popup
Static | ZeroBOX
  1. Home
  2. Result
  3. Report
  4. Detail Analysis

Static Analysis

PE Compile Time

2018-11-14 08:35:32

PDB Path

z:\task_1542148442\build\src\obj-thunderbird\mozglue\build\mozglue.pdb

PE Imphash

cd277fcaef27e2c4552601c33d459467

Sections

Name Virtual Address Virtual Size Size of Raw Data Entropy
.text 0x00001000 0x000178ca 0x00017a00 6.62395403651
.rdata 0x00019000 0x0000655e 0x00006600 5.6635860122
.data 0x00020000 0x00000bbc 0x00000200 0.78748120823
.didat 0x00021000 0x00000038 0x00000200 0.668961069961
.rsrc 0x00022000 0x00000378 0x00000400 2.8890829787
.reloc 0x00023000 0x00000c68 0x00000e00 6.25274267702

Resources

Name Offset Size Language Sub-language File type
RT_VERSION 0x00022060 0x00000314 LANG_ENGLISH SUBLANG_ENGLISH_US data

Imports

Library KERNEL32.dll:
• 0x10019010 IsDebuggerPresent
• 0x10019014 OutputDebugStringA
• 0x10019018 EncodePointer
• 0x1001901c DecodePointer
• 0x10019020 CloseHandle
• 0x10019028 ReleaseSRWLockShared
• 0x10019030 AcquireSRWLockShared
• 0x10019038 EnterCriticalSection
• 0x1001903c LeaveCriticalSection
• 0x10019040 GetCurrentProcess
• 0x10019044 GetCurrentThreadId
• 0x10019048 FlushInstructionCache
• 0x1001904c GetSystemInfo
• 0x10019050 VirtualQuery
• 0x10019054 VirtualAllocEx
• 0x10019058 VirtualProtectEx
• 0x1001905c CreateFileMappingW
• 0x10019060 MapViewOfFile
• 0x10019064 UnmapViewOfFile
• 0x10019068 GetModuleHandleA
• 0x1001906c GetModuleHandleW
• 0x10019070 GetProcAddress
• 0x10019074 LoadLibraryExA
• 0x10019078 LoadLibraryW
• 0x1001907c VerifyVersionInfoA
• 0x10019084 WriteFile
• 0x10019088 TerminateProcess
• 0x1001908c VirtualAlloc
• 0x10019090 VirtualFree
• 0x10019094 GetLastError
• 0x1001909c WakeConditionVariable
• 0x100190a8 InitializeSRWLock
• 0x100190ac WideCharToMultiByte
• 0x100190b0 DuplicateHandle
• 0x100190b4 SetEvent
• 0x100190b8 WaitForSingleObject
• 0x100190bc CreateEventA
• 0x100190c0 SignalObjectAndWait
• 0x100190c4 GetCurrentThread
• 0x100190c8 SuspendThread
• 0x100190cc ResumeThread
• 0x100190d0 GetThreadContext
• 0x100190d4 LocalFree
• 0x100190d8 FormatMessageA
• 0x100190e4 DeleteCriticalSection
• 0x100190e8 GetProcessTimes
• 0x100190ec GetSystemTime
• 0x100190f0 GetTickCount64
• 0x100190f8 SystemTimeToFileTime
• 0x10019100 CreateFileW
• 0x10019104 SearchPathW
• 0x1001910c VerSetConditionMask
• 0x10019114 GetCurrentProcessId
• 0x10019118 CreateEventW
• 0x1001911c WaitForSingleObjectEx
• 0x10019120 ResetEvent
• 0x10019130 FreeLibrary
• 0x10019134 VirtualProtect
• 0x10019138 RaiseException
• 0x1001913c InitializeSListHead
Library ADVAPI32.dll:
• 0x10019000 RegOpenKeyExW
• 0x10019004 RegCloseKey
• 0x10019008 RegQueryValueExW
Library dbghelp.dll:
• 0x100192c8 SymFromAddr
• 0x100192cc SymInitialize
• 0x100192d0 SymGetLineFromAddr64
• 0x100192d4 SymGetModuleBase64
• 0x100192d8 SymLoadModule64
• 0x100192e4 SymSetOptions
• 0x100192e8 StackWalk64
• 0x100192ec SymGetModuleInfo64
Library VERSION.dll:
• 0x100191fc GetFileVersionInfoW
• 0x10019204 VerQueryValueW
Library MSVCP140.dll:
• 0x100191a0 ?_BADOFF@std@@3_JB
• 0x100191a4 ??_7ios_base@std@@6B@
• 0x100191b0 ??1_Lockit@std@@QAE@XZ
Library VCRUNTIME140.dll:
• 0x100191cc memcpy
• 0x100191d0 _purecall
• 0x100191d4 memset
• 0x100191d8 longjmp
• 0x100191dc _setjmp3
• 0x100191e0 strchr
• 0x100191e8 memmove
• 0x100191ec __CxxFrameHandler3
Library api-ms-win-crt-runtime-l1-1-0.dll:
• 0x10019248 _beginthreadex
• 0x1001924c _errno
• 0x10019250 _cexit
• 0x10019254 _initterm_e
• 0x10019258 _initterm
• 0x10019260 abort
• 0x10019264 _seh_filter_dll
• 0x10019268 _configure_narrow_argv
• 0x10019278 _execute_onexit_table
• 0x1001927c _crt_atexit
Library api-ms-win-crt-string-l1-1-0.dll:
• 0x100192a8 strncpy
• 0x100192ac _stricmp
• 0x100192b0 isxdigit
• 0x100192b4 _strnicmp
• 0x100192b8 _wcsnicmp
• 0x100192bc wcsncpy
• 0x100192c0 wcstok_s
Library api-ms-win-crt-stdio-l1-1-0.dll:
• 0x10019284 fputs
• 0x10019288 __acrt_iob_func
• 0x1001928c _write
• 0x10019298 fflush
• 0x1001929c fclose
• 0x100192a0 _dup
Library api-ms-win-crt-filesystem-l1-1-0.dll:
• 0x10019220 _wsplitpath_s
Library api-ms-win-crt-convert-l1-1-0.dll:
• 0x1001920c _strtoui64
• 0x10019210 _ltoa
Library api-ms-win-crt-math-l1-1-0.dll:
• 0x10019234 _except1
• 0x10019238 _dtest
• 0x1001923c _fdopen
• 0x10019240 ceil
Library api-ms-win-crt-heap-l1-1-0.dll:
• 0x10019228 malloc
• 0x1001922c free
Library api-ms-win-crt-environment-l1-1-0.dll:
• 0x10019218 getenv

Exports

Ordinal Address Name
1 0x100093f0 ??0ConditionVariableImpl@detail@mozilla@@QAE@XZ
2 0x1000d820 ??0Decimal@blink@@QAE@ABV01@@Z
3 0x1000d820 ??0Decimal@blink@@QAE@ABVEncodedData@01@@Z
4 0x1000d840 ??0Decimal@blink@@QAE@H@Z
5 0x1000d870 ??0Decimal@blink@@QAE@W4Sign@01@H_K@Z
6 0x10009540 ??0MutexImpl@detail@mozilla@@QAE@XZ
7 0x100095f0 ??0PrintfTarget@mozilla@@IAE@XZ
8 0x10010ae0 ??0SHA1Sum@mozilla@@QAE@XZ
9 0x1000b4d0 ??0TimeStampValue@mozilla@@AAE@_K0_N@Z
10 0x10009400 ??1ConditionVariableImpl@detail@mozilla@@QAE@XZ
11 0x10009400 ??1MutexImpl@detail@mozilla@@QAE@XZ
12 0x1000d820 ??4Decimal@blink@@QAEAAV01@ABV01@@Z
13 0x1000d990 ??8Decimal@blink@@QBE_NABV01@@Z
14 0x1000da10 ??9Decimal@blink@@QBE_NABV01@@Z
15 0x1000da60 ??DDecimal@blink@@QBE?AV01@ABV01@@Z
16 0x1000db60 ??GDecimal@blink@@QBE?AV01@ABV01@@Z
17 0x1000dc90 ??GDecimal@blink@@QBE?AV01@XZ
18 0x1000b500 ??GTimeStampValue@mozilla@@QBE_KABV01@@Z
19 0x1000dcd0 ??HDecimal@blink@@QBE?AV01@ABV01@@Z
20 0x1000ddf0 ??KDecimal@blink@@QBE?AV01@ABV01@@Z
21 0x1000dfe0 ??MDecimal@blink@@QBE_NABV01@@Z
22 0x1000e010 ??NDecimal@blink@@QBE_NABV01@@Z
23 0x1000e070 ??ODecimal@blink@@QBE_NABV01@@Z
24 0x1000e0a0 ??PDecimal@blink@@QBE_NABV01@@Z
25 0x1000e100 ??XDecimal@blink@@QAEAAV01@ABV01@@Z
26 0x1000e130 ??YDecimal@blink@@QAEAAV01@ABV01@@Z
27 0x1000b530 ??YTimeStampValue@mozilla@@QAEAAV01@_J@Z
28 0x1000e160 ??ZDecimal@blink@@QAEAAV01@ABV01@@Z
29 0x1000b550 ??ZTimeStampValue@mozilla@@QAEAAV01@_J@Z
30 0x1000e190 ??_0Decimal@blink@@QAEAAV01@ABV01@@Z
31 0x1000e2a0 ??_FDecimal@blink@@QAEXXZ
32 0x1000b570 ?CheckQPC@TimeStampValue@mozilla@@ABE_KABV12@@Z
33 0x1000b730 ?ComputeProcessUptime@TimeStamp@mozilla@@CA_KXZ
34 0x100116c0 ?CreateDecimalRepresentation@DoubleToStringConverter@double_conversion@@ABEXPBDHHHPAVStringBuilder@2@@Z
35 0x100117d0 ?CreateExponentialRepresentation@DoubleToStringConverter@double_conversion@@ABEXPBDHHPAVStringBuilder@2@@Z
36 0x10002050 ?DllBlocklist_CheckStatus@@YA_NXZ
37 0x10002070 ?DllBlocklist_Initialize@@YAXI@Z
38 0x10002170 ?DllBlocklist_SetDllServices@@YAXPAVDllServicesBase@detail@glue@mozilla@@@Z
39 0x10002200 ?DllBlocklist_WriteNotes@@YAXPAX@Z
40 0x10011f10 ?DoubleToAscii@DoubleToStringConverter@double_conversion@@SAXNW4DtoaMode@12@HPADHPA_NPAH3@Z
41 0x10012070 ?EcmaScriptConverter@DoubleToStringConverter@double_conversion@@SAABV12@XZ
42 0x1000a760 ?FramePointerStackWalk@mozilla@@YAXP6AXIPAX00@ZII0PAPAX0@Z
43 0x10012b20 ?HandleSpecialValues@DoubleToStringConverter@double_conversion@@ABE_NNPAVStringBuilder@2@@Z
44 0x10012ba0 ?HashBytes@mozilla@@YAIPBXI@Z
45 0x10012e30 ?IsFloat32Representable@mozilla@@YA_NN@Z
46 0x1000a7d0 ?MozDescribeCodeAddress@@YA_NPAXPAUMozCodeAddressDetails@@@Z
47 0x1000a9a0 ?MozFormatCodeAddress@@YAXPADIIPBXPBD2H2I@Z
48 0x1000aa10 ?MozFormatCodeAddressDetails@@YAXPADIIPAXPBUMozCodeAddressDetails@@@Z
49 0x1000aa50 ?MozStackWalk@@YAXP6AXIPAX00@ZII0@Z
50 0x1000aa70 ?MozStackWalkThread@@YAXP6AXIPAX00@ZII00PAU_CONTEXT@@@Z
51 0x1000ba10 ?Now@TimeStamp@mozilla@@CA?AV12@_N@Z
52 0x1000b3a0 ?ProcessCreation@TimeStamp@mozilla@@SA?AV12@PA_N@Z
53 0x1000b4a0 ?RecordProcessRestart@TimeStamp@mozilla@@SAXXZ
54 0x100093d0 ?RegisterProfilerLabelEnterExit@mozilla@@YAXP6APAVPseudoStack@@PBD0PAXI@ZP6AXPAV2@@Z@Z
55 0x1000bb10 ?ResolutionInTicks@BaseTimeDurationPlatformUtils@mozilla@@SA_JXZ
56 0x1000bb20 ?Shutdown@TimeStamp@mozilla@@SAXXZ
57 0x1000bb30 ?Startup@TimeStamp@mozilla@@SAXXZ
58 0x1000bc00 ?TicksFromMilliseconds@BaseTimeDurationPlatformUtils@mozilla@@SA_JN@Z
59 0x10013e60 ?ToExponential@DoubleToStringConverter@double_conversion@@QBE_NNHPAVStringBuilder@2@@Z
60 0x10013fe0 ?ToFixed@DoubleToStringConverter@double_conversion@@QBE_NNHPAVStringBuilder@2@@Z
61 0x10014190 ?ToPrecision@DoubleToStringConverter@double_conversion@@QBE_NNHPA_NPAVStringBuilder@2@@Z
62 0x1000bc50 ?ToSeconds@BaseTimeDurationPlatformUtils@mozilla@@SAN_J@Z
63 0x1000bc90 ?ToSecondsSigDigits@BaseTimeDurationPlatformUtils@mozilla@@SAN_J@Z
64 0x10014320 ?ToShortestIeeeNumber@DoubleToStringConverter@double_conversion@@ABE_NNPAVStringBuilder@2@W4DtoaMode@12@@Z
65 0x100207e4 ?Unused@mozilla@@3Uunused_t@1@B
66 0x1000e470 ?abs@Decimal@blink@@QBE?AV12@XZ
67 0x10020078 ?aes_enabled@sse_private@mozilla@@3_NA
68 0x1000e490 ?alignOperands@Decimal@blink@@CA?AUAlignedOperands@12@ABV12@0@Z
69 0x1002007d ?avx2_enabled@sse_private@mozilla@@3_NA
70 0x1002007b ?avx_enabled@sse_private@mozilla@@3_NA
71 0x1000e6e0 ?ceil@Decimal@blink@@QBE?AV12@XZ
72 0x1000e7b0 ?compareTo@Decimal@blink@@ABE?AV12@ABV12@@Z
73 0x1000d450 ?compress@LZ4@Compression@mozilla@@SAIPBDIPAD@Z
74 0x1000d470 ?compressLimitedOutput@LZ4@Compression@mozilla@@SAIPBDIPADI@Z
75 0x1000d490 ?decompress@LZ4@Compression@mozilla@@SA_NPBDIPADIPAI@Z
76 0x1000d4c0 ?decompress@LZ4@Compression@mozilla@@SA_NPBDPADI@Z
77 0x1000d4e0 ?decompressPartial@LZ4@Compression@mozilla@@SA_NPBDIPADIPAI@Z
78 0x100145b0 ?finish@SHA1Sum@mozilla@@QAEXAAY0BE@E@Z
79 0x1000e8b0 ?floor@Decimal@blink@@QBE?AV12@XZ
80 0x1000e970 ?fromDouble@Decimal@blink@@SA?AV12@N@Z
81 0x1000ea10 ?fromString@Decimal@blink@@SA?AV12@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
82 0x100207d0 ?gChaosFeatures@detail@mozilla@@3W4ChaosFeature@2@A
83 0x100207e8 ?gChaosModeCounter@detail@mozilla@@3V?$Atomic@I$01X@2@A
84 0x1001add8 ?gTwoCharEscapes@detail@mozilla@@3QBDB
85 0x1000ed40 ?infinity@Decimal@blink@@SA?AV12@W4Sign@12@@Z
86 0x1001ad20 ?kBase10MaximalLength@DoubleToStringConverter@double_conversion@@2HB
87 0x10009550 ?lock@MutexImpl@detail@mozilla@@IAEXXZ
88 0x1002007f ?mmx_enabled@sse_private@mozilla@@3_NA
89 0x100091b0 ?mozalloc_handle_oom@@YAXI@Z
90 0x10009220 ?mozalloc_set_oom_abort_handler@@YAXP6AXI@Z@Z
91 0x1000f030 ?nan@Decimal@blink@@SA?AV12@XZ
92 0x10009450 ?notify_all@ConditionVariableImpl@detail@mozilla@@QAEXXZ
93 0x10009460 ?notify_one@ConditionVariableImpl@detail@mozilla@@QAEXXZ
94 0x10009ea0 ?print@PrintfTarget@mozilla@@QAA_NPBDZZ
95 0x1000f2b0 ?remainder@Decimal@blink@@QBE?AV12@ABV12@@Z
96 0x1000f330 ?round@Decimal@blink@@QBE?AV12@XZ
97 0x1002007c ?sse3_enabled@sse_private@mozilla@@3_NA
98 0x1002007a ?sse4_1_enabled@sse_private@mozilla@@3_NA
99 0x1002007e ?sse4_2_enabled@sse_private@mozilla@@3_NA
100 0x10020080 ?sse4a_enabled@sse_private@mozilla@@3_NA
101 0x10020079 ?ssse3_enabled@sse_private@mozilla@@3_NA
102 0x1000f7d0 ?toDouble@Decimal@blink@@QBENXZ
103 0x1000f870 ?toString@Decimal@blink@@QBE?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@XZ
104 0x1000fb80 ?toString@Decimal@blink@@QBE_NPADI@Z
105 0x10009560 ?unlock@MutexImpl@detail@mozilla@@IAEXXZ
106 0x10015b80 ?update@SHA1Sum@mozilla@@QAEXPBXI@Z
107 0x10009ec0 ?vprint@PrintfTarget@mozilla@@QAE_NPBDPAD@Z
108 0x10009470 ?wait@ConditionVariableImpl@detail@mozilla@@QAEXAAVMutexImpl@23@@Z
109 0x100094b0 ?wait_for@ConditionVariableImpl@detail@mozilla@@QAE?AW4CVStatus@23@AAVMutexImpl@23@ABV?$BaseTimeDuration@VTimeDurationValueCalculator@mozilla@@@3@@Z
110 0x1000fc70 ?zero@Decimal@blink@@SA?AV12@W4Sign@12@@Z
111 0x100015a0 CFG_DisabledOrCrash
115 0x10015c60 MOZ_CrashOOL
116 0x10015c80 MOZ_CrashPrintf
112 0x10009150 _HeapAlloc@12
113 0x10009170 _HeapFree@12
114 0x10009190 _HeapReAlloc@16
117 0x10008ed0 _aligned_free
118 0x10009020 _aligned_malloc
119 0x10008de0 _expand
120 0x10008e10 _msize
121 0x10008e30 _recalloc
122 0x10009040 _strdup
123 0x10009090 _wcsdup
124 0x10008eb0 calloc
125 0x10008ed0 free
126 0x100207d4 gMozCrashReason
127 0x100207dc gMozillaPoisonBase
128 0x100207e0 gMozillaPoisonSize
129 0x100207d8 gMozillaPoisonValue
130 0x10008f70 jemalloc_free_dirty_pages
131 0x10008f80 jemalloc_ptr_info
132 0x10009400 jemalloc_purge_freed_pages
133 0x10008f90 jemalloc_stats
134 0x10008fa0 jemalloc_thread_local_arena
135 0x10008ef0 malloc
136 0x10008f10 malloc_good_size
137 0x10008e10 malloc_usable_size
138 0x10015ce0 mozPoisonValueInit
139 0x10008fb0 moz_arena_calloc
140 0x10008fc0 moz_arena_free
141 0x10008fd0 moz_arena_malloc
142 0x10008fe0 moz_arena_memalign
143 0x10008ff0 moz_arena_realloc
144 0x10009000 moz_create_arena_with_params
145 0x10009010 moz_dispose_arena
146 0x10009230 moz_malloc_enclosing_size_of
147 0x10009270 moz_malloc_size_of
148 0x10009270 moz_malloc_usable_size
149 0x10009290 moz_xcalloc
150 0x100092f0 moz_xmalloc
151 0x10009310 moz_xmemalign
152 0x10009340 moz_xrealloc
153 0x10009370 moz_xstrdup
154 0x100090f0 mozalloc_abort
155 0x10008f40 posix_memalign
156 0x10008f50 realloc
157 0x10009040 strdup
158 0x10009060 strndup
159 0x10009090 wcsdup
No antivirus signatures available.
No IRMA results available.