~���inݤ!�J��!]u 9�.�C���k��3��̑�k�w<"�CS��SK$J�wү��5^;�^�>S���O��xG9Z���>s�=��iw D�Z�r�ׇ��\�C7�� fna�ރL3A��a2��~*TϜ�^�6(���L��B�|���cIS��*�\�����^��@�P{�2�am�X�^�0T5�����x���`�b���B1��pL&�)~H �sI5�-v�'٧���3���G�����m������#�Z�����;�lD���il�XQ�{vzo�>�8뫽�;IX)yZE�_��|�=�?��/B��*�U��a�cZ�Nk�J��x��4qAJ��_b��R�ҩ���ZB�; ���V�Z7�x���t�#,���/�҇�[`;���vd�����̎3Ѻ;��{���Dmծ�����S�"�hG�v� Ri�w��HM�Sl�u�D�2�o!� _�Jl"�S{M���7�G��-�`jg�]�ε����D7X�����q�m1���-���=8f�3Pah�,�/�~a�|��Bq}��Yh��ȑ"��9z�4��3KH��S�[00k�I������U�{�#��G[r�|Q����WZX�O�����cs��d#C`�����f�&�K}��������6{�{f]�/C��i!��5���7)����ЎT���5F��w���v���Bbu�1�=�M�T�%(�����NG���_�Iv �,���U���),���^-襞`��`��9I��4�=�ݩ�.$K^��ie=G�w��'@Ta�&��|�~*�ؐp�������֚�ͭ,�� (��W�_�ml��[��S��~Co�8<���h��Ä#k *^�����oh���R+\��Y�t���HO�`$�.Ҡ�;��ãȕ}Z����Jy%����y����B���NKe���j���wQ��Uͧ���銦ekOmu:O֏c����%Za4��%�W��?})y�>l^� ��>Y�j�����t/������?j��U�>F�\����!�P�7}���Z �y/"���7�)v�5b�/E�ڕq}|ȠM����,#DWE��f��6$�[�6�ǻ��R�f��%J��=�ȡ ��z5�<�i����J�kf{�a�i��L�w���X�q�Ȁ�J��xS�%n����QΪ�oV3�pL�'�|�g5z}��1�|����wh8BG]�!ҥg����?�����)]�"�@���nNwl��͟�=(�bC�Y��T�!�~�$��Z,���4!ڝ IK/9g�r~UCA[V4nO�l��ߑ +�����t ?q��0`@C(u��Ms��G)v��`�V�U=��?�0DM �dj`���N@5��Y��И| �>f���pD�$���ȐxdN�Xrǚ�NI���YЀ*�tc��ʭ<���Oa�!5}y&7 ��B.רi@�a��I���i�ʾ���A�d2�e�}l ��8A�Tc+�j�`"����'����R�cJ���t ��IJď�5}7M��ɏ>�N�ɠ�P��C�y/�f|"�_,�j�G�]��6�r�4lXw>��N�ӫ͏&�Jl0N�p����Z����j���=2z_��1��-��G�OCa鰣��+D�8��ӥ~=� K�nJ�y~��bؒj|�&+Ļ�[i)�. �*'�Xdj��������K�Q��p�P��XaS��]): %9�0n�n �����{�ꔘq8�a\�ay^�x�Rj]��H�A�����bh�끜o�ڞ�� ���G̱وV�S���Lj���I����Nß"�@�p!��=�����@c�V�w.�[��Cޱ�\�"t��oZ��%�ԫM;��XG��� ��TY�{[ �YV<g��/bƝ��_��h6V�=azE�A}��6�~�%>u�z�6�1�I/U��ٮ��,"�fvt�E��C{�"�h͈����h$�����}�ƗΙ�ܠ��O�����p�xN&⾤5iү�T~�N���d�߹P|�I���R����ѱ���vD@��`�z���S� �O�F��ոۯ[�Ҩ���d���>���v ��@�"���٦�����FE;�Mz�i\O r�W<b �TD�;E�q�2�*�^��UX��R���L�^���a�kX����≄�Ƚ�!�L�Wy�,5Wr��,���9DI�&-�į�!��j�H���hp'B�]3;2b�Z�&�U��ԝ�����O��{��E�A�ˁ8m�]=ёM�Zq�����}�wK�8���: � ��-ӎ��~y��M����Y�� 7od�-���Y��4��rc�����Y,���k8vQ��Y�"�P�G�v���z�A>�<�nVM��-"���7)�6�$��Q������� 3d�L�ȴ��va��Zu��g�}Y�գM�p��#IstD0uГ<W;R��Mk��4���+t�$�[= ����Xl�J��o�U��y��c7A'��/��vS�B�r[���-0�c��Tq??1��=�՜� �ӹu�r�}��d�\�bE,��OA��x\�O �����oBC�0^���x���nϱ���(��� ;�Sf7�_I�g �,鮌�?&��d�o��糟����`Z�@��Ҫ���#Zzp��R���'5D�۔���]w�+����|/K@�'9�d[���_�L��y���f��ڷ�����D�n��� �|^���F�$��?t��� b��@��������B�5�Q��nf$�1������8�N\�L�C�<�{��A��zQv�9�,�:�O� An��^��g/s~�̛Q[��,A-,N�U�'sn���~�9#��,�(m'u|�=������6�9V�߭"%R�L�Z�'���?�������<�n6�4 f�l X]� �� ��*��- ��X�>H��f7�\aw����s��w��^N8�����<����h����*앋X-_@�P�����P�+���~��i��g-R�)��Bi��������ɛ����5Q/�|; ��5��$`ɮ��S��٧���?��N�����Q5c{��BA9�c[�ͪ�~��v[�5���
Overview
overview
10Static
static
1FileSetup.exe
windows7-x64
10FileSetup.exe
windows10-2004-x64
10Uses of Ad...ex.dll
windows7-x64
7Uses of Ad...ex.dll
windows10-2004-x64
7Uses of Ad...0x.exe
windows7-x64
Uses of Ad...0x.exe
windows10-2004-x64
Uses of Ad...ir.exe
windows7-x64
Uses of Ad...ir.exe
windows10-2004-x64
Uses of Ad...3x.exe
windows7-x64
Uses of Ad...3x.exe
windows10-2004-x64
Uses of Ad...31.exe
windows7-x64
Uses of Ad...31.exe
windows10-2004-x64
Uses of Ad...10.exe
windows7-x64
Uses of Ad...10.exe
windows10-2004-x64
Uses of Ad...ex.dll
windows7-x64
1Uses of Ad...ex.dll
windows10-2004-x64
1Uses of Ad...ex.dll
windows7-x64
7Uses of Ad...ex.dll
windows10-2004-x64
7Uses of Ad...0x.exe
windows7-x64
Uses of Ad...0x.exe
windows10-2004-x64
Uses of Ad...ir.exe
windows7-x64
Uses of Ad...ir.exe
windows10-2004-x64
Uses of Ad...ex.dll
windows7-x64
1Uses of Ad...ex.dll
windows10-2004-x64
1Uses of Ad...0x.exe
windows7-x64
Uses of Ad...0x.exe
windows10-2004-x64
Uses of Ad...ir.exe
windows7-x64
Uses of Ad...ir.exe
windows10-2004-x64
Uses of Ad...3x.exe
windows7-x64
Uses of Ad...3x.exe
windows10-2004-x64
Uses of Ad...31.exe
windows7-x64
Uses of Ad...31.exe
windows10-2004-x64
Static task
static1
Behavioral task
behavioral1
Sample
FileSetup.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
FileSetup.exe
Resource
win10v2004-20220812-en
Behavioral task
behavioral3
Sample
Uses of Additional Files/WinAll/BeholdTV/amd64/bhkspex.dll
Resource
win7-20221111-en
Behavioral task
behavioral4
Sample
Uses of Additional Files/WinAll/BeholdTV/amd64/bhkspex.dll
Resource
win10v2004-20220812-en
Behavioral task
behavioral5
Sample
Uses of Additional Files/WinAll/BeholdTV/amd64/cx2310x.exe
Resource
win7-20220901-en
Behavioral task
behavioral6
Sample
Uses of Additional Files/WinAll/BeholdTV/amd64/cx2310x.exe
Resource
win10v2004-20221111-en
Behavioral task
behavioral7
Sample
Uses of Additional Files/WinAll/BeholdTV/amd64/cxpolir.exe
Resource
win7-20220812-en
Behavioral task
behavioral8
Sample
Uses of Additional Files/WinAll/BeholdTV/amd64/cxpolir.exe
Resource
win10v2004-20221111-en
Behavioral task
behavioral9
Sample
Uses of Additional Files/WinAll/BeholdTV/amd64/saa713x.exe
Resource
win7-20220812-en
Behavioral task
behavioral10
Sample
Uses of Additional Files/WinAll/BeholdTV/amd64/saa713x.exe
Resource
win10v2004-20221111-en
Behavioral task
behavioral11
Sample
Uses of Additional Files/WinAll/BeholdTV/amd64/saa7231.exe
Resource
win7-20220901-en
Behavioral task
behavioral12
Sample
Uses of Additional Files/WinAll/BeholdTV/amd64/saa7231.exe
Resource
win10v2004-20221111-en
Behavioral task
behavioral13
Sample
Uses of Additional Files/WinAll/BeholdTV/amd64/ttm6010.exe
Resource
win7-20220812-en
Behavioral task
behavioral14
Sample
Uses of Additional Files/WinAll/BeholdTV/amd64/ttm6010.exe
Resource
win10v2004-20220812-en
Behavioral task
behavioral15
Sample
Uses of Additional Files/WinAll/BeholdTV/bhkspex.dll
Resource
win7-20221111-en
Behavioral task
behavioral16
Sample
Uses of Additional Files/WinAll/BeholdTV/bhkspex.dll
Resource
win10v2004-20221111-en
Behavioral task
behavioral17
Sample
Uses of Additional Files/WinAll/BeholdTV/bhkspex.dll
Resource
win7-20220812-en
Behavioral task
behavioral18
Sample
Uses of Additional Files/WinAll/BeholdTV/bhkspex.dll
Resource
win10v2004-20220812-en
Behavioral task
behavioral19
Sample
Uses of Additional Files/WinAll/BeholdTV/cx2310x.exe
Resource
win7-20221111-en
Behavioral task
behavioral20
Sample
Uses of Additional Files/WinAll/BeholdTV/cx2310x.exe
Resource
win10v2004-20221111-en
Behavioral task
behavioral21
Sample
Uses of Additional Files/WinAll/BeholdTV/cxpolir.exe
Resource
win7-20220901-en
Behavioral task
behavioral22
Sample
Uses of Additional Files/WinAll/BeholdTV/cxpolir.exe
Resource
win10v2004-20221111-en
Behavioral task
behavioral23
Sample
Uses of Additional Files/WinAll/BeholdTV/i386/bhkspex.dll
Resource
win7-20220812-en
Behavioral task
behavioral24
Sample
Uses of Additional Files/WinAll/BeholdTV/i386/bhkspex.dll
Resource
win10v2004-20220812-en
Behavioral task
behavioral25
Sample
Uses of Additional Files/WinAll/BeholdTV/i386/cx2310x.exe
Resource
win7-20220812-en
Behavioral task
behavioral26
Sample
Uses of Additional Files/WinAll/BeholdTV/i386/cx2310x.exe
Resource
win10v2004-20221111-en
Behavioral task
behavioral27
Sample
Uses of Additional Files/WinAll/BeholdTV/i386/cxpolir.exe
Resource
win7-20221111-en
Behavioral task
behavioral28
Sample
Uses of Additional Files/WinAll/BeholdTV/i386/cxpolir.exe
Resource
win10v2004-20221111-en
Behavioral task
behavioral29
Sample
Uses of Additional Files/WinAll/BeholdTV/i386/saa713x.exe
Resource
win7-20220812-en
Behavioral task
behavioral30
Sample
Uses of Additional Files/WinAll/BeholdTV/i386/saa713x.exe
Resource
win10v2004-20220901-en
Behavioral task
behavioral31
Sample
Uses of Additional Files/WinAll/BeholdTV/i386/saa7231.exe
Resource
win7-20221111-en
Behavioral task
behavioral32
Sample
Uses of Additional Files/WinAll/BeholdTV/i386/saa7231.exe
Resource
win10v2004-20220812-en
General
-
Target
FullSetupV1-Pass-10101.rar
-
Size
8.0MB
-
MD5
2f2576a9eabefb1ed0a1efcfad257149
-
SHA1
121ab143e2c2838ae8f7460b88fae33004bfb5a1
-
SHA256
230a2766e19814ddf109d7e72d6fc7ea9fb643dc05634701ecdf2b9b506d5a9d
-
SHA512
5c074263fa0ff1757fc466d41d4f7de0cca332606dd82c39074f58f240e46586470b96301dc281e0abbc43af92480faa2120a37f2c4b30e8b807ee2fe54a5e9a
-
SSDEEP
196608:rGyzVxAVDMs40y2yJa3QiOEmSvvnIgdZpzTYqkUQ3OTkY2fr+dJ:BV7GQMLv/Rlk98Kri
Malware Config
Signatures
Files
-
FullSetupV1-Pass-10101.rar.rar
Password: 10101
-
FileSetup.rar.rar
Password: 10101
-
FileSetup.exe.exe windows x86
Password: 10101
bb7db9bdde22d56cffe7fd6f13032601
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetVersionExW
GetVersionExA
GetSystemTimeAsFileTime
LocalAlloc
LocalFree
GetModuleFileNameW
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress
user32
GetThreadDesktop
CharUpperBuffW
gdi32
BitBlt
advapi32
GetTokenInformation
shell32
SHFileOperationW
ole32
CreateStreamOnHGlobal
crypt32
CryptUnprotectData
wininet
HttpSendRequestExA
ws2_32
WSAStartup
Exports
Exports
Sections
.text Size: 682KB - Virtual size: 682KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 129KB - Virtual size: 128KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 20KB - Virtual size: 34KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 9B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.gfids Size: 1024B - Virtual size: 564B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.n>8 Size: - Virtual size: 3.8MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.|%m Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.K>) Size: 6.5MB - Virtual size: 6.5MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 46KB - Virtual size: 46KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
Globalization/Time Zone/timezoneMapping.xml
-
Globalization/Time Zone/timezones.xml
-
Uses of Additional Files/WinAll/BeholdTV/amd64/bhkspex.x64.dll regsvr32 windows x64
Password: 10101
c2b63eb78a633a8cf029f36d00413c44
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
msvcrt
??3@YAXPEAX@Z
??2@YAPEAX_K@Z
sprintf
_vsnwprintf
memcmp
memcpy
memset
wcsncat
ole32
CoTaskMemAlloc
CoCreateInstance
CoTaskMemFree
StringFromGUID2
comctl32
ImageList_Destroy
ImageList_Create
comdlg32
GetSaveFileNameA
GetOpenFileNameA
user32
GetDesktopWindow
GetWindowRect
LoadStringW
DefWindowProcW
GetWindowLongW
SetWindowLongW
DestroyWindow
InvalidateRect
MoveWindow
CreateDialogParamW
GetWindowLongPtrW
GetDlgItemInt
SetTimer
SendDlgItemMessageA
KillTimer
SendMessageA
SetDlgItemInt
GetWindowLongA
GetDlgItem
CheckDlgButton
ShowWindow
IsDlgButtonChecked
EnableWindow
SetDlgItemTextA
SetWindowLongPtrW
MessageBoxA
kernel32
RtlVirtualUnwind
SetUnhandledExceptionFilter
GetCurrentProcessId
QueryPerformanceCounter
RtlCaptureContext
GetSystemTimeAsFileTime
TerminateProcess
RtlLookupFunctionEntry
GetFileSize
GetTickCount
GetCurrentThreadId
GetCurrentProcess
UnhandledExceptionFilter
FreeLibrary
GetModuleFileNameA
GetLastError
lstrlenA
MultiByteToWideChar
lstrlenW
WideCharToMultiByte
CreateFileA
DisableThreadLibraryCalls
WriteFile
GetFileAttributesA
ReadFile
CloseHandle
GetVersionExW
advapi32
RegSetValueExA
RegDeleteKeyA
RegCreateKeyExA
RegCreateKeyW
RegSetValueW
RegSetValueExW
RegOpenKeyExW
RegEnumKeyExW
RegDeleteKeyW
RegCloseKey
Exports
Exports
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Sections
.text Size: 79KB - Virtual size: 79KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 19KB - Virtual size: 19KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 932B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
Uses of Additional Files/WinAll/BeholdTV/amd64/cx2310x.sys.exe windows x64
Password: 10101
ded2398681571d460a573fbec8267082
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_WDM_DRIVER
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
ntoskrnl.exe
IoAllocateErrorLogEntry
KeInitializeTimer
KeSetTimerEx
ZwCreateFile
PsCreateSystemThread
PsTerminateSystemThread
IoGetCurrentProcess
ObReferenceObjectByHandle
KeWaitForSingleObject
ObfDereferenceObject
KeCancelTimer
ZwQueryInformationFile
ZwCreateKey
KeReleaseSpinLock
IoBuildDeviceIoControlRequest
IofCallDriver
KeInitializeMutex
KeReleaseMutex
IoCancelIrp
IoFreeIrp
IoAllocateIrp
KeWaitForMultipleObjects
KeRemoveQueueDpc
KeInsertQueueDpc
KeBugCheckEx
RtlStringFromGUID
KeInitializeDpc
KeInitializeEvent
KeSetEvent
ZwReadFile
strncmp
IoWriteErrorLogEntry
KeClearEvent
_stricmp
IoOpenDeviceRegistryKey
IoGetDeviceInterfaces
ZwClose
ExFreePool
ZwQueryValueKey
wcsstr
RtlFreeUnicodeString
_wcslwr
ZwSetValueKey
RtlInitAnsiString
IoOpenDeviceInterfaceRegistryKey
strchr
RtlInitUnicodeString
KeAcquireSpinLockRaiseToDpc
RtlAnsiStringToUnicodeString
ExFreePoolWithTag
ExAllocatePoolWithTag
IofCompleteRequest
IoGetDeviceProperty
toupper
IoIsWdmVersionAvailable
_vsnprintf
KeDelayExecutionThread
RtlCompareMemory
hal
KeStallExecutionProcessor
KeQueryPerformanceCounter
ks.sys
KsGetDeviceForDeviceObject
KsInitializeDriver
KsAcquireDevice
KsReleaseDevice
KsCreateFilterFactory
KsFilterFactoryUpdateCacheData
KsGetPinFromIrp
KsPinGetAndGate
KsStreamPointerDelete
KsStreamPointerClone
KsPinReleaseProcessingMutex
KsPinAcquireProcessingMutex
KsPinAttemptProcessing
KsGetFilterFromIrp
KsPinGetParentFilter
KsGetDevice
_KsEdit
KsStreamPointerAdvance
KsPinGetLeadingEdgeStreamPointer
KsStreamPointerUnlock
KsPinGetReferenceClockInterface
usbd.sys
USBD_ParseConfigurationDescriptorEx
USBD_CreateConfigurationRequestEx
bdasup.sys
BdaStartChanges
BdaFilterFactoryUpdateCacheData
BdaCreateFilterFactoryEx
BdaValidateNodeProperty
BdaGetChangeState
BdaCheckChanges
BdaInitFilter
BdaCommitChanges
Sections
.text Size: 111KB - Virtual size: 111KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 87KB - Virtual size: 87KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
INIT Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
Uses of Additional Files/WinAll/BeholdTV/amd64/cxpolir.sys.exe windows x64
Password: 10101
ea7483a8eb714ec3ea508bf58b81a559
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_WDM_DRIVER
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
ntoskrnl.exe
ExFreePool
ZwClose
IoGetDeviceInterfaces
KeClearEvent
IoWriteErrorLogEntry
KeSetEvent
KeInitializeEvent
KeInitializeDpc
IoAllocateErrorLogEntry
KeInitializeTimer
KeSetTimerEx
RtlStringFromGUID
wcsstr
KeWaitForSingleObject
KeCancelTimer
ExFreePoolWithTag
ExAllocatePoolWithTag
IoBuildDeviceIoControlRequest
KeDelayExecutionThread
IofCallDriver
IoCancelIrp
IoFreeIrp
IoAllocateIrp
KeInitializeMutex
KeReleaseMutex
KeBugCheckEx
IofCompleteRequest
RtlFreeUnicodeString
_wcslwr
ZwSetValueKey
RtlInitAnsiString
IoOpenDeviceInterfaceRegistryKey
RtlInitUnicodeString
RtlAnsiStringToUnicodeString
IoGetDeviceProperty
_vsnprintf
hal
KeStallExecutionProcessor
KeQueryPerformanceCounter
ks.sys
KsGetDeviceForDeviceObject
KsInitializeDriver
KsAcquireDevice
KsReleaseDevice
KsCreateFilterFactory
_KsEdit
KsFilterFactoryUpdateCacheData
KsGetFilterFromIrp
KsGetDevice
usbd.sys
USBD_ParseConfigurationDescriptorEx
USBD_CreateConfigurationRequestEx
Sections
.text Size: 14KB - Virtual size: 14KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 384B - Virtual size: 336B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 896B - Virtual size: 780B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
INIT Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.reloc Size: 256B - Virtual size: 174B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
Uses of Additional Files/WinAll/BeholdTV/amd64/saa713x.sys.exe windows x64
Password: 10101
e43ebc442a44b98402c01aa44cd9766e
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_WDM_DRIVER
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
hal
KeStallExecutionProcessor
KeQueryPerformanceCounter
ntoskrnl.exe
ZwSetValueKey
_wcslwr
RtlFreeUnicodeString
wcsstr
ZwQueryValueKey
ExFreePool
ZwClose
IoGetDeviceInterfaces
IoOpenDeviceRegistryKey
RtlDeleteRegistryValue
KeInitializeTimer
KeInitializeMutex
RtlInitAnsiString
KeCancelTimer
PsCreateSystemThread
PsTerminateSystemThread
ObReferenceObjectByHandle
_stricmp
IoWriteErrorLogEntry
strncmp
ZwReadFile
IoAllocateErrorLogEntry
ZwCreateFile
IoGetCurrentProcess
ZwQueryInformationFile
KeBugCheckEx
_vsnprintf
strchr
IoOpenDeviceInterfaceRegistryKey
RtlInitUnicodeString
RtlAnsiStringToUnicodeString
ZwCreateKey
RtlStringFromGUID
KeReleaseMutex
KeSynchronizeExecution
KeInsertQueueDpc
KeInitializeDpc
KeRemoveQueueDpc
ExFreePoolWithTag
ExAllocatePoolWithTag
IofCallDriver
IoGetDeviceProperty
ObfDereferenceObject
IoIsWdmVersionAvailable
IoGetAttachedDeviceReference
MmMapIoSpace
MmUnmapIoSpace
IoBuildSynchronousFsdRequest
IoGetDmaAdapter
IofCompleteRequest
KeSetTimer
KeWaitForSingleObject
KeAcquireSpinLockRaiseToDpc
KeReleaseSpinLock
KeWaitForMultipleObjects
KeInitializeEvent
KeSetEvent
KeClearEvent
RtlCompareMemory
KeDelayExecutionThread
KeSetTimerEx
MmGetSystemRoutineAddress
IoConnectInterrupt
IoDisconnectInterrupt
KeQueryActiveProcessors
memcmp
ks.sys
KsAcquireDevice
KsReleaseDevice
KsCreateFilterFactory
KsDeviceRegisterAdapterObject
KsGetOuterUnknown
KsFilterFactoryUpdateCacheData
KsGetDeviceForDeviceObject
KsInitializeDriver
KsStreamPointerDelete
KsStreamPointerClone
KsPinReleaseProcessingMutex
KsPinAcquireProcessingMutex
KsGetFilterFromIrp
KsPinGetParentFilter
KsGetDevice
KsPinGetAndGate
KsPinAttemptProcessing
KsGetPinFromIrp
KsStreamPointerAdvance
KsPinGetLeadingEdgeStreamPointer
KsStreamPointerUnlock
_KsEdit
KsPinGetReferenceClockInterface
bdasup.sys
BdaValidateNodeProperty
BdaGetChangeState
BdaCheckChanges
BdaInitFilter
BdaStartChanges
BdaCommitChanges
BdaFilterFactoryUpdateCacheData
BdaCreateFilterFactoryEx
Sections
.text Size: 207KB - Virtual size: 207KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 161KB - Virtual size: 161KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 10KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
PAGE Size: 512B - Virtual size: 504B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
INIT Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.reloc Size: 9KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
Uses of Additional Files/WinAll/BeholdTV/amd64/saa7231.sys.exe windows x64
Password: 10101
2d0e9e8011b8f2a5023ebc8f741f9c49
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_WDM_DRIVER
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
ntoskrnl.exe
KeInitializeDpc
KeReleaseSpinLock
IoAllocateErrorLogEntry
KeInitializeTimer
KeSetTimerEx
ZwCreateFile
PsCreateSystemThread
PsTerminateSystemThread
ObReferenceObjectByHandle
KeSetTimer
ZwReadFile
ZwQueryInformationFile
IoWriteErrorLogEntry
KeAcquireSpinLockRaiseToDpc
MmMapIoSpace
KeRemoveQueueDpc
KeInsertQueueDpc
MmUnmapIoSpace
KeInitializeMutex
KeReleaseMutex
KeSynchronizeExecution
KeWaitForMultipleObjects
KeBugCheckEx
KeClearEvent
IoOpenDeviceRegistryKey
IoGetDeviceInterfaces
ZwClose
ExFreePool
ZwQueryValueKey
wcsstr
RtlFreeUnicodeString
_wcslwr
ZwSetValueKey
RtlInitAnsiString
strchr
IoOpenDeviceInterfaceRegistryKey
RtlInitUnicodeString
RtlAnsiStringToUnicodeString
ZwCreateKey
RtlStringFromGUID
ExFreePoolWithTag
ExAllocatePoolWithTag
IofCompleteRequest
IoGetDeviceProperty
IoIsWdmVersionAvailable
_vsnprintf
KeSetEvent
KeDelayExecutionThread
IoGetDmaAdapter
IofCallDriver
ObfDereferenceObject
IoGetAttachedDeviceReference
KeWaitForSingleObject
KeInitializeEvent
IoBuildSynchronousFsdRequest
KeCancelTimer
RtlCompareMemory
MmGetSystemRoutineAddress
IoConnectInterrupt
IoDisconnectInterrupt
KeQueryActiveProcessors
hal
KeStallExecutionProcessor
KeQueryPerformanceCounter
ks.sys
KsReleaseDevice
KsCreateFilterFactory
KsDeviceRegisterAdapterObject
KsGetOuterUnknown
KsFilterFactoryUpdateCacheData
KsGetPinFromIrp
KsPinGetAndGate
KsStreamPointerDelete
KsStreamPointerClone
KsPinReleaseProcessingMutex
KsPinAcquireProcessingMutex
KsAcquireDevice
KsPinAttemptProcessing
KsGetFilterFromIrp
KsPinGetParentFilter
KsGetDevice
KsPinGetReferenceClockInterface
_KsEdit
KsAcquireControl
KsReleaseControl
KsStreamPointerAdvance
KsPinGetLeadingEdgeStreamPointer
KsStreamPointerUnlock
KsInitializeDriver
KsGetDeviceForDeviceObject
bdasup.sys
BdaGetChangeState
BdaCheckChanges
BdaInitFilter
BdaStartChanges
BdaCommitChanges
BdaFilterFactoryUpdateCacheData
BdaCreateFilterFactoryEx
BdaValidateNodeProperty
Sections
.text Size: 142KB - Virtual size: 142KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 117KB - Virtual size: 117KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
PAGE Size: 512B - Virtual size: 504B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
INIT Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.reloc Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
Uses of Additional Files/WinAll/BeholdTV/amd64/ttm6010.sys.exe windows x64
Password: 10101
647437779ebf46177e2c6e415361ea9b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_WDM_DRIVER
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
ntoskrnl.exe
_stricmp
IoWriteErrorLogEntry
strncmp
KeInitializeDpc
KeReleaseSpinLock
IoAllocateErrorLogEntry
KeInitializeTimer
PsCreateSystemThread
PsTerminateSystemThread
IoGetCurrentProcess
ObReferenceObjectByHandle
KeInitializeMutex
IoOpenDeviceRegistryKey
KeCancelTimer
ZwQueryInformationFile
KeSetEvent
KeAcquireSpinLockRaiseToDpc
IoBuildDeviceIoControlRequest
IofCallDriver
IoCancelIrp
IoFreeIrp
IoAllocateIrp
KeRemoveQueueDpc
KeInsertQueueDpc
KeBugCheckEx
RtlInitUnicodeString
IoGetDeviceInterfaces
ExFreePool
ZwQueryValueKey
wcsstr
RtlFreeUnicodeString
_wcslwr
ZwSetValueKey
RtlInitAnsiString
strchr
IoOpenDeviceInterfaceRegistryKey
RtlAnsiStringToUnicodeString
ZwCreateKey
RtlStringFromGUID
ExFreePoolWithTag
ExAllocatePoolWithTag
IofCompleteRequest
ZwWriteFile
KeWaitForMultipleObjects
KeWaitForSingleObject
ZwCreateFile
ZwClose
KeReleaseMutex
ObfDereferenceObject
KeInitializeEvent
KeClearEvent
IoGetDeviceProperty
toupper
IoIsWdmVersionAvailable
_vsnprintf
KeDelayExecutionThread
ZwReadFile
KeSetTimer
RtlCompareMemory
hal
KeStallExecutionProcessor
ks.sys
KsGetDeviceForDeviceObject
KsInitializeDriver
KsAcquireDevice
KsReleaseDevice
KsCreateFilterFactory
KsFilterFactoryUpdateCacheData
KsGetPinFromIrp
KsPinGetAndGate
KsStreamPointerDelete
KsStreamPointerClone
KsPinReleaseProcessingMutex
KsPinAcquireProcessingMutex
KsPinAttemptProcessing
KsGetFilterFromIrp
KsPinGetParentFilter
KsGetDevice
_KsEdit
KsStreamPointerAdvance
KsPinGetLeadingEdgeStreamPointer
KsStreamPointerUnlock
KsPinGetReferenceClockInterface
usbd.sys
USBD_ParseConfigurationDescriptorEx
USBD_CreateConfigurationRequestEx
bdasup.sys
BdaCreateFilterFactoryEx
BdaValidateNodeProperty
BdaGetChangeState
BdaCheckChanges
BdaInitFilter
BdaStartChanges
BdaCommitChanges
BdaFilterFactoryUpdateCacheData
Sections
.text Size: 79KB - Virtual size: 79KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 66KB - Virtual size: 65KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
INIT Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.reloc Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
Uses of Additional Files/WinAll/BeholdTV/beholder.bin
-
Uses of Additional Files/WinAll/BeholdTV/beholder.cat
-
Uses of Additional Files/WinAll/BeholdTV/beholder.inf
-
Uses of Additional Files/WinAll/BeholdTV/bhkspex.dll.dll regsvr32 windows x86
24ed8993fd619d7b830ee8a6485904da
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
msvcrt
memset
??2@YAPAXI@Z
??3@YAXPAX@Z
sprintf
memcpy
_vsnwprintf
wcsncat
ole32
CoTaskMemAlloc
CoCreateInstance
CoTaskMemFree
StringFromGUID2
comctl32
ImageList_Destroy
ImageList_Create
comdlg32
GetSaveFileNameA
GetOpenFileNameA
user32
GetDesktopWindow
GetWindowRect
LoadStringW
DefWindowProcW
DestroyWindow
InvalidateRect
MoveWindow
CreateDialogParamW
SetWindowLongW
MessageBoxA
SendMessageA
GetWindowLongA
IsDlgButtonChecked
SetTimer
KillTimer
ShowWindow
SetDlgItemTextA
SendDlgItemMessageA
CheckDlgButton
SetDlgItemInt
EnableWindow
GetDlgItem
GetWindowLongW
GetDlgItemInt
kernel32
QueryPerformanceCounter
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcessId
GetSystemTimeAsFileTime
WriteFile
GetTickCount
GetCurrentThreadId
GetCurrentProcess
FreeLibrary
TerminateProcess
InterlockedIncrement
GetModuleFileNameA
GetLastError
WideCharToMultiByte
CloseHandle
ReadFile
GetFileSize
lstrlenA
CreateFileA
GetFileAttributesA
GetVersionExW
DisableThreadLibraryCalls
InterlockedDecrement
lstrlenW
MultiByteToWideChar
advapi32
RegCreateKeyExA
RegDeleteKeyA
RegCloseKey
RegCreateKeyW
RegSetValueW
RegSetValueExW
RegOpenKeyExW
RegEnumKeyExW
RegDeleteKeyW
RegSetValueExA
Exports
Exports
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Sections
.text Size: 60KB - Virtual size: 60KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 19KB - Virtual size: 19KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
Uses of Additional Files/WinAll/BeholdTV/bhkspex.x64.dll regsvr32 windows x64
c2b63eb78a633a8cf029f36d00413c44
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
msvcrt
??3@YAXPEAX@Z
??2@YAPEAX_K@Z
sprintf
_vsnwprintf
memcmp
memcpy
memset
wcsncat
ole32
CoTaskMemAlloc
CoCreateInstance
CoTaskMemFree
StringFromGUID2
comctl32
ImageList_Destroy
ImageList_Create
comdlg32
GetSaveFileNameA
GetOpenFileNameA
user32
GetDesktopWindow
GetWindowRect
LoadStringW
DefWindowProcW
GetWindowLongW
SetWindowLongW
DestroyWindow
InvalidateRect
MoveWindow
CreateDialogParamW
GetWindowLongPtrW
GetDlgItemInt
SetTimer
SendDlgItemMessageA
KillTimer
SendMessageA
SetDlgItemInt
GetWindowLongA
GetDlgItem
CheckDlgButton
ShowWindow
IsDlgButtonChecked
EnableWindow
SetDlgItemTextA
SetWindowLongPtrW
MessageBoxA
kernel32
RtlVirtualUnwind
SetUnhandledExceptionFilter
GetCurrentProcessId
QueryPerformanceCounter
RtlCaptureContext
GetSystemTimeAsFileTime
TerminateProcess
RtlLookupFunctionEntry
GetFileSize
GetTickCount
GetCurrentThreadId
GetCurrentProcess
UnhandledExceptionFilter
FreeLibrary
GetModuleFileNameA
GetLastError
lstrlenA
MultiByteToWideChar
lstrlenW
WideCharToMultiByte
CreateFileA
DisableThreadLibraryCalls
WriteFile
GetFileAttributesA
ReadFile
CloseHandle
GetVersionExW
advapi32
RegSetValueExA
RegDeleteKeyA
RegCreateKeyExA
RegCreateKeyW
RegSetValueW
RegSetValueExW
RegOpenKeyExW
RegEnumKeyExW
RegDeleteKeyW
RegCloseKey
Exports
Exports
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Sections
.text Size: 79KB - Virtual size: 79KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 19KB - Virtual size: 19KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 932B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
Uses of Additional Files/WinAll/BeholdTV/cx2310x.sys.exe windows x86
72758abb4fd59d040b279c65c0752ea7
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_WDM_DRIVER
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
ntoskrnl.exe
KeInitializeEvent
ObfDereferenceObject
KeWaitForSingleObject
KeSetEvent
PsTerminateSystemThread
IofCompleteRequest
ZwQueryInformationFile
ZwCreateFile
ZwReadFile
strncmp
IoGetCurrentProcess
KeInitializeTimer
KeInitializeDpc
ObReferenceObjectByHandle
IoIsWdmVersionAvailable
KeClearEvent
_stricmp
KeSetTimerEx
IoAllocateErrorLogEntry
IofCallDriver
IoBuildDeviceIoControlRequest
KeInitializeMutex
KeReleaseMutex
IoCancelIrp
IoFreeIrp
IoAllocateIrp
InterlockedCompareExchange
KeWaitForMultipleObjects
KeInsertQueueDpc
KeRemoveQueueDpc
KeTickCount
KeBugCheckEx
IoGetDeviceProperty
RtlUnwind
KeCancelTimer
ExFreePoolWithTag
ExAllocatePoolWithTag
ZwQueryValueKey
IoGetDeviceInterfaces
ExFreePool
_wcslwr
wcsstr
IoOpenDeviceRegistryKey
strchr
ZwCreateKey
RtlStringFromGUID
RtlFreeUnicodeString
RtlInitUnicodeString
ZwSetValueKey
IoOpenDeviceInterfaceRegistryKey
ZwClose
RtlInitAnsiString
IoWriteErrorLogEntry
KeDelayExecutionThread
RtlAnsiStringToUnicodeString
toupper
_vsnprintf
KeInitializeSpinLock
InterlockedDecrement
InterlockedIncrement
memset
InterlockedExchange
memcpy
PsCreateSystemThread
RtlCompareMemory
hal
KfAcquireSpinLock
KeGetCurrentIrql
KfReleaseSpinLock
KeQueryPerformanceCounter
KeStallExecutionProcessor
ks.sys
KsPinGetReferenceClockInterface
KsInitializeDriver
KsGetDeviceForDeviceObject
KsAcquireDevice
KsCreateFilterFactory
KsReleaseDevice
KsFilterFactoryUpdateCacheData
KsPinGetAndGate
KsPinAttemptProcessing
KsStreamPointerClone
KsStreamPointerDelete
KsPinAcquireProcessingMutex
KsPinReleaseProcessingMutex
KsGetPinFromIrp
KsPinGetParentFilter
KsGetFilterFromIrp
KsGetDevice
_KsEdit
KsPinGetLeadingEdgeStreamPointer
KsStreamPointerAdvance
KsStreamPointerUnlock
usbd.sys
USBD_CreateConfigurationRequestEx
USBD_ParseConfigurationDescriptorEx
bdasup.sys
BdaFilterFactoryUpdateCacheData
BdaValidateNodeProperty
BdaInitFilter
BdaCommitChanges
BdaGetChangeState
BdaCheckChanges
BdaStartChanges
BdaCreateFilterFactoryEx
Sections
.text Size: 93KB - Virtual size: 93KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 54KB - Virtual size: 54KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
INIT Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.reloc Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
Uses of Additional Files/WinAll/BeholdTV/cxpolir.sys.exe windows x86
42c0ab85aed4e3f6e63353e7577f9e01
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_WDM_DRIVER
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
ntoskrnl.exe
wcsstr
_wcslwr
ExFreePool
IoGetDeviceInterfaces
ExFreePoolWithTag
ExAllocatePoolWithTag
KeCancelTimer
KeSetTimerEx
KeInitializeEvent
InterlockedExchange
KeWaitForSingleObject
KeSetEvent
InterlockedDecrement
InterlockedIncrement
KeInitializeTimer
KeInitializeDpc
KeClearEvent
IoWriteErrorLogEntry
IoAllocateErrorLogEntry
IofCompleteRequest
IofCallDriver
IoBuildDeviceIoControlRequest
KeDelayExecutionThread
IoFreeIrp
IoCancelIrp
IoAllocateIrp
KeInitializeMutex
KeReleaseMutex
InterlockedCompareExchange
KeTickCount
KeBugCheckEx
IoGetDeviceProperty
RtlUnwind
RtlStringFromGUID
RtlFreeUnicodeString
RtlInitUnicodeString
ZwSetValueKey
IoOpenDeviceInterfaceRegistryKey
ZwClose
RtlInitAnsiString
RtlAnsiStringToUnicodeString
memcpy
memset
_vsnprintf
hal
KeQueryPerformanceCounter
KeGetCurrentIrql
KeStallExecutionProcessor
ks.sys
KsInitializeDriver
KsGetDeviceForDeviceObject
_KsEdit
KsAcquireDevice
KsCreateFilterFactory
KsReleaseDevice
KsFilterFactoryUpdateCacheData
KsGetFilterFromIrp
KsGetDevice
usbd.sys
USBD_CreateConfigurationRequestEx
USBD_ParseConfigurationDescriptorEx
Sections
.text Size: 14KB - Virtual size: 14KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 256B - Virtual size: 144B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
INIT Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 984B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
Uses of Additional Files/WinAll/BeholdTV/i386/bhkspex.dll.dll regsvr32 windows x86
24ed8993fd619d7b830ee8a6485904da
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
msvcrt
memset
??2@YAPAXI@Z
??3@YAXPAX@Z
sprintf
memcpy
_vsnwprintf
wcsncat
ole32
CoTaskMemAlloc
CoCreateInstance
CoTaskMemFree
StringFromGUID2
comctl32
ImageList_Destroy
ImageList_Create
comdlg32
GetSaveFileNameA
GetOpenFileNameA
user32
GetDesktopWindow
GetWindowRect
LoadStringW
DefWindowProcW
DestroyWindow
InvalidateRect
MoveWindow
CreateDialogParamW
SetWindowLongW
MessageBoxA
SendMessageA
GetWindowLongA
IsDlgButtonChecked
SetTimer
KillTimer
ShowWindow
SetDlgItemTextA
SendDlgItemMessageA
CheckDlgButton
SetDlgItemInt
EnableWindow
GetDlgItem
GetWindowLongW
GetDlgItemInt
kernel32
QueryPerformanceCounter
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcessId
GetSystemTimeAsFileTime
WriteFile
GetTickCount
GetCurrentThreadId
GetCurrentProcess
FreeLibrary
TerminateProcess
InterlockedIncrement
GetModuleFileNameA
GetLastError
WideCharToMultiByte
CloseHandle
ReadFile
GetFileSize
lstrlenA
CreateFileA
GetFileAttributesA
GetVersionExW
DisableThreadLibraryCalls
InterlockedDecrement
lstrlenW
MultiByteToWideChar
advapi32
RegCreateKeyExA
RegDeleteKeyA
RegCloseKey
RegCreateKeyW
RegSetValueW
RegSetValueExW
RegOpenKeyExW
RegEnumKeyExW
RegDeleteKeyW
RegSetValueExA
Exports
Exports
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Sections
.text Size: 60KB - Virtual size: 60KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 19KB - Virtual size: 19KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
Uses of Additional Files/WinAll/BeholdTV/i386/cx2310x.sys.exe windows x86
72758abb4fd59d040b279c65c0752ea7
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_WDM_DRIVER
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
ntoskrnl.exe
KeInitializeEvent
ObfDereferenceObject
KeWaitForSingleObject
KeSetEvent
PsTerminateSystemThread
IofCompleteRequest
ZwQueryInformationFile
ZwCreateFile
ZwReadFile
strncmp
IoGetCurrentProcess
KeInitializeTimer
KeInitializeDpc
ObReferenceObjectByHandle
IoIsWdmVersionAvailable
KeClearEvent
_stricmp
KeSetTimerEx
IoAllocateErrorLogEntry
IofCallDriver
IoBuildDeviceIoControlRequest
KeInitializeMutex
KeReleaseMutex
IoCancelIrp
IoFreeIrp
IoAllocateIrp
InterlockedCompareExchange
KeWaitForMultipleObjects
KeInsertQueueDpc
KeRemoveQueueDpc
KeTickCount
KeBugCheckEx
IoGetDeviceProperty
RtlUnwind
KeCancelTimer
ExFreePoolWithTag
ExAllocatePoolWithTag
ZwQueryValueKey
IoGetDeviceInterfaces
ExFreePool
_wcslwr
wcsstr
IoOpenDeviceRegistryKey
strchr
ZwCreateKey
RtlStringFromGUID
RtlFreeUnicodeString
RtlInitUnicodeString
ZwSetValueKey
IoOpenDeviceInterfaceRegistryKey
ZwClose
RtlInitAnsiString
IoWriteErrorLogEntry
KeDelayExecutionThread
RtlAnsiStringToUnicodeString
toupper
_vsnprintf
KeInitializeSpinLock
InterlockedDecrement
InterlockedIncrement
memset
InterlockedExchange
memcpy
PsCreateSystemThread
RtlCompareMemory
hal
KfAcquireSpinLock
KeGetCurrentIrql
KfReleaseSpinLock
KeQueryPerformanceCounter
KeStallExecutionProcessor
ks.sys
KsPinGetReferenceClockInterface
KsInitializeDriver
KsGetDeviceForDeviceObject
KsAcquireDevice
KsCreateFilterFactory
KsReleaseDevice
KsFilterFactoryUpdateCacheData
KsPinGetAndGate
KsPinAttemptProcessing
KsStreamPointerClone
KsStreamPointerDelete
KsPinAcquireProcessingMutex
KsPinReleaseProcessingMutex
KsGetPinFromIrp
KsPinGetParentFilter
KsGetFilterFromIrp
KsGetDevice
_KsEdit
KsPinGetLeadingEdgeStreamPointer
KsStreamPointerAdvance
KsStreamPointerUnlock
usbd.sys
USBD_CreateConfigurationRequestEx
USBD_ParseConfigurationDescriptorEx
bdasup.sys
BdaFilterFactoryUpdateCacheData
BdaValidateNodeProperty
BdaInitFilter
BdaCommitChanges
BdaGetChangeState
BdaCheckChanges
BdaStartChanges
BdaCreateFilterFactoryEx
Sections
.text Size: 93KB - Virtual size: 93KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 54KB - Virtual size: 54KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
INIT Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.reloc Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
Uses of Additional Files/WinAll/BeholdTV/i386/cxpolir.sys.exe windows x86
42c0ab85aed4e3f6e63353e7577f9e01
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_WDM_DRIVER
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
ntoskrnl.exe
wcsstr
_wcslwr
ExFreePool
IoGetDeviceInterfaces
ExFreePoolWithTag
ExAllocatePoolWithTag
KeCancelTimer
KeSetTimerEx
KeInitializeEvent
InterlockedExchange
KeWaitForSingleObject
KeSetEvent
InterlockedDecrement
InterlockedIncrement
KeInitializeTimer
KeInitializeDpc
KeClearEvent
IoWriteErrorLogEntry
IoAllocateErrorLogEntry
IofCompleteRequest
IofCallDriver
IoBuildDeviceIoControlRequest
KeDelayExecutionThread
IoFreeIrp
IoCancelIrp
IoAllocateIrp
KeInitializeMutex
KeReleaseMutex
InterlockedCompareExchange
KeTickCount
KeBugCheckEx
IoGetDeviceProperty
RtlUnwind
RtlStringFromGUID
RtlFreeUnicodeString
RtlInitUnicodeString
ZwSetValueKey
IoOpenDeviceInterfaceRegistryKey
ZwClose
RtlInitAnsiString
RtlAnsiStringToUnicodeString
memcpy
memset
_vsnprintf
hal
KeQueryPerformanceCounter
KeGetCurrentIrql
KeStallExecutionProcessor
ks.sys
KsInitializeDriver
KsGetDeviceForDeviceObject
_KsEdit
KsAcquireDevice
KsCreateFilterFactory
KsReleaseDevice
KsFilterFactoryUpdateCacheData
KsGetFilterFromIrp
KsGetDevice
usbd.sys
USBD_CreateConfigurationRequestEx
USBD_ParseConfigurationDescriptorEx
Sections
.text Size: 14KB - Virtual size: 14KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 256B - Virtual size: 144B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
INIT Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 984B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
Uses of Additional Files/WinAll/BeholdTV/i386/saa713x.sys.exe windows x86
dccc7d9930f7acdf7504c66ef621047a
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_WDM_DRIVER
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
hal
KeGetCurrentIrql
KeStallExecutionProcessor
KeQueryPerformanceCounter
KfReleaseSpinLock
KfAcquireSpinLock
ntoskrnl.exe
KeRemoveQueueDpc
memmove
KeWaitForMultipleObjects
RtlAnsiStringToUnicodeString
RtlInitAnsiString
ZwClose
RtlDeleteRegistryValue
IoOpenDeviceInterfaceRegistryKey
ZwSetValueKey
RtlInitUnicodeString
RtlFreeUnicodeString
RtlStringFromGUID
ZwCreateKey
strchr
IoOpenDeviceRegistryKey
wcsstr
KeSetEvent
ExFreePool
IoGetDeviceInterfaces
KeInitializeDpc
ZwQueryValueKey
KeSetTimer
KeCancelTimer
KeSetTimerEx
KeInitializeTimer
PsTerminateSystemThread
ObReferenceObjectByHandle
PsCreateSystemThread
ZwQueryInformationFile
ZwCreateFile
ZwReadFile
strncmp
IoGetCurrentProcess
_stricmp
IoWriteErrorLogEntry
IoAllocateErrorLogEntry
KeTickCount
KeBugCheckEx
KeClearEvent
RtlUnwind
KeInsertQueueDpc
KeSynchronizeExecution
WRITE_REGISTER_UCHAR
WRITE_REGISTER_USHORT
WRITE_REGISTER_ULONG
READ_REGISTER_UCHAR
READ_REGISTER_USHORT
READ_REGISTER_ULONG
ExAllocatePoolWithTag
ExFreePoolWithTag
IoIsWdmVersionAvailable
IoGetDeviceProperty
IoGetDmaAdapter
IoGetAttachedDeviceReference
IoBuildSynchronousFsdRequest
ObfDereferenceObject
IofCallDriver
MmUnmapIoSpace
MmMapIoSpace
IofCompleteRequest
KeReleaseMutex
KeWaitForSingleObject
KeInitializeMutex
_vsnprintf
KeInitializeSpinLock
KeInitializeEvent
memcpy
RtlCompareMemory
memset
InterlockedDecrement
InterlockedIncrement
KeDelayExecutionThread
InterlockedExchange
_wcslwr
MmGetSystemRoutineAddress
IoConnectInterrupt
IoDisconnectInterrupt
KeQueryActiveProcessors
ks.sys
KsAcquireDevice
KsCreateFilterFactory
KsReleaseDevice
KsFilterFactoryUpdateCacheData
KsDeviceRegisterAdapterObject
KsGetOuterUnknown
KsInitializeDriver
KsGetDeviceForDeviceObject
KsStreamPointerClone
KsPinAcquireProcessingMutex
KsPinReleaseProcessingMutex
KsStreamPointerDelete
KsPinGetParentFilter
KsGetFilterFromIrp
KsGetDevice
KsPinGetAndGate
KsPinAttemptProcessing
KsGetPinFromIrp
KsPinGetLeadingEdgeStreamPointer
KsStreamPointerAdvance
KsStreamPointerUnlock
_KsEdit
KsPinGetReferenceClockInterface
bdasup.sys
BdaValidateNodeProperty
BdaInitFilter
BdaCreateFilterFactoryEx
BdaCommitChanges
BdaGetChangeState
BdaCheckChanges
BdaStartChanges
BdaFilterFactoryUpdateCacheData
Sections
.text Size: 172KB - Virtual size: 172KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 103KB - Virtual size: 103KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
PAGE Size: 512B - Virtual size: 416B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
INIT Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.reloc Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
Uses of Additional Files/WinAll/BeholdTV/i386/saa7231.sys.exe windows x86
4e6dd13ddad7dd7d1927110593fdd162
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_WDM_DRIVER
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
ntoskrnl.exe
ZwQueryValueKey
KeInitializeSpinLock
IoGetDeviceInterfaces
KeSetTimer
KeCancelTimer
KeSetTimerEx
KeSetEvent
PsTerminateSystemThread
ExFreePool
ZwQueryInformationFile
ZwCreateFile
ZwReadFile
KeInitializeTimer
_wcslwr
ObReferenceObjectByHandle
PsCreateSystemThread
KeClearEvent
IoWriteErrorLogEntry
IoAllocateErrorLogEntry
MmMapIoSpace
KeRemoveQueueDpc
KeInsertQueueDpc
READ_REGISTER_ULONG
WRITE_REGISTER_ULONG
MmUnmapIoSpace
KeInitializeMutex
KeReleaseMutex
KeSynchronizeExecution
KeWaitForMultipleObjects
KeTickCount
KeBugCheckEx
wcsstr
RtlUnwind
IoOpenDeviceRegistryKey
strchr
ZwCreateKey
RtlStringFromGUID
RtlFreeUnicodeString
RtlInitUnicodeString
ZwSetValueKey
IoOpenDeviceInterfaceRegistryKey
ZwClose
RtlInitAnsiString
RtlAnsiStringToUnicodeString
ExAllocatePoolWithTag
ExFreePoolWithTag
IofCompleteRequest
IoIsWdmVersionAvailable
IoGetDmaAdapter
IoGetDeviceProperty
KeDelayExecutionThread
_vsnprintf
InterlockedDecrement
InterlockedIncrement
IoGetAttachedDeviceReference
IoBuildSynchronousFsdRequest
KeInitializeEvent
ObfDereferenceObject
IofCallDriver
KeWaitForSingleObject
InterlockedCompareExchange
memset
InterlockedExchange
memcpy
KeInitializeDpc
RtlCompareMemory
MmGetSystemRoutineAddress
IoConnectInterrupt
IoDisconnectInterrupt
KeQueryActiveProcessors
hal
KfAcquireSpinLock
KeQueryPerformanceCounter
KfReleaseSpinLock
KeGetCurrentIrql
KeStallExecutionProcessor
ks.sys
KsReleaseDevice
KsFilterFactoryUpdateCacheData
KsCreateFilterFactory
KsGetOuterUnknown
KsStreamPointerClone
KsStreamPointerDelete
KsPinAcquireProcessingMutex
KsPinReleaseProcessingMutex
KsAcquireDevice
KsPinAttemptProcessing
KsGetPinFromIrp
KsPinGetParentFilter
KsGetFilterFromIrp
KsGetDevice
KsPinGetReferenceClockInterface
_KsEdit
KsReleaseControl
KsAcquireControl
KsPinGetLeadingEdgeStreamPointer
KsStreamPointerAdvance
KsStreamPointerUnlock
KsDeviceRegisterAdapterObject
KsInitializeDriver
KsGetDeviceForDeviceObject
KsPinGetAndGate
bdasup.sys
BdaInitFilter
BdaCommitChanges
BdaGetChangeState
BdaCheckChanges
BdaStartChanges
BdaCreateFilterFactoryEx
BdaFilterFactoryUpdateCacheData
BdaValidateNodeProperty
Sections
.text Size: 119KB - Virtual size: 119KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 74KB - Virtual size: 74KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
PAGE Size: 512B - Virtual size: 416B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
INIT Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.reloc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
Uses of Additional Files/WinAll/BeholdTV/i386/ttm6010.sys.exe windows x86
1e8df125497f0e9c4f965b821e5f1dcb
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_WDM_DRIVER
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
ntoskrnl.exe
_wcslwr
ExFreePool
IoGetDeviceInterfaces
ZwQueryValueKey
KeSetEvent
KeReleaseMutex
KeSetTimer
KeCancelTimer
ObfDereferenceObject
PsTerminateSystemThread
KeWaitForSingleObject
ZwQueryInformationFile
strncmp
KeInitializeMutex
KeInitializeTimer
KeInitializeDpc
wcsstr
PsCreateSystemThread
_stricmp
IoWriteErrorLogEntry
IoAllocateErrorLogEntry
IofCallDriver
IoBuildDeviceIoControlRequest
IoCancelIrp
memmove
IoAllocateIrp
IoFreeIrp
KeInsertQueueDpc
KeRemoveQueueDpc
KeTickCount
KeBugCheckEx
IoIsWdmVersionAvailable
RtlUnwind
IoOpenDeviceRegistryKey
strchr
ZwCreateKey
RtlStringFromGUID
RtlFreeUnicodeString
ZwSetValueKey
IoOpenDeviceInterfaceRegistryKey
RtlInitAnsiString
RtlAnsiStringToUnicodeString
ExAllocatePoolWithTag
ExFreePoolWithTag
IofCompleteRequest
KeClearEvent
KeWaitForMultipleObjects
ZwWriteFile
KeInitializeEvent
RtlInitUnicodeString
ZwCreateFile
ZwReadFile
ObReferenceObjectByHandle
ZwClose
IoGetDeviceProperty
KeDelayExecutionThread
toupper
_vsnprintf
KeInitializeSpinLock
InterlockedDecrement
InterlockedIncrement
memset
InterlockedExchange
memcpy
IoGetCurrentProcess
RtlCompareMemory
hal
KeStallExecutionProcessor
KfReleaseSpinLock
KeGetCurrentIrql
KfAcquireSpinLock
ks.sys
KsInitializeDriver
KsGetDeviceForDeviceObject
KsAcquireDevice
KsCreateFilterFactory
KsReleaseDevice
KsFilterFactoryUpdateCacheData
KsPinGetAndGate
KsPinAttemptProcessing
KsStreamPointerClone
KsStreamPointerDelete
KsPinAcquireProcessingMutex
KsPinReleaseProcessingMutex
KsGetPinFromIrp
KsPinGetParentFilter
KsGetFilterFromIrp
KsGetDevice
_KsEdit
KsPinGetLeadingEdgeStreamPointer
KsStreamPointerAdvance
KsStreamPointerUnlock
KsPinGetReferenceClockInterface
usbd.sys
USBD_ParseConfigurationDescriptorEx
USBD_CreateConfigurationRequestEx
bdasup.sys
BdaFilterFactoryUpdateCacheData
BdaValidateNodeProperty
BdaGetChangeState
BdaCommitChanges
BdaCheckChanges
BdaStartChanges
BdaInitFilter
BdaCreateFilterFactoryEx
Sections
.text Size: 68KB - Virtual size: 68KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 44KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
INIT Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.reloc Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
Uses of Additional Files/WinAll/BeholdTV/install.x64.exe windows x64
5292520ce02adff7057028b73fd61d03
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
mfc42
ord4087
ord3173
ord4381
ord4992
ord4779
ord3926
ord659
ord1063
ord318
ord5645
ord622
ord834
ord2529
ord2858
ord5639
ord1469
ord2407
ord6448
ord4375
ord1792
ord4761
ord5670
ord2413
ord5595
ord6818
ord4703
ord5719
ord4027
ord5238
ord4798
ord2682
ord2074
ord6820
ord3943
ord5493
ord1749
ord5690
ord2471
ord2154
ord4093
ord3544
ord4997
ord3904
ord665
ord1035
ord2598
ord4750
ord3753
ord822
ord3784
ord867
ord1447
ord3877
ord996
ord5694
ord4730
ord5254
ord5415
ord6445
ord1791
ord5709
ord4780
ord3771
ord852
ord2343
ord4567
ord2673
ord6622
ord2677
ord4558
ord5086
ord984
ord525
ord4434
ord337
ord6620
ord6824
ord1595
ord4092
ord3055
ord3175
ord3061
ord3375
ord3240
ord4824
ord3371
ord3252
ord3058
ord6060
ord5718
ord5737
ord5074
ord4378
ord2764
ord5731
ord5729
ord3477
ord2426
ord5624
ord1392
ord4201
ord6078
ord2527
ord2571
ord4845
ord6819
ord4608
ord5048
ord1265
ord1263
ord1122
ord5611
ord3449
ord5814
ord1991
ord286
ord5912
ord371
ord4008
ord6560
ord877
ord6890
ord4483
ord367
ord626
ord1124
ord1040
ord3790
ord3231
ord5993
ord6891
ord3840
ord5706
ord1585
msvcrt
sprintf
memset
strncpy
strstr
_strupr
_stricmp
_purecall
__C_specific_handler
_XcptFilter
_c_exit
_exit
_cexit
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_commode
_fmode
__set_app_type
??1type_info@@UEAA@XZ
__dllonexit
_onexit
?terminate@@YAXXZ
_strnicmp
__CxxFrameHandler
_setmbcp
advapi32
ControlService
LookupPrivilegeValueA
FreeSid
EqualSid
AllocateAndInitializeSid
GetTokenInformation
OpenProcessToken
RegCloseKey
RegSetValueExA
RegCreateKeyExA
OpenSCManagerA
OpenServiceA
QueryServiceStatus
AdjustTokenPrivileges
CloseServiceHandle
RegOpenKeyExA
RegDeleteKeyA
kernel32
CloseHandle
GetLastError
GetCurrentProcess
SetLastError
FindClose
FindFirstFileA
GetProcAddress
GetModuleHandleA
lstrlenA
GetModuleFileNameA
GetWindowsDirectoryA
MoveFileExA
GetTempFileNameA
GetTempPathA
Sleep
WaitForSingleObject
CreateProcessA
FindNextFileA
GetSystemDirectoryA
FreeLibrary
LoadLibraryA
GetVersionExA
GetTickCount
GetFullPathNameA
QueryPerformanceCounter
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
GetStartupInfoA
CopyFileA
user32
TranslateMessage
DispatchMessageA
PeekMessageA
ExitWindowsEx
GetSystemMetrics
LoadIconA
EnableWindow
SetForegroundWindow
GetClientRect
IsIconic
SendMessageA
DrawIcon
FindWindowA
PostMessageA
MessageBoxA
setupapi
SetupDiGetDeviceInstallParamsA
SetupDiEnumDeviceInfo
SetupDiOpenDevRegKey
SetupDiGetDeviceRegistryPropertyA
SetupDiRemoveDevice
SetupDiDestroyDeviceInfoList
SetupDiGetClassDevsA
shell32
SHBrowseForFolderA
SHGetMalloc
SHGetPathFromIDListA
Sections
.text Size: 44KB - Virtual size: 44KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 16KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 19KB - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
Uses of Additional Files/WinAll/BeholdTV/saa713x.sys.exe windows x86
dccc7d9930f7acdf7504c66ef621047a
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_WDM_DRIVER
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
hal
KeGetCurrentIrql
KeStallExecutionProcessor
KeQueryPerformanceCounter
KfReleaseSpinLock
KfAcquireSpinLock
ntoskrnl.exe
KeRemoveQueueDpc
memmove
KeWaitForMultipleObjects
RtlAnsiStringToUnicodeString
RtlInitAnsiString
ZwClose
RtlDeleteRegistryValue
IoOpenDeviceInterfaceRegistryKey
ZwSetValueKey
RtlInitUnicodeString
RtlFreeUnicodeString
RtlStringFromGUID
ZwCreateKey
strchr
IoOpenDeviceRegistryKey
wcsstr
KeSetEvent
ExFreePool
IoGetDeviceInterfaces
KeInitializeDpc
ZwQueryValueKey
KeSetTimer
KeCancelTimer
KeSetTimerEx
KeInitializeTimer
PsTerminateSystemThread
ObReferenceObjectByHandle
PsCreateSystemThread
ZwQueryInformationFile
ZwCreateFile
ZwReadFile
strncmp
IoGetCurrentProcess
_stricmp
IoWriteErrorLogEntry
IoAllocateErrorLogEntry
KeTickCount
KeBugCheckEx
KeClearEvent
RtlUnwind
KeInsertQueueDpc
KeSynchronizeExecution
WRITE_REGISTER_UCHAR
WRITE_REGISTER_USHORT
WRITE_REGISTER_ULONG
READ_REGISTER_UCHAR
READ_REGISTER_USHORT
READ_REGISTER_ULONG
ExAllocatePoolWithTag
ExFreePoolWithTag
IoIsWdmVersionAvailable
IoGetDeviceProperty
IoGetDmaAdapter
IoGetAttachedDeviceReference
IoBuildSynchronousFsdRequest
ObfDereferenceObject
IofCallDriver
MmUnmapIoSpace
MmMapIoSpace
IofCompleteRequest
KeReleaseMutex
KeWaitForSingleObject
KeInitializeMutex
_vsnprintf
KeInitializeSpinLock
KeInitializeEvent
memcpy
RtlCompareMemory
memset
InterlockedDecrement
InterlockedIncrement
KeDelayExecutionThread
InterlockedExchange
_wcslwr
MmGetSystemRoutineAddress
IoConnectInterrupt
IoDisconnectInterrupt
KeQueryActiveProcessors
ks.sys
KsAcquireDevice
KsCreateFilterFactory
KsReleaseDevice
KsFilterFactoryUpdateCacheData
KsDeviceRegisterAdapterObject
KsGetOuterUnknown
KsInitializeDriver
KsGetDeviceForDeviceObject
KsStreamPointerClone
KsPinAcquireProcessingMutex
KsPinReleaseProcessingMutex
KsStreamPointerDelete
KsPinGetParentFilter
KsGetFilterFromIrp
KsGetDevice
KsPinGetAndGate
KsPinAttemptProcessing
KsGetPinFromIrp
KsPinGetLeadingEdgeStreamPointer
KsStreamPointerAdvance
KsStreamPointerUnlock
_KsEdit
KsPinGetReferenceClockInterface
bdasup.sys
BdaValidateNodeProperty
BdaInitFilter
BdaCreateFilterFactoryEx
BdaCommitChanges
BdaGetChangeState
BdaCheckChanges
BdaStartChanges
BdaFilterFactoryUpdateCacheData
Sections
.text Size: 172KB - Virtual size: 172KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 103KB - Virtual size: 103KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
PAGE Size: 512B - Virtual size: 416B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
INIT Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.reloc Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
Uses of Additional Files/WinAll/BeholdTV/saa7231.sys.exe windows x86
4e6dd13ddad7dd7d1927110593fdd162
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_WDM_DRIVER
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
ntoskrnl.exe
ZwQueryValueKey
KeInitializeSpinLock
IoGetDeviceInterfaces
KeSetTimer
KeCancelTimer
KeSetTimerEx
KeSetEvent
PsTerminateSystemThread
ExFreePool
ZwQueryInformationFile
ZwCreateFile
ZwReadFile
KeInitializeTimer
_wcslwr
ObReferenceObjectByHandle
PsCreateSystemThread
KeClearEvent
IoWriteErrorLogEntry
IoAllocateErrorLogEntry
MmMapIoSpace
KeRemoveQueueDpc
KeInsertQueueDpc
READ_REGISTER_ULONG
WRITE_REGISTER_ULONG
MmUnmapIoSpace
KeInitializeMutex
KeReleaseMutex
KeSynchronizeExecution
KeWaitForMultipleObjects
KeTickCount
KeBugCheckEx
wcsstr
RtlUnwind
IoOpenDeviceRegistryKey
strchr
ZwCreateKey
RtlStringFromGUID
RtlFreeUnicodeString
RtlInitUnicodeString
ZwSetValueKey
IoOpenDeviceInterfaceRegistryKey
ZwClose
RtlInitAnsiString
RtlAnsiStringToUnicodeString
ExAllocatePoolWithTag
ExFreePoolWithTag
IofCompleteRequest
IoIsWdmVersionAvailable
IoGetDmaAdapter
IoGetDeviceProperty
KeDelayExecutionThread
_vsnprintf
InterlockedDecrement
InterlockedIncrement
IoGetAttachedDeviceReference
IoBuildSynchronousFsdRequest
KeInitializeEvent
ObfDereferenceObject
IofCallDriver
KeWaitForSingleObject
InterlockedCompareExchange
memset
InterlockedExchange
memcpy
KeInitializeDpc
RtlCompareMemory
MmGetSystemRoutineAddress
IoConnectInterrupt
IoDisconnectInterrupt
KeQueryActiveProcessors
hal
KfAcquireSpinLock
KeQueryPerformanceCounter
KfReleaseSpinLock
KeGetCurrentIrql
KeStallExecutionProcessor
ks.sys
KsReleaseDevice
KsFilterFactoryUpdateCacheData
KsCreateFilterFactory
KsGetOuterUnknown
KsStreamPointerClone
KsStreamPointerDelete
KsPinAcquireProcessingMutex
KsPinReleaseProcessingMutex
KsAcquireDevice
KsPinAttemptProcessing
KsGetPinFromIrp
KsPinGetParentFilter
KsGetFilterFromIrp
KsGetDevice
KsPinGetReferenceClockInterface
_KsEdit
KsReleaseControl
KsAcquireControl
KsPinGetLeadingEdgeStreamPointer
KsStreamPointerAdvance
KsStreamPointerUnlock
KsDeviceRegisterAdapterObject
KsInitializeDriver
KsGetDeviceForDeviceObject
KsPinGetAndGate
bdasup.sys
BdaInitFilter
BdaCommitChanges
BdaGetChangeState
BdaCheckChanges
BdaStartChanges
BdaCreateFilterFactoryEx
BdaFilterFactoryUpdateCacheData
BdaValidateNodeProperty
Sections
.text Size: 119KB - Virtual size: 119KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 74KB - Virtual size: 74KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
PAGE Size: 512B - Virtual size: 416B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
INIT Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.reloc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
Uses of Additional Files/WinAll/BeholdTV/ttm6010.sys.exe windows x86
1e8df125497f0e9c4f965b821e5f1dcb
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_WDM_DRIVER
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
ntoskrnl.exe
_wcslwr
ExFreePool
IoGetDeviceInterfaces
ZwQueryValueKey
KeSetEvent
KeReleaseMutex
KeSetTimer
KeCancelTimer
ObfDereferenceObject
PsTerminateSystemThread
KeWaitForSingleObject
ZwQueryInformationFile
strncmp
KeInitializeMutex
KeInitializeTimer
KeInitializeDpc
wcsstr
PsCreateSystemThread
_stricmp
IoWriteErrorLogEntry
IoAllocateErrorLogEntry
IofCallDriver
IoBuildDeviceIoControlRequest
IoCancelIrp
memmove
IoAllocateIrp
IoFreeIrp
KeInsertQueueDpc
KeRemoveQueueDpc
KeTickCount
KeBugCheckEx
IoIsWdmVersionAvailable
RtlUnwind
IoOpenDeviceRegistryKey
strchr
ZwCreateKey
RtlStringFromGUID
RtlFreeUnicodeString
ZwSetValueKey
IoOpenDeviceInterfaceRegistryKey
RtlInitAnsiString
RtlAnsiStringToUnicodeString
ExAllocatePoolWithTag
ExFreePoolWithTag
IofCompleteRequest
KeClearEvent
KeWaitForMultipleObjects
ZwWriteFile
KeInitializeEvent
RtlInitUnicodeString
ZwCreateFile
ZwReadFile
ObReferenceObjectByHandle
ZwClose
IoGetDeviceProperty
KeDelayExecutionThread
toupper
_vsnprintf
KeInitializeSpinLock
InterlockedDecrement
InterlockedIncrement
memset
InterlockedExchange
memcpy
IoGetCurrentProcess
RtlCompareMemory
hal
KeStallExecutionProcessor
KfReleaseSpinLock
KeGetCurrentIrql
KfAcquireSpinLock
ks.sys
KsInitializeDriver
KsGetDeviceForDeviceObject
KsAcquireDevice
KsCreateFilterFactory
KsReleaseDevice
KsFilterFactoryUpdateCacheData
KsPinGetAndGate
KsPinAttemptProcessing
KsStreamPointerClone
KsStreamPointerDelete
KsPinAcquireProcessingMutex
KsPinReleaseProcessingMutex
KsGetPinFromIrp
KsPinGetParentFilter
KsGetFilterFromIrp
KsGetDevice
_KsEdit
KsPinGetLeadingEdgeStreamPointer
KsStreamPointerAdvance
KsStreamPointerUnlock
KsPinGetReferenceClockInterface
usbd.sys
USBD_ParseConfigurationDescriptorEx
USBD_CreateConfigurationRequestEx
bdasup.sys
BdaFilterFactoryUpdateCacheData
BdaValidateNodeProperty
BdaGetChangeState
BdaCommitChanges
BdaCheckChanges
BdaStartChanges
BdaInitFilter
BdaCreateFilterFactoryEx
Sections
.text Size: 68KB - Virtual size: 68KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 44KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
INIT Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.reloc Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
Readme.txt