | SizeofResource | |
KERNEL32.dll | 615 | GetModuleHandleW | |
KERNEL32.dll | 669 | GetProcAddress | |
KERNEL32.dll | 1345 | SetUnhandledExceptionFilter | |
KERNEL32.dll | 674 | GetProcessHeap | |
KERNEL32.dll | 815 | HeapAlloc | |
KERNEL32.dll | 819 | HeapFree | |
KERNEL32.dll | 822 | HeapReAlloc | |
KERNEL32.dll | 824 | HeapSize | |
KERNEL32.dll | 818 | HeapDestroy | |
KERNEL32.dll | 1087 | RaiseException | |
KERNEL32.dll | 841 | InitializeCriticalSectionEx | |
KERNEL32.dll | 973 | MoveFileW | |
KERNEL32.dll | 289 | EncodePointer | |
KERNEL32.dll | 871 | IsDebuggerPresent | |
KERNEL32.dll | 877 | IsProcessorFeaturePresent | |
KERNEL32.dll | 1069 | QueryPerformanceCounter | |
KERNEL32.dll | 522 | GetCurrentProcessId | |
KERNEL32.dll | 526 | GetCurrentThreadId | |
KERNEL32.dll | 726 | GetSystemTimeAsFileTime | |
KERNEL32.dll | 1018 | OutputDebugStringW | |
KERNEL32.dll | 127 | CloseHandle | |
KERNEL32.dll | 182 | CreateEventW | |
KERNEL32.dll | 1185 | ResetEvent | |
KERNEL32.dll | 1263 | SetEvent | |
KERNEL32.dll | 287 | DuplicateHandle | |
KERNEL32.dll | 521 | GetCurrentProcess | |
KERNEL32.dll | 720 | GetSystemInfo | |
KERNEL32.dll | 565 | GetFileAttributesW | |
KERNEL32.dll | 1331 | SetThreadPriority | |
KERNEL32.dll | 1191 | ResumeThread | |
KERNEL32.dll | 232 | CreateThread | |
KERNEL32.dll | 1449 | WaitForSingleObject | |
KERNEL32.dll | 392 | FindResourceExW | |
KERNEL32.dll | 1545 | lstrlenW | |
KERNEL32.dll | 266 | DeleteFileW | |
KERNEL32.dll | 1002 | OpenMutexW | |
KERNEL32.dll | 1544 | lstrlenA | |
KERNEL32.dll | 1483 | WideCharToMultiByte | |
KERNEL32.dll | 1006 | OpenProcess | |
KERNEL32.dll | 936 | LoadLibraryW | |
KERNEL32.dll | 194 | CreateFileW | |
KERNEL32.dll | 1460 | WerRegisterFile | |
KERNEL32.dll | 724 | GetSystemTime | |
KERNEL32.dll | 1371 | SystemTimeToFileTime | |
KERNEL32.dll | 1442 | VirtualQueryEx | |
KERNEL32.dll | 1333 | SetThreadStackGuarantee | |
KERNEL32.dll | 337 | ExitProcess | |
KERNEL32.dll | 1408 | UnhandledExceptionFilter | |
KERNEL32.dll | 754 | GetTickCount | |
KERNEL32.dll | 144 | CompareStringA | |
KERNEL32.dll | 147 | CompareStringW | |
KERNEL32.dll | 525 | GetCurrentThread | |
KERNEL32.dll | 1103 | ReadFile | |
KERNEL32.dll | 553 | GetEnvironmentVariableW | |
KERNEL32.dll | 704 | GetStdHandle | |
KERNEL32.dll | 1503 | WriteFile | |
KERNEL32.dll | 1360 | Sleep | |
KERNEL32.dll | 457 | GetCommandLineW | |
KERNEL32.dll | 219 | CreateProcessW | |
KERNEL32.dll | 143 | CompareFileTime | |
KERNEL32.dll | 773 | GetVersionExW | |
KERNEL32.dll | 371 | FindFirstFileW | |
KERNEL32.dll | 383 | FindNextFileW | |
KERNEL32.dll | 360 | FindClose | |
KERNEL32.dll | 767 | GetUserDefaultUILanguage | |
KERNEL32.dll | 259 | DeleteAtom | |
KERNEL32.dll | 5 | AddAtomW | |
KERNEL32.dll | 359 | FindAtomW | |
KERNEL32.dll | 1368 | SuspendThread | |
KERNEL32.dll | 740 | GetThreadContext | |
KERNEL32.dll | 1322 | SetThreadContext | |
KERNEL32.dll | 403 | FlushInstructionCache | |
KERNEL32.dll | 1433 | VirtualAlloc | |
KERNEL32.dll | 1439 | VirtualProtect | |
KERNEL32.dll | 1441 | VirtualQuery | |
KERNEL32.dll | 1290 | SetLastError | |
KERNEL32.dll | 994 | OpenEventW | |
KERNEL32.dll | 946 | LocalFree | |
KERNEL32.dll | 562 | GetFileAttributesExW | |
KERNEL32.dll | 165 | CopyFileW | |
KERNEL32.dll | 349 | FileTimeToSystemTime | |
KERNEL32.dll | 1261 | SetEnvironmentVariableW | |
KERNEL32.dll | 341 | ExpandEnvironmentStringsW | |
KERNEL32.dll | 585 | GetFullPathNameW | |
KERNEL32.dll | 605 | GetLongPathNameW | |
KERNEL32.dll | 739 | GetTempPathW | |
KERNEL32.dll | 737 | GetTempFileNameW | |
KERNEL32.dll | 225 | CreateSemaphoreW | |
MSVCR120.dll | 1770 | memset | |
MSVCR120.dll | 1769 | memmove_s | |
MSVCR120.dll | 1960 | wmemcpy_s | |
MSVCR120.dll | 1371 | _wcsnicmp | |
MSVCR120.dll | 1934 | wcsnlen | |
MSVCR120.dll | 1317 | _vscwprintf | |
MSVCR120.dll | 1910 | vswprintf_s | |
MSVCR120.dll | 106 | public: virtual __thiscall std::exception::~exception(void) ??1exception@std@@UAE@XZ | |
MSVCR120.dll | 43 | public: __thiscall std::exception::exception(char const * const &, int) ??0exception@std@@QAE@ABQBDH@Z | |
MSVCR120.dll | 44 | public: __thiscall std::exception::exception(class std::exception const &) ??0exception@std@@QAE@ABV01@@Z | |
MSVCR120.dll | 323 | public: virtual char const * __thiscall std::exception::what(void)const ?what@exception@std@@UBEPBDXZ | |
MSVCR120.dll | 1471 | _wsplitpath_s | |
MSVCR120.dll | 1437 | _wmakepath_s | |
MSVCR120.dll | 1208 | _strlwr_s | |
MSVCR120.dll | 1273 | _ultow_s | |
MSVCR120.dll | 1936 | wcsrchr | |
MSVCR120.dll | 1534 | calloc | |
MSVCR120.dll | 1327 | _vsnwprintf | |
MSVCR120.dll | 1871 | swprintf_s | |
MSVCR120.dll | 1144 | _set_purecall_handler | |
MSVCR120.dll | 1703 | isprint | |
MSVCR120.dll | 1843 | strcpy_s | |
MSVCR120.dll | 887 | _itow_s | |
MSVCR120.dll | 1873 | swscanf_s | |
MSVCR120.dll | 1486 | _wtoi | |
MSVCR120.dll | 1921 | wcschr | |
MSVCR120.dll | 1768 | memmove | |
MSVCR120.dll | 1111 | _resetstkoflw | |
MSVCR120.dll | 1431 | _wfullpath | |
MSVCR120.dll | 1935 | wcspbrk | |
MSVCR120.dll | 1367 | _wcslwr_s | |
MSVCR120.dll | 1427 | _wfopen_s | |
MSVCR120.dll | 1920 | wcscat_s | |
MSVCR120.dll | 1939 | wcsspn | |
MSVCR120.dll | 1926 | wcscspn | |
MSVCR120.dll | 1766 | memcpy | |
MSVCR120.dll | 344 | _CxxThrowException | |
MSVCR120.dll | 1559 | ceil | |
MSVCR120.dll | 1397 | _wcsupr_s | |
MSVCR120.dll | 1718 | iswspace | |
MSVCR120.dll | 1884 | tolower | |
MSVCR120.dll | 1269 | _ui64tow_s | |
MSVCR120.dll | 1931 | wcsncmp | |
MSVCR120.dll | 1430 | _wfsopen | |
MSVCR120.dll | 1634 | ferror | |
MSVCR120.dll | 1664 | fputws | |
MSVCR120.dll | 1490 | _wtol | |
MSVCR120.dll | 1765 | memcmp | |
MSVCR120.dll | 1241 | _swab | |
MSVCR120.dll | 1755 | malloc | |
MSVCR120.dll | 557 | _callnewh | |
MSVCR120.dll | 114 | void __cdecl operator delete(void *) ??3@YAXPAX@Z | |
MSVCR120.dll | 1097 | _purecall | |
MSVCR120.dll | 1933 | wcsncpy_s | |
MSVCR120.dll | 1925 | wcscpy_s | |
MSVCR120.dll | 1658 | fopen_s | |
MSVCR120.dll | 1659 | fprintf | |
MSVCR120.dll | 1623 | fclose | |
MSVCR120.dll | 1361 | _wcsicmp | |
MSVCR120.dll | 1667 | free | |
MSVCR120.dll | 137 | void __cdecl operator delete[](void *) ??_V@YAXPAX@Z | |
MSVCR120.dll | 1767 | memcpy_s | |
MSVCR120.dll | 1940 | wcsstr | |
MSVCR120.dll | 1109 | _recalloc | |
MSVCR120.dll | 363 | _XcptFilter | |
MSVCR120.dll | 413 | __crtGetShowWindowMode | |
MSVCR120.dll | 535 | _amsg_exit | |
MSVCR120.dll | 438 | __getmainargs | |
MSVCR120.dll | 498 | __set_app_type | |
MSVCR120.dll | 1614 | exit | |
MSVCR120.dll | 643 | _exit | |
MSVCR120.dll | 559 | _cexit | |
MSVCR120.dll | 817 | _ismbblead | |
MSVCR120.dll | 576 | _configthreadlocale | |
MSVCR120.dll | 500 | __setusermatherr | |
MSVCR120.dll | 781 | _initterm_e | |
MSVCR120.dll | 780 | _initterm | |
MSVCR120.dll | 526 | _acmdln | |
MSVCR120.dll | 674 | _fmode | |
MSVCR120.dll | 1645 | fgetws | |
MSVCR120.dll | 575 | _commode | |
MSVCR120.dll | 916 | _lock | |
MSVCR120.dll | 1284 | _unlock | |
MSVCR120.dll | 558 | _calloc_crt | |
MSVCR120.dll | 430 | __dllonexit | |
MSVCR120.dll | 1082 | _onexit | |
MSVCR120.dll | 111 | public: virtual __thiscall type_info::~type_info(void) ??1type_info@@UAE@XZ | |
MSVCR120.dll | 372 | __CxxFrameHandler3 | |
MSVCR120.dll | 592 | _crt_debugger_hook | |
MSVCR120.dll | 428 | __crtUnhandledException | |
MSVCR120.dll | 427 | __crtTerminateProcess | |
MSVCR120.dll | 309 | void __cdecl terminate(void) ?terminate@@YAXXZ | |
MSVCR120.dll | 425 | __crtSetUnhandledExceptionFilter | |
MSVCR120.dll | 788 | _invoke_watson | |
MSVCR120.dll | 579 | _controlfp_s | |
MSVCR120.dll | 634 | _except_handler4_common | |
USER32.dll | 841 | UnregisterClassW | |
USER32.dll | 49 | CharNextW | |
USER32.dll | 560 | LoadStringW | |
USER32.dll | 589 | MessageBoxW | |
USER32.dll | 597 | MsgWaitForMultipleObjectsEx | |
USER32.dll | 620 | PeekMessageW | |
USER32.dll | 831 | TranslateMessage | |
USER32.dll | 181 | DispatchMessageW | |
USER32.dll | 547 | LoadIconW | |
USER32.dll | 549 | LoadImageW | |
USER32.dll | 173 | DestroyWindow | |
USER32.dll | 650 | RegisterClassW | |
USER32.dll | 113 | CreateWindowExW | |
USER32.dll | 800 | ShowWindow | |
USER32.dll | 534 | IsWindowVisible | |
USER32.dll | 537 | KillTimer | |
USER32.dll | 769 | SetTimer | |
USER32.dll | 370 | GetMessageTime | |
USER32.dll | 852 | UpdateLayeredWindow | |
USER32.dll | 161 | DefWindowProcW | |
USER32.dll | 426 | GetSystemMetrics | |
USER32.dll | 308 | GetDC | |
USER32.dll | 677 | ReleaseDC | |
USER32.dll | 814 | SystemParametersInfoA | |
ole32.dll | 122 | CoTaskMemAlloc | |
ole32.dll | 26 | CoCreateInstance | |
ole32.dll | 124 | CoTaskMemRealloc | |
ole32.dll | 123 | CoTaskMemFree | |
ole32.dll | 244 | IIDFromString | |
ole32.dll | 442 | StringFromGUID2 | |
ole32.dll | 24 | CoCreateFreeThreadedMarshaler | |
ole32.dll | 353 | OleInitialize | |
ole32.dll | 81 | CoInitializeSecurity | |
ole32.dll | 382 | OleUninitialize | |
ole32.dll | 79 | CoInitialize | |
ole32.dll | 127 | CoUninitialize | |
ole32.dll | 12 | CLSIDFromString | |
ole32.dll | 25 | CoCreateGuid | |
ole32.dll | 441 | StringFromCLSID | |
ole32.dll | 154 | CreateStreamOnHGlobal | |
OLEAUT32.dll | 2 | ||
OLEAUT32.dll | 277 | ||
OLEAUT32.dll | 7 | ||
OLEAUT32.dll | 4 | ||
OLEAUT32.dll | 8 | ||
OLEAUT32.dll | 9 | ||
OLEAUT32.dll | 200 | ||
OLEAUT32.dll | 313 | ||
OLEAUT32.dll | 19 | ||
OLEAUT32.dll | 20 | ||
OLEAUT32.dll | 184 | ||
OLEAUT32.dll | 150 | ||
OLEAUT32.dll | 149 | ||
OLEAUT32.dll | 15 | ||
OLEAUT32.dll | 16 | ||
OLEAUT32.dll | 22 | ||
OLEAUT32.dll | 21 | ||
OLEAUT32.dll | 185 | ||
OLEAUT32.dll | 201 | ||
OLEAUT32.dll | 6 | ||
MSVCP120.dll | 713 | void __cdecl std::_Xbad_alloc(void) ?_Xbad_alloc@std@@YAXXZ | |
MSVCP120.dll | 716 | void __cdecl std::_Xlength_error(char const *) ?_Xlength_error@std@@YAXPBD@Z | |
MSVCP120.dll | 714 | void __cdecl std::_Xbad_function_call(void) ?_Xbad_function_call@std@@YAXXZ | |
GDI32.dll | 502 | GetDeviceCaps | |
GDI32.dll | 552 | GetObjectW | |
GDI32.dll | 49 | CreateCompatibleDC | |
GDI32.dll | 724 | SelectObject | |
GDI32.dll | 267 | DeleteDC | |
GDI32.dll | 270 | DeleteObject | |
SHELL32.dll | 200 | SHGetFileInfoW | |
SHELL32.dll | 150 | SHCreateDirectoryExW | |
SHELL32.dll | 210 | SHGetFolderPathW | |
SHELL32.dll | 182 | SHFileOperationW | |
SHLWAPI.dll | 95 | PathIsDirectoryW | |
SHLWAPI.dll | 145 | PathRenameExtensionW | |
SHLWAPI.dll | 75 | PathFindExtensionW | |
SHLWAPI.dll | 127 | PathMatchSpecW | |
SHLWAPI.dll | 153 | PathStripPathW | |
SHLWAPI.dll | 73 | PathFileExistsW | |
SHLWAPI.dll | 137 | PathRemoveBackslashW | |
SHLWAPI.dll | 139 | PathRemoveBlanksW | |
SHLWAPI.dll | 105 | PathIsRelativeW | |
SHLWAPI.dll | 8 | AssocQueryStringW | |
SHLWAPI.dll | 141 | PathRemoveExtensionW | |
SHLWAPI.dll | 51 | PathAddBackslashW | |
SHLWAPI.dll | 77 | PathFindFileNameW | |
SHLWAPI.dll | 174 | SHCreateStreamOnFileEx | |
SHLWAPI.dll | 55 | PathAppendW | |
SHLWAPI.dll | 97 | PathIsFileSpecW | |
SHLWAPI.dll | 61 | PathCombineW | |
SHLWAPI.dll | 343 | StrToIntExW | |
SHLWAPI.dll | 340 | StrToInt64ExW | |
SHLWAPI.dll | 344 | StrToIntW | |
SHLWAPI.dll | 143 | PathRemoveFileSpecW | |
gdiplus.dll | 132 | GdipCreateStringFormat | |
gdiplus.dll | 130 | GdipCreateSolidFill | |
gdiplus.dll | 50 | GdipCloneBrush | |
gdiplus.dll | 138 | GdipDeleteBrush | |
gdiplus.dll | 33 | GdipAlloc | |
gdiplus.dll | 237 | GdipFree | |
gdiplus.dll | 151 | GdipDeleteStringFormat | |
gdiplus.dll | 591 | GdipSetStringFormatLineAlign | |
gdiplus.dll | 602 | GdipStringFormatGetGenericDefault | |
gdiplus.dll | 286 | GdipGetImageEncoders | |
gdiplus.dll | 287 | GdipGetImageEncodersSize | |
gdiplus.dll | 79 | GdipCreateBitmapFromResource | |
gdiplus.dll | 95 | GdipCreateHBITMAPFromBitmap | |
gdiplus.dll | 144 | GdipDeleteGraphics | |
gdiplus.dll | 80 | GdipCreateBitmapFromScan0 | |
gdiplus.dll | 73 | GdipCreateBitmapFromFile | |
gdiplus.dll | 81 | GdipCreateBitmapFromStream | |
gdiplus.dll | 289 | GdipGetImageGraphicsContext | |
gdiplus.dll | 497 | GdipSaveImageToStream | |
gdiplus.dll | 152 | GdipDisposeImage | |
gdiplus.dll | 54 | GdipCloneImage | |
gdiplus.dll | 628 | GdiplusShutdown | |
gdiplus.dll | 629 | GdiplusStartup | |
gdiplus.dll | 185 | GdipDrawImageRectRect | |
gdiplus.dll | 405 | GdipGraphicsClear | |
gdiplus.dll | 536 | GdipSetInterpolationMode | |
gdiplus.dll | 295 | GdipGetImagePixelFormat | |
gdiplus.dll | 290 | GdipGetImageHeight | |
gdiplus.dll | 300 | GdipGetImageWidth | |
gdiplus.dll | 142 | GdipDeleteFont | |
gdiplus.dll | 86 | GdipCreateFont | |
gdiplus.dll | 143 | GdipDeleteFontFamily | |
gdiplus.dll | 87 | GdipCreateFontFamilyFromName | |
gdiplus.dll | 200 | GdipDrawString | |
gdiplus.dll | 596 | GdipSetTextRenderingHint | |
gdiplus.dll | 77 | GdipCreateBitmapFromHBITMAP | |
VERSION.dll | 7 | GetFileVersionInfoSizeW | |
VERSION.dll | 8 | GetFileVersionInfoW | |
VERSION.dll | 16 | VerQueryValueW | |
CRYPT32.dll | 229 | CryptUnprotectData |
ord | entry_va | function_name | |
---|---|---|---|
1 | 0x28f17 | IsAssertEtwEnabled | |
2 | 0x28f70 | SetOnAssertCallback | |
3 | 0x28f30 | WriteAssertEtwEventA | |
4 | 0x28f50 | WriteAssertEtwEventW |
StringTable 040904b0
CompanyName | Microsoft Corporation |
FileDescription | Microsoft Visual Studio Express 2013 for Windows Desktop |
FileVersion | 12.0.30723.0 built by: REL |
InternalName | WDExpress.exe |
LegalCopyright | © Microsoft Corporation. All rights reserved. |
OriginalFilename | WDExpress.exe |
ProductName | Microsoft® Visual Studio® 2013 |
ProductVersion | 12.0.30723.0 |
VS_FIXEDFILEINFO
FileVersion | 12.0.30723.0 |
ProductVersion | 12.0.30723.0 |
StrucVersion | 0x10000 |
FileFlagsMask | 0x3f |
FileFlags | 0 |
FileOS | 4 |
FileType | 1 |
FileSubtype | 0 |
Signers (1)
issuer: /C=US/ST=Washington/L=Redmond/O=Microsoft Corporation/CN=Microsoft Code Signing PCA
serial: 33000000CA6CD5321235C4E1550001000000CA
Certificates (4)
Certificate: Data: Version: 3 (0x2) Serial Number: 33:00:00:00:4c:a1:e8:4d:cc:b4:74:7b:3b:00:00:00:00:00:4c Signature Algorithm: sha1WithRSAEncryption Issuer: C=US, ST=Washington, L=Redmond, O=Microsoft Corporation, CN=Microsoft Time-Stamp PCA Validity Not Before: Nov 11 22:11:31 2013 GMT Not After : Feb 11 22:11:31 2015 GMT Subject: C=US, ST=Washington, L=Redmond, O=Microsoft Corporation, OU=MOPR, OU=nCipher DSE ESN:C0F4-3086-DEF8, CN=Microsoft Time-Stamp Service Subject Public Key Info: Public Key Algorithm: rsaEncryption Public-Key: (2048 bit) Modulus: 00:b1:d8:fa:1b:06:2b:77:a8:e4:94:5d:7c:0f:e6: 7a:a6:92:ee:8a:54:1d:a4:f9:84:75:85:97:cc:cb: 5c:96:d0:d7:75:2d:d9:08:fb:5b:d2:ee:2d:25:c6: 37:3e:f5:ab:7e:1a:53:e5:57:be:6b:e8:bf:ca:96: 0a:dc:46:f1:5a:1e:3e:02:d2:b2:e0:26:8e:00:64: 7b:be:3c:93:f8:58:32:79:87:d2:1a:5d:23:bc:9c: 51:c4:0f:10:fa:04:58:b5:16:76:6e:ec:bc:c6:e5: be:fc:ad:ac:c1:41:db:aa:ce:79:f5:1c:b2:99:41: a7:7a:25:2b:ff:ab:78:0d:58:3a:b1:5e:50:de:64: 4c:e0:ca:15:2a:df:a6:e9:fe:a4:66:2f:5b:10:09: 09:26:21:d4:3f:0d:2f:6d:d2:f8:77:90:03:6c:de: 14:12:a5:8c:e7:36:1f:f4:87:a5:b0:41:17:6f:e3: 4d:74:66:c2:fd:a2:71:46:35:51:cc:6b:17:51:63: fa:15:94:92:9a:5f:4b:28:ba:e6:16:45:49:e9:2c: b5:fe:8b:87:af:fc:a5:6d:43:dc:a6:30:fa:29:28: ef:9b:0d:2c:5c:83:de:12:8d:6a:b4:db:71:ef:5c: 14:5a:2a:23:28:ff:81:70:57:f1:8c:07:9a:13:d8: 2a:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:0D:AD:B3:4D:F4:DA:9F:1A:B2:27:26:55:0D:20:44:D8:98:E2:F4 X509v3 Authority Key Identifier: 23:34:F8:D9:52:46:70:0A:ED:40:FB:76:FB:B3:2B:B0:C3:35:B3:0F X509v3 CRL Distribution Points: Full Name: URI:http://crl.microsoft.com/pki/crl/products/MicrosoftTimeStampPCA.crl Authority Information Access: CA Issuers - URI:http://www.microsoft.com/pki/certs/MicrosoftTimeStampPCA.crt X509v3 Extended Key Usage: Time Stamping Signature Algorithm: sha1WithRSAEncryption Signature Value: 09:8a:4e:06:af:e8:ed:82:cf:1d:07:7e:d7:2a:a7:24:0b:2d: af:9a:5b:24:7f:94:71:0c:55:88:24:1a:52:15:63:e2:90:4d: 05:4a:98:4a:9c:fb:e1:a7:6d:68:55:82:b9:29:ea:69:a9:b2: d5:e3:0c:da:d1:d6:7a:25:37:78:67:1c:0c:fb:db:29:5a:1a: 97:38:2a:39:56:46:fb:35:81:b9:e4:3d:46:5a:8e:e4:fc:75: 37:58:59:49:8b:4e:db:3c:15:9d:73:52:4b:eb:7b:0c:3a:c2: 2d:c1:b3:9b:52:2d:e0:35:c5:b9:c1:57:b3:e8:3d:a1:3c:44: f2:23:16:1e:0a:aa:59:37:27:d0:95:52:5e:a8:7f:3f:54:f0: 81:e1:dc:9a:bd:65:d5:78:f6:f7:4c:39:bb:dd:e0:d6:37:0e: 91:9a:87:8c:73:e7:71:64:52:f7:3e:03:d8:c6:cd:72:b8:34: 34:98:5b:8c:d3:f5:08:a6:eb:78:c6:51:a0:0d:0e:6f:f4:6b: 3c:40:1a:60:16:2c:a9:06:52:9d:1c:13:90:ce:6f:02:1e:ea: 7b:9c:b3:f6:f8:97:60:f2:65:d1:d1:1f:87:3a:c1:75:f0:42: 8d:7a:ed:8c:72:b2:7b:fb:2c:8a:b4:91:47:54:e2:2e:69:cc: 16:54:1a:59
Certificate: Data: Version: 3 (0x2) Serial Number: 33:00:00:00:ca:6c:d5:32:12:35:c4:e1:55:00:01:00:00:00:ca Signature Algorithm: sha1WithRSAEncryption Issuer: C=US, ST=Washington, L=Redmond, O=Microsoft Corporation, CN=Microsoft Code Signing PCA Validity Not Before: Apr 22 17:39:00 2014 GMT Not After : Jul 22 17:39:00 2015 GMT Subject: C=US, ST=Washington, L=Redmond, O=Microsoft Corporation, OU=MOPR, CN=Microsoft Corporation Subject Public Key Info: Public Key Algorithm: rsaEncryption Public-Key: (2048 bit) Modulus: 00:96:71:5d:ed:06:46:fa:84:cb:9d:5b:b7:46:c7: b0:e1:b4:11:39:03:ad:b1:15:73:60:9c:eb:a7:b6: 6e:1a:3c:3f:ff:65:e3:34:f1:a6:a5:21:5e:56:99: 6c:58:e4:92:a1:0a:5c:c2:d3:dc:52:2f:0c:65:9a: 20:61:40:53:31:9c:6c:8f:21:7d:ba:f9:fe:13:50: 52:60:95:3a:5b:b9:58:a5:74:61:41:a9:94:e0:ad: 26:4e:4c:a1:97:70:49:27:5e:7c:67:ca:4f:1e:71: 84:46:bc:1d:4b:b6:e2:0f:c5:c6:27:c9:07:e6:7a: 0a:a5:17:00:19:4c:70:45:38:2d:81:b4:50:aa:c5: 67:d1:fa:79:bc:c5:cc:a1:72:9b:f4:25:34:98:f8: 54:df:12:39:38:12:2f:a4:6b:a5:9a:7e:c7:62:d1: dc:cf:ed:3d:34:f8:b9:df:35:30:ba:ec:79:32:a9: e1:a9:ac:55:4d:4c:7f:4c:56:c3:13:0b:76:f1:07: f9:cc:47:ac:fb:88:d5:52:a5:1e:28:fa:3d:2d:cf: cf:84:98:86:71:65:11:cf:85:c9:09:44:86:e1:6f: e7:b1:fc:ac:40:44:a5:a9:8b:23:3f:82:49:9d:d5: 96:59:50:13:59:18:73:ff:43:0c:ad:2b:d4:7f:30: 40:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Extended Key Usage: Code Signing X509v3 Subject Key Identifier: 1F:5E:E2:5D:50:8D:56:86:BE:4A:3C:CF:04:E8:A7:87:B5:CB:BF:83 X509v3 Subject Alternative Name: DirName:/OU=MOPR/serialNumber=31595\+b4218f13-6fca-490f-9c47-3fc557dfc440 X509v3 Authority Key Identifier: CB:11:E8:CA:D2:B4:16:58:01:C9:37:2E:33:16:16:B9:4C:9A:0A:1F X509v3 CRL Distribution Points: Full Name: URI:http://crl.microsoft.com/pki/crl/products/MicCodSigPCA_08-31-2010.crl Authority Information Access: CA Issuers - URI:http://www.microsoft.com/pki/certs/MicCodSigPCA_08-31-2010.crt Signature Algorithm: sha1WithRSAEncryption Signature Value: 77:5c:eb:d7:91:3d:cd:bd:7b:83:d9:85:a9:b0:43:9d:73:7c: 17:c9:0f:ed:36:db:c7:b5:2c:1b:5e:fb:54:05:3a:83:71:40: 81:09:a2:b7:71:26:5e:d6:7d:b6:6c:3b:c9:aa:5f:5d:03:18: 2a:1d:27:7e:07:e9:c5:65:1f:b5:cf:0d:b7:54:c7:28:38:5a: 88:e7:7b:c1:19:b6:56:32:ba:e2:cc:cb:93:db:af:6e:0f:5d: 44:f5:d4:b0:ef:1b:d5:4e:c1:af:0e:ef:20:9b:f2:e1:fe:27: 5d:e8:c5:ff:61:f6:19:d2:28:0a:22:9d:df:cd:70:82:9e:18: 72:d8:23:cc:7a:2c:43:ee:ff:ea:c0:e0:e6:1d:aa:9e:97:33: 00:52:6f:07:b8:d3:88:6c:de:a4:06:35:a7:c2:53:86:65:11: 77:09:8f:35:59:b9:d8:86:a8:00:fe:f8:31:7d:2c:f4:8c:05: 9d:c0:c1:d5:77:72:6c:e9:4d:59:26:83:f1:c2:b2:88:57:93: 35:00:7c:50:2b:bc:59:fc:fe:1c:29:38:82:d3:de:52:97:45: 29:18:4e:96:5b:9d:ba:5f:1b:a3:f1:27:50:ea:07:95:e8:6d: 34:0d:38:57:dc:37:28:35:95:3a:38:9c:d4:ed:6a:85:5d:0e: 22:11:5e:7b
Certificate: Data: Version: 3 (0x2) Serial Number: 61:33:26:1a:00:00:00:00:00:31 Signature Algorithm: sha1WithRSAEncryption Issuer: DC=com, DC=microsoft, CN=Microsoft Root Certificate Authority Validity Not Before: Aug 31 22:19:32 2010 GMT Not After : Aug 31 22:29:32 2020 GMT Subject: C=US, ST=Washington, L=Redmond, O=Microsoft Corporation, CN=Microsoft Code Signing PCA Subject Public Key Info: Public Key Algorithm: rsaEncryption Public-Key: (2048 bit) Modulus: 00:b2:72:59:5c:19:30:64:bf:1d:9a:60:20:20:42: 99:76:53:6c:3e:1b:d6:6f:cc:cb:f1:ea:6b:fe:97: 16:10:e0:df:3a:74:83:1a:b7:2f:a0:32:ec:ff:de: c2:42:4e:23:d5:72:00:db:35:57:0a:89:ca:ae:20: 49:f4:f0:68:ac:4d:4b:8d:a5:bd:79:4b:71:9b:47: 07:da:fd:25:df:9d:75:88:cf:aa:73:44:7f:d7:81: db:f3:bd:f2:36:a4:c9:5c:45:dc:af:ad:3d:e0:28: 68:97:1a:a7:a5:72:73:56:f1:17:94:e4:fd:35:94: 72:a0:d6:76:5f:1e:77:45:83:85:38:16:d0:73:5b: 05:ba:67:52:8d:a5:b2:69:2f:da:19:0b:fe:92:74: 29:e2:76:2f:54:dd:14:30:59:f8:d2:8d:62:fd:cb: c9:5f:46:31:50:b9:27:13:e4:40:30:cf:72:29:10: 28:22:c7:37:4e:3d:a0:32:3d:90:cd:a1:38:06:85: 5c:4e:56:82:28:2a:05:32:b7:4b:d7:4f:63:e7:d2: 2d:62:f1:45:3d:e7:ac:08:00:f6:46:a1:9e:d1:5b: 8c:26:53:e8:7a:aa:4a:f2:46:cf:37:3c:38:9e:b4: 77:5c:a5:17:9e:8d:cb:11:8f:56:3c:c1:ac:09:5f: 03:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: CB:11:E8:CA:D2:B4:16:58:01:C9:37:2E:33:16:16:B9:4C:9A:0A:1F X509v3 Key Usage: Digital Signature, Certificate Sign, CRL Sign 1.3.6.1.4.1.311.21.1: ..... 1.3.6.1.4.1.311.21.2: ....1N.&....`;.1o.<..- 1.3.6.1.4.1.311.20.2: . .S.u.b.C.A X509v3 Authority Key Identifier: 0E:AC:82:60:40:56:27:97:E5:25:13:FC:2A:E1:0A:53:95:59:E4:A4 X509v3 CRL Distribution Points: Full Name: URI:http://crl.microsoft.com/pki/crl/products/microsoftrootcert.crl Authority Information Access: CA Issuers - URI:http://www.microsoft.com/pki/certs/MicrosoftRootCert.crt Signature Algorithm: sha1WithRSAEncryption Signature Value: 59:39:3e:7f:26:46:af:eb:6f:40:b1:32:b5:6a:eb:0e:2f:6e: a8:49:f7:eb:5f:75:ed:4c:3b:2d:d7:43:ad:0b:fe:cb:e9:2d: 31:a3:23:cc:7c:50:98:80:21:5d:ac:3d:2f:4c:ba:a2:a8:56: 9c:e3:70:bb:b8:b4:f8:79:b5:49:72:f7:3e:ea:41:7f:ca:e1: 0c:17:69:cb:a5:9c:20:2d:fa:0b:50:c4:56:cd:2d:e3:4a:d2: bc:70:e7:a8:0d:a2:03:a5:56:e0:b8:8a:4b:57:f2:95:42:9c: f1:f3:ef:ee:e3:86:1f:34:3c:b8:56:9a:f0:53:23:85:2a:a4: 82:1c:93:e2:94:07:1d:f2:e2:4e:f8:8c:a1:ca:e8:13:a5:91: 4e:c8:1b:d2:8f:72:95:2a:71:6d:9b:1a:f8:1c:f0:53:d6:67: cc:22:ff:5c:1d:cd:a2:8c:bd:27:b2:79:63:56:44:a2:51:cd: f9:e9:a3:58:56:dd:9b:02:45:44:2f:5f:f4:da:ae:d4:82:32: 6e:fc:a4:95:13:e4:eb:69:e7:a9:a2:2c:be:c8:2b:10:0e:65: 8e:99:db:f5:a2:fa:12:26:09:65:38:94:f1:7a:1f:4a:bb:d1: e1:56:e8:d0:78:96:18:5c:c9:35:16:5f:dd:93:1d:49:8e:2d: be:ad:34:44:1c:ee:10:15:1a:00:5d:dd:35:5b:21:ce:98:c7: 09:ee:85:0e:8c:4f:6d:0e:13:4e:3d:7c:29:48:9c:72:d1:f3: 6c:ca:c1:ec:70:a3:57:92:57:7d:94:8d:a0:1b:48:03:5a:f7: cf:a3:67:0a:74:a5:36:ed:2d:2f:17:c8:e6:72:37:12:f4:6f: b1:3c:67:82:f9:52:b2:8d:33:16:65:1e:0e:8a:dd:10:de:64: f4:6f:ce:46:d4:d3:17:e9:79:c4:04:b4:d3:fb:2c:df:1f:8a: 9e:ac:0a:fb:13:27:40:ad:e4:f9:e1:a9:7f:46:bb:07:60:47: 65:60:40:4e:b0:42:ec:4e:ed:b3:76:79:d8:0a:34:09:6d:1c: 80:31:1f:e2:0e:54:dd:e5:a1:fb:e5:47:10:ad:64:98:ff:50: 16:2e:7c:bf:05:21:7a:e2:95:41:27:69:c3:93:8f:95:c9:8d: d8:9b:21:ae:0d:5c:9c:f0:a2:ae:86:68:83:0c:6a:2d:bb:76: 6b:00:1d:96:ad:f2:16:7b:f6:16:83:24:b9:88:cf:6a:a8:47: 31:2f:9a:dc:e3:71:3d:d7:00:7e:62:47:d1:ce:88:c9:b8:18: fa:0e:72:8d:c1:a3:3d:af:02:40:6a:ff:69:9b:96:e2:10:a8: 10:b4:37:50:08:d6:c3:3d
Certificate: Data: Version: 3 (0x2) Serial Number: 61:16:68:34:00:00:00:00:00:1c Signature Algorithm: sha1WithRSAEncryption Issuer: DC=com, DC=microsoft, CN=Microsoft Root Certificate Authority Validity Not Before: Apr 3 12:53:09 2007 GMT Not After : Apr 3 13:03:09 2021 GMT Subject: C=US, ST=Washington, L=Redmond, O=Microsoft Corporation, CN=Microsoft Time-Stamp PCA Subject Public Key Info: Public Key Algorithm: rsaEncryption Public-Key: (2048 bit) Modulus: 00:9f:a1:6c:b1:df:db:48:92:2a:7c:6b:2e:19:e1: bd:e2:e3:c5:99:51:23:50:ad:ce:dd:18:4e:24:0f: ee:d1:a7:d1:4c:ad:74:30:20:11:eb:07:d5:54:95: 15:49:94:1b:42:92:ae:98:5c:30:26:da:00:6b:e8: 7b:bd:ec:89:07:0f:f7:0e:04:98:f0:89:cc:1f:cb: 33:24:87:9d:f2:f4:67:1c:2c:fc:7b:e7:88:1d:ea: e7:4e:a3:a1:c1:23:53:ca:8d:fa:45:cf:09:d0:5e: af:d0:b0:42:04:a2:f9:a6:6c:93:67:d7:28:dc:46: 53:b0:86:d0:e5:28:46:2e:27:ac:86:4f:55:52:0c: e4:03:2c:fb:6a:90:90:30:6e:87:f3:59:30:9d:fa: 7e:d6:97:b3:e8:21:97:7e:f8:d2:13:f3:08:b7:53: 6d:52:b4:45:90:9f:48:00:4a:47:66:11:27:29:66: a8:97:e4:d3:06:81:4a:a2:f9:84:a7:11:47:14:09: 82:9f:84:ed:55:78:fe:01:9a:1d:50:08:85:00:10: 30:46:ed:b7:de:23:46:bb:c4:2d:54:9f:af:1e:78: 41:31:77:cc:9b:df:3b:83:93:a1:61:02:b5:1d:0d: b1:fc:f7:9b:b2:01:ce:22:4b:54:ff:f9:05:c3:c2: 20:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 23:34:F8:D9:52:46:70:0A:ED:40:FB:76:FB:B3:2B:B0:C3:35:B3:0F X509v3 Key Usage: Digital Signature, Certificate Sign, CRL Sign 1.3.6.1.4.1.311.21.1: ... X509v3 Authority Key Identifier: keyid:0E:AC:82:60:40:56:27:97:E5:25:13:FC:2A:E1:0A:53:95:59:E4:A4 DirName:/DC=com/DC=microsoft/CN=Microsoft Root Certificate Authority serial:79:AD:16:A1:4A:A0:A5:AD:4C:73:58:F4:07:13:2E:65 X509v3 CRL Distribution Points: Full Name: URI:http://crl.microsoft.com/pki/crl/products/microsoftrootcert.crl Authority Information Access: CA Issuers - URI:http://www.microsoft.com/pki/certs/MicrosoftRootCert.crt X509v3 Extended Key Usage: Time Stamping Signature Algorithm: sha1WithRSAEncryption Signature Value: 10:97:8a:c3:5c:03:44:36:dd:e9:b4:ad:77:db:ce:79:51:4d: 01:b1:2e:74:71:5b:6d:0c:13:ab:ce:be:7b:8f:b8:2e:d4:12: a2:8c:6d:62:b8:57:02:cb:4e:20:13:50:99:dd:7a:40:e2:57: bb:af:58:9a:1c:e1:1d:01:86:ac:bb:78:f2:8b:d0:ec:3b:01: ee:e2:be:8f:0a:05:c8:8d:48:e2:f0:53:15:dd:4f:ab:92:e4: e7:8d:6a:d5:80:c1:e6:94:f2:06:2f:85:03:e9:91:2a:24:22: 70:fb:f6:fc:e4:78:99:2e:0d:f7:07:e2:70:bc:18:4e:9d:8e: 6b:0a:72:95:b8:a1:39:9c:67:2d:c5:51:0e:ea:62:5c:3f:16: 98:8b:20:3f:e2:07:1a:32:f9:cc:31:4a:76:31:3d:2b:72:0b: c8:ea:70:3d:ff:85:0a:13:df:c2:0a:61:8e:f0:d7:b8:17:eb: 4e:8b:7f:c5:35:2b:5e:a3:bf:eb:bc:7d:0b:42:7b:d4:53:72: 21:ee:30:ca:bb:78:65:5c:5b:01:17:0a:14:0e:d2:da:14:98: f5:3c:b9:66:58:b3:2d:2f:e7:f9:85:86:cc:51:56:e8:9d:70: 94:6c:ac:39:4c:d4:f6:79:bf:aa:18:7a:62:29:ef:a2:9b:29: 34:06:77:1a:62:c9:3d:1e:6d:1f:82:f0:0b:c7:2c:bb:cf:43: b3:e5:f9:ec:7d:b5:e3:a4:a8:74:35:b8:4e:c5:71:23:12:26: 76:0b:3c:52:8c:71:5a:46:43:14:bc:b3:b3:b0:4d:67:c8:9f: 42:ff:80:79:21:80:9e:15:30:66:e8:42:12:5e:1a:c8:9e:22: 21:d0:43:e9:2b:e9:bb:f4:48:cc:2c:d4:d8:32:80:4c:26:2a: 48:24:5f:5a:ea:56:ef:a6:de:99:9d:ca:3a:6f:bd:81:27:74: 06:11:ee:76:21:bf:9b:82:c1:27:54:b6:b1:6a:3d:89:a1:76: 61:b4:6e:a1:13:a6:bf:aa:47:f0:12:6f:fd:8a:32:6c:b2:fe: df:51:c8:8c:23:c9:66:bd:9d:1d:87:12:64:02:3d:2d:af:59: 8f:b8:e4:21:e5:b5:b0:ca:63:b4:78:54:05:d4:41:2e:50:ac: 94:b0:a5:78:ab:b3:a0:96:75:1a:d9:92:87:13:75:22:2f:32: a8:08:6e:a0:5b:8c:25:bf:a0:ef:84:ca:21:d6:eb:1e:4f:c9: 9a:ee:49:e0:f7:01:65:6f:89:0b:7d:c8:69:c8:e6:6e:ea:a7: 97:ce:31:29:ff:0e:c5:5b:5c:d8:4d:1b:a1:d8:fa:2f:9e:3f: 2e:55:16:6b:c9:13:a3:fd
undefined method `first' for #
offset | size | type | comment | |
---|---|---|---|---|
0 | 464384 | EXE | 07/23/2014 06:42:12 | # |
15c1 | 15 | HTM | # | |
4cc20 | 12873 | PNG | (256 x 256) | # |
5134c | 3982 | PNG | (256 x 256) | # |
555bc | 4527 | PNG | (256 x 256) | # |
5f66c | 4465 | PNG | (256 x 256) | # |
654b8 | 4898 | PNG | (256 x 256) | # |
71600 | 16016 | PKCS7 | Authenticode Signature | # |
Please donate some bucks to keep this site up and running: | |
Ko-fi | |
---|---|
Yandex.Money | |
Thank you! |
[?] ignoring invalid PEdump::BITMAPINFOHEADER
[?] can't find file_offset of VA 0x4a27c