| Architecture |
IMAGE_FILE_MACHINE_AMD64
|
|---|---|
| Subsystem |
IMAGE_SUBSYSTEM_WINDOWS_GUI
|
| Compilation Date | 2019-Jul-01 13:40:49 |
| Detected languages |
English - United States
|
| TLS Callbacks | 1 callback(s) detected. |
| Debug artifacts |
D:\TemporaryBuilds\main_app_builder_1\14\s\App\_bin\escape\x64\Release\escape.pdb
|
| FileVersion | 4.0.24.4617 |
| ProductVersion | 4.0.24.4617 |
| InternalName | escape.exe |
| OriginalFilename | escape.exe |
| CompanyName | Red Software |
| ProductName | PDFescape Desktop |
| LegalCopyright | Copyright 2019 Red Software. All rights reserved. |
| FileDescription | PDFescape Desktop |
| CommitID | a76972cc97eceede2f4807cf00db1d1611bd1869 |
| Info | Matching compiler(s): |
MASM/TASM - sig2(h)
MASM/TASM - sig1(h) |
| Suspicious | Strings found in the binary may indicate undesirable behavior: |
May have dropper capabilities:
|
| Suspicious | The PE contains functions most legitimate programs don't use. |
[!] The program may be hiding some of its imports:
|
| Info | The PE is digitally signed. |
Signer: PDFescape
Issuer: DigiCert SHA2 Assured ID Code Signing CA |
| Suspicious | VirusTotal score: 1/71 (Scanned on 2026-05-21 07:12:47) | DrWeb: Program.Unwanted.4610 |
| e_magic | MZ |
|---|---|
| e_cblp | 0x90 |
| e_cp | 0x3 |
| e_crlc | 0 |
| e_cparhdr | 0x4 |
| e_minalloc | 0 |
| e_maxalloc | 0xffff |
| e_ss | 0 |
| e_sp | 0xb8 |
| e_csum | 0 |
| e_ip | 0 |
| e_cs | 0 |
| e_ovno | 0 |
| e_oemid | 0 |
| e_oeminfo | 0 |
| e_lfanew | 0x128 |
| Signature | PE |
|---|---|
| Machine |
IMAGE_FILE_MACHINE_AMD64
|
| NumberofSections | 6 |
| TimeDateStamp | 2019-Jul-01 13:40:49 |
| PointerToSymbolTable | 0 |
| NumberOfSymbols | 0 |
| SizeOfOptionalHeader | 0xf0 |
| Characteristics |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
|
| Magic | PE32+ |
|---|---|
| LinkerVersion | 14.0 |
| SizeOfCode | 0x15aa00 |
| SizeOfInitializedData | 0x145000 |
| SizeOfUninitializedData | 0 |
| AddressOfEntryPoint | 0x000000000011FCB8 (Section: .text) |
| BaseOfCode | 0x1000 |
| ImageBase | 0x140000000 |
| SectionAlignment | 0x1000 |
| FileAlignment | 0x200 |
| OperatingSystemVersion | 6.0 |
| ImageVersion | 0.0 |
| SubsystemVersion | 6.0 |
| Win32VersionValue | 0 |
| SizeOfImage | 0x2a4000 |
| SizeOfHeaders | 0x400 |
| Checksum | 0x2b281e |
| Subsystem |
IMAGE_SUBSYSTEM_WINDOWS_GUI
|
| DllCharacteristics |
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
|
| SizeofStackReserve | 0x100000 |
| SizeofStackCommit | 0x1000 |
| SizeofHeapReserve | 0x100000 |
| SizeofHeapCommit | 0x1000 |
| LoaderFlags | 0 |
| NumberOfRvaAndSizes | 16 |
| icuuc63.dll |
u_cleanup_63
udata_setCommonData_63 udata_setFileAccess_63 u_init_63 |
|---|---|
| encoding-conversion.dll |
SLConvertUnicodeToACP
SLConvertACPToUnicode |
| USER32.dll |
GetWindowTextW
GetParent SendMessageTimeoutW SetForegroundWindow PostMessageW GetWindowThreadProcessId GetWindowPlacement ShowWindow GetWindowLongPtrW EnumWindows MessageBoxW GetForegroundWindow MessageBoxA IsWindow SendMessageW GetClassNameW |
| KERNEL32.dll |
EnterCriticalSection
DeleteCriticalSection InitializeCriticalSection GetCurrentProcess CreateSemaphoreA CreateToolhelp32Snapshot Process32FirstW Process32NextW WideCharToMultiByte GetConsoleScreenBufferInfo SetConsoleTextAttribute CreateProcessW WaitForSingleObject GetExitCodeProcess GetModuleHandleW LeaveCriticalSection RtlLookupFunctionEntry RtlVirtualUnwind UnhandledExceptionFilter IsProcessorFeaturePresent IsDebuggerPresent GetStartupInfoW FormatMessageA InitializeCriticalSectionEx AttachConsole LocalAlloc GetStdHandle GetFileType FreeConsole SetUnhandledExceptionFilter LoadLibraryA GetSystemTimeAsFileTime SetLastError QueryPerformanceFrequency ResetEvent WaitForMultipleObjectsEx OpenEventA SetWaitableTimer MoveFileExW Sleep WaitForSingleObjectEx SetEvent CreateEventA CloseHandle GetModuleFileNameW GetCurrentThreadId ProcessIdToSessionId GetCurrentProcessId LocalFree FormatMessageW GetLastError LoadLibraryW FreeLibrary GetProcAddress TlsAlloc TlsGetValue TlsSetValue TlsFree GetModuleHandleA CreateWaitableTimerA InitializeCriticalSectionAndSpinCount CreateEventW InitializeSListHead OutputDebugStringW ReleaseSemaphore GetProcessHeap RtlCaptureContext HeapFree TerminateProcess CreateDirectoryW CreateFileW DeleteFileW FindClose FindFirstFileW FindNextFileW GetFileAttributesW GetFileTime RemoveDirectoryW DeviceIoControl AreFileApisANSI MultiByteToWideChar QueryPerformanceCounter DuplicateHandle |
| ole32.dll |
CoCreateInstance
OleRun CoUninitialize CoInitialize |
| atom.dll |
SLGetAtomFromString
SLGetStringFromAtom GetSingletonStaticData CreateSingletonStaticData IsSingletonStaticDataStorageAvailable CalculateSequenceHash CleanupSingletonStaticDataStorage SLGetAtomFromStringW |
| root-service-provider.dll |
ServiceProviderSetModulesRootDirectory
ServiceProviderCleanup ServiceProviderPreloadForceModules ServiceProviderGetModulesRootDirectory ServiceProviderGetServiceObject |
| crash-handler.dll |
SetCrashHandler
|
| pdfcore.dll |
PDDocClose
PDInit PDDone PDDocSetModDate PDDocNotifyAttachmentChanged PDDocOpen PDDocNewAttachmentFromFile PDDocSave PDDocSetInfoString |
| MSVCP140.dll |
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UEAA@XZ
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IEAA@XZ ?cout@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A ??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@I@Z ?_Xbad_function_call@std@@YAXXZ ?imbue@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAA?AVlocale@2@AEBV32@@Z ?narrow@?$ctype@D@std@@QEBADDD@Z ??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@K@Z ?put@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@D@Z ??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@P6AAEAVios_base@1@AEAV21@@Z@Z ??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@_N@Z ??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@P6AAEAV01@AEAV01@@Z@Z ??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@_J@Z ??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@PEBX@Z _Mbrtowc ?_Xbad_alloc@std@@YAXXZ ?_Getcvt@_Locinfo@std@@QEBA?AU_Cvtvec@@XZ ?_Incref@facet@locale@std@@UEAAXXZ ?_Decref@facet@locale@std@@UEAAPEAV_Facet_base@3@XZ ??1_Locinfo@std@@QEAA@XZ ??0_Locinfo@std@@QEAA@PEBD@Z ??1facet@locale@std@@MEAA@XZ ??0facet@locale@std@@IEAA@_K@Z ?_Syserror_map@std@@YAPEBDH@Z ?_Execute_once@std@@YAHAEAUonce_flag@1@P6AHPEAX1PEAPEAX@Z1@Z ?imbue@ios_base@std@@QEAA?AVlocale@2@AEBV32@@Z ?_Gettrue@_Locinfo@std@@QEBAPEBDXZ ?_Getfalse@_Locinfo@std@@QEBAPEBDXZ ?_Getlconv@_Locinfo@std@@QEBAPEBUlconv@@XZ ?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAPEADXZ ?classic@locale@std@@SAAEBV12@XZ ??1?$basic_iostream@DU?$char_traits@D@std@@@std@@UEAA@XZ ?id@?$ctype@D@std@@2V0locale@2@A ?sgetc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ ?sbumpc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ ?_New_Locimp@_Locimp@locale@std@@CAPEAV123@AEBV123@@Z ?_Addfac@_Locimp@locale@std@@AEAAXPEAVfacet@23@_K@Z ??4?$_Yarn@D@std@@QEAAAEAV01@PEBD@Z ?id@?$time_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@2V0locale@2@A ?id@?$num_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@2V0locale@2@A ?id@?$numpunct@D@std@@2V0locale@2@A ?tolower@?$ctype@D@std@@QEBADD@Z ??1?$num_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@MEAA@XZ ?do_get@?$num_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@MEBA?AV?$istreambuf_iterator@DU?$char_traits@D@std@@@2@V32@0AEAVios_base@2@AEAHAEAPEAX@Z ?do_get@?$num_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@MEBA?AV?$istreambuf_iterator@DU?$char_traits@D@std@@@2@V32@0AEAVios_base@2@AEAHAEAO@Z ?do_get@?$num_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@MEBA?AV?$istreambuf_iterator@DU?$char_traits@D@std@@@2@V32@0AEAVios_base@2@AEAHAEAN@Z ?do_get@?$num_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@MEBA?AV?$istreambuf_iterator@DU?$char_traits@D@std@@@2@V32@0AEAVios_base@2@AEAHAEAM@Z ?do_get@?$num_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@MEBA?AV?$istreambuf_iterator@DU?$char_traits@D@std@@@2@V32@0AEAVios_base@2@AEAHAEA_K@Z ?do_get@?$num_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@MEBA?AV?$istreambuf_iterator@DU?$char_traits@D@std@@@2@V32@0AEAVios_base@2@AEAHAEA_J@Z ?do_get@?$num_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@MEBA?AV?$istreambuf_iterator@DU?$char_traits@D@std@@@2@V32@0AEAVios_base@2@AEAHAEAK@Z ?do_get@?$num_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@MEBA?AV?$istreambuf_iterator@DU?$char_traits@D@std@@@2@V32@0AEAVios_base@2@AEAHAEAJ@Z ?do_get@?$num_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@MEBA?AV?$istreambuf_iterator@DU?$char_traits@D@std@@@2@V32@0AEAVios_base@2@AEAHAEAI@Z ?do_get@?$num_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@MEBA?AV?$istreambuf_iterator@DU?$char_traits@D@std@@@2@V32@0AEAVios_base@2@AEAHAEAG@Z ?do_get@?$num_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@MEBA?AV?$istreambuf_iterator@DU?$char_traits@D@std@@@2@V32@0AEAVios_base@2@AEAHAEA_N@Z ?_Getcat@?$num_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z ?_Getcat@?$time_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z ??0?$num_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QEAA@_K@Z ?put@?$time_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QEBA?AV?$ostreambuf_iterator@DU?$char_traits@D@std@@@2@V32@AEAVios_base@2@DPEBUtm@@PEBD3@Z ?_Ipfx@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA_N_N@Z ??0?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z ??0?$basic_iostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z ??5?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@P6AAEAVios_base@1@AEAV21@@Z@Z ?get@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAHXZ ?putback@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@D@Z ??5?$basic_istream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@AEAM@Z ??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@M@Z ?wcout@std@@3V?$basic_ostream@_WU?$char_traits@_W@std@@@1@A ?sync_with_stdio@ios_base@std@@SA_N_N@Z ?toupper@?$ctype@D@std@@QEBADD@Z ?toupper@?$ctype@_W@std@@QEBA_W_W@Z ??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@PEBX@Z ?setw@std@@YA?AU?$_Smanip@_J@1@_J@Z ??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@J@Z ??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@_K@Z ?id@?$numpunct@_W@std@@2V0locale@2@A ?id@?$time_put@_WV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@2V0locale@2@A ??5?$basic_istream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@AEA_J@Z ??5?$basic_istream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@AEA_N@Z ??5?$basic_istream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@AEAI@Z ??5?$basic_istream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@AEA_K@Z ??5?$basic_istream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@AEAH@Z ??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@G@Z ??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@_J@Z ?_Getcat@?$time_put@_WV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z ?put@?$time_put@_WV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@QEBA?AV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@2@V32@AEAVios_base@2@_WPEBUtm@@PEB_W4@Z ?put@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV12@_W@Z ??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@P6AAEAV01@AEAV01@@Z@Z ??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@H@Z ??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@J@Z ?tolower@?$ctype@_W@std@@QEBA_W_W@Z ?_Getcat@?$ctype@D@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z ?widen@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBADD@Z ??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z ??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UEAA@XZ ??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAA@XZ ?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JXZ ?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ ?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEAD_J@Z ?gptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ ?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAPEAV12@PEAD_J@Z ?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAXAEBVlocale@2@@Z ??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAA@XZ ?out@?$codecvt@_WDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEB_W1AEAPEB_WPEAD3AEAPEAD@Z ?_Getcat@?$codecvt@_WDU_Mbstatet@@@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z ?cerr@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A ?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ ?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@XZ ?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ ?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ ?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAXXZ ?pptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ ?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEBD_J@Z ?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAA_JPEBD_J@Z ?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHD@Z ?clear@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z ?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z ??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@H@Z ??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@I@Z ??0?$basic_iostream@_WU?$char_traits@_W@std@@@std@@QEAA@PEAV?$basic_streambuf@_WU?$char_traits@_W@std@@@1@@Z ??1?$basic_iostream@_WU?$char_traits@_W@std@@@std@@UEAA@XZ ?_BADOFF@std@@3_JB ??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@K@Z ??0?$basic_ios@_WU?$char_traits@_W@std@@@std@@IEAA@XZ ?widen@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QEBA_WD@Z ??0?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAA@PEAV?$basic_streambuf@_WU?$char_traits@_W@std@@@1@_N@Z ??1?$basic_ostream@_WU?$char_traits@_W@std@@@std@@UEAA@XZ ??1?$basic_ios@_WU?$char_traits@_W@std@@@std@@UEAA@XZ ?imbue@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QEAA?AVlocale@2@AEBV32@@Z ?exceptions@ios_base@std@@QEAAXH@Z ?getloc@ios_base@std@@QEBA?AVlocale@2@XZ ?flush@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV12@XZ ?uncaught_exception@std@@YA_NXZ ?_Osfx@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAXXZ ?sputn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QEAA_JPEB_W_J@Z ?clear@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QEAAXH_N@Z ?setstate@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QEAAXH_N@Z ??0?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEAA@XZ ??Bid@locale@std@@QEAA_KXZ ?id@?$ctype@_W@std@@2V0locale@2@A ?_Getgloballocale@locale@std@@CAPEAV_Locimp@12@XZ ??0_Lockit@std@@QEAA@H@Z ??1_Lockit@std@@QEAA@XZ ?_Getcat@?$ctype@_W@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z ?_Init@locale@std@@CAPEAV_Locimp@12@_N@Z ?is@?$ctype@_W@std@@QEBA_NF_W@Z ?narrow@?$ctype@_W@std@@QEBAD_WD@Z ?_Xout_of_range@std@@YAXPEBD@Z ?widen@?$ctype@_W@std@@QEBA_WD@Z ?_Lock@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UEAAXXZ ?_Unlock@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UEAAXXZ ?_Pninc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEAAPEA_WXZ ?sputc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QEAAG_W@Z ?showmanyc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAA_JXZ ?uflow@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAAGXZ ?xsgetn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAA_JPEA_W_J@Z ?xsputn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAA_JPEB_W_J@Z ?gptr@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEBAPEA_WXZ ?setbuf@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAAPEAV12@PEA_W_J@Z ?sync@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAAHXZ ?imbue@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAAXAEBVlocale@2@@Z ??1?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UEAA@XZ ?pptr@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEBAPEA_WXZ ?_Xlength_error@std@@YAXPEBD@Z ?id@?$codecvt@_WDU_Mbstatet@@@std@@2V0locale@2@A ??0?$codecvt@_WDU_Mbstatet@@@std@@QEAA@_K@Z ??1?$codecvt@_WDU_Mbstatet@@@std@@MEAA@XZ ?_Locimp_Addfac@_Locimp@locale@std@@CAXPEAV123@PEAVfacet@23@_K@Z ?sync@?$basic_istream@_WU?$char_traits@_W@std@@@std@@QEAAHXZ ?do_always_noconv@?$codecvt@_WDU_Mbstatet@@@std@@MEBA_NXZ ?do_length@?$codecvt@_WDU_Mbstatet@@@std@@MEBAHAEAU_Mbstatet@@PEBD1_K@Z ?do_unshift@?$codecvt@_WDU_Mbstatet@@@std@@MEBAHAEAU_Mbstatet@@PEAD1AEAPEAD@Z ??5?$basic_istream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@P6AAEAVios_base@1@AEAV21@@Z@Z ?get@?$basic_istream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV12@AEA_W@Z ?putback@?$basic_istream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV12@_W@Z ?in@?$codecvt@_WDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEA_W3AEAPEA_W@Z ?widen@?$ctype@D@std@@QEBADD@Z ??1?$basic_istream@DU?$char_traits@D@std@@@std@@UEAA@XZ ?snextc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ |
| VCRUNTIME140.dll |
__std_terminate
__CxxFrameHandler3 __std_exception_copy _purecall __std_exception_destroy __std_type_info_compare __std_type_info_name wcsstr __C_specific_handler _CxxThrowException memset memcmp memmove memchr memcpy |
| api-ms-win-crt-runtime-l1-1-0.dll |
_set_app_type
_seh_filter_exe _cexit _crt_atexit _register_onexit_function _initialize_onexit_table _initialize_wide_environment _get_wide_winmain_command_line _initterm _initterm_e _configure_wide_argv _errno _invalid_parameter_noinfo_noreturn exit _exit terminate strerror abort _register_thread_local_exe_atexit_callback _c_exit |
| api-ms-win-crt-string-l1-1-0.dll |
strncpy
isspace tolower _strnicmp iswdigit towlower wcsncmp wcsnlen _wcsnicmp strnlen ispunct isdigit |
| api-ms-win-crt-stdio-l1-1-0.dll |
__stdio_common_vsprintf
_set_fmode _wfopen __p__commode fseek ftell __stdio_common_vswprintf_s freopen __acrt_iob_func _fileno _get_osfhandle rewind fread fclose |
| api-ms-win-crt-heap-l1-1-0.dll |
malloc
_aligned_malloc _set_new_mode _callnewh free calloc _aligned_free |
| api-ms-win-crt-time-l1-1-0.dll |
_gmtime64_s
_gmtime64 _localtime64 |
| api-ms-win-crt-convert-l1-1-0.dll |
wcstoul
_itow_s |
| api-ms-win-crt-math-l1-1-0.dll |
__setusermatherr
|
| api-ms-win-crt-locale-l1-1-0.dll |
_configthreadlocale
|
| OLEAUT32.dll |
GetErrorInfo
SysAllocString SysStringLen SysFreeString |
| brand.dll |
GetProductNameDll
GetInternalProductNameDll GetBrandExecutableNameDll |
| Ordinal | 1 |
|---|---|
| Address | 0xdc080 |
| Ordinal | 2 |
|---|---|
| Address | 0xd9d20 |
| Ordinal | 3 |
|---|---|
| Address | 0xb5230 |
| Ordinal | 4 |
|---|---|
| Address | 0xc0cc0 |
| Ordinal | 5 |
|---|---|
| Address | 0xb5200 |
| Ordinal | 6 |
|---|---|
| Address | 0x37030 |
| Ordinal | 7 |
|---|---|
| Address | 0x37720 |
| Ordinal | 8 |
|---|---|
| Address | 0xb7160 |
| Ordinal | 9 |
|---|---|
| Address | 0xb6730 |
| Ordinal | 10 |
|---|---|
| Address | 0xb7130 |
| Ordinal | 11 |
|---|---|
| Address | 0x37280 |
| Ordinal | 12 |
|---|---|
| Address | 0x37280 |
| Ordinal | 13 |
|---|---|
| Address | 0x37280 |
| Ordinal | 14 |
|---|---|
| Address | 0x37280 |
| Ordinal | 15 |
|---|---|
| Address | 0x37280 |
| Ordinal | 16 |
|---|---|
| Address | 0x37280 |
| Ordinal | 17 |
|---|---|
| Address | 0x37280 |
| Ordinal | 18 |
|---|---|
| Address | 0x37280 |
| Ordinal | 19 |
|---|---|
| Address | 0x37280 |
| Ordinal | 20 |
|---|---|
| Address | 0x37280 |
| Ordinal | 21 |
|---|---|
| Address | 0xdc0b0 |
| Ordinal | 22 |
|---|---|
| Address | 0xd9d50 |
| Ordinal | 23 |
|---|---|
| Address | 0xb5260 |
| Ordinal | 24 |
|---|---|
| Address | 0xc0cf0 |
| Ordinal | 25 |
|---|---|
| Address | 0xb52a0 |
| Ordinal | 26 |
|---|---|
| Address | 0x37060 |
| Ordinal | 27 |
|---|---|
| Address | 0x37750 |
| Ordinal | 28 |
|---|---|
| Address | 0xb7190 |
| Ordinal | 29 |
|---|---|
| Address | 0xb6760 |
| Ordinal | 30 |
|---|---|
| Address | 0xb71a0 |
| Ordinal | 31 |
|---|---|
| Address | 0xb5aa0 |
| Ordinal | 32 |
|---|---|
| Address | 0xb5a90 |
| Ordinal | 33 |
|---|---|
| Address | 0xb7880 |
| Ordinal | 34 |
|---|---|
| Address | 0xb6b00 |
| Ordinal | 35 |
|---|---|
| Address | 0xb7870 |
| Ordinal | 36 |
|---|---|
| Address | 0x117090 |
| Ordinal | 37 |
|---|---|
| Address | 0x115710 |
| Ordinal | 38 |
|---|---|
| Address | 0x112cd0 |
| Ordinal | 39 |
|---|---|
| Address | 0x112860 |
| Ordinal | 40 |
|---|---|
| Address | 0xdbf30 |
| Ordinal | 41 |
|---|---|
| Address | 0xd9bd0 |
| Ordinal | 42 |
|---|---|
| Address | 0xb4f70 |
| Ordinal | 43 |
|---|---|
| Address | 0xc0b70 |
| Ordinal | 44 |
|---|---|
| Address | 0xb4f60 |
| Ordinal | 45 |
|---|---|
| Address | 0x36eb0 |
| Ordinal | 46 |
|---|---|
| Address | 0x375d0 |
| Ordinal | 47 |
|---|---|
| Address | 0xb6ea0 |
| Ordinal | 48 |
|---|---|
| Address | 0xb65e0 |
| Ordinal | 49 |
|---|---|
| Address | 0xb6e80 |
| Ordinal | 50 |
|---|---|
| Address | 0x15160 |
| Ordinal | 51 |
|---|---|
| Address | 0x117090 |
| Ordinal | 52 |
|---|---|
| Address | 0x115710 |
| Ordinal | 53 |
|---|---|
| Address | 0x112cd0 |
| Ordinal | 54 |
|---|---|
| Address | 0x112860 |
| Ordinal | 55 |
|---|---|
| Address | 0x117140 |
| Ordinal | 56 |
|---|---|
| Address | 0x115870 |
| Ordinal | 57 |
|---|---|
| Address | 0x112d80 |
| Ordinal | 58 |
|---|---|
| Address | 0x112910 |
| Ordinal | 59 |
|---|---|
| Address | 0x15190 |
| Ordinal | 60 |
|---|---|
| Address | 0xb5d30 |
| Ordinal | 61 |
|---|---|
| Address | 0xb5df0 |
| Ordinal | 62 |
|---|---|
| Address | 0xb7b10 |
| Ordinal | 63 |
|---|---|
| Address | 0xb6c50 |
| Ordinal | 64 |
|---|---|
| Address | 0xb7b20 |
| Ordinal | 65 |
|---|---|
| Address | 0x2423a8 |
| Ordinal | 66 |
|---|---|
| Address | 0x15170 |
| Ordinal | 67 |
|---|---|
| Address | 0xc0ef0 |
| Ordinal | 68 |
|---|---|
| Address | 0xc0ef0 |
| Ordinal | 69 |
|---|---|
| Address | 0xb5630 |
| Ordinal | 70 |
|---|---|
| Address | 0xc0ef0 |
| Ordinal | 71 |
|---|---|
| Address | 0xb5710 |
| Ordinal | 72 |
|---|---|
| Address | 0x37300 |
| Ordinal | 73 |
|---|---|
| Address | 0x37930 |
| Ordinal | 74 |
|---|---|
| Address | 0xb7530 |
| Ordinal | 75 |
|---|---|
| Address | 0xb6930 |
| Ordinal | 76 |
|---|---|
| Address | 0xb76b0 |
| Ordinal | 77 |
|---|---|
| Address | 0x15180 |
| Signature | 0xfeef04bd |
|---|---|
| StructVersion | 0x10000 |
| FileVersion | 4.0.24.4617 |
| ProductVersion | 4.0.24.4617 |
| FileFlags | (EMPTY) |
| FileOs |
VOS_DOS_WINDOWS32
VOS_NT
VOS_NT_WINDOWS32
VOS_WINCE
VOS__WINDOWS32
|
| FileType |
VFT_APP
|
| Language | English - United States |
| FileVersion (#2) | 4.0.24.4617 |
| ProductVersion (#2) | 4.0.24.4617 |
| InternalName | escape.exe |
| OriginalFilename | escape.exe |
| CompanyName | Red Software |
| ProductName | PDFescape Desktop |
| LegalCopyright | Copyright 2019 Red Software. All rights reserved. |
| FileDescription | PDFescape Desktop |
| CommitID | a76972cc97eceede2f4807cf00db1d1611bd1869 |
| Resource LangID | English - United States |
|---|
| Characteristics |
0
|
|---|---|
| TimeDateStamp | 2019-Jul-01 13:40:49 |
| Version | 0.0 |
| SizeofData | 106 |
| AddressOfRawData | 0x1c588c |
| PointerToRawData | 0x1c468c |
| Referenced File | D:\TemporaryBuilds\main_app_builder_1\14\s\App\_bin\escape\x64\Release\escape.pdb |
| Characteristics |
0
|
|---|---|
| TimeDateStamp | 2019-Jul-01 13:40:49 |
| Version | 0.0 |
| SizeofData | 964 |
| AddressOfRawData | 0x1c58f8 |
| PointerToRawData | 0x1c46f8 |
| Characteristics |
0
|
|---|---|
| TimeDateStamp | 2019-Jul-01 13:40:49 |
| Version | 0.0 |
| SizeofData | 0 |
| AddressOfRawData | 0 |
| PointerToRawData | 0 |
| StartAddressOfRawData | 0x1401c5ce0 |
|---|---|
| EndAddressOfRawData | 0x1401c5ce8 |
| AddressOfIndex | 0x140241d04 |
| AddressOfCallbacks | 0x14015d2a8 |
| SizeOfZeroFill | 0 |
| Characteristics |
IMAGE_SCN_ALIGN_4BYTES
|
| Callbacks |
0x0000000140111050
|
| Size | 0x100 |
|---|---|
| TimeDateStamp | 1970-Jan-01 00:00:00 |
| Version | 0.0 |
| GlobalFlagsClear | (EMPTY) |
| GlobalFlagsSet | (EMPTY) |
| CriticalSectionDefaultTimeout | 0 |
| DeCommitFreeBlockThreshold | 0 |
| DeCommitTotalFreeThreshold | 0 |
| LockPrefixTable | 0 |
| MaximumAllocationSize | 0 |
| VirtualMemoryThreshold | 0 |
| ProcessAffinityMask | 0 |
| ProcessHeapFlags | (EMPTY) |
| CSDVersion | 0 |
| Reserved1 | 0 |
| EditList | 0 |
| SecurityCookie | 0x14021c0c0 |
| XOR Key | 0x10cd3284 |
|---|---|
| Unmarked objects | 0 |
| Imports (VS2008 SP1 build 30729) | 20 |
| ASM objects (VS2017 v15.6.6 compiler 26131) | 3 |
| C objects (VS2017 v15.6.6 compiler 26131) | 13 |
| C++ objects (VS2017 v15.9.5-6 compiler 27026) | 36 |
| Imports (VS2017 v15.6.6 compiler 26131) | 4 |
| C++ objects (VS2017 v15.6.6 compiler 26131) | 38 |
| Imports (VS2017 v15.9.11 compiler 27030) | 2 |
| C objects (CVTCIL) (VS2017 v15.?.? build 25203) | 1 |
| C++ objects (VS2017 v15.7 compiler 26428) | 11 |
| Imports (VS2017 v15.?.? build 25203) | 20 |
| Imports (VS2017 v15.7 compiler 26428) | 13 |
| Total imports | 599 |
| C++ objects (LTCG) (VS2017 v15.7 compiler 26428) | 39 |
| Exports (VS2017 v15.7 compiler 26428) | 1 |
| Resource objects (VS2017 v15.7 compiler 26428) | 1 |
| 151 | 1 |
| Linker (VS2017 v15.7 compiler 26428) | 1 |
No comments yet.