SanicBall_w32[.]zip

Sharing

Copy URL

Twitter E-mail

General

Target

SanicBall_w32.zip
Size

203.1MB
MD5

0a1f71384eecf942483084d47e932344
SHA1

127e2a109c6898e587ecf5a5e390692a584a57e2
SHA256

99f85b6ed0ef6aabfa64727992c2d6dc3564dc49ebdb4a11a9647aeb32067544
SHA512

badf9fcc1470d8b83eb497e5e292da54e6556e2127da15d168ad73c525f32929ae447a0be58e8cecccfea3b8c7b13e6ad84793cf6282d5b8b0db81aff6aa870c
SSDEEP

6291456:hAvlvMLa1YKWl31trcCuL4kGwch2QSbbXF5odNNRz:hmvMnK4du7GwccQQXF5oD3z

Score

3^/10

Malware Config

Signatures

Unsigned PE 26 IoCs

Checks for missing Authenticode signature.

resource
unpack001/lib/_hashlib.pyd
unpack001/lib/_win32sysloader.pyd
unpack001/lib/bz2.pyd
unpack001/lib/data0
unpack001/lib/data_Data/Managed/Assembly-CSharp-firstpass.dll
unpack001/lib/data_Data/Managed/Assembly-CSharp.dll
unpack001/lib/data_Data/Managed/Assembly-UnityScript-firstpass.dll
unpack001/lib/data_Data/Managed/Boo.Lang.dll
unpack001/lib/data_Data/Managed/Mono.Security.dll
unpack001/lib/data_Data/Managed/System.Core.dll
unpack001/lib/data_Data/Managed/System.dll
unpack001/lib/data_Data/Managed/UnityEngine.dll
unpack001/lib/data_Data/Managed/mscorlib.dll
unpack001/lib/data_Data/Mono/mono.dll
unpack001/lib/distutils/command/wininst-6.0.exe
unpack001/lib/distutils/command/wininst-7.1.exe
unpack001/lib/distutils/command/wininst-8.0.exe
unpack001/lib/distutils/command/wininst-9.0-amd64.exe
unpack001/lib/distutils/command/wininst-9.0.exe
unpack001/lib/mainlibr.dll
unpack001/lib/pywintypes27.dll
unpack001/lib/select.pyd
unpack001/lib/unicodedata.pyd
unpack001/lib/win32api.pyd
unpack001/mainlibr.dll
unpack001/sanicball.exe

Files

SanicBall_w32.zip
.zip
lib/_hashlib.pyd
.dll windows x86

c8c2cee07fc4b85f3be9974252fc031b

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FreeLibrary
QueryPerformanceCounter
GetTickCount
LoadLibraryA
CloseHandle
GetCurrentProcessId
GlobalMemoryStatus
Sleep
GetSystemTimeAsFileTime
DisableThreadLibraryCalls
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetVersion
GetCurrentThreadId
GetModuleHandleA
GetFileType
GetLastError
GetProcAddress
GetStdHandle
MultiByteToWideChar
FlushConsoleInputBuffer
WriteFile
GetCurrentProcess
TerminateProcess
InterlockedCompareExchange
InterlockedExchange

user32

MessageBoxA
GetProcessWindowStation
ReleaseDC
GetDC
GetUserObjectInformationW

gdi32

GetDIBits
DeleteObject
CreateCompatibleBitmap
GetObjectA
GetDeviceCaps

advapi32

DeregisterEventSource
RegisterEventSourceA
ReportEventA

mainlibr

PyFrozenSet_New
PyLong_FromLong
PyLong_AsLong
PyErr_SetString
_PyArg_ParseTupleAndKeywords_SizeT
PyObject_Free
PyErr_Occurred
PyExc_ValueError
PyOS_snprintf
PyEval_SaveThread
_Py_NoneStruct
_PyArg_ParseTuple_SizeT
PyType_Type
PyEval_RestoreThread
PyType_Ready
PyThread_allocate_lock
PySet_Add
PyErr_NoMemory
PyThread_acquire_lock
PyString_AsString
PyString_FromStringAndSize
_PyArg_Parse_SizeT
PyBuffer_Release
PyThread_free_lock
_PyObject_New
PyString_FromString
PyErr_Format
PyModule_AddObject
PyExc_TypeError
Py_InitModule4
PyThread_release_lock
PyExc_OverflowError

msvcr90

memcpy
_except_handler4_common
_onexit
_lock
__dllonexit
_unlock
__clean_type_info_names_internal
_crt_debugger_hook
__CppXcptFilter
_adjust_fdiv
_amsg_exit
_initterm_e
_initterm
_decode_pointer
_encoded_null
_malloc_crt
_encode_pointer
_getch
fprintf
signal
fputs
strstr
sprintf
_gmtime64_s
strrchr
strtol
isupper
tolower
strerror
strchr
strncpy
qsort
strcmp
sscanf
raise
__iob_func
_exit
wcsstr
_vsnprintf
strtoul
getenv
free
malloc
realloc
isspace
isalnum
isdigit
_localtime64
_time64
atoi
isxdigit
feof
fflush
_wfopen
_errno
fgets
fopen
fread
_fileno
ferror
fwrite
_setmode
ftell
fseek
fclose
memmove
_strnicmp
strncmp
memchr
memset

Exports

Exports

init_hashlib

Sections

.text
Size: 795KB - Virtual size: 795KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 216KB - Virtual size: 215KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 21KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 42KB - Virtual size: 42KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
lib/_win32sysloader.pyd
.dll windows x86

ee1ecf7625cac98e2e0b4acf875dd2a1

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mainlibr

Py_InitModule4
PyArg_ParseTuple
_Py_NoneStruct
PyString_FromString

msvcr90

__dllonexit
_onexit
_except_handler4_common
_crt_debugger_hook
_unlock
__clean_type_info_names_internal
__CppXcptFilter
_adjust_fdiv
_amsg_exit
_initterm_e
_initterm
_decode_pointer
_encoded_null
free
_malloc_crt
_encode_pointer
_lock

kernel32

IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
DisableThreadLibraryCalls
InterlockedCompareExchange
Sleep
InterlockedExchange
LoadLibraryA
GetModuleHandleA
GetModuleFileNameA
TerminateProcess

Exports

Exports

init_win32sysloader

Sections

.text
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 916B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 584B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 402B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
lib/bz2.pyd
.dll windows x86

a2dad90cffe0296243fc0b82eb823efc

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mainlibr

PyThread_release_lock
Py_InitModule4
PyObject_GetAttrString
PyFile_AsFile
PyExc_TypeError
PyModule_AddObject
PyErr_Format
PyMem_Malloc
PyExc_RuntimeError
PyType_GenericNew
PyList_New
_PyString_Resize
PyLong_AsLongLong
PyObject_AsCharBuffer
PyFile_DecUseCount
PyFile_Type
PyArg_ParseTupleAndKeywords
PyType_GenericAlloc
PyObject_CallMethod
PyErr_SetString
PyObject_Free
PyObject_GetIter
PyExc_EOFError
PyErr_Occurred
PyExc_ValueError
PyExc_MemoryError
PyArg_ParseTuple
PyEval_SaveThread
PyMem_Free
_Py_NoneStruct
PyFile_IncUseCount
PyExc_OverflowError
PyLong_FromLongLong
PyIter_Next
PyList_SetItem
PyEval_RestoreThread
PyList_GetSlice
PyObject_CallFunction
PyType_Ready
PyThread_allocate_lock
PyErr_NoMemory
PyThread_acquire_lock
PyObject_GenericSetAttr
PyObject_GenericGetAttr
PyInt_AsLong
PyString_FromStringAndSize
Py_BuildValue
PyBuffer_Release
PyExc_SystemError
PyInt_FromLong
PyString_Concat
PyExc_IOError
PyThread_free_lock
PyList_Append
PyString_FromString

msvcr90

_fdopen
_setmode
memcpy
_fileno
_except_handler4_common
_onexit
_lock
__dllonexit
_unlock
__clean_type_info_names_internal
_crt_debugger_hook
__CppXcptFilter
_adjust_fdiv
_amsg_exit
_initterm_e
_initterm
_decode_pointer
_encoded_null
_malloc_crt
_encode_pointer
exit
fclose
fwrite
ferror
isdigit
fread
fopen
fgetc
fflush
ungetc
malloc
free
fprintf
__iob_func
memchr
memmove
memset

kernel32

QueryPerformanceCounter
Sleep
InterlockedCompareExchange
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
InterlockedExchange
DisableThreadLibraryCalls
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess

Exports

Exports

initbz2

Sections

.text
Size: 49KB - Virtual size: 49KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
lib/data0
.exe windows x86

d95d6ea9375a00177f1911909ce801e6

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Imports

hid

HidP_GetButtonCaps
HidP_GetCaps
HidD_GetProductString
HidP_GetValueCaps
HidP_MaxDataListLength
HidP_GetData
HidD_GetPreparsedData
HidD_FreePreparsedData
HidD_GetHidGuid

ws2_32

htonl
inet_addr
closesocket
WSACleanup
getsockname
connect
gethostbyname
htons
WSAStartup
WSAAsyncGetHostByName
WSACancelAsyncRequest
gethostbyaddr
getaddrinfo
freeaddrinfo
getpeername
getsockopt
send
recv
shutdown
listen
accept
ntohs
bind
recvfrom
sendto
__WSAFDIsSet
WSASetLastError
select
setsockopt
inet_ntoa
ioctlsocket
gethostname
socket
WSAGetLastError

kernel32

WriteFile
FindClose
DeleteFileW
RemoveDirectoryW
FindNextFileW
FindFirstFileW
GetModuleFileNameW
lstrcpynA
lstrcpyA
lstrcpynW
FreeLibrary
GetCommandLineW
GetProcAddress
LoadLibraryW
CancelIo
GetOverlappedResult
CreateEventW
ExpandEnvironmentStringsA
CreateMutexA
GetCurrentThreadId
RaiseException
GetCurrentProcess
GetModuleHandleA
GetSystemInfo
GlobalMemoryStatusEx
GetUserDefaultLangID
GetVersionExA
GetComputerNameW
LoadLibraryA
GetTempPathW
GetModuleHandleW
GetCurrentProcessId
SetUnhandledExceptionFilter
WaitForSingleObject
CreateThread
OutputDebugStringA
SetLastError
GetEnvironmentVariableA
GetFileAttributesA
GetModuleFileNameA
GetCurrentDirectoryA
ResumeThread
GetThreadContext
SuspendThread
GetCurrentThread
IsBadReadPtr
GetWindowsDirectoryA
GetFullPathNameW
CreateSemaphoreA
Sleep
WaitForSingleObjectEx
ReleaseSemaphore
InterlockedCompareExchange
SleepEx
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
TryEnterCriticalSection
SetThreadPriority
CreateEventA
GlobalAlloc
SetEvent
ResetEvent
FileTimeToDosDateTime
FileTimeToLocalFileTime
lstrlenA
GetFileTime
VirtualQuery
GlobalMemoryStatus
GetSystemTimeAsFileTime
MoveFileExW
CreateDirectoryW
SetErrorMode
WritePrivateProfileStringW
HeapAlloc
HeapReAlloc
HeapFree
RtlUnwind
EncodePointer
DecodePointer
ExitProcess
SetConsoleCtrlHandler
ExitThread
DuplicateHandle
GetCommandLineA
HeapSetInformation
GetStartupInfoW
GetStdHandle
HeapCreate
IsProcessorFeaturePresent
InterlockedIncrement
InterlockedDecrement
HeapSize
GetLocaleInfoW
UnhandledExceptionFilter
TerminateProcess
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
InitializeCriticalSectionAndSpinCount
InterlockedExchange
GetConsoleCP
GetConsoleMode
FlushFileBuffers
SetHandleCount
GetFileType
SetStdHandle
LCMapStringW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetTickCount
GetStringTypeW
GetUserDefaultLCID
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale
CompareStringW
SetEnvironmentVariableA
CreateFileA
WriteConsoleW
GetProcessHeap
GetFullPathNameA
lstrcmpiA
MapViewOfFile
CreateFileMappingA
UnmapViewOfFile
VirtualFree
VirtualAlloc
GetProcessAffinityMask
OpenEventA
GetSystemDirectoryA
GetDateFormatA
GetTimeFormatA
CreateSemaphoreW
CreateMutexW
SignalObjectAndWait
ReleaseMutex
FlushConsoleInputBuffer
GetVersion
GetFileAttributesW
CreateProcessW
SetFileAttributesW
GlobalLock
GlobalUnlock
GetFileSize
ReadFile
CreateFileW
SetEndOfFile
SetFilePointer
CloseHandle
IsDebuggerPresent
WideCharToMultiByte
FormatMessageA
LocalFree
MultiByteToWideChar
QueryPerformanceCounter
QueryPerformanceFrequency
GetLastError
TlsSetValue
TlsGetValue
TlsFree
TlsAlloc
InterlockedExchangeAdd
FileTimeToSystemTime
GetFileInformationByHandle
PeekNamedPipe
GetDriveTypeA
FindFirstFileExA
GetTimeZoneInformation
ReadConsoleInputA
SetConsoleMode
GetCurrentDirectoryW
GetDriveTypeW
WaitForMultipleObjects
TerminateThread
SetThreadAffinityMask
HeapValidate
CopyFileW
HeapWalk

user32

EnumWindows
SendMessageA
SetForegroundWindow
ShowWindow
IsIconic
RegisterWindowMessageA
GetUserObjectInformationA
GetThreadDesktop
GetParent
SendMessageTimeoutA
GetWindowLongA
SetWindowPos
GetClientRect
CreateDialogParamA
SetWindowLongA
GetDlgItem
ChangeDisplaySettingsA
GetWindowPlacement
AdjustWindowRectEx
EnumDisplaySettingsA
GetDesktopWindow
UnregisterClassW
GetRawInputDeviceList
GetRawInputDeviceInfoW
GetRawInputData
RegisterRawInputDevices
wsprintfA
GetCursorPos
GetWindowRect
OpenClipboard
EmptyClipboard
CloseClipboard
SetClipboardData
CreateWindowExW
DestroyWindow
OffsetRect
DefWindowProcW
DestroyCursor
LoadCursorA
SetCursor
GetSystemMetrics
GetDC
ReleaseDC
CreateIconIndirect
GetUserObjectInformationW
GetProcessWindowStation
wvsprintfA
MonitorFromWindow
GetCaretBlinkTime
PeekMessageA
GetMessageA
DispatchMessageA
ValidateRect
EnumDisplayDevicesA
EnumDisplayMonitors
GetMonitorInfoA
LoadImageA
DialogBoxParamA
IsDlgButtonChecked
CheckDlgButton
CreateDialogParamW
PeekMessageW
IsDialogMessageW
TranslateMessage
DispatchMessageW
MsgWaitForMultipleObjects
EnableWindow
SetWindowTextW
RegisterClassW
PostQuitMessage
SetWindowLongW
GetWindowLongW
SetCursorPos
ClipCursor
IsWindowVisible
ScreenToClient
GetClipboardData
IsClipboardFormatAvailable
SetCapture
ReleaseCapture
UnregisterDeviceNotification
RegisterDeviceNotificationW
SystemParametersInfoW
ClientToScreen
GetAsyncKeyState
ShowCursor
GetFocus
SetFocus
WindowFromPoint
MessageBoxW
RegisterClassExW
DialogBoxParamW
GetAncestor
LoadIconA
SendDlgItemMessageW
SetDlgItemTextA
SetDlgItemTextW
MessageBoxA
CopyRect
GetKeyState
EndDialog

version

GetFileVersionInfoW
GetFileVersionInfoSizeW
GetFileVersionInfoA
GetFileVersionInfoSizeA
VerQueryValueA

ole32

CoCreateInstance
CoTaskMemFree
CoTaskMemAlloc
StringFromGUID2
CoCreateGuid
CoInitialize
CoUninitialize
CoSetProxyBlanket

shlwapi

PathFileExistsW
SHDeleteKeyA
PathCanonicalizeW
PathIsDirectoryW

advapi32

CryptGetHashParam
CryptImportKey
CryptVerifySignatureA
CryptDestroyKey
RegDeleteValueA
GetUserNameA
RegCreateKeyExW
RegQueryValueExW
CryptDestroyHash
CryptHashData
CryptReleaseContext
RegOpenKeyExW
RegSetValueExW
RegCreateKeyA
RegSetValueExA
RegOpenKeyExA
RegQueryValueExA
RegCloseKey
RegisterEventSourceA
ReportEventA
DeregisterEventSource
CryptCreateHash
CryptAcquireContextA

gdi32

SwapBuffers
GetObjectA
GetDeviceCaps
ChoosePixelFormat
SetPixelFormat
DeleteObject
CreateBitmap
CreateDIBSection

shell32

ShellExecuteW
CommandLineToArgvW
SHGetFolderPathW

opengl32

glIsTexture
glGetTexParameteriv
glTexSubImage2D
glPixelStorei
glCopyTexSubImage2D
glDrawBuffer
glReadBuffer
glDrawArrays
wglDeleteContext
glBegin
glVertex3f
glNormal3f
glColor4f
glEnd
glHint
glLightModelf
glLoadIdentity
glMaterialfv
glMaterialf
glReadPixels
glFinish
glFogi
glFogf
glFogfv
glLightModelfv
glLightf
glLightfv
glTexGeni
glTexGenfv
glTexEnvfv
glScissor
glViewport
glColor4fv
glLightModeli
glColorMaterial
glGetFloatv
glMultMatrixf
glMatrixMode
glPolygonMode
glFrontFace
glClearColor
glClearDepth
glClearStencil
glClear
glIsEnabled
glStencilFunc
glStencilOp
glStencilMask
glDepthFunc
glDepthMask
glCullFace
glPolygonOffset
glColorMask
glDisable
glBlendFunc
glEnable
glAlphaFunc
glTexEnvi
glTexEnvf
glDisableClientState
glEnableClientState
glColorPointer
glVertexPointer
glNormalPointer
glTexCoordPointer
glDrawElements
glGetString
glGetError
glDeleteTextures
glGenTextures
glBindTexture
glTexParameteri
glTexImage2D
wglGetProcAddress
glGetIntegerv
wglShareLists
wglGetCurrentDC
wglGetCurrentContext
wglMakeCurrent
wglCreateContext
glLoadMatrixf

winmm

waveInOpen
waveInStart
waveInGetDevCapsW
waveInGetDevCapsA
waveInUnprepareHeader
waveInPrepareHeader
waveInAddBuffer
waveOutGetPosition
waveOutReset
waveOutWrite
waveInClose
waveOutOpen
waveOutClose
waveOutGetDevCapsW
waveOutGetDevCapsA
waveOutGetNumDevs
waveInGetNumDevs
timeBeginPeriod
timeEndPeriod
timeGetTime
waveInReset
waveOutUnprepareHeader
waveOutPrepareHeader

oleaut32

SysStringLen
SysAllocString
VariantChangeType
VariantClear
VariantInit
SysFreeString

msacm32

acmStreamConvert
acmStreamUnprepareHeader
acmFormatSuggest
acmStreamOpen
acmStreamSize
acmStreamPrepareHeader

imm32

ImmReleaseContext
ImmSetOpenStatus
ImmGetConversionStatus
ImmGetCompositionStringW
ImmAssociateContextEx
ImmAssociateContext
ImmGetContext
ImmSetCompositionStringW

dnsapi

DnsQuery_A
DnsFree

iphlpapi

GetIpAddrTable

winhttp

WinHttpGetIEProxyConfigForCurrentUser

Exports

Exports

??$Transfer@V?$StreamedBinaryRead@$00@@@AnimationEvent@@QAEXAAV?$StreamedBinaryRead@$00@@@Z
??$Transfer@V?$StreamedBinaryRead@$00@@@Behaviour@@QAEXAAV?$StreamedBinaryRead@$00@@@Z
??$Transfer@V?$StreamedBinaryRead@$00@@@Component@Unity@@QAEXAAV?$StreamedBinaryRead@$00@@@Z
??$Transfer@V?$StreamedBinaryRead@$00@@@GameObject@Unity@@QAEXAAV?$StreamedBinaryRead@$00@@@Z
??$Transfer@V?$StreamedBinaryRead@$00@@@GlobalGameManager@@QAEXAAV?$StreamedBinaryRead@$00@@@Z
??$Transfer@V?$StreamedBinaryRead@$00@@@LevelGameManager@@QAEXAAV?$StreamedBinaryRead@$00@@@Z
??$Transfer@V?$StreamedBinaryRead@$00@@@NamedObject@@QAEXAAV?$StreamedBinaryRead@$00@@@Z
??$Transfer@V?$StreamedBinaryRead@$00@@@Object@@IAEXAAV?$StreamedBinaryRead@$00@@@Z
??$Transfer@V?$StreamedBinaryRead@$00@@@Renderer@@QAEXAAV?$StreamedBinaryRead@$00@@@Z
??$Transfer@V?$StreamedBinaryRead@$0A@@@@AnimationEvent@@QAEXAAV?$StreamedBinaryRead@$0A@@@@Z
??$Transfer@V?$StreamedBinaryRead@$0A@@@@Behaviour@@QAEXAAV?$StreamedBinaryRead@$0A@@@@Z
??$Transfer@V?$StreamedBinaryRead@$0A@@@@Component@Unity@@QAEXAAV?$StreamedBinaryRead@$0A@@@@Z
??$Transfer@V?$StreamedBinaryRead@$0A@@@@GameObject@Unity@@QAEXAAV?$StreamedBinaryRead@$0A@@@@Z
??$Transfer@V?$StreamedBinaryRead@$0A@@@@GlobalGameManager@@QAEXAAV?$StreamedBinaryRead@$0A@@@@Z
??$Transfer@V?$StreamedBinaryRead@$0A@@@@LevelGameManager@@QAEXAAV?$StreamedBinaryRead@$0A@@@@Z
??$Transfer@V?$StreamedBinaryRead@$0A@@@@NamedObject@@QAEXAAV?$StreamedBinaryRead@$0A@@@@Z
??$Transfer@V?$StreamedBinaryRead@$0A@@@@Object@@IAEXAAV?$StreamedBinaryRead@$0A@@@@Z
??$Transfer@V?$StreamedBinaryRead@$0A@@@@Renderer@@QAEXAAV?$StreamedBinaryRead@$0A@@@@Z
??$Transfer@V?$StreamedBinaryWrite@$0A@@@@AnimationEvent@@QAEXAAV?$StreamedBinaryWrite@$0A@@@@Z
??$Transfer@V?$StreamedBinaryWrite@$0A@@@@Behaviour@@QAEXAAV?$StreamedBinaryWrite@$0A@@@@Z
??$Transfer@V?$StreamedBinaryWrite@$0A@@@@Component@Unity@@QAEXAAV?$StreamedBinaryWrite@$0A@@@@Z
??$Transfer@V?$StreamedBinaryWrite@$0A@@@@GameObject@Unity@@QAEXAAV?$StreamedBinaryWrite@$0A@@@@Z
??$Transfer@V?$StreamedBinaryWrite@$0A@@@@GlobalGameManager@@QAEXAAV?$StreamedBinaryWrite@$0A@@@@Z
??$Transfer@V?$StreamedBinaryWrite@$0A@@@@LevelGameManager@@QAEXAAV?$StreamedBinaryWrite@$0A@@@@Z
??$Transfer@V?$StreamedBinaryWrite@$0A@@@@NamedObject@@QAEXAAV?$StreamedBinaryWrite@$0A@@@@Z
??$Transfer@V?$StreamedBinaryWrite@$0A@@@@Object@@IAEXAAV?$StreamedBinaryWrite@$0A@@@@Z
??$Transfer@V?$StreamedBinaryWrite@$0A@@@@Renderer@@QAEXAAV?$StreamedBinaryWrite@$0A@@@@Z
??$Transfer@VProxyTransfer@@@AnimationEvent@@QAEXAAVProxyTransfer@@@Z
??$Transfer@VProxyTransfer@@@Behaviour@@QAEXAAVProxyTransfer@@@Z
??$Transfer@VProxyTransfer@@@Component@Unity@@QAEXAAVProxyTransfer@@@Z
??$Transfer@VProxyTransfer@@@GameObject@Unity@@QAEXAAVProxyTransfer@@@Z
??$Transfer@VProxyTransfer@@@GlobalGameManager@@QAEXAAVProxyTransfer@@@Z
??$Transfer@VProxyTransfer@@@LevelGameManager@@QAEXAAVProxyTransfer@@@Z
??$Transfer@VProxyTransfer@@@NamedObject@@QAEXAAVProxyTransfer@@@Z
??$Transfer@VProxyTransfer@@@Object@@IAEXAAVProxyTransfer@@@Z
??$Transfer@VProxyTransfer@@@Renderer@@QAEXAAVProxyTransfer@@@Z
??$Transfer@VRemapPPtrTransfer@@@AnimationEvent@@QAEXAAVRemapPPtrTransfer@@@Z
??$Transfer@VRemapPPtrTransfer@@@Behaviour@@QAEXAAVRemapPPtrTransfer@@@Z
??$Transfer@VRemapPPtrTransfer@@@Component@Unity@@QAEXAAVRemapPPtrTransfer@@@Z
??$Transfer@VRemapPPtrTransfer@@@GameObject@Unity@@QAEXAAVRemapPPtrTransfer@@@Z
??$Transfer@VRemapPPtrTransfer@@@GlobalGameManager@@QAEXAAVRemapPPtrTransfer@@@Z
??$Transfer@VRemapPPtrTransfer@@@LevelGameManager@@QAEXAAVRemapPPtrTransfer@@@Z
??$Transfer@VRemapPPtrTransfer@@@NamedObject@@QAEXAAVRemapPPtrTransfer@@@Z
??$Transfer@VRemapPPtrTransfer@@@Object@@IAEXAAVRemapPPtrTransfer@@@Z
??$Transfer@VRemapPPtrTransfer@@@Renderer@@QAEXAAVRemapPPtrTransfer@@@Z
??$Transfer@VSafeBinaryRead@@@AnimationEvent@@QAEXAAVSafeBinaryRead@@@Z
??$Transfer@VSafeBinaryRead@@@Behaviour@@QAEXAAVSafeBinaryRead@@@Z
??$Transfer@VSafeBinaryRead@@@Component@Unity@@QAEXAAVSafeBinaryRead@@@Z
??$Transfer@VSafeBinaryRead@@@GameObject@Unity@@QAEXAAVSafeBinaryRead@@@Z
??$Transfer@VSafeBinaryRead@@@GlobalGameManager@@QAEXAAVSafeBinaryRead@@@Z
??$Transfer@VSafeBinaryRead@@@LevelGameManager@@QAEXAAVSafeBinaryRead@@@Z
??$Transfer@VSafeBinaryRead@@@NamedObject@@QAEXAAVSafeBinaryRead@@@Z
??$Transfer@VSafeBinaryRead@@@Object@@IAEXAAVSafeBinaryRead@@@Z
??$Transfer@VSafeBinaryRead@@@Renderer@@QAEXAAVSafeBinaryRead@@@Z
AgPmDestroySourceConnection
AgPmEventEnabled
AgPmEventLoggingEnabled
AgPmSubmitEvent
NvOptimusEnablement
NxCreateCoreSDK

Sections

.text
Size: 8.3MB - Virtual size: 8.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1.6MB - Virtual size: 1.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 184KB - Virtual size: 816KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.trace
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

_RDATA
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 553KB - Virtual size: 552KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 369KB - Virtual size: 368KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
lib/data1
.rar
lib/data2
.rar
lib/data3
.rar
lib/data5
.rar
lib/data6
.rar
lib/data7
.rar
lib/data9
.exe windows x86

e46c24de3a569dd442c48dd0aab35e4e

Code Sign

42:1a:f2:94:09:84:19:1f:52:0a:4b:c6:24:26:a7:4b
Certificate

Issuer

CN=AddTrust External CA Root,OU=AddTrust External TTP Network,O=AddTrust AB,C=SE

Not Before

07-06-2005 08:09

Not After

30-05-2020 10:48

Subject

CN=UTN-USERFirst-Object,OU=http://www.usertrust.com,O=The USERTRUST Network,L=Salt Lake City,ST=UT,C=US

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

47:8a:8e:fb:59:e1:d8:3f:0c:e1:42:d2:a2:87:07:be
Certificate

Issuer

CN=UTN-USERFirst-Object,OU=http://www.usertrust.com,O=The USERTRUST Network,L=Salt Lake City,ST=UT,C=US

Not Before

10-05-2010 00:00

Not After

10-05-2015 23:59

Subject

CN=COMODO Time Stamping Signer,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

10:70:9d:4f:f5:54:08:d7:30:60:01:d8:ea:91:75:bb
Certificate

Issuer

CN=UTN-USERFirst-Object,OU=http://www.usertrust.com,O=The USERTRUST Network,L=Salt Lake City,ST=UT,C=US

Not Before

24-08-2011 00:00

Not After

30-05-2020 10:48

Subject

CN=COMODO Code Signing CA 2,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

75:95:3f:a5:4d:d1:2d:d9:ca:6b:94:8c:17:bf:d6:7c
Certificate

Issuer

CN=COMODO Code Signing CA 2,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

13-06-2013 00:00

Not After

13-06-2015 23:59

Subject

CN=win.rar GmbH,O=win.rar GmbH,POSTALCODE=10117,STREET=Schumannstr. 17,L=Berlin,ST=Berlin,C=DE

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

1c:f6:a3:05:8f:3f:55:de:76:d6:4e:b5:1e:e0:6f:2e:9e:6f:c9:17
Signer

Actual PE Digest

1c:f6:a3:05:8f:3f:55:de:76:d6:4e:b5:1e:e0:6f:2e:9e:6f:c9:17

Digest Algorithm

sha1

PE Digest Matches

false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetLastError
Sleep
SetConsoleCtrlHandler
LocalFree
FormatMessageW
CreateHardLinkW
CreateFileW
CloseHandle
BackupRead
GetCurrentProcess
BackupSeek
SetFileTime
DeviceIoControl
FindClose
FindFirstFileW
DeleteFileW
RemoveDirectoryW
CreateDirectoryW
MoveFileW
GetShortPathNameW
GetLongPathNameW
FlushFileBuffers
SetFilePointer
SetEndOfFile
GetFileTime
ReadFile
GetDriveTypeW
GetDiskFreeSpaceExW
GetVolumeInformationW
GetFileAttributesW
SetFileAttributesW
ExpandEnvironmentStringsW
FindNextFileW
GetVersionExW
GetModuleFileNameW
GetFullPathNameW
SetErrorMode
FreeLibrary
LoadLibraryW
LoadLibraryExW
GetCurrentProcessId
GetCurrentDirectoryW
SetThreadPriority
GetCurrentThread
SetPriorityClass
SetCurrentDirectoryW
GetFullPathNameA
CreateThread
EnterCriticalSection
LeaveCriticalSection
WaitForSingleObject
GetProcessAffinityMask
ReleaseSemaphore
ResetEvent
DeleteCriticalSection
SetEvent
InitializeCriticalSection
CreateEventW
CreateSemaphoreW
SystemTimeToFileTime
GetSystemTime
FileTimeToSystemTime
FileTimeToLocalFileTime
LocalFileTimeToFileTime
WideCharToMultiByte
MultiByteToWideChar
CompareStringW
IsDBCSLeadByte
GetCPInfo
GetConsoleOutputCP
CreateFileA
WriteConsoleA
SetEnvironmentVariableA
GetLocaleInfoA
GetStringTypeW
WriteFile
WriteConsoleW
SetConsoleMode
ReadConsoleW
GetStdHandle
GetFileType
GetConsoleMode
GetCommandLineW
GetModuleHandleW
GetProcAddress
SetLastError
CompareStringA
GetFileInformationByHandle
GetStringTypeA
GetTickCount
QueryPerformanceCounter
GetEnvironmentStringsW
FreeEnvironmentStringsW
HeapFree
HeapReAlloc
HeapAlloc
RtlUnwind
RaiseException
GetSystemTimeAsFileTime
ExitProcess
GetCommandLineA
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
HeapCreate
VirtualFree
VirtualAlloc
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
GetCurrentThreadId
InterlockedDecrement
GetModuleFileNameA
GetACP
GetOEMCP
IsValidCodePage
SetHandleCount
GetStartupInfoA
SetStdHandle
GetConsoleCP
HeapSize
LoadLibraryA
InitializeCriticalSectionAndSpinCount
LCMapStringA
LCMapStringW
FreeEnvironmentStringsA
GetEnvironmentStrings

user32

CharUpperW
CharLowerW
ExitWindowsEx
CharLowerA
LoadStringW
CharToOemBuffW
MessageBeep
CharToOemA
OemToCharBuffA
OemToCharA
CharToOemBuffA

advapi32

RegQueryValueExW
RegCloseKey
SetFileSecurityW
GetFileSecurityW
GetSecurityDescriptorLength
OpenProcessToken
LookupPrivilegeValueW
AdjustTokenPrivileges
CryptAcquireContextW
CryptGenRandom
CryptReleaseContext
RegOpenKeyExW

shell32

SHGetMalloc
SHGetSpecialFolderLocation
SHGetPathFromIDListW
SHFileOperationW

Sections

.text
Size: 392KB - Virtual size: 392KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 26KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 128KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 30KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
lib/data_Data/Managed/Assembly-CSharp-firstpass.dll
.dll windows x86

dae02f32a21e03ce65412f6e56942daa

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorDllMain

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 828B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
lib/data_Data/Managed/Assembly-CSharp.dll
.dll windows x86

dae02f32a21e03ce65412f6e56942daa

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorDllMain

Sections

.text
Size: 232KB - Virtual size: 231KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 788B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
lib/data_Data/Managed/Assembly-UnityScript-firstpass.dll
.dll windows x86

dae02f32a21e03ce65412f6e56942daa

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorDllMain

Sections

.text
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
lib/data_Data/Managed/Boo.Lang.dll
.dll windows x86

dae02f32a21e03ce65412f6e56942daa

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorDllMain

Sections

.text
Size: 121KB - Virtual size: 121KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
lib/data_Data/Managed/Mono.Security.dll
.dll windows x86

dae02f32a21e03ce65412f6e56942daa

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorDllMain

Sections

.text
Size: 284KB - Virtual size: 283KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 956B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
lib/data_Data/Managed/System.Core.dll
.dll windows x86

dae02f32a21e03ce65412f6e56942daa

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorDllMain

Sections

.text
Size: 260KB - Virtual size: 259KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
lib/data_Data/Managed/System.dll
.dll windows x86

dae02f32a21e03ce65412f6e56942daa

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorDllMain

Sections

.text
Size: 1.0MB - Virtual size: 1.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 968B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
lib/data_Data/Managed/UnityEngine.dll
.dll windows x86

dae02f32a21e03ce65412f6e56942daa

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorDllMain

Sections

.text
Size: 576KB - Virtual size: 576KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 772B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
lib/data_Data/Managed/mscorlib.dll
.dll windows x86

dae02f32a21e03ce65412f6e56942daa

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorDllMain

Sections

.text
Size: 2.4MB - Virtual size: 2.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 984B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
lib/data_Data/Mono/etc/mono/1.0/DefaultWsdlHelpGenerator.aspx
.js
lib/data_Data/Mono/etc/mono/1.0/machine.config
.xml
lib/data_Data/Mono/etc/mono/2.0/Browsers/Compat.browser
lib/data_Data/Mono/etc/mono/2.0/DefaultWsdlHelpGenerator.aspx
.js
lib/data_Data/Mono/etc/mono/2.0/machine.config
.xml
lib/data_Data/Mono/etc/mono/2.0/settings.map
.xml
lib/data_Data/Mono/etc/mono/2.0/web.config
.xml
lib/data_Data/Mono/etc/mono/browscap.ini
lib/data_Data/Mono/etc/mono/config
lib/data_Data/Mono/etc/mono/mconfig/config.xml
.xml
lib/data_Data/Mono/mono.dll
.dll windows x86

e71f17aabd51a32437c625f2a9ded4af

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

version

GetFileVersionInfoSizeW
VerQueryValueW
GetFileVersionInfoW

ws2_32

__WSAFDIsSet
WSAGetLastError
select
WSASetLastError
getprotobyname
getservbyname
inet_ntoa
socket
WSACleanup
WSAStartup
gethostname
gethostbyaddr
inet_addr
gethostbyname
shutdown
setsockopt
getsockopt
sendto
WSASend
send
recvfrom
WSARecv
recv
WSAIoctl
connect
bind
htonl
htons
getpeername
getsockname
ntohs
ntohl
listen
accept
ioctlsocket
closesocket
WSASocketW
getservbyport

psapi

GetModuleInformation
GetModuleBaseNameW
EnumProcesses
GetModuleFileNameExW
EnumProcessModules

winmm

timeEndPeriod
timeBeginPeriod
timeGetDevCaps
timeSetEvent

mswsock

TransmitFile

kernel32

WideCharToMultiByte
RtlUnwind
IsValidCodePage
GetOEMCP
GetCPInfo
GetStartupInfoW
SetHandleCount
IsProcessorFeaturePresent
HeapDestroy
HeapCreate
EncodePointer
IsDebuggerPresent
UnhandledExceptionFilter
FindFirstFileExW
HeapReAlloc
GetCommandLineA
DecodePointer
ExitProcess
CreateDirectoryA
MoveFileA
LocalFileTimeToFileTime
FindFirstFileExA
GetDriveTypeA
InitializeCriticalSectionAndSpinCount
SetStdHandle
PeekNamedPipe
GetFileInformationByHandle
FileTimeToLocalFileTime
FileTimeToSystemTime
HeapFree
HeapAlloc
GetFullPathNameA
CreateFileA
VirtualAlloc
VirtualFree
VirtualQuery
Sleep
InterlockedCompareExchange
InterlockedExchange
GetSystemInfo
LocalFree
FormatMessageW
GetLastError
GetCurrentProcess
GetProcAddress
GetModuleHandleW
SetLastError
LoadLibraryW
SetErrorMode
FreeLibrary
CloseHandle
MapViewOfFile
CreateFileMappingW
UnmapViewOfFile
VirtualProtect
WaitForSingleObjectEx
ReleaseSemaphore
GetTickCount
GetSystemTimeAsFileTime
QueryPerformanceCounter
QueryPerformanceFrequency
LeaveCriticalSection
EnterCriticalSection
SetFileAttributesW
CopyFileW
DeleteFileW
WriteFile
CreateFileW
ResumeThread
InitializeCriticalSection
InterlockedIncrement
InterlockedDecrement
DeleteCriticalSection
GetFileType
GetModuleFileNameW
TlsGetValue
TlsSetValue
TlsAlloc
TlsFree
LCMapStringW
FindClose
FindFirstFileW
GetFileAttributesW
GetFileAttributesExW
CreateDirectoryW
RemoveDirectoryW
FindNextFileW
GetCurrentDirectoryW
SetCurrentDirectoryW
MoveFileW
ReplaceFileW
ReadFile
SetFilePointer
FlushFileBuffers
GetFileSize
SetEndOfFile
SetFileTime
GetStdHandle
CreatePipe
DuplicateHandle
GetTempPathW
LockFile
UnlockFile
ResetEvent
SetEvent
CreateSemaphoreW
CreateEventW
SystemTimeToFileTime
GetTimeZoneInformation
GetComputerNameW
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetEnvironmentVariableW
GetLogicalDriveStringsW
GetDiskFreeSpaceExW
GetDriveTypeW
OutputDebugStringW
GlobalAlloc
GlobalReAlloc
GlobalFree
DeleteFileA
OpenProcess
GetCurrentProcessId
VerLanguageNameW
CreateProcessW
GetProcessTimes
GetExitCodeProcess
GetProcessWorkingSetSize
SetProcessWorkingSetSize
TerminateProcess
GetPriorityClass
SetPriorityClass
GetCurrentThread
GetVolumeInformationW
WaitForSingleObject
SleepEx
CreateMutexW
ReleaseMutex
OpenMutexW
OpenSemaphoreW
OpenEventW
OpenThread
GetExitCodeThread
ExitThread
SignalObjectAndWait
WaitForMultipleObjectsEx
QueueUserAPC
LoadLibraryA
GetSystemDirectoryA
FreeConsole
GetThreadContext
RemoveVectoredExceptionHandler
SetUnhandledExceptionFilter
AddVectoredExceptionHandler
MultiByteToWideChar
DebugBreak
SuspendThread
CreateThread
GetVersion
RaiseException
GetEnvironmentVariableW
GetACP
GetFileAttributesA
GetConsoleCP
GetConsoleMode
GetUserDefaultLCID
GetLocaleInfoW
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale
GetStringTypeW
GetModuleFileNameA
GetProcessHeap
GetFullPathNameW
CompareStringW
SetEnvironmentVariableA
CreateProcessA
WriteConsoleW
HeapSize
GetVersionExW
GetCurrentThreadId

user32

SendMessageTimeoutW
WaitForInputIdle
MessageBoxA

advapi32

GetEffectiveRightsFromAclW
CopySid
AllocateAndInitializeSid
RevertToSelf
ImpersonateLoggedOnUser
DuplicateToken
GetTokenInformation
OpenThreadToken
OpenProcessToken
LookupAccountSidW
CryptReleaseContext
CryptAcquireContextW
CryptGenRandom
CreateProcessWithLogonW
BuildTrusteeWithSidW
FreeSid
GetNamedSecurityInfoW
SetNamedSecurityInfoW
GetLengthSid
SetEntriesInAclW

shell32

SHGetFolderPathW
ShellExecuteExW

ole32

CoUninitialize
CoTaskMemFree
CoTaskMemAlloc
CoCreateFreeThreadedMarshaler
CoInitializeEx
CoTaskMemRealloc

oleaut32

SysAllocStringLen
SysStringLen
SafeArrayPtrOfIndex
SafeArrayPutElement
SafeArrayCreate
SafeArrayDestroy
SysFreeString
SafeArrayGetUBound
SafeArrayGetLBound
SafeArrayGetDim

Exports

Exports

g_free
mono_add_internal_call
mono_alloc_special_static_data
mono_array_addr_with_size
mono_array_class_get
mono_array_clone
mono_array_element_size
mono_array_new
mono_array_new_full
mono_array_new_specific
mono_assemblies_cleanup
mono_assemblies_init
mono_assembly_close
mono_assembly_fill_assembly_name
mono_assembly_foreach
mono_assembly_get_assemblyref
mono_assembly_get_image
mono_assembly_get_main
mono_assembly_get_object
mono_assembly_getrootdir
mono_assembly_invoke_load_hook
mono_assembly_invoke_search_hook
mono_assembly_load
mono_assembly_load_from
mono_assembly_load_from_full
mono_assembly_load_full
mono_assembly_load_module
mono_assembly_load_reference
mono_assembly_load_references
mono_assembly_load_with_partial_name
mono_assembly_loaded
mono_assembly_loaded_full
mono_assembly_name_parse
mono_assembly_names_equal
mono_assembly_open
mono_assembly_open_full
mono_assembly_set_main
mono_assembly_setrootdir
mono_backtrace_from_context
mono_bitset_alloc_size
mono_bitset_clear
mono_bitset_clear_all
mono_bitset_clone
mono_bitset_copyto
mono_bitset_count
mono_bitset_equal
mono_bitset_find_first
mono_bitset_find_first_unset
mono_bitset_find_last
mono_bitset_find_start
mono_bitset_foreach
mono_bitset_free
mono_bitset_intersection
mono_bitset_intersection_2
mono_bitset_invert
mono_bitset_mem_new
mono_bitset_new
mono_bitset_set
mono_bitset_set_all
mono_bitset_size
mono_bitset_sub
mono_bitset_test
mono_bitset_test_bulk
mono_bitset_union
mono_bounded_array_class_get
mono_check_corlib_version
mono_class_array_element_size
mono_class_data_size
mono_class_describe_statics
mono_class_enum_basetype
mono_class_from_generic_parameter
mono_class_from_mono_type
mono_class_from_name
mono_class_from_name_case
mono_class_from_typeref
mono_class_get
mono_class_get_byref_type
mono_class_get_element_class
mono_class_get_event_token
mono_class_get_events
mono_class_get_field
mono_class_get_field_from_name
mono_class_get_field_token
mono_class_get_fields
mono_class_get_flags
mono_class_get_full
mono_class_get_image
mono_class_get_interfaces
mono_class_get_method_from_name
mono_class_get_method_from_name_flags
mono_class_get_methods
mono_class_get_name
mono_class_get_namespace
mono_class_get_nested_types
mono_class_get_nesting_type
mono_class_get_parent
mono_class_get_properties
mono_class_get_property_from_name
mono_class_get_property_token
mono_class_get_rank
mono_class_get_type
mono_class_get_type_token
mono_class_inflate_generic_method
mono_class_inflate_generic_method_full
mono_class_inflate_generic_type
mono_class_init
mono_class_instance_size
mono_class_is_assignable_from
mono_class_is_enum
mono_class_is_generic
mono_class_is_inflated
mono_class_is_subclass_of
mono_class_is_valuetype
mono_class_min_align
mono_class_name_from_token
mono_class_num_events
mono_class_num_fields
mono_class_num_methods
mono_class_num_properties
mono_class_value_size
mono_class_vtable
mono_cli_rva_image_map
mono_code_manager_commit
mono_code_manager_destroy
mono_code_manager_foreach
mono_code_manager_invalidate
mono_code_manager_new
mono_code_manager_new_dynamic
mono_code_manager_reserve
mono_compile_method
mono_config_for_assembly
mono_config_parse
mono_config_parse_memory
mono_config_string_for_assembly_file
mono_context_get
mono_context_init
mono_context_set
mono_counters_dump
mono_counters_enable
mono_counters_register
mono_custom_attrs_construct
mono_custom_attrs_free
mono_custom_attrs_from_assembly
mono_custom_attrs_from_class
mono_custom_attrs_from_event
mono_custom_attrs_from_field
mono_custom_attrs_from_index
mono_custom_attrs_from_method
mono_custom_attrs_from_param
mono_custom_attrs_from_property
mono_custom_attrs_get_attr
mono_custom_attrs_has_attr
mono_debug_add_method
mono_debug_cleanup
mono_debug_close_mono_symbol_file
mono_debug_find_method
mono_debug_free_source_location
mono_debug_init
mono_debug_lookup_method
mono_debug_lookup_source_location
mono_debug_open_image_from_memory
mono_debug_open_mono_symbols
mono_debug_print_stack_frame
mono_debug_print_vars
mono_debug_symfile_lookup_location
mono_debug_symfile_lookup_method
mono_debug_using_mono_debugger
mono_debugger_breakpoint_callback
mono_debugger_check_runtime_version
mono_debugger_cleanup
mono_debugger_event
mono_debugger_handle_exception
mono_debugger_initialize
mono_debugger_insert_breakpoint
mono_debugger_insert_breakpoint_full
mono_debugger_lock
mono_debugger_method_has_breakpoint
mono_debugger_remove_breakpoint
mono_debugger_run_finally
mono_debugger_unlock
mono_declsec_flags_from_assembly
mono_declsec_flags_from_class
mono_declsec_flags_from_method
mono_declsec_get_assembly_action
mono_declsec_get_class_action
mono_declsec_get_demands
mono_declsec_get_inheritdemands_class
mono_declsec_get_inheritdemands_method
mono_declsec_get_linkdemands
mono_declsec_get_method_action
mono_digest_get_public_token
mono_disasm_code
mono_disasm_code_one
mono_dl_fallback_register
mono_dl_fallback_unregister
mono_dllmap_insert
mono_domain_add_class_static_data
mono_domain_assembly_open
mono_domain_create
mono_domain_create_appdomain
mono_domain_finalize
mono_domain_foreach
mono_domain_free
mono_domain_get
mono_domain_get_by_id
mono_domain_get_id
mono_domain_has_type_resolve
mono_domain_is_unloading
mono_domain_owns_vtable_slot
mono_domain_set
mono_domain_set_internal
mono_domain_try_type_resolve
mono_domain_unload
mono_environment_exitcode_get
mono_environment_exitcode_set
mono_escape_uri_string
mono_event_get_add_method
mono_event_get_flags
mono_event_get_name
mono_event_get_object
mono_event_get_parent
mono_event_get_raise_method
mono_event_get_remove_method
mono_exception_from_name
mono_exception_from_name_domain
mono_exception_from_name_msg
mono_exception_from_name_two_strings
mono_exception_from_token
mono_field_from_token
mono_field_get_data
mono_field_get_flags
mono_field_get_name
mono_field_get_object
mono_field_get_offset
mono_field_get_parent
mono_field_get_type
mono_field_get_value
mono_field_get_value_object
mono_field_set_value
mono_field_static_get_value
mono_field_static_set_value
mono_file_map
mono_file_unmap
mono_free_method
mono_free_verify_list
mono_g_hash_table_destroy
mono_g_hash_table_foreach
mono_g_hash_table_foreach_remove
mono_g_hash_table_insert
mono_g_hash_table_lookup
mono_g_hash_table_lookup_extended
mono_g_hash_table_new
mono_g_hash_table_new_full
mono_g_hash_table_new_type
mono_g_hash_table_remove
mono_g_hash_table_replace
mono_g_hash_table_size
mono_gc_collect
mono_gc_collection_count
mono_gc_enable_events
mono_gc_get_generation
mono_gc_get_heap_size
mono_gc_get_used_size
mono_gc_is_finalizer_thread
mono_gc_max_generation
mono_gc_out_of_memory
mono_gc_wbarrier_arrayref_copy
mono_gc_wbarrier_generic_store
mono_gc_wbarrier_set_arrayref
mono_gc_wbarrier_set_field
mono_gc_wbarrier_value_copy
mono_gchandle_free
mono_gchandle_get_target
mono_gchandle_is_in_domain
mono_gchandle_new
mono_gchandle_new_weakref
mono_get_array_class
mono_get_boolean_class
mono_get_byte_class
mono_get_char_class
mono_get_config_dir
mono_get_corlib
mono_get_dbnull_object
mono_get_delegate_invoke
mono_get_double_class
mono_get_enum_class
mono_get_exception_appdomain_unloaded
mono_get_exception_argument
mono_get_exception_argument_null
mono_get_exception_argument_out_of_range
mono_get_exception_arithmetic
mono_get_exception_array_type_mismatch
mono_get_exception_bad_image_format
mono_get_exception_bad_image_format2
mono_get_exception_cannot_unload_appdomain
mono_get_exception_class
mono_get_exception_divide_by_zero
mono_get_exception_execution_engine
mono_get_exception_file_not_found
mono_get_exception_file_not_found2
mono_get_exception_index_out_of_range
mono_get_exception_invalid_cast
mono_get_exception_invalid_operation
mono_get_exception_io
mono_get_exception_missing_field
mono_get_exception_missing_method
mono_get_exception_not_implemented
mono_get_exception_not_supported
mono_get_exception_null_reference
mono_get_exception_overflow
mono_get_exception_reflection_type_load
mono_get_exception_security
mono_get_exception_serialization
mono_get_exception_stack_overflow
mono_get_exception_synchronization_lock
mono_get_exception_thread_abort
mono_get_exception_thread_interrupted
mono_get_exception_thread_state
mono_get_exception_type_initialization
mono_get_exception_type_load
mono_get_inflated_method
mono_get_int16_class
mono_get_int32_class
mono_get_int64_class
mono_get_intptr_class
mono_get_machine_config
mono_get_method
mono_get_method_constrained
mono_get_method_full
mono_get_object_class
mono_get_root_domain
mono_get_sbyte_class
mono_get_single_class
mono_get_special_static_data
mono_get_string_class
mono_get_thread_class
mono_get_uint16_class
mono_get_uint32_class
mono_get_uint64_class
mono_get_uintptr_class
mono_get_void_class
mono_guid_to_string
mono_image_add_to_name_cache
mono_image_addref
mono_image_close
mono_image_ensure_section
mono_image_ensure_section_idx
mono_image_get_assembly
mono_image_get_entry_point
mono_image_get_filename
mono_image_get_guid
mono_image_get_name
mono_image_get_public_key
mono_image_get_resource
mono_image_get_strong_name
mono_image_get_table_info
mono_image_get_table_rows
mono_image_has_authenticode_entry
mono_image_init
mono_image_init_name_cache
mono_image_is_dynamic
mono_image_load_file_for_image
mono_image_loaded
mono_image_loaded_by_guid
mono_image_loaded_by_guid_full
mono_image_loaded_full
mono_image_lookup_resource
mono_image_open
mono_image_open_from_data
mono_image_open_from_data_full
mono_image_open_from_data_with_name
mono_image_open_full
mono_image_rva_map
mono_image_strerror
mono_image_strong_name_position
mono_image_verify_tables
mono_images_cleanup
mono_images_init
mono_init
mono_init_from_assembly
mono_init_version
mono_inst_name
mono_install_assembly_load_hook
mono_install_assembly_postload_refonly_search_hook
mono_install_assembly_postload_search_hook
mono_install_assembly_preload_hook
mono_install_assembly_refonly_preload_hook
mono_install_assembly_refonly_search_hook
mono_install_assembly_search_hook
mono_install_runtime_cleanup
mono_jit_cleanup
mono_jit_exec
mono_jit_info_get_code_size
mono_jit_info_get_code_start
mono_jit_info_get_method
mono_jit_info_table_find
mono_jit_init
mono_jit_init_version
mono_jit_parse_options
mono_jit_set_trace_options
mono_jit_thread_attach
mono_ldstr
mono_ldtoken
mono_load_remote_field
mono_load_remote_field_new
mono_loader_error_prepare_exception
mono_loader_get_last_error
mono_locks_dump
mono_lookup_internal_call
mono_lookup_pinvoke_call
mono_main
mono_marshal_string_to_utf16
mono_mb_free
mono_md5_final
mono_md5_get_digest
mono_md5_get_digest_from_file
mono_md5_init
mono_md5_update
mono_mempool_alloc
mono_mempool_alloc0
mono_mempool_contains_addr
mono_mempool_destroy
mono_mempool_empty
mono_mempool_get_allocated
mono_mempool_invalidate
mono_mempool_new
mono_mempool_stats
mono_mempool_strdup
mono_metadata_blob_heap
mono_metadata_cleanup
mono_metadata_compute_size
mono_metadata_custom_attrs_from_index
mono_metadata_declsec_from_index
mono_metadata_decode_blob_size
mono_metadata_decode_row
mono_metadata_decode_row_col
mono_metadata_decode_signed_value
mono_metadata_decode_table_row
mono_metadata_decode_table_row_col
mono_metadata_decode_value
mono_metadata_encode_value
mono_metadata_events_from_typedef
mono_metadata_field_info
mono_metadata_free_array
mono_metadata_free_marshal_spec
mono_metadata_free_method_signature
mono_metadata_free_mh
mono_metadata_free_type
mono_metadata_generic_class_is_valuetype
mono_metadata_get_constant_index
mono_metadata_get_generic_param_row
mono_metadata_get_marshal_info
mono_metadata_get_param_attrs
mono_metadata_guid_heap
mono_metadata_implmap_from_method
mono_metadata_init
mono_metadata_interfaces_from_typedef
mono_metadata_load_generic_param_constraints
mono_metadata_load_generic_params
mono_metadata_locate
mono_metadata_locate_token
mono_metadata_methods_from_event
mono_metadata_methods_from_property
mono_metadata_nested_in_typedef
mono_metadata_nesting_typedef
mono_metadata_packing_from_typedef
mono_metadata_parse_array
mono_metadata_parse_custom_mod
mono_metadata_parse_field_type
mono_metadata_parse_marshal_spec
mono_metadata_parse_method_signature
mono_metadata_parse_method_signature_full
mono_metadata_parse_mh
mono_metadata_parse_mh_full
mono_metadata_parse_param
mono_metadata_parse_signature
mono_metadata_parse_type
mono_metadata_parse_type_full
mono_metadata_parse_typedef_or_ref
mono_metadata_properties_from_typedef
mono_metadata_signature_alloc
mono_metadata_signature_dup
mono_metadata_signature_equal
mono_metadata_string_heap
mono_metadata_token_from_dor
mono_metadata_translate_token_index
mono_metadata_type_equal
mono_metadata_type_hash
mono_metadata_typedef_from_field
mono_metadata_typedef_from_method
mono_metadata_user_string
mono_method_body_get_object
mono_method_desc_free
mono_method_desc_from_method
mono_method_desc_full_match
mono_method_desc_match
mono_method_desc_new
mono_method_desc_search_in_class
mono_method_desc_search_in_image
mono_method_full_name

Sections

.text
Size: 1.2MB - Virtual size: 1.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 772KB - Virtual size: 772KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 7KB - Virtual size: 177KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 436B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 59KB - Virtual size: 59KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
lib/data_Data/PlayerConnectionConfigFile
lib/data_Data/Resources/unity default resources
lib/data_Data/Resources/unity_builtin_extra
lib/data_Data/ScreenSelector.bmp
lib/data_Data/level0
lib/data_Data/level1
lib/data_Data/level2
lib/data_Data/level3
lib/data_Data/level4
lib/data_Data/level5
lib/data_Data/level6
lib/data_Data/level7
lib/data_Data/level8
lib/data_Data/mainData
lib/data_Data/output_log.txt
lib/data_Data/resources.assets
lib/data_Data/sharedassets0.assets
lib/data_Data/sharedassets1.assets
lib/data_Data/sharedassets2.assets
lib/data_Data/sharedassets3.assets
lib/data_Data/sharedassets4.assets
lib/data_Data/sharedassets5.assets
lib/data_Data/sharedassets6.assets
lib/data_Data/sharedassets7.assets
lib/data_Data/sharedassets8.assets
lib/data_Data/sharedassets9.assets
lib/distutils/__init__.pyc
lib/distutils/command/wininst-6.0.exe
.exe windows x86

89ad82854409b9dd81837c899d65f03e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ole32

CoInitialize
CoCreateInstance
CoUninitialize

comctl32

PropertySheetA
CreatePropertySheetPageA

kernel32

LocalFree
FormatMessageA
FreeLibrary
GetModuleHandleA
GetVersionExA
DeleteFileA
GetPrivateProfileIntA
GetPrivateProfileStringA
ResumeThread
SetPriorityClass
GetCurrentProcess
GetCurrentThread
MultiByteToWideChar
CreateProcessA
GetModuleFileNameA
RemoveDirectoryA
GetFileSize
GetTempFileNameA
GetTempPathA
LoadLibraryA
GetProcAddress
GetFileAttributesA
GetStartupInfoA
SetLastError
MapViewOfFile
CreateDirectoryA
lstrlenA
UnmapViewOfFile
CreateFileA
GetLastError
DosDateTimeToFileTime
SetFileTime
CloseHandle
CreateFileMappingA
SetThreadPriority

user32

RegisterClassA
CreateWindowExA
ShowWindow
UpdateWindow
LoadCursorA
SetCursor
PeekMessageA
TranslateMessage
DispatchMessageA
GetDlgItem
GetWindowRect
MoveWindow
GetDC
ReleaseDC
SendDlgItemMessageA
GetParent
wsprintfA
SetDlgItemTextA
PostMessageA
DefWindowProcA
BeginPaint
GetSystemMetrics
EndPaint
SendMessageA
GetFocus
MessageBoxA

gdi32

SelectObject
TextOutA
CreateDIBitmap
CreateSolidBrush
SetTextColor
CreateFontA
SetBkMode
DeleteObject

advapi32

RegCloseKey
RegDeleteValueA
RegDeleteKeyA
RegCreateKeyExA
RegSetValueExA
RegQueryValueA
RegEnumKeyExA
RegQueryValueExA
RegOpenKeyExA

shell32

ShellExecuteA

msvcrt

_acmdln
exit
_XcptFilter
_exit
__p___argc
__p___argv
strncmp
fgets
realloc
qsort
__mb_cur_max
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_open
_controlfp
_strcmpi
_strdup
_tempnam
_close
_read
_strnicmp
_isctype
_pctype
strchr
memcpy
memset
strncat
strcat
strlen
strcpy
strcmp
strrchr
fprintf
_vsnprintf
malloc
_snprintf
strncpy
free
sscanf
_putenv
remove
fread
ftell
fseek
fopen
fclose
fflush
freopen
_iob
fwrite
strftime
localtime
time
sprintf
_fstat
strtol

Sections

.text
Size: 24KB - Virtual size: 23KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 16KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
lib/distutils/command/wininst-7.1.exe
.exe windows x86

c13c1bdb7371583da62542f08c300c96

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

comctl32

CreatePropertySheetPageA
PropertySheetA

kernel32

GetVersionExA
DeleteFileA
GetPrivateProfileIntA
GetPrivateProfileStringA
ResumeThread
SetPriorityClass
GetCurrentProcess
GetCurrentThread
SetThreadPriority
CreateProcessA
GetModuleFileNameA
RemoveDirectoryA
GetFileSize
GetModuleHandleA
GetTempPathA
CreateDirectoryA
GetFileAttributesA
MapViewOfFile
CreateFileMappingA
CloseHandle
SetFileTime
GetStartupInfoA
DosDateTimeToFileTime
GetLastError
CreateFileA
SetLastError
FreeLibrary
FormatMessageA
LocalFree
MultiByteToWideChar
LoadLibraryA
GetProcAddress
lstrlenA
GetTempFileNameA
UnmapViewOfFile

user32

SendMessageA
GetFocus
GetWindowRect
RegisterClassA
CreateWindowExA
ShowWindow
UpdateWindow
LoadCursorA
SetCursor
PeekMessageA
TranslateMessage
DispatchMessageA
GetDlgItem
MessageBoxA
MoveWindow
GetDC
ReleaseDC
SendDlgItemMessageA
GetParent
wsprintfA
SetDlgItemTextA
PostMessageA
DefWindowProcA
BeginPaint
GetSystemMetrics
EndPaint

gdi32

DeleteObject
TextOutA
SetBkMode
SelectObject
CreateFontA
CreateDIBitmap
CreateSolidBrush
SetTextColor

advapi32

RegCreateKeyExA
RegOpenKeyExA
RegQueryValueExA
RegDeleteValueA
RegDeleteKeyA
RegCloseKey
RegSetValueExA
RegQueryValueA
RegEnumKeyExA

shell32

ShellExecuteA

ole32

CoInitialize
CoCreateInstance
CoUninitialize

msvcr71

_acmdln
exit
_cexit
_ismbblead
_XcptFilter
_exit
_c_exit
_amsg_exit
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
__dllonexit
_onexit
_controlfp
_strnicmp
_strcmpi
_strdup
_tempnam
_close
_read
__p___argc
__p___argv
_open
strncmp
fgets
realloc
strchr
memcpy
memset
strncat
strcat
strlen
strcpy
strcmp
strrchr
fprintf
_vsnprintf
malloc
_snprintf
strncpy
free
sscanf
_putenv
remove
fread
ftell
fseek
fopen
fclose
fflush
freopen
_iob
fwrite
strftime
localtime
time
sprintf
_fstat
strtol
_pctype
_isctype
__mb_cur_max
qsort

Sections

.text
Size: 28KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 16KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
lib/distutils/command/wininst-8.0.exe
.exe windows x86

a8070c6ad7600bbdd417216375913d93

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

comctl32

CreatePropertySheetPageA
PropertySheetA

kernel32

GetTempFileNameA
GetTempPathA
GetModuleHandleA
ResumeThread
SetPriorityClass
GetCurrentProcess
GetCurrentThread
SetThreadPriority
CreateProcessA
GetModuleFileNameA
DeleteFileA
RemoveDirectoryA
GetPrivateProfileIntA
GetPrivateProfileStringA
SetLastError
CreateDirectoryA
GetFileAttributesA
GetFileSize
CreateFileA
CreateFileMappingA
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
GetStartupInfoA
InterlockedCompareExchange
Sleep
InterlockedExchange
CloseHandle
SetFileTime
DosDateTimeToFileTime
GetLastError
FormatMessageA
LocalFree
FreeLibrary
MultiByteToWideChar
LoadLibraryA
GetProcAddress
lstrlenA
MapViewOfFile
UnmapViewOfFile

user32

MessageBoxA
GetFocus
wsprintfA
SetCursor
GetDlgItem
SendDlgItemMessageA
GetParent
PostMessageA
GetWindowRect
MoveWindow
LoadCursorA
RegisterClassA
CreateWindowExA
ShowWindow
UpdateWindow
DefWindowProcA
BeginPaint
GetSystemMetrics
EndPaint
PeekMessageA
TranslateMessage
DispatchMessageA
GetDC
ReleaseDC
SendMessageA
SetDlgItemTextA

gdi32

SetBkMode
SetTextColor
DeleteObject
CreateDIBitmap
SelectObject
CreateFontA
CreateSolidBrush
TextOutA

advapi32

RegCloseKey
RegQueryValueExA
RegDeleteValueA
RegDeleteKeyA
RegCreateKeyExA
RegSetValueExA
RegOpenKeyExA
RegEnumKeyExA
RegQueryValueA

ole32

CoCreateInstance
CoInitialize
CoUninitialize

msvcr80

_unlock
__dllonexit
_lock
_onexit
_decode_pointer
_except_handler4_common
_invoke_watson
_controlfp_s
_strnicmp
_stricmp
_close
_read
_open
_strdup
_crt_debugger_hook
__set_app_type
_encode_pointer
strchr
memcpy
memset
strncat
strcat
strlen
strcpy
_localtime64
_time64
strtol
free
malloc
_putenv
_fstat64i32
fprintf
__iob_func
remove
fread
ftell
fseek
fopen
fclose
fflush
freopen
_snprintf
strncpy
strcmp
strrchr
_vsnprintf
sscanf
fwrite
strftime
sprintf
isspace
qsort
realloc
fgets
strncmp
__argv
__argc
_amsg_exit
__getmainargs
_cexit
_exit
_XcptFilter
_ismbblead
exit
_acmdln
_initterm
_initterm_e
_configthreadlocale
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
_tempnam

Sections

.text
Size: 24KB - Virtual size: 23KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
lib/distutils/command/wininst-9.0-amd64.exe
.exe windows x64

fbe3ff937d4853aa5180ab21a0753e6d

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

comctl32

CreatePropertySheetPageA
PropertySheetA

kernel32

FreeLibrary
SetStdHandle
GetStdHandle
LocalFree
FormatMessageA
GetTempFileNameA
GetTempPathA
GetModuleHandleA
GetVersionExA
ResumeThread
SetPriorityClass
GetCurrentProcess
GetCurrentThread
SetThreadPriority
CreateProcessA
GetModuleFileNameA
RemoveDirectoryA
GetPrivateProfileIntA
GetPrivateProfileStringA
SetEndOfFile
CompareStringA
CompareStringW
GetFileSize
HeapSize
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
FlushFileBuffers
IsValidLocale
EnumSystemLocalesA
GetLocaleInfoA
GetUserDefaultLCID
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
InitializeCriticalSectionAndSpinCount
SetConsoleCtrlHandler
GetConsoleMode
SetFilePointer
ReadFile
DeleteFileA
MultiByteToWideChar
LoadLibraryA
GetProcAddress
lstrlenA
GetLocaleInfoW
UnmapViewOfFile
CreateFileA
GetLastError
DosDateTimeToFileTime
SetFileTime
CloseHandle
CreateFileMappingA
MapViewOfFile
GetFileAttributesA
CreateDirectoryA
SetLastError
GetConsoleCP
SetHandleCount
FatalAppExitA
DeleteCriticalSection
GetProcessHeap
RtlUnwindEx
GetSystemTimeAsFileTime
HeapFree
HeapAlloc
FileTimeToSystemTime
FileTimeToLocalFileTime
GetFileInformationByHandle
PeekNamedPipe
GetFileType
EnterCriticalSection
LeaveCriticalSection
GetDateFormatA
GetTimeFormatA
HeapReAlloc
GetModuleHandleW
Sleep
ExitProcess
GetCommandLineA
GetStartupInfoA
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
WideCharToMultiByte
GetTimeZoneInformation
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
EncodePointer
DecodePointer
TlsAlloc
FlsGetValue
FlsSetValue
FlsFree
GetCurrentThreadId
FlsAlloc
HeapSetInformation
HeapCreate
HeapDestroy
WriteFile
SetEnvironmentVariableA
SetEnvironmentVariableW

user32

wsprintfA
GetFocus
ShowWindow
SetCursor
GetDlgItem
SendDlgItemMessageA
GetParent
PostMessageA
GetWindowRect
MoveWindow
LoadCursorA
RegisterClassA
CreateWindowExA
MessageBoxA
UpdateWindow
DefWindowProcA
BeginPaint
GetSystemMetrics
EndPaint
TranslateMessage
DispatchMessageA
PeekMessageA
GetDC
ReleaseDC
SendMessageA
SetDlgItemTextA

gdi32

CreateFontA
SelectObject
SetBkMode
TextOutA
SetTextColor
DeleteObject
CreateDIBitmap
CreateSolidBrush

advapi32

RegDeleteValueA
RegEnumKeyExA
RegCloseKey
RegQueryValueExA
RegDeleteKeyA
RegCreateKeyExA
RegSetValueExA
RegOpenKeyExA
RegQueryValueA

shell32

ShellExecuteA

ole32

CoCreateInstance
CoUninitialize
CoInitialize

Sections

.text
Size: 150KB - Virtual size: 149KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 49KB - Virtual size: 49KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 6KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
lib/distutils/command/wininst-9.0.exe
.exe windows x86

e9924f99c812303f36d72b1772856b4b

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

comctl32

CreatePropertySheetPageA
PropertySheetA

kernel32

FreeLibrary
SetStdHandle
GetStdHandle
LocalFree
FormatMessageA
GetTempFileNameA
GetTempPathA
GetModuleHandleA
GetVersionExA
ResumeThread
SetPriorityClass
GetCurrentProcess
GetCurrentThread
SetThreadPriority
CreateProcessA
GetModuleFileNameA
RemoveDirectoryA
GetPrivateProfileIntA
GetPrivateProfileStringA
SetEndOfFile
CompareStringA
CompareStringW
GetFileSize
HeapSize
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
FlushFileBuffers
IsValidLocale
EnumSystemLocalesA
GetLocaleInfoA
GetUserDefaultLCID
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
InitializeCriticalSectionAndSpinCount
InterlockedExchange
SetConsoleCtrlHandler
SetFilePointer
ReadFile
DeleteFileA
MultiByteToWideChar
LoadLibraryA
GetProcAddress
lstrlenA
GetLocaleInfoW
UnmapViewOfFile
CreateFileA
GetLastError
DosDateTimeToFileTime
SetFileTime
CloseHandle
CreateFileMappingA
MapViewOfFile
GetFileAttributesA
CreateDirectoryA
SetLastError
RtlUnwind
GetConsoleMode
GetConsoleCP
GetProcessHeap
SetHandleCount
SetEnvironmentVariableW
GetSystemTimeAsFileTime
HeapFree
HeapAlloc
FileTimeToSystemTime
FileTimeToLocalFileTime
GetFileInformationByHandle
PeekNamedPipe
GetFileType
EnterCriticalSection
LeaveCriticalSection
GetTimeFormatA
GetDateFormatA
HeapReAlloc
GetModuleHandleW
Sleep
ExitProcess
GetCommandLineA
GetStartupInfoA
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
WideCharToMultiByte
GetTimeZoneInformation
GetCPInfo
InterlockedIncrement
InterlockedDecrement
GetACP
GetOEMCP
IsValidCodePage
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
GetCurrentThreadId
HeapCreate
HeapDestroy
VirtualFree
DeleteCriticalSection
FatalAppExitA
VirtualAlloc
WriteFile
SetEnvironmentVariableA

user32

wsprintfA
GetFocus
ShowWindow
SetCursor
GetDlgItem
SendDlgItemMessageA
GetParent
PostMessageA
GetWindowRect
MoveWindow
LoadCursorA
RegisterClassA
CreateWindowExA
MessageBoxA
UpdateWindow
DefWindowProcA
BeginPaint
GetSystemMetrics
EndPaint
PeekMessageA
TranslateMessage
DispatchMessageA
GetDC
ReleaseDC
SendMessageA
SetDlgItemTextA

gdi32

CreateFontA
SelectObject
SetBkMode
TextOutA
SetTextColor
DeleteObject
CreateDIBitmap
CreateSolidBrush

advapi32

RegDeleteKeyA
RegCloseKey
RegQueryValueExA
RegDeleteValueA
RegEnumKeyExA
RegCreateKeyExA
RegSetValueExA
RegOpenKeyExA
RegQueryValueA

shell32

ShellExecuteA

ole32

CoInitialize
CoUninitialize
CoCreateInstance

Sections

.text
Size: 141KB - Virtual size: 141KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 39KB - Virtual size: 39KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
lib/distutils/errors.pyc
lib/distutils/log.pyc
lib/distutils/sysconfig.pyc
lib/distutils/tests/Setup.sample
lib/distutils/text_file.pyc
lib/encodings/__init__.pyc
lib/encodings/aliases.pyc
lib/encodings/ascii.pyc
lib/encodings/base64_codec.pyc
lib/encodings/big5.pyc
lib/encodings/big5hkscs.pyc
lib/encodings/bz2_codec.pyc
lib/encodings/charmap.pyc
lib/encodings/cp037.pyc
lib/encodings/cp1006.pyc
lib/encodings/cp1026.pyc
lib/encodings/cp1140.pyc
lib/encodings/cp1250.pyc
lib/encodings/cp1251.pyc
lib/encodings/cp1252.pyc
lib/encodings/cp1253.pyc
lib/encodings/cp1254.pyc
lib/encodings/cp1255.pyc
lib/encodings/cp1256.pyc
lib/encodings/cp1257.pyc
lib/encodings/cp1258.pyc
lib/encodings/cp424.pyc
lib/encodings/cp437.pyc
lib/encodings/cp500.pyc
lib/encodings/cp720.pyc
lib/encodings/cp737.pyc
lib/encodings/cp775.pyc
lib/encodings/cp850.pyc
lib/encodings/cp852.pyc
lib/encodings/cp855.pyc
lib/encodings/cp856.pyc
lib/encodings/cp857.pyc
lib/encodings/cp858.pyc
lib/encodings/cp860.pyc
lib/encodings/cp861.pyc
lib/encodings/cp862.pyc
lib/encodings/cp863.pyc
lib/encodings/cp864.pyc
lib/encodings/cp865.pyc
lib/encodings/cp866.pyc
lib/encodings/cp869.pyc
lib/encodings/cp874.pyc
lib/encodings/cp875.pyc
lib/encodings/cp932.pyc
lib/encodings/cp949.pyc
lib/encodings/cp950.pyc
lib/encodings/euc_jis_2004.pyc
lib/encodings/euc_jisx0213.pyc
lib/encodings/euc_jp.pyc
lib/encodings/euc_kr.pyc
lib/encodings/gb18030.pyc
lib/encodings/gb2312.pyc
lib/encodings/gbk.pyc
lib/encodings/hex_codec.pyc
lib/encodings/hp_roman8.pyc
lib/encodings/hz.pyc
lib/encodings/idna.pyc
lib/encodings/iso2022_jp.pyc
lib/encodings/iso2022_jp_1.pyc
lib/encodings/iso2022_jp_2.pyc
lib/encodings/iso2022_jp_2004.pyc
lib/encodings/iso2022_jp_3.pyc
lib/encodings/iso2022_jp_ext.pyc
lib/encodings/iso2022_kr.pyc
lib/encodings/iso8859_1.pyc
lib/encodings/iso8859_10.pyc
lib/encodings/iso8859_11.pyc
lib/encodings/iso8859_13.pyc
lib/encodings/iso8859_14.pyc
lib/encodings/iso8859_15.pyc
lib/encodings/iso8859_16.pyc
lib/encodings/iso8859_2.pyc
lib/encodings/iso8859_3.pyc
lib/encodings/iso8859_4.pyc
lib/encodings/iso8859_5.pyc
lib/encodings/iso8859_6.pyc
lib/encodings/iso8859_7.pyc
lib/encodings/iso8859_8.pyc
lib/encodings/iso8859_9.pyc
lib/encodings/johab.pyc
lib/encodings/koi8_r.pyc
lib/encodings/koi8_u.pyc
lib/encodings/latin_1.pyc
lib/encodings/mac_arabic.pyc
lib/encodings/mac_centeuro.pyc
lib/encodings/mac_croatian.pyc
lib/encodings/mac_cyrillic.pyc
lib/encodings/mac_farsi.pyc
lib/encodings/mac_greek.pyc
lib/encodings/mac_iceland.pyc
lib/encodings/mac_latin2.pyc
lib/encodings/mac_roman.pyc
lib/encodings/mac_romanian.pyc
lib/encodings/mac_turkish.pyc
lib/encodings/mbcs.pyc
lib/encodings/palmos.pyc
lib/encodings/ptcp154.pyc
lib/encodings/punycode.pyc
lib/encodings/quopri_codec.pyc
lib/encodings/raw_unicode_escape.pyc
lib/encodings/rot_13.pyc
lib/encodings/shift_jis.pyc
lib/encodings/shift_jis_2004.pyc
lib/encodings/shift_jisx0213.pyc
lib/encodings/string_escape.pyc
lib/encodings/tis_620.pyc
lib/encodings/undefined.pyc
lib/encodings/unicode_escape.pyc
lib/encodings/unicode_internal.pyc
lib/encodings/utf_16.pyc
lib/encodings/utf_16_be.pyc
lib/encodings/utf_16_le.pyc
lib/encodings/utf_32.pyc
lib/encodings/utf_32_be.pyc
lib/encodings/utf_32_le.pyc
lib/encodings/utf_7.pyc
lib/encodings/utf_8.pyc
lib/encodings/utf_8_sig.pyc
lib/encodings/uu_codec.pyc
lib/encodings/zlib_codec.pyc
lib/library.zip
.zip
lib/logging/__init__.pyc
lib/mainlibr.dll
.dll windows x86

7f33ec0ad145348f43ee72ea60a50c60

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FindFirstFileW
SystemTimeToFileTime
SetEnvironmentVariableW
CreateDirectoryW
WaitForSingleObject
GetFileAttributesExA
GenerateConsoleCtrlEvent
SetFileTime
GetProcessTimes
OpenProcess
GetFileAttributesA
GetExitCodeProcess
GetFileAttributesW
CreateProcessA
TerminateProcess
CreateFileW
GetEnvironmentVariableA
CreateDirectoryA
SetCurrentDirectoryA
FindFirstFileA
GetCurrentDirectoryW
SetLastError
MoveFileW
RemoveDirectoryA
SetFileAttributesA
FindClose
GetFileType
MoveFileA
SetCurrentDirectoryW
RemoveDirectoryW
CreatePipe
SetEnvironmentVariableA
GetModuleFileNameA
FindNextFileA
FindNextFileW
GetCurrentDirectoryA
GetFileAttributesExW
GetVersion
DeleteFileW
GetFileInformationByHandle
CreateFileA
SetFileAttributesW
DeleteFileA
SetEvent
Sleep
CreateEventA
ResetEvent
SetConsoleCtrlHandler
WideCharToMultiByte
IsDBCSLeadByte
MultiByteToWideChar
GetStdHandle
GetProcAddress
GetModuleHandleA
ExpandEnvironmentStringsW
GetModuleHandleW
OutputDebugStringA
SetErrorMode
FreeLibrary
FormatMessageA
LoadLibraryExA
LocalFree
OutputDebugStringW
GetConsoleCP
GetConsoleOutputCP
GetVersionExA
TlsGetValue
HeapAlloc
InterlockedIncrement
InterlockedDecrement
HeapFree
InterlockedCompareExchange
GetProcessHeap
TlsSetValue
GetCurrentThreadId
TlsAlloc
TlsFree
GetCurrentProcessId
GetTickCount
IsDebuggerPresent
GetFullPathNameA
GetFullPathNameW
CloseHandle
DuplicateHandle
GetSystemInfo
CreateFileMappingA
GetLastError
FlushViewOfFile
GetCurrentProcess
SetEndOfFile
UnmapViewOfFile
MapViewOfFile
SetFilePointer
GetFileSize
GetACP
GetLocaleInfoA
QueryPerformanceFrequency
GetSystemTime
QueryPerformanceCounter
SetUnhandledExceptionFilter
UnhandledExceptionFilter
InterlockedExchange
GetSystemTimeAsFileTime

user32

CharPrevA
LoadStringA

advapi32

RegCloseKey
RegConnectRegistryA
RegFlushKey
RegLoadKeyA
RegEnumValueA
RegSaveKeyA
RegQueryValueA
RegDeleteValueA
RegQueryInfoKeyA
RegOpenKeyExA
RegCreateKeyExA
RegCreateKeyA
RegEnumKeyExA
RegDeleteKeyA
RegQueryValueExA
RegSetValueExA
RegSetValueA
CryptReleaseContext

shell32

ShellExecuteA
ShellExecuteW

msvcr90

fputs
fprintf
strchr
free
malloc
ungetc
fflush
fgetc
fopen
isdigit
fwrite
fclose
_finite
wcscoll
localeconv
strcoll
isalpha
isupper
memmove
setlocale
strxfrm
_errno
_copysign
_isnan
_HUGE
_time64
sprintf
isalnum
tolower
realloc
isspace
fread
ferror
clearerr
memchr
ldexp
feof
strtol
getc
_gmtime64
ceil
modf
_localtime64
_fstat64i32
strerror
__iob_func
strtok
setvbuf
_setmode
getenv
sqrt
cos
tanh
sinh
tan
cosh
acos
floor
frexp
atan
exp
fabs
asin
sin
_get_osfhandle
abort
_stricmp
tmpfile
_wcsicmp
strncat
_lseeki64
_environ
_tempnam
_wopen
tmpnam
strncmp
_msize
_cwait
__pioinfo
_spawnve
system
_exit
strncpy
wcsrchr
_spawnv
_commit
strrchr
_open_osfhandle
wcsncmp
_stat64i32
_fdopen
toupper
_mktime64
clock
_ftime64
strftime
ftell
fseek
_snprintf
wcstombs
fgetpos
_wfopen
fsetpos
fgets
_fileno
__control87_2
fputc
isxdigit
printf
exit
strstr
atoi
_mbstrlen
_getche
_getwch
_putch
_locking
_heapmin
_ungetch
_getwche
_kbhit
_putwch
_getch
__sys_nerr
__sys_errlist
putc
_vsnprintf
strpbrk
rewind
_resetstkoflw
signal
strtoul
vfprintf
_endthreadex
_beginthreadex
_encode_pointer
_malloc_crt
_encoded_null
_decode_pointer
_initterm
_initterm_e
_amsg_exit
_adjust_fdiv
__CppXcptFilter
_crt_debugger_hook
__clean_type_info_names_internal
_unlock
__dllonexit
_lock
_onexit
_except_handler4_common
_CIlog10
_CIfmod
_CIsqrt
_CIcosh
_CItan
_CItanh
islower
_getcwd
_hypot
_isatty
_lseek
_execve
_putenv
_read
_umask
_close
_open
_getpid
_dup
_execv
_write
_dup2
_tzset
_tzname
_timezone
_daylight
_strdup
_strnicmp
_unlink
memset
memcpy
_CIsin
_CIcos
_CIlog
_CIexp
_CIatan2
_CIpow
_CIsinh

Exports

Exports

PyAST_Compile
PyAST_FromNode
PyArena_AddPyObject
PyArena_Free
PyArena_Malloc
PyArena_New
PyArg_Parse
PyArg_ParseTuple
PyArg_ParseTupleAndKeywords
PyArg_UnpackTuple
PyArg_VaParse
PyArg_VaParseTupleAndKeywords
PyBaseObject_Type
PyBaseString_Type
PyBool_FromLong
PyBool_Type
PyBuffer_FillContiguousStrides
PyBuffer_FillInfo
PyBuffer_FromContiguous
PyBuffer_FromMemory
PyBuffer_FromObject
PyBuffer_FromReadWriteMemory
PyBuffer_FromReadWriteObject
PyBuffer_GetPointer
PyBuffer_IsContiguous
PyBuffer_New
PyBuffer_Release
PyBuffer_ToContiguous
PyBuffer_Type
PyByteArrayIter_Type
PyByteArray_AsString
PyByteArray_Concat
PyByteArray_Fini
PyByteArray_FromObject
PyByteArray_FromStringAndSize
PyByteArray_Init
PyByteArray_Resize
PyByteArray_Size
PyByteArray_Type
PyCFunction_Call
PyCFunction_ClearFreeList
PyCFunction_Fini
PyCFunction_GetFlags
PyCFunction_GetFunction
PyCFunction_GetSelf
PyCFunction_New
PyCFunction_NewEx
PyCFunction_Type
PyCObject_AsVoidPtr
PyCObject_FromVoidPtr
PyCObject_FromVoidPtrAndDesc
PyCObject_GetDesc
PyCObject_Import
PyCObject_SetVoidPtr
PyCObject_Type
PyCallIter_New
PyCallIter_Type
PyCallable_Check
PyCapsule_GetContext
PyCapsule_GetDestructor
PyCapsule_GetName
PyCapsule_GetPointer
PyCapsule_Import
PyCapsule_IsValid
PyCapsule_New
PyCapsule_SetContext
PyCapsule_SetDestructor
PyCapsule_SetName
PyCapsule_SetPointer
PyCapsule_Type
PyCell_Get
PyCell_New
PyCell_Set
PyCell_Type
PyClassMethod_New
PyClassMethod_Type
PyClass_IsSubclass
PyClass_New
PyClass_Type
PyCode_Addr2Line
PyCode_New
PyCode_NewEmpty
PyCode_Optimize
PyCode_Type
PyCodec_BackslashReplaceErrors
PyCodec_Decode
PyCodec_Decoder
PyCodec_Encode
PyCodec_Encoder
PyCodec_IgnoreErrors
PyCodec_IncrementalDecoder
PyCodec_IncrementalEncoder
PyCodec_LookupError
PyCodec_Register
PyCodec_RegisterError
PyCodec_ReplaceErrors
PyCodec_StreamReader
PyCodec_StreamWriter
PyCodec_StrictErrors
PyCodec_XMLCharRefReplaceErrors
PyComplex_AsCComplex
PyComplex_FromCComplex
PyComplex_FromDoubles
PyComplex_ImagAsDouble
PyComplex_RealAsDouble
PyComplex_Type
PyDescr_NewClassMethod
PyDescr_NewGetSet
PyDescr_NewMember
PyDescr_NewMethod
PyDescr_NewWrapper
PyDictItems_Type
PyDictIterItem_Type
PyDictIterKey_Type
PyDictIterValue_Type
PyDictKeys_Type
PyDictProxy_New
PyDictProxy_Type
PyDictValues_Type
PyDict_Clear
PyDict_Contains
PyDict_Copy
PyDict_DelItem
PyDict_DelItemString
PyDict_Fini
PyDict_GetItem
PyDict_GetItemString
PyDict_Items
PyDict_Keys
PyDict_Merge
PyDict_MergeFromSeq2
PyDict_New
PyDict_Next
PyDict_SetItem
PyDict_SetItemString
PyDict_Size
PyDict_Type
PyDict_Update
PyDict_Values
PyEllipsis_Type
PyEnum_Type
PyErr_BadArgument
PyErr_BadInternalCall
PyErr_CheckSignals
PyErr_Clear
PyErr_Display
PyErr_ExceptionMatches
PyErr_Fetch
PyErr_Format
PyErr_GivenExceptionMatches
PyErr_NewException
PyErr_NewExceptionWithDoc
PyErr_NoMemory
PyErr_NormalizeException
PyErr_Occurred
PyErr_Print
PyErr_PrintEx
PyErr_ProgramText
PyErr_Restore
PyErr_SetExcFromWindowsErr
PyErr_SetExcFromWindowsErrWithFilename
PyErr_SetExcFromWindowsErrWithFilenameObject
PyErr_SetExcFromWindowsErrWithUnicodeFilename
PyErr_SetFromErrno
PyErr_SetFromErrnoWithFilename
PyErr_SetFromErrnoWithFilenameObject
PyErr_SetFromErrnoWithUnicodeFilename
PyErr_SetFromWindowsErr
PyErr_SetFromWindowsErrWithFilename
PyErr_SetFromWindowsErrWithUnicodeFilename
PyErr_SetInterrupt
PyErr_SetNone
PyErr_SetObject
PyErr_SetString
PyErr_SyntaxLocation
PyErr_Warn
PyErr_WarnEx
PyErr_WarnExplicit
PyErr_WriteUnraisable
PyEval_AcquireLock
PyEval_AcquireThread
PyEval_CallFunction
PyEval_CallMethod
PyEval_CallObjectWithKeywords
PyEval_EvalCode
PyEval_EvalCodeEx
PyEval_EvalFrame
PyEval_EvalFrameEx
PyEval_GetBuiltins
PyEval_GetCallStats
PyEval_GetFrame
PyEval_GetFuncDesc
PyEval_GetFuncName
PyEval_GetGlobals
PyEval_GetLocals
PyEval_GetRestricted
PyEval_InitThreads
PyEval_MergeCompilerFlags
PyEval_ReInitThreads
PyEval_ReleaseLock
PyEval_ReleaseThread
PyEval_RestoreThread
PyEval_SaveThread
PyEval_SetProfile
PyEval_SetTrace
PyEval_ThreadsInitialized
PyExc_ArithmeticError
PyExc_AssertionError
PyExc_AttributeError
PyExc_BaseException
PyExc_BufferError
PyExc_BytesWarning
PyExc_DeprecationWarning
PyExc_EOFError
PyExc_EnvironmentError
PyExc_Exception
PyExc_FloatingPointError
PyExc_FutureWarning
PyExc_GeneratorExit
PyExc_IOError
PyExc_ImportError
PyExc_ImportWarning
PyExc_IndentationError
PyExc_IndexError
PyExc_KeyError
PyExc_KeyboardInterrupt
PyExc_LookupError
PyExc_MemoryError
PyExc_MemoryErrorInst
PyExc_NameError
PyExc_NotImplementedError
PyExc_OSError
PyExc_OverflowError
PyExc_PendingDeprecationWarning
PyExc_RecursionErrorInst
PyExc_ReferenceError
PyExc_RuntimeError
PyExc_RuntimeWarning
PyExc_StandardError
PyExc_StopIteration
PyExc_SyntaxError
PyExc_SyntaxWarning
PyExc_SystemError
PyExc_SystemExit
PyExc_TabError
PyExc_TypeError
PyExc_UnboundLocalError
PyExc_UnicodeDecodeError
PyExc_UnicodeEncodeError
PyExc_UnicodeError
PyExc_UnicodeTranslateError
PyExc_UnicodeWarning
PyExc_UserWarning
PyExc_ValueError
PyExc_Warning
PyExc_WindowsError
PyExc_ZeroDivisionError
PyFile_AsFile
PyFile_DecUseCount
PyFile_FromFile
PyFile_FromString
PyFile_GetLine
PyFile_IncUseCount
PyFile_Name
PyFile_SetBufSize
PyFile_SetEncoding
PyFile_SetEncodingAndErrors
PyFile_SoftSpace
PyFile_Type
PyFile_WriteObject
PyFile_WriteString
PyFloat_AsDouble
PyFloat_AsReprString
PyFloat_AsString
PyFloat_ClearFreeList
PyFloat_Fini
PyFloat_FromDouble
PyFloat_FromString
PyFloat_GetInfo
PyFloat_GetMax
PyFloat_GetMin
PyFloat_Type
PyFrame_BlockPop
PyFrame_BlockSetup
PyFrame_ClearFreeList
PyFrame_FastToLocals
PyFrame_Fini
PyFrame_GetLineNumber
PyFrame_LocalsToFast
PyFrame_New
PyFrame_Type
PyFrozenSet_New
PyFrozenSet_Type
PyFunction_GetClosure
PyFunction_GetCode
PyFunction_GetDefaults
PyFunction_GetGlobals
PyFunction_GetModule
PyFunction_New
PyFunction_SetClosure
PyFunction_SetDefaults
PyFunction_Type
PyFuture_FromAST
PyGC_Collect
PyGILState_Ensure
PyGILState_GetThisThreadState
PyGILState_Release
PyGen_NeedsFinalizing
PyGen_New
PyGen_Type
PyGetSetDescr_Type
PyImport_AddModule
PyImport_AppendInittab
PyImport_Cleanup
PyImport_ExecCodeModule
PyImport_ExecCodeModuleEx
PyImport_ExtendInittab
PyImport_FrozenModules
PyImport_GetImporter
PyImport_GetMagicNumber
PyImport_GetModuleDict
PyImport_Import
PyImport_ImportFrozenModule
PyImport_ImportModule
PyImport_ImportModuleLevel
PyImport_ImportModuleNoBlock
PyImport_Inittab
PyImport_ReloadModule
PyInstance_New
PyInstance_NewRaw
PyInstance_Type
PyInt_AsLong
PyInt_AsSsize_t
PyInt_AsUnsignedLongLongMask
PyInt_AsUnsignedLongMask
PyInt_ClearFreeList
PyInt_Fini
PyInt_FromLong
PyInt_FromSize_t
PyInt_FromSsize_t
PyInt_FromString
PyInt_FromUnicode
PyInt_GetMax
PyInt_Type
PyInterpreterState_Clear
PyInterpreterState_Delete
PyInterpreterState_Head
PyInterpreterState_New
PyInterpreterState_Next
PyInterpreterState_ThreadHead
PyIter_Next
PyList_Append
PyList_AsTuple
PyList_Fini
PyList_GetItem
PyList_GetSlice
PyList_Insert
PyList_New
PyList_Reverse
PyList_SetItem
PyList_SetSlice
PyList_Size
PyList_Sort
PyList_Type
PyLong_AsDouble
PyLong_AsLong
PyLong_AsLongAndOverflow
PyLong_AsLongLong
PyLong_AsLongLongAndOverflow
PyLong_AsSsize_t
PyLong_AsUnsignedLong
PyLong_AsUnsignedLongLong
PyLong_AsUnsignedLongLongMask
PyLong_AsUnsignedLongMask
PyLong_AsVoidPtr
PyLong_FromDouble
PyLong_FromLong
PyLong_FromLongLong
PyLong_FromSize_t
PyLong_FromSsize_t
PyLong_FromString
PyLong_FromUnicode
PyLong_FromUnsignedLong
PyLong_FromUnsignedLongLong
PyLong_FromVoidPtr
PyLong_GetInfo
PyLong_Type
PyMapping_Check
PyMapping_GetItemString
PyMapping_HasKey
PyMapping_HasKeyString
PyMapping_Length
PyMapping_SetItemString
PyMapping_Size
PyMarshal_ReadLastObjectFromFile
PyMarshal_ReadLongFromFile
PyMarshal_ReadObjectFromFile
PyMarshal_ReadObjectFromString
PyMarshal_ReadShortFromFile
PyMarshal_WriteLongToFile
PyMarshal_WriteObjectToFile
PyMarshal_WriteObjectToString
PyMem_Free
PyMem_Malloc
PyMem_Realloc
PyMemberDescr_Type
PyMember_Get
PyMember_GetOne
PyMember_Set
PyMember_SetOne
PyMemoryView_FromBuffer
PyMemoryView_FromObject
PyMemoryView_GetContiguous
PyMemoryView_Type
PyMethod_Class
PyMethod_ClearFreeList
PyMethod_Fini
PyMethod_Function
PyMethod_New
PyMethod_Self
PyMethod_Type
PyModule_AddIntConstant
PyModule_AddObject
PyModule_AddStringConstant
PyModule_GetDict
PyModule_GetFilename
PyModule_GetName
PyModule_New
PyModule_Type
PyNode_AddChild
PyNode_Compile
PyNode_Free
PyNode_ListTree
PyNode_New
PyNullImporter_Type
PyNumber_Absolute
PyNumber_Add
PyNumber_And
PyNumber_AsSsize_t
PyNumber_Check
PyNumber_Coerce
PyNumber_CoerceEx
PyNumber_Divide
PyNumber_Divmod
PyNumber_Float
PyNumber_FloorDivide
PyNumber_InPlaceAdd
PyNumber_InPlaceAnd
PyNumber_InPlaceDivide
PyNumber_InPlaceFloorDivide
PyNumber_InPlaceLshift
PyNumber_InPlaceMultiply
PyNumber_InPlaceOr
PyNumber_InPlacePower
PyNumber_InPlaceRemainder
PyNumber_InPlaceRshift
PyNumber_InPlaceSubtract
PyNumber_InPlaceTrueDivide
PyNumber_InPlaceXor
PyNumber_Index
PyNumber_Int
PyNumber_Invert
PyNumber_Long
PyNumber_Lshift
PyNumber_Multiply
PyNumber_Negative
PyNumber_Or
PyNumber_Positive
PyNumber_Power
PyNumber_Remainder
PyNumber_Rshift
PyNumber_Subtract
PyNumber_ToBase
PyNumber_TrueDivide
PyNumber_Xor
PyOS_AfterFork
PyOS_CheckStack
PyOS_FiniInterrupts
PyOS_InitInterrupts
PyOS_InputHook
PyOS_InterruptOccurred
PyOS_Readline
PyOS_ReadlineFunctionPointer
PyOS_ascii_atof
PyOS_ascii_formatd
PyOS_ascii_strtod
PyOS_double_to_string
PyOS_getsig
PyOS_mystricmp
PyOS_mystrnicmp
PyOS_setsig
PyOS_snprintf
PyOS_string_to_double
PyOS_strtol
PyOS_strtoul
PyOS_vsnprintf
PyObject_AsCharBuffer
PyObject_AsFileDescriptor
PyObject_AsReadBuffer
PyObject_AsWriteBuffer

Sections

.text
Size: 1.3MB - Virtual size: 1.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 849KB - Virtual size: 849KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 330KB - Virtual size: 400KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 90KB - Virtual size: 89KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
lib/pywintypes27.dll
.dll windows x86

6b5864d36594c378bd9792cad3f66e46

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

InitializeAcl
IsValidAcl
AddAce
GetAce
GetExplicitEntriesFromAclW
GetLengthSid
AddAuditAccessAce
DeleteAce
SetEntriesInAclW
GetEffectiveRightsFromAclW
GetAuditedPermissionsFromAclW
RegCloseKey
GetSecurityDescriptorDacl
GetSecurityDescriptorSacl
GetSecurityDescriptorOwner
GetSecurityDescriptorGroup
GetAclInformation
GetSecurityDescriptorControl
MakeSelfRelativeSD
GetSecurityDescriptorLength
IsValidSecurityDescriptor
MakeAbsoluteSD
InitializeSecurityDescriptor
SetSecurityDescriptorDacl
SetSecurityDescriptorSacl
SetSecurityDescriptorOwner
SetSecurityDescriptorGroup
IsValidSid
InitializeSid
GetSidSubAuthority
GetSidSubAuthorityCount
GetSidIdentifierAuthority
CopySid
EqualSid
AllocateAndInitializeSid
IsTextUnicode

user32

wsprintfA
wsprintfW

ole32

CLSIDFromProgID
StringFromGUID2
CoTaskMemAlloc
CoTaskMemFree
CoCreateGuid
CLSIDFromString

oleaut32

SysAllocStringLen
VariantTimeToSystemTime
SystemTimeToVariantTime
SysFreeString
SysStringLen

mainlibr

PyEval_ReleaseThread
PyThreadState_Delete
PyThreadState_Clear
PyErr_SetObject
PyUnicode_DecodeMBCS
PyLong_FromUnsignedLong
PyLong_AsUnsignedLong
PyObject_AsWriteBuffer
PyDict_GetItemString
PyRun_StringFlags
PyImport_ImportModule
PyExc_Exception
PyEval_InitThreads
PyUnicode_Type
PyModule_AddIntConstant
PyModule_GetDict
Py_InitModule4
PyObject_CallObject
PyCallable_Check
PyInt_AsUnsignedLongMask
PyType_Ready
PyDict_SetItemString
PyInt_AsLong
PyFloat_FromDouble
PyObject_HasAttrString
PySequence_Tuple
PyErr_NoMemory
PyBool_FromLong
PyString_AsString
PyLong_FromUnsignedLongLong
PyLong_FromLongLong
PyLong_AsUnsignedLongLong
PyErr_Occurred
PyLong_AsLongLong
PyExc_PendingDeprecationWarning
PyErr_WarnEx
PyObject_CheckReadBuffer
PyObject_AsReadBuffer
PyUnicodeUCS2_AsUnicode
PyObject_GenericSetAttr
PyErr_Fetch
PyEval_AcquireThread
PyObject_Print
_Py_HashPointer
_Py_TrueStruct
_Py_NotImplementedStruct
_Py_ZeroStruct
PyEval_SaveThread
PyEval_RestoreThread
PyExc_WindowsError
PyExc_AttributeError
PyString_AsStringAndSize
PyString_FromString
PyString_FromStringAndSize
PyType_Type
PyObject_GenericGetAttr
PySequence_Check
PyTuple_SetItem
Py_BuildValue
PyTuple_New
PyArg_ParseTupleAndKeywords
PyExc_ValueError
PyMapping_Check
PyObject_CallMethod
PyDict_New
PySequence_Size
PyTuple_GetItem
PySequence_GetItem
PyDict_SetItem
PyErr_Clear
PyObject_GetAttrString
PyExc_NotImplementedError
PyInt_FromLong
PyArg_ParseTuple
_Py_NoneStruct
PyExc_TypeError
PyErr_SetString
PyExc_MemoryError
PyErr_Format
PyUnicodeUCS2_AsWideChar
PyUnicodeUCS2_FromWideChar
PyMem_Free
PyMem_Malloc
PyUnicode_EncodeMBCS
PyString_Size
PyThreadState_New
Py_FatalError
PyThreadState_Swap
Py_MakePendingCalls
PyList_New
PyErr_Restore
PyList_Append
PyEval_CallObjectWithKeywords
PyExc_SystemError
PyErr_BadArgument
PyNumber_Check

msvcr90

_crt_debugger_hook
_onexit
_lock
__dllonexit
_unlock
__clean_type_info_names_internal
_except_handler4_common
?_type_info_dtor_internal_method@type_info@@QAEXXZ
__CppXcptFilter
_adjust_fdiv
_amsg_exit
_initterm_e
_initterm
_decode_pointer
_encoded_null
_malloc_crt
_encode_pointer
?terminate@@YAXXZ
fprintf
__iob_func
strncpy
wcsncpy
modf
strftime
_mktime64
_localtime64
__CxxFrameHandler3
_snwprintf
??2@YAPAXI@Z
malloc
free
memset
realloc
memcpy
??3@YAXPAX@Z
_strdup

kernel32

IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
InterlockedCompareExchange
Sleep
InterlockedExchange
GetModuleHandleA
LoadLibraryA
GetProcAddress
InitializeCriticalSection
TlsAlloc
DeleteCriticalSection
TlsFree
LeaveCriticalSection
EnterCriticalSection
DosDateTimeToFileTime
FormatMessageA
TlsGetValue
LocalAlloc
TlsSetValue
MultiByteToWideChar
GetDateFormatA
GetTimeFormatA
SystemTimeToFileTime
FileTimeToSystemTime
GetTimeZoneInformation
SetLastError
lstrlenA
CloseHandle
GetLastError
LocalFree

Exports

Exports

??0PyACL@@QAE@HH@Z
??0PyACL@@QAE@PAU_ACL@@@Z
??0PyDEVMODEA@@QAE@G@Z
??0PyDEVMODEA@@QAE@PAU_devicemodeA@@@Z
??0PyDEVMODEA@@QAE@XZ
??0PyDEVMODEW@@QAE@G@Z
??0PyDEVMODEW@@QAE@PAU_devicemodeW@@@Z
??0PyDEVMODEW@@QAE@XZ
??0PyHANDLE@@QAE@ABV0@@Z
??0PyHANDLE@@QAE@PAX@Z
??0PyHKEY@@QAE@ABV0@@Z
??0PyHKEY@@QAE@PAX@Z
??0PyIID@@QAE@ABU_GUID@@@Z
??0PyOVERLAPPED@@QAE@PBVsMyOverlapped@0@@Z
??0PyOVERLAPPED@@QAE@XZ
??0PySECURITY_ATTRIBUTES@@QAE@ABU_SECURITY_ATTRIBUTES@@@Z
??0PySECURITY_ATTRIBUTES@@QAE@XZ
??0PySECURITY_DESCRIPTOR@@QAE@H@Z
??0PySECURITY_DESCRIPTOR@@QAE@PAX@Z
??0PySID@@QAE@HPAX@Z
??0PySID@@QAE@PAX@Z
??0PyTime@@QAE@ABU_FILETIME@@@Z
??0PyTime@@QAE@ABU_SYSTEMTIME@@@Z
??0PyTime@@QAE@N@Z
??0PyTime@@QAE@_J@Z
??0PyWAVEFORMATEX@@QAE@ABUtWAVEFORMATEX@@@Z
??0PyWAVEFORMATEX@@QAE@XZ
??0PyWin_AutoFreeBstr@@QAE@PA_W@Z
??0sMyOverlapped@PyOVERLAPPED@@QAE@ABU_OVERLAPPED@@@Z
??0sMyOverlapped@PyOVERLAPPED@@QAE@XZ
??1PyACL@@QAE@XZ
??1PyDEVMODEA@@IAE@XZ
??1PyDEVMODEW@@IAE@XZ
??1PyHANDLE@@UAE@XZ
??1PyHKEY@@UAE@XZ
??1PyOVERLAPPED@@QAE@XZ
??1PySECURITY_ATTRIBUTES@@QAE@XZ
??1PySECURITY_DESCRIPTOR@@QAE@XZ
??1PySID@@QAE@XZ
??1PyWAVEFORMATEX@@QAE@XZ
??1PyWin_AutoFreeBstr@@QAE@XZ
??4PyACL@@QAEAAV0@ABV0@@Z
??4PyDEVMODEA@@QAEAAV0@ABV0@@Z
??4PyDEVMODEW@@QAEAAV0@ABV0@@Z
??4PyHANDLE@@QAEAAV0@ABV0@@Z
??4PyHKEY@@QAEAAV0@ABV0@@Z
??4PyIID@@QAEAAV0@ABV0@@Z
??4PyOVERLAPPED@@QAEAAV0@ABV0@@Z
??4PySECURITY_ATTRIBUTES@@QAEAAV0@ABV0@@Z
??4PySECURITY_DESCRIPTOR@@QAEAAV0@ABV0@@Z
??4PySID@@QAEAAV0@ABV0@@Z
??4PyTime@@QAEAAV0@ABV0@@Z
??4PyWAVEFORMATEX@@QAEAAV0@ABV0@@Z
??4PyWin_AutoFreeBstr@@QAEAAV0@ABV0@@Z
??4sMyOverlapped@PyOVERLAPPED@@QAEAAV01@ABV01@@Z
??BPyHANDLE@@QAEPAXXZ
??BPyWin_AutoFreeBstr@@QAEPA_WXZ
??_7PyHANDLE@@6B@
??_7PyHKEY@@6B@
??_FPyIID@@QAEXXZ
??_FPySECURITY_DESCRIPTOR@@QAEXXZ
??_FPyWin_AutoFreeBstr@@QAEXXZ
?AddAccessAllowedAce@PyACL@@SAPAU_object@@PAU2@0@Z
?AddAccessAllowedAceEx@PyACL@@SAPAU_object@@PAU2@0@Z
?AddAccessAllowedObjectAce@PyACL@@SAPAU_object@@PAU2@0@Z
?AddAccessDeniedAce@PyACL@@SAPAU_object@@PAU2@0@Z
?AddAccessDeniedAceEx@PyACL@@SAPAU_object@@PAU2@0@Z
?AddAccessDeniedObjectAce@PyACL@@SAPAU_object@@PAU2@0@Z
?AddAuditAccessAce@PyACL@@SAPAU_object@@PAU2@0@Z
?AddAuditAccessAceEx@PyACL@@SAPAU_object@@PAU2@0@Z
?AddAuditAccessObjectAce@PyACL@@SAPAU_object@@PAU2@0@Z
?AddMandatoryAce@PyACL@@SAPAU_object@@PAU2@0@Z
?Clear@PyDEVMODEA@@SAPAU_object@@PAU2@0@Z
?Clear@PyDEVMODEW@@SAPAU_object@@PAU2@0@Z
?Close@PyHANDLE@@SAPAU_object@@PAU2@0@Z
?Close@PyHANDLE@@UAEHXZ
?Close@PyHKEY@@UAEHXZ
?DeleteAce@PyACL@@SAPAU_object@@PAU2@0@Z
?Detach@PyHANDLE@@SAPAU_object@@PAU2@0@Z
?Format@PyTime@@SAPAU_object@@PAU2@0@Z
?FreeAbsoluteSD@@YAXPAX@Z
?GetACL@PyACL@@QAEPAU_ACL@@XZ
?GetAce@PyACL@@SAPAU_object@@PAU2@0@Z
?GetAceCount@PyACL@@SAPAU_object@@PAU2@0@Z
?GetAclRevision@PyACL@@SAPAU_object@@PAU2@0@Z
?GetAclSize@PyACL@@SAPAU_object@@PAU2@0@Z
?GetDEVMODE@PyDEVMODEA@@QAEPAU_devicemodeA@@XZ
?GetDEVMODE@PyDEVMODEW@@QAEPAU_devicemodeW@@XZ
?GetLength@PySECURITY_DESCRIPTOR@@SAPAU_object@@PAU2@0@Z
?GetLength@PySID@@SAPAU_object@@PAU2@0@Z
?GetOverlapped@PyOVERLAPPED@@QAEPAU_OVERLAPPED@@XZ
?GetPythonTraceback@@YAPADPAU_object@@00@Z
?GetSA@PySECURITY_ATTRIBUTES@@QAEPAU_SECURITY_ATTRIBUTES@@XZ
?GetSD@PySECURITY_DESCRIPTOR@@QAEPAXXZ
?GetSID@PySID@@QAEPAXXZ
?GetSecurityDescriptorControl@PySECURITY_DESCRIPTOR@@SAPAU_object@@PAU2@0@Z
?GetSecurityDescriptorDacl@PySECURITY_DESCRIPTOR@@SAPAU_object@@PAU2@0@Z
?GetSecurityDescriptorGroup@PySECURITY_DESCRIPTOR@@SAPAU_object@@PAU2@0@Z
?GetSecurityDescriptorOwner@PySECURITY_DESCRIPTOR@@SAPAU_object@@PAU2@0@Z
?GetSecurityDescriptorSacl@PySECURITY_DESCRIPTOR@@SAPAU_object@@PAU2@0@Z
?GetSidIdentifierAuthority@PySID@@SAPAU_object@@PAU2@0@Z
?GetSubAuthority@PySID@@SAPAU_object@@PAU2@0@Z
?GetSubAuthorityCount@PySID@@SAPAU_object@@PAU2@0@Z
?GetTime@PyTime@@QAEHPAN@Z
?GetTime@PyTime@@QAEHPAU_FILETIME@@@Z
?GetTime@PyTime@@QAEHPAU_SYSTEMTIME@@@Z
?GetTypeName@PyHANDLE@@UAEPBDXZ
?GetTypeName@PyHKEY@@UAEPBDXZ
?Initialize@PyACL@@SAPAU_object@@PAU2@0@Z
?Initialize@PySECURITY_DESCRIPTOR@@SAPAU_object@@PAU2@0@Z
?Initialize@PySID@@SAPAU_object@@PAU2@0@Z
?IsEqual@PyIID@@QAEHAAV1@@Z
?IsEqual@PyIID@@QAEHABU_GUID@@@Z
?IsEqual@PyIID@@QAEHPAU_object@@@Z
?IsSelfRelative@PySECURITY_DESCRIPTOR@@SAPAU_object@@PAU2@0@Z
?IsValid@PyACL@@SAPAU_object@@PAU2@0@Z
?IsValid@PySECURITY_DESCRIPTOR@@SAPAU_object@@PAU2@0@Z
?IsValid@PySID@@SAPAU_object@@PAU2@0@Z
?PyACLType@@3U_typeobject@@A
?PyDEVMODEAType@@3U_typeobject@@A
?PyDEVMODEWType@@3U_typeobject@@A
?PyGetAuditedPermissionsFromAcl@PyACL@@SAPAU_object@@PAU2@0@Z
?PyGetEffectiveRightsFromAcl@PyACL@@SAPAU_object@@PAU2@0@Z
?PyGetExplicitEntriesFromAcl@PyACL@@SAPAU_object@@PAU2@0@Z
?PyHANDLEType@@3U_typeobject@@A
?PyIIDType@@3U_typeobject@@A
?PyOVERLAPPEDType@@3U_typeobject@@A
?PyObject_FromWIN32_FIND_DATAA@@YAPAU_object@@PAU_WIN32_FIND_DATAA@@@Z
?PyObject_FromWIN32_FIND_DATAW@@YAPAU_object@@PAU_WIN32_FIND_DATAW@@@Z
?PySECURITY_ATTRIBUTESType@@3U_typeobject@@A
?PySECURITY_DESCRIPTORType@@3U_typeobject@@A
?PySIDType@@3U_typeobject@@A
?PySetEntriesInAcl@PyACL@@SAPAU_object@@PAU2@0@Z
?PySocket_AsSOCKET@@YAHPAU_object@@PAI@Z
?PyTimeType@@3U_typeobject@@A
?PyWAVEFORMATEXType@@3U_typeobject@@A
?PyWinCoreString_FromIID@@YAPAU_object@@ABU_GUID@@@Z
?PyWinCoreString_FromString@@YAPAU_object@@PBDH@Z
?PyWinCoreString_FromString@@YAPAU_object@@PB_WH@Z
?PyWinExc_ApiError@@3PAU_object@@A
?PyWinExc_COMError@@3PAU_object@@A
?PyWinGlobals_Ensure@@YAHXZ
?PyWinGlobals_Free@@YAXXZ
?PyWinInterpreterLock_Acquire@@YAXXZ
?PyWinInterpreterLock_Release@@YAXXZ
?PyWinLong_AsVoidPtr@@YAHPAU_object@@PAPAX@Z
?PyWinLong_FromHANDLE@@YAPAU_object@@PAX@Z
?PyWinLong_FromVoidPtr@@YAPAU_object@@PBX@Z
?PyWinMethod_NewACL@@YAPAU_object@@PAU1@0@Z
?PyWinMethod_NewHANDLE@@YAPAU_object@@PAU1@0@Z
?PyWinMethod_NewIID@@YAPAU_object@@PAU1@0@Z
?PyWinMethod_NewOVERLAPPED@@YAPAU_object@@PAU1@0@Z
?PyWinMethod_NewSECURITY_ATTRIBUTES@@YAPAU_object@@PAU1@0@Z
?PyWinMethod_NewSECURITY_DESCRIPTOR@@YAPAU_object@@PAU1@0@Z
?PyWinMethod_NewSID@@YAPAU_object@@PAU1@0@Z
?PyWinMethod_NewTime@@YAPAU_object@@PAU1@0@Z
?PyWinMethod_NewTimeStamp@@YAPAU_object@@PAU1@0@Z
?PyWinMethod_NewWAVEFORMATEX@@YAPAU_object@@PAU1@0@Z
?PyWinObject_AsACL@@YAHPAU_object@@PAPAU_ACL@@H@Z
?PyWinObject_AsBstr@@YAHPAU_object@@PAPA_WHPAK@Z
?PyWinObject_AsCharArray@@YAHPAU_object@@PAPAPADPAKH@Z
?PyWinObject_AsDATE@@YAHPAU_object@@PAN@Z
?PyWinObject_AsDEVMODE@@YAHPAU_object@@PAPAU_devicemodeA@@H@Z
?PyWinObject_AsDEVMODE@@YAHPAU_object@@PAPAU_devicemodeW@@H@Z
?PyWinObject_AsDWORDArray@@YAHPAU_object@@PAPAKPAKH@Z
?PyWinObject_AsFILETIME@@YAHPAU_object@@PAU_FILETIME@@@Z
?PyWinObject_AsHANDLE@@YAHPAU_object@@PAPAX@Z
?PyWinObject_AsHKEY@@YAHPAU_object@@PAPAUHKEY__@@@Z
?PyWinObject_AsIID@@YAHPAU_object@@PAU_GUID@@@Z
?PyWinObject_AsLARGE_INTEGER@@YAHPAU_object@@PAT_LARGE_INTEGER@@@Z
?PyWinObject_AsMSG@@YAHPAU_object@@PAUtagMSG@@@Z
?PyWinObject_AsMultipleString@@YAHPAU_object@@PAPADHPAK@Z
?PyWinObject_AsMultipleString@@YAHPAU_object@@PAPA_WHPAK@Z
?PyWinObject_AsOVERLAPPED@@YAHPAU_object@@PAPAU_OVERLAPPED@@H@Z
?PyWinObject_AsPARAM@@YAHPAU_object@@PAI@Z
?PyWinObject_AsPOINT@@YAHPAU_object@@PAUtagPOINT@@@Z
?PyWinObject_AsPfnAllocatedWCHAR@@YAHPAU_object@@P6APAXK@ZPAPA_WHPAK@Z
?PyWinObject_AsPyOVERLAPPED@@YAHPAU_object@@PAPAVPyOVERLAPPED@@H@Z
?PyWinObject_AsRECT@@YAHPAU_object@@PAUtagRECT@@@Z
?PyWinObject_AsReadBuffer@@YAHPAU_object@@PAPAXPAKH@Z
?PyWinObject_AsResourceIdA@@YAHPAU_object@@PAPADH@Z
?PyWinObject_AsResourceIdW@@YAHPAU_object@@PAPA_WH@Z
?PyWinObject_AsSECURITY_ATTRIBUTES@@YAHPAU_object@@PAPAU_SECURITY_ATTRIBUTES@@H@Z
?PyWinObject_AsSECURITY_DESCRIPTOR@@YAHPAU_object@@PAPAXH@Z
?PyWinObject_AsSID@@YAHPAU_object@@PAPAXH@Z
?PyWinObject_AsSYSTEMTIME@@YAHPAU_object@@PAU_SYSTEMTIME@@@Z
?PyWinObject_AsString@@YAHPAU_object@@PAPADHPAK@Z
?PyWinObject_AsTaskAllocatedWCHAR@@YAHPAU_object@@PAPA_WHPAK@Z
?PyWinObject_AsULARGE_INTEGER@@YAHPAU_object@@PAT_ULARGE_INTEGER@@@Z
?PyWinObject_AsWAVEFORMATEX@@YAHPAU_object@@PAPAUtWAVEFORMATEX@@H@Z
?PyWinObject_AsWCHAR@@YAHPAU_object@@PAPA_WHPAK@Z
?PyWinObject_AsWCHARArray@@YAHPAU_object@@PAPAPA_WPAKH@Z
?PyWinObject_AsWriteBuffer@@YAHPAU_object@@PAPAXPAKH@Z
?PyWinObject_CloseHANDLE@@YAHPAU_object@@@Z
?PyWinObject_CloseHKEY@@YAHPAU_object@@@Z
?PyWinObject_FreeBstr@@YAXPA_W@Z
?PyWinObject_FreeCharArray@@YAXPAPADK@Z
?PyWinObject_FreeMultipleString@@YAXPAD@Z
?PyWinObject_FreeMultipleString@@YAXPA_W@Z
?PyWinObject_FreeResourceId@@YAXPAD@Z
?PyWinObject_FreeResourceId@@YAXPA_W@Z
?PyWinObject_FreeString@@YAXPAD@Z
?PyWinObject_FreeString@@YAXPA_W@Z
?PyWinObject_FreeTaskAllocatedWCHAR@@YAXPA_W@Z
?PyWinObject_FreeWCHAR@@YAXPA_W@Z
?PyWinObject_FreeWCHARArray@@YAXPAPA_WK@Z
?PyWinObject_FromBstr@@YAPAU_object@@QA_WH@Z
?PyWinObject_FromDATE@@YAPAU_object@@N@Z
?PyWinObject_FromDEVMODE@@YAPAU_object@@PAU_devicemodeA@@@Z
?PyWinObject_FromDEVMODE@@YAPAU_object@@PAU_devicemodeW@@@Z
?PyWinObject_FromFILETIME@@YAPAU_object@@ABU_FILETIME@@@Z
?PyWinObject_FromHANDLE@@YAPAU_object@@PAX@Z
?PyWinObject_FromHKEY@@YAPAU_object@@PAUHKEY__@@@Z
?PyWinObject_FromIID@@YAPAU_object@@ABU_GUID@@@Z
?PyWinObject_FromIO_COUNTERS@@YAPAU_object@@PAU_IO_COUNTERS@@@Z
?PyWinObject_FromLARGE_INTEGER@@YAPAU_object@@ABT_LARGE_INTEGER@@@Z
?PyWinObject_FromMSG@@YAPAU_object@@PBUtagMSG@@@Z
?PyWinObject_FromMultipleString@@YAPAU_object@@PAD@Z
?PyWinObject_FromMultipleString@@YAPAU_object@@PA_W@Z
?PyWinObject_FromOLECHAR@@YAPAU_object@@PB_W@Z
?PyWinObject_FromOLECHAR@@YAPAU_object@@PB_WH@Z
?PyWinObject_FromOVERLAPPED@@YAPAU_object@@PBU_OVERLAPPED@@@Z
?PyWinObject_FromRECT@@YAPAU_object@@PAUtagRECT@@@Z
?PyWinObject_FromSECURITY_ATTRIBUTES@@YAPAU_object@@ABU_SECURITY_ATTRIBUTES@@@Z
?PyWinObject_FromSECURITY_DESCRIPTOR@@YAPAU_object@@PAX@Z
?PyWinObject_FromSID@@YAPAU_object@@PAX@Z
?PyWinObject_FromSYSTEMTIME@@YAPAU_object@@ABU_SYSTEMTIME@@@Z
?PyWinObject_FromTCHAR@@YAPAU_object@@PBDH@Z
?PyWinObject_FromTimeStamp@@YAPAU_object@@ABT_LARGE_INTEGER@@@Z
?PyWinObject_FromULARGE_INTEGER@@YAPAU_object@@ABT_ULARGE_INTEGER@@@Z
?PyWinSequence_Tuple@@YAPAU_object@@PAU1@PAK@Z
?PyWinThreadState_Clear@@YAXXZ
?PyWinThreadState_Ensure@@YAHXZ
?PyWinThreadState_Free@@YAXXZ
?PyWinTimeObject_Fromtime_t@@YAPAU_object@@_J@Z
?PyWinTime_Check@@YAHPAU_object@@@Z
?PyWin_AcquireGlobalLock@@YAXXZ
?PyWin_CopyString@@YAPADPBD@Z
?PyWin_CopyString@@YAPA_WPB_W@Z
?PyWin_GetErrorMessageModule@@YAPAUHINSTANCE__@@K@Z
?PyWin_InterpreterState@@3PAU_is@@A
?PyWin_MakePendingCalls@@YAXXZ
?PyWin_NewUnicode@@YAPAU_object@@PAU1@0@Z
?PyWin_RegisterErrorMessageModule@@YAHKKPAUHINSTANCE__@@@Z
?PyWin_ReleaseGlobalLock@@YAXXZ
?PyWin_SetAPIError@@YAPAU_object@@PADJ@Z
?PyWin_SetBasicCOMError@@YAPAU_object@@J@Z
?SetACL@PyACL@@QAEHPAU_ACL@@@Z
?SetBstr@PyWin_AutoFreeBstr@@QAEXPA_W@Z
?SetSD@PySECURITY_DESCRIPTOR@@QAEHPAX@Z
?SetSecurityDescriptorControl@PySECURITY_DESCRIPTOR@@SAPAU_object@@PAU2@0@Z
?SetSecurityDescriptorDacl@PySECURITY_DESCRIPTOR@@SAPAU_object@@PAU2@0@Z
?SetSecurityDescriptorGroup@PySECURITY_DESCRIPTOR@@SAPAU_object@@PAU2@0@Z
?SetSecurityDescriptorOwner@PySECURITY_DESCRIPTOR@@SAPAU_object@@PAU2@0@Z
?SetSecurityDescriptorSacl@PySECURITY_DESCRIPTOR@@SAPAU_object@@PAU2@0@Z
?SetSubAuthority@PySID@@SAPAU_object@@PAU2@0@Z
?_MakeAbsoluteSD@@YAHPAXPAPAX@Z
?asLong@PyTime@@QAEJXZ
?asStr@PyHANDLE@@QAEPAU_object@@XZ
?binaryFailureFunc@PyHANDLE@@SAPAU_object@@PAU2@0@Z
?binaryFailureFunc@PyTime@@SAPAU_object@@PAU2@0@Z
?compare@PyTime@@QAEHPAU_object@@@Z
?compareFunc@PyTime@@SAHPAU_object@@0@Z
?deallocFunc@PyACL@@SAXPAU_object@@@Z
?deallocFunc@PyDEVMODEA@@SAXPAU_object@@@Z
?deallocFunc@PyDEVMODEW@@SAXPAU_object@@@Z
?deallocFunc@PyHANDLE@@SAXPAU_object@@@Z
?deallocFunc@PyIID@@SAXPAU_object@@@Z
?deallocFunc@PyOVERLAPPED@@SAXPAU_object@@@Z
?deallocFunc@PySECURITY_ATTRIBUTES@@SAXPAU_object@@@Z
?deallocFunc@PySECURITY_DESCRIPTOR@@SAXPAU_object@@@Z
?deallocFunc@PySID@@SAXPAU_object@@@Z
?deallocFunc@PyTime@@SAXPAU_object@@@Z
?deallocFunc@PyWAVEFORMATEX@@SAXPAU_object@@@Z
?floatFunc@PyTime@@SAPAU_object@@PAU2@@Z
?get_DeviceName@PyDEVMODEA@@SAPAU_object@@PAU2@PAX@Z
?get_DeviceName@PyDEVMODEW@@SAPAU_object@@PAU2@PAX@Z
?get_DriverData@PyDEVMODEA@@SAPAU_object@@PAU2@PAX@Z
?get_DriverData@PyDEVMODEW@@SAPAU_object@@PAU2@PAX@Z
?get_FormName@PyDEVMODEA@@SAPAU_object@@PAU2@PAX@Z
?get_FormName@PyDEVMODEW@@SAPAU_object@@PAU2@PAX@Z
?get_handle@PyHANDLE@@SAPAU_object@@PAU2@PAX@Z
?getattro@PyOVERLAPPED@@SAPAU_object@@PAU2@0@Z
?getattro@PySECURITY_ATTRIBUTES@@SAPAU_object@@PAU2@0@Z
?getattro@PyTime@@SAPAU_object@@PAU2@0@Z
?getreadbuf@PySECURITY_DESCRIPTOR@@SAHPAU_object@@HPAPAX@Z
?getreadbuf@PySID@@SAHPAU_object@@HPAPAX@Z
?getsegcount@PySECURITY_DESCRIPTOR@@SAHPAU_object@@PAH@Z
?getsegcount@PySID@@SAHPAU_object@@PAH@Z
?getset@PyDEVMODEA@@2PAUPyGetSetDef@@A
?getset@PyDEVMODEW@@2PAUPyGetSetDef@@A
?getset@PyHANDLE@@2PAUPyGetSetDef@@A
?hash@PyHANDLE@@QAEJXZ
?hash@PyIID@@QAEJXZ
?hash@PyTime@@QAEJXZ
?hashFunc@PyHANDLE@@SAJPAU_object@@@Z
?hashFunc@PyIID@@SAJPAU_object@@@Z
?hashFunc@PyOVERLAPPED@@SAJPAU_object@@@Z
?hashFunc@PyTime@@SAJPAU_object@@@Z
?intFunc@PyHANDLE@@SAPAU_object@@PAU2@@Z
?intFunc@PyTime@@SAPAU_object@@PAU2@@Z
?longFunc@PyHANDLE@@SAPAU_object@@PAU2@@Z
?members@PyDEVMODEA@@2PAUPyMemberDef@@A
?members@PyDEVMODEW@@2PAUPyMemberDef@@A
?members@PyOVERLAPPED@@2PAUPyMemberDef@@A
?members@PySECURITY_ATTRIBUTES@@2PAUPyMemberDef@@A
?members@PyWAVEFORMATEX@@2PAUPyMemberDef@@A
?methods@PyACL@@2PAUPyMethodDef@@A
?methods@PyDEVMODEA@@2PAUPyMethodDef@@A
?methods@PyDEVMODEW@@2PAUPyMethodDef@@A
?methods@PyHANDLE@@2PAUPyMethodDef@@A
?methods@PySECURITY_ATTRIBUTES@@2PAUPyMethodDef@@A
?methods@PySECURITY_DESCRIPTOR@@2PAUPyMethodDef@@A
?methods@PySID@@2PAUPyMethodDef@@A
?methods@PyTime@@2PAUPyMethodDef@@A
?modify_in_place@PyDEVMODEA@@QAEXXZ
?modify_in_place@PyDEVMODEW@@QAEXXZ
?nonzeroFunc@PyHANDLE@@SAHPAU_object@@@Z
?nonzeroFunc@PyTime@@SAHPAU_object@@@Z
?print@PyHANDLE@@QAEHPAU_iobuf@@H@Z
?printFunc@PyHANDLE@@SAHPAU_object@@PAU_iobuf@@H@Z
?repr@PyIID@@QAEPAU_object@@XZ
?repr@PyTime@@QAEPAU_object@@XZ
?reprFunc@PyIID@@SAPAU_object@@PAU2@@Z
?reprFunc@PyTime@@SAPAU_object@@PAU2@@Z
?richcompare@PyHANDLE@@QAEPAU_object@@PAU2@H@Z
?richcompare@PyIID@@QAEPAU_object@@PAU2@H@Z
?richcompare@PySID@@QAEPAU_object@@PAU2@H@Z
?richcompare@PyTime@@QAEPAU_object@@PAU2@H@Z
?richcompareFunc@PyHANDLE@@SAPAU_object@@PAU2@0H@Z
?richcompareFunc@PyIID@@SAPAU_object@@PAU2@0H@Z
?richcompareFunc@PyOVERLAPPED@@SAPAU_object@@PAU2@0H@Z
?richcompareFunc@PySID@@SAPAU_object@@PAU2@0H@Z
?richcompareFunc@PyTime@@SAPAU_object@@PAU2@0H@Z
?set_DeviceName@PyDEVMODEA@@SAHPAU_object@@0PAX@Z
?set_DeviceName@PyDEVMODEW@@SAHPAU_object@@0PAX@Z
?set_DriverData@PyDEVMODEA@@SAHPAU_object@@0PAX@Z
?set_DriverData@PyDEVMODEW@@SAHPAU_object@@0PAX@Z
?set_FormName@PyDEVMODEA@@SAHPAU_object@@0PAX@Z
?set_FormName@PyDEVMODEW@@SAHPAU_object@@0PAX@Z
?setattro@PyOVERLAPPED@@SAHPAU_object@@00@Z
?setattro@PySECURITY_ATTRIBUTES@@SAHPAU_object@@00@Z
?str@PyIID@@QAEPAU_object@@XZ
?str@PyTime@@QAEPAU_object@@XZ
?strFunc@PyHANDLE@@SAPAU_object@@PAU2@@Z
?strFunc@PyIID@@SAPAU_object@@PAU2@@Z
?strFunc@PySID@@SAPAU_object@@PAU2@@Z
?strFunc@PyTime@@SAPAU_object@@PAU2@@Z
?ternaryFailureFunc@PyHANDLE@@SAPAU_object@@PAU2@00@Z
?ternaryFailureFunc@PyTime@@SAPAU_object@@PAU2@00@Z
?tp_new@PyDEVMODEA@@SAPAU_object@@PAU_typeobject@@PAU2@1@Z
?tp_new@PyDEVMODEW@@SAPAU_object@@PAU_typeobject@@PAU2@1@Z
?unaryFailureFunc@PyHANDLE@@SAPAU_object@@PAU2@@Z
?unaryFailureFunc@PyTime@@SAPAU_object@@PAU2@@Z
_DllMain@12
initpywintypes

Sections

.text
Size: 46KB - Virtual size: 46KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 48KB - Virtual size: 47KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 6KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 584B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
lib/select.pyd
.dll windows x86

18f3941a0d21c8c93688c3ce1a704ee6

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

ws2_32

__WSAFDIsSet
select
WSAGetLastError

mainlibr

PyModule_AddObject
PyErr_SetExcFromWindowsErr
PyList_New
PyObject_AsFileDescriptor
PyNumber_Check
PyFloat_AsDouble
PyTuple_Pack
PyErr_NewException
PyExc_TypeError
PyErr_Occurred
PyExc_ValueError
PyEval_SaveThread
_Py_NoneStruct
PyExc_OverflowError
PySequence_Fast
PyList_SetItem
PyEval_RestoreThread
Py_InitModule4
PyArg_UnpackTuple
PyErr_SetString

msvcr90

_except_handler4_common
_onexit
_lock
__dllonexit
_unlock
__clean_type_info_names_internal
_crt_debugger_hook
__CppXcptFilter
_adjust_fdiv
_encode_pointer
_malloc_crt
free
_encoded_null
_decode_pointer
_initterm
_initterm_e
_amsg_exit

kernel32

GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
DisableThreadLibraryCalls
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
InterlockedCompareExchange
Sleep
InterlockedExchange

Exports

Exports

initselect

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 494B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
lib/unicodedata.pyd
.dll windows x86

39e972c327c428db8a140c7faf84f975

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mainlibr

Py_InitModule4
PyExc_TypeError
PyModule_AddObject
PyErr_Format
PyModule_AddStringConstant
PyType_Type
_Py_ctype_toupper
_PyUnicodeUCS2_ToNumeric
PyUnicodeUCS2_Resize
PyErr_SetString
PyUnicodeUCS2_GetSize
PyObject_Free
PyExc_ValueError
PyOS_snprintf
PyArg_ParseTuple
_PyUnicodeUCS2_ToDigit
PyExc_KeyError
PyUnicode_Type
PyCapsule_New
PyObject_GenericGetAttr
Py_BuildValue
PyInt_FromLong
_PyUnicodeUCS2_ToDecimalDigit
_PyObject_New
PyFloat_FromDouble
PyUnicodeUCS2_FromUnicode
PyString_FromString

msvcr90

free
_except_handler4_common
_onexit
_lock
__dllonexit
_unlock
__clean_type_info_names_internal
_crt_debugger_hook
__CppXcptFilter
_adjust_fdiv
_amsg_exit
_initterm_e
sprintf
strncmp
_encode_pointer
_malloc_crt
memcpy
_encoded_null
_decode_pointer
_initterm

kernel32

IsDebuggerPresent
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
DisableThreadLibraryCalls
InterlockedExchange
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
InterlockedCompareExchange
Sleep

Exports

Exports

initunicodedata

Sections

.text
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 650KB - Virtual size: 650KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
lib/unittest/__init__.pyc
lib/unittest/case.pyc
lib/unittest/loader.pyc
lib/unittest/main.pyc
lib/unittest/result.pyc
lib/unittest/runner.pyc
lib/unittest/signals.pyc
lib/unittest/suite.pyc
lib/unittest/util.pyc
lib/win32api.pyd
.dll windows x86

dee6f9e004cf15200478c2ae26afb94f

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

SetSysColors
GetSysColor
GetSystemMetrics
ExitWindowsEx
VkKeyScanExA
PostMessageA
VkKeyScanA
VkKeyScanW
GetKeyboardState
GetKeyState
GetAsyncKeyState
LoadCursorA
SetCursor
GetCursorPos
PostThreadMessageA
PostQuitMessage
RegisterWindowMessageA
SendMessageA
SetCursorPos
ShowCursor
WinHelpA
MessageBeep
MessageBoxExA
GetFocus
GetWindowLongA
SetWindowLongA
SetWindowWord
SetClassLongA
SetClassWord
LoadStringW
keybd_event
mouse_event
GetKeyboardLayout
GetKeyboardLayoutNameW
GetKeyboardLayoutList
LoadKeyboardLayoutA
ToAsciiEx
MapVirtualKeyW
ChangeDisplaySettingsA
EnumDisplaySettingsA
ClipCursor
VkKeyScanExW

advapi32

RegSetKeySecurity
RegSetValueExA
RegSetValueA
RegSaveKeyA
RegQueryValueExA
RegQueryValueA
RegQueryInfoKeyW
RegOpenKeyExA
RegUnLoadKeyA
RegLoadKeyA
RegFlushKey
RegEnumValueA
RegNotifyChangeKeyValue
RegEnumKeyExW
RegEnumKeyExA
RegQueryInfoKeyA
RegEnumKeyA
RegDeleteValueA
RegDeleteKeyA
RegCreateKeyExW
RegCreateKeyA
RegConnectRegistryA
InitiateSystemShutdownA
AbortSystemShutdownA
OpenThreadToken
OpenProcessToken
GetTokenInformation
LookupAccountSidA
GetUserNameA
RegGetKeySecurity

shell32

FindExecutableA
ShellExecuteA
DragFinish
DragQueryFileA

version

GetFileVersionInfoW
GetFileVersionInfoSizeW
VerQueryValueW

mainlibr

PyGILState_Ensure
PyGILState_Release
PyErr_SetObject
Py_BuildValue
PyArg_ParseTuple
_Py_NoneStruct
PyEval_RestoreThread
PyEval_SaveThread
PyLong_FromUnsignedLong
PyErr_Format
PyExc_NotImplementedError
PyErr_NoMemory
PyErr_SetString
PyList_Append
PyList_New
PyExc_SystemError
PyErr_Clear
PyString_FromString
PyInt_FromLong
PyExc_MemoryError
PyExc_TypeError
PyString_FromStringAndSize
PyUnicodeUCS2_FromUnicode
PyErr_Occurred
PyInt_AsLong
PyExc_ValueError
PyLong_FromUnsignedLongLong
PyTuple_GetItem
PyLong_AsLong
PyTuple_Size
PyArg_ParseTupleAndKeywords
PyTuple_New
PyMem_Free
PyLong_AsUnsignedLong
PyString_AsString
PySequence_GetItem
PySequence_Check
PyObject_IsSubclass
PyExc_Exception
PyObject_CallObject
PyThreadState_Swap
PyCallable_Check
PyTuple_SetItem
PyObject_IsTrue
PyBool_FromLong
PyType_Type
PyLong_FromLong
PyExc_WindowsError
PyObject_GenericSetAttr
PyObject_GenericGetAttr
PyList_Size
PyList_SetSlice
PyObject_Call
PySys_WriteStderr
PyErr_Print
Py_InitModule4
PyModule_GetDict
PyDict_SetItemString
PyType_Ready
PyModule_AddIntConstant

pywintypes27

?PyWinObject_FreeWCHAR@@YAXPA_W@Z
?PyWinExc_ApiError@@3PAU_object@@A
?PyWin_SetAPIError@@YAPAU_object@@PADJ@Z
?PyWinLong_FromHANDLE@@YAPAU_object@@PAX@Z
?PyWinObject_AsHANDLE@@YAHPAU_object@@PAPAX@Z
?PyWinObject_CloseHANDLE@@YAHPAU_object@@@Z
?PyWinObject_FromHANDLE@@YAPAU_object@@PAX@Z
?PyWinObject_FreeString@@YAXPAD@Z
?PyWinObject_AsString@@YAHPAU_object@@PAPADHPAK@Z
?PyWinObject_FromTCHAR@@YAPAU_object@@PBDH@Z
?PyWinObject_FromOLECHAR@@YAPAU_object@@PB_WH@Z
?PyWinObject_AsWCHAR@@YAHPAU_object@@PAPA_WHPAK@Z
?PyObject_FromWIN32_FIND_DATAA@@YAPAU_object@@PAU_WIN32_FIND_DATAA@@@Z
?PyWinSequence_Tuple@@YAPAU_object@@PAU1@PAK@Z
?PyWin_GetErrorMessageModule@@YAPAUHINSTANCE__@@K@Z
?PyWinObject_FromOLECHAR@@YAPAU_object@@PB_W@Z
?PyWinObject_FreeResourceId@@YAXPAD@Z
?PyWinObject_AsResourceIdA@@YAHPAU_object@@PAPADH@Z
?PyWinLong_FromVoidPtr@@YAPAU_object@@PBX@Z
?PyWinObject_FromMultipleString@@YAPAU_object@@PAD@Z
?PyWinObject_FromSYSTEMTIME@@YAPAU_object@@ABU_SYSTEMTIME@@@Z
?PyWinObject_AsSYSTEMTIME@@YAHPAU_object@@PAU_SYSTEMTIME@@@Z
?PyWinObject_AsPARAM@@YAHPAU_object@@PAI@Z
?PyWinObject_CloseHKEY@@YAHPAU_object@@@Z
?PyWinObject_FromHKEY@@YAPAU_object@@PAUHKEY__@@@Z
?PyWinObject_AsSECURITY_ATTRIBUTES@@YAHPAU_object@@PAPAU_SECURITY_ATTRIBUTES@@H@Z
?PyWinObject_FromFILETIME@@YAPAU_object@@ABU_FILETIME@@@Z
?PyWinObject_FreeMultipleString@@YAXPA_W@Z
?PyWinObject_AsReadBuffer@@YAHPAU_object@@PAPAXPAKH@Z
?PyWinObject_AsMultipleString@@YAHPAU_object@@PAPADHPAK@Z
?PyWinObject_AsULARGE_INTEGER@@YAHPAU_object@@PAT_ULARGE_INTEGER@@@Z
?PyWinObject_FromULARGE_INTEGER@@YAPAU_object@@ABT_ULARGE_INTEGER@@@Z
?PyWinObject_AsSECURITY_DESCRIPTOR@@YAHPAU_object@@PAPAXH@Z
?PyWinObject_FromSECURITY_DESCRIPTOR@@YAPAU_object@@PAX@Z
?PyWinLong_AsVoidPtr@@YAHPAU_object@@PAPAX@Z
?PyWinObject_FreeResourceId@@YAXPA_W@Z
?PyWinObject_AsResourceIdW@@YAHPAU_object@@PAPA_WH@Z
?PyWinThreadState_Free@@YAXXZ
?PyWinInterpreterLock_Release@@YAXXZ
?PyWinInterpreterLock_Acquire@@YAXXZ
?PyWinThreadState_Ensure@@YAHXZ
?PyWinGlobals_Ensure@@YAHXZ
?PyWin_NewUnicode@@YAPAU_object@@PAU1@0@Z
?PyWinObject_AsDEVMODE@@YAHPAU_object@@PAPAU_devicemodeA@@H@Z
?PyWinObject_FromDEVMODE@@YAPAU_object@@PAU_devicemodeA@@@Z
?PyWinObject_FromRECT@@YAPAU_object@@PAUtagRECT@@@Z
?PyWinObject_AsRECT@@YAHPAU_object@@PAUtagRECT@@@Z
?PyWinObject_AsPOINT@@YAHPAU_object@@PAUtagPOINT@@@Z
?PyWinObject_AsHKEY@@YAHPAU_object@@PAPAUHKEY__@@@Z

msvcr90

malloc
__CxxFrameHandler3
calloc
_except_handler3
_crt_debugger_hook
_except_handler4_common
_onexit
_lock
__dllonexit
_unlock
__clean_type_info_names_internal
__CppXcptFilter
_adjust_fdiv
_amsg_exit
_initterm_e
_initterm
_decode_pointer
_encoded_null
_malloc_crt
_encode_pointer
memset
memcpy
_itoa
??3@YAXPAX@Z
??2@YAPAXI@Z
free

kernel32

GetCurrentProcessId
GetCommandLineA
GetDiskFreeSpaceA
GetDiskFreeSpaceExA
GetFileAttributesW
GetCurrentThreadId
GetLogicalDriveStringsA
GetModuleFileNameA
GetModuleFileNameW
GetModuleHandleA
GetUserDefaultLCID
GetUserDefaultLangID
GetCurrentThread
GetCurrentProcess
CloseHandle
GetComputerNameA
SetLastError
GetConsoleTitleA
GetLogicalDrives
GenerateConsoleCtrlEvent
FormatMessageW
FormatMessageA
LocalFree
FindCloseChangeNotification
FindNextChangeNotification
FindFirstChangeNotificationA
FindFirstFileA
FindNextFileA
FindClose
ExpandEnvironmentStringsA
SetEnvironmentVariableW
SetEnvironmentVariableA
GetEnvironmentVariableW
GetLastError
GetEnvironmentVariableA
DeleteFileA
DebugBreak
CopyFileA
DuplicateHandle
SetStdHandle
Beep
GetFileAttributesA
GetSystemDefaultLCID
GetSystemDefaultLangID
LoadLibraryA
LoadLibraryExA
FreeLibrary
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetSystemTimeAsFileTime
QueryPerformanceCounter
DisableThreadLibraryCalls
InterlockedCompareExchange
Sleep
RaiseException
InterlockedExchange
LocalAlloc
SetConsoleCtrlHandler
GlobalMemoryStatus
CompareStringW
EnumResourceLanguagesW
EnumResourceTypesW
EnumResourceNamesA
EndUpdateResourceA
UpdateResourceW
BeginUpdateResourceA
FindResourceExA
SizeofResource
LoadResource
LockResource
TerminateProcess
OpenProcess
OutputDebugStringA
GetThreadLocale
SetThreadLocale
SetSystemTime
SetLocalTime
GetLocalTime
GetSystemTime
SetFileAttributesA
WritePrivateProfileStringA
WriteProfileStringA
WinExec
SleepEx
SetErrorMode
SetConsoleTitleA
SearchPathA
MoveFileExA
MoveFileA
GetWindowsDirectoryA
GetFullPathNameA
GetVolumeInformationA
GetVersionExA
GetVersion
GetSystemDirectoryA
GetTimeFormatA
GetDateFormatA
SetTimeZoneInformation
GetTimeZoneInformation
GetTempFileNameA
GetTempPathA
GetTickCount
GetShortPathNameA
GetShortPathNameW
GetSystemInfo
WritePrivateProfileSectionA
WriteProfileSectionA
GetPrivateProfileSectionA
GetProfileSectionA
GetPrivateProfileIntA
GetPrivateProfileStringA
GetProfileIntA
GetProfileStringA
GetProcAddress
GetStdHandle

Exports

Exports

?PyDISPLAY_DEVICEType@@3U_typeobject@@A
initwin32api

Sections

.text
Size: 54KB - Virtual size: 53KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 30KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 576B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
mainlibr.dll
.dll windows x86

7f33ec0ad145348f43ee72ea60a50c60

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FindFirstFileW
SystemTimeToFileTime
SetEnvironmentVariableW
CreateDirectoryW
WaitForSingleObject
GetFileAttributesExA
GenerateConsoleCtrlEvent
SetFileTime
GetProcessTimes
OpenProcess
GetFileAttributesA
GetExitCodeProcess
GetFileAttributesW
CreateProcessA
TerminateProcess
CreateFileW
GetEnvironmentVariableA
CreateDirectoryA
SetCurrentDirectoryA
FindFirstFileA
GetCurrentDirectoryW
SetLastError
MoveFileW
RemoveDirectoryA
SetFileAttributesA
FindClose
GetFileType
MoveFileA
SetCurrentDirectoryW
RemoveDirectoryW
CreatePipe
SetEnvironmentVariableA
GetModuleFileNameA
FindNextFileA
FindNextFileW
GetCurrentDirectoryA
GetFileAttributesExW
GetVersion
DeleteFileW
GetFileInformationByHandle
CreateFileA
SetFileAttributesW
DeleteFileA
SetEvent
Sleep
CreateEventA
ResetEvent
SetConsoleCtrlHandler
WideCharToMultiByte
IsDBCSLeadByte
MultiByteToWideChar
GetStdHandle
GetProcAddress
GetModuleHandleA
ExpandEnvironmentStringsW
GetModuleHandleW
OutputDebugStringA
SetErrorMode
FreeLibrary
FormatMessageA
LoadLibraryExA
LocalFree
OutputDebugStringW
GetConsoleCP
GetConsoleOutputCP
GetVersionExA
TlsGetValue
HeapAlloc
InterlockedIncrement
InterlockedDecrement
HeapFree
InterlockedCompareExchange
GetProcessHeap
TlsSetValue
GetCurrentThreadId
TlsAlloc
TlsFree
GetCurrentProcessId
GetTickCount
IsDebuggerPresent
GetFullPathNameA
GetFullPathNameW
CloseHandle
DuplicateHandle
GetSystemInfo
CreateFileMappingA
GetLastError
FlushViewOfFile
GetCurrentProcess
SetEndOfFile
UnmapViewOfFile
MapViewOfFile
SetFilePointer
GetFileSize
GetACP
GetLocaleInfoA
QueryPerformanceFrequency
GetSystemTime
QueryPerformanceCounter
SetUnhandledExceptionFilter
UnhandledExceptionFilter
InterlockedExchange
GetSystemTimeAsFileTime

user32

CharPrevA
LoadStringA

advapi32

RegCloseKey
RegConnectRegistryA
RegFlushKey
RegLoadKeyA
RegEnumValueA
RegSaveKeyA
RegQueryValueA
RegDeleteValueA
RegQueryInfoKeyA
RegOpenKeyExA
RegCreateKeyExA
RegCreateKeyA
RegEnumKeyExA
RegDeleteKeyA
RegQueryValueExA
RegSetValueExA
RegSetValueA
CryptReleaseContext

shell32

ShellExecuteA
ShellExecuteW

msvcr90

fputs
fprintf
strchr
free
malloc
ungetc
fflush
fgetc
fopen
isdigit
fwrite
fclose
_finite
wcscoll
localeconv
strcoll
isalpha
isupper
memmove
setlocale
strxfrm
_errno
_copysign
_isnan
_HUGE
_time64
sprintf
isalnum
tolower
realloc
isspace
fread
ferror
clearerr
memchr
ldexp
feof
strtol
getc
_gmtime64
ceil
modf
_localtime64
_fstat64i32
strerror
__iob_func
strtok
setvbuf
_setmode
getenv
sqrt
cos
tanh
sinh
tan
cosh
acos
floor
frexp
atan
exp
fabs
asin
sin
_get_osfhandle
abort
_stricmp
tmpfile
_wcsicmp
strncat
_lseeki64
_environ
_tempnam
_wopen
tmpnam
strncmp
_msize
_cwait
__pioinfo
_spawnve
system
_exit
strncpy
wcsrchr
_spawnv
_commit
strrchr
_open_osfhandle
wcsncmp
_stat64i32
_fdopen
toupper
_mktime64
clock
_ftime64
strftime
ftell
fseek
_snprintf
wcstombs
fgetpos
_wfopen
fsetpos
fgets
_fileno
__control87_2
fputc
isxdigit
printf
exit
strstr
atoi
_mbstrlen
_getche
_getwch
_putch
_locking
_heapmin
_ungetch
_getwche
_kbhit
_putwch
_getch
__sys_nerr
__sys_errlist
putc
_vsnprintf
strpbrk
rewind
_resetstkoflw
signal
strtoul
vfprintf
_endthreadex
_beginthreadex
_encode_pointer
_malloc_crt
_encoded_null
_decode_pointer
_initterm
_initterm_e
_amsg_exit
_adjust_fdiv
__CppXcptFilter
_crt_debugger_hook
__clean_type_info_names_internal
_unlock
__dllonexit
_lock
_onexit
_except_handler4_common
_CIlog10
_CIfmod
_CIsqrt
_CIcosh
_CItan
_CItanh
islower
_getcwd
_hypot
_isatty
_lseek
_execve
_putenv
_read
_umask
_close
_open
_getpid
_dup
_execv
_write
_dup2
_tzset
_tzname
_timezone
_daylight
_strdup
_strnicmp
_unlink
memset
memcpy
_CIsin
_CIcos
_CIlog
_CIexp
_CIatan2
_CIpow
_CIsinh

Exports

Exports

PyAST_Compile
PyAST_FromNode
PyArena_AddPyObject
PyArena_Free
PyArena_Malloc
PyArena_New
PyArg_Parse
PyArg_ParseTuple
PyArg_ParseTupleAndKeywords
PyArg_UnpackTuple
PyArg_VaParse
PyArg_VaParseTupleAndKeywords
PyBaseObject_Type
PyBaseString_Type
PyBool_FromLong
PyBool_Type
PyBuffer_FillContiguousStrides
PyBuffer_FillInfo
PyBuffer_FromContiguous
PyBuffer_FromMemory
PyBuffer_FromObject
PyBuffer_FromReadWriteMemory
PyBuffer_FromReadWriteObject
PyBuffer_GetPointer
PyBuffer_IsContiguous
PyBuffer_New
PyBuffer_Release
PyBuffer_ToContiguous
PyBuffer_Type
PyByteArrayIter_Type
PyByteArray_AsString
PyByteArray_Concat
PyByteArray_Fini
PyByteArray_FromObject
PyByteArray_FromStringAndSize
PyByteArray_Init
PyByteArray_Resize
PyByteArray_Size
PyByteArray_Type
PyCFunction_Call
PyCFunction_ClearFreeList
PyCFunction_Fini
PyCFunction_GetFlags
PyCFunction_GetFunction
PyCFunction_GetSelf
PyCFunction_New
PyCFunction_NewEx
PyCFunction_Type
PyCObject_AsVoidPtr
PyCObject_FromVoidPtr
PyCObject_FromVoidPtrAndDesc
PyCObject_GetDesc
PyCObject_Import
PyCObject_SetVoidPtr
PyCObject_Type
PyCallIter_New
PyCallIter_Type
PyCallable_Check
PyCapsule_GetContext
PyCapsule_GetDestructor
PyCapsule_GetName
PyCapsule_GetPointer
PyCapsule_Import
PyCapsule_IsValid
PyCapsule_New
PyCapsule_SetContext
PyCapsule_SetDestructor
PyCapsule_SetName
PyCapsule_SetPointer
PyCapsule_Type
PyCell_Get
PyCell_New
PyCell_Set
PyCell_Type
PyClassMethod_New
PyClassMethod_Type
PyClass_IsSubclass
PyClass_New
PyClass_Type
PyCode_Addr2Line
PyCode_New
PyCode_NewEmpty
PyCode_Optimize
PyCode_Type
PyCodec_BackslashReplaceErrors
PyCodec_Decode
PyCodec_Decoder
PyCodec_Encode
PyCodec_Encoder
PyCodec_IgnoreErrors
PyCodec_IncrementalDecoder
PyCodec_IncrementalEncoder
PyCodec_LookupError
PyCodec_Register
PyCodec_RegisterError
PyCodec_ReplaceErrors
PyCodec_StreamReader
PyCodec_StreamWriter
PyCodec_StrictErrors
PyCodec_XMLCharRefReplaceErrors
PyComplex_AsCComplex
PyComplex_FromCComplex
PyComplex_FromDoubles
PyComplex_ImagAsDouble
PyComplex_RealAsDouble
PyComplex_Type
PyDescr_NewClassMethod
PyDescr_NewGetSet
PyDescr_NewMember
PyDescr_NewMethod
PyDescr_NewWrapper
PyDictItems_Type
PyDictIterItem_Type
PyDictIterKey_Type
PyDictIterValue_Type
PyDictKeys_Type
PyDictProxy_New
PyDictProxy_Type
PyDictValues_Type
PyDict_Clear
PyDict_Contains
PyDict_Copy
PyDict_DelItem
PyDict_DelItemString
PyDict_Fini
PyDict_GetItem
PyDict_GetItemString
PyDict_Items
PyDict_Keys
PyDict_Merge
PyDict_MergeFromSeq2
PyDict_New
PyDict_Next
PyDict_SetItem
PyDict_SetItemString
PyDict_Size
PyDict_Type
PyDict_Update
PyDict_Values
PyEllipsis_Type
PyEnum_Type
PyErr_BadArgument
PyErr_BadInternalCall
PyErr_CheckSignals
PyErr_Clear
PyErr_Display
PyErr_ExceptionMatches
PyErr_Fetch
PyErr_Format
PyErr_GivenExceptionMatches
PyErr_NewException
PyErr_NewExceptionWithDoc
PyErr_NoMemory
PyErr_NormalizeException
PyErr_Occurred
PyErr_Print
PyErr_PrintEx
PyErr_ProgramText
PyErr_Restore
PyErr_SetExcFromWindowsErr
PyErr_SetExcFromWindowsErrWithFilename
PyErr_SetExcFromWindowsErrWithFilenameObject
PyErr_SetExcFromWindowsErrWithUnicodeFilename
PyErr_SetFromErrno
PyErr_SetFromErrnoWithFilename
PyErr_SetFromErrnoWithFilenameObject
PyErr_SetFromErrnoWithUnicodeFilename
PyErr_SetFromWindowsErr
PyErr_SetFromWindowsErrWithFilename
PyErr_SetFromWindowsErrWithUnicodeFilename
PyErr_SetInterrupt
PyErr_SetNone
PyErr_SetObject
PyErr_SetString
PyErr_SyntaxLocation
PyErr_Warn
PyErr_WarnEx
PyErr_WarnExplicit
PyErr_WriteUnraisable
PyEval_AcquireLock
PyEval_AcquireThread
PyEval_CallFunction
PyEval_CallMethod
PyEval_CallObjectWithKeywords
PyEval_EvalCode
PyEval_EvalCodeEx
PyEval_EvalFrame
PyEval_EvalFrameEx
PyEval_GetBuiltins
PyEval_GetCallStats
PyEval_GetFrame
PyEval_GetFuncDesc
PyEval_GetFuncName
PyEval_GetGlobals
PyEval_GetLocals
PyEval_GetRestricted
PyEval_InitThreads
PyEval_MergeCompilerFlags
PyEval_ReInitThreads
PyEval_ReleaseLock
PyEval_ReleaseThread
PyEval_RestoreThread
PyEval_SaveThread
PyEval_SetProfile
PyEval_SetTrace
PyEval_ThreadsInitialized
PyExc_ArithmeticError
PyExc_AssertionError
PyExc_AttributeError
PyExc_BaseException
PyExc_BufferError
PyExc_BytesWarning
PyExc_DeprecationWarning
PyExc_EOFError
PyExc_EnvironmentError
PyExc_Exception
PyExc_FloatingPointError
PyExc_FutureWarning
PyExc_GeneratorExit
PyExc_IOError
PyExc_ImportError
PyExc_ImportWarning
PyExc_IndentationError
PyExc_IndexError
PyExc_KeyError
PyExc_KeyboardInterrupt
PyExc_LookupError
PyExc_MemoryError
PyExc_MemoryErrorInst
PyExc_NameError
PyExc_NotImplementedError
PyExc_OSError
PyExc_OverflowError
PyExc_PendingDeprecationWarning
PyExc_RecursionErrorInst
PyExc_ReferenceError
PyExc_RuntimeError
PyExc_RuntimeWarning
PyExc_StandardError
PyExc_StopIteration
PyExc_SyntaxError
PyExc_SyntaxWarning
PyExc_SystemError
PyExc_SystemExit
PyExc_TabError
PyExc_TypeError
PyExc_UnboundLocalError
PyExc_UnicodeDecodeError
PyExc_UnicodeEncodeError
PyExc_UnicodeError
PyExc_UnicodeTranslateError
PyExc_UnicodeWarning
PyExc_UserWarning
PyExc_ValueError
PyExc_Warning
PyExc_WindowsError
PyExc_ZeroDivisionError
PyFile_AsFile
PyFile_DecUseCount
PyFile_FromFile
PyFile_FromString
PyFile_GetLine
PyFile_IncUseCount
PyFile_Name
PyFile_SetBufSize
PyFile_SetEncoding
PyFile_SetEncodingAndErrors
PyFile_SoftSpace
PyFile_Type
PyFile_WriteObject
PyFile_WriteString
PyFloat_AsDouble
PyFloat_AsReprString
PyFloat_AsString
PyFloat_ClearFreeList
PyFloat_Fini
PyFloat_FromDouble
PyFloat_FromString
PyFloat_GetInfo
PyFloat_GetMax
PyFloat_GetMin
PyFloat_Type
PyFrame_BlockPop
PyFrame_BlockSetup
PyFrame_ClearFreeList
PyFrame_FastToLocals
PyFrame_Fini
PyFrame_GetLineNumber
PyFrame_LocalsToFast
PyFrame_New
PyFrame_Type
PyFrozenSet_New
PyFrozenSet_Type
PyFunction_GetClosure
PyFunction_GetCode
PyFunction_GetDefaults
PyFunction_GetGlobals
PyFunction_GetModule
PyFunction_New
PyFunction_SetClosure
PyFunction_SetDefaults
PyFunction_Type
PyFuture_FromAST
PyGC_Collect
PyGILState_Ensure
PyGILState_GetThisThreadState
PyGILState_Release
PyGen_NeedsFinalizing
PyGen_New
PyGen_Type
PyGetSetDescr_Type
PyImport_AddModule
PyImport_AppendInittab
PyImport_Cleanup
PyImport_ExecCodeModule
PyImport_ExecCodeModuleEx
PyImport_ExtendInittab
PyImport_FrozenModules
PyImport_GetImporter
PyImport_GetMagicNumber
PyImport_GetModuleDict
PyImport_Import
PyImport_ImportFrozenModule
PyImport_ImportModule
PyImport_ImportModuleLevel
PyImport_ImportModuleNoBlock
PyImport_Inittab
PyImport_ReloadModule
PyInstance_New
PyInstance_NewRaw
PyInstance_Type
PyInt_AsLong
PyInt_AsSsize_t
PyInt_AsUnsignedLongLongMask
PyInt_AsUnsignedLongMask
PyInt_ClearFreeList
PyInt_Fini
PyInt_FromLong
PyInt_FromSize_t
PyInt_FromSsize_t
PyInt_FromString
PyInt_FromUnicode
PyInt_GetMax
PyInt_Type
PyInterpreterState_Clear
PyInterpreterState_Delete
PyInterpreterState_Head
PyInterpreterState_New
PyInterpreterState_Next
PyInterpreterState_ThreadHead
PyIter_Next
PyList_Append
PyList_AsTuple
PyList_Fini
PyList_GetItem
PyList_GetSlice
PyList_Insert
PyList_New
PyList_Reverse
PyList_SetItem
PyList_SetSlice
PyList_Size
PyList_Sort
PyList_Type
PyLong_AsDouble
PyLong_AsLong
PyLong_AsLongAndOverflow
PyLong_AsLongLong
PyLong_AsLongLongAndOverflow
PyLong_AsSsize_t
PyLong_AsUnsignedLong
PyLong_AsUnsignedLongLong
PyLong_AsUnsignedLongLongMask
PyLong_AsUnsignedLongMask
PyLong_AsVoidPtr
PyLong_FromDouble
PyLong_FromLong
PyLong_FromLongLong
PyLong_FromSize_t
PyLong_FromSsize_t
PyLong_FromString
PyLong_FromUnicode
PyLong_FromUnsignedLong
PyLong_FromUnsignedLongLong
PyLong_FromVoidPtr
PyLong_GetInfo
PyLong_Type
PyMapping_Check
PyMapping_GetItemString
PyMapping_HasKey
PyMapping_HasKeyString
PyMapping_Length
PyMapping_SetItemString
PyMapping_Size
PyMarshal_ReadLastObjectFromFile
PyMarshal_ReadLongFromFile
PyMarshal_ReadObjectFromFile
PyMarshal_ReadObjectFromString
PyMarshal_ReadShortFromFile
PyMarshal_WriteLongToFile
PyMarshal_WriteObjectToFile
PyMarshal_WriteObjectToString
PyMem_Free
PyMem_Malloc
PyMem_Realloc
PyMemberDescr_Type
PyMember_Get
PyMember_GetOne
PyMember_Set
PyMember_SetOne
PyMemoryView_FromBuffer
PyMemoryView_FromObject
PyMemoryView_GetContiguous
PyMemoryView_Type
PyMethod_Class
PyMethod_ClearFreeList
PyMethod_Fini
PyMethod_Function
PyMethod_New
PyMethod_Self
PyMethod_Type
PyModule_AddIntConstant
PyModule_AddObject
PyModule_AddStringConstant
PyModule_GetDict
PyModule_GetFilename
PyModule_GetName
PyModule_New
PyModule_Type
PyNode_AddChild
PyNode_Compile
PyNode_Free
PyNode_ListTree
PyNode_New
PyNullImporter_Type
PyNumber_Absolute
PyNumber_Add
PyNumber_And
PyNumber_AsSsize_t
PyNumber_Check
PyNumber_Coerce
PyNumber_CoerceEx
PyNumber_Divide
PyNumber_Divmod
PyNumber_Float
PyNumber_FloorDivide
PyNumber_InPlaceAdd
PyNumber_InPlaceAnd
PyNumber_InPlaceDivide
PyNumber_InPlaceFloorDivide
PyNumber_InPlaceLshift
PyNumber_InPlaceMultiply
PyNumber_InPlaceOr
PyNumber_InPlacePower
PyNumber_InPlaceRemainder
PyNumber_InPlaceRshift
PyNumber_InPlaceSubtract
PyNumber_InPlaceTrueDivide
PyNumber_InPlaceXor
PyNumber_Index
PyNumber_Int
PyNumber_Invert
PyNumber_Long
PyNumber_Lshift
PyNumber_Multiply
PyNumber_Negative
PyNumber_Or
PyNumber_Positive
PyNumber_Power
PyNumber_Remainder
PyNumber_Rshift
PyNumber_Subtract
PyNumber_ToBase
PyNumber_TrueDivide
PyNumber_Xor
PyOS_AfterFork
PyOS_CheckStack
PyOS_FiniInterrupts
PyOS_InitInterrupts
PyOS_InputHook
PyOS_InterruptOccurred
PyOS_Readline
PyOS_ReadlineFunctionPointer
PyOS_ascii_atof
PyOS_ascii_formatd
PyOS_ascii_strtod
PyOS_double_to_string
PyOS_getsig
PyOS_mystricmp
PyOS_mystrnicmp
PyOS_setsig
PyOS_snprintf
PyOS_string_to_double
PyOS_strtol
PyOS_strtoul
PyOS_vsnprintf
PyObject_AsCharBuffer
PyObject_AsFileDescriptor
PyObject_AsReadBuffer
PyObject_AsWriteBuffer

Sections

.text
Size: 1.3MB - Virtual size: 1.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 849KB - Virtual size: 849KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 330KB - Virtual size: 400KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 90KB - Virtual size: 89KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
sanicball.exe
.exe windows x86

9c56e400679bb1b5ccb30e74b4572f80

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

shlwapi

PathRemoveFileSpecA

user32

MessageBoxA

mainlibr

Py_FrozenFlag
Py_IgnoreEnvironmentFlag
Py_SetPythonHome
Py_SetProgramName
Py_Initialize
PySys_SetArgv
PyExc_SystemExit
PyErr_ExceptionMatches
PySys_GetObject
PyObject_CallObject
PyImport_ImportModule
Py_NoSiteFlag
PyObject_GetAttrString
PyErr_Clear
Py_Exit
PyInt_AsLong
PyObject_Str
PyErr_Fetch
PyErr_NormalizeException
PyString_FromString
PyTuple_New
PyString_Format
_Py_NoneStruct
Py_Finalize
PyRun_SimpleStringFlags
PyImport_Import
_PyString_Join

msvcr90

_crt_debugger_hook
_controlfp_s
_invoke_watson
_except_handler4_common
_decode_pointer
_onexit
_lock
__dllonexit
_unlock
?terminate@@YAXXZ
__set_app_type
_encode_pointer
__p__fmode
__p__commode
_adjust_fdiv
__argc
__argv
_amsg_exit
__getmainargs
_cexit
_exit
_XcptFilter
_ismbblead
exit
_acmdln
_initterm
_initterm_e
_configthreadlocale
__setusermatherr

kernel32

IsDebuggerPresent
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
SetUnhandledExceptionFilter
GetStartupInfoA
InterlockedCompareExchange
Sleep
InterlockedExchange
GetModuleFileNameA

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 551KB - Virtual size: 551KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

c8c2cee07fc4b85f3be9974252fc031b

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

mainlibr

msvcr90

Exports

Exports

Sections

.text Size: 795KB - Virtual size: 795KB

.rdata Size: 216KB - Virtual size: 215KB

.data Size: 21KB - Virtual size: 32KB

.reloc Size: 42KB - Virtual size: 42KB

ee1ecf7625cac98e2e0b4acf875dd2a1

Headers

File Characteristics

Imports

mainlibr

msvcr90

kernel32

Exports

Exports

Sections

.text Size: 3KB - Virtual size: 2KB

.rdata Size: 2KB - Virtual size: 1KB

.data Size: 512B - Virtual size: 916B

.rsrc Size: 1024B - Virtual size: 584B

.reloc Size: 512B - Virtual size: 402B

a2dad90cffe0296243fc0b82eb823efc

Headers

DLL Characteristics

File Characteristics

Imports

mainlibr

msvcr90

kernel32

Exports

Exports

Sections

.text Size: 49KB - Virtual size: 49KB

.rdata Size: 7KB - Virtual size: 7KB

.data Size: 9KB - Virtual size: 9KB

.reloc Size: 2KB - Virtual size: 2KB

d95d6ea9375a00177f1911909ce801e6

Headers

DLL Characteristics

File Characteristics

Imports

hid

ws2_32

kernel32

user32

version

ole32

shlwapi

advapi32

gdi32

shell32

opengl32

winmm

oleaut32

msacm32

imm32

dnsapi

iphlpapi

winhttp

Exports

Exports

Sections

.text Size: 8.3MB - Virtual size: 8.3MB

.text
Size: 795KB - Virtual size: 795KB

.rdata
Size: 216KB - Virtual size: 215KB

.data
Size: 21KB - Virtual size: 32KB

.reloc
Size: 42KB - Virtual size: 42KB

.text
Size: 3KB - Virtual size: 2KB

.rdata
Size: 2KB - Virtual size: 1KB

.data
Size: 512B - Virtual size: 916B

.rsrc
Size: 1024B - Virtual size: 584B

.reloc
Size: 512B - Virtual size: 402B

.text
Size: 49KB - Virtual size: 49KB

.rdata
Size: 7KB - Virtual size: 7KB

.data
Size: 9KB - Virtual size: 9KB

.reloc
Size: 2KB - Virtual size: 2KB

.text
Size: 8.3MB - Virtual size: 8.3MB

.rdata
Size: 1.6MB - Virtual size: 1.6MB

.data
Size: 184KB - Virtual size: 816KB

.trace
Size: 5KB - Virtual size: 5KB

_RDATA
Size: 1KB - Virtual size: 1KB

.rsrc
Size: 553KB - Virtual size: 552KB

.reloc
Size: 369KB - Virtual size: 368KB

42:1a:f2:94:09:84:19:1f:52:0a:4b:c6:24:26:a7:4b
Certificate

47:8a:8e:fb:59:e1:d8:3f:0c:e1:42:d2:a2:87:07:be
Certificate

10:70:9d:4f:f5:54:08:d7:30:60:01:d8:ea:91:75:bb
Certificate

75:95:3f:a5:4d:d1:2d:d9:ca:6b:94:8c:17:bf:d6:7c
Certificate

1c:f6:a3:05:8f:3f:55:de:76:d6:4e:b5:1e:e0:6f:2e:9e:6f:c9:17
Signer

.text
Size: 392KB - Virtual size: 392KB

.rdata
Size: 26KB - Virtual size: 26KB

.data
Size: 8KB - Virtual size: 128KB

.rsrc
Size: 30KB - Virtual size: 30KB

.reloc
Size: 14KB - Virtual size: 13KB

.text
Size: 4KB - Virtual size: 3KB

.rsrc
Size: 1024B - Virtual size: 828B

.reloc
Size: 512B - Virtual size: 12B

.text
Size: 232KB - Virtual size: 231KB

.rsrc
Size: 1024B - Virtual size: 788B

.reloc
Size: 512B - Virtual size: 12B

.text
Size: 20KB - Virtual size: 20KB

.reloc
Size: 512B - Virtual size: 12B

.text
Size: 121KB - Virtual size: 121KB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 512B - Virtual size: 12B