Manalyze report for bc4a39e93d61bba28fc78146a4aa09cec8644be36a7f5714a369e7cdde67806e

Summary

Architecture	`IMAGE_FILE_MACHINE_AMD64`
Subsystem	`IMAGE_SUBSYSTEM_WINDOWS_GUI`
Compilation Date	2021-Aug-19 07:38:44
Detected languages	English - United States
Debug artifacts	c:\cygwin64\home\buildsys\work\Nalpeiron\Shafer\branches\Release_3.7.52\jni\WINDOWS\x64\Release\javaShafer.pdb
CompanyName	Nalpeiron
FileDescription	Nalpeiron Licensing and Analytics Library
InternalName	libShafer.dll
LegalCopyright	Copyright (C) 2018
OriginalFilename	libShafer.dll
ProductName	Shafer
ProductVersion	`3.7`

Plugin Output

Info	Matching compiler(s):	`MASM/TASM - sig1(h)`
Suspicious	Strings found in the binary may indicate undesirable behavior:	`Tries to detect virtualized environments: HARDWARE\DESCRIPTION\System` `Looks for VMWare presence: VMWare VMware` `Accesses the WMI: root\microsoft root\virtualization` Contains domain names: example.com http://relaxng.org http://tempuri.org http://www.w3.org http://www.w3.org/1999/xhtml http://www.w3.org/2000/xmlns/ http://www.w3.org/2001/XMLSchema http://www.w3.org/2001/XMLSchema-instance http://www.w3.org/2002/08/xquery-functions http://www.w3.org/2003/05/soap-encoding http://www.w3.org/2003/05/soap-envelope http://www.w3.org/TR/xhtml1/DTD/xhtml1-frameset.dtd http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd http://www.w3.org/XML/1998/namespace https://curl.se openssl.org relaxng.org tempuri.org www.w3.org
Info	Cryptographic algorithms detected in the binary:	`Uses constants related to MD5` `Uses constants related to SHA1` `Uses constants related to SHA256` `Uses constants related to SHA512` `Uses constants related to AES` `Uses constants related to Blowfish` `Microsoft's Cryptography API`
Suspicious	The PE contains functions most legitimate programs don't use.	`[!] The program may be hiding some of its imports: GetProcAddress LoadLibraryA` `Functions which can be used for anti-debugging purposes: CreateToolhelp32Snapshot` `Can access the registry: RegOpenKeyExW RegCloseKey RegQueryValueExW` `Possibly launches other programs: CreateProcessA` `Uses Windows's Native API: ntohl ntohs` `Uses Microsoft's cryptographic API: CryptEncrypt CryptImportKey CryptDestroyKey CryptDestroyHash CryptHashData CryptCreateHash CryptGetHashParam CryptGenRandom CryptReleaseContext CryptAcquireContextA CryptStringToBinaryA CryptDecodeObjectEx CryptQueryObject` Leverages the raw socket API to access the Internet: getservbyname WSAGetLastError inet_addr sendto WSAResetEvent recvfrom WSAIoctl htons closesocket gethostname WSAEventSelect WSAEnumNetworkEvents WSACreateEvent ioctlsocket WSACloseEvent send setsockopt WSASetLastError getservbyport WSAWaitForMultipleEvents htonl getaddrinfo gethostbyname freeaddrinfo connect gethostbyaddr bind getsockname inet_ntoa getsockopt getpeername __WSAFDIsSet accept socket listen recv select WSAStartup WSACleanup ntohl ntohs `Manipulates other processes: Process32NextW Process32FirstW` `Interacts with the certificate store: CertAddCertificateContextToStore CertOpenStore`
Info	The PE is digitally signed.	`Signer: IDEA StatiCa s.r.o.` `Issuer: Sectigo RSA Code Signing CA`
Safe	VirusTotal score: 0/70 (Scanned on 2022-12-15 22:13:58)	`All the AVs think this file is safe.`

Hashes

MD5	`368e358dd023a6daa688d57bd6fef409`
SHA1	`fc5a630a1e0046b98b96ad48816ae86c7fcd0b12`
SHA256	`bc4a39e93d61bba28fc78146a4aa09cec8644be36a7f5714a369e7cdde67806e`
SHA3	`436a4c50db33824114a492176a629d2aaeee7f7b89d468a42d5ca271fa66aa43`
SSDeep	`49152:lgbhTUTMBAm7z9C94vLYmiGIrItqd77dgfQq/pfadj7EPjbdboz:KS+uW1IPwQqhRbdboz`
Imports Hash	`c82bd9ffc3a8af229f3399090e02e5a9`

DOS Header

e_magic	`MZ`
e_cblp	`0x90`
e_cp	`0x3`
e_crlc	`0`
e_cparhdr	`0x4`
e_minalloc	`0`
e_maxalloc	`0xffff`
e_ss	`0`
e_sp	`0xb8`
e_csum	`0`
e_ip	`0`
e_cs	`0`
e_ovno	`0`
e_oemid	`0`
e_oeminfo	`0`
e_lfanew	`0x120`

PE Header

Signature	`PE`
Machine	`IMAGE_FILE_MACHINE_AMD64`
NumberofSections	`6`
TimeDateStamp	2021-Aug-19 07:38:44
PointerToSymbolTable	`0`
NumberOfSymbols	`0`
SizeOfOptionalHeader	`0xf0`
Characteristics	`IMAGE_FILE_DLL` `IMAGE_FILE_EXECUTABLE_IMAGE` `IMAGE_FILE_LARGE_ADDRESS_AWARE`

Image Optional Header

Magic	`PE32+`
LinkerVersion	`14.0`
SizeOfCode	`0x1b1600`
SizeOfInitializedData	`0xbe000`
SizeOfUninitializedData	`0`
AddressOfEntryPoint	`0x000000000015D424 (Section: .text)`
BaseOfCode	`0x1000`
ImageBase	`0x180000000`
SectionAlignment	`0x1000`
FileAlignment	`0x200`
OperatingSystemVersion	`6.0`
ImageVersion	`0.0`
SubsystemVersion	`6.0`
Win32VersionValue	`0`
SizeOfImage	`0x274000`
SizeOfHeaders	`0x400`
Checksum	`0x27b417`
Subsystem	`IMAGE_SUBSYSTEM_WINDOWS_GUI`
DllCharacteristics	`IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE` `IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA` `IMAGE_DLLCHARACTERISTICS_NX_COMPAT`
SizeofStackReserve	`0x100000`
SizeofStackCommit	`0x1000`
SizeofHeapReserve	`0x100000`
SizeofHeapCommit	`0x1000`
LoaderFlags	`0`
NumberOfRvaAndSizes	`16`

.text

MD5	`ee9f1f669a0adae10788cf500e9edfec`
SHA1	`097a3b508fbb9b1685b3a3568c8f665c88f4dae1`
SHA256	`c947dc841495dbecc3b1e3ea0e80402e7609344801f6d11f966f055e4992b102`
SHA3	`b846c8ea414846619890e8f71448a14566aed69321727a31a693908d6d30a64d`
VirtualSize	`0x1b1546`
VirtualAddress	`0x1000`
SizeOfRawData	`0x1b1600`
PointerToRawData	`0x400`
PointerToRelocations	`0`
PointerToLineNumbers	`0`
NumberOfLineNumbers	`0`
NumberOfRelocations	`0`
Characteristics	`IMAGE_SCN_CNT_CODE` `IMAGE_SCN_MEM_EXECUTE` `IMAGE_SCN_MEM_READ`
Entropy	`6.46532`

.rdata

MD5	`40050e8833b85518529f43c65b6354ba`
SHA1	`37a82878682ca24f8ed097ace1bcf3e97831d378`
SHA256	`4090c3b2790c80defdf71681169223fa09eed5ac3f26360c198af4b55d0fc0ba`
SHA3	`206bcefca1ff61cbf04e452645a63954ae36760e7a606f518b154fab53140f23`
VirtualSize	`0x92726`
VirtualAddress	`0x1b3000`
SizeOfRawData	`0x92800`
PointerToRawData	`0x1b1a00`
PointerToRelocations	`0`
PointerToLineNumbers	`0`
NumberOfLineNumbers	`0`
NumberOfRelocations	`0`
Characteristics	`IMAGE_SCN_CNT_INITIALIZED_DATA` `IMAGE_SCN_MEM_READ`
Entropy	`5.76708`

.data

MD5	`454b7de8dfbc63071c9a4807f776ae6a`
SHA1	`1bf6cc98291fd3474988da3ab6b3add7a81ef97f`
SHA256	`7146b22b191611369caeedcde37ae4afb9ae46f25f8d53e82031176910a10bb1`
SHA3	`5306ad13e1238cb9e20d76f5c7e5af2664551587e20251bb6b94c2a478379efc`
VirtualSize	`0xd1a0`
VirtualAddress	`0x246000`
SizeOfRawData	`0x8c00`
PointerToRawData	`0x244200`
PointerToRelocations	`0`
PointerToLineNumbers	`0`
NumberOfLineNumbers	`0`
NumberOfRelocations	`0`
Characteristics	`IMAGE_SCN_CNT_INITIALIZED_DATA` `IMAGE_SCN_MEM_READ` `IMAGE_SCN_MEM_WRITE`
Entropy	`3.72565`

.pdata

MD5	`2ae0269abf433e10166c79cdbb681f12`
SHA1	`3e31f8f84ee4f27b927a882258845658e46c99bc`
SHA256	`85b34b2bc545192d47b445f416e450d45d371cff795b0b05427a5025f0658303`
SHA3	`e4928af82204c2e7e8de3204a968148245f7a32db7ff30b43e22bacb0d360c0a`
VirtualSize	`0x182b8`
VirtualAddress	`0x254000`
SizeOfRawData	`0x18400`
PointerToRawData	`0x24ce00`
PointerToRelocations	`0`
PointerToLineNumbers	`0`
NumberOfLineNumbers	`0`
NumberOfRelocations	`0`
Characteristics	`IMAGE_SCN_CNT_INITIALIZED_DATA` `IMAGE_SCN_MEM_READ`
Entropy	`6.28962`

.rsrc

MD5	`0d7876751744628dc1128c5826b65f12`
SHA1	`d60d690366c13ffa493d558f1cd125fb39e424f8`
SHA256	`8d3dc3b913b4a3b87c40f41584edf4d8e68702b201517a62781994a46f7e5324`
SHA3	`d27a3ece726716cb4d1543e4224a5067deebbe0494fca2b488990c7b1e07d81c`
VirtualSize	`0x4d8`
VirtualAddress	`0x26d000`
SizeOfRawData	`0x600`
PointerToRawData	`0x265200`
PointerToRelocations	`0`
PointerToLineNumbers	`0`
NumberOfLineNumbers	`0`
NumberOfRelocations	`0`
Characteristics	`IMAGE_SCN_CNT_INITIALIZED_DATA` `IMAGE_SCN_MEM_READ`
Entropy	`3.61756`

.reloc

MD5	`32d1e51d993571be64111de303eee862`
SHA1	`58cf34538b55faab5edfe48cbc69ec4d17cfa980`
SHA256	`a7a7d418dcbb99a8097437f1070a69971c342e4ffe27ab1f051cb7247cd92d07`
SHA3	`483a962700094935594676880716ab0f2e162fac1a90fd949c0db4a4c81f0ad0`
VirtualSize	`0x5a58`
VirtualAddress	`0x26e000`
SizeOfRawData	`0x5c00`
PointerToRawData	`0x265800`
PointerToRelocations	`0`
PointerToLineNumbers	`0`
NumberOfLineNumbers	`0`
NumberOfRelocations	`0`
Characteristics	`IMAGE_SCN_CNT_INITIALIZED_DATA` `IMAGE_SCN_MEM_DISCARDABLE` `IMAGE_SCN_MEM_READ`
Entropy	`5.44357`

Imports

VERSION.dll	`VerQueryValueW` `GetFileVersionInfoW` `GetFileVersionInfoSizeW`
WS2_32.dll	`getservbyname` `WSAGetLastError` `inet_addr` `sendto` `WSAResetEvent` `recvfrom` `WSAIoctl` `htons` `closesocket` `gethostname` `WSAEventSelect` `WSAEnumNetworkEvents` `WSACreateEvent` `ioctlsocket` `WSACloseEvent` `send` `setsockopt` `WSASetLastError` `getservbyport` `WSAWaitForMultipleEvents` `htonl` `getaddrinfo` `gethostbyname` `freeaddrinfo` `connect` `gethostbyaddr` `bind` `getsockname` `inet_ntoa` `getsockopt` `getpeername` `__WSAFDIsSet` `accept` `socket` `listen` `recv` `select` `WSAStartup` `WSACleanup` `ntohl` `ntohs`
ADVAPI32.dll	`ReportEventW` `RegOpenKeyExW` `CryptEncrypt` `CryptImportKey` `CryptDestroyKey` `CryptDestroyHash` `CryptHashData` `CryptCreateHash` `CryptGetHashParam` `RegisterEventSourceW` `RegCloseKey` `DeregisterEventSource` `AllocateAndInitializeSid` `FreeSid` `GetEffectiveRightsFromAclW` `GetNamedSecurityInfoA` `GetNamedSecurityInfoW` `GetSecurityInfo` `RegQueryValueExW` `CryptGenRandom` `CryptReleaseContext` `CryptAcquireContextA`
USER32.dll	`GetSystemMetrics`
KERNEL32.dll	`GetModuleHandleA` `GetSystemDirectoryA` `FreeLibrary` `InitOnceExecuteOnce` `VirtualFree` `RtlVirtualUnwind` `MoveFileExA` `GetConsoleMode` `SetConsoleMode` `FormatMessageW` `InitializeCriticalSectionEx` `SleepEx` `QueryPerformanceFrequency` `QueryPerformanceCounter` `GetTickCount` `WaitForSingleObjectEx` `GetEnvironmentVariableA` `VerSetConditionMask` `VerifyVersionInfoA` `RtlCaptureContext` `RtlLookupFunctionEntry` `UnhandledExceptionFilter` `SetUnhandledExceptionFilter` `IsProcessorFeaturePresent` `DisableThreadLibraryCalls` `InitializeSListHead` `IsDebuggerPresent` `VirtualAlloc` `GetModuleFileNameW` `CreateToolhelp32Snapshot` `Process32NextW` `Process32FirstW` `CloseHandle` `CreateDirectoryW` `ReadFile` `FindFirstFileW` `FindNextFileW` `CreatePipe` `ExpandEnvironmentStringsA` `PeekNamedPipe` `WaitForSingleObject` `CreateFileW` `GetFileInformationByHandle` `GetLastError` `SetFileInformationByHandle` `CreateProcessA` `GetSystemPowerStatus` `GetLocaleInfoW` `GetVersionExW` `GetSystemDirectoryW` `GetUserDefaultLCID` `GetSystemInfo` `GetProcAddress` `GetModuleHandleW` `GlobalMemoryStatus` `MultiByteToWideChar` `WideCharToMultiByte` `InitializeCriticalSection` `EnterCriticalSection` `LeaveCriticalSection` `DeleteCriticalSection` `SetEvent` `ReleaseMutex` `CreateMutexA` `CreateEventA` `DuplicateHandle` `GetCurrentProcess` `GetCurrentThread` `TlsGetValue` `TlsSetValue` `ReleaseSemaphore` `CreateSemaphoreA` `SetLastError` `Sleep` `GetSystemTimeAsFileTime` `SystemTimeToTzSpecificLocalTime` `FileTimeToSystemTime` `SystemTimeToFileTime` `GetTimeZoneInformation` `FormatMessageA` `FindClose` `FindFirstFileA` `GetFileAttributesExW` `GetFileSizeEx` `GetFileType` `GetFullPathNameW` `LocalFree` `ResetEvent` `SetFilePointer` `WriteFile` `GetOverlappedResult` `CancelIo` `GetStdHandle` `SetStdHandle` `DeleteFileW` `DeviceIoControl` `SetEndOfFile` `LockFile` `LockFileEx` `UnlockFile` `UnlockFileEx` `TlsAlloc` `TlsFree` `CreateFileA` `GetCurrentProcessId` `GetCurrentThreadId` `GetVersionExA` `GetModuleFileNameA` `LoadLibraryA` `WaitForMultipleObjects` `GetExitCodeProcess` `TerminateProcess`
SHELL32.dll	`SHGetFolderPathW`
VCRUNTIME140.dll	`__std_type_info_destroy_list` `__C_specific_handler` `memmove` `strstr` `memchr` `wcschr` `memset` `memcpy` `strrchr` `strchr` `memcmp`
api-ms-win-crt-string-l1-1-0.dll	`isupper` `strcmp` `islower` `wcsncmp` `isalpha` `toupper` `_strdup` `strspn` `strcspn` `strcpy_s` `isspace` `strcat_s` `strncpy` `isxdigit` `strncpy_s` `strtok_s` `strpbrk` `strncmp` `tolower` `isdigit`
api-ms-win-crt-heap-l1-1-0.dll	`malloc` `free` `realloc` `calloc`
api-ms-win-crt-convert-l1-1-0.dll	`_strtoui64` `atoi` `strtoul` `strtoll` `strtod` `strtol` `_strtoi64` `wcstombs`
api-ms-win-crt-utility-l1-1-0.dll	`qsort` `rand` `srand`
api-ms-win-crt-stdio-l1-1-0.dll	`__stdio_common_vfprintf` `_lseeki64` `__acrt_iob_func` `__stdio_common_vsscanf` `fread` `_open` `feof` `fputs` `_read` `_write` `_getcwd` `fwrite` `__stdio_common_vsprintf_s` `fputc` `fopen` `_close` `fclose` `ferror` `__stdio_common_vsprintf` `_wfopen` `fgets` `ftell` `fseek` `fflush`
api-ms-win-crt-runtime-l1-1-0.dll	`_endthread` `_beginthread` `_initialize_onexit_table` `strerror` `signal` `_endthreadex` `__sys_nerr` `_exit` `_errno` `_beginthreadex` `__doserrno` `_cexit` `_getpid` `_crt_atexit` `_execute_onexit_table` `_register_onexit_function` `exit` `_initterm` `_initterm_e` `_seh_filter_dll` `_configure_narrow_argv` `_initialize_narrow_environment`
api-ms-win-crt-math-l1-1-0.dll	`floor` `fmod` `ceil` `_dclass` `log10` `pow` `modf`
api-ms-win-crt-filesystem-l1-1-0.dll	`_stat64i32` `_access` `_stat64` `_fstat64` `_wstat64i32` `_unlink`
api-ms-win-crt-time-l1-1-0.dll	`_time64` `_gmtime64` `strftime`
api-ms-win-crt-environment-l1-1-0.dll	`getenv`
CRYPT32.dll	`CertCloseStore` `CertFindCertificateInStore` `CertFreeCertificateContext` `CryptStringToBinaryA` `PFXImportCertStore` `CryptDecodeObjectEx` `CertAddCertificateContextToStore` `CertFindExtension` `CertGetNameStringA` `CryptQueryObject` `CertCreateCertificateChainEngine` `CertFreeCertificateChainEngine` `CertGetCertificateChain` `CertFreeCertificateChain` `CertOpenStore` `CertEnumCertificatesInStore`
WLDAP32.dll	`#217` `#46` `#211` `#60` `#45` `#50` `#41` `#22` `#26` `#27` `#32` `#33` `#35` `#30` `#200` `#301` `#143` `#79`

Delayed Imports

Java_com_nalpeiron_nalplibrary_NALP_NalpGetErrorMsg

Ordinal	`1`
Address	`0x164ca0`

Java_com_nalpeiron_nalplibrary_NALP_NalpLibClose

Ordinal	`2`
Address	`0x164d30`

Java_com_nalpeiron_nalplibrary_NALP_NalpLibOpen

Ordinal	`3`
Address	`0x164d40`

Java_com_nalpeiron_nalplibrary_NSA_NSAApStart

Ordinal	`4`
Address	`0x165d60`

Java_com_nalpeiron_nalplibrary_NSA_NSAApStop

Ordinal	`5`
Address	`0x165bb0`

Java_com_nalpeiron_nalplibrary_NSA_NSAException

Ordinal	`6`
Address	`0x165440`

Java_com_nalpeiron_nalplibrary_NSA_NSAFeatureStart

Ordinal	`7`
Address	`0x165970`

Java_com_nalpeiron_nalplibrary_NSA_NSAFeatureStop

Ordinal	`8`
Address	`0x165730`

Java_com_nalpeiron_nalplibrary_NSA_NSAGetHostName

Ordinal	`9`
Address	`0x166270`

Java_com_nalpeiron_nalplibrary_NSA_NSAGetPrivacy

Ordinal	`10`
Address	`0x164e50`

Java_com_nalpeiron_nalplibrary_NSA_NSAGetStats

Ordinal	`11`
Address	`0x164db0`

Java_com_nalpeiron_nalplibrary_NSA_NSAGetVersion

Ordinal	`12`
Address	`0x166300`

Java_com_nalpeiron_nalplibrary_NSA_NSALogin

Ordinal	`13`
Address	`0x1660c0`

Java_com_nalpeiron_nalplibrary_NSA_NSALogout

Ordinal	`14`
Address	`0x165f10`

Java_com_nalpeiron_nalplibrary_NSA_NSASendCache

Ordinal	`15`
Address	`0x164e60`

Java_com_nalpeiron_nalplibrary_NSA_NSASetPrivacy

Ordinal	`16`
Address	`0x164e20`

Java_com_nalpeiron_nalplibrary_NSA_NSASysInfo

Ordinal	`17`
Address	`0x164f90`

Java_com_nalpeiron_nalplibrary_NSL_NSLCheckCredentials

Ordinal	`18`
Address	`0x168970`

Java_com_nalpeiron_nalplibrary_NSL_NSLCheckoutFeature

Ordinal	`19`
Address	`0x167e40`

Java_com_nalpeiron_nalplibrary_NSL_NSLCheckoutPool

Ordinal	`20`
Address	`0x167970`

Java_com_nalpeiron_nalplibrary_NSL_NSLCheckoutTokens

Ordinal	`21`
Address	`0x1675d0`

Java_com_nalpeiron_nalplibrary_NSL_NSLClearCredentials

Ordinal	`22`
Address	`0x168850`

Java_com_nalpeiron_nalplibrary_NSL_NSLConsumeTokens

Ordinal	`23`
Address	`0x1674b0`

Java_com_nalpeiron_nalplibrary_NSL_NSLGetActivationCertReq

Ordinal	`24`
Address	`0x166e60`

Java_com_nalpeiron_nalplibrary_NSL_NSLGetComputerID

Ordinal	`25`
Address	`0x1692b0`

Java_com_nalpeiron_nalplibrary_NSL_NSLGetCredentials

Ordinal	`26`
Address	`0x168880`

Java_com_nalpeiron_nalplibrary_NSL_NSLGetDeactivationCertReq

Ordinal	`27`
Address	`0x166ba0`

Java_com_nalpeiron_nalplibrary_NSL_NSLGetFeatureStatus

Ordinal	`28`
Address	`0x167f80`

Java_com_nalpeiron_nalplibrary_NSL_NSLGetHostName

Ordinal	`29`
Address	`0x1687c0`

Java_com_nalpeiron_nalplibrary_NSL_NSLGetLeaseExpDate

Ordinal	`30`
Address	`0x168730`

Java_com_nalpeiron_nalplibrary_NSL_NSLGetLeaseExpSec

Ordinal	`31`
Address	`0x1686a0`

Java_com_nalpeiron_nalplibrary_NSL_NSLGetLibraryOptions

Ordinal	`32`
Address	`0x1681f0`

Java_com_nalpeiron_nalplibrary_NSL_NSLGetLicense

Ordinal	`33`
Address	`0x1672f0`

Java_com_nalpeiron_nalplibrary_NSL_NSLGetLicenseCode

Ordinal	`34`
Address	`0x1680b0`

Java_com_nalpeiron_nalplibrary_NSL_NSLGetLicenseInfo

Ordinal	`35`
Address	`0x168250`

Java_com_nalpeiron_nalplibrary_NSL_NSLGetLicenseStatus

Ordinal	`36`
Address	`0x1682e0`

Java_com_nalpeiron_nalplibrary_NSL_NSLGetMaintExpDate

Ordinal	`37`
Address	`0x1684f0`

Java_com_nalpeiron_nalplibrary_NSL_NSLGetMaintExpSec

Ordinal	`38`
Address	`0x168460`

Java_com_nalpeiron_nalplibrary_NSL_NSLGetNumbAvailProc

Ordinal	`39`
Address	`0x166720`

Java_com_nalpeiron_nalplibrary_NSL_NSLGetPoolInfo

Ordinal	`40`
Address	`0x167ac0`

Java_com_nalpeiron_nalplibrary_NSL_NSLGetPoolStatus

Ordinal	`41`
Address	`0x167bf0`

Java_com_nalpeiron_nalplibrary_NSL_NSLGetSubExpDate

Ordinal	`42`
Address	`0x168610`

Java_com_nalpeiron_nalplibrary_NSL_NSLGetSubExpSec

Ordinal	`43`
Address	`0x168580`

Java_com_nalpeiron_nalplibrary_NSL_NSLGetTimeStamp

Ordinal	`44`
Address	`0x168050`

Java_com_nalpeiron_nalplibrary_NSL_NSLGetTokenInfo

Ordinal	`45`
Address	`0x167720`

Java_com_nalpeiron_nalplibrary_NSL_NSLGetTrialExpDate

Ordinal	`46`
Address	`0x1683d0`

Java_com_nalpeiron_nalplibrary_NSL_NSLGetTrialExpSec

Ordinal	`47`
Address	`0x168340`

Java_com_nalpeiron_nalplibrary_NSL_NSLGetUDFValue

Ordinal	`48`
Address	`0x166ac0`

Java_com_nalpeiron_nalplibrary_NSL_NSLGetVMInfo

Ordinal	`49`
Address	`0x168140`

Java_com_nalpeiron_nalplibrary_NSL_NSLGetVersion

Ordinal	`50`
Address	`0x169340`

Java_com_nalpeiron_nalplibrary_NSL_NSLImportCertificate

Ordinal	`51`
Address	`0x166f00`

Java_com_nalpeiron_nalplibrary_NSL_NSLObtainLicense

Ordinal	`52`
Address	`0x167120`

Java_com_nalpeiron_nalplibrary_NSL_NSLReadSecStore

Ordinal	`53`
Address	`0x166960`

Java_com_nalpeiron_nalplibrary_NSL_NSLRemoteCallV

Ordinal	`54`
Address	`0x166390`

Java_com_nalpeiron_nalplibrary_NSL_NSLRequestActivationCert

Ordinal	`55`
Address	`0x166c80`

Java_com_nalpeiron_nalplibrary_NSL_NSLReturnFeature

Ordinal	`56`
Address	`0x167d20`

Java_com_nalpeiron_nalplibrary_NSL_NSLReturnLicense

Ordinal	`57`
Address	`0x167050`

Java_com_nalpeiron_nalplibrary_NSL_NSLReturnPool

Ordinal	`58`
Address	`0x167850`

Java_com_nalpeiron_nalplibrary_NSL_NSLReturnTokens

Ordinal	`59`
Address	`0x167390`

Java_com_nalpeiron_nalplibrary_NSL_NSLSetCredentials

Ordinal	`60`
Address	`0x168ae0`

Java_com_nalpeiron_nalplibrary_NSL_NSLSetCredentialsSSO

Ordinal	`61`
Address	`0x1689a0`

Java_com_nalpeiron_nalplibrary_NSL_NSLTestConnection

Ordinal	`62`
Address	`0x169280`

Java_com_nalpeiron_nalplibrary_NSL_NSLTestConnection2

Ordinal	`63`
Address	`0x169240`

Java_com_nalpeiron_nalplibrary_NSL_NSLValidateLibrary

Ordinal	`64`
Address	`0x1693d0`

Java_com_nalpeiron_nalplibrary_NSL_NSLWriteSecStore

Ordinal	`65`
Address	`0x1667b0`

NSAAppStart

Ordinal	`66`
Address	`0x188bf0`

NSAAppStop

Ordinal	`67`
Address	`0x1887d0`

NSAException

Ordinal	`68`
Address	`0x1892c0`

NSAFeatureStart

Ordinal	`69`
Address	`0x188910`

NSAFeatureStop

Ordinal	`70`
Address	`0x1897e0`

NSAFree

Ordinal	`71`
Address	`0x18a270`

NSAGetComputerID

Ordinal	`72`
Address	`0x187d50`

NSAGetHostName

Ordinal	`73`
Address	`0x1885b0`

NSAGetPrivacy

Ordinal	`74`
Address	`0x1881f0`

NSAGetStats

Ordinal	`75`
Address	`0x189d50`

NSAGetVersion

Ordinal	`76`
Address	`0x1886f0`

NSALogin

Ordinal	`77`
Address	`0x187f60`

NSALogout

Ordinal	`78`
Address	`0x189ac0`

NSASendCache

Ordinal	`79`
Address	`0x188350`

NSASetPrivacy

Ordinal	`80`
Address	`0x189650`

NSASysInfo

Ordinal	`81`
Address	`0x188d30`

NSATestConnection

Ordinal	`82`
Address	`0x187ca0`

NSATestConnection2

Ordinal	`83`
Address	`0x187a40`

NSAValidateLibrary

Ordinal	`84`
Address	`0x187e70`

NSLCheckCredentials

Ordinal	`85`
Address	`0x1a2480`

NSLCheckoutFeature

Ordinal	`86`
Address	`0x19bbb0`

NSLCheckoutPool

Ordinal	`87`
Address	`0x19fff0`

NSLCheckoutTokens

Ordinal	`88`
Address	`0x19f610`

NSLClearCredentials

Ordinal	`89`
Address	`0x1a04b0`

NSLConsumeTokens

Ordinal	`90`
Address	`0x19cfc0`

NSLFree

Ordinal	`91`
Address	`0x1a1730`

NSLGetActivationCertReq

Ordinal	`92`
Address	`0x1983b0`

NSLGetComputerID

Ordinal	`93`
Address	`0x1a0720`

NSLGetCredentials

Ordinal	`94`
Address	`0x19d370`

NSLGetDeactivationCertReq

Ordinal	`95`
Address	`0x19e150`

NSLGetFeatureStatus

Ordinal	`96`
Address	`0x1a2080`

NSLGetHostName

Ordinal	`97`
Address	`0x1991d0`

NSLGetLeaseExpDate

Ordinal	`98`
Address	`0x19f390`

NSLGetLeaseExpSec

Ordinal	`99`
Address	`0x19db10`

NSLGetLibraryOptions

Ordinal	`100`
Address	`0x1a1590`

NSLGetLicense

Ordinal	`101`
Address	`0x198270`

NSLGetLicenseCode

Ordinal	`102`
Address	`0x1a1340`

NSLGetLicenseInfo

Ordinal	`103`
Address	`0x19a0d0`

NSLGetLicenseStatus

Ordinal	`104`
Address	`0x19fad0`

NSLGetMaintExpDate

Ordinal	`105`
Address	`0x1a1e00`

NSLGetMaintExpSec

Ordinal	`106`
Address	`0x19de30`

NSLGetNewLicenseCode

Ordinal	`107`
Address	`0x1976c0`

NSLGetNumbAvailProc

Ordinal	`108`
Address	`0x1a1a50`

NSLGetPoolInfo

Ordinal	`109`
Address	`0x1a0930`

NSLGetPoolStatus

Ordinal	`110`
Address	`0x19a6e0`

NSLGetRefreshExpDate

Ordinal	`111`
Address	`0x198460`

NSLGetRefreshExpSec

Ordinal	`112`
Address	`0x1986e0`

NSLGetSubExpDate

Ordinal	`113`
Address	`0x19cd40`

NSLGetSubExpSec

Ordinal	`114`
Address	`0x19f070`

NSLGetTimeStamp

Ordinal	`115`
Address	`0x19ab20`

NSLGetTokenInfo

Ordinal	`116`
Address	`0x19c030`

NSLGetTrialExpDate

Ordinal	`117`
Address	`0x1a17d0`

NSLGetTrialExpSec

Ordinal	`118`
Address	`0x19ed50`

NSLGetUDFValue

Ordinal	`119`
Address	`0x19c930`

NSLGetVMInfo

Ordinal	`120`
Address	`0x1a25b0`

NSLGetVersion

Ordinal	`121`
Address	`0x1a0d80`

NSLImportCertificate

Ordinal	`122`
Address	`0x199a50`

NSLObtainLicense

Ordinal	`123`
Address	`0x19b220`

NSLReadSecStore

Ordinal	`124`
Address	`0x19fd60`

NSLRemoteCall

Ordinal	`125`
Address	`0x197b50`

NSLRemoteCallV

Ordinal	`126`
Address	`0x199340`

NSLRequestActivationCert

Ordinal	`127`
Address	`0x198ae0`

NSLReturnFeature

Ordinal	`128`
Address	`0x19e8b0`

NSLReturnLicense

Ordinal	`129`
Address	`0x19ac60`

NSLReturnPool

Ordinal	`130`
Address	`0x1a0e90`

NSLReturnTokens

Ordinal	`131`
Address	`0x19c480`

NSLSetCredentials

Ordinal	`132`
Address	`0x19d880`

NSLSetCredentialsSSO

Ordinal	`133`
Address	`0x1997a0`

NSLTestConnection

Ordinal	`134`
Address	`0x198320`

NSLTestConnection2

Ordinal	`135`
Address	`0x19a400`

NSLValidateLibrary

Ordinal	`136`
Address	`0x19e7d0`

NSLWriteSecStore

Ordinal	`137`
Address	`0x19d5b0`

NalpGetErrorMsg

Ordinal	`138`
Address	`0x1aa590`

NalpGetFilepath

Ordinal	`139`
Address	`0x1a9e40`

NalpLibClose

Ordinal	`140`
Address	`0x1aa220`

NalpLibOpen

Ordinal	`141`
Address	`0x1aa610`

ReturnVersion

Ordinal	`142`
Address	`0x1a9f90`

ValidateLibrary

Ordinal	`143`
Address	`0x1aa0a0`

cJSONUtils_AddPatchToArray

Ordinal	`144`
Address	`0x17aa20`

cJSONUtils_ApplyPatches

Ordinal	`145`
Address	`0x17ad60`

cJSONUtils_ApplyPatchesCaseSensitive

Ordinal	`146`
Address	`0x17ad00`

cJSONUtils_FindPointerFromObjectTo

Ordinal	`147`
Address	`0x17c3d0`

cJSONUtils_GenerateMergePatch

Ordinal	`148`
Address	`0x179e40`

cJSONUtils_GenerateMergePatchCaseSensitive

Ordinal	`149`
Address	`0x179e20`

cJSONUtils_GeneratePatches

Ordinal	`150`
Address	`0x17a5d0`

cJSONUtils_GeneratePatchesCaseSensitive

Ordinal	`151`
Address	`0x17a530`

cJSONUtils_GetPointer

Ordinal	`152`
Address	`0x17c130`

cJSONUtils_GetPointerCaseSensitive

Ordinal	`153`
Address	`0x17c110`

cJSONUtils_MergePatch

Ordinal	`154`
Address	`0x17a180`

cJSONUtils_MergePatchCaseSensitive

Ordinal	`155`
Address	`0x17a160`

cJSONUtils_SortObject

Ordinal	`156`
Address	`0x17a500`

cJSONUtils_SortObjectCaseSensitive

Ordinal	`157`
Address	`0x17a4d0`

cJSON_AddArrayToObject

Ordinal	`158`
Address	`0x176b90`

cJSON_AddBoolToObject

Ordinal	`159`
Address	`0x176f60`

cJSON_AddFalseToObject

Ordinal	`160`
Address	`0x177040`

cJSON_AddItemReferenceToArray

Ordinal	`161`
Address	`0x1773b0`

cJSON_AddItemReferenceToObject

Ordinal	`162`
Address	`0x1772e0`

cJSON_AddItemToArray

Ordinal	`163`
Address	`0x177630`

cJSON_AddItemToObject

Ordinal	`164`
Address	`0x1774c0`

cJSON_AddItemToObjectCS

Ordinal	`165`
Address	`0x177430`

cJSON_AddNullToObject

Ordinal	`166`
Address	`0x177200`

cJSON_AddNumberToObject

Ordinal	`167`
Address	`0x176eb0`

cJSON_AddObjectToObject

Ordinal	`168`
Address	`0x176c70`

cJSON_AddRawToObject

Ordinal	`169`
Address	`0x176d50`

cJSON_AddStringToObject

Ordinal	`170`
Address	`0x176e00`

cJSON_AddTrueToObject

Ordinal	`171`
Address	`0x177120`

cJSON_Compare

Ordinal	`172`
Address	`0x175460`

cJSON_CreateArray

Ordinal	`173`
Address	`0x1760d0`

cJSON_CreateArrayReference

Ordinal	`174`
Address	`0x1761b0`

cJSON_CreateBool

Ordinal	`175`
Address	`0x1763e0`

cJSON_CreateDoubleArray

Ordinal	`176`
Address	`0x175d80`

cJSON_CreateFalse

Ordinal	`177`
Address	`0x176430`

cJSON_CreateFloatArray

Ordinal	`178`
Address	`0x175e80`

cJSON_CreateIntArray

Ordinal	`179`
Address	`0x175f80`

cJSON_CreateNull

Ordinal	`180`
Address	`0x1764d0`

cJSON_CreateNumber

Ordinal	`181`
Address	`0x176330`

cJSON_CreateObject

Ordinal	`182`
Address	`0x176080`

cJSON_CreateObjectReference

Ordinal	`183`
Address	`0x176200`

cJSON_CreateRaw

Ordinal	`184`
Address	`0x176120`

cJSON_CreateString

Ordinal	`185`
Address	`0x1762a0`

cJSON_CreateStringArray

Ordinal	`186`
Address	`0x175c80`

cJSON_CreateStringReference

Ordinal	`187`
Address	`0x176250`

cJSON_CreateTrue

Ordinal	`188`
Address	`0x176480`

cJSON_Delete

Ordinal	`189`
Address	`0x179d00`

cJSON_DeleteItemFromArray

Ordinal	`190`
Address	`0x176a80`

cJSON_DeleteItemFromObject

Ordinal	`191`
Address	`0x176870`

cJSON_DeleteItemFromObjectCaseSensitive

Ordinal	`192`
Address	`0x176780`

cJSON_DetachItemFromArray

Ordinal	`193`
Address	`0x176ae0`

cJSON_DetachItemFromObject

Ordinal	`194`
Address	`0x1769f0`

cJSON_DetachItemFromObjectCaseSensitive

Ordinal	`195`
Address	`0x176920`

cJSON_DetachItemViaPointer

Ordinal	`196`
Address	`0x176b20`

cJSON_Duplicate

Ordinal	`197`
Address	`0x175b40`

cJSON_GetArrayItem

Ordinal	`198`
Address	`0x179d80`

cJSON_GetArraySize

Ordinal	`199`
Address	`0x179dc0`

cJSON_GetErrorPtr

Ordinal	`200`
Address	`0x179cd0`

cJSON_GetNumberValue

Ordinal	`201`
Address	`0x179c90`

cJSON_GetObjectItem

Ordinal	`202`
Address	`0x179cf0`

cJSON_GetObjectItemCaseSensitive

Ordinal	`203`
Address	`0x177790`

cJSON_GetStringValue

Ordinal	`204`
Address	`0x179cb0`

cJSON_HasObjectItem

Ordinal	`205`
Address	`0x177760`

cJSON_InitHooks

Ordinal	`206`
Address	`0x179a20`

cJSON_InsertItemInArray

Ordinal	`207`
Address	`0x1766c0`

cJSON_IsArray

Ordinal	`208`
Address	`0x1757f0`

cJSON_IsBool

Ordinal	`209`
Address	`0x175870`

cJSON_IsFalse

Ordinal	`210`
Address	`0x1758b0`

cJSON_IsInvalid

Ordinal	`211`
Address	`0x1758d0`

cJSON_IsNull

Ordinal	`212`
Address	`0x175850`

cJSON_IsNumber

Ordinal	`213`
Address	`0x175830`

cJSON_IsObject

Ordinal	`214`
Address	`0x1757d0`

cJSON_IsRaw

Ordinal	`215`
Address	`0x1757b0`

cJSON_IsString

Ordinal	`216`
Address	`0x175810`

cJSON_IsTrue

Ordinal	`217`
Address	`0x175890`

cJSON_Minify

Ordinal	`218`
Address	`0x1758f0`

cJSON_Parse

Ordinal	`219`
Address	`0x178990`

cJSON_ParseWithLength

Ordinal	`220`
Address	`0x178970`

cJSON_ParseWithLengthOpts

Ordinal	`221`
Address	`0x1789c0`

cJSON_ParseWithOpts

Ordinal	`222`
Address	`0x179df0`

cJSON_Print

Ordinal	`223`
Address	`0x178820`

cJSON_PrintBuffered

Ordinal	`224`
Address	`0x178730`

cJSON_PrintPreallocated

Ordinal	`225`
Address	`0x1786a0`

cJSON_PrintUnformatted

Ordinal	`226`
Address	`0x178810`

cJSON_ReplaceItemInArray

Ordinal	`227`
Address	`0x1765f0`

cJSON_ReplaceItemInObject

Ordinal	`228`
Address	`0x176540`

cJSON_ReplaceItemInObjectCaseSensitive

Ordinal	`229`
Address	`0x176520`

cJSON_ReplaceItemViaPointer

Ordinal	`230`
Address	`0x176630`

cJSON_SetNumberHelper

Ordinal	`231`
Address	`0x1797e0`

cJSON_SetValuestring

Ordinal	`232`
Address	`0x179720`

cJSON_Version

Ordinal	`233`
Address	`0x179c50`

cJSON_free

Ordinal	`234`
Address	`0x175440`

cJSON_malloc

Ordinal	`235`
Address	`0x175450`

1

Type	`RT_VERSION`
Language	English - United States
Codepage	UNKNOWN
Size	`0x2b4`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`3.38125`
MD5	`d150ccede7f8d10a869fb2ac8f7cc1d7`
SHA1	`d8d2147000220a895b37cd3a2662924fbccdf546`
SHA256	`a818b4264b6b39e864d19195ce90a49a0e00aa824898e2b4cfffb2fd517553f8`
SHA3	`89d9209d1fce044fd21867ddacefcab0a656774b04cffd06102d8eb4bf6c1d06`

2

Type	`RT_MANIFEST`
Language	English - United States
Codepage	UNKNOWN
Size	`0x17d`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`4.91161`
MD5	`1e4a89b11eae0fcf8bb5fdd5ec3b6f61`
SHA1	`4260284ce14278c397aaf6f389c1609b0ab0ce51`
SHA256	`4bb79dcea0a901f7d9eac5aa05728ae92acb42e0cb22e5dd14134f4421a3d8df`
SHA3	`4bb9e8b5a714cae82782f3831cc2d45f4bf4a50a755fe584d2d1893129d68353`

Version Info

Signature	`0xfeef04bd`
StructVersion	`0x10000`
FileVersion	3.7.52.15
ProductVersion	0.0.0.0
FileFlags	`(EMPTY)`
FileOs	`VOS_DOS_WINDOWS32` `VOS_NT` `VOS_NT_WINDOWS32` `VOS_WINCE` `VOS__WINDOWS32`
FileType	`VFT_DLL`
Language	English - United States
CompanyName	Nalpeiron
FileDescription	Nalpeiron Licensing and Analytics Library
InternalName	libShafer.dll
LegalCopyright	Copyright (C) 2018
OriginalFilename	libShafer.dll
ProductName	Shafer
ProductVersion (#2)	3.7

Resource LangID	English - United States

IMAGE_DEBUG_TYPE_CODEVIEW

Characteristics	`0`
TimeDateStamp	2021-Aug-19 07:38:44
Version	`0.0`
SizeofData	`135`
AddressOfRawData	`0x223a00`
PointerToRawData	`0x222400`
Referenced File	c:\cygwin64\home\buildsys\work\Nalpeiron\Shafer\branches\Release_3.7.52\jni\WINDOWS\x64\Release\javaShafer.pdb

IMAGE_DEBUG_TYPE_VC_FEATURE

Characteristics	`0`
TimeDateStamp	2021-Aug-19 07:38:44
Version	`0.0`
SizeofData	`20`
AddressOfRawData	`0x223a88`
PointerToRawData	`0x222488`

IMAGE_DEBUG_TYPE_POGO

Characteristics	`0`
TimeDateStamp	2021-Aug-19 07:38:44
Version	`0.0`
SizeofData	`612`
AddressOfRawData	`0x223a9c`
PointerToRawData	`0x22249c`

IMAGE_DEBUG_TYPE_ILTCG

Characteristics	`0`
TimeDateStamp	2021-Aug-19 07:38:44
Version	`0.0`
SizeofData	`0`
AddressOfRawData	`0`
PointerToRawData	`0`

TLS Callbacks

Load Configuration

Size	`0x100`
TimeDateStamp	`1970-Jan-01 00:00:00`
Version	`0.0`
GlobalFlagsClear	`(EMPTY)`
GlobalFlagsSet	`(EMPTY)`
CriticalSectionDefaultTimeout	`0`
DeCommitFreeBlockThreshold	`0`
DeCommitTotalFreeThreshold	`0`
LockPrefixTable	`0`
MaximumAllocationSize	`0`
VirtualMemoryThreshold	`0`
ProcessAffinityMask	`0`
ProcessHeapFlags	`(EMPTY)`
CSDVersion	`0`
Reserved1	`0`
EditList	`0`
SecurityCookie	`0x18024d3c0`

RICH Header

XOR Key	`0xccc2afeb`
Unmarked objects	`0`
Imports (VS2008 SP1 build 30729)	`20`
Imports (VS2015/2017 runtime 25810)	`2`
199 (41118)	`11`
ASM objects (VS2015/2017 runtime 25810)	`4`
C++ objects (VS2015/2017 runtime 25810)	`11`
C objects (VS2015/2017 runtime 25810)	`10`
Imports (VS2017 v15.?.? build 25203)	`21`
Total imports	`378`
ASM objects (VS2017 v15.5.2 compiler 25831)	`14`
C objects (VS2017 v15.5.2 compiler 25831)	`626`
C objects (LTCG) (VS2017 v15.5.2 compiler 25831)	`87`
Exports (VS2017 v15.5.2 compiler 25831)	`1`
Resource objects (VS2017 v15.5.2 compiler 25831)	`1`
151	`1`
Linker (VS2017 v15.5.2 compiler 25831)	`1`

Errors

Leave a comment

No comments yet.