Overview
overview
10Static
static
10wintaylor2...32.dll
windows7-x64
1wintaylor2...32.dll
windows10-2004-x64
1wintaylor2...it.exe
windows7-x64
7wintaylor2...it.exe
windows10-2004-x64
7wintaylor2...LL.dll
windows7-x64
3wintaylor2...LL.dll
windows10-2004-x64
3wintaylor2...er.exe
windows7-x64
1wintaylor2...er.exe
windows10-2004-x64
1wintaylor2...er.dll
windows7-x64
6wintaylor2...er.dll
windows10-2004-x64
6wintaylor2...te.dll
windows7-x64
1wintaylor2...te.dll
windows10-2004-x64
1wintaylor2...32.dll
windows7-x64
3wintaylor2...32.dll
windows10-2004-x64
3wintaylor2...pt.dll
windows7-x64
1wintaylor2...pt.dll
windows10-2004-x64
1wintaylor2...39.dll
windows7-x64
3wintaylor2...39.dll
windows10-2004-x64
3wintaylor2...39.dll
windows7-x64
3wintaylor2...39.dll
windows10-2004-x64
3wintaylor2...39.dll
windows7-x64
3wintaylor2...39.dll
windows10-2004-x64
3wintaylor2...39.dll
windows7-x64
1wintaylor2...39.dll
windows10-2004-x64
1wintaylor2...39.dll
windows7-x64
3wintaylor2...39.dll
windows10-2004-x64
3wintaylor2...ge.dll
windows7-x64
3wintaylor2...ge.dll
windows10-2004-x64
3wintaylor2...de.pdf
windows7-x64
1wintaylor2...de.pdf
windows10-2004-x64
1wintaylor2...40.dll
windows7-x64
1wintaylor2...40.dll
windows10-2004-x64
1Behavioral task
behavioral1
Sample
wintaylor2.1/COMDLG32.dll
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
wintaylor2.1/COMDLG32.dll
Resource
win10v2004-20231023-en
Behavioral task
behavioral3
Sample
wintaylor2.1/Programs/HexEdit.exe
Resource
win7-20231023-en
Behavioral task
behavioral4
Sample
wintaylor2.1/Programs/HexEdit.exe
Resource
win10v2004-20231023-en
Behavioral task
behavioral5
Sample
wintaylor2.1/Programs/Imager/ADIsoDLL.dll
Resource
win7-20231023-en
Behavioral task
behavioral6
Sample
wintaylor2.1/Programs/Imager/ADIsoDLL.dll
Resource
win10v2004-20231023-en
Behavioral task
behavioral7
Sample
wintaylor2.1/Programs/Imager/FTKImager.exe
Resource
win7-20231023-en
Behavioral task
behavioral8
Sample
wintaylor2.1/Programs/Imager/FTKImager.exe
Resource
win10v2004-20231020-en
Behavioral task
behavioral9
Sample
wintaylor2.1/Programs/Imager/IsoBuster.dll
Resource
win7-20231020-en
Behavioral task
behavioral10
Sample
wintaylor2.1/Programs/Imager/IsoBuster.dll
Resource
win10v2004-20231020-en
Behavioral task
behavioral11
Sample
wintaylor2.1/Programs/Imager/MD5Remote.dll
Resource
win7-20231023-en
Behavioral task
behavioral12
Sample
wintaylor2.1/Programs/Imager/MD5Remote.dll
Resource
win10v2004-20231025-en
Behavioral task
behavioral13
Sample
wintaylor2.1/Programs/Imager/ProfUIS284ad32.dll
Resource
win7-20231023-en
Behavioral task
behavioral14
Sample
wintaylor2.1/Programs/Imager/ProfUIS284ad32.dll
Resource
win10v2004-20231023-en
Behavioral task
behavioral15
Sample
wintaylor2.1/Programs/Imager/adencrypt.dll
Resource
win7-20231023-en
Behavioral task
behavioral16
Sample
wintaylor2.1/Programs/Imager/adencrypt.dll
Resource
win10v2004-20231023-en
Behavioral task
behavioral17
Sample
wintaylor2.1/Programs/Imager/boost_date_time-vc90-mt-1_39.dll
Resource
win7-20231025-en
Behavioral task
behavioral18
Sample
wintaylor2.1/Programs/Imager/boost_date_time-vc90-mt-1_39.dll
Resource
win10v2004-20231023-en
Behavioral task
behavioral19
Sample
wintaylor2.1/Programs/Imager/boost_filesystem-vc90-mt-1_39.dll
Resource
win7-20231025-en
Behavioral task
behavioral20
Sample
wintaylor2.1/Programs/Imager/boost_filesystem-vc90-mt-1_39.dll
Resource
win10v2004-20231023-en
Behavioral task
behavioral21
Sample
wintaylor2.1/Programs/Imager/boost_regex-vc90-mt-1_39.dll
Resource
win7-20231023-en
Behavioral task
behavioral22
Sample
wintaylor2.1/Programs/Imager/boost_regex-vc90-mt-1_39.dll
Resource
win10v2004-20231023-en
Behavioral task
behavioral23
Sample
wintaylor2.1/Programs/Imager/boost_system-vc90-mt-1_39.dll
Resource
win7-20231025-en
Behavioral task
behavioral24
Sample
wintaylor2.1/Programs/Imager/boost_system-vc90-mt-1_39.dll
Resource
win10v2004-20231023-en
Behavioral task
behavioral25
Sample
wintaylor2.1/Programs/Imager/boost_thread-vc90-mt-1_39.dll
Resource
win7-20231020-en
Behavioral task
behavioral26
Sample
wintaylor2.1/Programs/Imager/boost_thread-vc90-mt-1_39.dll
Resource
win10v2004-20231025-en
Behavioral task
behavioral27
Sample
wintaylor2.1/Programs/Imager/cximage.dll
Resource
win7-20231020-en
Behavioral task
behavioral28
Sample
wintaylor2.1/Programs/Imager/cximage.dll
Resource
win10v2004-20231020-en
Behavioral task
behavioral29
Sample
wintaylor2.1/Programs/Imager/help/enu/ImagerUsersGuide.pdf
Resource
win7-20231020-en
Behavioral task
behavioral30
Sample
wintaylor2.1/Programs/Imager/help/enu/ImagerUsersGuide.pdf
Resource
win10v2004-20231023-en
Behavioral task
behavioral31
Sample
wintaylor2.1/Programs/Imager/icudt40.dll
Resource
win7-20231023-en
Behavioral task
behavioral32
Sample
wintaylor2.1/Programs/Imager/icudt40.dll
Resource
win10v2004-20231023-en
General
-
Target
a8c72ac6be2a4a465cd0829295d3e19f83eb7b6f4fb9ee2792ce6dfaefb7a7bb.zip.zip
-
Size
48.3MB
-
MD5
222d7c2e2974b0727b5a36f700a6135f
-
SHA1
97bbfc8dea98d51bb9fcbd6f40d365f54f1d7ca9
-
SHA256
0817ebba1e998e81e7c1173f5410d13b2e401396c37a490991418241baab2d38
-
SHA512
ba88b528e5c684d8ef0f98b4dbedac59846b480ff4e67e8684f7b7091a63bbf99ea9926652cfdeedd7893b800872d2a01997e4e205c0afc9a74a54efcfa28065
-
SSDEEP
786432:Eq6E9A/2ECvhKwSFkVVPBqImnugbYJRGZooLrPemQY3M4d60SKTJ4mn/:f9AhUKjFQVPBTOaRGSmrWmH3MnBKTum/
Malware Config
Signatures
-
Nirsoft 3 IoCs
resource yara_rule static1/unpack007/out.upx Nirsoft static1/unpack008/out.upx Nirsoft static1/unpack002/wintaylor2.1/Programs/tools/nirsoft/pspv.exe Nirsoft -
resource yara_rule static1/unpack002/wintaylor2.1/Programs/HexEdit.exe upx static1/unpack002/wintaylor2.1/Programs/MWSnap.exe upx static1/unpack002/wintaylor2.1/Programs/WinAudit.exe upx static1/unpack002/wintaylor2.1/Programs/axhelper.exe upx static1/unpack002/wintaylor2.1/Programs/mylastsearch.exe upx static1/unpack002/wintaylor2.1/Programs/photorec_win.exe upx static1/unpack002/wintaylor2.1/Programs/testdisk_win.exe upx static1/unpack002/wintaylor2.1/Programs/tools/WFA.exe upx static1/unpack002/wintaylor2.1/Programs/tools/WRR.exe upx static1/unpack002/wintaylor2.1/Programs/tools/ipscan.exe upx static1/unpack002/wintaylor2.1/Programs/tools/msi.exe upx static1/unpack002/wintaylor2.1/Programs/tools/nirsoft/AlternateStreamView.exe upx static1/unpack002/wintaylor2.1/Programs/tools/nirsoft/AppCrashView.exe upx static1/unpack002/wintaylor2.1/Programs/tools/nirsoft/ChromeCacheView.exe upx static1/unpack002/wintaylor2.1/Programs/tools/nirsoft/DevManView.exe upx static1/unpack002/wintaylor2.1/Programs/tools/nirsoft/Dialupass.exe upx static1/unpack002/wintaylor2.1/Programs/tools/nirsoft/HashMyFiles.exe upx static1/unpack002/wintaylor2.1/Programs/tools/nirsoft/IECacheView.exe upx static1/unpack002/wintaylor2.1/Programs/tools/nirsoft/InjectedDLL.exe upx static1/unpack002/wintaylor2.1/Programs/tools/nirsoft/LSASecretsDump.exe upx static1/unpack002/wintaylor2.1/Programs/tools/nirsoft/LSASecretsView.exe upx static1/unpack002/wintaylor2.1/Programs/tools/nirsoft/MozillaCacheView.exe upx static1/unpack002/wintaylor2.1/Programs/tools/nirsoft/MozillaHistoryView.exe upx static1/unpack002/wintaylor2.1/Programs/tools/nirsoft/MyLastSearch.exe upx static1/unpack002/wintaylor2.1/Programs/tools/nirsoft/NetResView.exe upx static1/unpack002/wintaylor2.1/Programs/tools/nirsoft/OpenedFilesView.exe upx static1/unpack002/wintaylor2.1/Programs/tools/nirsoft/OperaCacheView.exe upx static1/unpack002/wintaylor2.1/Programs/tools/nirsoft/OperaPassView.exe upx static1/unpack002/wintaylor2.1/Programs/tools/nirsoft/ProcessActivityView.exe upx static1/unpack002/wintaylor2.1/Programs/tools/nirsoft/PstPassword.exe upx static1/unpack002/wintaylor2.1/Programs/tools/nirsoft/RegScanner.exe upx static1/unpack002/wintaylor2.1/Programs/tools/nirsoft/SearchMyFiles.exe upx static1/unpack002/wintaylor2.1/Programs/tools/nirsoft/ShellBagsView.exe upx static1/unpack002/wintaylor2.1/Programs/tools/nirsoft/SkypeLogView.exe upx static1/unpack002/wintaylor2.1/Programs/tools/nirsoft/SniffPass.exe upx static1/unpack002/wintaylor2.1/Programs/tools/nirsoft/USBDeview.exe upx static1/unpack002/wintaylor2.1/Programs/tools/nirsoft/UserProfilesView.exe upx static1/unpack002/wintaylor2.1/Programs/tools/nirsoft/VNCPassView.exe upx static1/unpack002/wintaylor2.1/Programs/tools/nirsoft/WhatInStartup.exe upx static1/unpack002/wintaylor2.1/Programs/tools/nirsoft/WinPrefetchView.exe upx static1/unpack002/wintaylor2.1/Programs/tools/nirsoft/WirelessKeyView.exe upx static1/unpack002/wintaylor2.1/Programs/tools/nirsoft/astlog.exe upx static1/unpack002/wintaylor2.1/Programs/tools/nirsoft/awatch.exe upx static1/unpack002/wintaylor2.1/Programs/tools/nirsoft/bluetoothview.exe upx static1/unpack002/wintaylor2.1/Programs/tools/nirsoft/chromepass.exe upx static1/unpack002/wintaylor2.1/Programs/tools/nirsoft/cports.exe upx static1/unpack002/wintaylor2.1/Programs/tools/nirsoft/filetypesman.exe upx static1/unpack002/wintaylor2.1/Programs/tools/nirsoft/gdiview.exe upx static1/unpack002/wintaylor2.1/Programs/tools/nirsoft/iecv.exe upx static1/unpack002/wintaylor2.1/Programs/tools/nirsoft/iehv.exe upx static1/unpack002/wintaylor2.1/Programs/tools/nirsoft/iepv.exe upx static1/unpack002/wintaylor2.1/Programs/tools/nirsoft/installedcodec.exe upx static1/unpack002/wintaylor2.1/Programs/tools/nirsoft/ipnetinfo.exe upx static1/unpack002/wintaylor2.1/Programs/tools/nirsoft/livecontactsview.exe upx static1/unpack002/wintaylor2.1/Programs/tools/nirsoft/macaddressview.exe upx static1/unpack002/wintaylor2.1/Programs/tools/nirsoft/mailpv.exe upx static1/unpack002/wintaylor2.1/Programs/tools/nirsoft/mspass.exe upx static1/unpack002/wintaylor2.1/Programs/tools/nirsoft/myeventviewer.exe upx static1/unpack002/wintaylor2.1/Programs/tools/nirsoft/mzcv.exe upx static1/unpack002/wintaylor2.1/Programs/tools/nirsoft/netpass.exe upx static1/unpack002/wintaylor2.1/Programs/tools/nirsoft/nk2view.exe upx static1/unpack002/wintaylor2.1/Programs/tools/nirsoft/outlookattachview.exe upx static1/unpack002/wintaylor2.1/Programs/tools/nirsoft/passwordfox.exe upx static1/unpack002/wintaylor2.1/Programs/tools/nirsoft/produkey.exe upx -
Unsigned PE 224 IoCs
Checks for missing Authenticode signature.
resource unpack002/wintaylor2.1/Programs/HexEdit.exe unpack002/wintaylor2.1/Programs/Imager/ADIsoDLL.dll unpack002/wintaylor2.1/Programs/Imager/MD5Remote.dll unpack002/wintaylor2.1/Programs/Imager/ProfUIS284ad32.dll unpack002/wintaylor2.1/Programs/Imager/adencrypt.dll unpack002/wintaylor2.1/Programs/Imager/boost_date_time-vc90-mt-1_39.dll unpack002/wintaylor2.1/Programs/Imager/boost_filesystem-vc90-mt-1_39.dll unpack002/wintaylor2.1/Programs/Imager/boost_regex-vc90-mt-1_39.dll unpack002/wintaylor2.1/Programs/Imager/boost_system-vc90-mt-1_39.dll unpack002/wintaylor2.1/Programs/Imager/boost_thread-vc90-mt-1_39.dll unpack002/wintaylor2.1/Programs/Imager/cximage.dll unpack002/wintaylor2.1/Programs/Imager/icudt40.dll unpack002/wintaylor2.1/Programs/Imager/icuuc40.dll unpack002/wintaylor2.1/Programs/Imager/libeay32.dll unpack002/wintaylor2.1/Programs/MWSnap.exe unpack002/wintaylor2.1/Programs/UsbWriteProtect.exe unpack002/wintaylor2.1/Programs/WinAudit.exe unpack006/out.upx unpack002/wintaylor2.1/Programs/als/als.exe unpack002/wintaylor2.1/Programs/axhelper.exe unpack007/out.upx unpack002/wintaylor2.1/Programs/cmd.exe unpack002/wintaylor2.1/Programs/cygwin1.dll unpack002/wintaylor2.1/Programs/mylastsearch.exe unpack008/out.upx unpack002/wintaylor2.1/Programs/photorec_win.exe unpack009/out.upx unpack002/wintaylor2.1/Programs/ram/mdd/cmd.exe unpack002/wintaylor2.1/Programs/ram/win32dd/cmd.exe unpack002/wintaylor2.1/Programs/ram/winen/cmd.exe unpack002/wintaylor2.1/Programs/ram/winen/winen.exe unpack002/wintaylor2.1/Programs/ram/winen/winen64.exe unpack002/wintaylor2.1/Programs/testdisk_win.exe unpack002/wintaylor2.1/Programs/tools/2k/arp.exe unpack002/wintaylor2.1/Programs/tools/2k/at.exe unpack002/wintaylor2.1/Programs/tools/2k/cmd.exe unpack002/wintaylor2.1/Programs/tools/2k/doskey.exe unpack002/wintaylor2.1/Programs/tools/2k/hostname.exe unpack002/wintaylor2.1/Programs/tools/2k/ipconfig.exe unpack002/wintaylor2.1/Programs/tools/2k/ipxroute.exe unpack002/wintaylor2.1/Programs/tools/2k/nbtstat.exe unpack002/wintaylor2.1/Programs/tools/2k/net.exe unpack002/wintaylor2.1/Programs/tools/2k/netstat.exe unpack002/wintaylor2.1/Programs/tools/2k/res_kit/auditpol.exe unpack002/wintaylor2.1/Programs/tools/2k/res_kit/drivers.exe unpack002/wintaylor2.1/Programs/tools/2k/res_kit/dumpel.exe unpack002/wintaylor2.1/Programs/tools/2k/res_kit/now.exe unpack002/wintaylor2.1/Programs/tools/2k/res_kit/pstat.exe unpack002/wintaylor2.1/Programs/tools/2k/res_kit/pulist.exe unpack002/wintaylor2.1/Programs/tools/2k/res_kit/sc.exe unpack002/wintaylor2.1/Programs/tools/2k/route.exe unpack002/wintaylor2.1/Programs/tools/2k3/arp.exe unpack002/wintaylor2.1/Programs/tools/2k3/at.exe unpack002/wintaylor2.1/Programs/tools/2k3/cmd.exe unpack002/wintaylor2.1/Programs/tools/2k3/doskey.exe unpack002/wintaylor2.1/Programs/tools/2k3/hostname.exe unpack002/wintaylor2.1/Programs/tools/2k3/ipconfig.exe unpack002/wintaylor2.1/Programs/tools/2k3/ipxroute.exe unpack002/wintaylor2.1/Programs/tools/2k3/nbtstat.exe unpack002/wintaylor2.1/Programs/tools/2k3/net.exe unpack002/wintaylor2.1/Programs/tools/2k3/netstat.exe unpack002/wintaylor2.1/Programs/tools/2k3/route.exe unpack002/wintaylor2.1/Programs/tools/Cygwin/cygintl-1.dll unpack002/wintaylor2.1/Programs/tools/Cygwin/cygintl-2.dll unpack002/wintaylor2.1/Programs/tools/Cygwin/cygintl-3.dll unpack002/wintaylor2.1/Programs/tools/Cygwin/cygmagic-1.dll unpack002/wintaylor2.1/Programs/tools/Cygwin/cygncurses-8.dll unpack002/wintaylor2.1/Programs/tools/Cygwin/cygpcre-0.dll unpack002/wintaylor2.1/Programs/tools/Cygwin/cygpng12.dll unpack002/wintaylor2.1/Programs/tools/Cygwin/cygpopt-0.dll unpack002/wintaylor2.1/Programs/tools/Cygwin/cygwin1.dll unpack002/wintaylor2.1/Programs/tools/Cygwin/cygz.dll unpack002/wintaylor2.1/Programs/tools/Cygwin/date.exe unpack002/wintaylor2.1/Programs/tools/Cygwin/dd.exe unpack002/wintaylor2.1/Programs/tools/Cygwin/dos2unix.exe unpack002/wintaylor2.1/Programs/tools/Cygwin/env.exe unpack002/wintaylor2.1/Programs/tools/Cygwin/file.exe unpack002/wintaylor2.1/Programs/tools/Cygwin/grep.exe unpack002/wintaylor2.1/Programs/tools/Cygwin/hexedit.exe unpack002/wintaylor2.1/Programs/tools/Cygwin/hostname.exe unpack002/wintaylor2.1/Programs/tools/Cygwin/less.exe unpack002/wintaylor2.1/Programs/tools/Cygwin/ls.exe unpack002/wintaylor2.1/Programs/tools/Cygwin/nc.exe unpack002/wintaylor2.1/Programs/tools/Cygwin/ps.exe unpack002/wintaylor2.1/Programs/tools/Cygwin/split.exe unpack002/wintaylor2.1/Programs/tools/Cygwin/strings.exe unpack002/wintaylor2.1/Programs/tools/Cygwin/uptime.exe unpack002/wintaylor2.1/Programs/tools/Cygwin/wget.exe unpack002/wintaylor2.1/Programs/tools/Cygwin/xargs.exe unpack002/wintaylor2.1/Programs/tools/DriveMan.exe unpack002/wintaylor2.1/Programs/tools/WFA.exe unpack002/wintaylor2.1/Programs/tools/WRR.exe unpack002/wintaylor2.1/Programs/tools/fau/dd.exe unpack002/wintaylor2.1/Programs/tools/fau/getopt.dll unpack002/wintaylor2.1/Programs/tools/fau/md5lib.dll unpack002/wintaylor2.1/Programs/tools/fau/md5sum.exe unpack002/wintaylor2.1/Programs/tools/fau/msvcp70.dll unpack002/wintaylor2.1/Programs/tools/fau/msvcr70.dll unpack002/wintaylor2.1/Programs/tools/fau/nc.exe unpack002/wintaylor2.1/Programs/tools/fau/volume_dump.exe unpack002/wintaylor2.1/Programs/tools/fau/wipe.exe unpack002/wintaylor2.1/Programs/tools/fau/zlibU.dll unpack002/wintaylor2.1/Programs/tools/ipscan.exe unpack002/wintaylor2.1/Programs/tools/microsoft/reg.exe unpack002/wintaylor2.1/Programs/tools/microsoft/regdmp.exe unpack002/wintaylor2.1/Programs/tools/microsoft/tlist.exe unpack002/wintaylor2.1/Programs/tools/msi.exe unpack002/wintaylor2.1/Programs/tools/nirsoft/AlternateStreamView.exe unpack002/wintaylor2.1/Programs/tools/nirsoft/AppCrashView.exe unpack002/wintaylor2.1/Programs/tools/nirsoft/ChromeCacheView.exe unpack002/wintaylor2.1/Programs/tools/nirsoft/DevManView.exe unpack002/wintaylor2.1/Programs/tools/nirsoft/Dialupass.exe unpack002/wintaylor2.1/Programs/tools/nirsoft/HashMyFiles.exe unpack002/wintaylor2.1/Programs/tools/nirsoft/IECacheView.exe unpack002/wintaylor2.1/Programs/tools/nirsoft/InjectedDLL.exe unpack002/wintaylor2.1/Programs/tools/nirsoft/LSASecretsDump.exe unpack002/wintaylor2.1/Programs/tools/nirsoft/LSASecretsView.exe unpack002/wintaylor2.1/Programs/tools/nirsoft/MozillaCacheView.exe unpack002/wintaylor2.1/Programs/tools/nirsoft/MozillaHistoryView.exe unpack002/wintaylor2.1/Programs/tools/nirsoft/MyLastSearch.exe unpack002/wintaylor2.1/Programs/tools/nirsoft/NetResView.exe unpack002/wintaylor2.1/Programs/tools/nirsoft/Netscapass.exe unpack002/wintaylor2.1/Programs/tools/nirsoft/OpenedFilesView.exe unpack002/wintaylor2.1/Programs/tools/nirsoft/OperaCacheView.exe unpack002/wintaylor2.1/Programs/tools/nirsoft/OperaPassView.exe unpack002/wintaylor2.1/Programs/tools/nirsoft/ProcessActivityView.exe unpack002/wintaylor2.1/Programs/tools/nirsoft/PstPassword.exe unpack002/wintaylor2.1/Programs/tools/nirsoft/RegScanner.exe unpack002/wintaylor2.1/Programs/tools/nirsoft/SearchMyFiles.exe unpack002/wintaylor2.1/Programs/tools/nirsoft/ShellBagsView.exe unpack002/wintaylor2.1/Programs/tools/nirsoft/SkypeLogView.exe unpack002/wintaylor2.1/Programs/tools/nirsoft/SniffPass.exe unpack002/wintaylor2.1/Programs/tools/nirsoft/USBDeview.exe unpack002/wintaylor2.1/Programs/tools/nirsoft/UserProfilesView.exe unpack002/wintaylor2.1/Programs/tools/nirsoft/VNCPassView.exe unpack002/wintaylor2.1/Programs/tools/nirsoft/WhatInStartup.exe unpack002/wintaylor2.1/Programs/tools/nirsoft/WinPrefetchView.exe unpack002/wintaylor2.1/Programs/tools/nirsoft/WirelessKeyView.exe unpack002/wintaylor2.1/Programs/tools/nirsoft/accesspv.exe unpack002/wintaylor2.1/Programs/tools/nirsoft/astlog.exe unpack002/wintaylor2.1/Programs/tools/nirsoft/awatch.exe unpack002/wintaylor2.1/Programs/tools/nirsoft/bluetoothview.exe unpack002/wintaylor2.1/Programs/tools/nirsoft/chromepass.exe unpack002/wintaylor2.1/Programs/tools/nirsoft/cports.exe unpack002/wintaylor2.1/Programs/tools/nirsoft/filetypesman.exe unpack002/wintaylor2.1/Programs/tools/nirsoft/gdiview.exe unpack002/wintaylor2.1/Programs/tools/nirsoft/iecv.exe unpack002/wintaylor2.1/Programs/tools/nirsoft/iehv.exe unpack002/wintaylor2.1/Programs/tools/nirsoft/iepv.exe unpack002/wintaylor2.1/Programs/tools/nirsoft/installedcodec.exe unpack002/wintaylor2.1/Programs/tools/nirsoft/ipnetinfo.exe unpack002/wintaylor2.1/Programs/tools/nirsoft/livecontactsview.exe unpack002/wintaylor2.1/Programs/tools/nirsoft/macaddressview.exe unpack002/wintaylor2.1/Programs/tools/nirsoft/mailpv.exe unpack002/wintaylor2.1/Programs/tools/nirsoft/mspass.exe unpack002/wintaylor2.1/Programs/tools/nirsoft/myeventviewer.exe unpack002/wintaylor2.1/Programs/tools/nirsoft/mzcv.exe unpack002/wintaylor2.1/Programs/tools/nirsoft/netpass.exe unpack002/wintaylor2.1/Programs/tools/nirsoft/nk2view.exe unpack002/wintaylor2.1/Programs/tools/nirsoft/outlookattachview.exe unpack002/wintaylor2.1/Programs/tools/nirsoft/passwordfox.exe unpack002/wintaylor2.1/Programs/tools/nirsoft/pcanyscan.exe unpack002/wintaylor2.1/Programs/tools/nirsoft/produkey.exe unpack002/wintaylor2.1/Programs/tools/nirsoft/pspv.exe unpack002/wintaylor2.1/Programs/tools/nirsoft/rdpv.exe unpack002/wintaylor2.1/Programs/tools/nirsoft/recentfilesview.exe unpack002/wintaylor2.1/Programs/tools/nirsoft/serviwin.exe unpack002/wintaylor2.1/Programs/tools/nirsoft/shexview.exe unpack002/wintaylor2.1/Programs/tools/nirsoft/shmnview.exe unpack002/wintaylor2.1/Programs/tools/nirsoft/specialfoldersview.exe unpack002/wintaylor2.1/Programs/tools/nirsoft/videocacheview.exe unpack002/wintaylor2.1/Programs/tools/nirsoft/wirelessnetview.exe unpack002/wintaylor2.1/Programs/tools/sysinternals/Filemon.exe unpack002/wintaylor2.1/Programs/tools/sysinternals/ctrl2cap.nt4.sys unpack002/wintaylor2.1/Programs/tools/sysinternals/ctrl2cap.nt5.sys unpack002/wintaylor2.1/Programs/tools/sysinternals/dmon.sys unpack002/wintaylor2.1/Programs/tools/sysinternals/psuptime.exe unpack002/wintaylor2.1/Programs/tools/sysinternals/servicelist.exe unpack002/wintaylor2.1/Programs/tools/unxutils/bunzip2.exe unpack002/wintaylor2.1/Programs/tools/unxutils/dd.exe unpack002/wintaylor2.1/Programs/tools/unxutils/grep.exe unpack002/wintaylor2.1/Programs/tools/unxutils/md5sum.exe unpack002/wintaylor2.1/Programs/tools/unxutils/pclip.exe unpack002/wintaylor2.1/Programs/tools/unxutils/sha1sum.exe unpack002/wintaylor2.1/Programs/tools/unxutils/tar.exe unpack002/wintaylor2.1/Programs/tools/unxutils/uname.exe unpack002/wintaylor2.1/Programs/tools/unxutils/unzip.exe unpack002/wintaylor2.1/Programs/tools/unxutils/wget.exe unpack002/wintaylor2.1/Programs/tools/unxutils/whoami.exe unpack002/wintaylor2.1/Programs/tools/usbHistory/usbHistory.exe unpack002/wintaylor2.1/Programs/tools/vista/arp.exe unpack002/wintaylor2.1/Programs/tools/vista/at.exe unpack002/wintaylor2.1/Programs/tools/vista/cmd.exe unpack002/wintaylor2.1/Programs/tools/vista/doskey.exe unpack002/wintaylor2.1/Programs/tools/vista/find.exe unpack002/wintaylor2.1/Programs/tools/vista/findstr.exe unpack002/wintaylor2.1/Programs/tools/vista/hostname.exe unpack002/wintaylor2.1/Programs/tools/vista/ipconfig.exe unpack002/wintaylor2.1/Programs/tools/vista/nbtstat.exe unpack002/wintaylor2.1/Programs/tools/vista/net.exe unpack002/wintaylor2.1/Programs/tools/vista/netstat.exe unpack002/wintaylor2.1/Programs/tools/vista/reg.exe unpack002/wintaylor2.1/Programs/tools/vista/route.exe unpack002/wintaylor2.1/Programs/tools/vista/systeminfo.exe unpack002/wintaylor2.1/Programs/tools/vista/tracert.exe unpack002/wintaylor2.1/Programs/tools/vista/whoami.exe unpack002/wintaylor2.1/Programs/tools/xp/arp.exe unpack002/wintaylor2.1/Programs/tools/xp/at.exe unpack002/wintaylor2.1/Programs/tools/xp/cmd.exe unpack002/wintaylor2.1/Programs/tools/xp/doskey.exe unpack002/wintaylor2.1/Programs/tools/xp/framedyn.dll unpack002/wintaylor2.1/Programs/tools/xp/gpresult.exe unpack002/wintaylor2.1/Programs/tools/xp/hostname.exe unpack002/wintaylor2.1/Programs/tools/xp/ipconfig.exe unpack002/wintaylor2.1/Programs/tools/xp/ipxroute.exe unpack002/wintaylor2.1/Programs/tools/xp/nbtstat.exe unpack002/wintaylor2.1/Programs/tools/xp/net.exe unpack002/wintaylor2.1/Programs/tools/xp/netstat.exe unpack002/wintaylor2.1/Programs/tools/xp/route.exe unpack002/wintaylor2.1/Programs/tools/xp/schtasks.exe unpack002/wintaylor2.1/Programs/tools/xp/tasklist.exe unpack002/wintaylor2.1/Programs/tools/xp/wmic.exe unpack002/wintaylor2.1/Programs/whoistd.exe unpack002/wintaylor2.1/WinTaylor.exe
Files
-
a8c72ac6be2a4a465cd0829295d3e19f83eb7b6f4fb9ee2792ce6dfaefb7a7bb.zip.zip.zip
Password: infected
-
a8c72ac6be2a4a465cd0829295d3e19f83eb7b6f4fb9ee2792ce6dfaefb7a7bb.zip.zip
-
wintaylor2.1/COMDLG32.OCX.dll regsvr32 windows:4 windows x86
988f29c1eb8054253091352741683c76
Code Sign
03:c7:8f:37:db:92:28:df:3c:bb:1a:ad:82:fa:67:10Certificate
IssuerOU=VeriSign Commercial Software Publishers CA,O=VeriSign\, Inc.,L=InternetNot Before09-04-1996 00:00Not After07-01-2004 23:59SubjectOU=VeriSign Commercial Software Publishers CA,O=VeriSign\, Inc.,L=Internet13:89:b4:d1:8a:e8:a7:c4:bd:35:c7:9b:8d:88:ca:1f:ca:53:56:91Certificate
IssuerOU=VeriSign\, Inc.+OU=VeriSign Time Stamping Service Root+OU=NO LIABILITY ACCEPTED\, (c)97 VeriSign\, Inc.,O=VeriSign Trust NetworkNot Before12-05-1997 07:00Not After31-12-1999 07:00SubjectOU=VeriSign\, Inc.+OU=VeriSign Time Stamping Service Root+OU=NO LIABILITY ACCEPTED\, (c)97 VeriSign\, Inc.,O=VeriSign Trust Networkbd:11:9a:da:43:ed:21:fb:46:58:84:89:ca:46:88:90:25:ee:14:60Certificate
IssuerOU=VeriSign\, Inc.+OU=VeriSign Time Stamping Service Root+OU=NO LIABILITY ACCEPTED\, (c)97 VeriSign\, Inc.,O=VeriSign Trust NetworkNot Before12-05-1997 07:00Not After31-12-1999 07:00SubjectOU=VeriSign Time Stamping Service+OU=VeriSign Trust Network+OU=NO LIABILITY ACCEPTED\, (c)97 VeriSign\, Inc.,O=VeriSign\, Inc.,L=Internet55:0d:88:f5:3f:64:16:d7:0c:73:00:d8:45:92:16:34Certificate
IssuerOU=VeriSign Commercial Software Publishers CA,O=VeriSign\, Inc.,L=InternetNot Before19-03-1999 00:00Not After16-04-2000 23:59SubjectCN=Microsoft Corporation,OU=VeriSign Commercial Software Publishers CA+OU=www.verisign.com/repository/RPA Incorp. by Ref.\,LIAB.LTD(c)98+OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=Microsoft Corporation,O=VeriSign\, Inc.,L=Internet+L=Redmond,ST=Washington,C=USKey Usages
KeyUsageDigitalSignature
KeyUsageKeyEncipherment
Signer
Actual PE DigestDigest AlgorithmPE Digest MatchesfalseHeaders
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL
Imports
kernel32
HeapReAlloc
GetLastError
LockResource
GetWindowsDirectoryA
InterlockedDecrement
InterlockedIncrement
IsDBCSLeadByte
CompareStringA
CompareStringW
lstrcmpA
GetLocaleInfoA
GetVersion
GetModuleFileNameA
GetFileAttributesA
IsBadWritePtr
DisableThreadLibraryCalls
GlobalAlloc
lstrcmpiA
LoadLibraryA
GetProcAddress
lstrcatA
lstrlenA
lstrcpyA
WriteProfileStringA
GlobalLock
GlobalUnlock
LoadResource
FindResourceA
lstrcpynA
LeaveCriticalSection
DeleteCriticalSection
FreeLibrary
HeapFree
WideCharToMultiByte
lstrlenW
HeapAlloc
GetProfileStringA
EnterCriticalSection
GetProcessHeap
GetCurrentThreadId
MultiByteToWideChar
InitializeCriticalSection
GlobalFree
user32
SetWindowRgn
IntersectRect
EqualRect
PtInRect
IsDialogMessageA
IsChild
GetKeyState
CreateDialogIndirectParamA
MessageBeep
PostMessageA
ClientToScreen
wsprintfA
SendMessageTimeoutA
CharNextA
GetActiveWindow
GetWindowThreadProcessId
LoadCursorA
MessageBoxA
GetWindowLongA
GetWindowRect
CreateWindowExA
SetWindowLongA
ShowWindow
DialogBoxParamA
EnableWindow
GetDesktopWindow
GetWindow
IsWindowEnabled
OffsetRect
GetParent
GetDlgItem
SendMessageA
SetFocus
SetParent
SetDlgItemInt
EndPaint
SetActiveWindow
IsWindowVisible
WinHelpA
GetDlgItemInt
EndDialog
GetDlgItemTextA
DestroyWindow
SetDlgItemTextA
GetWindowTextA
GetNextDlgTabItem
SendDlgItemMessageA
RegisterClassA
GetDC
ReleaseDC
LoadIconA
DrawIcon
DestroyIcon
GetSystemMetrics
RegisterWindowMessageA
LoadStringA
DefWindowProcA
UnregisterClassA
GetClientRect
BeginPaint
RegisterClipboardFormatA
SetWindowPos
MoveWindow
ole32
CreateOleAdviseHolder
CoCreateInstance
CoTaskMemAlloc
CoTaskMemFree
ReleaseStgMedium
advapi32
RegEnumKeyExA
RegQueryValueA
RegOpenKeyA
RegQueryValueExA
RegDeleteValueA
RegDeleteKeyA
RegOpenKeyExA
RegCreateKeyExA
RegSetValueExA
RegCloseKey
oleaut32
LoadRegTypeLi
OleCreatePropertyFrame
SetErrorInfo
UnRegisterTypeLi
LoadTypeLi
LoadTypeLibEx
OleLoadPicture
VariantChangeType
RegisterTypeLi
VariantInit
GetErrorInfo
VariantClear
SysStringLen
SysAllocStringLen
OleTranslateColor
SysFreeString
SysAllocString
CreateErrorInfo
comdlg32
CommDlgExtendedError
PrintDlgA
ChooseFontA
ChooseColorA
GetOpenFileNameA
GetSaveFileNameA
gdi32
GetDIBits
CreateCompatibleDC
CreateBitmap
GetSystemPaletteEntries
StretchDIBits
SetViewportOrgEx
SetWindowExtEx
SetWindowOrgEx
SetMapMode
LPtoDP
SetViewportExtEx
GetViewportExtEx
CreateRectRgnIndirect
GetWindowExtEx
CreateDCA
GetObjectA
EnumFontFamiliesA
DeleteDC
DeleteObject
GetDeviceCaps
SelectObject
Exports
Exports
DLLGetDocumentation
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Sections
.text Size: 69KB - Virtual size: 68KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 51KB - Virtual size: 51KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
wintaylor2.1/IMPORTANT_README.txt
-
wintaylor2.1/LICENSE.txt
-
wintaylor2.1/Programs/HashMyFiles.cfg
-
wintaylor2.1/Programs/HexEdit.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 1.5MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 632KB - Virtual size: 636KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 15KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
wintaylor2.1/Programs/Imager/ADIsoDLL.dll.dll windows:5 windows x86
6a3559cadbf1554606fb7f3171df44b8
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
libeay32
ord342
ord341
ord340
kernel32
GetTickCount
Sleep
InterlockedCompareExchange
GetCurrentProcess
CreateEventA
GetSystemTimeAsFileTime
CloseHandle
SetEvent
WaitForSingleObject
TerminateProcess
FreeLibrary
GetProcAddress
LoadLibraryW
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
DisableThreadLibraryCalls
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
InterlockedExchange
msvcp90
??4?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV01@PB_W@Z
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBD@Z
??1?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@XZ
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@XZ
boost_thread-vc90-mt-1_39
??0lock_error@boost@@QAE@ABV01@@Z
??0thread_exception@boost@@QAE@ABV01@@Z
??0thread_resource_error@boost@@QAE@ABV01@@Z
??1thread_resource_error@boost@@UAE@XZ
??0lock_error@boost@@QAE@XZ
??1lock_error@boost@@UAE@XZ
??0thread_resource_error@boost@@QAE@XZ
boost_date_time-vc90-mt-1_39
??0greg_month@gregorian@boost@@QAE@G@Z
msvcr90
_except_handler4_common
?_type_info_dtor_internal_method@type_info@@QAEXXZ
??1exception@std@@UAE@XZ
__clean_type_info_names_internal
??3@YAXPAX@Z
??0exception@std@@QAE@XZ
_purecall
??0exception@std@@QAE@ABV01@@Z
_CxxThrowException
_gmtime64
_invalid_parameter_noinfo
??_V@YAXPAX@Z
??2@YAPAXI@Z
memset
memcpy
??8type_info@@QBE_NABV0@@Z
__CxxFrameHandler3
_unlock
__dllonexit
_encode_pointer
_lock
_onexit
_decode_pointer
_malloc_crt
free
_encoded_null
_initterm
_initterm_e
_amsg_exit
_adjust_fdiv
__CppXcptFilter
_crt_debugger_hook
?terminate@@YAXXZ
Exports
Exports
??0?$enable_shared_from_this@VADIsoClass@ADIso@@@boost@@IAE@ABV01@@Z
??0?$enable_shared_from_this@VADIsoClass@ADIso@@@boost@@IAE@XZ
??0ADIsoClass@ADIso@@AAE@PAX@Z
??1?$enable_shared_from_this@VADIsoClass@ADIso@@@boost@@IAE@XZ
??1ADIsoClass@ADIso@@QAE@XZ
??4?$enable_shared_from_this@VADIsoClass@ADIso@@@boost@@IAEAAV01@ABV01@@Z
?ADIsos@ADIsoClass@ADIso@@0V?$map@DV?$weak_ptr@VADIsoClass@ADIso@@@boost@@U?$less@D@std@@V?$allocator@U?$pair@$$CBDV?$weak_ptr@VADIsoClass@ADIso@@@boost@@@std@@@4@@std@@A
?ADIsosMutex@ADIsoClass@ADIso@@0Vmutex@boost@@A
?Extract@ADIsoClass@ADIso@@QAEHW4ExtractionMethod@2@GP6AXHKPA_N@ZP6AXPAEKK1@ZK@Z
?ExtractImage@ADIsoClass@ADIso@@QAEHPBDPB_WW4ExtractionMethod@2@GP6AXHKPA_N@ZK@Z
?Functions@ADIsoClass@ADIso@@0V?$shared_ptr@VADIsoFuncsClass@ADIso@@@boost@@A
?FunctionsMutex@ADIsoClass@ADIso@@0Vmutex@boost@@A
?GetChild@ADIsoClass@ADIso@@QAE?AV?$shared_ptr@VADIsoClass@ADIso@@@boost@@H@Z
?GetInfo@ADIsoClass@ADIso@@QAE_NAAUHandleInformation@2@@Z
?Initialize@ADIsoClass@ADIso@@SA_NXZ
?Offset2LBA@ADIsoClass@ADIso@@QAEK_K@Z
?OpenDrive@ADIsoClass@ADIso@@SA?AV?$shared_ptr@VADIsoClass@ADIso@@@boost@@D@Z
?OpenFile@ADIsoClass@ADIso@@SA?AV?$shared_ptr@VADIsoClass@ADIso@@@boost@@PB_W@Z
?OpenHandle@ADIsoClass@ADIso@@SA?AV?$shared_ptr@VADIsoClass@ADIso@@@boost@@PAX@Z
?Read@ADIsoClass@ADIso@@QAEK_KKPAE@Z
?ReadBlock@ADIsoClass@ADIso@@QAEHKKPAE@Z
?shared_from_this@?$enable_shared_from_this@VADIsoClass@ADIso@@@boost@@QAE?AV?$shared_ptr@VADIsoClass@ADIso@@@2@XZ
?shared_from_this@?$enable_shared_from_this@VADIsoClass@ADIso@@@boost@@QBE?AV?$shared_ptr@$$CBVADIsoClass@ADIso@@@2@XZ
Sections
.text Size: 46KB - Virtual size: 45KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 17KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 692B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 9KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
wintaylor2.1/Programs/Imager/FTKImager.exe.exe windows:5 windows x86
0349cd17e708250ecc888c2753819883
Code Sign
70:ba:e4:1d:10:d9:29:34:b6:38:ca:7b:03:cc:ba:bfCertificate
IssuerOU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=USNot Before29-01-1996 00:00Not After01-08-2028 23:59SubjectOU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US0d:ca:cb:ab:7c:d1:9c:9e:d0:31:89:17:9a:a1:42:9cCertificate
IssuerCN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=USNot Before10-09-2009 00:00Not After05-11-2012 23:59SubjectCN=AccessData,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=AccessData,L=Lindon,ST=Utah,C=USExtended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
65:52:26:e1:b2:2e:18:e1:59:0f:29:85:ac:22:e7:5cCertificate
IssuerOU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=USNot Before21-05-2009 00:00Not After20-05-2019 23:59SubjectCN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=USExtended Key Usages
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
Key Usages
KeyUsageCertSign
KeyUsageCRLSign
6b:b7:3a:27:81:86:28:43:40:26:80:8b:2f:1b:a4:4d:04:e1:ab:9bSigner
Actual PE Digest6b:b7:3a:27:81:86:28:43:40:26:80:8b:2f:1b:a4:4d:04:e1:ab:9bDigest Algorithmsha1PE Digest MatchestrueHeaders
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
cximage
?Eof@CxMemFile@@UAE_NXZ
?Flush@CxMemFile@@UAE_NXZ
?Size@CxMemFile@@UAEJXZ
?Tell@CxMemFile@@UAEJXZ
?Seek@CxMemFile@@UAE_NJH@Z
?Write@CxMemFile@@UAEIPBXII@Z
?Read@CxMemFile@@UAEIPAXII@Z
?Error@CxMemFile@@UAEJXZ
?PutC@CxMemFile@@UAE_NE@Z
?GetC@CxMemFile@@UAEJXZ
??0CxMemFile@@QAE@PAEK@Z
??1CxMemFile@@UAE@XZ
?Destroy@CxImage@@QAE_NXZ
??0CxImage@@QAE@K@Z
??0CxImage@@QAE@ABV0@_N11@Z
?MakeBitmap@CxImage@@QAEPAUHBITMAP__@@PAUHDC__@@@Z
?Thumbnail@CxImage@@QAE_NJJUtagRGBQUAD@@PAV1@@Z
?IsValid@CxImage@@QBE_NXZ
??0CxImage@@QAE@PAVCxFile@@K@Z
?Close@CxMemFile@@UAE_NXZ
libeay32
ord2437
ord2436
ord2435
ord808
ord784
ord479
ord477
ord2147
ord796
ord785
ord879
ord886
ord885
ord3245
ord795
ord3033
ord3171
ord3479
ord3765
ord3712
ord2801
ord3106
ord3024
ord503
ord504
ord502
ord341
ord342
ord340
ord3356
ord3581
ord3633
winmm
mciSendCommandW
adencrypt
DoADEncryptDlg
IsADEncrypted
adisodll
?OpenFile@ADIsoClass@ADIso@@SA?AV?$shared_ptr@VADIsoClass@ADIso@@@boost@@PB_W@Z
?ReadBlock@ADIsoClass@ADIso@@QAEHKKPAE@Z
?Initialize@ADIsoClass@ADIso@@SA_NXZ
?OpenDrive@ADIsoClass@ADIso@@SA?AV?$shared_ptr@VADIsoClass@ADIso@@@boost@@D@Z
?GetChild@ADIsoClass@ADIso@@QAE?AV?$shared_ptr@VADIsoClass@ADIso@@@boost@@H@Z
?GetInfo@ADIsoClass@ADIso@@QAE_NAAUHandleInformation@2@@Z
?ExtractImage@ADIsoClass@ADIso@@QAEHPBDPB_WW4ExtractionMethod@2@GP6AXHKPA_N@ZK@Z
?OpenHandle@ADIsoClass@ADIso@@SA?AV?$shared_ptr@VADIsoClass@ADIso@@@boost@@PAX@Z
?Extract@ADIsoClass@ADIso@@QAEHW4ExtractionMethod@2@GP6AXHKPA_N@ZP6AXPAEKK1@ZK@Z
?Offset2LBA@ADIsoClass@ADIso@@QAEK_K@Z
?Read@ADIsoClass@ADIso@@QAEK_KKPAE@Z
profuis284ad32
?InsertValue@CADPropertyGrid@@QAEHV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@00HH_N1@Z
?InsertCategory@CADPropertyGrid@@QAEHV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@0HHH@Z
?SetPaintToBkgdTheme@CADPropertyGrid@@QAEX_N@Z
?SetHighlightReadOnlyValues@CADPropertyGrid@@QAEX_N@Z
?SetVerticalGridLines@CADPropertyGrid@@QAEX_N@Z
?SetHorizontalGridLines@CADPropertyGrid@@QAEX_N@Z
?SetFullRowSelection@CADPropertyGrid@@QAEX_N@Z
?SetIndentCategories@CADPropertyGrid@@QAEX_N@Z
?SetIndentSorted@CADPropertyGrid@@QAEX_N@Z
?SetSortCategories@CADPropertyGrid@@QAEX_N@Z
?SetSortValues@CADPropertyGrid@@QAEX_N@Z
?SetToolBarBalloonStyle@CADPropertyGrid@@QAEX_N@Z
?ShowDisplayPreferenceBar@CADPropertyGrid@@QAEXH@Z
?ShowHelpTipBar@CADPropertyGrid@@QAEXHH@Z
?ShowComboBox@CADPropertyGrid@@QAEXH@Z
?ShowWindow@CADPropertyGrid@@QAEHH@Z
??0CExtPopupMenuWnd@@QAE@XZ
?GetRuntimeClass@CExtPopupMenuWnd@@UBEPAUCRuntimeClass@@XZ
?GetMessageMap@CExtPopupMenuWnd@@MBEPBUAFX_MSGMAP@@XZ
?DestroyWindow@CExtPopupMenuWnd@@UAEHXZ
?WindowProc@CExtPopupMenuWnd@@MAEJIIJ@Z
?PostNcDestroy@CExtPopupMenuWnd@@MAEXXZ
?Synchronize@CADPropertyGrid@@QAEXXZ
?OnQueryLayoutRTL@CExtPopupMenuWnd@@UBE_NXZ
?GetCookieAsObject@CExtPopupBaseWnd@@UAEPAVCObject@@XZ
?IsToolBtnCombinedArea@CExtPopupBaseWnd@@UBE_NXZ
?_FindCustomizeMode@CExtPopupMenuWnd@@UBE_NXZ
?_InitAnimation@CExtPopupBaseWnd@@MAEXXZ
?_StartAnimation@CExtPopupMenuWnd@@MAEXXZ
?_AdjustAnimation@CExtPopupMenuWnd@@UAEXAAW4e_animation_type_t@CExtPopupBaseWnd@@@Z
?_EndAnimation@CExtPopupMenuWnd@@MAEXXZ
?_IsPopupWithShadows@CExtPopupMenuWnd@@UBE_NXZ
?_IsPopupWithShadowsDynamic@CExtPopupMenuWnd@@UBE_NXZ
?_DrawAnimatedState@CExtPopupBaseWnd@@MAEXAAVCDC@@@Z
?OnQueryMenuShadowSize@CExtPopupBaseWnd@@UBEHXZ
?_DoPaint@CExtPopupMenuWnd@@UAEXAAVCDC@@_N@Z
?_DelayPaint@CExtPopupBaseWnd@@UAEXXZ
?_GetClientRect@CExtPopupMenuWnd@@UAEXPAUtagRECT@@@Z
?_FindHelpMode@CExtPopupMenuWnd@@UBE_NXZ
?_ForceCancelCallbacs@CExtPopupMenuWnd@@UAEXXZ
?_GetTranslatedContextHelpAccel@CExtPopupMenuWnd@@UBEPBUtagACCEL@@XZ
?_GetCurIndex@CExtPopupMenuWnd@@UBEHXZ
?_SetDropIndexBefore@CExtPopupMenuWnd@@UAEXH@Z
?_FindCustomizeSite@CExtPopupMenuWnd@@UBEPAVCExtCustomizeSite@@XZ
?_FindChildPopup@CExtPopupMenuWnd@@UBEHPBV1@@Z
?GetCmdReceiverHWND@CExtPopupMenuWnd@@UAEPAUHWND__@@XZ
?IsNoHighlightIconArea@CExtPopupMenuWnd@@UAE_NXZ
?IsSyncFullRowItems@CExtPopupMenuWnd@@UAE_NXZ
?TrackFlagsGet@CExtPopupMenuWnd@@UBEKXZ
?TrackFlagsSet@CExtPopupMenuWnd@@UAEXK@Z
?LoadMenuW@CExtPopupMenuWnd@@UAEHPAUHWND__@@I_N1@Z
?ExportToMenu@CExtPopupMenuWnd@@UBEPAUHMENU__@@H@Z
?UpdateFromMenu@CExtPopupMenuWnd@@UAEHPAUHWND__@@PAVCMenu@@_N22@Z
?UpdateMdiWindowsMenu@CExtPopupMenuWnd@@UAEHPAVCWnd@@@Z
?SetCmdTargetToAllItems@CExtPopupMenuWnd@@UAEXPAUHWND__@@_N@Z
?ItemGetCount@CExtPopupMenuWnd@@UBEHXZ
?ItemGetCmdID@CExtPopupMenuWnd@@UBEIH@Z
?ItemGetIcon@CExtPopupMenuWnd@@UAEAAVCExtCmdIcon@@H@Z
?ItemGetText@CExtPopupMenuWnd@@UBE?AV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@H@Z
??0CADPropertyGrid@@QAE@XZ
??1CADPropertyGrid@@UAE@XZ
?_IsFadeOutAnimation@CExtPopupMenuWnd@@UBE_NXZ
?stat_ExcludeChildAreas@CExtPaintManager@@SAXPAUHDC__@@PAUHWND__@@P6A_N011PAX@Z2@Z
??0CExtMemoryDC@@QAE@PAVCDC@@PBVCRect@@K@Z
??1CExtMemoryDC@@UAE@XZ
?RemoveAll@CADPropertyGrid@@QAEXXZ
?DoFrameBarCheckCmd@CExtControlBar@@SAHPAVCFrameWnd@@I_N@Z
?DoFrameBarCheckUpdate@CExtControlBar@@SAXPAVCFrameWnd@@PAVCCmdUI@@_N@Z
?ProfileBarStateSave@CExtControlBar@@SA_NPAVCFrameWnd@@PB_W11PAUtagWINDOWPLACEMENT@@_N3PAUHKEY__@@3@Z
?ProfileWndRemove@CExtCmdManager@@QAE_NPAUHWND__@@_NPA_N@Z
?SetBasicCommands@CExtCmdManager@@QAE_NPB_WPAI_N@Z
?ProfileBarStateLoad@CExtControlBar@@SA_NPAVCFrameWnd@@PB_W11PAUtagWINDOWPLACEMENT@@_N3PAUHKEY__@@3@Z
?SetInitDesiredSizeVertical@CExtControlBar@@QAEXVCSize@@@Z
?SetInitDesiredSizeHorizontal@CExtControlBar@@QAEXVCSize@@@Z
?LoadToolBar@CExtToolControlBar@@QAEHIK@Z
?GetMenu@CExtMenuControlBar@@QAEPAVCMenu@@XZ
?CommandToIndex@CExtToolControlBar@@QBEHI@Z
?SetIndicators@CExtStatusControlBar@@QAEHPBIH@Z
?FrameEnableDocking@CExtControlBar@@SA_NPAVCFrameWnd@@K_N@Z
?ProfileWndAdd@CExtCmdManager@@QAE_NPB_WPAUHWND__@@@Z
?UpdateFromMenu@CExtCmdManager@@QAE_NPB_WI_N1@Z
??0CExtMenuControlBar@@QAE@XZ
??0CExtStatusControlBar@@QAE@XZ
??0CExtToolControlBar@@QAE@XZ
??0CExtControlBar@@QAE@XZ
??1CExtMenuControlBar@@UAE@XZ
??1CExtStatusControlBar@@UAE@XZ
??1CExtToolControlBar@@UAE@XZ
??1CExtControlBar@@UAE@XZ
?g_nMsgPrepareMenu@CExtPopupBaseWnd@@2IB
?ItemInsertCommand@CExtPopupMenuWnd@@QAEHIHPB_W0PAUHICON__@@_NHPAUHWND__@@@Z
??1CExtPaintManagerXP@@UAE@XZ
?PaintMenuItemCheckMarkAreaXP@CExtPaintManagerXP@@UAE_NAAVCDC@@AAUPAINTMENUITEMDATA@CExtPaintManager@@ABUtagRECT@@W4e_CheckMarkAreaTypeXP@1@@Z
?PaintMenuItemSelectionAreaXP@CExtPaintManagerXP@@UAE_NAAVCDC@@AAUPAINTMENUITEMDATA@CExtPaintManager@@ABUtagRECT@@@Z
?PaintMenuItemBackgroundXP@CExtPaintManagerXP@@UAE_NAAVCDC@@AAUPAINTMENUITEMDATA@CExtPaintManager@@ABUtagRECT@@@Z
?PaintMenuItemLeftAreaMarginXP@CExtPaintManagerXP@@UAEXAAVCDC@@AAUPAINTMENUITEMDATA@CExtPaintManager@@ABUtagRECT@@2@Z
?Header_GetSortArrowWidth@CExtPaintManager@@UBEHHHPAVCObject@@J@Z
?Header_GetDistanceBetweenTextAndButton@CExtPaintManager@@UBEHHHPAVCObject@@J@Z
?Header_GetDistanceBetweenIconAndText@CExtPaintManager@@UBEHHHPAVCObject@@J@Z
?Header_GetDistanceBetweenIconAndSortArrow@CExtPaintManager@@UBEHHHPAVCObject@@J@Z
?Header_GetButtonPadding@CExtPaintManager@@UBEXAAH0HHPAVCObject@@J@Z
?Header_PaintItem@CExtPaintManagerXP@@UAEXAAVCDC@@VCRect@@111111_N2HHABVCExtCmdIcon@@3222PB_WPAVCObject@@J@Z
?Header_GetItemPadding@CExtPaintManager@@UBE?AVCRect@@HHPAVCObject@@J@Z
?Header_PaintBackground@CExtPaintManagerXP@@UAEXAAVCDC@@VCRect@@PAVCObject@@J@Z
?PageContainer_DrawCaption@CExtPaintManager@@UAEXAAVCDC@@PAXVCRect@@PAVCExtPageContainerWnd@@J@Z
?PageContainer_EraseCaption@CExtPaintManager@@UAEXAAVCDC@@PAXVCRect@@PAVCExtPageContainerWnd@@J@Z
?PageContainer_DrawItem@CExtPaintManager@@UAEXAAVCDC@@PAXVCRect@@22PAVCExtPageContainerWnd@@J@Z
?PageContainer_EraseItem@CExtPaintManager@@UAEXAAVCDC@@PAXVCRect@@22PAVCExtPageContainerWnd@@J@Z
?PageContainer_DrawScrollPosArea@CExtPaintManager@@UAEXAAVCDC@@VCRect@@JJPAVCExtPageContainerWnd@@J@Z
?PageContainer_EraseScrollPosArea@CExtPaintManager@@UAEXAAVCDC@@VCRect@@JJPAVCExtPageContainerWnd@@J@Z
?PageContainer_EraseEntire@CExtPaintManager@@UAEXAAVCDC@@VCRect@@PAVCExtPageContainerWnd@@J@Z
?ScreenTip_Paint@CExtPaintManager@@UAEXAAVCDC@@ABUtagRECT@@AAVCExtCustomizeCmdScreenTip@@PAVCObject@@J@Z
?ScreenTip_PaintBackground@CExtPaintManager@@UAEXAAVCDC@@ABUtagRECT@@AAVCExtCustomizeCmdScreenTip@@PAVCObject@@J@Z
?ScreenTip_Measure@CExtPaintManager@@UAE?AVCSize@@AAVCDC@@AAVCExtCustomizeCmdScreenTip@@PAVCObject@@J@Z
?ScreenTip_GetTextColor@CExtPaintManager@@UAEK_N0AAVCExtCustomizeCmdScreenTip@@PAVCObject@@J@Z
?ScreenTip_GetSeparatorHeight@CExtPaintManager@@UAEHAAVCExtCustomizeCmdScreenTip@@PAVCObject@@J@Z
?ScreenTip_GetPaddingInnerText@CExtPaintManager@@UAE?AVCRect@@_N0AAVCExtCustomizeCmdScreenTip@@PAVCObject@@J@Z
?ScreenTip_GetPaddingInnerBmp@CExtPaintManager@@UAE?AVCRect@@_NAAVCExtCustomizeCmdScreenTip@@PAVCObject@@J@Z
?ScreenTip_GetPaddingOuter@CExtPaintManager@@UAE?AVCRect@@AAVCExtCustomizeCmdScreenTip@@PAVCObject@@J@Z
?ScreenTip_GetFont@CExtPaintManager@@UAEAAVCFont@@_N0AAVCExtCustomizeCmdScreenTip@@PAVCObject@@J@Z
?PaintProgress@CExtPaintManager@@UAE_NAAVCDC@@AAUPAINTPROGRESSDATA@1@@Z
?AdvTip_GetTextColor@CExtPaintManager@@UAEKPAVCObject@@J@Z
?AdvTip_GetFont@CExtPaintManager@@UAEPAVCFont@@PAVCObject@@J@Z
?AdvTip_PaintBackground@CExtPaintManager@@UAE_NAAVCDC@@ABUtagRECT@@_NPAVCObject@@J@Z
?AdvTip_CalcRgn@CExtPaintManager@@UAEXPAUHRGN__@@ABUtagRECT@@_NHPAVCObject@@J@Z
?RibbonGallery_PaintScrollArea@CExtPaintManager@@UAEXAAVCDC@@PAVCExtRibbonGalleryInplaceScrollBar@@J@Z
?RibbonGallery_AdjustClientRect@CExtPaintManager@@UAEXAAVCRect@@PBVCExtRibbonGalleryWnd@@J@Z
?RibbonGallery_EraseEntireBk@CExtPaintManager@@UAE_NAAVCDC@@ABVCRect@@1AAVCRgn@@12PAVCExtRibbonGalleryWnd@@J@Z
?RibbonGallery_DrawItem@CExtPaintManager@@UAE_NAAVCDC@@PAVCExtRibbonGalleryWnd@@ABUtagRECT@@PAXJ@Z
?RibbonGallery_MeasureItem@CExtPaintManager@@UAE?AVCSize@@AAVCDC@@PAVCExtRibbonGalleryWnd@@PAXJ@Z
?RibbonGallery_GetItemFont@CExtPaintManager@@UAEPAVCFont@@PAVCExtRibbonGalleryWnd@@PAXJ@Z
?Ribbon_DLB_Paint@CExtPaintManager@@UAEXAAVCDC@@PAVCExtRibbonButtonDialogLauncher@@J@Z
?Ribbon_DLB_CalcSize@CExtPaintManager@@UAE?AVCSize@@AAVCDC@@PAVCExtRibbonButtonDialogLauncher@@J@Z
?Ribbon_DLB_IsVisible@CExtPaintManager@@UBE_NPAVCExtRibbonButtonDialogLauncher@@J@Z
?Ribbon_QuickAccessContentExpandGetShift@CExtPaintManager@@UAE?AVCSize@@AAVCDC@@PAVCExtRibbonButtonQuickAccessContentExpand@@J@Z
?Ribbon_QuickAccessContentExpandButtonPaint@CExtPaintManager@@UAE_NAAVCDC@@PAVCExtRibbonButtonQuickAccessContentExpand@@J@Z
?Ribbon_QuickAccessContentExpandButtonCalcLayout@CExtPaintManager@@UAE_NAAVCDC@@PAVCExtRibbonButtonQuickAccessContentExpand@@J@Z
?Ribbon_FileButtonPaint@CExtPaintManager@@UAE_NAAVCDC@@PAVCExtRibbonButtonFile@@J@Z
?Ribbon_FileButtonCalcLayout@CExtPaintManager@@UAE_NAAVCDC@@PAVCExtNcFrameImpl@@PAVCExtRibbonButtonFile@@J@Z
?Ribbon_FileButtonGetMenuIntersectionHeight@CExtPaintManager@@UBEHXZ
?Ribbon_FileButtonIsItegrationSupported@CExtPaintManager@@UBE_NXZ
?Ribbon_FileMenuButtonQuery@CExtPaintManager@@UAEXPAXPAVCExtCmdIcon@@PB_WJ@Z
?Ribbon_EmbeddedCaptionAdjustTextRect@CExtPaintManager@@UAEXAAVCRect@@PBVCExtRibbonBar@@J@Z
?Ribbon_EmbeddedCaptionGetTextAlignmentFlags@CExtPaintManager@@UAEIPBVCExtRibbonBar@@J@Z
?Ribbon_EmbeddedCaptionPaintText@CExtPaintManager@@UAEXAAVCDC@@PB_WVCRect@@1PBVCExtRibbonBar@@J@Z
?Ribbon_NcOverPaint@CExtPaintManager@@UAEXAAVCDC@@_NH1PBUtagRECT@@PB_WPAVCObject@@J@Z
?Ribbon_GetRgnCornerResizing@CExtPaintManager@@UAEPAUHRGN__@@PAVCObject@@J@Z
?Ribbon_GetRgnCornerExclude@CExtPaintManager@@UAEPAUHRGN__@@PAVCObject@@J@Z
?Ribbon_GetTabLineHeight@CExtPaintManager@@UBEHPBVCExtRibbonPage@@J@Z
?Ribbon_PaintTabClientArea@CExtPaintManager@@UAEXAAVCDC@@AAVCRect@@11PAVCObject@@J@Z
?Ribbon_PaintTabItem@CExtPaintManager@@UAEXAAVCDC@@AAVCRect@@_NABV3@PAVCFont@@PB_WPAVCExtCmdIcon@@PAVCObject@@JKKKKK@Z
?Ribbon_GetTabIntersectionHeight@CExtPaintManager@@UBEHPBVCExtRibbonPage@@J@Z
?RibbonQuickAccessBar_AdjustButtonLocation@CExtPaintManager@@UAEXPAVCExtBarButton@@AAVCRect@@J@Z
?RibbonQuickAccessBar_PaintBkAtTheBottom@CExtPaintManager@@UBEXAAVCDC@@VCRect@@PBVCExtRibbonPage@@J@Z
?RibbonQuickAccessBar_GetButtonsAlignment@CExtPaintManager@@UBEHPBVCExtRibbonPage@@J@Z
?RibbonQuickAccessBar_GetBottomHeight@CExtPaintManager@@UBEHPBVCExtRibbonPage@@J@Z
?Ribbon_IsPopupGroupWithCaption@CExtPaintManager@@UBE_NPAVCObject@@J@Z
?Ribbon_GetPopupGroupBorderMetrics@CExtPaintManagerXP@@UAE?AVCRect@@PBVCExtRibbonPage@@J@Z
?Ribbon_PaintPushButton@CExtPaintManager@@UAEXAAVCDC@@AAUPAINTPUSHBUTTONDATA@1@@Z
?Ribbon_CalcLargeDropDownRect@CExtPaintManager@@UAE?AVCRect@@PBVCExtBarButton@@J@Z
?Ribbon_PaintSeparator@CExtPaintManager@@UAEXAAVCDC@@PBVCExtBarButton@@J@Z
?Ribbon_PaintPageBk@CExtPaintManager@@UAEXAAVCDC@@ABUtagRECT@@PBVCExtRibbonPage@@J@Z
?Ribbon_GetPageOuterContentPadding@CExtPaintManager@@UAE?AVCRect@@PBVCExtRibbonPage@@J@Z
?Ribbon_PaintQuickAccessGroupButton@CExtPaintManager@@UAE_NAAVCDC@@ABUtagRECT@@PBVCExtRibbonButtonGroup@@J@Z
?Ribbon_PaintGroupBk@CExtPaintManager@@UAEXAAVCDC@@ABUtagRECT@@PBVCExtRibbonButtonGroup@@J@Z
?Ribbon_PaintText@CExtPaintManager@@UAEXAAVCDC@@PB_WABUtagRECT@@I_NPAVCExtBitmap@@PAVCObject@@J@Z
?Ribbon_GetGroupCollapsedIcon@CExtPaintManager@@UAEPAVCExtCmdIcon@@PBVCExtRibbonButtonGroup@@J@Z
?Ribbon_GroupCaptionIsAtTop@CExtPaintManager@@UBE_NPBVCExtRibbonButtonGroup@@J@Z
?Ribbon_GroupCaptionGetHeight@CExtPaintManager@@UBEHPBVCExtRibbonButtonGroup@@J@Z
?Ribbon_CalcButtonSize@CExtPaintManager@@UAE?AVCSize@@AAVCDC@@HPBVCExtBarButton@@J@Z
?Ribbon_GetTextToIconDistance@CExtPaintManager@@UAEHAAVCDC@@HPBVCExtBarButton@@J@Z
?Ribbon_GetDropDownArrowSize@CExtPaintManager@@UAE?AVCSize@@AAVCDC@@HPBVCExtBarButton@@J@Z
?Ribbon_GetIconSize@CExtPaintManager@@UAE?AVCSize@@PBVCObject@@HJ@Z
?Ribbon_GetContentPadding@CExtPaintManager@@UAE?AVCRect@@PBVCExtBarButton@@J@Z
?Ribbon_GetOuterGroupDistance@CExtPaintManager@@UAEHPBVCExtBarButton@@_NJ@Z
?Ribbon_GetToolGroupExtraLineDistance@CExtPaintManager@@UAEHPBVCExtRibbonButtonGroup@@J@Z
?Ribbon_GetToolGroupExtraOffset@CExtPaintManager@@UAEHPBVCExtRibbonButtonGroup@@J@Z
?Ribbon_GetGroupHeight@CExtPaintManager@@UAEHPBVCExtRibbonButtonGroup@@J@Z
?Ribbon_PaintContractedMargin@CExtPaintManager@@UAEXAAVCDC@@PBVCExtRibbonPage@@J@Z
?Ribbon_GetContractedMarginHeight@CExtPaintManager@@UAEHPBVCExtRibbonPage@@J@Z
?Ribbon_OptionsPageBackgroundIsDefault@CExtPaintManager@@UBE_NXZ
?ReportGrid_PaintGroupAreaItemBackground@CExtPaintManager@@UAE_NAAVCDC@@ABUtagRECT@@PAVCObject@@J@Z
?ReportGrid_GetGroupConnectorColor@CExtPaintManager@@UAEKPAVCObject@@J@Z
?ReportGrid_GetHeaderTextColor@CExtPaintManager@@UAEKPAVCObject@@J@Z
?ReportGrid_PaintGroupAreaBackground@CExtPaintManager@@UAE_NAAVCDC@@ABUtagRECT@@PB_WPAVCObject@@J@Z
?ReportGrid_PaintHeaderSortArrow@CExtPaintManager@@UAE_NAAVCDC@@ABUtagRECT@@_NPAVCObject@@J@Z
?ReportGrid_PaintHeaderRowBackground@CExtPaintManager@@UAE_NAAVCDC@@ABUtagRECT@@PAVCObject@@J@Z
?Grid_OnQueryTextColor@CExtPaintManager@@UAEKABVCExtGridCell@@AAVCDC@@JJJJHHKK@Z
?Grid_PaintHeaderBackground@CExtPaintManager@@UAE_NAAVCDC@@ABUtagRECT@@JJHHKKPAVCObject@@J@Z
?Grid_PaintHeaderSortArrow@CExtPaintManager@@UAE_NAAVCDC@@ABUtagRECT@@_N2PAKPAVCObject@@J@Z
?Grid_PaintButton@CExtPaintManager@@UAE_NAAVCDC@@ABUtagRECT@@H_N222KKKKKKPAVCObject@@J@Z
?ScrollBar_GetSkinData@CExtPaintManager@@UAEPAUSCROLLBARSKINDATA@1@_NPAVCObject@@J0@Z
?ScrollBar_Paint@CExtPaintManager@@UBEXAAVCDC@@AAUPAINTSCROLLBARDATA@1@@Z
?ScrollBar_GetMetrics@CExtPaintManager@@UBE_NPAH00000PAVCObject@@J@Z
?PaintGroupBoxLabel@CExtPaintManager@@UAE_NAAVCDC@@PB_WKPAUHFONT__@@K_NABUtagRECT@@PAVCObject@@J@Z
?PaintGroupBoxFrame@CExtPaintManager@@UAE_NAAVCDC@@ABUtagRECT@@KPAVCObject@@J@Z
?QueryObjectTextColor@CExtPaintManager@@UAEKAAVCDC@@_N111PAVCObject@@J@Z
?PaintBarButtonCombinedArea@CExtPaintManager@@UAEXAAVCDC@@PAVCExtBarButton@@J@Z
?DockMarker_AdjustHighlightedLayer@CExtPaintManager@@UAEXPAUHWND__@@HH_N1ABVCRect@@2KKH@Z
?DockMarker_AdjustHighlightedArea@CExtPaintManager@@UAEXPAKHH_N1ABVCRect@@2KKH@Z
?DockMarker_AdjustBmps@CExtPaintManagerXP@@UAEXW4eDockMarkerType_t@CExtPaintManager@@AAVCExtBitmap@@K1K@Z
?ItemGetAccelText@CExtPopupMenuWnd@@UBE?AV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@H@Z
?DockMarker_IsAdjustBmpsRequired@CExtPaintManager@@UBE_NW4eDockMarkerType_t@1@@Z
?DockMarker_GetAlpha@CExtPaintManager@@UAEE_NPAVCObject@@J@Z
?DockMarker_GetOuterDistance@CExtPaintManager@@UAE?AVCRect@@XZ
?DockMarker_PostRender@CExtPaintManager@@UAEXAAVCDC@@VCRect@@W4eDockMarkerType_t@1@_NPAVCObject@@J@Z
?DockMarker_CreateWnds@CExtPaintManager@@UAE_NPAUHWND__@@W4eDockMarkerType_t@1@VCRect@@AAV?$CTypedPtrArray@VCPtrArray@@PAVCExtDynDockMarkerWnd@@@@HPAVCExtDynDockMarkerWnd@@@Z
?DockMarker_CreateObject@CExtPaintManager@@UAEPAVDockMarkerBase@1@H@Z
?Duration_PaintDropDownButton@CExtPaintManager@@UAEXAAVCDC@@ABVCRect@@_N22PAVCObject@@J@Z
?Duration_PaintSpinButton@CExtPaintManager@@UAEXAAVCDC@@ABVCRect@@_N222PAVCObject@@J@Z
?Duration_GetDropDownButtonExtraSpace@CExtPaintManager@@UBE?AVCRect@@PBVCObject@@J@Z
?Duration_GetSpinButtonExtraSpace@CExtPaintManager@@UBE?AVCRect@@PBVCObject@@J@Z
?Duration_GetDropDownButtonWidth@CExtPaintManager@@UBEHPBVCObject@@J@Z
?Duration_GetSpinButtonWidth@CExtPaintManager@@UBEHPBVCObject@@J@Z
?PaintSliderTics@CExtPaintManager@@UAE_NAAVCDC@@ABVCRect@@_N2PAVCObject@@J@Z
?PaintSliderThumb@CExtPaintManager@@UAE_NAAVCDC@@ABVCRect@@_N222222PAVCObject@@J@Z
?PaintSliderChannel@CExtPaintManager@@UAE_NAAVCDC@@ABVCRect@@_N2PAVCObject@@J@Z
?PaintSpinButton@CExtPaintManagerXP@@UAEXAAVCDC@@ABVCRect@@_N2222222PAVCObject@@J@Z
?PaintSpinButtonArrow@CExtPaintManager@@UAEXAAVCDC@@ABVCRect@@_N22222PAVCObject@@J@Z
?Spin_QueryNcAreaMargins@CExtPaintManager@@UBE?AVCRect@@_N00@Z
?PaintUndoRedoCaption@CExtPaintManagerXP@@UAEXAAVCDC@@ABVCRect@@PB_WPAVCObject@@J@Z
?PaintDatePickerHeaderBackground@CExtPaintManagerXP@@UAEXHHAAVCDC@@HHABUtagRECT@@1111PAVCObject@@J@Z
?PaintDatePickerBorder@CExtPaintManagerXP@@UAEXAAVCDC@@ABUtagRECT@@PAVCObject@@J@Z
?PaintDatePickerClientArea@CExtPaintManager@@UAEXAAVCDC@@ABUtagRECT@@1PAVCObject@@J@Z
?PaintDatePickerButtonsSeparator@CExtPaintManager@@UAEXAAVCDC@@ABUtagRECT@@PAVCObject@@J@Z
?PaintDatePickerPushButton@CExtPaintManager@@UAEXAAVCDC@@ABVCRect@@JPB_W_N333PAUHFONT__@@PAVCObject@@J@Z
?TaskPaneQueryGroupCaptionFont@CExtPaintManager@@UAEPAUHFONT__@@XZ
?TaskPaneQueryGroupCaptionTextMargins@CExtPaintManagerXP@@UBE?AVCRect@@XZ
?TaskPaneQueryGroupCaptionMinHeight@CExtPaintManagerXP@@UBEJXZ
?TaskPaneQueryGroupSpacing@CExtPaintManager@@UBEJXZ
?TaskPaneQueryMarginsPage@CExtPaintManager@@UBE?AVCRect@@XZ
?TaskPanePaintGroupCaptionText@CExtPaintManager@@UAEXAAVCDC@@ABVCRect@@PB_W_N33PAVCObject@@@Z
?TaskPanePaintGroupCaption@CExtPaintManagerXP@@UAEXAAVCDC@@ABVCRect@@PB_W_N3333PAVCObject@@@Z
?TaskPanePaintGroupCaptionBackground@CExtPaintManager@@UAEXAAVCDC@@ABVCRect@@_N22222PAVCObject@@@Z
?TaskPanePaintBorder@CExtPaintManagerXP@@UAEXAAVCDC@@ABUtagRECT@@PAVCObject@@@Z
?TaskPanePaintClientAreaToolbar@CExtPaintManager@@UAEXAAVCDC@@ABUtagRECT@@PAVCObject@@@Z
?TaskPanePaintClientArea@CExtPaintManager@@UAEXAAVCDC@@ABUtagRECT@@PAVCObject@@@Z
?PaintPageNavigatorSplitterDotsImpl@CExtPaintManager@@UAEXAAVCDC@@ABVCRect@@KKHH@Z
?PaintPageNavigatorSplitterDots@CExtPaintManager@@UAEXAAVCDC@@ABVCRect@@H@Z
?PaintPageNavigatorSplitter@CExtPaintManagerXP@@UAEXAAVCDC@@ABVCRect@@_N@Z
?PaintPageNavigatorConfigButton@CExtPaintManager@@UAEXAAVCDC@@ABVCRect@@_N2@Z
?PaintPageNavigatorItemPaneCaption@CExtPaintManager@@UAEXAAVCDC@@ABVCRect@@PB_W_N3333@Z
?PaintPageNavigatorItemPaneCaptionText@CExtPaintManager@@UAEXAAVCDC@@ABVCRect@@PB_W@Z
?PaintPageNavigatorItemPaneCaptionTextImpl@CExtPaintManager@@UAEXAAVCDC@@ABVCRect@@PB_W@Z
?PaintPageNavigatorCaptionText@CExtPaintManager@@UAEXAAVCDC@@ABVCRect@@PB_W_N33@Z
?PaintPageNavigatorCaptionTextImpl@CExtPaintManager@@UAEXAAVCDC@@ABVCRect@@PB_W@Z
?PaintPageNavigatorCaption@CExtPaintManager@@UAEXAAVCDC@@ABVCRect@@PB_WPAVCExtCmdIcon@@_N444@Z
?PaintPageNavigatorItemCaption@CExtPaintManager@@UAEXAAVCDC@@ABVCRect@@PB_W@Z
?PaintPageNavigatorItemCaptionText@CExtPaintManager@@UAEXAAVCDC@@ABVCRect@@PB_W@Z
?PaintPageNavigatorItem@CExtPaintManagerXP@@UAEXAAVCDC@@ABVCRect@@PB_WPAVCExtCmdIcon@@_N44@Z
?PaintPageNavigatorBorder@CExtPaintManagerXP@@UAEXAAVCDC@@ABUtagRECT@@@Z
?PaintPageNavigatorClientArea@CExtPaintManager@@UAEXAAVCDC@@ABUtagRECT@@PAVCObject@@@Z
?PageNavigator_GetItemPaneCaptionHeight@CExtPaintManager@@UBEHXZ
?PageNavigator_GetItemCaptionHeight@CExtPaintManager@@UBEHXZ
?PageNavigator_GetSplitterHeight@CExtPaintManager@@UBEHXZ
?PaintResizingGripper@CExtPaintManager@@UAEXAAVCDC@@ABUtagRECT@@PAVCObject@@J@Z
?GetResizingGriperSize@CExtPaintManager@@UBE?AVCSize@@PAVCObject@@J@Z
?FixedBar_GetRoundedAreaMerics@CExtPaintManagerXP@@UBE?AVCSize@@XZ
?AdjustIcon@CExtPaintManagerXP@@UAE_NPAVCExtCmdIcon@@@Z
?GetIconAlphaAdjustPercent@CExtPaintManagerXP@@UBENXZ
?GetIconAlphaColor@CExtPaintManagerXP@@UBEKXZ
?PaintToolbarTextField@CExtPaintManagerXP@@UAEXAAVCDC@@AAUPAINTTOOLBARTEXTFIELDDATA@CExtPaintManager@@@Z
?GetToolBarButtonOffset@CExtPaintManager@@UBE?AVCSize@@H@Z
?OnStateSerialize@CExtPaintManager@@UAE_NAAVCArchive@@_N@Z
?OnThemeChanged@CExtPaintManager@@UAEXIJ@Z
?OnDisplayChange@CExtPaintManager@@UAEXHVCPoint@@@Z
?OnSettingChange@CExtPaintManager@@UAEXIPB_W@Z
?OnSysColorChange@CExtPaintManager@@UAEXXZ
?PaintShortcutListItem@CExtPaintManagerXP@@UAEXAAVCDC@@AAUPAINTSHORTCUTLISTITEMSDATA@CExtPaintManager@@@Z
?PaintShortcutListScrollButton@CExtPaintManager@@UAEXAAVCDC@@_NABUtagRECT@@111PAVCObject@@J@Z
?PaintShortcutListBkgnd@CExtPaintManagerXP@@UAEXAAVCDC@@ABUtagRECT@@PAVCObject@@J@Z
?PaintDockBarClientArea@CExtPaintManager@@UAEXAAVCDC@@ABUtagRECT@@PAVCObject@@J@Z
?PaintControlBarClientArea@CExtPaintManager@@UAEXAAVCDC@@ABUtagRECT@@PAVCObject@@J@Z
?PaintDocumentClientAreaBkgnd@CExtPaintManager@@UAE_NAAVCDC@@PAVCWnd@@J@Z
?PaintDockerBkgnd@CExtPaintManager@@UAE_N_NAAVCDC@@PAVCWnd@@J@Z
?PaintDockerBkgnd@CExtPaintManager@@UAE_N_NAAVCDC@@ABVCRect@@2J@Z
?GetCb2DbTransparentMode@CExtPaintManager@@UAE_NPAVCObject@@J@Z
?GetCustomBackgroundInheritanceMode@CExtPaintManager@@UBE_NPAVCObject@@J@Z
?IsCustomBackgroundInheritanceEnabled@CExtPaintManager@@UBE_NXZ
?RenderCustomBackground@CExtPaintManager@@UBE_N_NAAVCDC@@PAVCObject@@J@Z
?GetAutoHideTabsType@CExtPaintManager@@UBEHXZ
?GetThemeDockingType@CExtPaintManager@@UBEHXZ
?PaintControlBarBorders@CExtPaintManagerXP@@UAEXAAVCDC@@AAUPAINTCONTROLBARBORDERSDATA@CExtPaintManager@@@Z
?PaintMenuCombinedArea@CExtPaintManagerXP@@UAEXAAVCDC@@ABUtagRECT@@1HPAVCObject@@J@Z
?IsToolBarChevronMenuCombined@CExtPaintManagerXP@@UAE_NXZ
?IsMenuMustCombineExcludeArea@CExtPaintManagerXP@@UBE_NPBVCObject@@@Z
?AdjustMenuDC@CExtPaintManager@@UAEXPAVCExtPopupMenuWnd@@AAVCDC@@_NJ@Z
?PaintMenuBorder@CExtPaintManagerXP@@UAEXAAVCDC@@ABUtagRECT@@PAVCObject@@J@Z
?MenuCaption_Paint@CExtPaintManager@@UBEXAAVCDC@@ABUtagRECT@@PB_WPAVCExtPopupMenuWnd@@J@Z
?MenuCaption_Measure@CExtPaintManager@@UBE?AVCSize@@AAVCDC@@PB_WPAVCExtPopupMenuWnd@@J@Z
?MenuCaptionGetFont@CExtPaintManager@@UBEPAVCFont@@PAVCExtPopupMenuWnd@@J@Z
?MenuBottomResizingMarginPaint@CExtPaintManager@@UAEXAAVCDC@@ABUtagRECT@@PAVCExtPopupMenuWnd@@J@Z
?MenuBottomResizingMarginGetInfo@CExtPaintManager@@UAEXAAH0PAVCExtPopupMenuWnd@@J@Z
?GetMenuBorderMetrics@CExtPaintManagerXP@@UBE?AVCRect@@PAVCWnd@@J@Z
?GetMenuIconAreaWidth@CExtPaintManager@@UBEHXZ
?GetMenuShadowSize@CExtPaintManagerXP@@UBEHXZ
?GetTipShadowSize@CExtPaintManager@@UBEHXZ
?GetTextHeight@CExtPaintManager@@UAEH_N@Z
?GetSpinButtonMargins@CExtPaintManager@@UBE?AVCRect@@PAVCObject@@J@Z
?GetSpinButtonWidth@CExtPaintManager@@UBEHPAVCObject@@J@Z
?GetDropDownButtonWidth@CExtPaintManager@@UBEHPAVCObject@@J@Z
?PaintComboFrame@CExtPaintManagerXP@@UAEXAAVCDC@@AAUPAINTCOMBOFRAMEDATA@CExtPaintManager@@@Z
?PaintControlFrame@CExtPaintManagerXP@@UAEXAAVCDC@@AAUPAINTCONTROLFRAMEDATA@CExtPaintManager@@@Z
?PaintDockingFrame@CExtPaintManagerXP@@UAEXAAVCDC@@AAUPAINTDOCKINGFRAMEDATA@CExtPaintManager@@@Z
?PaintGripper@CExtPaintManagerXP@@UAEXAAVCDC@@AAUPAINTGRIPPERDATA@CExtPaintManager@@@Z
?PaintSeparator@CExtPaintManagerXP@@UAEXAAVCDC@@ABUtagRECT@@_N2PAVCObject@@J@Z
?PaintMenuSeparator@CExtPaintManagerXP@@UAEXAAVCDC@@ABUtagRECT@@H_N2PAVCObject@@J@Z
?PaintMenuItemInPlaceWnd@CExtPaintManagerXP@@UAEXAAVCDC@@AAUPAINTMENUITEMDATA@CExtPaintManager@@@Z
?PaintMenuItemIcon@CExtPaintManagerXP@@UAEXAAVCDC@@AAUPAINTMENUITEMDATA@CExtPaintManager@@@Z
?PaintMenuItem@CExtPaintManagerXP@@UAEXAAVCDC@@AAUPAINTMENUITEMDATA@CExtPaintManager@@@Z
?TearOff_GetCaptionPaint@CExtPaintManager@@UAEXAAVCDC@@ABUtagRECT@@_N2PAVCObject@@J@Z
?TearOff_GetCaptionHeight@CExtPaintManager@@UBEHXZ
?PaintDragSourceRect@CExtPaintManager@@UAEXAAVCDC@@ABUtagRECT@@@Z
?PaintDropDivider@CExtPaintManager@@UAEXAAVCDC@@ABUtagRECT@@_N2@Z
?GetDropDividerMerics@CExtPaintManager@@UAE?AVCSize@@XZ
?PaintRadioButton@CExtPaintManager@@UAEXAAVCDC@@AAUPAINTCHECKRADIOBUTTONDATA@1@@Z
?PaintCheckButton@CExtPaintManager@@UAEXAAVCDC@@AAUPAINTCHECKRADIOBUTTONDATA@1@@Z
?PaintRadioButtonBox@CExtPaintManager@@UAEXAAVCDC@@AAUPAINTCHECKRADIOBUTTONDATA@1@@Z
?PaintCheckButtonBox@CExtPaintManager@@UAEXAAVCDC@@AAUPAINTCHECKRADIOBUTTONDATA@1@@Z
?PaintCheckOrRadioButtonText@CExtPaintManager@@UAEXAAVCDC@@AAUPAINTCHECKRADIOBUTTONDATA@1@VCSize@@AAVCRect@@@Z
?GetRadioButtonBoxSize@CExtPaintManager@@UBE?AVCSize@@AAVCDC@@AAUPAINTCHECKRADIOBUTTONDATA@1@@Z
?GetCheckButtonBoxSize@CExtPaintManager@@UBE?AVCSize@@AAVCDC@@AAUPAINTCHECKRADIOBUTTONDATA@1@@Z
?PaintPushButtonIcon@CExtPaintManager@@UAEXAAVCDC@@AAVCRect@@11AAUPAINTPUSHBUTTONDATA@1@@Z
?PaintPushButtonText@CExtPaintManagerXP@@UAEXAAVCDC@@AAVCRect@@AAUPAINTPUSHBUTTONDATA@CExtPaintManager@@@Z
?PaintPushButton@CExtPaintManagerXP@@UAEXAAVCDC@@AAUPAINTPUSHBUTTONDATA@CExtPaintManager@@@Z
?PaintSysCmdGlyph@CExtPaintManagerXP@@UAEXAAVCDC@@IABUtagRECT@@_N22@Z
?PaintDockingCaptionButton@CExtPaintManagerXP@@UAEXAAVCDC@@AAUPAINTDOCKINGCAPTIONBUTTONDATA@CExtPaintManager@@@Z
?PaintIcon@CExtPaintManagerXP@@UAEXAAVCDC@@_NPAVCExtCmdIcon@@ABVCRect@@111H1PAV4@44K@Z
?PaintResizableBarChildNcAreaRect@CExtPaintManagerXP@@UAEXAAVCDC@@ABUtagRECT@@PAVCObject@@J@Z
?TabWnd_AdjustItemCloseButtonRect@CExtPaintManager@@UAEXAAVCRect@@PAVCExtTabWnd@@@Z
?TabWnd_GetParentSizingMargin@CExtPaintManager@@UBE_NAAHKPAVCExtTabWnd@@@Z
?TabWnd_UpdateItemMeasure@CExtPaintManager@@UAEXPAVCExtTabWnd@@PAVTAB_ITEM_INFO@2@AAVCDC@@AAVCSize@@@Z
?TabWnd_MeasureItemAreaMargins@CExtPaintManager@@UAEXPAVCExtTabWnd@@AAJ11@Z
?PaintTabNcAreaRect@CExtPaintManagerXP@@UAEXAAVCDC@@ABUtagRECT@@PAVCObject@@J@Z
?PaintTabButton@CExtPaintManagerXP@@UAEXAAVCDC@@AAVCRect@@J_N22222PAVCObject@@J2@Z
?PaintTabbedTabClientArea@CExtPaintManager@@UAEXAAVCDC@@AAVCRect@@11K_NPAVCObject@@J@Z
?PaintTabClientArea@CExtPaintManagerXP@@UAEXAAVCDC@@AAVCRect@@11K_NPAVCObject@@J@Z
?QueryTabWndHoverChangingRedraw@CExtPaintManager@@UAE_NPBVCExtTabWnd@@J@Z
?PaintTabItem@CExtPaintManagerXP@@UAEXAAVCDC@@AAVCRect@@_N222222ABV3@VCSize@@PAVCFont@@PB_WPAVCExtCmdIcon@@PAVCObject@@JKKKKK@Z
?GetThemeAccentTabColors@CExtPaintManager@@UAEXPAK000PAVCObject@@J@Z
?GetMenuExpandButtonHeight@CExtPaintManagerXP@@UAEHXZ
?PaintMenuTearOffButton@CExtPaintManagerXP@@UAEXAAVCDC@@ABUtagRECT@@_N2PAVCObject@@J@Z
?PaintMenuScrollButton@CExtPaintManagerXP@@UAEXAAVCDC@@_N11ABUtagRECT@@PAVCObject@@J@Z
?PaintMenuExpandButton@CExtPaintManagerXP@@UAEXAAVCDC@@ABUtagRECT@@_N2PAVCObject@@J@Z
?PaintToolbarExpandButton@CExtPaintManagerXP@@UAEXAAVCDC@@ABUtagRECT@@_N2222PAVCObject@@J2@Z
?PaintFloatToolbarRowBk@CExtPaintManagerXP@@UAEXAAVCDC@@PBVCExtToolControlBar@@HAAVCRect@@@Z
?PaintGlyphCentered@CExtPaintManager@@UAEXAAVCDC@@ABUtagRECT@@ABVglyph_t@1@PAK@Z
?PaintGlyph@CExtPaintManager@@UAEXAAVCDC@@UtagPOINT@@ABVglyph_t@1@PAK@Z
?LoadWinXpTreeBox@CExtPaintManager@@UAEXAAVCExtCmdIcon@@_N1@Z
?GetPushedOffset@CExtPaintManagerXP@@UAE?AVCSize@@XZ
?InitHelperBrushes@CExtPaintManager@@UAEXXZ
?InitTranslatedColors@CExtPaintManagerXP@@UAEXXZ
?FixedBar_IsPaintRowBkMode@CExtPaintManagerXP@@UAE_NPBVCExtToolControlBar@@@Z
?FixedBar_GetRowDistance@CExtPaintManagerXP@@UAEHPBVCExtToolControlBar@@@Z
?FixedBar_AdjustClientRect@CExtPaintManagerXP@@UAEXPBVCExtControlBar@@AAVCRect@@@Z
?GetShadowAdjustColor@CExtPaintManagerXP@@UAEKXZ
?GetMenuFrameFillColor@CExtPaintManagerXP@@UAEKPAVCObject@@J@Z
?GetColor@CExtPaintManager@@UAEKHPAVCObject@@J@Z
?GetBrush@CExtPaintManager@@UAEPAUHBRUSH__@@H@Z
?SyncSysColors@CExtPaintManager@@UAEXXZ
?CreateCaptionFont@CExtPaintManager@@UAEPAUHFONT__@@XZ
?CreateDefaultFont@CExtPaintManager@@UAEPAUHFONT__@@XZ
?AdjustDialogTemplate@CExtPaintManager@@UAEPAUDLGTEMPLATE@@PBU2@PAVCObject@@_NJ@Z
?AdjustControlFont@CExtPaintManager@@UAE_NAAPAUHFONT__@@PAVCObject@@J@Z
?StatusBar_PaintSeparator@CExtPaintManager@@UBE_NAAVCDC@@HABUtagRECT@@1PBVCExtStatusControlBar@@J@Z
?StatusBar_PaintPane@CExtPaintManager@@UBE_NAAVCDC@@HABUtagRECT@@KPAUHICON__@@PB_WIKPBVCExtStatusControlBar@@J@Z
?StatusBar_ErasePaneBackground@CExtPaintManager@@UBE_NAAVCDC@@HABUtagRECT@@PBVCExtStatusControlBar@@J@Z
?StatusBar_EraseBackground@CExtPaintManager@@UBE_NAAVCDC@@ABUtagRECT@@PBVCExtStatusControlBar@@J@Z
?StatusBar_QuerySkinSupport@CExtPaintManager@@UBE_NPBVCExtStatusControlBar@@J@Z
?Toolbar_GetSizeOfCEB@CExtPaintManager@@UAE_NAAUtagSIZE@@ABU2@AAVCDC@@HPAVCExtBarContentExpandButton@@J@Z
?Toolbar_GetBGInfo@CExtPaintManager@@UBE_NAAUtagRECT@@AAH1PAVCExtToolControlBar@@J@Z
?Toolbar_GetFont@CExtPaintManager@@UAEPAUHFONT__@@_NPAVCExtControlBar@@J@Z
?Toolbar_AdjustButtonSize@CExtPaintManager@@UAEXPAVCExtBarButton@@AAVCSize@@@Z
?Toolbar_GetMinButtonSize@CExtPaintManager@@UAE?AVCSize@@PAVCObject@@J@Z
?Bar_GetCaptionFont@CExtPaintManager@@UAEPAUHFONT__@@_NPAVCExtToolControlBar@@J@Z
?Bar_GripperHeightAtTopGet@CExtPaintManager@@UBEHPAVCExtControlBar@@J@Z
?Bar_GripperWidthAtLeftGet@CExtPaintManager@@UBEHPAVCExtControlBar@@J@Z
?Bar_SeparatorHeightGet@CExtPaintManager@@UBEHPAVCExtControlBar@@J@Z
?Bar_SeparatorWidthGet@CExtPaintManager@@UBEHPAVCExtControlBar@@J@Z
?Bar_GetCaptionBordersForText@CExtPaintManager@@UBE?AVCRect@@PAVCExtControlBar@@J@Z
?Bar_LayoutNcAreaButton@CExtPaintManager@@UBE_NAAUtagRECT@@ABU2@PAVCExtBarNcAreaButton@@2PAVCObject@@J@Z
?PaintResizableBarSeparator@CExtPaintManager@@UAEXAAVCDC@@ABUtagRECT@@_NPAVCExtControlBar@@J@Z
?Bar_MiniDockFrameCaptionCalcRect@CExtPaintManager@@UBE_NAAUtagRECT@@PAVCExtMiniDockFrameWnd@@PAVCExtControlBar@@J@Z
?Bar_MiniDockFrameNcCalcSize@CExtPaintManager@@UBE_NAAUtagRECT@@PAVCExtMiniDockFrameWnd@@PAVCExtControlBar@@J@Z
?Bar_MiniDockFrameGetNcMetrics@CExtPaintManager@@UBE_NAAH00PAVCExtMiniDockFrameWnd@@PAVCExtControlBar@@J@Z
?NcFrame_GetRects@CExtPaintManager@@UBEXPAVCExtCmdIcon@@PB_WIAAUtagRECT@@22222PBVCWnd@@PAUtagMINMAXINFO@@J@Z
?NcFrame_GetHtRect@CExtPaintManager@@UBE?AVCRect@@I_N00PBVCExtCmdIcon@@PBVCWnd@@PAUtagMINMAXINFO@@J@Z
?NcFrame_Paint@CExtPaintManager@@UBEXAAVCDC@@PBVCExtCmdIcon@@PB_WIABUtagRECT@@3333333_N44W4e_nc_button_state_t@1@555PBVCWnd@@J@Z
?NcFrame_GetMetrics@CExtPaintManager@@UBEXAAUtagRECT@@0PBVCWnd@@J@Z
?NcFrame_GetCaptionHeight@CExtPaintManager@@UBEH_NPBVCWnd@@J@Z
?NcFrame_GenerateSkinFrameRGN@CExtPaintManager@@UBEPAUHRGN__@@ABUtagRECT@@PBVCWnd@@J@Z
?NcFrame_IsSupported@CExtPaintManager@@UBE_NPBVCWnd@@J@Z
?OnPaintSessionComplete@CExtPaintManager@@UAEXPAVCObject@@J@Z
?Animation_GetParameters@CExtPaintManager@@UBEPBVCExtAnimationParameters@@HPAVCObject@@PBVCExtAnimationClient@@J@Z
?SerializeSynchronizationData@CExtPaintManager@@UAEXAAVCArchive@@@Z
?IsHighContrast@CExtPaintManager@@UBE_NXZ
?OnQuerySystemTheme@CExtPaintManager@@UBE?AW4e_system_theme_t@1@XZ
?OnQueryUseThemeColors@CExtPaintManagerXP@@UBE_NXZ
?GetTabWhidbeyItemColors@CExtPaintManager@@UAEX_N00AAK111@Z
?GetTabOneNoteItemColors@CExtPaintManager@@UAEX_N00AAK1111@Z
?TabOneNoteWnd_DrawClientArea@CExtPaintManager@@UAEXAAVCDC@@AAVCRect@@PAVCObject@@J@Z
?GetSeparatorHeight@CExtPaintManagerXP@@UAEHXZ
?OnQueryPaintManagerName@CExtPaintManagerXP@@UAE?AW4e_paint_manager_name_t@CExtPaintManager@@XZ
?Ribbon_SyncFonts@CExtPaintManager@@UAEXXZ
?UiScalingDo@CExtPaintManager@@UBEHHW4e_ui_scaling_type_t@1@@Z
?UiScalingIsEnabled@CExtPaintManager@@UBE_NW4e_ui_scaling_type_t@1@@Z
?GetRuntimeClass@CExtPaintManagerXP@@UBEPAUCRuntimeClass@@XZ
?g_CmdManager@@3VCExtCmdManagerAutoPtr@CExtCmdManager@@A
??CCExtCmdManagerAutoPtr@CExtCmdManager@@QAEPAV1@XZ
?ProfileSetup@CExtCmdManager@@QAE_NPB_WPAUHWND__@@PAVCExtCmdProfile@@@Z
??0CExtPaintManagerXP@@QAE@XZ
?g_PaintManager@@3VCExtPaintManagerAutoPtr@CExtPaintManager@@A
?InstallPaintManager@CExtPaintManagerAutoPtr@CExtPaintManager@@QAE_NPAV2@@Z
?g_bMenuWithShadows@CExtPopupMenuWnd@@2_NA
?g_bMenuShowCoolTips@CExtPopupMenuWnd@@2_NA
?g_bMenuExpanding@CExtPopupMenuWnd@@2_NA
?g_bMenuHighlightRarely@CExtPopupMenuWnd@@2_NA
?g_bMenuExpandAnimation@CExtPopupMenuWnd@@2_NA
?g_bUseDesktopWorkArea@CExtPopupBaseWnd@@2_NA
?g_DefAnimationType@CExtPopupBaseWnd@@2W4e_animation_type_t@1@A
?ItemInsert@CExtPopupMenuWnd@@QAEHIHPB_WPAUHICON__@@PAUHWND__@@@Z
??1CExtPopupMenuWnd@@UAE@XZ
?PmBridge_OnThemeChanged@CExtPmBridge@@UAEXPAVCExtPaintManager@@PAVCWnd@@IJ@Z
?PmBridge_OnDisplayChange@CExtPmBridge@@UAEXPAVCExtPaintManager@@PAVCWnd@@HVCPoint@@@Z
?PmBridge_OnSettingChange@CExtPmBridge@@UAEXPAVCExtPaintManager@@PAVCWnd@@IPB_W@Z
?PmBridge_OnSysColorChange@CExtPmBridge@@UAEXPAVCExtPaintManager@@PAVCWnd@@@Z
?PmBridge_OnPaintManagerChanged@CExtPmBridge@@UAEXPAVCExtPaintManager@@@Z
?PmBridge_GetPM@CExtPopupBaseWnd@@UBEPAVCExtPaintManager@@XZ
?PmBridge_GetSafeHwnd@CExtPopupBaseWnd@@UBEPAUHWND__@@XZ
?PmBridge_Uninstall@CExtPopupBaseWnd@@UAEXXZ
?PmBridge_Install@CExtPopupBaseWnd@@UAEX_N@Z
?ResizingMaxSizeSet@CExtPopupMenuWnd@@UAEXVCSize@@@Z
?ResizingMaxSizeGet@CExtPopupMenuWnd@@UBE?AVCSize@@XZ
?ResizingMinSizeSet@CExtPopupMenuWnd@@UAEXVCSize@@@Z
?ResizingMinSizeGet@CExtPopupMenuWnd@@UBE?AVCSize@@XZ
?_DoAdjustControlMetrics@CExtPopupMenuWnd@@UAEXVCSize@@@Z
?_DoResizing@CExtPopupMenuWnd@@UAEXVCPoint@@_N@Z
?_IsResizingMode@CExtPopupMenuWnd@@UBE_NXZ
?MenuCaptionPaint@CExtPopupMenuWnd@@UBEXAAVCDC@@VCRect@@@Z
?MenuCaptionMeasure@CExtPopupMenuWnd@@UBE?AVCSize@@XZ
?MenuCaptionTextSet@CExtPopupMenuWnd@@UAEXPB_W@Z
?MenuCaptionTextGet@CExtPopupMenuWnd@@UBEPB_WXZ
?_DeleteFadeOutMenu@CExtPopupMenuWnd@@MAEXXZ
?GetSite@CExtPopupMenuWnd@@UBEAAVCExtPopupMenuSite@@XZ
?_InsertItem@CExtPopupMenuWnd@@MAEXHAAVMENUITEMDATA@1@_N@Z
?_EndSequence@CExtPopupMenuWnd@@MAEXIPAUHWND__@@@Z
?_GetNextItem@CExtPopupMenuWnd@@UAEHW4next_item_t@1@@Z
?_IsRibbonMode@CExtPopupMenuWnd@@UBE_NXZ
?_CalcTrackSize@CExtPopupMenuWnd@@UAE?AVCSize@@XZ
?_CalcTrackRect@CExtPopupMenuWnd@@UAE?AVCRect@@XZ
?_CoolTipGetStyle@CExtPopupMenuWnd@@MBE?AW4e_tip_style_t@CExtPopupMenuTipWnd@@XZ
?_CoolTipHide@CExtPopupMenuWnd@@MAEX_N@Z
?_CoolTipIsVisible@CExtPopupMenuWnd@@MAE_NXZ
?_DoExpand@CExtPopupMenuWnd@@MAEXXZ
?_DoTearOff@CExtPopupMenuWnd@@MAEXXZ
?_IsFloatingAreaInstersectsWithMenu@CExtPopupMenuWnd@@UBE_NABUtagRECT@@_N@Z
?_DoReCreateShadows@CExtPopupMenuWnd@@UAEXXZ
?ResetPaletteWrapping@CExtPopupMenuWnd@@UAEX_NHH@Z
?_SyncItemsPalette@CExtPopupMenuWnd@@UAEXXZ
?_SyncItems@CExtPopupMenuWnd@@UAEXXZ
?_StartScrolling@CExtPopupMenuWnd@@MAE_NH@Z
?_GetMaxScrollPos@CExtPopupMenuWnd@@MAEHXZ
?_ReleaseCapture@CExtPopupMenuWnd@@UAEXXZ
?_GetCapture@CExtPopupMenuWnd@@UAEPAV1@XZ
?_SetCapture@CExtPopupMenuWnd@@UAEXXZ
?_PtInWndArea@CExtPopupMenuWnd@@MAE_NVCPoint@@@Z
?_OnCancelMode@CExtPopupMenuWnd@@MAEX_N@Z
?_FreeWinObjects@CExtPopupMenuWnd@@MAEXXZ
?_CanStartLevelTracking@CExtPopupMenuWnd@@UAE_NXZ
?_OnKeyDown@CExtPopupMenuWnd@@UAE_NIIIAA_N@Z
?_OnMouseClick@CExtPopupMenuWnd@@UAE_NIVCPoint@@AA_N@Z
?_OnMouseMove@CExtPopupMenuWnd@@UAE_NIVCPoint@@AA_N@Z
?_OnMouseWheel@CExtPopupMenuWnd@@UAE_NIJAA_N@Z
?_GetItemRectPalette@CExtPopupMenuWnd@@UAEXHAAUtagRECT@@_N@Z
?_GetItemRect@CExtPopupMenuWnd@@UAEXHAAUtagRECT@@_N@Z
?_ItemFocusSet@CExtPopupMenuWnd@@UAEXHHHHH@Z
?_ItemFocusDelay@CExtPopupMenuWnd@@UAEXHPA_N@Z
?_ItemFocusCancel@CExtPopupMenuWnd@@UAEXHHH@Z
?_ItemFocusChangingIsInProgress@CExtPopupMenuWnd@@UBE_NXZ
?_CancelingGet@CExtPopupMenuWnd@@UBE_NXZ
?_CancelingSet@CExtPopupMenuWnd@@UAEXXZ
?_TrackPopupMenu@CExtPopupMenuWnd@@MAEHKHHPBUtagRECT@@PAXP6AX1AAVCDC@@ABVCWnd@@ABVCRect@@H@Z_N@Z
?_IsPaletteItemWrap@CExtPopupMenuWnd@@UBE_NH@Z
?_GetVisibleItemsPalette@CExtPopupMenuWnd@@UAEXPAUHDC__@@AAV?$CArray@UVisibleItemDefinition_t@CExtPopupMenuWnd@@AAU12@@@@Z
?_GetVisibleItems@CExtPopupMenuWnd@@UAEXPAUHDC__@@AAV?$CArray@UVisibleItemDefinition_t@CExtPopupMenuWnd@@AAU12@@@@Z
?_DoPaintMenuItemsPalette@CExtPopupMenuWnd@@UAEXAAVCDC@@@Z
?_DoPaintMenuItems@CExtPopupMenuWnd@@UAEXAAVCDC@@@Z
?_IsPalette@CExtPopupMenuWnd@@UBE_NXZ
?_IsTearOff@CExtPopupMenuWnd@@UBE_NXZ
?_GetTearOffCaptionHeight@CExtPopupMenuWnd@@UBEHXZ
?_HitTest@CExtPopupMenuWnd@@UAEHABVCPoint@@PA_N1@Z
?OnQueryMenuBorderMetrics@CExtPopupMenuWnd@@UBE?AVCRect@@XZ
?_RecalcTrackParms@CExtPopupMenuWnd@@UAEX_N@Z
?_RecalcLayoutImpl@CExtPopupMenuWnd@@MAEXXZ
?_Init@CExtPopupMenuWnd@@MAEXXZ
?_UpdateCmdUI@CExtPopupMenuWnd@@MAEXXZ
?_BuildItems@CExtPopupMenuWnd@@MAE_NPAVCMenu@@_N1@Z
?_CreateHelper@CExtPopupMenuWnd@@MAE_NPAVCWnd@@@Z
?GetScreenTip@CExtPopupMenuWnd@@MAEAAVCExtPopupScreenTipWnd@@XZ
?GetTip@CExtPopupMenuWnd@@MAEAAVCExtPopupMenuTipWnd@@XZ
mfc90u
ord4080
ord4398
ord2045
ord1925
ord1783
ord1716
ord3651
ord775
ord316
ord306
ord911
ord601
ord820
ord2697
ord2327
ord2539
ord6528
ord1313
ord1314
ord2907
ord6703
ord5509
ord5508
ord5047
ord5301
ord4026
ord5510
ord5511
ord5231
ord5277
ord4608
ord4632
ord5168
ord5661
ord5152
ord539
ord753
ord3907
ord3183
ord6554
ord5925
ord2654
ord5011
ord4027
ord549
ord1405
ord1709
ord5662
ord4700
ord1640
ord4692
ord547
ord1018
ord756
ord3908
ord1262
ord1149
ord5939
ord4443
ord3741
ord4399
ord1533
ord6746
ord4774
ord6636
ord4741
ord2084
ord4494
ord6109
ord2504
ord4697
ord3150
ord5655
ord4685
ord5615
ord6575
ord980
ord2189
ord2901
ord1696
ord1726
ord2340
ord2596
ord4720
ord4985
ord5354
ord2445
ord2079
ord2860
ord5447
ord5450
ord4730
ord4553
ord3232
ord5338
ord3229
ord6379
ord3230
ord6381
ord5803
ord3287
ord2651
ord2650
ord4429
ord1681
ord4344
ord5598
ord2369
ord1380
ord6375
ord3225
ord415
ord670
ord4007
ord3819
ord3953
ord6699
ord939
ord2910
ord2364
ord938
ord6013
ord265
ord3589
ord2447
ord3515
ord2479
ord1234
ord4211
ord1186
ord1098
ord6482
ord4518
ord6686
ord2478
ord4519
ord2694
ord5851
ord5979
ord4405
ord4448
ord4423
ord6801
ord4173
ord6803
ord4747
ord2251
ord2206
ord6035
ord4179
ord1048
ord5548
ord6741
ord5830
ord4213
ord2087
ord5674
ord5676
ord4347
ord4996
ord5680
ord5663
ord6018
ord3115
ord4905
ord3670
ord589
ord794
ord4043
ord6353
ord4167
ord4010
ord367
ord1353
ord6091
ord2469
ord636
ord3842
ord2106
ord1063
ord1088
ord3167
ord2595
ord4171
ord3396
ord4490
ord4040
ord3486
ord3543
ord1354
ord436
ord1688
ord686
ord3944
ord3014
ord2592
ord2593
ord3749
ord2695
ord2548
ord814
ord4295
ord4442
ord1745
ord3962
ord2103
ord1601
ord4510
ord2277
ord1667
ord4654
ord3496
ord615
ord3736
ord4319
ord6830
ord2224
ord3422
ord1496
ord4527
ord4081
ord6791
ord2105
ord1602
ord4511
ord2279
ord1695
ord4657
ord3562
ord692
ord1248
ord1603
ord6065
ord581
ord290
ord1043
ord6157
ord2597
ord571
ord6727
ord462
ord710
ord2081
ord2326
ord937
ord933
ord936
ord899
ord4324
ord3807
ord6275
ord4516
ord2536
ord287
ord6579
ord811
ord2283
ord1719
ord4660
ord3654
ord778
ord750
ord1779
ord1708
ord3627
ord3146
ord4270
ord6349
ord6210
ord2727
ord3282
ord3665
ord791
ord4128
ord2904
ord4131
ord1144
ord6630
ord3220
ord285
ord3185
ord1607
ord6311
ord3217
ord1599
ord1182
ord3145
ord3165
ord4266
ord6347
ord935
ord6355
ord286
ord2280
ord4658
ord3252
ord3563
ord693
ord5008
ord2360
ord813
ord6760
ord4000
ord1938
ord2057
ord654
ord3528
ord2274
ord1665
ord4652
ord3286
ord3489
ord374
ord280
ord639
ord611
ord3794
ord4262
ord4543
ord1222
ord4044
ord6604
ord797
ord3355
ord6411
ord1754
ord1493
ord5664
ord2966
ord4681
ord3674
ord595
ord266
ord2372
ord2537
ord1183
ord1250
ord1254
ord405
ord3360
ord2209
ord3399
ord664
ord1383
ord296
ord912
ord909
ord600
ord799
ord524
ord744
ord5182
ord2069
ord6327
ord5007
ord4433
ord3999
ord2885
ord2170
ord4287
ord3085
ord4066
ord4074
ord5841
ord1026
ord1484
ord2475
ord6683
ord2981
ord2927
ord3368
ord6673
ord5966
ord4926
ord4788
ord2344
ord6782
ord4163
ord6601
ord3066
ord6593
ord4328
ord4784
ord5102
ord4617
ord1444
ord5632
ord4631
ord5167
ord5324
ord2208
ord1810
ord1809
ord1675
ord3353
ord6408
ord1752
ord1751
ord4345
ord1492
ord4664
ord5602
ord2074
ord5512
ord6800
ord4603
ord5653
ord3743
ord5154
ord4702
ord1728
ord6466
ord5685
ord5683
ord960
ord965
ord969
ord967
ord971
ord2615
ord2635
ord2619
ord2625
ord2623
ord2621
ord2638
ord2633
ord2617
ord2640
ord2628
ord2610
ord2612
ord2630
ord2375
ord2368
ord1641
ord6802
ord4174
ord6804
ord3682
ord5404
ord6376
ord4071
ord2891
ord4348
ord4910
ord4682
ord3514
ord370
ord1137
ord1108
ord638
ord801
ord1272
ord1488
ord783
ord3226
ord1442
ord5625
ord2139
ord1792
ord1791
ord1727
ord5650
ord2771
ord2983
ord3112
ord4728
ord2967
ord3140
ord2774
ord2893
ord2764
msvcr90
abort
_wcsicmp
_open
_access
_getpid
_chmod
_tzname
_fdopen
_timezone
__CxxFrameHandler3
sprintf
memset
_CxxThrowException
fflush
fprintf
fopen
_snprintf
_heapchk
fwprintf
fclose
_invalid_parameter_noinfo
??1exception@std@@UAE@XZ
??0exception@std@@QAE@XZ
??0exception@std@@QAE@ABV01@@Z
memmove_s
??0exception@std@@QAE@ABQBD@Z
?what@exception@std@@UBEPBDXZ
wcstombs_s
wcsnlen
free
memcpy_s
calloc
_recalloc
_purecall
towupper
__RTDynamicCast
memcpy
_time64
??8type_info@@QBE_NABV0@@Z
??0bad_cast@std@@QAE@PBD@Z
??1bad_cast@std@@UAE@XZ
??0bad_cast@std@@QAE@ABV01@@Z
iswxdigit
iswprint
isdigit
isxdigit
_wtoi
strncmp
iswalnum
_snwprintf
isspace
isprint
atoi
_itow
fread
fwrite
fseek
ftell
feof
ferror
fputc
getc
wcsncpy
tolower
_close
_lseek
_write
_read
?_open@@YAHPBDHH@Z
fgets
__iob_func
clearerr
_fileno
_setmode
_wcsdup
?_set_new_handler@@YAP6AHI@ZP6AHI@Z@Z
getenv
wcschr
wcscpy_s
_localtime64
asctime
_gmtime64
strrchr
_itoa_s
malloc
swprintf_s
strchr
printf
memmove
toupper
rand
strncpy
strncpy_s
sscanf
strstr
rewind
_wfopen
isalpha
_stricmp
_wtoi64
wctomb
__RTtypeid
_vswprintf_c_l
floor
memchr
_memicmp
atol
strcpy_s
_swprintf
wcstombs
wcsncmp
_strnicmp
iswctype
_errno
_wspawnl
_aligned_free
_aligned_malloc
??0exception@std@@QAE@ABQBDH@Z
??9type_info@@QBE_NABV0@@Z
_wassert
memcmp
strftime
_stat64i32
rename
remove
putc
_commit
realloc
strerror
strcmp
abs
exp
log
labs
_mktime64
strlen
strcat
strcpy
ungetc
fgetc
exit
vfprintf
_wstat64i32
strtoul
sprintf_s
strcat_s
strtol
strpbrk
wcsstr
wcslen
_vscwprintf
vswprintf_s
_stat64
_wstat64
_wrename
_getcwd
_chdir
_mktemp
_wmktemp
ispunct
mbtowc
___mb_cur_max_func
towlower
_amsg_exit
__wgetmainargs
_cexit
_exit
_XcptFilter
_wcmdln
_initterm
_initterm_e
_configthreadlocale
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
_encode_pointer
__set_app_type
_unlock
__dllonexit
_lock
_onexit
_decode_pointer
?terminate@@YAXXZ
_except_handler4_common
_vsnprintf_s
?_name_internal_method@type_info@@QBEPBDPAU__type_info_node@@@Z
_vsnprintf
_invoke_watson
_controlfp_s
_crt_debugger_hook
?_type_info_dtor_internal_method@type_info@@QAEXXZ
_beginthreadex
kernel32
WriteFile
DeleteFileW
SetFileTime
SystemTimeToFileTime
SetFileAttributesW
GetModuleHandleW
LoadLibraryW
GetProcAddress
SetLastError
GetTickCount
WideCharToMultiByte
lstrlenA
MultiByteToWideChar
GetLastError
FindResourceW
LoadResource
LockResource
CreateFileW
ReadFile
GetCurrentProcessId
CreateToolhelp32Snapshot
Module32FirstW
Module32NextW
CloseHandle
IsBadCodePtr
GetModuleFileNameA
IsBadReadPtr
GlobalMemoryStatus
VirtualQuery
GetLocalTime
SetUnhandledExceptionFilter
HeapSize
HeapReAlloc
HeapDestroy
VirtualAlloc
VirtualFree
IsProcessorFeaturePresent
HeapAlloc
GetProcessHeap
HeapFree
GetVersionExA
SetFileAttributesA
IsDebuggerPresent
UnhandledExceptionFilter
TerminateProcess
GetStartupInfoW
InterlockedExchange
LocalFree
SetCurrentDirectoryW
GetCurrentDirectoryW
RemoveDirectoryW
RemoveDirectoryA
DeleteFileA
GetTempFileNameW
FindResourceExW
GetFileSize
FindNextFileW
FindFirstFileA
FindNextFileA
MoveFileA
LocalFileTimeToFileTime
CreateDirectoryA
GetFullPathNameA
lstrcmpiA
GetFileAttributesW
GetFileAttributesA
GetCPInfo
IsDBCSLeadByte
GetStdHandle
GetFileType
SetEndOfFile
SetFilePointer
GetSystemDirectoryA
LoadLibraryA
GetModuleHandleA
TlsGetValue
TlsSetValue
TlsAlloc
InterlockedCompareExchange
ReleaseMutex
CreateMutexA
QueryPerformanceCounter
FindFirstFileW
FindClose
GlobalHandle
GetEnvironmentVariableW
GetTempPathA
GetWindowsDirectoryW
MapViewOfFile
UnmapViewOfFile
GlobalMemoryStatusEx
SizeofResource
GetTempPathW
CompareStringW
FormatMessageW
GlobalFree
GetFileAttributesExW
GetVolumeInformationW
GetLogicalDriveStringsW
DeviceIoControl
GetDiskFreeSpaceExW
GetSystemTime
GetSystemInfo
FlushInstructionCache
InterlockedDecrement
InterlockedIncrement
lstrcmpW
lstrlenW
MulDiv
GetCurrentDirectoryA
CreateFileA
GetVersion
EnterCriticalSection
LeaveCriticalSection
WaitForSingleObjectEx
DeleteCriticalSection
CreateEventW
InitializeCriticalSection
SetEvent
DuplicateHandle
CreateEventA
CreateSemaphoreA
WaitForSingleObject
GetThreadTimes
GetExitCodeThread
GetSystemTimeAsFileTime
GetCurrentProcess
GetProcessTimes
OpenThread
GetCurrentThreadId
OutputDebugStringW
GetCurrentThread
SetThreadPriority
ReleaseSemaphore
GetSystemDefaultLCID
GetDriveTypeW
Sleep
GlobalAlloc
GlobalLock
GlobalUnlock
FileTimeToLocalFileTime
FileTimeToSystemTime
GetDateFormatW
GetTimeFormatW
GetVersionExW
FreeLibrary
GetCommandLineW
GetModuleFileNameW
RaiseException
GetLocaleInfoW
GetNumberFormatW
CreateDirectoryW
user32
UnregisterClassA
CharToOemBuffA
CharUpperA
CharLowerA
CharToOemA
OemToCharBuffA
OemToCharA
DialogBoxParamW
DialogBoxIndirectParamW
SetCaretPos
DestroyCaret
CreateCaret
ShowCaret
GetScrollInfo
LoadIconW
SendMessageW
DrawIcon
GetClientRect
GetSystemMetrics
IsIconic
EnableWindow
EndDialog
GetDlgItemTextW
MessageBoxW
GetWindowTextW
GetWindowTextLengthW
GetDlgItem
UpdateWindow
InvalidateRect
SetDlgItemTextW
CheckDlgButton
SendDlgItemMessageW
LoadCursorW
PostMessageW
MapWindowPoints
GetMessagePos
PostQuitMessage
PeekMessageW
MessageBeep
GetDesktopWindow
CopyRect
GetWindowRect
GetParent
DispatchMessageW
TranslateMessage
ShowWindow
SetFocus
IsWindowVisible
ReleaseDC
GetDC
LoadBitmapW
SetCursor
GetCursor
ScreenToClient
RegisterClipboardFormatW
DestroyIcon
GetKeyState
SetClipboardData
CloseClipboard
EmptyClipboard
OpenClipboard
GetFocus
SetProcessDefaultLayout
GetTopWindow
RemoveMenu
InsertMenuW
GetSubMenu
SetForegroundWindow
IsDlgButtonChecked
SetWindowPos
SetWindowContextHelpId
MapDialogRect
GetWindow
CreateWindowExW
RegisterClassExW
GetClassInfoExW
RegisterWindowMessageW
DefWindowProcW
GetWindowLongW
SetWindowLongW
SetWindowTextW
DestroyAcceleratorTable
GetSysColor
IsChild
CallWindowProcW
EndPaint
FillRect
BeginPaint
IsWindow
RedrawWindow
GetClassNameW
CreateAcceleratorTableW
MoveWindow
ClientToScreen
ReleaseCapture
SetCapture
InvalidateRgn
DestroyWindow
CharNextW
wsprintfW
GetMessageW
GetActiveWindow
LoadImageW
UnregisterClassW
SetScrollInfo
SetTimer
PtInRect
KillTimer
GetCursorPos
LoadStringW
ShowScrollBar
EnableScrollBar
DestroyMenu
TrackPopupMenu
AppendMenuW
CreatePopupMenu
SetScrollPos
ValidateRect
SetActiveWindow
gdi32
SetTextColor
SetBkColor
MoveToEx
LineTo
TextOutW
CreateFontW
CreatePen
GetObjectW
CreateSolidBrush
SetBkMode
DeleteObject
BitBlt
GetTextExtentPoint32W
DeleteDC
GetDeviceCaps
GetStockObject
SelectObject
Rectangle
CreateCompatibleBitmap
CreateBitmap
CreateCompatibleDC
GetTextMetricsW
SetWindowOrgEx
comdlg32
GetSaveFileNameW
advapi32
OpenSCManagerW
OpenServiceW
SetFileSecurityW
SetFileSecurityA
OpenProcessToken
LookupPrivilegeValueA
AdjustTokenPrivileges
ControlService
DeleteService
CloseServiceHandle
CreateServiceW
StartServiceW
RegCreateKeyExW
RegSetValueExA
RegOpenKeyExW
RegQueryValueExW
RegOpenKeyExA
RegQueryValueExA
RegCloseKey
shell32
ShellExecuteW
SHGetMalloc
SHGetPathFromIDListW
SHBrowseForFolderW
SHFileOperationW
ShellExecuteA
SHGetFileInfoW
comctl32
ord17
shlwapi
PathAppendW
PathAddBackslashW
ole32
CreateStreamOnHGlobal
OleUninitialize
OleInitialize
CoGetClassObject
CLSIDFromProgID
CLSIDFromString
CoCreateInstance
StringFromGUID2
CoTaskMemAlloc
OleLockRunning
CoUninitialize
CoSetProxyBlanket
CoInitialize
StgCreateStorageEx
oleaut32
VariantChangeType
LoadTypeLi
LoadRegTypeLi
OleCreateFontIndirect
VariantInit
VariantClear
SysAllocString
SysAllocStringLen
SysStringLen
SysFreeString
VariantTimeToSystemTime
SystemTimeToVariantTime
VarBstrFromDate
msvcp90
??$?8DU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@0@Z
??$?9DU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@PBD@Z
?min@?$numeric_limits@I@std@@SAIXZ
?min@?$numeric_limits@H@std@@SAHXZ
?overflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHH@Z
?pbackfail@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHH@Z
?underflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
?seekoff@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE?AV?$fpos@H@2@JHH@Z
?seekpos@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE?AV?$fpos@H@2@V32@H@Z
??_D?$basic_istream@DU?$char_traits@D@std@@@std@@QAEXXZ
?get@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEHXZ
??Bios_base@std@@QBEPAXXZ
?unsetf@ios_base@std@@QAEXH@Z
??0?$basic_istream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
?swap@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXAAV12@@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ID@Z
??_D?$basic_stringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXXZ
?str@?$basic_stringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@2@XZ
??0?$basic_stringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@H@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@_N@Z
?erase@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@II@Z
?rbegin@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE?AV?$reverse_iterator@V?$_String_iterator@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@2@XZ
??Y?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV01@_W@Z
?erase@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE?AV?$_String_iterator@DU?$char_traits@D@std@@V?$allocator@D@2@@2@V?$_String_const_iterator@DU?$char_traits@D@std@@V?$allocator@D@2@@2@0@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAVios_base@1@AAV21@@Z@Z
?insert@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@IPBDI@Z
?find_last_not_of@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDI@Z
?flush@std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@1@AAV21@@Z
??_D?$basic_ifstream@DU?$char_traits@D@std@@@std@@QAEXXZ
??$getline@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@YAAAV?$basic_istream@DU?$char_traits@D@std@@@0@AAV10@AAV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@@Z
?open@?$basic_ifstream@DU?$char_traits@D@std@@@std@@QAEXPBDHH@Z
??0?$basic_ifstream@DU?$char_traits@D@std@@@std@@QAE@XZ
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@AAH@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@AAI@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBD0@Z
?clear@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXXZ
??Y?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV01@PB_W@Z
??4?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV01@PB_W@Z
??$?8_WU?$char_traits@_W@std@@V?$allocator@_W@1@@std@@YA_NABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@0@PB_W@Z
?find_last_not_of@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIDI@Z
?find_first_not_of@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIDI@Z
?find_first_not_of@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDI@Z
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@K@Z
?compare@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBEHABV12@@Z
?length@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBEIXZ
?assign@?$char_traits@D@std@@SAXAADABD@Z
?thousands_sep@?$numpunct@D@std@@QBEDXZ
?grouping@?$numpunct@D@std@@QBE?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@2@XZ
?replace@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@V?$_String_const_iterator@DU?$char_traits@D@std@@V?$allocator@D@2@@2@0ABV12@@Z
?_Getcat@?$numpunct@D@std@@SAIPAPBVfacet@locale@2@PBV42@@Z
?id@?$numpunct@D@std@@2V0locale@2@A
?end@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE?AV?$_String_iterator@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@2@XZ
?begin@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE?AV?$_String_iterator@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@2@XZ
??$?8_WU?$char_traits@_W@std@@V?$allocator@_W@1@@std@@YA_NABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@0@0@Z
?_Myptr@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@IAEPA_WXZ
??_D?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEXXZ
?end@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE?AV?$_String_iterator@DU?$char_traits@D@std@@V?$allocator@D@2@@2@XZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@M@Z
?setf@ios_base@std@@QAEHH@Z
?replace@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@IIPBD@Z
?find@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDI@Z
?setprecision@std@@YA?AU?$_Smanip@H@1@H@Z
?eof@ios_base@std@@QBE_NXZ
?peek@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEHXZ
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@AAN@Z
?_Xran@_String_base@std@@SAXXZ
?_Xlen@_String_base@std@@SAXXZ
?erase@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV12@II@Z
?npos@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@2IB
?insert@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@IID@Z
??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@D@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@AAJ@Z
?find_last_of@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIDI@Z
?append@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV12@PB_W@Z
?find@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBEIPB_WI@Z
?find@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBEI_WI@Z
??$?M_WU?$char_traits@_W@std@@V?$allocator@_W@1@@std@@YA_NABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@0@0@Z
?set_new_handler@std@@YAP6AXXZP6AXXZ@Z
??$?HDU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@DABV10@@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@AAG@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@AAF@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@F@Z
?find_first_of@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIDI@Z
?at@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAADI@Z
?replace@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@IIABV12@@Z
??$?8DU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA_NPBDABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@@Z
??$?5DU?$char_traits@D@std@@@std@@YAAAV?$basic_istream@DU?$char_traits@D@std@@@0@AAV10@AAD@Z
?copyfmt@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEAAV12@ABV12@@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@II@Z
??$?5DU?$char_traits@D@std@@V?$allocator@D@1@@std@@YAAAV?$basic_istream@DU?$char_traits@D@std@@@0@AAV10@AAV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@AAM@Z
?copy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPADII@Z
??$?9DU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA_NPBDABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@@Z
?bad@ios_base@std@@QBE_NXZ
?find@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIABV12@I@Z
?max@?$numeric_limits@G@std@@SAGXZ
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@V?$_String_const_iterator@DU?$char_traits@D@std@@V?$allocator@D@2@@1@0@Z
?rend@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV?$reverse_iterator@V?$_String_const_iterator@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@2@XZ
?rbegin@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV?$reverse_iterator@V?$_String_const_iterator@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@2@XZ
??0?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IAE@XZ
?end@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBE?AV?$_String_const_iterator@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@2@XZ
?begin@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBE?AV?$_String_const_iterator@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@2@XZ
?append@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV12@V?$_String_const_iterator@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@2@0@Z
?is@?$ctype@_W@std@@QBE_NF_W@Z
?narrow@?$ctype@_W@std@@QBED_WD@Z
?max@?$numeric_limits@_K@std@@SA_KXZ
?max@?$numeric_limits@J@std@@SAJXZ
?min@?$numeric_limits@J@std@@SAJXZ
??1facet@locale@std@@UAE@XZ
??0facet@locale@std@@IAE@I@Z
?put@?$time_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QBE?AV?$ostreambuf_iterator@DU?$char_traits@D@std@@@2@V32@AAVios_base@2@DPBUtm@@PBD3@Z
?_Getcat@facet@locale@std@@SAIPAPBV123@PBV23@@Z
?_Addfac@_Locimp@locale@std@@AAEXPAVfacet@23@I@Z
??0_Locimp@locale@std@@AAE@ABV012@@Z
??1_Locimp@locale@std@@MAE@XZ
?at@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEABDI@Z
?classic@locale@std@@SAABV12@XZ
?tolower@?$ctype@D@std@@QBEDD@Z
?_Getcat@?$time_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@SAIPAPBVfacet@locale@2@PBV42@@Z
?id@?$time_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@2V0locale@2@A
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@V?$_String_const_iterator@DU?$char_traits@D@std@@V?$allocator@D@2@@2@0@Z
?destroy@?$allocator@D@std@@QAEXPAD@Z
?construct@?$allocator@D@std@@QAEXPADABD@Z
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBD0@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@PBX@Z
?_Decref@facet@locale@std@@QAEPAV123@XZ
?push_back@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXD@Z
??$?8DU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@PBD@Z
?data@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEPBDXZ
??0id@locale@std@@QAE@I@Z
??A?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBEAB_WI@Z
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@PB_W@Z
??4locale@std@@QAEAAV01@ABV01@@Z
?id@?$ctype@D@std@@2V0locale@2@A
?_Getcat@?$ctype@D@std@@SAIPAPBVfacet@locale@2@PBV42@@Z
?clear@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
?imbue@?$basic_ios@DU?$char_traits@D@std@@@std@@QAE?AVlocale@2@ABV32@@Z
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IAE@XZ
??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UAE@XZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@I@Z
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UAE@XZ
?is@?$ctype@D@std@@QBE_NFD@Z
?narrow@?$ctype@D@std@@QBEDDD@Z
??0locale@std@@QAE@XZ
??0locale@std@@QAE@ABV01@@Z
??$?9DU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@0@Z
?max@?$numeric_limits@H@std@@SAHXZ
??Y?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@ABV01@@Z
?widen@?$ctype@D@std@@QBEDD@Z
??A?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEABDI@Z
?begin@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV?$_String_const_iterator@DU?$char_traits@D@std@@V?$allocator@D@2@@2@XZ
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@V?$_String_const_iterator@DU?$char_traits@D@std@@V?$allocator@D@2@@2@0@Z
?end@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV?$_String_const_iterator@DU?$char_traits@D@std@@V?$allocator@D@2@@2@XZ
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAE@XZ
?epptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBEPADXZ
?allocate@?$allocator@D@std@@QAEPADIPBX@Z
?copy@?$char_traits@D@std@@SAPADPADPBDI@Z
?setp@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXPAD0@Z
?to_char_type@?$char_traits@D@std@@SADABH@Z
?eq@?$char_traits@D@std@@SA_NABD0@Z
?not_eof@?$char_traits@D@std@@SAHABH@Z
?egptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBEPADXZ
?to_int_type@?$char_traits@D@std@@SAHABD@Z
?setg@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXPAD00@Z
?pptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBEPADXZ
?gptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBEPADXZ
?eback@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBEPADXZ
?gbump@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXH@Z
?pbump@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXH@Z
?pbase@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBEPADXZ
?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEXABVlocale@2@@Z
?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEPAV12@PADH@Z
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHPBDH@Z
??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@ABV01@@Z
?c_str@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEPBDXZ
??1?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@XZ
?c_str@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBEPB_WXZ
?size@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBEIXZ
?resize@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEXI@Z
??1?$basic_ios@_WU?$char_traits@_W@std@@@std@@UAE@XZ
?append@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV12@PB_WI@Z
?append@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV12@I_W@Z
??A?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAA_WI@Z
?assign@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV12@PB_WI@Z
?fill@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QBE_WXZ
?widen@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QBE_WD@Z
?pptr@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IBEPA_WXZ
?pbase@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IBEPA_WXZ
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@H@Z
?width@ios_base@std@@QAEHH@Z
?width@ios_base@std@@QBEHXZ
?flags@ios_base@std@@QBEHXZ
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@_J@Z
??1?$basic_ostream@_WU?$char_traits@_W@std@@@std@@UAE@XZ
??0?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAE@PAV?$basic_streambuf@_WU?$char_traits@_W@std@@@1@_N@Z
??0?$basic_ios@_WU?$char_traits@_W@std@@@std@@IAE@XZ
??1locale@std@@QAE@XZ
?imbue@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QAE?AVlocale@2@ABV32@@Z
?exceptions@ios_base@std@@QAEXH@Z
?clear@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QAEXH_N@Z
?flags@ios_base@std@@QAEHH@Z
?fill@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QAE_W_W@Z
?precision@ios_base@std@@QAEHH@Z
?eback@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IBEPA_WXZ
?gptr@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IBEPA_WXZ
?reserve@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEXI@Z
?_Osfx@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEXXZ
?uncaught_exception@std@@YA_NXZ
?setstate@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QAEXH_N@Z
?sputn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QAEHPB_WH@Z
?eq_int_type@?$char_traits@_W@std@@SA_NABG0@Z
?eof@?$char_traits@_W@std@@SAGXZ
?sputc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QAEG_W@Z
?rdbuf@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QBEPAV?$basic_streambuf@_WU?$char_traits@_W@std@@@2@XZ
?length@?$char_traits@_W@std@@SAIPB_W@Z
??1?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UAE@XZ
?showmanyc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAEHXZ
?uflow@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAEGXZ
?xsgetn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAEHPA_WH@Z
?_Xsgetn_s@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAEHPA_WIH@Z
?xsputn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAEHPB_WH@Z
?setbuf@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAEPAV12@PA_WH@Z
?sync@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAEHXZ
?imbue@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAEXABVlocale@2@@Z
?flush@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV12@XZ
?tie@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QBEPAV?$basic_ostream@_WU?$char_traits@_W@std@@@2@XZ
?good@ios_base@std@@QBE_NXZ
??0?$allocator@_W@std@@QAE@XZ
?deallocate@?$allocator@_W@std@@QAEXPA_WI@Z
?_Lock@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QAEXXZ
?_Unlock@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QAEXXZ
?allocate@?$allocator@_W@std@@QAEPA_WI@Z
?max_size@?$allocator@_W@std@@QBEIXZ
??0?$allocator@_W@std@@QAE@ABV01@@Z
?_Tidy@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@IAEX_NI@Z
??0?$_String_val@_WV?$allocator@_W@std@@@std@@IAE@V?$allocator@_W@1@@Z
?pbump@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IAEXH@Z
?gbump@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IAEXH@Z
?setg@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IAEXPA_W00@Z
?to_int_type@?$char_traits@_W@std@@SAGAB_W@Z
?egptr@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IBEPA_WXZ
?not_eof@?$char_traits@_W@std@@SAGABG@Z
?eq@?$char_traits@_W@std@@SA_NAB_W0@Z
?to_char_type@?$char_traits@_W@std@@SA_WABG@Z
?setp@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IAEXPA_W0@Z
?copy@?$char_traits@_W@std@@SAPA_WPA_WPB_WI@Z
?allocate@?$allocator@_W@std@@QAEPA_WIPBX@Z
?max@?$numeric_limits@I@std@@SAIXZ
?epptr@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IBEPA_WXZ
??Y?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV01@ABV01@@Z
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@XZ
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@ABV01@@Z
?widen@?$ctype@_W@std@@QBE_WD@Z
?getloc@ios_base@std@@QBE?AVlocale@2@XZ
??1_Lockit@std@@QAE@XZ
?_Incref@facet@locale@std@@QAEXXZ
?_Getcat@?$ctype@_W@std@@SAIPAPBVfacet@locale@2@PBV42@@Z
?_Getfacet@locale@std@@QBEPBVfacet@12@I@Z
??Bid@locale@std@@QAEIXZ
?id@?$ctype@_W@std@@2V0locale@2@A
??0_Lockit@std@@QAE@H@Z
??_D?$basic_istringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXXZ
?fail@ios_base@std@@QBE_NXZ
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@AA_K@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@AA_J@Z
??0?$basic_istringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@1@H@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAVios_base@1@AAV21@@Z@Z
?max@?$numeric_limits@_J@std@@SA_JXZ
?setf@ios_base@std@@QAEHHH@Z
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@J@Z
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@N@Z
??_D?$basic_ostringstream@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEXXZ
?str@?$basic_ostringstream@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBE?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@2@XZ
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@_K@Z
??0?$basic_ostringstream@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@H@Z
?empty@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE_NXZ
??$?HDU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@ABV10@PBD@Z
?str@?$basic_ostringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@2@XZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAV01@AAV01@@Z@Z
?endl@std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@1@AAV21@@Z
??_D?$basic_ostringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXXZ
??0?$basic_ostringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@H@Z
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@I@Z
??0?$allocator@D@std@@QAE@XZ
?deallocate@?$allocator@D@std@@QAEXPADI@Z
??0?$allocator@D@std@@QAE@ABV01@@Z
?allocate@?$allocator@D@std@@QAEPADI@Z
?max_size@?$allocator@D@std@@QBEIXZ
?_Tidy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@IAEX_NI@Z
??0?$_String_val@DV?$allocator@D@std@@@std@@IAE@V?$allocator@D@1@@Z
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEXXZ
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHPBDH@Z
?eq_int_type@?$char_traits@D@std@@SA_NABH0@Z
?eof@?$char_traits@D@std@@SAHXZ
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHD@Z
?rdbuf@?$basic_ios@DU?$char_traits@D@std@@@std@@QBEPAV?$basic_streambuf@DU?$char_traits@D@std@@@2@XZ
?fill@?$basic_ios@DU?$char_traits@D@std@@@std@@QBEDXZ
?length@?$char_traits@D@std@@SAIPBD@Z
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@XZ
?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEXXZ
?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEXXZ
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ID@Z
?reserve@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXI@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBDI@Z
?length@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIXZ
??$?6DU?$char_traits@D@std@@V?$allocator@D@1@@std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@0@AAV10@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@@Z
?min@?$numeric_limits@_J@std@@SA_JXZ
?min@?$numeric_limits@K@std@@SAKXZ
?max@?$numeric_limits@K@std@@SAKXZ
??_D?$basic_ofstream@DU?$char_traits@D@std@@@std@@QAEXXZ
??0?$basic_ofstream@DU?$char_traits@D@std@@@std@@QAE@PBDHH@Z
?resize@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXI@Z
??$?MDU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@0@Z
??_D?$basic_stringstream@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEXXZ
??4?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV01@ABV01@@Z
?str@?$basic_stringstream@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBE?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@2@XZ
??0?$basic_stringstream@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@H@Z
?_Myptr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@IAEPADXZ
??$?HDU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@ABV10@0@Z
??$?HDU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@ABV10@D@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@_J@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@J@Z
?fill@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEDD@Z
?begin@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE?AV?$_String_iterator@DU?$char_traits@D@std@@V?$allocator@D@2@@2@XZ
?size@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIXZ
??A?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAADI@Z
??Y?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@D@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBD@Z
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@PBD@Z
??Y?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@PBD@Z
?_Xsgetn_s@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHPADIH@Z
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHPADH@Z
?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAE@XZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@_K@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@K@Z
?cerr@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A
?cout@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A
?empty@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBE_NXZ
?setw@std@@YA?AU?$_Smanip@H@1@H@Z
?widen@?$basic_ios@DU?$char_traits@D@std@@@std@@QBEDD@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@G@Z
?substr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV12@II@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@N@Z
??7ios_base@std@@QBE_NXZ
?rfind@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDI@Z
?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB
??$?HDU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@PBDABV10@@Z
?open@?$basic_ofstream@DU?$char_traits@D@std@@@std@@QAEXPBGHH@Z
??0?$basic_ofstream@DU?$char_traits@D@std@@@std@@QAE@XZ
?is_open@?$basic_ofstream@DU?$char_traits@D@std@@@std@@QBE_NXZ
?close@?$basic_ofstream@DU?$char_traits@D@std@@@std@@QAEXXZ
?str@?$basic_ostringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@2@@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@H@Z
?find@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIDI@Z
?data@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBEPB_WXZ
boost_thread-vc90-mt-1_39
??0lock_error@boost@@QAE@ABV01@@Z
??1lock_error@boost@@UAE@XZ
??0lock_error@boost@@QAE@XZ
?join@thread@boost@@QAEXXZ
??0thread_resource_error@boost@@QAE@XZ
?set_tss_data@detail@boost@@YAXPBXV?$shared_ptr@Utss_cleanup_function@detail@boost@@@2@PAX_N@Z
?interruptible_wait@this_thread@boost@@YA_NPAXUtimeout@detail@2@@Z
??1thread_resource_error@boost@@UAE@XZ
??0thread_resource_error@boost@@QAE@ABV01@@Z
?get_tss_data@detail@boost@@YAPAXPBX@Z
??0thread_exception@boost@@QAE@ABV01@@Z
?sleep@thread@boost@@SAXABVptime@posix_time@2@@Z
?start_thread@thread@boost@@AAEXXZ
?free_raw_heap_memory@detail@boost@@YAXPAX@Z
??1thread@boost@@QAE@XZ
?allocate_raw_heap_memory@detail@boost@@YAPAXI@Z
boost_date_time-vc90-mt-1_39
?get_month_map_ptr@greg_month@gregorian@boost@@SA?AV?$shared_ptr@V?$map@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@GU?$less@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@2@V?$allocator@U?$pair@$$CBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@G@std@@@2@@std@@@3@XZ
??0greg_weekday@gregorian@boost@@QAE@G@Z
??B?$constrained_value@V?$simple_exception_policy@G$0A@$05Ubad_weekday@gregorian@boost@@@CV@boost@@@CV@boost@@QBEGXZ
?as_short_string@greg_month@gregorian@boost@@QBEPBDXZ
?as_long_string@greg_month@gregorian@boost@@QBEPBDXZ
?as_number@greg_month@gregorian@boost@@QBEGXZ
??0greg_month@gregorian@boost@@QAE@G@Z
??0greg_month@gregorian@boost@@QAE@W4months_of_year@date_time@2@@Z
??Bgreg_month@gregorian@boost@@QBEGXZ
boost_regex-vc90-mt-1_39
?construct_init@?$perl_matcher@PB_WV?$allocator@U?$sub_match@PB_W@boost@@@std@@U?$regex_traits@_WV?$w32_regex_traits@_W@boost@@@boost@@@re_detail@boost@@AAEXABV?$basic_regex@_WU?$regex_traits@_WV?$w32_regex_traits@_W@boost@@@boost@@@3@W4_match_flags@regex_constants@3@@Z
?find@?$perl_matcher@PBDV?$allocator@U?$sub_match@PBD@boost@@@std@@U?$regex_traits@DV?$w32_regex_traits@D@boost@@@boost@@@re_detail@boost@@QAE_NXZ
?do_assign@?$basic_regex@_WU?$regex_traits@_WV?$w32_regex_traits@_W@boost@@@boost@@@boost@@AAEAAV12@PB_W0I@Z
?find@?$perl_matcher@PB_WV?$allocator@U?$sub_match@PB_W@boost@@@std@@U?$regex_traits@_WV?$w32_regex_traits@_W@boost@@@boost@@@re_detail@boost@@QAE_NXZ
?construct_init@?$perl_matcher@PBDV?$allocator@U?$sub_match@PBD@boost@@@std@@U?$regex_traits@DV?$w32_regex_traits@D@boost@@@boost@@@re_detail@boost@@AAEXABV?$basic_regex@DU?$regex_traits@DV?$w32_regex_traits@D@boost@@@boost@@@3@W4_match_flags@regex_constants@3@@Z
?do_assign@?$basic_regex@DU?$regex_traits@DV?$w32_regex_traits@D@boost@@@boost@@@boost@@AAEAAV12@PBD0I@Z
boost_filesystem-vc90-mt-1_39
?to_external@wpath_traits@filesystem@boost@@SA?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@ABV?$basic_path@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@Uwpath_traits@filesystem@boost@@@23@ABV45@@Z
?create_directory_api@detail@filesystem@boost@@YA?AU?$pair@Verror_code@system@boost@@_N@std@@ABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@5@@Z
?status_api@detail@filesystem@boost@@YA?AVfile_status@23@ABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@AAVerror_code@system@3@@Z
boost_system-vc90-mt-1_39
?get_system_category@system@boost@@YAABVerror_category@12@XZ
?get_generic_category@system@boost@@YAABVerror_category@12@XZ
ws2_32
select
shutdown
inet_addr
WSAGetLastError
inet_ntoa
htonl
getservbyname
gethostbyaddr
getpeername
connect
closesocket
listen
send
socket
WSAStartup
WSACleanup
gethostbyname
htons
setsockopt
getsockopt
getsockname
ntohs
WSASetLastError
getservbyport
__WSAFDIsSet
accept
recv
ioctlsocket
bind
icuuc40
?getBuffer@UnicodeString@icu_4_0@@QBEPB_WXZ
?extract@UnicodeString@icu_4_0@@QBEHPADHPAUUConverter@@AAW4UErrorCode@@@Z
??0UnicodeString@icu_4_0@@QAE@PBDHPAUUConverter@@AAW4UErrorCode@@@Z
??0UnicodeString@icu_4_0@@QAE@PB_WH@Z
??0UnicodeString@icu_4_0@@QAE@XZ
?length@UnicodeString@icu_4_0@@QBEHXZ
??1UnicodeString@icu_4_0@@UAE@XZ
ucnv_openAllNames_4_0
uenum_next_4_0
ucnv_getName_4_0
ucnv_close_4_0
ucnv_open_4_0
??4UnicodeString@icu_4_0@@QAEAAV01@ABV01@@Z
version
GetFileVersionInfoW
GetFileVersionInfoSizeW
VerQueryValueW
Exports
Exports
??0CxFile@@QAE@ABV0@@Z
??0CxFile@@QAE@XZ
??0CxIOFile@@QAE@ABV0@@Z
??0CxIOFile@@QAE@PAU_iobuf@@@Z
??0CxMemFile@@QAE@ABV0@@Z
??1CxFile@@UAE@XZ
??1CxIOFile@@UAE@XZ
??1CxImage@@UAE@XZ
??4CxFile@@QAEAAV0@ABV0@@Z
??4CxIOFile@@QAEAAV0@ABV0@@Z
??4CxMemFile@@QAEAAV0@ABV0@@Z
??_7CxFile@@6B@
??_7CxIOFile@@6B@
??_7CxImage@@6B@
??_7CxMemFile@@6B@
??_FCxIOFile@@QAEXXZ
??_FCxImage@@QAEXXZ
??_FCxMemFile@@QAEXXZ
??_OCxImage@@QAEXAAV0@@Z
?Close@CxIOFile@@UAE_NXZ
?Eof@CxIOFile@@UAE_NXZ
?Error@CxIOFile@@UAEJXZ
?Flush@CxIOFile@@UAE_NXZ
?GetC@CxIOFile@@UAEJXZ
?Open@CxIOFile@@QAE_NPBD0@Z
?PutC@CxFile@@UAE_NE@Z
?PutC@CxIOFile@@UAE_NE@Z
?Read@CxIOFile@@UAEIPAXII@Z
?Seek@CxIOFile@@UAE_NJH@Z
?Size@CxIOFile@@UAEJXZ
?Tell@CxIOFile@@UAEJXZ
?Write@CxIOFile@@UAEIPBXII@Z
OPENSSL_Applink
Sections
.text Size: 6.0MB - Virtual size: 6.0MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1.3MB - Virtual size: 1.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 107KB - Virtual size: 225KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1.3MB - Virtual size: 1.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
wintaylor2.1/Programs/Imager/IsoBuster.dll.dll windows:4 windows x86
dc1b429276f2dd5392f1577bf0fe145e
Code Sign
38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5Certificate
IssuerCN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=USNot Before15-06-2007 00:00Not After14-06-2012 23:59SubjectCN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=USExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageContentCommitment
47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4Certificate
IssuerCN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZANot Before04-12-2003 00:00Not After03-12-2013 23:59SubjectCN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=USExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageCertSign
KeyUsageCRLSign
11:f3:7a:cb:35:76:75:ba:08:94:30:8a:e6:f0:c9:86Certificate
IssuerCN=UTN-USERFirst-Object,OU=http://www.usertrust.com,O=The USERTRUST Network,L=Salt Lake City,ST=UT,C=USNot Before01-12-2008 00:00Not After01-12-2011 23:59SubjectCN=Smart Projects,O=Smart Projects,POSTALCODE=3740,STREET=Appelveldstraat 1 bus 13,L=Bilzen,ST=L,C=BEExtended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
75:c2:4a:49:73:56:52:90:aa:ce:40:dc:41:51:44:aa:72:f3:90:0bSigner
Actual PE Digest75:c2:4a:49:73:56:52:90:aa:ce:40:dc:41:51:44:aa:72:f3:90:0bDigest Algorithmsha1PE Digest MatchestrueHeaders
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL
Imports
advapi32
AccessCheck
AddAccessAllowedAce
AllocateAndInitializeSid
FreeSid
GetLengthSid
ImpersonateSelf
InitializeAcl
InitializeSecurityDescriptor
IsValidSecurityDescriptor
OpenProcessToken
OpenThreadToken
RegCloseKey
RegCreateKeyExA
RegFlushKey
RegOpenKeyExA
RegQueryValueExA
RegSetValueExA
RevertToSelf
SetSecurityDescriptorDacl
SetSecurityDescriptorGroup
SetSecurityDescriptorOwner
kernel32
CloseHandle
CompareStringA
CreateDirectoryA
CreateDirectoryW
CreateEventA
CreateFileA
CreateFileW
CreateThread
DeleteCriticalSection
DeviceIoControl
EnterCriticalSection
EnumCalendarInfoA
ExitProcess
FileTimeToDosDateTime
FileTimeToLocalFileTime
FileTimeToSystemTime
FindClose
FindFirstFileA
FindResourceA
FormatMessageA
FreeEnvironmentStringsA
FreeLibrary
FreeResource
GetACP
GetCPInfo
GetCommandLineA
GetCurrentProcess
GetCurrentProcessId
GetCurrentThread
GetCurrentThreadId
GetDateFormatA
GetDiskFreeSpaceA
GetEnvironmentStrings
GetFileAttributesA
GetFileSize
GetFileType
GetLastError
GetLocalTime
GetLocaleInfoA
GetModuleFileNameA
GetModuleHandleA
GetOEMCP
GetPrivateProfileStringA
GetProcAddress
GetProcessHeap
GetStartupInfoA
GetStdHandle
GetStringTypeW
GetSystemDirectoryA
GetSystemInfo
GetSystemTime
GetThreadLocale
GetTickCount
GetTimeFormatA
GetTimeZoneInformation
GetVersion
GetVersionExA
GlobalAddAtomA
GlobalAlloc
GlobalDeleteAtom
GlobalFree
GlobalHandle
GlobalLock
GlobalReAlloc
GlobalUnlock
HeapAlloc
HeapFree
InitializeCriticalSection
InterlockedDecrement
InterlockedExchange
InterlockedIncrement
LCMapStringA
LCMapStringW
LeaveCriticalSection
LoadLibraryA
LoadLibraryExA
LoadResource
LocalAlloc
LocalFileTimeToFileTime
LocalFree
LockResource
MulDiv
MultiByteToWideChar
RaiseException
ReadFile
ResetEvent
RtlUnwind
SetConsoleCtrlHandler
SetEndOfFile
SetErrorMode
SetEvent
SetFileAttributesA
SetFilePointer
SetFileTime
SetHandleCount
SetLastError
SetThreadLocale
SizeofResource
Sleep
SystemTimeToFileTime
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
UnhandledExceptionFilter
VirtualAlloc
VirtualFree
VirtualQuery
WaitForSingleObject
WideCharToMultiByte
WriteFile
WritePrivateProfileStringA
lstrcmpA
lstrcpyA
lstrcpynA
lstrlenA
version
GetFileVersionInfoA
GetFileVersionInfoSizeA
VerQueryValueA
comctl32
ImageList_Add
ImageList_BeginDrag
ImageList_Create
ImageList_Destroy
ImageList_DragEnter
ImageList_DragLeave
ImageList_DragMove
ImageList_DragShowNolock
ImageList_Draw
ImageList_EndDrag
ImageList_GetBkColor
ImageList_GetDragImage
ImageList_GetIconSize
ImageList_GetImageCount
ImageList_Read
ImageList_Remove
ImageList_ReplaceIcon
ImageList_SetBkColor
ImageList_SetDragCursorImage
ImageList_SetIconSize
ImageList_Write
ord17
ImageList_DrawEx
comdlg32
GetOpenFileNameA
gdi32
BitBlt
CombineRgn
CreateBitmap
CreateBrushIndirect
CreateCompatibleBitmap
CreateCompatibleDC
CreateDIBSection
CreateDIBitmap
CreateFontIndirectA
CreateHalftonePalette
CreatePalette
CreatePenIndirect
CreateRectRgn
CreateSolidBrush
DeleteDC
DeleteObject
ExcludeClipRect
GetBitmapBits
GetBrushOrgEx
GetClipBox
GetCurrentPositionEx
GetDCOrgEx
GetDIBColorTable
GetDIBits
GetDeviceCaps
GetObjectA
GetPaletteEntries
GetPixel
GetRgnBox
GetStockObject
GetSystemPaletteEntries
GetTextExtentPoint32A
GetTextMetricsA
GetWindowOrgEx
IntersectClipRect
LineTo
MaskBlt
MoveToEx
PatBlt
RealizePalette
RectVisible
Rectangle
RestoreDC
SaveDC
SelectObject
SelectPalette
SetBkColor
SetBkMode
SetBrushOrgEx
SetDIBColorTable
SetPixel
SetROP2
SetStretchBltMode
SetTextColor
SetViewportOrgEx
SetWindowOrgEx
StretchBlt
UnrealizeObject
shell32
SHFileOperationA
ShellExecuteA
user32
ActivateKeyboardLayout
AdjustWindowRectEx
BeginPaint
CallNextHookEx
CallWindowProcA
CharLowerA
CharNextA
CheckMenuItem
ClientToScreen
CreateIcon
CreateMenu
CreatePopupMenu
CreateWindowExA
DefFrameProcA
DefMDIChildProcA
DefWindowProcA
DeleteMenu
DestroyCursor
DestroyIcon
DestroyMenu
DestroyWindow
DispatchMessageA
DrawEdge
DrawFrameControl
DrawIcon
DrawIconEx
DrawMenuBar
DrawTextA
EnableMenuItem
EnableScrollBar
EnableWindow
EndPaint
EnumThreadWindows
EnumWindows
EqualRect
FillRect
FindWindowA
FrameRect
GetActiveWindow
GetCapture
GetClassInfoA
GetClientRect
GetCursor
GetCursorPos
GetDC
GetDCEx
GetDesktopWindow
GetDlgItem
GetFocus
GetForegroundWindow
GetIconInfo
GetKeyNameTextA
GetKeyState
GetKeyboardLayout
GetKeyboardLayoutList
GetKeyboardState
GetKeyboardType
GetLastActivePopup
GetMenu
GetMenuItemCount
GetMenuItemID
GetMenuItemInfoA
GetMenuState
GetMenuStringA
GetParent
GetPropA
GetScrollInfo
GetScrollPos
GetScrollRange
GetSubMenu
GetSysColor
GetSystemMetrics
GetTopWindow
GetWindow
GetWindowDC
GetWindowLongA
GetWindowPlacement
GetWindowRect
GetWindowTextA
GetWindowThreadProcessId
InflateRect
InsertMenuA
InsertMenuItemA
IntersectRect
InvalidateRect
IsChild
IsDialogMessageA
IsIconic
IsRectEmpty
IsWindow
IsWindowEnabled
IsWindowVisible
IsZoomed
KillTimer
LoadBitmapA
LoadCursorA
LoadIconA
LoadKeyboardLayoutA
LoadStringA
MapVirtualKeyA
MapWindowPoints
MessageBoxA
OemToCharA
OffsetRect
PeekMessageA
PostMessageA
PostQuitMessage
PtInRect
RedrawWindow
RegisterClassA
RegisterClipboardFormatA
RegisterWindowMessageA
ReleaseCapture
ReleaseDC
RemoveMenu
RemovePropA
ScreenToClient
ScrollWindow
SendMessageA
SetActiveWindow
SetCapture
SetClassLongA
SetCursor
SetFocus
SetForegroundWindow
SetMenu
SetMenuItemInfoA
SetPropA
SetRect
SetScrollInfo
SetScrollPos
SetScrollRange
SetTimer
SetWindowLongA
SetWindowPlacement
SetWindowPos
SetWindowsHookExA
ShowCursor
ShowOwnedPopups
ShowScrollBar
ShowWindow
SystemParametersInfoA
TrackPopupMenu
TranslateMDISysAccel
TranslateMessage
UnhookWindowsHookEx
UnregisterClassA
UpdateWindow
WaitMessage
WinHelpA
WindowFromPoint
wsprintfA
GetSystemMenu
ole32
IsEqualGUID
oleaut32
SysAllocStringLen
SysFreeString
SysReAllocStringLen
SysStringLen
VariantChangeTypeEx
VariantClear
VariantCopyInd
Exports
Exports
@@Xfilestream@Finalize
@@Xfilestream@Initialize
_DropHandle
_Extract
_ExtractImage
_GetChild
_GetDllVersion
_GetInfo
_GetName
_GetUniCodeName
_Init
_LoadImageFile
_LoadImageFileUC
_Offset2LBA
_Read
_ReadBlock
_ReadTOC
_SelectDrive
_UnLoadImageFile
___CPPdebugHook
Sections
.text Size: 1.4MB - Virtual size: 1.4MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 256KB - Virtual size: 644KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 10KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.edata Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 18KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 92KB - Virtual size: 92KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
wintaylor2.1/Programs/Imager/MD5Remote.dll.dll windows:4 windows x86
964c61ed87e34fb47b5f335531d25ed5
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
setupapi
SetupDiGetDeviceInterfaceDetailA
SetupDiGetClassDevsA
SetupDiEnumDeviceInterfaces
kernel32
DeviceIoControl
Sleep
GetVersionExA
SetCommTimeouts
CloseHandle
WriteFile
SizeofResource
CreateFileA
GetLastError
LoadResource
FindResourceA
lstrcatA
GetSystemDirectoryA
OpenProcess
DisableThreadLibraryCalls
OutputDebugStringA
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
ExitProcess
LockResource
QueryPerformanceCounter
user32
SendMessageA
GetWindowTextA
EnumChildWindows
GetForegroundWindow
advapi32
OpenServiceA
CloseServiceHandle
StartServiceA
OpenSCManagerA
CreateServiceA
msvcr71
_getch
_ltoa
_ultoa
_ftime
fclose
fputs
exit
fopen
sprintf
strncmp
free
malloc
_beginthread
__security_error_handler
_except_handler3
_initterm
_adjust_fdiv
__CppXcptFilter
__dllonexit
_onexit
_itoa
Exports
Exports
MRICFReadSectors
MRICFWriteSectors
MRICFgetIDsector
MRICFinitFileSystem
MRIDestGetIDsector
MRIDestReadSectors
MRIDestWriteSectors
MRIabort
MRIcaptureDD
MRIcheckDestinationDrive
MRIcheckProgress
MRIcloseConnection
MRIcomputeMD5
MRIdisengageUSBMode
MRIengageUSBMode
MRIformatDestinationDrive
MRIgetDriveInfo
MRIgetMD5Final
MRIgetMD5resultant
MRIgetSearchListNames
MRIgetUnitInfo
MRIinitConnection
MRIinitConnectionPoll
MRIreadHWswitchControl
MRIreenumerateUSB
MRIresetConnection
MRIresetMD5resultant
MRIsetMD5resultant
MRIsetParallelMode
MRIsetSearchListName
MRIturnDrivePowerOff
MRIturnDrivePowerOn
MRIwriteHWswitchControl
Sections
.text Size: 44KB - Virtual size: 43KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 28KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
wintaylor2.1/Programs/Imager/ProfUIS284ad32.dll.dll windows:5 windows x86
155831e867129b0200a1369b4bfafbc2
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
mfc90u
ord2081
ord5322
ord4530
ord782
ord580
ord4648
ord1254
ord902
ord901
ord2912
ord4819
ord4822
ord4801
ord4806
ord696
ord3858
ord2487
ord3797
ord6595
ord5595
ord2137
ord2915
ord5947
ord1224
ord1255
ord3903
ord2656
ord2078
ord5611
ord2787
ord4972
ord6426
ord1584
ord3934
ord5399
ord3254
ord5657
ord2070
ord4430
ord981
ord3233
ord5451
ord1697
ord5448
ord5618
ord2138
ord695
ord1542
ord444
ord3567
ord4474
ord5916
ord3320
ord443
ord3566
ord4473
ord5915
ord1007
ord1041
ord1042
ord554
ord3631
ord1276
ord1222
ord1087
ord3882
ord4054
ord3057
ord6323
ord2146
ord5815
ord2484
ord5894
ord450
ord2340
ord5900
ord5899
ord619
ord343
ord1432
ord2265
ord2269
ord2288
ord2297
ord2289
ord4396
ord5802
ord4320
ord4614
ord6524
ord2341
ord6179
ord2904
ord1795
ord5886
ord3995
ord2681
ord344
ord4343
ord383
ord1524
ord2189
ord6794
ord291
ord1219
ord6515
ord6059
ord6058
ord6492
ord4103
ord3680
ord6181
ord2913
ord1423
ord5425
ord4321
ord2914
ord1145
ord4660
ord1719
ord2283
ord1708
ord1779
ord1714
ord1716
ord1783
ord3826
ord3842
ord3944
ord3160
ord3665
ord3282
ord791
ord6349
ord3547
ord4656
ord1682
ord1770
ord2278
ord677
ord4992
ord5497
ord4216
ord3422
ord2364
ord6830
ord1678
ord6746
ord4968
ord2122
ord3370
ord6416
ord985
ord6355
ord3165
ord6514
ord6353
ord4400
ord3167
ord2430
ord1486
ord4010
ord3158
ord4040
ord6170
ord588
ord3669
ord4693
ord3284
ord5624
ord1441
ord3681
ord5601
ord4378
ord5294
ord5297
ord4800
ord4805
ord4802
ord4820
ord4823
ord4807
ord5210
ord5020
ord4599
ord4590
ord5418
ord5214
ord4622
ord5224
ord4865
ord4866
ord793
ord899
ord814
ord6347
ord5887
ord1045
ord2485
ord4235
ord6698
ord6692
ord581
ord1044
ord783
ord1607
ord285
ord3220
ord6630
ord5908
ord1325
ord1650
ord4249
ord796
ord3673
ord6019
ord4997
ord5677
ord4212
ord1884
ord1355
ord4519
ord4494
ord277
ord1043
ord3145
ord398
ord593
ord6384
ord4262
ord3188
ord6666
ord4167
ord3169
ord3183
ord3175
ord665
ord2501
ord2490
ord406
ord1115
ord1226
ord4234
ord907
ord3654
ord778
ord3528
ord654
ord1868
ord3674
ord711
ord463
ord4248
ord5891
ord614
ord3130
ord4619
ord5723
ord4136
ord3011
ord770
ord1420
ord2152
ord569
ord4479
ord3319
ord5876
ord5921
ord1018
ord2057
ord6760
ord490
ord701
ord449
ord724
ord2197
ord481
ord4251
ord3862
ord809
ord2702
ord5060
ord643
ord1426
ord4760
ord1677
ord4717
ord381
ord4002
ord4238
ord1235
ord6164
ord5867
ord3807
ord3839
ord1692
ord3560
ord1772
ord691
ord2504
ord4518
ord2661
ord6697
ord1715
ord1782
ord3728
ord1298
ord3735
ord3895
ord2818
ord2210
ord411
ord261
ord5771
ord6815
ord862
ord869
ord863
ord870
ord6831
ord3423
ord6089
ord6527
ord3933
ord5078
ord4708
ord1579
ord4815
ord3948
ord4127
ord704
ord4671
ord4952
ord1699
ord1776
ord1698
ord5109
ord5363
ord5804
ord455
ord5129
ord5620
ord5130
ord4014
ord3231
ord6167
ord6612
ord652
ord6125
ord390
ord1557
ord2145
ord3191
ord3621
ord4278
ord1251
ord3156
ord3381
ord6545
ord1552
ord3921
ord3530
ord4455
ord6720
ord4056
ord3676
ord1383
ord2372
ord1078
ord3417
ord3922
ord748
ord5371
ord6496
ord6605
ord5209
ord3686
ord1535
ord6559
ord5666
ord6490
ord2879
ord4990
ord6160
ord4897
ord1110
ord2877
ord6275
ord2222
ord531
ord1127
ord3404
ord768
ord567
ord1440
ord5293
ord4109
ord528
ord533
ord5495
ord534
ord703
ord6175
ord454
ord2254
ord2293
ord4031
ord3906
ord3627
ord750
ord3456
ord456
ord4015
ord4309
ord2653
ord3374
ord2654
ord5089
ord5180
ord767
ord6074
ord6106
ord3642
ord6805
ord3927
ord3648
ord772
ord3930
ord775
ord3651
ord3932
ord5372
ord5310
ord5391
ord4701
ord5153
ord777
ord575
ord5120
ord2225
ord4034
ord3384
ord5127
ord6754
ord1291
ord5374
ord3382
ord6424
ord6425
ord5373
ord779
ord576
ord5622
ord5652
ord4661
ord1430
ord5428
ord1433
ord4615
ord1720
ord1784
ord2284
ord4035
ord3383
ord6761
ord321
ord391
ord1239
ord1152
ord6636
ord4399
ord615
ord2103
ord1601
ord4510
ord2277
ord4654
ord3496
ord4543
ord3775
ord4774
ord6171
ord2123
ord6635
ord4131
ord1938
ord6098
ord333
ord6094
ord525
ord6095
ord4410
ord4541
ord3622
ord3953
ord2263
ord446
ord542
ord5635
ord6022
msvcr90
__CppXcptFilter
_adjust_fdiv
_amsg_exit
_initterm_e
_initterm
_encoded_null
_malloc_crt
_decode_pointer
_onexit
_lock
_encode_pointer
__dllonexit
_unlock
_except_handler4_common
?terminate@@YAXXZ
__RTDynamicCast
??0exception@std@@QAE@ABV01@@Z
_invalid_parameter_noinfo
??0exception@std@@QAE@XZ
??1exception@std@@UAE@XZ
?what@exception@std@@UBEPBDXZ
??0exception@std@@QAE@ABQBD@Z
_wcsdup
_wcsicoll
swprintf_s
atof
?_type_info_dtor_internal_method@type_info@@QAEXXZ
div
towlower
wcstoul
rand
realloc
_ui64tow_s
_i64tow_s
_itow_s
_ultow_s
_ltow_s
iswprint
iswalnum
wcsncpy_s
iswdigit
iswspace
isdigit
_time64
ldiv
wcsftime
_wtoi
_CIfmod
_mktime64
_purecall
iswalpha
wcschr
wcsncmp
_wsplitpath_s
__clean_type_info_names_internal
_crt_debugger_hook
_CIpow
memcpy
_localtime64_s
clock
swscanf_s
calloc
_wtol
_CIatan2
_wfindfirst64i32
_findclose
malloc
floor
ceil
_CxxThrowException
_CIcos
_CIsqrt
_CIexp
_CIsin
free
_wcsicmp
_wcslwr_s
wcscat_s
wcscpy_s
_wcsnicmp
towupper
wcsstr
memset
__CxxFrameHandler3
memmove_s
memcpy_s
kernel32
CloseHandle
CreateFileW
FindClose
FindFirstFileW
SetEvent
FindNextChangeNotification
WaitForMultipleObjects
FindFirstChangeNotificationW
FindCloseChangeNotification
CreateDirectoryW
SetCurrentDirectoryW
GetCurrentDirectoryW
WaitForSingleObject
GetCurrentProcessId
FileTimeToSystemTime
FileTimeToLocalFileTime
IsBadWritePtr
IsBadReadPtr
SystemTimeToFileTime
SetPriorityClass
GetPriorityClass
GetCurrentProcess
SetThreadPriority
GetThreadPriority
GetCurrentThread
LoadLibraryExW
GetVersionExA
GetVersionExW
ResumeThread
CreateThread
GetTempPathW
DeleteFileW
InterlockedExchange
InterlockedCompareExchange
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
QueryPerformanceCounter
GetTickCount
GetSystemTimeAsFileTime
LoadLibraryA
LocalAlloc
LocalLock
LocalFree
LocalUnlock
Sleep
GetCurrentThreadId
lstrcmpiW
lstrcmpW
GetModuleHandleA
lstrcpyW
GetModuleFileNameW
FindResourceExW
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSection
lstrlenA
FreeLibrary
GetCurrencyFormatW
GetNumberFormatW
GetDateFormatW
GetTimeFormatW
GetLocaleInfoW
GetUserDefaultLangID
MultiByteToWideChar
FindResourceW
GlobalLock
GlobalUnlock
LoadResource
LockResource
SizeofResource
FreeResource
GlobalAlloc
GlobalReAlloc
GlobalFree
MulDiv
lstrlenW
WinExec
GetLastError
SetLastError
GetProcAddress
GetModuleHandleW
LoadLibraryW
WideCharToMultiByte
user32
PtInRect
CopyRect
SendMessageW
GetAsyncKeyState
GetKeyState
SetScrollPos
GetScrollRange
SetScrollRange
SetCursor
GetDesktopWindow
GetWindowLongW
GetClassLongW
GetClassNameW
IsChild
GetSystemMetrics
DefWindowProcW
GetClassInfoW
GetDlgItem
TabbedTextOutW
DrawTextW
DrawTextExW
GrayStringW
DispatchMessageW
PeekMessageW
SetFocus
WindowFromDC
GetDlgCtrlID
EndDeferWindowPos
DeferWindowPos
BeginDeferWindowPos
InflateRect
DrawFrameControl
GetSysColor
ReleaseDC
GetDC
GetIconInfo
CreateIconIndirect
FillRect
LoadMenuW
MapDialogRect
LoadAcceleratorsW
SendDlgItemMessageA
LoadMenuIndirectW
CreateAcceleratorTableW
DestroyWindow
CreateDialogIndirectParamW
GetMenuItemCount
IsMenu
SetActiveWindow
IsWindowEnabled
RegisterWindowMessageW
LoadIconW
SetWindowLongW
ReleaseCapture
GetCapture
SetCapture
SetWindowRgn
EnableMenuItem
GetSubMenu
BringWindowToTop
GetDCEx
SetParent
GetMessageW
DragDetect
PostQuitMessage
WaitMessage
MoveWindow
GetTopWindow
GetWindowDC
SetRect
ShowWindow
CallNextHookEx
UnhookWindowsHookEx
SetWindowsHookExW
IsZoomed
SetForegroundWindow
CloseClipboard
SetClipboardData
OpenClipboard
EmptyClipboard
MessageBeep
GetDoubleClickTime
UnionRect
CreatePopupMenu
AppendMenuW
SetMenuDefaultItem
GetMenuDefaultItem
RemoveMenu
RemovePropW
CallWindowProcW
GetPropW
SetPropW
GetMenuItemID
RegisterClipboardFormatW
GetKeyboardLayout
GetClipboardData
IsClipboardFormatAvailable
CopyAcceleratorTableW
DestroyAcceleratorTable
GetKeyNameTextW
MapVirtualKeyExW
IntersectRect
IsCharAlphaNumericW
CreateWindowExW
SetWindowTextW
DrawIconEx
ToUnicodeEx
GetKeyboardState
MapVirtualKeyW
GetWindowPlacement
SetMenu
GetMenu
IsIconic
CharUpperW
GetForegroundWindow
GetMenuState
SetWindowPlacement
AdjustWindowRectEx
ShowScrollBar
DrawStateW
FrameRect
SystemParametersInfoW
GetSysColorBrush
SystemParametersInfoA
MapWindowPoints
TranslateMessage
GetWindowRgn
GetWindowThreadProcessId
DestroyMenu
LockWindowUpdate
EnableScrollBar
wsprintfW
DeleteMenu
GetWindowTextW
GetWindowTextLengthW
InvalidateRgn
SetCursorPos
GetLastActivePopup
SetRectEmpty
GetWindowRect
GetClientRect
IsWindowVisible
RedrawWindow
SetTimer
KillTimer
GetParent
SetWindowPos
EnableWindow
IsWindow
GetCursorPos
GetActiveWindow
WindowFromPoint
IsRectEmpty
OffsetRect
EqualRect
DrawFocusRect
GetMenuItemInfoW
PostMessageW
GetSystemMenu
ClientToScreen
ScreenToClient
UpdateWindow
InvalidateRect
GetFocus
GetNextDlgGroupItem
GetWindow
DestroyIcon
LoadCursorW
LoadImageW
DestroyCursor
GetCursor
GetScrollPos
SendDlgItemMessageW
gdi32
GetStockObject
CreateFontIndirectW
CreateDIBSection
PtVisible
RectVisible
TextOutW
ExtTextOutW
Escape
SetBkMode
GetTextMetricsW
GetStretchBltMode
GetDIBits
DeleteDC
RealizePalette
LPtoDP
DeleteObject
SelectObject
CombineRgn
GetPixel
SetStretchBltMode
BitBlt
SetPixel
StretchDIBits
CreateRectRgnIndirect
OffsetWindowOrgEx
CreateDIBitmap
SetBkColor
StretchBlt
ExtCreateRegion
GetNearestColor
CreateEllipticRgn
DPtoLP
GetViewportOrgEx
GetBkColor
CreateCompatibleDC
PtInRegion
CreatePolygonRgn
CreateRectRgn
GetObjectW
CreateCompatibleBitmap
CreateBitmap
SelectPalette
GetMapMode
GetEnhMetaFileW
GetMetaFileW
DeleteEnhMetaFile
DeleteMetaFile
PlayEnhMetaFile
PlayMetaFile
CloseEnhMetaFile
CreateEnhMetaFileW
CloseMetaFile
CreateMetaFileW
EndDoc
AbortDoc
SetAbortProc
EndPage
StartPage
StartDocW
SetTextColor
SelectClipRgn
SetWindowOrgEx
GetClipBox
GetDCOrgEx
SetDIBits
ExtCreatePen
GetTextCharset
EnumFontFamiliesW
CreateRoundRectRgn
CreatePalette
GetRgnBox
OffsetViewportOrgEx
GdiFlush
SetBrushOrgEx
ExtFloodFill
CreatePatternBrush
CreateHatchBrush
RoundRect
CreatePen
EnumFontFamiliesExW
GetTextColor
GetBkMode
GetTextExtentPoint32W
Rectangle
Ellipse
CreateDCW
ExcludeClipRect
PatBlt
FillRgn
OffsetRgn
CreateEllipticRgnIndirect
GetDeviceCaps
SetPixelV
Polygon
FrameRgn
CreateSolidBrush
advapi32
RegCloseKey
RegOpenKeyExW
RegConnectRegistryW
RegCreateKeyExW
RegQueryValueExW
RegSetValueExW
RegDeleteKeyW
RegEnumKeyW
RegQueryInfoKeyW
RegDeleteValueW
RegQueryValueW
shell32
SHGetDataFromIDListW
SHFileOperationW
SHGetPathFromIDListW
SHGetMalloc
SHGetDesktopFolder
SHGetFileInfoW
SHGetSpecialFolderLocation
ShellExecuteW
SHAppBarMessage
comctl32
ImageList_Duplicate
ole32
OleSaveToStream
WriteClassStm
OleLoadFromStream
CoTaskMemAlloc
CoTaskMemFree
CreateStreamOnHGlobal
CoCreateInstance
oleaut32
VarDiv
VarDateFromStr
VarMul
OleCreateFontIndirect
SafeArrayCopy
SysAllocString
VariantInit
SysStringByteLen
SysAllocStringByteLen
VariantCopy
VariantClear
VarUdateFromDate
VariantChangeType
DosDateTimeToVariantTime
VarBstrFromDate
SysFreeString
SystemTimeToVariantTime
VariantTimeToSystemTime
OleCreatePictureIndirect
version
GetFileVersionInfoW
GetFileVersionInfoSizeW
VerQueryValueW
winmm
PlaySoundW
rpcrt4
RpcStringFreeW
UuidCreate
UuidToStringW
msvcp90
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBD@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z
Exports
Exports
??0?$CArray@PAVCExtHookSink@@PAV1@@@QAE@XZ
??0?$CArray@PAVITEM_INFO@CExtGridCellComboBox@@AAPAV12@@@QAE@XZ
??0?$CArray@VCCmdKeyInfo@CExtCustomizeSite@@V12@@@QAE@XZ
??0?$CArray@VCharRule@CBehaviorMasked@CExtEditWithBehavior@@AAV123@@@QAE@XZ
??0?$CExtADLG@VCExtResDlg@@@@QAE@II@Z
??0?$CExtADLG@VCExtResDlg@@@@QAE@IPAVCWnd@@@Z
??0?$CExtADLG@VCExtResDlg@@@@QAE@IPAVCWnd@@I@Z
??0?$CExtADLG@VCExtResDlg@@@@QAE@PB_WI@Z
??0?$CExtADLG@VCExtResDlg@@@@QAE@PB_WPAVCWnd@@@Z
??0?$CExtADLG@VCExtResDlg@@@@QAE@PB_WPAVCWnd@@I@Z
??0?$CExtADLG@VCExtResDlg@@@@QAE@XZ
??0?$CExtAPPG@VCExtResPP@@@@QAE@II@Z
??0?$CExtAPPG@VCExtResPP@@@@QAE@IPAVCWnd@@@Z
??0?$CExtAPPG@VCExtResPP@@@@QAE@IPAVCWnd@@I@Z
??0?$CExtAPPG@VCExtResPP@@@@QAE@PB_WI@Z
??0?$CExtAPPG@VCExtResPP@@@@QAE@PB_WPAVCWnd@@@Z
??0?$CExtAPPG@VCExtResPP@@@@QAE@PB_WPAVCWnd@@I@Z
??0?$CExtAPPG@VCExtResPP@@@@QAE@XZ
??0?$CExtAPSH@VCExtResPS@@@@QAE@II@Z
??0?$CExtAPSH@VCExtResPS@@@@QAE@IPAVCWnd@@@Z
??0?$CExtAPSH@VCExtResPS@@@@QAE@IPAVCWnd@@I@Z
??0?$CExtAPSH@VCExtResPS@@@@QAE@PB_WI@Z
??0?$CExtAPSH@VCExtResPS@@@@QAE@PB_WPAVCWnd@@@Z
??0?$CExtAPSH@VCExtResPS@@@@QAE@PB_WPAVCWnd@@I@Z
??0?$CExtAPSH@VCExtResPS@@@@QAE@XZ
??0?$CExtArray@PAVITEM_INFO@CExtGridCellComboBox@@@@QAE@ABV0@@Z
??0?$CExtArray@PAVITEM_INFO@CExtGridCellComboBox@@@@QAE@_N0@Z
??0?$CExtCIP@UIContextMenu2@@@@QAE@ABV0@@Z
??0?$CExtCIP@UIContextMenu2@@@@QAE@PAUIContextMenu2@@@Z
??0?$CExtCIP@UIContextMenu2@@@@QAE@XZ
??0?$CExtCIP@UIContextMenu3@@@@QAE@ABV0@@Z
??0?$CExtCIP@UIContextMenu3@@@@QAE@PAUIContextMenu3@@@Z
??0?$CExtCIP@UIContextMenu3@@@@QAE@XZ
??0?$CExtCIP@UIContextMenu@@@@QAE@ABV0@@Z
??0?$CExtCIP@UIContextMenu@@@@QAE@PAUIContextMenu@@@Z
??0?$CExtCIP@UIContextMenu@@@@QAE@XZ
??0?$CExtCIP@UIShellFolder@@@@QAE@ABV0@@Z
??0?$CExtCIP@UIShellFolder@@@@QAE@PAUIShellFolder@@@Z
??0?$CExtCIP@UIShellFolder@@@@QAE@XZ
??0?$CExtED@VCExtEditBase@@@@QAE@XZ
??0?$CExtED@VCExtEditHotKeyBase@@@@QAE@XZ
??0?$CExtGCC@V?$CExtGCP@V?$CExtGCE@VCExtGridCellStringDM@@@@@@@@QAE@ABV0@@Z
??0?$CExtGCC@V?$CExtGCP@V?$CExtGCE@VCExtGridCellStringDM@@@@@@@@QAE@ABVCExtGridCell@@@Z
??0?$CExtGCC@V?$CExtGCP@V?$CExtGCE@VCExtGridCellStringDM@@@@@@@@QAE@PAVCExtGridDataProvider@@@Z
??0?$CExtGCC@VCExtGridCell@@@@QAE@ABV0@@Z
??0?$CExtGCC@VCExtGridCell@@@@QAE@ABVCExtGridCell@@@Z
??0?$CExtGCC@VCExtGridCell@@@@QAE@PAVCExtGridDataProvider@@@Z
??0?$CExtGCE@VCExtGridCell@@@@QAE@ABV0@@Z
??0?$CExtGCE@VCExtGridCell@@@@QAE@ABVCExtGridCell@@@Z
??0?$CExtGCE@VCExtGridCell@@@@QAE@PAVCExtGridDataProvider@@HHHHH@Z
??0?$CExtGCE@VCExtGridCellStringDM@@@@QAE@ABV0@@Z
??0?$CExtGCE@VCExtGridCellStringDM@@@@QAE@ABVCExtGridCell@@@Z
??0?$CExtGCE@VCExtGridCellStringDM@@@@QAE@PAVCExtGridDataProvider@@HHHHH@Z
??0?$CExtGCF@V?$CExtGCC@V?$CExtGCP@V?$CExtGCE@VCExtGridCellStringDM@@@@@@@@@@QAE@ABV0@@Z
??0?$CExtGCF@V?$CExtGCC@V?$CExtGCP@V?$CExtGCE@VCExtGridCellStringDM@@@@@@@@@@QAE@ABVCExtGridCell@@@Z
??0?$CExtGCF@V?$CExtGCC@V?$CExtGCP@V?$CExtGCE@VCExtGridCellStringDM@@@@@@@@@@QAE@PAVCExtGridDataProvider@@@Z
??0?$CExtGCF@V?$CExtGCC@VCExtGridCell@@@@@@QAE@ABV0@@Z
??0?$CExtGCF@V?$CExtGCC@VCExtGridCell@@@@@@QAE@ABVCExtGridCell@@@Z
??0?$CExtGCF@V?$CExtGCC@VCExtGridCell@@@@@@QAE@PAVCExtGridDataProvider@@@Z
??0?$CExtGCJ@V?$CExtGCF@V?$CExtGCC@V?$CExtGCP@V?$CExtGCE@VCExtGridCellStringDM@@@@@@@@@@@@QAE@ABV0@@Z
??0?$CExtGCJ@V?$CExtGCF@V?$CExtGCC@V?$CExtGCP@V?$CExtGCE@VCExtGridCellStringDM@@@@@@@@@@@@QAE@ABVCExtGridCell@@@Z
??0?$CExtGCJ@V?$CExtGCF@V?$CExtGCC@V?$CExtGCP@V?$CExtGCE@VCExtGridCellStringDM@@@@@@@@@@@@QAE@PAVCExtGridDataProvider@@@Z
??0?$CExtGCJ@V?$CExtGCF@V?$CExtGCC@VCExtGridCell@@@@@@@@QAE@ABV0@@Z
??0?$CExtGCJ@V?$CExtGCF@V?$CExtGCC@VCExtGridCell@@@@@@@@QAE@ABVCExtGridCell@@@Z
??0?$CExtGCJ@V?$CExtGCF@V?$CExtGCC@VCExtGridCell@@@@@@@@QAE@PAVCExtGridDataProvider@@@Z
??0?$CExtGCP@V?$CExtGCE@VCExtGridCellStringDM@@@@@@QAE@ABV0@@Z
??0?$CExtGCP@V?$CExtGCE@VCExtGridCellStringDM@@@@@@QAE@ABVCExtGridCell@@@Z
??0?$CExtGCP@V?$CExtGCE@VCExtGridCellStringDM@@@@@@QAE@PAVCExtGridDataProvider@@N@Z
??0?$CExtGDPF@V?$CExtGDPI@VCExtGridDataProvider@@@@@@QAE@XZ
??0?$CExtGDPI@VCExtGridDataProvider@@@@QAE@XZ
??0?$CExtGIE@VCExtDateTimeWnd@@@@QAE@AAVCExtGridWnd@@AAVCExtGridCell@@JJJJHHABUtagRECT@@22JJ@Z
??0?$CExtGIE@VCExtDurationWnd@@@@QAE@AAVCExtGridWnd@@AAVCExtGridCell@@JJJJHHABUtagRECT@@22JJ@Z
??0?$CExtGIE@VCExtEditBase@@@@QAE@AAVCExtGridWnd@@AAVCExtGridCell@@JJJJHHABUtagRECT@@22JJ@Z
??0?$CExtGIE@VCExtEditHotKeyBase@@@@QAE@AAVCExtGridWnd@@AAVCExtGridCell@@JJJJHHABUtagRECT@@22JJ@Z
??0?$CExtGIE@VCExtSliderWnd@@@@QAE@AAVCExtGridWnd@@AAVCExtGridCell@@JJJJHHABUtagRECT@@22JJ@Z
??0?$CExtGIE@VCIPAddressCtrl@@@@QAE@AAVCExtGridWnd@@AAVCExtGridCell@@JJJJHHABUtagRECT@@22JJ@Z
??0?$CExtGIED@V?$CExtGIE@VCExtDateTimeWnd@@@@@@QAE@AAVCExtGridWnd@@AAVCExtGridCell@@JJJJHHABUtagRECT@@22JJ@Z
??0?$CExtGIED@V?$CExtGIE@VCExtDurationWnd@@@@@@QAE@AAVCExtGridWnd@@AAVCExtGridCell@@JJJJHHABUtagRECT@@22JJ@Z
??0?$CExtNCSB@VCExtComboBox@@@@QAE@IPAVCWnd@@_N1@Z
??0?$CExtNCSB@VCExtComboBox@@@@QAE@PB_WPAVCWnd@@_N2@Z
??0?$CExtNCSB@VCExtComboBox@@@@QAE@_N0@Z
??0?$CExtNCSB@VCExtListCtrl@@@@QAE@_N0@Z
??0?$CExtNCSB@VCExtShellListCtrl@@@@QAE@_N0@Z
??0?$CExtNCSB_Impl@VCExtComboBox@@@@QAE@IPAVCWnd@@_N1@Z
??0?$CExtNCSB_Impl@VCExtComboBox@@@@QAE@PB_WPAVCWnd@@_N2@Z
??0?$CExtNCSB_Impl@VCExtComboBox@@@@QAE@_N0@Z
??0?$CExtNCSB_Impl@VCExtListCtrl@@@@QAE@IPAVCWnd@@_N1@Z
??0?$CExtNCSB_Impl@VCExtListCtrl@@@@QAE@PB_WPAVCWnd@@_N2@Z
??0?$CExtNCSB_Impl@VCExtListCtrl@@@@QAE@_N0@Z
??0?$CExtNCSB_Impl@VCExtShellListCtrl@@@@QAE@IPAVCWnd@@_N1@Z
??0?$CExtNCSB_Impl@VCExtShellListCtrl@@@@QAE@PB_WPAVCWnd@@_N2@Z
??0?$CExtNCSB_Impl@VCExtShellListCtrl@@@@QAE@_N0@Z
??0?$CExtNCW@VCExtResizableDialog@@@@QAE@IPAVCWnd@@@Z
??0?$CExtNCW@VCExtResizableDialog@@@@QAE@PB_WPAVCWnd@@@Z
??0?$CExtNCW@VCExtResizableDialog@@@@QAE@XZ
??0?$CExtPPVW@VCExtGridWnd@@@@QAE@XZ
??0?$CExtPPVW@VCExtPropertyGridCtrl@@@@QAE@XZ
??0?$CExtPPVW@VCExtReportGridWnd@@@@QAE@XZ
??0?$CExtPPVW@VCExtTreeGridWnd@@@@QAE@XZ
??0?$CExtSO@U_ITEMIDLIST@@@@QAE@ABV0@@Z
??0?$CExtSO@U_ITEMIDLIST@@@@QAE@XZ
??0?$CExtTMDBS@VCExtTabMdiButtonsWnd@@@@QAE@XZ
??0?$CExtTMDBS@VCExtTabMdiFlatWnd@@@@QAE@XZ
??0?$CExtTMDBS@VCExtTabMdiOneNoteWnd@@@@QAE@XZ
??0?$CExtTMDBS@VCExtTabMdiWhidbeyWnd@@@@QAE@XZ
??0?$CExtTMDBS@VCExtTabMdiWnd@@@@QAE@XZ
??0?$CExtTMWI@VCExtTabButtonsWnd@@@@QAE@XZ
??0?$CExtTMWI@VCExtTabFlatWnd@@@@QAE@XZ
??0?$CExtTMWI@VCExtTabOneNoteWnd@@@@QAE@XZ
??0?$CExtTMWI@VCExtTabWhidbeyWnd@@@@QAE@XZ
??0?$CExtTMWI@VCExtTabWnd@@@@QAE@XZ
??0?$CExtWA@V?$CExtWS@V?$CExtADLG@VCExtResDlg@@@@$0BCN@@@@@QAE@II@Z
??0?$CExtWA@V?$CExtWS@V?$CExtADLG@VCExtResDlg@@@@$0BCN@@@@@QAE@IPAVCWnd@@@Z
??0?$CExtWA@V?$CExtWS@V?$CExtADLG@VCExtResDlg@@@@$0BCN@@@@@QAE@IPAVCWnd@@I@Z
??0?$CExtWA@V?$CExtWS@V?$CExtADLG@VCExtResDlg@@@@$0BCN@@@@@QAE@PB_WI@Z
??0?$CExtWA@V?$CExtWS@V?$CExtADLG@VCExtResDlg@@@@$0BCN@@@@@QAE@PB_WPAVCWnd@@@Z
??0?$CExtWA@V?$CExtWS@V?$CExtADLG@VCExtResDlg@@@@$0BCN@@@@@QAE@PB_WPAVCWnd@@I@Z
??0?$CExtWA@V?$CExtWS@V?$CExtADLG@VCExtResDlg@@@@$0BCN@@@@@QAE@XZ
??0?$CExtWA@V?$CExtWS@V?$CExtAPPG@VCExtResPP@@@@$0BCN@@@@@QAE@II@Z
??0?$CExtWA@V?$CExtWS@V?$CExtAPPG@VCExtResPP@@@@$0BCN@@@@@QAE@IPAVCWnd@@@Z
??0?$CExtWA@V?$CExtWS@V?$CExtAPPG@VCExtResPP@@@@$0BCN@@@@@QAE@IPAVCWnd@@I@Z
??0?$CExtWA@V?$CExtWS@V?$CExtAPPG@VCExtResPP@@@@$0BCN@@@@@QAE@PB_WI@Z
??0?$CExtWA@V?$CExtWS@V?$CExtAPPG@VCExtResPP@@@@$0BCN@@@@@QAE@PB_WPAVCWnd@@@Z
??0?$CExtWA@V?$CExtWS@V?$CExtAPPG@VCExtResPP@@@@$0BCN@@@@@QAE@PB_WPAVCWnd@@I@Z
??0?$CExtWA@V?$CExtWS@V?$CExtAPPG@VCExtResPP@@@@$0BCN@@@@@QAE@XZ
??0?$CExtWA@V?$CExtWS@V?$CExtAPSH@VCExtResPS@@@@$0BCN@@@@@QAE@II@Z
??0?$CExtWA@V?$CExtWS@V?$CExtAPSH@VCExtResPS@@@@$0BCN@@@@@QAE@IPAVCWnd@@@Z
??0?$CExtWA@V?$CExtWS@V?$CExtAPSH@VCExtResPS@@@@$0BCN@@@@@QAE@IPAVCWnd@@I@Z
??0?$CExtWA@V?$CExtWS@V?$CExtAPSH@VCExtResPS@@@@$0BCN@@@@@QAE@PB_WI@Z
??0?$CExtWA@V?$CExtWS@V?$CExtAPSH@VCExtResPS@@@@$0BCN@@@@@QAE@PB_WPAVCWnd@@@Z
??0?$CExtWA@V?$CExtWS@V?$CExtAPSH@VCExtResPS@@@@$0BCN@@@@@QAE@PB_WPAVCWnd@@I@Z
??0?$CExtWA@V?$CExtWS@V?$CExtAPSH@VCExtResPS@@@@$0BCN@@@@@QAE@XZ
??0?$CExtWS@V?$CExtADLG@VCExtResDlg@@@@$0BCN@@@QAE@II@Z
??0?$CExtWS@V?$CExtADLG@VCExtResDlg@@@@$0BCN@@@QAE@IPAVCWnd@@@Z
??0?$CExtWS@V?$CExtADLG@VCExtResDlg@@@@$0BCN@@@QAE@IPAVCWnd@@I@Z
??0?$CExtWS@V?$CExtADLG@VCExtResDlg@@@@$0BCN@@@QAE@PB_WI@Z
??0?$CExtWS@V?$CExtADLG@VCExtResDlg@@@@$0BCN@@@QAE@PB_WPAVCWnd@@@Z
??0?$CExtWS@V?$CExtADLG@VCExtResDlg@@@@$0BCN@@@QAE@PB_WPAVCWnd@@I@Z
??0?$CExtWS@V?$CExtADLG@VCExtResDlg@@@@$0BCN@@@QAE@XZ
??0?$CExtWS@V?$CExtAPPG@VCExtResPP@@@@$0BCN@@@QAE@II@Z
??0?$CExtWS@V?$CExtAPPG@VCExtResPP@@@@$0BCN@@@QAE@IPAVCWnd@@@Z
??0?$CExtWS@V?$CExtAPPG@VCExtResPP@@@@$0BCN@@@QAE@IPAVCWnd@@I@Z
??0?$CExtWS@V?$CExtAPPG@VCExtResPP@@@@$0BCN@@@QAE@PB_WI@Z
??0?$CExtWS@V?$CExtAPPG@VCExtResPP@@@@$0BCN@@@QAE@PB_WPAVCWnd@@@Z
??0?$CExtWS@V?$CExtAPPG@VCExtResPP@@@@$0BCN@@@QAE@PB_WPAVCWnd@@I@Z
??0?$CExtWS@V?$CExtAPPG@VCExtResPP@@@@$0BCN@@@QAE@XZ
??0?$CExtWS@V?$CExtAPSH@VCExtResPS@@@@$0BCN@@@QAE@II@Z
??0?$CExtWS@V?$CExtAPSH@VCExtResPS@@@@$0BCN@@@QAE@IPAVCWnd@@@Z
??0?$CExtWS@V?$CExtAPSH@VCExtResPS@@@@$0BCN@@@QAE@IPAVCWnd@@I@Z
??0?$CExtWS@V?$CExtAPSH@VCExtResPS@@@@$0BCN@@@QAE@PB_WI@Z
??0?$CExtWS@V?$CExtAPSH@VCExtResPS@@@@$0BCN@@@QAE@PB_WPAVCWnd@@@Z
??0?$CExtWS@V?$CExtAPSH@VCExtResPS@@@@$0BCN@@@QAE@PB_WPAVCWnd@@I@Z
??0?$CExtWS@V?$CExtAPSH@VCExtResPS@@@@$0BCN@@@QAE@XZ
??0?$CExtWTC@VCExtTreeCtrl@@@@QAE@XZ
??0?$CMap@IIVCCmdKeySet@CExtCustomizeSite@@V12@@@QAE@H@Z
??0?$CMap@KKII@@QAE@H@Z
??0?$CTypedPtrArray@VCPtrArray@@PAVCExtPIDL@@@@QAE@XZ
??0ADEnablableComboBox@@QAE@XZ
??0ADGroupBox@@QAE@XZ
??0ADLabel@@QAE@XZ
??0AnimationHookSink@CExtAnimationSite@@QAE@ABV01@@Z
??0AnimationHookSink@CExtAnimationSite@@QAE@PAV1@@Z
??0CADExtDynamicControlBar@@QAE@XZ
??0CADPropertyGrid@@QAE@XZ
??0CBehaviorBase@CExtEditWithBehavior@@QAE@ABV01@@Z
??0CBehaviorBase@CExtEditWithBehavior@@QAE@XZ
??0CBehaviorMasked@CExtEditWithBehavior@@QAE@PB_W@Z
??0CButtonInSheetHook@CExtResizablePropertySheet@@QAE@XZ
??0CCategoryCustomizeInfo@CExtCustomizeSite@@QAE@PB_WPAV1@@Z
??0CCmdDragInfo@CExtCustomizeSite@@QAE@AAU01@@Z
??0CCmdDragInfo@CExtCustomizeSite@@QAE@PAVCExtCustomizeCmdTreeNode@@0@Z
??0CCmdDragInfo@CExtCustomizeSite@@QAE@PAVCOleDataObject@@G@Z
??0CCmdDropSource@CExtCustomizeSite@@QAE@PAUICustomizeDropSource@1@PAV1@@Z
??0CCmdDropTarget@CExtCustomizeSite@@QAE@PAUICustomizeDropTarget@1@PAV1@@Z
??0CCmdKeyInfo@CExtCustomizeSite@@QAE@ABUtagACCEL@@@Z
??0CCmdKeyInfo@CExtCustomizeSite@@QAE@ABV01@@Z
??0CCmdKeyInfo@CExtCustomizeSite@@QAE@EG@Z
??0CCmdKeyInfo@CExtCustomizeSite@@QAE@K@Z
??0CCmdKeyInfo@CExtCustomizeSite@@QAE@_N000G@Z
??0CCmdKeySet@CExtCustomizeSite@@QAE@ABV01@@Z
??0CCmdKeySet@CExtCustomizeSite@@QAE@XZ
??0CCmdMenuInfo@CExtCustomizeSite@@QAE@PAV1@PB_W@Z
??0CComboItemsArray@CExtGridCellComboBox@@QAE@ABV01@@Z
??0CComboItemsArray@CExtGridCellComboBox@@QAE@XZ
??0CConsistentLabel@CExtRibbonOptionsPage@@QAE@XZ
??0CDynDropTarget@CExtDynAutoHideArea@@QAE@XZ
??0CDynDropTarget@CExtDynTabWnd@@QAE@XZ
??0CExtAlloc@@IAE@K_NPAUIUnknown@@0@Z
??0CExtAnimationClient@@QAE@ABV0@@Z
??0CExtAnimationClient@@QAE@PAVCExtAnimationSite@@_N1HHIPBUtagRECT@@@Z
??0CExtAnimationSingleton@@QAE@_NHHIPBUtagRECT@@@Z
??0CExtAnimationSite@@QAE@_N@Z
??0CExtArchiveIStream@@QAE@AAVCArchive@@_N@Z
??0CExtArchiveIStream@@QAE@ABV0@@Z
??0CExtArchiveIStream@@QAE@PAVCArchive@@_N@Z
??0CExtArrayOfPIDLs@@QAE@XZ
??0CExtBarButton@@QAE@PAVCExtToolControlBar@@II@Z
??0CExtBarCheckBoxButton@@QAE@PAVCExtToolControlBar@@II@Z
??0CExtBarColorButton@@QAE@PAVCExtToolControlBar@@IIKKJ_N1PB_W2W4e_def_icon_type_t@0@@Z
??0CExtBarContentExpandButton@@QAE@PAVCExtToolControlBar@@@Z
??0CExtBarDateFieldButton@@QAE@HPAVCExtToolControlBar@@II@Z
??0CExtBarLabelButton@@QAE@PAVCExtToolControlBar@@II@Z
??0CExtBarMdiDocButton@@QAE@PAVCExtToolControlBar@@II@Z
??0CExtBarMdiRightButton@@QAE@PAVCExtToolControlBar@@II@Z
??0CExtBarNcAreaButton@@QAE@PAVCExtControlBar@@@Z
??0CExtBarNcAreaButtonAutoHide@@QAE@PAVCExtControlBar@@@Z
??0CExtBarNcAreaButtonClose@@QAE@PAVCExtControlBar@@@Z
??0CExtBarNcAreaButtonExpand@@QAE@PAVCExtControlBar@@@Z
??0CExtBarNcAreaButtonMenu@@QAE@PAVCExtControlBar@@@Z
??0CExtBarRadioBoxButton@@QAE@PAVCExtToolControlBar@@II@Z
??0CExtBarSliderButton@@QAE@PAVCExtToolControlBar@@IIKKKHHHH@Z
??0CExtBarSpinButton@@QAE@HPAVCExtToolControlBar@@II@Z
??0CExtBarTextFieldButton@@QAE@_NHPAVCExtToolControlBar@@II@Z
??0CExtBarUndoRedoButton@@QAE@PAVCExtToolControlBar@@II@Z
??0CExtBitmap@@QAE@ABV0@@Z
??0CExtBitmap@@QAE@XZ
??0CExtBitmapCache@@QAE@ABV0@@Z
??0CExtBitmapCache@@QAE@ABVCExtBitmap@@@Z
??0CExtBitmapCache@@QAE@XZ
??0CExtBitmapInternal@CExtGridCellPicture@@QAE@ABV01@@Z
??0CExtBitmapInternal@CExtGridCellPicture@@QAE@ABVCExtBitmap@@@Z
??0CExtBitmapInternal@CExtGridCellPicture@@QAE@XZ
??0CExtBtnOnFlat@@QAE@XZ
??0CExtButton@@QAE@XZ
??0CExtCIP_SCM2@@QAE@ABV0@@Z
??0CExtCIP_SCM2@@QAE@PAUIContextMenu@@@Z
??0CExtCIP_SCM3@@QAE@ABV0@@Z
??0CExtCIP_SCM3@@QAE@PAUIContextMenu@@@Z
??0CExtCIP_SCM@@QAE@ABV0@@Z
??0CExtCIP_SCM@@QAE@PAUIShellFolder@@PAPBU_ITEMIDLIST@@HPAUHWND__@@@Z
??0CExtCIP_SCM@@QAE@PAUIShellFolder@@PBU_ITEMIDLIST@@PAUHWND__@@@Z
??0CExtCIP_SCM@@QAE@XZ
??0CExtCIP_SF@@QAE@ABV0@@Z
??0CExtCIP_SF@@QAE@PAUIShellFolder@@@Z
??0CExtCIP_SF@@QAE@PAUIShellFolder@@PBU_ITEMIDLIST@@@Z
??0CExtCIP_SF@@QAE@PBU_ITEMIDLIST@@@Z
??0CExtCIP_SF@@QAE@XZ
??0CExtCheckBox@@QAE@XZ
??0CExtCheckListWnd@@QAE@XZ
??0CExtCmdIcon@@QAE@ABV0@@Z
??0CExtCmdIcon@@QAE@XZ
??0CExtCmdItem@@QAE@ABV0@@Z
??0CExtCmdItem@@QAE@I@Z
??0CExtCmdItemUI@@QAE@ABV0@@Z
??0CExtCmdItemUI@@QAE@PAVCExtCmdItem@@H@Z
??0CExtCmdManager@@QAE@XZ
??0CExtCmdManagerAutoPtr@CExtCmdManager@@QAE@ABV01@@Z
??0CExtCmdManagerAutoPtr@CExtCmdManager@@QAE@XZ
??0CExtCmdProfile@@QAE@ABV0@@Z
??0CExtCmdProfile@@QAE@PB_W@Z
??0CExtColorButton@@QAE@XZ
??0CExtColorCtrl@@QAE@W4e_mode_t@0@@Z
??0CExtColorDlg@@QAE@KKPAVCWnd@@@Z
??0CExtColorPaletteWnd@@QAE@XZ
??0CExtComboBox@@IAE@IPAVCWnd@@@Z
??0CExtComboBox@@IAE@PB_WPAVCWnd@@@Z
??0CExtComboBox@@QAE@XZ
??0CExtComboBoxBase@@QAE@XZ
??0CExtComboBoxFilterPopupListBox@@QAE@PAVCExtComboBoxBase@@@Z
??0CExtComboBoxPopupListBox@@QAE@XZ
??0CExtComboEditCtrlHook@@QAE@XZ
??0CExtContentExpandWnd@@QAE@XZ
??0CExtControlBar@@QAE@XZ
??0CExtCustomizeCmdKeyTip@@QAE@ABV0@@Z
??0CExtCustomizeCmdKeyTip@@QAE@PB_W@Z
??0CExtCustomizeCmdKeyTip@@QAE@XZ
??0CExtCustomizeCmdKeyTip@@QAE@_W@Z
??0CExtCustomizeCmdScreenTip@@QAE@ABV0@@Z
??0CExtCustomizeCmdScreenTip@@QAE@XZ
??0CExtCustomizeCmdTreeNode@@QAE@AAV0@@Z
??0CExtCustomizeCmdTreeNode@@QAE@IIPAV0@KPB_W11JPAVCExtCmdIcon@@HHH@Z
??0CExtCustomizeCmdTreeNode@@QAE@PAVCExtCmdItem@@PAVCExtCmdIcon@@@Z
??0CExtCustomizeCommandListBox@@QAE@XZ
??0CExtCustomizeForm@@QAE@XZ
??0CExtCustomizePageCommands@@QAE@XZ
??0CExtCustomizePageKeyboard@@QAE@XZ
??0CExtCustomizePageParms@@QAE@XZ
??0CExtCustomizePageToolbars@@QAE@XZ
??0CExtCustomizeSite@@QAE@XZ
??0CExtCustomizeToolbarsListBox@@QAE@XZ
??0CExtDWM@@QAE@ABV0@@Z
??0CExtDWM@@QAE@XZ
??0CExtDateBrowserWnd@@QAE@XZ
??0CExtDatePickerHeaderPopupWnd@@QAE@PAVCExtDatePickerWnd@@_N@Z
??0CExtDatePickerWnd@@QAE@XZ
??0CExtDateTimeWnd@@QAE@XZ
??0CExtDockBar@@QAE@I@Z
??0CExtDockDynBar@@QAE@I@Z
??0CExtDockDynTabBar@@QAE@I@Z
??0CExtDockOuterBar@@QAE@XZ
??0CExtDurationWnd@@QAE@XZ
??0CExtDynAutoHideArea@@QAE@XZ
??0CExtDynAutoHideSlider@@QAE@XZ
??0CExtDynControlBar@@QAE@XZ
??0CExtDynDockHighlightWnd@@QAE@PAVCExtDynDockMarkerWnd@@@Z
??0CExtDynDockMarkerWnd@@QAE@PAV0@PAUHWND__@@HABVCExtBitmap@@2PAUHRGN__@@VCRect@@PBV2@HH_N@Z
??0CExtDynTabControlBar@@QAE@XZ
??0CExtDynTabWnd@@QAE@XZ
??0CExtDynamicBarHookSink@@QAE@ABV0@@Z
??0CExtDynamicBarHookSink@@QAE@XZ
??0CExtDynamicBarNcAreaButtonAutoHide@@QAE@PAVCExtControlBar@@@Z
??0CExtDynamicBarNcAreaButtonClose@@QAE@PAVCExtControlBar@@@Z
??0CExtDynamicBarNcAreaButtonMenu@@QAE@PAVCExtControlBar@@@Z
??0CExtDynamicBarSite@@QAE@XZ
??0CExtDynamicControlBar@@QAE@XZ
??0CExtDynamicMDIChildWnd@@QAE@PAVCExtDynamicControlBar@@@Z
??0CExtDynamicTabbedControlBar@@QAE@XZ
??0CExtEdit@@QAE@XZ
??0CExtEditBase@@QAE@XZ
??0CExtEditHotKey@@QAE@XZ
??0CExtEditHotKeyBase@@QAE@XZ
??0CExtEditMasked@@QAE@PB_W@Z
??0CExtEditWithBehavior@@QAE@XZ
??0CExtGridBaseWnd@@QAE@XZ
??0CExtGridCell@@QAE@ABV0@@Z
??0CExtGridCell@@QAE@PAVCExtGridDataProvider@@@Z
??0CExtGridCellBool@@QAE@ABV0@@Z
??0CExtGridCellBool@@QAE@PAVCExtGridDataProvider@@@Z
??0CExtGridCellButton@@QAE@ABV0@@Z
??0CExtGridCellButton@@QAE@PAVCExtGridDataProvider@@@Z
??0CExtGridCellCheckBox@@QAE@ABV0@@Z
??0CExtGridCellCheckBox@@QAE@PAVCExtGridDataProvider@@@Z
??0CExtGridCellCheckListComboBox@@QAE@ABV0@@Z
??0CExtGridCellCheckListComboBox@@QAE@PAVCExtGridDataProvider@@@Z
??0CExtGridCellColor@@QAE@ABV0@@Z
??0CExtGridCellColor@@QAE@ABVCExtGridCell@@@Z
??0CExtGridCellColor@@QAE@PAVCExtGridDataProvider@@AAVCPackedColor@0@VCSize@@_N33@Z
??0CExtGridCellColor@@QAE@PAVCExtGridDataProvider@@HVCSize@@_N22@Z
??0CExtGridCellColor@@QAE@PAVCExtGridDataProvider@@KVCSize@@_N22@Z
??0CExtGridCellComboBox@@QAE@ABV0@@Z
??0CExtGridCellComboBox@@QAE@PAVCExtGridDataProvider@@@Z
??0CExtGridCellCurrency@@QAE@ABV0@@Z
??0CExtGridCellCurrency@@QAE@PAVCExtGridDataProvider@@@Z
??0CExtGridCellDateTime@@QAE@ABV0@@Z
??0CExtGridCellDateTime@@QAE@PAVCExtGridDataProvider@@@Z
??0CExtGridCellDropListComboBox@@QAE@ABV0@@Z
??0CExtGridCellDropListComboBox@@QAE@PAVCExtGridDataProvider@@@Z
??0CExtGridCellDuration@@QAE@ABV0@@Z
??0CExtGridCellDuration@@QAE@PAVCExtGridDataProvider@@@Z
??0CExtGridCellEx@@QAE@ABV0@@Z
??0CExtGridCellEx@@QAE@ABVCExtGridCell@@@Z
??0CExtGridCellEx@@QAE@PAVCExtGridDataProvider@@@Z
??0CExtGridCellFile@@QAE@ABV0@@Z
??0CExtGridCellFile@@QAE@PAVCExtGridDataProvider@@@Z
??0CExtGridCellFileImage@@QAE@ABV0@@Z
??0CExtGridCellFileImage@@QAE@PAVCExtGridDataProvider@@@Z
??0CExtGridCellFolder@@QAE@ABV0@@Z
??0CExtGridCellFolder@@QAE@PAVCExtGridDataProvider@@@Z
??0CExtGridCellFont@@QAE@ABV0@@Z
??0CExtGridCellFont@@QAE@PAVCExtGridDataProvider@@@Z
??0CExtGridCellFontFaceName@@QAE@ABV0@@Z
??0CExtGridCellFontFaceName@@QAE@PAVCExtGridDataProvider@@@Z
??0CExtGridCellFraction@@QAE@ABV0@@Z
??0CExtGridCellFraction@@QAE@PAVCExtGridDataProvider@@@Z
??0CExtGridCellHeader@@QAE@ABV0@@Z
??0CExtGridCellHeader@@QAE@ABVCExtGridCell@@@Z
??0CExtGridCellHeader@@QAE@PAVCExtGridDataProvider@@@Z
??0CExtGridCellHeaderFilter@@QAE@ABV0@@Z
??0CExtGridCellHeaderFilter@@QAE@ABVCExtGridCell@@@Z
??0CExtGridCellHeaderFilter@@QAE@PAVCExtGridDataProvider@@@Z
??0CExtGridCellHotKey@@QAE@ABV0@@Z
??0CExtGridCellHotKey@@QAE@PAVCExtGridDataProvider@@@Z
??0CExtGridCellHyperLink@@QAE@ABV0@@Z
??0CExtGridCellHyperLink@@QAE@PAVCExtGridDataProvider@@@Z
??0CExtGridCellIPAddress@@QAE@ABV0@@Z
??0CExtGridCellIPAddress@@QAE@PAVCExtGridDataProvider@@@Z
??0CExtGridCellInplaceSlider@@QAE@ABV0@@Z
??0CExtGridCellInplaceSlider@@QAE@ABVCExtGridCell@@@Z
??0CExtGridCellInplaceSlider@@QAE@PAVCExtGridDataProvider@@@Z
??0CExtGridCellNumber@@QAE@ABV0@@Z
??0CExtGridCellNumber@@QAE@PAVCExtGridDataProvider@@@Z
??0CExtGridCellNumberBase@@QAE@ABV0@@Z
??0CExtGridCellNumberBase@@QAE@PAVCExtGridDataProvider@@@Z
??0CExtGridCellObjectSize@@QAE@ABV0@@Z
??0CExtGridCellObjectSize@@QAE@PAVCExtGridDataProvider@@@Z
??0CExtGridCellPassword@@QAE@ABV0@@Z
??0CExtGridCellPassword@@QAE@PAVCExtGridDataProvider@@@Z
??0CExtGridCellPercentage@@QAE@ABV0@@Z
??0CExtGridCellPercentage@@QAE@PAVCExtGridDataProvider@@@Z
??0CExtGridCellPicture@@QAE@ABV0@@Z
??0CExtGridCellPicture@@QAE@PAVCExtGridDataProvider@@@Z
??0CExtGridCellPictureBase@@QAE@ABV0@@Z
??0CExtGridCellPictureBase@@QAE@PAVCExtGridDataProvider@@@Z
??0CExtGridCellPictureRef@@QAE@ABV0@@Z
??0CExtGridCellPictureRef@@QAE@PAVCExtGridDataProvider@@PAVCExtBitmap@@@Z
??0CExtGridCellProgress@@QAE@ABV0@@Z
??0CExtGridCellProgress@@QAE@PAVCExtGridDataProvider@@@Z
??0CExtGridCellRadioButton@@QAE@ABV0@@Z
??0CExtGridCellRadioButton@@QAE@PAVCExtGridDataProvider@@@Z
??0CExtGridCellScientific@@QAE@ABV0@@Z
??0CExtGridCellScientific@@QAE@PAVCExtGridDataProvider@@@Z
??0CExtGridCellSlider@@QAE@ABV0@@Z
??0CExtGridCellSlider@@QAE@PAVCExtGridDataProvider@@@Z
??0CExtGridCellString@@QAE@ABV0@@Z
??0CExtGridCellString@@QAE@ABVCExtGridCell@@@Z
??0CExtGridCellString@@QAE@PAVCExtGridDataProvider@@@Z
??0CExtGridCellStringDM@@QAE@ABV0@@Z
??0CExtGridCellStringDM@@QAE@ABVCExtGridCell@@@Z
??0CExtGridCellStringDM@@QAE@PAVCExtGridDataProvider@@@Z
??0CExtGridCellUpDown@@QAE@ABV0@@Z
??0CExtGridCellUpDown@@QAE@PAVCExtGridDataProvider@@@Z
??0CExtGridCellUpDownColorPart@@QAE@ABV0@@Z
??0CExtGridCellUpDownColorPart@@QAE@PAVCExtGridDataProvider@@@Z
??0CExtGridCellUpDownFontWeight@@QAE@ABV0@@Z
??0CExtGridCellUpDownFontWeight@@QAE@PAVCExtGridDataProvider@@@Z
??0CExtGridCellUpDownRectPart@@QAE@ABV0@@Z
??0CExtGridCellUpDownRectPart@@QAE@PAVCExtGridDataProvider@@@Z
??0CExtGridCellVariant@@QAE@ABUtagDEC@@PAVCExtGridDataProvider@@@Z
??0CExtGridCellVariant@@QAE@ABUtagVARIANT@@PAVCExtGridDataProvider@@@Z
??0CExtGridCellVariant@@QAE@ABV0@@Z
??0CExtGridCellVariant@@QAE@ABVCExtGridCell@@@Z
??0CExtGridCellVariant@@QAE@CPAVCExtGridDataProvider@@@Z
??0CExtGridCellVariant@@QAE@EPAVCExtGridDataProvider@@@Z
??0CExtGridCellVariant@@QAE@FPAVCExtGridDataProvider@@@Z
??0CExtGridCellVariant@@QAE@GPAVCExtGridDataProvider@@@Z
??0CExtGridCellVariant@@QAE@HGPAVCExtGridDataProvider@@@Z
??0CExtGridCellVariant@@QAE@IGPAVCExtGridDataProvider@@@Z
??0CExtGridCellVariant@@QAE@JGPAVCExtGridDataProvider@@@Z
??0CExtGridCellVariant@@QAE@KPAVCExtGridDataProvider@@@Z
??0CExtGridCellVariant@@QAE@MPAVCExtGridDataProvider@@@Z
??0CExtGridCellVariant@@QAE@NGPAVCExtGridDataProvider@@@Z
??0CExtGridCellVariant@@QAE@PACPAVCExtGridDataProvider@@@Z
??0CExtGridCellVariant@@QAE@PAEPAVCExtGridDataProvider@@@Z
??0CExtGridCellVariant@@QAE@PAFPAVCExtGridDataProvider@@@Z
??0CExtGridCellVariant@@QAE@PAGGPAVCExtGridDataProvider@@@Z
??0CExtGridCellVariant@@QAE@PAHGPAVCExtGridDataProvider@@@Z
??0CExtGridCellVariant@@QAE@PAIGPAVCExtGridDataProvider@@@Z
??0CExtGridCellVariant@@QAE@PAJGPAVCExtGridDataProvider@@@Z
??0CExtGridCellVariant@@QAE@PAKPAVCExtGridDataProvider@@@Z
??0CExtGridCellVariant@@QAE@PAMPAVCExtGridDataProvider@@@Z
??0CExtGridCellVariant@@QAE@PANGPAVCExtGridDataProvider@@@Z
??0CExtGridCellVariant@@QAE@PAPAUIDispatch@@_NPAVCExtGridDataProvider@@@Z
??0CExtGridCellVariant@@QAE@PAPAUIUnknown@@_NPAVCExtGridDataProvider@@@Z
??0CExtGridCellVariant@@QAE@PAPBUtagDEC@@PAVCExtGridDataProvider@@@Z
??0CExtGridCellVariant@@QAE@PAPBUtagSAFEARRAY@@PAVCExtGridDataProvider@@@Z
??0CExtGridCellVariant@@QAE@PATtagCY@@PAVCExtGridDataProvider@@@Z
??0CExtGridCellVariant@@QAE@PAUIDispatch@@_NPAVCExtGridDataProvider@@@Z
??0CExtGridCellVariant@@QAE@PAUIUnknown@@_NPAVCExtGridDataProvider@@@Z
??0CExtGridCellVariant@@QAE@PAVCExtGridDataProvider@@@Z
??0CExtGridCellVariant@@QAE@PA_JPAVCExtGridDataProvider@@@Z
??0CExtGridCellVariant@@QAE@PA_KPAVCExtGridDataProvider@@@Z
??0CExtGridCellVariant@@QAE@PA_WGPAVCExtGridDataProvider@@@Z
??0CExtGridCellVariant@@QAE@PBDPAVCExtGridDataProvider@@@Z
??0CExtGridCellVariant@@QAE@PBGPAVCExtGridDataProvider@@@Z
??0CExtGridCellVariant@@QAE@PBUtagSAFEARRAY@@_NPAVCExtGridDataProvider@@@Z
??0CExtGridCellVariant@@QAE@PB_WPAVCExtGridDataProvider@@@Z
??0CExtGridCellVariant@@QAE@TtagCY@@PAVCExtGridDataProvider@@@Z
??0CExtGridCellVariant@@QAE@_JPAVCExtGridDataProvider@@@Z
??0CExtGridCellVariant@@QAE@_KPAVCExtGridDataProvider@@@Z
??0CExtGridCellVariant@@QAE@_NPAVCExtGridDataProvider@@@Z
??0CExtGridDataProvider@@QAE@XZ
??0CExtGridDataProviderBL@@QAE@XZ
??0CExtGridDataProviderMemory@@QAE@PAUIMalloc@@00K@Z
??0CExtGridDataProviderRT@@QAE@PAVCExtGridDataProvider@@_N1@Z
??0CExtGridDataProviderRecordset@@QAE@XZ
??0CExtGridDataSortOrder@@QAE@ABV0@@Z
??0CExtGridDataSortOrder@@QAE@XZ
??0CExtGridHitTestInfo@@QAE@ABV0@@Z
??0CExtGridHitTestInfo@@QAE@VCPoint@@@Z
??0CExtGridInplaceDateTime@@QAE@AAVCExtGridWnd@@AAVCExtGridCell@@JJJJHHABUtagRECT@@22JJ@Z
??0CExtGridInplaceDuration@@QAE@AAVCExtGridWnd@@AAVCExtGridCell@@JJJJHHABUtagRECT@@22JJ@Z
??0CExtGridInplaceEdit@@QAE@AAVCExtGridWnd@@AAVCExtGridCell@@JJJJHHABUtagRECT@@22JJ@Z
??0CExtGridInplaceEditIPAddress@@QAE@AAVCExtGridWnd@@AAVCExtGridCell@@JJJJHHABUtagRECT@@22JJ@Z
??0CExtGridInplaceHotKey@@QAE@AAVCExtGridWnd@@AAVCExtGridCell@@JJJJHHABUtagRECT@@22JJ@Z
??0CExtGridInplaceSlider@@QAE@AAVCExtGridWnd@@AAVCExtGridCell@@JJJJHHABUtagRECT@@22JJ@Z
??0CExtGridWnd@@QAE@XZ
??0CExtGroupBox@@QAE@XZ
??0CExtHeaderCtrl@@QAE@XZ
??0CExtHookSink@@QAE@ABV0@@Z
??0CExtHookSink@@QAE@_N@Z
??0CExtHookSpy@@QAE@ABV0@@Z
??0CExtHookSpy@@QAE@K@Z
??0CExtHyperLinkButton@@QAE@XZ
??0CExtIPAddressCtrl@@QAE@XZ
??0CExtIconButton@@QAE@XZ
??0CExtIconEditDlg@@QAE@PAVCWnd@@@Z
??0CExtImageEditWnd@@QAE@XZ
??0CExtImageList@@QAE@IKHPAUHINSTANCE__@@II@Z
??0CExtImageList@@QAE@XZ
??0CExtIntegrityCheckSum@@QAE@ABV0@@Z
??0CExtIntegrityCheckSum@@QAE@XZ
??0CExtLabel@@QAE@XZ
??0CExtListCtrl@@IAE@IPAVCWnd@@@Z
??0CExtListCtrl@@IAE@PB_WPAVCWnd@@@Z
??0CExtListCtrl@@QAE@XZ
??0CExtListCtrlDataSortOrder@@QAE@ABV0@@Z
??0CExtListCtrlDataSortOrder@@QAE@XZ
??0CExtLocalResourceHelper@@QAE@ABV0@@Z
??0CExtLocalResourceHelper@@QAE@PAUHINSTANCE__@@@Z
??0CExtLocalResourceHelper@@QAE@PB_W@Z
??0CExtLocalResourceHelper@@QAE@XZ
??0CExtMDP_MappingAPI@@QAE@ABU0@@Z
??0CExtMDP_MappingAPI@@QAE@XZ
??0CExtMdiWindowsListDlg@@QAE@PAUHWND__@@PAVCWnd@@@Z
??0CExtMdiWindowsListDlg@@QAE@PAVCMDIFrameWnd@@PAVCWnd@@@Z
??0CExtMemoryDC@@QAE@PAVCDC@@PBVCRect@@K@Z
??0CExtMenuControlBar@@QAE@XZ
??0CExtMiniDockFrameWnd@@QAE@XZ
??0CExtMouseCaptureSink@@QAE@ABV0@@Z
??0CExtMouseCaptureSink@@QAE@XZ
Sections
.text Size: 3.2MB - Virtual size: 3.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1.8MB - Virtual size: 1.8MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 113KB - Virtual size: 120KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4.2MB - Virtual size: 4.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 313KB - Virtual size: 312KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
wintaylor2.1/Programs/Imager/adencrypt.dll.dll windows:5 windows x86
5fa9b75aca85bc04dd16a37a3547d7c9
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
mfc90u
ord3286
ord2764
ord2893
ord2774
ord3140
ord2966
ord4728
ord3112
ord2983
ord2771
ord5650
ord1727
ord1791
ord1792
ord2139
ord5625
ord1442
ord3226
ord6376
ord5404
ord3682
ord6804
ord4174
ord6802
ord1641
ord2368
ord2375
ord2630
ord2612
ord2610
ord2628
ord2640
ord2617
ord2633
ord2638
ord2621
ord2623
ord2625
ord2619
ord2635
ord2615
ord971
ord967
ord969
ord965
ord960
ord5683
ord5685
ord265
ord266
ord4044
ord1262
ord6311
ord2069
ord2593
ord1182
ord1149
ord3953
ord4442
ord405
ord3360
ord2209
ord813
ord664
ord4131
ord6577
ord6065
ord4527
ord654
ord3528
ord4543
ord1599
ord4080
ord4081
ord4071
ord2891
ord4348
ord6466
ord4910
ord4681
ord3489
ord595
ord797
ord6579
ord4000
ord296
ord5632
ord4631
ord5167
ord5324
ord2208
ord1810
ord1809
ord1675
ord3353
ord6408
ord1492
ord4664
ord4682
ord374
ord639
ord3185
ord5008
ord6604
ord286
ord909
ord2904
ord2360
ord1938
ord287
ord692
ord1488
ord6791
ord2105
ord1602
ord4511
ord2279
ord1695
ord4657
ord3562
ord611
ord2274
ord1665
ord3355
ord6411
ord1754
ord1751
ord4345
ord1493
ord4652
ord5602
ord2074
ord5512
ord6800
ord4603
ord5664
ord3743
ord5154
ord4702
ord1728
ord605
ord1274
ord1241
ord1239
ord1264
ord1180
ord1233
ord2084
ord391
ord1152
ord1273
ord1271
ord1145
ord1076
ord322
ord802
ord5653
ord3794
ord280
ord600
ord794
ord589
ord321
ord1183
ord1088
ord1137
ord799
ord801
msvcr90
__clean_type_info_names_internal
_except_handler4_common
?_type_info_dtor_internal_method@type_info@@QAEXXZ
_crt_debugger_hook
?terminate@@YAXXZ
__CppXcptFilter
_adjust_fdiv
_amsg_exit
_initterm_e
_initterm
_encoded_null
free
_malloc_crt
_decode_pointer
_onexit
_lock
_encode_pointer
__dllonexit
_unlock
vswprintf_s
_vscwprintf
memcpy_s
wcsnlen
wcscmp
wcsrchr
wcsstr
wcsncpy
wcscpy
towupper
towlower
wctomb
sprintf_s
wcslen
___mb_cur_max_func
mbtowc
tolower
toupper
isspace
strerror
_gmtime64
strncpy_s
fseek
fclose
_wfopen_s
memcmp
_wmktemp
_mktemp
_chdir
_getcwd
_errno
_wrename
rename
_wstat64
_stat64
memmove
strlen
??8type_info@@QBE_NABV0@@Z
memset
memcpy
_purecall
memmove_s
??0exception@std@@QAE@ABV01@@Z
_CxxThrowException
_invalid_parameter_noinfo
??0exception@std@@QAE@XZ
?what@exception@std@@UBEPBDXZ
__CxxFrameHandler3
??0exception@std@@QAE@ABQBD@Z
??1exception@std@@UAE@XZ
kernel32
HeapSize
HeapReAlloc
GetProcessHeap
HeapAlloc
HeapDestroy
RaiseException
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSection
HeapFree
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
InterlockedCompareExchange
Sleep
InterlockedExchange
LocalAlloc
MultiByteToWideChar
FindResourceExW
LoadResource
LockResource
SizeofResource
FindResourceW
GetModuleFileNameW
LoadLibraryW
GetLocaleInfoW
GetSystemDefaultLCID
FreeLibrary
FormatMessageW
LocalFree
DeleteCriticalSection
WaitForSingleObject
CreateEventA
SetEvent
FindClose
SetCurrentDirectoryW
GetCurrentDirectoryW
CreateDirectoryW
CreateDirectoryA
RemoveDirectoryW
RemoveDirectoryA
DeleteFileW
DeleteFileA
GetFileAttributesExW
FindNextFileW
FindFirstFileW
GlobalMemoryStatusEx
GetFileSize
SetEndOfFile
WriteFile
ReadFile
SetLastError
SetFilePointer
GetLastError
CloseHandle
CreateFileW
user32
GetClientRect
GetWindowRect
EnableWindow
InvalidateRect
SendMessageW
UpdateWindow
SetProcessDefaultLayout
advapi32
CryptGenRandom
RegCloseKey
RegQueryValueExW
RegOpenKeyExW
CryptAcquireContextW
shell32
SHFileOperationW
shlwapi
PathAddBackslashW
PathAppendW
msvcp90
?append@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV12@I_W@Z
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@XZ
?resize@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEXI@Z
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@ABV01@@Z
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ID@Z
??0?$_String_val@DV?$allocator@D@std@@@std@@IAE@V?$allocator@D@1@@Z
?_Tidy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@IAEX_NI@Z
?max_size@?$allocator@D@std@@QBEIXZ
?allocate@?$allocator@D@std@@QAEPADI@Z
??0?$allocator@D@std@@QAE@ABV01@@Z
?deallocate@?$allocator@D@std@@QAEXPADI@Z
??$?MDU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@0@Z
??0?$allocator@D@std@@QAE@XZ
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@PB_W@Z
?reserve@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXI@Z
??Y?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@D@Z
??Y?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@PBD@Z
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
?empty@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBE_NXZ
?end@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE?AV?$_String_iterator@DU?$char_traits@D@std@@V?$allocator@D@2@@2@XZ
?begin@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE?AV?$_String_iterator@DU?$char_traits@D@std@@V?$allocator@D@2@@2@XZ
??1?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@XZ
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBD@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
?c_str@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEPBDXZ
?size@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIXZ
??$?HDU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@ABV10@0@Z
?data@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEPBDXZ
??$?9DU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@0@Z
?substr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV12@II@Z
?reserve@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEXI@Z
?c_str@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBEPB_WXZ
??A?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAA_WI@Z
?size@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBEIXZ
?length@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIXZ
?max@?$numeric_limits@K@std@@SAKXZ
?min@?$numeric_limits@K@std@@SAKXZ
?deallocate@?$allocator@_W@std@@QAEXPA_WI@Z
?_Tidy@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@IAEX_NI@Z
??0?$_String_val@_WV?$allocator@_W@std@@@std@@IAE@V?$allocator@_W@1@@Z
??0?$allocator@_W@std@@QAE@XZ
??0?$allocator@_W@std@@QAE@ABV01@@Z
?allocate@?$allocator@_W@std@@QAEPA_WI@Z
?max_size@?$allocator@_W@std@@QBEIXZ
?max@?$numeric_limits@_J@std@@SA_JXZ
?min@?$numeric_limits@_J@std@@SA_JXZ
??0id@locale@std@@QAE@I@Z
??A?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAADI@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ID@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBDI@Z
?rend@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV?$reverse_iterator@V?$_String_const_iterator@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@2@XZ
?rbegin@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV?$reverse_iterator@V?$_String_const_iterator@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@2@XZ
?end@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV?$_String_const_iterator@DU?$char_traits@D@std@@V?$allocator@D@2@@2@XZ
??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@ABV01@@Z
?begin@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV?$_String_const_iterator@DU?$char_traits@D@std@@V?$allocator@D@2@@2@XZ
?_Myptr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@IAEPADXZ
??_D?$basic_ostringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXXZ
?str@?$basic_ostringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@2@XZ
?fail@ios_base@std@@QBE_NXZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@PBX@Z
??0?$basic_ostringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@H@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@N@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@M@Z
boost_thread-vc90-mt-1_39
??0lock_error@boost@@QAE@ABV01@@Z
??1lock_error@boost@@UAE@XZ
??0lock_error@boost@@QAE@XZ
??0thread_exception@boost@@QAE@ABV01@@Z
??0thread_resource_error@boost@@QAE@ABV01@@Z
??1thread_resource_error@boost@@UAE@XZ
??0thread_resource_error@boost@@QAE@XZ
boost_date_time-vc90-mt-1_39
??Bgreg_month@gregorian@boost@@QBEGXZ
??0greg_month@gregorian@boost@@QAE@G@Z
libeay32
ord279
ord2206
ord1654
ord1653
ord629
ord624
ord654
ord640
ord176
ord411
ord2141
ord1305
ord1307
ord1309
ord1304
ord909
ord93
ord78
ord52
ord746
ord364
ord444
ord66
ord389
ord390
ord2012
ord947
ord283
ord1795
ord391
ord775
ord641
ord1291
ord3212
ord3033
ord3024
ord3712
ord3581
ord3765
ord3356
ord3479
ord3633
ord490
ord286
ord281
ord2034
ord497
ord493
ord3315
ord3313
ord2747
ord963
ord964
ord3844
ord965
ord2784
Exports
Exports
DoADEncrypt
DoADEncryptDlg
GetCertInfo
IsADEncrypted
SerializeADEncryptKeyInfo
Sections
.text Size: 239KB - Virtual size: 238KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 69KB - Virtual size: 69KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 19KB - Virtual size: 19KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
wintaylor2.1/Programs/Imager/boost_date_time-vc90-mt-1_39.dll.dll windows:5 windows x86
0aff5fc462b53b03dfc362fd4284795d
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
msvcp90
?tolower@?$ctype@D@std@@QBEDD@Z
??$?8DU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA_NPBDABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@@Z
?_Locimp_Addfac@_Locimp@locale@std@@CAXPAV123@PAVfacet@23@I@Z
??0_Locimp@locale@std@@AAE@ABV012@@Z
??1_Locimp@locale@std@@MAE@XZ
??1locale@std@@QAE@XZ
?classic@locale@std@@SAABV12@XZ
?end@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV?$_String_const_iterator@DU?$char_traits@D@std@@V?$allocator@D@2@@2@XZ
?begin@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV?$_String_const_iterator@DU?$char_traits@D@std@@V?$allocator@D@2@@2@XZ
?end@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBE?AV?$_String_const_iterator@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@2@XZ
?begin@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBE?AV?$_String_const_iterator@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@2@XZ
?_Tidy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@IAEX_NI@Z
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ID@Z
?reserve@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXI@Z
?_Tidy@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@IAEX_NI@Z
?append@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV12@I_W@Z
??0_Lockit@std@@QAE@H@Z
??1?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@XZ
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@PB_W@Z
?replace@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@V?$_String_const_iterator@DU?$char_traits@D@std@@V?$allocator@D@2@@2@0ABV12@@Z
?replace@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV12@V?$_String_const_iterator@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@2@0ABV12@@Z
?begin@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE?AV?$_String_iterator@DU?$char_traits@D@std@@V?$allocator@D@2@@2@XZ
?end@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE?AV?$_String_iterator@DU?$char_traits@D@std@@V?$allocator@D@2@@2@XZ
?begin@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE?AV?$_String_iterator@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@2@XZ
?end@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE?AV?$_String_iterator@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@2@XZ
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@ABV01@@Z
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@XZ
??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@ABV01@@Z
??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@PBD@Z
?_Decref@facet@locale@std@@QAEPAV123@XZ
?id@?$ctype@D@std@@2V0locale@2@A
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z
??1_Lockit@std@@QAE@XZ
?_Id_cnt@id@locale@std@@0HA
?_Getfacet@locale@std@@QBEPBVfacet@12@I@Z
?_Getcat@?$ctype@D@std@@SAIPAPBVfacet@locale@2@PBV42@@Z
?_Incref@facet@locale@std@@QAEXXZ
?sputc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QAEG_W@Z
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHD@Z
??0facet@locale@std@@IAE@I@Z
??$?MDU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@0@Z
??1facet@locale@std@@UAE@XZ
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBD@Z
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
?reserve@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEXI@Z
msvcr90
_unlock
__dllonexit
_encode_pointer
_lock
_onexit
_decode_pointer
_malloc_crt
free
_encoded_null
_initterm
_initterm_e
_amsg_exit
_adjust_fdiv
__CppXcptFilter
?terminate@@YAXXZ
?_type_info_dtor_internal_method@type_info@@QAEXXZ
_crt_debugger_hook
_except_handler4_common
__clean_type_info_names_internal
abort
??2@YAPAXI@Z
??0bad_cast@std@@QAE@ABV01@@Z
_CxxThrowException
??1bad_cast@std@@UAE@XZ
??0bad_cast@std@@QAE@PBD@Z
_invalid_parameter_noinfo
??0exception@std@@QAE@ABV01@@Z
_purecall
__CxxFrameHandler3
??0exception@std@@QAE@XZ
??3@YAXPAX@Z
??1exception@std@@UAE@XZ
kernel32
Sleep
InterlockedCompareExchange
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
DisableThreadLibraryCalls
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
InterlockedExchange
Exports
Exports
??0?$constrained_value@V?$simple_exception_policy@G$00$0M@Ubad_month@gregorian@boost@@@CV@boost@@@CV@boost@@QAE@G@Z
??0?$constrained_value@V?$simple_exception_policy@G$0A@$05Ubad_weekday@gregorian@boost@@@CV@boost@@@CV@boost@@QAE@G@Z
??0greg_month@gregorian@boost@@QAE@G@Z
??0greg_month@gregorian@boost@@QAE@W4months_of_year@date_time@2@@Z
??0greg_weekday@gregorian@boost@@QAE@G@Z
??4?$constrained_value@V?$simple_exception_policy@G$00$0M@Ubad_month@gregorian@boost@@@CV@boost@@@CV@boost@@QAEAAV012@ABV012@@Z
??4?$constrained_value@V?$simple_exception_policy@G$00$0M@Ubad_month@gregorian@boost@@@CV@boost@@@CV@boost@@QAEAAV012@G@Z
??4?$constrained_value@V?$simple_exception_policy@G$0A@$05Ubad_weekday@gregorian@boost@@@CV@boost@@@CV@boost@@QAEAAV012@ABV012@@Z
??4?$constrained_value@V?$simple_exception_policy@G$0A@$05Ubad_weekday@gregorian@boost@@@CV@boost@@@CV@boost@@QAEAAV012@G@Z
??4greg_month@gregorian@boost@@QAEAAV012@ABV012@@Z
??4greg_weekday@gregorian@boost@@QAEAAV012@ABV012@@Z
??B?$constrained_value@V?$simple_exception_policy@G$00$0M@Ubad_month@gregorian@boost@@@CV@boost@@@CV@boost@@QBEGXZ
??B?$constrained_value@V?$simple_exception_policy@G$0A@$05Ubad_weekday@gregorian@boost@@@CV@boost@@@CV@boost@@QBEGXZ
??Bgreg_month@gregorian@boost@@QBEGXZ
?as_enum@greg_month@gregorian@boost@@QBE?AW4months_of_year@date_time@3@XZ
?as_enum@greg_weekday@gregorian@boost@@QBE?AW4weekdays@date_time@3@XZ
?as_long_string@greg_month@gregorian@boost@@QBEPBDD@Z
?as_long_string@greg_month@gregorian@boost@@QBEPBDXZ
?as_long_string@greg_month@gregorian@boost@@QBEPB_W_W@Z
?as_long_string@greg_weekday@gregorian@boost@@QBEPBDXZ
?as_long_wstring@greg_month@gregorian@boost@@QBEPB_WXZ
?as_long_wstring@greg_weekday@gregorian@boost@@QBEPB_WXZ
?as_number@greg_month@gregorian@boost@@QBEGXZ
?as_number@greg_weekday@gregorian@boost@@QBEGXZ
?as_short_string@greg_month@gregorian@boost@@QBEPBDD@Z
?as_short_string@greg_month@gregorian@boost@@QBEPBDXZ
?as_short_string@greg_month@gregorian@boost@@QBEPB_W_W@Z
?as_short_string@greg_weekday@gregorian@boost@@QBEPBDXZ
?as_short_wstring@greg_month@gregorian@boost@@QBEPB_WXZ
?as_short_wstring@greg_weekday@gregorian@boost@@QBEPB_WXZ
?assign@?$constrained_value@V?$simple_exception_policy@G$00$0M@Ubad_month@gregorian@boost@@@CV@boost@@@CV@boost@@AAEXG@Z
?assign@?$constrained_value@V?$simple_exception_policy@G$0A@$05Ubad_weekday@gregorian@boost@@@CV@boost@@@CV@boost@@AAEXG@Z
?create_facet_def@gregorian@boost@@YAPAV?$all_date_names_put@Ugreg_facet_config@gregorian@boost@@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@date_time@2@D@Z
?create_facet_def@gregorian@boost@@YAPAV?$all_date_names_put@Ugreg_facet_config@gregorian@boost@@_WV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@date_time@2@_W@Z
?generate_locale@gregorian@boost@@YA?AVlocale@std@@AAV34@D@Z
?generate_locale@gregorian@boost@@YA?AVlocale@std@@AAV34@_W@Z
?get_month_map_ptr@greg_month@gregorian@boost@@SA?AV?$shared_ptr@V?$map@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@GU?$less@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@2@V?$allocator@U?$pair@$$CBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@G@std@@@2@@std@@@3@XZ
?max@?$constrained_value@V?$simple_exception_policy@G$00$0M@Ubad_month@gregorian@boost@@@CV@boost@@@CV@boost@@SAGXZ
?max@?$constrained_value@V?$simple_exception_policy@G$0A@$05Ubad_weekday@gregorian@boost@@@CV@boost@@@CV@boost@@SAGXZ
?min@?$constrained_value@V?$simple_exception_policy@G$00$0M@Ubad_month@gregorian@boost@@@CV@boost@@@CV@boost@@SAGXZ
?min@?$constrained_value@V?$simple_exception_policy@G$0A@$05Ubad_weekday@gregorian@boost@@@CV@boost@@@CV@boost@@SAGXZ
?nth_as_str@date_time@boost@@YAPBDH@Z
?special_value_from_string@gregorian@boost@@YA?AW4special_values@date_time@2@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
Sections
.text Size: 19KB - Virtual size: 18KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 17KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 692B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
wintaylor2.1/Programs/Imager/boost_filesystem-vc90-mt-1_39.dll.dll windows:5 windows x86
2ac2ed583bd13371dc81a6b33df29f39
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
boost_system-vc90-mt-1_39
?get_generic_category@system@boost@@YAABVerror_category@12@XZ
?get_system_category@system@boost@@YAABVerror_category@12@XZ
msvcp90
?find_first_not_of@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDII@Z
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??Y?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@ABV01@@Z
??Y?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@PBD@Z
??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@PBD@Z
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@ABV01@@Z
??1?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@XZ
??4?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV01@PB_W@Z
??Y?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV01@PB_W@Z
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@PB_W@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBD@Z
??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@ABV01@@Z
??4?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV01@ABV01@@Z
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@XZ
??Y?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@D@Z
?find@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDII@Z
?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB
??Y?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV01@_W@Z
?find@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBEI_WI@Z
?npos@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@2IB
?rfind@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDII@Z
?find_last_of@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBEI_WI@Z
?end@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE?AV?$_String_iterator@DU?$char_traits@D@std@@V?$allocator@D@2@@2@XZ
?erase@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@II@Z
?erase@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV12@II@Z
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
?end@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE?AV?$_String_iterator@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@2@XZ
?substr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV12@II@Z
?substr@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBE?AV12@II@Z
?_Incref@facet@locale@std@@QAEXXZ
?_Getcat@?$codecvt@_WDH@std@@SAIPAPBVfacet@locale@2@PBV42@@Z
?_Getfacet@locale@std@@QBEPBVfacet@12@I@Z
?_Decref@facet@locale@std@@QAEPAV123@XZ
??1?$codecvt@_WDH@std@@MAE@XZ
??0?$codecvt@_WDH@std@@QAE@I@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBDI@Z
??$?9DU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@PBD@Z
?find_first_of@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDII@Z
?end@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV?$_String_const_iterator@DU?$char_traits@D@std@@V?$allocator@D@2@@2@XZ
??$?8DU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@PBD@Z
?_Id_cnt@id@locale@std@@0HA
??1locale@std@@QAE@XZ
??4locale@std@@QAEAAV01@ABV01@@Z
??0locale@std@@QAE@PBDH@Z
??0_Lockit@std@@QAE@H@Z
?id@?$codecvt@_WDH@std@@2V0locale@2@A
??1_Lockit@std@@QAE@XZ
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z
msvcr90
__clean_type_info_names_internal
_except_handler4_common
?_type_info_dtor_internal_method@type_info@@QAEXXZ
_crt_debugger_hook
__CppXcptFilter
_adjust_fdiv
_amsg_exit
_initterm_e
_initterm
_encoded_null
free
_malloc_crt
?terminate@@YAXXZ
_decode_pointer
_onexit
_lock
_encode_pointer
_unlock
abort
??0bad_cast@std@@QAE@ABV01@@Z
??1bad_cast@std@@UAE@XZ
??0bad_cast@std@@QAE@PBD@Z
_CxxThrowException
??2@YAPAXI@Z
??_V@YAXPAX@Z
_invalid_parameter_noinfo
_purecall
??0exception@std@@QAE@ABV01@@Z
??3@YAXPAX@Z
__CxxFrameHandler3
??0exception@std@@QAE@XZ
??1exception@std@@UAE@XZ
__dllonexit
kernel32
GetSystemTimeAsFileTime
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
DisableThreadLibraryCalls
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
InterlockedCompareExchange
Sleep
InterlockedExchange
GetFileInformationByHandle
GetShortPathNameW
WideCharToMultiByte
FindNextFileW
SetFileTime
GetFileTime
FindNextFileA
FindClose
FindFirstFileA
CopyFileA
MoveFileA
FindFirstFileW
CopyFileW
MoveFileW
GetLastError
CreateHardLinkA
CreateDirectoryA
DeleteFileA
RemoveDirectoryA
GetFullPathNameA
SetCurrentDirectoryA
GetCurrentDirectoryA
GetDiskFreeSpaceExA
CloseHandle
CreateFileA
GetFileAttributesExA
CreateHardLinkW
CreateDirectoryW
DeleteFileW
RemoveDirectoryW
GetFullPathNameW
GetDiskFreeSpaceExW
SetCurrentDirectoryW
GetCurrentDirectoryW
CreateFileW
GetFileAttributesExW
GetFileAttributesW
GetFileAttributesA
GetCurrentThreadId
Exports
Exports
??0utf8_codecvt_facet@detail@filesystem@boost@@QAE@I@Z
??1utf8_codecvt_facet@detail@filesystem@boost@@UAE@XZ
??4wpath_traits@filesystem@boost@@QAEAAU012@ABU012@@Z
??_7utf8_codecvt_facet@detail@filesystem@boost@@6B@
??_Futf8_codecvt_facet@detail@filesystem@boost@@QAEXXZ
?copy_file_api@detail@filesystem@boost@@YA?AVerror_code@system@3@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@0@Z
?copy_file_api@detail@filesystem@boost@@YA?AVerror_code@system@3@ABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@0@Z
?create_directory_api@detail@filesystem@boost@@YA?AU?$pair@Verror_code@system@boost@@_N@std@@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@5@@Z
?create_directory_api@detail@filesystem@boost@@YA?AU?$pair@Verror_code@system@boost@@_N@std@@ABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@5@@Z
?create_file_api@detail@filesystem@boost@@YA_NABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@H@Z
?create_hard_link_api@detail@filesystem@boost@@YA?AVerror_code@system@3@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@0@Z
?create_hard_link_api@detail@filesystem@boost@@YA?AVerror_code@system@3@ABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@0@Z
?create_symlink_api@detail@filesystem@boost@@YA?AVerror_code@system@3@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@0@Z
?create_symlink_api@detail@filesystem@boost@@YA?AVerror_code@system@3@ABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@0@Z
?dir_itr_close@detail@filesystem@boost@@YA?AVerror_code@system@3@AAPAX@Z
?dir_itr_first@detail@filesystem@boost@@YA?AVerror_code@system@3@AAPAXABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAV67@AAVfile_status@23@3@Z
?dir_itr_first@detail@filesystem@boost@@YA?AVerror_code@system@3@AAPAXABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@AAV67@AAVfile_status@23@3@Z
?dir_itr_increment@detail@filesystem@boost@@YA?AVerror_code@system@3@AAPAXAAV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAVfile_status@23@2@Z
?dir_itr_increment@detail@filesystem@boost@@YA?AVerror_code@system@3@AAPAXAAV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@AAVfile_status@23@2@Z
?do_always_noconv@utf8_codecvt_facet@detail@filesystem@boost@@MBE_NXZ
?do_encoding@utf8_codecvt_facet@detail@filesystem@boost@@MBEHXZ
?do_in@utf8_codecvt_facet@detail@filesystem@boost@@MBEHAAHPBD1AAPBDPA_W3AAPA_W@Z
?do_length@utf8_codecvt_facet@detail@filesystem@boost@@MBEHABHPBD1I@Z
?do_max_length@utf8_codecvt_facet@detail@filesystem@boost@@MBEHXZ
?do_out@utf8_codecvt_facet@detail@filesystem@boost@@MBEHAAHPB_W1AAPB_WPAD3AAPAD@Z
?do_unshift@utf8_codecvt_facet@detail@filesystem@boost@@MBEHAAHPAD1AAPAD@Z
?equivalent_api@detail@filesystem@boost@@YA?AU?$pair@Verror_code@system@boost@@_N@std@@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@5@0@Z
?equivalent_api@detail@filesystem@boost@@YA?AU?$pair@Verror_code@system@boost@@_N@std@@ABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@5@0@Z
?file_size_api@detail@filesystem@boost@@YA?AU?$pair@Verror_code@system@boost@@_K@std@@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@5@@Z
?file_size_api@detail@filesystem@boost@@YA?AU?$pair@Verror_code@system@boost@@_K@std@@ABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@5@@Z
?get_cont_octet_count@utf8_codecvt_facet@detail@filesystem@boost@@KAIE@Z
?get_cont_octet_out_count@utf8_codecvt_facet@detail@filesystem@boost@@IBEH_W@Z
?get_current_path_api@detail@filesystem@boost@@YA?AVerror_code@system@3@AAV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
?get_current_path_api@detail@filesystem@boost@@YA?AVerror_code@system@3@AAV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z
?get_full_path_name_api@detail@filesystem@boost@@YA?AVerror_code@system@3@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAV67@@Z
?get_full_path_name_api@detail@filesystem@boost@@YA?AVerror_code@system@3@ABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@AAV67@@Z
?get_octet_count@utf8_codecvt_facet@detail@filesystem@boost@@KAIE@Z
?imbue@wpath_traits@filesystem@boost@@SAXABVlocale@std@@@Z
?imbue@wpath_traits@filesystem@boost@@SA_NABVlocale@std@@ABUnothrow_t@5@@Z
?invalid_continuing_octet@utf8_codecvt_facet@detail@filesystem@boost@@IBE_NE@Z
?invalid_leading_octet@utf8_codecvt_facet@detail@filesystem@boost@@IBE_NE@Z
?is_empty_api@detail@filesystem@boost@@YA?AU?$pair@Verror_code@system@boost@@_N@std@@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@5@@Z
?is_empty_api@detail@filesystem@boost@@YA?AU?$pair@Verror_code@system@boost@@_N@std@@ABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@5@@Z
?last_write_time_api@detail@filesystem@boost@@YA?AU?$pair@Verror_code@system@boost@@_J@std@@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@5@@Z
?last_write_time_api@detail@filesystem@boost@@YA?AU?$pair@Verror_code@system@boost@@_J@std@@ABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@5@@Z
?last_write_time_api@detail@filesystem@boost@@YA?AVerror_code@system@3@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@_J@Z
?last_write_time_api@detail@filesystem@boost@@YA?AVerror_code@system@3@ABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@_J@Z
?narrow_path_api@detail@filesystem@boost@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@ABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@5@@Z
?native@filesystem@boost@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
?not_found_error@detail@filesystem@boost@@YA?AVerror_code@system@3@XZ
?portable_directory_name@filesystem@boost@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
?portable_file_name@filesystem@boost@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
?portable_name@filesystem@boost@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
?portable_posix_name@filesystem@boost@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
?possible_large_file_size_support@detail@filesystem@boost@@YA_NXZ
?remove_api@detail@filesystem@boost@@YA?AVerror_code@system@3@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
?remove_api@detail@filesystem@boost@@YA?AVerror_code@system@3@ABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z
?rename_api@detail@filesystem@boost@@YA?AVerror_code@system@3@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@0@Z
?rename_api@detail@filesystem@boost@@YA?AVerror_code@system@3@ABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@0@Z
?set_current_path_api@detail@filesystem@boost@@YA?AVerror_code@system@3@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
?set_current_path_api@detail@filesystem@boost@@YA?AVerror_code@system@3@ABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z
?space_api@detail@filesystem@boost@@YA?AU?$pair@Verror_code@system@boost@@Uspace_info@filesystem@3@@std@@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@5@@Z
?space_api@detail@filesystem@boost@@YA?AU?$pair@Verror_code@system@boost@@Uspace_info@filesystem@3@@std@@ABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@5@@Z
?status_api@detail@filesystem@boost@@YA?AVfile_status@23@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAVerror_code@system@3@@Z
?status_api@detail@filesystem@boost@@YA?AVfile_status@23@ABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@AAVerror_code@system@3@@Z
?symbolic_link_exists_api@detail@filesystem@boost@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
?symbolic_link_exists_api@detail@filesystem@boost@@YA_NABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z
?throws@detail@filesystem@boost@@3Verror_code@system@3@A
?to_external@wpath_traits@filesystem@boost@@SA?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@ABV?$basic_path@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@Uwpath_traits@filesystem@boost@@@23@ABV45@@Z
?to_internal@wpath_traits@filesystem@boost@@SA?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@ABV45@@Z
?windows_name@filesystem@boost@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
Sections
.text Size: 34KB - Virtual size: 34KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 22KB - Virtual size: 22KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 692B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
wintaylor2.1/Programs/Imager/boost_regex-vc90-mt-1_39.dll.dll windows:5 windows x86
819db6c02ef716c88dbc42d794e46e8e
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
msvcp90
?open@?$messages@D@std@@QBEHABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@2@ABVlocale@2@@Z
?swap@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXAAV12@@Z
?reserve@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXI@Z
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ABV12@@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@V?$_String_const_iterator@DU?$char_traits@D@std@@V?$allocator@D@2@@1@0@Z
?end@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE?AV?$_String_iterator@DU?$char_traits@D@std@@V?$allocator@D@2@@2@XZ
?begin@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV?$_String_const_iterator@DU?$char_traits@D@std@@V?$allocator@D@2@@2@XZ
?end@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV?$_String_const_iterator@DU?$char_traits@D@std@@V?$allocator@D@2@@2@XZ
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBDI@Z
?compare@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEHIIPBDI@Z
??$?MDU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@0@Z
?compare@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEHABV12@@Z
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ID@Z
??A?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEABDI@Z
?_Tidy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@IAEX_NI@Z
??$?8DU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@0@Z
??$?NDU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@0@Z
??$?ODU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@0@Z
?insert@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE?AV?$_String_iterator@DU?$char_traits@D@std@@V?$allocator@D@2@@2@V?$_String_const_iterator@DU?$char_traits@D@std@@V?$allocator@D@2@@2@D@Z
??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@PBD@Z
??$?8DU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA_NPBDABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@@Z
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@PB_W@Z
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@ABV01@@Z
??0?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@PBG@Z
??0?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@ABV01@@Z
??1?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@XZ
?append@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV12@I_W@Z
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@XZ
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@PB_W0@Z
??1?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@XZ
?append@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV12@IG@Z
??0?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@XZ
??0?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@PBG0@Z
?erase@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV12@II@Z
?npos@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@2IB
?begin@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE?AV?$_String_iterator@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@2@XZ
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@I_W@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBD@Z
??4?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV01@ABV01@@Z
?assign@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV12@PB_W0@Z
?_Tidy@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@IAEX_NI@Z
?reserve@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEXI@Z
?_Tidy@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@IAEX_NI@Z
?reserve@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEXI@Z
?end@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE?AV?$_String_iterator@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@2@XZ
?compare@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBEHPB_W@Z
?assign@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV12@I_W@Z
??$?O_WU?$char_traits@_W@std@@V?$allocator@_W@1@@std@@YA_NABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@0@0@Z
?insert@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE?AV?$_String_iterator@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@2@V?$_String_const_iterator@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@2@_W@Z
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@PB_WI@Z
??$?M_WU?$char_traits@_W@std@@V?$allocator@_W@1@@std@@YA_NABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@0@0@Z
?compare@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBEHABV12@@Z
?assign@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV12@ABV12@@Z
??A?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBEAB_WI@Z
?length@?$char_traits@G@std@@SAIPBG@Z
??4?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV01@ABV01@@Z
??0?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@PBGI@Z
?compare@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QBEHPBG@Z
??$?MGU?$char_traits@G@std@@V?$allocator@G@1@@std@@YA_NABV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@0@0@Z
?compare@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QBEHABV12@@Z
??0?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@IG@Z
?erase@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV12@II@Z
?npos@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@2IB
?assign@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV12@ABV12@@Z
?begin@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE?AV?$_String_iterator@GU?$char_traits@G@std@@V?$allocator@G@2@@2@XZ
?assign@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV12@PBG0@Z
??$?8GU?$char_traits@G@std@@V?$allocator@G@1@@std@@YA_NABV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@0@PBG@Z
?assign@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV12@IG@Z
??A?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QBEABGI@Z
??$?OGU?$char_traits@G@std@@V?$allocator@G@1@@std@@YA_NABV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@0@0@Z
?insert@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE?AV?$_String_iterator@GU?$char_traits@G@std@@V?$allocator@G@2@@2@V?$_String_const_iterator@GU?$char_traits@G@std@@V?$allocator@G@2@@2@G@Z
?end@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE?AV?$_String_iterator@GU?$char_traits@G@std@@V?$allocator@G@2@@2@XZ
?_Decref@facet@locale@std@@QAEPAV123@XZ
??$?HDU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@ABV10@0@Z
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ID@Z
?get@?$messages@D@std@@QBE?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@2@HHHABV32@@Z
?close@?$messages@D@std@@QBEXH@Z
?_Init@locale@std@@CAPAV_Locimp@12@XZ
?_Getgloballocale@locale@std@@CAPAV_Locimp@12@XZ
?id@?$collate@D@std@@2V0locale@2@A
?_Getcat@?$collate@D@std@@SAIPAPBVfacet@locale@2@PBV42@@Z
?id@?$messages@D@std@@2V0locale@2@A
?_Getcat@?$messages@D@std@@SAIPAPBVfacet@locale@2@PBV42@@Z
??0_Lockit@std@@QAE@H@Z
?id@?$ctype@D@std@@2V0locale@2@A
??1_Lockit@std@@QAE@XZ
?_Id_cnt@id@locale@std@@0HA
?_Getfacet@locale@std@@QBEPBVfacet@12@I@Z
?_Getcat@?$ctype@D@std@@SAIPAPBVfacet@locale@2@PBV42@@Z
??4locale@std@@QAEAAV01@ABV01@@Z
??1locale@std@@QAE@XZ
?_Incref@facet@locale@std@@QAEXXZ
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBD0@Z
??$?8DU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@PBD@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ID@Z
?begin@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE?AV?$_String_iterator@DU?$char_traits@D@std@@V?$allocator@D@2@@2@XZ
?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB
?erase@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@II@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBD0@Z
??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@ABV01@@Z
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??$?8_WU?$char_traits@_W@std@@V?$allocator@_W@1@@std@@YA_NABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@0@PB_W@Z
msvcr90
sprintf_s
strcat_s
strcpy_s
memcpy
memmove
toupper
towupper
??8type_info@@QBE_NABV0@@Z
wcstol
iswxdigit
iswpunct
iswdigit
iswalpha
iswlower
iswupper
iswcntrl
iswprint
iswspace
wcsxfrm
_vswprintf_c_l
wcscpy_s
abort
?terminate@@YAXXZ
_unlock
__dllonexit
_encode_pointer
_lock
_onexit
_decode_pointer
_malloc_crt
free
_encoded_null
_initterm
_initterm_e
_amsg_exit
_adjust_fdiv
__CppXcptFilter
_crt_debugger_hook
?_type_info_dtor_internal_method@type_info@@QAEXXZ
_except_handler4_common
__clean_type_info_names_internal
tolower
isxdigit
ispunct
memmove_s
??2@YAPAXI@Z
_purecall
?what@exception@std@@UBEPBDXZ
??0exception@std@@QAE@ABQBD@Z
memset
??0bad_cast@std@@QAE@ABV01@@Z
??1bad_cast@std@@UAE@XZ
_CxxThrowException
??0bad_cast@std@@QAE@PBD@Z
??4exception@std@@QAEAAV01@ABV01@@Z
??_V@YAXPAX@Z
??0exception@std@@QAE@ABV01@@Z
??3@YAXPAX@Z
??0exception@std@@QAE@XZ
??1exception@std@@UAE@XZ
strxfrm
_invalid_parameter_noinfo
strtol
__CxxFrameHandler3
isspace
isprint
iscntrl
isupper
islower
isalpha
isdigit
towlower
user32
LoadStringA
LoadStringW
kernel32
MapViewOfFile
CloseHandle
CreateFileMappingA
CreateFileA
UnmapViewOfFile
FindFirstFileA
FindNextFileA
FindClose
Sleep
InterlockedCompareExchange
InterlockedExchange
GetUserDefaultLCID
GetStringTypeExA
GetStringTypeExW
FreeLibrary
LCMapStringA
LCMapStringW
LoadLibraryA
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
DisableThreadLibraryCalls
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
GetFileSize
Exports
Exports
??0?$basic_regex@DU?$regex_traits@DV?$w32_regex_traits@D@boost@@@boost@@@boost@@QAE@ABV01@@Z
??0?$basic_regex@DU?$regex_traits@DV?$w32_regex_traits@D@boost@@@boost@@@boost@@QAE@PBD0I@Z
??0?$basic_regex@DU?$regex_traits@DV?$w32_regex_traits@D@boost@@@boost@@@boost@@QAE@PBDI@Z
??0?$basic_regex@DU?$regex_traits@DV?$w32_regex_traits@D@boost@@@boost@@@boost@@QAE@PBDII@Z
??0?$basic_regex@DU?$regex_traits@DV?$w32_regex_traits@D@boost@@@boost@@@boost@@QAE@XZ
??0?$basic_regex@GU?$regex_traits@GV?$w32_regex_traits@G@boost@@@boost@@@boost@@QAE@ABV01@@Z
??0?$basic_regex@GU?$regex_traits@GV?$w32_regex_traits@G@boost@@@boost@@@boost@@QAE@PBG0I@Z
??0?$basic_regex@GU?$regex_traits@GV?$w32_regex_traits@G@boost@@@boost@@@boost@@QAE@PBGI@Z
??0?$basic_regex@GU?$regex_traits@GV?$w32_regex_traits@G@boost@@@boost@@@boost@@QAE@PBGII@Z
??0?$basic_regex@GU?$regex_traits@GV?$w32_regex_traits@G@boost@@@boost@@@boost@@QAE@XZ
??0?$basic_regex@_WU?$regex_traits@_WV?$w32_regex_traits@_W@boost@@@boost@@@boost@@QAE@ABV01@@Z
??0?$basic_regex@_WU?$regex_traits@_WV?$w32_regex_traits@_W@boost@@@boost@@@boost@@QAE@PB_W0I@Z
??0?$basic_regex@_WU?$regex_traits@_WV?$w32_regex_traits@_W@boost@@@boost@@@boost@@QAE@PB_WI@Z
??0?$basic_regex@_WU?$regex_traits@_WV?$w32_regex_traits@_W@boost@@@boost@@@boost@@QAE@PB_WII@Z
??0?$basic_regex@_WU?$regex_traits@_WV?$w32_regex_traits@_W@boost@@@boost@@@boost@@QAE@XZ
??0?$c_regex_traits@D@boost@@QAE@XZ
??0?$c_regex_traits@G@boost@@QAE@XZ
??0?$c_regex_traits@_W@boost@@QAE@XZ
??0?$cpp_regex_traits_base@D@re_detail@boost@@QAE@ABU012@@Z
??0?$cpp_regex_traits_base@D@re_detail@boost@@QAE@ABVlocale@std@@@Z
??0?$cpp_regex_traits_char_layer@D@re_detail@boost@@QAE@ABU?$cpp_regex_traits_base@D@12@@Z
??0?$cpp_regex_traits_char_layer@D@re_detail@boost@@QAE@ABV012@@Z
??0?$cpp_regex_traits_char_layer@D@re_detail@boost@@QAE@ABVlocale@std@@@Z
??0?$match_results@PBDV?$allocator@U?$sub_match@PBD@boost@@@std@@@boost@@QAE@ABV01@@Z
??0?$match_results@PBDV?$allocator@U?$sub_match@PBD@boost@@@std@@@boost@@QAE@ABV?$allocator@U?$sub_match@PBD@boost@@@std@@@Z
??0?$match_results@PBGV?$allocator@U?$sub_match@PBG@boost@@@std@@@boost@@QAE@ABV01@@Z
??0?$match_results@PBGV?$allocator@U?$sub_match@PBG@boost@@@std@@@boost@@QAE@ABV?$allocator@U?$sub_match@PBG@boost@@@std@@@Z
??0?$match_results@PB_WV?$allocator@U?$sub_match@PB_W@boost@@@std@@@boost@@QAE@ABV01@@Z
??0?$match_results@PB_WV?$allocator@U?$sub_match@PB_W@boost@@@std@@@boost@@QAE@ABV?$allocator@U?$sub_match@PB_W@boost@@@std@@@Z
??0?$match_results@V?$_String_const_iterator@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V?$allocator@U?$sub_match@V?$_String_const_iterator@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@boost@@@2@@boost@@QAE@ABV01@@Z
??0?$match_results@V?$_String_const_iterator@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V?$allocator@U?$sub_match@V?$_String_const_iterator@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@boost@@@2@@boost@@QAE@ABV?$allocator@U?$sub_match@V?$_String_const_iterator@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@boost@@@std@@@Z
??0?$match_results@V?$_String_const_iterator@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@V?$allocator@U?$sub_match@V?$_String_const_iterator@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@@boost@@@2@@boost@@QAE@ABV01@@Z
??0?$match_results@V?$_String_const_iterator@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@V?$allocator@U?$sub_match@V?$_String_const_iterator@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@@boost@@@2@@boost@@QAE@ABV?$allocator@U?$sub_match@V?$_String_const_iterator@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@@boost@@@std@@@Z
??0?$match_results@V?$_String_const_iterator@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V?$allocator@U?$sub_match@V?$_String_const_iterator@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@boost@@@2@@boost@@QAE@ABV01@@Z
??0?$match_results@V?$_String_const_iterator@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V?$allocator@U?$sub_match@V?$_String_const_iterator@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@boost@@@2@@boost@@QAE@ABV?$allocator@U?$sub_match@V?$_String_const_iterator@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@boost@@@std@@@Z
??0?$perl_matcher@PBDV?$allocator@U?$sub_match@PBD@boost@@@std@@U?$regex_traits@DV?$w32_regex_traits@D@boost@@@boost@@@re_detail@boost@@AAE@ABV012@@Z
??0?$perl_matcher@PBDV?$allocator@U?$sub_match@PBD@boost@@@std@@U?$regex_traits@DV?$w32_regex_traits@D@boost@@@boost@@@re_detail@boost@@QAE@PBD0AAV?$match_results@PBDV?$allocator@U?$sub_match@PBD@boost@@@std@@@2@ABV?$basic_regex@DU?$regex_traits@DV?$w32_regex_traits@D@boost@@@boost@@@2@W4_match_flags@regex_constants@2@0@Z
??0?$perl_matcher@PBGV?$allocator@U?$sub_match@PBG@boost@@@std@@U?$regex_traits@GV?$w32_regex_traits@G@boost@@@boost@@@re_detail@boost@@AAE@ABV012@@Z
??0?$perl_matcher@PBGV?$allocator@U?$sub_match@PBG@boost@@@std@@U?$regex_traits@GV?$w32_regex_traits@G@boost@@@boost@@@re_detail@boost@@QAE@PBG0AAV?$match_results@PBGV?$allocator@U?$sub_match@PBG@boost@@@std@@@2@ABV?$basic_regex@GU?$regex_traits@GV?$w32_regex_traits@G@boost@@@boost@@@2@W4_match_flags@regex_constants@2@0@Z
??0?$perl_matcher@PB_WV?$allocator@U?$sub_match@PB_W@boost@@@std@@U?$regex_traits@_WV?$w32_regex_traits@_W@boost@@@boost@@@re_detail@boost@@AAE@ABV012@@Z
??0?$perl_matcher@PB_WV?$allocator@U?$sub_match@PB_W@boost@@@std@@U?$regex_traits@_WV?$w32_regex_traits@_W@boost@@@boost@@@re_detail@boost@@QAE@PB_W0AAV?$match_results@PB_WV?$allocator@U?$sub_match@PB_W@boost@@@std@@@2@ABV?$basic_regex@_WU?$regex_traits@_WV?$w32_regex_traits@_W@boost@@@boost@@@2@W4_match_flags@regex_constants@2@0@Z
??0?$perl_matcher@V?$_String_const_iterator@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V?$allocator@U?$sub_match@V?$_String_const_iterator@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@boost@@@2@U?$regex_traits@DV?$w32_regex_traits@D@boost@@@boost@@@re_detail@boost@@AAE@ABV012@@Z
??0?$perl_matcher@V?$_String_const_iterator@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V?$allocator@U?$sub_match@V?$_String_const_iterator@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@boost@@@2@U?$regex_traits@DV?$w32_regex_traits@D@boost@@@boost@@@re_detail@boost@@QAE@V?$_String_const_iterator@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@0AAV?$match_results@V?$_String_const_iterator@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V?$allocator@U?$sub_match@V?$_String_const_iterator@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@boost@@@2@@2@ABV?$basic_regex@DU?$regex_traits@DV?$w32_regex_traits@D@boost@@@boost@@@2@W4_match_flags@regex_constants@2@0@Z
??0?$perl_matcher@V?$_String_const_iterator@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@V?$allocator@U?$sub_match@V?$_String_const_iterator@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@@boost@@@2@U?$regex_traits@GV?$w32_regex_traits@G@boost@@@boost@@@re_detail@boost@@AAE@ABV012@@Z
??0?$perl_matcher@V?$_String_const_iterator@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@V?$allocator@U?$sub_match@V?$_String_const_iterator@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@@boost@@@2@U?$regex_traits@GV?$w32_regex_traits@G@boost@@@boost@@@re_detail@boost@@QAE@V?$_String_const_iterator@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@0AAV?$match_results@V?$_String_const_iterator@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@V?$allocator@U?$sub_match@V?$_String_const_iterator@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@@boost@@@2@@2@ABV?$basic_regex@GU?$regex_traits@GV?$w32_regex_traits@G@boost@@@boost@@@2@W4_match_flags@regex_constants@2@0@Z
??0?$perl_matcher@V?$_String_const_iterator@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V?$allocator@U?$sub_match@V?$_String_const_iterator@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@boost@@@2@U?$regex_traits@_WV?$w32_regex_traits@_W@boost@@@boost@@@re_detail@boost@@AAE@ABV012@@Z
??0?$perl_matcher@V?$_String_const_iterator@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V?$allocator@U?$sub_match@V?$_String_const_iterator@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@boost@@@2@U?$regex_traits@_WV?$w32_regex_traits@_W@boost@@@boost@@@re_detail@boost@@QAE@V?$_String_const_iterator@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@0AAV?$match_results@V?$_String_const_iterator@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V?$allocator@U?$sub_match@V?$_String_const_iterator@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@boost@@@2@@2@ABV?$basic_regex@_WU?$regex_traits@_WV?$w32_regex_traits@_W@boost@@@boost@@@2@W4_match_flags@regex_constants@2@0@Z
??0?$w32_regex_traits_base@D@re_detail@boost@@QAE@K@Z
??0?$w32_regex_traits_char_layer@D@re_detail@boost@@QAE@K@Z
??0RegEx@boost@@QAE@ABV01@@Z
??0RegEx@boost@@QAE@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@_N@Z
??0RegEx@boost@@QAE@PBD_N@Z
??0RegEx@boost@@QAE@XZ
??0abstract_protected_call@re_detail@boost@@QAE@ABV012@@Z
??0abstract_protected_call@re_detail@boost@@QAE@XZ
??0directory_iterator@re_detail@boost@@QAE@ABV012@@Z
??0directory_iterator@re_detail@boost@@QAE@PBD@Z
??0directory_iterator@re_detail@boost@@QAE@XZ
??0file_iterator@re_detail@boost@@QAE@ABV012@@Z
??0file_iterator@re_detail@boost@@QAE@PBD@Z
??0file_iterator@re_detail@boost@@QAE@XZ
??0mapfile@re_detail@boost@@QAE@PBD@Z
??0mapfile@re_detail@boost@@QAE@XZ
??0raw_storage@re_detail@boost@@QAE@I@Z
??0raw_storage@re_detail@boost@@QAE@XZ
??0regex_error@boost@@QAE@ABV01@@Z
??0regex_error@boost@@QAE@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@W4error_type@regex_constants@1@H@Z
??0regex_error@boost@@QAE@W4error_type@regex_constants@1@@Z
??0scoped_static_mutex_lock@boost@@QAE@AAVstatic_mutex@1@_N@Z
??1?$basic_regex@DU?$regex_traits@DV?$w32_regex_traits@D@boost@@@boost@@@boost@@QAE@XZ
??1?$basic_regex@GU?$regex_traits@GV?$w32_regex_traits@G@boost@@@boost@@@boost@@QAE@XZ
??1?$basic_regex@_WU?$regex_traits@_WV?$w32_regex_traits@_W@boost@@@boost@@@boost@@QAE@XZ
??1?$cpp_regex_traits_base@D@re_detail@boost@@QAE@XZ
??1?$cpp_regex_traits_char_layer@D@re_detail@boost@@QAE@XZ
??1?$match_results@PBDV?$allocator@U?$sub_match@PBD@boost@@@std@@@boost@@QAE@XZ
??1?$match_results@PBGV?$allocator@U?$sub_match@PBG@boost@@@std@@@boost@@QAE@XZ
??1?$match_results@PB_WV?$allocator@U?$sub_match@PB_W@boost@@@std@@@boost@@QAE@XZ
??1?$match_results@V?$_String_const_iterator@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V?$allocator@U?$sub_match@V?$_String_const_iterator@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@boost@@@2@@boost@@QAE@XZ
??1?$match_results@V?$_String_const_iterator@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@V?$allocator@U?$sub_match@V?$_String_const_iterator@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@@boost@@@2@@boost@@QAE@XZ
??1?$match_results@V?$_String_const_iterator@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V?$allocator@U?$sub_match@V?$_String_const_iterator@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@boost@@@2@@boost@@QAE@XZ
??1?$perl_matcher@PBDV?$allocator@U?$sub_match@PBD@boost@@@std@@U?$regex_traits@DV?$w32_regex_traits@D@boost@@@boost@@@re_detail@boost@@QAE@XZ
??1?$perl_matcher@PBGV?$allocator@U?$sub_match@PBG@boost@@@std@@U?$regex_traits@GV?$w32_regex_traits@G@boost@@@boost@@@re_detail@boost@@QAE@XZ
??1?$perl_matcher@PB_WV?$allocator@U?$sub_match@PB_W@boost@@@std@@U?$regex_traits@_WV?$w32_regex_traits@_W@boost@@@boost@@@re_detail@boost@@QAE@XZ
??1?$perl_matcher@V?$_String_const_iterator@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V?$allocator@U?$sub_match@V?$_String_const_iterator@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@boost@@@2@U?$regex_traits@DV?$w32_regex_traits@D@boost@@@boost@@@re_detail@boost@@QAE@XZ
??1?$perl_matcher@V?$_String_const_iterator@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@V?$allocator@U?$sub_match@V?$_String_const_iterator@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@@boost@@@2@U?$regex_traits@GV?$w32_regex_traits@G@boost@@@boost@@@re_detail@boost@@QAE@XZ
??1?$perl_matcher@V?$_String_const_iterator@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V?$allocator@U?$sub_match@V?$_String_const_iterator@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@boost@@@2@U?$regex_traits@_WV?$w32_regex_traits@_W@boost@@@boost@@@re_detail@boost@@QAE@XZ
??1RegEx@boost@@QAE@XZ
??1abstract_protected_call@re_detail@boost@@UAE@XZ
??1directory_iterator@re_detail@boost@@QAE@XZ
??1file_iterator@re_detail@boost@@QAE@XZ
??1mapfile@re_detail@boost@@QAE@XZ
??1raw_storage@re_detail@boost@@QAE@XZ
??1regex_error@boost@@UAE@XZ
??1scoped_static_mutex_lock@boost@@QAE@XZ
??4?$basic_regex@DU?$regex_traits@DV?$w32_regex_traits@D@boost@@@boost@@@boost@@QAIAAV01@ABV01@@Z
??4?$basic_regex@DU?$regex_traits@DV?$w32_regex_traits@D@boost@@@boost@@@boost@@QAIAAV01@PBD@Z
??4?$basic_regex@GU?$regex_traits@GV?$w32_regex_traits@G@boost@@@boost@@@boost@@QAIAAV01@ABV01@@Z
??4?$basic_regex@GU?$regex_traits@GV?$w32_regex_traits@G@boost@@@boost@@@boost@@QAIAAV01@PBG@Z
??4?$basic_regex@_WU?$regex_traits@_WV?$w32_regex_traits@_W@boost@@@boost@@@boost@@QAIAAV01@ABV01@@Z
??4?$basic_regex@_WU?$regex_traits@_WV?$w32_regex_traits@_W@boost@@@boost@@@boost@@QAIAAV01@PB_W@Z
??4?$cpp_regex_traits_base@D@re_detail@boost@@QAEAAU012@ABU012@@Z
??4?$cpp_regex_traits_char_layer@D@re_detail@boost@@QAEAAV012@ABV012@@Z
??4?$match_results@PBDV?$allocator@U?$sub_match@PBD@boost@@@std@@@boost@@QAEAAV01@ABV01@@Z
??4?$match_results@PBGV?$allocator@U?$sub_match@PBG@boost@@@std@@@boost@@QAEAAV01@ABV01@@Z
??4?$match_results@PB_WV?$allocator@U?$sub_match@PB_W@boost@@@std@@@boost@@QAEAAV01@ABV01@@Z
??4?$match_results@V?$_String_const_iterator@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V?$allocator@U?$sub_match@V?$_String_const_iterator@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@boost@@@2@@boost@@QAEAAV01@ABV01@@Z
??4?$match_results@V?$_String_const_iterator@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@V?$allocator@U?$sub_match@V?$_String_const_iterator@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@@boost@@@2@@boost@@QAEAAV01@ABV01@@Z
??4?$match_results@V?$_String_const_iterator@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V?$allocator@U?$sub_match@V?$_String_const_iterator@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@boost@@@2@@boost@@QAEAAV01@ABV01@@Z
??4?$perl_matcher@PBDV?$allocator@U?$sub_match@PBD@boost@@@std@@U?$regex_traits@DV?$w32_regex_traits@D@boost@@@boost@@@re_detail@boost@@AAEAAV012@ABV012@@Z
??4?$perl_matcher@PBGV?$allocator@U?$sub_match@PBG@boost@@@std@@U?$regex_traits@GV?$w32_regex_traits@G@boost@@@boost@@@re_detail@boost@@AAEAAV012@ABV012@@Z
??4?$perl_matcher@PB_WV?$allocator@U?$sub_match@PB_W@boost@@@std@@U?$regex_traits@_WV?$w32_regex_traits@_W@boost@@@boost@@@re_detail@boost@@AAEAAV012@ABV012@@Z
??4?$perl_matcher@V?$_String_const_iterator@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V?$allocator@U?$sub_match@V?$_String_const_iterator@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@boost@@@2@U?$regex_traits@DV?$w32_regex_traits@D@boost@@@boost@@@re_detail@boost@@AAEAAV012@ABV012@@Z
??4?$perl_matcher@V?$_String_const_iterator@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@V?$allocator@U?$sub_match@V?$_String_const_iterator@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@@boost@@@2@U?$regex_traits@GV?$w32_regex_traits@G@boost@@@boost@@@re_detail@boost@@AAEAAV012@ABV012@@Z
??4?$perl_matcher@V?$_String_const_iterator@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V?$allocator@U?$sub_match@V?$_String_const_iterator@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@boost@@@2@U?$regex_traits@_WV?$w32_regex_traits@_W@boost@@@boost@@@re_detail@boost@@AAEAAV012@ABV012@@Z
??4?$w32_regex_traits_base@D@re_detail@boost@@QAEAAU012@ABU012@@Z
??4?$w32_regex_traits_char_layer@D@re_detail@boost@@QAEAAV012@ABV012@@Z
??4RegEx@boost@@QAEAAV01@ABV01@@Z
??4RegEx@boost@@QAEAAV01@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
??4RegEx@boost@@QAEAAV01@PBD@Z
??4abstract_protected_call@re_detail@boost@@QAEAAV012@ABV012@@Z
??4directory_iterator@re_detail@boost@@QAEAAV012@ABV012@@Z
??4file_iterator@re_detail@boost@@QAEAAV012@ABV012@@Z
??4mapfile@re_detail@boost@@QAEAAV012@ABV012@@Z
??4raw_storage@re_detail@boost@@QAEAAV012@ABV012@@Z
??4regbase@boost@@QAEAAV01@ABV01@@Z
??4regex_error@boost@@QAEAAV01@ABV01@@Z
??8?$basic_regex@DU?$regex_traits@DV?$w32_regex_traits@D@boost@@@boost@@@boost@@QBI_NABV01@@Z
??8?$basic_regex@GU?$regex_traits@GV?$w32_regex_traits@G@boost@@@boost@@@boost@@QBI_NABV01@@Z
??8?$basic_regex@_WU?$regex_traits@_WV?$w32_regex_traits@_W@boost@@@boost@@@boost@@QBI_NABV01@@Z
??8?$cpp_regex_traits_base@D@re_detail@boost@@QBE_NABU012@@Z
??8?$match_results@PBDV?$allocator@U?$sub_match@PBD@boost@@@std@@@boost@@QBE_NABV01@@Z
??8?$match_results@PBGV?$allocator@U?$sub_match@PBG@boost@@@std@@@boost@@QBE_NABV01@@Z
??8?$match_results@PB_WV?$allocator@U?$sub_match@PB_W@boost@@@std@@@boost@@QBE_NABV01@@Z
??8?$match_results@V?$_String_const_iterator@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V?$allocator@U?$sub_match@V?$_String_const_iterator@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@boost@@@2@@boost@@QBE_NABV01@@Z
??8?$match_results@V?$_String_const_iterator@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@V?$allocator@U?$sub_match@V?$_String_const_iterator@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@@boost@@@2@@boost@@QBE_NABV01@@Z
??8?$match_results@V?$_String_const_iterator@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V?$allocator@U?$sub_match@V?$_String_const_iterator@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@boost@@@2@@boost@@QBE_NABV01@@Z
??9?$basic_regex@DU?$regex_traits@DV?$w32_regex_traits@D@boost@@@boost@@@boost@@QBI_NABV01@@Z
??9?$basic_regex@GU?$regex_traits@GV?$w32_regex_traits@G@boost@@@boost@@@boost@@QBI_NABV01@@Z
??9?$basic_regex@_WU?$regex_traits@_WV?$w32_regex_traits@_W@boost@@@boost@@@boost@@QBI_NABV01@@Z
??9?$match_results@PBDV?$allocator@U?$sub_match@PBD@boost@@@std@@@boost@@QBE_NABV01@@Z
??9?$match_results@PBGV?$allocator@U?$sub_match@PBG@boost@@@std@@@boost@@QBE_NABV01@@Z
??9?$match_results@PB_WV?$allocator@U?$sub_match@PB_W@boost@@@std@@@boost@@QBE_NABV01@@Z
??9?$match_results@V?$_String_const_iterator@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V?$allocator@U?$sub_match@V?$_String_const_iterator@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@boost@@@2@@boost@@QBE_NABV01@@Z
??9?$match_results@V?$_String_const_iterator@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@V?$allocator@U?$sub_match@V?$_String_const_iterator@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@@boost@@@2@@boost@@QBE_NABV01@@Z
??9?$match_results@V?$_String_const_iterator@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V?$allocator@U?$sub_match@V?$_String_const_iterator@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@boost@@@2@@boost@@QBE_NABV01@@Z
??A?$match_results@PBDV?$allocator@U?$sub_match@PBD@boost@@@std@@@boost@@QBEABU?$sub_match@PBD@1@H@Z
??A?$match_results@PBGV?$allocator@U?$sub_match@PBG@boost@@@std@@@boost@@QBEABU?$sub_match@PBG@1@H@Z
??A?$match_results@PB_WV?$allocator@U?$sub_match@PB_W@boost@@@std@@@boost@@QBEABU?$sub_match@PB_W@1@H@Z
??A?$match_results@V?$_String_const_iterator@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V?$allocator@U?$sub_match@V?$_String_const_iterator@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@boost@@@2@@boost@@QBEABU?$sub_match@V?$_String_const_iterator@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@1@H@Z
??A?$match_results@V?$_String_const_iterator@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@V?$allocator@U?$sub_match@V?$_String_const_iterator@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@@boost@@@2@@boost@@QBEABU?$sub_match@V?$_String_const_iterator@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@@1@H@Z
??A?$match_results@V?$_String_const_iterator@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V?$allocator@U?$sub_match@V?$_String_const_iterator@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@boost@@@2@@boost@@QBEABU?$sub_match@V?$_String_const_iterator@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@1@H@Z
??ARegEx@boost@@QBE?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@H@Z
??Bscoped_static_mutex_lock@boost@@QBEPBXXZ
??Ddirectory_iterator@re_detail@boost@@QAEPBDXZ
??Dfile_iterator@re_detail@boost@@QAEPBDXZ
??Edirectory_iterator@re_detail@boost@@QAE?AV012@H@Z
??Edirectory_iterator@re_detail@boost@@QAEAAV012@XZ
??Efile_iterator@re_detail@boost@@QAE?AV012@H@Z
??Efile_iterator@re_detail@boost@@QAEAAV012@XZ
??M?$basic_regex@DU?$regex_traits@DV?$w32_regex_traits@D@boost@@@boost@@@boost@@QBI_NABV01@@Z
??M?$basic_regex@GU?$regex_traits@GV?$w32_regex_traits@G@boost@@@boost@@@boost@@QBI_NABV01@@Z
??M?$basic_regex@_WU?$regex_traits@_WV?$w32_regex_traits@_W@boost@@@boost@@@boost@@QBI_NABV01@@Z
??M?$cpp_regex_traits_base@D@re_detail@boost@@QBE_NABU012@@Z
??N?$basic_regex@DU?$regex_traits@DV?$w32_regex_traits@D@boost@@@boost@@@boost@@QBI_NABV01@@Z
??N?$basic_regex@GU?$regex_traits@GV?$w32_regex_traits@G@boost@@@boost@@@boost@@QBI_NABV01@@Z
??N?$basic_regex@_WU?$regex_traits@_WV?$w32_regex_traits@_W@boost@@@boost@@@boost@@QBI_NABV01@@Z
??O?$basic_regex@DU?$regex_traits@DV?$w32_regex_traits@D@boost@@@boost@@@boost@@QBI_NABV01@@Z
??O?$basic_regex@GU?$regex_traits@GV?$w32_regex_traits@G@boost@@@boost@@@boost@@QBI_NABV01@@Z
??O?$basic_regex@_WU?$regex_traits@_WV?$w32_regex_traits@_W@boost@@@boost@@@boost@@QBI_NABV01@@Z
??P?$basic_regex@DU?$regex_traits@DV?$w32_regex_traits@D@boost@@@boost@@@boost@@QBI_NABV01@@Z
??P?$basic_regex@GU?$regex_traits@GV?$w32_regex_traits@G@boost@@@boost@@@boost@@QBI_NABV01@@Z
??P?$basic_regex@_WU?$regex_traits@_WV?$w32_regex_traits@_W@boost@@@boost@@@boost@@QBI_NABV01@@Z
??_7abstract_protected_call@re_detail@boost@@6B@
??_7regex_error@boost@@6B@
??_F?$match_results@PBDV?$allocator@U?$sub_match@PBD@boost@@@std@@@boost@@QAEXXZ
??_F?$match_results@PBGV?$allocator@U?$sub_match@PBG@boost@@@std@@@boost@@QAEXXZ
??_F?$match_results@PB_WV?$allocator@U?$sub_match@PB_W@boost@@@std@@@boost@@QAEXXZ
??_F?$match_results@V?$_String_const_iterator@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V?$allocator@U?$sub_match@V?$_String_const_iterator@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@boost@@@2@@boost@@QAEXXZ
??_F?$match_results@V?$_String_const_iterator@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@V?$allocator@U?$sub_match@V?$_String_const_iterator@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@@boost@@@2@@boost@@QAEXXZ
??_F?$match_results@V?$_String_const_iterator@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V?$allocator@U?$sub_match@V?$_String_const_iterator@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@boost@@@2@@boost@@QAEXXZ
?Expression@RegEx@boost@@QBE?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@XZ
?FindFiles@RegEx@boost@@QAEIP6A_NPBD@Z0_NW4_match_flags@regex_constants@2@@Z
?FindFiles@RegEx@boost@@QAEIP6A_NPBD@ZABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@_NW4_match_flags@regex_constants@2@@Z
?Grep@RegEx@boost@@QAEIAAV?$vector@IV?$allocator@I@std@@@std@@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@4@W4_match_flags@regex_constants@2@@Z
?Grep@RegEx@boost@@QAEIAAV?$vector@IV?$allocator@I@std@@@std@@PBDW4_match_flags@regex_constants@2@@Z
?Grep@RegEx@boost@@QAEIAAV?$vector@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V?$allocator@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@2@@std@@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@4@W4_match_flags@regex_constants@2@@Z
?Grep@RegEx@boost@@QAEIAAV?$vector@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V?$allocator@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@2@@std@@PBDW4_match_flags@regex_constants@2@@Z
?Grep@RegEx@boost@@QAEIP6A_NABV12@@ZABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@W4_match_flags@regex_constants@2@@Z
?Grep@RegEx@boost@@QAEIP6A_NABV12@@ZPBDW4_match_flags@regex_constants@2@@Z
?GrepFiles@RegEx@boost@@QAEIP6A_NPBDABV12@@Z0_NW4_match_flags@regex_constants@2@@Z
?GrepFiles@RegEx@boost@@QAEIP6A_NPBDABV12@@ZABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@_NW4_match_flags@regex_constants@2@@Z
?Length@RegEx@boost@@QBEIH@Z
?Marks@RegEx@boost@@QBEIXZ
?Match@RegEx@boost@@QAE_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@W4_match_flags@regex_constants@2@@Z
?Match@RegEx@boost@@QAE_NPBDW4_match_flags@regex_constants@2@@Z
?Matched@RegEx@boost@@QBE_NH@Z
?Merge@RegEx@boost@@QAE?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@ABV34@0_NW4_match_flags@regex_constants@2@@Z
?Merge@RegEx@boost@@QAE?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@PBD0_NW4_match_flags@regex_constants@2@@Z
?Position@RegEx@boost@@QBEIH@Z
?Search@RegEx@boost@@QAE_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@W4_match_flags@regex_constants@2@@Z
?Search@RegEx@boost@@QAE_NPBDW4_match_flags@regex_constants@2@@Z
?SetExpression@RegEx@boost@@QAEIABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@_N@Z
?SetExpression@RegEx@boost@@QAEIPBD_N@Z
?Split@RegEx@boost@@QAEIAAV?$vector@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V?$allocator@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@2@@std@@AAV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@4@W4_match_flags@regex_constants@2@I@Z
?What@RegEx@boost@@QBE?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@H@Z
?_fi_sep@re_detail@boost@@3PBDB
?align@raw_storage@re_detail@boost@@QAIXXZ
?assign@?$basic_regex@DU?$regex_traits@DV?$w32_regex_traits@D@boost@@@boost@@@boost@@QAEAAV12@ABV12@@Z
?assign@?$basic_regex@DU?$regex_traits@DV?$w32_regex_traits@D@boost@@@boost@@@boost@@QAEAAV12@PBD0I@Z
?assign@?$basic_regex@DU?$regex_traits@DV?$w32_regex_traits@D@boost@@@boost@@@boost@@QAEAAV12@PBDI@Z
?assign@?$basic_regex@DU?$regex_traits@DV?$w32_regex_traits@D@boost@@@boost@@@boost@@QAEAAV12@PBDII@Z
?assign@?$basic_regex@GU?$regex_traits@GV?$w32_regex_traits@G@boost@@@boost@@@boost@@QAEAAV12@ABV12@@Z
?assign@?$basic_regex@GU?$regex_traits@GV?$w32_regex_traits@G@boost@@@boost@@@boost@@QAEAAV12@PBG0I@Z
?assign@?$basic_regex@GU?$regex_traits@GV?$w32_regex_traits@G@boost@@@boost@@@boost@@QAEAAV12@PBGI@Z
?assign@?$basic_regex@GU?$regex_traits@GV?$w32_regex_traits@G@boost@@@boost@@@boost@@QAEAAV12@PBGII@Z
?assign@?$basic_regex@_WU?$regex_traits@_WV?$w32_regex_traits@_W@boost@@@boost@@@boost@@QAEAAV12@ABV12@@Z
?assign@?$basic_regex@_WU?$regex_traits@_WV?$w32_regex_traits@_W@boost@@@boost@@@boost@@QAEAAV12@PB_W0I@Z
?assign@?$basic_regex@_WU?$regex_traits@_WV?$w32_regex_traits@_W@boost@@@boost@@@boost@@QAEAAV12@PB_WI@Z
?assign@?$basic_regex@_WU?$regex_traits@_WV?$w32_regex_traits@_W@boost@@@boost@@@boost@@QAEAAV12@PB_WII@Z
?base@?$match_results@PBDV?$allocator@U?$sub_match@PBD@boost@@@std@@@boost@@QBEPBDXZ
?base@?$match_results@PBGV?$allocator@U?$sub_match@PBG@boost@@@std@@@boost@@QBEPBGXZ
?base@?$match_results@PB_WV?$allocator@U?$sub_match@PB_W@boost@@@std@@@boost@@QBEPB_WXZ
?base@?$match_results@V?$_String_const_iterator@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V?$allocator@U?$sub_match@V?$_String_const_iterator@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@boost@@@2@@boost@@QBE?AV?$_String_const_iterator@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@XZ
?base@?$match_results@V?$_String_const_iterator@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@V?$allocator@U?$sub_match@V?$_String_const_iterator@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@@boost@@@2@@boost@@QBE?AV?$_String_const_iterator@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@XZ
?base@?$match_results@V?$_String_const_iterator@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V?$allocator@U?$sub_match@V?$_String_const_iterator@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@boost@@@2@@boost@@QBE?AV?$_String_const_iterator@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@XZ
?begin@?$basic_regex@DU?$regex_traits@DV?$w32_regex_traits@D@boost@@@boost@@@boost@@QBIPBDXZ
?begin@?$basic_regex@GU?$regex_traits@GV?$w32_regex_traits@G@boost@@@boost@@@boost@@QBIPBGXZ
?begin@?$basic_regex@_WU?$regex_traits@_WV?$w32_regex_traits@_W@boost@@@boost@@@boost@@QBIPB_WXZ
?begin@?$match_results@PBDV?$allocator@U?$sub_match@PBD@boost@@@std@@@boost@@QBE?AV?$_Vector_const_iterator@U?$sub_match@PBD@boost@@V?$allocator@U?$sub_match@PBD@boost@@@std@@@std@@XZ
?begin@?$match_results@PBGV?$allocator@U?$sub_match@PBG@boost@@@std@@@boost@@QBE?AV?$_Vector_const_iterator@U?$sub_match@PBG@boost@@V?$allocator@U?$sub_match@PBG@boost@@@std@@@std@@XZ
?begin@?$match_results@PB_WV?$allocator@U?$sub_match@PB_W@boost@@@std@@@boost@@QBE?AV?$_Vector_const_iterator@U?$sub_match@PB_W@boost@@V?$allocator@U?$sub_match@PB_W@boost@@@std@@@std@@XZ
?begin@?$match_results@V?$_String_const_iterator@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V?$allocator@U?$sub_match@V?$_String_const_iterator@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@boost@@@2@@boost@@QBE?AV?$_Vector_const_iterator@U?$sub_match@V?$_String_const_iterator@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@boost@@V?$allocator@U?$sub_match@V?$_String_const_iterator@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@boost@@@std@@@std@@XZ
?begin@?$match_results@V?$_String_const_iterator@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@V?$allocator@U?$sub_match@V?$_String_const_iterator@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@@boost@@@2@@boost@@QBE?AV?$_Vector_const_iterator@U?$sub_match@V?$_String_const_iterator@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@@boost@@V?$allocator@U?$sub_match@V?$_String_const_iterator@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@@boost@@@std@@@std@@XZ
?begin@?$match_results@V?$_String_const_iterator@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V?$allocator@U?$sub_match@V?$_String_const_iterator@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@boost@@@2@@boost@@QBE?AV?$_Vector_const_iterator@U?$sub_match@V?$_String_const_iterator@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@boost@@V?$allocator@U?$sub_match@V?$_String_const_iterator@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@boost@@@std@@@std@@XZ
?begin@mapfile@re_detail@boost@@QAEPBDXZ
?can_be_null@?$basic_regex@DU?$regex_traits@DV?$w32_regex_traits@D@boost@@@boost@@@boost@@QBE_NXZ
?can_be_null@?$basic_regex@GU?$regex_traits@GV?$w32_regex_traits@G@boost@@@boost@@@boost@@QBE_NXZ
?can_be_null@?$basic_regex@_WU?$regex_traits@_WV?$w32_regex_traits@_W@boost@@@boost@@@boost@@QBE_NXZ
?capacity@raw_storage@re_detail@boost@@QAIIXZ
?clear@raw_storage@re_detail@boost@@QAIXXZ
?close@mapfile@re_detail@boost@@QAEXXZ
?code@regex_error@boost@@QBE?AW4error_type@regex_constants@2@XZ
?compare@?$basic_regex@DU?$regex_traits@DV?$w32_regex_traits@D@boost@@@boost@@@boost@@QBIHABV12@@Z
?compare@?$basic_regex@GU?$regex_traits@GV?$w32_regex_traits@G@boost@@@boost@@@boost@@QBIHABV12@@Z
?compare@?$basic_regex@_WU?$regex_traits@_WV?$w32_regex_traits@_W@boost@@@boost@@@boost@@QBIHABV12@@Z
?construct_init@?$perl_matcher@PBDV?$allocator@U?$sub_match@PBD@boost@@@std@@U?$regex_traits@DV?$w32_regex_traits@D@boost@@@boost@@@re_detail@boost@@AAEXABV?$basic_regex@DU?$regex_traits@DV?$w32_regex_traits@D@boost@@@boost@@@3@W4_match_flags@regex_constants@3@@Z
?construct_init@?$perl_matcher@PBGV?$allocator@U?$sub_match@PBG@boost@@@std@@U?$regex_traits@GV?$w32_regex_traits@G@boost@@@boost@@@re_detail@boost@@AAEXABV?$basic_regex@GU?$regex_traits@GV?$w32_regex_traits@G@boost@@@boost@@@3@W4_match_flags@regex_constants@3@@Z
?construct_init@?$perl_matcher@PB_WV?$allocator@U?$sub_match@PB_W@boost@@@std@@U?$regex_traits@_WV?$w32_regex_traits@_W@boost@@@boost@@@re_detail@boost@@AAEXABV?$basic_regex@_WU?$regex_traits@_WV?$w32_regex_traits@_W@boost@@@boost@@@3@W4_match_flags@regex_constants@3@@Z
?construct_init@?$perl_matcher@V?$_String_const_iterator@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V?$allocator@U?$sub_match@V?$_String_const_iterator@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@boost@@@2@U?$regex_traits@DV?$w32_regex_traits@D@boost@@@boost@@@re_detail@boost@@AAEXABV?$basic_regex@DU?$regex_traits@DV?$w32_regex_traits@D@boost@@@boost@@@3@W4_match_flags@regex_constants@3@@Z
?construct_init@?$perl_matcher@V?$_String_const_iterator@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@V?$allocator@U?$sub_match@V?$_String_const_iterator@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@@boost@@@2@U?$regex_traits@GV?$w32_regex_traits@G@boost@@@boost@@@re_detail@boost@@AAEXABV?$basic_regex@GU?$regex_traits@GV?$w32_regex_traits@G@boost@@@boost@@@3@W4_match_flags@regex_constants@3@@Z
?construct_init@?$perl_matcher@V?$_String_const_iterator@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V?$allocator@U?$sub_match@V?$_String_const_iterator@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@boost@@@2@U?$regex_traits@_WV?$w32_regex_traits@_W@boost@@@boost@@@re_detail@boost@@AAEXABV?$basic_regex@_WU?$regex_traits@_WV?$w32_regex_traits@_W@boost@@@boost@@@3@W4_match_flags@regex_constants@3@@Z
?data@directory_iterator@re_detail@boost@@QAEPAU_WIN32_FIND_DATAA@@XZ
?data@file_iterator@re_detail@boost@@QAEPAU_WIN32_FIND_DATAA@@XZ
?data@raw_storage@re_detail@boost@@QBIPAXXZ
?def_coll_names@re_detail@boost@@3PAPBDA
?def_multi_coll@re_detail@boost@@3PAPBDA
?destroy_single_repeat@?$perl_matcher@PBDV?$allocator@U?$sub_match@PBD@boost@@@std@@U?$regex_traits@DV?$w32_regex_traits@D@boost@@@boost@@@re_detail@boost@@AAEXXZ
?destroy_single_repeat@?$perl_matcher@PBGV?$allocator@U?$sub_match@PBG@boost@@@std@@U?$regex_traits@GV?$w32_regex_traits@G@boost@@@boost@@@re_detail@boost@@AAEXXZ
?destroy_single_repeat@?$perl_matcher@PB_WV?$allocator@U?$sub_match@PB_W@boost@@@std@@U?$regex_traits@_WV?$w32_regex_traits@_W@boost@@@boost@@@re_detail@boost@@AAEXXZ
?destroy_single_repeat@?$perl_matcher@V?$_String_const_iterator@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V?$allocator@U?$sub_match@V?$_String_const_iterator@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@boost@@@2@U?$regex_traits@DV?$w32_regex_traits@D@boost@@@boost@@@re_detail@boost@@AAEXXZ
?destroy_single_repeat@?$perl_matcher@V?$_String_const_iterator@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@V?$allocator@U?$sub_match@V?$_String_const_iterator@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@@boost@@@2@U?$regex_traits@GV?$w32_regex_traits@G@boost@@@boost@@@re_detail@boost@@AAEXXZ
?destroy_single_repeat@?$perl_matcher@V?$_String_const_iterator@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V?$allocator@U?$sub_match@V?$_String_const_iterator@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@boost@@@2@U?$regex_traits@_WV?$w32_regex_traits@_W@boost@@@boost@@@re_detail@boost@@AAEXXZ
?do_assign@?$basic_regex@DU?$regex_traits@DV?$w32_regex_traits@D@boost@@@boost@@@boost@@AAEAAV12@PBD0I@Z
?do_assign@?$basic_regex@GU?$regex_traits@GV?$w32_regex_traits@G@boost@@@boost@@@boost@@AAEAAV12@PBG0I@Z
?do_assign@?$basic_regex@_WU?$regex_traits@_WV?$w32_regex_traits@_W@boost@@@boost@@@boost@@AAEAAV12@PB_W0I@Z
?do_global_lower@re_detail@boost@@YIDD@Z
?do_global_lower@re_detail@boost@@YIGG@Z
?do_global_lower@re_detail@boost@@YI_W_W@Z
?do_global_upper@re_detail@boost@@YIDD@Z
?do_global_upper@re_detail@boost@@YIGG@Z
?do_global_upper@re_detail@boost@@YI_W_W@Z
?empty@?$basic_regex@DU?$regex_traits@DV?$w32_regex_traits@D@boost@@@boost@@@boost@@QBI_NXZ
?empty@?$basic_regex@GU?$regex_traits@GV?$w32_regex_traits@G@boost@@@boost@@@boost@@QBI_NXZ
?empty@?$basic_regex@_WU?$regex_traits@_WV?$w32_regex_traits@_W@boost@@@boost@@@boost@@QBI_NXZ
?empty@?$match_results@PBDV?$allocator@U?$sub_match@PBD@boost@@@std@@@boost@@QBE_NXZ
?empty@?$match_results@PBGV?$allocator@U?$sub_match@PBG@boost@@@std@@@boost@@QBE_NXZ
?empty@?$match_results@PB_WV?$allocator@U?$sub_match@PB_W@boost@@@std@@@boost@@QBE_NXZ
?empty@?$match_results@V?$_String_const_iterator@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V?$allocator@U?$sub_match@V?$_String_const_iterator@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@boost@@@2@@boost@@QBE_NXZ
?empty@?$match_results@V?$_String_const_iterator@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@V?$allocator@U?$sub_match@V?$_String_const_iterator@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@@boost@@@2@@boost@@QBE_NXZ
?empty@?$match_results@V?$_String_const_iterator@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V?$allocator@U?$sub_match@V?$_String_const_iterator@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@boost@@@2@@boost@@QBE_NXZ
?end@?$basic_regex@DU?$regex_traits@DV?$w32_regex_traits@D@boost@@@boost@@@boost@@QBIPBDXZ
?end@?$basic_regex@GU?$regex_traits@GV?$w32_regex_traits@G@boost@@@boost@@@boost@@QBIPBGXZ
?end@?$basic_regex@_WU?$regex_traits@_WV?$w32_regex_traits@_W@boost@@@boost@@@boost@@QBIPB_WXZ
?end@?$match_results@PBDV?$allocator@U?$sub_match@PBD@boost@@@std@@@boost@@QBE?AV?$_Vector_const_iterator@U?$sub_match@PBD@boost@@V?$allocator@U?$sub_match@PBD@boost@@@std@@@std@@XZ
?end@?$match_results@PBGV?$allocator@U?$sub_match@PBG@boost@@@std@@@boost@@QBE?AV?$_Vector_const_iterator@U?$sub_match@PBG@boost@@V?$allocator@U?$sub_match@PBG@boost@@@std@@@std@@XZ
?end@?$match_results@PB_WV?$allocator@U?$sub_match@PB_W@boost@@@std@@@boost@@QBE?AV?$_Vector_const_iterator@U?$sub_match@PB_W@boost@@V?$allocator@U?$sub_match@PB_W@boost@@@std@@@std@@XZ
?end@?$match_results@V?$_String_const_iterator@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V?$allocator@U?$sub_match@V?$_String_const_iterator@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@boost@@@2@@boost@@QBE?AV?$_Vector_const_iterator@U?$sub_match@V?$_String_const_iterator@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@boost@@V?$allocator@U?$sub_match@V?$_String_const_iterator@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@boost@@@std@@@std@@XZ
?end@?$match_results@V?$_String_const_iterator@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@V?$allocator@U?$sub_match@V?$_String_const_iterator@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@@boost@@@2@@boost@@QBE?AV?$_Vector_const_iterator@U?$sub_match@V?$_String_const_iterator@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@@boost@@V?$allocator@U?$sub_match@V?$_String_const_iterator@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@@boost@@@std@@@std@@XZ
?end@?$match_results@V?$_String_const_iterator@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V?$allocator@U?$sub_match@V?$_String_const_iterator@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@boost@@@2@@boost@@QBE?AV?$_Vector_const_iterator@U?$sub_match@V?$_String_const_iterator@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@boost@@V?$allocator@U?$sub_match@V?$_String_const_iterator@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@boost@@@std@@@std@@XZ
?end@mapfile@re_detail@boost@@QAEPBDXZ
?error_code@?$basic_regex@DU?$regex_traits@DV?$w32_regex_traits@D@boost@@@boost@@@boost@@QBIIXZ
?error_code@?$basic_regex@GU?$regex_traits@GV?$w32_regex_traits@G@boost@@@boost@@@boost@@QBIIXZ
?error_code@?$basic_regex@_WU?$regex_traits@_WV?$w32_regex_traits@_W@boost@@@boost@@@boost@@QBIIXZ
?error_code@RegEx@boost@@QBEIXZ
?escape_syntax_type@?$cpp_regex_traits_char_layer@D@re_detail@boost@@QBEED@Z
?escape_syntax_type@?$w32_regex_traits_char_layer@D@re_detail@boost@@QBEED@Z
?estimate_max_state_count@?$perl_matcher@PBDV?$allocator@U?$sub_match@PBD@boost@@@std@@U?$regex_traits@DV?$w32_regex_traits@D@boost@@@boost@@@re_detail@boost@@AAEXPAUrandom_access_iterator_tag@std@@@Z
?estimate_max_state_count@?$perl_matcher@PBDV?$allocator@U?$sub_match@PBD@boost@@@std@@U?$regex_traits@DV?$w32_regex_traits@D@boost@@@boost@@@re_detail@boost@@AAEXPAX@Z
?estimate_max_state_count@?$perl_matcher@PBGV?$allocator@U?$sub_match@PBG@boost@@@std@@U?$regex_traits@GV?$w32_regex_traits@G@boost@@@boost@@@re_detail@boost@@AAEXPAUrandom_access_iterator_tag@std@@@Z
?estimate_max_state_count@?$perl_matcher@PBGV?$allocator@U?$sub_match@PBG@boost@@@std@@U?$regex_traits@GV?$w32_regex_traits@G@boost@@@boost@@@re_detail@boost@@AAEXPAX@Z
?estimate_max_state_count@?$perl_matcher@PB_WV?$allocator@U?$sub_match@PB_W@boost@@@std@@U?$regex_traits@_WV?$w32_regex_traits@_W@boost@@@boost@@@re_detail@boost@@AAEXPAUrandom_access_iterator_tag@std@@@Z
?estimate_max_state_count@?$perl_matcher@PB_WV?$allocator@U?$sub_match@PB_W@boost@@@std@@U?$regex_traits@_WV?$w32_regex_traits@_W@boost@@@boost@@@re_detail@boost@@AAEXPAX@Z
?estimate_max_state_count@?$perl_matcher@V?$_String_const_iterator@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V?$allocator@U?$sub_match@V?$_String_const_iterator@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@boost@@@2@U?$regex_traits@DV?$w32_regex_traits@D@boost@@@boost@@@re_detail@boost@@AAEXPAUrandom_access_iterator_tag@std@@@Z
?estimate_max_state_count@?$perl_matcher@V?$_String_const_iterator@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V?$allocator@U?$sub_match@V?$_String_const_iterator@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@boost@@@2@U?$regex_traits@DV?$w32_regex_traits@D@boost@@@boost@@@re_detail@boost@@AAEXPAX@Z
?estimate_max_state_count@?$perl_matcher@V?$_String_const_iterator@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@V?$allocator@U?$sub_match@V?$_String_const_iterator@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@@boost@@@2@U?$regex_traits@GV?$w32_regex_traits@G@boost@@@boost@@@re_detail@boost@@AAEXPAUrandom_access_iterator_tag@std@@@Z
?estimate_max_state_count@?$perl_matcher@V?$_String_const_iterator@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@V?$allocator@U?$sub_match@V?$_String_const_iterator@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@@boost@@@2@U?$regex_traits@GV?$w32_regex_traits@G@boost@@@boost@@@re_detail@boost@@AAEXPAX@Z
?estimate_max_state_count@?$perl_matcher@V?$_String_const_iterator@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V?$allocator@U?$sub_match@V?$_String_const_iterator@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@boost@@@2@U?$regex_traits@_WV?$w32_regex_traits@_W@boost@@@boost@@@re_detail@boost@@AAEXPAUrandom_access_iterator_tag@std@@@Z
?estimate_max_state_count@?$perl_matcher@V?$_String_const_iterator@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V?$allocator@U?$sub_match@V?$_String_const_iterator@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@boost@@@2@U?$regex_traits@_WV?$w32_regex_traits@_W@boost@@@boost@@@re_detail@boost@@AAEXPAX@Z
?expression@?$basic_regex@DU?$regex_traits@DV?$w32_regex_traits@D@boost@@@boost@@@boost@@QBIPBDXZ
?expression@?$basic_regex@GU?$regex_traits@GV?$w32_regex_traits@G@boost@@@boost@@@boost@@QBIPBGXZ
?expression@?$basic_regex@_WU?$regex_traits@_WV?$w32_regex_traits@_W@boost@@@boost@@@boost@@QBIPB_WXZ
?extend@raw_storage@re_detail@boost@@QAIPAXI@Z
?extend_stack@?$perl_matcher@PBDV?$allocator@U?$sub_match@PBD@boost@@@std@@U?$regex_traits@DV?$w32_regex_traits@D@boost@@@boost@@@re_detail@boost@@AAEXXZ
?extend_stack@?$perl_matcher@PBGV?$allocator@U?$sub_match@PBG@boost@@@std@@U?$regex_traits@GV?$w32_regex_traits@G@boost@@@boost@@@re_detail@boost@@AAEXXZ
?extend_stack@?$perl_matcher@PB_WV?$allocator@U?$sub_match@PB_W@boost@@@std@@U?$regex_traits@_WV?$w32_regex_traits@_W@boost@@@boost@@@re_detail@boost@@AAEXXZ
?extend_stack@?$perl_matcher@V?$_String_const_iterator@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V?$allocator@U?$sub_match@V?$_String_const_iterator@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@boost@@@2@U?$regex_traits@DV?$w32_regex_traits@D@boost@@@boost@@@re_detail@boost@@AAEXXZ
?extend_stack@?$perl_matcher@V?$_String_const_iterator@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@V?$allocator@U?$sub_match@V?$_String_const_iterator@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@@boost@@@2@U?$regex_traits@GV?$w32_regex_traits@G@boost@@@boost@@@re_detail@boost@@AAEXXZ
?extend_stack@?$perl_matcher@V?$_String_const_iterator@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V?$allocator@U?$sub_match@V?$_String_const_iterator@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@boost@@@2@U?$regex_traits@_WV?$w32_regex_traits@_W@boost@@@boost@@@re_detail@boost@@AAEXXZ
?find@?$perl_matcher@PBDV?$allocator@U?$sub_match@PBD@boost@@@std@@U?$regex_traits@DV?$w32_regex_traits@D@boost@@@boost@@@re_detail@boost@@QAE_NXZ
?find@?$perl_matcher@PBGV?$allocator@U?$sub_match@PBG@boost@@@std@@U?$regex_traits@GV?$w32_regex_traits@G@boost@@@boost@@@re_detail@boost@@QAE_NXZ
?find@?$perl_matcher@PB_WV?$allocator@U?$sub_match@PB_W@boost@@@std@@U?$regex_traits@_WV?$w32_regex_traits@_W@boost@@@boost@@@re_detail@boost@@QAE_NXZ
?find@?$perl_matcher@V?$_String_const_iterator@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V?$allocator@U?$sub_match@V?$_String_const_iterator@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@boost@@@2@U?$regex_traits@DV?$w32_regex_traits@D@boost@@@boost@@@re_detail@boost@@QAE_NXZ
?find@?$perl_matcher@V?$_String_const_iterator@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@V?$allocator@U?$sub_match@V?$_String_const_iterator@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@@boost@@@2@U?$regex_traits@GV?$w32_regex_traits@G@boost@@@boost@@@re_detail@boost@@QAE_NXZ
?find@?$perl_matcher@V?$_String_const_iterator@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V?$allocator@U?$sub_match@V?$_String_const_iterator@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@boost@@@2@U?$regex_traits@_WV?$w32_regex_traits@_W@boost@@@boost@@@re_detail@boost@@QAE_NXZ
?find_imp@?$perl_matcher@PBDV?$allocator@U?$sub_match@PBD@boost@@@std@@U?$regex_traits@DV?$w32_regex_traits@D@boost@@@boost@@@re_detail@boost@@AAE_NXZ
?find_imp@?$perl_matcher@PBGV?$allocator@U?$sub_match@PBG@boost@@@std@@U?$regex_traits@GV?$w32_regex_traits@G@boost@@@boost@@@re_detail@boost@@AAE_NXZ
?find_imp@?$perl_matcher@PB_WV?$allocator@U?$sub_match@PB_W@boost@@@std@@U?$regex_traits@_WV?$w32_regex_traits@_W@boost@@@boost@@@re_detail@boost@@AAE_NXZ
?find_imp@?$perl_matcher@V?$_String_const_iterator@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V?$allocator@U?$sub_match@V?$_String_const_iterator@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@boost@@@2@U?$regex_traits@DV?$w32_regex_traits@D@boost@@@boost@@@re_detail@boost@@AAE_NXZ
?find_imp@?$perl_matcher@V?$_String_const_iterator@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@V?$allocator@U?$sub_match@V?$_String_const_iterator@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@@boost@@@2@U?$regex_traits@GV?$w32_regex_traits@G@boost@@@boost@@@re_detail@boost@@AAE_NXZ
?find_imp@?$perl_matcher@V?$_String_const_iterator@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V?$allocator@U?$sub_match@V?$_String_const_iterator@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@boost@@@2@U?$regex_traits@_WV?$w32_regex_traits@_W@boost@@@boost@@@re_detail@boost@@AAE_NXZ
?find_restart_any@?$perl_matcher@PBDV?$allocator@U?$sub_match@PBD@boost@@@std@@U?$regex_traits@DV?$w32_regex_traits@D@boost@@@boost@@@re_detail@boost@@AAE_NXZ
?find_restart_any@?$perl_matcher@PBGV?$allocator@U?$sub_match@PBG@boost@@@std@@U?$regex_traits@GV?$w32_regex_traits@G@boost@@@boost@@@re_detail@boost@@AAE_NXZ
?find_restart_any@?$perl_matcher@PB_WV?$allocator@U?$sub_match@PB_W@boost@@@std@@U?$regex_traits@_WV?$w32_regex_traits@_W@boost@@@boost@@@re_detail@boost@@AAE_NXZ
?find_restart_any@?$perl_matcher@V?$_String_const_iterator@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V?$allocator@U?$sub_match@V?$_String_const_iterator@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@boost@@@2@U?$regex_traits@DV?$w32_regex_traits@D@boost@@@boost@@@re_detail@boost@@AAE_NXZ
?find_restart_any@?$perl_matcher@V?$_String_const_iterator@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@V?$allocator@U?$sub_match@V?$_String_const_iterator@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@@boost@@@2@U?$regex_traits@GV?$w32_regex_traits@G@boost@@@boost@@@re_detail@boost@@AAE_NXZ
?find_restart_any@?$perl_matcher@V?$_String_const_iterator@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V?$allocator@U?$sub_match@V?$_String_const_iterator@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@boost@@@2@U?$regex_traits@_WV?$w32_regex_traits@_W@boost@@@boost@@@re_detail@boost@@AAE_NXZ
?find_restart_buf@?$perl_matcher@PBDV?$allocator@U?$sub_match@PBD@boost@@@std@@U?$regex_traits@DV?$w32_regex_traits@D@boost@@@boost@@@re_detail@boost@@AAE_NXZ
?find_restart_buf@?$perl_matcher@PBGV?$allocator@U?$sub_match@PBG@boost@@@std@@U?$regex_traits@GV?$w32_regex_traits@G@boost@@@boost@@@re_detail@boost@@AAE_NXZ
?find_restart_buf@?$perl_matcher@PB_WV?$allocator@U?$sub_match@PB_W@boost@@@std@@U?$regex_traits@_WV?$w32_regex_traits@_W@boost@@@boost@@@re_detail@boost@@AAE_NXZ
?find_restart_buf@?$perl_matcher@V?$_String_const_iterator@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V?$allocator@U?$sub_match@V?$_String_const_iterator@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@boost@@@2@U?$regex_traits@DV?$w32_regex_traits@D@boost@@@boost@@@re_detail@boost@@AAE_NXZ
?find_restart_buf@?$perl_matcher@V?$_String_const_iterator@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@V?$allocator@U?$sub_match@V?$_String_const_iterator@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@@boost@@@2@U?$regex_traits@GV?$w32_regex_traits@G@boost@@@boost@@@re_detail@boost@@AAE_NXZ
?find_restart_buf@?$perl_matcher@V?$_String_const_iterator@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V?$allocator@U?$sub_match@V?$_String_const_iterator@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@boost@@@2@U?$regex_traits@_WV?$w32_regex_traits@_W@boost@@@boost@@@re_detail@boost@@AAE_NXZ
?find_restart_line@?$perl_matcher@PBDV?$allocator@U?$sub_match@PBD@boost@@@std@@U?$regex_traits@DV?$w32_regex_traits@D@boost@@@boost@@@re_detail@boost@@AAE_NXZ
?find_restart_line@?$perl_matcher@PBGV?$allocator@U?$sub_match@PBG@boost@@@std@@U?$regex_traits@GV?$w32_regex_traits@G@boost@@@boost@@@re_detail@boost@@AAE_NXZ
?find_restart_line@?$perl_matcher@PB_WV?$allocator@U?$sub_match@PB_W@boost@@@std@@U?$regex_traits@_WV?$w32_regex_traits@_W@boost@@@boost@@@re_detail@boost@@AAE_NXZ
?find_restart_line@?$perl_matcher@V?$_String_const_iterator@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V?$allocator@U?$sub_match@V?$_String_const_iterator@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@boost@@@2@U?$regex_traits@DV?$w32_regex_traits@D@boost@@@boost@@@re_detail@boost@@AAE_NXZ
?find_restart_line@?$perl_matcher@V?$_String_const_iterator@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@V?$allocator@U?$sub_match@V?$_String_const_iterator@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@@boost@@@2@U?$regex_traits@GV?$w32_regex_traits@G@boost@@@boost@@@re_detail@boost@@AAE_NXZ
?find_restart_line@?$perl_matcher@V?$_String_const_iterator@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V?$allocator@U?$sub_match@V?$_String_const_iterator@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@boost@@@2@U?$regex_traits@_WV?$w32_regex_traits@_W@boost@@@boost@@@re_detail@boost@@AAE_NXZ
?find_restart_lit@?$perl_matcher@PBDV?$allocator@U?$sub_match@PBD@boost@@@std@@U?$regex_traits@DV?$w32_regex_traits@D@boost@@@boost@@@re_detail@boost@@AAE_NXZ
?find_restart_lit@?$perl_matcher@PBGV?$allocator@U?$sub_match@PBG@boost@@@std@@U?$regex_traits@GV?$w32_regex_traits@G@boost@@@boost@@@re_detail@boost@@AAE_NXZ
?find_restart_lit@?$perl_matcher@PB_WV?$allocator@U?$sub_match@PB_W@boost@@@std@@U?$regex_traits@_WV?$w32_regex_traits@_W@boost@@@boost@@@re_detail@boost@@AAE_NXZ
?find_restart_lit@?$perl_matcher@V?$_String_const_iterator@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V?$allocator@U?$sub_match@V?$_String_const_iterator@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@boost@@@2@U?$regex_traits@DV?$w32_regex_traits@D@boost@@@boost@@@re_detail@boost@@AAE_NXZ
?find_restart_lit@?$perl_matcher@V?$_String_const_iterator@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@V?$allocator@U?$sub_match@V?$_String_const_iterator@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@@boost@@@2@U?$regex_traits@GV?$w32_regex_traits@G@boost@@@boost@@@re_detail@boost@@AAE_NXZ
?find_restart_lit@?$perl_matcher@V?$_String_const_iterator@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V?$allocator@U?$sub_match@V?$_String_const_iterator@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@boost@@@2@U?$regex_traits@_WV?$w32_regex_traits@_W@boost@@@boost@@@re_detail@boost@@AAE_NXZ
?find_restart_word@?$perl_matcher@PBDV?$allocator@U?$sub_match@PBD@boost@@@std@@U?$regex_traits@DV?$w32_regex_traits@D@boost@@@boost@@@re_detail@boost@@AAE_NXZ
?find_restart_word@?$perl_matcher@PBGV?$allocator@U?$sub_match@PBG@boost@@@std@@U?$regex_traits@GV?$w32_regex_traits@G@boost@@@boost@@@re_detail@boost@@AAE_NXZ
?find_restart_word@?$perl_matcher@PB_WV?$allocator@U?$sub_match@PB_W@boost@@@std@@U?$regex_traits@_WV?$w32_regex_traits@_W@boost@@@boost@@@re_detail@boost@@AAE_NXZ
?find_restart_word@?$perl_matcher@V?$_String_const_iterator@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V?$allocator@U?$sub_match@V?$_String_const_iterator@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@boost@@@2@U?$regex_traits@DV?$w32_regex_traits@D@boost@@@boost@@@re_detail@boost@@AAE_NXZ
?find_restart_word@?$perl_matcher@V?$_String_const_iterator@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@V?$allocator@U?$sub_match@V?$_String_const_iterator@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@@boost@@@2@U?$regex_traits@GV?$w32_regex_traits@G@boost@@@boost@@@re_detail@boost@@AAE_NXZ
?find_restart_word@?$perl_matcher@V?$_String_const_iterator@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V?$allocator@U?$sub_match@V?$_String_const_iterator@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@boost@@@2@U?$regex_traits@_WV?$w32_regex_traits@_W@boost@@@boost@@@re_detail@boost@@AAE_NXZ
?flags@?$basic_regex@DU?$regex_traits@DV?$w32_regex_traits@D@boost@@@boost@@@boost@@QBIIXZ
?flags@?$basic_regex@GU?$regex_traits@GV?$w32_regex_traits@G@boost@@@boost@@@boost@@QBIIXZ
?flags@?$basic_regex@_WU?$regex_traits@_WV?$w32_regex_traits@_W@boost@@@boost@@@boost@@QBIIXZ
?format@?$match_results@PBDV?$allocator@U?$sub_match@PBD@boost@@@std@@@boost@@QBE?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@ABV34@W4_match_flags@regex_constants@2@@Z
?format@?$match_results@PBGV?$allocator@U?$sub_match@PBG@boost@@@std@@@boost@@QBE?AV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@ABV34@W4_match_flags@regex_constants@2@@Z
?format@?$match_results@PB_WV?$allocator@U?$sub_match@PB_W@boost@@@std@@@boost@@QBE?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@ABV34@W4_match_flags@regex_constants@2@@Z
?format@?$match_results@V?$_String_const_iterator@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V?$allocator@U?$sub_match@V?$_String_const_iterator@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@boost@@@2@@boost@@QBE?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@ABV34@W4_match_flags@regex_constants@2@@Z
?format@?$match_results@V?$_String_const_iterator@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@V?$allocator@U?$sub_match@V?$_String_const_iterator@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@@boost@@@2@@boost@@QBE?AV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@ABV34@W4_match_flags@regex_constants@2@@Z
?format@?$match_results@V?$_String_const_iterator@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V?$allocator@U?$sub_match@V?$_String_const_iterator@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@boost@@@2@@boost@@QBE?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@ABV34@W4_match_flags@regex_constants@2@@Z
?get_allocator@?$match_results@PBDV?$allocator@U?$sub_match@PBD@boost@@@std@@@boost@@QBE?AV?$allocator@U?$sub_match@PBD@boost@@@std@@XZ
?get_allocator@?$match_results@PBGV?$allocator@U?$sub_match@PBG@boost@@@std@@@boost@@QBE?AV?$allocator@U?$sub_match@PBG@boost@@@std@@XZ
?get_allocator@?$match_results@PB_WV?$allocator@U?$sub_match@PB_W@boost@@@std@@@boost@@QBE?AV?$allocator@U?$sub_match@PB_W@boost@@@std@@XZ
?get_allocator@?$match_results@V?$_String_const_iterator@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V?$allocator@U?$sub_match@V?$_String_const_iterator@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@boost@@@2@@boost@@QBE?AV?$allocator@U?$sub_match@V?$_String_const_iterator@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@boost@@@std@@XZ
?get_allocator@?$match_results@V?$_String_const_iterator@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@V?$allocator@U?$sub_match@V?$_String_const_iterator@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@@boost@@@2@@boost@@QBE?AV?$allocator@U?$sub_match@V?$_String_const_iterator@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@@boost@@@std@@XZ
?get_allocator@?$match_results@V?$_String_const_iterator@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V?$allocator@U?$sub_match@V?$_String_const_iterator@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@boost@@@2@@boost@@QBE?AV?$allocator@U?$sub_match@V?$_String_const_iterator@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@boost@@@std@@XZ
?get_data@?$basic_regex@DU?$regex_traits@DV?$w32_regex_traits@D@boost@@@boost@@@boost@@QBEABU?$regex_data@DU?$regex_traits@DV?$w32_regex_traits@D@boost@@@boost@@@re_detail@2@XZ
?get_data@?$basic_regex@GU?$regex_traits@GV?$w32_regex_traits@G@boost@@@boost@@@boost@@QBEABU?$regex_data@GU?$regex_traits@GV?$w32_regex_traits@G@boost@@@boost@@@re_detail@2@XZ
?get_data@?$basic_regex@_WU?$regex_traits@_WV?$w32_regex_traits@_W@boost@@@boost@@@boost@@QBEABU?$regex_data@_WU?$regex_traits@_WV?$w32_regex_traits@_W@boost@@@boost@@@re_detail@2@XZ
?get_default_error_string@re_detail@boost@@YIPBDW4error_type@regex_constants@2@@Z
?get_default_escape_syntax_type@re_detail@boost@@YIED@Z
?get_default_syntax@re_detail@boost@@YIPBDE@Z
?get_default_syntax_type@re_detail@boost@@YIED@Z
?get_first_state@?$basic_regex@DU?$regex_traits@DV?$w32_regex_traits@D@boost@@@boost@@@boost@@QBEPBUre_syntax_base@re_detail@2@XZ
?get_first_state@?$basic_regex@GU?$regex_traits@GV?$w32_regex_traits@G@boost@@@boost@@@boost@@QBEPBUre_syntax_base@re_detail@2@XZ
?get_first_state@?$basic_regex@_WU?$regex_traits@_WV?$w32_regex_traits@_W@boost@@@boost@@@boost@@QBEPBUre_syntax_base@re_detail@2@XZ
?get_map@?$basic_regex@DU?$regex_traits@DV?$w32_regex_traits@D@boost@@@boost@@@boost@@QBEPBEXZ
?get_map@?$basic_regex@GU?$regex_traits@GV?$w32_regex_traits@G@boost@@@boost@@@boost@@QBEPBEXZ
?get_map@?$basic_regex@_WU?$regex_traits@_WV?$w32_regex_traits@_W@boost@@@boost@@@boost@@QBEPBEXZ
?get_mem_block@re_detail@boost@@YIPAXXZ
?get_restart_type@?$basic_regex@DU?$regex_traits@DV?$w32_regex_traits@D@boost@@@boost@@@boost@@QBEIXZ
?get_restart_type@?$basic_regex@GU?$regex_traits@GV?$w32_regex_traits@G@boost@@@boost@@@boost@@QBEIXZ
?get_restart_type@?$basic_regex@_WU?$regex_traits@_WV?$w32_regex_traits@_W@boost@@@boost@@@boost@@QBEIXZ
?get_traits@?$basic_regex@DU?$regex_traits@DV?$w32_regex_traits@D@boost@@@boost@@@boost@@QBEABU?$regex_traits_wrapper@U?$regex_traits@DV?$w32_regex_traits@D@boost@@@boost@@@2@XZ
?get_traits@?$basic_regex@GU?$regex_traits@GV?$w32_regex_traits@G@boost@@@boost@@@boost@@QBEABU?$regex_traits_wrapper@U?$regex_traits@GV?$w32_regex_traits@G@boost@@@boost@@@2@XZ
?get_traits@?$basic_regex@_WU?$regex_traits@_WV?$w32_regex_traits@_W@boost@@@boost@@@boost@@QBEABU?$regex_traits_wrapper@U?$regex_traits@_WV?$w32_regex_traits@_W@boost@@@boost@@@2@XZ
?getflags@?$basic_regex@DU?$regex_traits@DV?$w32_regex_traits@D@boost@@@boost@@@boost@@QBIIXZ
?getflags@?$basic_regex@GU?$regex_traits@GV?$w32_regex_traits@G@boost@@@boost@@@boost@@QBIIXZ
?getflags@?$basic_regex@_WU?$regex_traits@_WV?$w32_regex_traits@_W@boost@@@boost@@@boost@@QBIIXZ
?getloc@?$basic_regex@DU?$regex_traits@DV?$w32_regex_traits@D@boost@@@boost@@@boost@@QBIKXZ
?getloc@?$basic_regex@GU?$regex_traits@GV?$w32_regex_traits@G@boost@@@boost@@@boost@@QBIKXZ
?getloc@?$basic_regex@_WU?$regex_traits@_WV?$w32_regex_traits@_W@boost@@@boost@@@boost@@QBIKXZ
?getloc@?$c_regex_traits@D@boost@@QBE?AUlocale_type@12@XZ
?getloc@?$c_regex_traits@G@boost@@QBE?AUlocale_type@12@XZ
?getloc@?$c_regex_traits@_W@boost@@QBE?AUlocale_type@12@XZ
?imbue@?$basic_regex@DU?$regex_traits@DV?$w32_regex_traits@D@boost@@@boost@@@boost@@QAIKK@Z
?imbue@?$basic_regex@GU?$regex_traits@GV?$w32_regex_traits@G@boost@@@boost@@@boost@@QAIKK@Z
?imbue@?$basic_regex@_WU?$regex_traits@_WV?$w32_regex_traits@_W@boost@@@boost@@@boost@@QAIKK@Z
?imbue@?$c_regex_traits@D@boost@@QAE?AUlocale_type@12@U312@@Z
?imbue@?$c_regex_traits@G@boost@@QAE?AUlocale_type@12@U312@@Z
?imbue@?$c_regex_traits@_W@boost@@QAE?AUlocale_type@12@U312@@Z
?imbue@?$cpp_regex_traits_base@D@re_detail@boost@@QAE?AVlocale@std@@ABV45@@Z
?imbue@?$w32_regex_traits_base@D@re_detail@boost@@QAEKK@Z
?index@raw_storage@re_detail@boost@@QAIIPAX@Z
?init@?$cpp_regex_traits_char_layer@D@re_detail@boost@@AAEXXZ
?init@?$w32_regex_traits_char_layer@D@re_detail@boost@@AAEXXZ
?insert@raw_storage@re_detail@boost@@QAIPAXII@Z
?is_combining_implementation@re_detail@boost@@YI_NG@Z
?isctype@?$c_regex_traits@D@boost@@SI_NDK@Z
?isctype@?$c_regex_traits@G@boost@@SI_NGK@Z
?isctype@?$c_regex_traits@_W@boost@@SI_N_WK@Z
?isctype@?$w32_regex_traits_char_layer@D@re_detail@boost@@QBE_NKD@Z
?length@?$c_regex_traits@D@boost@@SAIPBD@Z
?length@?$c_regex_traits@G@boost@@SAIPBG@Z
?length@?$c_regex_traits@_W@boost@@SAIPB_W@Z
?length@?$match_results@PBDV?$allocator@U?$sub_match@PBD@boost@@@std@@@boost@@QBEHH@Z
?length@?$match_results@PBGV?$allocator@U?$sub_match@PBG@boost@@@std@@@boost@@QBEHH@Z
?length@?$match_results@PB_WV?$allocator@U?$sub_match@PB_W@boost@@@std@@@boost@@QBEHH@Z
?length@?$match_results@V?$_String_const_iterator@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V?$allocator@U?$sub_match@V?$_String_const_iterator@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@boost@@@2@@boost@@QBEHH@Z
?length@?$match_results@V?$_String_const_iterator@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@V?$allocator@U?$sub_match@V?$_String_const_iterator@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@@boost@@@2@@boost@@QBEHH@Z
?length@?$match_results@V?$_String_const_iterator@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V?$allocator@U?$sub_match@V?$_String_const_iterator@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@boost@@@2@@boost@@QBEHH@Z
?lock@scoped_static_mutex_lock@boost@@QAEXXZ
?locked@scoped_static_mutex_lock@boost@@QBE_NXZ
?lookup_classname@?$c_regex_traits@D@boost@@SIKPBD0@Z
?lookup_classname@?$c_regex_traits@G@boost@@SIKPBG0@Z
?lookup_classname@?$c_regex_traits@_W@boost@@SIKPB_W0@Z
?lookup_collatename@?$c_regex_traits@D@boost@@SI?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@PBD0@Z
?lookup_collatename@?$c_regex_traits@G@boost@@SI?AV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@PBG0@Z
?lookup_collatename@?$c_regex_traits@_W@boost@@SI?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@PB_W0@Z
?lookup_default_collate_name@re_detail@boost@@YI?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@ABV34@@Z
?mark_count@?$basic_regex@DU?$regex_traits@DV?$w32_regex_traits@D@boost@@@boost@@@boost@@QBIIXZ
?mark_count@?$basic_regex@GU?$regex_traits@GV?$w32_regex_traits@G@boost@@@boost@@@boost@@QBIIXZ
?mark_count@?$basic_regex@_WU?$regex_traits@_WV?$w32_regex_traits@_W@boost@@@boost@@@boost@@QBIIXZ
?match@?$perl_matcher@PBDV?$allocator@U?$sub_match@PBD@boost@@@std@@U?$regex_traits@DV?$w32_regex_traits@D@boost@@@boost@@@re_detail@boost@@QAE_NXZ
?match@?$perl_matcher@PBGV?$allocator@U?$sub_match@PBG@boost@@@std@@U?$regex_traits@GV?$w32_regex_traits@G@boost@@@boost@@@re_detail@boost@@QAE_NXZ
?match@?$perl_matcher@PB_WV?$allocator@U?$sub_match@PB_W@boost@@@std@@U?$regex_traits@_WV?$w32_regex_traits@_W@boost@@@boost@@@re_detail@boost@@QAE_NXZ
?match@?$perl_matcher@V?$_String_const_iterator@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V?$allocator@U?$sub_match@V?$_String_const_iterator@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@boost@@@2@U?$regex_traits@DV?$w32_regex_traits@D@boost@@@boost@@@re_detail@boost@@QAE_NXZ
?match@?$perl_matcher@V?$_String_const_iterator@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@V?$allocator@U?$sub_match@V?$_String_const_iterator@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@@boost@@@2@U?$regex_traits@GV?$w32_regex_traits@G@boost@@@boost@@@re_detail@boost@@QAE_NXZ
?match@?$perl_matcher@V?$_String_const_iterator@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V?$allocator@U?$sub_match@V?$_String_const_iterator@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@boost@@@2@U?$regex_traits@_WV?$w32_regex_traits@_W@boost@@@boost@@@re_detail@boost@@QAE_NXZ
?match_all_states@?$perl_matcher@PBDV?$allocator@U?$sub_match@PBD@boost@@@std@@U?$regex_traits@DV?$w32_regex_traits@D@boost@@@boost@@@re_detail@boost@@AAE_NXZ
?match_all_states@?$perl_matcher@PBGV?$allocator@U?$sub_match@PBG@boost@@@std@@U?$regex_traits@GV?$w32_regex_traits@G@boost@@@boost@@@re_detail@boost@@AAE_NXZ
?match_all_states@?$perl_matcher@PB_WV?$allocator@U?$sub_match@PB_W@boost@@@std@@U?$regex_traits@_WV?$w32_regex_traits@_W@boost@@@boost@@@re_detail@boost@@AAE_NXZ
?match_all_states@?$perl_matcher@V?$_String_const_iterator@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V?$allocator@U?$sub_match@V?$_String_const_iterator@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@boost@@@2@U?$regex_traits@DV?$w32_regex_traits@D@boost@@@boost@@@re_detail@boost@@AAE_NXZ
?match_all_states@?$perl_matcher@V?$_String_const_iterator@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@V?$allocator@U?$sub_match@V?$_String_const_iterator@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@@boost@@@2@U?$regex_traits@GV?$w32_regex_traits@G@boost@@@boost@@@re_detail@boost@@AAE_NXZ
?match_all_states@?$perl_matcher@V?$_String_const_iterator@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V?$allocator@U?$sub_match@V?$_String_const_iterator@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@boost@@@2@U?$regex_traits@_WV?$w32_regex_traits@_W@boost@@@boost@@@re_detail@boost@@AAE_NXZ
?match_alt@?$perl_matcher@PBDV?$allocator@U?$sub_match@PBD@boost@@@std@@U?$regex_traits@DV?$w32_regex_traits@D@boost@@@boost@@@re_detail@boost@@AAE_NXZ
?match_alt@?$perl_matcher@PBGV?$allocator@U?$sub_match@PBG@boost@@@std@@U?$regex_traits@GV?$w32_regex_traits@G@boost@@@boost@@@re_detail@boost@@AAE_NXZ
?match_alt@?$perl_matcher@PB_WV?$allocator@U?$sub_match@PB_W@boost@@@std@@U?$regex_traits@_WV?$w32_regex_traits@_W@boost@@@boost@@@re_detail@boost@@AAE_NXZ
?match_alt@?$perl_matcher@V?$_String_const_iterator@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V?$allocator@U?$sub_match@V?$_String_const_iterator@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@boost@@@2@U?$regex_traits@DV?$w32_regex_traits@D@boost@@@boost@@@re_detail@boost@@AAE_NXZ
?match_alt@?$perl_matcher@V?$_String_const_iterator@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@V?$allocator@U?$sub_match@V?$_String_const_iterator@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@@boost@@@2@U?$regex_traits@GV?$w32_regex_traits@G@boost@@@boost@@@re_detail@boost@@AAE_NXZ
?match_alt@?$perl_matcher@V?$_String_const_iterator@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V?$allocator@U?$sub_match@V?$_String_const_iterator@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@boost@@@2@U?$regex_traits@_WV?$w32_regex_traits@_W@boost@@@boost@@@re_detail@boost@@AAE_NXZ
?match_assert_backref@?$perl_matcher@PBDV?$allocator@U?$sub_match@PBD@boost@@@std@@U?$regex_traits@DV?$w32_regex_traits@D@boost@@@boost@@@re_detail@boost@@AAE_NXZ
?match_assert_backref@?$perl_matcher@PBGV?$allocator@U?$sub_match@PBG@boost@@@std@@U?$regex_traits@GV?$w32_regex_traits@G@boost@@@boost@@@re_detail@boost@@AAE_NXZ
?match_assert_backref@?$perl_matcher@PB_WV?$allocator@U?$sub_match@PB_W@boost@@@std@@U?$regex_traits@_WV?$w32_regex_traits@_W@boost@@@boost@@@re_detail@boost@@AAE_NXZ
?match_assert_backref@?$perl_matcher@V?$_String_const_iterator@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V?$allocator@U?$sub_match@V?$_String_const_iterator@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@boost@@@2@U?$regex_traits@DV?$w32_regex_traits@D@boost@@@boost@@@re_detail@boost@@AAE_NXZ
?match_assert_backref@?$perl_matcher@V?$_String_const_iterator@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@V?$allocator@U?$sub_match@V?$_String_const_iterator@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@@boost@@@2@U?$regex_traits@GV?$w32_regex_traits@G@boost@@@boost@@@re_detail@boost@@AAE_NXZ
?match_assert_backref@?$perl_matcher@V?$_String_const_iterator@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V?$allocator@U?$sub_match@V?$_String_const_iterator@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@boost@@@2@U?$regex_traits@_WV?$w32_regex_traits@_W@boost@@@boost@@@re_detail@boost@@AAE_NXZ
?match_backref@?$perl_matcher@PBDV?$allocator@U?$sub_match@PBD@boost@@@std@@U?$regex_traits@DV?$w32_regex_traits@D@boost@@@boost@@@re_detail@boost@@AAE_NXZ
?match_backref@?$perl_matcher@PBGV?$allocator@U?$sub_match@PBG@boost@@@std@@U?$regex_traits@GV?$w32_regex_traits@G@boost@@@boost@@@re_detail@boost@@AAE_NXZ
?match_backref@?$perl_matcher@PB_WV?$allocator@U?$sub_match@PB_W@boost@@@std@@U?$regex_traits@_WV?$w32_regex_traits@_W@boost@@@boost@@@re_detail@boost@@AAE_NXZ
?match_backref@?$perl_matcher@V?$_String_const_iterator@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V?$allocator@U?$sub_match@V?$_String_const_iterator@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@boost@@@2@U?$regex_traits@DV?$w32_regex_traits@D@boost@@@boost@@@re_detail@boost@@AAE_NXZ
?match_backref@?$perl_matcher@V?$_String_const_iterator@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@V?$allocator@U?$sub_match@V?$_String_const_iterator@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@@boost@@@2@U?$regex_traits@GV?$w32_regex_traits@G@boost@@@boost@@@re_detail@boost@@AAE_NXZ
?match_backref@?$perl_matcher@V?$_String_const_iterator@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V?$allocator@U?$sub_match@V?$_String_const_iterator@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@boost@@@2@U?$regex_traits@_WV?$w32_regex_traits@_W@boost@@@boost@@@re_detail@boost@@AAE_NXZ
?match_backstep@?$perl_matcher@PBDV?$allocator@U?$sub_match@PBD@boost@@@std@@U?$regex_traits@DV?$w32_regex_traits@D@boost@@@boost@@@re_detail@boost@@AAE_NXZ
?match_backstep@?$perl_matcher@PBGV?$allocator@U?$sub_match@PBG@boost@@@std@@U?$regex_traits@GV?$w32_regex_traits@G@boost@@@boost@@@re_detail@boost@@AAE_NXZ
?match_backstep@?$perl_matcher@PB_WV?$allocator@U?$sub_match@PB_W@boost@@@std@@U?$regex_traits@_WV?$w32_regex_traits@_W@boost@@@boost@@@re_detail@boost@@AAE_NXZ
?match_backstep@?$perl_matcher@V?$_String_const_iterator@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V?$allocator@U?$sub_match@V?$_String_const_iterator@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@boost@@@2@U?$regex_traits@DV?$w32_regex_traits@D@boost@@@boost@@@re_detail@boost@@AAE_NXZ
?match_backstep@?$perl_matcher@V?$_String_const_iterator@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@V?$allocator@U?$sub_match@V?$_String_const_iterator@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@@boost@@@2@U?$regex_traits@GV?$w32_regex_traits@G@boost@@@boost@@@re_detail@boost@@AAE_NXZ
?match_backstep@?$perl_matcher@V?$_String_const_iterator@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V?$allocator@U?$sub_match@V?$_String_const_iterator@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@boost@@@2@U?$regex_traits@_WV?$w32_regex_traits@_W@boost@@@boost@@@re_detail@boost@@AAE_NXZ
?match_buffer_end@?$perl_matcher@PBDV?$allocator@U?$sub_match@PBD@boost@@@std@@U?$regex_traits@DV?$w32_regex_traits@D@boost@@@boost@@@re_detail@boost@@AAE_NXZ
?match_buffer_end@?$perl_matcher@PBGV?$allocator@U?$sub_match@PBG@boost@@@std@@U?$regex_traits@GV?$w32_regex_traits@G@boost@@@boost@@@re_detail@boost@@AAE_NXZ
?match_buffer_end@?$perl_matcher@PB_WV?$allocator@U?$sub_match@PB_W@boost@@@std@@U?$regex_traits@_WV?$w32_regex_traits@_W@boost@@@boost@@@re_detail@boost@@AAE_NXZ
?match_buffer_end@?$perl_matcher@V?$_String_const_iterator@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V?$allocator@U?$sub_match@V?$_String_const_iterator@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@boost@@@2@U?$regex_traits@DV?$w32_regex_traits@D@boost@@@boost@@@re_detail@boost@@AAE_NXZ
?match_buffer_end@?$perl_matcher@V?$_String_const_iterator@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@V?$allocator@U?$sub_match@V?$_String_const_iterator@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@@boost@@@2@U?$regex_traits@GV?$w32_regex_traits@G@boost@@@boost@@@re_detail@boost@@AAE_NXZ
?match_buffer_end@?$perl_matcher@V?$_String_const_iterator@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V?$allocator@U?$sub_match@V?$_String_const_iterator@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@boost@@@2@U?$regex_traits@_WV?$w32_regex_traits@_W@boost@@@boost@@@re_detail@boost@@AAE_NXZ
?match_buffer_start@?$perl_matcher@PBDV?$allocator@U?$sub_match@PBD@boost@@@std@@U?$regex_traits@DV?$w32_regex_traits@D@boost@@@boost@@@re_detail@boost@@AAE_NXZ
?match_buffer_start@?$perl_matcher@PBGV?$allocator@U?$sub_match@PBG@boost@@@std@@U?$regex_traits@GV?$w32_regex_traits@G@boost@@@boost@@@re_detail@boost@@AAE_NXZ
?match_buffer_start@?$perl_matcher@PB_WV?$allocator@U?$sub_match@PB_W@boost@@@std@@U?$regex_traits@_WV?$w32_regex_traits@_W@boost@@@boost@@@re_detail@boost@@AAE_NXZ
?match_buffer_start@?$perl_matcher@V?$_String_const_iterator@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V?$allocator@U?$sub_match@V?$_String_const_iterator@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@boost@@@2@U?$regex_traits@DV?$w32_regex_traits@D@boost@@@boost@@@re_detail@boost@@AAE_NXZ
?match_buffer_start@?$perl_matcher@V?$_String_const_iterator@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@V?$allocator@U?$sub_match@V?$_String_const_iterator@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@@boost@@@2@U?$regex_traits@GV?$w32_regex_traits@G@boost@@@boost@@@re_detail@boost@@AAE_NXZ
?match_buffer_start@?$perl_matcher@V?$_String_const_iterator@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V?$allocator@U?$sub_match@V?$_String_const_iterator@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@boost@@@2@U?$regex_traits@_WV?$w32_regex_traits@_W@boost@@@boost@@@re_detail@boost@@AAE_NXZ
?match_char_repeat@?$perl_matcher@PBDV?$allocator@U?$sub_match@PBD@boost@@@std@@U?$regex_traits@DV?$w32_regex_traits@D@boost@@@boost@@@re_detail@boost@@AAE_NXZ
?match_char_repeat@?$perl_matcher@PBGV?$allocator@U?$sub_match@PBG@boost@@@std@@U?$regex_traits@GV?$w32_regex_traits@G@boost@@@boost@@@re_detail@boost@@AAE_NXZ
?match_char_repeat@?$perl_matcher@PB_WV?$allocator@U?$sub_match@PB_W@boost@@@std@@U?$regex_traits@_WV?$w32_regex_traits@_W@boost@@@boost@@@re_detail@boost@@AAE_NXZ
?match_char_repeat@?$perl_matcher@V?$_String_const_iterator@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V?$allocator@U?$sub_match@V?$_String_const_iterator@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@boost@@@2@U?$regex_traits@DV?$w32_regex_traits@D@boost@@@boost@@@re_detail@boost@@AAE_NXZ
?match_char_repeat@?$perl_matcher@V?$_String_const_iterator@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@V?$allocator@U?$sub_match@V?$_String_const_iterator@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@@boost@@@2@U?$regex_traits@GV?$w32_regex_traits@G@boost@@@boost@@@re_detail@boost@@AAE_NXZ
?match_char_repeat@?$perl_matcher@V?$_String_const_iterator@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V?$allocator@U?$sub_match@V?$_String_const_iterator@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@boost@@@2@U?$regex_traits@_WV?$w32_regex_traits@_W@boost@@@boost@@@re_detail@boost@@AAE_NXZ
?match_combining@?$perl_matcher@PBDV?$allocator@U?$sub_match@PBD@boost@@@std@@U?$regex_traits@DV?$w32_regex_traits@D@boost@@@boost@@@re_detail@boost@@AAE_NXZ
?match_combining@?$perl_matcher@PBGV?$allocator@U?$sub_match@PBG@boost@@@std@@U?$regex_traits@GV?$w32_regex_traits@G@boost@@@boost@@@re_detail@boost@@AAE_NXZ
?match_combining@?$perl_matcher@PB_WV?$allocator@U?$sub_match@PB_W@boost@@@std@@U?$regex_traits@_WV?$w32_regex_traits@_W@boost@@@boost@@@re_detail@boost@@AAE_NXZ
?match_combining@?$perl_matcher@V?$_String_const_iterator@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V?$allocator@U?$sub_match@V?$_String_const_iterator@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@boost@@@2@U?$regex_traits@DV?$w32_regex_traits@D@boost@@@boost@@@re_detail@boost@@AAE_NXZ
Sections
.text Size: 355KB - Virtual size: 355KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 212KB - Virtual size: 212KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 6KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 692B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 24KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
wintaylor2.1/Programs/Imager/boost_system-vc90-mt-1_39.dll.dll windows:5 windows x86
04e3f07b2f9cd6de3de839929c495e17
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
msvcp90
?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB
?erase@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@II@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBD@Z
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
msvcr90
_adjust_fdiv
?terminate@@YAXXZ
?_type_info_dtor_internal_method@type_info@@QAEXXZ
_crt_debugger_hook
_except_handler4_common
__clean_type_info_names_internal
_amsg_exit
_initterm_e
_initterm
_encoded_null
free
_malloc_crt
_decode_pointer
_onexit
_lock
_encode_pointer
__dllonexit
_unlock
strerror
__CxxFrameHandler3
_invalid_parameter_noinfo
??3@YAXPAX@Z
__CppXcptFilter
kernel32
FormatMessageA
InterlockedExchange
Sleep
InterlockedCompareExchange
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
DisableThreadLibraryCalls
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
LocalFree
Exports
Exports
?get_generic_category@system@boost@@YAABVerror_category@12@XZ
?get_system_category@system@boost@@YAABVerror_category@12@XZ
?throws@system@boost@@3Verror_code@12@A
Sections
.text Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 692B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 872B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
wintaylor2.1/Programs/Imager/boost_thread-vc90-mt-1_39.dll.dll windows:5 windows x86
810dda0ca96b4f294331a2691456a5db
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
msvcp90
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBD@Z
msvcr90
_onexit
__dllonexit
_unlock
__clean_type_info_names_internal
_except_handler4_common
_crt_debugger_hook
?_type_info_dtor_internal_method@type_info@@QAEXXZ
__CppXcptFilter
_adjust_fdiv
_amsg_exit
_initterm_e
_initterm
_decode_pointer
_encoded_null
free
_malloc_crt
_encode_pointer
?terminate@@YAXXZ
??2@YAPAXI@Z
_beginthreadex
_CxxThrowException
??_V@YAXPAX@Z
??4exception@std@@QAEAAV01@ABV01@@Z
??0exception@std@@QAE@ABV01@@Z
__CxxFrameHandler3
??0exception@std@@QAE@XZ
_gmtime64
_purecall
??3@YAXPAX@Z
??1exception@std@@UAE@XZ
?what@exception@std@@UBEPBDXZ
??0exception@std@@QAE@ABQBDH@Z
_lock
kernel32
CreateEventA
CloseHandle
HeapAlloc
GetCurrentThreadId
QueryPerformanceCounter
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
InterlockedCompareExchange
InterlockedExchange
CreateWaitableTimerA
SetWaitableTimer
WaitForMultipleObjects
SystemTimeToFileTime
ResumeThread
TlsSetValue
ResetEvent
GetCurrentProcessId
CreateMutexA
Sleep
GetSystemInfo
TlsGetValue
TlsFree
TlsAlloc
ReleaseMutex
WaitForSingleObject
GetTickCount
SetEvent
HeapFree
GetProcessHeap
GetSystemTimeAsFileTime
Exports
Exports
??0disable_interruption@this_thread@boost@@QAE@XZ
??0invalid_thread_argument@boost@@QAE@ABV01@@Z
??0invalid_thread_argument@boost@@QAE@H@Z
??0invalid_thread_argument@boost@@QAE@XZ
??0lock_error@boost@@QAE@ABV01@@Z
??0lock_error@boost@@QAE@H@Z
??0lock_error@boost@@QAE@XZ
??0restore_interruption@this_thread@boost@@QAE@AAVdisable_interruption@12@@Z
??0thread@boost@@AAE@V?$intrusive_ptr@Uthread_data_base@detail@boost@@@1@@Z
??0thread@boost@@QAE@U?$thread_move_t@Vthread@boost@@@detail@1@@Z
??0thread@boost@@QAE@XZ
??0thread_exception@boost@@IAE@H@Z
??0thread_exception@boost@@IAE@XZ
??0thread_exception@boost@@QAE@ABV01@@Z
??0thread_permission_error@boost@@QAE@ABV01@@Z
??0thread_permission_error@boost@@QAE@H@Z
??0thread_permission_error@boost@@QAE@XZ
??0thread_resource_error@boost@@QAE@ABV01@@Z
??0thread_resource_error@boost@@QAE@H@Z
??0thread_resource_error@boost@@QAE@XZ
??0unsupported_thread_option@boost@@QAE@ABV01@@Z
??0unsupported_thread_option@boost@@QAE@H@Z
??0unsupported_thread_option@boost@@QAE@XZ
??1disable_interruption@this_thread@boost@@QAE@XZ
??1invalid_thread_argument@boost@@UAE@XZ
??1lock_error@boost@@UAE@XZ
??1restore_interruption@this_thread@boost@@QAE@XZ
??1thread@boost@@QAE@XZ
??1thread_exception@boost@@UAE@XZ
??1thread_permission_error@boost@@UAE@XZ
??1thread_resource_error@boost@@UAE@XZ
??1unsupported_thread_option@boost@@UAE@XZ
??4invalid_thread_argument@boost@@QAEAAV01@ABV01@@Z
??4lock_error@boost@@QAEAAV01@ABV01@@Z
??4thread@boost@@QAEAAV01@U?$thread_move_t@Vthread@boost@@@detail@1@@Z
??4thread_exception@boost@@QAEAAV01@ABV01@@Z
??4thread_interrupted@boost@@QAEAAV01@ABV01@@Z
??4thread_permission_error@boost@@QAEAAV01@ABV01@@Z
??4thread_resource_error@boost@@QAEAAV01@ABV01@@Z
??4unsupported_thread_option@boost@@QAEAAV01@ABV01@@Z
??8thread@boost@@QBE_NABV01@@Z
??9thread@boost@@QBE_NABV01@@Z
??Bthread@boost@@QAE?AU?$thread_move_t@Vthread@boost@@@detail@1@XZ
??_7invalid_thread_argument@boost@@6B@
??_7lock_error@boost@@6B@
??_7thread_exception@boost@@6B@
??_7thread_permission_error@boost@@6B@
??_7thread_resource_error@boost@@6B@
??_7unsupported_thread_option@boost@@6B@
?allocate_raw_heap_memory@detail@boost@@YAPAXI@Z
?detach@thread@boost@@QAEXXZ
?free_raw_heap_memory@detail@boost@@YAXPAX@Z
?get_id@this_thread@boost@@YA?AVid@thread@2@XZ
?get_id@thread@boost@@QBE?AVid@12@XZ
?get_thread_info@thread@boost@@ABE?AV?$intrusive_ptr@Uthread_data_base@detail@boost@@@2@XZ
?get_tss_data@detail@boost@@YAPAXPBX@Z
?hardware_concurrency@thread@boost@@SAIXZ
?interrupt@thread@boost@@QAEXXZ
?interruptible_wait@this_thread@boost@@YA_NPAXUtimeout@detail@2@@Z
?interruption_enabled@this_thread@boost@@YA_NXZ
?interruption_point@this_thread@boost@@YAXXZ
?interruption_requested@this_thread@boost@@YA_NXZ
?interruption_requested@thread@boost@@QBE_NXZ
?join@thread@boost@@QAEXXZ
?joinable@thread@boost@@QBE_NXZ
?move@thread@boost@@QAE?AU?$thread_move_t@Vthread@boost@@@detail@2@XZ
?native_error@thread_exception@boost@@QBEHXZ
?native_handle@thread@boost@@QAEPAXXZ
?release_handle@thread@boost@@AAEXXZ
?set_tss_data@detail@boost@@YAXPBXV?$shared_ptr@Utss_cleanup_function@detail@boost@@@2@PAX_N@Z
?sleep@thread@boost@@SAXABVptime@posix_time@2@@Z
?start_thread@thread@boost@@AAEXXZ
?swap@thread@boost@@QAEXAAV12@@Z
?timed_join@thread@boost@@QAE_NABVptime@posix_time@2@@Z
?what@invalid_thread_argument@boost@@UBEPBDXZ
?what@lock_error@boost@@UBEPBDXZ
?what@thread_permission_error@boost@@UBEPBDXZ
?what@thread_resource_error@boost@@UBEPBDXZ
?what@unsupported_thread_option@boost@@UBEPBDXZ
?yield@this_thread@boost@@YAXXZ
?yield@thread@boost@@SAXXZ
on_process_enter
on_process_exit
on_thread_enter
on_thread_exit
Sections
.text Size: 24KB - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 13KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 692B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
wintaylor2.1/Programs/Imager/cximage.dll.dll windows:4 windows x86
6c9138bafeb3221751cc2c7659baf775
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
VirtualAlloc
GetSystemInfo
VirtualQuery
RtlUnwind
HeapReAlloc
GetCommandLineA
ExitProcess
TerminateProcess
HeapSize
HeapDestroy
HeapCreate
VirtualFree
IsBadWritePtr
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
SetUnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
VirtualProtect
GetEnvironmentStringsW
UnhandledExceptionFilter
GetCurrentProcessId
QueryPerformanceCounter
GetTickCount
GetSystemTimeAsFileTime
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
IsBadReadPtr
IsBadCodePtr
SetStdHandle
SetEnvironmentVariableA
HeapFree
HeapAlloc
GetFileAttributesA
GetOEMCP
GetCPInfo
CreateFileA
GetCurrentProcess
SetEndOfFile
FlushFileBuffers
SetFilePointer
WriteFile
ReadFile
DeleteFileA
GlobalGetAtomNameA
GlobalFindAtomA
lstrcmpW
RaiseException
GlobalFlags
InterlockedIncrement
WritePrivateProfileStringA
SetErrorMode
lstrcatA
InterlockedDecrement
TlsFree
DeleteCriticalSection
LocalReAlloc
TlsSetValue
TlsAlloc
InitializeCriticalSection
TlsGetValue
EnterCriticalSection
GlobalHandle
GlobalReAlloc
LeaveCriticalSection
LocalAlloc
CloseHandle
GlobalAddAtomA
SetLastError
FindResourceA
FormatMessageA
lstrcpynA
LocalFree
GetCurrentThread
GetCurrentThreadId
FreeLibrary
GlobalDeleteAtom
lstrcmpA
GetModuleFileNameA
GetModuleHandleA
GetProcAddress
ConvertDefaultLocale
EnumResourceLanguagesA
lstrcpyA
LoadLibraryA
GlobalSize
GlobalLock
GlobalUnlock
GlobalAlloc
GlobalFree
SizeofResource
LoadResource
LockResource
CompareStringW
CompareStringA
lstrlenA
lstrcmpiA
GetVersion
GetLastError
WideCharToMultiByte
MultiByteToWideChar
GetVersionExA
GetThreadLocale
GetLocaleInfoA
GetACP
FreeEnvironmentStringsW
InterlockedExchange
user32
RegisterWindowMessageA
WinHelpA
GetCapture
CreateWindowExA
GetClassLongA
GetClassInfoExA
SetPropA
GetPropA
RemovePropA
GetForegroundWindow
GetTopWindow
DestroyWindow
GetMessageTime
GetMessagePos
LoadIconA
MapWindowPoints
SetForegroundWindow
GetClientRect
GetMenu
AdjustWindowRectEx
GetClassInfoA
RegisterClassA
DefWindowProcA
CallWindowProcA
SystemParametersInfoA
IsIconic
GetWindowPlacement
CopyRect
SetWindowLongA
GetDlgItem
LoadCursorA
GetSystemMetrics
GetSysColorBrush
GrayStringA
DrawTextExA
TabbedTextOutA
ClientToScreen
GetWindow
GetDlgCtrlID
GetWindowRect
PtInRect
ReleaseDC
GetDC
GetSysColor
GetIconInfo
GetWindowTextA
SetWindowTextA
GetClassNameA
wsprintfA
UnregisterClassA
UnhookWindowsHookEx
SetMenuItemBitmaps
GetFocus
ModifyMenuA
EnableMenuItem
CheckMenuItem
GetMenuCheckMarkDimensions
DestroyMenu
LoadBitmapA
SetWindowsHookExA
ShowWindow
DrawTextA
PostQuitMessage
PostMessageA
GetSubMenu
GetMenuItemCount
GetMenuItemID
GetMenuState
SetCursor
SendMessageA
EnableWindow
IsWindowEnabled
GetLastActivePopup
GetWindowLongA
CallNextHookEx
GetMessageA
TranslateMessage
DispatchMessageA
GetActiveWindow
IsWindowVisible
GetKeyState
PeekMessageA
GetCursorPos
ValidateRect
MessageBoxA
GetParent
SetWindowPos
gdi32
PtVisible
TextOutA
SaveDC
Escape
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowExtEx
ScaleWindowExtEx
SetMapMode
GetDeviceCaps
CreateFontIndirectA
GetStockObject
SetTextColor
SetBkMode
StretchDIBits
RectVisible
CreateBitmap
StretchBlt
GetClipBox
CreateRectRgnIndirect
ExtSelectClipRgn
SetStretchBltMode
SetDIBitsToDevice
BitBlt
GetObjectA
CreateDIBSection
CreateDIBitmap
CreateCompatibleBitmap
CreateCompatibleDC
SelectObject
SetBkColor
ExtTextOutA
GetEnhMetaFilePaletteEntries
DeleteDC
CreatePalette
SelectPalette
RealizePalette
PlayEnhMetaFile
GetDIBits
SetEnhMetaFileBits
GetEnhMetaFileHeader
DeleteEnhMetaFile
DeleteObject
CombineRgn
CreateRectRgn
SetWinMetaFileBits
RestoreDC
winspool.drv
OpenPrinterA
DocumentPropertiesA
ClosePrinter
advapi32
RegEnumKeyA
RegSetValueExA
RegCreateKeyExA
RegQueryValueA
RegCloseKey
RegDeleteKeyA
RegOpenKeyA
RegOpenKeyExA
RegQueryValueExA
comctl32
ord17
shlwapi
PathFindExtensionA
PathFindFileNameA
oleaut32
VariantClear
VariantChangeType
VariantInit
Exports
Exports
??0CxFile@@QAE@ABV0@@Z
??0CxFile@@QAE@XZ
??0CxIOFile@@QAE@ABV0@@Z
??0CxIOFile@@QAE@PAU_iobuf@@@Z
??0CxImage@@QAE@ABV0@_N11@Z
??0CxImage@@QAE@K@Z
??0CxImage@@QAE@KKKK@Z
??0CxImage@@QAE@PAEKK@Z
??0CxImage@@QAE@PAU_iobuf@@K@Z
??0CxImage@@QAE@PAVCxFile@@K@Z
??0CxImage@@QAE@PBDK@Z
??0CxImageGIF@@QAE@ABV0@@Z
??0CxImageGIF@@QAE@XZ
??0CxImageJPG@@QAE@ABV0@@Z
??0CxImageJPG@@QAE@XZ
??0CxImageTIF@@QAE@ABV0@@Z
??0CxImageTIF@@QAE@XZ
??0CxMemFile@@QAE@ABV0@@Z
??0CxMemFile@@QAE@PAEK@Z
??1CxFile@@UAE@XZ
??1CxIOFile@@UAE@XZ
??1CxImage@@UAE@XZ
??1CxImageGIF@@UAE@XZ
??1CxImageJPG@@UAE@XZ
??1CxImageTIF@@UAE@XZ
??1CxMemFile@@UAE@XZ
??4CxFile@@QAEAAV0@ABV0@@Z
??4CxIOFile@@QAEAAV0@ABV0@@Z
??4CxImage@@QAEAAV0@ABV0@@Z
??4CxImageGIF@@QAEAAV0@ABV0@@Z
??4CxImageJPG@@QAEAAV0@ABV0@@Z
??4CxImageTIF@@QAEAAV0@ABV0@@Z
??4CxMemFile@@QAEAAV0@ABV0@@Z
??4tagCxTextInfo@@QAEAAU0@ABU0@@Z
??_7CxFile@@6B@
??_7CxIOFile@@6B@
??_7CxImage@@6B@
??_7CxImageGIF@@6B@
??_7CxImageJPG@@6B@
??_7CxImageTIF@@6B@
??_7CxMemFile@@6B@
??_FCxIOFile@@QAEXXZ
??_FCxImage@@QAEXXZ
??_FCxMemFile@@QAEXXZ
??_OCxImage@@QAEXABV0@@Z
?Alloc@CxMemFile@@IAEXK@Z
?AlphaClear@CxImage@@QAEXXZ
?AlphaCopy@CxImage@@QAE_NAAV1@@Z
?AlphaCreate@CxImage@@QAEXXZ
?AlphaDelete@CxImage@@QAEXXZ
?AlphaFlip@CxImage@@QAE_NXZ
?AlphaGet@CxImage@@QAEEJJ@Z
?AlphaGetBits@CxImage@@QBEPAEXZ
?AlphaGetMax@CxImage@@QBEEXZ
?AlphaInvert@CxImage@@QAEXXZ
?AlphaIsValid@CxImage@@QAE_NXZ
?AlphaMirror@CxImage@@QAE_NXZ
?AlphaPaletteClear@CxImage@@QAEXXZ
?AlphaPaletteEnable@CxImage@@QAEX_N@Z
?AlphaPaletteIsEnabled@CxImage@@QAE_NXZ
?AlphaPaletteIsValid@CxImage@@QAE_NXZ
?AlphaPaletteSplit@CxImage@@QAE_NPAV1@@Z
?AlphaSet@CxImage@@QAEXE@Z
?AlphaSet@CxImage@@QAEXJJE@Z
?AlphaSet@CxImage@@QAE_NAAV1@@Z
?AlphaSetMax@CxImage@@QAEXE@Z
?AlphaSplit@CxImage@@QAE_NPAV1@@Z
?AlphaStrip@CxImage@@QAEXXZ
?Bitfield2RGB@CxImage@@IAEXPAEGGGE@Z
?BlendPalette@CxImage@@QAEXKJ@Z
?CircleTransform@CxImage@@QAE_NHJM@Z
?Clear@CxImage@@QAEXE@Z
?Close@CxIOFile@@UAE_NXZ
?Close@CxMemFile@@UAE_NXZ
?Colorize@CxImage@@QAE_NEE@Z
?Combine@CxImage@@QAE_NPAV1@000J@Z
?CompareColors@CxImage@@KAHPBX0@Z
?Contour@CxImage@@QAE_NXZ
?Copy@CxImage@@QAEXABV1@_N11@Z
?CopyInfo@CxImage@@IAEXABV1@@Z
?CopyToHandle@CxImage@@QAEPAXXZ
?Create@CxImage@@QAEPAXKKKK@Z
?CreateFromArray@CxImage@@QAE_NPAEKKKK_N@Z
?CreateFromHANDLE@CxImage@@QAE_NPAX@Z
?CreateFromHBITMAP@CxImage@@QAE_NPAUHBITMAP__@@PAUHPALETTE__@@@Z
?CreateFromHICON@CxImage@@QAE_NPAUHICON__@@@Z
?CreateFromMatrix@CxImage@@QAE_NPAPAEKKKK_N@Z
?Crop@CxImage@@QAE_NABUtagRECT@@PAV1@@Z
?Crop@CxImage@@QAE_NJJJJPAV1@@Z
?CropRotatedRectangle@CxImage@@QAE_NJJJJMPAV1@@Z
?DFT@CxImage@@IAE_NHJPAN000@Z
?Decode@CxImage@@QAE_NPAEKK@Z
?Decode@CxImage@@QAE_NPAU_iobuf@@K@Z
?Decode@CxImage@@QAE_NPAVCxFile@@K@Z
?Decode@CxImageGIF@@QAE_NPAU_iobuf@@@Z
?Decode@CxImageGIF@@QAE_NPAVCxFile@@@Z
?Decode@CxImageJPG@@QAE_NPAU_iobuf@@@Z
?Decode@CxImageJPG@@QAE_NPAVCxFile@@@Z
?Decode@CxImageTIF@@QAE_NPAU_iobuf@@@Z
?Decode@CxImageTIF@@QAE_NPAVCxFile@@@Z
?DecodeExif@CxImageJPG@@QAE_NPAU_iobuf@@@Z
?DecodeExif@CxImageJPG@@QAE_NPAVCxFile@@@Z
?DecodeExtension@CxImageGIF@@IAE_NPAVCxFile@@@Z
?DecreaseBpp@CxImage@@QAE_NK_NPAUtagRGBQUAD@@K@Z
?Destroy@CxImage@@QAE_NXZ
?Dilate@CxImage@@QAE_NJ@Z
?Dither@CxImage@@QAE_NJ@Z
?Draw2@CxImage@@QAEJPAUHDC__@@ABUtagRECT@@@Z
?Draw2@CxImage@@QAEJPAUHDC__@@JJJJ@Z
?Draw@CxImage@@QAEJPAUHDC__@@ABUtagRECT@@PAU3@@Z
?Draw@CxImage@@QAEJPAUHDC__@@JJJJPAUtagRECT@@@Z
?DrawLine@CxImage@@QAEXHHHHK@Z
?DrawLine@CxImage@@QAEXHHHHUtagRGBQUAD@@_N@Z
?DrawString@CxImage@@QAEJPAUHDC__@@JJPBDUtagRGBQUAD@@1JJEE_N@Z
?DrawStringEx@CxImage@@QAEJPAUHDC__@@JJPAUtagCxTextInfo@@_N@Z
?Enable@CxImage@@QAEX_N@Z
?Encode@CxImage@@QAE_NAAPAEAAJK@Z
?Encode@CxImage@@QAE_NPAU_iobuf@@K@Z
?Encode@CxImage@@QAE_NPAU_iobuf@@PAPAV1@HK@Z
?Encode@CxImage@@QAE_NPAVCxFile@@K@Z
?Encode@CxImage@@QAE_NPAVCxFile@@PAPAV1@HK@Z
?Encode@CxImageGIF@@QAE_NPAU_iobuf@@@Z
?Encode@CxImageGIF@@QAE_NPAU_iobuf@@PAPAVCxImage@@H_N@Z
?Encode@CxImageGIF@@QAE_NPAVCxFile@@@Z
?Encode@CxImageGIF@@QAE_NPAVCxFile@@PAPAVCxImage@@H_N@Z
?Encode@CxImageJPG@@QAE_NPAU_iobuf@@@Z
?Encode@CxImageJPG@@QAE_NPAVCxFile@@@Z
?Encode@CxImageTIF@@QAE_NPAU_iobuf@@PAPAVCxImage@@H@Z
?Encode@CxImageTIF@@QAE_NPAU_iobuf@@_N@Z
?Encode@CxImageTIF@@QAE_NPAVCxFile@@PAPAVCxImage@@H@Z
?Encode@CxImageTIF@@QAE_NPAVCxFile@@_N@Z
?EncodeBody@CxImageGIF@@IAEXPAVCxFile@@_N@Z
?EncodeBody@CxImageTIF@@IAE_NPAUtiff@@_NHH@Z
?EncodeComment@CxImageGIF@@IAEXPAVCxFile@@@Z
?EncodeExtension@CxImageGIF@@IAEXPAVCxFile@@@Z
?EncodeHeader@CxImageGIF@@IAEXPAVCxFile@@@Z
?EncodeLoopExtension@CxImageGIF@@IAEXPAVCxFile@@@Z
?EncodeRGB@CxImageGIF@@IAE_NPAVCxFile@@@Z
?EncodeSafeCheck@CxImage@@IAE_NPAVCxFile@@@Z
?Eof@CxIOFile@@UAE_NXZ
?Eof@CxMemFile@@UAE_NXZ
?Erode@CxImage@@QAE_NJ@Z
?Error@CxIOFile@@UAEJXZ
?Error@CxMemFile@@UAEJXZ
?Expand@CxImage@@QAE_NJJJJUtagRGBQUAD@@PAV1@@Z
?Expand@CxImage@@QAE_NJJUtagRGBQUAD@@PAV1@@Z
?FFT2@CxImage@@QAE_NPAV1@000J_N1@Z
?FFT@CxImage@@IAE_NHHPAN0@Z
?Filter@CxImage@@QAE_NPAJJJJ@Z
?Flip@CxImage@@QAE_NXZ
?Flush@CxIOFile@@UAE_NXZ
?Flush@CxMemFile@@UAE_NXZ
?Free@CxMemFile@@IAEXXZ
?Gamma@CxImage@@QAE_NM@Z
?GetBits@CxImage@@QAEPAEK@Z
?GetBpp@CxImage@@QBEGXZ
?GetBuffer@CxMemFile@@QAEPAE_N@Z
?GetC@CxIOFile@@UAEJXZ
?GetC@CxMemFile@@UAEJXZ
?GetClrImportant@CxImage@@QBEKXZ
?GetCodecOption@CxImage@@QBEKXZ
?GetColorType@CxImage@@QAEEXZ
?GetComment@CxImageGIF@@QAEXPAD@Z
?GetDIB@CxImage@@QBEPAXXZ
?GetDisposalMethod@CxImageGIF@@QAEJXZ
?GetEffWidth@CxImage@@QBEKXZ
?GetEscape@CxImage@@QBEJXZ
?GetFlags@CxImage@@QBEKXZ
?GetFrame@CxImage@@QBEJXZ
?GetFrameDelay@CxImage@@QBEKXZ
?GetHeight@CxImage@@QBEKXZ
?GetJpegQuality@CxImage@@QBEEXZ
?GetJpegScale@CxImage@@QBEEXZ
?GetLastError@CxImage@@QAEPADXZ
?GetLayer@CxImage@@QAEPAV1@J@Z
?GetLoops@CxImageGIF@@QAEJXZ
?GetNearestIndex@CxImage@@QAEEUtagRGBQUAD@@@Z
?GetNumColors@CxImage@@QBEKXZ
?GetNumFrames@CxImage@@QBEJXZ
?GetNumLayers@CxImage@@QBEJXZ
?GetOffset@CxImage@@QAEXPAJ0@Z
?GetPalette@CxImage@@QBEPAUtagRGBQUAD@@XZ
?GetPaletteColor@CxImage@@QAE?AUtagRGBQUAD@@E@Z
?GetPaletteColor@CxImage@@QAE_NEPAE00@Z
?GetPaletteSize@CxImage@@QAEKXZ
?GetParent@CxImage@@QBEPAV1@XZ
?GetPixelColor@CxImage@@QAE?AUtagRGBQUAD@@JJ_N@Z
?GetPixelGray@CxImage@@QAEEJJ@Z
?GetPixelIndex@CxImage@@QAEEJJ@Z
?GetProgress@CxImage@@QBEJXZ
?GetSize@CxImage@@QAEJXZ
?GetTransColor@CxImage@@QAE?AUtagRGBQUAD@@XZ
?GetTransIndex@CxImage@@QBEJXZ
?GetType@CxImage@@QBEKXZ
?GetVersion@CxImage@@QAEPBDXZ
?GetWidth@CxImage@@QBEKXZ
?GetXDPI@CxImage@@QBEJXZ
?GetYDPI@CxImage@@QBEJXZ
?Ghost@CxImage@@IAEXPAV1@@Z
?GifMix@CxImageGIF@@IAEXAAVCxImage@@JJ@Z
?GifNextPixel@CxImageGIF@@IAEHXZ
?GrayScale@CxImage@@QAE_NXZ
?HSLtoRGB@CxImage@@QAE?AUtagRGBQUAD@@K@Z
?HSLtoRGB@CxImage@@QAE?AUtagRGBQUAD@@U2@@Z
?Histogram@CxImage@@QAEJPAJ000J@Z
?HistogramEqualize@CxImage@@QAE_NXZ
?HistogramLog@CxImage@@QAE_NXZ
?HistogramNormalize@CxImage@@QAE_NXZ
?HistogramRoot@CxImage@@QAE_NXZ
?HistogramStretch@CxImage@@QAE_NJ@Z
?HuePalette@CxImage@@QAEXM@Z
?HueToRGB@CxImage@@IAEMMMM@Z
?IncreaseBpp@CxImage@@QAE_NK@Z
?InitTextInfo@CxImage@@QAEXPAUtagCxTextInfo@@@Z
?IsEnabled@CxImage@@QBE_NXZ
?IsGrayScale@CxImage@@QAE_NXZ
?IsIndexed@CxImage@@QAE_NXZ
?IsInside@CxImage@@QAE_NJJ@Z
?IsPowerof2@CxImage@@IAE_NJ@Z
?IsTransparent@CxImage@@QAE_NJJ@Z
?IsTransparent@CxImage@@QBE_NXZ
?IsValid@CxImage@@QBE_NXZ
?Jitter@CxImage@@QAE_NJ@Z
?LayerCreate@CxImage@@QAE_NJ@Z
?LayerDelete@CxImage@@QAE_NJ@Z
?LayerDeleteAll@CxImage@@QAEXXZ
?Light@CxImage@@QAE_NJJ@Z
?Load@CxImage@@QAE_NPBDK@Z
?LoadResource@CxImage@@QAE_NPAUHRSRC__@@KPAUHINSTANCE__@@@Z
?Lut@CxImage@@QAE_NPAE000@Z
?Lut@CxImage@@QAE_NPAE@Z
?MakeBitmap@CxImage@@QAEPAUHBITMAP__@@PAUHDC__@@@Z
?Mean@CxImage@@QAEMXZ
?Median@CxImage@@QAE_NJ@Z
?Mirror@CxImage@@QAE_NXZ
?Mix@CxImage@@QAEXAAV1@W4ImageOpType@1@JJ@Z
?MixFrom@CxImage@@QAEXAAV1@JJ@Z
?Negative@CxImage@@QAE_NXZ
?Noise@CxImage@@QAE_NJ@Z
?Open@CxIOFile@@QAE_NPBD0@Z
?Open@CxMemFile@@QAE_NXZ
?PutC@CxFile@@UAE_NE@Z
?PutC@CxIOFile@@UAE_NE@Z
?PutC@CxMemFile@@UAE_NE@Z
?Putword@CxImageGIF@@IAEXHPAVCxFile@@@Z
?RGBQUADtoRGB@CxImage@@QAEKUtagRGBQUAD@@@Z
?RGBtoBGR@CxImage@@IAEXPAEH@Z
?RGBtoHSL@CxImage@@QAE?AUtagRGBQUAD@@U2@@Z
?RGBtoRGBQUAD@CxImage@@QAE?AUtagRGBQUAD@@K@Z
?RGBtoXYZ@CxImage@@QAE?AUtagRGBQUAD@@U2@@Z
?RGBtoYIQ@CxImage@@QAE?AUtagRGBQUAD@@U2@@Z
?RGBtoYUV@CxImage@@QAE?AUtagRGBQUAD@@U2@@Z
?Read@CxIOFile@@UAEIPAXII@Z
?Read@CxMemFile@@UAEIPAXII@Z
?Repair@CxImage@@QAE_NMJJ@Z
?RepairChannel@CxImage@@IAE_NPAV1@M@Z
?Resample@CxImage@@QAE_NJJHPAV1@@Z
?Rotate180@CxImage@@QAE_NPAV1@@Z
?Rotate@CxImage@@QAE_NMPAV1@@Z
?RotateLeft@CxImage@@QAE_NPAV1@@Z
?RotateRight@CxImage@@QAE_NPAV1@@Z
?Save@CxImage@@QAE_NPBDK@Z
?Seek@CxIOFile@@UAE_NJH@Z
?Seek@CxMemFile@@UAE_NJH@Z
?SelectionAddColor@CxImage@@QAE_NUtagRGBQUAD@@@Z
?SelectionAddEllipse@CxImage@@QAE_NUtagRECT@@@Z
?SelectionAddPixel@CxImage@@QAE_NHH@Z
?SelectionAddPolygon@CxImage@@QAE_NPAUtagPOINT@@J@Z
?SelectionAddRect@CxImage@@QAE_NUtagRECT@@@Z
?SelectionClear@CxImage@@QAE_NXZ
?SelectionCopy@CxImage@@QAE_NAAV1@@Z
?SelectionCreate@CxImage@@QAE_NXZ
?SelectionDelete@CxImage@@QAE_NXZ
?SelectionGetBox@CxImage@@QAEXAAUtagRECT@@@Z
?SelectionInvert@CxImage@@QAE_NXZ
?SelectionIsInside@CxImage@@QAE_NJJ@Z
?SelectionIsValid@CxImage@@QAE_NXZ
?SelectionToHRGN@CxImage@@QAE_NAAPAUHRGN__@@@Z
?SetClrImportant@CxImage@@QAEXK@Z
?SetCodecOption@CxImage@@QAEXK@Z
?SetComment@CxImageGIF@@QAEXPBD@Z
?SetDisposalMethod@CxImageGIF@@QAEXH@Z
?SetEscape@CxImage@@QAEXJ@Z
?SetFlags@CxImage@@QAEXK_N@Z
?SetFrame@CxImage@@QAEXJ@Z
?SetFrameDelay@CxImage@@QAEXK@Z
?SetGrayPalette@CxImage@@QAEXXZ
?SetJpegQuality@CxImage@@QAEXE@Z
?SetJpegScale@CxImage@@QAEXE@Z
?SetLoops@CxImageGIF@@QAEXH@Z
?SetOffset@CxImage@@QAEXJJ@Z
?SetPalette@CxImage@@QAEXKPAE00@Z
?SetPalette@CxImage@@QAEXPAUrgb_color@@K@Z
?SetPalette@CxImage@@QAEXPAUtagRGBQUAD@@K@Z
?SetPaletteColor@CxImage@@QAEXEEEEE@Z
?SetPaletteColor@CxImage@@QAEXEK@Z
?SetPaletteColor@CxImage@@QAEXEUtagRGBQUAD@@@Z
?SetPixelColor@CxImage@@QAEXJJK@Z
?SetPixelColor@CxImage@@QAEXJJUtagRGBQUAD@@_N@Z
?SetPixelIndex@CxImage@@QAEXJJE@Z
?SetProgress@CxImage@@QAEXJ@Z
?SetStdPalette@CxImage@@QAEXXZ
?SetTransColor@CxImage@@QAEXUtagRGBQUAD@@@Z
?SetTransIndex@CxImage@@QAEXJ@Z
?SetXDPI@CxImage@@QAEXJ@Z
?SetYDPI@CxImage@@QAEXJ@Z
?ShiftRGB@CxImage@@QAE_NJJJ@Z
?Size@CxIOFile@@UAEJXZ
?Size@CxMemFile@@UAEJXZ
?Skew@CxImage@@QAE_NMMJJ@Z
?SplitCMYK@CxImage@@QAE_NPAV1@000@Z
?SplitHSL@CxImage@@QAE_NPAV1@00@Z
?SplitRGB@CxImage@@QAE_NPAV1@00@Z
?SplitXYZ@CxImage@@QAE_NPAV1@00@Z
?SplitYIQ@CxImage@@QAE_NPAV1@00@Z
?SplitYUV@CxImage@@QAE_NPAV1@00@Z
?Startup@CxImage@@IAEXK@Z
?Stretch@CxImage@@QAEJPAUHDC__@@ABUtagRECT@@K@Z
?Stretch@CxImage@@QAEJPAUHDC__@@JJJJK@Z
?SwapIndex@CxImage@@QAEXEE@Z
?TIFFCloseEx@CxImageTIF@@QAEXPAUtiff@@@Z
?TIFFOpenEx@CxImageTIF@@QAEPAUtiff@@PAVCxFile@@@Z
?Tell@CxIOFile@@UAEJXZ
?Tell@CxMemFile@@UAEJXZ
?Threshold@CxImage@@QAE_NE@Z
?Thumbnail@CxImage@@QAE_NJJUtagRGBQUAD@@PAV1@@Z
?Tile@CxImage@@QAEJPAUHDC__@@PAUtagRECT@@@Z
?TileToStrip@CxImageTIF@@IAEXPAE0KKHH@Z
?Transfer@CxImage@@QAE_NAAV1@@Z
?UnsharpMask@CxImage@@QAE_NMMH@Z
?Write@CxIOFile@@UAEIPBXII@Z
?Write@CxMemFile@@UAEIPBXII@Z
?XYZtoRGB@CxImage@@QAE?AUtagRGBQUAD@@U2@@Z
?YIQtoRGB@CxImage@@QAE?AUtagRGBQUAD@@U2@@Z
?YUVtoRGB@CxImage@@QAE?AUtagRGBQUAD@@U2@@Z
?b3spline@CxImage@@IAEMM@Z
?blur_line@CxImage@@IAEXPAM0HPAE1HJ@Z
?char_out@CxImageGIF@@IAEXH@Z
?cl_hash@CxImageGIF@@IAEXJ@Z
?compressLZW@CxImageGIF@@IAEXHPAVCxFile@@@Z
?compressNONE@CxImageGIF@@IAEXHPAVCxFile@@@Z
?compressRLE@CxImageGIF@@IAEXHPAVCxFile@@@Z
?decoder@CxImageGIF@@IAEFPAVCxFile@@PAVCImageIterator@@FAAH@Z
?flush_char@CxImageGIF@@IAEXXZ
?gen_convolve_matrix@CxImage@@IAEHMPAPAM@Z
?gen_lookup_table@CxImage@@IAEPAMPAMH@Z
?get_byte@CxImageGIF@@IAEHPAVCxFile@@@Z
?get_next_code@CxImageGIF@@IAEFPAVCxFile@@@Z
?get_num_frames@CxImageGIF@@IAEHPAVCxFile@@PAUtag_TabCol@1@@Z
?init_exp@CxImageGIF@@IAEFF@Z
?out_line@CxImageGIF@@IAEHPAVCImageIterator@@PAEH@Z
?output@CxImageGIF@@IAEXF@Z
?rle_block_flush@CxImageGIF@@IAEXPAUtag_RLE@1@@Z
?rle_block_out@CxImageGIF@@IAEXEPAUtag_RLE@1@@Z
?rle_clear@CxImageGIF@@IAEXPAUtag_RLE@1@@Z
?rle_compute_triangle_count@CxImageGIF@@IAEIII@Z
?rle_flush@CxImageGIF@@IAEXPAUtag_RLE@1@@Z
?rle_flush_clearorrep@CxImageGIF@@IAEXHPAUtag_RLE@1@@Z
?rle_flush_fromclear@CxImageGIF@@IAEXHPAUtag_RLE@1@@Z
?rle_flush_withtable@CxImageGIF@@IAEXHPAUtag_RLE@1@@Z
?rle_isqrt@CxImageGIF@@IAEII@Z
?rle_output@CxImageGIF@@IAEXHPAUtag_RLE@1@@Z
?rle_output_flush@CxImageGIF@@IAEXPAUtag_RLE@1@@Z
?rle_output_plain@CxImageGIF@@IAEXHPAUtag_RLE@1@@Z
?rle_reset_out_clear@CxImageGIF@@IAEXPAUtag_RLE@1@@Z
?rle_write_block@CxImageGIF@@IAEXPAUtag_RLE@1@@Z
Sections
.text Size: 648KB - Virtual size: 647KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 216KB - Virtual size: 214KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 20KB - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 1000B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 32KB - Virtual size: 29KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
wintaylor2.1/Programs/Imager/help/enu/ImagerUsersGuide.pdf.pdf
-
http://84042U.S.A.www.accessdata.com
-
http://Corp.select
-
http://accessdata.com
-
-
wintaylor2.1/Programs/Imager/icudt40.dll.dll windows:5 windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Exports
Exports
icudt40_dat
Sections
.rdata Size: 13.3MB - Virtual size: 13.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
wintaylor2.1/Programs/Imager/icuuc40.dll.dll windows:5 windows x86
65c6bafff19347215906a6e73024bc6b
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
InterlockedIncrement
InterlockedDecrement
DeleteCriticalSection
GetTimeZoneInformation
InitializeCriticalSection
CloseHandle
CreateFileMappingA
CreateFileA
UnmapViewOfFile
LeaveCriticalSection
EnterCriticalSection
GetACP
GetThreadLocale
MapViewOfFile
GetSystemTimeAsFileTime
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
DisableThreadLibraryCalls
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
InterlockedCompareExchange
Sleep
InterlockedExchange
GetCurrentProcessId
advapi32
SetSecurityDescriptorDacl
RegOpenKeyExA
RegQueryValueExA
RegCloseKey
InitializeSecurityDescriptor
icudt40
icudt40_dat
msvcr90
strcmp
floor
ceil
fabs
modf
fmod
pow
log
_tzset
__timezone
__tzname
strchr
strcpy
getenv
strlen
strtoul
strcat
atol
strncmp
_stricmp
malloc
realloc
free
strrchr
strncat
??_U@YAPAXI@Z
isspace
strtod
_strnicmp
strtol
wcslen
?terminate@@YAXXZ
_encode_pointer
_malloc_crt
_encoded_null
_decode_pointer
_initterm
_initterm_e
_amsg_exit
_adjust_fdiv
__CppXcptFilter
_crt_debugger_hook
?_type_info_dtor_internal_method@type_info@@QAEXXZ
_except_handler4_common
__clean_type_info_names_internal
_unlock
__dllonexit
_lock
_onexit
strstr
memcmp
strncpy
__CxxFrameHandler3
??_V@YAXPAX@Z
??3@YAXPAX@Z
_purecall
memmove
memcpy
memset
sprintf
Exports
Exports
??0BreakIterator@icu_4_0@@IAE@ABV01@@Z
??0BreakIterator@icu_4_0@@IAE@XZ
??0CanonicalIterator@icu_4_0@@QAE@ABVUnicodeString@1@AAW4UErrorCode@@@Z
??0CharString@icu_4_0@@QAE@ABVUnicodeString@1@@Z
??0CharacterIterator@icu_4_0@@IAE@ABV01@@Z
??0CharacterIterator@icu_4_0@@IAE@H@Z
??0CharacterIterator@icu_4_0@@IAE@HH@Z
??0CharacterIterator@icu_4_0@@IAE@HHHH@Z
??0CharacterIterator@icu_4_0@@IAE@XZ
??0CompactTrieDictionary@icu_4_0@@QAE@ABV01@@Z
??0CompactTrieDictionary@icu_4_0@@QAE@ABVMutableTrieDictionary@1@AAW4UErrorCode@@@Z
??0CompactTrieDictionary@icu_4_0@@QAE@PAUUDataMemory@@AAW4UErrorCode@@@Z
??0CompactTrieDictionary@icu_4_0@@QAE@PBXAAW4UErrorCode@@@Z
??0DateInterval@icu_4_0@@QAE@ABV01@@Z
??0DateInterval@icu_4_0@@QAE@NN@Z
??0EventListener@icu_4_0@@QAE@ABV01@@Z
??0EventListener@icu_4_0@@QAE@XZ
??0ForwardCharacterIterator@icu_4_0@@IAE@ABV01@@Z
??0ForwardCharacterIterator@icu_4_0@@IAE@XZ
??0Hashtable@icu_4_0@@QAE@AAW4UErrorCode@@@Z
??0Hashtable@icu_4_0@@QAE@CAAW4UErrorCode@@@Z
??0Hashtable@icu_4_0@@QAE@P6ACTUHashTok@@0@Z1AAW4UErrorCode@@@Z
??0Hashtable@icu_4_0@@QAE@XZ
??0ICULocaleService@icu_4_0@@QAE@ABV01@@Z
??0ICULocaleService@icu_4_0@@QAE@ABVUnicodeString@1@@Z
??0ICULocaleService@icu_4_0@@QAE@XZ
??0ICUNotifier@icu_4_0@@QAE@ABV01@@Z
??0ICUNotifier@icu_4_0@@QAE@XZ
??0ICUResourceBundleFactory@icu_4_0@@QAE@ABV01@@Z
??0ICUResourceBundleFactory@icu_4_0@@QAE@ABVUnicodeString@1@@Z
??0ICUResourceBundleFactory@icu_4_0@@QAE@XZ
??0ICUService@icu_4_0@@QAE@ABV01@@Z
??0ICUService@icu_4_0@@QAE@ABVUnicodeString@1@@Z
??0ICUService@icu_4_0@@QAE@XZ
??0ICUServiceFactory@icu_4_0@@QAE@ABV01@@Z
??0ICUServiceFactory@icu_4_0@@QAE@XZ
??0ICUServiceKey@icu_4_0@@QAE@ABV01@@Z
??0ICUServiceKey@icu_4_0@@QAE@ABVUnicodeString@1@@Z
??0Locale@icu_4_0@@AAE@W4ELocaleType@01@@Z
??0Locale@icu_4_0@@QAE@ABV01@@Z
??0Locale@icu_4_0@@QAE@PBD000@Z
??0Locale@icu_4_0@@QAE@XZ
??0LocaleBased@icu_4_0@@QAE@PAD0@Z
??0LocaleBased@icu_4_0@@QAE@PBD0@Z
??0LocaleKey@icu_4_0@@IAE@ABVUnicodeString@1@0PBV21@H@Z
??0LocaleKey@icu_4_0@@QAE@ABV01@@Z
??0LocaleKeyFactory@icu_4_0@@IAE@H@Z
??0LocaleKeyFactory@icu_4_0@@IAE@HABVUnicodeString@1@@Z
??0LocaleKeyFactory@icu_4_0@@QAE@ABV01@@Z
??0MutableTrieDictionary@icu_4_0@@AAE@AAW4UErrorCode@@@Z
??0MutableTrieDictionary@icu_4_0@@QAE@ABV01@@Z
??0MutableTrieDictionary@icu_4_0@@QAE@_WAAW4UErrorCode@@@Z
??0Mutex@icu_4_0@@QAE@PAPAX@Z
??0Normalizer@icu_4_0@@QAE@ABV01@@Z
??0Normalizer@icu_4_0@@QAE@ABVCharacterIterator@1@W4UNormalizationMode@@@Z
??0Normalizer@icu_4_0@@QAE@ABVUnicodeString@1@W4UNormalizationMode@@@Z
??0Normalizer@icu_4_0@@QAE@PB_WHW4UNormalizationMode@@@Z
??0ParsePosition@icu_4_0@@QAE@ABV01@@Z
??0ParsePosition@icu_4_0@@QAE@H@Z
??0ParsePosition@icu_4_0@@QAE@XZ
??0Replaceable@icu_4_0@@IAE@XZ
??0Replaceable@icu_4_0@@QAE@ABV01@@Z
??0ResourceBundle@icu_4_0@@QAE@AAW4UErrorCode@@@Z
??0ResourceBundle@icu_4_0@@QAE@ABV01@@Z
??0ResourceBundle@icu_4_0@@QAE@ABVUnicodeString@1@AAW4UErrorCode@@@Z
??0ResourceBundle@icu_4_0@@QAE@ABVUnicodeString@1@ABVLocale@1@AAW4UErrorCode@@@Z
??0ResourceBundle@icu_4_0@@QAE@PAUUResourceBundle@@AAW4UErrorCode@@@Z
??0ResourceBundle@icu_4_0@@QAE@PBDABVLocale@1@AAW4UErrorCode@@@Z
??0RuleBasedBreakIterator@icu_4_0@@IAE@PAURBBIDataHeader@1@AAW4UErrorCode@@@Z
??0RuleBasedBreakIterator@icu_4_0@@QAE@ABV01@@Z
??0RuleBasedBreakIterator@icu_4_0@@QAE@ABVUnicodeString@1@AAUUParseError@@AAW4UErrorCode@@@Z
??0RuleBasedBreakIterator@icu_4_0@@QAE@PAUUDataMemory@@AAW4UErrorCode@@@Z
??0RuleBasedBreakIterator@icu_4_0@@QAE@XZ
??0ServiceListener@icu_4_0@@QAE@ABV01@@Z
??0ServiceListener@icu_4_0@@QAE@XZ
??0SimpleFactory@icu_4_0@@QAE@ABV01@@Z
??0SimpleFactory@icu_4_0@@QAE@PAVUObject@1@ABVUnicodeString@1@C@Z
??0SimpleLocaleKeyFactory@icu_4_0@@QAE@ABV01@@Z
??0SimpleLocaleKeyFactory@icu_4_0@@QAE@PAVUObject@1@ABVLocale@1@HH@Z
??0SimpleLocaleKeyFactory@icu_4_0@@QAE@PAVUObject@1@ABVUnicodeString@1@HH@Z
??0StringCharacterIterator@icu_4_0@@IAE@XZ
??0StringCharacterIterator@icu_4_0@@QAE@ABV01@@Z
??0StringCharacterIterator@icu_4_0@@QAE@ABVUnicodeString@1@@Z
??0StringCharacterIterator@icu_4_0@@QAE@ABVUnicodeString@1@H@Z
??0StringCharacterIterator@icu_4_0@@QAE@ABVUnicodeString@1@HHH@Z
??0StringEnumeration@icu_4_0@@IAE@XZ
??0StringEnumeration@icu_4_0@@QAE@ABV01@@Z
??0StringPair@icu_4_0@@AAE@ABVUnicodeString@1@0@Z
??0StringPair@icu_4_0@@QAE@ABV01@@Z
??0SymbolTable@icu_4_0@@QAE@ABV01@@Z
??0SymbolTable@icu_4_0@@QAE@XZ
??0TrieWordDictionary@icu_4_0@@QAE@ABV01@@Z
??0TrieWordDictionary@icu_4_0@@QAE@XZ
??0UCharCharacterIterator@icu_4_0@@IAE@XZ
??0UCharCharacterIterator@icu_4_0@@QAE@ABV01@@Z
??0UCharCharacterIterator@icu_4_0@@QAE@PB_WH@Z
??0UCharCharacterIterator@icu_4_0@@QAE@PB_WHH@Z
??0UCharCharacterIterator@icu_4_0@@QAE@PB_WHHHH@Z
??0UObject@icu_4_0@@QAE@ABV01@@Z
??0UObject@icu_4_0@@QAE@XZ
??0UStack@icu_4_0@@QAE@AAW4UErrorCode@@@Z
??0UStack@icu_4_0@@QAE@HAAW4UErrorCode@@@Z
??0UStack@icu_4_0@@QAE@P6AXPAX@ZP6ACTUHashTok@@2@ZAAW4UErrorCode@@@Z
??0UStack@icu_4_0@@QAE@P6AXPAX@ZP6ACTUHashTok@@2@ZHAAW4UErrorCode@@@Z
??0UStringEnumeration@icu_4_0@@QAE@ABV01@@Z
??0UStringEnumeration@icu_4_0@@QAE@PAUUEnumeration@@@Z
??0UVector32@icu_4_0@@QAE@AAW4UErrorCode@@@Z
??0UVector32@icu_4_0@@QAE@HAAW4UErrorCode@@@Z
??0UVector@icu_4_0@@QAE@AAW4UErrorCode@@@Z
??0UVector@icu_4_0@@QAE@HAAW4UErrorCode@@@Z
??0UVector@icu_4_0@@QAE@P6AXPAX@ZP6ACTUHashTok@@2@ZAAW4UErrorCode@@@Z
??0UVector@icu_4_0@@QAE@P6AXPAX@ZP6ACTUHashTok@@2@ZHAAW4UErrorCode@@@Z
??0UnicodeFilter@icu_4_0@@QAE@ABV01@@Z
??0UnicodeFilter@icu_4_0@@QAE@XZ
??0UnicodeFunctor@icu_4_0@@QAE@ABV01@@Z
??0UnicodeFunctor@icu_4_0@@QAE@XZ
??0UnicodeMatcher@icu_4_0@@QAE@ABV01@@Z
??0UnicodeMatcher@icu_4_0@@QAE@XZ
??0UnicodeSet@icu_4_0@@AAE@ABV01@C@Z
??0UnicodeSet@icu_4_0@@QAE@ABV01@@Z
??0UnicodeSet@icu_4_0@@QAE@ABVUnicodeString@1@AAVParsePosition@1@IPBVSymbolTable@1@AAW4UErrorCode@@@Z
??0UnicodeSet@icu_4_0@@QAE@ABVUnicodeString@1@AAW4UErrorCode@@@Z
??0UnicodeSet@icu_4_0@@QAE@ABVUnicodeString@1@IPBVSymbolTable@1@AAW4UErrorCode@@@Z
??0UnicodeSet@icu_4_0@@QAE@HH@Z
??0UnicodeSet@icu_4_0@@QAE@XZ
??0UnicodeSetIterator@icu_4_0@@QAE@ABVUnicodeSet@1@@Z
??0UnicodeSetIterator@icu_4_0@@QAE@XZ
??0UnicodeString@icu_4_0@@QAE@ABV01@@Z
??0UnicodeString@icu_4_0@@QAE@ABV01@H@Z
??0UnicodeString@icu_4_0@@QAE@ABV01@HH@Z
??0UnicodeString@icu_4_0@@QAE@CPB_WH@Z
??0UnicodeString@icu_4_0@@QAE@H@Z
??0UnicodeString@icu_4_0@@QAE@HHH@Z
??0UnicodeString@icu_4_0@@QAE@PA_WHH@Z
??0UnicodeString@icu_4_0@@QAE@PBD0@Z
??0UnicodeString@icu_4_0@@QAE@PBDH0@Z
??0UnicodeString@icu_4_0@@QAE@PBDHPAUUConverter@@AAW4UErrorCode@@@Z
??0UnicodeString@icu_4_0@@QAE@PBDHW4EInvariant@01@@Z
??0UnicodeString@icu_4_0@@QAE@PB_W@Z
??0UnicodeString@icu_4_0@@QAE@PB_WH@Z
??0UnicodeString@icu_4_0@@QAE@XZ
??0UnicodeString@icu_4_0@@QAE@_W@Z
??1BreakIterator@icu_4_0@@UAE@XZ
??1CanonicalIterator@icu_4_0@@UAE@XZ
??1CharString@icu_4_0@@QAE@XZ
??1CharacterIterator@icu_4_0@@UAE@XZ
??1CompactTrieDictionary@icu_4_0@@UAE@XZ
??1DateInterval@icu_4_0@@UAE@XZ
??1EventListener@icu_4_0@@UAE@XZ
??1ForwardCharacterIterator@icu_4_0@@UAE@XZ
??1Hashtable@icu_4_0@@QAE@XZ
??1ICULocaleService@icu_4_0@@UAE@XZ
??1ICUNotifier@icu_4_0@@UAE@XZ
??1ICUResourceBundleFactory@icu_4_0@@UAE@XZ
??1ICUService@icu_4_0@@UAE@XZ
??1ICUServiceFactory@icu_4_0@@UAE@XZ
??1ICUServiceKey@icu_4_0@@UAE@XZ
??1Locale@icu_4_0@@UAE@XZ
??1LocaleKey@icu_4_0@@UAE@XZ
??1LocaleKeyFactory@icu_4_0@@UAE@XZ
??1MutableTrieDictionary@icu_4_0@@UAE@XZ
??1Mutex@icu_4_0@@QAE@XZ
??1Normalizer@icu_4_0@@UAE@XZ
??1ParsePosition@icu_4_0@@UAE@XZ
??1Replaceable@icu_4_0@@UAE@XZ
??1ResourceBundle@icu_4_0@@UAE@XZ
??1RuleBasedBreakIterator@icu_4_0@@UAE@XZ
??1ServiceListener@icu_4_0@@UAE@XZ
??1SimpleFactory@icu_4_0@@UAE@XZ
??1SimpleLocaleKeyFactory@icu_4_0@@UAE@XZ
??1StringCharacterIterator@icu_4_0@@UAE@XZ
??1StringEnumeration@icu_4_0@@UAE@XZ
??1StringPair@icu_4_0@@QAE@XZ
??1SymbolTable@icu_4_0@@UAE@XZ
??1TrieWordDictionary@icu_4_0@@UAE@XZ
??1UCharCharacterIterator@icu_4_0@@UAE@XZ
??1UObject@icu_4_0@@UAE@XZ
??1UStack@icu_4_0@@UAE@XZ
??1UStringEnumeration@icu_4_0@@UAE@XZ
??1UVector32@icu_4_0@@UAE@XZ
??1UVector@icu_4_0@@UAE@XZ
??1UnicodeFilter@icu_4_0@@UAE@XZ
??1UnicodeFunctor@icu_4_0@@UAE@XZ
??1UnicodeMatcher@icu_4_0@@UAE@XZ
??1UnicodeSet@icu_4_0@@UAE@XZ
??1UnicodeSetIterator@icu_4_0@@UAE@XZ
??1UnicodeString@icu_4_0@@UAE@XZ
??2UMemory@icu_4_0@@SAPAXI@Z
??2UMemory@icu_4_0@@SAPAXIPAX@Z
??2UMemory@icu_4_0@@SAPAXIPBDH@Z
??3UMemory@icu_4_0@@SAXPAX0@Z
??3UMemory@icu_4_0@@SAXPAX@Z
??3UMemory@icu_4_0@@SAXPAXPBDH@Z
??4CharacterIterator@icu_4_0@@IAEAAV01@ABV01@@Z
??4CompactTrieDictionary@icu_4_0@@QAEAAV01@ABV01@@Z
??4DateInterval@icu_4_0@@QAEAAV01@ABV01@@Z
??4EventListener@icu_4_0@@QAEAAV01@ABV01@@Z
??4ForwardCharacterIterator@icu_4_0@@IAEAAV01@ABV01@@Z
??4ICUNotifier@icu_4_0@@QAEAAV01@ABV01@@Z
??4ICUServiceFactory@icu_4_0@@QAEAAV01@ABV01@@Z
??4ICU_Utility@icu_4_0@@QAEAAV01@ABV01@@Z
??4Locale@icu_4_0@@QAEAAV01@ABV01@@Z
??4LocaleBased@icu_4_0@@QAEAAV01@ABV01@@Z
??4LocaleUtility@icu_4_0@@QAEAAV01@ABV01@@Z
??4MutableTrieDictionary@icu_4_0@@QAEAAV01@ABV01@@Z
??4ParsePosition@icu_4_0@@QAEAAV01@ABV01@@Z
??4Replaceable@icu_4_0@@QAEAAV01@ABV01@@Z
??4ResourceBundle@icu_4_0@@QAEAAV01@ABV01@@Z
??4RuleBasedBreakIterator@icu_4_0@@QAEAAV01@ABV01@@Z
??4ServiceListener@icu_4_0@@QAEAAV01@ABV01@@Z
??4StringCharacterIterator@icu_4_0@@QAEAAV01@ABV01@@Z
??4StringEnumeration@icu_4_0@@QAEAAV01@ABV01@@Z
??4SymbolTable@icu_4_0@@QAEAAV01@ABV01@@Z
??4TrieWordDictionary@icu_4_0@@QAEAAV01@ABV01@@Z
??4UCharCharacterIterator@icu_4_0@@QAEAAV01@ABV01@@Z
??4UMemory@icu_4_0@@QAEAAV01@ABV01@@Z
??4UObject@icu_4_0@@QAEAAV01@ABV01@@Z
??4UStringEnumeration@icu_4_0@@QAEAAV01@ABV01@@Z
??4UnicodeFilter@icu_4_0@@QAEAAV01@ABV01@@Z
??4UnicodeFunctor@icu_4_0@@QAEAAV01@ABV01@@Z
??4UnicodeMatcher@icu_4_0@@QAEAAV01@ABV01@@Z
??4UnicodeSet@icu_4_0@@QAEAAV01@ABV01@@Z
??4UnicodeString@icu_4_0@@QAEAAV01@ABV01@@Z
??4UnicodeString@icu_4_0@@QAEAAV01@H@Z
??4UnicodeString@icu_4_0@@QAEAAV01@_W@Z
??8DateInterval@icu_4_0@@UBECABV01@@Z
??8Locale@icu_4_0@@QBECABV01@@Z
??8Normalizer@icu_4_0@@QBECABV01@@Z
??8ParsePosition@icu_4_0@@QBECABV01@@Z
??8RuleBasedBreakIterator@icu_4_0@@UBECABVBreakIterator@1@@Z
??8StringCharacterIterator@icu_4_0@@UBECABVForwardCharacterIterator@1@@Z
??8StringEnumeration@icu_4_0@@UBECABV01@@Z
??8UCharCharacterIterator@icu_4_0@@UBECABVForwardCharacterIterator@1@@Z
??8UVector32@icu_4_0@@QAECABV01@@Z
??8UVector@icu_4_0@@QAECABV01@@Z
??8UnicodeSet@icu_4_0@@UBECABV01@@Z
??8UnicodeString@icu_4_0@@QBECABV01@@Z
??9BreakIterator@icu_4_0@@QBECABV01@@Z
??9DateInterval@icu_4_0@@QBECABV01@@Z
??9ForwardCharacterIterator@icu_4_0@@QBECABV01@@Z
??9Locale@icu_4_0@@QBECABV01@@Z
??9Normalizer@icu_4_0@@QBECABV01@@Z
??9ParsePosition@icu_4_0@@QBECABV01@@Z
??9RuleBasedBreakIterator@icu_4_0@@QBECABVBreakIterator@1@@Z
??9StringEnumeration@icu_4_0@@UBECABV01@@Z
??9UVector32@icu_4_0@@QAECABV01@@Z
??9UVector@icu_4_0@@QAECABV01@@Z
??9UnicodeSet@icu_4_0@@QBECABV01@@Z
??9UnicodeString@icu_4_0@@QBECABV01@@Z
??AUVector@icu_4_0@@QBEPAXH@Z
??AUnicodeString@icu_4_0@@QBE_WH@Z
??BCharString@icu_4_0@@QBEPBDXZ
??Hicu_4_0@@YA?AVUnicodeString@0@ABV10@0@Z
??MUnicodeString@icu_4_0@@QBECABV01@@Z
??NUnicodeString@icu_4_0@@QBECABV01@@Z
??OUnicodeString@icu_4_0@@QBECABV01@@Z
??PUnicodeString@icu_4_0@@QBECABV01@@Z
??YUnicodeString@icu_4_0@@QAEAAV01@ABV01@@Z
??YUnicodeString@icu_4_0@@QAEAAV01@H@Z
??YUnicodeString@icu_4_0@@QAEAAV01@_W@Z
??_7BreakIterator@icu_4_0@@6B@
??_7CanonicalIterator@icu_4_0@@6B@
??_7CharacterIterator@icu_4_0@@6B@
??_7CompactTrieDictionary@icu_4_0@@6B@
??_7DateInterval@icu_4_0@@6B@
??_7EventListener@icu_4_0@@6B@
??_7ForwardCharacterIterator@icu_4_0@@6B@
??_7ICULocaleService@icu_4_0@@6B@
??_7ICUNotifier@icu_4_0@@6B@
??_7ICUResourceBundleFactory@icu_4_0@@6B@
??_7ICUService@icu_4_0@@6B@
??_7ICUServiceFactory@icu_4_0@@6B@
??_7ICUServiceKey@icu_4_0@@6B@
??_7Locale@icu_4_0@@6B@
??_7LocaleKey@icu_4_0@@6B@
??_7LocaleKeyFactory@icu_4_0@@6B@
??_7MutableTrieDictionary@icu_4_0@@6B@
??_7Normalizer@icu_4_0@@6B@
??_7ParsePosition@icu_4_0@@6B@
??_7Replaceable@icu_4_0@@6B@
??_7ResourceBundle@icu_4_0@@6B@
??_7RuleBasedBreakIterator@icu_4_0@@6B@
??_7ServiceListener@icu_4_0@@6B@
??_7SimpleFactory@icu_4_0@@6B@
??_7SimpleLocaleKeyFactory@icu_4_0@@6B@
??_7StringCharacterIterator@icu_4_0@@6B@
??_7StringEnumeration@icu_4_0@@6B@
??_7SymbolTable@icu_4_0@@6B@
??_7TrieWordDictionary@icu_4_0@@6B@
??_7UCharCharacterIterator@icu_4_0@@6B@
??_7UObject@icu_4_0@@6B@
??_7UStack@icu_4_0@@6B@
??_7UStringEnumeration@icu_4_0@@6B@
??_7UVector32@icu_4_0@@6B@
??_7UVector@icu_4_0@@6B@
??_7UnicodeFilter@icu_4_0@@6BUnicodeFunctor@1@@
??_7UnicodeFilter@icu_4_0@@6BUnicodeMatcher@1@@
??_7UnicodeFunctor@icu_4_0@@6B@
??_7UnicodeMatcher@icu_4_0@@6B@
??_7UnicodeSet@icu_4_0@@6BUnicodeFunctor@1@@
??_7UnicodeSet@icu_4_0@@6BUnicodeMatcher@1@@
??_7UnicodeSetIterator@icu_4_0@@6B@
??_7UnicodeString@icu_4_0@@6B@
??_FMutex@icu_4_0@@QAEXXZ
??_UUMemory@icu_4_0@@SAPAXI@Z
??_VUMemory@icu_4_0@@SAXPAX@Z
?PREFIX_DELIMITER@ICUServiceKey@icu_4_0@@1_WB
?_add@UnicodeSet@icu_4_0@@AAEXABVUnicodeString@2@@Z
?_appendToPat@UnicodeSet@icu_4_0@@CAXAAVUnicodeString@2@ABV32@C@Z
?_appendToPat@UnicodeSet@icu_4_0@@CAXAAVUnicodeString@2@HC@Z
?_generatePattern@UnicodeSet@icu_4_0@@ABEAAVUnicodeString@2@AAV32@C@Z
?_init@UVector32@icu_4_0@@AAEXHAAW4UErrorCode@@@Z
?_init@UVector@icu_4_0@@AAEXHAAW4UErrorCode@@@Z
?_toPattern@UnicodeSet@icu_4_0@@ABEAAVUnicodeString@2@AAV32@C@Z
?acceptsListener@ICUService@icu_4_0@@MBECABVEventListener@2@@Z
?add@UnicodeSet@icu_4_0@@AAEXPBHHC@Z
?add@UnicodeSet@icu_4_0@@QAEAAV12@ABVUnicodeString@2@@Z
?add@UnicodeSet@icu_4_0@@QAEAAV12@H@Z
?add@UnicodeSet@icu_4_0@@UAEAAV12@HH@Z
?addAll@UnicodeSet@icu_4_0@@QAEAAV12@ABVUnicodeString@2@@Z
?addAll@UnicodeSet@icu_4_0@@UAEAAV12@ABV12@@Z
?addElement@UVector32@icu_4_0@@QAEXHAAW4UErrorCode@@@Z
?addElement@UVector@icu_4_0@@QAEXHAAW4UErrorCode@@@Z
?addElement@UVector@icu_4_0@@QAEXPAXAAW4UErrorCode@@@Z
?addListener@ICUNotifier@icu_4_0@@UAEXPBVEventListener@2@AAW4UErrorCode@@@Z
?addMatchSetTo@UnicodeSet@icu_4_0@@UBEXAAV12@@Z
?addRef@UnicodeString@icu_4_0@@AAEXXZ
?addWord@MutableTrieDictionary@icu_4_0@@UAEXPB_WHAAW4UErrorCode@@@Z
?adoptText@RuleBasedBreakIterator@icu_4_0@@UAEXPAVCharacterIterator@2@@Z
?allocate@UnicodeString@icu_4_0@@AAECH@Z
?allocateStrings@UnicodeSet@icu_4_0@@AAECAAW4UErrorCode@@@Z
?append@UnicodeString@icu_4_0@@QAEAAV12@ABV12@@Z
?append@UnicodeString@icu_4_0@@QAEAAV12@ABV12@HH@Z
?append@UnicodeString@icu_4_0@@QAEAAV12@H@Z
?append@UnicodeString@icu_4_0@@QAEAAV12@PB_WH@Z
?append@UnicodeString@icu_4_0@@QAEAAV12@PB_WHH@Z
?append@UnicodeString@icu_4_0@@QAEAAV12@_W@Z
?appendNumber@ICU_Utility@icu_4_0@@SAAAVUnicodeString@2@AAV32@HHH@Z
?appendToRule@ICU_Utility@icu_4_0@@SAXAAVUnicodeString@2@ABV32@CC0@Z
?appendToRule@ICU_Utility@icu_4_0@@SAXAAVUnicodeString@2@HCC0@Z
?appendToRule@ICU_Utility@icu_4_0@@SAXAAVUnicodeString@2@PBVUnicodeMatcher@2@C0@Z
?applyFilter@UnicodeSet@icu_4_0@@AAEXP6ACHPAX@Z0HAAW4UErrorCode@@@Z
?applyIntPropertyValue@UnicodeSet@icu_4_0@@QAEAAV12@W4UProperty@@HAAW4UErrorCode@@@Z
?applyPattern@UnicodeSet@icu_4_0@@AAEXAAVRuleCharacterIterator@2@PBVSymbolTable@2@AAVUnicodeString@2@IAAW4UErrorCode@@@Z
?applyPattern@UnicodeSet@icu_4_0@@QAEAAV12@ABVUnicodeString@2@AAVParsePosition@2@IPBVSymbolTable@2@AAW4UErrorCode@@@Z
?applyPattern@UnicodeSet@icu_4_0@@QAEAAV12@ABVUnicodeString@2@AAW4UErrorCode@@@Z
?applyPattern@UnicodeSet@icu_4_0@@QAEAAV12@ABVUnicodeString@2@IPBVSymbolTable@2@AAW4UErrorCode@@@Z
?applyPropertyAlias@UnicodeSet@icu_4_0@@QAEAAV12@ABVUnicodeString@2@0AAW4UErrorCode@@@Z
?applyPropertyPattern@UnicodeSet@icu_4_0@@AAEAAV12@ABVUnicodeString@2@AAVParsePosition@2@AAW4UErrorCode@@@Z
?applyPropertyPattern@UnicodeSet@icu_4_0@@AAEXAAVRuleCharacterIterator@2@AAVUnicodeString@2@AAW4UErrorCode@@@Z
?assign@UVector32@icu_4_0@@QAEXABV12@AAW4UErrorCode@@@Z
?assign@UVector@icu_4_0@@QAEXABV12@P6AXPATUHashTok@@1@ZAAW4UErrorCode@@@Z
?buildInstance@BreakIterator@icu_4_0@@CAPAV12@ABVLocale@2@PBDHAAW4UErrorCode@@@Z
?canonicalID@ICUServiceKey@icu_4_0@@UBEAAVUnicodeString@2@AAV32@@Z
?canonicalID@LocaleKey@icu_4_0@@UBEAAVUnicodeString@2@AAV32@@Z
?canonicalLocale@LocaleKey@icu_4_0@@UBEAAVLocale@2@AAV32@@Z
?canonicalLocaleString@LocaleUtility@icu_4_0@@SAAAVUnicodeString@2@PBV32@AAV32@@Z
?caseCompare@UnicodeString@icu_4_0@@QBECABV12@I@Z
?caseCompare@UnicodeString@icu_4_0@@QBECHHABV12@HHI@Z
?caseCompare@UnicodeString@icu_4_0@@QBECHHABV12@I@Z
?caseCompare@UnicodeString@icu_4_0@@QBECHHPB_WHHI@Z
?caseCompare@UnicodeString@icu_4_0@@QBECHHPB_WI@Z
?caseCompare@UnicodeString@icu_4_0@@QBECPB_WHI@Z
?caseCompareBetween@UnicodeString@icu_4_0@@QBECHHABV12@HHI@Z
?caseMap@UnicodeString@icu_4_0@@AAEAAV12@PAVBreakIterator@2@PBDIH@Z
?char32At@Replaceable@icu_4_0@@QBEHH@Z
?char32At@UnicodeString@icu_4_0@@QBEHH@Z
?charAt@Replaceable@icu_4_0@@QBE_WH@Z
?charAt@UnicodeSet@icu_4_0@@QBEHH@Z
?charAt@UnicodeString@icu_4_0@@QBE_WH@Z
?checkDictionary@RuleBasedBreakIterator@icu_4_0@@IAEHHHC@Z
?cleanPieces@CanonicalIterator@icu_4_0@@AAEXXZ
?clear@UnicodeSet@icu_4_0@@UAEAAV12@XZ
?clearBuffer@Normalizer@icu_4_0@@AAEXXZ
?clearCaches@ICUService@icu_4_0@@MAEXXZ
?clearServiceCache@ICUService@icu_4_0@@IAEXXZ
?clone@DateInterval@icu_4_0@@UBEPAV12@XZ
?clone@Locale@icu_4_0@@QBEPAV12@XZ
?clone@Normalizer@icu_4_0@@QBEPAV12@XZ
?clone@ParsePosition@icu_4_0@@QBEPAV12@XZ
?clone@Replaceable@icu_4_0@@UBEPAV12@XZ
?clone@ResourceBundle@icu_4_0@@QBEPAV12@XZ
?clone@RuleBasedBreakIterator@icu_4_0@@UBEPAVBreakIterator@2@XZ
?clone@StringCharacterIterator@icu_4_0@@UBEPAVCharacterIterator@2@XZ
?clone@StringEnumeration@icu_4_0@@UBEPAV12@XZ
?clone@UCharCharacterIterator@icu_4_0@@UBEPAVCharacterIterator@2@XZ
?clone@UnicodeSet@icu_4_0@@UBEPAVUnicodeFunctor@2@XZ
?clone@UnicodeString@icu_4_0@@UBEPAVReplaceable@2@XZ
?cloneArrayIfNeeded@UnicodeString@icu_4_0@@AAECHHCPAPAHC@Z
?cloneAsThawed@UnicodeSet@icu_4_0@@QBEPAVUnicodeFunctor@2@XZ
?cloneMutable@CompactTrieDictionary@icu_4_0@@UBEPAVMutableTrieDictionary@2@AAW4UErrorCode@@@Z
?closeOver@UnicodeSet@icu_4_0@@QAEAAV12@H@Z
?compact@UnicodeSet@icu_4_0@@UAEAAV12@XZ
?compactMutableTrieDictionary@CompactTrieDictionary@icu_4_0@@CAPAUCompactTrieHeader@2@ABVMutableTrieDictionary@2@AAW4UErrorCode@@@Z
?compare@Normalizer@icu_4_0@@SAHABVUnicodeString@2@0IAAW4UErrorCode@@@Z
?compare@UnicodeString@icu_4_0@@QBECABV12@@Z
?compare@UnicodeString@icu_4_0@@QBECHHABV12@@Z
?compare@UnicodeString@icu_4_0@@QBECHHABV12@HH@Z
?compare@UnicodeString@icu_4_0@@QBECHHPB_W@Z
?compare@UnicodeString@icu_4_0@@QBECHHPB_WHH@Z
?compare@UnicodeString@icu_4_0@@QBECPB_WH@Z
?compareBetween@UnicodeString@icu_4_0@@QBECHHABV12@HH@Z
?compareCodePointOrder@UnicodeString@icu_4_0@@QBECABV12@@Z
?compareCodePointOrder@UnicodeString@icu_4_0@@QBECHHABV12@@Z
?compareCodePointOrder@UnicodeString@icu_4_0@@QBECHHABV12@HH@Z
?compareCodePointOrder@UnicodeString@icu_4_0@@QBECHHPB_W@Z
?compareCodePointOrder@UnicodeString@icu_4_0@@QBECHHPB_WHH@Z
?compareCodePointOrder@UnicodeString@icu_4_0@@QBECPB_WH@Z
?compareCodePointOrderBetween@UnicodeString@icu_4_0@@QBECHHABV12@HH@Z
?complement@UnicodeSet@icu_4_0@@QAEAAV12@ABVUnicodeString@2@@Z
?complement@UnicodeSet@icu_4_0@@QAEAAV12@H@Z
?complement@UnicodeSet@icu_4_0@@UAEAAV12@HH@Z
?complement@UnicodeSet@icu_4_0@@UAEAAV12@XZ
?complementAll@UnicodeSet@icu_4_0@@QAEAAV12@ABVUnicodeString@2@@Z
?complementAll@UnicodeSet@icu_4_0@@UAEAAV12@ABV12@@Z
?compose@Normalizer@icu_4_0@@SAXABVUnicodeString@2@CHAAV32@AAW4UErrorCode@@@Z
?concatenate@Normalizer@icu_4_0@@SAAAVUnicodeString@2@AAV32@00W4UNormalizationMode@@HAAW4UErrorCode@@@Z
?constructForLocale@ResourceBundle@icu_4_0@@AAEXABVUnicodeString@2@ABVLocale@2@AAW4UErrorCode@@@Z
?contains@UVector32@icu_4_0@@QBECH@Z
?contains@UVector@icu_4_0@@QBECH@Z
?contains@UVector@icu_4_0@@QBECPAX@Z
?contains@UnicodeSet@icu_4_0@@QBECABVUnicodeString@2@@Z
?contains@UnicodeSet@icu_4_0@@UBECH@Z
?contains@UnicodeSet@icu_4_0@@UBECHH@Z
?containsAll@UVector32@icu_4_0@@QBECABV12@@Z
?containsAll@UVector@icu_4_0@@QBECABV12@@Z
?containsAll@UnicodeSet@icu_4_0@@QBECABVUnicodeString@2@@Z
?containsAll@UnicodeSet@icu_4_0@@UBECABV12@@Z
?containsNone@UVector32@icu_4_0@@QBECABV12@@Z
?containsNone@UVector@icu_4_0@@QBECABV12@@Z
?containsNone@UnicodeSet@icu_4_0@@QBECABV12@@Z
?containsNone@UnicodeSet@icu_4_0@@QBECABVUnicodeString@2@@Z
?containsNone@UnicodeSet@icu_4_0@@QBECHH@Z
?containsSome@UnicodeSet@icu_4_0@@QBECABV12@@Z
?containsSome@UnicodeSet@icu_4_0@@QBECABVUnicodeString@2@@Z
?containsSome@UnicodeSet@icu_4_0@@QBECHH@Z
?copy@UnicodeString@icu_4_0@@UAEXHHH@Z
?copyFrom@UnicodeString@icu_4_0@@AAEAAV12@ABV12@C@Z
?count@Hashtable@icu_4_0@@QBEHXZ
?count@UStringEnumeration@icu_4_0@@UBEHAAW4UErrorCode@@@Z
?countChar32@UnicodeString@icu_4_0@@QBEHHH@Z
?countFactories@ICUService@icu_4_0@@IBEHXZ
?create@LocaleKeyFactory@icu_4_0@@UBEPAVUObject@2@ABVICUServiceKey@2@PBVICUService@2@AAW4UErrorCode@@@Z
?create@SimpleFactory@icu_4_0@@UBEPAVUObject@2@ABVICUServiceKey@2@PBVICUService@2@AAW4UErrorCode@@@Z
?create@SimpleLocaleKeyFactory@icu_4_0@@UBEPAVUObject@2@ABVICUServiceKey@2@PBVICUService@2@AAW4UErrorCode@@@Z
?create@StringPair@icu_4_0@@SAPAV12@ABVUnicodeString@2@0AAW4UErrorCode@@@Z
?createBufferClone@RuleBasedBreakIterator@icu_4_0@@UAEPAVBreakIterator@2@PAXAAHAAW4UErrorCode@@@Z
?createCanonical@Locale@icu_4_0@@SA?AV12@PBD@Z
?createCharacterInstance@BreakIterator@icu_4_0@@SAPAV12@ABVLocale@2@AAW4UErrorCode@@@Z
?createFrom@UnicodeSet@icu_4_0@@SAPAV12@ABVUnicodeString@2@@Z
?createFromAll@UnicodeSet@icu_4_0@@SAPAV12@ABVUnicodeString@2@@Z
?createFromName@Locale@icu_4_0@@SA?AV12@PBD@Z
?createInstance@BreakIterator@icu_4_0@@CAPAV12@ABVLocale@2@HAAW4UErrorCode@@@Z
?createKey@ICULocaleService@icu_4_0@@MBEPAVICUServiceKey@2@PBVUnicodeString@2@AAW4UErrorCode@@@Z
?createKey@ICULocaleService@icu_4_0@@MBEPAVICUServiceKey@2@PBVUnicodeString@2@HAAW4UErrorCode@@@Z
?createKey@ICUService@icu_4_0@@UBEPAVICUServiceKey@2@PBVUnicodeString@2@AAW4UErrorCode@@@Z
?createKeywords@Locale@icu_4_0@@QBEPAVStringEnumeration@2@AAW4UErrorCode@@@Z
?createLineInstance@BreakIterator@icu_4_0@@SAPAV12@ABVLocale@2@AAW4UErrorCode@@@Z
?createSentenceInstance@BreakIterator@icu_4_0@@SAPAV12@ABVLocale@2@AAW4UErrorCode@@@Z
?createSimpleFactory@ICUService@icu_4_0@@MAEPAVICUServiceFactory@2@PAVUObject@2@ABVUnicodeString@2@CAAW4UErrorCode@@@Z
?createTitleInstance@BreakIterator@icu_4_0@@SAPAV12@ABVLocale@2@AAW4UErrorCode@@@Z
?createWithCanonicalFallback@LocaleKey@icu_4_0@@SAPAV12@PBVUnicodeString@2@0AAW4UErrorCode@@@Z
?createWithCanonicalFallback@LocaleKey@icu_4_0@@SAPAV12@PBVUnicodeString@2@0HAAW4UErrorCode@@@Z
?createWordInstance@BreakIterator@icu_4_0@@SAPAV12@ABVLocale@2@AAW4UErrorCode@@@Z
?current32@UCharCharacterIterator@icu_4_0@@UBEHXZ
?current@Normalizer@icu_4_0@@QAEHXZ
?current@RuleBasedBreakIterator@icu_4_0@@UBEHXZ
?current@UCharCharacterIterator@icu_4_0@@UBE_WXZ
?currentDescriptor@ICUServiceKey@icu_4_0@@UBEAAVUnicodeString@2@AAV32@@Z
?currentDescriptor@LocaleKey@icu_4_0@@UBEAAVUnicodeString@2@AAV32@@Z
?currentID@ICUServiceKey@icu_4_0@@UBEAAVUnicodeString@2@AAV32@@Z
?currentID@LocaleKey@icu_4_0@@UBEAAVUnicodeString@2@AAV32@@Z
?currentLocale@LocaleKey@icu_4_0@@UBEAAVLocale@2@AAV32@@Z
?data@CompactTrieDictionary@icu_4_0@@UBEPBXXZ
?dataSize@CompactTrieDictionary@icu_4_0@@UBEIXZ
?decompose@Normalizer@icu_4_0@@SAXABVUnicodeString@2@CHAAV32@AAW4UErrorCode@@@Z
?doCaseCompare@UnicodeString@icu_4_0@@ABECHHABV12@HHI@Z
?doCaseCompare@UnicodeString@icu_4_0@@ABECHHPB_WHHI@Z
?doCharAt@UnicodeString@icu_4_0@@ABE_WH@Z
?doCodepageCreate@UnicodeString@icu_4_0@@AAEXPBDH0@Z
?doCodepageCreate@UnicodeString@icu_4_0@@AAEXPBDHPAUUConverter@@AAW4UErrorCode@@@Z
?doCompare@UnicodeString@icu_4_0@@ABECHHABV12@HH@Z
?doCompare@UnicodeString@icu_4_0@@ABECHHPB_WHH@Z
?doCompareCodePointOrder@UnicodeString@icu_4_0@@ABECHHABV12@HH@Z
?doCompareCodePointOrder@UnicodeString@icu_4_0@@ABECHHPB_WHH@Z
?doExtract@UnicodeString@icu_4_0@@ABEHHHPADHPAUUConverter@@AAW4UErrorCode@@@Z
?doExtract@UnicodeString@icu_4_0@@ABEXHHAAV12@@Z
?doExtract@UnicodeString@icu_4_0@@ABEXHHPA_WH@Z
?doHashCode@UnicodeString@icu_4_0@@ABEHXZ
?doIndexOf@UnicodeString@icu_4_0@@ABEHHHH@Z
?doIndexOf@UnicodeString@icu_4_0@@ABEH_WHH@Z
?doLastIndexOf@UnicodeString@icu_4_0@@ABEHHHH@Z
?doLastIndexOf@UnicodeString@icu_4_0@@ABEH_WHH@Z
?doReplace@UnicodeString@icu_4_0@@AAEAAV12@HHABV12@HH@Z
?doReplace@UnicodeString@icu_4_0@@AAEAAV12@HHPB_WHH@Z
?doReverse@UnicodeString@icu_4_0@@AAEAAV12@HH@Z
?elementAt@UVector@icu_4_0@@QBEPAXH@Z
?elementAti@UVector32@icu_4_0@@QBEHH@Z
?elementAti@UVector@icu_4_0@@QBEHH@Z
?empty@UStack@icu_4_0@@QBECXZ
Sections
.text Size: 670KB - Virtual size: 670KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 398KB - Virtual size: 397KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 22KB - Virtual size: 21KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
wintaylor2.1/Programs/Imager/libeay32.dll.dll windows:5 windows x86
0cebee292d8de46c915195e4608514a9
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
wsock32
recvfrom
sendto
bind
listen
accept
ntohl
inet_ntoa
WSACancelBlockingCall
WSACleanup
WSAStartup
gethostbyname
getsockopt
getservbyname
ntohs
htons
htonl
socket
setsockopt
connect
send
WSASetLastError
recv
WSAGetLastError
shutdown
closesocket
gdi32
CreateCompatibleDC
GetDeviceCaps
CreateCompatibleBitmap
SelectObject
GetObjectA
BitBlt
GetBitmapBits
DeleteObject
DeleteDC
CreateDCA
advapi32
ReportEventA
DeregisterEventSource
RegisterEventSourceA
user32
MessageBoxA
GetDesktopWindow
GetProcessWindowStation
GetUserObjectInformationW
msvcr90
getenv
wcsstr
_vsnprintf
vfprintf
__iob_func
abort
free
realloc
malloc
memcpy
memchr
_localtime64
_time64
memset
_gmtime64
strtoul
strncpy
_errno
memmove
_read
_write
isxdigit
isdigit
fprintf
strstr
fputs
fclose
ferror
fread
fwrite
fflush
fopen
_setmode
_fileno
ftell
feof
fseek
fgets
atoi
perror
qsort
strcmp
_stat64i32
_chmod
strchr
strerror
isalnum
isspace
strncmp
tolower
isupper
strrchr
sscanf
exit
strtol
signal
_getch
printf
_getpid
_encode_pointer
_malloc_crt
_encoded_null
_decode_pointer
_initterm
_initterm_e
_amsg_exit
_adjust_fdiv
__CppXcptFilter
_crt_debugger_hook
__clean_type_info_names_internal
_unlock
__dllonexit
_lock
_onexit
_except_handler4_common
sprintf
kernel32
QueryPerformanceCounter
GetTickCount
SetLastError
LoadLibraryA
FreeLibrary
GetCurrentProcessId
FindFirstFileA
FindNextFileA
GetThreadTimes
GetCurrentThread
GetStdHandle
GlobalMemoryStatus
CloseHandle
GetVersionExA
FlushConsoleInputBuffer
InterlockedExchange
Sleep
InterlockedCompareExchange
TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
IsDebuggerPresent
GetSystemTimeAsFileTime
FindClose
GetFileType
GetVersion
GetLastError
GetCurrentThreadId
GetModuleHandleA
ExitProcess
GetProcAddress
Exports
Exports
ACCESS_DESCRIPTION_free
ACCESS_DESCRIPTION_it
ACCESS_DESCRIPTION_new
AES_bi_ige_encrypt
AES_cbc_encrypt
AES_cfb128_encrypt
AES_cfb1_encrypt
AES_cfb8_encrypt
AES_cfbr_encrypt_block
AES_ctr128_encrypt
AES_decrypt
AES_ecb_encrypt
AES_encrypt
AES_ige_encrypt
AES_ofb128_encrypt
AES_options
AES_set_decrypt_key
AES_set_encrypt_key
AES_unwrap_key
AES_wrap_key
ASN1_ANY_it
ASN1_BIT_STRING_asn1_meth
ASN1_BIT_STRING_free
ASN1_BIT_STRING_get_bit
ASN1_BIT_STRING_it
ASN1_BIT_STRING_name_print
ASN1_BIT_STRING_new
ASN1_BIT_STRING_num_asc
ASN1_BIT_STRING_set
ASN1_BIT_STRING_set_asc
ASN1_BIT_STRING_set_bit
ASN1_BMPSTRING_free
ASN1_BMPSTRING_it
ASN1_BMPSTRING_new
ASN1_BOOLEAN_it
ASN1_ENUMERATED_free
ASN1_ENUMERATED_get
ASN1_ENUMERATED_it
ASN1_ENUMERATED_new
ASN1_ENUMERATED_set
ASN1_ENUMERATED_to_BN
ASN1_FBOOLEAN_it
ASN1_GENERALIZEDTIME_check
ASN1_GENERALIZEDTIME_free
ASN1_GENERALIZEDTIME_it
ASN1_GENERALIZEDTIME_new
ASN1_GENERALIZEDTIME_print
ASN1_GENERALIZEDTIME_set
ASN1_GENERALIZEDTIME_set_string
ASN1_GENERALSTRING_free
ASN1_GENERALSTRING_it
ASN1_GENERALSTRING_new
ASN1_HEADER_free
ASN1_HEADER_new
ASN1_IA5STRING_asn1_meth
ASN1_IA5STRING_free
ASN1_IA5STRING_it
ASN1_IA5STRING_new
ASN1_INTEGER_cmp
ASN1_INTEGER_dup
ASN1_INTEGER_free
ASN1_INTEGER_get
ASN1_INTEGER_it
ASN1_INTEGER_new
ASN1_INTEGER_set
ASN1_INTEGER_to_BN
ASN1_NULL_free
ASN1_NULL_it
ASN1_NULL_new
ASN1_OBJECT_create
ASN1_OBJECT_free
ASN1_OBJECT_it
ASN1_OBJECT_new
ASN1_OCTET_STRING_NDEF_it
ASN1_OCTET_STRING_cmp
ASN1_OCTET_STRING_dup
ASN1_OCTET_STRING_free
ASN1_OCTET_STRING_it
ASN1_OCTET_STRING_new
ASN1_OCTET_STRING_set
ASN1_PRINTABLESTRING_free
ASN1_PRINTABLESTRING_it
ASN1_PRINTABLESTRING_new
ASN1_PRINTABLE_free
ASN1_PRINTABLE_it
ASN1_PRINTABLE_new
ASN1_PRINTABLE_type
ASN1_SEQUENCE_it
ASN1_STRING_TABLE_add
ASN1_STRING_TABLE_cleanup
ASN1_STRING_TABLE_get
ASN1_STRING_cmp
ASN1_STRING_data
ASN1_STRING_dup
ASN1_STRING_encode
ASN1_STRING_free
ASN1_STRING_get_default_mask
ASN1_STRING_length
ASN1_STRING_length_set
ASN1_STRING_new
ASN1_STRING_print
ASN1_STRING_print_ex
ASN1_STRING_print_ex_fp
ASN1_STRING_set
ASN1_STRING_set0
ASN1_STRING_set_by_NID
ASN1_STRING_set_default_mask
ASN1_STRING_set_default_mask_asc
ASN1_STRING_to_UTF8
ASN1_STRING_type
ASN1_STRING_type_new
ASN1_T61STRING_free
ASN1_T61STRING_it
ASN1_T61STRING_new
ASN1_TBOOLEAN_it
ASN1_TIME_check
ASN1_TIME_free
ASN1_TIME_it
ASN1_TIME_new
ASN1_TIME_print
ASN1_TIME_set
ASN1_TIME_to_generalizedtime
ASN1_TYPE_free
ASN1_TYPE_get
ASN1_TYPE_get_int_octetstring
ASN1_TYPE_get_octetstring
ASN1_TYPE_new
ASN1_TYPE_set
ASN1_TYPE_set1
ASN1_TYPE_set_int_octetstring
ASN1_TYPE_set_octetstring
ASN1_UNIVERSALSTRING_free
ASN1_UNIVERSALSTRING_it
ASN1_UNIVERSALSTRING_new
ASN1_UNIVERSALSTRING_to_string
ASN1_UTCTIME_check
ASN1_UTCTIME_cmp_time_t
ASN1_UTCTIME_free
ASN1_UTCTIME_it
ASN1_UTCTIME_new
ASN1_UTCTIME_print
ASN1_UTCTIME_set
ASN1_UTCTIME_set_string
ASN1_UTF8STRING_free
ASN1_UTF8STRING_it
ASN1_UTF8STRING_new
ASN1_VISIBLESTRING_free
ASN1_VISIBLESTRING_it
ASN1_VISIBLESTRING_new
ASN1_add_oid_module
ASN1_check_infinite_end
ASN1_const_check_infinite_end
ASN1_d2i_bio
ASN1_d2i_fp
ASN1_digest
ASN1_dup
ASN1_generate_nconf
ASN1_generate_v3
ASN1_get_object
ASN1_i2d_bio
ASN1_i2d_fp
ASN1_item_d2i
ASN1_item_d2i_bio
ASN1_item_d2i_fp
ASN1_item_digest
ASN1_item_dup
ASN1_item_ex_d2i
ASN1_item_ex_free
ASN1_item_ex_i2d
ASN1_item_ex_new
ASN1_item_free
ASN1_item_i2d
ASN1_item_i2d_bio
ASN1_item_i2d_fp
ASN1_item_ndef_i2d
ASN1_item_new
ASN1_item_pack
ASN1_item_sign
ASN1_item_unpack
ASN1_item_verify
ASN1_mbstring_copy
ASN1_mbstring_ncopy
ASN1_object_size
ASN1_pack_string
ASN1_parse
ASN1_parse_dump
ASN1_primitive_free
ASN1_primitive_new
ASN1_put_eoc
ASN1_put_object
ASN1_seq_pack
ASN1_seq_unpack
ASN1_sign
ASN1_tag2bit
ASN1_tag2str
ASN1_template_d2i
ASN1_template_free
ASN1_template_i2d
ASN1_template_new
ASN1_unpack_string
ASN1_verify
AUTHORITY_INFO_ACCESS_free
AUTHORITY_INFO_ACCESS_it
AUTHORITY_INFO_ACCESS_new
AUTHORITY_KEYID_free
AUTHORITY_KEYID_it
AUTHORITY_KEYID_new
BASIC_CONSTRAINTS_free
BASIC_CONSTRAINTS_it
BASIC_CONSTRAINTS_new
BF_cbc_encrypt
BF_cfb64_encrypt
BF_decrypt
BF_ecb_encrypt
BF_encrypt
BF_ofb64_encrypt
BF_options
BF_set_key
BIGNUM_it
BIO_accept
BIO_callback_ctrl
BIO_clear_flags
BIO_copy_next_retry
BIO_ctrl
BIO_ctrl_get_read_request
BIO_ctrl_get_write_guarantee
BIO_ctrl_pending
BIO_ctrl_reset_read_request
BIO_ctrl_wpending
BIO_debug_callback
BIO_dgram_non_fatal_error
BIO_dump
BIO_dump_cb
BIO_dump_fp
BIO_dump_indent
BIO_dump_indent_cb
BIO_dump_indent_fp
BIO_dup_chain
BIO_f_base64
BIO_f_buffer
BIO_f_cipher
BIO_f_md
BIO_f_nbio_test
BIO_f_null
BIO_f_reliable
BIO_fd_non_fatal_error
BIO_fd_should_retry
BIO_find_type
BIO_free
BIO_free_all
BIO_get_accept_socket
BIO_get_callback
BIO_get_callback_arg
BIO_get_ex_data
BIO_get_ex_new_index
BIO_get_host_ip
BIO_get_port
BIO_get_retry_BIO
BIO_get_retry_reason
BIO_gethostbyname
BIO_gets
BIO_indent
BIO_int_ctrl
BIO_method_name
BIO_method_type
BIO_new
BIO_new_accept
BIO_new_bio_pair
BIO_new_connect
BIO_new_dgram
BIO_new_fd
BIO_new_file
BIO_new_fp
BIO_new_mem_buf
BIO_new_socket
BIO_next
BIO_nread
BIO_nread0
BIO_number_read
BIO_number_written
BIO_nwrite
BIO_nwrite0
BIO_pop
BIO_printf
BIO_ptr_ctrl
BIO_push
BIO_puts
BIO_read
BIO_s_accept
BIO_s_bio
BIO_s_connect
BIO_s_datagram
BIO_s_fd
BIO_s_file
BIO_s_mem
BIO_s_null
BIO_s_socket
BIO_set
BIO_set_callback
BIO_set_callback_arg
BIO_set_cipher
BIO_set_ex_data
BIO_set_flags
BIO_set_tcp_ndelay
BIO_snprintf
BIO_sock_cleanup
BIO_sock_error
BIO_sock_init
BIO_sock_non_fatal_error
BIO_sock_should_retry
BIO_socket_ioctl
BIO_socket_nbio
BIO_test_flags
BIO_vfree
BIO_vprintf
BIO_vsnprintf
BIO_write
BN_BLINDING_convert
BN_BLINDING_convert_ex
BN_BLINDING_create_param
BN_BLINDING_free
BN_BLINDING_get_flags
BN_BLINDING_get_thread_id
BN_BLINDING_invert
BN_BLINDING_invert_ex
BN_BLINDING_new
BN_BLINDING_set_flags
BN_BLINDING_set_thread_id
BN_BLINDING_update
BN_CTX_end
BN_CTX_free
BN_CTX_get
BN_CTX_init
BN_CTX_new
BN_CTX_start
BN_GENCB_call
BN_GF2m_add
BN_GF2m_arr2poly
BN_GF2m_mod
BN_GF2m_mod_arr
BN_GF2m_mod_div
BN_GF2m_mod_div_arr
BN_GF2m_mod_exp
BN_GF2m_mod_exp_arr
BN_GF2m_mod_inv
BN_GF2m_mod_inv_arr
BN_GF2m_mod_mul
BN_GF2m_mod_mul_arr
BN_GF2m_mod_solve_quad
BN_GF2m_mod_solve_quad_arr
BN_GF2m_mod_sqr
BN_GF2m_mod_sqr_arr
BN_GF2m_mod_sqrt
BN_GF2m_mod_sqrt_arr
BN_GF2m_poly2arr
BN_MONT_CTX_copy
BN_MONT_CTX_free
BN_MONT_CTX_init
BN_MONT_CTX_new
BN_MONT_CTX_set
BN_MONT_CTX_set_locked
BN_RECP_CTX_free
BN_RECP_CTX_init
BN_RECP_CTX_new
BN_RECP_CTX_set
BN_X931_derive_prime_ex
BN_X931_generate_Xpq
BN_X931_generate_prime_ex
BN_add
BN_add_word
BN_bin2bn
BN_bn2bin
BN_bn2dec
BN_bn2hex
BN_bn2mpi
BN_bntest_rand
BN_clear
BN_clear_bit
BN_clear_free
BN_cmp
BN_copy
BN_dec2bn
BN_div
BN_div_recp
BN_div_word
BN_dup
BN_exp
BN_free
BN_from_montgomery
BN_gcd
BN_generate_prime
BN_generate_prime_ex
BN_get0_nist_prime_192
BN_get0_nist_prime_224
BN_get0_nist_prime_256
BN_get0_nist_prime_384
BN_get0_nist_prime_521
BN_get_params
BN_get_word
BN_hex2bn
BN_init
BN_is_bit_set
BN_is_prime
BN_is_prime_ex
BN_is_prime_fasttest
BN_is_prime_fasttest_ex
BN_kronecker
BN_lshift
BN_lshift1
BN_mask_bits
BN_mod_add
BN_mod_add_quick
BN_mod_exp
BN_mod_exp2_mont
BN_mod_exp_mont
BN_mod_exp_mont_consttime
BN_mod_exp_mont_word
BN_mod_exp_recp
BN_mod_exp_simple
BN_mod_inverse
BN_mod_lshift
BN_mod_lshift1
BN_mod_lshift1_quick
BN_mod_lshift_quick
BN_mod_mul
BN_mod_mul_montgomery
BN_mod_mul_reciprocal
BN_mod_sqr
BN_mod_sqrt
BN_mod_sub
BN_mod_sub_quick
BN_mod_word
BN_mpi2bn
BN_mul
BN_mul_word
BN_new
BN_nist_mod_192
BN_nist_mod_224
BN_nist_mod_256
BN_nist_mod_384
BN_nist_mod_521
BN_nnmod
BN_num_bits
BN_num_bits_word
BN_options
BN_print
BN_print_fp
BN_pseudo_rand
BN_pseudo_rand_range
BN_rand
BN_rand_range
BN_reciprocal
BN_rshift
BN_rshift1
BN_set_bit
BN_set_negative
BN_set_params
BN_set_word
BN_sqr
BN_sub
BN_sub_word
BN_swap
BN_to_ASN1_ENUMERATED
BN_to_ASN1_INTEGER
BN_uadd
BN_ucmp
BN_usub
BN_value_one
BUF_MEM_free
BUF_MEM_grow
BUF_MEM_grow_clean
BUF_MEM_new
BUF_memdup
BUF_strdup
BUF_strlcat
BUF_strlcpy
BUF_strndup
CAST_cbc_encrypt
CAST_cfb64_encrypt
CAST_decrypt
CAST_ecb_encrypt
CAST_encrypt
CAST_ofb64_encrypt
CAST_set_key
CBIGNUM_it
CERTIFICATEPOLICIES_free
CERTIFICATEPOLICIES_it
CERTIFICATEPOLICIES_new
COMP_CTX_free
COMP_CTX_new
COMP_compress_block
COMP_expand_block
COMP_rle
COMP_zlib
COMP_zlib_cleanup
CONF_dump_bio
CONF_dump_fp
CONF_free
CONF_get1_default_config_file
CONF_get_number
Sections
.text Size: 642KB - Virtual size: 641KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 248KB - Virtual size: 248KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 58KB - Virtual size: 70KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 42KB - Virtual size: 41KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
wintaylor2.1/Programs/Imager/microsoft.vc90.crt/Microsoft.VC90.CRT.manifest
-
wintaylor2.1/Programs/Imager/microsoft.vc90.crt/msvcp90.dll.dll windows:5 windows x86
2dec2d42421b088bfcddeba53b046464
Code Sign
2e:ab:11:dc:50:ff:5c:9d:cb:c0Certificate
IssuerCN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft CorporationNot Before22-08-2007 22:31Not After25-08-2012 07:00SubjectCN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USExtended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
61:06:27:81:00:00:00:00:00:08Certificate
IssuerCN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USNot Before22-10-2008 21:24Not After22-01-2010 21:34SubjectCN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USExtended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
61:49:7c:ed:00:00:00:00:00:05Certificate
IssuerCN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USNot Before16-09-2006 01:55Not After16-09-2011 02:05SubjectCN=Microsoft Timestamping Service,OU=nCipher DSE ESN:10D8-5847-CBF8,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageContentCommitment
6a:0b:99:4f:c0:00:25:ab:11:db:45:1f:58:7a:67:a2Certificate
IssuerCN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft CorporationNot Before16-09-2006 01:04Not After15-09-2019 07:00SubjectCN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
24:b9:6c:30:57:ef:09:27:a2:34:2e:b4:e4:95:36:c1:b3:00:05:25Signer
Actual PE Digest24:b9:6c:30:57:ef:09:27:a2:34:2e:b4:e4:95:36:c1:b3:00:05:25Digest Algorithmsha1PE Digest MatchestrueHeaders
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
msvcr90
_Getmonths
??0bad_cast@std@@QAE@PBD@Z
??1bad_cast@std@@UAE@XZ
??0bad_cast@std@@QAE@ABV01@@Z
log
abort
fputc
fputs
__iob_func
rand_s
fgetc
ungetc
fflush
setvbuf
fwrite
fgetpos
fseek
fsetpos
fclose
_wfsopen
mbstowcs_s
atan2
cos
exp
ldexp
pow
sin
sqrt
tan
fgetwc
fputwc
ungetwc
memcpy
_Strftime
strcspn
sprintf_s
_realloc_crt
setlocale
_malloc_crt
?_set_new_handler@@YAP6AHI@ZP6AHI@Z@Z
_Getdays
towlower
towupper
strcmp
_create_locale
_ui64toa_s
_free_locale
__pctype_func
_errno
___mb_cur_max_l_func
___lc_codepage_func
___lc_handle_func
__crtCompareStringA
___lc_collate_cp_func
__crtLCMapStringA
isupper
_calloc_crt
islower
__crtGetStringTypeW
__crtLCMapStringW
__crtCompareStringW
isspace
tolower
strtod
?terminate@@YAXXZ
_unlock
__dllonexit
_encode_pointer
_lock
_onexit
_decode_pointer
_encoded_null
_initterm
_initterm_e
_amsg_exit
_adjust_fdiv
__CppXcptFilter
?_type_info_dtor_internal_method@type_info@@QAEXXZ
_crt_debugger_hook
_except_handler4_common
__clean_type_info_names_internal
___mb_cur_max_func
??_V@YAXPAX@Z
_Gettnames
localeconv
free
??0exception@std@@QAE@ABQBDH@Z
__CxxFrameHandler3
??2@YAPAXI@Z
_invalid_parameter_noinfo
??0exception@std@@QAE@ABV01@@Z
_CxxThrowException
??0exception@std@@QAE@XZ
memset
memchr
strlen
memcmp
wcslen
memmove_s
memcpy_s
??3@YAXPAX@Z
??1exception@std@@UAE@XZ
?what@exception@std@@UBEPBDXZ
__uncaught_exception
??0exception@std@@QAE@ABQBD@Z
kernel32
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
DisableThreadLibraryCalls
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSection
Sleep
InterlockedDecrement
InterlockedIncrement
GetLocaleInfoA
WideCharToMultiByte
MultiByteToWideChar
InterlockedExchange
InterlockedCompareExchange
GetSystemTimeAsFileTime
Exports
Exports
??$?5DU?$char_traits@D@std@@@std@@YAAAV?$basic_istream@DU?$char_traits@D@std@@@0@AAV10@AAD@Z
??$?5DU?$char_traits@D@std@@@std@@YAAAV?$basic_istream@DU?$char_traits@D@std@@@0@AAV10@PAD@Z
??$?5DU?$char_traits@D@std@@V?$allocator@D@1@@std@@YAAAV?$basic_istream@DU?$char_traits@D@std@@@0@AAV10@AAV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@@Z
??$?5GU?$char_traits@G@std@@@std@@YAAAV?$basic_istream@GU?$char_traits@G@std@@@0@AAV10@AAG@Z
??$?5GU?$char_traits@G@std@@@std@@YAAAV?$basic_istream@GU?$char_traits@G@std@@@0@AAV10@PAG@Z
??$?5GU?$char_traits@G@std@@V?$allocator@G@1@@std@@YAAAV?$basic_istream@GU?$char_traits@G@std@@@0@AAV10@AAV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@0@@Z
??$?5MDU?$char_traits@D@std@@@std@@YAAAV?$basic_istream@DU?$char_traits@D@std@@@0@AAV10@AAV?$complex@M@0@@Z
??$?5MGU?$char_traits@G@std@@@std@@YAAAV?$basic_istream@GU?$char_traits@G@std@@@0@AAV10@AAV?$complex@M@0@@Z
??$?5M_WU?$char_traits@_W@std@@@std@@YAAAV?$basic_istream@_WU?$char_traits@_W@std@@@0@AAV10@AAV?$complex@M@0@@Z
??$?5NDU?$char_traits@D@std@@@std@@YAAAV?$basic_istream@DU?$char_traits@D@std@@@0@AAV10@AAV?$complex@N@0@@Z
??$?5NGU?$char_traits@G@std@@@std@@YAAAV?$basic_istream@GU?$char_traits@G@std@@@0@AAV10@AAV?$complex@N@0@@Z
??$?5N_WU?$char_traits@_W@std@@@std@@YAAAV?$basic_istream@_WU?$char_traits@_W@std@@@0@AAV10@AAV?$complex@N@0@@Z
??$?5ODU?$char_traits@D@std@@@std@@YAAAV?$basic_istream@DU?$char_traits@D@std@@@0@AAV10@AAV?$complex@O@0@@Z
??$?5OGU?$char_traits@G@std@@@std@@YAAAV?$basic_istream@GU?$char_traits@G@std@@@0@AAV10@AAV?$complex@O@0@@Z
??$?5O_WU?$char_traits@_W@std@@@std@@YAAAV?$basic_istream@_WU?$char_traits@_W@std@@@0@AAV10@AAV?$complex@O@0@@Z
??$?5U?$char_traits@D@std@@@std@@YAAAV?$basic_istream@DU?$char_traits@D@std@@@0@AAV10@AAC@Z
??$?5U?$char_traits@D@std@@@std@@YAAAV?$basic_istream@DU?$char_traits@D@std@@@0@AAV10@AAE@Z
??$?5U?$char_traits@D@std@@@std@@YAAAV?$basic_istream@DU?$char_traits@D@std@@@0@AAV10@PAC@Z
??$?5U?$char_traits@D@std@@@std@@YAAAV?$basic_istream@DU?$char_traits@D@std@@@0@AAV10@PAE@Z
??$?5_WU?$char_traits@_W@std@@@std@@YAAAV?$basic_istream@_WU?$char_traits@_W@std@@@0@AAV10@AA_W@Z
??$?5_WU?$char_traits@_W@std@@@std@@YAAAV?$basic_istream@_WU?$char_traits@_W@std@@@0@AAV10@PA_W@Z
??$?5_WU?$char_traits@_W@std@@V?$allocator@_W@1@@std@@YAAAV?$basic_istream@_WU?$char_traits@_W@std@@@0@AAV10@AAV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@0@@Z
??$?6DU?$char_traits@D@std@@V?$allocator@D@1@@std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@0@AAV10@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@@Z
??$?6GU?$char_traits@G@std@@@std@@YAAAV?$basic_ostream@GU?$char_traits@G@std@@@0@AAV10@G@Z
??$?6GU?$char_traits@G@std@@@std@@YAAAV?$basic_ostream@GU?$char_traits@G@std@@@0@AAV10@PBG@Z
??$?6GU?$char_traits@G@std@@V?$allocator@G@1@@std@@YAAAV?$basic_ostream@GU?$char_traits@G@std@@@0@AAV10@ABV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@0@@Z
??$?6MDU?$char_traits@D@std@@@std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@0@AAV10@ABV?$complex@M@0@@Z
??$?6MGU?$char_traits@G@std@@@std@@YAAAV?$basic_ostream@GU?$char_traits@G@std@@@0@AAV10@ABV?$complex@M@0@@Z
??$?6M_WU?$char_traits@_W@std@@@std@@YAAAV?$basic_ostream@_WU?$char_traits@_W@std@@@0@AAV10@ABV?$complex@M@0@@Z
??$?6NDU?$char_traits@D@std@@@std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@0@AAV10@ABV?$complex@N@0@@Z
??$?6NGU?$char_traits@G@std@@@std@@YAAAV?$basic_ostream@GU?$char_traits@G@std@@@0@AAV10@ABV?$complex@N@0@@Z
??$?6N_WU?$char_traits@_W@std@@@std@@YAAAV?$basic_ostream@_WU?$char_traits@_W@std@@@0@AAV10@ABV?$complex@N@0@@Z
??$?6ODU?$char_traits@D@std@@@std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@0@AAV10@ABV?$complex@O@0@@Z
??$?6OGU?$char_traits@G@std@@@std@@YAAAV?$basic_ostream@GU?$char_traits@G@std@@@0@AAV10@ABV?$complex@O@0@@Z
??$?6O_WU?$char_traits@_W@std@@@std@@YAAAV?$basic_ostream@_WU?$char_traits@_W@std@@@0@AAV10@ABV?$complex@O@0@@Z
??$?6U?$char_traits@D@std@@@std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@0@AAV10@C@Z
??$?6U?$char_traits@D@std@@@std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@0@AAV10@D@Z
??$?6U?$char_traits@D@std@@@std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@0@AAV10@E@Z
??$?6U?$char_traits@D@std@@@std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@0@AAV10@PBC@Z
??$?6U?$char_traits@D@std@@@std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@0@AAV10@PBD@Z
??$?6U?$char_traits@D@std@@@std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@0@AAV10@PBE@Z
??$?6_WU?$char_traits@_W@std@@@std@@YAAAV?$basic_ostream@_WU?$char_traits@_W@std@@@0@AAV10@PB_W@Z
??$?6_WU?$char_traits@_W@std@@@std@@YAAAV?$basic_ostream@_WU?$char_traits@_W@std@@@0@AAV10@_W@Z
??$?6_WU?$char_traits@_W@std@@V?$allocator@_W@1@@std@@YAAAV?$basic_ostream@_WU?$char_traits@_W@std@@@0@AAV10@ABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@0@@Z
??$?8DU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@0@Z
??$?8DU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@PBD@Z
??$?8DU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA_NPBDABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@@Z
??$?8GU?$char_traits@G@std@@V?$allocator@G@1@@std@@YA_NABV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@0@0@Z
??$?8GU?$char_traits@G@std@@V?$allocator@G@1@@std@@YA_NABV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@0@PBG@Z
??$?8GU?$char_traits@G@std@@V?$allocator@G@1@@std@@YA_NPBGABV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@0@@Z
??$?8M@std@@YA_NABMABV?$complex@M@0@@Z
??$?8M@std@@YA_NABV?$complex@M@0@0@Z
??$?8M@std@@YA_NABV?$complex@M@0@ABM@Z
??$?8N@std@@YA_NABNABV?$complex@N@0@@Z
??$?8N@std@@YA_NABV?$complex@N@0@0@Z
??$?8N@std@@YA_NABV?$complex@N@0@ABN@Z
??$?8O@std@@YA_NABOABV?$complex@O@0@@Z
??$?8O@std@@YA_NABV?$complex@O@0@0@Z
??$?8O@std@@YA_NABV?$complex@O@0@ABO@Z
??$?8_WU?$char_traits@_W@std@@V?$allocator@_W@1@@std@@YA_NABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@0@0@Z
??$?8_WU?$char_traits@_W@std@@V?$allocator@_W@1@@std@@YA_NABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@0@PB_W@Z
??$?8_WU?$char_traits@_W@std@@V?$allocator@_W@1@@std@@YA_NPB_WABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@0@@Z
??$?9DU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@0@Z
??$?9DU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@PBD@Z
??$?9DU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA_NPBDABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@@Z
??$?9GU?$char_traits@G@std@@V?$allocator@G@1@@std@@YA_NABV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@0@0@Z
??$?9GU?$char_traits@G@std@@V?$allocator@G@1@@std@@YA_NABV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@0@PBG@Z
??$?9GU?$char_traits@G@std@@V?$allocator@G@1@@std@@YA_NPBGABV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@0@@Z
??$?9M@std@@YA_NABMABV?$complex@M@0@@Z
??$?9M@std@@YA_NABV?$complex@M@0@0@Z
??$?9M@std@@YA_NABV?$complex@M@0@ABM@Z
??$?9N@std@@YA_NABNABV?$complex@N@0@@Z
??$?9N@std@@YA_NABV?$complex@N@0@0@Z
??$?9N@std@@YA_NABV?$complex@N@0@ABN@Z
??$?9O@std@@YA_NABOABV?$complex@O@0@@Z
??$?9O@std@@YA_NABV?$complex@O@0@0@Z
??$?9O@std@@YA_NABV?$complex@O@0@ABO@Z
??$?9_WU?$char_traits@_W@std@@V?$allocator@_W@1@@std@@YA_NABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@0@0@Z
??$?9_WU?$char_traits@_W@std@@V?$allocator@_W@1@@std@@YA_NABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@0@PB_W@Z
??$?9_WU?$char_traits@_W@std@@V?$allocator@_W@1@@std@@YA_NPB_WABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@0@@Z
??$?DM@std@@YA?AV?$complex@M@0@ABMABV10@@Z
??$?DM@std@@YA?AV?$complex@M@0@ABV10@0@Z
??$?DM@std@@YA?AV?$complex@M@0@ABV10@ABM@Z
??$?DN@std@@YA?AV?$complex@N@0@ABNABV10@@Z
??$?DN@std@@YA?AV?$complex@N@0@ABV10@0@Z
??$?DN@std@@YA?AV?$complex@N@0@ABV10@ABN@Z
??$?DO@std@@YA?AV?$complex@O@0@ABOABV10@@Z
??$?DO@std@@YA?AV?$complex@O@0@ABV10@0@Z
??$?DO@std@@YA?AV?$complex@O@0@ABV10@ABO@Z
??$?GM@std@@YA?AV?$complex@M@0@ABMABV10@@Z
??$?GM@std@@YA?AV?$complex@M@0@ABV10@0@Z
??$?GM@std@@YA?AV?$complex@M@0@ABV10@@Z
??$?GM@std@@YA?AV?$complex@M@0@ABV10@ABM@Z
??$?GN@std@@YA?AV?$complex@N@0@ABNABV10@@Z
??$?GN@std@@YA?AV?$complex@N@0@ABV10@0@Z
??$?GN@std@@YA?AV?$complex@N@0@ABV10@@Z
??$?GN@std@@YA?AV?$complex@N@0@ABV10@ABN@Z
??$?GO@std@@YA?AV?$complex@O@0@ABOABV10@@Z
??$?GO@std@@YA?AV?$complex@O@0@ABV10@0@Z
??$?GO@std@@YA?AV?$complex@O@0@ABV10@@Z
??$?GO@std@@YA?AV?$complex@O@0@ABV10@ABO@Z
??$?HDU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@ABV10@0@Z
??$?HDU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@ABV10@D@Z
??$?HDU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@ABV10@PBD@Z
??$?HDU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@DABV10@@Z
??$?HDU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@PBDABV10@@Z
??$?HGU?$char_traits@G@std@@V?$allocator@G@1@@std@@YA?AV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@0@ABV10@0@Z
??$?HGU?$char_traits@G@std@@V?$allocator@G@1@@std@@YA?AV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@0@ABV10@G@Z
??$?HGU?$char_traits@G@std@@V?$allocator@G@1@@std@@YA?AV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@0@ABV10@PBG@Z
??$?HGU?$char_traits@G@std@@V?$allocator@G@1@@std@@YA?AV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@0@GABV10@@Z
??$?HGU?$char_traits@G@std@@V?$allocator@G@1@@std@@YA?AV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@0@PBGABV10@@Z
??$?HM@std@@YA?AV?$complex@M@0@ABMABV10@@Z
??$?HM@std@@YA?AV?$complex@M@0@ABV10@0@Z
??$?HM@std@@YA?AV?$complex@M@0@ABV10@@Z
??$?HM@std@@YA?AV?$complex@M@0@ABV10@ABM@Z
??$?HN@std@@YA?AV?$complex@N@0@ABNABV10@@Z
??$?HN@std@@YA?AV?$complex@N@0@ABV10@0@Z
??$?HN@std@@YA?AV?$complex@N@0@ABV10@@Z
??$?HN@std@@YA?AV?$complex@N@0@ABV10@ABN@Z
??$?HO@std@@YA?AV?$complex@O@0@ABOABV10@@Z
??$?HO@std@@YA?AV?$complex@O@0@ABV10@0@Z
??$?HO@std@@YA?AV?$complex@O@0@ABV10@@Z
??$?HO@std@@YA?AV?$complex@O@0@ABV10@ABO@Z
??$?H_WU?$char_traits@_W@std@@V?$allocator@_W@1@@std@@YA?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@0@ABV10@0@Z
??$?H_WU?$char_traits@_W@std@@V?$allocator@_W@1@@std@@YA?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@0@ABV10@PB_W@Z
??$?H_WU?$char_traits@_W@std@@V?$allocator@_W@1@@std@@YA?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@0@ABV10@_W@Z
??$?H_WU?$char_traits@_W@std@@V?$allocator@_W@1@@std@@YA?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@0@PB_WABV10@@Z
??$?H_WU?$char_traits@_W@std@@V?$allocator@_W@1@@std@@YA?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@0@_WABV10@@Z
??$?KM@std@@YA?AV?$complex@M@0@ABMABV10@@Z
??$?KM@std@@YA?AV?$complex@M@0@ABV10@0@Z
??$?KM@std@@YA?AV?$complex@M@0@ABV10@ABM@Z
??$?KN@std@@YA?AV?$complex@N@0@ABNABV10@@Z
??$?KN@std@@YA?AV?$complex@N@0@ABV10@0@Z
??$?KN@std@@YA?AV?$complex@N@0@ABV10@ABN@Z
??$?KO@std@@YA?AV?$complex@O@0@ABOABV10@@Z
??$?KO@std@@YA?AV?$complex@O@0@ABV10@0@Z
??$?KO@std@@YA?AV?$complex@O@0@ABV10@ABO@Z
??$?MDU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@0@Z
??$?MDU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@PBD@Z
??$?MDU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA_NPBDABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@@Z
??$?MGU?$char_traits@G@std@@V?$allocator@G@1@@std@@YA_NABV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@0@0@Z
??$?MGU?$char_traits@G@std@@V?$allocator@G@1@@std@@YA_NABV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@0@PBG@Z
??$?MGU?$char_traits@G@std@@V?$allocator@G@1@@std@@YA_NPBGABV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@0@@Z
??$?M_WU?$char_traits@_W@std@@V?$allocator@_W@1@@std@@YA_NABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@0@0@Z
??$?M_WU?$char_traits@_W@std@@V?$allocator@_W@1@@std@@YA_NABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@0@PB_W@Z
??$?M_WU?$char_traits@_W@std@@V?$allocator@_W@1@@std@@YA_NPB_WABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@0@@Z
??$?NDU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@0@Z
??$?NDU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@PBD@Z
??$?NDU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA_NPBDABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@@Z
??$?NGU?$char_traits@G@std@@V?$allocator@G@1@@std@@YA_NABV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@0@0@Z
??$?NGU?$char_traits@G@std@@V?$allocator@G@1@@std@@YA_NABV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@0@PBG@Z
??$?NGU?$char_traits@G@std@@V?$allocator@G@1@@std@@YA_NPBGABV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@0@@Z
??$?N_WU?$char_traits@_W@std@@V?$allocator@_W@1@@std@@YA_NABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@0@0@Z
??$?N_WU?$char_traits@_W@std@@V?$allocator@_W@1@@std@@YA_NABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@0@PB_W@Z
??$?N_WU?$char_traits@_W@std@@V?$allocator@_W@1@@std@@YA_NPB_WABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@0@@Z
??$?ODU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@0@Z
??$?ODU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@PBD@Z
??$?ODU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA_NPBDABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@@Z
??$?OGU?$char_traits@G@std@@V?$allocator@G@1@@std@@YA_NABV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@0@0@Z
??$?OGU?$char_traits@G@std@@V?$allocator@G@1@@std@@YA_NABV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@0@PBG@Z
??$?OGU?$char_traits@G@std@@V?$allocator@G@1@@std@@YA_NPBGABV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@0@@Z
??$?O_WU?$char_traits@_W@std@@V?$allocator@_W@1@@std@@YA_NABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@0@0@Z
??$?O_WU?$char_traits@_W@std@@V?$allocator@_W@1@@std@@YA_NABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@0@PB_W@Z
??$?O_WU?$char_traits@_W@std@@V?$allocator@_W@1@@std@@YA_NPB_WABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@0@@Z
??$?PDU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@0@Z
??$?PDU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@PBD@Z
??$?PDU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA_NPBDABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@@Z
??$?PGU?$char_traits@G@std@@V?$allocator@G@1@@std@@YA_NABV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@0@0@Z
??$?PGU?$char_traits@G@std@@V?$allocator@G@1@@std@@YA_NABV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@0@PBG@Z
??$?PGU?$char_traits@G@std@@V?$allocator@G@1@@std@@YA_NPBGABV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@0@@Z
??$?P_WU?$char_traits@_W@std@@V?$allocator@_W@1@@std@@YA_NABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@0@0@Z
??$?P_WU?$char_traits@_W@std@@V?$allocator@_W@1@@std@@YA_NABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@0@PB_W@Z
??$?P_WU?$char_traits@_W@std@@V?$allocator@_W@1@@std@@YA_NPB_WABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@0@@Z
??$_Fabs@M@std@@YAMABV?$complex@M@0@PAH@Z
??$_Fabs@N@std@@YANABV?$complex@N@0@PAH@Z
??$_Fabs@O@std@@YAOABV?$complex@O@0@PAH@Z
??$abs@M@std@@YAMABV?$complex@M@0@@Z
??$abs@N@std@@YANABV?$complex@N@0@@Z
??$abs@O@std@@YAOABV?$complex@O@0@@Z
??$arg@M@std@@YAMABV?$complex@M@0@@Z
??$arg@N@std@@YANABV?$complex@N@0@@Z
??$arg@O@std@@YAOABV?$complex@O@0@@Z
??$conj@M@std@@YA?AV?$complex@M@0@ABV10@@Z
??$conj@N@std@@YA?AV?$complex@N@0@ABV10@@Z
??$conj@O@std@@YA?AV?$complex@O@0@ABV10@@Z
??$cos@M@std@@YA?AV?$complex@M@0@ABV10@@Z
??$cos@N@std@@YA?AV?$complex@N@0@ABV10@@Z
??$cos@O@std@@YA?AV?$complex@O@0@ABV10@@Z
??$cosh@M@std@@YA?AV?$complex@M@0@ABV10@@Z
??$cosh@N@std@@YA?AV?$complex@N@0@ABV10@@Z
??$cosh@O@std@@YA?AV?$complex@O@0@ABV10@@Z
??$exp@M@std@@YA?AV?$complex@M@0@ABV10@@Z
??$exp@N@std@@YA?AV?$complex@N@0@ABV10@@Z
??$exp@O@std@@YA?AV?$complex@O@0@ABV10@@Z
??$getline@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@YAAAV?$basic_istream@DU?$char_traits@D@std@@@0@AAV10@AAV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@@Z
??$getline@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@YAAAV?$basic_istream@DU?$char_traits@D@std@@@0@AAV10@AAV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@D@Z
??$getline@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@YAAAV?$basic_istream@GU?$char_traits@G@std@@@0@AAV10@AAV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@0@@Z
??$getline@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@YAAAV?$basic_istream@GU?$char_traits@G@std@@@0@AAV10@AAV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@0@G@Z
??$getline@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@YAAAV?$basic_istream@_WU?$char_traits@_W@std@@@0@AAV10@AAV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@0@@Z
??$getline@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@YAAAV?$basic_istream@_WU?$char_traits@_W@std@@@0@AAV10@AAV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@0@_W@Z
??$imag@M@std@@YAMABV?$complex@M@0@@Z
??$imag@N@std@@YANABV?$complex@N@0@@Z
??$imag@O@std@@YAOABV?$complex@O@0@@Z
??$log10@M@std@@YA?AV?$complex@M@0@ABV10@@Z
??$log10@N@std@@YA?AV?$complex@N@0@ABV10@@Z
??$log10@O@std@@YA?AV?$complex@O@0@ABV10@@Z
??$log@M@std@@YA?AV?$complex@M@0@ABV10@@Z
??$log@N@std@@YA?AV?$complex@N@0@ABV10@@Z
??$log@O@std@@YA?AV?$complex@O@0@ABV10@@Z
??$norm@M@std@@YAMABV?$complex@M@0@@Z
??$norm@N@std@@YANABV?$complex@N@0@@Z
??$norm@O@std@@YAOABV?$complex@O@0@@Z
??$polar@M@std@@YA?AV?$complex@M@0@ABM0@Z
??$polar@M@std@@YA?AV?$complex@M@0@ABM@Z
??$polar@N@std@@YA?AV?$complex@N@0@ABN0@Z
??$polar@N@std@@YA?AV?$complex@N@0@ABN@Z
??$polar@O@std@@YA?AV?$complex@O@0@ABO0@Z
??$polar@O@std@@YA?AV?$complex@O@0@ABO@Z
??$pow@M@std@@YA?AV?$complex@M@0@ABMABV10@@Z
??$pow@M@std@@YA?AV?$complex@M@0@ABV10@0@Z
??$pow@M@std@@YA?AV?$complex@M@0@ABV10@ABM@Z
??$pow@M@std@@YA?AV?$complex@M@0@ABV10@H@Z
??$pow@N@std@@YA?AV?$complex@N@0@ABNABV10@@Z
??$pow@N@std@@YA?AV?$complex@N@0@ABV10@0@Z
??$pow@N@std@@YA?AV?$complex@N@0@ABV10@ABN@Z
??$pow@N@std@@YA?AV?$complex@N@0@ABV10@H@Z
??$pow@O@std@@YA?AV?$complex@O@0@ABOABV10@@Z
??$pow@O@std@@YA?AV?$complex@O@0@ABV10@0@Z
??$pow@O@std@@YA?AV?$complex@O@0@ABV10@ABO@Z
??$pow@O@std@@YA?AV?$complex@O@0@ABV10@H@Z
??$real@M@std@@YAMABV?$complex@M@0@@Z
??$real@N@std@@YANABV?$complex@N@0@@Z
??$real@O@std@@YAOABV?$complex@O@0@@Z
??$sin@M@std@@YA?AV?$complex@M@0@ABV10@@Z
??$sin@N@std@@YA?AV?$complex@N@0@ABV10@@Z
??$sin@O@std@@YA?AV?$complex@O@0@ABV10@@Z
??$sinh@M@std@@YA?AV?$complex@M@0@ABV10@@Z
??$sinh@N@std@@YA?AV?$complex@N@0@ABV10@@Z
??$sinh@O@std@@YA?AV?$complex@O@0@ABV10@@Z
??$sqrt@M@std@@YA?AV?$complex@M@0@ABV10@@Z
??$sqrt@N@std@@YA?AV?$complex@N@0@ABV10@@Z
??$sqrt@O@std@@YA?AV?$complex@O@0@ABV10@@Z
??$tan@M@std@@YA?AV?$complex@M@0@ABV10@@Z
??$tan@N@std@@YA?AV?$complex@N@0@ABV10@@Z
??$tan@O@std@@YA?AV?$complex@O@0@ABV10@@Z
??$tanh@M@std@@YA?AV?$complex@M@0@ABV10@@Z
??$tanh@N@std@@YA?AV?$complex@N@0@ABV10@@Z
??$tanh@O@std@@YA?AV?$complex@O@0@ABV10@@Z
??0?$_Complex_base@MU_C_float_complex@@@std@@QAE@ABM0@Z
??0?$_Complex_base@NU_C_double_complex@@@std@@QAE@ABN0@Z
??0?$_Complex_base@OU_C_ldouble_complex@@@std@@QAE@ABO0@Z
??0?$_Mpunct@D@std@@IAE@PBDI_N1@Z
??0?$_Mpunct@D@std@@QAE@ABV_Locinfo@1@I_N1@Z
??0?$_Mpunct@D@std@@QAE@I_N@Z
??0?$_Mpunct@G@std@@IAE@PBDI_N1@Z
??0?$_Mpunct@G@std@@QAE@ABV_Locinfo@1@I_N1@Z
??0?$_Mpunct@G@std@@QAE@I_N@Z
??0?$_Mpunct@_W@std@@IAE@PBDI_N1@Z
??0?$_Mpunct@_W@std@@QAE@ABV_Locinfo@1@I_N1@Z
??0?$_Mpunct@_W@std@@QAE@I_N@Z
??0?$_String_val@DV?$allocator@D@std@@@std@@IAE@V?$allocator@D@1@@Z
??0?$_String_val@DV?$allocator@D@std@@@std@@QAE@ABV01@@Z
??0?$_String_val@GV?$allocator@G@std@@@std@@IAE@V?$allocator@G@1@@Z
??0?$_String_val@GV?$allocator@G@std@@@std@@QAE@ABV01@@Z
??0?$_String_val@_WV?$allocator@_W@std@@@std@@IAE@V?$allocator@_W@1@@Z
??0?$_String_val@_WV?$allocator@_W@std@@@std@@QAE@ABV01@@Z
??0?$allocator@D@std@@QAE@ABV01@@Z
??0?$allocator@D@std@@QAE@XZ
??0?$allocator@G@std@@QAE@ABV01@@Z
??0?$allocator@G@std@@QAE@XZ
??0?$allocator@X@std@@QAE@ABV01@@Z
??0?$allocator@X@std@@QAE@XZ
??0?$allocator@_W@std@@QAE@ABV01@@Z
??0?$allocator@_W@std@@QAE@XZ
??0?$basic_filebuf@DU?$char_traits@D@std@@@std@@QAE@PAU_iobuf@@@Z
??0?$basic_filebuf@DU?$char_traits@D@std@@@std@@QAE@W4_Uninitialized@1@@Z
??0?$basic_filebuf@GU?$char_traits@G@std@@@std@@QAE@PAU_iobuf@@@Z
??0?$basic_filebuf@GU?$char_traits@G@std@@@std@@QAE@W4_Uninitialized@1@@Z
??0?$basic_filebuf@_WU?$char_traits@_W@std@@@std@@QAE@PAU_iobuf@@@Z
??0?$basic_filebuf@_WU?$char_traits@_W@std@@@std@@QAE@W4_Uninitialized@1@@Z
??0?$basic_fstream@DU?$char_traits@D@std@@@std@@QAE@PAU_iobuf@@@Z
??0?$basic_fstream@DU?$char_traits@D@std@@@std@@QAE@PBDHH@Z
??0?$basic_fstream@DU?$char_traits@D@std@@@std@@QAE@PBGHH@Z
??0?$basic_fstream@DU?$char_traits@D@std@@@std@@QAE@PB_WHH@Z
??0?$basic_fstream@DU?$char_traits@D@std@@@std@@QAE@XZ
??0?$basic_fstream@GU?$char_traits@G@std@@@std@@QAE@PAU_iobuf@@@Z
??0?$basic_fstream@GU?$char_traits@G@std@@@std@@QAE@PBDHH@Z
??0?$basic_fstream@GU?$char_traits@G@std@@@std@@QAE@PBGHH@Z
??0?$basic_fstream@GU?$char_traits@G@std@@@std@@QAE@PB_WHH@Z
??0?$basic_fstream@GU?$char_traits@G@std@@@std@@QAE@XZ
??0?$basic_fstream@_WU?$char_traits@_W@std@@@std@@QAE@PAU_iobuf@@@Z
??0?$basic_fstream@_WU?$char_traits@_W@std@@@std@@QAE@PBDHH@Z
??0?$basic_fstream@_WU?$char_traits@_W@std@@@std@@QAE@PBGHH@Z
??0?$basic_fstream@_WU?$char_traits@_W@std@@@std@@QAE@PB_WHH@Z
??0?$basic_fstream@_WU?$char_traits@_W@std@@@std@@QAE@XZ
??0?$basic_ifstream@DU?$char_traits@D@std@@@std@@QAE@PAU_iobuf@@@Z
??0?$basic_ifstream@DU?$char_traits@D@std@@@std@@QAE@PBDHH@Z
??0?$basic_ifstream@DU?$char_traits@D@std@@@std@@QAE@PBGHH@Z
??0?$basic_ifstream@DU?$char_traits@D@std@@@std@@QAE@PB_WHH@Z
??0?$basic_ifstream@DU?$char_traits@D@std@@@std@@QAE@XZ
??0?$basic_ifstream@GU?$char_traits@G@std@@@std@@QAE@PAU_iobuf@@@Z
??0?$basic_ifstream@GU?$char_traits@G@std@@@std@@QAE@PBDHH@Z
??0?$basic_ifstream@GU?$char_traits@G@std@@@std@@QAE@PBGHH@Z
??0?$basic_ifstream@GU?$char_traits@G@std@@@std@@QAE@PB_WHH@Z
??0?$basic_ifstream@GU?$char_traits@G@std@@@std@@QAE@XZ
??0?$basic_ifstream@_WU?$char_traits@_W@std@@@std@@QAE@PAU_iobuf@@@Z
??0?$basic_ifstream@_WU?$char_traits@_W@std@@@std@@QAE@PBDHH@Z
??0?$basic_ifstream@_WU?$char_traits@_W@std@@@std@@QAE@PBGHH@Z
??0?$basic_ifstream@_WU?$char_traits@_W@std@@@std@@QAE@PB_WHH@Z
??0?$basic_ifstream@_WU?$char_traits@_W@std@@@std@@QAE@XZ
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IAE@XZ
??0?$basic_ios@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z
??0?$basic_ios@GU?$char_traits@G@std@@@std@@IAE@XZ
??0?$basic_ios@GU?$char_traits@G@std@@@std@@QAE@PAV?$basic_streambuf@GU?$char_traits@G@std@@@1@@Z
??0?$basic_ios@_WU?$char_traits@_W@std@@@std@@IAE@XZ
??0?$basic_ios@_WU?$char_traits@_W@std@@@std@@QAE@PAV?$basic_streambuf@_WU?$char_traits@_W@std@@@1@@Z
??0?$basic_iostream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z
??0?$basic_iostream@GU?$char_traits@G@std@@@std@@QAE@PAV?$basic_streambuf@GU?$char_traits@G@std@@@1@@Z
??0?$basic_iostream@_WU?$char_traits@_W@std@@@std@@QAE@PAV?$basic_streambuf@_WU?$char_traits@_W@std@@@1@@Z
??0?$basic_istream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N1@Z
??0?$basic_istream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
??0?$basic_istream@DU?$char_traits@D@std@@@std@@QAE@W4_Uninitialized@1@@Z
??0?$basic_istream@GU?$char_traits@G@std@@@std@@QAE@PAV?$basic_streambuf@GU?$char_traits@G@std@@@1@_N1@Z
??0?$basic_istream@GU?$char_traits@G@std@@@std@@QAE@PAV?$basic_streambuf@GU?$char_traits@G@std@@@1@_N@Z
??0?$basic_istream@GU?$char_traits@G@std@@@std@@QAE@W4_Uninitialized@1@@Z
??0?$basic_istream@_WU?$char_traits@_W@std@@@std@@QAE@PAV?$basic_streambuf@_WU?$char_traits@_W@std@@@1@_N1@Z
??0?$basic_istream@_WU?$char_traits@_W@std@@@std@@QAE@PAV?$basic_streambuf@_WU?$char_traits@_W@std@@@1@_N@Z
??0?$basic_istream@_WU?$char_traits@_W@std@@@std@@QAE@W4_Uninitialized@1@@Z
??0?$basic_istringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@1@H@Z
??0?$basic_istringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@H@Z
??0?$basic_istringstream@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@ABV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@1@H@Z
??0?$basic_istringstream@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@H@Z
??0?$basic_istringstream@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@ABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@1@H@Z
??0?$basic_istringstream@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@H@Z
??0?$basic_ofstream@DU?$char_traits@D@std@@@std@@QAE@PAU_iobuf@@@Z
??0?$basic_ofstream@DU?$char_traits@D@std@@@std@@QAE@PBDHH@Z
??0?$basic_ofstream@DU?$char_traits@D@std@@@std@@QAE@PBGHH@Z
??0?$basic_ofstream@DU?$char_traits@D@std@@@std@@QAE@PB_WHH@Z
??0?$basic_ofstream@DU?$char_traits@D@std@@@std@@QAE@XZ
??0?$basic_ofstream@GU?$char_traits@G@std@@@std@@QAE@PAU_iobuf@@@Z
??0?$basic_ofstream@GU?$char_traits@G@std@@@std@@QAE@PBDHH@Z
??0?$basic_ofstream@GU?$char_traits@G@std@@@std@@QAE@PBGHH@Z
??0?$basic_ofstream@GU?$char_traits@G@std@@@std@@QAE@PB_WHH@Z
??0?$basic_ofstream@GU?$char_traits@G@std@@@std@@QAE@XZ
??0?$basic_ofstream@_WU?$char_traits@_W@std@@@std@@QAE@PAU_iobuf@@@Z
??0?$basic_ofstream@_WU?$char_traits@_W@std@@@std@@QAE@PBDHH@Z
??0?$basic_ofstream@_WU?$char_traits@_W@std@@@std@@QAE@PBGHH@Z
??0?$basic_ofstream@_WU?$char_traits@_W@std@@@std@@QAE@PB_WHH@Z
??0?$basic_ofstream@_WU?$char_traits@_W@std@@@std@@QAE@XZ
??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QAE@W4_Uninitialized@1@_N@Z
??0?$basic_ostream@GU?$char_traits@G@std@@@std@@QAE@PAV?$basic_streambuf@GU?$char_traits@G@std@@@1@_N@Z
??0?$basic_ostream@GU?$char_traits@G@std@@@std@@QAE@W4_Uninitialized@1@_N@Z
??0?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAE@PAV?$basic_streambuf@_WU?$char_traits@_W@std@@@1@_N@Z
??0?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAE@W4_Uninitialized@1@_N@Z
??0?$basic_ostringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@1@H@Z
??0?$basic_ostringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@H@Z
??0?$basic_ostringstream@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@ABV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@1@H@Z
??0?$basic_ostringstream@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@H@Z
??0?$basic_ostringstream@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@ABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@1@H@Z
??0?$basic_ostringstream@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@H@Z
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAE@W4_Uninitialized@1@@Z
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAE@XZ
??0?$basic_streambuf@GU?$char_traits@G@std@@@std@@IAE@W4_Uninitialized@1@@Z
??0?$basic_streambuf@GU?$char_traits@G@std@@@std@@IAE@XZ
??0?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IAE@W4_Uninitialized@1@@Z
??0?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IAE@XZ
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@II@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@IIABV?$allocator@D@1@@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV?$allocator@D@1@@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ID@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@IDABV?$allocator@D@1@@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBD0@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBD@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBDABV?$allocator@D@1@@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBDI@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBDIABV?$allocator@D@1@@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@V?$_String_const_iterator@DU?$char_traits@D@std@@V?$allocator@D@2@@1@0@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??0?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@ABV01@@Z
??0?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@ABV01@II@Z
??0?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@ABV01@IIABV?$allocator@G@1@@Z
??0?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@ABV?$allocator@G@1@@Z
??0?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@IG@Z
??0?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@IGABV?$allocator@G@1@@Z
??0?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@PBG0@Z
??0?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@PBG@Z
??0?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@PBGABV?$allocator@G@1@@Z
??0?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@PBGI@Z
??0?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@PBGIABV?$allocator@G@1@@Z
??0?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@V?$_String_const_iterator@GU?$char_traits@G@std@@V?$allocator@G@2@@1@0@Z
??0?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@XZ
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@ABV01@@Z
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@ABV01@II@Z
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@ABV01@IIABV?$allocator@_W@1@@Z
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@ABV?$allocator@_W@1@@Z
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@I_W@Z
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@I_WABV?$allocator@_W@1@@Z
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@PB_W0@Z
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@PB_W@Z
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@PB_WABV?$allocator@_W@1@@Z
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@PB_WI@Z
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@PB_WIABV?$allocator@_W@1@@Z
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@V?$_String_const_iterator@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@1@0@Z
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@XZ
??0?$basic_stringbuf@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@1@H@Z
??0?$basic_stringbuf@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@H@Z
??0?$basic_stringbuf@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@ABV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@1@H@Z
??0?$basic_stringbuf@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@H@Z
??0?$basic_stringbuf@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@ABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@1@H@Z
??0?$basic_stringbuf@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@H@Z
??0?$basic_stringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@1@H@Z
??0?$basic_stringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@H@Z
??0?$basic_stringstream@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@ABV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@1@H@Z
??0?$basic_stringstream@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@H@Z
??0?$basic_stringstream@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@ABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@1@H@Z
??0?$basic_stringstream@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@H@Z
??0?$codecvt@DDH@std@@QAE@ABV_Locinfo@1@I@Z
??0?$codecvt@DDH@std@@QAE@I@Z
??0?$codecvt@GDH@std@@IAE@PBDI@Z
??0?$codecvt@GDH@std@@QAE@ABV_Locinfo@1@I@Z
??0?$codecvt@GDH@std@@QAE@I@Z
??0?$codecvt@_WDH@std@@QAE@ABV_Locinfo@1@I@Z
??0?$codecvt@_WDH@std@@QAE@I@Z
??0?$collate@D@std@@IAE@PBDI@Z
??0?$collate@D@std@@QAE@ABV_Locinfo@1@I@Z
??0?$collate@D@std@@QAE@I@Z
??0?$collate@G@std@@IAE@PBDI@Z
??0?$collate@G@std@@QAE@ABV_Locinfo@1@I@Z
??0?$collate@G@std@@QAE@I@Z
??0?$collate@_W@std@@IAE@PBDI@Z
??0?$collate@_W@std@@QAE@ABV_Locinfo@1@I@Z
??0?$collate@_W@std@@QAE@I@Z
??0?$complex@M@std@@QAE@ABM0@Z
??0?$complex@M@std@@QAE@ABU_C_double_complex@@@Z
??0?$complex@M@std@@QAE@ABU_C_float_complex@@@Z
??0?$complex@M@std@@QAE@ABU_C_ldouble_complex@@@Z
??0?$complex@M@std@@QAE@ABV?$complex@N@1@@Z
??0?$complex@M@std@@QAE@ABV?$complex@O@1@@Z
??0?$complex@N@std@@QAE@ABN0@Z
??0?$complex@N@std@@QAE@ABU_C_double_complex@@@Z
??0?$complex@N@std@@QAE@ABU_C_ldouble_complex@@@Z
??0?$complex@N@std@@QAE@ABV?$complex@M@1@@Z
??0?$complex@N@std@@QAE@ABV?$complex@O@1@@Z
??0?$complex@O@std@@QAE@ABO0@Z
??0?$complex@O@std@@QAE@ABU_C_ldouble_complex@@@Z
??0?$complex@O@std@@QAE@ABV?$complex@M@1@@Z
??0?$complex@O@std@@QAE@ABV?$complex@N@1@@Z
??0?$ctype@D@std@@QAE@ABV_Locinfo@1@I@Z
??0?$ctype@D@std@@QAE@PBF_NI@Z
??0?$ctype@G@std@@IAE@PBDI@Z
??0?$ctype@G@std@@QAE@ABV_Locinfo@1@I@Z
??0?$ctype@G@std@@QAE@I@Z
??0?$ctype@_W@std@@QAE@ABV_Locinfo@1@I@Z
??0?$ctype@_W@std@@QAE@I@Z
??0?$messages@D@std@@IAE@PBDI@Z
??0?$messages@D@std@@QAE@ABV_Locinfo@1@I@Z
??0?$messages@D@std@@QAE@I@Z
??0?$messages@G@std@@IAE@PBDI@Z
??0?$messages@G@std@@QAE@ABV_Locinfo@1@I@Z
??0?$messages@G@std@@QAE@I@Z
??0?$messages@_W@std@@IAE@PBDI@Z
??0?$messages@_W@std@@QAE@ABV_Locinfo@1@I@Z
??0?$messages@_W@std@@QAE@I@Z
??0?$money_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QAE@ABV_Locinfo@1@I@Z
??0?$money_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QAE@I@Z
??0?$money_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@QAE@ABV_Locinfo@1@I@Z
??0?$money_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@QAE@I@Z
??0?$money_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@QAE@ABV_Locinfo@1@I@Z
??0?$money_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@QAE@I@Z
??0?$money_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QAE@ABV_Locinfo@1@I@Z
??0?$money_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QAE@I@Z
??0?$money_put@GV?$ostreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@QAE@ABV_Locinfo@1@I@Z
??0?$money_put@GV?$ostreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@QAE@I@Z
??0?$money_put@_WV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@QAE@ABV_Locinfo@1@I@Z
??0?$money_put@_WV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@QAE@I@Z
??0?$moneypunct@D$00@std@@IAE@PBDI@Z
??0?$moneypunct@D$00@std@@QAE@ABV_Locinfo@1@I_N@Z
??0?$moneypunct@D$00@std@@QAE@I@Z
??0?$moneypunct@D$0A@@std@@IAE@PBDI@Z
??0?$moneypunct@D$0A@@std@@QAE@ABV_Locinfo@1@I_N@Z
??0?$moneypunct@D$0A@@std@@QAE@I@Z
??0?$moneypunct@G$00@std@@IAE@PBDI@Z
??0?$moneypunct@G$00@std@@QAE@ABV_Locinfo@1@I_N@Z
??0?$moneypunct@G$00@std@@QAE@I@Z
??0?$moneypunct@G$0A@@std@@IAE@PBDI@Z
??0?$moneypunct@G$0A@@std@@QAE@ABV_Locinfo@1@I_N@Z
??0?$moneypunct@G$0A@@std@@QAE@I@Z
??0?$moneypunct@_W$00@std@@IAE@PBDI@Z
??0?$moneypunct@_W$00@std@@QAE@ABV_Locinfo@1@I_N@Z
??0?$moneypunct@_W$00@std@@QAE@I@Z
??0?$moneypunct@_W$0A@@std@@IAE@PBDI@Z
??0?$moneypunct@_W$0A@@std@@QAE@ABV_Locinfo@1@I_N@Z
??0?$moneypunct@_W$0A@@std@@QAE@I@Z
??0?$num_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QAE@ABV_Locinfo@1@I@Z
??0?$num_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QAE@I@Z
??0?$num_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@QAE@ABV_Locinfo@1@I@Z
??0?$num_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@QAE@I@Z
??0?$num_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@QAE@ABV_Locinfo@1@I@Z
Sections
.text Size: 525KB - Virtual size: 524KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 6KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 976B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 17KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
wintaylor2.1/Programs/Imager/microsoft.vc90.crt/msvcr90.dll.dll windows:5 windows x86
0453db624ecaef7c4f3da938cd1d0fc5
Code Sign
2e:ab:11:dc:50:ff:5c:9d:cb:c0Certificate
IssuerCN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft CorporationNot Before22-08-2007 22:31Not After25-08-2012 07:00SubjectCN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USExtended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
61:06:27:81:00:00:00:00:00:08Certificate
IssuerCN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USNot Before22-10-2008 21:24Not After22-01-2010 21:34SubjectCN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USExtended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
61:49:7c:ed:00:00:00:00:00:05Certificate
IssuerCN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USNot Before16-09-2006 01:55Not After16-09-2011 02:05SubjectCN=Microsoft Timestamping Service,OU=nCipher DSE ESN:10D8-5847-CBF8,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageContentCommitment
6a:0b:99:4f:c0:00:25:ab:11:db:45:1f:58:7a:67:a2Certificate
IssuerCN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft CorporationNot Before16-09-2006 01:04Not After15-09-2019 07:00SubjectCN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
96:53:64:bf:32:91:b5:c3:d5:61:69:64:22:32:1f:d4:15:86:5e:83Signer
Actual PE Digest96:53:64:bf:32:91:b5:c3:d5:61:69:64:22:32:1f:d4:15:86:5e:83Digest Algorithmsha1PE Digest MatchestrueHeaders
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
GetModuleFileNameA
GetModuleFileNameW
GetModuleHandleW
Sleep
GetProcAddress
ExitProcess
WriteFile
GetStdHandle
GetSystemWindowsDirectoryW
GetSystemDirectoryW
GetLongPathNameW
GetCurrentThreadId
TlsGetValue
DebugBreak
OutputDebugStringA
GetCommandLineA
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
ExitThread
CloseHandle
GetLastError
ResumeThread
CreateThread
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
InterlockedDecrement
GetCurrentThread
FindNextFileA
FindFirstFileA
FindClose
FindNextFileW
FindFirstFileW
GetLogicalDrives
GetDiskFreeSpaceA
FileTimeToSystemTime
FileTimeToLocalFileTime
SetErrorMode
Beep
GetFileAttributesA
SetFileAttributesA
SetEnvironmentVariableA
GetCurrentDirectoryA
SetCurrentDirectoryA
GetFullPathNameA
GetDriveTypeA
GetCurrentProcessId
CreateDirectoryA
MoveFileA
RemoveDirectoryA
DeleteFileA
GetFileAttributesW
SetEnvironmentVariableW
GetCurrentDirectoryW
SetCurrentDirectoryW
SetFileAttributesW
GetFullPathNameW
CreateDirectoryW
MoveFileW
RemoveDirectoryW
GetDriveTypeW
DeleteFileW
GetExitCodeProcess
WaitForSingleObject
CreateProcessA
LoadLibraryA
FreeLibrary
CreateProcessW
ReadFile
DuplicateHandle
GetCurrentProcess
GetSystemTimeAsFileTime
GetTimeZoneInformation
GetLocalTime
WideCharToMultiByte
SetFileTime
LocalFileTimeToFileTime
SystemTimeToFileTime
SetLocalTime
MultiByteToWideChar
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
GetTimeFormatA
GetDateFormatA
RtlUnwind
RaiseException
HeapFree
HeapAlloc
GetProcessHeap
GetEnvironmentVariableA
HeapDestroy
HeapCreate
VirtualFree
HeapSize
HeapReAlloc
VirtualAlloc
HeapValidate
HeapCompact
HeapWalk
VirtualProtect
GetSystemInfo
VirtualQuery
SetHandleCount
GetFileType
GetStartupInfoA
GetFileInformationByHandle
PeekNamedPipe
CreateFileA
CreateFileW
SetFilePointer
GetConsoleCP
GetConsoleMode
FlushFileBuffers
CreatePipe
SetStdHandle
ReadConsoleInputA
SetConsoleMode
PeekConsoleInputA
GetNumberOfConsoleInputEvents
ReadConsoleInputW
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
IsDBCSLeadByteEx
ReadConsoleA
ReadConsoleW
SetEndOfFile
InterlockedExchange
LockFile
UnlockFile
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
SetConsoleCtrlHandler
InitializeCriticalSectionAndSpinCount
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
FreeEnvironmentStringsA
GetEnvironmentStrings
QueryPerformanceCounter
GetTickCount
GetStringTypeW
GetStringTypeA
LCMapStringA
LCMapStringW
CompareStringA
CompareStringW
GetLocaleInfoW
GetLocaleInfoA
GetUserDefaultLCID
EnumSystemLocalesA
IsValidLocale
LoadLibraryW
GetModuleHandleA
Exports
Exports
$I10_OUTPUT
??0__non_rtti_object@std@@QAE@ABV01@@Z
??0bad_cast@std@@QAE@ABV01@@Z
??0bad_cast@std@@QAE@PBD@Z
??0bad_typeid@std@@QAE@ABV01@@Z
??0bad_typeid@std@@QAE@PBD@Z
??0exception@std@@QAE@ABQBD@Z
??0exception@std@@QAE@ABQBDH@Z
??0exception@std@@QAE@ABV01@@Z
??0exception@std@@QAE@XZ
??1__non_rtti_object@std@@UAE@XZ
??1bad_cast@std@@UAE@XZ
??1bad_typeid@std@@UAE@XZ
??1exception@std@@UAE@XZ
??1type_info@@UAE@XZ
??2@YAPAXI@Z
??2@YAPAXIHPBDH@Z
??3@YAXPAX@Z
??4__non_rtti_object@std@@QAEAAV01@ABV01@@Z
??4bad_cast@std@@QAEAAV01@ABV01@@Z
??4bad_typeid@std@@QAEAAV01@ABV01@@Z
??4exception@std@@QAEAAV01@ABV01@@Z
??8type_info@@QBE_NABV0@@Z
??9type_info@@QBE_NABV0@@Z
??_7__non_rtti_object@std@@6B@
??_7bad_cast@std@@6B@
??_7bad_typeid@std@@6B@
??_7exception@@6B@
??_7exception@std@@6B@
??_Fbad_cast@std@@QAEXXZ
??_Fbad_typeid@std@@QAEXXZ
??_U@YAPAXI@Z
??_U@YAPAXIHPBDH@Z
??_V@YAXPAX@Z
?_Name_base@type_info@@CAPBDPBV1@PAU__type_info_node@@@Z
?_Name_base_internal@type_info@@CAPBDPBV1@PAU__type_info_node@@@Z
?_Type_info_dtor@type_info@@CAXPAV1@@Z
?_Type_info_dtor_internal@type_info@@CAXPAV1@@Z
?_ValidateExecute@@YAHP6GHXZ@Z
?_ValidateRead@@YAHPBXI@Z
?_ValidateWrite@@YAHPAXI@Z
?_inconsistency@@YAXXZ
?_invalid_parameter@@YAXPBG00II@Z
?_is_exception_typeof@@YAHABVtype_info@@PAU_EXCEPTION_POINTERS@@@Z
?_name_internal_method@type_info@@QBEPBDPAU__type_info_node@@@Z
?_open@@YAHPBDHH@Z
?_query_new_handler@@YAP6AHI@ZXZ
?_query_new_mode@@YAHXZ
?_set_new_handler@@YAP6AHI@ZH@Z
?_set_new_handler@@YAP6AHI@ZP6AHI@Z@Z
?_set_new_mode@@YAHH@Z
?_set_se_translator@@YAP6AXIPAU_EXCEPTION_POINTERS@@@ZH@Z
?_set_se_translator@@YAP6AXIPAU_EXCEPTION_POINTERS@@@ZP6AXI0@Z@Z
?_sopen@@YAHPBDHHH@Z
?_type_info_dtor_internal_method@type_info@@QAEXXZ
?_wopen@@YAHPB_WHH@Z
?_wsopen@@YAHPB_WHHH@Z
?before@type_info@@QBEHABV1@@Z
?name@type_info@@QBEPBDPAU__type_info_node@@@Z
?raw_name@type_info@@QBEPBDXZ
?set_new_handler@@YAP6AXXZP6AXXZ@Z
?set_terminate@@YAP6AXXZH@Z
?set_terminate@@YAP6AXXZP6AXXZ@Z
?set_unexpected@@YAP6AXXZH@Z
?set_unexpected@@YAP6AXXZP6AXXZ@Z
?swprintf@@YAHPAGIPBGZZ
?swprintf@@YAHPA_WIPB_WZZ
?terminate@@YAXXZ
?unexpected@@YAXXZ
?vswprintf@@YAHPA_WIPB_WPAD@Z
?what@exception@std@@UBEPBDXZ
_CIacos
_CIasin
_CIatan
_CIatan2
_CIcos
_CIcosh
_CIexp
_CIfmod
_CIlog
_CIlog10
_CIpow
_CIsin
_CIsinh
_CIsqrt
_CItan
_CItanh
_CRT_RTC_INIT
_CRT_RTC_INITW
_CreateFrameInfo
_CxxThrowException
_EH_prolog
_FindAndUnlinkFrame
_Getdays
_Getmonths
_Gettnames
_HUGE
_IsExceptionObjectToBeDestroyed
_NLG_Dispatch2
_NLG_Return
_NLG_Return2
_Strftime
_XcptFilter
__AdjustPointer
__BuildCatchObject
__BuildCatchObjectHelper
__CppXcptFilter
__CxxCallUnwindDelDtor
__CxxCallUnwindDtor
__CxxCallUnwindStdDelDtor
__CxxCallUnwindVecDtor
__CxxDetectRethrow
__CxxExceptionFilter
__CxxFrameHandler
__CxxFrameHandler2
__CxxFrameHandler3
__CxxLongjmpUnwind
__CxxQueryExceptionSize
__CxxRegisterExceptionObject
__CxxUnregisterExceptionObject
__DestructExceptionObject
__FrameUnwindFilter
__RTCastToVoid
__RTDynamicCast
__RTtypeid
__STRINGTOLD
__STRINGTOLD_L
__TypeMatch
___fls_getvalue@4
___fls_setvalue@8
___lc_codepage_func
___lc_collate_cp_func
___lc_handle_func
___mb_cur_max_func
___mb_cur_max_l_func
___setlc_active_func
___unguarded_readlc_active_add_func
__argc
__argv
__badioinfo
__clean_type_info_names_internal
__control87_2
__create_locale
__crtCompareStringA
__crtCompareStringW
__crtGetLocaleInfoW
__crtGetStringTypeW
__crtLCMapStringA
__crtLCMapStringW
__daylight
__dllonexit
__doserrno
__dstbias
__fpecode
__free_locale
__get_app_type
__get_current_locale
__get_flsindex
__get_tlsindex
__getmainargs
__initenv
__iob_func
__isascii
__iscsym
__iscsymf
__iswcsym
__iswcsymf
__lc_clike
__lc_codepage
__lc_collate_cp
__lc_handle
__lconv
__lconv_init
__libm_sse2_acos
__libm_sse2_acosf
__libm_sse2_asin
__libm_sse2_asinf
__libm_sse2_atan
__libm_sse2_atan2
__libm_sse2_atanf
__libm_sse2_cos
__libm_sse2_cosf
__libm_sse2_exp
__libm_sse2_expf
__libm_sse2_log
__libm_sse2_log10
__libm_sse2_log10f
__libm_sse2_logf
__libm_sse2_pow
__libm_sse2_powf
__libm_sse2_sin
__libm_sse2_sinf
__libm_sse2_tan
__libm_sse2_tanf
__mb_cur_max
__p___argc
__p___argv
__p___initenv
__p___mb_cur_max
__p___wargv
__p___winitenv
__p__acmdln
__p__amblksiz
__p__commode
__p__daylight
__p__dstbias
__p__environ
__p__fmode
__p__iob
__p__mbcasemap
__p__mbctype
__p__pctype
__p__pgmptr
__p__pwctype
__p__timezone
__p__tzname
__p__wcmdln
__p__wenviron
__p__wpgmptr
__pctype_func
__pioinfo
__pwctype_func
__pxcptinfoptrs
__report_gsfailure
__set_app_type
__set_flsgetvalue
__setlc_active
__setusermatherr
__strncnt
__swprintf_l
__sys_errlist
__sys_nerr
__threadhandle
__threadid
__timezone
__toascii
__tzname
__unDName
__unDNameEx
__unDNameHelper
__uncaught_exception
__unguarded_readlc_active
__vswprintf_l
__wargv
__wcserror
__wcserror_s
__wcsncnt
__wgetmainargs
__winitenv
_abnormal_termination
_abs64
_access
_access_s
_acmdln
_adj_fdiv_m16i
_adj_fdiv_m32
_adj_fdiv_m32i
_adj_fdiv_m64
_adj_fdiv_r
_adj_fdivr_m16i
_adj_fdivr_m32
_adj_fdivr_m32i
_adj_fdivr_m64
_adj_fpatan
_adj_fprem
_adj_fprem1
_adj_fptan
_adjust_fdiv
_aexit_rtn
_aligned_free
_aligned_malloc
_aligned_msize
_aligned_offset_malloc
_aligned_offset_realloc
_aligned_offset_recalloc
_aligned_realloc
_aligned_recalloc
_amsg_exit
_assert
_atodbl
_atodbl_l
_atof_l
_atoflt
_atoflt_l
_atoi64
_atoi64_l
_atoi_l
_atol_l
_atoldbl
_atoldbl_l
_beep
_beginthread
_beginthreadex
_byteswap_uint64
_byteswap_ulong
_byteswap_ushort
_c_exit
_cabs
_callnewh
_calloc_crt
_cexit
_cgets
_cgets_s
_cgetws
_cgetws_s
_chdir
_chdrive
_chgsign
_chkesp
_chmod
_chsize
_chsize_s
_clearfp
_close
_commit
_commode
_configthreadlocale
_control87
_controlfp
_controlfp_s
_copysign
_cprintf
_cprintf_l
_cprintf_p
_cprintf_p_l
_cprintf_s
_cprintf_s_l
_cputs
_cputws
_creat
_create_locale
_crt_debugger_hook
_cscanf
_cscanf_l
_cscanf_s
_cscanf_s_l
_ctime32
_ctime32_s
_ctime64
_ctime64_s
_cwait
_cwprintf
_cwprintf_l
_cwprintf_p
_cwprintf_p_l
_cwprintf_s
_cwprintf_s_l
_cwscanf
_cwscanf_l
_cwscanf_s
_cwscanf_s_l
_daylight
_decode_pointer
_difftime32
_difftime64
_dosmaperr
_dstbias
_dup
_dup2
_dupenv_s
_ecvt
_ecvt_s
_encode_pointer
_encoded_null
_endthread
_endthreadex
_environ
_eof
_errno
_except_handler2
_except_handler3
_except_handler4_common
_execl
_execle
_execlp
_execlpe
_execv
_execve
_execvp
_execvpe
_exit
_expand
_fclose_nolock
_fcloseall
_fcvt
_fcvt_s
_fdopen
_fflush_nolock
_fgetchar
_fgetwc_nolock
_fgetwchar
_filbuf
_filelength
_filelengthi64
_fileno
_findclose
_findfirst32
_findfirst32i64
_findfirst64
_findfirst64i32
_findnext32
_findnext32i64
_findnext64
_findnext64i32
_finite
_flsbuf
_flushall
_fmode
_fpclass
_fpieee_flt
_fpreset
_fprintf_l
_fprintf_p
_fprintf_p_l
_fprintf_s_l
_fputchar
_fputwc_nolock
_fputwchar
_fread_nolock
_fread_nolock_s
_free_locale
_freea
_freea_s
_freefls
_fscanf_l
_fscanf_s_l
_fseek_nolock
_fseeki64
_fseeki64_nolock
_fsopen
_fstat32
_fstat32i64
_fstat64
_fstat64i32
_ftell_nolock
_ftelli64
_ftelli64_nolock
_ftime32
_ftime32_s
_ftime64
_ftime64_s
_ftol
_fullpath
_futime32
_futime64
_fwprintf_l
_fwprintf_p
_fwprintf_p_l
_fwprintf_s_l
_fwrite_nolock
_fwscanf_l
_fwscanf_s_l
_gcvt
_gcvt_s
_get_amblksiz
_get_current_locale
_get_daylight
_get_doserrno
_get_dstbias
_get_errno
_get_fmode
_get_heap_handle
_get_invalid_parameter_handler
_get_osfhandle
_get_output_format
_get_pgmptr
_get_printf_count_output
_get_purecall_handler
_get_sbh_threshold
_get_terminate
_get_timezone
_get_tzname
_get_unexpected
_get_wpgmptr
_getc_nolock
_getch
_getch_nolock
_getche
_getche_nolock
_getcwd
_getdcwd
_getdcwd_nolock
_getdiskfree
_getdllprocaddr
_getdrive
_getdrives
_getmaxstdio
_getmbcp
_getpid
_getptd
_getsystime
_getw
_getwch
_getwch_nolock
_getwche
_getwche_nolock
_getws
_getws_s
_global_unwind2
_gmtime32
Sections
.text Size: 599KB - Virtual size: 598KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 17KB - Virtual size: 25KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 976B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 14KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
wintaylor2.1/Programs/Imager/microsoft.vc90.mfc/Microsoft.VC90.MFC.manifest
-
wintaylor2.1/Programs/Imager/microsoft.vc90.mfc/mfc90u.dll.dll windows:5 windows x86
3894207feef799bfdbf86de5bc4b812d
Code Sign
2e:ab:11:dc:50:ff:5c:9d:cb:c0Certificate
IssuerCN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft CorporationNot Before22-08-2007 22:31Not After25-08-2012 07:00SubjectCN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USExtended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
61:06:27:81:00:00:00:00:00:08Certificate
IssuerCN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USNot Before22-10-2008 21:24Not After22-01-2010 21:34SubjectCN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USExtended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
6a:0b:99:4f:c0:00:25:ab:11:db:45:1f:58:7a:67:a2Certificate
IssuerCN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft CorporationNot Before16-09-2006 01:04Not After15-09-2019 07:00SubjectCN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
61:06:94:2d:00:00:00:00:00:09Certificate
IssuerCN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USNot Before25-07-2008 19:02Not After25-07-2013 19:12SubjectCN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:7A82-688A-9F92,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageContentCommitment
3e:19:48:fe:25:5b:a9:77:94:d7:d3:af:a7:14:8f:76:fa:78:3a:41Signer
Actual PE Digest3e:19:48:fe:25:5b:a9:77:94:d7:d3:af:a7:14:8f:76:fa:78:3a:41Digest Algorithmsha1PE Digest MatchestrueHeaders
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
GetEnvironmentVariableA
FormatMessageA
GetEnvironmentVariableW
LoadLibraryExW
GetNumberFormatW
GetWindowsDirectoryW
Sleep
GetVersion
IsDBCSLeadByte
GetUserDefaultLCID
CopyFileW
GetTickCount
InterlockedIncrement
GetSystemTime
lstrcpyA
lstrcpyW
GetCurrentDirectoryW
WritePrivateProfileStringW
GetPrivateProfileStringW
GetPrivateProfileIntW
SetErrorMode
CompareStringA
InterlockedExchange
GetCurrentThread
EnumResourceLanguagesW
ConvertDefaultLocale
GetLocaleInfoW
SuspendThread
ResumeThread
SetThreadPriority
SetEvent
FindNextFileW
FormatMessageW
SearchPathW
GetTempPathW
LocalUnlock
LocalLock
GetTempFileNameW
GetDiskFreeSpaceW
GlobalFlags
RaiseException
FindResourceExW
GetModuleHandleA
VirtualProtect
LoadLibraryA
GetProfileIntW
MulDiv
GetCurrentProcessId
GetVersionExW
GetCurrentThreadId
GlobalAddAtomW
CompareStringW
GlobalFindAtomW
GlobalDeleteAtom
GetVersionExA
lstrcmpW
WaitForMultipleObjects
CreateEventW
ReleaseMutex
CreateMutexW
ReleaseSemaphore
CreateSemaphoreW
WaitForSingleObject
TlsSetValue
LocalReAlloc
TlsGetValue
GetLastError
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
GlobalHandle
TlsFree
InitializeCriticalSection
TlsAlloc
LocalFree
LocalAlloc
InterlockedDecrement
GetModuleHandleW
FreeLibrary
SetFileTime
SetFileAttributesW
LocalFileTimeToFileTime
SystemTimeToFileTime
GetFileAttributesExW
FileTimeToLocalFileTime
FileTimeToSystemTime
GetFileAttributesW
GetFileSizeEx
GetFileTime
GlobalFree
GlobalReAlloc
GlobalUnlock
GlobalAlloc
GlobalSize
GlobalLock
GetShortPathNameW
GetModuleFileNameW
GetStringTypeExW
GetThreadLocale
lstrcmpiW
FindClose
FindFirstFileW
GetVolumeInformationW
GetFullPathNameW
GetProcAddress
LoadLibraryW
DeleteFileW
MoveFileW
GetFileSize
SetEndOfFile
UnlockFile
LockFile
CloseHandle
FlushFileBuffers
SetFilePointer
WriteFile
ReadFile
CreateFileW
GetCurrentProcess
DuplicateHandle
lstrlenA
ExpandEnvironmentStringsA
GetSystemTimeAsFileTime
QueryPerformanceCounter
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
InterlockedCompareExchange
lstrcmpA
FindResourceW
LoadResource
LockResource
SizeofResource
WideCharToMultiByte
MultiByteToWideChar
lstrlenW
GlobalGetAtomNameW
GetAtomNameW
SetLastError
msvcr90
_strlwr_s
_CxxThrowException
__clean_type_info_names_internal
_except_handler4_common
?_type_info_dtor_internal_method@type_info@@QAEXXZ
_crt_debugger_hook
__CppXcptFilter
_adjust_fdiv
_amsg_exit
_initterm_e
_initterm
_encoded_null
_malloc_crt
?terminate@@YAXXZ
_decode_pointer
_onexit
_lock
_encode_pointer
__dllonexit
_unlock
_mbscspn
_vscprintf
_mbsinc
_mbsupr_s
_wcsrev
_mbsspn
_mbscoll
_mbsrchr
_mbschr
vsprintf_s
_ismbcspace
_mbsstr
_mbsicoll
_mbsrev
memmove
_mbsicmp
_mbslwr_s
_mbspbrk
_time64
strlen
_beginthread
_endthread
swscanf_s
atan2
__CxxFrameHandler3
towlower
towupper
iswprint
iswalnum
iswalpha
toupper
_wcsicoll
wcscoll
exp
floor
sin
cos
clock
sqrt
_wcslwr_s
memcpy
strcpy_s
_itow_s
_ultow_s
_ltow_s
iswdigit
ceil
wcsncmp
_mbscmp
strnlen
_wcsupr_s
wcsstr
_wcsnicmp
__wargv
__argc
_beginthreadex
_endthreadex
_wfullpath
_wtol
iswspace
_wcsdup
wcsspn
wcscspn
wcspbrk
_expand
_wtoi
_recalloc
wcsrchr
wcstod
wcstoul
wcstol
_resetstkoflw
_wcsicmp
_wmakepath_s
_wsplitpath_s
_vsnwprintf_s
_snwscanf_s
labs
abs
calloc
_msize
wcscat_s
wcschr
_snwprintf_s
_errno
wcscmp
_localtime64_s
_mktime64
realloc
fclose
fflush
ftell
fseek
fgetws
fputws
fwrite
clearerr_s
ferror
feof
fread
__doserrno
_fdopen
_open_osfhandle
_fileno
_get_osfhandle
wcscpy_s
_vscwprintf
vswprintf_s
abort
free
malloc
memcmp
memset
wcsnlen
wcslen
memmove_s
memcpy_s
swprintf_s
wcsncpy_s
_purecall
fabs
user32
DestroyCursor
SetWindowRgn
DrawIcon
GetTabbedTextExtentW
IsClipboardFormatAvailable
MessageBeep
RemoveMenu
ValidateRect
PostQuitMessage
UnregisterClassW
ShowOwnedPopups
InsertMenuW
RegisterClipboardFormatW
SendNotifyMessageW
CopyAcceleratorTableW
InSendMessage
PostThreadMessageW
CreateMenu
WindowFromDC
CountClipboardFormats
SetWindowContextHelpId
CharNextW
InvalidateRgn
GetNextDlgGroupItem
ClipCursor
DrawEdge
EnumChildWindows
DrawIconEx
SubtractRect
SetClassLongW
CopyIcon
LoadImageW
GetIconInfo
CopyImage
OpenClipboard
EmptyClipboard
SetClipboardData
CloseClipboard
DrawStateW
GetUpdateRect
IsMenu
NotifyWinEvent
DestroyAcceleratorTable
CreateAcceleratorTableW
GetKeyboardState
ToUnicodeEx
GetKeyboardLayout
MapVirtualKeyExW
IsCharLowerW
DrawFrameControl
UpdateLayeredWindow
EnableScrollBar
GetMenuDefaultItem
SetMenuDefaultItem
HideCaret
InvertRect
GetDoubleClickTime
GetWindowRgn
FrameRect
CharUpperBuffW
OemToCharBuffA
CharToOemBuffA
MoveWindow
IsDialogMessageW
ScrollWindowEx
IsDlgButtonChecked
SetDlgItemTextW
SetDlgItemInt
GetDlgItemTextW
GetDlgItemInt
CheckRadioButton
CheckDlgButton
SetWindowTextW
GetSysColorBrush
GetMenuItemInfoW
SystemParametersInfoW
GetMenuStringW
TabbedTextOutW
EndPaint
BeginPaint
GetWindowDC
GetDialogBaseUnits
MapDialogRect
GetAsyncKeyState
GetNextDlgTabItem
EndDialog
CreateDialogIndirectParamW
FillRect
DrawFocusRect
LoadBitmapW
GetKeyNameTextW
MapVirtualKeyW
UnionRect
GrayStringW
DrawTextExW
DrawTextW
GetTabbedTextExtentA
GetDCEx
LockWindowUpdate
AppendMenuW
DeleteMenu
SetCursorPos
IsRectEmpty
SetParent
IsZoomed
ReleaseDC
GetDC
SetRect
SetTimer
KillTimer
InflateRect
RedrawWindow
DefMDIChildProcW
DrawMenuBar
TranslateMDISysAccel
DefFrameProcW
TranslateMessage
GetMessageW
ClientToScreen
WindowFromPoint
SetCapture
WaitMessage
GetCursorPos
LoadCursorW
GetMenuBarInfo
BringWindowToTop
InsertMenuItemW
CreatePopupMenu
InvalidateRect
ReuseDDElParam
UnpackDDElParam
DestroyMenu
LoadMenuW
GetActiveWindow
GetWindowThreadProcessId
ShowWindow
IsWindowEnabled
GetDesktopWindow
SetCursor
ReleaseCapture
TranslateAcceleratorW
LoadAcceleratorsW
SetRectEmpty
EnableWindow
LoadIconW
PostMessageW
UpdateWindow
SendDlgItemMessageA
SendDlgItemMessageW
MapWindowPoints
GetSysColor
DispatchMessageW
PeekMessageW
PtInRect
SetFocus
SetActiveWindow
GetFocus
AdjustWindowRectEx
EqualRect
ScreenToClient
EndDeferWindowPos
CopyRect
BeginDeferWindowPos
GetClientRect
ScrollWindow
IsWindowVisible
GetScrollInfo
SetScrollInfo
ShowScrollBar
GetScrollRange
SetScrollRange
GetScrollPos
SetScrollPos
GetTopWindow
MessageBoxW
IsChild
GetParent
GetCapture
WinHelpW
RegisterClassW
GetClassInfoW
GetMenuItemID
GetSubMenu
GetMenuItemCount
TrackPopupMenuEx
TrackPopupMenu
SetWindowPlacement
GetDlgItem
GetWindowTextW
GetWindowTextLengthW
GetDlgCtrlID
GetKeyState
DestroyWindow
CreateWindowExW
SetWindowsHookExW
SetPropW
GetClassNameW
GetClassInfoExW
GetClassLongW
CallNextHookEx
RemovePropW
CallWindowProcW
GetPropW
DefWindowProcW
SetMenu
DestroyIcon
GetMenuCheckMarkDimensions
ModifyMenuW
GetMenuState
SetMenuItemBitmaps
CheckMenuItem
GetSystemMenu
EnableMenuItem
GetMenu
GetMessagePos
GetMessageTime
SetForegroundWindow
GetForegroundWindow
GetLastActivePopup
SendMessageW
IsWindow
GetWindow
SetWindowPos
SetWindowLongW
GetWindowLongW
RegisterWindowMessageW
IntersectRect
OffsetRect
SystemParametersInfoA
GetWindowRect
GetWindowPlacement
IsIconic
MsgWaitForMultipleObjects
UnhookWindowsHookEx
GetSystemMetrics
CharUpperW
DeferWindowPos
gdi32
RoundRect
Polyline
GetDIBits
SetDIBColorTable
StretchBlt
CreateRoundRectRgn
FillRgn
GetBoundsRect
SetPixelV
FrameRgn
PtInRegion
CreatePolygonRgn
ExtFloodFill
SetPixel
SetPaletteEntries
CreateDIBitmap
EnumFontFamiliesW
GetTextCharsetInfo
CreateDIBSection
GetSystemPaletteEntries
GetNearestPaletteIndex
RealizePalette
CreatePalette
GetPaletteEntries
Polygon
OffsetRgn
SetBrushOrgEx
GetRgnBox
CreateMetaFileW
CopyMetaFileW
LPtoDP
Ellipse
CreateEllipticRgn
AbortDoc
EndDoc
EndPage
StartPage
SetAbortProc
DPtoLP
SetRectRgn
CombineRgn
GetMapMode
GetPixel
CreateDIBPatternBrushPt
CreateHatchBrush
CreateSolidBrush
ExtCreatePen
EnumMetaFile
PlayMetaFile
PlayMetaFileRecord
GetObjectType
ExtSelectClipRgn
GetClipRgn
CreateRectRgn
SelectClipPath
PolyBezierTo
SetColorAdjustment
PolylineTo
PolyDraw
SetArcDirection
ArcTo
SetMapperFlags
SetTextCharacterExtra
SetTextJustification
SetTextAlign
LineTo
OffsetClipRgn
ExcludeClipRect
SelectClipRgn
OffsetWindowOrgEx
ModifyWorldTransform
SetWorldTransform
SetGraphicsMode
SetStretchBltMode
SetROP2
SetPolyFillMode
SetBkMode
SelectPalette
StartDocW
EnumFontFamiliesExW
CreateDCW
BitBlt
CreateRectRgnIndirect
PatBlt
UnrealizeObject
Rectangle
CreatePen
CreatePatternBrush
CreateBitmap
TextOutW
DeleteMetaFile
CloseMetaFile
RectVisible
PtVisible
IntersectClipRect
SetWindowOrgEx
GetWindowOrgEx
GetViewportOrgEx
GetDeviceCaps
Escape
ExtTextOutW
MoveToEx
GetCurrentPositionEx
GetTextExtentPoint32A
ScaleWindowExtEx
SetWindowExtEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
SetMapMode
GetViewportExtEx
GetWindowExtEx
CreateFontIndirectW
GetTextFaceW
GetTextColor
GetNearestColor
GetStretchBltMode
GetPolyFillMode
GetTextAlign
GetBkMode
GetROP2
GetObjectW
SetBkColor
SetTextColor
CreateCompatibleDC
CreateCompatibleBitmap
GetBkColor
SelectObject
StretchDIBits
DeleteDC
CreateFontW
GetCharWidthW
DeleteObject
GetTextExtentPoint32W
GetTextMetricsW
GetStockObject
SaveDC
RestoreDC
GetClipBox
shlwapi
UrlUnescapeW
PathRemoveExtensionW
PathFindExtensionW
PathRemoveFileSpecW
PathStripToRootW
PathIsUNCW
PathFindFileNameW
comctl32
ImageList_Destroy
ImageList_Create
ImageList_ReplaceIcon
ImageList_Remove
ImageList_AddMasked
ImageList_GetImageCount
ImageList_GetIcon
ImageList_DrawEx
ImageList_GetIconSize
msimg32
TransparentBlt
AlphaBlend
Sections
.text Size: 2.4MB - Virtual size: 2.4MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 32KB - Virtual size: 52KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1.0MB - Virtual size: 1.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 186KB - Virtual size: 186KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
wintaylor2.1/Programs/Language/English.lng
-
wintaylor2.1/Programs/Language/Italiano.lng
-
wintaylor2.1/Programs/MWSnap.exe.exe windows:1 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 820KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 404KB - Virtual size: 408KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
wintaylor2.1/Programs/UsbWriteProtect.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 357KB - Virtual size: 356KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 2KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 9KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 16B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 25KB - Virtual size: 25KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 43KB - Virtual size: 43KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
wintaylor2.1/Programs/UsbWriteProtect.ini
-
wintaylor2.1/Programs/WinAudit.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 2.2MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 855KB - Virtual size: 856KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 68KB - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 1.3MB - Virtual size: 1.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 508KB - Virtual size: 505KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 16KB - Virtual size: 23KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1.3MB - Virtual size: 1.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
wintaylor2.1/Programs/als/Advanced LAN Scanner.GID
-
wintaylor2.1/Programs/als/Advanced LAN Scanner.cnt
-
wintaylor2.1/Programs/als/Advanced LAN Scanner.hlp
-
wintaylor2.1/Programs/als/als.exe.exe windows:4 windows x86
cb731be60cd7eefcb58c9646ff6c4208
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetStringTypeW
GetStringTypeA
IsBadCodePtr
SetEndOfFile
SetStdHandle
FlushFileBuffers
SetUnhandledExceptionFilter
IsBadWritePtr
VirtualAlloc
VirtualFree
HeapCreate
HeapDestroy
GetEnvironmentVariableA
GetEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsW
FreeEnvironmentStringsA
UnhandledExceptionFilter
LCMapStringW
LCMapStringA
GetTimeZoneInformation
GetOEMCP
GetACP
GetCPInfo
HeapReAlloc
Sleep
TlsGetValue
SetLastError
TlsAlloc
CreateFileA
GetFileType
GetStdHandle
SetHandleCount
SetFilePointer
ReadFile
WriteFile
RaiseException
HeapFree
GetVersion
GetCommandLineA
GetStartupInfoA
ExitThread
TlsSetValue
GetCurrentThreadId
GetCurrentProcess
TerminateProcess
ExitProcess
FileTimeToLocalFileTime
FileTimeToSystemTime
CompareStringA
CompareStringW
SetEnvironmentVariableA
SetThreadPriority
ResumeThread
MulDiv
MultiByteToWideChar
WideCharToMultiByte
GetLastError
GetVersionExA
SetEvent
CreateEventA
InterlockedIncrement
HeapSize
InterlockedDecrement
FindClose
FindNextFileA
CloseHandle
CreateThread
InitializeCriticalSection
IsBadStringPtrA
GetTickCount
WaitForSingleObject
ReleaseSemaphore
GetModuleHandleA
GetModuleFileNameA
CreateSemaphoreA
LoadLibraryA
GetProcAddress
FreeLibrary
IsBadReadPtr
FindFirstFileA
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
HeapAlloc
RtlUnwind
InterlockedExchange
user32
WinHelpA
DestroyMenu
CreateMenu
InsertMenuItemA
CreatePopupMenu
SendMessageA
DestroyWindow
DispatchMessageA
LoadStringA
IsDialogMessageA
GetMessageA
EnableWindow
UpdateWindow
ShowWindow
CreateDialogParamA
GetPropA
RemovePropA
SetPropA
IsWindow
SetFocus
GetDlgItem
SendDlgItemMessageA
MessageBoxA
TranslateMessage
GetFocus
GetAsyncKeyState
GetWindowLongA
DrawTextA
LoadBitmapA
EndPaint
BeginPaint
LoadImageA
SetRect
ScreenToClient
PtInRect
GetSystemMetrics
RegisterClassExA
GetWindowTextA
SetCapture
ClientToScreen
SetCursor
ReleaseCapture
DefWindowProcA
GetClassInfoA
LoadCursorA
RegisterClassA
GetClassNameA
SetWindowTextA
CreateWindowExA
GetDlgItemTextA
LoadIconA
SetWindowPos
GetWindowRect
SetWindowLongA
TrackPopupMenu
GetCursorPos
GetSysColor
SetDlgItemTextA
InvalidateRect
GetClientRect
gdi32
GetTextExtentPoint32A
SetTextColor
SetBkColor
GetObjectA
BitBlt
CreatePen
MoveToEx
LineTo
DeleteDC
CreateCompatibleDC
GetStockObject
SelectObject
SetPolyFillMode
GetDeviceCaps
CreateFontA
DeleteObject
comdlg32
GetSaveFileNameA
advapi32
RegCreateKeyExA
RegCloseKey
RegQueryValueExA
RegEnumKeyA
RegDeleteValueA
RegDeleteKeyA
RegConnectRegistryA
RegOpenKeyA
RegEnumValueA
OpenSCManagerA
EnumServicesStatusA
RegOpenKeyExA
RegSetValueExA
shell32
ShellExecuteA
comctl32
ImageList_Create
ImageList_AddMasked
ImageList_Destroy
winmm
timeKillEvent
timeSetEvent
mpr
WNetOpenEnumA
WNetCancelConnection2A
WNetAddConnection2A
WNetEnumResourceA
ws2_32
closesocket
gethostname
gethostbyname
ioctlsocket
connect
WSAStartup
setsockopt
gethostbyaddr
inet_ntoa
socket
WSAGetLastError
bind
htons
sendto
select
recvfrom
Sections
.text Size: 908KB - Virtual size: 906KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 40KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 32KB - Virtual size: 43KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 116KB - Virtual size: 112KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
wintaylor2.1/Programs/als/html.tpl
-
wintaylor2.1/Programs/als/versions.txt
-
wintaylor2.1/Programs/axhelper.cfg
-
wintaylor2.1/Programs/axhelper.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 52KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 30KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 41KB - Virtual size: 41KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 15KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
wintaylor2.1/Programs/c/cygwin
-
wintaylor2.1/Programs/cmd.exe.exe windows:5 windows x86
a6e4db6d0301308509a7f5737a79f454
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvcrt
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
__initenv
_cexit
_XcptFilter
_exit
_c_exit
calloc
_wcslwr
qsort
_vsnwprintf
wcsstr
_dup2
_dup
_open_osfhandle
_close
swscanf
_ultoa
_pipe
_seh_longjmp_unwind
_setmode
wcsncmp
iswxdigit
fflush
exit
_wtol
time
srand
__set_app_type
wcsrchr
malloc
free
wcstoul
_errno
iswalpha
printf
rand
swprintf
_iob
fprintf
towlower
realloc
setlocale
_snwprintf
wcscat
_wcsupr
wcsncpy
_wpopen
fgets
_pclose
memmove
wcschr
iswspace
_tell
longjmp
wcscmp
_wcsnicmp
_wcsicmp
wcstol
iswdigit
_getch
_get_osfhandle
_controlfp
_setjmp3
_except_handler3
wcscpy
wcslen
wcsspn
towupper
kernel32
FlushConsoleInputBuffer
LoadLibraryA
InterlockedExchange
FreeLibrary
LocalAlloc
GetVDMCurrentDirectories
CmdBatNotification
GetModuleHandleA
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
GetThreadLocale
GetDiskFreeSpaceExW
CompareFileTime
RemoveDirectoryW
GetCurrentDirectoryW
SetCurrentDirectoryW
TerminateProcess
WaitForSingleObject
GetExitCodeProcess
CopyFileW
SetFileAttributesW
DeleteFileW
SetFileTime
CreateDirectoryW
FillConsoleOutputAttribute
SetConsoleTextAttribute
ScrollConsoleScreenBufferW
FormatMessageW
DuplicateHandle
FlushFileBuffers
HeapReAlloc
HeapSize
GetFileAttributesExW
LocalFree
GetDriveTypeW
InitializeCriticalSection
SetConsoleCtrlHandler
GetWindowsDirectoryW
GetConsoleTitleW
GetModuleFileNameW
GetVersion
EnterCriticalSection
LeaveCriticalSection
ExpandEnvironmentStringsW
SearchPathW
WriteFile
GetVolumeInformationW
SetLastError
MoveFileW
SetConsoleTitleW
MoveFileExW
GetBinaryTypeW
GetFileAttributesW
GetCurrentThreadId
CreateProcessW
LoadLibraryW
ReadProcessMemory
SetErrorMode
GetConsoleMode
SetConsoleMode
VirtualAlloc
VirtualFree
SetEnvironmentVariableW
GetEnvironmentVariableW
GetCommandLineW
GetEnvironmentStringsW
GetLocalTime
GetTimeFormatW
FileTimeToLocalFileTime
GetDateFormatW
GetLastError
CloseHandle
SetThreadLocale
GetProcAddress
GetModuleHandleW
SetFilePointer
lstrcmpW
lstrcmpiW
HeapAlloc
GetProcessHeap
HeapFree
MultiByteToWideChar
ReadFile
WriteConsoleW
FillConsoleOutputCharacterW
SetConsoleCursorPosition
ReadConsoleW
GetConsoleScreenBufferInfo
GetStdHandle
GetFileType
VirtualQuery
RaiseException
GetCPInfo
GetConsoleOutputCP
WideCharToMultiByte
GetFileSize
CreateFileW
FindClose
FindNextFileW
FindFirstFileW
GetFullPathNameW
GetUserDefaultLCID
GetLocaleInfoW
SetLocalTime
SystemTimeToFileTime
GetSystemTime
FileTimeToSystemTime
user32
GetUserObjectInformationW
GetThreadDesktop
MessageBeep
GetProcessWindowStation
Sections
.text Size: 125KB - Virtual size: 125KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 114KB - Virtual size: 114KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 138KB - Virtual size: 138KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
wintaylor2.1/Programs/cygwin1.dll.dll windows:4 windows x86
400661656de0b22c9631b8a6779c390b
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
advapi32
RegCloseKey
kernel32
AllocConsole
BackupWrite
ClearCommBreak
ClearCommError
CloseHandle
CompareFileTime
CopyFileA
CreateDirectoryA
CreateEventA
CreateFileA
CreateFileMappingA
CreateMailslotA
CreateMutexA
CreateNamedPipeA
CreatePipe
CreateProcessA
CreateSemaphoreA
CreateTapePartition
CreateThread
DebugBreak
DeleteCriticalSection
DeleteFileA
DeviceIoControl
DuplicateHandle
EnterCriticalSection
EraseTape
EscapeCommFunction
ExitProcess
ExitThread
ExpandEnvironmentStringsA
FillConsoleOutputAttribute
FillConsoleOutputCharacterA
FindClose
FindFirstChangeNotificationA
FindFirstFileA
FindNextChangeNotification
FindNextFileA
FlushConsoleInputBuffer
FlushFileBuffers
FlushViewOfFile
FreeConsole
FreeEnvironmentStringsA
FreeLibrary
GetACP
GetBinaryTypeA
GetCommModemStatus
GetCommState
GetCommandLineA
GetComputerNameA
GetConsoleCP
GetConsoleMode
GetConsoleOutputCP
GetConsoleScreenBufferInfo
GetConsoleTitleA
GetCurrentDirectoryA
GetCurrentProcess
GetCurrentProcessId
GetCurrentThread
GetCurrentThreadId
GetDiskFreeSpaceA
GetDriveTypeA
GetEnvironmentStrings
GetEnvironmentVariableA
GetExitCodeProcess
GetFileAttributesA
GetFileInformationByHandle
GetFileSize
GetFileType
GetFullPathNameA
GetLastError
GetLogicalDriveStringsA
GetLogicalDrives
GetMailslotInfo
GetModuleFileNameA
GetModuleHandleA
GetNumberOfConsoleInputEvents
GetOEMCP
GetOverlappedResult
GetPriorityClass
GetProcAddress
GetProcessTimes
GetStartupInfoA
GetStdHandle
GetSystemDirectoryA
GetSystemInfo
GetSystemTimeAsFileTime
GetTapeParameters
GetTapePosition
GetTapeStatus
GetThreadContext
GetThreadPriority
GetTickCount
GetTimeZoneInformation
GetVersionExA
GetVolumeInformationA
GetWindowsDirectoryA
GlobalAlloc
GlobalFree
GlobalLock
GlobalMemoryStatus
GlobalUnlock
InitializeCriticalSection
IsBadStringPtrA
LeaveCriticalSection
LoadLibraryA
LoadLibraryExA
LockFile
LockFileEx
MapViewOfFile
MapViewOfFileEx
MoveFileA
MoveFileExA
MultiByteToWideChar
OpenEventA
OpenFileMappingA
OpenMutexA
OpenProcess
OpenSemaphoreA
OutputDebugStringA
PeekConsoleInputA
PeekNamedPipe
PrepareTape
PurgeComm
QueryDosDeviceA
QueryPerformanceCounter
QueryPerformanceFrequency
ReadConsoleInputA
ReadConsoleOutputA
ReadFile
ReadProcessMemory
ReleaseMutex
ReleaseSemaphore
RemoveDirectoryA
ResetEvent
ResumeThread
RtlUnwind
ScrollConsoleScreenBufferA
SetCommBreak
SetCommMask
SetCommState
SetCommTimeouts
SetConsoleCtrlHandler
SetConsoleCursorPosition
SetConsoleMode
SetConsoleTextAttribute
SetConsoleTitleA
SetCurrentDirectoryA
SetEndOfFile
SetEnvironmentVariableA
SetErrorMode
SetEvent
SetFileApisToANSI
SetFileApisToOEM
SetFileAttributesA
SetFilePointer
SetFileTime
SetHandleInformation
SetLastError
SetMailslotInfo
SetNamedPipeHandleState
SetPriorityClass
SetStdHandle
SetSystemTime
SetTapeParameters
SetTapePosition
SetThreadAffinityMask
SetThreadContext
SetThreadPriority
Sleep
SuspendThread
TerminateProcess
TerminateThread
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
TransmitCommChar
UnlockFile
UnlockFileEx
UnmapViewOfFile
VirtualAlloc
VirtualFree
VirtualProtect
VirtualProtectEx
VirtualQuery
VirtualQueryEx
WaitCommEvent
WaitForMultipleObjects
WaitForSingleObject
WaitNamedPipeA
WideCharToMultiByte
WriteConsoleOutputA
WriteFile
WriteProcessMemory
WriteTapemark
Exports
Exports
__argc
__argv
__argz_add
__argz_add_sep
__argz_append
__argz_count
__argz_create
__argz_create_sep
__argz_delete
__argz_extract
__argz_insert
__argz_next
__argz_replace
__argz_stringify
__assert
__assertfail
__check_rhosts_file
__cygwin_environ
__cygwin_user_data
__envz_add
__envz_entry
__envz_get
__envz_merge
__envz_remove
__envz_strip
__eprintf
__errno
__f_atan2
__f_atan2f
__f_exp
__f_expf
__f_frexp
__f_frexpf
__f_ldexp
__f_ldexpf
__f_log
__f_log10
__f_log10f
__f_logf
__f_pow
__f_powf
__f_tan
__f_tanf
__fpclassifyd
__fpclassifyf
__getdelim
__getline
__getreent
__infinity
__isinfd
__isinff
__isnand
__isnanf
__main
__mb_cur_max
__mempcpy
__opendir_with_d_ino
__progname
__rcmd_errstr
__signbitd
__signbitf
__signgam
__srget
__srget_r
__swbuf
__swbuf_r
_abort
_abs
_access
_acl
_acl32
_aclcheck
_aclcheck32
_aclfrommode
_aclfrommode32
_aclfrompbits
_aclfrompbits32
_aclfromtext
_aclfromtext32
_aclsort
_aclsort32
_acltomode
_acltomode32
_acltopbits
_acltopbits32
_acltotext
_acltotext32
_acos
_acosf
_acosh
_acoshf
_alarm
_alloca
_alphasort
_asctime
_asctime_r
_asin
_asinf
_asinh
_asinhf
_asprintf
_asprintf_r
_atan
_atan2
_atan2f
_atanf
_atanh
_atanhf
_atexit
_atof
_atoff
_atoi
_atol
_bcmp
_bcopy
_bsearch
_bzero
_cabs
_cabsf
_calloc
_cbrt
_cbrtf
_ceil
_ceilf
_chdir
_check_for_executable
_chmod
_chown
_chown32
_chroot
_clearerr
_clock
_close
_closedir
_copysign
_copysignf
_cos
_cosf
_cosh
_coshf
_creat
_ctime
_ctime_r
_ctype_
_cuserid
_cwait
_daylight
_difftime
_dirfd
_div
_dll_crt0@0
_drand48
_drem
_dremf
_dup
_dup2
_ecvt
_ecvtbuf
_ecvtf
_endgrent
_endmntent
_endpwent
_endutent
_erand48
_erf
_erfc
_erfcf
_erff
_execl
_execle
_execlp
_execv
_execve
_execvp
_exit
_exp
_expf
_expm1
_expm1f
_f_atan2
_f_atan2f
_f_exp
_f_expf
_f_frexp
_f_frexpf
_f_ldexp
_f_ldexpf
_f_log
_f_log10
_f_log10f
_f_logf
_f_pow
_f_powf
_f_tan
_f_tanf
_fabs
_fabsf
_facl
_facl32
_fchdir
_fchmod
_fchown
_fchown32
_fclose
_fcloseall
_fcloseall_r
_fcntl
_fcntl64
_fcvt
_fcvtbuf
_fcvtf
_fdopen
_fdopen64
_feof
_ferror
_fflush
_ffs
_fgetc
_fgetpos
_fgetpos64
_fgets
_fileno
_finite
_finitef
_fiprintf
_floor
_floorf
_fmod
_fmodf
_fnmatch
_fopen
_fopen64
_fork
_fprintf
_fputc
_fputs
_fread
_free
_freopen
_freopen64
_frexp
_frexpf
_fscanf
_fscanf_r
_fseek
_fseeko
_fseeko64
_fsetpos
_fsetpos64
_fstat
_fstat64
_fstatfs
_fsync
_ftell
_ftello
_ftello64
_ftime
_ftok
_ftruncate
_ftruncate64
_fwrite
_gamma
_gamma_r
_gammaf
_gammaf_r
_gcvt
_gcvtf
_get_osfhandle
_getc
_getc_unlocked
_getchar
_getchar_unlocked
_getcwd
_getdomainname
_getdtablesize
_getegid
_getegid32
_getenv
_geteuid
_geteuid32
_getgid
_getgid32
_getgrent
_getgrent32
_getgrgid
_getgrgid32
_getgrnam
_getgrnam32
_getgroups
_getgroups32
_gethostname
_getlogin
_getmntent
_getmode
_getpagesize
_getpass
_getpgrp
_getpid
_getppid
_getpwduid
_getpwent
_getpwnam
_getpwuid
_getpwuid32
_getpwuid_r32
_getrlimit
_getrusage
_gets
_gettimeofday
_getuid
_getuid32
_getutent
_getutid
_getutline
_getw
_getwd
_glob
_globfree
_gmtime
_gmtime_r
_htonl
_htons
_hypot
_hypotf
_ilogb
_ilogbf
_impure_ptr
_index
_infinity
_infinityf
_initgroups32
_ioctl
_iprintf
_isalnum
_isalpha
_isascii
_isatty
_iscntrl
_isdigit
_isgraph
_isinf
_isinff
_islower
_isnan
_isnanf
_isprint
_ispunct
_isspace
_isupper
_isxdigit
_j0
_j0f
_j1
_j1f
_jn
_jnf
_jrand48
_kill
_labs
_lacl
_lchown
_lchown32
_lcong48
_ldexp
_ldexpf
_ldiv
_lgamma
_lgamma_r
_lgammaf
_lgammaf_r
_link
_localeconv
_localtime
_localtime_r
_log
_log10
_log10f
_log1p
_log1pf
_logb
_logbf
_logf
_longjmp
_lrand48
_lseek
_lseek64
_lstat
_lstat64
_malloc
_matherr
_mblen
_mbstowcs
_mbtowc
_memccpy
_memchr
_memcmp
_memcpy
_memmove
_memset
_mkdir
_mknod
_mknod32
_mkstemp
_mktemp
_mktime
_mmap64
_modf
_modff
_mount
_nan
_nanf
_nanosleep
_nextafter
_nextafterf
_nice
_nl_langinfo
_nrand48
_ntohl
_ntohs
_open
_open64
_openlog
_pathconf
_pclose
_perror
_pipe
_poll
_popen
_pow
_powf
_printf
_pthread_cleanup_pop
_pthread_cleanup_push
_putc
_putc_unlocked
_putchar
_putchar_unlocked
_putenv
_puts
_pututline
_putw
_qsort
_raise
_rand
_read
_readdir
_readlink
_readv
_realloc
_remainder
_remainderf
_remove
_rename
_rewind
_rewinddir
_rindex
_rint
_rintf
_rmdir
_sbrk
_scalb
_scalbf
_scalbn
_scalbnf
_scandir
_scanf
_scanf_r
_seed48
_seekdir
_seekdir64
_select
_setbuf
_setdtablesize
_setegid
_setegid32
_setenv
_seteuid
_seteuid32
_setgid
_setgid32
_setgrent
_setgroups
_setgroups32
_setjmp
_setlocale
_setmntent
_setmode
_setpassent
_setpgid
_setpgrp
_setpwent
_setregid
_setregid32
_setreuid
_setreuid32
_setrlimit
_setsid
_settimeofday
_setuid
_setuid32
Sections
.text Size: 1014KB - Virtual size: 1014KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
/4 Size: 10KB - Virtual size: 9KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 44KB - Virtual size: 43KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 205KB - Virtual size: 205KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.bss Size: - Virtual size: 36KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.edata Size: 31KB - Virtual size: 31KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 64KB - Virtual size: 64KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
/19 Size: 512B - Virtual size: 260B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
/38 Size: 512B - Virtual size: 16B
IMAGE_SCN_MEM_DISCARDABLE
.idata Size: 36KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.cygheap Size: - Virtual size: 576KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
wintaylor2.1/Programs/mylastsearch.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 72KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 42KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 62KB - Virtual size: 62KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 11KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
wintaylor2.1/Programs/pctime/PcOnOffTime.GID
-
wintaylor2.1/Programs/pctime/PcOnOffTime.cnt
-
wintaylor2.1/Programs/pctime/PcOnOffTime.exe.exe windows:4 windows x86
Code Sign
47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4Certificate
IssuerCN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZANot Before04-12-2003 00:00Not After03-12-2013 23:59SubjectCN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=USExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageCertSign
KeyUsageCRLSign
0d:e9:2b:f0:d4:d8:29:88:18:32:05:09:5e:9a:76:88Certificate
IssuerCN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=USNot Before04-12-2003 00:00Not After03-12-2008 23:59SubjectCN=VeriSign Time Stamping Services Signer,O=VeriSign\, Inc.,C=USExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageContentCommitment
57:64:6e:2b:55:00:23:d4:90:53:4a:55:3e:ab:0d:0aCertificate
IssuerOU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=USNot Before16-07-2004 00:00Not After15-07-2009 23:59SubjectCN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=USExtended Key Usages
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
Key Usages
KeyUsageCertSign
KeyUsageCRLSign
02:6b:c3:89:a6:01:ce:84:fd:c4:25:59:3c:36:08:08Certificate
IssuerCN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=USNot Before30-03-2005 00:00Not After23-04-2006 23:59SubjectCN=Alexander Neuber und Matthias Neuber,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Alexander Neuber und Matthias Neuber,L=Halle,ST=Sachsen-Anhalt,C=DEExtended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Signer
Actual PE DigestDigest AlgorithmPE Digest MatchesfalseHeaders
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 156KB - Virtual size: 372KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DATA Size: 2KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 3KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 23KB - Virtual size: 64KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
wintaylor2.1/Programs/pctime/PcOnOffTime.hlp
-
wintaylor2.1/Programs/pctime/pad_file.xml.xml
-
wintaylor2.1/Programs/photorec_win.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 656KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 398KB - Virtual size: 400KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.text Size: 768KB - Virtual size: 768KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 186KB - Virtual size: 186KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.bss Size: - Virtual size: 54KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
wintaylor2.1/Programs/photorec_win.exe.manifest.xml
-
wintaylor2.1/Programs/ram/mdd/cmd.exe.exe windows:5 windows x86
a6e4db6d0301308509a7f5737a79f454
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvcrt
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
__initenv
_cexit
_XcptFilter
_exit
_c_exit
calloc
_wcslwr
qsort
_vsnwprintf
wcsstr
_dup2
_dup
_open_osfhandle
_close
swscanf
_ultoa
_pipe
_seh_longjmp_unwind
_setmode
wcsncmp
iswxdigit
fflush
exit
_wtol
time
srand
__set_app_type
wcsrchr
malloc
free
wcstoul
_errno
iswalpha
printf
rand
swprintf
_iob
fprintf
towlower
realloc
setlocale
_snwprintf
wcscat
_wcsupr
wcsncpy
_wpopen
fgets
_pclose
memmove
wcschr
iswspace
_tell
longjmp
wcscmp
_wcsnicmp
_wcsicmp
wcstol
iswdigit
_getch
_get_osfhandle
_controlfp
_setjmp3
_except_handler3
wcscpy
wcslen
wcsspn
towupper
kernel32
FlushConsoleInputBuffer
LoadLibraryA
InterlockedExchange
FreeLibrary
LocalAlloc
GetVDMCurrentDirectories
CmdBatNotification
GetModuleHandleA
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
GetThreadLocale
GetDiskFreeSpaceExW
CompareFileTime
RemoveDirectoryW
GetCurrentDirectoryW
SetCurrentDirectoryW
TerminateProcess
WaitForSingleObject
GetExitCodeProcess
CopyFileW
SetFileAttributesW
DeleteFileW
SetFileTime
CreateDirectoryW
FillConsoleOutputAttribute
SetConsoleTextAttribute
ScrollConsoleScreenBufferW
FormatMessageW
DuplicateHandle
FlushFileBuffers
HeapReAlloc
HeapSize
GetFileAttributesExW
LocalFree
GetDriveTypeW
InitializeCriticalSection
SetConsoleCtrlHandler
GetWindowsDirectoryW
GetConsoleTitleW
GetModuleFileNameW
GetVersion
EnterCriticalSection
LeaveCriticalSection
ExpandEnvironmentStringsW
SearchPathW
WriteFile
GetVolumeInformationW
SetLastError
MoveFileW
SetConsoleTitleW
MoveFileExW
GetBinaryTypeW
GetFileAttributesW
GetCurrentThreadId
CreateProcessW
LoadLibraryW
ReadProcessMemory
SetErrorMode
GetConsoleMode
SetConsoleMode
VirtualAlloc
VirtualFree
SetEnvironmentVariableW
GetEnvironmentVariableW
GetCommandLineW
GetEnvironmentStringsW
GetLocalTime
GetTimeFormatW
FileTimeToLocalFileTime
GetDateFormatW
GetLastError
CloseHandle
SetThreadLocale
GetProcAddress
GetModuleHandleW
SetFilePointer
lstrcmpW
lstrcmpiW
HeapAlloc
GetProcessHeap
HeapFree
MultiByteToWideChar
ReadFile
WriteConsoleW
FillConsoleOutputCharacterW
SetConsoleCursorPosition
ReadConsoleW
GetConsoleScreenBufferInfo
GetStdHandle
GetFileType
VirtualQuery
RaiseException
GetCPInfo
GetConsoleOutputCP
WideCharToMultiByte
GetFileSize
CreateFileW
FindClose
FindNextFileW
FindFirstFileW
GetFullPathNameW
GetUserDefaultLCID
GetLocaleInfoW
SetLocalTime
SystemTimeToFileTime
GetSystemTime
FileTimeToSystemTime
user32
GetUserObjectInformationW
GetThreadDesktop
MessageBeep
GetProcessWindowStation
Sections
.text Size: 125KB - Virtual size: 125KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 114KB - Virtual size: 114KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 138KB - Virtual size: 138KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
wintaylor2.1/Programs/ram/mdd/mdd.exe.exe windows:5 windows x86
2cf8f3a89f4131b42b01e3d5b0b63b6b
Code Sign
70:ba:e4:1d:10:d9:29:34:b6:38:ca:7b:03:cc:ba:bfCertificate
IssuerOU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=USNot Before29-01-1996 00:00Not After01-08-2028 23:59SubjectOU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5Certificate
IssuerCN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=USNot Before15-06-2007 00:00Not After14-06-2012 23:59SubjectCN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=USExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageContentCommitment
47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4Certificate
IssuerCN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZANot Before04-12-2003 00:00Not After03-12-2013 23:59SubjectCN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=USExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageCertSign
KeyUsageCRLSign
41:91:a1:5a:39:78:df:cf:49:65:66:38:1d:4c:75:c2Certificate
IssuerOU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=USNot Before16-07-2004 00:00Not After15-07-2014 23:59SubjectCN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=USExtended Key Usages
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
Key Usages
KeyUsageCertSign
KeyUsageCRLSign
6b:c0:52:7d:71:bd:1c:c4:be:ef:11:81:39:e2:a2:cdCertificate
IssuerCN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=USNot Before08-05-2008 00:00Not After08-05-2010 23:59SubjectCN=Mantech Security & Mission Assurance,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=Cyber Sector,O=Mantech Security & Mission Assurance,L=Falls Church,ST=Virginia,C=USExtended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
b0:df:6f:91:56:1f:90:e7:e8:53:a9:01:4d:9a:7a:eb:36:83:4b:13Signer
Actual PE Digestb0:df:6f:91:56:1f:90:e7:e8:53:a9:01:4d:9a:7a:eb:36:83:4b:13Digest Algorithmsha1PE Digest MatchestrueHeaders
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CreateFileW
MultiByteToWideChar
SetConsoleTitleA
GetStdHandle
GetLastError
GetVersionExW
GlobalMemoryStatusEx
DeviceIoControl
CloseHandle
DeleteFileW
SizeofResource
WriteFile
GetTickCount
GetModuleHandleW
SetFilePointerEx
GetCurrentProcess
LoadResource
FindResourceW
SetEndOfFile
UnmapViewOfFile
MapViewOfFile
GetProcAddress
GetFullPathNameW
EnterCriticalSection
LeaveCriticalSection
GetCommandLineA
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
SetHandleCount
GetFileType
GetStartupInfoA
DeleteCriticalSection
Sleep
HeapFree
ExitProcess
WideCharToMultiByte
GetConsoleCP
GetConsoleMode
FlushFileBuffers
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
HeapCreate
VirtualFree
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
InitializeCriticalSectionAndSpinCount
HeapAlloc
HeapReAlloc
VirtualAlloc
LoadLibraryA
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
RtlUnwind
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
SetFilePointer
SetStdHandle
HeapSize
GetLocaleInfoA
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
CreateFileA
GetModuleHandleA
advapi32
CryptDestroyHash
ControlService
CryptCreateHash
StartServiceW
CryptReleaseContext
OpenSCManagerW
DeleteService
CryptAcquireContextW
CloseServiceHandle
CryptGetHashParam
CreateServiceW
CryptHashData
shell32
ord680
Sections
.text Size: 59KB - Virtual size: 59KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 11KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 5KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 10KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
wintaylor2.1/Programs/ram/mdd/mddusage.txt
-
wintaylor2.1/Programs/ram/win32dd/bin2dmp.exe.exe windows:5 windows x86
d65c7d85c0a14a1fd5a19e4e8007ba3f
Code Sign
04:00:00:00:00:01:23:9e:0f:ac:b3Certificate
IssuerCN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BENot Before28-01-1999 13:00Not After27-01-2017 12:00SubjectCN=GlobalSign Primary Object Publishing CA,OU=Primary Object Publishing CA,O=GlobalSign nv-sa,C=BEExtended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageCertSign
KeyUsageCRLSign
04:00:00:00:00:01:20:19:c1:90:66Certificate
IssuerCN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BENot Before18-03-2009 11:00Not After28-01-2028 12:00SubjectCN=GlobalSign Timestamping CA,OU=Timestamping CA,O=GlobalSignKey Usages
KeyUsageCertSign
KeyUsageCRLSign
01:00:00:00:00:01:25:b0:b4:cc:01Certificate
IssuerCN=GlobalSign Timestamping CA,OU=Timestamping CA,O=GlobalSignNot Before21-12-2009 09:32Not After22-12-2020 09:32SubjectCN=GlobalSign Time Stamping Authority,O=GlobalSign NV,C=BEExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
04:00:00:00:00:01:23:9e:0f:af:24Certificate
IssuerCN=GlobalSign Primary Object Publishing CA,OU=Primary Object Publishing CA,O=GlobalSign nv-sa,C=BENot Before22-01-2004 10:00Not After27-01-2017 10:00SubjectCN=GlobalSign ObjectSign CA,OU=ObjectSign CA,O=GlobalSign nv-sa,C=BEExtended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageCertSign
KeyUsageCRLSign
01:00:00:00:00:01:27:d8:e8:7f:79Certificate
IssuerCN=GlobalSign ObjectSign CA,OU=ObjectSign CA,O=GlobalSign nv-sa,C=BENot Before07-04-2010 15:05Not After08-04-2011 15:05SubjectCN=Suiche Matthieu Bapthiste,OU=MoonSols,O=Suiche Matthieu Bapthiste,L=NAUROY,ST=Picardie,C=FR,1.2.840.113549.1.9.1=#0c14737570706f7274406d6f6f6e736f6c732e636f6dExtended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
61:0b:7f:6b:00:00:00:00:00:19Certificate
IssuerCN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USNot Before23-05-2006 17:00Not After23-05-2016 17:10SubjectCN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BEKey Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
84:93:01:f0:01:c7:49:dd:02:42:9a:0f:60:86:2b:87:4d:c2:18:2dSigner
Actual PE Digest84:93:01:f0:01:c7:49:dd:02:42:9a:0f:60:86:2b:87:4d:c2:18:2dDigest Algorithmsha1PE Digest MatchestrueHeaders
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetTickCount
CreateFileW
CloseHandle
SetConsoleCursorPosition
GetStdHandle
SystemTimeToFileTime
GetSystemTime
WaitForSingleObjectEx
WriteFile
ReadFile
GetOverlappedResult
GetLastError
GetFileSize
SetConsoleTextAttribute
GetConsoleScreenBufferInfo
HeapFree
HeapAlloc
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
EnterCriticalSection
LeaveCriticalSection
HeapCreate
HeapDestroy
VirtualFree
DeleteCriticalSection
FatalAppExitA
VirtualAlloc
HeapReAlloc
GetModuleHandleW
Sleep
GetProcAddress
ExitProcess
GetModuleFileNameA
GetCPInfo
InterlockedIncrement
InterlockedDecrement
GetACP
GetOEMCP
IsValidCodePage
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
GetCurrentThreadId
GetCurrentThread
LCMapStringA
WideCharToMultiByte
MultiByteToWideChar
LCMapStringW
GetModuleFileNameW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
SetHandleCount
GetFileType
GetStartupInfoA
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
RtlUnwind
InitializeCriticalSectionAndSpinCount
SetConsoleCtrlHandler
FreeLibrary
InterlockedExchange
LoadLibraryA
GetStringTypeA
GetStringTypeW
GetTimeFormatA
GetDateFormatA
GetUserDefaultLCID
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale
GetConsoleCP
GetConsoleMode
FlushFileBuffers
HeapSize
GetLocaleInfoW
GetTimeZoneInformation
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
SetFilePointer
SetStdHandle
CreateFileA
CompareStringA
CompareStringW
SetEnvironmentVariableA
Sections
.text Size: 124KB - Virtual size: 123KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 11KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 10KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 436B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
wintaylor2.1/Programs/ram/win32dd/cmd.exe.exe windows:5 windows x86
a6e4db6d0301308509a7f5737a79f454
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvcrt
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
__initenv
_cexit
_XcptFilter
_exit
_c_exit
calloc
_wcslwr
qsort
_vsnwprintf
wcsstr
_dup2
_dup
_open_osfhandle
_close
swscanf
_ultoa
_pipe
_seh_longjmp_unwind
_setmode
wcsncmp
iswxdigit
fflush
exit
_wtol
time
srand
__set_app_type
wcsrchr
malloc
free
wcstoul
_errno
iswalpha
printf
rand
swprintf
_iob
fprintf
towlower
realloc
setlocale
_snwprintf
wcscat
_wcsupr
wcsncpy
_wpopen
fgets
_pclose
memmove
wcschr
iswspace
_tell
longjmp
wcscmp
_wcsnicmp
_wcsicmp
wcstol
iswdigit
_getch
_get_osfhandle
_controlfp
_setjmp3
_except_handler3
wcscpy
wcslen
wcsspn
towupper
kernel32
FlushConsoleInputBuffer
LoadLibraryA
InterlockedExchange
FreeLibrary
LocalAlloc
GetVDMCurrentDirectories
CmdBatNotification
GetModuleHandleA
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
GetThreadLocale
GetDiskFreeSpaceExW
CompareFileTime
RemoveDirectoryW
GetCurrentDirectoryW
SetCurrentDirectoryW
TerminateProcess
WaitForSingleObject
GetExitCodeProcess
CopyFileW
SetFileAttributesW
DeleteFileW
SetFileTime
CreateDirectoryW
FillConsoleOutputAttribute
SetConsoleTextAttribute
ScrollConsoleScreenBufferW
FormatMessageW
DuplicateHandle
FlushFileBuffers
HeapReAlloc
HeapSize
GetFileAttributesExW
LocalFree
GetDriveTypeW
InitializeCriticalSection
SetConsoleCtrlHandler
GetWindowsDirectoryW
GetConsoleTitleW
GetModuleFileNameW
GetVersion
EnterCriticalSection
LeaveCriticalSection
ExpandEnvironmentStringsW
SearchPathW
WriteFile
GetVolumeInformationW
SetLastError
MoveFileW
SetConsoleTitleW
MoveFileExW
GetBinaryTypeW
GetFileAttributesW
GetCurrentThreadId
CreateProcessW
LoadLibraryW
ReadProcessMemory
SetErrorMode
GetConsoleMode
SetConsoleMode
VirtualAlloc
VirtualFree
SetEnvironmentVariableW
GetEnvironmentVariableW
GetCommandLineW
GetEnvironmentStringsW
GetLocalTime
GetTimeFormatW
FileTimeToLocalFileTime
GetDateFormatW
GetLastError
CloseHandle
SetThreadLocale
GetProcAddress
GetModuleHandleW
SetFilePointer
lstrcmpW
lstrcmpiW
HeapAlloc
GetProcessHeap
HeapFree
MultiByteToWideChar
ReadFile
WriteConsoleW
FillConsoleOutputCharacterW
SetConsoleCursorPosition
ReadConsoleW
GetConsoleScreenBufferInfo
GetStdHandle
GetFileType
VirtualQuery
RaiseException
GetCPInfo
GetConsoleOutputCP
WideCharToMultiByte
GetFileSize
CreateFileW
FindClose
FindNextFileW
FindFirstFileW
GetFullPathNameW
GetUserDefaultLCID
GetLocaleInfoW
SetLocalTime
SystemTimeToFileTime
GetSystemTime
FileTimeToSystemTime
user32
GetUserObjectInformationW
GetThreadDesktop
MessageBeep
GetProcessWindowStation
Sections
.text Size: 125KB - Virtual size: 125KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 114KB - Virtual size: 114KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 138KB - Virtual size: 138KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
wintaylor2.1/Programs/ram/win32dd/dmp2bin.exe.exe windows:5 windows x86
d65c7d85c0a14a1fd5a19e4e8007ba3f
Code Sign
04:00:00:00:00:01:23:9e:0f:ac:b3Certificate
IssuerCN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BENot Before28-01-1999 13:00Not After27-01-2017 12:00SubjectCN=GlobalSign Primary Object Publishing CA,OU=Primary Object Publishing CA,O=GlobalSign nv-sa,C=BEExtended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageCertSign
KeyUsageCRLSign
04:00:00:00:00:01:20:19:c1:90:66Certificate
IssuerCN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BENot Before18-03-2009 11:00Not After28-01-2028 12:00SubjectCN=GlobalSign Timestamping CA,OU=Timestamping CA,O=GlobalSignKey Usages
KeyUsageCertSign
KeyUsageCRLSign
01:00:00:00:00:01:25:b0:b4:cc:01Certificate
IssuerCN=GlobalSign Timestamping CA,OU=Timestamping CA,O=GlobalSignNot Before21-12-2009 09:32Not After22-12-2020 09:32SubjectCN=GlobalSign Time Stamping Authority,O=GlobalSign NV,C=BEExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
04:00:00:00:00:01:23:9e:0f:af:24Certificate
IssuerCN=GlobalSign Primary Object Publishing CA,OU=Primary Object Publishing CA,O=GlobalSign nv-sa,C=BENot Before22-01-2004 10:00Not After27-01-2017 10:00SubjectCN=GlobalSign ObjectSign CA,OU=ObjectSign CA,O=GlobalSign nv-sa,C=BEExtended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageCertSign
KeyUsageCRLSign
01:00:00:00:00:01:27:d8:e8:7f:79Certificate
IssuerCN=GlobalSign ObjectSign CA,OU=ObjectSign CA,O=GlobalSign nv-sa,C=BENot Before07-04-2010 15:05Not After08-04-2011 15:05SubjectCN=Suiche Matthieu Bapthiste,OU=MoonSols,O=Suiche Matthieu Bapthiste,L=NAUROY,ST=Picardie,C=FR,1.2.840.113549.1.9.1=#0c14737570706f7274406d6f6f6e736f6c732e636f6dExtended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
61:0b:7f:6b:00:00:00:00:00:19Certificate
IssuerCN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USNot Before23-05-2006 17:00Not After23-05-2016 17:10SubjectCN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BEKey Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ec:62:d4:a7:8c:73:ed:95:72:52:02:75:66:cc:ed:1f:99:97:99:78Signer
Actual PE Digestec:62:d4:a7:8c:73:ed:95:72:52:02:75:66:cc:ed:1f:99:97:99:78Digest Algorithmsha1PE Digest MatchestrueHeaders
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetTickCount
CreateFileW
CloseHandle
SetConsoleCursorPosition
GetStdHandle
SystemTimeToFileTime
GetSystemTime
WaitForSingleObjectEx
WriteFile
ReadFile
GetOverlappedResult
GetLastError
GetFileSize
SetConsoleTextAttribute
GetConsoleScreenBufferInfo
HeapFree
HeapAlloc
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
EnterCriticalSection
LeaveCriticalSection
HeapCreate
HeapDestroy
VirtualFree
DeleteCriticalSection
FatalAppExitA
VirtualAlloc
HeapReAlloc
GetModuleHandleW
Sleep
GetProcAddress
ExitProcess
GetModuleFileNameA
GetCPInfo
InterlockedIncrement
InterlockedDecrement
GetACP
GetOEMCP
IsValidCodePage
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
GetCurrentThreadId
GetCurrentThread
LCMapStringA
WideCharToMultiByte
MultiByteToWideChar
LCMapStringW
GetModuleFileNameW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
SetHandleCount
GetFileType
GetStartupInfoA
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
RtlUnwind
InitializeCriticalSectionAndSpinCount
SetConsoleCtrlHandler
FreeLibrary
InterlockedExchange
LoadLibraryA
GetStringTypeA
GetStringTypeW
GetTimeFormatA
GetDateFormatA
GetUserDefaultLCID
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale
GetConsoleCP
GetConsoleMode
FlushFileBuffers
HeapSize
GetLocaleInfoW
GetTimeZoneInformation
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
SetFilePointer
SetStdHandle
CreateFileA
CompareStringA
CompareStringW
SetEnvironmentVariableA
Sections
.text Size: 124KB - Virtual size: 123KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 11KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 10KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 436B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
wintaylor2.1/Programs/ram/win32dd/hibr2bin.exe.exe windows:5 windows x86
d65c7d85c0a14a1fd5a19e4e8007ba3f
Code Sign
04:00:00:00:00:01:23:9e:0f:ac:b3Certificate
IssuerCN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BENot Before28-01-1999 13:00Not After27-01-2017 12:00SubjectCN=GlobalSign Primary Object Publishing CA,OU=Primary Object Publishing CA,O=GlobalSign nv-sa,C=BEExtended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageCertSign
KeyUsageCRLSign
04:00:00:00:00:01:20:19:c1:90:66Certificate
IssuerCN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BENot Before18-03-2009 11:00Not After28-01-2028 12:00SubjectCN=GlobalSign Timestamping CA,OU=Timestamping CA,O=GlobalSignKey Usages
KeyUsageCertSign
KeyUsageCRLSign
01:00:00:00:00:01:25:b0:b4:cc:01Certificate
IssuerCN=GlobalSign Timestamping CA,OU=Timestamping CA,O=GlobalSignNot Before21-12-2009 09:32Not After22-12-2020 09:32SubjectCN=GlobalSign Time Stamping Authority,O=GlobalSign NV,C=BEExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
04:00:00:00:00:01:23:9e:0f:af:24Certificate
IssuerCN=GlobalSign Primary Object Publishing CA,OU=Primary Object Publishing CA,O=GlobalSign nv-sa,C=BENot Before22-01-2004 10:00Not After27-01-2017 10:00SubjectCN=GlobalSign ObjectSign CA,OU=ObjectSign CA,O=GlobalSign nv-sa,C=BEExtended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageCertSign
KeyUsageCRLSign
01:00:00:00:00:01:27:d8:e8:7f:79Certificate
IssuerCN=GlobalSign ObjectSign CA,OU=ObjectSign CA,O=GlobalSign nv-sa,C=BENot Before07-04-2010 15:05Not After08-04-2011 15:05SubjectCN=Suiche Matthieu Bapthiste,OU=MoonSols,O=Suiche Matthieu Bapthiste,L=NAUROY,ST=Picardie,C=FR,1.2.840.113549.1.9.1=#0c14737570706f7274406d6f6f6e736f6c732e636f6dExtended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
61:0b:7f:6b:00:00:00:00:00:19Certificate
IssuerCN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USNot Before23-05-2006 17:00Not After23-05-2016 17:10SubjectCN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BEKey Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ca:39:b7:9d:7b:2f:66:59:be:ee:ac:4d:8a:5b:da:fd:d7:ee:6d:9bSigner
Actual PE Digestca:39:b7:9d:7b:2f:66:59:be:ee:ac:4d:8a:5b:da:fd:d7:ee:6d:9bDigest Algorithmsha1PE Digest MatchestrueHeaders
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetTickCount
CreateFileW
CloseHandle
SetConsoleCursorPosition
GetStdHandle
SystemTimeToFileTime
GetSystemTime
WaitForSingleObjectEx
WriteFile
ReadFile
GetOverlappedResult
GetLastError
GetFileSize
SetConsoleTextAttribute
GetConsoleScreenBufferInfo
HeapFree
HeapAlloc
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
EnterCriticalSection
LeaveCriticalSection
HeapCreate
HeapDestroy
VirtualFree
DeleteCriticalSection
FatalAppExitA
VirtualAlloc
HeapReAlloc
GetModuleHandleW
Sleep
GetProcAddress
ExitProcess
GetModuleFileNameA
GetCPInfo
InterlockedIncrement
InterlockedDecrement
GetACP
GetOEMCP
IsValidCodePage
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
GetCurrentThreadId
GetCurrentThread
LCMapStringA
WideCharToMultiByte
MultiByteToWideChar
LCMapStringW
GetModuleFileNameW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
SetHandleCount
GetFileType
GetStartupInfoA
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
RtlUnwind
InitializeCriticalSectionAndSpinCount
SetConsoleCtrlHandler
FreeLibrary
InterlockedExchange
LoadLibraryA
GetStringTypeA
GetStringTypeW
GetTimeFormatA
GetDateFormatA
GetUserDefaultLCID
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale
GetConsoleCP
GetConsoleMode
FlushFileBuffers
HeapSize
GetLocaleInfoW
GetTimeZoneInformation
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
SetFilePointer
SetStdHandle
CreateFileA
CompareStringA
CompareStringW
SetEnvironmentVariableA
Sections
.text Size: 124KB - Virtual size: 123KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 11KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 10KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 436B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
wintaylor2.1/Programs/ram/win32dd/hibr2dmp.exe.exe windows:5 windows x86
d65c7d85c0a14a1fd5a19e4e8007ba3f
Code Sign
04:00:00:00:00:01:23:9e:0f:ac:b3Certificate
IssuerCN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BENot Before28-01-1999 13:00Not After27-01-2017 12:00SubjectCN=GlobalSign Primary Object Publishing CA,OU=Primary Object Publishing CA,O=GlobalSign nv-sa,C=BEExtended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageCertSign
KeyUsageCRLSign
04:00:00:00:00:01:20:19:c1:90:66Certificate
IssuerCN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BENot Before18-03-2009 11:00Not After28-01-2028 12:00SubjectCN=GlobalSign Timestamping CA,OU=Timestamping CA,O=GlobalSignKey Usages
KeyUsageCertSign
KeyUsageCRLSign
01:00:00:00:00:01:25:b0:b4:cc:01Certificate
IssuerCN=GlobalSign Timestamping CA,OU=Timestamping CA,O=GlobalSignNot Before21-12-2009 09:32Not After22-12-2020 09:32SubjectCN=GlobalSign Time Stamping Authority,O=GlobalSign NV,C=BEExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
04:00:00:00:00:01:23:9e:0f:af:24Certificate
IssuerCN=GlobalSign Primary Object Publishing CA,OU=Primary Object Publishing CA,O=GlobalSign nv-sa,C=BENot Before22-01-2004 10:00Not After27-01-2017 10:00SubjectCN=GlobalSign ObjectSign CA,OU=ObjectSign CA,O=GlobalSign nv-sa,C=BEExtended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageCertSign
KeyUsageCRLSign
01:00:00:00:00:01:27:d8:e8:7f:79Certificate
IssuerCN=GlobalSign ObjectSign CA,OU=ObjectSign CA,O=GlobalSign nv-sa,C=BENot Before07-04-2010 15:05Not After08-04-2011 15:05SubjectCN=Suiche Matthieu Bapthiste,OU=MoonSols,O=Suiche Matthieu Bapthiste,L=NAUROY,ST=Picardie,C=FR,1.2.840.113549.1.9.1=#0c14737570706f7274406d6f6f6e736f6c732e636f6dExtended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
61:0b:7f:6b:00:00:00:00:00:19Certificate
IssuerCN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USNot Before23-05-2006 17:00Not After23-05-2016 17:10SubjectCN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BEKey Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
2d:32:5e:ac:54:25:0b:19:84:08:ec:09:35:9d:b3:24:c8:71:67:92Signer
Actual PE Digest2d:32:5e:ac:54:25:0b:19:84:08:ec:09:35:9d:b3:24:c8:71:67:92Digest Algorithmsha1PE Digest MatchestrueHeaders
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetTickCount
CreateFileW
CloseHandle
SetConsoleCursorPosition
GetStdHandle
SystemTimeToFileTime
GetSystemTime
WaitForSingleObjectEx
WriteFile
ReadFile
GetOverlappedResult
GetLastError
GetFileSize
SetConsoleTextAttribute
GetConsoleScreenBufferInfo
HeapFree
HeapAlloc
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
EnterCriticalSection
LeaveCriticalSection
HeapCreate
HeapDestroy
VirtualFree
DeleteCriticalSection
FatalAppExitA
VirtualAlloc
HeapReAlloc
GetModuleHandleW
Sleep
GetProcAddress
ExitProcess
GetModuleFileNameA
GetCPInfo
InterlockedIncrement
InterlockedDecrement
GetACP
GetOEMCP
IsValidCodePage
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
GetCurrentThreadId
GetCurrentThread
LCMapStringA
WideCharToMultiByte
MultiByteToWideChar
LCMapStringW
GetModuleFileNameW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
SetHandleCount
GetFileType
GetStartupInfoA
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
RtlUnwind
InitializeCriticalSectionAndSpinCount
SetConsoleCtrlHandler
FreeLibrary
InterlockedExchange
LoadLibraryA
GetStringTypeA
GetStringTypeW
GetTimeFormatA
GetDateFormatA
GetUserDefaultLCID
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale
GetConsoleCP
GetConsoleMode
FlushFileBuffers
HeapSize
GetLocaleInfoW
GetTimeZoneInformation
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
SetFilePointer
SetStdHandle
CreateFileA
CompareStringA
CompareStringW
SetEnvironmentVariableA
Sections
.text Size: 124KB - Virtual size: 123KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 11KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 10KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 436B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
wintaylor2.1/Programs/ram/win32dd/readme.txt
-
wintaylor2.1/Programs/ram/win32dd/win32dd.exe.exe windows:5 windows x86
3b36613990f8c3d10ffb4cdc48f11be5
Code Sign
04:00:00:00:00:01:23:9e:0f:ac:b3Certificate
IssuerCN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BENot Before28-01-1999 13:00Not After27-01-2017 12:00SubjectCN=GlobalSign Primary Object Publishing CA,OU=Primary Object Publishing CA,O=GlobalSign nv-sa,C=BEExtended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageCertSign
KeyUsageCRLSign
04:00:00:00:00:01:20:19:c1:90:66Certificate
IssuerCN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BENot Before18-03-2009 11:00Not After28-01-2028 12:00SubjectCN=GlobalSign Timestamping CA,OU=Timestamping CA,O=GlobalSignKey Usages
KeyUsageCertSign
KeyUsageCRLSign
01:00:00:00:00:01:25:b0:b4:cc:01Certificate
IssuerCN=GlobalSign Timestamping CA,OU=Timestamping CA,O=GlobalSignNot Before21-12-2009 09:32Not After22-12-2020 09:32SubjectCN=GlobalSign Time Stamping Authority,O=GlobalSign NV,C=BEExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
04:00:00:00:00:01:23:9e:0f:af:24Certificate
IssuerCN=GlobalSign Primary Object Publishing CA,OU=Primary Object Publishing CA,O=GlobalSign nv-sa,C=BENot Before22-01-2004 10:00Not After27-01-2017 10:00SubjectCN=GlobalSign ObjectSign CA,OU=ObjectSign CA,O=GlobalSign nv-sa,C=BEExtended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageCertSign
KeyUsageCRLSign
01:00:00:00:00:01:27:d8:e8:7f:79Certificate
IssuerCN=GlobalSign ObjectSign CA,OU=ObjectSign CA,O=GlobalSign nv-sa,C=BENot Before07-04-2010 15:05Not After08-04-2011 15:05SubjectCN=Suiche Matthieu Bapthiste,OU=MoonSols,O=Suiche Matthieu Bapthiste,L=NAUROY,ST=Picardie,C=FR,1.2.840.113549.1.9.1=#0c14737570706f7274406d6f6f6e736f6c732e636f6dExtended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
61:0b:7f:6b:00:00:00:00:00:19Certificate
IssuerCN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USNot Before23-05-2006 17:00Not After23-05-2016 17:10SubjectCN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BEKey Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
c1:e6:41:d3:52:df:57:ba:7e:bf:10:30:f5:0d:0f:42:77:7e:bd:0cSigner
Actual PE Digestc1:e6:41:d3:52:df:57:ba:7e:bf:10:30:f5:0d:0f:42:77:7e:bd:0cDigest Algorithmsha1PE Digest MatchestrueHeaders
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetSystemInfo
GetModuleHandleW
GetVersionExW
DeviceIoControl
GetComputerNameW
ReadFile
FlushFileBuffers
SetStdHandle
GlobalMemoryStatusEx
HeapSize
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
HeapReAlloc
RtlUnwind
GetLocaleInfoA
GetSystemTime
GetTickCount
VirtualAlloc
VirtualFree
WriteFile
WaitForSingleObjectEx
GetFullPathNameW
GetLastError
Sleep
GetCurrentProcess
CreateFileW
CloseHandle
GetStdHandle
SetConsoleTextAttribute
GetConsoleScreenBufferInfo
LoadLibraryW
GetProcAddress
GetVersion
WideCharToMultiByte
ReadConsoleInputA
SetConsoleMode
GetConsoleMode
ExitProcess
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetCPInfo
InterlockedIncrement
InterlockedDecrement
GetACP
GetOEMCP
IsValidCodePage
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
GetCurrentThreadId
EnterCriticalSection
LeaveCriticalSection
HeapFree
CreateFileA
HeapAlloc
DeleteCriticalSection
GetModuleFileNameA
LoadLibraryA
InitializeCriticalSectionAndSpinCount
GetModuleFileNameW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
SetHandleCount
GetFileType
GetStartupInfoA
HeapCreate
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
SetFilePointer
GetConsoleCP
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
user32
GetSystemMetrics
ws2_32
WSAStartup
socket
bind
gethostbyname
inet_ntoa
closesocket
WSACleanup
recv
inet_addr
accept
htons
listen
powrprof
ReadGlobalPwrPolicy
WriteGlobalPwrPolicy
GetPwrCapabilities
advapi32
RegQueryValueExW
RegSetValueExW
RegCloseKey
CreateServiceW
StartServiceW
OpenSCManagerW
OpenServiceW
CloseServiceHandle
ControlService
QueryServiceStatus
DeleteService
OpenProcessToken
LookupPrivilegeValueW
AdjustTokenPrivileges
AllocateAndInitializeSid
CheckTokenMembership
FreeSid
RegOpenKeyExW
Sections
.text Size: 53KB - Virtual size: 52KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 30KB - Virtual size: 29KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
wintaylor2.1/Programs/ram/win32dd/win32dd.sys.sys windows:6 windows x86
f6beb844d1a84489fae3939234586744
Code Sign
04:00:00:00:00:01:23:9e:0f:ac:b3Certificate
IssuerCN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BENot Before28-01-1999 13:00Not After27-01-2017 12:00SubjectCN=GlobalSign Primary Object Publishing CA,OU=Primary Object Publishing CA,O=GlobalSign nv-sa,C=BEExtended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageCertSign
KeyUsageCRLSign
04:00:00:00:00:01:20:19:c1:90:66Certificate
IssuerCN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BENot Before18-03-2009 11:00Not After28-01-2028 12:00SubjectCN=GlobalSign Timestamping CA,OU=Timestamping CA,O=GlobalSignKey Usages
KeyUsageCertSign
KeyUsageCRLSign
01:00:00:00:00:01:25:b0:b4:cc:01Certificate
IssuerCN=GlobalSign Timestamping CA,OU=Timestamping CA,O=GlobalSignNot Before21-12-2009 09:32Not After22-12-2020 09:32SubjectCN=GlobalSign Time Stamping Authority,O=GlobalSign NV,C=BEExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
04:00:00:00:00:01:23:9e:0f:af:24Certificate
IssuerCN=GlobalSign Primary Object Publishing CA,OU=Primary Object Publishing CA,O=GlobalSign nv-sa,C=BENot Before22-01-2004 10:00Not After27-01-2017 10:00SubjectCN=GlobalSign ObjectSign CA,OU=ObjectSign CA,O=GlobalSign nv-sa,C=BEExtended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageCertSign
KeyUsageCRLSign
01:00:00:00:00:01:27:d8:e8:7f:79Certificate
IssuerCN=GlobalSign ObjectSign CA,OU=ObjectSign CA,O=GlobalSign nv-sa,C=BENot Before07-04-2010 15:05Not After08-04-2011 15:05SubjectCN=Suiche Matthieu Bapthiste,OU=MoonSols,O=Suiche Matthieu Bapthiste,L=NAUROY,ST=Picardie,C=FR,1.2.840.113549.1.9.1=#0c14737570706f7274406d6f6f6e736f6c732e636f6dExtended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
61:0b:7f:6b:00:00:00:00:00:19Certificate
IssuerCN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USNot Before23-05-2006 17:00Not After23-05-2016 17:10SubjectCN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BEKey Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
58:bc:d3:54:17:05:8b:2e:15:54:37:44:32:fd:a1:27:4b:b2:63:33Signer
Actual PE Digest58:bc:d3:54:17:05:8b:2e:15:54:37:44:32:fd:a1:27:4b:b2:63:33Digest Algorithmsha1PE Digest MatchestrueHeaders
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
ntoskrnl.exe
PsTerminateSystemThread
KeSetEvent
ZwClose
KeWaitForSingleObject
PsCreateSystemThread
KeInitializeEvent
DbgPrint
memset
IoDeleteDevice
IoDeleteSymbolicLink
RtlInitUnicodeString
KeBugCheckEx
IofCompleteRequest
ExFreePoolWithTag
IoCreateSymbolicLink
MmGetPhysicalAddress
NtBuildNumber
ExAllocatePoolWithTag
_allshr
memcpy
NtWaitForSingleObject
ZwWriteFile
ObfDereferenceObject
ObReferenceObjectByHandle
ZwOpenSection
_aullrem
RtlFillMemoryUlong
MmGetPhysicalMemoryRanges
ZwQuerySystemInformation
MmMapMemoryDumpMdl
MmUnmapIoSpace
ZwUnmapViewOfSection
MmMapIoSpace
ZwMapViewOfSection
KeQueryActiveProcessors
ZwCreateFile
KeRevertToUserAffinityThread
KeSetSystemAffinityThread
memmove
IofCallDriver
IoBuildDeviceIoControlRequest
IoGetRelatedDeviceObject
KeDelayExecutionThread
IoFreeMdl
MmProbeAndLockPages
IoAllocateMdl
KeTickCount
MmGetSystemRoutineAddress
ZwSetSecurityObject
ObOpenObjectByPointer
IoDeviceObjectType
IoCreateDevice
RtlUnwind
RtlGetDaclSecurityDescriptor
RtlGetSaclSecurityDescriptor
RtlGetGroupSecurityDescriptor
RtlGetOwnerSecurityDescriptor
_snwprintf
RtlLengthSecurityDescriptor
SeCaptureSecurityDescriptor
SeExports
IoIsWdmVersionAvailable
_wcsnicmp
RtlAddAccessAllowedAce
RtlLengthSid
wcschr
RtlAbsoluteToSelfRelativeSD
RtlSetDaclSecurityDescriptor
RtlCreateSecurityDescriptor
ZwOpenKey
ZwCreateKey
ZwQueryValueKey
ZwSetValueKey
RtlFreeUnicodeString
RtlAnsiCharToUnicodeChar
Sections
.text Size: 32KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 768B - Virtual size: 676B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
PAGE Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
INIT Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 1024B - Virtual size: 1010B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
wintaylor2.1/Programs/ram/win32dd/win64dd.exe.exe windows:5 windows x64
38a3044d1892336580d278ba4a5538eb
Code Sign
04:00:00:00:00:01:23:9e:0f:ac:b3Certificate
IssuerCN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BENot Before28-01-1999 13:00Not After27-01-2017 12:00SubjectCN=GlobalSign Primary Object Publishing CA,OU=Primary Object Publishing CA,O=GlobalSign nv-sa,C=BEExtended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageCertSign
KeyUsageCRLSign
04:00:00:00:00:01:20:19:c1:90:66Certificate
IssuerCN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BENot Before18-03-2009 11:00Not After28-01-2028 12:00SubjectCN=GlobalSign Timestamping CA,OU=Timestamping CA,O=GlobalSignKey Usages
KeyUsageCertSign
KeyUsageCRLSign
01:00:00:00:00:01:25:b0:b4:cc:01Certificate
IssuerCN=GlobalSign Timestamping CA,OU=Timestamping CA,O=GlobalSignNot Before21-12-2009 09:32Not After22-12-2020 09:32SubjectCN=GlobalSign Time Stamping Authority,O=GlobalSign NV,C=BEExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
04:00:00:00:00:01:23:9e:0f:af:24Certificate
IssuerCN=GlobalSign Primary Object Publishing CA,OU=Primary Object Publishing CA,O=GlobalSign nv-sa,C=BENot Before22-01-2004 10:00Not After27-01-2017 10:00SubjectCN=GlobalSign ObjectSign CA,OU=ObjectSign CA,O=GlobalSign nv-sa,C=BEExtended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageCertSign
KeyUsageCRLSign
01:00:00:00:00:01:27:d8:e8:7f:79Certificate
IssuerCN=GlobalSign ObjectSign CA,OU=ObjectSign CA,O=GlobalSign nv-sa,C=BENot Before07-04-2010 15:05Not After08-04-2011 15:05SubjectCN=Suiche Matthieu Bapthiste,OU=MoonSols,O=Suiche Matthieu Bapthiste,L=NAUROY,ST=Picardie,C=FR,1.2.840.113549.1.9.1=#0c14737570706f7274406d6f6f6e736f6c732e636f6dExtended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
61:0b:7f:6b:00:00:00:00:00:19Certificate
IssuerCN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USNot Before23-05-2006 17:00Not After23-05-2016 17:10SubjectCN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BEKey Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
75:56:2b:10:d8:de:7d:aa:a7:61:68:e3:24:ff:56:08:47:dc:3d:8fSigner
Actual PE Digest75:56:2b:10:d8:de:7d:aa:a7:61:68:e3:24:ff:56:08:47:dc:3d:8fDigest Algorithmsha1PE Digest MatchestrueHeaders
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
kernel32
GetSystemInfo
GetModuleHandleW
GetVersionExW
DeviceIoControl
GetComputerNameW
ReadFile
FlushFileBuffers
HeapReAlloc
GlobalMemoryStatusEx
HeapSize
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
GetLocaleInfoA
GetStringTypeW
GetSystemTime
GetTickCount
VirtualAlloc
WriteFile
WaitForSingleObjectEx
VirtualFree
GetFullPathNameW
GetLastError
Sleep
GetCurrentProcess
CreateFileW
CloseHandle
GetStdHandle
SetConsoleTextAttribute
GetConsoleScreenBufferInfo
LoadLibraryW
GetProcAddress
SetStdHandle
GetVersion
WideCharToMultiByte
ReadConsoleInputA
SetConsoleMode
GetConsoleMode
ExitProcess
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
EncodePointer
DecodePointer
FlsGetValue
FlsSetValue
FlsFree
SetLastError
GetCurrentThreadId
FlsAlloc
RtlUnwindEx
EnterCriticalSection
LeaveCriticalSection
HeapFree
CreateFileA
HeapAlloc
DeleteCriticalSection
GetModuleFileNameA
LoadLibraryA
InitializeCriticalSectionAndSpinCount
GetModuleFileNameW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
SetHandleCount
GetFileType
GetStartupInfoA
HeapSetInformation
HeapCreate
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
SetFilePointer
GetConsoleCP
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
user32
GetSystemMetrics
ws2_32
WSAStartup
socket
bind
gethostbyname
inet_ntoa
recv
closesocket
WSACleanup
inet_addr
accept
htons
listen
powrprof
ReadGlobalPwrPolicy
WriteGlobalPwrPolicy
GetPwrCapabilities
advapi32
RegQueryValueExW
RegSetValueExW
RegCloseKey
CreateServiceW
StartServiceW
OpenSCManagerW
OpenServiceW
CloseServiceHandle
ControlService
QueryServiceStatus
DeleteService
OpenProcessToken
LookupPrivilegeValueW
AdjustTokenPrivileges
AllocateAndInitializeSid
CheckTokenMembership
FreeSid
RegOpenKeyExW
Sections
.text Size: 56KB - Virtual size: 55KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 33KB - Virtual size: 33KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 6KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
wintaylor2.1/Programs/ram/win32dd/win64dd.sys.sys windows:6 windows x64
508c339ffb85be44a52f63521f29f2cc
Code Sign
04:00:00:00:00:01:23:9e:0f:ac:b3Certificate
IssuerCN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BENot Before28-01-1999 13:00Not After27-01-2017 12:00SubjectCN=GlobalSign Primary Object Publishing CA,OU=Primary Object Publishing CA,O=GlobalSign nv-sa,C=BEExtended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageCertSign
KeyUsageCRLSign
04:00:00:00:00:01:20:19:c1:90:66Certificate
IssuerCN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BENot Before18-03-2009 11:00Not After28-01-2028 12:00SubjectCN=GlobalSign Timestamping CA,OU=Timestamping CA,O=GlobalSignKey Usages
KeyUsageCertSign
KeyUsageCRLSign
01:00:00:00:00:01:25:b0:b4:cc:01Certificate
IssuerCN=GlobalSign Timestamping CA,OU=Timestamping CA,O=GlobalSignNot Before21-12-2009 09:32Not After22-12-2020 09:32SubjectCN=GlobalSign Time Stamping Authority,O=GlobalSign NV,C=BEExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
04:00:00:00:00:01:23:9e:0f:af:24Certificate
IssuerCN=GlobalSign Primary Object Publishing CA,OU=Primary Object Publishing CA,O=GlobalSign nv-sa,C=BENot Before22-01-2004 10:00Not After27-01-2017 10:00SubjectCN=GlobalSign ObjectSign CA,OU=ObjectSign CA,O=GlobalSign nv-sa,C=BEExtended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageCertSign
KeyUsageCRLSign
01:00:00:00:00:01:27:d8:e8:7f:79Certificate
IssuerCN=GlobalSign ObjectSign CA,OU=ObjectSign CA,O=GlobalSign nv-sa,C=BENot Before07-04-2010 15:05Not After08-04-2011 15:05SubjectCN=Suiche Matthieu Bapthiste,OU=MoonSols,O=Suiche Matthieu Bapthiste,L=NAUROY,ST=Picardie,C=FR,1.2.840.113549.1.9.1=#0c14737570706f7274406d6f6f6e736f6c732e636f6dExtended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
61:0b:7f:6b:00:00:00:00:00:19Certificate
IssuerCN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USNot Before23-05-2006 17:00Not After23-05-2016 17:10SubjectCN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BEKey Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
d3:bf:4d:2d:e8:d5:6e:b9:eb:a8:2e:bf:86:02:0d:3f:79:9e:5d:c9Signer
Actual PE Digestd3:bf:4d:2d:e8:d5:6e:b9:eb:a8:2e:bf:86:02:0d:3f:79:9e:5d:c9Digest Algorithmsha1PE Digest MatchestrueHeaders
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
ntoskrnl.exe
KeSetEvent
PsTerminateSystemThread
KeInitializeEvent
PsCreateSystemThread
KeWaitForSingleObject
ZwClose
RtlInitUnicodeString
IoDeleteSymbolicLink
IoDeleteDevice
ExFreePoolWithTag
KeBugCheckEx
IofCompleteRequest
DbgPrint
IoCreateSymbolicLink
ExAllocatePoolWithTag
NtBuildNumber
MmGetPhysicalAddress
ZwOpenSection
ObReferenceObjectByHandle
ObfDereferenceObject
ZwWriteFile
NtWaitForSingleObject
MmGetPhysicalMemoryRanges
ZwQuerySystemInformation
MmMapMemoryDumpMdl
ZwMapViewOfSection
MmMapIoSpace
ZwUnmapViewOfSection
MmUnmapIoSpace
KeQueryActiveProcessors
ZwCreateFile
KdSystemDebugControl
KdDebuggerEnabled
KeSetSystemAffinityThread
KeRevertToUserAffinityThread
IoGetRelatedDeviceObject
IoBuildDeviceIoControlRequest
IofCallDriver
IoAllocateMdl
MmProbeAndLockPages
IoFreeMdl
KeDelayExecutionThread
MmGetSystemRoutineAddress
IoCreateDevice
ObOpenObjectByPointer
ZwSetSecurityObject
IoDeviceObjectType
_snwprintf
RtlLengthSecurityDescriptor
SeCaptureSecurityDescriptor
RtlCreateSecurityDescriptor
RtlSetDaclSecurityDescriptor
RtlAbsoluteToSelfRelativeSD
IoIsWdmVersionAvailable
SeExports
wcschr
_wcsnicmp
RtlLengthSid
RtlAddAccessAllowedAce
RtlGetSaclSecurityDescriptor
RtlGetDaclSecurityDescriptor
RtlGetGroupSecurityDescriptor
RtlGetOwnerSecurityDescriptor
ZwOpenKey
ZwCreateKey
ZwQueryValueKey
ZwSetValueKey
RtlFreeUnicodeString
RtlAnsiCharToUnicodeChar
__C_specific_handler
Sections
.text Size: 35KB - Virtual size: 34KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 1024B - Virtual size: 1020B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
PAGE Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
INIT Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 192B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
wintaylor2.1/Programs/ram/winen/cmd.exe.exe windows:5 windows x86
a6e4db6d0301308509a7f5737a79f454
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvcrt
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
__initenv
_cexit
_XcptFilter
_exit
_c_exit
calloc
_wcslwr
qsort
_vsnwprintf
wcsstr
_dup2
_dup
_open_osfhandle
_close
swscanf
_ultoa
_pipe
_seh_longjmp_unwind
_setmode
wcsncmp
iswxdigit
fflush
exit
_wtol
time
srand
__set_app_type
wcsrchr
malloc
free
wcstoul
_errno
iswalpha
printf
rand
swprintf
_iob
fprintf
towlower
realloc
setlocale
_snwprintf
wcscat
_wcsupr
wcsncpy
_wpopen
fgets
_pclose
memmove
wcschr
iswspace
_tell
longjmp
wcscmp
_wcsnicmp
_wcsicmp
wcstol
iswdigit
_getch
_get_osfhandle
_controlfp
_setjmp3
_except_handler3
wcscpy
wcslen
wcsspn
towupper
kernel32
FlushConsoleInputBuffer
LoadLibraryA
InterlockedExchange
FreeLibrary
LocalAlloc
GetVDMCurrentDirectories
CmdBatNotification
GetModuleHandleA
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
GetThreadLocale
GetDiskFreeSpaceExW
CompareFileTime
RemoveDirectoryW
GetCurrentDirectoryW
SetCurrentDirectoryW
TerminateProcess
WaitForSingleObject
GetExitCodeProcess
CopyFileW
SetFileAttributesW
DeleteFileW
SetFileTime
CreateDirectoryW
FillConsoleOutputAttribute
SetConsoleTextAttribute
ScrollConsoleScreenBufferW
FormatMessageW
DuplicateHandle
FlushFileBuffers
HeapReAlloc
HeapSize
GetFileAttributesExW
LocalFree
GetDriveTypeW
InitializeCriticalSection
SetConsoleCtrlHandler
GetWindowsDirectoryW
GetConsoleTitleW
GetModuleFileNameW
GetVersion
EnterCriticalSection
LeaveCriticalSection
ExpandEnvironmentStringsW
SearchPathW
WriteFile
GetVolumeInformationW
SetLastError
MoveFileW
SetConsoleTitleW
MoveFileExW
GetBinaryTypeW
GetFileAttributesW
GetCurrentThreadId
CreateProcessW
LoadLibraryW
ReadProcessMemory
SetErrorMode
GetConsoleMode
SetConsoleMode
VirtualAlloc
VirtualFree
SetEnvironmentVariableW
GetEnvironmentVariableW
GetCommandLineW
GetEnvironmentStringsW
GetLocalTime
GetTimeFormatW
FileTimeToLocalFileTime
GetDateFormatW
GetLastError
CloseHandle
SetThreadLocale
GetProcAddress
GetModuleHandleW
SetFilePointer
lstrcmpW
lstrcmpiW
HeapAlloc
GetProcessHeap
HeapFree
MultiByteToWideChar
ReadFile
WriteConsoleW
FillConsoleOutputCharacterW
SetConsoleCursorPosition
ReadConsoleW
GetConsoleScreenBufferInfo
GetStdHandle
GetFileType
VirtualQuery
RaiseException
GetCPInfo
GetConsoleOutputCP
WideCharToMultiByte
GetFileSize
CreateFileW
FindClose
FindNextFileW
FindFirstFileW
GetFullPathNameW
GetUserDefaultLCID
GetLocaleInfoW
SetLocalTime
SystemTimeToFileTime
GetSystemTime
FileTimeToSystemTime
user32
GetUserObjectInformationW
GetThreadDesktop
MessageBeep
GetProcessWindowStation
Sections
.text Size: 125KB - Virtual size: 125KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 114KB - Virtual size: 114KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 138KB - Virtual size: 138KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
wintaylor2.1/Programs/ram/winen/winen.exe.exe windows:4 windows x86
cb95973daa67b1c512def93da79437dc
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
FreeEnvironmentStringsA
LoadLibraryExW
DeleteCriticalSection
InterlockedIncrement
WideCharToMultiByte
SystemTimeToFileTime
CreateFileW
GetCurrentThreadId
GetFileAttributesW
VirtualAlloc
GetDriveTypeW
FindClose
FormatMessageW
FlushFileBuffers
WriteFile
LocalFree
GetSystemDefaultLCID
SetEndOfFile
GetNumberFormatW
GetCurrentProcess
LockResource
DeviceIoControl
SetFileAttributesW
FindResourceW
GetVersionExW
SetFilePointer
ExpandEnvironmentStringsW
GetLocaleInfoW
CloseHandle
GetModuleHandleW
FreeLibrary
GetACP
GetFileSize
GetTickCount
InitializeCriticalSection
FileTimeToSystemTime
GetCurrentThread
GetEnvironmentStrings
FreeResource
Sleep
GetLastError
GetWindowsDirectoryW
MultiByteToWideChar
GetSystemInfo
LoadResource
GetFileTime
SetLastError
ReadFile
SetThreadPriority
GetFileAttributesExW
GetModuleFileNameW
GetTimeZoneInformation
DeleteFileW
GetSystemTimeAsFileTime
SizeofResource
GetCurrentProcessId
GetProcAddress
SetUnhandledExceptionFilter
EnterCriticalSection
LeaveCriticalSection
GetProcessHeap
HeapFree
TerminateProcess
GetStdHandle
GetConsoleScreenBufferInfo
GetCommandLineW
SetPriorityClass
CreateFileA
HeapSize
ExitProcess
HeapReAlloc
HeapCreate
HeapDestroy
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetFileType
GetStartupInfoA
QueryPerformanceCounter
LoadLibraryA
GetLocaleInfoA
GetStringTypeA
GetStringTypeW
RtlUnwind
SetStdHandle
VirtualFree
LCMapStringW
LCMapStringA
IsDebuggerPresent
GetModuleHandleA
HeapAlloc
GetConsoleCP
ReadConsoleInputA
ReadConsoleInputW
SetConsoleMode
GetConsoleMode
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
GetCommandLineA
GetVersionExA
UnhandledExceptionFilter
GetModuleFileNameA
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedDecrement
GetCPInfo
GetOEMCP
IsValidCodePage
user32
wsprintfA
advapi32
EqualSid
AllocateAndInitializeSid
GetTokenInformation
RegCloseKey
RegOpenKeyExW
RegEnumKeyExW
OpenThreadToken
OpenProcessToken
RegEnumValueW
RegQueryValueExW
RegSetValueExW
FreeSid
ole32
CoCreateGuid
Sections
.text Size: 161KB - Virtual size: 160KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 41KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 10KB - Virtual size: 30KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 9B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 22KB - Virtual size: 22KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
wintaylor2.1/Programs/ram/winen/winen.txt
-
wintaylor2.1/Programs/ram/winen/winen64.exe.exe windows:4 windows x64
6b3073091552537141b3423525776113
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
kernel32
GetEnvironmentStrings
SetLastError
ReadFile
GetSystemTimeAsFileTime
GetModuleFileNameW
SetThreadPriority
GetFileTime
SetUnhandledExceptionFilter
GetTimeZoneInformation
LoadLibraryExW
SizeofResource
GetProcAddress
GetFileAttributesExW
DeleteFileW
SystemTimeToFileTime
GetCurrentProcessId
DeleteCriticalSection
GetDriveTypeW
WideCharToMultiByte
CreateFileW
VirtualAlloc
GetFileAttributesW
GetCurrentThreadId
FormatMessageW
FlushFileBuffers
GetSystemDefaultLCID
WriteFile
FindClose
GetCurrentProcess
SetEndOfFile
LocalFree
FindResourceW
DeviceIoControl
GetNumberFormatW
FreeEnvironmentStringsW
GetVersionExW
LockResource
FreeLibrary
GetModuleHandleW
SetFileAttributesW
GetTickCount
InitializeCriticalSection
GetFileSize
GetLocaleInfoW
GetACP
FreeResource
GetCurrentThread
GetSystemInfo
ExpandEnvironmentStringsW
LoadResource
VirtualFree
CloseHandle
FileTimeToSystemTime
GetLastError
Sleep
MultiByteToWideChar
EnterCriticalSection
LeaveCriticalSection
TerminateProcess
GetProcessHeap
HeapFree
GetConsoleScreenBufferInfo
GetCommandLineW
SetPriorityClass
GetStdHandle
FreeEnvironmentStringsA
CreateFileA
HeapSize
RtlUnwindEx
IsDebuggerPresent
LCMapStringW
GetEnvironmentStringsW
SetHandleCount
GetFileType
GetStartupInfoA
QueryPerformanceCounter
LoadLibraryA
GetLocaleInfoA
GetStringTypeA
GetStringTypeW
HeapReAlloc
RtlVirtualUnwind
RtlLookupFunctionEntry
SetStdHandle
SetFilePointer
GetWindowsDirectoryW
LCMapStringA
IsValidCodePage
GetOEMCP
HeapAlloc
GetModuleHandleA
GetConsoleCP
ReadConsoleInputA
ReadConsoleInputW
SetConsoleMode
GetConsoleMode
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
GetCommandLineA
GetVersionExA
ExitProcess
GetModuleFileNameA
HeapSetInformation
HeapCreate
UnhandledExceptionFilter
RtlCaptureContext
FlsGetValue
FlsSetValue
TlsFree
FlsFree
FlsAlloc
GetCPInfo
user32
wsprintfA
advapi32
EqualSid
AllocateAndInitializeSid
GetTokenInformation
OpenThreadToken
RegEnumValueW
OpenProcessToken
RegQueryValueExW
RegSetValueExW
RegCloseKey
RegEnumKeyExW
RegOpenKeyExW
FreeSid
ole32
CoCreateGuid
Sections
.text Size: 233KB - Virtual size: 232KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 66KB - Virtual size: 65KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 13KB - Virtual size: 38KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 11KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.tls Size: 512B - Virtual size: 17B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 20KB - Virtual size: 19KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
wintaylor2.1/Programs/ram/winen/winen_.sys.sys windows:6 windows x86
2d6e785165928a36a79bcc1c25d9cf61
Code Sign
41:91:a1:5a:39:78:df:cf:49:65:66:38:1d:4c:75:c2Certificate
IssuerOU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=USNot Before16-07-2004 00:00Not After15-07-2014 23:59SubjectCN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=USExtended Key Usages
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
Key Usages
KeyUsageCertSign
KeyUsageCRLSign
61:0c:12:06:00:00:00:00:00:1bCertificate
IssuerCN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USNot Before23-05-2006 17:01Not After23-05-2016 17:11SubjectOU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=USKey Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
4f:97:f8:f0:29:bb:92:11:5e:17:3a:c1:b6:2a:81:93Certificate
IssuerCN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=USNot Before15-12-2006 00:00Not After31-01-2010 23:59SubjectCN=Guidance Software\, Inc.,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=Development,O=Guidance Software\, Inc.,L=Pasadena,ST=California,C=USExtended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
e2:b8:db:23:51:1c:31:ca:47:26:dd:4c:0f:5b:40:7b:ad:62:ee:cdSigner
Actual PE Digeste2:b8:db:23:51:1c:31:ca:47:26:dd:4c:0f:5b:40:7b:ad:62:ee:cdDigest Algorithmsha1PE Digest MatchestrueHeaders
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
ntoskrnl.exe
KeDetachProcess
ZwQueryObject
KeAttachProcess
PsLookupProcessByProcessId
IoGetCurrentProcess
DbgPrint
RtlCompareMemory
ZwQueryInformationProcess
ZwOpenProcess
ExFreePoolWithTag
ExAllocatePoolWithTag
ZwQueryInformationToken
ZwOpenProcessToken
ProbeForRead
ZwQueryValueKey
ZwOpenKey
IofCompleteRequest
IoDeleteDevice
IoDeleteSymbolicLink
KeReleaseMutex
KeWaitForSingleObject
IoCreateSymbolicLink
KeInitializeMutex
IoCreateDevice
MmGetSystemRoutineAddress
IoInvalidateDeviceState
IofCallDriver
IoFileObjectType
KeInitializeEvent
IoGetDeviceObjectPointer
swprintf
IoInvalidateDeviceRelations
Ke386IoSetAccessProcess
ZwDeviceIoControlFile
ZwTerminateProcess
RtlAppendUnicodeStringToString
RtlCopyUnicodeString
RtlCompareUnicodeString
ZwOpenDirectoryObject
ZwEnumerateKey
_snprintf
wcsncpy
_stricmp
strrchr
ZwDeleteKey
ZwSetInformationFile
ZwQueryInformationFile
ZwOpenSection
ZwMapViewOfSection
ZwUnmapViewOfSection
KeTickCount
KeBugCheckEx
RtlUnwind
MmIsAddressValid
ObfDereferenceObject
ObQueryNameString
memset
memcpy
RtlInitUnicodeString
ZwCreateFile
IoBuildSynchronousFsdRequest
ZwClose
hal
KfLowerIrql
READ_PORT_UCHAR
READ_PORT_USHORT
WRITE_PORT_USHORT
READ_PORT_ULONG
WRITE_PORT_ULONG
KfRaiseIrql
Sections
.text Size: 27KB - Virtual size: 27KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 924B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
INIT Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 872B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.reloc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
wintaylor2.1/Programs/readme.txt
-
wintaylor2.1/Programs/testdisk_win.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 636KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 361KB - Virtual size: 364KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
wintaylor2.1/Programs/tools/2k/arp.exe.exe windows:5 windows x86
f6767b1bd6438b9a47b7cf19e8c56b1f
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
snmpapi
SnmpUtilVarBindFree
SnmpUtilMemFree
SnmpUtilMemAlloc
SnmpUtilOidCpy
wsock32
WSAStartup
gethostbyname
ioctlsocket
msvcrt
sprintf
exit
toupper
islower
isxdigit
isspace
sscanf
time
fprintf
_iob
isdigit
_exit
_XcptFilter
__p___initenv
__getmainargs
_initterm
__setusermatherr
_setmode
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
_adjust_fdiv
kernel32
FormatMessageA
GetProcAddress
LoadLibraryA
LocalFree
GetLastError
user32
CharToOemBuffA
Sections
.text Size: 9KB - Virtual size: 9KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
wintaylor2.1/Programs/tools/2k/at.exe.exe windows:5 windows x86
7649cba32d8f25a4ff52b5b68023e008
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
msvcrt
_except_handler3
_controlfp
__p__commode
__set_app_type
__p__fmode
_initterm
_adjust_fdiv
__setusermatherr
_iob
fgets
exit
_XcptFilter
wcschr
wcscpy
__getmainargs
__p___initenv
wcscat
_exit
wcsncpy
wcsrchr
_wcsicmp
swprintf
free
wcstok
malloc
strchr
_wcsupr
wcslen
strspn
wcscmp
_itoa
_stricmp
sscanf
strpbrk
advapi32
RegOpenKeyExW
RegQueryValueExW
RegCloseKey
kernel32
ReadConsoleW
WideCharToMultiByte
FormatMessageW
GetProfileIntA
LocalAlloc
GetProfileStringA
LoadLibraryExW
FreeLibrary
GetSystemTime
GetTimeFormatW
WriteConsoleW
GetThreadLocale
GetConsoleOutputCP
GetCPInfo
MultiByteToWideChar
GetSystemDefaultLangID
LoadLibraryW
SetThreadLocale
GetCommandLineW
LocalFree
GetFileType
GetStdHandle
GetLastError
WriteFile
netapi32
I_NetNameValidate
NetScheduleJobAdd
NetApiBufferFree
NetScheduleJobGetInfo
NetScheduleJobEnum
NetScheduleJobDel
shell32
CommandLineToArgvW
user32
wsprintfW
ntdll
NtQuerySystemTime
RtlTimeToSecondsSince1970
Sections
.text Size: 13KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
wintaylor2.1/Programs/tools/2k/cmd.exe.exe windows:5 windows x86
d61d5bb406de4ecba2d4e89e39c0a8c2
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
MultiByteToWideChar
ReadFile
CreateFileW
WideCharToMultiByte
GetFileSize
lstrcmpW
lstrcmpiW
FlushConsoleInputBuffer
GetStdHandle
HeapAlloc
GetProcessHeap
HeapFree
DebugBreak
WriteConsoleW
FillConsoleOutputCharacterW
SetConsoleCursorPosition
ReadConsoleW
GetConsoleScreenBufferInfo
GetFileType
GetLocaleInfoW
GetUserDefaultLCID
FileTimeToSystemTime
FileTimeToLocalFileTime
SystemTimeToFileTime
GetSystemTime
GetLocalTime
SetLocalTime
SetConsoleMode
GetConsoleMode
GetEnvironmentStringsW
SetEnvironmentVariableW
GetCommandLineW
GetEnvironmentVariableW
VirtualFree
VirtualAlloc
SetErrorMode
GetVDMCurrentDirectories
CreateProcessW
GetCurrentThreadId
GetFileAttributesW
GetBinaryTypeW
ReadProcessMemory
GetLastError
CloseHandle
MoveFileW
SetLastError
MoveFileExW
SetConsoleTitleW
WriteFile
SearchPathW
GetVolumeInformationW
GetModuleHandleW
GetConsoleTitleW
GetWindowsDirectoryW
SetConsoleCtrlHandler
InitializeCriticalSection
ExpandEnvironmentStringsW
GetModuleFileNameW
LeaveCriticalSection
EnterCriticalSection
GetVersion
GetDriveTypeW
GetFileAttributesExW
HeapSize
HeapReAlloc
DuplicateHandle
FlushFileBuffers
FormatMessageW
ScrollConsoleScreenBufferW
SetConsoleTextAttribute
FillConsoleOutputAttribute
CreateDirectoryW
DeleteFileW
SetFileAttributesW
CopyFileW
SetFileTime
SetCurrentDirectoryW
TerminateProcess
GetExitCodeProcess
WaitForSingleObject
GetCurrentDirectoryW
RemoveDirectoryW
CompareFileTime
LocalFree
GetDiskFreeSpaceExW
VirtualQuery
FindClose
FindFirstFileW
FindNextFileW
GetConsoleOutputCP
GetFullPathNameW
SetFilePointer
CmdBatNotification
GetCPInfo
SetThreadLocale
GetProcAddress
LoadLibraryW
GetThreadLocale
LoadLibraryA
RaiseException
InterlockedExchange
LocalAlloc
FreeLibrary
user32
MessageBeep
GetThreadDesktop
GetUserObjectInformationW
GetProcessWindowStation
advapi32
RegSetValueW
RegDeleteKeyW
RegQueryValueExW
RegQueryValueW
RegOpenKeyW
RegEnumKeyW
RegSetValueExW
RegCreateKeyExW
RegCloseKey
GetSecurityInfoExW
RegOpenKeyExW
msvcrt
longjmp
wcslen
wcscpy
_tell
towupper
wcsspn
_get_osfhandle
_getch
wcscat
_snwprintf
wcstol
wcscmp
wcsncpy
wcschr
memmove
_pclose
fgets
_popen
_wcsnicmp
_wcsicmp
iswspace
iswdigit
_wcsupr
setlocale
towlower
wcsrchr
fprintf
_iob
swprintf
rand
printf
iswalpha
wcstoul
free
malloc
_except_handler3
_setjmp3
fflush
srand
time
_wtol
iswxdigit
exit
_setmode
_seh_longjmp_unwind
wcsncmp
_pipe
_ultoa
swscanf
realloc
_close
_open_osfhandle
_dup
_dup2
wcsstr
_vsnwprintf
qsort
_wcslwr
calloc
_exit
_XcptFilter
__p___initenv
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_controlfp
Sections
.text Size: 107KB - Virtual size: 106KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 52KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 118KB - Virtual size: 117KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
wintaylor2.1/Programs/tools/2k/cmdenv.bat.bat .vbs
-
wintaylor2.1/Programs/tools/2k/doskey.exe.exe windows:5 windows x86
176ca18dd63068dfe13a4086c3fdb6a5
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
ulib
?SetCaseSensitive@ARGUMENT_LEXEMIZER@@QAEXE@Z
?Initialize@STREAM_MESSAGE@@QAEEPAVSTREAM@@00@Z
?Get_Standard_Output_Stream@@YGPAVSTREAM@@XZ
?Get_Standard_Input_Stream@@YGPAVSTREAM@@XZ
??0REST_OF_LINE_ARGUMENT@@QAE@XZ
?Initialize@STRING_ARGUMENT@@QAEEPAD@Z
?Initialize@FLAG_ARGUMENT@@QAEEPAD@Z
??0FLAG_ARGUMENT@@QAE@XZ
??0STRING_ARGUMENT@@QAE@XZ
??0ARRAY@@QAE@XZ
?Initialize@LONG_ARGUMENT@@QAEEPAD@Z
?Initialize@ARGUMENT_LEXEMIZER@@QAEEPAVARRAY@@@Z
?Initialize@ARRAY@@QAEEKK@Z
?QueryFile@SYSTEM@@SGPAVFSN_FILE@@PBVPATH@@@Z
?QueryStream@FSN_FILE@@QAEPAVFILE_STREAM@@W4STREAMACCESS@@@Z
?ReadLine@STREAM@@QAEEPAVWSTRING@@E@Z
?Initialize@WSTRING@@QAEEPBV1@KK@Z
?QueryWSTR@WSTRING@@QBEPAGKKPAGKE@Z
??0DSTRING@@QAE@XZ
?Initialize@WSTRING@@QAEEPBDK@Z
?Initialize@WSTRING@@QAEEPBGK@Z
?Strcat@WSTRING@@QAEEPBV1@@Z
?Display@MESSAGE@@QAAEPBDZZ
??1DSTRING@@UAE@XZ
?PutSeparators@ARGUMENT_LEXEMIZER@@QAEXPBD@Z
?PrepareToParse@ARGUMENT_LEXEMIZER@@QAEEPAVWSTRING@@@Z
?Initialize@PATH_ARGUMENT@@QAEEPADE@Z
?Initialize@REST_OF_LINE_ARGUMENT@@QAEEXZ
?Put@ARRAY@@UAEEPAVOBJECT@@@Z
?DoParsing@ARGUMENT_LEXEMIZER@@QAEEPAVARRAY@@@Z
?Set@STREAM_MESSAGE@@UAEEKW4MESSAGE_TYPE@@K@Z
?QueryInvalidArgument@ARGUMENT_LEXEMIZER@@QAEPAVWSTRING@@XZ
?IsValueSet@ARGUMENT@@QAEEXZ
??1PATH_ARGUMENT@@UAE@XZ
??1STRING_ARGUMENT@@UAE@XZ
??1OBJECT@@UAE@XZ
??1ARRAY@@UAE@XZ
??1ARGUMENT_LEXEMIZER@@UAE@XZ
??1STREAM_MESSAGE@@UAE@XZ
??0ARGUMENT_LEXEMIZER@@QAE@XZ
??0STREAM_MESSAGE@@QAE@XZ
??0PATH_ARGUMENT@@QAE@XZ
?DeleteChAt@WSTRING@@QAEXKK@Z
??0LONG_ARGUMENT@@QAE@XZ
kernel32
GetConsoleCommandHistoryLengthW
ExpungeConsoleCommandHistoryW
SetConsoleNumberOfCommandsW
SetConsoleCommandHistoryMode
GetConsoleAliasesW
GetConsoleCommandHistoryW
AddConsoleAliasW
GetConsoleAliasExesLengthW
GetConsoleAliasExesW
GetConsoleAliasesLengthW
ntdll
_wcsicmp
wcschr
RtlFreeHeap
RtlAllocateHeap
msvcrt
_controlfp
_except_handler3
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
__p___initenv
exit
_XcptFilter
_exit
Sections
.text Size: 9KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 64B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 960B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
wintaylor2.1/Programs/tools/2k/hostname.exe.exe windows:5 windows x86
0493264954cd5100c5fa796a7d50d2fc
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvcrt
__p__commode
__p__fmode
__set_app_type
_controlfp
_cexit
_adjust_fdiv
_except_handler3
_XcptFilter
_exit
_c_exit
__setusermatherr
_initterm
__getmainargs
__initenv
_write
strchr
puts
exit
kernel32
FormatMessageA
LocalFree
GetModuleHandleA
GetLastError
user32
CharToOemBuffA
ws2_32
gethostname
WSAStartup
mswsock
s_perror
Sections
.text Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 480B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
wintaylor2.1/Programs/tools/2k/ipconfig.exe.exe windows:5 windows x86
ec5d0e2094cc0b62e056f5a39b9352e3
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
ntdll
mbstowcs
RtlAnsiStringToUnicodeString
RtlFreeUnicodeString
NtDeviceIoControlFile
NtWaitForSingleObject
NtClose
NtCreateFile
RtlNtStatusToDosError
strncpy
wcscpy
_stricmp
atoi
sprintf
strspn
strpbrk
RtlInitUnicodeString
RtlUnicodeStringToOemString
RtlFreeOemString
wcslen
wcstombs
RtlInitString
NlsMbOemCodePageTag
RtlxOemStringToUnicodeSize
RtlOemStringToUnicodeString
_chkstk
strchr
NtOpenFile
user32
CharToOemBuffA
iphlpapi
NhpAllocateAndGetInterfaceInfoFromStack
GetIpStatsFromStack
NhGetInterfaceNameFromGuid
GetAdapterOrderMap
GetInterfaceInfo
setupapi
SetupDiCreateDeviceInfoList
SetupDiGetDeviceRegistryPropertyW
SetupDiOpenDeviceInfoW
SetupDiDestroyDeviceInfoList
rpcrt4
UuidFromStringA
netman
HrPnpInstanceIdFromGuid
msvcrt
putchar
_except_handler3
__p__commode
_controlfp
__set_app_type
__p__fmode
setlocale
calloc
__p___initenv
_XcptFilter
__getmainargs
malloc
free
_initterm
_adjust_fdiv
exit
_exit
__setusermatherr
printf
localtime
advapi32
RegCloseKey
RegQueryValueExA
RegOpenKeyA
RegSetValueExA
RegQueryValueExW
kernel32
GetProcessHeap
GetLastError
SetLastError
MultiByteToWideChar
LocalAlloc
FreeLibrary
GetDateFormatA
DeviceIoControl
HeapFree
GetLocaleInfoA
IsValidCodePage
GetComputerNameExA
WideCharToMultiByte
LocalFree
GetProcAddress
LoadLibraryA
FormatMessageA
CloseHandle
GetTimeFormatA
GetUserDefaultLCID
Sections
.text Size: 18KB - Virtual size: 18KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 14KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
wintaylor2.1/Programs/tools/2k/ipxroute.exe.exe windows:5 windows x86
60b70dce519aed9ba8f6bff801f1881b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvcrt
__p__fmode
__p__commode
_adjust_fdiv
atoi
__setusermatherr
_initterm
__getmainargs
__initenv
_cexit
_controlfp
_exit
_c_exit
_strupr
strtoul
qsort
sprintf
exit
malloc
_iob
fprintf
free
printf
_except_handler3
_XcptFilter
__set_app_type
memmove
kernel32
GetLastError
FormatMessageA
MultiByteToWideChar
LocalAlloc
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetModuleHandleA
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
LocalFree
mprapi
MprConfigServerConnect
MprConfigGetGuidName
MprConfigGetFriendlyName
MprConfigServerDisconnect
ntdll
RtlInitUnicodeString
NtOpenFile
NtClose
NtDeviceIoControlFile
NtRequestWaitReplyPort
NtConnectPort
user32
CharToOemA
winstrm
s_ioctl
s_open
Sections
.text Size: 11KB - Virtual size: 10KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 384B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 10KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
wintaylor2.1/Programs/tools/2k/mem.exe
-
wintaylor2.1/Programs/tools/2k/nbtstat.exe.exe windows:5 windows x86
12def675c07e57e736afeb30db0455fc
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
wsock32
ntohl
ord1108
ioctlsocket
user32
CharToOemBuffA
OemToCharBuffA
ntdll
RtlInitString
RtlAnsiStringToUnicodeString
strncpy
RtlFreeAnsiString
NtWaitForSingleObject
NtDeviceIoControlFile
RtlUpcaseUnicodeStringToOemString
NtCreateFile
isprint
atoi
sprintf
NtClose
vsprintf
RtlExtendedLargeIntegerDivide
memmove
RtlInitUnicodeString
RtlFreeUnicodeString
RtlUnicodeStringToAnsiString
msvcrt
__p___initenv
_except_handler3
__set_app_type
exit
_controlfp
__p__fmode
__p__commode
__setusermatherr
_write
_exit
_XcptFilter
_adjust_fdiv
__getmainargs
_initterm
advapi32
RegQueryValueExA
RegOpenKeyExA
RegCloseKey
kernel32
FreeLibrary
LocalAlloc
Sleep
MultiByteToWideChar
WideCharToMultiByte
LocalFree
FormatMessageA
LoadLibraryA
GetProcAddress
Sections
.text Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 42KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 10KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
wintaylor2.1/Programs/tools/2k/net.exe.exe windows:5 windows x86
d394432629116faa2f6ad29305371cac
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
msvcrt
_controlfp
_except_handler3
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
exit
putchar
wcscpy
_XcptFilter
_exit
wcsrchr
wcspbrk
wcsncmp
_wcsupr
wcscmp
_wcsicmp
_wcsnicmp
qsort
wcscat
wcschr
_iob
_setmode
ftell
wcslen
__p___initenv
fread
fopen
wcstok
calloc
_vsnwprintf
_wcsdup
malloc
advapi32
RegEnumValueW
RegOpenKeyExW
RegQueryValueExW
RegCloseKey
kernel32
GetFileType
CreateProcessW
FreeLibrary
LoadLibraryW
PeekConsoleInputW
GetConsoleMode
SetConsoleMode
WriteFile
ReadConsoleW
FormatMessageW
CloseHandle
GetModuleFileNameW
SetLastError
GetStdHandle
WriteConsoleW
WideCharToMultiByte
GetDriveTypeW
WriteProfileStringW
GetProfileStringW
GetLastError
GetCommandLineW
SetThreadLocale
GetSystemDefaultLangID
GetCPInfo
GetConsoleOutputCP
GetExitCodeProcess
WaitForSingleObject
netapi32
NetServerEnum
NetWkstaGetInfo
NetWkstaUserGetInfo
I_NetPathType
I_NetNameValidate
NetUseGetInfo
NetUseEnum
NetApiBufferReallocate
NetApiBufferAllocate
NetapipBufferAllocate
NetApiBufferFree
NetShareEnum
NetUserGetInfo
NetServerGetInfo
mpr
WNetCloseEnum
WNetOpenEnumW
WNetAddConnection2W
WNetEnumResourceW
WNetGetLastErrorW
WNetGetConnectionW
WNetCancelConnection2W
ntdll
memmove
RtlUnwind
RtlQueryTimeZoneInformation
wcsncpy
wcstombs
wcscspn
wcsspn
RtlAllocateHeap
swprintf
_snwprintf
Sections
.text Size: 30KB - Virtual size: 29KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 9KB - Virtual size: 57KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 920B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
wintaylor2.1/Programs/tools/2k/netstat.exe.exe windows:5 windows x86
5f0876cd5c61446f0337004f7cb4e1ad
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
wsock32
gethostbyaddr
htons
getservbyport
gethostname
WSAStartup
msvcrt
sscanf
exit
system
toupper
_strupr
strchr
time
fprintf
_iob
sprintf
_exit
_XcptFilter
__p___initenv
__getmainargs
_initterm
__setusermatherr
_setmode
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
_adjust_fdiv
kernel32
LocalFree
FormatMessageA
GetProcAddress
LoadLibraryA
GetLastError
Sleep
snmpapi
SnmpUtilOidCpy
SnmpUtilMemFree
SnmpUtilVarBindFree
SnmpUtilMemAlloc
user32
CharToOemBuffA
Sections
.text Size: 10KB - Virtual size: 9KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
wintaylor2.1/Programs/tools/2k/res_kit/auditpol.exe.exe windows:5 windows x86
04bc1bb44b63e33c9e720495e0adbcc7
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
user32
CharToOemBuffA
advapi32
LsaNtStatusToWinError
LsaOpenPolicy
LsaFreeMemory
LsaQueryInformationPolicy
LsaSetInformationPolicy
kernel32
WideCharToMultiByte
GetOEMCP
FormatMessageA
LoadLibraryExA
MultiByteToWideChar
GetCommandLineA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
RtlUnwind
HeapAlloc
HeapFree
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
VirtualAlloc
GetCPInfo
GetACP
LCMapStringW
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
HeapDestroy
HeapCreate
VirtualFree
WriteFile
LoadLibraryA
LCMapStringA
GetLastError
GetStringTypeA
GetStringTypeW
GetProcAddress
SetStdHandle
FlushFileBuffers
SetFilePointer
CloseHandle
Sections
.text Size: 23KB - Virtual size: 22KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 10KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
wintaylor2.1/Programs/tools/2k/res_kit/drivers.exe.exe windows:5 windows x86
2fe8def72a3165eb09667531366876b4
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
msvcrt
exit
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p___initenv
__getmainargs
printf
_controlfp
_XcptFilter
_exit
_strnicmp
_stricmp
ctime
__set_app_type
__p__fmode
_except_handler3
kernel32
GetSystemDirectoryA
SetCurrentDirectoryA
CreateFileA
CreateFileMappingA
MapViewOfFile
CloseHandle
UnmapViewOfFile
ntdll
NtQuerySystemInformation
Sections
.text Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 128KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
wintaylor2.1/Programs/tools/2k/res_kit/dumpel.exe.exe windows:5 windows x86
192dd48166858538f51679a97a00fecf
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
advapi32
RegQueryValueExA
ReadEventLogA
OpenEventLogA
OpenBackupEventLogA
GetSidSubAuthority
GetSidSubAuthorityCount
GetSidIdentifierAuthority
LookupAccountSidA
RegCloseKey
CloseEventLog
RegOpenKeyExA
AdjustTokenPrivileges
LookupPrivilegeValueA
OpenProcessToken
kernel32
GetLastError
GetTimeFormatA
FormatMessageA
GetDateFormatA
LocalFree
FreeLibrary
LoadLibraryExA
ExpandEnvironmentStringsA
FileTimeToSystemTime
FileTimeToLocalFileTime
GetCurrentProcess
GetCommandLineA
GetVersion
ExitProcess
HeapFree
HeapReAlloc
HeapAlloc
HeapSize
TerminateProcess
RtlUnwind
WriteFile
GetTimeZoneInformation
GetSystemTime
GetLocalTime
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
MultiByteToWideChar
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
WideCharToMultiByte
GetCPInfo
GetACP
GetOEMCP
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
CloseHandle
SetFilePointer
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
GetProcAddress
LoadLibraryA
SetStdHandle
FlushFileBuffers
CreateFileA
SetEndOfFile
ReadFile
CompareStringA
CompareStringW
SetEnvironmentVariableA
Sections
.text Size: 33KB - Virtual size: 33KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 10KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
wintaylor2.1/Programs/tools/2k/res_kit/efsinfo.exe.exe windows:5 windows x86
0c6222c08f383e910c870aa0e795dae3
Code Sign
13:89:b4:d1:8a:e8:a7:c4:bd:35:c7:9b:8d:88:ca:1f:ca:53:56:91Certificate
IssuerOU=VeriSign\, Inc.+OU=VeriSign Time Stamping Service Root+OU=NO LIABILITY ACCEPTED\, (c)97 VeriSign\, Inc.,O=VeriSign Trust NetworkNot Before12-05-1997 07:00Not After31-12-1999 07:00SubjectOU=VeriSign\, Inc.+OU=VeriSign Time Stamping Service Root+OU=NO LIABILITY ACCEPTED\, (c)97 VeriSign\, Inc.,O=VeriSign Trust Networkbd:11:9a:da:43:ed:21:fb:46:58:84:89:ca:46:88:90:25:ee:14:60Certificate
IssuerOU=VeriSign\, Inc.+OU=VeriSign Time Stamping Service Root+OU=NO LIABILITY ACCEPTED\, (c)97 VeriSign\, Inc.,O=VeriSign Trust NetworkNot Before12-05-1997 07:00Not After31-12-1999 07:00SubjectOU=VeriSign Time Stamping Service+OU=VeriSign Trust Network+OU=NO LIABILITY ACCEPTED\, (c)97 VeriSign\, Inc.,O=VeriSign\, Inc.,L=Internet72:b5:13:47:ab:f8:11:d2:a4:1e:00:c0:4f:79:fe:8eCertificate
IssuerCN=Microsoft Beta PCA Authority,OU=Copyright (c) 1999 Microsoft Corp.+OU=Microsoft CorporationNot Before13-01-1999 07:00Not After01-02-2000 07:00SubjectCN=Microsoft Windows 2000 Beta,OU=Copyright (c) 1999 Microsoft Corp.+OU=Microsoft CorporationExtended Key Usages
ExtKeyUsageCodeSigning
4f:ff:a6:23:54:b1:ee:2d:5b:e1:ff:3f:b0:86:01:72Certificate
IssuerCN=Microsoft Beta Root Authority,OU=Copyright (c) 1999 Microsoft Corp.+OU=Microsoft CorporationNot Before11-01-1999 07:00Not After31-12-2005 07:00SubjectCN=Microsoft Beta PCA Authority,OU=Copyright (c) 1999 Microsoft Corp.+OU=Microsoft CorporationSigner
Actual PE DigestDigest AlgorithmPE Digest MatchesfalseHeaders
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvcrt
_wcsnicmp
_wcsicmp
wcscpy
free
wcschr
wcscat
_controlfp
_except_handler3
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
__p___initenv
exit
_XcptFilter
_exit
malloc
wcslen
_get_osfhandle
advapi32
QueryRecoveryAgentsOnEncryptedFile
RegQueryValueExW
QueryUsersOnEncryptedFile
FreeEncryptionCertificateHashList
RegOpenKeyExW
RegCloseKey
LookupAccountSidW
kernel32
GetCommandLineW
SetCurrentDirectoryW
GetCurrentDirectoryW
GetFullPathNameW
GetFileAttributesW
FindFirstFileW
lstrcmpW
FindNextFileW
FindClose
GetComputerNameW
lstrcpyW
lstrcatW
lstrlenW
FormatMessageW
WriteConsoleW
WriteFile
GetLastError
GetFileType
GetConsoleMode
GetStdHandle
shell32
CommandLineToArgvW
user32
CharToOemW
Sections
.text Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
wintaylor2.1/Programs/tools/2k/res_kit/now.exe.exe windows:5 windows x86
6e552b7e3ee9d84da7101c50a558b982
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetCommandLineA
GetVersion
ExitProcess
GetTimeZoneInformation
GetSystemTime
GetLocalTime
WideCharToMultiByte
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
GetModuleHandleA
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
HeapFree
RtlUnwind
WriteFile
HeapAlloc
GetCPInfo
GetACP
GetOEMCP
VirtualAlloc
HeapReAlloc
GetProcAddress
LoadLibraryA
GetLastError
SetFilePointer
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
SetStdHandle
CompareStringA
CompareStringW
SetEnvironmentVariableA
FlushFileBuffers
CloseHandle
Sections
.text Size: 28KB - Virtual size: 27KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 10KB - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
wintaylor2.1/Programs/tools/2k/res_kit/pstat.exe.exe windows:5 windows x86
c62a16b58fbf9b87e31166463457b7a5
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
msvcrt
__p__fmode
__set_app_type
_adjust_fdiv
__setusermatherr
printf
__p__commode
_initterm
__getmainargs
__p___initenv
exit
_XcptFilter
_exit
_strnicmp
_stricmp
ctime
_controlfp
_except_handler3
kernel32
GetSystemDirectoryA
SetCurrentDirectoryA
CreateFileA
CreateFileMappingA
MapViewOfFile
CloseHandle
UnmapViewOfFile
SetFileApisToOEM
GetCommandLineA
VirtualAlloc
ExitProcess
user32
CharToOemA
ntdll
RtlUnicodeStringToAnsiString
RtlTimeToElapsedTimeFields
NtQuerySystemInformation
RtlFreeAnsiString
Sections
.text Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 264B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 936B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
wintaylor2.1/Programs/tools/2k/res_kit/pulist.exe.exe windows:5 windows x86
5eb517ce053c413f3e1fc148a461298c
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
advapi32
AdjustTokenPrivileges
GetTokenInformation
OpenProcessToken
OpenThreadToken
RegCloseKey
RegConnectRegistryW
RegQueryValueExW
LookupAccountSidW
LookupPrivilegeValueW
CopySid
GetLengthSid
EqualSid
kernel32
VirtualFree
lstrcmpiW
FreeLibrary
CloseHandle
OpenProcess
lstrcpynW
SetLastError
GetProcAddress
LoadLibraryW
VirtualAlloc
HeapFree
HeapReAlloc
HeapAlloc
GetProcessHeap
GetLastError
GetCurrentProcess
LocalFree
WriteFile
GetStdHandle
FormatMessageA
LoadLibraryExW
lstrcpyW
lstrlenW
GetVersion
ExitProcess
TerminateProcess
UnhandledExceptionFilter
GetModuleFileNameW
FreeEnvironmentStringsA
MultiByteToWideChar
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
WideCharToMultiByte
GetCommandLineW
GetCommandLineA
SetHandleCount
GetFileType
GetStartupInfoA
HeapDestroy
HeapCreate
RtlUnwind
GetModuleFileNameA
LoadLibraryA
FlushFileBuffers
SetFilePointer
SetStdHandle
Sections
.text Size: 22KB - Virtual size: 21KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 10KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
wintaylor2.1/Programs/tools/2k/res_kit/sc.exe.exe windows:5 windows x86
b903afc175a10c95d49fcb5d67709c4a
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
advapi32
SetServiceObjectSecurity
EnumServicesStatusExW
EnumServiceGroupW
EnumServicesStatusW
GetServiceKeyNameW
GetServiceDisplayNameW
NotifyBootConfigStatus
DeleteService
CloseServiceHandle
QueryServiceStatus
StartServiceW
OpenServiceW
OpenSCManagerW
ControlService
ChangeServiceConfigW
ChangeServiceConfig2W
CreateServiceW
EnumDependentServicesW
ConvertSecurityDescriptorToStringSecurityDescriptorW
QueryServiceObjectSecurity
QueryServiceStatusEx
ConvertStringSecurityDescriptorToSecurityDescriptorW
QueryServiceLockStatusW
UnlockServiceDatabase
LockServiceDatabase
QueryServiceConfigW
QueryServiceConfig2W
kernel32
ExitProcess
LocalAlloc
GetLastError
FormatMessageW
GetCommandLineA
GetVersion
LocalFree
WideCharToMultiByte
ReadConsoleInputA
SetConsoleMode
GetConsoleMode
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
MultiByteToWideChar
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
GetCPInfo
GetACP
GetOEMCP
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
HeapDestroy
HeapCreate
VirtualFree
RtlUnwind
WriteFile
CreateFileA
CloseHandle
WriteConsoleA
HeapFree
HeapAlloc
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
VirtualAlloc
GetProcAddress
LoadLibraryA
FlushFileBuffers
SetFilePointer
SetStdHandle
ntdll
RtlAnsiStringToUnicodeString
RtlInitAnsiString
RtlAdjustPrivilege
Sections
.text Size: 47KB - Virtual size: 47KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 11KB - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 1000B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
wintaylor2.1/Programs/tools/2k/route.exe.exe windows:5 windows x86
1d6b3b3c681fffbf459fffbf8fb6d5dd
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
wsock32
WSAStartup
ord1100
htonl
inet_addr
gethostbyname
ord1101
ioctlsocket
user32
CharToOemA
CharToOemBuffA
kernel32
FormatMessageA
GetVersion
GetLastError
CloseHandle
HeapFree
GetProcessHeap
LocalFree
iphlpapi
GetBestRoute
AllocateAndGetIpForwardTableFromStack
AllocateAndGetIfTableFromStack
DeleteIpForwardEntry
AllocateAndGetIpAddrTableFromStack
CreateIpForwardEntry
GetIpAddrTable
msvcrt
realloc
_iob
_exit
free
_controlfp
_except_handler3
__set_app_type
toupper
atoi
_stricmp
strchr
_strupr
exit
_ultoa
__setusermatherr
__p__fmode
malloc
sprintf
strncpy
printf
fprintf
_setmode
__p__commode
_adjust_fdiv
_XcptFilter
__p___initenv
__getmainargs
_initterm
advapi32
RegDeleteValueA
RegSetValueExA
RegOpenKeyA
RegEnumValueA
Sections
.text Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 80B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 10KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
wintaylor2.1/Programs/tools/2k3/arp.exe.exe windows:5 windows x86
4f1f2435e3a2fc747f7650167ea7b1a1
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LocalFree
GetLastError
GetProcAddress
GetModuleHandleA
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter
LoadLibraryA
GetSystemDirectoryA
FormatMessageA
msvcrt
_except_handler3
sscanf
sprintf
isspace
islower
__set_app_type
__getmainargs
exit
isdigit
isxdigit
fprintf
_setmode
_iob
time
__p__fmode
__p__commode
_adjust_fdiv
_initterm
__setusermatherr
__initenv
_cexit
_XcptFilter
_exit
_c_exit
toupper
_controlfp
snmpapi
SnmpUtilMemAlloc
SnmpUtilMemFree
SnmpUtilVarBindFree
SnmpUtilOidCpy
ws2_32
gethostbyname
WSAStartup
ntohl
inet_addr
iphlpapi
GetUdpStatsFromStackEx
GetTcpStatsFromStackEx
GetIpStatsFromStackEx
GetIcmpStatsFromStackEx
user32
CharToOemBuffA
Sections
.text Size: 11KB - Virtual size: 10KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
wintaylor2.1/Programs/tools/2k3/at.exe.exe windows:5 windows x86
fca7b9fca77cbb6347c10c18a41d06d8
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetStdHandle
WriteFile
WriteConsoleW
LocalFree
GetConsoleOutputCP
GetTimeFormatW
GetThreadLocale
GetSystemTime
MultiByteToWideChar
ReadConsoleW
GetCommandLineW
LoadLibraryW
GetLastError
ExpandEnvironmentStringsW
GetCPInfo
GetProcAddress
GetFileType
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter
FreeLibrary
LoadLibraryExW
LocalAlloc
GetProfileIntA
GetProfileStringA
SetThreadUILanguage
GetConsoleMode
FormatMessageW
GetModuleHandleA
WideCharToMultiByte
msvcrt
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_initterm
wcsncpy
wcsrchr
wcstok
wcschr
__getmainargs
__initenv
_cexit
_XcptFilter
_exit
_c_exit
_iob
_controlfp
fgets
_wcsupr
wcslen
exit
_wcsicmp
malloc
free
_vsnwprintf
strchr
sscanf
strspn
strpbrk
_stricmp
wcscpy
_itoa
wcscmp
advapi32
RegCloseKey
RegOpenKeyExW
RegQueryValueExW
netapi32
NetScheduleJobDel
NetScheduleJobGetInfo
NetScheduleJobEnum
NetApiBufferFree
NetScheduleJobAdd
I_NetNameValidate
shell32
CommandLineToArgvW
ntdll
NtQuerySystemTime
RtlTimeToSecondsSince1970
Sections
.text Size: 14KB - Virtual size: 14KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
wintaylor2.1/Programs/tools/2k3/cmd.exe.exe windows:5 windows x86
33055105fce444cde5c09909f74bd2a6
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetCPInfo
GetConsoleOutputCP
WideCharToMultiByte
GetFileSize
CreateFileW
FindClose
FindNextFileW
FindFirstFileW
GetFullPathNameW
GetUserDefaultLCID
GetLocaleInfoW
SetLocalTime
SystemTimeToFileTime
GetSystemTime
FileTimeToSystemTime
GetDateFormatW
FileTimeToLocalFileTime
GetTimeFormatW
GetLocalTime
GetCommandLineW
GetEnvironmentVariableW
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetEnvironmentVariableW
SetEnvironmentStringsW
SetConsoleMode
GetConsoleMode
SetErrorMode
ReadProcessMemory
LoadLibraryW
CreateProcessW
GetCurrentThreadId
GetBinaryTypeW
NeedCurrentDirectoryForExePathW
GetFileAttributesW
MoveFileExW
SetConsoleTitleW
MoveFileW
SetLastError
GetVolumeInformationW
WriteFile
SearchPathW
ExpandEnvironmentStringsW
LeaveCriticalSection
EnterCriticalSection
GetVersion
FlushConsoleInputBuffer
GetConsoleTitleW
GetWindowsDirectoryW
SetConsoleCtrlHandler
InitializeCriticalSection
GetDriveTypeW
LocalFree
GetFileAttributesExW
VirtualFree
VirtualAlloc
HeapSize
HeapReAlloc
FlushFileBuffers
DuplicateHandle
FormatMessageW
ScrollConsoleScreenBufferW
SetConsoleTextAttribute
FillConsoleOutputAttribute
CreateDirectoryW
SetFileTime
DeleteFileW
SetFileAttributesW
CopyFileW
GetExitCodeProcess
WaitForSingleObject
TerminateProcess
SetCurrentDirectoryW
GetCurrentDirectoryW
RemoveDirectoryW
CompareFileTime
GetDiskFreeSpaceExW
GetThreadLocale
GetModuleHandleA
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
GetCurrentProcess
SetUnhandledExceptionFilter
LoadLibraryA
InterlockedExchange
RaiseException
FreeLibrary
LocalAlloc
GetVDMCurrentDirectories
CmdBatNotification
VirtualQuery
GetFileType
GetStdHandle
GetConsoleScreenBufferInfo
ReadConsoleW
SetConsoleCursorPosition
FillConsoleOutputCharacterW
WriteConsoleW
ReadFile
MultiByteToWideChar
HeapFree
GetProcessHeap
HeapAlloc
lstrcmpiW
lstrcmpW
GetModuleHandleW
GetProcAddress
SetThreadLocale
SetFilePointer
CloseHandle
GetModuleFileNameW
GetLastError
msvcrt
time
_wtol
exit
fflush
iswxdigit
wcsncmp
_setmode
_seh_longjmp_unwind
_pipe
_ultoa
swscanf
realloc
_close
_open_osfhandle
_dup
_dup2
wcsstr
_vsnwprintf
qsort
_wcslwr
calloc
_c_exit
_exit
_XcptFilter
_cexit
__initenv
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
srand
__p__fmode
__set_app_type
_controlfp
swprintf
_iob
fprintf
towlower
setlocale
_snwprintf
wcscat
_wcsupr
wcsncpy
_wpopen
fgets
_pclose
memmove
wcschr
iswspace
_tell
longjmp
wcscmp
_wcsnicmp
_wcsicmp
wcstol
iswdigit
_getch
_get_osfhandle
_setjmp3
malloc
free
_errno
wcsrchr
iswalpha
printf
__p__commode
rand
_except_handler3
wcscpy
wcsspn
towupper
wcslen
advapi32
SaferRecordEventLogEntry
SaferCloseLevel
SaferComputeTokenFromLevel
SaferIdentifyLevel
RevertToSelf
RegQueryValueW
RegEnumKeyW
RegCloseKey
RegDeleteValueW
RegOpenKeyW
RegDeleteKeyW
RegSetValueW
RegQueryValueExW
RegSetValueExW
RegCreateKeyExW
CreateProcessAsUserW
RegOpenKeyExW
LookupAccountSidW
GetSecurityDescriptorOwner
GetFileSecurityW
ImpersonateLoggedOnUser
user32
GetUserObjectInformationW
GetThreadDesktop
MessageBeep
GetProcessWindowStation
mpr
WNetCancelConnection2W
WNetGetConnectionW
WNetAddConnection2W
Sections
.text Size: 121KB - Virtual size: 120KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 113KB - Virtual size: 113KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 138KB - Virtual size: 138KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
wintaylor2.1/Programs/tools/2k3/cmdenv.bat.bat .vbs
-
wintaylor2.1/Programs/tools/2k3/doskey.exe.exe windows:5 windows x86
53e0653cdd97414248782d7c3a991b24
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetConsoleAliasesW
GetConsoleAliasesLengthW
GetConsoleAliasExesW
GetConsoleAliasExesLengthW
AddConsoleAliasW
GetConsoleCommandHistoryLengthW
SetConsoleCommandHistoryMode
SetConsoleNumberOfCommandsW
ExpungeConsoleCommandHistoryW
GetConsoleCommandHistoryW
ulib
?PrepareToParse@ARGUMENT_LEXEMIZER@@QAEEPAVWSTRING@@@Z
?PutSeparators@ARGUMENT_LEXEMIZER@@QAEXPBD@Z
?SetCaseSensitive@ARGUMENT_LEXEMIZER@@QAEXE@Z
?Initialize@ARGUMENT_LEXEMIZER@@QAEEPAVARRAY@@@Z
?Initialize@ARRAY@@QAEEKK@Z
?Put@ARRAY@@UAEEPAVOBJECT@@@Z
?Get_Standard_Output_Stream@@YGPAVSTREAM@@XZ
?Get_Standard_Input_Stream@@YGPAVSTREAM@@XZ
??0REST_OF_LINE_ARGUMENT@@QAE@XZ
??0PATH_ARGUMENT@@QAE@XZ
?Initialize@STRING_ARGUMENT@@QAEEPAD@Z
??0FLAG_ARGUMENT@@QAE@XZ
??0STRING_ARGUMENT@@QAE@XZ
??0ARRAY@@QAE@XZ
??0ARGUMENT_LEXEMIZER@@QAE@XZ
??0STREAM_MESSAGE@@QAE@XZ
?DoParsing@ARGUMENT_LEXEMIZER@@QAEEPAVARRAY@@@Z
?Set@STREAM_MESSAGE@@UAEEKW4MESSAGE_TYPE@@K@Z
?QueryInvalidArgument@ARGUMENT_LEXEMIZER@@QAEPAVWSTRING@@XZ
?IsValueSet@ARGUMENT@@QAEEXZ
??1PATH_ARGUMENT@@UAE@XZ
?Initialize@FLAG_ARGUMENT@@QAEEPAD@Z
?Initialize@LONG_ARGUMENT@@QAEEPAD@Z
?Initialize@PATH_ARGUMENT@@QAEEPADE@Z
??0LONG_ARGUMENT@@QAE@XZ
?Initialize@REST_OF_LINE_ARGUMENT@@QAEEXZ
??1STRING_ARGUMENT@@UAE@XZ
??1ARRAY@@UAE@XZ
??1ARGUMENT_LEXEMIZER@@UAE@XZ
??1STREAM_MESSAGE@@UAE@XZ
??1OBJECT@@UAE@XZ
?QueryFile@SYSTEM@@SGPAVFSN_FILE@@PBVPATH@@EPAE@Z
?QueryStream@FSN_FILE@@QAEPAVFILE_STREAM@@W4STREAMACCESS@@K@Z
?ReadLine@STREAM@@QAEEPAVWSTRING@@E@Z
?Initialize@WSTRING@@QAEEPBV1@KK@Z
?QueryWSTR@WSTRING@@QBEPAGKKPAGKE@Z
??0DSTRING@@QAE@XZ
?Initialize@WSTRING@@QAEEPBGK@Z
?Strcat@WSTRING@@QAEEPBV1@@Z
??1DSTRING@@UAE@XZ
?DeleteChAt@WSTRING@@QAEXKK@Z
?Display@MESSAGE@@QAAEPBDZZ
?Initialize@WSTRING@@QAEEPBDK@Z
?Initialize@STREAM_MESSAGE@@QAEEPAVSTREAM@@00@Z
ntdll
wcschr
RtlFreeHeap
RtlAllocateHeap
_wcsicmp
msvcrt
__p__fmode
__p__commode
_adjust_fdiv
__set_app_type
_initterm
__getmainargs
__initenv
exit
_cexit
_XcptFilter
_exit
_c_exit
_except_handler3
_controlfp
__setusermatherr
Sections
.text Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 36B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 1000B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
wintaylor2.1/Programs/tools/2k3/hostname.exe.exe windows:5 windows x86
0493264954cd5100c5fa796a7d50d2fc
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvcrt
__p__commode
__p__fmode
__set_app_type
_controlfp
_cexit
_adjust_fdiv
_except_handler3
_XcptFilter
_exit
_c_exit
__setusermatherr
_initterm
__getmainargs
__initenv
_write
strchr
puts
exit
kernel32
FormatMessageA
LocalFree
GetModuleHandleA
GetLastError
user32
CharToOemBuffA
ws2_32
gethostname
WSAStartup
mswsock
s_perror
Sections
.text Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 480B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
wintaylor2.1/Programs/tools/2k3/ipconfig.exe.exe windows:5 windows x86
ba882b53cf5e3d2e1bbeda47d7984dee
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleHandleA
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter
GetProcAddress
LeaveCriticalSection
EnterCriticalSection
CloseHandle
FileTimeToLocalFileTime
FileTimeToSystemTime
GetDateFormatW
GetTimeFormatW
GetUserDefaultLCID
FormatMessageW
GetCommandLineW
GetStdHandle
GlobalFree
CompareStringW
GetFileType
WriteConsoleW
GetComputerNameExW
GetProcessHeap
HeapFree
CreateFileW
DeviceIoControl
GetSystemTimeAsFileTime
MultiByteToWideChar
LocalAlloc
GetLastError
SetLastError
LocalFree
msvcrt
wcscpy
wcslen
wcscat
time
printf
toupper
swprintf
exit
setlocale
_c_exit
_exit
_XcptFilter
_cexit
__initenv
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
advapi32
ControlService
CloseServiceHandle
RegSetValueExW
RegCloseKey
RegQueryValueExA
RegOpenKeyExW
RegQueryValueExW
OpenServiceW
OpenSCManagerW
netman
HrPnpInstanceIdFromGuid
HrLanConnectionNameFromGuidOrPath
dnsapi
DnsFree
DnsQuery_W
DnsRecordListFree
DnsFlushResolverCache
DnsFreeConfigStructure
DnsQueryConfigAllocEx
DnsGetCacheDataTable
ws2_32
inet_addr
htonl
inet_ntoa
WSAGetLastError
WSAAddressToStringW
WSAStartup
iphlpapi
GetIpForwardTable
NhGetInterfaceNameFromGuid
GetInterfaceInfo
AllocateAndGetIfTableFromStack
GetIpAddrTable
NhpAllocateAndGetInterfaceInfoFromStack
GetNetworkParams
GetIpStatistics
GetAdaptersAddresses
ntdll
sprintf
RtlIpv6AddressToStringA
RtlIpv6AddressToStringW
NtOpenFile
DbgPrint
NtCreateFile
RtlNtStatusToDosError
NtDeviceIoControlFile
NtWaitForSingleObject
NtClose
RtlInitUnicodeString
rpcrt4
UuidFromStringW
setupapi
SetupDiCreateDeviceInfoList
SetupDiOpenDeviceInfoW
SetupDiGetDeviceRegistryPropertyW
SetupDiDestroyDeviceInfoList
shell32
CommandLineToArgvW
dhcpcsvc
DhcpStaticRefreshParams
DhcpHandlePnPEvent
DhcpEnumClasses
DhcpReleaseParameters
DhcpAcquireParameters
Sections
.text Size: 32KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
wintaylor2.1/Programs/tools/2k3/ipxroute.exe.exe windows:5 windows x86
60b70dce519aed9ba8f6bff801f1881b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvcrt
__p__fmode
__p__commode
_adjust_fdiv
atoi
__setusermatherr
_initterm
__getmainargs
__initenv
_cexit
_controlfp
_exit
_c_exit
_strupr
strtoul
qsort
sprintf
exit
malloc
_iob
fprintf
free
printf
_except_handler3
_XcptFilter
__set_app_type
memmove
kernel32
GetLastError
FormatMessageA
MultiByteToWideChar
LocalAlloc
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetModuleHandleA
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
LocalFree
mprapi
MprConfigServerConnect
MprConfigGetGuidName
MprConfigGetFriendlyName
MprConfigServerDisconnect
ntdll
RtlInitUnicodeString
NtOpenFile
NtClose
NtDeviceIoControlFile
NtRequestWaitReplyPort
NtConnectPort
user32
CharToOemA
winstrm
s_ioctl
s_open
Sections
.text Size: 11KB - Virtual size: 10KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 384B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 10KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
wintaylor2.1/Programs/tools/2k3/mem.exe
-
wintaylor2.1/Programs/tools/2k3/nbtstat.exe.exe windows:5 windows x86
049ce4a87ef32225cc58e541dcd6007f
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
Sleep
GetProcAddress
GetModuleHandleA
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
LocalAlloc
GetSystemTimeAsFileTime
TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter
LocalFree
MultiByteToWideChar
FormatMessageA
GetCurrentProcessId
WideCharToMultiByte
msvcrt
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
_initterm
exit
atoi
strncpy
memmove
sprintf
_c_exit
__getmainargs
_cexit
_XcptFilter
_exit
isprint
vsprintf
__initenv
_write
advapi32
RegCloseKey
RegOpenKeyExA
RegQueryValueExA
ntdll
RtlUnicodeStringToAnsiString
NtClose
RtlUpcaseUnicodeStringToOemString
RtlExtendedLargeIntegerDivide
NtDeviceIoControlFile
NtWaitForSingleObject
RtlInitString
RtlAnsiStringToUnicodeString
NtCreateFile
RtlFreeUnicodeString
RtlInitUnicodeString
RtlGUIDFromString
RtlFreeAnsiString
user32
CharToOemBuffA
OemToCharBuffA
wsock32
ntohl
ord1108
ioctlsocket
iphlpapi
NhGetInterfaceNameFromDeviceGuid
Sections
.text Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 42KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 11KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
wintaylor2.1/Programs/tools/2k3/net.exe.exe windows:5 windows x86
74e65a6005de8ce1c5d89442635fffe0
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetCPInfo
GetConsoleOutputCP
GetExitCodeProcess
WaitForSingleObject
CloseHandle
CreateProcessW
GetSystemDirectoryW
GetProfileStringW
WriteProfileStringW
GetDriveTypeW
GetProcAddress
FreeLibrary
InterlockedCompareExchange
LoadLibraryA
GetModuleHandleA
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemDefaultLangID
TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter
WriteConsoleW
LocalAlloc
WideCharToMultiByte
WriteFile
GetConsoleScreenBufferInfo
LoadLibraryW
FormatMessageW
LocalFree
SetLastError
GetModuleFileNameW
PeekConsoleInputW
GetConsoleMode
SetConsoleMode
ReadConsoleW
GetFileType
DelayLoadFailureHook
SetThreadLocale
GetStdHandle
GetLastError
GetSystemTimeAsFileTime
GetCommandLineW
msvcrt
_controlfp
_except_handler3
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
__initenv
_cexit
_XcptFilter
_exit
_c_exit
wcsrchr
wcsncpy
wcsncmp
qsort
_ultow
wcspbrk
iswctype
_wcsupr
wcscmp
_wcsicmp
wcschr
wcscpy
wcscat
exit
sprintf
setlocale
_wcsnicmp
wcslen
_iob
_setmode
_vsnwprintf
_snwprintf
putchar
malloc
wcsspn
wcscspn
calloc
fread
ftell
_wcsdup
wcstok
_wfopen
_local_unwind2
memmove
_ultoa
advapi32
RegQueryValueExW
RegOpenKeyExW
RegEnumValueW
RegCloseKey
netapi32
NetWkstaUserGetInfo
NetWkstaGetInfo
NetApiBufferReallocate
NetApiBufferAllocate
NetapipBufferAllocate
NetShareEnum
NetUserGetInfo
NetServerEnum
NetServerGetInfo
I_NetNameValidate
NetApiBufferFree
NetUseEnum
NetUseGetInfo
I_NetPathType
mpr
WNetOpenEnumW
WNetEnumResourceW
WNetCloseEnum
WNetAddConnection2W
WNetCancelConnection2W
WNetGetLastErrorW
WNetGetConnectionW
ntdll
RtlAllocateHeap
RtlInitUnicodeString
RtlOemStringToUnicodeString
RtlInitAnsiString
Sections
.text Size: 30KB - Virtual size: 30KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 7KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 960B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
wintaylor2.1/Programs/tools/2k3/netstat.exe.exe windows:5 windows x86
ca8397d49f5dee7ad608b48baf7d5a0d
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetLastError
GetSystemDirectoryA
LocalFree
HeapFree
GetProcessHeap
Sleep
GetProcAddress
GetModuleHandleA
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter
FormatMessageA
LoadLibraryA
SetThreadUILanguage
msvcrt
_controlfp
toupper
__set_app_type
_initterm
__getmainargs
__p__fmode
sscanf
_cexit
_XcptFilter
_exit
strchr
sprintf
fprintf
_setmode
_iob
time
__p__commode
_adjust_fdiv
__initenv
__setusermatherr
system
_c_exit
_strupr
exit
_except_handler3
iphlpapi
GetIcmpStatsFromStackEx
GetTcpStatsFromStackEx
GetIpStatsFromStackEx
GetUdpStatsFromStackEx
AllocateAndGetTcpExTableFromStack
AllocateAndGetUdpExTableFromStack
ws2_32
ntohl
WSAStartup
ntohs
getnameinfo
gethostname
htons
snmpapi
SnmpUtilOidCpy
SnmpUtilVarBindFree
SnmpUtilMemFree
SnmpUtilMemAlloc
user32
CharToOemBuffA
Sections
.text Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 14KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
wintaylor2.1/Programs/tools/2k3/route.exe.exe windows:5 windows x86
91ab04828ab0067b72c4070644e3371e
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
HeapFree
GetProcessHeap
DeviceIoControl
CreateFileW
GetProcAddress
GetModuleHandleA
QueryPerformanceCounter
GetLastError
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter
GetVersion
CloseHandle
SetThreadUILanguage
FormatMessageA
GetTickCount
LocalFree
msvcrt
__p__fmode
__set_app_type
_except_handler3
_controlfp
__p__commode
_c_exit
realloc
free
_ultoa
atoi
strncpy
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
__initenv
malloc
_XcptFilter
_exit
printf
_strupr
_iob
strchr
_stricmp
strtol
toupper
exit
sprintf
_setmode
fprintf
_cexit
advapi32
RegSetValueExA
RegDeleteValueA
RegOpenKeyA
RegEnumValueA
iphlpapi
GetBestRoute
GetAdaptersAddresses
AllocateAndGetIpForwardTableFromStack
DeleteIpForwardEntry
AllocateAndGetIpAddrTableFromStack
CreateIpForwardEntry
GetIpAddrTable
AllocateAndGetIfTableFromStack
user32
CharToOemBuffA
ws2_32
WSAStartup
inet_addr
inet_ntoa
WSAAddressToStringA
htonl
gethostbyname
mswsock
getnetbyname
inet_network
Sections
.text Size: 11KB - Virtual size: 10KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 408B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 11KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
wintaylor2.1/Programs/tools/Cygwin/Recuva.exe.exe windows:4 windows x86
af66a926aca2aaa78843f57d2e284431
Code Sign
38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5Certificate
IssuerCN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=USNot Before15-06-2007 00:00Not After14-06-2012 23:59SubjectCN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=USExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageContentCommitment
47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4Certificate
IssuerCN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZANot Before04-12-2003 00:00Not After03-12-2013 23:59SubjectCN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=USExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageCertSign
KeyUsageCRLSign
2f:5a:8c:1e:93:2e:db:fd:48:93:91:6f:c8:80:df:e7Certificate
IssuerCN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=USNot Before28-07-2009 00:00Not After23-08-2011 23:59SubjectCN=Piriform Ltd,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Piriform Ltd,L=London,ST=London,C=GBExtended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
65:52:26:e1:b2:2e:18:e1:59:0f:29:85:ac:22:e7:5cCertificate
IssuerOU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=USNot Before21-05-2009 00:00Not After20-05-2019 23:59SubjectCN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=USExtended Key Usages
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
Key Usages
KeyUsageCertSign
KeyUsageCRLSign
71:24:a9:46:43:d5:6e:6e:14:2c:94:77:76:b7:0f:81:ce:09:a6:46Signer
Actual PE Digest71:24:a9:46:43:d5:6e:6e:14:2c:94:77:76:b7:0f:81:ce:09:a6:46Digest Algorithmsha1PE Digest MatchestrueHeaders
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Imports
wininet
InternetCloseHandle
InternetReadFile
InternetOpenUrlW
InternetOpenW
kernel32
SizeofResource
GetModuleHandleA
CompareStringA
LoadLibraryA
VirtualProtect
LocalAlloc
FormatMessageA
SetEnvironmentVariableA
CreateFileA
GetConsoleOutputCP
WriteConsoleA
SetStdHandle
IsValidLocale
EnumSystemLocalesA
GetUserDefaultLCID
GetStringTypeA
FlushFileBuffers
GetConsoleMode
GetConsoleCP
QueryPerformanceCounter
GetStartupInfoA
GetFileType
SetHandleCount
GetCommandLineA
GetEnvironmentStrings
FreeEnvironmentStringsA
GetOEMCP
GetModuleFileNameA
GetStdHandle
ExitProcess
LCMapStringA
RtlUnwind
GetTimeZoneInformation
GetDateFormatA
GetTimeFormatA
HeapCreate
IsDebuggerPresent
UnhandledExceptionFilter
TerminateProcess
CreateWaitableTimerA
SetWaitableTimer
SystemTimeToFileTime
GetThreadLocale
GetACP
InterlockedIncrement
HeapSize
HeapReAlloc
HeapDestroy
FileTimeToDosDateTime
LocalFileTimeToFileTime
DosDateTimeToFileTime
WaitForMultipleObjectsEx
SetErrorMode
ReadFile
DebugBreak
DeviceIoControl
SetEndOfFile
GetFileSize
VirtualFree
VirtualAlloc
ExitThread
SleepEx
SetFileTime
WriteFile
SetFilePointer
GetLogicalDrives
FileTimeToLocalFileTime
ResumeThread
CreateThread
CreateMutexA
ReleaseMutex
GetCurrentProcessId
GetSystemTime
SetUnhandledExceptionFilter
GetLocaleInfoA
FindClose
TlsSetValue
TlsGetValue
GlobalMemoryStatus
GetSystemInfo
GetVersionExA
TlsAlloc
TlsFree
QueueUserAPC
InterlockedCompareExchange
LocalFree
LockResource
FileTimeToSystemTime
GlobalUnlock
GlobalLock
GlobalAlloc
lstrlenA
CompareFileTime
ResetEvent
WaitForMultipleObjects
GetTickCount
WaitForSingleObject
InterlockedExchange
GetSystemTimeAsFileTime
MulDiv
HeapFree
HeapAlloc
SetEvent
CreateEventA
GetCommandLineW
FlushInstructionCache
FreeLibrary
GetCurrentProcess
GetLocalTime
GetProcessHeap
GetCurrentThreadId
Sleep
InterlockedDecrement
CloseHandle
RaiseException
GetLastError
InitializeCriticalSection
LoadResource
SetLastError
LeaveCriticalSection
DeleteCriticalSection
EnterCriticalSection
IsProcessorFeaturePresent
user32
DestroyIcon
EnumWindows
TranslateMessage
DestroyWindow
UnregisterClassA
DrawIconEx
CharLowerBuffA
PtInRect
GetWindowRect
EndPaint
ClientToScreen
SetRect
BeginPaint
ReleaseCapture
SetFocus
SetTimer
ShowWindow
GetCapture
DestroyCursor
SetCaretPos
DestroyCaret
CloseClipboard
CreateCaret
SetClipboardData
HideCaret
ShowCaret
EmptyClipboard
OpenClipboard
GetScrollInfo
SetScrollRange
DragDetect
GetKeyState
SetScrollPos
DrawFrameControl
CheckMenuRadioItem
SetMenuInfo
TrackPopupMenu
GetMenuInfo
GetSubMenu
DeleteMenu
EnableMenuItem
GetMenuItemID
GetMenuItemCount
SubtractRect
DestroyMenu
MonitorFromPoint
MapDialogRect
IsDlgButtonChecked
MoveWindow
CreateIconFromResourceEx
LookupIconIdFromDirectoryEx
MsgWaitForMultipleObjects
EndDialog
CopyRect
PostQuitMessage
OffsetRect
GetWindow
GetDC
GetCursorPos
SetWindowPlacement
WindowFromPoint
GetWindowPlacement
RedrawWindow
GetActiveWindow
ReleaseDC
IsWindowVisible
SetRectEmpty
GetWindowDC
EnumChildWindows
GetDlgItem
SetCursor
FillRect
MapWindowPoints
MessageBeep
ScreenToClient
GetMessagePos
IsWindowEnabled
AdjustWindowRectEx
GetClientRect
GetMenu
GetComboBoxInfo
DrawEdge
InflateRect
KillTimer
GetParent
GetSystemMetrics
SetWindowPos
IsWindow
GetDlgCtrlID
DrawFocusRect
UpdateWindow
InvalidateRect
GetSysColor
SetCapture
GetSysColorBrush
GetFocus
gdi32
SaveDC
TextOutA
CreateRectRgnIndirect
CombineRgn
ExcludeClipRect
GetClipBox
GetDeviceCaps
GetStockObject
GetDIBColorTable
StretchBlt
CreateDIBSection
CreatePatternBrush
CreateBitmap
PatBlt
BitBlt
CreateCompatibleBitmap
CreateCompatibleDC
SetViewportOrgEx
SetBkColor
DeleteObject
DeleteDC
SetTextColor
SetBkMode
SelectObject
RestoreDC
SetStretchBltMode
CreateDIBitmap
SetDIBits
advapi32
FreeSid
AllocateAndInitializeSid
RegCloseKey
shell32
SHGetSpecialFolderPathW
ord25
SHGetDesktopFolder
CommandLineToArgvW
SHGetSpecialFolderLocation
ole32
CoTaskMemFree
CoInitializeEx
StgOpenStorageOnILockBytes
FreePropVariantArray
CLSIDFromProgID
CoTaskMemAlloc
CoUninitialize
CoTaskMemRealloc
CoCreateInstance
CoInitialize
oleaut32
VarBstrFromR8
LoadRegTypeLi
SysAllocStringLen
VarUI4FromStr
SysFreeString
SysStringLen
SysAllocString
LoadTypeLi
shlwapi
PathFindExtensionW
PathRemoveExtensionW
PathAddExtensionW
PathCombineW
PathAppendW
PathRemoveFileSpecW
PathFileExistsW
PathFindFileNameA
PathStripToRootW
GetMenuPosFromID
PathStripPathW
PathAddBackslashW
comctl32
ImageList_Draw
_TrackMouseEvent
ImageList_GetIconSize
PropertySheetW
ImageList_GetIcon
CreatePropertySheetPageW
ImageList_Create
ImageList_Add
ImageList_Destroy
ImageList_LoadImageW
DestroyPropertySheetPage
InitCommonControlsEx
msimg32
TransparentBlt
AlphaBlend
ws2_32
WSACleanup
WSAStartup
Sections
.text Size: 913KB - Virtual size: 913KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 210KB - Virtual size: 209KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 50KB - Virtual size: 61KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 2B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 149KB - Virtual size: 148KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
wintaylor2.1/Programs/tools/Cygwin/cygiconv-2.dll.dll .ps1 windows:4 windows x86
-
wintaylor2.1/Programs/tools/Cygwin/cygintl-1.dll.dll windows:4 windows x86
dca84b8d3f89d3469f87af6bd278a595
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL
Imports
cygwin1
__errno
_ctype_
bsearch
calloc
close
cygwin_detach_dll
cygwin_internal
dll_dllcrt0
fclose
fgets
fopen
free
fscanf
fstat
getc
getcwd
getegid
getenv
geteuid
getgid
getuid
malloc
memcpy
open
qsort
read
realloc
strcasecmp
strchr
strcmp
strcpy
strdup
strstr
strtoul
ungetc
kernel32
GetModuleHandleA
Exports
Exports
_nl_current_default_domain__
_nl_default_default_domain__
_nl_default_dirname__
_nl_domain_bindings__
_nl_expand_alias
_nl_explode_name
_nl_find_domain
_nl_find_language
_nl_find_msg
_nl_free_domain_conv
_nl_init_domain_conv
_nl_load_domain
_nl_make_l10nflist
_nl_msg_cat_cntr
_nl_normalize_codeset
_nm____errno
_nm___ctype_
_nm__bsearch
_nm__calloc
_nm__close
_nm__cygwin_detach_dll
_nm__cygwin_internal
_nm__dll_dllcrt0
_nm__fclose
_nm__fgets
_nm__fopen
_nm__free
_nm__fscanf
_nm__fstat
_nm__getc
_nm__getcwd
_nm__getegid
_nm__getenv
_nm__geteuid
_nm__getgid
_nm__getuid
_nm__malloc
_nm__memcpy
_nm__open
_nm__qsort
_nm__read
_nm__realloc
_nm__strcasecmp
_nm__strchr
_nm__strcmp
_nm__strcpy
_nm__strdup
_nm__strstr
_nm__strtoul
_nm__ungetc
bind_textdomain_codeset
bind_textdomain_codeset__
bindtextdomain
bindtextdomain__
dcgettext
dcgettext__
dcigettext__
dcngettext
dcngettext__
dgettext
dgettext__
dngettext
dngettext__
gettext
gettext__
gettext_free_exp__
gettextparse__
locale_charset
ngettext
ngettext__
textdomain
textdomain__
Sections
.text Size: 16KB - Virtual size: 15KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 44B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: - Virtual size: 428B
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.edata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1024B - Virtual size: 980B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 1024B - Virtual size: 756B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
wintaylor2.1/Programs/tools/Cygwin/cygintl-2.dll.dll windows:4 windows x86
6f2f5821b45fc52bc43e1defed443b82
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL
Imports
cygwin1
__errno
_ctype_
_fopen64
_fstat64
_getegid32
_geteuid32
_getgid32
_getuid32
_open64
abort
bsearch
calloc
close
cygwin_conv_to_posix_path
cygwin_detach_dll
cygwin_internal
dll_dllcrt0
fclose
fgets
free
fscanf
fwrite
getc_unlocked
getcwd
getenv
malloc
memcpy
mempcpy
memset
nl_langinfo
pthread_mutex_lock
pthread_mutex_unlock
putc
qsort
read
realloc
strcasecmp
strchr
strcmp
strcpy
strcspn
strdup
strlen
strncmp
strstr
strtoul
tfind
tsearch
ungetc
cygiconv-2
libiconv
libiconv_close
libiconv_open
libiconv_set_relocation_prefix
kernel32
AddAtomA
FindAtomA
GetAtomNameA
GetModuleFileNameA
GetModuleHandleA
Exports
Exports
_nl_expand_alias
_nl_explode_name
_nl_find_domain
_nl_find_language
_nl_find_msg
_nl_free_domain_conv
_nl_init_domain_conv
_nl_load_domain
_nl_locale_name
_nl_log_untranslated
_nl_make_l10nflist
_nl_msg_cat_cntr
_nl_normalize_codeset
bind_textdomain_codeset
bindtextdomain
dcgettext
dcngettext
dgettext
dngettext
gettext
libintl_bind_textdomain_codeset
libintl_bindtextdomain
libintl_dcgettext
libintl_dcigettext
libintl_dcngettext
libintl_dgettext
libintl_dngettext
libintl_gettext
libintl_gettext_extract_plural
libintl_gettext_free_exp
libintl_gettext_germanic_plural
libintl_gettextparse
libintl_ngettext
libintl_nl_current_default_domain
libintl_nl_default_default_domain
libintl_nl_default_dirname
libintl_nl_domain_bindings
libintl_relocate
libintl_set_relocation_prefix
libintl_textdomain
locale_charset
ngettext
textdomain
Sections
.text Size: 29KB - Virtual size: 29KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 112B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 1024B - Virtual size: 952B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: - Virtual size: 1KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.edata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
wintaylor2.1/Programs/tools/Cygwin/cygintl-3.dll.dll windows:4 windows x86
b5c186f2544d3a0682364ece9cb4b8e7
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL
Imports
cygwin1
__argz_count
__argz_next
__argz_stringify
__errno
_ctype_
_fopen64
_fstat64
_getegid32
_geteuid32
_getgid32
_getuid32
_open64
abort
bsearch
calloc
close
cygwin_conv_to_posix_path
cygwin_detach_dll
cygwin_internal
dll_dllcrt0
fclose
fgets
free
fscanf
fwrite
getc_unlocked
getcwd
getenv
malloc
memcpy
mempcpy
nl_langinfo
pthread_atfork
putc
qsort
read
realloc
strcasecmp
strchr
strcmp
strcpy
strcspn
strdup
strlen
strncmp
strstr
strtoul
tfind
tsearch
ungetc
cygiconv-2
libiconv
libiconv_close
libiconv_open
libiconv_set_relocation_prefix
kernel32
AddAtomA
FindAtomA
GetAtomNameA
GetModuleFileNameA
GetModuleHandleA
Exports
Exports
_nl_expand_alias
_nl_explode_name
_nl_find_domain
_nl_find_language
_nl_find_msg
_nl_free_domain_conv
_nl_init_domain_conv
_nl_load_domain
_nl_locale_name
_nl_log_untranslated
_nl_make_l10nflist
_nl_msg_cat_cntr
_nl_normalize_codeset
bind_textdomain_codeset
bindtextdomain
dcgettext
dcngettext
dgettext
dngettext
gettext
libintl_bind_textdomain_codeset
libintl_bindtextdomain
libintl_dcgettext
libintl_dcigettext
libintl_dcngettext
libintl_dgettext
libintl_dngettext
libintl_gettext
libintl_gettext_extract_plural
libintl_gettext_free_exp
libintl_gettext_germanic_plural
libintl_gettextparse
libintl_ngettext
libintl_nl_current_default_domain
libintl_nl_default_default_domain
libintl_nl_default_dirname
libintl_nl_domain_bindings
libintl_relocate
libintl_set_relocation_prefix
libintl_textdomain
locale_charset
ngettext
textdomain
Sections
.text Size: 25KB - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 64B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: - Virtual size: 1KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.edata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
wintaylor2.1/Programs/tools/Cygwin/cygmagic-1.dll.dll windows:4 windows x86
227e1d46e29951ec058dfc8a3aac2bcc
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL
Imports
cygwin1
__errno
__getreent
_ctype_
_daylight
_fopen64
_fstat64
_impure_ptr
_lseek64
_lstat64
_mmap64
_open64
_stat64
abort
asctime
calloc
close
ctime
cygwin_detach_dll
cygwin_internal
dll_dllcrt0
dup
dup2
execvp
exit
fclose
fflush
fgets
fork
fprintf
fputc
free
fwrite
getenv
gmtime
malloc
memcpy
memset
mkstemp
munmap
pipe
posix_regcomp
posix_regerror
posix_regexec
posix_regfree
read
readlink
realloc
snprintf
strcat
strchr
strcpy
strdup
strerror
strlen
strrchr
strtol
strtoul
unlink
utimes
vfprintf
vsnprintf
waitpid
write
cygz
inflate
inflateEnd
inflateInit2_
kernel32
GetModuleHandleA
Exports
Exports
file_apprentice
file_ascmagic
file_badread
file_badseek
file_buffer
file_delmagic
file_error
file_fmttime
file_fsmagic
file_getbuffer
file_is_tar
file_magwarn
file_mdump
file_oomem
file_pipe2file
file_printf
file_reset
file_showstr
file_signextend
file_softmagic
file_tryelf
file_zmagic
magic_buffer
magic_check
magic_close
magic_compile
magic_errno
magic_error
magic_file
magic_load
magic_open
magic_setflags
prpsoffsets32
prpsoffsets64
Sections
.text Size: 34KB - Virtual size: 33KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.bss Size: - Virtual size: 304B
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.edata Size: 1024B - Virtual size: 833B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
wintaylor2.1/Programs/tools/Cygwin/cygncurses-8.dll.dll windows:4 windows x86
858eed0429952ef1ad25f34a1f200d8a
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL
Imports
cygwin1
__errno
__getreent
_ctype_
_fdopen64
_fopen64
_impure_ptr
_lseek64
_open64
_stat64
access
atoi
calloc
chdir
close
cygwin_detach_dll
cygwin_internal
dll_dllcrt0
dup2
exit
fclose
fflush
fgets
fileno
fprintf
fputc
fread
free
ftell
fwrite
getcwd
getenv
getpgrp
getpid
gettimeofday
ioctl
isatty
kill
malloc
memcpy
memmove
memset
mkdir
nanosleep
nl_langinfo
perror
poll
putc
read
realloc
remove
setlocale
setvbuf
sigaction
sigaddset
sigemptyset
sigismember
sigprocmask
sleep
sprintf
sscanf
strchr
strcmp
strcpy
strdup
strlen
strncat
strncmp
strncpy
strrchr
strstr
strtol
symlink
tcflush
tcgetattr
tcgetpgrp
tcsetattr
vfprintf
vsnprintf
vsscanf
write
kernel32
GetModuleHandleA
Exports
Exports
BC
COLORS
COLOR_PAIR
COLOR_PAIRS
COLS
ESCDELAY
LINES
PAIR_NUMBER
PC
TABSIZE
UP
_nc_access
_nc_acs_map
_nc_add_to_try
_nc_align_termtype
_nc_alloc_screen
_nc_basename
_nc_baudrate
_nc_boolcodes
_nc_boolfnames
_nc_boolnames
_nc_cap_hash_table
_nc_capalias_table
_nc_capcmp
_nc_captoinfo
_nc_check_termtype
_nc_check_termtype2
_nc_comment_end
_nc_comment_start
_nc_copy_entry
_nc_copy_termtype
_nc_curr_col
_nc_curr_file_pos
_nc_curr_line
_nc_curr_token
_nc_delink_entry
_nc_disable_period
_nc_do_color
_nc_doalloc
_nc_entry_match
_nc_err_abort
_nc_expand_try
_nc_expanded
_nc_fallback
_nc_find_entry
_nc_find_type_entry
_nc_first_name
_nc_flush
_nc_free_entries
_nc_free_entry
_nc_free_termtype
_nc_freeall
_nc_freewin
_nc_get_hash_table
_nc_get_locale
_nc_get_source
_nc_get_table
_nc_get_token
_nc_get_tty_mode
_nc_get_type
_nc_getenv_num
_nc_has_mouse
_nc_hash_map
_nc_head
_nc_home_terminfo
_nc_info_hash_table
_nc_infoalias_table
_nc_infotocap
_nc_init_acs
_nc_init_entry
_nc_init_keytry
_nc_insert_ch
_nc_keep_tic_dir
_nc_key_names
_nc_keypad
_nc_locale_breaks_acs
_nc_make_oldhash
_nc_makenew
_nc_memmove
_nc_merge_entry
_nc_msec_cost
_nc_mvcur_init
_nc_mvcur_resume
_nc_mvcur_wrap
_nc_name_match
_nc_nulls_sent
_nc_numcodes
_nc_numfnames
_nc_numnames
_nc_oldnums
_nc_ospeed
_nc_outch
_nc_panelhook
_nc_panic_mode
_nc_parse_entry
_nc_pathlast
_nc_printf_string
_nc_push_token
_nc_read_entry
_nc_read_entry_source
_nc_read_file_entry
_nc_read_termcap
_nc_remove_key
_nc_remove_string
_nc_render
_nc_reset_colors
_nc_reset_input
_nc_resolve_uses
_nc_resolve_uses2
_nc_ripoffline
_nc_rootname
_nc_safe_strcat
_nc_safe_strcpy
_nc_save_str
_nc_screen
_nc_screen_chain
_nc_screen_init
_nc_screen_resume
_nc_screen_wrap
_nc_scroll_oldhash
_nc_scroll_optimize
_nc_scroll_window
_nc_scrolln
_nc_set_buffer
_nc_set_screen
_nc_set_source
_nc_set_tty_mode
_nc_set_type
_nc_set_writedir
_nc_setupscreen
_nc_setupterm
_nc_signal_handler
_nc_slk_format
_nc_slk_initialize
_nc_start_line
_nc_str_copy
_nc_str_init
_nc_str_null
_nc_strcodes
_nc_strfnames
_nc_strnames
_nc_suppress_warnings
_nc_synchook
_nc_syntax
_nc_syserr_abort
_nc_tail
_nc_tic_dir
_nc_tic_expand
_nc_tic_written
_nc_timed_wait
_nc_tinfo_fkeysf
_nc_tparm_analyze
_nc_tparm_err
_nc_tracing
_nc_trans_string
_nc_trim_sgr0
_nc_unicode_locale
_nc_update_screensize
_nc_user_definable
_nc_varargs
_nc_visbuf
_nc_visbuf2
_nc_visbufn
_nc_vsscanf
_nc_waddch_nosync
_nc_warning
_nc_wgetch
_nc_wrap_entry
_nc_write_entry
addch
addchnstr
addchstr
addnstr
addstr
assume_default_colors
attr_get
attr_off
attr_on
attr_set
attroff
attron
attrset
baudrate
beep
bkgd
bkgdset
border
box
can_change_color
cbreak
chgat
clear
clearok
clrtobot
clrtoeol
color_content
color_set
copywin
cur_term
curs_set
curscr
curses_version
def_prog_mode
def_shell_mode
define_key
del_curterm
delay_output
delch
deleteln
delscreen
delwin
derwin
doupdate
dupwin
echo
echochar
endwin
erase
erasechar
filter
flash
flushinp
getbkgd
getch
getmouse
getnstr
getstr
getwin
halfdelay
has_colors
has_ic
has_il
has_key
hline
idcok
idlok
immedok
inch
inchnstr
inchstr
init_color
init_pair
initscr
innstr
insch
insdelln
insertln
insnstr
insstr
instr
intrflush
is_linetouched
is_term_resized
is_wintouched
isendwin
key_defined
keybound
keyname
keyok
keypad
killchar
leaveok
longname
mcprint
meta
mouse_trafo
mouseinterval
mousemask
move
mvaddch
mvaddchnstr
mvaddchstr
mvaddnstr
mvaddstr
mvchgat
mvcur
mvdelch
mvderwin
mvgetch
mvgetnstr
mvgetstr
mvhline
mvinch
mvinchnstr
mvinchstr
mvinnstr
mvinsch
mvinsnstr
mvinsstr
mvinstr
mvprintw
mvscanw
mvvline
mvwaddch
mvwaddchnstr
mvwaddchstr
mvwaddnstr
mvwaddstr
mvwchgat
mvwdelch
mvwgetch
mvwgetnstr
mvwgetstr
mvwhline
mvwin
mvwinch
mvwinchnstr
mvwinchstr
mvwinnstr
mvwinsch
mvwinsnstr
mvwinsstr
mvwinstr
mvwprintw
mvwscanw
mvwvline
napms
newpad
newscr
newterm
newwin
nl
nocbreak
nodelay
noecho
nonl
noqiflush
noraw
notimeout
ospeed
overlay
overwrite
pair_content
pechochar
pnoutrefresh
prefresh
printw
putp
putwin
qiflush
raw
redrawwin
refresh
reset_prog_mode
reset_shell_mode
resetty
resize_term
resizeterm
restartterm
ripoffline
savetty
scanw
scr_dump
scr_init
scr_restore
scr_set
scrl
scroll
scrollok
set_curterm
set_term
setscrreg
setupterm
slk_attr
slk_attr_set
slk_attroff
slk_attron
slk_attrset
slk_clear
slk_color
slk_init
slk_label
slk_noutrefresh
slk_refresh
slk_restore
slk_set
slk_touch
standend
standout
start_color
stdscr
subpad
subwin
syncok
termattrs
termname
tgetent
tgetflag
tgetnum
tgetstr
tgoto
tigetflag
tigetnum
tigetstr
timeout
touchline
touchwin
tparm
tputs
ttytype
typeahead
unctrl
ungetch
ungetmouse
untouchwin
use_default_colors
use_env
use_extended_names
vidattr
vidputs
vline
vw_printw
vw_scanw
vwprintw
vwscanw
waddch
waddchnstr
waddchstr
waddnstr
waddstr
wattr_get
wattr_off
wattr_on
wattr_set
wattroff
wattron
wattrset
wbkgd
wbkgdset
wborder
wchgat
wclear
wclrtobot
wclrtoeol
wcolor_set
wcursyncup
wdelch
wdeleteln
wechochar
wenclose
werase
wgetch
wgetnstr
wgetstr
whline
winch
winchnstr
winchstr
winnstr
winsch
winsdelln
winsertln
winsnstr
winsstr
winstr
wmouse_trafo
wmove
wnoutrefresh
wprintw
wredrawln
wrefresh
wresize
wscanw
wscrl
wsetscrreg
wstandend
wstandout
wsyncdown
wsyncup
wtimeout
wtouchln
wvline
Sections
.text Size: 142KB - Virtual size: 142KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 54KB - Virtual size: 53KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.bss Size: - Virtual size: 2KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.edata Size: 10KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
wintaylor2.1/Programs/tools/Cygwin/cygpcre-0.dll.dll windows:4 windows x86
9d99c174bfb838a5672311de10747e13
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL
Imports
cygwin1
_ctype_
abort
calloc
cygwin_detach_dll
cygwin_internal
dll_dllcrt0
free
malloc
memcpy
memmove
memset
pthread_atfork
realloc
strchr
strcmp
strncmp
kernel32
AddAtomA
FindAtomA
GetAtomNameA
GetModuleHandleA
Exports
Exports
pcre_callout
pcre_compile
pcre_config
pcre_copy_named_substring
pcre_copy_substring
pcre_exec
pcre_free
pcre_free_substring
pcre_free_substring_list
pcre_fullinfo
pcre_get_named_substring
pcre_get_stringnumber
pcre_get_substring
pcre_get_substring_list
pcre_info
pcre_maketables
pcre_malloc
pcre_stack_free
pcre_stack_malloc
pcre_study
pcre_version
Sections
.text Size: 54KB - Virtual size: 53KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: - Virtual size: 368B
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.edata Size: 1024B - Virtual size: 613B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1024B - Virtual size: 632B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
wintaylor2.1/Programs/tools/Cygwin/cygpng12.dll.dll windows:4 windows x86
e586a07141dc240c01aa2fd02ec6f510
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL
Imports
cygwin1
_impure_ptr
abort
calloc
cygwin_detach_dll
cygwin_internal
dll_dllcrt0
fflush
fread
free
fwrite
gmtime
longjmp
malloc
memcpy
memset
pow
realloc
setjmp
sprintf
strcpy
strlen
strncpy
strtod
cygz
crc32
deflate
deflateEnd
deflateInit2_
deflateReset
inflate
inflateEnd
inflateInit_
inflateReset
kernel32
GetModuleHandleA
Exports
Exports
png_access_version_number
png_build_gamma_table
png_build_grayscale_palette
png_calculate_crc
png_check_chunk_name
png_check_keyword
png_check_sig
png_chunk_error
png_chunk_warning
png_combine_row
png_convert_from_struct_tm
png_convert_from_time_t
png_convert_to_rfc1123
png_crc_error
png_crc_finish
png_crc_read
png_create_info_struct
png_create_read_struct
png_create_read_struct_2
png_create_struct
png_create_struct_2
png_create_write_struct
png_create_write_struct_2
png_data_freer
png_decompress_chunk
png_default_flush
png_default_read_data
png_default_write_data
png_destroy_info_struct
png_destroy_read_struct
png_destroy_struct
png_destroy_struct_2
png_destroy_write_struct
png_do_background
png_do_bgr
png_do_chop
png_do_dither
png_do_expand
png_do_expand_palette
png_do_gamma
png_do_gray_to_rgb
png_do_invert
png_do_pack
png_do_packswap
png_do_read_filler
png_do_read_interlace
png_do_read_intrapixel
png_do_read_invert_alpha
png_do_read_swap_alpha
png_do_read_transformations
png_do_rgb_to_gray
png_do_shift
png_do_strip_filler
png_do_swap
png_do_unpack
png_do_unshift
png_do_write_interlace
png_do_write_intrapixel
png_do_write_invert_alpha
png_do_write_swap_alpha
png_do_write_transformations
png_error
png_flush
png_free
png_free_data
png_free_default
png_get_IHDR
png_get_PLTE
png_get_asm_flagmask
png_get_asm_flags
png_get_bKGD
png_get_bit_depth
png_get_cHRM
png_get_cHRM_fixed
png_get_channels
png_get_color_type
png_get_compression_buffer_size
png_get_compression_type
png_get_copyright
png_get_error_ptr
png_get_filter_type
png_get_gAMA
png_get_gAMA_fixed
png_get_hIST
png_get_header_ver
png_get_header_version
png_get_iCCP
png_get_image_height
png_get_image_width
png_get_int_32
png_get_interlace_type
png_get_io_ptr
png_get_libpng_ver
png_get_mem_ptr
png_get_mmx_bitdepth_threshold
png_get_mmx_flagmask
png_get_mmx_rowbytes_threshold
png_get_oFFs
png_get_pCAL
png_get_pHYs
png_get_pixel_aspect_ratio
png_get_pixels_per_meter
png_get_progressive_ptr
png_get_rgb_to_gray_status
png_get_rowbytes
png_get_rows
png_get_sBIT
png_get_sCAL
png_get_sPLT
png_get_sRGB
png_get_signature
png_get_tIME
png_get_tRNS
png_get_text
png_get_uint_16
png_get_uint_31
png_get_uint_32
png_get_unknown_chunks
png_get_user_chunk_ptr
png_get_user_height_max
png_get_user_transform_ptr
png_get_user_width_max
png_get_valid
png_get_x_offset_microns
png_get_x_offset_pixels
png_get_x_pixels_per_meter
png_get_y_offset_microns
png_get_y_offset_pixels
png_get_y_pixels_per_meter
png_handle_IEND
png_handle_IHDR
png_handle_PLTE
png_handle_as_unknown
png_handle_bKGD
png_handle_cHRM
png_handle_gAMA
png_handle_hIST
png_handle_iCCP
png_handle_oFFs
png_handle_pCAL
png_handle_pHYs
png_handle_sBIT
png_handle_sCAL
png_handle_sPLT
png_handle_sRGB
png_handle_tEXt
png_handle_tIME
png_handle_tRNS
png_handle_unknown
png_handle_zTXt
png_info_destroy
png_info_init
png_info_init_3
png_init_io
png_init_mmx_flags
png_init_read_transformations
png_malloc
png_malloc_default
png_malloc_warn
png_memcpy_check
png_memset_check
png_mmx_support
png_permit_empty_plte
png_permit_mng_features
png_process_IDAT_data
png_process_data
png_process_some_data
png_progressive_combine_row
png_push_crc_finish
png_push_crc_skip
png_push_fill_buffer
png_push_handle_tEXt
png_push_handle_unknown
png_push_handle_zTXt
png_push_have_end
png_push_have_info
png_push_have_row
png_push_process_row
png_push_read_IDAT
png_push_read_chunk
png_push_read_sig
png_push_read_tEXt
png_push_read_zTXt
png_push_restore_buffer
png_push_save_buffer
png_read_data
png_read_destroy
png_read_end
png_read_filter_row
png_read_finish_row
png_read_image
png_read_info
png_read_init
png_read_init_2
png_read_init_3
png_read_png
png_read_push_finish_row
png_read_row
png_read_rows
png_read_start_row
png_read_transform_info
png_read_update_info
png_reset_crc
png_reset_zstream
png_save_int_32
png_save_uint_16
png_save_uint_32
png_set_IHDR
png_set_PLTE
png_set_add_alpha
png_set_asm_flags
png_set_bKGD
png_set_background
png_set_bgr
png_set_cHRM
png_set_cHRM_fixed
png_set_compression_buffer_size
png_set_compression_level
png_set_compression_mem_level
png_set_compression_method
png_set_compression_strategy
png_set_compression_window_bits
png_set_crc_action
png_set_dither
png_set_error_fn
png_set_expand
png_set_filler
png_set_filter
png_set_filter_heuristics
png_set_flush
png_set_gAMA
png_set_gAMA_fixed
png_set_gamma
png_set_gray_1_2_4_to_8
png_set_gray_to_rgb
png_set_hIST
png_set_iCCP
png_set_interlace_handling
png_set_invalid
png_set_invert_alpha
png_set_invert_mono
png_set_keep_unknown_chunks
png_set_mem_fn
png_set_mmx_thresholds
png_set_oFFs
png_set_pCAL
png_set_pHYs
png_set_packing
png_set_packswap
png_set_palette_to_rgb
png_set_progressive_read_fn
png_set_read_fn
png_set_read_status_fn
png_set_read_user_chunk_fn
png_set_read_user_transform_fn
png_set_rgb_to_gray
png_set_rgb_to_gray_fixed
png_set_rows
png_set_sBIT
png_set_sCAL
png_set_sPLT
png_set_sRGB
png_set_sRGB_gAMA_and_cHRM
png_set_shift
png_set_sig_bytes
png_set_strip_16
png_set_strip_alpha
png_set_strip_error_numbers
png_set_swap
png_set_swap_alpha
png_set_tIME
png_set_tRNS
png_set_tRNS_to_alpha
png_set_text
png_set_text_2
png_set_unknown_chunk_location
png_set_unknown_chunks
png_set_user_limits
png_set_user_transform_info
png_set_write_fn
png_set_write_status_fn
png_set_write_user_transform_fn
png_sig_cmp
png_start_read_image
png_warning
png_write_IDAT
png_write_IEND
png_write_IHDR
png_write_PLTE
png_write_bKGD
png_write_cHRM
png_write_cHRM_fixed
png_write_chunk
png_write_chunk_data
png_write_chunk_end
png_write_chunk_start
png_write_data
png_write_destroy
png_write_end
png_write_filtered_row
png_write_find_filter
png_write_finish_row
png_write_flush
png_write_gAMA
png_write_gAMA_fixed
png_write_hIST
png_write_iCCP
png_write_image
png_write_info
png_write_info_before_PLTE
png_write_init
png_write_init_2
png_write_init_3
png_write_oFFs
png_write_pCAL
png_write_pHYs
png_write_png
png_write_row
png_write_rows
png_write_sBIT
png_write_sCAL
png_write_sPLT
png_write_sRGB
png_write_sig
png_write_start_row
png_write_tEXt
png_write_tIME
png_write_tRNS
png_write_zTXt
png_zalloc
png_zfree
Sections
.text Size: 204KB - Virtual size: 204KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 832B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 11KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.bss Size: - Virtual size: 288B
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.edata Size: 9KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 1024B - Virtual size: 996B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
wintaylor2.1/Programs/tools/Cygwin/cygpopt-0.dll.dll windows:4 windows x86
c15369f2c9e5703390a114711eea17be
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL
Imports
cygwin1
__errno
_ctype_
access
calloc
close
cygwin_detach_dll
cygwin_internal
dll_dllcrt0
execvp
exit
fprintf
free
getenv
geteuid
getuid
lseek
malloc
memcpy
memset
open
read
realloc
sprintf
strcat
strchr
strcmp
strcpy
strdup
strerror
strncmp
strncpy
strrchr
strtod
strtol
kernel32
GetModuleHandleA
Exports
Exports
_nm____errno
_nm___ctype_
_nm__access
_nm__calloc
_nm__close
_nm__cygwin_detach_dll
_nm__cygwin_internal
_nm__dll_dllcrt0
_nm__execvp
_nm__exit
_nm__fprintf
_nm__free
_nm__getenv
_nm__geteuid
_nm__getuid
_nm__lseek
_nm__malloc
_nm__memcpy
_nm__memset
_nm__open
_nm__read
_nm__realloc
_nm__sprintf
_nm__strcat
_nm__strchr
_nm__strcmp
_nm__strcpy
_nm__strdup
_nm__strerror
_nm__strncmp
_nm__strncpy
_nm__strrchr
_nm__strtod
_nm__strtol
findProgramPath
poptAddAlias
poptAddItem
poptAliasOptions
poptBadOption
poptDupArgv
poptFreeContext
poptGetArg
poptGetArgs
poptGetContext
poptGetInvocationName
poptGetNextOpt
poptGetOptArg
poptHelpOptions
poptParseArgvString
poptPeekArg
poptPrintHelp
poptPrintUsage
poptReadConfigFile
poptReadDefaultConfig
poptResetContext
poptSetExecPath
poptSetOtherOptionHelp
poptStrerror
poptStrippedArgv
poptStuffArgs
Sections
.text Size: 17KB - Virtual size: 17KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 156B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: - Virtual size: 252B
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.edata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1024B - Virtual size: 964B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 484B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
wintaylor2.1/Programs/tools/Cygwin/cygwin1.dll.dll windows:4 windows x86
400661656de0b22c9631b8a6779c390b
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
advapi32
RegCloseKey
kernel32
AllocConsole
BackupWrite
ClearCommBreak
ClearCommError
CloseHandle
CompareFileTime
CopyFileA
CreateDirectoryA
CreateEventA
CreateFileA
CreateFileMappingA
CreateMailslotA
CreateMutexA
CreateNamedPipeA
CreatePipe
CreateProcessA
CreateSemaphoreA
CreateTapePartition
CreateThread
DebugBreak
DeleteCriticalSection
DeleteFileA
DeviceIoControl
DuplicateHandle
EnterCriticalSection
EraseTape
EscapeCommFunction
ExitProcess
ExitThread
ExpandEnvironmentStringsA
FillConsoleOutputAttribute
FillConsoleOutputCharacterA
FindClose
FindFirstChangeNotificationA
FindFirstFileA
FindNextChangeNotification
FindNextFileA
FlushConsoleInputBuffer
FlushFileBuffers
FlushViewOfFile
FreeConsole
FreeEnvironmentStringsA
FreeLibrary
GetACP
GetBinaryTypeA
GetCommModemStatus
GetCommState
GetCommandLineA
GetComputerNameA
GetConsoleCP
GetConsoleMode
GetConsoleOutputCP
GetConsoleScreenBufferInfo
GetConsoleTitleA
GetCurrentDirectoryA
GetCurrentProcess
GetCurrentProcessId
GetCurrentThread
GetCurrentThreadId
GetDiskFreeSpaceA
GetDriveTypeA
GetEnvironmentStrings
GetEnvironmentVariableA
GetExitCodeProcess
GetFileAttributesA
GetFileInformationByHandle
GetFileSize
GetFileType
GetFullPathNameA
GetLastError
GetLogicalDriveStringsA
GetLogicalDrives
GetMailslotInfo
GetModuleFileNameA
GetModuleHandleA
GetNumberOfConsoleInputEvents
GetOEMCP
GetOverlappedResult
GetPriorityClass
GetProcAddress
GetProcessTimes
GetStartupInfoA
GetStdHandle
GetSystemDirectoryA
GetSystemInfo
GetSystemTimeAsFileTime
GetTapeParameters
GetTapePosition
GetTapeStatus
GetThreadContext
GetThreadPriority
GetTickCount
GetTimeZoneInformation
GetVersionExA
GetVolumeInformationA
GetWindowsDirectoryA
GlobalAlloc
GlobalFree
GlobalLock
GlobalMemoryStatus
GlobalUnlock
InitializeCriticalSection
IsBadStringPtrA
LeaveCriticalSection
LoadLibraryA
LoadLibraryExA
LockFile
LockFileEx
MapViewOfFile
MapViewOfFileEx
MoveFileA
MoveFileExA
MultiByteToWideChar
OpenEventA
OpenFileMappingA
OpenMutexA
OpenProcess
OpenSemaphoreA
OutputDebugStringA
PeekConsoleInputA
PeekNamedPipe
PrepareTape
PurgeComm
QueryDosDeviceA
QueryPerformanceCounter
QueryPerformanceFrequency
ReadConsoleInputA
ReadConsoleOutputA
ReadFile
ReadProcessMemory
ReleaseMutex
ReleaseSemaphore
RemoveDirectoryA
ResetEvent
ResumeThread
RtlUnwind
ScrollConsoleScreenBufferA
SetCommBreak
SetCommMask
SetCommState
SetCommTimeouts
SetConsoleCtrlHandler
SetConsoleCursorPosition
SetConsoleMode
SetConsoleTextAttribute
SetConsoleTitleA
SetCurrentDirectoryA
SetEndOfFile
SetEnvironmentVariableA
SetErrorMode
SetEvent
SetFileApisToANSI
SetFileApisToOEM
SetFileAttributesA
SetFilePointer
SetFileTime
SetHandleInformation
SetLastError
SetMailslotInfo
SetNamedPipeHandleState
SetPriorityClass
SetStdHandle
SetSystemTime
SetTapeParameters
SetTapePosition
SetThreadAffinityMask
SetThreadContext
SetThreadPriority
Sleep
SuspendThread
TerminateProcess
TerminateThread
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
TransmitCommChar
UnlockFile
UnlockFileEx
UnmapViewOfFile
VirtualAlloc
VirtualFree
VirtualProtect
VirtualProtectEx
VirtualQuery
VirtualQueryEx
WaitCommEvent
WaitForMultipleObjects
WaitForSingleObject
WaitNamedPipeA
WideCharToMultiByte
WriteConsoleOutputA
WriteFile
WriteProcessMemory
WriteTapemark
Exports
Exports
__argc
__argv
__argz_add
__argz_add_sep
__argz_append
__argz_count
__argz_create
__argz_create_sep
__argz_delete
__argz_extract
__argz_insert
__argz_next
__argz_replace
__argz_stringify
__assert
__assertfail
__check_rhosts_file
__cygwin_environ
__cygwin_user_data
__envz_add
__envz_entry
__envz_get
__envz_merge
__envz_remove
__envz_strip
__eprintf
__errno
__f_atan2
__f_atan2f
__f_exp
__f_expf
__f_frexp
__f_frexpf
__f_ldexp
__f_ldexpf
__f_log
__f_log10
__f_log10f
__f_logf
__f_pow
__f_powf
__f_tan
__f_tanf
__fpclassifyd
__fpclassifyf
__getdelim
__getline
__getreent
__infinity
__isinfd
__isinff
__isnand
__isnanf
__main
__mb_cur_max
__mempcpy
__opendir_with_d_ino
__progname
__rcmd_errstr
__signbitd
__signbitf
__signgam
__srget
__srget_r
__swbuf
__swbuf_r
_abort
_abs
_access
_acl
_acl32
_aclcheck
_aclcheck32
_aclfrommode
_aclfrommode32
_aclfrompbits
_aclfrompbits32
_aclfromtext
_aclfromtext32
_aclsort
_aclsort32
_acltomode
_acltomode32
_acltopbits
_acltopbits32
_acltotext
_acltotext32
_acos
_acosf
_acosh
_acoshf
_alarm
_alloca
_alphasort
_asctime
_asctime_r
_asin
_asinf
_asinh
_asinhf
_asprintf
_asprintf_r
_atan
_atan2
_atan2f
_atanf
_atanh
_atanhf
_atexit
_atof
_atoff
_atoi
_atol
_bcmp
_bcopy
_bsearch
_bzero
_cabs
_cabsf
_calloc
_cbrt
_cbrtf
_ceil
_ceilf
_chdir
_check_for_executable
_chmod
_chown
_chown32
_chroot
_clearerr
_clock
_close
_closedir
_copysign
_copysignf
_cos
_cosf
_cosh
_coshf
_creat
_ctime
_ctime_r
_ctype_
_cuserid
_cwait
_daylight
_difftime
_dirfd
_div
_dll_crt0@0
_drand48
_drem
_dremf
_dup
_dup2
_ecvt
_ecvtbuf
_ecvtf
_endgrent
_endmntent
_endpwent
_endutent
_erand48
_erf
_erfc
_erfcf
_erff
_execl
_execle
_execlp
_execv
_execve
_execvp
_exit
_exp
_expf
_expm1
_expm1f
_f_atan2
_f_atan2f
_f_exp
_f_expf
_f_frexp
_f_frexpf
_f_ldexp
_f_ldexpf
_f_log
_f_log10
_f_log10f
_f_logf
_f_pow
_f_powf
_f_tan
_f_tanf
_fabs
_fabsf
_facl
_facl32
_fchdir
_fchmod
_fchown
_fchown32
_fclose
_fcloseall
_fcloseall_r
_fcntl
_fcntl64
_fcvt
_fcvtbuf
_fcvtf
_fdopen
_fdopen64
_feof
_ferror
_fflush
_ffs
_fgetc
_fgetpos
_fgetpos64
_fgets
_fileno
_finite
_finitef
_fiprintf
_floor
_floorf
_fmod
_fmodf
_fnmatch
_fopen
_fopen64
_fork
_fprintf
_fputc
_fputs
_fread
_free
_freopen
_freopen64
_frexp
_frexpf
_fscanf
_fscanf_r
_fseek
_fseeko
_fseeko64
_fsetpos
_fsetpos64
_fstat
_fstat64
_fstatfs
_fsync
_ftell
_ftello
_ftello64
_ftime
_ftok
_ftruncate
_ftruncate64
_fwrite
_gamma
_gamma_r
_gammaf
_gammaf_r
_gcvt
_gcvtf
_get_osfhandle
_getc
_getc_unlocked
_getchar
_getchar_unlocked
_getcwd
_getdomainname
_getdtablesize
_getegid
_getegid32
_getenv
_geteuid
_geteuid32
_getgid
_getgid32
_getgrent
_getgrent32
_getgrgid
_getgrgid32
_getgrnam
_getgrnam32
_getgroups
_getgroups32
_gethostname
_getlogin
_getmntent
_getmode
_getpagesize
_getpass
_getpgrp
_getpid
_getppid
_getpwduid
_getpwent
_getpwnam
_getpwuid
_getpwuid32
_getpwuid_r32
_getrlimit
_getrusage
_gets
_gettimeofday
_getuid
_getuid32
_getutent
_getutid
_getutline
_getw
_getwd
_glob
_globfree
_gmtime
_gmtime_r
_htonl
_htons
_hypot
_hypotf
_ilogb
_ilogbf
_impure_ptr
_index
_infinity
_infinityf
_initgroups32
_ioctl
_iprintf
_isalnum
_isalpha
_isascii
_isatty
_iscntrl
_isdigit
_isgraph
_isinf
_isinff
_islower
_isnan
_isnanf
_isprint
_ispunct
_isspace
_isupper
_isxdigit
_j0
_j0f
_j1
_j1f
_jn
_jnf
_jrand48
_kill
_labs
_lacl
_lchown
_lchown32
_lcong48
_ldexp
_ldexpf
_ldiv
_lgamma
_lgamma_r
_lgammaf
_lgammaf_r
_link
_localeconv
_localtime
_localtime_r
_log
_log10
_log10f
_log1p
_log1pf
_logb
_logbf
_logf
_longjmp
_lrand48
_lseek
_lseek64
_lstat
_lstat64
_malloc
_matherr
_mblen
_mbstowcs
_mbtowc
_memccpy
_memchr
_memcmp
_memcpy
_memmove
_memset
_mkdir
_mknod
_mknod32
_mkstemp
_mktemp
_mktime
_mmap64
_modf
_modff
_mount
_nan
_nanf
_nanosleep
_nextafter
_nextafterf
_nice
_nl_langinfo
_nrand48
_ntohl
_ntohs
_open
_open64
_openlog
_pathconf
_pclose
_perror
_pipe
_poll
_popen
_pow
_powf
_printf
_pthread_cleanup_pop
_pthread_cleanup_push
_putc
_putc_unlocked
_putchar
_putchar_unlocked
_putenv
_puts
_pututline
_putw
_qsort
_raise
_rand
_read
_readdir
_readlink
_readv
_realloc
_remainder
_remainderf
_remove
_rename
_rewind
_rewinddir
_rindex
_rint
_rintf
_rmdir
_sbrk
_scalb
_scalbf
_scalbn
_scalbnf
_scandir
_scanf
_scanf_r
_seed48
_seekdir
_seekdir64
_select
_setbuf
_setdtablesize
_setegid
_setegid32
_setenv
_seteuid
_seteuid32
_setgid
_setgid32
_setgrent
_setgroups
_setgroups32
_setjmp
_setlocale
_setmntent
_setmode
_setpassent
_setpgid
_setpgrp
_setpwent
_setregid
_setregid32
_setreuid
_setreuid32
_setrlimit
_setsid
_settimeofday
_setuid
_setuid32
Sections
.text Size: 1014KB - Virtual size: 1014KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
/4 Size: 10KB - Virtual size: 9KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 44KB - Virtual size: 43KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 205KB - Virtual size: 205KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.bss Size: - Virtual size: 36KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.edata Size: 31KB - Virtual size: 31KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 64KB - Virtual size: 64KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
/19 Size: 512B - Virtual size: 260B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
/38 Size: 512B - Virtual size: 16B
IMAGE_SCN_MEM_DISCARDABLE
.idata Size: 36KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.cygheap Size: - Virtual size: 576KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
wintaylor2.1/Programs/tools/Cygwin/cygz.dll.dll windows:4 windows x86
2a3b7b4375e67a8f9f51943e0de32007
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL
Imports
cygwin1
__errno
_fdopen64
_fopen64
_impure_ptr
calloc
cygwin_detach_dll
cygwin_internal
dll_dllcrt0
fclose
fflush
fprintf
fputc
fread
free
fseek
ftell
fwrite
malloc
memcpy
memset
realloc
sprintf
strcat
strcpy
strlen
vsnprintf
kernel32
GetModuleHandleA
Exports
Exports
_dist_code
_length_code
_tr_align
_tr_flush_block
_tr_init
_tr_stored_block
_tr_tally
adler32
compress
compress2
compressBound
crc32
deflate
deflateBound
deflateCopy
deflateEnd
deflateInit2_
deflateInit_
deflateParams
deflatePrime
deflateReset
deflateSetDictionary
deflate_copyright
get_crc_table
gzclearerr
gzclose
gzdopen
gzeof
gzerror
gzflush
gzgetc
gzgets
gzopen
gzprintf
gzputc
gzputs
gzread
gzrewind
gzseek
gzsetparams
gztell
gzungetc
gzwrite
inflate
inflateBack
inflateBackEnd
inflateBackInit_
inflateCopy
inflateEnd
inflateInit2_
inflateInit_
inflateReset
inflateSetDictionary
inflateSync
inflateSyncPoint
inflate_copyright
inflate_fast
inflate_table
uncompress
zError
z_errmsg
zcalloc
zcfree
zlibCompileFlags
zlibVersion
Sections
.text Size: 38KB - Virtual size: 37KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 64B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 17KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.bss Size: - Virtual size: 288B
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.edata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 1024B - Virtual size: 828B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 1024B - Virtual size: 712B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
wintaylor2.1/Programs/tools/Cygwin/date.exe.exe windows:4 windows x86
82e45418553fc0c827e68c2c6c48f6f7
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
cygwin1
__errno
__getreent
__main
__mb_cur_max
_ctype_
_fopen64
_impure_ptr
_stat64
_tzname
abort
asctime
atexit
calloc
clock_gettime
ctime
cygwin_internal
dll_crt0__FP11per_process
exit
fclose
fflush
fprintf
fputs
free
getc_unlocked
getenv
gettimeofday
gmtime
iswprint
localtime
malloc
mbrlen
mbrtowc
mbsinit
memcpy
memset
printf
putc_unlocked
putchar
putenv
puts
realloc
setenv
setlocale
settimeofday
sprintf
strchr
strcmp
strcpy
strerror
strerror_r
strftime
strlen
strncmp
strtol
time
tzset
unsetenv
vfprintf
_tzname
cygintl-3
libintl_bindtextdomain
libintl_gettext
libintl_textdomain
kernel32
GetModuleHandleA
Sections
.text Size: 35KB - Virtual size: 35KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 80B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 11KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.bss Size: - Virtual size: 608B
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
wintaylor2.1/Programs/tools/Cygwin/dd.exe.exe windows:4 windows x86
9a9adfbb5344f407ceccf011e805aefd
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
cygwin1
__assert
__errno
__getreent
__main
__mb_cur_max
_ctype_
_fcntl64
_fstat64
_ftruncate64
_impure_ptr
_lseek64
_open64
abort
atexit
calloc
close
cygwin_internal
dll_crt0__FP11per_process
exit
fclose
fdatasync
fflush
fprintf
fputs
free
fsync
getenv
getpagesize
gettimeofday
iswprint
localeconv
malloc
mbrtowc
mbsinit
memcpy
memmove
memset
printf
putc_unlocked
raise
read
realloc
setlocale
setmode
sigaction
sigaddset
sigemptyset
sigismember
sigprocmask
sprintf
strchr
strcmp
strerror
strerror_r
strlen
strncmp
strtoumax
vfprintf
write
cygintl-3
libintl_bindtextdomain
libintl_gettext
libintl_ngettext
libintl_textdomain
kernel32
GetModuleHandleA
Sections
.text Size: 28KB - Virtual size: 27KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 80B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.bss Size: - Virtual size: 1KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
wintaylor2.1/Programs/tools/Cygwin/dos2unix.exe.exe windows:4 windows x86
c29b86d8b33b0a3c54b4e3a17380c884
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
cygwin1
__getreent
__main
_fopen64
_impure_ptr
calloc
cygwin_internal
dll_crt0__FP11per_process
exit
fclose
fgetc
fprintf
fputc
fputs
free
fwrite
malloc
memcpy
perror
realloc
remove
setmode
snprintf
strcasecmp
strchr
strdup
strlen
strncpy
strrchr
tmpnam
cygpopt-0
poptBadOption
poptFreeContext
poptGetArgs
poptGetContext
poptGetNextOpt
poptPrintHelp
poptPrintUsage
poptSetOtherOptionHelp
poptStrerror
kernel32
GetModuleHandleA
Sections
.text Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 144B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.bss Size: - Virtual size: 64B
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
wintaylor2.1/Programs/tools/Cygwin/env.exe.exe windows:4 windows x86
be326f0d04285dd0b9d8e9b4de6795fe
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
cygwin1
__errno
__getreent
__main
__mb_cur_max
_ctype_
_impure_ptr
abort
atexit
calloc
cygwin_internal
dll_crt0__FP11per_process
execvp
exit
fclose
fflush
fprintf
fputs
free
getenv
iswprint
malloc
mbrtowc
mbsinit
memcpy
memset
printf
putc_unlocked
putenv
puts
realloc
setlocale
strchr
strcmp
strerror
strerror_r
strlen
strncmp
vfprintf
cygintl-3
libintl_bindtextdomain
libintl_gettext
libintl_textdomain
kernel32
GetModuleHandleA
Sections
.text Size: 11KB - Virtual size: 11KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 64B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.bss Size: - Virtual size: 560B
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
wintaylor2.1/Programs/tools/Cygwin/file.exe.exe windows:4 windows x86
536338bc8b80a5b6a4d8108217bad67c
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
cygmagic-1
magic_check
magic_close
magic_compile
magic_error
magic_file
magic_load
magic_open
cygwin1
__errno
__getreent
__main
_fopen64
_impure_ptr
_stat64
calloc
cygwin_internal
dll_crt0__FP11per_process
exit
fclose
fflush
fgets
fprintf
free
fwrite
getenv
getopt_long
malloc
mbrtowc
optarg
optind
printf
puts
realloc
rewind
setlocale
strcpy
strerror
strlen
strrchr
wcwidth
kernel32
GetModuleHandleA
Sections
.text Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 352B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.bss Size: - Virtual size: 160B
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
wintaylor2.1/Programs/tools/Cygwin/grep.exe.exe windows:4 windows x86
0bbab7621dc82c73d9565fafb7b159d9
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
AddAtomA
FindAtomA
GetAtomNameA
GetModuleHandleA
cygwin1
__assert
__errno
__getreent
__main
__mb_cur_max
__mempcpy
_ctype_
_fopen64
_fstat64
_impure_ptr
_lseek64
_open64
_stat64
abort
atexit
btowc
calloc
close
closedir
cygwin_internal
dll_crt0__FP11per_process
exit
fclose
fflush
fnmatch
fprintf
fputc
fputs
fread
free
fwrite
getc
getenv
getopt_long
getpagesize
isatty
iswalnum
iswctype
malloc
mbrlen
mbrtowc
mbsinit
memchr
memcpy
memmove
memset
opendir
optarg
optind
printf
pthread_atfork
putc
putchar
puts
read
readdir
realloc
setlocale
strcasecmp
strchr
strcmp
strcoll
strcpy
strerror_r
strlen
strncmp
strncpy
strrchr
strtoull
vfprintf
wcscoll
wctype
optarg
optarg
optarg
optarg
optarg
optarg
optarg
optarg
optarg
optarg
optarg
optarg
optarg
optarg
optarg
optarg
optarg
optarg
optarg
optarg
optarg
optarg
optarg
optind
optind
optind
optind
optind
cygintl-3
libintl_bindtextdomain
libintl_gettext
libintl_textdomain
cygpcre-0
pcre_compile
pcre_exec
pcre_maketables
pcre_study
Sections
.text Size: 90KB - Virtual size: 89KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 128B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: - Virtual size: 3KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
wintaylor2.1/Programs/tools/Cygwin/hexedit.exe.exe windows:4 windows x86
681adcc9bb9ac89b631fba54c343ba0d
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
cygncurses-8
COLS
LINES
echo
endwin
initscr
keypad
nodelay
noecho
printw
raw
scanw
stdscr
wclear
wclrtoeol
wgetch
wgetnstr
wmove
wrefresh
stdscr
stdscr
stdscr
stdscr
stdscr
stdscr
stdscr
stdscr
stdscr
stdscr
stdscr
stdscr
stdscr
stdscr
stdscr
stdscr
stdscr
stdscr
stdscr
stdscr
stdscr
stdscr
stdscr
stdscr
stdscr
stdscr
stdscr
stdscr
stdscr
stdscr
stdscr
stdscr
stdscr
stdscr
stdscr
stdscr
stdscr
stdscr
stdscr
stdscr
stdscr
stdscr
stdscr
stdscr
stdscr
LINES
LINES
LINES
LINES
LINES
COLS
COLS
COLS
cygwin1
__errno
__getreent
__main
_ctype_
_fstat64
_ftruncate64
_impure_ptr
_lseek64
_open64
_stat64
abort
calloc
close
creat
cygwin_internal
dll_crt0__FP11per_process
execvp
exit
fork
fprintf
free
getpid
kill
malloc
memchr
memcpy
memmove
memset
perror
pthread_atfork
read
realloc
sprintf
sscanf
strcmp
strcpy
strdup
strerror
strlen
strrchr
wait
write
kernel32
AddAtomA
FindAtomA
GetAtomNameA
GetModuleHandleA
Sections
.text Size: 21KB - Virtual size: 21KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 80B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.bss Size: - Virtual size: 640B
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
wintaylor2.1/Programs/tools/Cygwin/hostname.exe.exe windows:4 windows x86
1887ad059fe6fb0e2bd9848b334a7332
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
cygwin1
__errno
__getreent
__main
__mb_cur_max
_ctype_
_impure_ptr
abort
atexit
calloc
cygwin_internal
dll_crt0__FP11per_process
exit
fclose
fflush
fprintf
fputs
free
getenv
gethostname
iswprint
malloc
mbrtowc
mbsinit
memcpy
memset
printf
putc_unlocked
puts
realloc
setlocale
strchr
strcmp
strerror
strerror_r
strlen
strncmp
vfprintf
cygintl-3
libintl_bindtextdomain
libintl_gettext
libintl_textdomain
kernel32
GetModuleHandleA
Sections
.text Size: 11KB - Virtual size: 11KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 64B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.bss Size: - Virtual size: 544B
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
wintaylor2.1/Programs/tools/Cygwin/less.exe.exe windows:4 windows x86
b32acaa0cb5d2699faad6895aa9e2914
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
AddAtomA
FindAtomA
GetAtomNameA
GetModuleHandleA
cygwin1
__errno
__getreent
__main
_ctype_
_fopen64
_fstat64
_getegid32
_geteuid32
_getgid32
_getuid32
_lseek64
_open64
_stat64
abort
atoi
bcopy
calloc
close
creat
cygwin_internal
dll_crt0__FP11per_process
dup
exit
fclose
fgetc
fgets
fileno
free
fsync
getc
getenv
getpid
ioctl
isatty
kill
longjmp
malloc
memcpy
memset
pclose
popen
putc
read
realloc
setjmp
setlocale
sigemptyset
signal
sigprocmask
sleep
sprintf
strcasecmp
strcat
strchr
strcmp
strcpy
strdup
strerror
strlen
strncmp
strncpy
strsep
strstr
strtoul
system
tcgetattr
tcsetattr
time
write
cygpcre-0
pcre_compile
pcre_exec
pcre_free
pcre_free
Sections
.text Size: 104KB - Virtual size: 103KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 1024B - Virtual size: 1024B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: - Virtual size: 24KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
wintaylor2.1/Programs/tools/Cygwin/ls.exe.exe windows:4 windows x86
2ed3f5e76dd9852faf8083170f12ff77
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
cygwin1
__assert
__errno
__getreent
__main
__mb_cur_max
_acl32
_ctype_
_fstat64
_getgrgid32
_getgrnam32
_getpwuid32
_impure_ptr
_lstat64
_stat64
_tzname
abort
asctime
atexit
btowc
calloc
clock_gettime
closedir
ctime
cygwin_internal
dirfd
dll_crt0__FP11per_process
exit
fclose
fflush
fprintf
fputs
free
fwrite
getenv
getpwnam
gettimeofday
gmtime
ioctl
isatty
iswcntrl
iswctype
iswprint
localeconv
localtime
longjmp
malloc
mbrlen
mbrtowc
mbsinit
mbsrtowcs
memchr
memcpy
memmove
mempcpy
memset
opendir
printf
putc_unlocked
putchar_unlocked
qsort
raise
readdir
readlink
realloc
setjmp
setlocale
sigaction
sigaddset
sigemptyset
sigismember
signal
sigprocmask
sprintf
strcat
strchr
strcmp
strcoll
strcpy
strdup
strerror
strerror_r
strftime
strlen
strncmp
strncpy
strrchr
strtoul
strtoumax
tcgetpgrp
time
towlower
tzset
vfprintf
wcscat
wcslen
wctype
wcwidth
wmemchr
wmemcpy
_tzname
cygintl-3
libintl_bindtextdomain
libintl_dcgettext
libintl_gettext
libintl_textdomain
kernel32
GetModuleHandleA
Sections
.text Size: 66KB - Virtual size: 66KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 304B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.bss Size: - Virtual size: 1KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
wintaylor2.1/Programs/tools/Cygwin/magic
-
wintaylor2.1/Programs/tools/Cygwin/magic.mgc
-
wintaylor2.1/Programs/tools/Cygwin/magic.mime.pdf
-
wintaylor2.1/Programs/tools/Cygwin/magic.mime.mgc.pdf
-
wintaylor2.1/Programs/tools/Cygwin/nc.exe.exe windows:4 windows x86
51c243ddbe30db97c19a5f07be5aa964
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_DEBUG_STRIPPED
Imports
cygwin1
__errno
__getreent
__main
__progname
_open64
abort
accept
alarm
atoi
bind
calloc
close
connect
cygwin_internal
dll_crt0__FP11per_process
dup2
execl
exit
fflush
fprintf
fputc
free
fwrite
getenv
gethostbyaddr
gethostbyname
getservbyname
getservbyport
getsockname
getsockopt
h_errno
inet_addr
inet_ntoa
listen
longjmp
malloc
memcpy
memset
perror
pthread_mutex_lock
pthread_mutex_unlock
random
read
realloc
recvfrom
select
setjmp
setsockopt
signal
sleep
socket
sprintf
srandom
strcasecmp
strcat
strchr
strcpy
strlen
strncmp
strncpy
strrchr
strtoul
time
vfprintf
write
kernel32
AddAtomA
FindAtomA
GetAtomNameA
GetModuleHandleA
Sections
.text Size: 21KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 272B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 1024B - Virtual size: 952B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: - Virtual size: 416B
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
wintaylor2.1/Programs/tools/Cygwin/ps.exe.exe windows:4 windows x86
a985cab5e025c34f2364937d49aeff09
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
cygwin1
__getreent
__main
_getpwuid32
_getuid32
_impure_ptr
atoi
calloc
ctime
cygwin_conv_to_posix_path
cygwin_internal
dll_crt0__FP11per_process
exit
fprintf
free
getopt_long
getpwnam
malloc
memset
optarg
printf
realloc
sprintf
strcasecmp
strcpy
strncpy
strrchr
time
kernel32
CloseHandle
GetModuleHandleA
GetProcAddress
GetProcessTimes
GetVersionExA
LoadLibraryA
OpenProcess
Sections
.text Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 192B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.bss Size: - Virtual size: 176B
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
wintaylor2.1/Programs/tools/Cygwin/split.exe.exe windows:4 windows x86
027455ce92d302cf258d3075a990c3cc
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
cygwin1
__assert
__errno
__getreent
__main
__mb_cur_max
_ctype_
_fstat64
_impure_ptr
_open64
_setmode
abort
atexit
calloc
close
cygwin_internal
dll_crt0__FP11per_process
exit
fclose
fflush
fprintf
fputs
free
getenv
getpagesize
isatty
iswprint
malloc
mbrtowc
mbsinit
memchr
memcpy
memmove
memset
pathconf
printf
putc_unlocked
read
realloc
setlocale
strchr
strcmp
strerror
strerror_r
strlen
strncmp
strtol
strtoul
strtoumax
vfprintf
write
cygintl-3
libintl_bindtextdomain
libintl_gettext
libintl_textdomain
kernel32
GetModuleHandleA
Sections
.text Size: 19KB - Virtual size: 18KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 80B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.bss Size: - Virtual size: 672B
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
wintaylor2.1/Programs/tools/Cygwin/strings.exe.exe windows:4 windows x86
0e3945cbe98c5f8e0b866e6882f05d49
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_DEBUG_STRIPPED
Imports
cygwin1
__errno
__main
_ctype_
abort
atoi
bsearch
calloc
chmod
close
ctime
cygwin_internal
dll_crt0__FP11per_process
exit
fclose
fcntl
fdopen
fflush
fgets
fileno
fopen
fprintf
fputc
fputs
fread
free
fseek
fstat
ftell
fwrite
getc
getcwd
getenv
getgid
getuid
isatty
malloc
memchr
memcpy
memset
mktemp
open
perror
printf
putc
qsort
read
realloc
sbrk
setlocale
setmode
sprintf
stat
strcasecmp
strcat
strchr
strcmp
strcpy
strerror
strncasecmp
strncpy
strrchr
strtol
strtoul
time
umask
unlink
vfprintf
kernel32
GetModuleHandleA
Sections
.text Size: 292KB - Virtual size: 291KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 596B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: - Virtual size: 5KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
wintaylor2.1/Programs/tools/Cygwin/uptime.exe.exe windows:4 windows x86
35f9a55246eaad2ab5b2df1d2a02ecee
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
cygwin1
__getreent
__main
_ctype_
_exit
_fopen64
_impure_ptr
_lseek64
_open64
abort
bsearch
calloc
close
closedir
cygwin_internal
dll_crt0__FP11per_process
endutent
exit
fclose
fflush
fgets
fprintf
free
fwrite
getutent
localtime
malloc
opendir
perror
pthread_atfork
puts
read
readdir
realloc
setlocale
setutent
sprintf
sscanf
strcat
strchr
strcmp
strcpy
strlen
strrchr
strstr
strtol
strtoul
sysconf
time
uname
kernel32
AddAtomA
FindAtomA
GetAtomNameA
GetModuleHandleA
Sections
.text Size: 9KB - Virtual size: 9KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 48B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.bss Size: - Virtual size: 10KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
wintaylor2.1/Programs/tools/Cygwin/wget.exe.exe windows:4 windows x86
c89be6246377f935c98af50e5aca3eb8
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
SetConsoleTitleA
GetSystemTime
SleepEx
FreeConsole
SystemTimeToFileTime
GetModuleFileNameA
SetConsoleCtrlHandler
GetVersionExA
wsock32
connect
WSAStartup
WSACleanup
WSAGetLastError
inet_addr
ioctlsocket
gethostbyaddr
gethostbyname
send
recv
accept
setsockopt
htonl
closesocket
getsockname
ntohs
listen
select
htons
socket
bind
user32
WinHelpA
msvcrt
fprintf
time
fgetc
_fstat
_open
_read
_close
_utime
_strdup
_chmod
_unlink
_fileno
_chsize
_stricmp
_strnicmp
_controlfp
_except_handler3
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
__p___initenv
localtime
_errno
_assert
free
abort
strerror
sprintf
_stat
strchr
fflush
fclose
fwrite
clearerr
rewind
fopen
strrchr
strncmp
strstr
gmtime
mktime
__getmainargs
_iob
strncpy
strtok
exit
_initterm
atoi
putc
getenv
memchr
_ftol
rename
fputs
asctime
sscanf
qsort
memmove
perror
printf
malloc
realloc
_mkdir
fgets
_vsnprintf
vfprintf
__dllonexit
_onexit
_exit
_XcptFilter
Sections
.text Size: 96KB - Virtual size: 93KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 32KB - Virtual size: 42KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
wintaylor2.1/Programs/tools/Cygwin/xargs.exe.exe windows:4 windows x86
11527f62cec597b5376219032201dee7
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
AddAtomA
FindAtomA
GetAtomNameA
GetModuleHandleA
cygwin1
__errno
__getreent
__main
__mb_cur_max
_exit
_fopen64
_impure_ptr
_open64
abort
calloc
close
cygwin_internal
dll_crt0__FP11per_process
execvp
exit
fflush
fork
fprintf
fputs
free
fwrite
getc
getenv
malloc
mbrlen
memcpy
memset
printf
pthread_atfork
putc
realloc
setlocale
signal
strchr
strcmp
strcpy
strerror
strerror_r
strlen
strncmp
strncpy
strstr
strtol
vfprintf
wait
cygintl-3
libintl_bindtextdomain
libintl_gettext
libintl_textdomain
Sections
.text Size: 17KB - Virtual size: 17KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 80B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: - Virtual size: 736B
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
wintaylor2.1/Programs/tools/DriveMan.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 736KB - Virtual size: 736KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 9KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 3KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 11KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 16B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 48KB - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 872KB - Virtual size: 872KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
wintaylor2.1/Programs/tools/FreewareLicense.rtf.rtf
-
wintaylor2.1/Programs/tools/WFA.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 992KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 508KB - Virtual size: 508KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 14KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
wintaylor2.1/Programs/tools/WRR.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 1.5MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 636KB - Virtual size: 636KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 15KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
wintaylor2.1/Programs/tools/ZeroView-Readme.txt
-
wintaylor2.1/Programs/tools/ZeroView.exe.exe windows:4 windows x86
277e89b9dff2b350506bc6564d734257
Code Sign
01Certificate
IssuerCN=Thawte Premium Server CA,OU=Certification Services Division,O=Thawte Consulting cc,L=Cape Town,ST=Western Cape,C=ZA,1.2.840.113549.1.9.1=#0c197072656d69756d2d736572766572407468617774652e636f6dNot Before01-08-1996 00:00Not After31-12-2020 23:59SubjectCN=Thawte Premium Server CA,OU=Certification Services Division,O=Thawte Consulting cc,L=Cape Town,ST=Western Cape,C=ZA,1.2.840.113549.1.9.1=#0c197072656d69756d2d736572766572407468617774652e636f6d0aCertificate
IssuerCN=Thawte Premium Server CA,OU=Certification Services Division,O=Thawte Consulting cc,L=Cape Town,ST=Western Cape,C=ZA,1.2.840.113549.1.9.1=#0c197072656d69756d2d736572766572407468617774652e636f6dNot Before06-08-2003 00:00Not After05-08-2013 23:59SubjectCN=Thawte Code Signing CA,O=Thawte Consulting (Pty) Ltd.,C=ZAExtended Key Usages
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
Key Usages
KeyUsageCertSign
KeyUsageCRLSign
47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4Certificate
IssuerCN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZANot Before04-12-2003 00:00Not After03-12-2013 23:59SubjectCN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=USExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageCertSign
KeyUsageCRLSign
0e:4b:63:07:fd:5b:ad:1b:c4:0f:62:68:7f:d0:cf:3aCertificate
IssuerCN=Thawte Code Signing CA,O=Thawte Consulting (Pty) Ltd.,C=ZANot Before29-12-2005 20:15Not After27-01-2007 19:08SubjectCN=Technology Pathways\, LLC,OU=Application Development,O=Technology Pathways\, LLC,L=Coronado,ST=California,C=USExtended Key Usages
ExtKeyUsageCodeSigning
ExtKeyUsageMicrosoftCommercialCodeSigning
0d:e9:2b:f0:d4:d8:29:88:18:32:05:09:5e:9a:76:88Certificate
IssuerCN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=USNot Before04-12-2003 00:00Not After03-12-2008 23:59SubjectCN=VeriSign Time Stamping Services Signer,O=VeriSign\, Inc.,C=USExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageContentCommitment
Signer
Actual PE DigestDigest AlgorithmPE Digest MatchesfalseHeaders
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
FreeLibrary
GetWindowsDirectoryA
lstrcatA
LoadLibraryA
SetFilePointer
ReadFile
CloseHandle
lstrcpyA
GetModuleHandleA
UnhandledExceptionFilter
GetCurrentProcess
FlushFileBuffers
SetStdHandle
LCMapStringW
LCMapStringA
GetLastError
GetStringTypeW
GetStringTypeA
GetProcAddress
GetOEMCP
GetACP
GetCPInfo
IsBadCodePtr
IsBadReadPtr
SetUnhandledExceptionFilter
MultiByteToWideChar
IsBadWritePtr
HeapReAlloc
VirtualAlloc
WriteFile
VirtualFree
RtlUnwind
CreateFileA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
HeapFree
HeapAlloc
TerminateProcess
HeapCreate
GetEnvironmentStrings
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
HeapDestroy
user32
wsprintfA
SendMessageA
CopyIcon
LoadCursorA
SetDlgItemTextA
GetDlgItem
EndDialog
ShowWindow
PostMessageA
MessageBoxA
DialogBoxParamA
GetDlgItemTextA
DrawTextA
GetWindowRect
ScreenToClient
GetCursorPos
PtInRect
SetCursor
BeginPaint
EndPaint
gdi32
CreateFontA
GetObjectA
GetStockObject
SetBkMode
CreateFontIndirectA
SelectObject
SetTextColor
shell32
ShellExecuteA
Sections
.text Size: 24KB - Virtual size: 23KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 80KB - Virtual size: 76KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
wintaylor2.1/Programs/tools/fau/dd.exe.exe windows:4 windows x86
81ce7a47e5e27fb761adf60d114bd17d
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
getopt
optind
optarg
getopt_long
version
VerQueryValueW
GetFileVersionInfoSizeW
GetFileVersionInfoW
secur32
GetUserNameExW
kernel32
GetModuleHandleA
CloseHandle
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
GetLastError
GetComputerNameExW
GetFullPathNameW
GetModuleFileNameW
SystemTimeToTzSpecificLocalTime
GetTimeZoneInformation
GetSystemTime
GetVersionExW
GetCommandLineW
GetSystemInfo
VerifyVersionInfoW
VerSetConditionMask
LocalFree
FormatMessageW
GetCompressedFileSizeW
InterlockedExchange
SetConsoleCtrlHandler
GetFileType
CopyFileExW
ExitProcess
ResumeThread
GetStartupInfoW
RaiseException
OutputDebugStringW
Sleep
DeviceIoControl
GetDriveTypeW
GetDiskFreeSpaceExW
GetVolumeInformationW
GetFileInformationByHandle
LockFileEx
UnlockFileEx
GetProcAddress
GetModuleHandleW
MapViewOfFile
UnmapViewOfFile
GlobalMemoryStatusEx
SetLastError
GetVolumePathNameW
SetEndOfFile
SetFilePointerEx
LocalAlloc
FreeLibrary
LoadLibraryA
advapi32
CreateProcessWithLogonW
ole32
StringFromGUID2
msvcr70
_dup2
_dup
_close
fwrite
_fileno
free
wcslen
_iob
fwprintf
putc
wctomb
fputs
fflush
fclose
_write
wcschr
_wchmod
_errno
_wfopen
wcsncmp
_wcsnicmp
_wsplitpath
fgetwc
_except_handler3
exit
_lseeki64
_wstati64
signal
_putws
printf
wprintf
malloc
_get_osfhandle
_wopen
_setmode
wcsncpy
_commit
_telli64
_wsetlocale
fprintf
realloc
wcscat
fputwc
strerror
vfwprintf
_read
?_set_new_mode@@YAHH@Z
?_set_new_handler@@YAP6AHI@ZP6AHI@Z@Z
__security_error_handler
__dllonexit
_onexit
_c_exit
_exit
_XcptFilter
_cexit
__p___winitenv
_amsg_exit
__wgetmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_controlfp
Sections
.text Size: 24KB - Virtual size: 23KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 20KB - Virtual size: 19KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 764B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
wintaylor2.1/Programs/tools/fau/getopt.dll.dll windows:4 windows x86
aacc81abb83297222b34c761479dc519
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
DisableThreadLibraryCalls
msvcr70
_wgetenv
fwprintf
_iob
wcslen
wcsncmp
wcschr
_wcsnicmp
free
_initterm
malloc
_adjust_fdiv
__dllonexit
_onexit
_except_handler3
Exports
Exports
getopt
getopt_long
getopt_long_only
optarg
opterr
optind
optopt
Sections
.text Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 76B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 928B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 518B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
wintaylor2.1/Programs/tools/fau/md5lib.dll.dll windows:4 windows x86
dc2de5b171b97f6ddf04e8c7470e0fd4
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
DeviceIoControl
GetLastError
LockFileEx
UnlockFileEx
GetFileType
Sleep
DisableThreadLibraryCalls
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
ExitProcess
RaiseException
LoadLibraryA
InterlockedExchange
FreeLibrary
GetProcAddress
LocalAlloc
GetSystemTimeAsFileTime
msvcr70
wcslen
fwrite
wcschr
fread
fwprintf
_iob
wctomb
fclose
fprintf
strerror
_errno
_wfopen
__security_error_handler
_initterm
_adjust_fdiv
_except_handler3
__dllonexit
_onexit
putc
fputs
fflush
_wcsnicmp
_fstati64
_get_osfhandle
_snwscanf
_snscanf
_snwprintf
_snprintf
free
malloc
_read
_setmode
_fileno
_dup
Exports
Exports
__md5_stream@12
_is_equal_md5@16
_md5_alloc_ctx@0
_md5_buffer@16
_md5_file@20
_md5_finish_ctx@12
_md5_free_ctx@4
_md5_gzfile@20
_md5_gzstream@12
_md5_init_ctx@4
_md5_parse_decompression_algorithm@4
_md5_process_block@12
_md5_process_bytes@12
_md5_read_ctx@12
_md5_stream@12
_md5_to_stringA@16
_md5_to_stringU@16
_md5_write_digest_entry@20
_string_to_md5A@16
_string_to_md5U@16
Sections
.text Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 116B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 600B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
wintaylor2.1/Programs/tools/fau/md5sum.exe.exe windows:4 windows x86
d050cb25891427892614fe3d7bfc74bf
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
md5lib
_md5_write_digest_entry@20
_md5_buffer@16
_md5_to_stringU@16
_md5_parse_decompression_algorithm@4
_string_to_md5A@16
_is_equal_md5@16
_md5_gzfile@20
_md5_file@20
getopt
optind
getopt_long
optarg
secur32
GetUserNameExW
version
VerQueryValueW
GetFileVersionInfoW
GetFileVersionInfoSizeW
kernel32
GetModuleHandleA
GetCommandLineW
GetVersionExW
GetSystemTime
GetTimeZoneInformation
SystemTimeToTzSpecificLocalTime
GetFullPathNameW
GetLastError
GetModuleFileNameW
msvcr70
_amsg_exit
__p___winitenv
_cexit
_XcptFilter
__wgetmainargs
_c_exit
_onexit
__dllonexit
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_controlfp
_exit
_errno
fclose
_iob
exit
fputwc
fprintf
strerror
vfwprintf
fwprintf
fflush
wcscmp
realloc
getc
malloc
free
_putws
printf
wcslen
strchr
isspace
isxdigit
mbstowcs
_except_handler3
wprintf
_wfopen
wcsncmp
setlocale
fputws
Sections
.text Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 128B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
wintaylor2.1/Programs/tools/fau/msvcp70.dll.dll windows:4 windows x86
9c9d5a6a41b422f068adc3b7bbc96c4b
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
ExitProcess
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSection
GetLocaleInfoA
WideCharToMultiByte
InterlockedIncrement
InterlockedDecrement
MultiByteToWideChar
DisableThreadLibraryCalls
msvcr70
setvbuf
fflush
ungetc
fgetc
fwrite
fputc
fgetpos
fseek
fsetpos
fclose
_Getdays
_Getmonths
__iob_func
fopen
atan2
cos
exp
ldexp
log
pow
sin
sqrt
tan
fgetwc
fputwc
ungetwc
strtol
_errno
_Strftime
isdigit
strcspn
strtoul
_strtoi64
_strtoui64
sprintf
abort
_CxxThrowException
setlocale
??1exception@@UAE@XZ
??0exception@@QAE@XZ
malloc
?what@exception@@UBEPBDXZ
??0exception@@QAE@ABQBD@Z
?_set_new_handler@@YAP6AHI@ZP6AHI@Z@Z
__uncaught_exception
towlower
towupper
strcmp
__pctype_func
___lc_codepage_func
___lc_handle_func
_unlock
_lock
___setlc_active_func
___unguarded_readlc_active_add_func
__crtCompareStringA
___lc_collate_cp_func
__crtLCMapStringA
isupper
islower
__crtGetStringTypeW
_callnewh
__crtCompareStringW
__crtLCMapStringW
strtod
??1type_info@@UAE@XZ
?terminate@@YAXXZ
__security_error_handler
__dllonexit
_onexit
_initterm
_adjust_fdiv
_except_handler3
??0bad_cast@@QAE@PBD@Z
??1bad_cast@@UAE@XZ
??0bad_cast@@QAE@ABV0@@Z
??0exception@@QAE@ABV0@@Z
__CxxFrameHandler
___mb_cur_max_func
??_V@YAXPAX@Z
??3@YAXPAX@Z
_Gettnames
localeconv
free
memset
memchr
strlen
memcmp
wcslen
memmove
realloc
memcpy
Exports
Exports
??0?$_Complex_base@M@std@@QAE@ABM0@Z
??0?$_Complex_base@N@std@@QAE@ABN0@Z
??0?$_Complex_base@O@std@@QAE@ABO0@Z
??0?$_Mpunct@D@std@@QAE@ABV_Locinfo@1@I_N@Z
??0?$_Mpunct@D@std@@QAE@I_N@Z
??0?$_Mpunct@G@std@@QAE@ABV_Locinfo@1@I_N@Z
??0?$_Mpunct@G@std@@QAE@I_N@Z
??0?$_Mpunct@_W@std@@QAE@ABV_Locinfo@1@I_N@Z
??0?$_Mpunct@_W@std@@QAE@I_N@Z
??0?$_String_val@DV?$allocator@D@std@@@std@@IAE@V?$allocator@D@1@@Z
??0?$_String_val@DV?$allocator@D@std@@@std@@QAE@ABV01@@Z
??0?$_String_val@GV?$allocator@G@std@@@std@@IAE@V?$allocator@G@1@@Z
??0?$_String_val@GV?$allocator@G@std@@@std@@QAE@ABV01@@Z
??0?$_String_val@_WV?$allocator@_W@std@@@std@@IAE@V?$allocator@_W@1@@Z
??0?$_String_val@_WV?$allocator@_W@std@@@std@@QAE@ABV01@@Z
??0?$allocator@X@std@@QAE@ABV01@@Z
??0?$allocator@X@std@@QAE@XZ
??0?$basic_filebuf@DU?$char_traits@D@std@@@std@@QAE@PAU_iobuf@@@Z
??0?$basic_filebuf@DU?$char_traits@D@std@@@std@@QAE@W4_Uninitialized@1@@Z
??0?$basic_filebuf@GU?$char_traits@G@std@@@std@@QAE@PAU_iobuf@@@Z
??0?$basic_filebuf@GU?$char_traits@G@std@@@std@@QAE@W4_Uninitialized@1@@Z
??0?$basic_filebuf@_WU?$char_traits@_W@std@@@std@@QAE@PAU_iobuf@@@Z
??0?$basic_filebuf@_WU?$char_traits@_W@std@@@std@@QAE@W4_Uninitialized@1@@Z
??0?$basic_fstream@DU?$char_traits@D@std@@@std@@QAE@PBDH@Z
??0?$basic_fstream@DU?$char_traits@D@std@@@std@@QAE@XZ
??0?$basic_fstream@GU?$char_traits@G@std@@@std@@QAE@PBDH@Z
??0?$basic_fstream@GU?$char_traits@G@std@@@std@@QAE@XZ
??0?$basic_fstream@_WU?$char_traits@_W@std@@@std@@QAE@PBDH@Z
??0?$basic_fstream@_WU?$char_traits@_W@std@@@std@@QAE@XZ
??0?$basic_ifstream@DU?$char_traits@D@std@@@std@@QAE@PBDH@Z
??0?$basic_ifstream@DU?$char_traits@D@std@@@std@@QAE@XZ
??0?$basic_ifstream@GU?$char_traits@G@std@@@std@@QAE@PBDH@Z
??0?$basic_ifstream@GU?$char_traits@G@std@@@std@@QAE@XZ
??0?$basic_ifstream@_WU?$char_traits@_W@std@@@std@@QAE@PBDH@Z
??0?$basic_ifstream@_WU?$char_traits@_W@std@@@std@@QAE@XZ
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IAE@XZ
??0?$basic_ios@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z
??0?$basic_ios@GU?$char_traits@G@std@@@std@@IAE@XZ
??0?$basic_ios@GU?$char_traits@G@std@@@std@@QAE@PAV?$basic_streambuf@GU?$char_traits@G@std@@@1@@Z
??0?$basic_ios@_WU?$char_traits@_W@std@@@std@@IAE@XZ
??0?$basic_ios@_WU?$char_traits@_W@std@@@std@@QAE@PAV?$basic_streambuf@_WU?$char_traits@_W@std@@@1@@Z
??0?$basic_iostream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z
??0?$basic_iostream@GU?$char_traits@G@std@@@std@@QAE@PAV?$basic_streambuf@GU?$char_traits@G@std@@@1@@Z
??0?$basic_iostream@_WU?$char_traits@_W@std@@@std@@QAE@PAV?$basic_streambuf@_WU?$char_traits@_W@std@@@1@@Z
??0?$basic_istream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N1@Z
??0?$basic_istream@DU?$char_traits@D@std@@@std@@QAE@W4_Uninitialized@1@@Z
??0?$basic_istream@GU?$char_traits@G@std@@@std@@QAE@PAV?$basic_streambuf@GU?$char_traits@G@std@@@1@_N1@Z
??0?$basic_istream@GU?$char_traits@G@std@@@std@@QAE@W4_Uninitialized@1@@Z
??0?$basic_istream@_WU?$char_traits@_W@std@@@std@@QAE@PAV?$basic_streambuf@_WU?$char_traits@_W@std@@@1@_N1@Z
??0?$basic_istream@_WU?$char_traits@_W@std@@@std@@QAE@W4_Uninitialized@1@@Z
??0?$basic_istringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@1@H@Z
??0?$basic_istringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@H@Z
??0?$basic_istringstream@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@ABV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@1@H@Z
??0?$basic_istringstream@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@H@Z
??0?$basic_istringstream@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@ABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@1@H@Z
??0?$basic_istringstream@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@H@Z
??0?$basic_ofstream@DU?$char_traits@D@std@@@std@@QAE@PBDH@Z
??0?$basic_ofstream@DU?$char_traits@D@std@@@std@@QAE@XZ
??0?$basic_ofstream@GU?$char_traits@G@std@@@std@@QAE@PBDH@Z
??0?$basic_ofstream@GU?$char_traits@G@std@@@std@@QAE@XZ
??0?$basic_ofstream@_WU?$char_traits@_W@std@@@std@@QAE@PBDH@Z
??0?$basic_ofstream@_WU?$char_traits@_W@std@@@std@@QAE@XZ
??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QAE@W4_Uninitialized@1@@Z
??0?$basic_ostream@GU?$char_traits@G@std@@@std@@QAE@PAV?$basic_streambuf@GU?$char_traits@G@std@@@1@_N@Z
??0?$basic_ostream@GU?$char_traits@G@std@@@std@@QAE@W4_Uninitialized@1@@Z
??0?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAE@PAV?$basic_streambuf@_WU?$char_traits@_W@std@@@1@_N@Z
??0?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAE@W4_Uninitialized@1@@Z
??0?$basic_ostringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@1@H@Z
??0?$basic_ostringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@H@Z
??0?$basic_ostringstream@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@ABV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@1@H@Z
??0?$basic_ostringstream@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@H@Z
??0?$basic_ostringstream@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@ABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@1@H@Z
??0?$basic_ostringstream@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@H@Z
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAE@W4_Uninitialized@1@@Z
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAE@XZ
??0?$basic_streambuf@GU?$char_traits@G@std@@@std@@IAE@W4_Uninitialized@1@@Z
??0?$basic_streambuf@GU?$char_traits@G@std@@@std@@IAE@XZ
??0?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IAE@W4_Uninitialized@1@@Z
??0?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IAE@XZ
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@II@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@IIABV?$allocator@D@1@@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV?$allocator@D@1@@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ID@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@IDABV?$allocator@D@1@@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBD0@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBD@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBDABV?$allocator@D@1@@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBDI@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBDIABV?$allocator@D@1@@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@V?$_Ptrit@DHPBDABDPADAAD@1@0@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??0?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@ABV01@@Z
??0?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@ABV01@II@Z
??0?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@ABV01@IIABV?$allocator@G@1@@Z
??0?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@ABV?$allocator@G@1@@Z
??0?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@IG@Z
??0?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@IGABV?$allocator@G@1@@Z
??0?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@PBG0@Z
??0?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@PBG@Z
??0?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@PBGABV?$allocator@G@1@@Z
??0?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@PBGI@Z
??0?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@PBGIABV?$allocator@G@1@@Z
??0?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@V?$_Ptrit@GHPBGABGPAGAAG@1@0@Z
??0?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@XZ
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@ABV01@@Z
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@ABV01@II@Z
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@ABV01@IIABV?$allocator@_W@1@@Z
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@ABV?$allocator@_W@1@@Z
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@I_W@Z
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@I_WABV?$allocator@_W@1@@Z
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@PB_W0@Z
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@PB_W@Z
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@PB_WABV?$allocator@_W@1@@Z
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@PB_WI@Z
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@PB_WIABV?$allocator@_W@1@@Z
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@V?$_Ptrit@_WHPB_WAB_WPA_WAA_W@1@0@Z
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@XZ
??0?$basic_stringbuf@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@1@H@Z
??0?$basic_stringbuf@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@H@Z
??0?$basic_stringbuf@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@ABV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@1@H@Z
??0?$basic_stringbuf@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@H@Z
??0?$basic_stringbuf@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@ABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@1@H@Z
??0?$basic_stringbuf@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@H@Z
??0?$basic_stringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@1@H@Z
??0?$basic_stringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@H@Z
??0?$basic_stringstream@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@ABV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@1@H@Z
??0?$basic_stringstream@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@H@Z
??0?$basic_stringstream@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@ABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@1@H@Z
??0?$basic_stringstream@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@H@Z
??0?$codecvt@DDH@std@@QAE@ABV_Locinfo@1@I@Z
??0?$codecvt@DDH@std@@QAE@I@Z
??0?$codecvt@GDH@std@@QAE@ABV_Locinfo@1@I@Z
??0?$codecvt@GDH@std@@QAE@I@Z
??0?$codecvt@_WDH@std@@QAE@ABV_Locinfo@1@I@Z
??0?$codecvt@_WDH@std@@QAE@I@Z
??0?$collate@D@std@@QAE@ABV_Locinfo@1@I@Z
??0?$collate@D@std@@QAE@I@Z
??0?$collate@G@std@@QAE@ABV_Locinfo@1@I@Z
??0?$collate@G@std@@QAE@I@Z
??0?$collate@_W@std@@QAE@ABV_Locinfo@1@I@Z
??0?$collate@_W@std@@QAE@I@Z
??0?$complex@M@std@@QAE@ABM0@Z
??0?$complex@M@std@@QAE@ABV?$complex@N@1@@Z
??0?$complex@M@std@@QAE@ABV?$complex@O@1@@Z
??0?$complex@N@std@@QAE@ABN0@Z
??0?$complex@N@std@@QAE@ABV?$complex@M@1@@Z
??0?$complex@N@std@@QAE@ABV?$complex@O@1@@Z
??0?$complex@O@std@@QAE@ABO0@Z
??0?$complex@O@std@@QAE@ABV?$complex@M@1@@Z
??0?$complex@O@std@@QAE@ABV?$complex@N@1@@Z
??0?$ctype@D@std@@QAE@ABV_Locinfo@1@I@Z
??0?$ctype@D@std@@QAE@PBF_NI@Z
??0?$ctype@G@std@@QAE@ABV_Locinfo@1@I@Z
??0?$ctype@G@std@@QAE@I@Z
??0?$ctype@_W@std@@QAE@ABV_Locinfo@1@I@Z
??0?$ctype@_W@std@@QAE@I@Z
??0?$messages@D@std@@QAE@ABV_Locinfo@1@I@Z
??0?$messages@D@std@@QAE@I@Z
??0?$messages@G@std@@QAE@ABV_Locinfo@1@I@Z
??0?$messages@G@std@@QAE@I@Z
??0?$messages@_W@std@@QAE@ABV_Locinfo@1@I@Z
??0?$messages@_W@std@@QAE@I@Z
??0?$money_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QAE@ABV_Locinfo@1@I@Z
??0?$money_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QAE@I@Z
??0?$money_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@QAE@ABV_Locinfo@1@I@Z
??0?$money_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@QAE@I@Z
??0?$money_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@QAE@ABV_Locinfo@1@I@Z
??0?$money_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@QAE@I@Z
??0?$money_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QAE@ABV_Locinfo@1@I@Z
??0?$money_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QAE@I@Z
??0?$money_put@GV?$ostreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@QAE@ABV_Locinfo@1@I@Z
??0?$money_put@GV?$ostreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@QAE@I@Z
??0?$money_put@_WV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@QAE@ABV_Locinfo@1@I@Z
??0?$money_put@_WV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@QAE@I@Z
??0?$moneypunct@D$00@std@@QAE@ABV_Locinfo@1@I@Z
??0?$moneypunct@D$00@std@@QAE@I@Z
??0?$moneypunct@D$0A@@std@@QAE@ABV_Locinfo@1@I@Z
??0?$moneypunct@D$0A@@std@@QAE@I@Z
??0?$moneypunct@G$00@std@@QAE@ABV_Locinfo@1@I@Z
??0?$moneypunct@G$00@std@@QAE@I@Z
??0?$moneypunct@G$0A@@std@@QAE@ABV_Locinfo@1@I@Z
??0?$moneypunct@G$0A@@std@@QAE@I@Z
??0?$moneypunct@_W$00@std@@QAE@ABV_Locinfo@1@I@Z
??0?$moneypunct@_W$00@std@@QAE@I@Z
??0?$moneypunct@_W$0A@@std@@QAE@ABV_Locinfo@1@I@Z
??0?$moneypunct@_W$0A@@std@@QAE@I@Z
??0?$num_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QAE@ABV_Locinfo@1@I@Z
??0?$num_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QAE@I@Z
??0?$num_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@QAE@ABV_Locinfo@1@I@Z
??0?$num_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@QAE@I@Z
??0?$num_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@QAE@ABV_Locinfo@1@I@Z
??0?$num_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@QAE@I@Z
??0?$num_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QAE@ABV_Locinfo@1@I@Z
??0?$num_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QAE@I@Z
??0?$num_put@GV?$ostreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@QAE@ABV_Locinfo@1@I@Z
??0?$num_put@GV?$ostreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@QAE@I@Z
??0?$num_put@_WV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@QAE@ABV_Locinfo@1@I@Z
??0?$num_put@_WV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@QAE@I@Z
??0?$numpunct@D@std@@QAE@ABV_Locinfo@1@I@Z
??0?$numpunct@D@std@@QAE@I@Z
??0?$numpunct@G@std@@QAE@ABV_Locinfo@1@I@Z
??0?$numpunct@G@std@@QAE@I@Z
??0?$numpunct@_W@std@@QAE@ABV_Locinfo@1@I@Z
??0?$numpunct@_W@std@@QAE@I@Z
??0?$time_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QAE@ABV_Locinfo@1@I@Z
??0?$time_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QAE@I@Z
??0?$time_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@QAE@ABV_Locinfo@1@I@Z
??0?$time_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@QAE@I@Z
??0?$time_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@QAE@ABV_Locinfo@1@I@Z
??0?$time_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@QAE@I@Z
??0?$time_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QAE@ABV_Locinfo@1@I@Z
??0?$time_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QAE@I@Z
??0?$time_put@GV?$ostreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@QAE@ABV_Locinfo@1@I@Z
??0?$time_put@GV?$ostreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@QAE@I@Z
??0?$time_put@_WV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@QAE@ABV_Locinfo@1@I@Z
??0?$time_put@_WV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@QAE@I@Z
??0Init@ios_base@std@@QAE@XZ
??0_Locimp@locale@std@@AAE@ABV012@@Z
??0_Locinfo@std@@QAE@HPBD@Z
??0_Locinfo@std@@QAE@PBD@Z
??0_Lockit@std@@QAE@H@Z
??0_Lockit@std@@QAE@XZ
??0_Mutex@std@@QAE@XZ
??0_Timevec@std@@QAE@ABV01@@Z
??0_Timevec@std@@QAE@PAX@Z
??0_UShinit@std@@QAE@XZ
??0_Winit@std@@QAE@XZ
??0codecvt_base@std@@QAE@I@Z
??0ctype_base@std@@QAE@I@Z
??0facet@locale@std@@IAE@I@Z
??0id@locale@std@@QAE@I@Z
??0ios_base@std@@IAE@XZ
??0ios_base@std@@QAE@ABV01@@Z
??0locale@std@@AAE@PAV_Locimp@01@@Z
??0locale@std@@QAE@ABV01@0H@Z
??0locale@std@@QAE@ABV01@@Z
??0locale@std@@QAE@ABV01@PBDH@Z
??0locale@std@@QAE@PBDH@Z
??0locale@std@@QAE@W4_Uninitialized@1@@Z
??0locale@std@@QAE@XZ
??0messages_base@std@@QAE@I@Z
??0money_base@std@@QAE@I@Z
??0ostrstream@std@@QAE@PADHH@Z
??0strstream@std@@QAE@PADHH@Z
??0time_base@std@@QAE@I@Z
??1?$_Mpunct@D@std@@MAE@XZ
??1?$_Mpunct@G@std@@MAE@XZ
??1?$_Mpunct@_W@std@@MAE@XZ
??1?$basic_filebuf@DU?$char_traits@D@std@@@std@@UAE@XZ
??1?$basic_filebuf@GU?$char_traits@G@std@@@std@@UAE@XZ
??1?$basic_filebuf@_WU?$char_traits@_W@std@@@std@@UAE@XZ
??1?$basic_fstream@DU?$char_traits@D@std@@@std@@UAE@XZ
??1?$basic_fstream@GU?$char_traits@G@std@@@std@@UAE@XZ
??1?$basic_fstream@_WU?$char_traits@_W@std@@@std@@UAE@XZ
??1?$basic_ifstream@DU?$char_traits@D@std@@@std@@UAE@XZ
??1?$basic_ifstream@GU?$char_traits@G@std@@@std@@UAE@XZ
??1?$basic_ifstream@_WU?$char_traits@_W@std@@@std@@UAE@XZ
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UAE@XZ
??1?$basic_ios@GU?$char_traits@G@std@@@std@@UAE@XZ
??1?$basic_ios@_WU?$char_traits@_W@std@@@std@@UAE@XZ
??1?$basic_iostream@DU?$char_traits@D@std@@@std@@UAE@XZ
??1?$basic_iostream@GU?$char_traits@G@std@@@std@@UAE@XZ
??1?$basic_iostream@_WU?$char_traits@_W@std@@@std@@UAE@XZ
??1?$basic_istream@DU?$char_traits@D@std@@@std@@UAE@XZ
??1?$basic_istream@GU?$char_traits@G@std@@@std@@UAE@XZ
??1?$basic_istream@_WU?$char_traits@_W@std@@@std@@UAE@XZ
??1?$basic_istringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@UAE@XZ
??1?$basic_istringstream@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@UAE@XZ
??1?$basic_istringstream@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@UAE@XZ
??1?$basic_ofstream@DU?$char_traits@D@std@@@std@@UAE@XZ
??1?$basic_ofstream@GU?$char_traits@G@std@@@std@@UAE@XZ
??1?$basic_ofstream@_WU?$char_traits@_W@std@@@std@@UAE@XZ
??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UAE@XZ
??1?$basic_ostream@GU?$char_traits@G@std@@@std@@UAE@XZ
??1?$basic_ostream@_WU?$char_traits@_W@std@@@std@@UAE@XZ
??1?$basic_ostringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@UAE@XZ
??1?$basic_ostringstream@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@UAE@XZ
??1?$basic_ostringstream@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@UAE@XZ
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAE@XZ
??1?$basic_streambuf@GU?$char_traits@G@std@@@std@@UAE@XZ
??1?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UAE@XZ
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??1?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@XZ
??1?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@XZ
??1?$basic_stringbuf@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@UAE@XZ
??1?$basic_stringbuf@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@UAE@XZ
??1?$basic_stringbuf@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@UAE@XZ
??1?$basic_stringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@UAE@XZ
??1?$basic_stringstream@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@UAE@XZ
??1?$basic_stringstream@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@UAE@XZ
??1?$codecvt@DDH@std@@MAE@XZ
??1?$codecvt@GDH@std@@MAE@XZ
??1?$codecvt@_WDH@std@@MAE@XZ
??1?$collate@D@std@@MAE@XZ
??1?$collate@G@std@@MAE@XZ
??1?$collate@_W@std@@MAE@XZ
??1?$ctype@D@std@@MAE@XZ
??1?$ctype@G@std@@MAE@XZ
??1?$ctype@_W@std@@MAE@XZ
??1?$messages@D@std@@UAE@XZ
??1?$messages@G@std@@UAE@XZ
??1?$messages@_W@std@@UAE@XZ
??1?$money_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@MAE@XZ
??1?$money_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@MAE@XZ
??1?$money_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@MAE@XZ
??1?$money_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@MAE@XZ
??1?$money_put@GV?$ostreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@MAE@XZ
??1?$money_put@_WV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@MAE@XZ
??1?$moneypunct@D$00@std@@UAE@XZ
??1?$moneypunct@D$0A@@std@@UAE@XZ
??1?$moneypunct@G$00@std@@UAE@XZ
??1?$moneypunct@G$0A@@std@@UAE@XZ
??1?$moneypunct@_W$00@std@@UAE@XZ
??1?$moneypunct@_W$0A@@std@@UAE@XZ
??1?$num_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@MAE@XZ
??1?$num_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@MAE@XZ
??1?$num_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@MAE@XZ
??1?$num_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@MAE@XZ
??1?$num_put@GV?$ostreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@MAE@XZ
??1?$num_put@_WV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@MAE@XZ
??1?$numpunct@D@std@@MAE@XZ
??1?$numpunct@G@std@@MAE@XZ
??1?$numpunct@_W@std@@MAE@XZ
??1?$time_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@MAE@XZ
??1?$time_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@MAE@XZ
??1?$time_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@MAE@XZ
??1?$time_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@MAE@XZ
??1?$time_put@GV?$ostreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@MAE@XZ
??1?$time_put@_WV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@MAE@XZ
??1Init@ios_base@std@@QAE@XZ
??1_Locinfo@std@@QAE@XZ
??1_Lockit@std@@QAE@XZ
??1_Mutex@std@@QAE@XZ
??1_Timevec@std@@QAE@XZ
??1_UShinit@std@@QAE@XZ
??1_Winit@std@@QAE@XZ
??1codecvt_base@std@@UAE@XZ
??1ctype_base@std@@UAE@XZ
??1facet@locale@std@@UAE@XZ
??1ios_base@std@@UAE@XZ
??1istrstream@std@@UAE@XZ
??1locale@std@@QAE@XZ
??1messages_base@std@@UAE@XZ
??1money_base@std@@UAE@XZ
??1ostrstream@std@@UAE@XZ
??1strstream@std@@UAE@XZ
??1strstreambuf@std@@UAE@XZ
??1time_base@std@@UAE@XZ
??4?$_Complex_base@M@std@@QAEAAV01@ABV01@@Z
??4?$_Complex_base@N@std@@QAEAAV01@ABV01@@Z
??4?$_Complex_base@O@std@@QAEAAV01@ABV01@@Z
??4?$_Ctraits@M@std@@QAEAAV01@ABV01@@Z
??4?$_Ctraits@N@std@@QAEAAV01@ABV01@@Z
??4?$_Ctraits@O@std@@QAEAAV01@ABV01@@Z
??4?$_Iosb@H@std@@QAEAAV01@ABV01@@Z
??4?$_Locbase@H@std@@QAEAAV01@ABV01@@Z
??4?$_String_val@DV?$allocator@D@std@@@std@@QAEAAV01@ABV01@@Z
??4?$_String_val@GV?$allocator@G@std@@@std@@QAEAAV01@ABV01@@Z
??4?$_String_val@_WV?$allocator@_W@std@@@std@@QAEAAV01@ABV01@@Z
??4?$allocator@X@std@@QAEAAV01@ABV01@@Z
??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@ABV01@@Z
??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@D@Z
??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@PBD@Z
??4?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV01@ABV01@@Z
??4?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV01@G@Z
??4?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV01@PBG@Z
??4?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV01@ABV01@@Z
??4?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV01@PB_W@Z
??4?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV01@_W@Z
??4?$char_traits@D@std@@QAEAAU01@ABU01@@Z
??4?$char_traits@G@std@@QAEAAU01@ABU01@@Z
??4?$char_traits@_W@std@@QAEAAU01@ABU01@@Z
??4?$complex@M@std@@QAEAAV01@ABM@Z
??4?$complex@M@std@@QAEAAV01@ABV01@@Z
??4?$complex@N@std@@QAEAAV01@ABN@Z
??4?$complex@N@std@@QAEAAV01@ABV01@@Z
??4?$complex@O@std@@QAEAAV01@ABO@Z
??4?$complex@O@std@@QAEAAV01@ABV01@@Z
??4?$numeric_limits@C@std@@QAEAAV01@ABV01@@Z
??4?$numeric_limits@D@std@@QAEAAV01@ABV01@@Z
??4?$numeric_limits@E@std@@QAEAAV01@ABV01@@Z
??4?$numeric_limits@F@std@@QAEAAV01@ABV01@@Z
??4?$numeric_limits@G@std@@QAEAAV01@ABV01@@Z
??4?$numeric_limits@H@std@@QAEAAV01@ABV01@@Z
??4?$numeric_limits@I@std@@QAEAAV01@ABV01@@Z
??4?$numeric_limits@J@std@@QAEAAV01@ABV01@@Z
??4?$numeric_limits@K@std@@QAEAAV01@ABV01@@Z
??4?$numeric_limits@M@std@@QAEAAV01@ABV01@@Z
??4?$numeric_limits@N@std@@QAEAAV01@ABV01@@Z
??4?$numeric_limits@O@std@@QAEAAV01@ABV01@@Z
??4?$numeric_limits@_J@std@@QAEAAV01@ABV01@@Z
??4?$numeric_limits@_K@std@@QAEAAV01@ABV01@@Z
??4?$numeric_limits@_N@std@@QAEAAV01@ABV01@@Z
??4?$numeric_limits@_W@std@@QAEAAV01@ABV01@@Z
??4Init@ios_base@std@@QAEAAV012@ABV012@@Z
??4_Num_base@std@@QAEAAU01@ABU01@@Z
??4_Num_float_base@std@@QAEAAU01@ABU01@@Z
??4_Num_int_base@std@@QAEAAU01@ABU01@@Z
??4_String_base@std@@QAEAAV01@ABV01@@Z
??4_Timevec@std@@QAEAAV01@ABV01@@Z
??4_UShinit@std@@QAEAAV01@ABV01@@Z
??4_Winit@std@@QAEAAV01@ABV01@@Z
??4ios_base@std@@QAEAAV01@ABV01@@Z
??4locale@std@@QAEAAV01@ABV01@@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@AAF@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@AAG@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@AAH@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@AAI@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@AAJ@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@AAK@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@AAM@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@AAN@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@AAO@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@AAPAX@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@AA_J@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@AA_K@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@AA_N@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAV01@AAV01@@Z@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAV?$basic_ios@DU?$char_traits@D@std@@@1@AAV21@@Z@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAVios_base@1@AAV21@@Z@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z
??5?$basic_istream@GU?$char_traits@G@std@@@std@@QAEAAV01@AAF@Z
??5?$basic_istream@GU?$char_traits@G@std@@@std@@QAEAAV01@AAG@Z
??5?$basic_istream@GU?$char_traits@G@std@@@std@@QAEAAV01@AAH@Z
??5?$basic_istream@GU?$char_traits@G@std@@@std@@QAEAAV01@AAI@Z
??5?$basic_istream@GU?$char_traits@G@std@@@std@@QAEAAV01@AAJ@Z
??5?$basic_istream@GU?$char_traits@G@std@@@std@@QAEAAV01@AAK@Z
??5?$basic_istream@GU?$char_traits@G@std@@@std@@QAEAAV01@AAM@Z
??5?$basic_istream@GU?$char_traits@G@std@@@std@@QAEAAV01@AAN@Z
??5?$basic_istream@GU?$char_traits@G@std@@@std@@QAEAAV01@AAO@Z
??5?$basic_istream@GU?$char_traits@G@std@@@std@@QAEAAV01@AAPAX@Z
??5?$basic_istream@GU?$char_traits@G@std@@@std@@QAEAAV01@AA_J@Z
??5?$basic_istream@GU?$char_traits@G@std@@@std@@QAEAAV01@AA_K@Z
??5?$basic_istream@GU?$char_traits@G@std@@@std@@QAEAAV01@AA_N@Z
??5?$basic_istream@GU?$char_traits@G@std@@@std@@QAEAAV01@P6AAAV01@AAV01@@Z@Z
??5?$basic_istream@GU?$char_traits@G@std@@@std@@QAEAAV01@P6AAAV?$basic_ios@GU?$char_traits@G@std@@@1@AAV21@@Z@Z
??5?$basic_istream@GU?$char_traits@G@std@@@std@@QAEAAV01@P6AAAVios_base@1@AAV21@@Z@Z
??5?$basic_istream@GU?$char_traits@G@std@@@std@@QAEAAV01@PAV?$basic_streambuf@GU?$char_traits@G@std@@@1@@Z
??5?$basic_istream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@AAF@Z
??5?$basic_istream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@AAG@Z
??5?$basic_istream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@AAH@Z
??5?$basic_istream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@AAI@Z
??5?$basic_istream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@AAJ@Z
??5?$basic_istream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@AAK@Z
??5?$basic_istream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@AAM@Z
??5?$basic_istream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@AAN@Z
??5?$basic_istream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@AAO@Z
??5?$basic_istream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@AAPAX@Z
??5?$basic_istream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@AA_J@Z
??5?$basic_istream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@AA_K@Z
??5?$basic_istream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@AA_N@Z
??5?$basic_istream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@P6AAAV01@AAV01@@Z@Z
??5?$basic_istream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@P6AAAV?$basic_ios@_WU?$char_traits@_W@std@@@1@AAV21@@Z@Z
??5?$basic_istream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@P6AAAVios_base@1@AAV21@@Z@Z
??5?$basic_istream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@PAV?$basic_streambuf@_WU?$char_traits@_W@std@@@1@@Z
??5std@@YAAAV?$basic_istream@DU?$char_traits@D@std@@@0@AAV10@AAC@Z
??5std@@YAAAV?$basic_istream@DU?$char_traits@D@std@@@0@AAV10@AAD@Z
??5std@@YAAAV?$basic_istream@DU?$char_traits@D@std@@@0@AAV10@AAE@Z
??5std@@YAAAV?$basic_istream@DU?$char_traits@D@std@@@0@AAV10@AAV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@@Z
??5std@@YAAAV?$basic_istream@DU?$char_traits@D@std@@@0@AAV10@AAV?$complex@M@0@@Z
??5std@@YAAAV?$basic_istream@DU?$char_traits@D@std@@@0@AAV10@AAV?$complex@N@0@@Z
??5std@@YAAAV?$basic_istream@DU?$char_traits@D@std@@@0@AAV10@AAV?$complex@O@0@@Z
??5std@@YAAAV?$basic_istream@DU?$char_traits@D@std@@@0@AAV10@PAC@Z
??5std@@YAAAV?$basic_istream@DU?$char_traits@D@std@@@0@AAV10@PAD@Z
??5std@@YAAAV?$basic_istream@DU?$char_traits@D@std@@@0@AAV10@PAE@Z
??5std@@YAAAV?$basic_istream@GU?$char_traits@G@std@@@0@AAV10@AAG@Z
??5std@@YAAAV?$basic_istream@GU?$char_traits@G@std@@@0@AAV10@AAV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@0@@Z
??5std@@YAAAV?$basic_istream@GU?$char_traits@G@std@@@0@AAV10@AAV?$complex@M@0@@Z
??5std@@YAAAV?$basic_istream@GU?$char_traits@G@std@@@0@AAV10@AAV?$complex@N@0@@Z
??5std@@YAAAV?$basic_istream@GU?$char_traits@G@std@@@0@AAV10@AAV?$complex@O@0@@Z
??5std@@YAAAV?$basic_istream@GU?$char_traits@G@std@@@0@AAV10@PAG@Z
??5std@@YAAAV?$basic_istream@_WU?$char_traits@_W@std@@@0@AAV10@AAV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@0@@Z
??5std@@YAAAV?$basic_istream@_WU?$char_traits@_W@std@@@0@AAV10@AAV?$complex@M@0@@Z
??5std@@YAAAV?$basic_istream@_WU?$char_traits@_W@std@@@0@AAV10@AAV?$complex@N@0@@Z
??5std@@YAAAV?$basic_istream@_WU?$char_traits@_W@std@@@0@AAV10@AAV?$complex@O@0@@Z
??5std@@YAAAV?$basic_istream@_WU?$char_traits@_W@std@@@0@AAV10@AA_W@Z
??5std@@YAAAV?$basic_istream@_WU?$char_traits@_W@std@@@0@AAV10@PA_W@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@F@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@G@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@H@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@I@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@J@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@K@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@M@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@N@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@O@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAV01@AAV01@@Z@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAV?$basic_ios@DU?$char_traits@D@std@@@1@AAV21@@Z@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAVios_base@1@AAV21@@Z@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@PBX@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@_J@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@_K@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@_N@Z
??6?$basic_ostream@GU?$char_traits@G@std@@@std@@QAEAAV01@F@Z
??6?$basic_ostream@GU?$char_traits@G@std@@@std@@QAEAAV01@G@Z
??6?$basic_ostream@GU?$char_traits@G@std@@@std@@QAEAAV01@H@Z
??6?$basic_ostream@GU?$char_traits@G@std@@@std@@QAEAAV01@I@Z
Sections
.text Size: 180KB - Virtual size: 179KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 260KB - Virtual size: 259KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 960B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 16KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
wintaylor2.1/Programs/tools/fau/msvcp70.pdb
-
wintaylor2.1/Programs/tools/fau/msvcr70.dll.dll windows:4 windows x86
1042bb30696d4426da7447f341f51a6e
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
GetModuleFileNameA
GetModuleFileNameW
ExitProcess
GetProcAddress
GetModuleHandleA
TerminateProcess
GetCurrentProcess
WriteFile
GetStdHandle
GetCurrentThreadId
TlsSetValue
GetCommandLineA
GetVersionExA
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
ExitThread
CloseHandle
TlsGetValue
GetLastError
ResumeThread
CreateThread
TlsFree
SetLastError
GetCurrentThread
TlsAlloc
FindNextFileA
FindFirstFileA
FindClose
FindNextFileW
FindFirstFileW
HeapAlloc
HeapFree
GetEnvironmentVariableA
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
HeapReAlloc
IsBadWritePtr
SetHandleCount
GetFileType
GetStartupInfoA
GetACP
GetOEMCP
GetCPInfo
LoadLibraryA
MultiByteToWideChar
GetCommandLineW
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
InitializeCriticalSection
UnhandledExceptionFilter
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
SetConsoleCtrlHandler
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
SetEnvironmentVariableA
SetEnvironmentVariableW
GetUserDefaultLCID
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale
IsValidCodePage
RtlUnwind
GetLocaleInfoW
GetTimeFormatA
GetDateFormatA
GetTimeZoneInformation
HeapSize
VirtualProtect
GetSystemInfo
VirtualQuery
FlushFileBuffers
SetFilePointer
SetStdHandle
CompareStringA
CompareStringW
Sleep
Beep
FileTimeToSystemTime
FileTimeToLocalFileTime
GetDiskFreeSpaceA
GetLogicalDrives
SetErrorMode
GetFileAttributesA
GetCurrentDirectoryA
SetCurrentDirectoryA
SetFileAttributesA
GetFullPathNameA
GetDriveTypeA
CreateDirectoryA
RemoveDirectoryA
DeleteFileA
GetFileAttributesW
GetCurrentDirectoryW
SetCurrentDirectoryW
SetFileAttributesW
GetFullPathNameW
CreateDirectoryW
DeleteFileW
MoveFileW
RemoveDirectoryW
GetDriveTypeW
MoveFileA
RaiseException
IsBadReadPtr
SetUnhandledExceptionFilter
IsBadCodePtr
GetExitCodeProcess
WaitForSingleObject
FreeLibrary
CreateProcessA
CreateProcessW
HeapValidate
HeapCompact
HeapWalk
ReadConsoleA
SetConsoleMode
GetConsoleMode
IsDBCSLeadByteEx
GetConsoleCP
ReadConsoleW
SetEndOfFile
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
DuplicateHandle
GetFileInformationByHandle
PeekNamedPipe
ReadConsoleInputA
PeekConsoleInputA
GetNumberOfConsoleInputEvents
ReadConsoleInputW
LockFile
UnlockFile
CreateFileA
CreatePipe
ReadFile
CreateFileW
SetFileTime
LocalFileTimeToFileTime
SystemTimeToFileTime
GetLocalTime
SetLocalTime
Exports
Exports
$I10_OUTPUT
??0__non_rtti_object@@QAE@ABV0@@Z
??0__non_rtti_object@@QAE@PBD@Z
??0bad_cast@@AAE@PBQBD@Z
??0bad_cast@@QAE@ABQBD@Z
??0bad_cast@@QAE@ABV0@@Z
??0bad_cast@@QAE@PBD@Z
??0bad_typeid@@QAE@ABV0@@Z
??0bad_typeid@@QAE@PBD@Z
??0exception@@QAE@ABQBD@Z
??0exception@@QAE@ABV0@@Z
??0exception@@QAE@XZ
??1__non_rtti_object@@UAE@XZ
??1bad_cast@@UAE@XZ
??1bad_typeid@@UAE@XZ
??1exception@@UAE@XZ
??1type_info@@UAE@XZ
??2@YAPAXI@Z
??3@YAXPAX@Z
??4__non_rtti_object@@QAEAAV0@ABV0@@Z
??4bad_cast@@QAEAAV0@ABV0@@Z
??4bad_typeid@@QAEAAV0@ABV0@@Z
??4exception@@QAEAAV0@ABV0@@Z
??8type_info@@QBEHABV0@@Z
??9type_info@@QBEHABV0@@Z
??_7__non_rtti_object@@6B@
??_7bad_cast@@6B@
??_7bad_typeid@@6B@
??_7exception@@6B@
??_E__non_rtti_object@@UAEPAXI@Z
??_Ebad_cast@@UAEPAXI@Z
??_Ebad_typeid@@UAEPAXI@Z
??_Eexception@@UAEPAXI@Z
??_Fbad_cast@@QAEXXZ
??_Fbad_typeid@@QAEXXZ
??_G__non_rtti_object@@UAEPAXI@Z
??_Gbad_cast@@UAEPAXI@Z
??_Gbad_typeid@@UAEPAXI@Z
??_Gexception@@UAEPAXI@Z
??_U@YAPAXI@Z
??_V@YAXPAX@Z
?_query_new_handler@@YAP6AHI@ZXZ
?_query_new_mode@@YAHXZ
?_set_new_handler@@YAP6AHI@ZP6AHI@Z@Z
?_set_new_mode@@YAHH@Z
?_set_se_translator@@YAP6AXIPAU_EXCEPTION_POINTERS@@@ZP6AXI0@Z@Z
?before@type_info@@QBEHABV1@@Z
?name@type_info@@QBEPBDXZ
?raw_name@type_info@@QBEPBDXZ
?set_new_handler@@YAP6AXXZP6AXXZ@Z
?set_terminate@@YAP6AXXZP6AXXZ@Z
?set_unexpected@@YAP6AXXZP6AXXZ@Z
?terminate@@YAXXZ
?unexpected@@YAXXZ
?what@exception@@UBEPBDXZ
_CIacos
_CIasin
_CIatan
_CIatan2
_CIcos
_CIcosh
_CIexp
_CIfmod
_CIlog
_CIlog10
_CIpow
_CIsin
_CIsinh
_CIsqrt
_CItan
_CItanh
_CRT_RTC_INIT
_CxxThrowException
_EH_prolog
_Getdays
_Getmonths
_Gettnames
_HUGE
_Strftime
_XcptFilter
__CxxCallUnwindDtor
__CxxCallUnwindVecDtor
__CxxDetectRethrow
__CxxExceptionFilter
__CxxFrameHandler
__CxxLongjmpUnwind
__CxxQueryExceptionSize
__CxxRegisterExceptionObject
__CxxUnregisterExceptionObject
__DestructExceptionObject
__RTCastToVoid
__RTDynamicCast
__RTtypeid
__STRINGTOLD
___lc_codepage_func
___lc_collate_cp_func
___lc_handle_func
___mb_cur_max_func
___setlc_active_func
___unguarded_readlc_active_add_func
__argc
__argv
__badioinfo
__buffer_overrun
__crtCompareStringA
__crtCompareStringW
__crtGetLocaleInfoW
__crtGetStringTypeW
__crtLCMapStringA
__crtLCMapStringW
__dllonexit
__doserrno
__fpecode
__getmainargs
__initenv
__iob_func
__isascii
__iscsym
__iscsymf
__lc_clike
__lc_codepage
__lc_collate_cp
__lc_handle
__lconv_init
__mb_cur_max
__p___argc
__p___argv
__p___initenv
__p___mb_cur_max
__p___wargv
__p___winitenv
__p__acmdln
__p__amblksiz
__p__commode
__p__daylight
__p__dstbias
__p__environ
__p__fileinfo
__p__fmode
__p__iob
__p__mbcasemap
__p__mbctype
__p__osver
__p__pctype
__p__pgmptr
__p__pwctype
__p__timezone
__p__tzname
__p__wcmdln
__p__wenviron
__p__winmajor
__p__winminor
__p__winver
__p__wpgmptr
__pctype_func
__pioinfo
__pwctype_func
__pxcptinfoptrs
__security_error_handler
__set_app_type
__set_buffer_overrun_handler
__setlc_active
__setusermatherr
__threadhandle
__threadid
__toascii
__unDName
__unDNameEx
__uncaught_exception
__unguarded_readlc_active
__wargv
__wcserror
__wgetmainargs
__winitenv
_abnormal_termination
_access
_acmdln
_adj_fdiv_m16i
_adj_fdiv_m32
_adj_fdiv_m32i
_adj_fdiv_m64
_adj_fdiv_r
_adj_fdivr_m16i
_adj_fdivr_m32
_adj_fdivr_m32i
_adj_fdivr_m64
_adj_fpatan
_adj_fprem
_adj_fprem1
_adj_fptan
_adjust_fdiv
_aexit_rtn
_aligned_free
_aligned_malloc
_aligned_offset_malloc
_aligned_offset_realloc
_aligned_realloc
_amsg_exit
_assert
_atodbl
_atoi64
_atoldbl
_beep
_beginthread
_beginthreadex
_c_exit
_cabs
_callnewh
_cexit
_cgets
_cgetws
_chdir
_chdrive
_chgsign
_chkesp
_chmod
_chsize
_clearfp
_close
_commit
_commode
_control87
_controlfp
_copysign
_cprintf
_cputs
_cputws
_creat
_cscanf
_ctime64
_ctype
_cwait
_cwprintf
_cwscanf
_daylight
_dstbias
_dup
_dup2
_ecvt
_endthread
_endthreadex
_environ
_eof
_errno
_except_handler2
_except_handler3
_execl
_execle
_execlp
_execlpe
_execv
_execve
_execvp
_execvpe
_exit
_expand
_fcloseall
_fcvt
_fdopen
_fgetchar
_fgetwchar
_filbuf
_fileinfo
_filelength
_filelengthi64
_fileno
_findclose
_findfirst
_findfirst64
_findfirsti64
_findnext
_findnext64
_findnexti64
_finite
_flsbuf
_flushall
_fmode
_fpclass
_fpieee_flt
_fpreset
_fputchar
_fputwchar
_fsopen
_fstat
_fstat64
_fstati64
_ftime
_ftime64
_ftol
_fullpath
_futime
_futime64
_gcvt
_get_osfhandle
_get_sbh_threshold
_getch
_getche
_getcwd
_getdcwd
_getdiskfree
_getdllprocaddr
_getdrive
_getdrives
_getmaxstdio
_getmbcp
_getpid
_getsystime
_getw
_getwch
_getwche
_getws
_global_unwind2
_gmtime64
_heapadd
_heapchk
_heapmin
_heapset
_heapused
_heapwalk
_hypot
_i64toa
_i64tow
_initterm
_inp
_inpd
_inpw
_iob
_isatty
_isctype
_ismbbalnum
_ismbbalpha
_ismbbgraph
_ismbbkalnum
_ismbbkana
_ismbbkprint
_ismbbkpunct
_ismbblead
_ismbbprint
_ismbbpunct
_ismbbtrail
_ismbcalnum
_ismbcalpha
_ismbcdigit
_ismbcgraph
_ismbchira
_ismbckata
_ismbcl0
_ismbcl1
_ismbcl2
_ismbclegal
_ismbclower
_ismbcprint
_ismbcpunct
_ismbcspace
_ismbcsymbol
_ismbcupper
_ismbslead
_ismbstrail
_isnan
_itoa
_itow
_j0
_j1
_jn
_kbhit
_lfind
_loaddll
_local_unwind2
_localtime64
_lock
_locking
_logb
_longjmpex
_lrotl
_lrotr
_lsearch
_lseek
_lseeki64
_ltoa
_ltow
_makepath
_mbbtombc
_mbbtype
_mbcasemap
_mbccpy
_mbcjistojms
_mbcjmstojis
_mbclen
_mbctohira
_mbctokata
_mbctolower
_mbctombb
_mbctoupper
_mbctype
_mbsbtype
_mbscat
_mbschr
_mbscmp
_mbscoll
_mbscpy
_mbscspn
_mbsdec
_mbsdup
_mbsicmp
_mbsicoll
_mbsinc
_mbslen
_mbslwr
_mbsnbcat
_mbsnbcmp
_mbsnbcnt
_mbsnbcoll
_mbsnbcpy
_mbsnbicmp
_mbsnbicoll
_mbsnbset
_mbsncat
_mbsnccnt
_mbsncmp
_mbsncoll
_mbsncpy
_mbsnextc
_mbsnicmp
_mbsnicoll
_mbsninc
_mbsnset
_mbspbrk
_mbsrchr
_mbsrev
_mbsset
_mbsspn
_mbsspnp
_mbsstr
_mbstok
_mbstrlen
_mbsupr
_memccpy
_memicmp
_mkdir
_mktemp
_mktime64
_msize
_nextafter
_onexit
_open
_open_osfhandle
_osplatform
_osver
_outp
_outpd
_outpw
_pclose
_pctype
_pgmptr
_pipe
_popen
_purecall
_putch
_putenv
_putw
_putwch
_putws
_pwctype
_read
_resetstkoflw
_rmdir
_rmtmp
_rotl
_rotr
_safe_fdiv
_safe_fdivr
_safe_fprem
_safe_fprem1
_scalb
_scprintf
_scwprintf
_searchenv
_seh_longjmp_unwind
_set_SSE2_enable
_set_error_mode
_set_sbh_threshold
_set_security_error_handler
_seterrormode
_setjmp
_setjmp3
_setmaxstdio
_setmbcp
_setmode
_setsystime
_sleep
_snprintf
_snscanf
_snwprintf
_snwscanf
_sopen
_spawnl
_spawnle
_spawnlp
_spawnlpe
_spawnv
Sections
.text Size: 224KB - Virtual size: 222KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 64KB - Virtual size: 63KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 28KB - Virtual size: 25KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 952B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 12KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
wintaylor2.1/Programs/tools/fau/msvcr70.pdb
-
wintaylor2.1/Programs/tools/fau/nc.exe.exe windows:4 windows x86
f0e8473e06ae04504d1db066ea431765
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
ws2_32
getservbyname
gethostbyname
WSAGetLastError
inet_ntoa
htonl
setsockopt
recv
listen
socket
recvfrom
getsockopt
getsockname
connect
inet_addr
bind
WSASocketW
ntohl
WSACleanup
WSAStartup
closesocket
WSAEnumProtocolsW
sendto
send
WSAIoctl
WSAGetOverlappedResult
shutdown
WSASetLastError
ntohs
getservbyport
gethostbyaddr
htons
mswsock
TransmitFile
AcceptEx
GetAcceptExSockaddrs
getopt
optarg
getopt_long
optind
version
GetFileVersionInfoW
GetFileVersionInfoSizeW
VerQueryValueW
secur32
GetUserNameExW
kernel32
GetModuleHandleW
SetFilePointerEx
GetVolumePathNameW
UnmapViewOfFile
MapViewOfFile
SetConsoleCtrlHandler
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
GetModuleHandleA
ExitProcess
LocalAlloc
SetErrorMode
FreeConsole
GetCompressedFileSizeW
RaiseException
GetFullPathNameW
GetFileSizeEx
SetEndOfFile
Sleep
CreateEventW
CloseHandle
GetSystemInfo
GetDiskFreeSpaceW
GetModuleFileNameW
GlobalMemoryStatusEx
GetStdHandle
VerSetConditionMask
VerifyVersionInfoW
GetCommandLineW
GetVersionExW
GetSystemTime
GetTimeZoneInformation
SystemTimeToTzSpecificLocalTime
ReadFile
SetLastError
ResetEvent
WriteFile
GetOverlappedResult
InterlockedExchange
GetSystemDirectoryA
LoadLibraryA
GetProcAddress
GetLastError
DeviceIoControl
GetDriveTypeW
GetDiskFreeSpaceExW
GetVolumeInformationW
GetFileInformationByHandle
GetFileType
LockFileEx
UnlockFileEx
FormatMessageW
FreeLibrary
ole32
StringFromGUID2
msvcr70
wprintf
_wchmod
_wfopen
wcsncat
fclose
wcsncmp
_setjmp3
_local_unwind2
_wtoi
wcstombs
wcschr
__security_error_handler
__dllonexit
_onexit
_c_exit
_exit
_XcptFilter
_cexit
__p___winitenv
_amsg_exit
__wgetmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_controlfp
_write
_itoa
_close
_fileno
_read
_wopen
_setmode
_wstati64
free
_get_osfhandle
fwprintf
_iob
_except_handler3
fprintf
_wcsnicmp
realloc
wcscat
wcsncpy
wcslen
calloc
strncpy
strtoul
strchr
sprintf
fgetwc
fflush
_errno
iswctype
malloc
rand
srand
time
printf
_wmakepath
_wsplitpath
vfwprintf
exit
mbstowcs
atoi
_lseeki64
Sections
.text Size: 36KB - Virtual size: 34KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 24KB - Virtual size: 23KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
wintaylor2.1/Programs/tools/fau/vd.txt
-
wintaylor2.1/Programs/tools/fau/volume_dump.exe.exe windows:4 windows x86
9cb3a92b7f32d92f7baafbe2a16c1886
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
version
GetFileVersionInfoSizeW
GetFileVersionInfoW
VerQueryValueW
secur32
GetUserNameExW
kernel32
GetCommandLineW
GetModuleHandleA
SetConsoleCtrlHandler
SetErrorMode
FindFirstVolumeW
FindNextVolumeW
GetModuleHandleW
GetLongPathNameW
GetModuleFileNameW
SystemTimeToTzSpecificLocalTime
GetTimeZoneInformation
GetSystemTime
FormatMessageW
VerifyVersionInfoW
VerSetConditionMask
GetLastError
GetProcAddress
GetDriveTypeW
CloseHandle
DeviceIoControl
OutputDebugStringW
CreateFileW
GetVersionExW
FindVolumeClose
SetLastError
GetVolumeInformationW
user32
LoadStringW
msvcp70
?setw@std@@YA?AU?$_Smanip@H@1@H@Z
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@F@Z
?_Nomemory@std@@YAXXZ
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@J@Z
?setf@ios_base@std@@QAEHHH@Z
?flush@std@@YAAAV?$basic_ostream@_WU?$char_traits@_W@std@@@1@AAV21@@Z
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@P6AAAVios_base@1@AAV21@@Z@Z
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@P6AAAV01@AAV01@@Z@Z
??6std@@YAAAV?$basic_ostream@_WU?$char_traits@_W@std@@@0@AAV10@PB_W@Z
?wcout@std@@3V?$basic_ostream@_WU?$char_traits@_W@std@@@1@A
?endl@std@@YAAAV?$basic_ostream@_WU?$char_traits@_W@std@@@1@AAV21@@Z
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@K@Z
?setf@ios_base@std@@QAEHH@Z
msvcr70
__set_app_type
__dllonexit
_onexit
_controlfp
__p__fmode
_wcsnicmp
wcslen
??_V@YAXPAX@Z
_iob
fwprintf
_vsnwprintf
wcsncpy
_except_handler3
malloc
_callnewh
_c_exit
_exit
_XcptFilter
_cexit
exit
__p___winitenv
_amsg_exit
__wgetmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
Sections
.text Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 52B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
wintaylor2.1/Programs/tools/fau/wipe.exe.exe windows:4 windows x86
6220e6da07edf23354583454f5617db4
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
version
GetFileVersionInfoSizeW
GetFileVersionInfoW
VerQueryValueW
advapi32
OpenProcessToken
LookupPrivilegeValueW
AdjustTokenPrivileges
CryptAcquireContextW
CryptReleaseContext
CryptGenRandom
secur32
GetUserNameExW
kernel32
SetEnvironmentVariableA
QueryPerformanceCounter
SetConsoleCtrlHandler
SetStdHandle
GetLocaleInfoW
LoadLibraryA
OutputDebugStringW
GetLongPathNameW
VerifyVersionInfoW
VerSetConditionMask
GetTapeParameters
CloseHandle
GetLastError
FlushFileBuffers
SetLastError
SetTapePosition
GetOverlappedResult
DeviceIoControl
ResetEvent
GetFileSizeEx
LockFileEx
PrepareTape
EraseTape
GetModuleHandleW
CreateEventW
SetEvent
InterlockedExchange
GetProcAddress
GetCurrentProcess
GetModuleFileNameW
SystemTimeToTzSpecificLocalTime
GetTimeZoneInformation
GetSystemTime
FormatMessageW
FindClose
LocalFree
GetCurrentThreadId
InterlockedCompareExchange
FindNextFileW
FindFirstFileExW
LocalAlloc
lstrlenW
SetFileAttributesW
CreateFileW
WriteFile
ReadFile
GetFileType
GetDiskFreeSpaceExW
GetDiskFreeSpaceW
GetVolumePathNameW
GetTapeStatus
GetVolumeInformationW
GetTickCount
GetVersionExW
GetCommandLineW
GetFileAttributesExW
GetVolumeNameForVolumeMountPointW
InterlockedIncrement
QueueUserWorkItem
WaitForSingleObject
Sleep
SetErrorMode
GetCurrentProcessId
SetFilePointer
IsBadCodePtr
IsBadReadPtr
IsValidCodePage
IsValidLocale
EnumSystemLocalesA
GetSystemTimeAsFileTime
GetUserDefaultLCID
VirtualQuery
InterlockedDecrement
WideCharToMultiByte
MultiByteToWideChar
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
GetLocaleInfoA
RaiseException
RtlUnwind
HeapFree
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
GetModuleHandleA
GetVersionExA
LCMapStringA
LCMapStringW
GetCPInfo
HeapAlloc
ExitProcess
GetStringTypeA
GetStringTypeW
GetTimeFormatA
GetDateFormatA
CompareStringA
CompareStringW
HeapReAlloc
SetUnhandledExceptionFilter
SetHandleCount
GetStdHandle
GetStartupInfoA
TerminateProcess
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
IsBadWritePtr
UnhandledExceptionFilter
GetACP
GetOEMCP
HeapSize
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineA
VirtualProtect
GetSystemInfo
user32
wsprintfW
LoadStringW
ole32
CoInitializeEx
CoUninitialize
CoCreateInstance
CoInitializeSecurity
Sections
.text Size: 180KB - Virtual size: 178KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 28KB - Virtual size: 27KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
wintaylor2.1/Programs/tools/fau/zlibU.dll.dll windows:4 windows x86
a4253bba17db154d548fedb2acffee79
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
FormatMessageW
GetOverlappedResult
GetLastError
WriteFile
ResetEvent
SetLastError
ReadFile
FlushFileBuffers
SetFilePointerEx
GetFileType
CloseHandle
LockFileEx
UnlockFileEx
CreateEventW
DisableThreadLibraryCalls
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
ExitProcess
RaiseException
LoadLibraryA
InterlockedExchange
FreeLibrary
GetProcAddress
LocalAlloc
GetSystemTimeAsFileTime
msvcr70
wcsncpy
malloc
wcslen
_wfdopen
_wfopen
swprintf
calloc
__security_error_handler
_initterm
_adjust_fdiv
_except_handler3
__dllonexit
_onexit
_get_osfhandle
_telli64
_vsnprintf
free
fclose
ftell
fflush
rewind
fseek
fread
fwrite
_errno
wcsncat
_fileno
Exports
Exports
__gz_fileno@4
__gz_osfhandle@4
__gz_sockhandle@4
_adler32@12
_compress2@20
_compress@16
_crc32@12
_deflate@8
_deflateCopy@8
_deflateEnd@4
_deflateInit2_@32
_deflateInit_@16
_deflateParams@12
_deflateReset@4
_deflateSetDictionary@12
_get_crc_table@0
_gz_detach@4
_gz_osfdetach@4
_gz_socketdetach@4
_gzclose@4
_gzdopen@8
_gzeof@4
_gzerror@8
_gzflush@8
_gzgetc@4
_gzgets@12
_gzlock@16
_gzopen@8
_gzosfopen@8
_gzputc@8
_gzputs@8
_gzread@12
_gzrewind@4
_gzseek@16
_gzsetparams@12
_gzsopen@16
_gzsopen_ex@16
_gztell@4
_gzwrite@12
_inflate@8
_inflateEnd@4
_inflateInit2_@16
_inflateInit_@12
_inflateReset@4
_inflateSetDictionary@12
_inflateSync@4
_inflateSyncPoint@4
_uncompress@16
_zError@4
_zlibVersion@0
gzprintf
Sections
.text Size: 32KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
wintaylor2.1/Programs/tools/ipscan.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 964KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 401KB - Virtual size: 404KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 30KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
wintaylor2.1/Programs/tools/microsoft/cmd98.com
-
wintaylor2.1/Programs/tools/microsoft/cmdenv.bat.bat .vbs
-
wintaylor2.1/Programs/tools/microsoft/cmdme.com
-
wintaylor2.1/Programs/tools/microsoft/efsinfo.exe.exe windows:5 windows x86
0c6222c08f383e910c870aa0e795dae3
Code Sign
13:89:b4:d1:8a:e8:a7:c4:bd:35:c7:9b:8d:88:ca:1f:ca:53:56:91Certificate
IssuerOU=VeriSign\, Inc.+OU=VeriSign Time Stamping Service Root+OU=NO LIABILITY ACCEPTED\, (c)97 VeriSign\, Inc.,O=VeriSign Trust NetworkNot Before12-05-1997 07:00Not After31-12-1999 07:00SubjectOU=VeriSign\, Inc.+OU=VeriSign Time Stamping Service Root+OU=NO LIABILITY ACCEPTED\, (c)97 VeriSign\, Inc.,O=VeriSign Trust Networkbd:11:9a:da:43:ed:21:fb:46:58:84:89:ca:46:88:90:25:ee:14:60Certificate
IssuerOU=VeriSign\, Inc.+OU=VeriSign Time Stamping Service Root+OU=NO LIABILITY ACCEPTED\, (c)97 VeriSign\, Inc.,O=VeriSign Trust NetworkNot Before12-05-1997 07:00Not After31-12-1999 07:00SubjectOU=VeriSign Time Stamping Service+OU=VeriSign Trust Network+OU=NO LIABILITY ACCEPTED\, (c)97 VeriSign\, Inc.,O=VeriSign\, Inc.,L=Internet72:b5:13:47:ab:f8:11:d2:a4:1e:00:c0:4f:79:fe:8eCertificate
IssuerCN=Microsoft Beta PCA Authority,OU=Copyright (c) 1999 Microsoft Corp.+OU=Microsoft CorporationNot Before13-01-1999 07:00Not After01-02-2000 07:00SubjectCN=Microsoft Windows 2000 Beta,OU=Copyright (c) 1999 Microsoft Corp.+OU=Microsoft CorporationExtended Key Usages
ExtKeyUsageCodeSigning
4f:ff:a6:23:54:b1:ee:2d:5b:e1:ff:3f:b0:86:01:72Certificate
IssuerCN=Microsoft Beta Root Authority,OU=Copyright (c) 1999 Microsoft Corp.+OU=Microsoft CorporationNot Before11-01-1999 07:00Not After31-12-2005 07:00SubjectCN=Microsoft Beta PCA Authority,OU=Copyright (c) 1999 Microsoft Corp.+OU=Microsoft CorporationSigner
Actual PE DigestDigest AlgorithmPE Digest MatchesfalseHeaders
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvcrt
_wcsnicmp
_wcsicmp
wcscpy
free
wcschr
wcscat
_controlfp
_except_handler3
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
__p___initenv
exit
_XcptFilter
_exit
malloc
wcslen
_get_osfhandle
advapi32
QueryRecoveryAgentsOnEncryptedFile
RegQueryValueExW
QueryUsersOnEncryptedFile
FreeEncryptionCertificateHashList
RegOpenKeyExW
RegCloseKey
LookupAccountSidW
kernel32
GetCommandLineW
SetCurrentDirectoryW
GetCurrentDirectoryW
GetFullPathNameW
GetFileAttributesW
FindFirstFileW
lstrcmpW
FindNextFileW
FindClose
GetComputerNameW
lstrcpyW
lstrcatW
lstrlenW
FormatMessageW
WriteConsoleW
WriteFile
GetLastError
GetFileType
GetConsoleMode
GetStdHandle
shell32
CommandLineToArgvW
user32
CharToOemW
Sections
.text Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
wintaylor2.1/Programs/tools/microsoft/reg.exe.exe windows:5 windows x86
491245fa8c013eb7f87105d3d0bf7289
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
advapi32
RegEnumKeyW
RegCloseKey
RegQueryInfoKeyW
RegOpenKeyExW
RegCreateKeyW
RegConnectRegistryW
RegFlushKey
RegSetValueW
RegSetValueExW
RegSetValueExA
RegDeleteValueW
RegEnumValueW
AdjustTokenPrivileges
LookupPrivilegeValueW
OpenProcessToken
RegCreateKeyExW
RegQueryValueExW
RegLoadKeyW
RegRestoreKeyW
RegSaveKeyW
RegOpenKeyW
RegUnLoadKeyW
IsTextUnicode
RegDeleteKeyW
RegEnumKeyExW
kernel32
SetConsoleCtrlHandler
GetConsoleScreenBufferInfo
GetLastError
FormatMessageW
LocalFree
GetProcessHeap
GetStdHandle
lstrcmpW
LocalAlloc
OutputDebugStringW
SetFilePointer
ReadFile
GetFileSize
CreateFileW
CloseHandle
MultiByteToWideChar
lstrcpyW
lstrlenW
WriteFile
GetCurrentProcess
GetVersionExW
lstrcatW
SystemTimeToFileTime
GetSystemTime
SetConsoleTextAttribute
WideCharToMultiByte
HeapAlloc
HeapFree
GetVersion
ExitProcess
RtlUnwind
TerminateProcess
UnhandledExceptionFilter
GetModuleFileNameW
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
GetCommandLineW
VirtualAlloc
SetHandleCount
GetFileType
GetStartupInfoA
VirtualFree
GetModuleFileNameA
LCMapStringA
LCMapStringW
GetProcAddress
LoadLibraryA
FlushFileBuffers
GetStringTypeA
GetStringTypeW
SetStdHandle
HeapDestroy
HeapCreate
SearchPathW
GetCommandLineA
FreeLibrary
SetLastError
CreateFileA
GetConsoleMode
SetConsoleMode
ReadConsoleInputA
GetFileTime
LoadLibraryW
user32
CharUpperW
wsprintfW
CharNextW
GetActiveWindow
IsCharAlphaNumericW
shell32
StrChrW
shlwapi
StrToIntW
ntdll
RtlFreeUnicodeString
RtlAdjustPrivilege
RtlNtStatusToDosError
RtlFormatCurrentUserKeyPath
NtLoadKey
NtUnloadKey
NtOpenKey
RtlInitUnicodeString
RtlDosPathNameToNtPathName_U
RtlSetDaclSecurityDescriptor
RtlCreateSecurityDescriptor
NtClose
NtFlushKey
RtlSubAuthoritySid
RtlInitializeSid
RtlAllocateHeap
RtlLengthRequiredSid
RtlCopySid
RtlLengthSid
Sections
.text Size: 101KB - Virtual size: 101KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 952B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
wintaylor2.1/Programs/tools/microsoft/regdmp.exe.exe windows:4 windows x86
979e097146fcb01e22518917cb01a634
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
advapi32
RegOpenKeyW
RegConnectRegistryW
RegOpenKeyExW
RegEnumKeyExW
RegEnumValueW
RegCloseKey
RegGetKeySecurity
kernel32
MultiByteToWideChar
WideCharToMultiByte
FreeLibrary
GetProcAddress
LoadLibraryW
SetLastError
VirtualAlloc
GetLastError
HeapFree
GetProcessHeap
HeapAlloc
CloseHandle
VirtualFree
ExitProcess
SetConsoleCtrlHandler
GetConsoleScreenBufferInfo
GetStdHandle
GetCommandLineA
GetVersion
TerminateProcess
GetCurrentProcess
RtlUnwind
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCPInfo
GetACP
GetOEMCP
SetHandleCount
GetFileType
GetStartupInfoA
HeapDestroy
HeapCreate
WriteFile
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
LoadLibraryA
FlushFileBuffers
SetFilePointer
SetStdHandle
ntdll
RtlAllocateHeap
RtlFreeUnicodeString
RtlNtStatusToDosError
RtlFormatCurrentUserKeyPath
NtLoadKey
NtUnloadKey
RtlInitUnicodeString
NtOpenKey
RtlDosPathNameToNtPathName_U
RtlSetDaclSecurityDescriptor
RtlCreateSecurityDescriptor
NtClose
NtFlushKey
RtlAdjustPrivilege
RtlLengthRequiredSid
RtlSubAuthoritySid
RtlInitializeSid
RtlCopySid
RtlLengthSid
RtlEqualSid
RtlGetAce
RtlGetDaclSecurityDescriptor
Sections
.text Size: 31KB - Virtual size: 30KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 5KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 924B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
wintaylor2.1/Programs/tools/microsoft/tlist.exe.exe windows:6 windows x86
eca409cd8db9787aa426186b86277686
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleHandleA
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetProcAddress
TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter
LoadLibraryA
SetLastError
OpenProcess
ReadProcessMemory
CloseHandle
GetSystemTimeAsFileTime
ExitProcess
WideCharToMultiByte
VirtualAlloc
VirtualFree
GetLastError
msvcrt
printf
_c_exit
wprintf
_except_handler3
_vsnprintf
malloc
_strdup
_iob
strncpy
strrchr
toupper
strstr
fprintf
strncat
_strlwr
atol
_strupr
free
_controlfp
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
__initenv
exit
_cexit
_XcptFilter
strchr
_exit
ntdll
NtClose
NtOpenThread
NtQueryInformationProcess
RtlNtStatusToDosError
RtlUnicodeStringToAnsiString
NtQuerySystemInformation
NtQueryInformationThread
dbghelp
SymSetOptions
SymGetOptions
EnumerateLoadedModules
version
GetFileVersionInfoSizeA
GetFileVersionInfoA
VerQueryValueA
advapi32
CloseServiceHandle
AdjustTokenPrivileges
LookupPrivilegeValueA
OpenProcessToken
OpenSCManagerA
user32
GetWindowTextA
FindWindowExA
EnumDesktopsA
EnumWindowStationsA
GetProcessWindowStation
GetThreadDesktop
OpenWindowStationA
SetProcessWindowStation
OpenDesktopA
SetThreadDesktop
CloseDesktop
CloseWindowStation
EnumWindows
GetWindowLongA
GetWindow
GetWindowThreadProcessId
ole32
CoUninitialize
CoInitialize
CoCreateInstance
oleaut32
SysFreeString
Sections
.text Size: 17KB - Virtual size: 17KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 2.8MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 1024B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
wintaylor2.1/Programs/tools/microsoft/uptime.exe.exe windows:5 windows x86
110f42b30b69d34a10bf37e09ef451ca
Code Sign
03:c7:8f:37:db:92:28:df:3c:bb:1a:ad:82:fa:67:10Certificate
IssuerOU=VeriSign Commercial Software Publishers CA,O=VeriSign\, Inc.,L=InternetNot Before09-04-1996 00:00Not After07-01-2004 23:59SubjectOU=VeriSign Commercial Software Publishers CA,O=VeriSign\, Inc.,L=Internet13:89:b4:d1:8a:e8:a7:c4:bd:35:c7:9b:8d:88:ca:1f:ca:53:56:91Certificate
IssuerOU=VeriSign\, Inc.+OU=VeriSign Time Stamping Service Root+OU=NO LIABILITY ACCEPTED\, (c)97 VeriSign\, Inc.,O=VeriSign Trust NetworkNot Before12-05-1997 07:00Not After31-12-1999 07:00SubjectOU=VeriSign\, Inc.+OU=VeriSign Time Stamping Service Root+OU=NO LIABILITY ACCEPTED\, (c)97 VeriSign\, Inc.,O=VeriSign Trust Networkbd:11:9a:da:43:ed:21:fb:46:58:84:89:ca:46:88:90:25:ee:14:60Certificate
IssuerOU=VeriSign\, Inc.+OU=VeriSign Time Stamping Service Root+OU=NO LIABILITY ACCEPTED\, (c)97 VeriSign\, Inc.,O=VeriSign Trust NetworkNot Before12-05-1997 07:00Not After31-12-1999 07:00SubjectOU=VeriSign Time Stamping Service+OU=VeriSign Trust Network+OU=NO LIABILITY ACCEPTED\, (c)97 VeriSign\, Inc.,O=VeriSign\, Inc.,L=Internet55:0d:88:f5:3f:64:16:d7:0c:73:00:d8:45:92:16:34Certificate
IssuerOU=VeriSign Commercial Software Publishers CA,O=VeriSign\, Inc.,L=InternetNot Before19-03-1999 00:00Not After16-04-2000 23:59SubjectCN=Microsoft Corporation,OU=VeriSign Commercial Software Publishers CA+OU=www.verisign.com/repository/RPA Incorp. by Ref.\,LIAB.LTD(c)98+OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=Microsoft Corporation,O=VeriSign\, Inc.,L=Internet+L=Redmond,ST=Washington,C=USKey Usages
KeyUsageDigitalSignature
KeyUsageKeyEncipherment
Signer
Actual PE DigestDigest AlgorithmPE Digest MatchesfalseHeaders
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
netapi32
NetRemoteTOD
NetApiBufferFree
user32
LoadStringW
msvcrt
malloc
_dstbias
realloc
gmtime
_ftol
_msize
mktime
localtime
_wtoi
fgetwc
printf
swscanf
_exit
_adjust_fdiv
__p___winitenv
__wgetmainargs
_initterm
__setusermatherr
_EH_prolog
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
__CxxFrameHandler
exit
wprintf
wcslen
wcscpy
towupper
wcscmp
swprintf
wcscat
free
_wtol
_wcsicmp
_iob
_XcptFilter
advapi32
RegSetValueExW
CloseEventLog
RegQueryInfoKeyW
RegCloseKey
RegOpenKeyExW
ReadEventLogW
RegCreateKeyExW
RegQueryValueExW
RegEnumValueW
OpenEventLogW
RegConnectRegistryW
kernel32
GetComputerNameW
GetLastError
GetDateFormatW
GetTimeFormatW
GetTimeZoneInformation
Sections
.text Size: 35KB - Virtual size: 34KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
wintaylor2.1/Programs/tools/msi.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 1.8MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 657KB - Virtual size: 660KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
wintaylor2.1/Programs/tools/nirsoft/AlternateStreamView.cfg
-
wintaylor2.1/Programs/tools/nirsoft/AlternateStreamView.chm.chm
-
wintaylor2.1/Programs/tools/nirsoft/AlternateStreamView.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 52KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 28KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
wintaylor2.1/Programs/tools/nirsoft/AppCrashView.cfg
-
wintaylor2.1/Programs/tools/nirsoft/AppCrashView.chm.chm
-
wintaylor2.1/Programs/tools/nirsoft/AppCrashView.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 52KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 29KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
wintaylor2.1/Programs/tools/nirsoft/BasicProg.cfg
-
wintaylor2.1/Programs/tools/nirsoft/BluetoothView.chm.chm
-
wintaylor2.1/Programs/tools/nirsoft/ChromeCacheView.cfg
-
wintaylor2.1/Programs/tools/nirsoft/ChromeCacheView.chm.chm
-
wintaylor2.1/Programs/tools/nirsoft/ChromeCacheView.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 72KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 41KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
wintaylor2.1/Programs/tools/nirsoft/ChromePass.chm.chm
-
wintaylor2.1/Programs/tools/nirsoft/DevManView.cfg
-
wintaylor2.1/Programs/tools/nirsoft/DevManView.chm.chm
-
wintaylor2.1/Programs/tools/nirsoft/DevManView.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 60KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 33KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
wintaylor2.1/Programs/tools/nirsoft/Dialupass.cfg
-
wintaylor2.1/Programs/tools/nirsoft/Dialupass.chm.chm
-
wintaylor2.1/Programs/tools/nirsoft/Dialupass.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 52KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 31KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
wintaylor2.1/Programs/tools/nirsoft/FileTypesMan.chm.chm
-
wintaylor2.1/Programs/tools/nirsoft/GDIView.cfg
-
wintaylor2.1/Programs/tools/nirsoft/GDIView.chm.chm
-
wintaylor2.1/Programs/tools/nirsoft/HashMyFiles.cfg
-
wintaylor2.1/Programs/tools/nirsoft/HashMyFiles.chm.chm
-
wintaylor2.1/Programs/tools/nirsoft/HashMyFiles.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 56KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 34KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
wintaylor2.1/Programs/tools/nirsoft/IECacheView.cfg
-
wintaylor2.1/Programs/tools/nirsoft/IECacheView.chm.chm
-
wintaylor2.1/Programs/tools/nirsoft/IECacheView.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 52KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 31KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
wintaylor2.1/Programs/tools/nirsoft/InjectedDLL.chm.chm
-
wintaylor2.1/Programs/tools/nirsoft/InjectedDLL.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 48KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 26KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
wintaylor2.1/Programs/tools/nirsoft/InstalledCodec.chm.chm
-
wintaylor2.1/Programs/tools/nirsoft/LSASecretsDump.chm.chm
-
wintaylor2.1/Programs/tools/nirsoft/LSASecretsDump.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 24KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
wintaylor2.1/Programs/tools/nirsoft/LSASecretsView.cfg
-
wintaylor2.1/Programs/tools/nirsoft/LSASecretsView.chm.chm
-
wintaylor2.1/Programs/tools/nirsoft/LSASecretsView.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 48KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 29KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
wintaylor2.1/Programs/tools/nirsoft/MNR.bat
-
wintaylor2.1/Programs/tools/nirsoft/MozillaCacheView.cfg
-
wintaylor2.1/Programs/tools/nirsoft/MozillaCacheView.chm.chm
-
wintaylor2.1/Programs/tools/nirsoft/MozillaCacheView.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 76KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 45KB - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
wintaylor2.1/Programs/tools/nirsoft/MozillaHistoryView.cfg
-
wintaylor2.1/Programs/tools/nirsoft/MozillaHistoryView.chm.chm
-
wintaylor2.1/Programs/tools/nirsoft/MozillaHistoryView.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 56KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 34KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
wintaylor2.1/Programs/tools/nirsoft/MyEventViewer.chm.chm
-
wintaylor2.1/Programs/tools/nirsoft/MyLastSearch.cfg
-
wintaylor2.1/Programs/tools/nirsoft/MyLastSearch.chm.chm
-
wintaylor2.1/Programs/tools/nirsoft/MyLastSearch.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 72KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 42KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
wintaylor2.1/Programs/tools/nirsoft/NetResView.cfg
-
wintaylor2.1/Programs/tools/nirsoft/NetResView.chm.chm
-
wintaylor2.1/Programs/tools/nirsoft/NetResView.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 48KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 28KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 13KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
wintaylor2.1/Programs/tools/nirsoft/Netscapass.exe.exe windows:4 windows x86
05768ccb30a93f604492ab2abdb0d050
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetFileSize
GetCommandLineA
ReadFile
GetWindowsDirectoryA
FreeLibrary
GetProcAddress
LoadLibraryA
CloseHandle
SetFilePointer
GetLastError
WriteFile
CreateFileA
FindClose
FindFirstFileA
FindNextFileA
GetVersionExA
GetStringTypeW
FreeEnvironmentStringsA
SetEndOfFile
GetOEMCP
GetACP
GetCPInfo
LCMapStringW
LCMapStringA
MultiByteToWideChar
FlushFileBuffers
SetStdHandle
RtlUnwind
GetFileType
GetStdHandle
SetHandleCount
GetEnvironmentStringsW
GetEnvironmentStrings
GetStringTypeA
WideCharToMultiByte
FreeEnvironmentStringsW
HeapFree
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
HeapReAlloc
VirtualAlloc
VirtualFree
HeapCreate
HeapDestroy
GetEnvironmentVariableA
GetModuleFileNameA
ExitProcess
GetVersion
GetStartupInfoA
GetModuleHandleA
HeapAlloc
user32
LoadImageA
SetCursor
LoadCursorA
ReleaseDC
GetDC
CreateDialogParamA
TranslateMessage
DispatchMessageA
PostQuitMessage
GetSystemMetrics
SetWindowPos
GetDlgItemTextA
SetDlgItemTextA
SendMessageA
GetDlgItem
SendDlgItemMessageA
GetWindowRect
GetMessageA
ShowWindow
gdi32
DeleteObject
CreateSolidBrush
CreateFontIndirectA
SetBkColor
GetDeviceCaps
advapi32
RegCloseKey
GetUserNameA
RegOpenKeyExA
RegQueryValueExA
RegEnumKeyExA
shell32
SHBrowseForFolderA
SHGetPathFromIDListA
SHGetMalloc
Sections
.text Size: 32KB - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
wintaylor2.1/Programs/tools/nirsoft/OpenedFilesView.chm.chm
-
wintaylor2.1/Programs/tools/nirsoft/OpenedFilesView.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 56KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 33KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
wintaylor2.1/Programs/tools/nirsoft/OperaCacheView.cfg
-
wintaylor2.1/Programs/tools/nirsoft/OperaCacheView.chm.chm
-
wintaylor2.1/Programs/tools/nirsoft/OperaCacheView.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 56KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 33KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
wintaylor2.1/Programs/tools/nirsoft/OperaPassView.cfg
-
wintaylor2.1/Programs/tools/nirsoft/OperaPassView.chm.chm
-
wintaylor2.1/Programs/tools/nirsoft/OperaPassView.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 56KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 31KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
wintaylor2.1/Programs/tools/nirsoft/OutlookAttachView.chm.chm
-
wintaylor2.1/Programs/tools/nirsoft/PasswordFox.chm.chm
-
wintaylor2.1/Programs/tools/nirsoft/ProcessActivityView.cfg
-
wintaylor2.1/Programs/tools/nirsoft/ProcessActivityView.chm.chm
-
wintaylor2.1/Programs/tools/nirsoft/ProcessActivityView.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 60KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 32KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
wintaylor2.1/Programs/tools/nirsoft/ProduKey.cfg
-
wintaylor2.1/Programs/tools/nirsoft/ProduKey.chm.chm
-
wintaylor2.1/Programs/tools/nirsoft/PstPassword.cfg
-
wintaylor2.1/Programs/tools/nirsoft/PstPassword.chm.chm
-
wintaylor2.1/Programs/tools/nirsoft/PstPassword.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 40KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 28KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
wintaylor2.1/Programs/tools/nirsoft/RecentFilesView.cfg
-
wintaylor2.1/Programs/tools/nirsoft/RecentFilesView.chm.chm
-
wintaylor2.1/Programs/tools/nirsoft/RegScanner.chm.chm
-
wintaylor2.1/Programs/tools/nirsoft/RegScanner.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 56KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 36KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
wintaylor2.1/Programs/tools/nirsoft/SearchMyFiles.chm.chm
-
wintaylor2.1/Programs/tools/nirsoft/SearchMyFiles.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 68KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 38KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
wintaylor2.1/Programs/tools/nirsoft/ShellBagsView.cfg
-
wintaylor2.1/Programs/tools/nirsoft/ShellBagsView.chm.chm
-
wintaylor2.1/Programs/tools/nirsoft/ShellBagsView.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 52KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 27KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
wintaylor2.1/Programs/tools/nirsoft/SkypeLogView.cfg
-
wintaylor2.1/Programs/tools/nirsoft/SkypeLogView.chm.chm
-
wintaylor2.1/Programs/tools/nirsoft/SkypeLogView.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 152KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 160KB - Virtual size: 160KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
wintaylor2.1/Programs/tools/nirsoft/SniffPass.cfg
-
wintaylor2.1/Programs/tools/nirsoft/SniffPass.chm.chm
-
wintaylor2.1/Programs/tools/nirsoft/SniffPass.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 104KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 31KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
wintaylor2.1/Programs/tools/nirsoft/USBDeview.cfg
-
wintaylor2.1/Programs/tools/nirsoft/USBDeview.chm.chm
-
wintaylor2.1/Programs/tools/nirsoft/USBDeview.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 68KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 43KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
wintaylor2.1/Programs/tools/nirsoft/UserProfilesView.cfg
-
wintaylor2.1/Programs/tools/nirsoft/UserProfilesView.chm.chm
-
wintaylor2.1/Programs/tools/nirsoft/UserProfilesView.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 48KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 26KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
wintaylor2.1/Programs/tools/nirsoft/VNCPassView.chm.chm
-
wintaylor2.1/Programs/tools/nirsoft/VNCPassView.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 44KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 24KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
wintaylor2.1/Programs/tools/nirsoft/WhatInStartup.cfg
-
wintaylor2.1/Programs/tools/nirsoft/WhatInStartup.chm.chm
-
wintaylor2.1/Programs/tools/nirsoft/WhatInStartup.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 72KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 35KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 9KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
wintaylor2.1/Programs/tools/nirsoft/WinPrefetchView.cfg
-
wintaylor2.1/Programs/tools/nirsoft/WinPrefetchView.chm.chm
-
wintaylor2.1/Programs/tools/nirsoft/WinPrefetchView.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 60KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 29KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
wintaylor2.1/Programs/tools/nirsoft/WirelessKeyView.cfg
-
wintaylor2.1/Programs/tools/nirsoft/WirelessKeyView.chm.chm
-
wintaylor2.1/Programs/tools/nirsoft/WirelessKeyView.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 56KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 37KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
wintaylor2.1/Programs/tools/nirsoft/accesspv.exe.exe windows:4 windows x86
da3ebe3d7081dd3d91857c1a774c2781
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CloseHandle
SetFilePointer
GetCurrentProcess
LCMapStringW
LCMapStringA
MultiByteToWideChar
SetEndOfFile
LoadLibraryA
GetProcAddress
GetOEMCP
GetACP
GetCPInfo
CreateFileA
FlushFileBuffers
SetStdHandle
HeapReAlloc
GetStringTypeW
GetStringTypeA
VirtualAlloc
HeapAlloc
WriteFile
RtlUnwind
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
HeapFree
GetLastError
WideCharToMultiByte
ReadFile
TerminateProcess
VirtualFree
GetEnvironmentStringsW
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
SetHandleCount
GetStdHandle
GetFileType
HeapDestroy
HeapCreate
user32
GetDlgItem
PostQuitMessage
SetDlgItemTextA
SetWindowPos
GetSystemMetrics
LoadImageA
CreateDialogParamA
SendMessageA
ShowWindow
GetMessageA
TranslateMessage
DispatchMessageA
GetDC
ReleaseDC
GetWindowRect
gdi32
GetDeviceCaps
DeleteObject
CreateSolidBrush
SetBkColor
comdlg32
GetOpenFileNameA
shell32
DragAcceptFiles
DragQueryFileA
DragFinish
Sections
.text Size: 20KB - Virtual size: 18KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
wintaylor2.1/Programs/tools/nirsoft/ads.txt
-
wintaylor2.1/Programs/tools/nirsoft/astlog.chm.chm
-
wintaylor2.1/Programs/tools/nirsoft/astlog.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 40KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 15KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
wintaylor2.1/Programs/tools/nirsoft/awatch.cfg
-
wintaylor2.1/Programs/tools/nirsoft/awatch.chm.chm
-
wintaylor2.1/Programs/tools/nirsoft/awatch.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 56KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 28KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
wintaylor2.1/Programs/tools/nirsoft/bluetoothview.cfg
-
wintaylor2.1/Programs/tools/nirsoft/bluetoothview.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 56KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 31KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
wintaylor2.1/Programs/tools/nirsoft/chromepass.cfg
-
wintaylor2.1/Programs/tools/nirsoft/chromepass.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 112KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 118KB - Virtual size: 120KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
wintaylor2.1/Programs/tools/nirsoft/cports.cfg
-
wintaylor2.1/Programs/tools/nirsoft/cports.chm.chm
-
wintaylor2.1/Programs/tools/nirsoft/cports.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 64KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 42KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
wintaylor2.1/Programs/tools/nirsoft/dir.txt
-
wintaylor2.1/Programs/tools/nirsoft/filetypesman.cfg
-
wintaylor2.1/Programs/tools/nirsoft/filetypesman.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 76KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 42KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 9KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
wintaylor2.1/Programs/tools/nirsoft/gdiview.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 44KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 29KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
wintaylor2.1/Programs/tools/nirsoft/iecv.cfg
-
wintaylor2.1/Programs/tools/nirsoft/iecv.chm.chm
-
wintaylor2.1/Programs/tools/nirsoft/iecv.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 108KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 32KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 22KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
wintaylor2.1/Programs/tools/nirsoft/iehv.cfg
-
wintaylor2.1/Programs/tools/nirsoft/iehv.chm.chm
-
wintaylor2.1/Programs/tools/nirsoft/iehv.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 56KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 30KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
wintaylor2.1/Programs/tools/nirsoft/iepv.cfg
-
wintaylor2.1/Programs/tools/nirsoft/iepv.chm.chm
-
wintaylor2.1/Programs/tools/nirsoft/iepv.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 60KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 35KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
wintaylor2.1/Programs/tools/nirsoft/iepv_sites.txt
-
wintaylor2.1/Programs/tools/nirsoft/installedcodec.cfg
-
wintaylor2.1/Programs/tools/nirsoft/installedcodec.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 48KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 29KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
wintaylor2.1/Programs/tools/nirsoft/ipnetinfo.cfg
-
wintaylor2.1/Programs/tools/nirsoft/ipnetinfo.chm.chm
-
wintaylor2.1/Programs/tools/nirsoft/ipnetinfo.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 52KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 34KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
wintaylor2.1/Programs/tools/nirsoft/livecontactsview.cfg
-
wintaylor2.1/Programs/tools/nirsoft/livecontactsview.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 112KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 72KB - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
wintaylor2.1/Programs/tools/nirsoft/macaddressview.cfg
-
wintaylor2.1/Programs/tools/nirsoft/macaddressview.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 1.5MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 551KB - Virtual size: 552KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
wintaylor2.1/Programs/tools/nirsoft/mailpv.cfg
-
wintaylor2.1/Programs/tools/nirsoft/mailpv.chm.chm
-
wintaylor2.1/Programs/tools/nirsoft/mailpv.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 64KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 43KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
wintaylor2.1/Programs/tools/nirsoft/mspass.cfg
-
wintaylor2.1/Programs/tools/nirsoft/mspass.chm.chm
-
wintaylor2.1/Programs/tools/nirsoft/mspass.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 76KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 58KB - Virtual size: 60KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
wintaylor2.1/Programs/tools/nirsoft/myeventviewer.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 56KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 31KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
wintaylor2.1/Programs/tools/nirsoft/mzcv.chm.chm
-
wintaylor2.1/Programs/tools/nirsoft/mzcv.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 56KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 29KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 9KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
wintaylor2.1/Programs/tools/nirsoft/mzcv.txt
-
wintaylor2.1/Programs/tools/nirsoft/netpass.cfg
-
wintaylor2.1/Programs/tools/nirsoft/netpass.chm.chm
-
wintaylor2.1/Programs/tools/nirsoft/netpass.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 56KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 33KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 9KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
wintaylor2.1/Programs/tools/nirsoft/nk2view.chm.chm
-
wintaylor2.1/Programs/tools/nirsoft/nk2view.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 60KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 33KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
wintaylor2.1/Programs/tools/nirsoft/nk2view.ini
-
wintaylor2.1/Programs/tools/nirsoft/nmr.bat
-
wintaylor2.1/Programs/tools/nirsoft/openedfilesview.cfg
-
wintaylor2.1/Programs/tools/nirsoft/outlookattachview.cfg
-
wintaylor2.1/Programs/tools/nirsoft/outlookattachview.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 104KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 70KB - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
wintaylor2.1/Programs/tools/nirsoft/passwordfox.cfg
-
wintaylor2.1/Programs/tools/nirsoft/passwordfox.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 56KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 29KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
wintaylor2.1/Programs/tools/nirsoft/pcanyscan.exe.exe windows:4 windows x86
2a7e6eb98f79cda2093703e4651a6137
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvbvm60
__vbaStrI2
_CIcos
_adj_fptan
__vbaVarMove
__vbaStrI4
__vbaFreeVar
__vbaLateIdCall
__vbaLenBstr
__vbaStrVarMove
__vbaFreeVarList
_adj_fdiv_m64
__vbaFreeObjList
_adj_fprem1
__vbaStrCat
__vbaHresultCheckObj
_adj_fdiv_m32
__vbaVarIndexLoadRefLock
__vbaExitProc
__vbaObjSet
__vbaOnError
ord595
_adj_fdiv_m16i
_adj_fdivr_m16i
__vbaVarIndexLoad
ord598
__vbaRefVarAry
_CIsin
ord631
ord525
__vbaChkstk
EVENT_SINK_AddRef
ord561
__vbaI2I4
_adj_fpatan
__vbaLateIdCallLd
__vbaStrR8
EVENT_SINK_Release
_CIsqrt
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
_adj_fprem
_adj_fdivr_m64
__vbaFPException
__vbaUbound
_CIlog
__vbaErrorOverflow
__vbaNew2
__vbaInStr
_adj_fdiv_m32i
_adj_fdivr_m32i
__vbaStrCopy
__vbaFreeStrList
_adj_fdivr_m32
_adj_fdiv_r
ord685
ord100
__vbaVarDup
__vbaFpI4
_CIatan
__vbaStrMove
__vbaI2ErrVar
__vbaR8IntI4
_allmul
__vbaLateIdSt
_CItan
__vbaFPInt
__vbaAryUnlock
_CIexp
__vbaFreeStr
__vbaFreeObj
Sections
.text Size: 20KB - Virtual size: 17KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
wintaylor2.1/Programs/tools/nirsoft/produkey.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 52KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 29KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
wintaylor2.1/Programs/tools/nirsoft/pspv.chm.chm
-
wintaylor2.1/Programs/tools/nirsoft/pspv.exe.exe windows:4 windows x86
a625442ad6eaa488d197846f8b30467b
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetFileAttributesA
GetModuleFileNameA
GetTempPathA
FreeLibrary
GetPrivateProfileIntA
GetPrivateProfileStringA
WritePrivateProfileStringA
LoadLibraryA
GetVersionExA
MultiByteToWideChar
GetProcAddress
DeleteFileA
GetStartupInfoA
GetModuleHandleA
GetWindowsDirectoryA
GetTempFileNameA
EnumResourceNamesA
WideCharToMultiByte
CreateFileA
WriteFile
FormatMessageA
GetLastError
SetFilePointer
ReadFile
GlobalLock
GlobalAlloc
GlobalUnlock
CloseHandle
LocalFree
GetFileSize
user32
TranslateMessage
DispatchMessageA
PostQuitMessage
TrackPopupMenu
IsDialogMessageA
TranslateAcceleratorA
DefWindowProcA
LoadIconA
RegisterWindowMessageA
BeginDeferWindowPos
DeferWindowPos
EndDeferWindowPos
PostMessageA
CreateWindowExA
ShowWindow
DestroyMenu
DestroyWindow
GetWindowTextA
CreateDialogParamA
GetDlgCtrlID
EnumChildWindows
GetClientRect
SetWindowPos
LoadMenuA
GetMenuItemCount
GetMenuItemInfoA
ModifyMenuA
UpdateWindow
GetMessageA
GetMenuStringA
GetWindowLongA
GetWindowRect
GetCursorPos
OpenClipboard
EmptyClipboard
SetClipboardData
CloseClipboard
CheckMenuItem
GetMenu
GetSubMenu
EnableMenuItem
MessageBoxA
SetFocus
DialogBoxParamA
ChildWindowFromPoint
GetDlgItem
LoadCursorA
SetCursor
GetSysColorBrush
EndDialog
SetDlgItemTextA
SendMessageA
LoadAcceleratorsA
GetWindowPlacement
GetSystemMetrics
LoadStringA
SetWindowLongA
SetMenu
RegisterClassA
gdi32
SetTextColor
CreateFontIndirectA
DeleteObject
SetBkMode
comdlg32
GetOpenFileNameA
GetSaveFileNameA
FindTextA
advapi32
RegSetValueExA
RegCloseKey
RegOpenKeyExA
RegCreateKeyExA
RegQueryValueExA
RegEnumKeyExA
RegEnumValueA
shell32
ShellExecuteA
ole32
CoTaskMemFree
comctl32
ImageList_ReplaceIcon
ImageList_SetImageCount
ImageList_Create
CreateToolbarEx
ord6
InitCommonControlsEx
msvcrt
free
__dllonexit
strrchr
strchr
??2@YAPAXI@Z
??3@YAXPAX@Z
strcmp
strncmp
strcpy
__p__commode
strcat
sprintf
__CxxFrameHandler
__set_app_type
_onexit
_exit
malloc
memcpy
__getmainargs
_strcmpi
_memicmp
__p__fmode
_acmdln
_adjust_fdiv
_initterm
__setusermatherr
memcmp
_except_handler3
strlen
_itoa
strncat
_CxxThrowException
??1type_info@@UAE@XZ
_controlfp
_strnicmp
memset
exit
_XcptFilter
oleaut32
GetErrorInfo
Sections
.text Size: 26KB - Virtual size: 26KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 15KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
wintaylor2.1/Programs/tools/nirsoft/rdpv.chm.chm
-
wintaylor2.1/Programs/tools/nirsoft/rdpv.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 48KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 26KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
wintaylor2.1/Programs/tools/nirsoft/recentfilesview.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 40KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 25KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
wintaylor2.1/Programs/tools/nirsoft/regscanner.cfg
-
wintaylor2.1/Programs/tools/nirsoft/serviwin.cfg
-
wintaylor2.1/Programs/tools/nirsoft/serviwin.chm.chm
-
wintaylor2.1/Programs/tools/nirsoft/serviwin.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 56KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 28KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
wintaylor2.1/Programs/tools/nirsoft/shexview.cfg
-
wintaylor2.1/Programs/tools/nirsoft/shexview.chm.chm
-
wintaylor2.1/Programs/tools/nirsoft/shexview.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 68KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 36KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
wintaylor2.1/Programs/tools/nirsoft/shmnview.cfg
-
wintaylor2.1/Programs/tools/nirsoft/shmnview.chm.chm
-
wintaylor2.1/Programs/tools/nirsoft/shmnview.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 44KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 26KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
wintaylor2.1/Programs/tools/nirsoft/specialfoldersview.cfg
-
wintaylor2.1/Programs/tools/nirsoft/specialfoldersview.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 48KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 27KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
wintaylor2.1/Programs/tools/nirsoft/videocacheview.cfg
-
wintaylor2.1/Programs/tools/nirsoft/videocacheview.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 84KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 51KB - Virtual size: 52KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
wintaylor2.1/Programs/tools/nirsoft/wirelessnetview.cfg
-
wintaylor2.1/Programs/tools/nirsoft/wirelessnetview.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 56KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 30KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
wintaylor2.1/Programs/tools/options.ini
-
wintaylor2.1/Programs/tools/sysinternals/ADExplorer.exe.exe windows:5 windows x86
8d18d039ba7da3c0198f1953c8fe41ee
Code Sign
2e:ab:11:dc:50:ff:5c:9d:cb:c0Certificate
IssuerCN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft CorporationNot Before22-08-2007 22:31Not After25-08-2012 07:00SubjectCN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USExtended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
61:01:cf:3e:00:00:00:00:00:0fCertificate
IssuerCN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USNot Before07-12-2009 22:40Not After07-03-2011 22:40SubjectCN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USExtended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
6a:0b:99:4f:c0:00:25:ab:11:db:45:1f:58:7a:67:a2Certificate
IssuerCN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft CorporationNot Before16-09-2006 01:04Not After15-09-2019 07:00SubjectCN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
61:06:94:2d:00:00:00:00:00:09Certificate
IssuerCN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USNot Before25-07-2008 19:02Not After25-07-2013 19:12SubjectCN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:7A82-688A-9F92,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageContentCommitment
d0:8a:94:a4:ab:a0:fc:cd:93:a4:d7:3f:36:84:88:7b:5b:e9:cb:58Signer
Actual PE Digestd0:8a:94:a4:ab:a0:fc:cd:93:a4:d7:3f:36:84:88:7b:5b:e9:cb:58Digest Algorithmsha1PE Digest MatchestrueHeaders
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
netapi32
NetUserGetGroups
NetUserGetLocalGroups
rpcrt4
UuidFromStringW
version
GetFileVersionInfoSizeW
GetFileVersionInfoW
VerQueryValueW
kernel32
LCMapStringA
GetConsoleMode
GetConsoleCP
GetModuleHandleA
DebugBreak
GetCurrentProcessId
QueryPerformanceCounter
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetFileType
SetHandleCount
LCMapStringW
GetModuleFileNameA
GetStdHandle
ExitProcess
VirtualAlloc
VirtualFree
HeapCreate
GetStringTypeA
GetCurrentThreadId
SetLastError
TlsFree
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
RaiseException
RtlUnwind
GetStartupInfoA
GetCommandLineA
HeapReAlloc
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
CreateThread
ResumeThread
ExitThread
HeapSize
HeapAlloc
GetStringTypeW
GetLocaleInfoA
InitializeCriticalSectionAndSpinCount
LoadLibraryA
ExpandEnvironmentStringsA
GetProcessHeap
HeapFree
WideCharToMultiByte
lstrlenA
WriteFile
FileTimeToLocalFileTime
GetCurrentProcess
FreeLibrary
GetSystemInfo
GetLastError
Sleep
GetSystemTimeAsFileTime
MultiByteToWideChar
CreateFileW
ReadFile
GetSystemDirectoryW
OutputDebugStringW
GetFileSize
TlsAlloc
FormatMessageW
TlsSetValue
GetUserDefaultLangID
TlsGetValue
GetSystemDefaultLangID
LocalAlloc
LocalFree
GetTimeZoneInformation
FileTimeToSystemTime
GetTimeFormatW
CompareFileTime
SystemTimeToFileTime
SystemTimeToTzSpecificLocalTime
GetDateFormatW
DeleteFileW
CloseHandle
DeleteCriticalSection
CreateFileMappingW
GlobalFree
EnterCriticalSection
GetProcAddress
GlobalUnlock
CompareStringW
GetModuleFileNameW
GetFileAttributesW
LeaveCriticalSection
GetVersionExW
LoadLibraryW
GlobalAlloc
InitializeCriticalSection
GetTickCount
GetModuleHandleW
GlobalLock
InterlockedDecrement
InterlockedIncrement
SetEndOfFile
UnmapViewOfFile
MapViewOfFile
SetFilePointer
GetCommandLineW
SetStdHandle
FlushFileBuffers
VirtualQuery
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
CreateFileA
user32
MoveWindow
CheckMenuItem
DispatchMessageW
MsgWaitForMultipleObjects
DrawTextW
PostMessageW
SetCapture
LoadImageW
TrackPopupMenu
PostQuitMessage
GetMessageW
GetWindowRect
ScreenToClient
GetDlgItemInt
TranslateAcceleratorW
CloseClipboard
GetWindowTextLengthW
SetCursor
SetWindowPlacement
DestroyWindow
ClientToScreen
EndPaint
DialogBoxIndirectParamW
CopyIcon
IsZoomed
GetSubMenu
DeleteMenu
GetFocus
DialogBoxParamW
GetParent
LoadCursorW
MessageBeep
MenuItemFromPoint
GetClientRect
SetFocus
GetMenuItemInfoW
BeginPaint
PtInRect
SetPropW
InsertMenuItemW
TranslateMessage
LoadAcceleratorsW
InflateRect
ChildWindowFromPoint
SetDlgItemInt
GetMenu
IsDialogMessageW
DefWindowProcW
CallWindowProcW
GetPropW
DrawFrameControl
EndDeferWindowPos
DestroyIcon
SetWindowTextW
DestroyMenu
SetClipboardData
RegisterClassExW
LoadIconW
GetWindowPlacement
OffsetRect
InvalidateRect
LoadMenuW
GetWindowLongW
AppendMenuW
GetWindowTextW
PeekMessageW
GetClassNameW
EnableMenuItem
EmptyClipboard
GetDlgItem
SetWindowLongW
EndDialog
SendDlgItemMessageW
GetSysColor
SetWindowPos
CheckDlgButton
EnumChildWindows
ShowWindow
CreatePopupMenu
GetSysColorBrush
IsDlgButtonChecked
CreateDialogParamW
DrawMenuBar
GetActiveWindow
GetMenuItemCount
CreateWindowExW
SetMenuDefaultItem
OpenClipboard
DeferWindowPos
MessageBoxW
ReleaseCapture
BeginDeferWindowPos
GetSystemMetrics
IsWindowVisible
GetDlgItemTextW
SetDlgItemTextW
SendMessageW
MapWindowPoints
UpdateWindow
EnableWindow
gdi32
SetBkColor
ExtTextOutW
EndPage
StartPage
GetDeviceCaps
StartDocW
SetTextColor
CreateFontIndirectW
SetBkMode
SelectObject
GetObjectW
EndDoc
GetStockObject
SetMapMode
comdlg32
GetSaveFileNameW
GetOpenFileNameW
PrintDlgW
advapi32
GetSecurityDescriptorLength
RegDeleteValueW
RegCreateKeyW
RegEnumValueW
RegSetValueExW
ConvertStringSidToSidW
ConvertStringSecurityDescriptorToSecurityDescriptorW
GetLengthSid
ConvertSidToStringSidW
ConvertSecurityDescriptorToStringSecurityDescriptorW
RegQueryValueExW
RegOpenKeyExA
RegQueryValueExA
AdjustTokenPrivileges
LookupPrivilegeValueW
OpenProcessToken
GetSecurityDescriptorDacl
GetSecurityDescriptorGroup
IsValidSid
GetSecurityDescriptorOwner
GetSidIdentifierAuthority
GetSidSubAuthority
MapGenericMask
GetSidSubAuthorityCount
EqualSid
GetAce
LookupAccountSidW
AllocateAndInitializeSid
RegCloseKey
shell32
CommandLineToArgvW
ShellExecuteW
ole32
CoInitialize
CreateBindCtx
CoUninitialize
CoCreateInstance
IIDFromString
StringFromGUID2
oleaut32
SysStringByteLen
SafeArrayAccessData
SystemTimeToVariantTime
VariantTimeToSystemTime
SafeArrayGetUBound
SysFreeString
SafeArrayGetElement
VarDateFromStr
VariantChangeType
VariantInit
SysAllocStringByteLen
VariantClear
SafeArrayGetLBound
SysStringLen
SysAllocString
comctl32
ImageList_Draw
CreateToolbarEx
CreatePropertySheetPageW
ImageList_Create
ImageList_ReplaceIcon
ImageList_EndDrag
ImageList_DragMove
ImageList_BeginDrag
ImageList_DragLeave
ImageList_DragEnter
ord17
CreateStatusWindowW
PropertySheetW
activeds
ord9
ord20
ord15
ord12
ord13
ord7
wldap32
ord155
ord118
ord14
ord73
ord145
ord13
ord188
ord88
Sections
.text Size: 311KB - Virtual size: 311KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 62KB - Virtual size: 62KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 41KB - Virtual size: 49KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 41KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
wintaylor2.1/Programs/tools/sysinternals/ADInsight.chm.chm
-
wintaylor2.1/Programs/tools/sysinternals/ADInsight.exe.exe windows:4 windows x86
d140f11cc65811212afe98adaa36a53a
Code Sign
c1:00:8b:3c:3c:88:11:d1:3e:f6:63:ec:df:40Certificate
IssuerCN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft CorporationNot Before10-01-1997 07:00Not After31-12-2020 07:00SubjectCN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporationc1:00:8b:3c:3c:88:11:d1:3e:f6:63:ec:df:40Certificate
IssuerCN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft CorporationNot Before10-01-1997 07:00Not After31-12-2020 07:00SubjectCN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation2e:ab:11:dc:50:ff:5c:9d:cb:c0Certificate
IssuerCN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft CorporationNot Before22-08-2007 22:31Not After25-08-2012 07:00SubjectCN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USExtended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
61:0f:78:4d:00:00:00:00:00:03Certificate
IssuerCN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USNot Before23-08-2007 00:23Not After23-02-2009 00:33SubjectCN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USExtended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
KeyUsageContentCommitment
61:14:2c:a7:00:00:00:00:00:06Certificate
IssuerCN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USNot Before12-06-2007 23:54Not After13-06-2012 00:04SubjectCN=Microsoft Timestamping Service,OU=nCipher DSE ESN:27F4-D440-54F3,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageContentCommitment
61:14:2c:a7:00:00:00:00:00:06Certificate
IssuerCN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USNot Before12-06-2007 23:54Not After13-06-2012 00:04SubjectCN=Microsoft Timestamping Service,OU=nCipher DSE ESN:27F4-D440-54F3,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageContentCommitment
6a:0b:99:4f:c0:00:25:ab:11:db:45:1f:58:7a:67:a2Certificate
IssuerCN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft CorporationNot Before16-09-2006 01:04Not After15-09-2019 07:00SubjectCN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
e6:6b:93:35:a4:b0:80:6a:fb:98:bd:67:94:dc:81:9d:e7:2b:78:88Signer
Actual PE Digeste6:6b:93:35:a4:b0:80:6a:fb:98:bd:67:94:dc:81:9d:e7:2b:78:88Digest Algorithmsha1PE Digest MatchestrueHeaders
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
comctl32
ImageList_ReplaceIcon
ord17
ImageList_GetIconSize
ImageList_SetBkColor
ImageList_Draw
ImageList_Add
ImageList_Destroy
ImageList_Create
ImageList_AddMasked
InitCommonControlsEx
ImageList_LoadImageW
ws2_32
WSACleanup
WSAStartup
rpcrt4
UuidToStringW
RpcStringFreeW
UuidCreate
psapi
EnumProcessModules
EnumProcesses
GetModuleBaseNameW
version
VerQueryValueW
GetFileVersionInfoSizeW
GetFileVersionInfoW
kernel32
SetThreadPriority
WaitForSingleObject
ResetEvent
SetEvent
GetLastError
SetWaitableTimer
WaitNamedPipeW
MoveFileExW
GetCurrentProcess
SetNamedPipeHandleState
GetVersionExW
OutputDebugStringW
ReleaseMutex
CreateWaitableTimerW
CreateFileW
LeaveCriticalSection
lstrlenW
GetCurrentThreadId
EnterCriticalSection
InitializeCriticalSection
MultiByteToWideChar
SetLastError
GlobalAlloc
GetTimeFormatW
GlobalUnlock
FileTimeToSystemTime
GlobalLock
GlobalReAlloc
HeapAlloc
CreateThread
HeapFree
GetProcessHeap
WriteFile
ReadFile
GetOverlappedResult
WaitForMultipleObjects
GetUserDefaultLangID
ReadProcessMemory
InterlockedIncrement
GetExitCodeThread
LoadLibraryA
GetStringTypeA
SetFilePointer
GetCurrentProcessId
GetFileType
SetHandleCount
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetTimeZoneInformation
HeapSize
GetConsoleMode
GetConsoleCP
LCMapStringW
LCMapStringA
TlsFree
TlsSetValue
TlsAlloc
TlsGetValue
IsValidCodePage
GetOEMCP
CreateNamedPipeW
InterlockedDecrement
GetCPInfo
GetModuleFileNameA
GetStdHandle
ExitProcess
GetModuleHandleA
HeapCreate
HeapDestroy
VirtualAlloc
VirtualFree
DeleteCriticalSection
RtlUnwind
RaiseException
GetStartupInfoA
GetVersionExA
GetCommandLineA
GetSystemTimeAsFileTime
HeapReAlloc
ResumeThread
ExitThread
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
ConnectNamedPipe
lstrcmpW
GetCommandLineW
CreateEventW
GetTickCount
LocalFree
GetCurrentDirectoryW
OpenProcess
GetModuleHandleW
CloseHandle
lstrcmpiW
LoadLibraryW
FreeLibrary
QueryPerformanceFrequency
QueryPerformanceCounter
FlushFileBuffers
GetComputerNameW
GetProcAddress
Sleep
WideCharToMultiByte
LoadResource
LockResource
FindResourceW
GetTempPathW
FindResourceExW
GetTempFileNameW
DeleteFileW
SizeofResource
GetModuleFileNameW
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
GetStringTypeW
GetLocaleInfoA
SetStdHandle
GetACP
SetEndOfFile
CreateFileA
CompareStringA
CompareStringW
SetEnvironmentVariableA
ExpandEnvironmentStringsA
user32
CloseClipboard
EmptyClipboard
OpenClipboard
DrawFocusRect
RegisterClassExW
DrawFrameControl
OffsetRect
EndPaint
SystemParametersInfoW
SetRect
DrawTextW
GetDCEx
SetWindowsHookExW
CallNextHookEx
UnhookWindowsHookEx
BeginPaint
PtInRect
GetSystemMetrics
GetDesktopWindow
GetIconInfo
UpdateWindow
ClientToScreen
CreateDialogParamW
GetWindowLongW
AppendMenuW
DeferWindowPos
GetWindowTextW
InvalidateRgn
DestroyMenu
LoadImageW
GetMenuState
GetActiveWindow
DispatchMessageW
EndDeferWindowPos
CreateIconIndirect
GetSubMenu
CreateWindowExW
DestroyWindow
ScreenToClient
ShowWindow
LoadIconW
FindWindowW
DefWindowProcW
MessageBoxW
IsChild
GetClientRect
SetWindowPos
CheckMenuItem
CreatePopupMenu
GetWindow
GetClassNameW
SendMessageTimeoutW
IsZoomed
IsIconic
CallWindowProcW
TrackMouseEvent
GetDlgItemTextW
GetDlgCtrlID
GetMessageW
GetWindowThreadProcessId
ReleaseCapture
TranslateAcceleratorW
PostQuitMessage
SetDlgItemInt
SetCapture
BeginDeferWindowPos
GetDlgItemInt
GetFocus
GetMenu
LoadMenuW
IsWindow
SetFocus
IsDialogMessageW
RegisterClassW
DestroyAcceleratorTable
PostMessageW
DialogBoxParamW
GetCursorPos
GetDC
SetWindowLongW
SetWindowTextW
TrackPopupMenu
MessageBeep
RegisterWindowMessageW
SetMenuItemInfoW
WaitForInputIdle
KillTimer
SendMessageW
ReleaseDC
SetForegroundWindow
EnableMenuItem
TranslateMessage
LoadStringW
IsDlgButtonChecked
CheckDlgButton
LoadAcceleratorsW
SetTimer
GetMenuItemInfoW
InvalidateRect
GetSysColor
GetWindowRect
SetDlgItemTextW
GetParent
GetSysColorBrush
ChildWindowFromPoint
LoadCursorW
GetDlgItem
MoveWindow
EndDialog
SetCursor
GetDlgItemTextA
SetDlgItemTextA
FlashWindow
CheckRadioButton
DrawIconEx
EnableWindow
FillRect
SetClipboardData
DestroyIcon
UnregisterClassA
gdi32
GetTextExtentPoint32W
LineTo
MoveToEx
SetBkColor
GetDIBits
BitBlt
CreateSolidBrush
DeleteDC
CreateCompatibleDC
CreateDIBSection
DeleteObject
CreateCompatibleBitmap
GetTextMetricsW
SetBkMode
SelectObject
SetTextColor
GetObjectW
CreateFontIndirectW
ExtTextOutW
GetStockObject
comdlg32
GetOpenFileNameW
GetSaveFileNameW
FindTextW
ChooseFontW
ChooseColorW
advapi32
RegSetValueExW
RegDeleteValueW
RegCreateKeyExW
RegCloseKey
RegOpenKeyExW
RegSetValueW
RegCreateKeyW
RegQueryValueExW
ConvertSecurityDescriptorToStringSecurityDescriptorW
RegOpenKeyExA
RegQueryValueExA
OpenProcessToken
LookupAccountSidW
GetTokenInformation
RegOpenKeyW
ConvertSidToStringSidW
IsValidSid
shell32
SHGetFileInfoW
SHGetFolderPathW
ShellExecuteExW
Shell_NotifyIconW
CommandLineToArgvW
ShellExecuteW
shlwapi
SHDeleteKeyW
Sections
.text Size: 280KB - Virtual size: 279KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 64KB - Virtual size: 62KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 84KB - Virtual size: 1.9MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 584KB - Virtual size: 580KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
wintaylor2.1/Programs/tools/sysinternals/AccessEnum.exe.exe windows:4 windows x86
83787f51a42290311b4f8e08f0802867
Code Sign
47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4Certificate
IssuerCN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZANot Before04-12-2003 00:00Not After03-12-2013 23:59SubjectCN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=USExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageCertSign
KeyUsageCRLSign
0d:e9:2b:f0:d4:d8:29:88:18:32:05:09:5e:9a:76:88Certificate
IssuerCN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=USNot Before04-12-2003 00:00Not After03-12-2008 23:59SubjectCN=VeriSign Time Stamping Services Signer,O=VeriSign\, Inc.,C=USExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageContentCommitment
c1:00:8b:3c:3c:88:11:d1:3e:f6:63:ec:df:40Certificate
IssuerCN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft CorporationNot Before10-01-1997 07:00Not After31-12-2020 07:00SubjectCN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation6a:0b:99:4f:c0:00:1d:ab:11:da:c4:02:a1:66:27:baCertificate
IssuerCN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft CorporationNot Before04-04-2006 17:44Not After26-04-2012 07:00SubjectCN=Microsoft Code Signing PCA,OU=Copyright (c) 2000 Microsoft Corp.,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USExtended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageContentCommitment
KeyUsageCertSign
KeyUsageCRLSign
61:46:9e:cb:00:04:00:00:00:65Certificate
IssuerCN=Microsoft Code Signing PCA,OU=Copyright (c) 2000 Microsoft Corp.,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USNot Before04-04-2006 19:43Not After04-10-2007 19:53SubjectCN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USExtended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
KeyUsageContentCommitment
bc:e2:6e:0f:15:48:9a:32:45:f6:3b:ef:ad:6d:fc:65:37:59:76:36Signer
Actual PE Digestbc:e2:6e:0f:15:48:9a:32:45:f6:3b:ef:ad:6d:fc:65:37:59:76:36Digest Algorithmsha1PE Digest MatchestrueHeaders
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleHandleA
GetStartupInfoA
LocalAlloc
LocalFree
OpenProcess
CompareStringW
GetModuleHandleW
GetCurrentProcess
FindFirstFileW
FindNextFileW
FindClose
LoadLibraryW
GetProcAddress
GetLastError
CreateThread
FormatMessageW
SetThreadPriority
ResumeThread
DeleteFileW
GetFileAttributesW
Sleep
GetEnvironmentVariableW
InterlockedIncrement
CreateFileW
WriteFile
CloseHandle
InterlockedDecrement
lstrlenW
user32
GetSysColor
GetDlgItem
LoadCursorW
GetParent
GetSysColorBrush
SetCursor
InvalidateRect
ChildWindowFromPoint
CheckDlgButton
IsDlgButtonChecked
SetDlgItemTextW
EndPaint
DrawFrameControl
EnableWindow
DefWindowProcW
PostQuitMessage
DestroyMenu
TrackPopupMenu
SetMenuItemInfoW
GetWindowRect
MoveWindow
EndDialog
LoadIconW
SendMessageW
EnableMenuItem
GetSubMenu
LoadMenuW
GetFocus
ChildWindowFromPointEx
MapWindowPoints
SetWindowLongW
GetWindowLongW
SetWindowTextW
CheckMenuItem
GetMenuItemInfoW
GetMenu
CreateDialogParamW
GetDlgItemTextW
GetClientRect
BeginPaint
PtInRect
wsprintfW
IsWindowEnabled
DialogBoxParamW
SetClassLongW
PostMessageW
DispatchMessageW
TranslateMessage
IsDialogMessageW
TranslateAcceleratorW
GetMessageW
LoadAcceleratorsW
UpdateWindow
ShowWindow
RegisterClassExW
InflateRect
DialogBoxIndirectParamW
FindWindowW
WaitForInputIdle
SetForegroundWindow
FindWindowExW
SetFocus
GetWindowThreadProcessId
CreatePopupMenu
InsertMenuItemW
GetCursorPos
SetWindowPos
LoadImageW
ScreenToClient
GetClassNameW
DeferWindowPos
BeginDeferWindowPos
EnumChildWindows
EndDeferWindowPos
OffsetRect
UnionRect
GetPropW
CallWindowProcW
IsZoomed
GetSystemMetrics
DestroyIcon
MessageBoxW
SetPropW
gdi32
SetMapMode
StartDocW
StartPage
GetDeviceCaps
EndPage
EndDoc
SetBkMode
SetTextColor
SelectObject
GetStockObject
GetObjectW
CreateFontIndirectW
comdlg32
PrintDlgW
GetOpenFileNameW
GetSaveFileNameW
advapi32
GetSidLengthRequired
RegEnumKeyExW
RegGetKeySecurity
RegQueryValueExW
RegSetValueExW
RegCreateKeyExW
RegDeleteValueW
InitializeSid
LookupAccountNameW
GetTokenInformation
OpenProcessToken
RegCreateKeyW
AllocateAndInitializeSid
GetSidSubAuthority
GetSidSubAuthorityCount
GetSidIdentifierAuthority
IsValidSid
LookupAccountSidW
GetLengthSid
EqualSid
GetSecurityDescriptorGroup
GetSecurityDescriptorOwner
GetAce
GetSecurityDescriptorDacl
IsValidSecurityDescriptor
RegEnumKeyW
RegCloseKey
RegQueryInfoKeyW
GetFileSecurityW
RegOpenKeyExW
shell32
SHBrowseForFolderW
SHGetPathFromIDListW
SHGetMalloc
ShellExecuteW
SHGetFileInfoW
ShellExecuteExW
ole32
CoInitializeEx
oleaut32
VariantChangeType
SetErrorInfo
GetErrorInfo
VariantClear
CreateErrorInfo
VariantInit
VarDateFromStr
SysStringLen
SysAllocStringByteLen
SysAllocString
SysFreeString
comctl32
ord17
ImageList_Create
ImageList_ReplaceIcon
ImageList_SetBkColor
netapi32
NetUserGetLocalGroups
NetApiBufferFree
NetWkstaUserGetInfo
NetUserGetGroups
mpr
WNetGetConnectionW
msvcrt
_ftol
swprintf
isspace
wcschr
_controlfp
??1type_info@@UAE@XZ
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_acmdln
exit
_XcptFilter
_exit
_onexit
__dllonexit
_CxxThrowException
malloc
toupper
swscanf
vswprintf
_wfopen
fgetwc
fclose
strlen
strcpy
wcscmp
_purecall
_wcsnicmp
iswspace
wcsncpy
_except_handler3
memset
wcscat
free
wcslen
_EH_prolog
__CxxFrameHandler
??3@YAXPAX@Z
qsort
memcpy
_wcsdup
wcscpy
_wcsicmp
realloc
??2@YAPAXI@Z
Sections
.text Size: 28KB - Virtual size: 27KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 12KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 108KB - Virtual size: 110KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
wintaylor2.1/Programs/tools/sysinternals/AdExplorer.chm.chm
-
wintaylor2.1/Programs/tools/sysinternals/Autologon.exe.exe windows:5 windows x86
2ec718b32544905f036dec8d271126ce
Code Sign
2e:ab:11:dc:50:ff:5c:9d:cb:c0Certificate
IssuerCN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft CorporationNot Before22-08-2007 22:31Not After25-08-2012 07:00SubjectCN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USExtended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
61:01:cf:3e:00:00:00:00:00:0fCertificate
IssuerCN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USNot Before07-12-2009 22:40Not After07-03-2011 22:40SubjectCN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USExtended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
6a:0b:99:4f:c0:00:25:ab:11:db:45:1f:58:7a:67:a2Certificate
IssuerCN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft CorporationNot Before16-09-2006 01:04Not After15-09-2019 07:00SubjectCN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
61:06:94:2d:00:00:00:00:00:09Certificate
IssuerCN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USNot Before25-07-2008 19:02Not After25-07-2013 19:12SubjectCN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:7A82-688A-9F92,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageContentCommitment
81:6b:42:95:ff:3e:51:75:9d:ba:dc:d9:3c:f7:c8:1f:96:d7:94:38Signer
Actual PE Digest81:6b:42:95:ff:3e:51:75:9d:ba:dc:d9:3c:f7:c8:1f:96:d7:94:38Digest Algorithmsha1PE Digest MatchestrueHeaders
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LCMapStringW
MultiByteToWideChar
LCMapStringA
GetConsoleMode
GetConsoleCP
CreateFileA
GetStringTypeA
FreeLibrary
SetConsoleCtrlHandler
RtlUnwind
InitializeCriticalSectionAndSpinCount
GetSystemTimeAsFileTime
GetStringTypeW
GetTimeZoneInformation
GetTimeFormatA
GetDateFormatA
GetUserDefaultLCID
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale
HeapSize
GetLocaleInfoW
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
InterlockedExchange
CloseHandle
FlushFileBuffers
CompareStringA
CompareStringW
LocalAlloc
LoadLibraryA
LocalFree
GetModuleHandleA
GetCommandLineW
GetVersion
LoadLibraryW
GetProcAddress
SetFilePointer
GetCurrentProcess
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
HeapAlloc
GetLastError
HeapFree
GetCommandLineA
GetStartupInfoA
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
DeleteCriticalSection
LeaveCriticalSection
FatalAppExitA
EnterCriticalSection
VirtualFree
VirtualAlloc
HeapReAlloc
HeapCreate
HeapDestroy
GetModuleHandleW
Sleep
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameA
GetCPInfo
InterlockedIncrement
InterlockedDecrement
GetACP
GetOEMCP
IsValidCodePage
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
GetCurrentThreadId
GetCurrentThread
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetFileType
SetEnvironmentVariableA
user32
DialogBoxIndirectParamA
SetWindowTextA
LoadCursorA
InflateRect
SendMessageA
LoadIconW
RegisterClassExW
CreateDialogParamW
ShowWindow
GetMessageW
IsDialogMessageW
TranslateMessage
DispatchMessageW
DialogBoxParamW
GetDlgItemTextW
SetDlgItemTextW
GetWindowRect
OffsetRect
GetSystemMetrics
MoveWindow
GetDlgItem
LoadCursorW
GetSysColorBrush
GetSysColor
ChildWindowFromPoint
InvalidateRect
SetCursor
MessageBoxW
EndDialog
PostQuitMessage
DefWindowProcW
gdi32
GetDeviceCaps
SetMapMode
StartDocA
StartPage
EndPage
EndDoc
GetStockObject
GetObjectW
CreateFontIndirectW
SetBkMode
SelectObject
SetTextColor
comdlg32
PrintDlgA
advapi32
RegQueryValueExA
RegSetValueExA
OpenProcessToken
GetTokenInformation
LookupAccountSidW
RegQueryValueExW
RegOpenKeyExW
RegSetValueExW
LsaOpenPolicy
LsaStorePrivateData
RegDeleteValueW
LsaClose
RegCloseKey
RegCreateKeyA
shell32
CommandLineToArgvW
ShellExecuteW
Sections
.text Size: 95KB - Virtual size: 94KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 23KB - Virtual size: 22KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
wintaylor2.1/Programs/tools/sysinternals/Bginfo.exe.exe windows:5 windows x86
eff09afa7e526da6d25d5f8921e5e252
Code Sign
2e:ab:11:dc:50:ff:5c:9d:cb:c0Certificate
IssuerCN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft CorporationNot Before22-08-2007 22:31Not After25-08-2012 07:00SubjectCN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USExtended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
61:01:64:0f:00:00:00:00:00:0bCertificate
IssuerCN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USNot Before20-01-2009 01:58Not After20-03-2010 02:08SubjectCN=Microsoft Corporation,OU=AOC,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USExtended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
KeyUsageContentCommitment
61:49:7c:ed:00:00:00:00:00:05Certificate
IssuerCN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USNot Before16-09-2006 01:55Not After16-09-2011 02:05SubjectCN=Microsoft Timestamping Service,OU=nCipher DSE ESN:10D8-5847-CBF8,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageContentCommitment
6a:0b:99:4f:c0:00:25:ab:11:db:45:1f:58:7a:67:a2Certificate
IssuerCN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft CorporationNot Before16-09-2006 01:04Not After15-09-2019 07:00SubjectCN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
d8:a4:a2:d6:09:8c:cf:4a:1f:24:ab:74:07:06:9e:83:e6:07:9a:ffSigner
Actual PE Digestd8:a4:a2:d6:09:8c:cf:4a:1f:24:ab:74:07:06:9e:83:e6:07:9a:ffDigest Algorithmsha1PE Digest MatchestrueHeaders
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Imports
wsock32
WSAStartup
comctl32
CreateToolbarEx
ord17
version
GetFileVersionInfoSizeA
VerQueryValueA
GetFileVersionInfoA
snmpapi
SnmpSvcGetUptime
SnmpUtilOidCpy
SnmpUtilOidNCmp
kernel32
GlobalFlags
SetThreadPriority
ResumeThread
WaitForSingleObject
SetEvent
SuspendThread
CreateEventA
InterlockedExchange
GetLocaleInfoA
EnumResourceLanguagesA
ConvertDefaultLocale
GetCurrentProcessId
GetCPInfo
GetOEMCP
GetAtomNameA
GetThreadLocale
GetModuleHandleW
GetPrivateProfileIntA
lstrlenW
GetProcessHeap
HeapFree
MultiByteToWideChar
SystemTimeToTzSpecificLocalTime
CompareStringW
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
GetLocaleInfoW
SetStdHandle
GetConsoleMode
GetConsoleCP
IsValidLocale
EnumSystemLocalesA
GetUserDefaultLCID
GetStringTypeW
GetStringTypeA
InitializeCriticalSectionAndSpinCount
SetConsoleCtrlHandler
GetSystemTimeAsFileTime
DuplicateHandle
FreeEnvironmentStringsW
FreeEnvironmentStringsA
GetFileType
SetHandleCount
GetTimeZoneInformation
GetStdHandle
LCMapStringW
LCMapStringA
HeapDestroy
SetFilePointer
CreateFileMappingA
MapViewOfFile
UnmapViewOfFile
VirtualQuery
VirtualProtect
GetCommandLineA
SetEnvironmentVariableA
DeleteFileA
GetFileAttributesA
FreeLibrary
GetEnvironmentStrings
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCommandLineW
GetModuleHandleA
GetFullPathNameA
ExitProcess
GetModuleFileNameA
WaitForMultipleObjects
GetExitCodeProcess
TerminateProcess
OpenProcess
GetVersionExA
WideCharToMultiByte
CreateDirectoryA
GlobalAlloc
GlobalLock
GlobalUnlock
GlobalFree
MulDiv
GetComputerNameA
LoadLibraryA
GetProcAddress
GlobalMemoryStatus
FileTimeToLocalFileTime
FileTimeToSystemTime
QueryPerformanceCounter
QueryPerformanceFrequency
GetTickCount
SystemTimeToFileTime
GetLogicalDriveStringsA
GetDriveTypeA
SetErrorMode
GetVolumeInformationA
GetDiskFreeSpaceA
FindFirstFileA
FindClose
GetFileSize
ReadFile
GetEnvironmentVariableA
GetDateFormatA
GetTimeFormatA
GetWindowsDirectoryA
FindResourceA
LoadResource
SizeofResource
LockResource
ExpandEnvironmentStringsA
GetSystemInfo
GetCurrentThread
SetThreadAffinityMask
Sleep
GetCurrentProcess
GetProcessAffinityMask
GetLocalTime
CreateFileA
GetLastError
WriteFile
SetEndOfFile
CloseHandle
InterlockedDecrement
FormatMessageA
lstrlenA
LocalAlloc
GetSystemDirectoryA
LocalFree
InterlockedIncrement
WritePrivateProfileStringA
GetPrivateProfileStringA
GetCurrentDirectoryA
MoveFileA
GetStringTypeExA
lstrcmpiA
FlushFileBuffers
LockFile
UnlockFile
GetEnvironmentStringsW
HeapCreate
FatalAppExitA
IsValidCodePage
GetACP
CreateThread
ExitThread
HeapSize
GetStartupInfoA
VirtualAlloc
VirtualFree
RaiseException
HeapAlloc
HeapReAlloc
RtlUnwind
lstrcmpA
GetModuleFileNameW
TlsFree
DeleteCriticalSection
LocalReAlloc
TlsSetValue
TlsAlloc
InitializeCriticalSection
GlobalHandle
GlobalReAlloc
EnterCriticalSection
TlsGetValue
LeaveCriticalSection
CopyFileA
GlobalSize
FreeResource
GetCurrentThreadId
GlobalGetAtomNameA
GetFileTime
GetFileSizeEx
SetFileAttributesA
SetFileTime
LocalFileTimeToFileTime
GetFileAttributesExA
GetShortPathNameA
GlobalAddAtomA
GlobalFindAtomA
GlobalDeleteAtom
CompareStringA
lstrcmpW
SetLastError
user32
FillRect
SubtractRect
InflateRect
GetSysColor
SystemParametersInfoA
DrawEdge
DrawIconEx
SetCapture
RegisterClipboardFormatA
EnableMenuItem
CheckMenuItem
OpenClipboard
EmptyClipboard
SetClipboardData
CloseClipboard
RegisterClassExA
SetWindowPlacement
IntersectRect
LoadAcceleratorsA
GetMessageA
GetActiveWindow
TranslateAcceleratorA
IsDialogMessageA
TranslateMessage
DispatchMessageA
GetWindowPlacement
DestroyWindow
GetMenu
GetMenuItemInfoA
SetMenuItemInfoA
GetWindow
GetSystemMetrics
GetDlgCtrlID
CopyRect
SetScrollInfo
GetScrollInfo
EqualRect
RegisterClassA
GetClassInfoA
GetClassInfoExA
GetMenuItemCount
GetMenuItemID
ShowScrollBar
GetScrollPos
SetScrollPos
GetScrollRange
SetScrollRange
SetMenu
GetKeyState
TrackPopupMenuEx
ScrollWindow
PeekMessageA
GetMessagePos
GetMessageTime
UnhookWindowsHookEx
GetTopWindow
SetActiveWindow
GetLastActivePopup
GetForegroundWindow
IsWindow
GetFocus
RemovePropA
GetClassLongA
CallNextHookEx
SetWindowsHookExA
GetCapture
IsChild
WinHelpA
SendDlgItemMessageA
RegisterWindowMessageA
GetMenuState
ModifyMenuA
LoadBitmapA
GetMenuCheckMarkDimensions
SetMenuItemBitmaps
RemoveMenu
InsertMenuA
AppendMenuA
GetMenuStringA
GetDlgItemInt
SetDlgItemInt
IsWindowEnabled
ScrollWindowEx
DestroyMenu
ClientToScreen
SetSysColors
ValidateRect
TabbedTextOutA
DrawTextExA
GrayStringA
GetWindowDC
GetWindowThreadProcessId
SetRectEmpty
UnregisterClassA
ShowOwnedPopups
DeleteMenu
DestroyIcon
CharUpperA
BringWindowToTop
CreatePopupMenu
InsertMenuItemA
ReleaseCapture
GetMenuBarInfo
ReuseDDElParam
UnpackDDElParam
SetRect
WindowFromPoint
GetKeyNameTextA
MapVirtualKeyA
IsRectEmpty
GetSystemMenu
SetParent
GetNextDlgTabItem
CreateDialogIndirectParamA
GetDCEx
LockWindowUpdate
GetDialogBaseUnits
SetTimer
LoadStringA
IsIconic
CheckMenuRadioItem
CreateDialogParamA
GetWindowTextLengthA
KillTimer
GetWindowTextA
IsZoomed
PtInRect
DrawFrameControl
DefWindowProcA
IsWindowVisible
GetCursorPos
LoadMenuA
GetSubMenu
SetMenuDefaultItem
SetForegroundWindow
TrackPopupMenu
AdjustWindowRectEx
SetWindowPos
UpdateWindow
ShowWindow
EnableWindow
CheckRadioButton
BeginPaint
EndPaint
DialogBoxParamA
GetDlgItemTextA
IsDlgButtonChecked
CheckDlgButton
LoadIconA
PostMessageA
ChildWindowFromPoint
SetFocus
MoveWindow
CreateWindowExA
FrameRect
MapWindowPoints
CallWindowProcA
SetDlgItemTextA
MessageBoxA
PostQuitMessage
SetWindowLongA
SetPropA
GetPropA
BeginDeferWindowPos
EnumChildWindows
EndDeferWindowPos
GetClientRect
UnionRect
GetParent
GetClassNameA
GetWindowLongA
InvalidateRect
DeferWindowPos
GetWindowRect
ScreenToClient
DialogBoxIndirectParamA
GetDlgItem
OffsetRect
GetSysColorBrush
GetUserObjectInformationA
GetProcessWindowStation
EndDialog
LoadCursorA
LoadImageA
GetDC
ReleaseDC
GetDesktopWindow
PostThreadMessageA
SendMessageA
SetWindowTextA
DrawTextA
SetCursor
gdi32
PatBlt
CreateFontA
ExtTextOutA
DPtoLP
CreateBitmap
GetMapMode
SetBkColor
EnumFontsA
CreateHalftonePalette
GetDIBColorTable
UpdateColors
SetTextColor
GetStockObject
CreateFontIndirectA
GetPixel
StartDocA
StartPage
EndPage
EndDoc
CreatePen
MoveToEx
LineTo
SetPixel
CreatePalette
GetPaletteEntries
SetDIBColorTable
UnrealizeObject
SelectPalette
RealizePalette
CreateSolidBrush
SetStretchBltMode
SetBrushOrgEx
StretchBlt
BitBlt
SetBkMode
DeleteDC
GetSystemPaletteEntries
GetNearestColor
GdiFlush
GetObjectA
GetDIBits
CreateCompatibleBitmap
CreateCompatibleDC
SelectObject
DeleteObject
CreateDIBSection
GetDeviceCaps
GetDCOrgEx
GetClipBox
CopyMetaFileA
CreateDCA
GetTextExtentPoint32A
SaveDC
RestoreDC
SetPolyFillMode
SetROP2
SetGraphicsMode
SetWorldTransform
ModifyWorldTransform
ExcludeClipRect
IntersectClipRect
OffsetClipRgn
SetTextAlign
SetTextJustification
SetTextCharacterExtra
SetMapperFlags
SetArcDirection
SetColorAdjustment
SelectClipRgn
GetClipRgn
CreateRectRgn
SetMapMode
GetTextMetricsA
GetBkColor
CombineRgn
SetRectRgn
CreateRectRgnIndirect
StretchDIBits
GetCharWidthA
CreateHatchBrush
ExtCreatePen
PlayMetaFile
EnumMetaFile
GetObjectType
PlayMetaFileRecord
CreatePatternBrush
CreateDIBPatternBrushPt
ExtSelectClipRgn
PolyBezierTo
PolylineTo
PolyDraw
ArcTo
GetCurrentPositionEx
ScaleWindowExtEx
SetWindowExtEx
OffsetWindowOrgEx
SetWindowOrgEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
Escape
TextOutA
RectVisible
PtVisible
GetWindowExtEx
GetViewportExtEx
SelectClipPath
comdlg32
GetOpenFileNameA
ChooseColorA
PrintDlgA
GetSaveFileNameA
CommDlgExtendedError
GetFileTitleA
advapi32
RegSetValueA
RegCloseKey
RegQueryValueExA
RegOpenKeyExA
RegEnumKeyA
RegCreateKeyA
RegDeleteKeyA
RegEnumValueA
RegCreateKeyExA
StartServiceCtrlDispatcherA
OpenSCManagerA
CreateServiceA
OpenServiceA
StartServiceA
DeleteService
QueryServiceStatus
CloseServiceHandle
RegisterServiceCtrlHandlerA
SetServiceStatus
ImpersonateLoggedOnUser
CreateProcessAsUserA
RevertToSelf
RegOpenKeyA
AllocateAndInitializeSid
OpenProcessToken
GetTokenInformation
EqualSid
FreeSid
RegDeleteValueA
RegSetValueExA
GetUserNameA
RegEnumKeyExA
RegQueryValueA
shell32
DragQueryFileA
SHChangeNotify
Shell_NotifyIconA
ShellExecuteA
SHAppBarMessage
ExtractIconA
SHGetFileInfoA
DragFinish
ole32
CLSIDFromString
CoInitializeEx
WriteClassStg
WriteFmtUserTypeStg
SetConvertStg
CoTaskMemFree
CoDisconnectObject
StringFromGUID2
OleDuplicateData
CoTaskMemAlloc
ReleaseStgMedium
CoInitialize
CoUninitialize
OleRun
CoCreateInstance
CreateStreamOnHGlobal
StgCreateDocfileOnILockBytes
CreateILockBytesOnHGlobal
OleInitialize
ReadFmtUserTypeStg
ReadClassStg
StringFromCLSID
CoTreatAsClass
CreateBindCtx
OleRegGetUserType
oleaut32
CreateErrorInfo
SetErrorInfo
GetErrorInfo
SafeArrayGetLBound
LoadRegTypeLi
SafeArrayGetElement
VariantChangeType
SysAllocString
SysStringLen
OleLoadPicture
SystemTimeToVariantTime
VariantClear
VariantInit
VariantCopy
SysFreeString
SysStringByteLen
SysAllocStringByteLen
SysAllocStringLen
LoadTypeLi
SafeArrayUnaccessData
SafeArrayAccessData
SafeArrayGetElemsize
SafeArrayGetDim
SafeArrayCreate
SafeArrayRedim
SafeArrayAllocData
SafeArrayAllocDescriptor
SafeArrayCopy
SafeArrayPtrOfIndex
SafeArrayPutElement
SafeArrayLock
SafeArrayUnlock
SafeArrayDestroy
SafeArrayDestroyData
SafeArrayDestroyDescriptor
VariantTimeToSystemTime
SysReAllocStringLen
VarDateFromStr
VarBstrFromCy
VarBstrFromDec
VarDecFromStr
VarCyFromStr
VarBstrFromDate
RegisterTypeLi
SafeArrayGetUBound
shlwapi
PathFindFileNameA
PathStripToRootA
PathIsUNCA
PathRemoveFileSpecW
PathRemoveExtensionA
PathFindExtensionA
oleacc
LresultFromObject
AccessibleObjectFromWindow
CreateStdAccessibleObject
winspool.drv
OpenPrinterA
ClosePrinter
DocumentPropertiesA
Sections
.text Size: 524KB - Virtual size: 523KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 136KB - Virtual size: 136KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 13KB - Virtual size: 47KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 144KB - Virtual size: 144KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
wintaylor2.1/Programs/tools/sysinternals/Cacheset.exe.exe windows:4 windows x86
439a3d1d985661e145989e94cd516315
Code Sign
47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4Certificate
IssuerCN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZANot Before04-12-2003 00:00Not After03-12-2013 23:59SubjectCN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=USExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageCertSign
KeyUsageCRLSign
0d:e9:2b:f0:d4:d8:29:88:18:32:05:09:5e:9a:76:88Certificate
IssuerCN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=USNot Before04-12-2003 00:00Not After03-12-2008 23:59SubjectCN=VeriSign Time Stamping Services Signer,O=VeriSign\, Inc.,C=USExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageContentCommitment
c1:00:8b:3c:3c:88:11:d1:3e:f6:63:ec:df:40Certificate
IssuerCN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft CorporationNot Before10-01-1997 07:00Not After31-12-2020 07:00SubjectCN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation6a:0b:99:4f:c0:00:1d:ab:11:da:c4:02:a1:66:27:baCertificate
IssuerCN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft CorporationNot Before04-04-2006 17:44Not After26-04-2012 07:00SubjectCN=Microsoft Code Signing PCA,OU=Copyright (c) 2000 Microsoft Corp.,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USExtended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageContentCommitment
KeyUsageCertSign
KeyUsageCRLSign
61:46:9e:cb:00:04:00:00:00:65Certificate
IssuerCN=Microsoft Code Signing PCA,OU=Copyright (c) 2000 Microsoft Corp.,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USNot Before04-04-2006 19:43Not After04-10-2007 19:53SubjectCN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USExtended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
KeyUsageContentCommitment
70:62:b4:28:63:9e:25:d9:bc:20:7e:b0:2e:f0:eb:33:2a:ba:50:87Signer
Actual PE Digest70:62:b4:28:63:9e:25:d9:bc:20:7e:b0:2e:f0:eb:33:2a:ba:50:87Digest Algorithmsha1PE Digest MatchestrueHeaders
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetLastError
GetStringTypeW
GetStringTypeA
MultiByteToWideChar
WriteFile
RtlUnwind
GetFileType
GetStdHandle
SetHandleCount
GetEnvironmentStringsW
SetFilePointer
WideCharToMultiByte
LCMapStringA
FreeEnvironmentStringsA
GetModuleFileNameA
UnhandledExceptionFilter
TerminateProcess
HeapReAlloc
VirtualAlloc
VirtualFree
HeapCreate
GetCPInfo
GetACP
GetOEMCP
ReadFile
FlushFileBuffers
GetEnvironmentStrings
SetStdHandle
GetProcAddress
HeapDestroy
ExitProcess
LocalAlloc
LoadLibraryA
LocalFree
GetVersion
GetCurrentProcess
CloseHandle
GetModuleHandleA
FreeEnvironmentStringsW
HeapAlloc
HeapFree
GetStartupInfoA
GetCommandLineA
LCMapStringW
user32
MoveWindow
SetCursor
InflateRect
GetDlgItem
GetSysColorBrush
SetWindowTextA
SendMessageA
DialogBoxIndirectParamA
LoadIconA
LoadCursorA
RegisterClassExA
CreateWindowExA
CreateDialogParamA
ShowWindow
GetMessageA
TranslateMessage
DispatchMessageA
IsDialogMessageA
wsprintfA
SetDlgItemTextA
SetTimer
GetDlgItemTextA
DefWindowProcA
MessageBoxA
EndDialog
PostQuitMessage
GetWindowRect
OffsetRect
GetSystemMetrics
gdi32
SetMapMode
StartDocA
StartPage
EndPage
EndDoc
GetDeviceCaps
comctl32
ord17
comdlg32
PrintDlgA
advapi32
RegCreateKeyA
RegQueryValueExA
RegSetValueExA
RegCloseKey
OpenProcessToken
LookupPrivilegeValueA
AdjustTokenPrivileges
Sections
.text Size: 24KB - Virtual size: 23KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 108KB - Virtual size: 112KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
wintaylor2.1/Programs/tools/sysinternals/Clockres.exe.exe windows:5 windows x86
e9754b764a5673b45205a33e4429f966
Code Sign
c1:00:8b:3c:3c:88:11:d1:3e:f6:63:ec:df:40Certificate
IssuerCN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft CorporationNot Before10-01-1997 07:00Not After31-12-2020 07:00SubjectCN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation2e:ab:11:dc:50:ff:5c:9d:cb:c0Certificate
IssuerCN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft CorporationNot Before22-08-2007 22:31Not After25-08-2012 07:00SubjectCN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USExtended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
61:01:64:0f:00:00:00:00:00:0bCertificate
IssuerCN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USNot Before20-01-2009 01:58Not After20-03-2010 02:08SubjectCN=Microsoft Corporation,OU=AOC,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USExtended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
KeyUsageContentCommitment
61:49:7c:ed:00:00:00:00:00:05Certificate
IssuerCN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USNot Before16-09-2006 01:55Not After16-09-2011 02:05SubjectCN=Microsoft Timestamping Service,OU=nCipher DSE ESN:10D8-5847-CBF8,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageContentCommitment
6a:0b:99:4f:c0:00:25:ab:11:db:45:1f:58:7a:67:a2Certificate
IssuerCN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft CorporationNot Before16-09-2006 01:04Not After15-09-2019 07:00SubjectCN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
8e:d2:08:b3:8d:e8:3f:41:99:af:c8:32:d0:29:d0:6c:2e:82:81:cfSigner
Actual PE Digest8e:d2:08:b3:8d:e8:3f:41:99:af:c8:32:d0:29:d0:6c:2e:82:81:cfDigest Algorithmsha1PE Digest MatchestrueHeaders
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
SetStdHandle
WriteConsoleA
HeapSize
GetCommandLineW
GetConsoleOutputCP
WriteConsoleW
CloseHandle
CreateFileA
CompareStringA
CompareStringW
LocalAlloc
LocalFree
GetModuleHandleA
LoadLibraryA
GetLocaleInfoW
GetProcAddress
HeapAlloc
GetLastError
HeapFree
GetCommandLineA
EnterCriticalSection
LeaveCriticalSection
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetCPInfo
InterlockedIncrement
InterlockedDecrement
GetACP
GetOEMCP
IsValidCodePage
GetModuleHandleW
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
GetCurrentThreadId
GetCurrentThread
LCMapStringA
WideCharToMultiByte
MultiByteToWideChar
LCMapStringW
DeleteCriticalSection
FatalAppExitA
VirtualFree
VirtualAlloc
HeapReAlloc
HeapCreate
HeapDestroy
Sleep
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetFileType
GetStartupInfoA
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
RtlUnwind
GetStringTypeA
GetStringTypeW
GetTimeFormatA
GetDateFormatA
GetUserDefaultLCID
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale
InitializeCriticalSectionAndSpinCount
SetConsoleCtrlHandler
FreeLibrary
InterlockedExchange
SetFilePointer
GetConsoleCP
GetConsoleMode
FlushFileBuffers
GetTimeZoneInformation
SetEnvironmentVariableA
user32
DialogBoxIndirectParamA
GetDlgItem
GetSysColorBrush
EndDialog
SetWindowTextA
LoadCursorA
SetCursor
InflateRect
SendMessageA
gdi32
GetDeviceCaps
SetMapMode
StartDocA
StartPage
EndPage
EndDoc
comdlg32
PrintDlgA
advapi32
RegQueryValueExA
RegSetValueExA
RegCloseKey
RegCreateKeyA
Sections
.text Size: 112KB - Virtual size: 112KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 21KB - Virtual size: 21KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 5KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
wintaylor2.1/Programs/tools/sysinternals/Contig.exe.exe windows:5 windows x86
93379fc1e3bd97a7a99b999eca193fc7
Code Sign
c1:00:8b:3c:3c:88:11:d1:3e:f6:63:ec:df:40Certificate
IssuerCN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft CorporationNot Before10-01-1997 07:00Not After31-12-2020 07:00SubjectCN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporationc1:00:8b:3c:3c:88:11:d1:3e:f6:63:ec:df:40Certificate
IssuerCN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft CorporationNot Before10-01-1997 07:00Not After31-12-2020 07:00SubjectCN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation2e:ab:11:dc:50:ff:5c:9d:cb:c0Certificate
IssuerCN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft CorporationNot Before22-08-2007 22:31Not After25-08-2012 07:00SubjectCN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USExtended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
61:0f:78:4d:00:00:00:00:00:03Certificate
IssuerCN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USNot Before23-08-2007 00:23Not After23-02-2009 00:33SubjectCN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USExtended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
KeyUsageContentCommitment
61:47:52:ba:00:00:00:00:00:04Certificate
IssuerCN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USNot Before16-09-2006 01:53Not After16-09-2011 02:03SubjectCN=Microsoft Timestamping Service,OU=nCipher DSE ESN:D8A9-CFCC-579C,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageContentCommitment
61:49:7c:ed:00:00:00:00:00:05Certificate
IssuerCN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USNot Before16-09-2006 01:55Not After16-09-2011 02:05SubjectCN=Microsoft Timestamping Service,OU=nCipher DSE ESN:10D8-5847-CBF8,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageContentCommitment
6a:0b:99:4f:c0:00:25:ab:11:db:45:1f:58:7a:67:a2Certificate
IssuerCN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft CorporationNot Before16-09-2006 01:04Not After15-09-2019 07:00SubjectCN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
40:81:1d:54:00:cb:e1:bf:6a:79:55:01:86:64:3a:41:88:b7:81:e8Signer
Actual PE Digest40:81:1d:54:00:cb:e1:bf:6a:79:55:01:86:64:3a:41:88:b7:81:e8Digest Algorithmsha1PE Digest MatchestrueHeaders
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
DeleteFileW
SetFilePointer
GetProcAddress
GetModuleHandleW
GetVersionExW
GetConsoleScreenBufferInfo
GetStdHandle
GetModuleHandleA
LoadLibraryA
LocalAlloc
WriteFile
CompareStringW
CompareStringA
ReadFile
CreateFileA
GetTimeZoneInformation
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
SetStdHandle
IsValidLocale
GetFullPathNameW
GetCurrentDirectoryW
FindFirstFileW
FindNextFileW
FindClose
CloseHandle
GetFileSize
FlushFileBuffers
WaitForSingleObject
CreateFileW
GetLastError
FormatMessageW
GetCommandLineW
LocalFree
HeapAlloc
HeapFree
Sleep
ExitProcess
EnterCriticalSection
LeaveCriticalSection
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
DeleteCriticalSection
FatalAppExitA
VirtualFree
VirtualAlloc
HeapReAlloc
HeapCreate
HeapDestroy
GetModuleFileNameA
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
GetCurrentThread
SetConsoleCtrlHandler
FreeLibrary
InterlockedExchange
InitializeCriticalSectionAndSpinCount
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
GetModuleFileNameW
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetFileType
GetStartupInfoA
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
MultiByteToWideChar
RtlUnwind
WideCharToMultiByte
GetConsoleCP
GetConsoleMode
HeapSize
GetLocaleInfoW
GetLocaleInfoA
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
GetTimeFormatA
GetDateFormatA
GetUserDefaultLCID
EnumSystemLocalesA
SetEnvironmentVariableA
user32
DialogBoxIndirectParamA
GetDlgItem
GetSysColorBrush
EndDialog
SetWindowTextA
LoadCursorA
SetCursor
InflateRect
SendMessageA
gdi32
SetMapMode
StartDocA
StartPage
EndPage
EndDoc
GetDeviceCaps
comdlg32
PrintDlgA
advapi32
RegQueryValueExA
RegSetValueExA
RegCloseKey
RegCreateKeyA
Sections
.text Size: 151KB - Virtual size: 150KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 26KB - Virtual size: 25KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 5KB - Virtual size: 208KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
wintaylor2.1/Programs/tools/sysinternals/Coreinfo.exe.exe windows:5 windows x86
bbc5274925e305e2123a42a3c7119c67
Code Sign
2e:ab:11:dc:50:ff:5c:9d:cb:c0Certificate
IssuerCN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft CorporationNot Before22-08-2007 22:31Not After25-08-2012 07:00SubjectCN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USExtended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
61:01:cf:3e:00:00:00:00:00:0fCertificate
IssuerCN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USNot Before07-12-2009 22:40Not After07-03-2011 22:40SubjectCN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USExtended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
6a:0b:99:4f:c0:00:25:ab:11:db:45:1f:58:7a:67:a2Certificate
IssuerCN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft CorporationNot Before16-09-2006 01:04Not After15-09-2019 07:00SubjectCN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
61:05:a2:30:00:00:00:00:00:08Certificate
IssuerCN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USNot Before25-07-2008 19:01Not After25-07-2013 19:11SubjectCN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:85D3-305C-5BCF,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageContentCommitment
5b:41:27:89:04:68:5d:2e:f7:0d:bf:d7:bc:96:5b:2e:fa:6d:8f:a3Signer
Actual PE Digest5b:41:27:89:04:68:5d:2e:f7:0d:bf:d7:bc:96:5b:2e:fa:6d:8f:a3Digest Algorithmsha1PE Digest MatchestrueHeaders
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
version
GetFileVersionInfoSizeW
VerQueryValueW
GetFileVersionInfoW
kernel32
SetThreadPriority
GetStdHandle
GetLastError
GetProcAddress
GetNumaHighestNodeNumber
GetProcessWorkingSetSize
VirtualLock
SetProcessWorkingSetSize
GetSystemInfo
SetThreadAffinityMask
CloseHandle
GetVersion
DeleteFileW
LocalFree
ExpandEnvironmentStringsW
FindResourceW
GetModuleFileNameW
SizeofResource
CreateFileW
SetLastError
LockResource
LocalAlloc
ReadFile
GetProcessHeap
SetEndOfFile
CreateFileA
HeapSize
GetLocaleInfoA
GetFileAttributesW
LoadLibraryW
WriteFile
FormatMessageA
GetCurrentThread
WaitForSingleObject
GetModuleHandleW
GetCurrentProcess
QueryPerformanceCounter
CreateProcessW
GetNumaNodeProcessorMask
GetCommandLineW
LoadResource
LeaveCriticalSection
HeapAlloc
EnterCriticalSection
GetModuleHandleA
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
Sleep
ExitProcess
HeapFree
RaiseException
RtlUnwind
DeleteCriticalSection
VirtualFree
VirtualAlloc
HeapReAlloc
HeapCreate
GetModuleFileNameA
SetHandleCount
GetFileType
GetStartupInfoA
WideCharToMultiByte
GetConsoleCP
GetConsoleMode
FlushFileBuffers
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
GetCurrentThreadId
InterlockedDecrement
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
LCMapStringA
MultiByteToWideChar
LCMapStringW
LoadLibraryA
InitializeCriticalSectionAndSpinCount
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
SetFilePointer
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
SetStdHandle
GetStringTypeA
GetStringTypeW
user32
SetCursor
DialogBoxIndirectParamW
LoadCursorW
InflateRect
GetDlgItem
EndDialog
GetSysColorBrush
SendMessageW
SetWindowTextW
gdi32
StartPage
GetDeviceCaps
SetMapMode
StartDocW
EndDoc
EndPage
comdlg32
PrintDlgW
advapi32
RegSetValueExW
RegCloseKey
AdjustTokenPrivileges
LookupPrivilegeValueW
RegCreateKeyW
OpenProcessToken
RegQueryValueExW
Sections
.text Size: 87KB - Virtual size: 87KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 28KB - Virtual size: 27KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 5KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 493KB - Virtual size: 493KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 9KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
wintaylor2.1/Programs/tools/sysinternals/DISKMON.HLP
-
wintaylor2.1/Programs/tools/sysinternals/Dbgview.exe.exe windows:5 windows x86
6c426e7c6e3e940e5e5b74af51c68765
Code Sign
c1:00:8b:3c:3c:88:11:d1:3e:f6:63:ec:df:40Certificate
IssuerCN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft CorporationNot Before10-01-1997 07:00Not After31-12-2020 07:00SubjectCN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation2e:ab:11:dc:50:ff:5c:9d:cb:c0Certificate
IssuerCN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft CorporationNot Before22-08-2007 22:31Not After25-08-2012 07:00SubjectCN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USExtended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
61:0f:78:4d:00:00:00:00:00:03Certificate
IssuerCN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USNot Before23-08-2007 00:23Not After23-02-2009 00:33SubjectCN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USExtended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
KeyUsageContentCommitment
61:47:52:ba:00:00:00:00:00:04Certificate
IssuerCN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USNot Before16-09-2006 01:53Not After16-09-2011 02:03SubjectCN=Microsoft Timestamping Service,OU=nCipher DSE ESN:D8A9-CFCC-579C,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageContentCommitment
6a:0b:99:4f:c0:00:25:ab:11:db:45:1f:58:7a:67:a2Certificate
IssuerCN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft CorporationNot Before16-09-2006 01:04Not After15-09-2019 07:00SubjectCN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
9c:a4:fa:87:ac:06:3a:b1:86:f3:2f:b5:59:19:55:e9:c2:eb:b1:4dSigner
Actual PE Digest9c:a4:fa:87:ac:06:3a:b1:86:f3:2f:b5:59:19:55:e9:c2:eb:b1:4dDigest Algorithmsha1PE Digest MatchestrueHeaders
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
ws2_32
htonl
bind
getsockname
listen
accept
inet_ntoa
WSAStartup
inet_addr
gethostbyaddr
htons
gethostbyname
socket
connect
WSAGetLastError
closesocket
mpr
WNetAddConnection2A
WNetCancelConnection2A
comctl32
ord17
CreateToolbarEx
kernel32
lstrlenA
GetTimeFormatA
InitializeCriticalSection
GetCurrentProcessId
GetComputerNameA
GetFullPathNameA
GetCommandLineA
GetVersion
GetOverlappedResult
WriteFile
ResetEvent
WaitForMultipleObjects
ReadFile
LockResource
SizeofResource
LoadResource
FindResourceA
LocalAlloc
GetCommandLineW
RaiseException
GetTickCount
GlobalReAlloc
GlobalUnlock
GlobalLock
GlobalAlloc
lstrcpyA
lstrcatA
HeapFree
HeapAlloc
GetProcessHeap
GetDateFormatA
DosDateTimeToFileTime
FileTimeToSystemTime
FileTimeToLocalFileTime
GetFileSize
GlobalFree
WriteFileEx
QueueUserAPC
SleepEx
ExpandEnvironmentStringsA
SetFilePointer
FindFirstFileA
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
FlushFileBuffers
GetFileType
SetHandleCount
GetConsoleMode
GetConsoleCP
GetModuleFileNameA
GetStdHandle
ExitProcess
Sleep
HeapReAlloc
VirtualAlloc
FatalAppExitA
DeleteCriticalSection
VirtualFree
HeapDestroy
HeapCreate
LCMapStringW
MultiByteToWideChar
WideCharToMultiByte
LCMapStringA
GetCurrentThread
TlsFree
TlsSetValue
TlsAlloc
TlsGetValue
GetModuleHandleW
IsValidCodePage
GetOEMCP
GetACP
InterlockedDecrement
GetCPInfo
RtlUnwind
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
GetStartupInfoA
CreateThread
ResumeThread
ExitThread
SearchPathA
FindClose
GlobalMemoryStatus
LoadLibraryA
FreeLibrary
CreateFileA
QueryPerformanceFrequency
GetLocaleInfoA
GetCurrentDirectoryA
GetSystemDirectoryA
DeviceIoControl
GetCurrentThreadId
WaitForSingleObject
TerminateThread
SetLastError
EnterCriticalSection
LeaveCriticalSection
OpenMutexA
CreateMutexA
CreateFileMappingA
MapViewOfFile
CreateEventA
UnmapViewOfFile
GetSystemTime
SystemTimeToFileTime
QueryPerformanceCounter
SetEvent
InterlockedIncrement
CloseHandle
lstrcpynA
GetLastError
FormatMessageA
LocalFree
GetCurrentProcess
GetModuleHandleA
GetProcAddress
GetEnvironmentVariableA
DeleteFileA
GetStringTypeA
GetStringTypeW
GetUserDefaultLCID
EnumSystemLocalesA
IsValidLocale
InitializeCriticalSectionAndSpinCount
SetConsoleCtrlHandler
InterlockedExchange
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
GetTimeZoneInformation
HeapSize
GetLocaleInfoW
SetEndOfFile
CompareStringA
CompareStringW
GetSystemTimeAsFileTime
SetEnvironmentVariableA
user32
BeginPaint
DrawTextA
EndPaint
GetFocus
ClientToScreen
ScreenToClient
GetDialogBaseUnits
DrawFocusRect
GetParent
IsDlgButtonChecked
PostMessageA
CheckRadioButton
DialogBoxIndirectParamA
InflateRect
RegisterClassExA
FindWindowA
LoadAcceleratorsA
RegisterWindowMessageA
MsgWaitForMultipleObjects
PeekMessageA
TranslateAcceleratorA
IsWindow
IsDialogMessageA
TranslateMessage
DispatchMessageA
GetMessageA
RegisterClassA
LoadBitmapA
SetTimer
LoadStringA
MoveWindow
DefWindowProcA
KillTimer
GetClientRect
InvalidateRgn
CreateDialogParamA
CloseClipboard
SetClipboardData
EmptyClipboard
OpenClipboard
CallWindowProcA
GetWindowThreadProcessId
SetWindowLongA
GetCursorPos
DestroyWindow
SetForegroundWindow
TrackPopupMenu
CreateWindowExA
UpdateWindow
SetWindowPos
SetDlgItemTextA
SendDlgItemMessageA
AttachThreadInput
AppendMenuA
SetMenuItemBitmaps
DialogBoxParamA
SetFocus
GetDlgItemTextA
SetCapture
ReleaseCapture
EnableMenuItem
DeleteMenu
GetWindowRect
IsIconic
IsZoomed
SendMessageA
GetSystemMetrics
LoadIconA
GetWindowTextA
ShowWindow
GetDC
GetMenuCheckMarkDimensions
ReleaseDC
PostQuitMessage
SetWindowTextA
EndDialog
GetDlgItem
LoadCursorA
GetSysColorBrush
GetSysColor
ChildWindowFromPoint
InvalidateRect
SetCursor
GetSubMenu
GetMenuItemCount
InsertMenuItemA
MessageBoxA
GetMenu
CheckMenuItem
EnableWindow
CheckDlgButton
ModifyMenuA
gdi32
CreateFontA
GetTextExtentPointA
TextOutA
AbortDoc
GetTextExtentPoint32A
ExtTextOutA
SetAbortProc
SetBkColor
GetDeviceCaps
SetMapMode
StartDocA
StartPage
EndPage
EndDoc
GetTextMetricsA
DeleteObject
SelectObject
SetTextColor
SetBkMode
CreateFontIndirectA
GetObjectA
GetStockObject
DeleteDC
StretchBlt
CreateCompatibleBitmap
CreateSolidBrush
CreateCompatibleDC
comdlg32
GetSaveFileNameA
GetOpenFileNameA
ChooseColorA
FindTextA
ChooseFontA
PrintDlgA
advapi32
OpenSCManagerA
DeleteService
ControlService
OpenServiceA
StartServiceA
QueryServiceStatus
CreateServiceA
CloseServiceHandle
OpenProcessToken
LookupPrivilegeValueA
AdjustTokenPrivileges
InitializeSecurityDescriptor
SetSecurityDescriptorDacl
RegOpenKeyA
RegQueryValueExA
RegCreateKeyA
RegDeleteValueA
RegSetValueExA
RegCloseKey
RegDeleteKeyA
RegOpenKeyExA
shell32
ShellExecuteExA
SHGetMalloc
SHGetSpecialFolderLocation
SHBrowseForFolderA
Shell_NotifyIconA
ShellExecuteA
Sections
.text Size: 201KB - Virtual size: 200KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 35KB - Virtual size: 35KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 6KB - Virtual size: 94KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 200KB - Virtual size: 199KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
wintaylor2.1/Programs/tools/sysinternals/Desktops.exe.exe windows:5 windows x86
c8681af63c4b3bc7041fe674efea6dd2
Code Sign
2e:ab:11:dc:50:ff:5c:9d:cb:c0Certificate
IssuerCN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft CorporationNot Before22-08-2007 22:31Not After25-08-2012 07:00SubjectCN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USExtended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
61:01:cf:3e:00:00:00:00:00:0fCertificate
IssuerCN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USNot Before07-12-2009 22:40Not After07-03-2011 22:40SubjectCN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USExtended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
6a:0b:99:4f:c0:00:25:ab:11:db:45:1f:58:7a:67:a2Certificate
IssuerCN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft CorporationNot Before16-09-2006 01:04Not After15-09-2019 07:00SubjectCN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
61:05:a2:30:00:00:00:00:00:08Certificate
IssuerCN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USNot Before25-07-2008 19:01Not After25-07-2013 19:11SubjectCN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:85D3-305C-5BCF,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageContentCommitment
29:ec:a7:83:5f:13:86:b7:82:1b:50:f3:8a:9a:2f:12:83:5e:76:51Signer
Actual PE Digest29:ec:a7:83:5f:13:86:b7:82:1b:50:f3:8a:9a:2f:12:83:5e:76:51Digest Algorithmsha1PE Digest MatchestrueHeaders
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetStringTypeA
LCMapStringW
LCMapStringA
LoadLibraryA
RtlUnwind
InitializeCriticalSectionAndSpinCount
MultiByteToWideChar
GetConsoleMode
GetConsoleCP
SetFilePointer
GetSystemTimeAsFileTime
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
GetFileType
SetHandleCount
GetEnvironmentStringsW
GetStringTypeW
GetCommandLineW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetModuleFileNameA
GetStdHandle
WriteFile
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
HeapSize
ExitProcess
InterlockedDecrement
GetCurrentThreadId
SetLastError
InterlockedIncrement
TlsFree
TlsSetValue
TlsAlloc
TlsGetValue
GetLocaleInfoA
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
CreateFileA
FlushFileBuffers
WideCharToMultiByte
LocalAlloc
LocalFree
CreateProcessW
GetVersion
CloseHandle
CreateEventW
GetProcAddress
GetLastError
GetModuleFileNameW
FormatMessageW
Sleep
LoadLibraryW
GetModuleHandleW
GetSystemWindowsDirectoryW
FreeEnvironmentStringsW
HeapReAlloc
VirtualAlloc
EnterCriticalSection
HeapFree
ExitThread
ResumeThread
CreateThread
HeapAlloc
GetCommandLineA
GetStartupInfoA
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
HeapCreate
VirtualFree
DeleteCriticalSection
LeaveCriticalSection
GetModuleHandleA
user32
DialogBoxIndirectParamW
InflateRect
SetWindowTextW
CreateDesktopW
DestroyWindow
SetCursor
TranslateAcceleratorW
GetWindowRect
SetActiveWindow
GetMessageW
PostQuitMessage
TrackPopupMenu
RegisterWindowMessageW
PostMessageW
GetKeyState
SetForegroundWindow
DialogBoxParamW
LoadCursorW
CallNextHookEx
OpenDesktopW
FindWindowW
GetClientRect
SetFocus
GetDC
TranslateMessage
LoadAcceleratorsW
ChildWindowFromPoint
LoadIconW
OffsetRect
InvalidateRect
BringWindowToTop
SystemParametersInfoW
ReleaseDC
GetDlgItem
EndDialog
GetSysColor
SetWindowPos
GetCursorPos
CheckDlgButton
ShowWindow
CreatePopupMenu
GetSysColorBrush
IsDlgButtonChecked
SwitchDesktop
SetThreadDesktop
CreateWindowExW
InsertMenuW
SetWindowsHookExW
MessageBoxW
RegisterClassW
GetSystemMetrics
SendMessageW
UnregisterHotKey
DestroyMenu
RegisterHotKey
DefWindowProcW
MoveWindow
DispatchMessageW
GetWindowPlacement
gdi32
StartPage
GetDeviceCaps
SetMapMode
StartDocW
EndDoc
BitBlt
SetTextColor
DeleteDC
CreateFontIndirectW
StretchBlt
SetBkMode
DeleteObject
SelectObject
CreateCompatibleDC
CreateCompatibleBitmap
GetObjectW
SetStretchBltMode
GetStockObject
EndPage
comdlg32
PrintDlgW
advapi32
RegCreateKeyW
RegSetValueExW
RegCloseKey
GetSecurityDescriptorSacl
RegOpenKeyExW
SetSecurityInfo
ConvertStringSecurityDescriptorToSecurityDescriptorW
RegDeleteValueW
RegOpenKeyW
RegQueryValueExW
RegCreateKeyExW
shell32
ShellExecuteW
Shell_NotifyIconW
Sections
.text Size: 64KB - Virtual size: 64KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 22KB - Virtual size: 21KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 5KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 9KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
wintaylor2.1/Programs/tools/sysinternals/Disk2vhd.chm.chm
-
wintaylor2.1/Programs/tools/sysinternals/DiskView.exe.exe windows:5 windows x86
84e4b934930a4a3de022531392bdce11
Code Sign
2e:ab:11:dc:50:ff:5c:9d:cb:c0Certificate
IssuerCN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft CorporationNot Before22-08-2007 22:31Not After25-08-2012 07:00SubjectCN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USExtended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
61:01:cf:3e:00:00:00:00:00:0fCertificate
IssuerCN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USNot Before07-12-2009 22:40Not After07-03-2011 22:40SubjectCN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USExtended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
6a:0b:99:4f:c0:00:25:ab:11:db:45:1f:58:7a:67:a2Certificate
IssuerCN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft CorporationNot Before16-09-2006 01:04Not After15-09-2019 07:00SubjectCN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
61:05:a2:30:00:00:00:00:00:08Certificate
IssuerCN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USNot Before25-07-2008 19:01Not After25-07-2013 19:11SubjectCN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:85D3-305C-5BCF,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageContentCommitment
48:4a:a2:5b:b7:a4:dd:04:56:31:a4:6d:8d:ad:ff:fc:4e:10:cb:1dSigner
Actual PE Digest48:4a:a2:5b:b7:a4:dd:04:56:31:a4:6d:8d:ad:ff:fc:4e:10:cb:1dDigest Algorithmsha1PE Digest MatchestrueHeaders
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
comctl32
ord17
ImageList_SetBkColor
ImageList_ReplaceIcon
ImageList_Create
kernel32
WideCharToMultiByte
MultiByteToWideChar
GetDriveTypeW
GetLogicalDriveStringsW
GetVersionExW
SetErrorMode
LocalFree
LocalAlloc
HeapAlloc
RtlUnwind
GetCurrentProcess
FindResourceW
LoadResource
lstrlenW
SetEnvironmentVariableA
CompareStringW
CompareStringA
GetLocaleInfoW
GetTimeZoneInformation
ReadFile
GetProcessHeap
SetEndOfFile
CreateFileA
LoadLibraryA
InterlockedExchange
FreeLibrary
SetConsoleCtrlHandler
IsValidLocale
EnumSystemLocalesA
GetLocaleInfoA
GetUserDefaultLCID
GetDateFormatA
GetTimeFormatA
GetStringTypeW
GetStringTypeA
LCMapStringA
InitializeCriticalSectionAndSpinCount
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
SizeofResource
FlushFileBuffers
SetStdHandle
GetSystemTimeAsFileTime
GetDiskFreeSpaceW
GetTickCount
QueryPerformanceCounter
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
LCMapStringW
GetModuleHandleA
HeapSize
GetModuleFileNameA
ExitProcess
Sleep
GetFileType
GetStdHandle
SetHandleCount
VirtualAlloc
VirtualFree
HeapDestroy
HeapCreate
FatalAppExitA
GetCurrentThread
GetCurrentThreadId
SetLastError
TlsFree
TlsSetValue
TlsAlloc
TlsGetValue
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
GetConsoleMode
GetConsoleCP
WriteFile
GetStartupInfoA
GetCommandLineA
CreateThread
ResumeThread
ExitThread
HeapFree
RaiseException
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
LockResource
DeviceIoControl
FindNextFileW
CreateFileW
InterlockedDecrement
FormatMessageW
GetLastError
FindFirstFileW
FindClose
LoadLibraryW
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSection
InterlockedIncrement
GetModuleFileNameW
GetFileAttributesW
ExpandEnvironmentStringsW
GetCommandLineW
CreateProcessW
DeleteFileW
GetExitCodeProcess
WaitForSingleObject
CloseHandle
GetModuleHandleW
GetCurrentProcessId
GetProcAddress
SetFilePointer
HeapReAlloc
user32
SendMessageW
ShowWindow
CreatePopupMenu
InsertMenuItemW
GetCursorPos
TrackPopupMenu
LoadImageW
DialogBoxIndirectParamW
SetWindowTextW
SetCursor
InflateRect
LoadIconW
LoadAcceleratorsW
GetMessageW
TranslateAcceleratorW
TranslateMessage
IsDialogMessageW
DispatchMessageW
PostQuitMessage
CheckDlgButton
CreateDialogParamW
GetMenu
CheckMenuItem
GetDlgItemTextW
DialogBoxParamW
LoadCursorW
RegisterClassExW
CreateWindowExW
CallWindowProcW
IsZoomed
PtInRect
DrawFrameControl
GetWindowTextW
GetSysColorBrush
SetWindowLongW
ChildWindowFromPoint
SetCapture
ReleaseCapture
EnableWindow
SetTimer
KillTimer
SetForegroundWindow
DestroyWindow
SetFocus
GetDlgItemInt
SetDlgItemInt
SetDlgItemTextW
GetScrollInfo
IsWindowEnabled
DrawTextW
SetScrollInfo
GetFocus
DrawFocusRect
ScrollWindowEx
UpdateWindow
DefWindowProcW
BeginPaint
GetDlgItem
MapWindowPoints
FillRect
EndPaint
EndDialog
SetPropW
GetPropW
BeginDeferWindowPos
EnumChildWindows
EndDeferWindowPos
GetClientRect
GetSystemMetrics
UnionRect
GetParent
GetClassNameW
GetWindowLongW
InvalidateRect
DeferWindowPos
GetWindowRect
ScreenToClient
GetSysColor
OffsetRect
GetDC
ReleaseDC
MessageBoxW
gdi32
SetMapMode
StartDocW
StartPage
EndPage
EndDoc
GetObjectW
CreateFontIndirectW
GetStockObject
PolyPolygon
SetTextColor
SetBkColor
SetBkMode
CreateCompatibleBitmap
BitBlt
CreateDIBSection
CreateCompatibleDC
SelectObject
DeleteDC
DeleteObject
CreateSolidBrush
GetDeviceCaps
comdlg32
GetOpenFileNameW
GetSaveFileNameW
PrintDlgW
advapi32
RegCloseKey
RegCreateKeyW
RegQueryValueExW
RegSetValueExW
shell32
CommandLineToArgvW
ShellExecuteW
ole32
CreateBindCtx
oleaut32
VariantChangeType
VariantClear
VariantInit
SetErrorInfo
GetErrorInfo
CreateErrorInfo
SysAllocStringByteLen
SysAllocString
SysStringLen
SysFreeString
Sections
.text Size: 201KB - Virtual size: 201KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 35KB - Virtual size: 34KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 5KB - Virtual size: 1.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 318KB - Virtual size: 318KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
wintaylor2.1/Programs/tools/sysinternals/Diskmon.exe.exe windows:4 windows x86
934543d446cf80015b5041258a567c79
Code Sign
47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4Certificate
IssuerCN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZANot Before04-12-2003 00:00Not After03-12-2013 23:59SubjectCN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=USExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageCertSign
KeyUsageCRLSign
0d:e9:2b:f0:d4:d8:29:88:18:32:05:09:5e:9a:76:88Certificate
IssuerCN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=USNot Before04-12-2003 00:00Not After03-12-2008 23:59SubjectCN=VeriSign Time Stamping Services Signer,O=VeriSign\, Inc.,C=USExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageContentCommitment
c1:00:8b:3c:3c:88:11:d1:3e:f6:63:ec:df:40Certificate
IssuerCN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft CorporationNot Before10-01-1997 07:00Not After31-12-2020 07:00SubjectCN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation6a:0b:99:4f:c0:00:1d:ab:11:da:c4:02:a1:66:27:baCertificate
IssuerCN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft CorporationNot Before04-04-2006 17:44Not After26-04-2012 07:00SubjectCN=Microsoft Code Signing PCA,OU=Copyright (c) 2000 Microsoft Corp.,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USExtended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageContentCommitment
KeyUsageCertSign
KeyUsageCRLSign
61:46:9e:cb:00:04:00:00:00:65Certificate
IssuerCN=Microsoft Code Signing PCA,OU=Copyright (c) 2000 Microsoft Corp.,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USNot Before04-04-2006 19:43Not After04-10-2007 19:53SubjectCN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USExtended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
KeyUsageContentCommitment
d9:1d:76:f1:e5:4d:32:a7:63:bf:f3:f9:f1:5e:29:49:6f:c0:d0:c4Signer
Actual PE Digestd9:1d:76:f1:e5:4d:32:a7:63:bf:f3:f9:f1:5e:29:49:6f:c0:d0:c4Digest Algorithmsha1PE Digest MatchestrueHeaders
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
comctl32
ord17
CreateToolbarEx
version
VerQueryValueA
GetFileVersionInfoA
GetFileVersionInfoSizeA
kernel32
GetLastError
GetUserDefaultLangID
SetLastError
LeaveCriticalSection
EnterCriticalSection
lstrlenW
CreateFileA
InitializeCriticalSection
WideCharToMultiByte
MultiByteToWideChar
lstrcpynA
LocalAlloc
SetEndOfFile
ReadFile
GetOEMCP
GetACP
GetCPInfo
LCMapStringW
LCMapStringA
GetStringTypeW
GetStringTypeA
FlushFileBuffers
SetStdHandle
SetFilePointer
Sleep
GetEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsW
FreeEnvironmentStringsA
GetModuleFileNameA
UnhandledExceptionFilter
TerminateProcess
GetFileType
GetStdHandle
SetHandleCount
TlsGetValue
TlsAlloc
GetCurrentThreadId
HeapReAlloc
VirtualAlloc
DeleteCriticalSection
VirtualFree
HeapCreate
HeapDestroy
ExitProcess
GetCommandLineA
GetStartupInfoA
InterlockedIncrement
InterlockedDecrement
ExitThread
TlsSetValue
CreateThread
ResumeThread
RtlUnwind
OpenProcess
ReadProcessMemory
CloseHandle
GetModuleHandleA
GetProcessHeap
HeapAlloc
lstrcpyA
lstrlenA
HeapFree
lstrcatA
GlobalAlloc
GlobalLock
GlobalUnlock
GlobalReAlloc
GetTickCount
GetVersion
GetCurrentProcess
GetSystemTime
SystemTimeToFileTime
LoadLibraryA
GetProcAddress
FreeLibrary
FileTimeToLocalFileTime
FileTimeToSystemTime
GetTimeFormatA
FormatMessageA
LocalFree
WriteFile
user32
OpenClipboard
EmptyClipboard
SetClipboardData
CloseClipboard
GetFocus
DrawTextA
LoadCursorA
InvalidateRect
GetDlgItemTextA
EnableWindow
IsWindowEnabled
SetDlgItemTextA
GetSysColorBrush
ChildWindowFromPoint
GetSysColor
ClientToScreen
GetDlgItem
MoveWindow
GetWindowRect
GetParent
SetCursor
CallWindowProcA
GetClientRect
DrawIconEx
SetWindowLongA
SetWindowTextA
DestroyIcon
IsZoomed
DialogBoxIndirectParamA
InflateRect
ScreenToClient
CheckDlgButton
IsDlgButtonChecked
CheckRadioButton
RegisterWindowMessageA
LoadAcceleratorsA
GetMessageA
TranslateAcceleratorA
IsDialogMessageA
TranslateMessage
DispatchMessageA
CreateWindowExA
UpdateWindow
LoadIconA
RegisterClassA
SetCapture
DialogBoxParamA
ReleaseCapture
SetTimer
SetFocus
GetMenu
CheckMenuItem
GetCursorPos
LoadMenuA
GetSubMenu
TrackPopupMenu
DestroyMenu
EnableMenuItem
LoadStringA
GetDC
GetSystemMetrics
ReleaseDC
WinHelpA
SetWindowPos
PostMessageA
ShowWindow
InvalidateRgn
KillTimer
DefWindowProcA
SendMessageA
DestroyWindow
MessageBoxA
PostQuitMessage
EndDialog
IsIconic
gdi32
EndDoc
EndPage
ExtTextOutA
StartDocA
SetMapMode
GetDeviceCaps
GetTextExtentPoint32A
SetBkColor
SelectObject
SetTextColor
SetBkMode
CreateFontIndirectA
GetObjectA
GetStockObject
DeleteObject
CreateCompatibleDC
GetTextMetricsA
StartPage
CreateSolidBrush
comdlg32
GetSaveFileNameA
FindTextA
ChooseColorA
ChooseFontA
PrintDlgA
advapi32
LookupPrivilegeValueA
OpenProcessToken
RegCloseKey
LookupAccountSidW
RegOpenKeyA
RegSetValueExA
RegCreateKeyA
RegQueryValueExA
GetTokenInformation
LookupAccountSidA
AdjustTokenPrivileges
shell32
SHGetFileInfoA
Shell_NotifyIconA
ShellExecuteA
ole32
CoCreateInstance
CoInitialize
CoSetProxyBlanket
oleaut32
SafeArrayGetUBound
SafeArrayAccessData
SafeArrayUnaccessData
SafeArrayDestroy
VariantChangeType
SafeArrayGetElement
VariantInit
VariantClear
SysAllocString
SysFreeString
SafeArrayGetLBound
Sections
.text Size: 76KB - Virtual size: 72KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 112KB - Virtual size: 134KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
wintaylor2.1/Programs/tools/sysinternals/Eula.txt
-
wintaylor2.1/Programs/tools/sysinternals/Filemon.exe.exe windows:4 windows x86
ceb5e4fa753de75ba7b5f2ac6c88ecd0
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
comctl32
ord17
CreateToolbarEx
kernel32
GetCurrentProcessId
GetCurrentDirectoryA
DeleteFileA
GetModuleFileNameA
GetSystemDirectoryA
QueryPerformanceFrequency
CreateProcessA
GetCommandLineA
ExpandEnvironmentStringsA
GetFileAttributesA
GetVersion
GetTickCount
GlobalReAlloc
GlobalUnlock
GlobalLock
GlobalAlloc
lstrcatA
HeapFree
lstrlenA
lstrcpyA
HeapAlloc
GetProcessHeap
ReadProcessMemory
OpenProcess
Sleep
GetVersionExA
GetUserDefaultLangID
SetEndOfFile
ReadFile
GetStringTypeW
GetStringTypeA
CreateEventA
LCMapStringA
MultiByteToWideChar
InterlockedIncrement
InterlockedDecrement
SetFilePointer
FlushFileBuffers
SetStdHandle
GetFileType
GetStdHandle
SetHandleCount
GetEnvironmentStringsW
GetEnvironmentStrings
WideCharToMultiByte
FreeEnvironmentStringsW
FreeEnvironmentStringsA
GetOEMCP
GetACP
GetCPInfo
UnhandledExceptionFilter
TerminateProcess
TlsGetValue
TlsAlloc
GetCurrentThreadId
HeapReAlloc
VirtualAlloc
DeleteCriticalSection
VirtualFree
HeapCreate
HeapDestroy
InitializeCriticalSection
WriteFile
LeaveCriticalSection
EnterCriticalSection
ExitProcess
GetStartupInfoA
RtlUnwind
ExitThread
TlsSetValue
CreateThread
ResumeThread
GetLogicalDrives
GetDriveTypeA
FileTimeToLocalFileTime
FileTimeToSystemTime
DosDateTimeToFileTime
GetTimeFormatA
SetEvent
LoadLibraryA
FreeLibrary
WaitForSingleObject
WaitForMultipleObjects
DeviceIoControl
FormatMessageA
LocalFree
GetModuleHandleA
GetProcAddress
SetLastError
CreateFileA
FindResourceA
LoadResource
SizeofResource
LockResource
GetCurrentProcess
GetLastError
CloseHandle
LCMapStringW
user32
SetWindowLongA
SetCursor
InvalidateRect
ChildWindowFromPoint
GetSysColor
GetSysColorBrush
LoadCursorA
DrawIconEx
GetClientRect
SetWindowTextA
SetCapture
OpenClipboard
EmptyClipboard
SetClipboardData
CloseClipboard
DrawTextA
GetFocus
GetSystemMetrics
ClientToScreen
IsZoomed
IsIconic
CallWindowProcA
GetDlgItem
MoveWindow
GetWindowRect
GetParent
ScreenToClient
GetDlgItemTextA
IsWindowEnabled
SetDlgItemTextA
CheckDlgButton
EnableWindow
IsDlgButtonChecked
CheckRadioButton
RegisterWindowMessageA
LoadAcceleratorsA
GetMessageA
TranslateAcceleratorA
IsWindow
IsDialogMessageA
TranslateMessage
DispatchMessageA
CreateWindowExA
ShowWindow
UpdateWindow
LoadIconA
RegisterClassA
DialogBoxParamA
GetMenu
EnableMenuItem
CreateMenu
InsertMenuA
SetFocus
BeginPaint
EndPaint
GetCursorPos
LoadMenuA
GetSubMenu
TrackPopupMenu
DestroyMenu
LoadStringA
WinHelpA
GetDC
ReleaseDC
InvalidateRgn
SetWindowPos
ReleaseCapture
PostMessageA
DefWindowProcA
DestroyWindow
CheckMenuItem
SendMessageA
MessageBoxA
PostQuitMessage
EndDialog
SetTimer
gdi32
GetTextExtentPoint32A
SetBkColor
CreateSolidBrush
SelectObject
SetTextColor
SetBkMode
CreateFontIndirectA
GetObjectA
GetStockObject
GetTextMetricsA
DeleteObject
ExtTextOutA
CreateCompatibleDC
comdlg32
GetOpenFileNameA
FindTextA
ChooseColorA
ChooseFontA
GetSaveFileNameA
advapi32
LookupPrivilegeValueA
OpenProcessToken
RegOpenKeyA
RegQueryValueExA
GetTokenInformation
LookupAccountSidA
RegCreateKeyA
RegSetValueExA
RegCloseKey
RegDeleteKeyA
AdjustTokenPrivileges
shell32
ShellExecuteExA
ShellExecuteA
SHGetFileInfoA
version
GetFileVersionInfoSizeA
GetFileVersionInfoA
VerQueryValueA
Sections
.text Size: 68KB - Virtual size: 65KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 108KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 344KB - Virtual size: 341KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
wintaylor2.1/Programs/tools/sysinternals/LoadOrd.exe.exe windows:4 windows x86
7e882ca50ab916f7ae8f8efa861ef033
Code Sign
47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4Certificate
IssuerCN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZANot Before04-12-2003 00:00Not After03-12-2013 23:59SubjectCN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=USExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageCertSign
KeyUsageCRLSign
0d:e9:2b:f0:d4:d8:29:88:18:32:05:09:5e:9a:76:88Certificate
IssuerCN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=USNot Before04-12-2003 00:00Not After03-12-2008 23:59SubjectCN=VeriSign Time Stamping Services Signer,O=VeriSign\, Inc.,C=USExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageContentCommitment
c1:00:8b:3c:3c:88:11:d1:3e:f6:63:ec:df:40Certificate
IssuerCN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft CorporationNot Before10-01-1997 07:00Not After31-12-2020 07:00SubjectCN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation6a:0b:99:4f:c0:00:1d:ab:11:da:c4:02:a1:66:27:baCertificate
IssuerCN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft CorporationNot Before04-04-2006 17:44Not After26-04-2012 07:00SubjectCN=Microsoft Code Signing PCA,OU=Copyright (c) 2000 Microsoft Corp.,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USExtended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageContentCommitment
KeyUsageCertSign
KeyUsageCRLSign
61:46:9e:cb:00:04:00:00:00:65Certificate
IssuerCN=Microsoft Code Signing PCA,OU=Copyright (c) 2000 Microsoft Corp.,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USNot Before04-04-2006 19:43Not After04-10-2007 19:53SubjectCN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USExtended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
KeyUsageContentCommitment
2d:a4:06:d8:20:68:53:e6:36:1a:15:07:37:5a:98:61:b7:0b:22:b7Signer
Actual PE Digest2d:a4:06:d8:20:68:53:e6:36:1a:15:07:37:5a:98:61:b7:0b:22:b7Digest Algorithmsha1PE Digest MatchestrueHeaders
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
SetHandleCount
GetEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsW
FreeEnvironmentStringsA
GetModuleFileNameA
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
HeapReAlloc
VirtualAlloc
VirtualFree
HeapCreate
GetStdHandle
GetOEMCP
GetACP
GetCPInfo
LCMapStringW
LCMapStringA
MultiByteToWideChar
WideCharToMultiByte
ExitProcess
GetVersion
GetCommandLineA
GetStartupInfoA
HeapFree
HeapAlloc
GetFileType
RtlUnwind
WriteFile
GetStringTypeA
GetStringTypeW
SetFilePointer
GetProcAddress
SetStdHandle
GlobalUnlock
FlushFileBuffers
GetModuleHandleA
LocalAlloc
LoadLibraryA
LocalFree
GetLastError
Sleep
GlobalAlloc
GlobalLock
HeapDestroy
CloseHandle
user32
MoveWindow
SetCursor
InflateRect
GetSysColorBrush
EndDialog
SetWindowTextA
DialogBoxIndirectParamA
LoadIconA
LoadCursorA
RegisterClassExA
UpdateWindow
LoadAcceleratorsA
GetMessageA
TranslateAcceleratorA
TranslateMessage
DispatchMessageA
PostQuitMessage
CreateWindowExA
GetDlgItem
EnableWindow
MessageBoxA
DefWindowProcA
GetClientRect
BeginDeferWindowPos
DeferWindowPos
EndDeferWindowPos
FindWindowA
WaitForInputIdle
ShowWindow
SetForegroundWindow
FindWindowExA
SetFocus
OpenClipboard
EmptyClipboard
SetClipboardData
CloseClipboard
SendMessageA
gdi32
StartDocA
EndPage
EndDoc
GetStockObject
CreateDCA
GetDeviceCaps
DeleteDC
SetMapMode
StartPage
comdlg32
PrintDlgA
advapi32
RegSetValueExA
RegOpenKeyExA
RegEnumKeyA
RegQueryValueExA
RegCloseKey
RegCreateKeyA
shell32
ShellExecuteExA
comctl32
ord6
ord17
Sections
.text Size: 24KB - Virtual size: 23KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 108KB - Virtual size: 140KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
wintaylor2.1/Programs/tools/sysinternals/LogonSessions.exe.exe windows:5 windows x86
26752a7e5bac44f6a48daade8c725c7d
Code Sign
2e:ab:11:dc:50:ff:5c:9d:cb:c0Certificate
IssuerCN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft CorporationNot Before22-08-2007 22:31Not After25-08-2012 07:00SubjectCN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USExtended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
61:01:cf:3e:00:00:00:00:00:0fCertificate
IssuerCN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USNot Before07-12-2009 22:40Not After07-03-2011 22:40SubjectCN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USExtended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
6a:0b:99:4f:c0:00:25:ab:11:db:45:1f:58:7a:67:a2Certificate
IssuerCN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft CorporationNot Before16-09-2006 01:04Not After15-09-2019 07:00SubjectCN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
61:06:94:2d:00:00:00:00:00:09Certificate
IssuerCN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USNot Before25-07-2008 19:02Not After25-07-2013 19:12SubjectCN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:7A82-688A-9F92,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageContentCommitment
9f:77:30:15:d7:f8:46:d6:6a:18:9d:1e:1c:0d:97:5a:1a:81:37:d8Signer
Actual PE Digest9f:77:30:15:d7:f8:46:d6:6a:18:9d:1e:1c:0d:97:5a:1a:81:37:d8Digest Algorithmsha1PE Digest MatchestrueHeaders
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
secur32
LsaFreeReturnBuffer
LsaEnumerateLogonSessions
LsaGetLogonSessionData
kernel32
DeviceIoControl
Process32NextW
OpenProcess
Process32FirstW
CreateToolhelp32Snapshot
InterlockedDecrement
FileTimeToSystemTime
FileTimeToLocalFileTime
GetSystemDirectoryW
InterlockedIncrement
SetEnvironmentVariableA
CompareStringW
CompareStringA
GetTimeZoneInformation
GetLocaleInfoW
ReadFile
GetProcessHeap
SetEndOfFile
CreateFileA
HeapSize
GetCommandLineW
LocalAlloc
LoadLibraryW
LocalFree
GetModuleHandleW
SetLastError
GetProcAddress
FindResourceW
CreateFileW
LoadResource
SizeofResource
LockResource
GetCurrentProcess
GetLastError
CloseHandle
lstrlenW
GetLocaleInfoA
EnumSystemLocalesA
TerminateProcess
GetUserDefaultLCID
GetDateFormatA
GetTimeFormatA
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
LoadLibraryA
IsValidLocale
HeapAlloc
HeapFree
HeapReAlloc
RtlUnwind
EnterCriticalSection
LeaveCriticalSection
InterlockedExchange
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
WriteFile
WideCharToMultiByte
GetConsoleCP
GetConsoleMode
DeleteCriticalSection
FatalAppExitA
VirtualFree
VirtualAlloc
HeapCreate
HeapDestroy
Sleep
ExitProcess
GetStdHandle
GetModuleFileNameA
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
GetCurrentThreadId
GetCurrentThread
RaiseException
GetModuleHandleA
SetHandleCount
GetFileType
GetStartupInfoA
GetModuleFileNameW
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
SetStdHandle
FlushFileBuffers
SetFilePointer
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
MultiByteToWideChar
InitializeCriticalSectionAndSpinCount
SetConsoleCtrlHandler
FreeLibrary
user32
EndDialog
SetWindowTextW
GetSysColorBrush
SetCursor
InflateRect
SendMessageW
GetDlgItem
DialogBoxIndirectParamW
LoadCursorW
gdi32
SetMapMode
StartDocW
StartPage
EndPage
EndDoc
GetDeviceCaps
comdlg32
PrintDlgW
advapi32
GetTokenInformation
RegQueryValueExW
RegCreateKeyW
RegSetValueExW
RegCloseKey
RegDeleteKeyW
OpenProcessToken
LookupPrivilegeValueW
AdjustTokenPrivileges
ConvertSidToStringSidW
oleaut32
CreateErrorInfo
SystemTimeToVariantTime
SysAllocStringByteLen
VariantClear
VariantChangeType
VariantInit
SysFreeString
SysStringLen
SysAllocString
GetErrorInfo
SetErrorInfo
Sections
.text Size: 171KB - Virtual size: 171KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 29KB - Virtual size: 29KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 5KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 42KB - Virtual size: 41KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
wintaylor2.1/Programs/tools/sysinternals/PORTMON.CNT
-
wintaylor2.1/Programs/tools/sysinternals/PORTMON.HLP
-
wintaylor2.1/Programs/tools/sysinternals/ProcFeatures.exe.exe windows:4 windows x86
83143505850db450c1611bd911c8dc28
Code Sign
47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4Certificate
IssuerCN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZANot Before04-12-2003 00:00Not After03-12-2013 23:59SubjectCN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=USExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageCertSign
KeyUsageCRLSign
0d:e9:2b:f0:d4:d8:29:88:18:32:05:09:5e:9a:76:88Certificate
IssuerCN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=USNot Before04-12-2003 00:00Not After03-12-2008 23:59SubjectCN=VeriSign Time Stamping Services Signer,O=VeriSign\, Inc.,C=USExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageContentCommitment
c1:00:8b:3c:3c:88:11:d1:3e:f6:63:ec:df:40Certificate
IssuerCN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft CorporationNot Before10-01-1997 07:00Not After31-12-2020 07:00SubjectCN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation6a:0b:99:4f:c0:00:1d:ab:11:da:c4:02:a1:66:27:baCertificate
IssuerCN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft CorporationNot Before04-04-2006 17:44Not After26-04-2012 07:00SubjectCN=Microsoft Code Signing PCA,OU=Copyright (c) 2000 Microsoft Corp.,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USExtended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageContentCommitment
KeyUsageCertSign
KeyUsageCRLSign
61:46:9e:cb:00:04:00:00:00:65Certificate
IssuerCN=Microsoft Code Signing PCA,OU=Copyright (c) 2000 Microsoft Corp.,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USNot Before04-04-2006 19:43Not After04-10-2007 19:53SubjectCN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USExtended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
KeyUsageContentCommitment
37:4e:97:f1:50:5a:93:6f:0d:75:2e:f2:56:1e:c7:06:8c:67:d1:17Signer
Actual PE Digest37:4e:97:f1:50:5a:93:6f:0d:75:2e:f2:56:1e:c7:06:8c:67:d1:17Digest Algorithmsha1PE Digest MatchestrueHeaders
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcAddress
FlushFileBuffers
SetStdHandle
MultiByteToWideChar
GetStringTypeW
LCMapStringA
LCMapStringW
GetStringTypeA
GetOEMCP
GetCPInfo
SetFilePointer
GetModuleHandleA
LocalAlloc
LoadLibraryA
LocalFree
GetACP
IsProcessorFeaturePresent
HeapAlloc
HeapFree
GetCommandLineA
GetVersion
ExitProcess
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
HeapReAlloc
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
RtlUnwind
WriteFile
GetLastError
CloseHandle
user32
DialogBoxIndirectParamA
LoadCursorA
SetCursor
InflateRect
GetDlgItem
GetSysColorBrush
EndDialog
SetWindowTextA
SendMessageA
gdi32
StartPage
GetDeviceCaps
SetMapMode
StartDocA
EndPage
EndDoc
comdlg32
PrintDlgA
advapi32
RegSetValueExA
RegOpenKeyExA
RegQueryValueExA
RegCloseKey
RegCreateKeyA
Sections
.text Size: 20KB - Virtual size: 17KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 108KB - Virtual size: 112KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 984B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
wintaylor2.1/Programs/tools/sysinternals/Procmon.exe.exe windows:5 windows x86
1df486e8d920969ba618d90554d23c99
Code Sign
2e:ab:11:dc:50:ff:5c:9d:cb:c0Certificate
IssuerCN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft CorporationNot Before22-08-2007 22:31Not After25-08-2012 07:00SubjectCN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USExtended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
61:01:cf:3e:00:00:00:00:00:0fCertificate
IssuerCN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USNot Before07-12-2009 22:40Not After07-03-2011 22:40SubjectCN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USExtended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
6a:0b:99:4f:c0:00:25:ab:11:db:45:1f:58:7a:67:a2Certificate
IssuerCN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft CorporationNot Before16-09-2006 01:04Not After15-09-2019 07:00SubjectCN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
61:05:a2:30:00:00:00:00:00:08Certificate
IssuerCN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USNot Before25-07-2008 19:01Not After25-07-2013 19:11SubjectCN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:85D3-305C-5BCF,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageContentCommitment
5f:60:ed:58:fc:7c:a4:f8:9f:10:cc:be:97:87:01:b4:8c:13:2f:85Signer
Actual PE Digest5f:60:ed:58:fc:7c:a4:f8:9f:10:cc:be:97:87:01:b4:8c:13:2f:85Digest Algorithmsha1PE Digest MatchestrueHeaders
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
ws2_32
send
socket
bind
listen
accept
closesocket
gethostbyname
getservbyname
inet_ntoa
inet_addr
htonl
getservbyport
htons
WSASetLastError
gethostbyaddr
WSAStartup
ntohs
connect
WSAGetLastError
getsockname
recv
version
GetFileVersionInfoW
VerQueryValueW
GetFileVersionInfoSizeW
comctl32
CreateStatusWindowW
ImageList_Add
ImageList_GetIconSize
ImageList_GetIcon
CreateToolbarEx
InitCommonControlsEx
ImageList_Destroy
ord17
ImageList_SetBkColor
ImageList_ReplaceIcon
ImageList_Create
ImageList_DrawEx
ImageList_SetOverlayImage
psapi
GetProcessMemoryInfo
kernel32
MapViewOfFile
UnmapViewOfFile
SetEndOfFile
CreateFileW
CreateFileMappingW
GetDateFormatW
SystemTimeToFileTime
WriteFile
FormatMessageW
GetTimeFormatW
FileTimeToSystemTime
ReadFile
GetNumberFormatW
FileTimeToLocalFileTime
GetVersion
LocalFileTimeToFileTime
ExitProcess
GetComputerNameA
HeapAlloc
QueryPerformanceCounter
HeapFree
SetEvent
GetCurrentThread
HeapDestroy
HeapCreate
SetThreadPriority
ReleaseSemaphore
HeapSize
ResetEvent
CreateSemaphoreW
CreateEventW
WaitForMultipleObjects
QueryPerformanceFrequency
TryEnterCriticalSection
SetConsoleCtrlHandler
GetFileAttributesExW
SetProcessShutdownParameters
GetThreadContext
OpenThread
GetCurrentProcessId
GetSystemDirectoryA
LoadLibraryA
MulDiv
FindFirstFileW
FindClose
FindNextFileW
GetEnvironmentVariableW
SetEnvironmentVariableW
ExpandEnvironmentStringsA
TlsAlloc
TlsGetValue
GetModuleFileNameA
GetStdHandle
FatalAppExitA
RaiseException
RtlUnwind
GetStartupInfoA
GetCommandLineA
GetCurrentThreadId
ResumeThread
ExitThread
HeapReAlloc
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
lstrlenW
GetProcessHeap
WideCharToMultiByte
lstrlenA
MultiByteToWideChar
GetConsoleCP
GetConsoleMode
SetHandleCount
GetFileType
LCMapStringA
LCMapStringW
FreeEnvironmentStringsA
GetEnvironmentStrings
SetFilePointer
GetFileSize
GlobalUnlock
CompareStringW
GetLocaleInfoW
GlobalAlloc
GlobalLock
OpenProcess
CreateProcessW
LoadLibraryExW
FreeLibrary
EnumResourceNamesW
GlobalAddAtomW
CreateThread
GetSystemInfo
GlobalMemoryStatusEx
GetFileAttributesW
GetVersionExW
Sleep
GetSystemTimeAsFileTime
VirtualFree
GetTickCount
WaitForSingleObject
GetFullPathNameW
LocalFree
LocalAlloc
GetCommandLineW
ExpandEnvironmentStringsW
SetFileAttributesW
DeleteFileW
CloseHandle
LockResource
SetLastError
GetCurrentDirectoryW
GetLastError
SizeofResource
GetSystemDirectoryW
GetCurrentProcess
InterlockedIncrement
LoadResource
FindResourceW
IsValidCodePage
VirtualAlloc
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSection
GetProcAddress
GetModuleFileNameW
LoadLibraryW
GetModuleHandleW
InterlockedDecrement
TlsSetValue
TlsFree
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetModuleHandleA
InitializeCriticalSectionAndSpinCount
InterlockedExchange
GetStringTypeA
GetStringTypeW
GetTimeFormatA
GetDateFormatA
GetUserDefaultLCID
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
SetStdHandle
FlushFileBuffers
GetTimeZoneInformation
CreateFileA
CompareStringA
SetEnvironmentVariableA
GetCPInfo
GetACP
GetOEMCP
GetComputerNameW
VirtualQuery
user32
LoadMenuW
GetClassNameW
EnableMenuItem
EnumChildWindows
CreatePopupMenu
LoadBitmapW
CreateDialogParamW
SetMenuInfo
GetMenuItemCount
SetMenuDefaultItem
CheckRadioButton
InsertMenuW
EqualRect
DeferWindowPos
BeginDeferWindowPos
SetWindowTextA
GetDlgItemTextW
DestroyMenu
EndDeferWindowPos
DrawFrameControl
CheckMenuItem
DispatchMessageW
GetActiveWindow
GetWindow
GetShellWindow
CloseClipboard
LoadImageW
EmptyClipboard
OpenClipboard
SetClipboardData
IsIconic
WaitForInputIdle
FindWindowW
FindWindowExW
GetWindowThreadProcessId
CreateIconFromResourceEx
SetPropW
GetCapture
SetWindowPos
GetPropW
ClientToScreen
DestroyWindow
ScreenToClient
FillRect
DrawIconEx
GetFocus
InvalidateRgn
SetFocus
UnionRect
GetDoubleClickTime
ScrollWindowEx
SetClassLongW
GetCursorPos
CheckDlgButton
FrameRect
IsDlgButtonChecked
RegisterClassW
IsWindowVisible
DestroyIcon
IntersectRect
SetTimer
PostMessageW
GetAncestor
GetDesktopWindow
GetSystemMetrics
UpdateWindow
EnableWindow
LoadStringW
SetCursor
DialogBoxIndirectParamW
InflateRect
SetWindowTextW
FlashWindowEx
OffsetRect
GetWindowPlacement
IsDialogMessageW
GetMenu
SetDlgItemInt
LoadAcceleratorsW
GetWindowDC
WindowFromPoint
GetUpdateRgn
GetKeyState
DialogBoxParamW
MessageBoxW
GetDC
ReleaseDC
EndPaint
GetWindowRect
SetCapture
DrawTextW
SetScrollInfo
SetWindowPlacement
TranslateAcceleratorW
GetDlgItemInt
SetActiveWindow
GetMessageW
PostQuitMessage
TrackPopupMenu
RegisterWindowMessageW
KillTimer
IsZoomed
GetSubMenu
DeleteMenu
MessageBeep
IsWindowEnabled
GetMenuItemInfoW
InsertMenuItemW
PtInRect
GetClassLongW
GetParent
LoadCursorW
GetClientRect
BeginPaint
ChildWindowFromPoint
RegisterClassExW
InvalidateRect
GetWindowLongW
GetWindowTextW
GetDlgItem
SetWindowLongW
EndDialog
GetSysColor
ShowWindow
GetSysColorBrush
CreateWindowExW
ReleaseCapture
SetDlgItemTextW
SendMessageW
MapWindowPoints
DefWindowProcW
MoveWindow
CallWindowProcW
GetScrollInfo
GetIconInfo
LoadIconW
TranslateMessage
SetForegroundWindow
gdi32
Rectangle
SaveDC
SetROP2
RestoreDC
SelectClipRgn
RectInRegion
CreateRectRgn
GetTextMetricsW
GdiFlush
SetPixel
CreateFontW
GetPixel
MoveToEx
LineTo
Polygon
CreateCompatibleBitmap
Polyline
CreatePen
GetStockObject
GetBkColor
CreateSolidBrush
EndPage
StartPage
GetDeviceCaps
SetMapMode
StartDocW
EndDoc
BitBlt
DeleteDC
CreateDIBSection
SetBkColor
DeleteObject
CreateCompatibleDC
SetTextColor
CreateFontIndirectW
SetBkMode
CreateRectRgnIndirect
GetObjectW
SelectObject
comdlg32
PrintDlgW
ChooseColorW
FindTextW
GetOpenFileNameW
ChooseFontW
GetSaveFileNameW
advapi32
RegQueryValueExA
GetSecurityDescriptorLength
RegEnumValueW
ConvertStringSidToSidW
LsaFreeMemory
ConvertSidToStringSidW
GetLengthSid
RegOpenKeyExW
FreeSid
AllocateAndInitializeSid
LsaClose
DuplicateTokenEx
LookupAccountSidW
EqualSid
RegSetValueW
RegCreateKeyExW
RegEnumKeyW
GetTokenInformation
LsaEnumerateAccountRights
LsaOpenPolicy
MapGenericMask
RegSetValueExW
RegCloseKey
AdjustTokenPrivileges
RegDeleteValueW
LookupPrivilegeValueW
RegDeleteKeyW
RegOpenKeyW
RegQueryValueExW
RegCreateKeyW
OpenProcessToken
RegOpenKeyExA
shell32
SHGetSpecialFolderLocation
SHGetPathFromIDListW
CommandLineToArgvW
DragQueryFileW
SHGetMalloc
ShellExecuteW
SHChangeNotify
SHBrowseForFolderW
ShellExecuteExW
SHGetFileInfoW
SHAppBarMessage
ole32
CoCreateInstance
CoSetProxyBlanket
CoInitialize
OleInitialize
ReleaseStgMedium
RegisterDragDrop
CreateBindCtx
oleaut32
CreateErrorInfo
GetErrorInfo
SysStringByteLen
SysAllocStringLen
VariantTimeToSystemTime
SafeArrayGetUBound
SafeArrayUnaccessData
SafeArrayGetElement
VariantChangeType
VariantInit
SafeArrayDestroy
SafeArrayAccessData
VariantClear
SafeArrayGetLBound
SysAllocStringByteLen
SysStringLen
SysFreeString
SysAllocString
SetErrorInfo
shlwapi
SHAutoComplete
Sections
.text Size: 845KB - Virtual size: 844KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 155KB - Virtual size: 155KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 6KB - Virtual size: 30KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1.8MB - Virtual size: 1.8MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 48KB - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
wintaylor2.1/Programs/tools/sysinternals/Pstools.chm.chm
-
wintaylor2.1/Programs/tools/sysinternals/RamMap.exe.exe windows:5 windows x86
9a2d387ba5e6a0c326cbef5df439adbd
Code Sign
2e:ab:11:dc:50:ff:5c:9d:cb:c0Certificate
IssuerCN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft CorporationNot Before22-08-2007 22:31Not After25-08-2012 07:00SubjectCN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USExtended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
61:01:cf:3e:00:00:00:00:00:0fCertificate
IssuerCN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USNot Before07-12-2009 22:40Not After07-03-2011 22:40SubjectCN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USExtended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
6a:0b:99:4f:c0:00:25:ab:11:db:45:1f:58:7a:67:a2Certificate
IssuerCN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft CorporationNot Before16-09-2006 01:04Not After15-09-2019 07:00SubjectCN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
61:06:94:2d:00:00:00:00:00:09Certificate
IssuerCN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USNot Before25-07-2008 19:02Not After25-07-2013 19:12SubjectCN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:7A82-688A-9F92,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageContentCommitment
b8:48:f0:19:b5:c0:ff:fb:8b:fb:de:6c:38:24:a4:fc:70:c0:77:33Signer
Actual PE Digestb8:48:f0:19:b5:c0:ff:fb:8b:fb:de:6c:38:24:a4:fc:70:c0:77:33Digest Algorithmsha1PE Digest MatchestrueHeaders
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
comctl32
ImageList_DrawEx
InitCommonControlsEx
ImageList_Destroy
ord17
ImageList_Add
ImageList_Create
ImageList_ReplaceIcon
ImageList_SetBkColor
version
GetFileVersionInfoSizeW
VerQueryValueW
GetFileVersionInfoW
kernel32
GetCurrentDirectoryW
CreateFileA
ReadFile
SetEndOfFile
VirtualQuery
FreeLibrary
GetLocaleInfoA
GetStringTypeW
GetStringTypeA
LCMapStringA
FlushFileBuffers
SetStdHandle
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
SetFilePointer
InitializeCriticalSectionAndSpinCount
CreateFileW
GetModuleHandleA
LoadLibraryA
DebugBreak
GetSystemTimeAsFileTime
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
GetFileType
SetHandleCount
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
HeapSize
LCMapStringW
GetModuleFileNameA
GetStdHandle
ExitProcess
VirtualAlloc
DeleteCriticalSection
VirtualFree
HeapCreate
GetCurrentThreadId
SetLastError
TlsFree
TlsSetValue
TlsAlloc
TlsGetValue
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
GetConsoleMode
GetConsoleCP
WriteFile
LeaveCriticalSection
EnterCriticalSection
RaiseException
RtlUnwind
GetStartupInfoA
GetCommandLineA
HeapReAlloc
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
HeapAlloc
FindResourceW
LoadResource
CreateProcessW
GetCurrentProcess
WaitForSingleObject
GetProcessHeap
HeapFree
WideCharToMultiByte
lstrlenA
MultiByteToWideChar
GlobalAddAtomW
GetVersion
FormatMessageW
DeviceIoControl
QueryDosDeviceW
OpenProcess
GetNumberFormatW
GetLocaleInfoW
InterlockedDecrement
InterlockedIncrement
LocalFree
LocalAlloc
LoadLibraryW
GetCommandLineW
ExpandEnvironmentStringsW
DeleteFileW
CloseHandle
LockResource
GetProcAddress
GetLastError
GetModuleFileNameW
GetFileAttributesW
SizeofResource
Sleep
GetModuleHandleW
user32
ReleaseDC
SetWindowPos
GetPropW
DefWindowProcW
SetCursor
DialogBoxIndirectParamW
EndDialog
GetSysColorBrush
SendMessageW
SetWindowTextW
CreateWindowExW
ShowWindow
GetDlgItem
InflateRect
GetUpdateRgn
SetCapture
DrawTextW
GetKeyState
GetCapture
IntersectRect
GetScrollInfo
ScrollWindowEx
SetScrollInfo
DestroyWindow
SetWindowPlacement
TranslateAcceleratorW
ScreenToClient
GetMessageW
PostQuitMessage
RegisterWindowMessageW
PostMessageW
IsZoomed
DialogBoxParamW
GetParent
SetFocus
GetClassLongW
TranslateMessage
LoadAcceleratorsW
ChildWindowFromPoint
IsDialogMessageW
RegisterClassExW
GetWindowPlacement
OffsetRect
UnionRect
GetClassNameW
SetWindowLongW
GetSysColor
EnumChildWindows
CreateDialogParamW
GetActiveWindow
DeferWindowPos
MessageBoxW
ReleaseCapture
BeginDeferWindowPos
SetDlgItemTextW
MapWindowPoints
EnableWindow
EndDeferWindowPos
DrawFrameControl
CallWindowProcW
MoveWindow
DispatchMessageW
GetWindowRect
LoadImageW
PtInRect
LoadIconW
GetWindowLongW
LoadStringW
GetSystemMetrics
UpdateWindow
EndPaint
FillRect
GetFocus
GetClientRect
BeginPaint
SetPropW
GetDC
DrawFocusRect
InvalidateRect
LoadCursorW
gdi32
BitBlt
GetTextMetricsW
SetBkColor
SelectClipRgn
CreateRectRgnIndirect
RectInRegion
GetBkColor
CreateRectRgn
Polyline
CreatePen
SetTextColor
CreateFontIndirectW
SetBkMode
GetObjectW
GetStockObject
DeleteDC
SelectObject
CreateCompatibleDC
CreateCompatibleBitmap
DeleteObject
CreateSolidBrush
EndPage
StartPage
GetDeviceCaps
SetMapMode
StartDocW
EndDoc
comdlg32
FindTextW
GetSaveFileNameW
GetOpenFileNameW
PrintDlgW
advapi32
OpenServiceW
RegCloseKey
RegSetValueExW
RegCreateKeyW
RegQueryValueExW
OpenProcessToken
LookupPrivilegeValueW
AdjustTokenPrivileges
CloseServiceHandle
RegOpenKeyExW
RegCreateKeyExW
ControlService
QueryServiceStatusEx
StartServiceW
OpenSCManagerW
RegOpenKeyW
shell32
CommandLineToArgvW
ShellExecuteW
ole32
CoInitialize
CoCreateInstance
oleaut32
VariantChangeType
VariantInit
VariantClear
SysAllocStringByteLen
SysFreeString
SysStringLen
SysAllocString
Sections
.text Size: 165KB - Virtual size: 164KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 38KB - Virtual size: 38KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 5KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.myseg Size: 512B - Virtual size: 32B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 320KB - Virtual size: 320KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 14KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
wintaylor2.1/Programs/tools/sysinternals/RegDelNull.exe.exe windows:4 windows x86
b1390b864aeb15bc9a19e8510570896f
Code Sign
47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4Certificate
IssuerCN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZANot Before04-12-2003 00:00Not After03-12-2013 23:59SubjectCN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=USExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageCertSign
KeyUsageCRLSign
0d:e9:2b:f0:d4:d8:29:88:18:32:05:09:5e:9a:76:88Certificate
IssuerCN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=USNot Before04-12-2003 00:00Not After03-12-2008 23:59SubjectCN=VeriSign Time Stamping Services Signer,O=VeriSign\, Inc.,C=USExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageContentCommitment
c1:00:8b:3c:3c:88:11:d1:3e:f6:63:ec:df:40Certificate
IssuerCN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft CorporationNot Before10-01-1997 07:00Not After31-12-2020 07:00SubjectCN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation6a:0b:99:4f:c0:00:1d:ab:11:da:c4:02:a1:66:27:baCertificate
IssuerCN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft CorporationNot Before04-04-2006 17:44Not After26-04-2012 07:00SubjectCN=Microsoft Code Signing PCA,OU=Copyright (c) 2000 Microsoft Corp.,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USExtended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageContentCommitment
KeyUsageCertSign
KeyUsageCRLSign
61:46:9e:cb:00:04:00:00:00:65Certificate
IssuerCN=Microsoft Code Signing PCA,OU=Copyright (c) 2000 Microsoft Corp.,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USNot Before04-04-2006 19:43Not After04-10-2007 19:53SubjectCN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USExtended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
KeyUsageContentCommitment
d9:df:6f:9a:56:a0:7b:c4:38:c4:bd:22:44:7b:f3:5a:6e:1a:2d:33Signer
Actual PE Digestd9:df:6f:9a:56:a0:7b:c4:38:c4:bd:22:44:7b:f3:5a:6e:1a:2d:33Digest Algorithmsha1PE Digest MatchestrueHeaders
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
version
GetFileVersionInfoW
VerQueryValueW
GetFileVersionInfoSizeW
kernel32
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetEnvironmentStrings
GetCommandLineW
GetCommandLineA
GetModuleFileNameA
SetFilePointer
FreeEnvironmentStringsA
SetStdHandle
LCMapStringW
LCMapStringA
LocalAlloc
LoadLibraryW
GetModuleHandleW
GetProcAddress
GetModuleFileNameW
GetVersion
SetLastError
ReadFile
GetCurrentProcess
GetLastError
CloseHandle
FormatMessageA
GetStdHandle
WriteFile
LocalFree
GetStringTypeA
GetStringTypeW
LoadLibraryA
UnhandledExceptionFilter
RtlUnwind
ExitProcess
TerminateProcess
HeapAlloc
HeapFree
FlushFileBuffers
SetHandleCount
GetFileType
GetStartupInfoA
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
HeapReAlloc
MultiByteToWideChar
WideCharToMultiByte
user32
EndDialog
SendMessageW
LoadCursorW
SetCursor
InflateRect
GetDlgItem
GetSysColorBrush
SetWindowTextW
DialogBoxIndirectParamW
gdi32
SetMapMode
StartDocW
StartPage
EndPage
EndDoc
GetDeviceCaps
comdlg32
PrintDlgW
advapi32
SetSecurityDescriptorDacl
RegCreateKeyW
RegQueryValueExW
RegSetValueExW
RegOpenKeyExW
RegCloseKey
RegSetKeySecurity
InitializeSecurityDescriptor
GetTokenInformation
SetSecurityDescriptorOwner
SetEntriesInAclW
IsValidSid
GetSidIdentifierAuthority
GetSidSubAuthorityCount
GetSidSubAuthority
OpenProcessToken
LookupPrivilegeValueW
AdjustTokenPrivileges
Sections
.text Size: 28KB - Virtual size: 25KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 112KB - Virtual size: 113KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
wintaylor2.1/Programs/tools/sysinternals/Regmon.exe.exe windows:4 windows x86
78ed4477b393b2cdb229c358f68b52da
Code Sign
47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4Certificate
IssuerCN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZANot Before04-12-2003 00:00Not After03-12-2013 23:59SubjectCN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=USExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageCertSign
KeyUsageCRLSign
0d:e9:2b:f0:d4:d8:29:88:18:32:05:09:5e:9a:76:88Certificate
IssuerCN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=USNot Before04-12-2003 00:00Not After03-12-2008 23:59SubjectCN=VeriSign Time Stamping Services Signer,O=VeriSign\, Inc.,C=USExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageContentCommitment
c1:00:8b:3c:3c:88:11:d1:3e:f6:63:ec:df:40Certificate
IssuerCN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft CorporationNot Before10-01-1997 07:00Not After31-12-2020 07:00SubjectCN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation6a:0b:99:4f:c0:00:1d:ab:11:da:c4:02:a1:66:27:baCertificate
IssuerCN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft CorporationNot Before04-04-2006 17:44Not After26-04-2012 07:00SubjectCN=Microsoft Code Signing PCA,OU=Copyright (c) 2000 Microsoft Corp.,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USExtended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageContentCommitment
KeyUsageCertSign
KeyUsageCRLSign
61:46:9e:cb:00:04:00:00:00:65Certificate
IssuerCN=Microsoft Code Signing PCA,OU=Copyright (c) 2000 Microsoft Corp.,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USNot Before04-04-2006 19:43Not After04-10-2007 19:53SubjectCN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USExtended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
KeyUsageContentCommitment
5a:7c:a0:5e:63:d1:bf:f0:a3:b5:bc:5e:7e:0a:fb:81:57:0d:07:e0Signer
Actual PE Digest5a:7c:a0:5e:63:d1:bf:f0:a3:b5:bc:5e:7e:0a:fb:81:57:0d:07:e0Digest Algorithmsha1PE Digest MatchestrueHeaders
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
comctl32
CreateToolbarEx
ord17
version
GetFileVersionInfoA
GetFileVersionInfoSizeA
VerQueryValueA
kernel32
Sleep
GetVersionExA
GetUserDefaultLangID
FormatMessageA
WaitForMultipleObjects
WaitForSingleObject
FreeLibrary
SetFileAttributesA
GetTimeFormatA
DosDateTimeToFileTime
FileTimeToSystemTime
FileTimeToLocalFileTime
CreateEventA
GetCurrentProcessId
GetEnvironmentVariableA
DeleteFileA
GetModuleFileNameA
GetSystemDirectoryA
GetCurrentDirectoryA
GetVersion
QueryPerformanceFrequency
CreateProcessA
GetCommandLineA
ExpandEnvironmentStringsA
GetFileAttributesA
GlobalMemoryStatus
HeapSize
SetEndOfFile
ReadFile
GetLocaleInfoA
GetStringTypeW
GetStringTypeA
InitializeCriticalSection
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
SetFilePointer
OpenProcess
SetStdHandle
GetSystemTimeAsFileTime
QueryPerformanceCounter
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetFileType
SetHandleCount
LCMapStringW
MultiByteToWideChar
LCMapStringA
GetCurrentThreadId
TlsFree
TlsSetValue
TlsAlloc
TlsGetValue
GetOEMCP
GetACP
InterlockedDecrement
InterlockedIncrement
GetCPInfo
GetStdHandle
ExitProcess
HeapCreate
HeapDestroy
HeapReAlloc
VirtualAlloc
VirtualFree
DeleteCriticalSection
RtlUnwind
GetConsoleMode
GetConsoleCP
WideCharToMultiByte
WriteFile
LeaveCriticalSection
EnterCriticalSection
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
GetStartupInfoA
CreateThread
ResumeThread
ExitThread
ReadProcessMemory
GetProcessHeap
HeapAlloc
lstrcpyA
lstrlenA
HeapFree
lstrcatA
GlobalAlloc
GlobalLock
GlobalUnlock
GlobalReAlloc
GetTickCount
DeviceIoControl
SetEvent
LocalAlloc
LoadLibraryA
LocalFree
GetModuleHandleA
GetProcAddress
SetLastError
CreateFileA
FindResourceA
LoadResource
SizeofResource
LockResource
GetCurrentProcess
GetLastError
CloseHandle
FlushFileBuffers
user32
GetMessageA
SetCursor
InvalidateRect
ChildWindowFromPoint
GetSysColor
GetSysColorBrush
LoadCursorA
GetDlgItem
TranslateAcceleratorA
IsDialogMessageA
LoadAcceleratorsA
DispatchMessageA
UpdateWindow
RegisterClassA
GetMenu
GetSubMenu
GetMenuItemCount
InsertMenuItemA
CheckMenuItem
LoadMenuA
TrackPopupMenu
IsZoomed
IsIconic
TranslateMessage
DestroyMenu
EnableMenuItem
LoadStringA
ReleaseDC
BeginPaint
EndPaint
WinHelpA
wsprintfA
PostQuitMessage
EnumDisplaySettingsA
FindWindowA
WaitForInputIdle
GetWindowThreadProcessId
SetForegroundWindow
FindWindowExA
SetWindowPos
LoadIconA
SetWindowLongA
DrawIconEx
GetClientRect
CreateWindowExA
CallWindowProcA
SetCapture
ReleaseCapture
OpenClipboard
EmptyClipboard
SetClipboardData
CloseClipboard
GetDC
DrawTextA
GetFocus
GetSystemMetrics
ShowWindow
SetTimer
ClientToScreen
ScreenToClient
GetCursorPos
DestroyWindow
DefWindowProcA
GetDlgItemTextA
InvalidateRgn
IsWindowEnabled
SetDlgItemTextA
CheckDlgButton
MessageBoxA
EnableWindow
IsDlgButtonChecked
PostMessageA
RegisterWindowMessageA
CheckRadioButton
SetFocus
DialogBoxIndirectParamA
SetWindowTextA
InflateRect
SendMessageA
EndDialog
GetParent
GetWindowRect
MoveWindow
DialogBoxParamA
gdi32
SelectObject
SetTextColor
CreateCompatibleDC
GetTextMetricsA
CreateSolidBrush
SetBkMode
CreateFontIndirectA
GetObjectA
GetStockObject
EndDoc
EndPage
StartPage
StartDocA
SetMapMode
GetDeviceCaps
SetBkColor
GetTextExtentPoint32A
DeleteObject
ExtTextOutA
comdlg32
PrintDlgA
GetOpenFileNameA
GetSaveFileNameA
ChooseFontA
ChooseColorA
FindTextA
advapi32
LookupPrivilegeValueA
OpenProcessToken
RegDeleteValueA
RegOpenKeyA
GetTokenInformation
LookupAccountSidA
RegQueryValueExA
RegCreateKeyA
RegSetValueExA
RegCloseKey
RegDeleteKeyA
AdjustTokenPrivileges
shell32
SHGetFileInfoA
ShellExecuteA
ShellExecuteExA
Sections
.text Size: 96KB - Virtual size: 95KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 120KB - Virtual size: 119KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 113KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 456KB - Virtual size: 452KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
wintaylor2.1/Programs/tools/sysinternals/ShareEnum.exe.exe windows:4 windows x86
8c990359c655b89fe20ef4fb7b5b756c
Code Sign
47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4Certificate
IssuerCN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZANot Before04-12-2003 00:00Not After03-12-2013 23:59SubjectCN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=USExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageCertSign
KeyUsageCRLSign
0d:e9:2b:f0:d4:d8:29:88:18:32:05:09:5e:9a:76:88Certificate
IssuerCN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=USNot Before04-12-2003 00:00Not After03-12-2008 23:59SubjectCN=VeriSign Time Stamping Services Signer,O=VeriSign\, Inc.,C=USExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageContentCommitment
c1:00:8b:3c:3c:88:11:d1:3e:f6:63:ec:df:40Certificate
IssuerCN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft CorporationNot Before10-01-1997 07:00Not After31-12-2020 07:00SubjectCN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation6a:0b:99:4f:c0:00:1d:ab:11:da:c4:02:a1:66:27:baCertificate
IssuerCN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft CorporationNot Before04-04-2006 17:44Not After26-04-2012 07:00SubjectCN=Microsoft Code Signing PCA,OU=Copyright (c) 2000 Microsoft Corp.,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USExtended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageContentCommitment
KeyUsageCertSign
KeyUsageCRLSign
61:46:9e:cb:00:04:00:00:00:65Certificate
IssuerCN=Microsoft Code Signing PCA,OU=Copyright (c) 2000 Microsoft Corp.,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USNot Before04-04-2006 19:43Not After04-10-2007 19:53SubjectCN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USExtended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
KeyUsageContentCommitment
81:4f:c1:bf:b0:95:d2:4c:fc:10:5f:b7:18:e4:a6:96:c3:c2:7c:7aSigner
Actual PE Digest81:4f:c1:bf:b0:95:d2:4c:fc:10:5f:b7:18:e4:a6:96:c3:c2:7c:7aDigest Algorithmsha1PE Digest MatchestrueHeaders
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
comctl32
ord17
ImageList_Create
ImageList_SetBkColor
ImageList_ReplaceIcon
kernel32
SetConsoleCtrlHandler
SetEndOfFile
LoadLibraryA
GetOEMCP
GetACP
SetFilePointer
IsBadCodePtr
IsBadReadPtr
SetUnhandledExceptionFilter
ReadFile
FlushFileBuffers
SetStdHandle
GetStringTypeW
GetStringTypeA
GetVersionExA
GetUserDefaultLCID
EnumSystemLocalesA
GetLocaleInfoA
IsValidCodePage
IsValidLocale
GetCPInfo
GetTimeZoneInformation
LCMapStringA
GetEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsW
FreeEnvironmentStringsA
GetModuleFileNameA
UnhandledExceptionFilter
IsBadWritePtr
VirtualAlloc
VirtualFree
HeapCreate
HeapDestroy
HeapSize
TerminateProcess
GetCurrentThread
TlsGetValue
TlsFree
TlsAlloc
TlsSetValue
GetCurrentThreadId
GetFileType
GetLocaleInfoW
CompareStringA
SetEnvironmentVariableA
lstrlenW
lstrlenA
GetCommandLineA
GetStartupInfoA
GetModuleHandleA
WideCharToMultiByte
HeapAlloc
HeapReAlloc
RaiseException
LCMapStringW
GetStdHandle
SetHandleCount
MultiByteToWideChar
Sleep
FatalAppExitA
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSection
GetCommandLineW
GetComputerNameW
FormatMessageW
GetFileAttributesW
InterlockedIncrement
CreateThread
SetThreadPriority
ResumeThread
InterlockedDecrement
DeleteFileW
CreateFileW
WriteFile
GetCurrentProcessId
GetTickCount
GetProcessHeap
HeapFree
CompareStringW
GetModuleHandleW
SetLastError
GetLastError
LocalFree
LoadLibraryW
GetProcAddress
LocalAlloc
GetCurrentProcess
CloseHandle
GetVersion
ExitProcess
RtlUnwind
user32
SetClassLongW
UpdateWindow
EndDeferWindowPos
EnumChildWindows
BeginDeferWindowPos
GetWindowRect
EndPaint
DrawFrameControl
GetSystemMetrics
GetClientRect
BeginPaint
IsZoomed
MessageBoxW
SendMessageW
GetDlgItem
SetWindowLongW
PtInRect
EndDialog
DeferWindowPos
GetWindowLongW
GetClassNameW
InflateRect
DialogBoxIndirectParamW
LoadIconW
RegisterClassExW
ShowWindow
LoadAcceleratorsW
GetMessageW
TranslateAcceleratorW
TranslateMessage
IsDialogMessageW
DispatchMessageW
PostQuitMessage
LoadMenuW
GetSubMenu
SetMenuDefaultItem
SetWindowTextW
DefWindowProcW
EnableWindow
IsWindowEnabled
GetDlgItemTextW
PostMessageW
DialogBoxParamW
CreateDialogParamW
GetSysColorBrush
ChildWindowFromPoint
InvalidateRect
wsprintfW
CreatePopupMenu
InsertMenuItemW
GetCursorPos
TrackPopupMenu
LoadCursorW
SetCursor
SetWindowPos
MoveWindow
GetSysColor
LoadImageW
GetParent
ScreenToClient
gdi32
GetDeviceCaps
SetMapMode
StartDocW
StartPage
EndPage
EndDoc
GetStockObject
GetObjectW
CreateFontIndirectW
SetBkMode
SetTextColor
SelectObject
comdlg32
PrintDlgW
GetSaveFileNameW
GetOpenFileNameW
advapi32
SetSecurityDescriptorDacl
GetSidIdentifierAuthority
GetSidLengthRequired
GetSidSubAuthority
GetSidSubAuthorityCount
GetAclInformation
GetAce
LookupAccountSidW
AllocateAndInitializeSid
RegSetValueExW
RegCreateKeyW
RegQueryValueExW
RegCloseKey
MapGenericMask
MakeSelfRelativeSD
GetSecurityDescriptorLength
IsValidSecurityDescriptor
InitializeSecurityDescriptor
GetSecurityDescriptorSacl
SetSecurityDescriptorSacl
GetSecurityDescriptorDacl
IsValidSid
GetSecurityDescriptorOwner
SetSecurityDescriptorOwner
GetSecurityDescriptorGroup
SetSecurityDescriptorGroup
OpenProcessToken
GetTokenInformation
EqualSid
LookupAccountNameW
InitializeSid
shell32
ShellExecuteW
CommandLineToArgvW
oleaut32
SysStringLen
SysAllocStringByteLen
SysFreeString
SysAllocString
VarDateFromStr
VariantClear
VariantInit
GetErrorInfo
SetErrorInfo
VariantChangeType
CreateErrorInfo
mpr
WNetOpenEnumW
WNetEnumResourceW
WNetCloseEnum
netapi32
NetGetDCName
NetShareSetInfo
NetShareEnum
NetWkstaUserGetInfo
NetShareGetInfo
NetApiBufferFree
ws2_32
setsockopt
WSAStartup
gethostname
recvfrom
WSAGetLastError
sendto
inet_addr
gethostbyaddr
WSASocketW
ntohl
gethostbyname
Sections
.text Size: 92KB - Virtual size: 90KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 16KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 116KB - Virtual size: 121KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 20KB - Virtual size: 19KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
wintaylor2.1/Programs/tools/sysinternals/ShellRunas.exe.exe windows:4 windows x86
a19128c77d60d2b394dfa78b2e70b342
Code Sign
c1:00:8b:3c:3c:88:11:d1:3e:f6:63:ec:df:40Certificate
IssuerCN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft CorporationNot Before10-01-1997 07:00Not After31-12-2020 07:00SubjectCN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporationc1:00:8b:3c:3c:88:11:d1:3e:f6:63:ec:df:40Certificate
IssuerCN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft CorporationNot Before10-01-1997 07:00Not After31-12-2020 07:00SubjectCN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation2e:ab:11:dc:50:ff:5c:9d:cb:c0Certificate
IssuerCN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft CorporationNot Before22-08-2007 22:31Not After25-08-2012 07:00SubjectCN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USExtended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
61:0f:78:4d:00:00:00:00:00:03Certificate
IssuerCN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USNot Before23-08-2007 00:23Not After23-02-2009 00:33SubjectCN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USExtended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
KeyUsageContentCommitment
61:14:2c:a7:00:00:00:00:00:06Certificate
IssuerCN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USNot Before12-06-2007 23:54Not After13-06-2012 00:04SubjectCN=Microsoft Timestamping Service,OU=nCipher DSE ESN:27F4-D440-54F3,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageContentCommitment
61:14:2c:a7:00:00:00:00:00:06Certificate
IssuerCN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USNot Before12-06-2007 23:54Not After13-06-2012 00:04SubjectCN=Microsoft Timestamping Service,OU=nCipher DSE ESN:27F4-D440-54F3,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageContentCommitment
6a:0b:99:4f:c0:00:25:ab:11:db:45:1f:58:7a:67:a2Certificate
IssuerCN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft CorporationNot Before16-09-2006 01:04Not After15-09-2019 07:00SubjectCN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
c3:cc:e2:cc:c4:d6:e4:f0:ff:e7:49:0d:c2:b5:56:b0:21:59:a0:feSigner
Actual PE Digestc3:cc:e2:cc:c4:d6:e4:f0:ff:e7:49:0d:c2:b5:56:b0:21:59:a0:feDigest Algorithmsha1PE Digest MatchestrueHeaders
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
msi
ord217
ord173
credui
CredUIParseUserNameW
version
GetFileVersionInfoSizeW
GetFileVersionInfoW
VerQueryValueW
kernel32
SetStdHandle
LoadLibraryA
GetLocaleInfoA
GetStringTypeW
GetStringTypeA
WriteConsoleA
GetConsoleCP
SetFilePointer
RtlUnwind
InitializeCriticalSection
GetSystemTimeAsFileTime
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
GetFileType
SetHandleCount
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetConsoleOutputCP
GetCommandLineW
SetEnvironmentVariableW
GetCurrentProcess
GetProcAddress
Sleep
CloseHandle
GetLastError
CreateProcessW
GetShortPathNameW
GetModuleFileNameW
SearchPathW
GetComputerNameW
FormatMessageW
LoadLibraryW
LocalAlloc
LocalFree
GetModuleHandleW
WriteConsoleW
HeapSize
CreateFileA
FlushFileBuffers
GetConsoleMode
GetModuleFileNameA
GetStdHandle
WriteFile
ExitProcess
GetEnvironmentStrings
FreeEnvironmentStringsA
LCMapStringW
WideCharToMultiByte
LCMapStringA
HeapFree
HeapAlloc
GetCommandLineA
GetVersionExA
GetProcessHeap
GetStartupInfoA
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
HeapDestroy
HeapCreate
VirtualFree
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
VirtualAlloc
HeapReAlloc
GetCPInfo
InterlockedIncrement
InterlockedDecrement
GetACP
GetOEMCP
IsValidCodePage
GetModuleHandleA
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
GetCurrentThreadId
MultiByteToWideChar
user32
CreateDialogParamW
DialogBoxIndirectParamW
InflateRect
GetSysColorBrush
SetCursor
DispatchMessageW
MessageBoxW
EnumWindows
SetDlgItemTextW
GetMessageW
TranslateMessage
PostQuitMessage
ChildWindowFromPoint
IsDialogMessageW
GetSysColor
RegisterClassExW
ShowWindow
LoadIconW
DefWindowProcW
InvalidateRect
SetWindowTextW
GetWindowThreadProcessId
SendMessageW
GetDlgItem
LoadCursorW
EndDialog
gdi32
SelectObject
GetStockObject
GetObjectW
SetTextColor
CreateFontIndirectW
StartPage
GetDeviceCaps
EndDoc
EndPage
StartDocW
SetMapMode
SetBkMode
comdlg32
PrintDlgW
advapi32
RegSetValueW
CreateProcessWithLogonW
RegCreateKeyExW
RegDeleteKeyW
RegQueryValueExW
RegSetValueExW
RegCloseKey
RegCreateKeyW
shell32
ShellExecuteW
CommandLineToArgvW
SHGetMalloc
SHGetDesktopFolder
ole32
CoInitialize
CoCreateInstance
CoUninitialize
CoTaskMemFree
Sections
.text Size: 48KB - Virtual size: 47KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 24KB - Virtual size: 22KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
wintaylor2.1/Programs/tools/sysinternals/Tcpview.exe.exe windows:5 windows x86
f939f7d5a83f34b4c01f4ad8b7c50c7c
Code Sign
2e:ab:11:dc:50:ff:5c:9d:cb:c0Certificate
IssuerCN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft CorporationNot Before22-08-2007 22:31Not After25-08-2012 07:00SubjectCN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USExtended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
61:06:27:81:00:00:00:00:00:08Certificate
IssuerCN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USNot Before22-10-2008 21:24Not After22-01-2010 21:34SubjectCN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USExtended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
61:49:7c:ed:00:00:00:00:00:05Certificate
IssuerCN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USNot Before16-09-2006 01:55Not After16-09-2011 02:05SubjectCN=Microsoft Timestamping Service,OU=nCipher DSE ESN:10D8-5847-CBF8,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageContentCommitment
6a:0b:99:4f:c0:00:25:ab:11:db:45:1f:58:7a:67:a2Certificate
IssuerCN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft CorporationNot Before16-09-2006 01:04Not After15-09-2019 07:00SubjectCN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
1f:50:2c:7f:2a:c0:a2:53:85:c3:71:03:8f:fe:1f:6c:de:ad:c0:1eSigner
Actual PE Digest1f:50:2c:7f:2a:c0:a2:53:85:c3:71:03:8f:fe:1f:6c:de:ad:c0:1eDigest Algorithmsha1PE Digest MatchestrueHeaders
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
version
VerQueryValueA
GetFileVersionInfoSizeA
GetFileVersionInfoA
ws2_32
connect
send
recv
closesocket
WSAStartup
socket
gethostbyaddr
htonl
htons
getservbyport
ntohs
ntohl
WSAGetLastError
gethostbyname
gethostname
iphlpapi
SetTcpEntry
GetTcpTable
GetUdpTable
comctl32
ord17
ord6
ImageList_Create
ImageList_ReplaceIcon
CreateToolbarEx
kernel32
ReadProcessMemory
OpenProcess
CreateEventA
DeviceIoControl
GetCurrentProcessId
DuplicateHandle
GetModuleFileNameA
DeleteFileA
GetSystemDirectoryA
GetVersion
FormatMessageA
GetTickCount
SetEvent
TerminateProcess
GlobalReAlloc
GlobalUnlock
GlobalLock
GlobalAlloc
lstrcatA
HeapFree
lstrlenA
lstrcpyA
HeapAlloc
GetProcessHeap
GetUserDefaultLangID
LeaveCriticalSection
EnterCriticalSection
WaitForSingleObject
InitializeCriticalSection
ExpandEnvironmentStringsA
GetConsoleOutputCP
WriteConsoleA
SetFilePointer
FlushFileBuffers
SetStdHandle
GetModuleHandleA
QueryPerformanceCounter
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetFileType
SetHandleCount
GetStdHandle
ExitProcess
GetCommandLineW
HeapDestroy
HeapCreate
VirtualAlloc
VirtualFree
FatalAppExitA
DeleteCriticalSection
LCMapStringW
MultiByteToWideChar
LCMapStringA
GetCurrentThread
GetCurrentThreadId
TlsFree
TlsSetValue
TlsAlloc
TlsGetValue
GetModuleHandleW
IsValidCodePage
GetOEMCP
GetACP
InterlockedDecrement
InterlockedIncrement
GetCPInfo
RtlUnwind
GetConsoleMode
GetConsoleCP
WideCharToMultiByte
WriteConsoleW
WriteFile
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetStartupInfoA
GetCommandLineA
HeapReAlloc
CreateThread
ResumeThread
ExitThread
GetProcAddress
SetLastError
CreateFileA
FindResourceA
LoadResource
SizeofResource
LockResource
GetCurrentProcess
GetLastError
CloseHandle
LocalAlloc
LoadLibraryA
Sleep
LocalFree
InitializeCriticalSectionAndSpinCount
GetStringTypeA
GetStringTypeW
GetTimeFormatA
GetDateFormatA
GetUserDefaultLCID
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale
SetConsoleCtrlHandler
FreeLibrary
InterlockedExchange
SetEndOfFile
ReadFile
GetTimeZoneInformation
HeapSize
GetLocaleInfoW
CompareStringA
CompareStringW
GetSystemTimeAsFileTime
SetEnvironmentVariableA
user32
TranslateAcceleratorA
TranslateMessage
DispatchMessageA
RegisterClassA
LoadMenuA
InsertMenuA
GetMessageA
PostQuitMessage
LoadStringA
DialogBoxParamA
GetSubMenu
EnableMenuItem
TrackPopupMenu
LoadAcceleratorsA
CreateMenu
UpdateWindow
DestroyIcon
SetDlgItemTextA
GetParent
ChildWindowFromPoint
InvalidateRect
SetCapture
ReleaseCapture
SetWindowLongA
GetWindowLongA
GetClientRect
CreateWindowExA
SetFocus
CallWindowProcA
GetSysColor
LoadIconA
DrawIconEx
InvalidateRgn
SetWindowPos
GetMenu
CheckMenuItem
SetTimer
KillTimer
GetWindowRect
IsIconic
IsZoomed
OpenClipboard
EmptyClipboard
SetClipboardData
CloseClipboard
GetFocus
GetDC
DrawTextA
ReleaseDC
GetSystemMetrics
MoveWindow
ShowWindow
ClientToScreen
ScreenToClient
PostMessageA
DestroyWindow
DefWindowProcA
MessageBoxA
DialogBoxIndirectParamA
GetDlgItem
GetSysColorBrush
EndDialog
SetWindowTextA
LoadCursorA
SetCursor
InflateRect
SendMessageA
GetCursorPos
gdi32
EndDoc
EndPage
StartPage
StartDocA
SetMapMode
GetDeviceCaps
SetBkMode
SetTextColor
SelectObject
CreateFontIndirectA
GetObjectA
GetStockObject
GetTextExtentPoint32A
ExtTextOutA
SetBkColor
DeleteObject
CreateCompatibleDC
CreateSolidBrush
GetTextMetricsA
comdlg32
ChooseFontA
PrintDlgA
GetSaveFileNameA
advapi32
RegOpenKeyExA
RegOpenKeyA
RegQueryValueExA
RegCreateKeyA
RegSetValueExA
RegCloseKey
RegDeleteKeyA
OpenProcessToken
LookupPrivilegeValueA
AdjustTokenPrivileges
shell32
ShellExecuteA
SHGetFileInfoA
Sections
.text Size: 133KB - Virtual size: 132KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 27KB - Virtual size: 26KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 5KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 21KB - Virtual size: 21KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
wintaylor2.1/Programs/tools/sysinternals/Vmmap.chm.chm
-
wintaylor2.1/Programs/tools/sysinternals/Volumeid.exe.exe windows:4 windows x86
c51be73105081640890f581847c006ec
Code Sign
47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4Certificate
IssuerCN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZANot Before04-12-2003 00:00Not After03-12-2013 23:59SubjectCN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=USExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageCertSign
KeyUsageCRLSign
0d:e9:2b:f0:d4:d8:29:88:18:32:05:09:5e:9a:76:88Certificate
IssuerCN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=USNot Before04-12-2003 00:00Not After03-12-2008 23:59SubjectCN=VeriSign Time Stamping Services Signer,O=VeriSign\, Inc.,C=USExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageContentCommitment
c1:00:8b:3c:3c:88:11:d1:3e:f6:63:ec:df:40Certificate
IssuerCN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft CorporationNot Before10-01-1997 07:00Not After31-12-2020 07:00SubjectCN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation6a:0b:99:4f:c0:00:1d:ab:11:da:c4:02:a1:66:27:baCertificate
IssuerCN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft CorporationNot Before04-04-2006 17:44Not After26-04-2012 07:00SubjectCN=Microsoft Code Signing PCA,OU=Copyright (c) 2000 Microsoft Corp.,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USExtended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageContentCommitment
KeyUsageCertSign
KeyUsageCRLSign
61:46:9e:cb:00:04:00:00:00:65Certificate
IssuerCN=Microsoft Code Signing PCA,OU=Copyright (c) 2000 Microsoft Corp.,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USNot Before04-04-2006 19:43Not After04-10-2007 19:53SubjectCN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USExtended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
KeyUsageContentCommitment
ed:91:bb:86:f6:bd:9d:98:04:40:57:86:5a:f1:55:01:98:49:11:75Signer
Actual PE Digested:91:bb:86:f6:bd:9d:98:04:40:57:86:5a:f1:55:01:98:49:11:75Digest Algorithmsha1PE Digest MatchestrueHeaders
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetVersion
LoadLibraryA
LocalAlloc
GetModuleHandleA
FlushFileBuffers
GetProcAddress
ReadFile
GetDriveTypeA
GetCPInfo
GetStringTypeW
GetStringTypeA
RtlUnwind
GetStartupInfoA
GetFileType
SetFilePointer
WriteFile
CreateFileA
GetLastError
GetVolumeInformationA
GetOEMCP
CloseHandle
GetStdHandle
SetHandleCount
GetVersionExA
DeviceIoControl
LocalFree
FormatMessageA
GetACP
ExitProcess
TerminateProcess
GetCurrentProcess
HeapAlloc
HeapFree
GetCommandLineA
WideCharToMultiByte
MultiByteToWideChar
LCMapStringA
LCMapStringW
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
HeapReAlloc
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
SetStdHandle
user32
DialogBoxIndirectParamA
LoadCursorA
SetCursor
InflateRect
GetDlgItem
GetSysColorBrush
EndDialog
SetWindowTextA
SendMessageA
gdi32
SetMapMode
StartDocA
StartPage
EndPage
EndDoc
GetDeviceCaps
comdlg32
PrintDlgA
advapi32
RegQueryValueExA
RegCreateKeyA
RegSetValueExA
RegCloseKey
Sections
.text Size: 28KB - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 108KB - Virtual size: 113KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
wintaylor2.1/Programs/tools/sysinternals/ZoomIt.exe.exe windows:5 windows x86
70fe523c82a8d4feb851930f09599a07
Code Sign
2e:ab:11:dc:50:ff:5c:9d:cb:c0Certificate
IssuerCN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft CorporationNot Before22-08-2007 22:31Not After25-08-2012 07:00SubjectCN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USExtended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
61:01:64:0f:00:00:00:00:00:0bCertificate
IssuerCN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USNot Before20-01-2009 01:58Not After20-03-2010 02:08SubjectCN=Microsoft Corporation,OU=AOC,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USExtended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
KeyUsageContentCommitment
61:49:7c:ed:00:00:00:00:00:05Certificate
IssuerCN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USNot Before16-09-2006 01:55Not After16-09-2011 02:05SubjectCN=Microsoft Timestamping Service,OU=nCipher DSE ESN:10D8-5847-CBF8,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageContentCommitment
6a:0b:99:4f:c0:00:25:ab:11:db:45:1f:58:7a:67:a2Certificate
IssuerCN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft CorporationNot Before16-09-2006 01:04Not After15-09-2019 07:00SubjectCN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
cf:6f:1d:c7:2e:82:c0:f3:bb:4e:57:57:74:b6:58:7b:2e:ca:b1:79Signer
Actual PE Digestcf:6f:1d:c7:2e:82:c0:f3:bb:4e:57:57:74:b6:58:7b:2e:ca:b1:79Digest Algorithmsha1PE Digest MatchestrueHeaders
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
comctl32
ord17
winmm
PlaySoundA
gdiplus
GdipCloneImage
GdipDrawImageRectRect
GdipSetPixelOffsetMode
GdipSetInterpolationMode
GdipCreateFromHDC
GdiplusShutdown
GdiplusStartup
GdipGetImageEncoders
GdipCreateHBITMAPFromBitmap
GdipCreateBitmapFromHBITMAP
GdipCreateBitmapFromFileICM
GdipCreateBitmapFromFile
GdipSaveImageToFile
GdipDisposeImage
GdipDeleteGraphics
GdipAlloc
GdipFree
GdipGetImageEncodersSize
msimg32
AlphaBlend
kernel32
GetFileAttributesA
GetModuleFileNameA
MultiByteToWideChar
lstrcpynA
Beep
GetTickCount
SetThreadPriority
GetCurrentThread
MulDiv
GetVersion
Sleep
CreateEventA
LCMapStringA
SetFilePointer
InterlockedExchange
FreeLibrary
SetConsoleCtrlHandler
InitializeCriticalSectionAndSpinCount
GetSystemTimeAsFileTime
GetCurrentProcessId
QueryPerformanceCounter
GetFileType
SetHandleCount
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
HeapSize
RtlUnwind
GetConsoleMode
GetConsoleCP
ExpandEnvironmentStringsA
GetCurrentThreadId
SetLastError
TlsFree
TlsSetValue
TlsAlloc
TlsGetValue
IsValidCodePage
GetOEMCP
GetACP
InterlockedDecrement
InterlockedIncrement
GetCPInfo
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
GetStdHandle
WriteFile
ExitProcess
GetModuleHandleW
HeapDestroy
HeapCreate
HeapReAlloc
VirtualAlloc
VirtualFree
EnterCriticalSection
FatalAppExitA
LeaveCriticalSection
DeleteCriticalSection
GetStartupInfoA
HeapFree
HeapAlloc
GetLastError
GetCommandLineA
CreateProcessA
DeleteFileA
WaitForSingleObject
GetExitCodeProcess
CloseHandle
FindResourceA
LoadResource
SizeofResource
LockResource
GetCurrentProcess
FormatMessageA
GetProcAddress
GetCommandLineW
LocalAlloc
LoadLibraryA
LocalFree
GetModuleHandleA
LCMapStringW
GetStringTypeA
SetEnvironmentVariableA
GetStringTypeW
GetTimeFormatA
GetDateFormatA
GetUserDefaultLCID
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale
SetStdHandle
FlushFileBuffers
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
CreateFileA
GetLocaleInfoW
GetTimeZoneInformation
SetEndOfFile
GetProcessHeap
ReadFile
RaiseException
CompareStringA
CompareStringW
WideCharToMultiByte
user32
TranslateMessage
DispatchMessageA
GetKeyState
PostQuitMessage
OpenClipboard
EmptyClipboard
SetClipboardData
CloseClipboard
SetRect
CreatePopupMenu
InsertMenuA
TranslateAcceleratorA
DestroyMenu
GetDesktopWindow
GetActiveWindow
GetParent
BringWindowToTop
SetFocus
SetForegroundWindow
SetActiveWindow
PostMessageA
GetSysColor
ChildWindowFromPoint
GetMessageA
FindWindowA
LoadAcceleratorsA
TrackPopupMenu
CreateDialogParamA
DialogBoxParamA
BeginPaint
GetWindowRect
MapWindowPoints
EndPaint
IsDlgButtonChecked
EnableWindow
GetDlgItemTextA
SetDlgItemTextA
CheckDlgButton
CreateWindowExA
ShowWindow
SetTimer
GetCursorPos
UpdateWindow
RegisterHotKey
KillTimer
DestroyWindow
GetClientRect
GetAsyncKeyState
IsWindowVisible
DefWindowProcA
GetMessageExtraInfo
GetClipCursor
ClipCursor
DrawTextA
InvalidateRect
UnregisterHotKey
SystemParametersInfoA
GetWindowLongA
SetWindowLongA
RedrawWindow
LoadIconA
GetDC
FillRect
ReleaseDC
EnumDisplaySettingsA
ChangeDisplaySettingsExA
FindWindowW
SetWindowPos
SetCursorPos
MessageBoxA
DialogBoxIndirectParamA
GetDlgItem
GetSysColorBrush
EndDialog
SetWindowTextA
LoadCursorA
SetCursor
InflateRect
SendMessageA
RegisterClassA
gdi32
EndDoc
MoveToEx
Ellipse
Rectangle
CreatePen
CreateFontIndirectA
SetTextColor
EndPage
GetObjectA
GetStockObject
SetROP2
CreateBitmap
CreateDCA
StretchBlt
SetStretchBltMode
StartPage
StartDocA
SetMapMode
CreateSolidBrush
GetDeviceCaps
SelectObject
CreateCompatibleBitmap
CreateCompatibleDC
DeleteDC
DeleteObject
BitBlt
Polygon
SetBkMode
LineTo
comdlg32
ChooseFontA
GetOpenFileNameA
PrintDlgA
GetSaveFileNameA
advapi32
RegSetValueExA
RegCreateKeyExA
RegDeleteValueA
RegOpenKeyExA
RegCreateKeyA
RegQueryValueExA
RegCloseKey
shell32
Shell_NotifyIconA
ShellExecuteA
ole32
CoInitialize
Sections
.text Size: 190KB - Virtual size: 189KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 31KB - Virtual size: 30KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 7KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 304KB - Virtual size: 303KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
wintaylor2.1/Programs/tools/sysinternals/accesschk.exe.exe windows:5 windows x86
86f141fe505e78d1d64e655351eef5eb
Code Sign
2e:ab:11:dc:50:ff:5c:9d:cb:c0Certificate
IssuerCN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft CorporationNot Before22-08-2007 22:31Not After25-08-2012 07:00SubjectCN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USExtended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
61:01:cf:3e:00:00:00:00:00:0fCertificate
IssuerCN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USNot Before07-12-2009 22:40Not After07-03-2011 22:40SubjectCN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USExtended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
6a:0b:99:4f:c0:00:25:ab:11:db:45:1f:58:7a:67:a2Certificate
IssuerCN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft CorporationNot Before16-09-2006 01:04Not After15-09-2019 07:00SubjectCN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
61:05:a2:30:00:00:00:00:00:08Certificate
IssuerCN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USNot Before25-07-2008 19:01Not After25-07-2013 19:11SubjectCN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:85D3-305C-5BCF,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageContentCommitment
a1:e2:04:c2:6e:2b:93:a3:5c:eb:d2:5a:8f:55:e4:64:8f:4a:2d:13Signer
Actual PE Digesta1:e2:04:c2:6e:2b:93:a3:5c:eb:d2:5a:8f:55:e4:64:8f:4a:2d:13Digest Algorithmsha1PE Digest MatchestrueHeaders
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
netapi32
NetApiBufferFree
NetUserGetLocalGroups
version
GetFileVersionInfoSizeW
VerQueryValueW
GetFileVersionInfoW
kernel32
EnumSystemLocalesA
IsValidLocale
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
HeapSize
GetLocaleInfoA
GetLocaleInfoW
GetTimeZoneInformation
Thread32First
OpenThread
Thread32Next
FindFirstFileW
FindNextFileW
FindClose
GetFileAttributesW
CreateFileW
FindResourceW
LoadResource
SizeofResource
LockResource
GetFullPathNameW
GetVersion
GetModuleFileNameW
GetLastError
GetCurrentProcess
SetLastError
CreateToolhelp32Snapshot
Process32FirstW
Process32NextW
OpenProcess
CloseHandle
GetSystemDirectoryW
ExpandEnvironmentStringsW
GetCurrentDirectoryW
DeleteFileW
SetEnvironmentVariableA
DeviceIoControl
FormatMessageW
GetProcAddress
GetCommandLineW
LocalAlloc
LoadLibraryW
LocalFree
GetModuleHandleW
CreateFileA
SetEndOfFile
GetProcessHeap
ReadFile
CompareStringA
CompareStringW
SetStdHandle
HeapAlloc
HeapFree
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
FatalAppExitA
VirtualFree
VirtualAlloc
HeapReAlloc
HeapCreate
HeapDestroy
Sleep
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameA
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetCPInfo
InterlockedIncrement
InterlockedDecrement
GetACP
GetOEMCP
IsValidCodePage
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
GetCurrentThreadId
GetCurrentThread
RtlUnwind
WideCharToMultiByte
GetConsoleCP
GetConsoleMode
FlushFileBuffers
SetHandleCount
GetFileType
GetStartupInfoA
LCMapStringA
MultiByteToWideChar
LCMapStringW
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
InitializeCriticalSectionAndSpinCount
SetConsoleCtrlHandler
FreeLibrary
InterlockedExchange
LoadLibraryA
SetFilePointer
GetStringTypeA
GetStringTypeW
GetTimeFormatA
GetDateFormatA
GetUserDefaultLCID
user32
GetSysColorBrush
EndDialog
SetWindowTextW
GetDlgItem
SetCursor
InflateRect
SendMessageW
DialogBoxIndirectParamW
LoadCursorW
gdi32
GetDeviceCaps
SetMapMode
StartDocW
StartPage
EndDoc
EndPage
comdlg32
PrintDlgW
advapi32
GetKernelObjectSecurity
OpenSCManagerW
CloseServiceHandle
OpenServiceW
EnumServicesStatusW
QueryServiceObjectSecurity
GetSecurityInfo
DeleteAce
RegOpenKeyExW
RegGetKeySecurity
RegEnumKeyW
GetNamedSecurityInfoW
RegDeleteKeyW
LookupPrivilegeValueW
AdjustTokenPrivileges
ImpersonateLoggedOnUser
RevertToSelf
LsaOpenPolicy
LsaNtStatusToWinError
LsaEnumerateAccountsWithUserRight
LookupPrivilegeNameW
LsaEnumerateAccountRights
LsaFreeMemory
LsaClose
GetEffectiveRightsFromAclW
GetSecurityDescriptorSacl
IsWellKnownSid
GetSecurityDescriptorOwner
LookupAccountNameW
GetSecurityDescriptorDacl
GetLengthSid
CopySid
GetTokenInformation
EqualSid
IsValidSid
GetSidIdentifierAuthority
GetAce
LookupAccountSidW
GetSidSubAuthorityCount
GetSidSubAuthority
OpenProcessToken
RegCreateKeyW
RegQueryValueExW
RegSetValueExW
RegCloseKey
Sections
.text Size: 149KB - Virtual size: 149KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 35KB - Virtual size: 35KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 119KB - Virtual size: 126KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
wintaylor2.1/Programs/tools/sysinternals/adrestore.exe.exe windows:4 windows x86
66a38e1024d19e37020ae76f47816fa4
Code Sign
47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4Certificate
IssuerCN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZANot Before04-12-2003 00:00Not After03-12-2013 23:59SubjectCN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=USExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageCertSign
KeyUsageCRLSign
0d:e9:2b:f0:d4:d8:29:88:18:32:05:09:5e:9a:76:88Certificate
IssuerCN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=USNot Before04-12-2003 00:00Not After03-12-2008 23:59SubjectCN=VeriSign Time Stamping Services Signer,O=VeriSign\, Inc.,C=USExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageContentCommitment
c1:00:8b:3c:3c:88:11:d1:3e:f6:63:ec:df:40Certificate
IssuerCN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft CorporationNot Before10-01-1997 07:00Not After31-12-2020 07:00SubjectCN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation6a:0b:99:4f:c0:00:1d:ab:11:da:c4:02:a1:66:27:baCertificate
IssuerCN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft CorporationNot Before04-04-2006 17:44Not After26-04-2012 07:00SubjectCN=Microsoft Code Signing PCA,OU=Copyright (c) 2000 Microsoft Corp.,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USExtended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageContentCommitment
KeyUsageCertSign
KeyUsageCRLSign
61:46:9e:cb:00:04:00:00:00:65Certificate
IssuerCN=Microsoft Code Signing PCA,OU=Copyright (c) 2000 Microsoft Corp.,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USNot Before04-04-2006 19:43Not After04-10-2007 19:53SubjectCN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USExtended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
KeyUsageContentCommitment
96:fc:37:60:78:3b:25:ea:8e:28:12:5d:3a:d0:e5:35:2f:50:5f:c9Signer
Actual PE Digest96:fc:37:60:78:3b:25:ea:8e:28:12:5d:3a:d0:e5:35:2f:50:5f:c9Digest Algorithmsha1PE Digest MatchestrueHeaders
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
wldap32
ord145
ord14
ord88
ord73
ord155
ord118
ord13
activeds
ord9
kernel32
LocalFree
LoadLibraryA
LocalAlloc
GetModuleHandleA
GetEnvironmentStringsW
FreeEnvironmentStringsW
lstrlenW
RtlUnwind
UnhandledExceptionFilter
HeapReAlloc
VirtualAlloc
VirtualFree
HeapCreate
HeapDestroy
lstrcpyW
lstrcatW
OutputDebugStringW
GetCommandLineA
GetCommandLineW
FreeEnvironmentStringsA
GetEnvironmentStrings
ReadFile
GetProcAddress
GetModuleFileNameA
SetFilePointer
GetStringTypeA
CloseHandle
GetModuleFileNameW
GetCurrentProcess
SetStdHandle
TerminateProcess
GetStartupInfoA
GetFileType
HeapAlloc
HeapFree
GetVersion
ExitProcess
MultiByteToWideChar
WideCharToMultiByte
LCMapStringA
LCMapStringW
GetLastError
FlushFileBuffers
WriteFile
SetHandleCount
GetStdHandle
GetStringTypeW
user32
LoadCursorA
SetCursor
InflateRect
GetDlgItem
GetSysColorBrush
EndDialog
CharNextW
SendMessageA
DialogBoxIndirectParamA
SetWindowTextA
gdi32
SetMapMode
StartDocA
StartPage
EndPage
EndDoc
GetDeviceCaps
comdlg32
PrintDlgA
advapi32
RegCloseKey
RegSetValueExA
RegQueryValueExA
RegCreateKeyA
ole32
CoInitialize
oleaut32
VariantInit
VariantClear
Sections
.text Size: 24KB - Virtual size: 22KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 108KB - Virtual size: 112KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
wintaylor2.1/Programs/tools/sysinternals/autoruns.chm.chm
-
wintaylor2.1/Programs/tools/sysinternals/autoruns.exe.exe windows:5 windows x86
4c25c5fb673559ebbe4e68bef275b543
Code Sign
2e:ab:11:dc:50:ff:5c:9d:cb:c0Certificate
IssuerCN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft CorporationNot Before22-08-2007 22:31Not After25-08-2012 07:00SubjectCN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USExtended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
61:01:cf:3e:00:00:00:00:00:0fCertificate
IssuerCN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USNot Before07-12-2009 22:40Not After07-03-2011 22:40SubjectCN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USExtended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
6a:0b:99:4f:c0:00:25:ab:11:db:45:1f:58:7a:67:a2Certificate
IssuerCN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft CorporationNot Before16-09-2006 01:04Not After15-09-2019 07:00SubjectCN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
61:05:a2:30:00:00:00:00:00:08Certificate
IssuerCN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USNot Before25-07-2008 19:01Not After25-07-2013 19:11SubjectCN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:85D3-305C-5BCF,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageContentCommitment
dc:31:1e:0c:fc:33:98:76:e6:8a:9a:9a:77:79:fa:bb:b2:ec:a1:a1Signer
Actual PE Digestdc:31:1e:0c:fc:33:98:76:e6:8a:9a:9a:77:79:fa:bb:b2:ec:a1:a1Digest Algorithmsha1PE Digest MatchestrueHeaders
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
version
GetFileVersionInfoA
GetFileVersionInfoSizeA
VerQueryValueA
comctl32
ImageList_ReplaceIcon
ImageList_GetIcon
ImageList_GetImageCount
ImageList_Remove
ImageList_Create
CreateToolbarEx
ord17
ImageList_Add
ImageList_Draw
kernel32
InitializeCriticalSection
TlsAlloc
GetCommandLineW
GetFileAttributesA
FindFirstFileA
WritePrivateProfileSectionA
GetPrivateProfileSectionA
FindClose
FindNextFileA
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
SetStdHandle
IsValidLocale
EnumSystemLocalesA
GetUserDefaultLCID
InterlockedExchange
SetConsoleCtrlHandler
InitializeCriticalSectionAndSpinCount
GetSystemTimeAsFileTime
GetCurrentProcessId
QueryPerformanceCounter
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
HeapSize
GetStringTypeW
MulDiv
LCMapStringW
LCMapStringA
GetConsoleMode
GetConsoleCP
GetFileType
SetHandleCount
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
GetStdHandle
WriteFile
ExitProcess
HeapDestroy
HeapCreate
VirtualAlloc
VirtualFree
FatalAppExitA
DeleteCriticalSection
GetTimeFormatA
GetCurrentThreadId
SetLastError
TlsFree
CreateSemaphoreA
GetStartupInfoA
CreateThread
ResumeThread
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
RaiseException
HeapReAlloc
HeapFree
HeapAlloc
RtlUnwind
lstrlenW
lstrcpyA
lstrlenA
lstrcatA
GetTickCount
ReadFile
SetFilePointer
WideCharToMultiByte
GetWindowsDirectoryA
ExpandEnvironmentStringsA
GetLocaleInfoW
GetTimeZoneInformation
SetEndOfFile
GetProcessHeap
CompareStringA
SetEnvironmentVariableA
LoadLibraryA
GetProcAddress
GetLocaleInfoA
GetNumberFormatA
GetModuleFileNameA
TlsSetValue
CreateFileA
CreateToolhelp32Snapshot
Process32First
OpenProcess
LocalFree
Process32Next
GetCurrentProcess
GetLastError
CloseHandle
InterlockedIncrement
InterlockedDecrement
TlsGetValue
CreateFileMappingA
MapViewOfFile
UnmapViewOfFile
GetFullPathNameA
GetModuleHandleA
LocalAlloc
lstrcmpA
FormatMessageA
TerminateProcess
GetCommandLineA
SetErrorMode
LoadLibraryExA
FreeLibrary
ExitThread
WaitForSingleObject
ReleaseSemaphore
MultiByteToWideChar
Sleep
GlobalAlloc
GlobalLock
GlobalUnlock
DeleteFileA
GetPrivateProfileStringA
WriteProfileStringA
WritePrivateProfileStringA
GetProfileStringA
CreateDirectoryA
SetFileAttributesA
MoveFileA
RemoveDirectoryA
EnterCriticalSection
CreateProcessA
LeaveCriticalSection
GetFileSize
GetFileTime
FileTimeToLocalFileTime
FileTimeToSystemTime
GetModuleHandleW
GetDateFormatA
GetCurrentThread
GetVersion
CompareStringW
GetStringTypeA
FlushFileBuffers
user32
TranslateMessage
DispatchMessageA
SetMenuItemInfoA
DrawMenuBar
LoadStringA
DrawIconEx
InvalidateRgn
GetWindowTextA
ReleaseCapture
MapWindowPoints
GetDlgItemTextA
GetSysColorBrush
ChildWindowFromPoint
GetPropA
TranslateAcceleratorA
IsDialogMessageA
GetMessageA
LoadAcceleratorsA
CreateDialogParamA
RegisterClassExA
LoadImageA
RegisterWindowMessageA
DialogBoxIndirectParamA
DeferWindowPos
BeginDeferWindowPos
EnumChildWindows
EndDeferWindowPos
OffsetRect
UnionRect
PtInRect
BeginPaint
DrawFrameControl
EndPaint
SetPropA
GetWindowLongA
SetWindowLongA
EnableWindow
InflateRect
GetClassNameA
EndDialog
TrackPopupMenu
EnableMenuItem
DeleteMenu
GetSubMenu
InsertMenuA
SetDlgItemTextA
EnumDisplaySettingsA
FindWindowA
WaitForInputIdle
GetWindowThreadProcessId
SetForegroundWindow
FindWindowExA
CreateIconIndirect
GetIconInfo
CloseClipboard
OpenClipboard
EmptyClipboard
SetClipboardData
GetMenu
CheckMenuItem
SetWindowTextA
DialogBoxParamA
SetWindowPos
GetWindowRect
IsIconic
IsZoomed
GetDlgItem
SetTimer
GetParent
GetCursorPos
CreateWindowExA
CallWindowProcA
GetSysColor
GetClientRect
GetSystemMetrics
IntersectRect
InvalidateRect
GetFocus
GetDC
DrawTextA
ReleaseDC
MoveWindow
ShowWindow
ClientToScreen
ScreenToClient
DestroyWindow
DefWindowProcA
PostMessageA
SetFocus
LoadCursorA
SetCursor
SendMessageA
LoadIconA
DestroyIcon
MessageBoxA
PostQuitMessage
gdi32
GetDIBits
CreateDIBSection
SetMapMode
StartDocA
StartPage
EndPage
EndDoc
CreateSolidBrush
GetTextMetricsA
DeleteObject
GetStockObject
GetObjectA
CreateCompatibleDC
GetDeviceCaps
DeleteDC
CreateFontIndirectA
SetBkColor
ExtTextOutA
GetTextExtentPoint32A
SelectObject
SetTextColor
SetBkMode
GdiFlush
comdlg32
ChooseFontA
GetSaveFileNameA
CommDlgExtendedError
GetOpenFileNameA
FindTextA
PrintDlgA
advapi32
RegSetKeySecurity
RegOpenKeyA
RegGetKeySecurity
LookupPrivilegeValueA
AdjustTokenPrivileges
RegCloseKey
RegDeleteKeyA
RegEnumValueA
RegSetValueExA
RegCreateKeyExA
RegSetValueExW
RegQueryValueExA
RegLoadKeyA
RegCreateKeyA
RegUnLoadKeyA
RegDeleteValueA
RegQueryInfoKeyA
LookupAccountSidA
LookupAccountNameA
RegQueryValueA
RegEnumKeyA
DeleteService
CloseServiceHandle
FreeSid
OpenServiceA
OpenSCManagerA
CryptReleaseContext
CryptDestroyHash
CryptGetHashParam
CryptHashData
CryptCreateHash
CryptAcquireContextA
EqualSid
GetTokenInformation
AllocateAndInitializeSid
SetSecurityInfo
GetAce
GetSecurityInfo
RevertToSelf
ImpersonateLoggedOnUser
RegOpenKeyExA
OpenProcessToken
shell32
SHBrowseForFolderA
ShellExecuteExA
SHGetFileInfoA
CommandLineToArgvW
ShellExecuteA
SHGetPathFromIDListA
SHGetMalloc
ole32
CoCreateInstance
CoInitialize
CoTaskMemFree
CoUninitialize
oleaut32
SysFreeString
SysStringLen
SysAllocStringByteLen
SysAllocString
SysStringByteLen
VariantInit
VariantClear
VariantChangeType
GetErrorInfo
SetErrorInfo
CreateErrorInfo
shlwapi
SHCreateStreamOnFileA
UrlUnescapeA
Sections
.text Size: 472KB - Virtual size: 472KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 87KB - Virtual size: 87KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 15KB - Virtual size: 25KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 104KB - Virtual size: 104KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
wintaylor2.1/Programs/tools/sysinternals/autorunsc.exe.exe windows:5 windows x86
bc43f3e8e7cdc31e0f630c6ce91d40d2
Code Sign
2e:ab:11:dc:50:ff:5c:9d:cb:c0Certificate
IssuerCN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft CorporationNot Before22-08-2007 22:31Not After25-08-2012 07:00SubjectCN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USExtended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
61:01:cf:3e:00:00:00:00:00:0fCertificate
IssuerCN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USNot Before07-12-2009 22:40Not After07-03-2011 22:40SubjectCN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USExtended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
6a:0b:99:4f:c0:00:25:ab:11:db:45:1f:58:7a:67:a2Certificate
IssuerCN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft CorporationNot Before16-09-2006 01:04Not After15-09-2019 07:00SubjectCN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
61:05:a2:30:00:00:00:00:00:08Certificate
IssuerCN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USNot Before25-07-2008 19:01Not After25-07-2013 19:11SubjectCN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:85D3-305C-5BCF,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageContentCommitment
51:67:08:d0:62:1b:f1:4c:d4:57:d0:1e:ec:1e:3e:b9:b9:2f:ad:87Signer
Actual PE Digest51:67:08:d0:62:1b:f1:4c:d4:57:d0:1e:ec:1e:3e:b9:b9:2f:ad:87Digest Algorithmsha1PE Digest MatchestrueHeaders
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
version
GetFileVersionInfoA
GetFileVersionInfoSizeA
VerQueryValueA
comctl32
ImageList_Add
ImageList_GetIcon
ImageList_ReplaceIcon
kernel32
ExitThread
SetErrorMode
InitializeCriticalSection
TlsAlloc
GetFileAttributesA
FindFirstFileA
GetCommandLineW
GetPrivateProfileStringA
FreeLibrary
LoadLibraryExA
WritePrivateProfileSectionA
GetPrivateProfileSectionA
WritePrivateProfileStringA
FindClose
FindNextFileA
CompareStringA
GetProcessHeap
SetEndOfFile
GetTimeZoneInformation
GetLocaleInfoW
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
SetStdHandle
IsValidLocale
EnumSystemLocalesA
GetUserDefaultLCID
InterlockedExchange
SetConsoleCtrlHandler
InitializeCriticalSectionAndSpinCount
GetSystemTimeAsFileTime
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
EnterCriticalSection
GetFileSize
GetFileTime
FileTimeToLocalFileTime
FileTimeToSystemTime
GetDateFormatA
GetTimeFormatA
CreateFileMappingA
MapViewOfFile
UnmapViewOfFile
GetFullPathNameA
GetVersion
GetModuleHandleA
LocalAlloc
lstrcmpA
ReadFile
SetFilePointer
CreateFileA
LeaveCriticalSection
MultiByteToWideChar
CreateProcessA
LCMapStringA
lstrcpyA
lstrlenA
FormatMessageA
GetStdHandle
WriteFile
WideCharToMultiByte
GetWindowsDirectoryA
ExpandEnvironmentStringsA
SetEnvironmentVariableA
LoadLibraryA
GetProcAddress
GetLocaleInfoA
GetNumberFormatA
InterlockedDecrement
GetModuleFileNameA
TlsSetValue
CreateToolhelp32Snapshot
Process32First
Process32Next
OpenProcess
LocalFree
GetCurrentProcess
GetLastError
CloseHandle
InterlockedIncrement
TlsGetValue
CompareStringW
IsValidCodePage
GetOEMCP
FreeEnvironmentStringsA
HeapSize
FlushFileBuffers
GetStringTypeW
GetStringTypeA
GetConsoleMode
GetConsoleCP
GetStartupInfoA
GetACP
GetCPInfo
GetCurrentThread
GetCurrentThreadId
SetLastError
TlsFree
ExitProcess
Sleep
GetModuleHandleW
GetFileType
SetHandleCount
lstrlenW
HeapAlloc
HeapFree
HeapReAlloc
RaiseException
RtlUnwind
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetCommandLineA
DeleteCriticalSection
FatalAppExitA
VirtualFree
VirtualAlloc
HeapCreate
HeapDestroy
LCMapStringW
user32
LoadCursorA
LoadIconA
DestroyIcon
SetCursor
SendMessageA
LoadStringA
DialogBoxIndirectParamA
GetSysColorBrush
EndDialog
InflateRect
DeleteMenu
InsertMenuA
CheckMenuItem
SetWindowTextA
GetSubMenu
TrackPopupMenu
GetMenu
EnableMenuItem
GetDlgItem
SetDlgItemTextA
ShowWindow
gdi32
DeleteObject
GetDeviceCaps
SetMapMode
StartDocA
StartPage
EndPage
EndDoc
comdlg32
PrintDlgA
advapi32
RegGetKeySecurity
OpenSCManagerA
OpenServiceA
RegCloseKey
AdjustTokenPrivileges
LookupPrivilegeValueA
OpenProcessToken
CloseServiceHandle
CryptAcquireContextA
CryptCreateHash
CryptHashData
CryptGetHashParam
CryptDestroyHash
CryptReleaseContext
RegCreateKeyA
RegQueryInfoKeyA
RegEnumKeyA
RegQueryValueA
LookupAccountNameA
LookupAccountSidA
RegLoadKeyA
RegUnLoadKeyA
RegQueryValueExA
RegSetValueExW
RegCreateKeyExA
RegSetValueExA
RegEnumValueA
RegOpenKeyExA
ImpersonateLoggedOnUser
RevertToSelf
RegDeleteKeyA
RegSetKeySecurity
RegOpenKeyA
GetSecurityInfo
GetAce
SetSecurityInfo
AllocateAndInitializeSid
GetTokenInformation
EqualSid
FreeSid
shell32
SHGetFileInfoA
ShellExecuteA
ole32
CoTaskMemFree
CoUninitialize
CoInitialize
CoCreateInstance
oleaut32
VariantClear
VariantChangeType
VariantInit
SysStringByteLen
SysAllocStringByteLen
SysFreeString
SysStringLen
SysAllocString
SetErrorInfo
GetErrorInfo
CreateErrorInfo
shlwapi
UrlUnescapeA
Sections
.text Size: 380KB - Virtual size: 379KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 74KB - Virtual size: 73KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 6KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 104KB - Virtual size: 104KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
wintaylor2.1/Programs/tools/sysinternals/ctrl2cap.amd.sys.sys windows:5 windows x64
053a0aec95933cbf178d865941afc5bf
Code Sign
41:91:a1:5a:39:78:df:cf:49:65:66:38:1d:4c:75:c2Certificate
IssuerOU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=USNot Before16-07-2004 00:00Not After15-07-2014 23:59SubjectCN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=USExtended Key Usages
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
Key Usages
KeyUsageCertSign
KeyUsageCRLSign
61:0c:12:06:00:00:00:00:00:1bCertificate
IssuerCN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USNot Before23-05-2006 17:01Not After23-05-2016 17:11SubjectOU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=USKey Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
75:c1:a7:98:b8:75:89:43:35:c7:8c:dd:bf:05:cb:ffCertificate
IssuerCN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=USNot Before02-02-2006 00:00Not After04-04-2007 23:59SubjectCN=Sysinternals,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=Headquarters,O=Sysinternals,L=Austin,ST=Texas,C=USExtended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
29:63:9d:13:86:b7:68:42:ef:cd:8a:89:c6:4d:8a:96:6e:39:42:f4Signer
Actual PE Digest29:63:9d:13:86:b7:68:42:ef:cd:8a:89:c6:4d:8a:96:6e:39:42:f4Digest Algorithmsha1PE Digest MatchestrueHeaders
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
ntoskrnl.exe
IoDeleteDevice
IoCreateDevice
IoAttachDeviceToDeviceStack
IoDetachDevice
IofCallDriver
PoCallDriver
PoStartNextPowerIrp
KeBugCheckEx
Sections
.text Size: 512B - Virtual size: 352B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 284B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 272B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 512B - Virtual size: 72B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
PAGE Size: 512B - Virtual size: 441B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
INIT Size: 1024B - Virtual size: 536B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 912B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
wintaylor2.1/Programs/tools/sysinternals/ctrl2cap.exe.exe windows:4 windows x86
30deec6579f48261855708cba9a37fd6
Code Sign
47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4Certificate
IssuerCN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZANot Before04-12-2003 00:00Not After03-12-2013 23:59SubjectCN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=USExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageCertSign
KeyUsageCRLSign
0d:e9:2b:f0:d4:d8:29:88:18:32:05:09:5e:9a:76:88Certificate
IssuerCN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=USNot Before04-12-2003 00:00Not After03-12-2008 23:59SubjectCN=VeriSign Time Stamping Services Signer,O=VeriSign\, Inc.,C=USExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageContentCommitment
c1:00:8b:3c:3c:88:11:d1:3e:f6:63:ec:df:40Certificate
IssuerCN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft CorporationNot Before10-01-1997 07:00Not After31-12-2020 07:00SubjectCN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation6a:0b:99:4f:c0:00:1d:ab:11:da:c4:02:a1:66:27:baCertificate
IssuerCN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft CorporationNot Before04-04-2006 17:44Not After26-04-2012 07:00SubjectCN=Microsoft Code Signing PCA,OU=Copyright (c) 2000 Microsoft Corp.,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USExtended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageContentCommitment
KeyUsageCertSign
KeyUsageCRLSign
61:46:9e:cb:00:04:00:00:00:65Certificate
IssuerCN=Microsoft Code Signing PCA,OU=Copyright (c) 2000 Microsoft Corp.,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USNot Before04-04-2006 19:43Not After04-10-2007 19:53SubjectCN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USExtended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
KeyUsageContentCommitment
e7:c3:fd:d1:6b:37:27:73:8d:f5:de:36:59:56:81:10:87:84:35:93Signer
Actual PE Digeste7:c3:fd:d1:6b:37:27:73:8d:f5:de:36:59:56:81:10:87:84:35:93Digest Algorithmsha1PE Digest MatchestrueHeaders
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
MultiByteToWideChar
SetStdHandle
FlushFileBuffers
LCMapStringA
LocalFree
GetCPInfo
LCMapStringW
GetStringTypeA
GetStringTypeW
LocalAlloc
GetModuleHandleA
GetOEMCP
SetFilePointer
WriteFile
LoadLibraryA
GetProcAddress
GetCurrentProcess
GetVersion
GetSystemDirectoryA
CopyFileA
GetLastError
FormatMessageA
DeleteFileA
GetACP
ExitProcess
TerminateProcess
HeapAlloc
HeapFree
GetCommandLineA
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
HeapReAlloc
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
RtlUnwind
CloseHandle
user32
DialogBoxIndirectParamA
LoadCursorA
SetCursor
InflateRect
GetDlgItem
GetSysColorBrush
EndDialog
SetWindowTextA
SendMessageA
gdi32
StartDocA
GetDeviceCaps
SetMapMode
StartPage
EndPage
EndDoc
comdlg32
PrintDlgA
advapi32
RegOpenKeyA
RegCreateKeyA
RegQueryValueExA
RegCloseKey
RegSetValueExA
RegDeleteKeyA
AllocateAndInitializeSid
CheckTokenMembership
FreeSid
Sections
.text Size: 20KB - Virtual size: 19KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 112KB - Virtual size: 113KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
wintaylor2.1/Programs/tools/sysinternals/ctrl2cap.nt4.sys.sys windows:4 windows x86
f8e3459f539be62994d9e0b7ee4b6de7
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
ntoskrnl.exe
IoCreateDevice
RtlInitUnicodeString
RtlFreeUnicodeString
IoDeleteDevice
IoAttachDevice
ZwDisplayString
RtlAnsiStringToUnicodeString
RtlInitAnsiString
sprintf
IofCallDriver
Sections
.text Size: 576B - Virtual size: 547B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
PAGE Size: 32B - Virtual size: 29B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
INIT Size: 352B - Virtual size: 332B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 896B - Virtual size: 880B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.reloc Size: 64B - Virtual size: 64B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
wintaylor2.1/Programs/tools/sysinternals/ctrl2cap.nt5.sys.sys windows:5 windows x86
4e00a523e4d7d53a2dee34c0906284ee
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
ntoskrnl.exe
IoDeleteDevice
IoCreateDevice
IoAttachDeviceToDeviceStack
IoDetachDevice
IofCallDriver
PoCallDriver
PoStartNextPowerIrp
Sections
.text Size: 160B - Virtual size: 137B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 128B - Virtual size: 116B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
PAGE Size: 256B - Virtual size: 249B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
INIT Size: 320B - Virtual size: 292B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 896B - Virtual size: 880B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.reloc Size: 96B - Virtual size: 96B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
wintaylor2.1/Programs/tools/sysinternals/dbgview.chm.chm
-
wintaylor2.1/Programs/tools/sysinternals/disk2vhd.exe.exe windows:5 windows x86
347fd339046e7a2ac5de80d608b712e2
Code Sign
2e:ab:11:dc:50:ff:5c:9d:cb:c0Certificate
IssuerCN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft CorporationNot Before22-08-2007 22:31Not After25-08-2012 07:00SubjectCN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USExtended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
61:01:cf:3e:00:00:00:00:00:0fCertificate
IssuerCN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USNot Before07-12-2009 22:40Not After07-03-2011 22:40SubjectCN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USExtended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
6a:0b:99:4f:c0:00:25:ab:11:db:45:1f:58:7a:67:a2Certificate
IssuerCN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft CorporationNot Before16-09-2006 01:04Not After15-09-2019 07:00SubjectCN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
61:06:94:2d:00:00:00:00:00:09Certificate
IssuerCN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USNot Before25-07-2008 19:02Not After25-07-2013 19:12SubjectCN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:7A82-688A-9F92,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageContentCommitment
51:3f:5b:b7:ea:a9:b2:e3:21:c9:22:a5:37:4b:bc:3b:92:39:02:92Signer
Actual PE Digest51:3f:5b:b7:ea:a9:b2:e3:21:c9:22:a5:37:4b:bc:3b:92:39:02:92Digest Algorithmsha1PE Digest MatchestrueHeaders
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
version
VerQueryValueW
GetFileVersionInfoSizeW
GetFileVersionInfoW
vssapi
?CreateVssBackupComponents@@YGJPAPAVIVssBackupComponents@@@Z
comctl32
ord17
cabinet
ord23
ord20
ord22
kernel32
GetCommandLineW
GetDriveTypeW
FindResourceW
LoadResource
InterlockedIncrement
MoveFileExW
GetCurrentProcess
GetComputerNameW
LoadLibraryW
CopyFileW
SizeofResource
FormatMessageW
GetVersionExW
GetExitCodeProcess
GetFileAttributesW
GetStdHandle
GetCurrentDirectoryW
MoveFileW
LockResource
GetSystemInfo
GetDiskFreeSpaceExW
GetVolumeNameForVolumeMountPointW
DeleteFileW
LocalFree
GetVolumeInformationW
ExpandEnvironmentStringsW
LocalAlloc
SleepEx
WaitForSingleObjectEx
GetTickCount
InitializeCriticalSection
LeaveCriticalSection
ReleaseSemaphore
ReadFileEx
EnterCriticalSection
GetLocalTime
CreateSemaphoreW
DeleteCriticalSection
WriteFileEx
GetVolumePathNameW
ExpandEnvironmentStringsA
LoadLibraryA
GetCurrentProcessId
QueryPerformanceCounter
GetEnvironmentStringsW
InterlockedDecrement
GetFullPathNameW
MultiByteToWideChar
LCMapStringW
HeapSize
RtlUnwind
RaiseException
IsProcessorFeaturePresent
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
FlushFileBuffers
GetConsoleMode
GetConsoleCP
Sleep
GetFileType
InitializeCriticalSectionAndSpinCount
SetHandleCount
HeapCreate
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
GetStartupInfoW
HeapSetInformation
GetCommandLineA
GetSystemTimeAsFileTime
HeapReAlloc
CreateThread
GetCurrentThreadId
ExitThread
EncodePointer
HeapFree
DecodePointer
ExitProcess
HeapAlloc
GetModuleFileNameW
FindFirstFileW
CloseHandle
FindNextFileW
DeviceIoControl
CreateEventW
FindClose
GetDiskFreeSpaceW
GetProcAddress
SetLastError
GetLastError
GetOverlappedResult
CreateFileW
GetModuleHandleW
GetModuleFileNameA
WaitForSingleObject
GetFileTime
ReadFile
WideCharToMultiByte
SetFilePointer
WriteFile
FreeEnvironmentStringsW
CreateFileA
SetEndOfFile
GetProcessHeap
GetStringTypeW
WriteConsoleW
SetStdHandle
user32
DialogBoxIndirectParamW
InflateRect
SetCursor
TranslateAcceleratorW
ScreenToClient
GetWindowRect
GetMessageW
PostQuitMessage
PostMessageW
IsZoomed
GetParent
LoadCursorW
IsWindowEnabled
GetClientRect
PtInRect
SetPropW
GetDC
TranslateMessage
LoadAcceleratorsW
IsDialogMessageW
LoadIconW
OffsetRect
UnionRect
InvalidateRect
GetWindowLongW
GetClassNameW
ReleaseDC
GetDlgItem
SetWindowLongW
EndDialog
GetSysColor
CheckDlgButton
EnumChildWindows
ShowWindow
GetSysColorBrush
IsDlgButtonChecked
CreateDialogParamW
GetActiveWindow
DeferWindowPos
MessageBoxW
BeginDeferWindowPos
RegisterClassW
GetSystemMetrics
GetDlgItemTextW
SetDlgItemTextW
SendMessageW
EnableWindow
SetWindowTextW
EndDeferWindowPos
DrawFrameControl
GetPropW
CallWindowProcW
DefWindowProcW
DispatchMessageW
ChildWindowFromPoint
gdi32
StartPage
GetDeviceCaps
SetMapMode
StartDocW
EndDoc
SetTextColor
CreateFontIndirectW
SetBkMode
SelectObject
GetObjectW
GetStockObject
EndPage
comdlg32
PrintDlgW
GetSaveFileNameW
advapi32
RegCreateKeyW
AdjustTokenPrivileges
RegFlushKey
RegDeleteValueW
LookupPrivilegeValueW
RegCreateKeyExW
OpenProcessToken
RegCloseKey
RegOpenKeyExW
RegQueryValueExW
RegQueryValueExA
RegOpenKeyExA
RegSetValueExW
shell32
CommandLineToArgvW
ShellExecuteExW
ole32
CoCreateInstance
CoInitialize
CoCreateGuid
CoUninitialize
CLSIDFromString
oleaut32
VariantInit
SystemTimeToVariantTime
SysStringLen
SysFreeString
SysAllocString
VariantChangeType
VariantClear
Sections
.text Size: 191KB - Virtual size: 190KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 67KB - Virtual size: 66KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 25KB - Virtual size: 34KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1.1MB - Virtual size: 1.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 14KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
wintaylor2.1/Programs/tools/sysinternals/diskext.exe.exe windows:4 windows x86
b22dba3eb8d92bd6ce1baeda177318c8
Code Sign
c1:00:8b:3c:3c:88:11:d1:3e:f6:63:ec:df:40Certificate
IssuerCN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft CorporationNot Before10-01-1997 07:00Not After31-12-2020 07:00SubjectCN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporationc1:00:8b:3c:3c:88:11:d1:3e:f6:63:ec:df:40Certificate
IssuerCN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft CorporationNot Before10-01-1997 07:00Not After31-12-2020 07:00SubjectCN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation61:47:52:ba:00:00:00:00:00:04Certificate
IssuerCN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USNot Before16-09-2006 01:53Not After16-09-2011 02:03SubjectCN=Microsoft Timestamping Service,OU=nCipher DSE ESN:D8A9-CFCC-579C,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageContentCommitment
61:47:52:ba:00:00:00:00:00:04Certificate
IssuerCN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USNot Before16-09-2006 01:53Not After16-09-2011 02:03SubjectCN=Microsoft Timestamping Service,OU=nCipher DSE ESN:D8A9-CFCC-579C,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageContentCommitment
6a:0b:99:4f:c0:00:25:ab:11:db:45:1f:58:7a:67:a2Certificate
IssuerCN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft CorporationNot Before16-09-2006 01:04Not After15-09-2019 07:00SubjectCN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
6a:0b:99:4f:c0:00:1d:ab:11:da:c4:02:a1:66:27:baCertificate
IssuerCN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft CorporationNot Before04-04-2006 17:44Not After26-04-2012 07:00SubjectCN=Microsoft Code Signing PCA,OU=Copyright (c) 2000 Microsoft Corp.,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USExtended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageContentCommitment
KeyUsageCertSign
KeyUsageCRLSign
61:46:9e:cb:00:04:00:00:00:65Certificate
IssuerCN=Microsoft Code Signing PCA,OU=Copyright (c) 2000 Microsoft Corp.,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USNot Before04-04-2006 19:43Not After04-10-2007 19:53SubjectCN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USExtended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
KeyUsageContentCommitment
c9:b0:b0:68:c7:cc:40:3c:03:43:cb:d0:f9:cf:a4:48:e5:44:6d:22Signer
Actual PE Digestc9:b0:b0:68:c7:cc:40:3c:03:43:cb:d0:f9:cf:a4:48:e5:44:6d:22Digest Algorithmsha1PE Digest MatchestrueHeaders
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
WriteConsoleW
GetConsoleOutputCP
LocalAlloc
GetLastError
HeapSize
FlushFileBuffers
GetModuleHandleA
GetVersion
LoadLibraryA
GetProcAddress
GetDriveTypeA
WriteConsoleA
CreateFileA
GetConsoleMode
GetConsoleCP
DeviceIoControl
CloseHandle
FormatMessageA
SetStdHandle
LocalFree
HeapFree
HeapAlloc
GetCommandLineA
GetVersionExA
GetProcessHeap
GetCPInfo
InterlockedIncrement
InterlockedDecrement
GetACP
GetOEMCP
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
GetCurrentThreadId
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
EnterCriticalSection
LeaveCriticalSection
HeapDestroy
HeapCreate
VirtualFree
DeleteCriticalSection
VirtualAlloc
HeapReAlloc
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameA
LCMapStringA
WideCharToMultiByte
MultiByteToWideChar
LCMapStringW
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetFileType
GetStartupInfoA
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
GetStringTypeA
GetStringTypeW
Sleep
GetLocaleInfoA
RtlUnwind
InitializeCriticalSection
SetFilePointer
user32
SendMessageA
DialogBoxIndirectParamA
GetDlgItem
GetSysColorBrush
EndDialog
SetWindowTextA
LoadCursorA
SetCursor
InflateRect
gdi32
SetMapMode
StartDocA
StartPage
EndPage
EndDoc
GetDeviceCaps
comdlg32
PrintDlgA
advapi32
RegQueryValueExA
RegSetValueExA
RegCloseKey
RegCreateKeyA
Sections
.text Size: 44KB - Virtual size: 41KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 20KB - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
wintaylor2.1/Programs/tools/sysinternals/dmon.sys.sys windows:4 windows x86
4a6a9a8e3dc1b05458f7523b9795055c
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
ntoskrnl.exe
ExAllocatePoolWithTag
ExInitializeNPagedLookasideList
IoDeleteDevice
KeInitializeSpinLock
IoCreateSymbolicLink
IoCreateDevice
RtlInitUnicodeString
NtClose
NtOpenFile
KeWaitForSingleObject
IofCallDriver
KeInitializeEvent
vsprintf
DbgPrint
ObfDereferenceObject
IoGetDeviceObjectPointer
RtlAnsiStringToUnicodeString
RtlInitAnsiString
IoGetConfigurationInformation
InterlockedDecrement
ExInterlockedPushEntrySList
InterlockedIncrement
ExInterlockedPopEntrySList
KeQuerySystemTime
IofCompleteRequest
ExFreePool
sprintf
IoBuildDeviceIoControlRequest
RtlFreeUnicodeString
hal
KeQueryPerformanceCounter
KfAcquireSpinLock
KfReleaseSpinLock
Sections
.text Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
INIT Size: 928B - Virtual size: 926B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 640B - Virtual size: 628B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
wintaylor2.1/Programs/tools/sysinternals/du.exe.exe windows:5 windows x86
79cd983d895243c54cd1a0d60e7d5520
Code Sign
c1:00:8b:3c:3c:88:11:d1:3e:f6:63:ec:df:40Certificate
IssuerCN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft CorporationNot Before10-01-1997 07:00Not After31-12-2020 07:00SubjectCN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation2e:ab:11:dc:50:ff:5c:9d:cb:c0Certificate
IssuerCN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft CorporationNot Before22-08-2007 22:31Not After25-08-2012 07:00SubjectCN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USExtended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
61:0f:78:4d:00:00:00:00:00:03Certificate
IssuerCN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USNot Before23-08-2007 00:23Not After23-02-2009 00:33SubjectCN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USExtended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
KeyUsageContentCommitment
61:49:7c:ed:00:00:00:00:00:05Certificate
IssuerCN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USNot Before16-09-2006 01:55Not After16-09-2011 02:05SubjectCN=Microsoft Timestamping Service,OU=nCipher DSE ESN:10D8-5847-CBF8,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageContentCommitment
6a:0b:99:4f:c0:00:25:ab:11:db:45:1f:58:7a:67:a2Certificate
IssuerCN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft CorporationNot Before16-09-2006 01:04Not After15-09-2019 07:00SubjectCN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
bf:7f:b8:e3:ed:af:97:44:bd:a7:03:e6:98:41:9c:a6:69:00:c7:6cSigner
Actual PE Digestbf:7f:b8:e3:ed:af:97:44:bd:a7:03:e6:98:41:9c:a6:69:00:c7:6cDigest Algorithmsha1PE Digest MatchestrueHeaders
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcAddress
LoadLibraryW
GetModuleHandleW
LocalFree
LocalAlloc
GetCommandLineW
SetEnvironmentVariableA
GetFullPathNameW
CompareStringA
CreateFileA
GetTimeZoneInformation
SetStdHandle
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
IsValidLocale
GetCurrentDirectoryW
GetLocaleInfoW
GetFileAttributesW
FindFirstFileW
FindNextFileW
CreateFileW
FindClose
CloseHandle
GetFileInformationByHandle
GetCompressedFileSizeW
FormatMessageW
InterlockedDecrement
CompareStringW
GetNumberFormatW
EnumSystemLocalesA
GetLocaleInfoA
GetUserDefaultLCID
HeapFree
GetProcessHeap
GetLastError
lstrlenW
EnterCriticalSection
LeaveCriticalSection
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RaiseException
RtlUnwind
HeapAlloc
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
DeleteCriticalSection
Sleep
ExitProcess
FatalAppExitA
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
GetCurrentThread
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
LCMapStringW
HeapSize
VirtualFree
VirtualAlloc
HeapReAlloc
HeapCreate
HeapDestroy
WriteFile
GetModuleFileNameA
GetModuleFileNameW
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
GetModuleHandleA
MultiByteToWideChar
InitializeCriticalSectionAndSpinCount
SetConsoleCtrlHandler
FreeLibrary
InterlockedExchange
LoadLibraryA
WideCharToMultiByte
GetConsoleCP
GetConsoleMode
FlushFileBuffers
SetFilePointer
LCMapStringA
GetStringTypeA
GetStringTypeW
GetTimeFormatA
GetDateFormatA
user32
SetWindowTextW
SetCursor
InflateRect
SendMessageW
EndDialog
GetSysColorBrush
GetDlgItem
DialogBoxIndirectParamW
LoadCursorW
gdi32
SetMapMode
StartDocW
StartPage
EndPage
EndDoc
GetDeviceCaps
comdlg32
PrintDlgW
advapi32
RegQueryValueExW
RegSetValueExW
RegCloseKey
RegCreateKeyW
oleaut32
SysFreeString
SysAllocString
SetErrorInfo
VariantInit
VariantClear
VariantChangeType
GetErrorInfo
CreateErrorInfo
Sections
.text Size: 172KB - Virtual size: 171KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 29KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 5KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
wintaylor2.1/Programs/tools/sysinternals/efsdump.exe.exe windows:4 windows x86
94c991fc087e6d6976569ef8614bce42
Code Sign
47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4Certificate
IssuerCN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZANot Before04-12-2003 00:00Not After03-12-2013 23:59SubjectCN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=USExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageCertSign
KeyUsageCRLSign
0d:e9:2b:f0:d4:d8:29:88:18:32:05:09:5e:9a:76:88Certificate
IssuerCN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=USNot Before04-12-2003 00:00Not After03-12-2008 23:59SubjectCN=VeriSign Time Stamping Services Signer,O=VeriSign\, Inc.,C=USExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageContentCommitment
c1:00:8b:3c:3c:88:11:d1:3e:f6:63:ec:df:40Certificate
IssuerCN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft CorporationNot Before10-01-1997 07:00Not After31-12-2020 07:00SubjectCN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation6a:0b:99:4f:c0:00:1d:ab:11:da:c4:02:a1:66:27:baCertificate
IssuerCN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft CorporationNot Before04-04-2006 17:44Not After26-04-2012 07:00SubjectCN=Microsoft Code Signing PCA,OU=Copyright (c) 2000 Microsoft Corp.,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USExtended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageContentCommitment
KeyUsageCertSign
KeyUsageCRLSign
61:46:9e:cb:00:04:00:00:00:65Certificate
IssuerCN=Microsoft Code Signing PCA,OU=Copyright (c) 2000 Microsoft Corp.,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USNot Before04-04-2006 19:43Not After04-10-2007 19:53SubjectCN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USExtended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
KeyUsageContentCommitment
cc:61:2f:9b:93:b1:3d:ea:4e:4b:63:4b:28:15:78:b0:25:40:60:baSigner
Actual PE Digestcc:61:2f:9b:93:b1:3d:ea:4e:4b:63:4b:28:15:78:b0:25:40:60:baDigest Algorithmsha1PE Digest MatchestrueHeaders
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
FlushFileBuffers
LoadLibraryA
WideCharToMultiByte
SetFilePointer
SetStdHandle
CloseHandle
LCMapStringA
LCMapStringW
GetStringTypeA
GetModuleHandleW
GetLastError
GetModuleFileNameA
LocalAlloc
LoadLibraryW
GetFullPathNameW
FindFirstFileW
FindNextFileW
FindClose
FormatMessageW
GetProcAddress
LocalFree
HeapAlloc
HeapFree
GetVersion
ExitProcess
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
HeapReAlloc
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameW
FreeEnvironmentStringsA
MultiByteToWideChar
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetEnvironmentStrings
GetCommandLineW
GetCommandLineA
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
RtlUnwind
WriteFile
GetStringTypeW
user32
DialogBoxIndirectParamW
LoadCursorW
SetCursor
InflateRect
GetDlgItem
GetSysColorBrush
EndDialog
SetWindowTextW
SendMessageW
gdi32
StartDocW
GetDeviceCaps
SetMapMode
StartPage
EndPage
EndDoc
comdlg32
PrintDlgW
advapi32
RegQueryValueExW
RegSetValueExW
RegCloseKey
QueryUsersOnEncryptedFile
LookupAccountSidW
QueryRecoveryAgentsOnEncryptedFile
FreeEncryptionCertificateHashList
RegCreateKeyW
Sections
.text Size: 20KB - Virtual size: 19KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 108KB - Virtual size: 112KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
wintaylor2.1/Programs/tools/sysinternals/filemon.hlp
-
wintaylor2.1/Programs/tools/sysinternals/handle.exe.exe windows:5 windows x86
772feda8a5b0e1a20e6162a195239816
Code Sign
c1:00:8b:3c:3c:88:11:d1:3e:f6:63:ec:df:40Certificate
IssuerCN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft CorporationNot Before10-01-1997 07:00Not After31-12-2020 07:00SubjectCN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation2e:ab:11:dc:50:ff:5c:9d:cb:c0Certificate
IssuerCN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft CorporationNot Before22-08-2007 22:31Not After25-08-2012 07:00SubjectCN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USExtended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
61:0f:78:4d:00:00:00:00:00:03Certificate
IssuerCN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USNot Before23-08-2007 00:23Not After23-02-2009 00:33SubjectCN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USExtended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
KeyUsageContentCommitment
61:47:52:ba:00:00:00:00:00:04Certificate
IssuerCN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USNot Before16-09-2006 01:53Not After16-09-2011 02:03SubjectCN=Microsoft Timestamping Service,OU=nCipher DSE ESN:D8A9-CFCC-579C,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageContentCommitment
6a:0b:99:4f:c0:00:25:ab:11:db:45:1f:58:7a:67:a2Certificate
IssuerCN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft CorporationNot Before16-09-2006 01:04Not After15-09-2019 07:00SubjectCN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
f9:dc:02:d3:4f:54:d0:38:7f:33:07:74:be:3c:ff:16:7f:95:91:86Signer
Actual PE Digestf9:dc:02:d3:4f:54:d0:38:7f:33:07:74:be:3c:ff:16:7f:95:91:86Digest Algorithmsha1PE Digest MatchestrueHeaders
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
DuplicateHandle
GetCurrentProcessId
DeleteFileA
GetSystemDirectoryA
GetConsoleScreenBufferInfo
GetStdHandle
WaitForSingleObject
CreateProcessA
GetCommandLineA
ExpandEnvironmentStringsA
GetFileAttributesA
lstrcpyA
GetVersion
CompareStringW
CompareStringA
GetTimeZoneInformation
ReadFile
GetProcessHeap
SetEndOfFile
GetLocaleInfoW
HeapSize
IsValidLocale
EnumSystemLocalesA
OpenProcess
GetDriveTypeA
DeviceIoControl
FormatMessageA
GetCommandLineW
LoadLibraryA
LocalAlloc
GetModuleHandleA
LocalFree
GetProcAddress
SetLastError
CreateFileA
FindResourceA
LoadResource
SizeofResource
LockResource
GetCurrentProcess
GetLastError
GetModuleFileNameA
CloseHandle
HeapAlloc
HeapFree
GetModuleHandleW
Sleep
ExitProcess
EnterCriticalSection
LeaveCriticalSection
ReadConsoleInputA
SetConsoleMode
GetConsoleMode
PeekConsoleInputA
GetNumberOfConsoleInputEvents
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
WriteFile
WideCharToMultiByte
GetConsoleCP
RtlUnwind
DeleteCriticalSection
FatalAppExitA
VirtualFree
VirtualAlloc
HeapReAlloc
HeapCreate
HeapDestroy
GetCPInfo
InterlockedIncrement
InterlockedDecrement
GetACP
GetOEMCP
IsValidCodePage
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
GetCurrentThreadId
GetCurrentThread
SetConsoleCtrlHandler
FreeLibrary
InterlockedExchange
InitializeCriticalSectionAndSpinCount
LCMapStringA
MultiByteToWideChar
LCMapStringW
FlushFileBuffers
SetHandleCount
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
GetSystemTimeAsFileTime
SetStdHandle
SetFilePointer
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
GetStringTypeA
GetStringTypeW
GetTimeFormatA
GetDateFormatA
GetUserDefaultLCID
GetLocaleInfoA
SetEnvironmentVariableA
user32
DialogBoxIndirectParamA
GetDlgItem
GetSysColorBrush
EndDialog
SetWindowTextA
LoadCursorA
SetCursor
InflateRect
SendMessageA
gdi32
SetMapMode
StartDocA
StartPage
EndPage
EndDoc
GetDeviceCaps
comdlg32
PrintDlgA
advapi32
LookupAccountSidA
RegQueryValueExA
RegCreateKeyA
RegSetValueExA
RegCloseKey
RegDeleteKeyA
OpenProcessToken
LookupPrivilegeValueA
AdjustTokenPrivileges
GetTokenInformation
Sections
.text Size: 123KB - Virtual size: 123KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 26KB - Virtual size: 26KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 6KB - Virtual size: 38KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 243KB - Virtual size: 242KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
wintaylor2.1/Programs/tools/sysinternals/hex2dec.exe.exe windows:4 windows x86
86cd32601e5478b1662abe3fb33c6620
Code Sign
47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4Certificate
IssuerCN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZANot Before04-12-2003 00:00Not After03-12-2013 23:59SubjectCN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=USExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageCertSign
KeyUsageCRLSign
0d:e9:2b:f0:d4:d8:29:88:18:32:05:09:5e:9a:76:88Certificate
IssuerCN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=USNot Before04-12-2003 00:00Not After03-12-2008 23:59SubjectCN=VeriSign Time Stamping Services Signer,O=VeriSign\, Inc.,C=USExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageContentCommitment
c1:00:8b:3c:3c:88:11:d1:3e:f6:63:ec:df:40Certificate
IssuerCN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft CorporationNot Before10-01-1997 07:00Not After31-12-2020 07:00SubjectCN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation6a:0b:99:4f:c0:00:1d:ab:11:da:c4:02:a1:66:27:baCertificate
IssuerCN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft CorporationNot Before04-04-2006 17:44Not After26-04-2012 07:00SubjectCN=Microsoft Code Signing PCA,OU=Copyright (c) 2000 Microsoft Corp.,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USExtended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageContentCommitment
KeyUsageCertSign
KeyUsageCRLSign
61:46:9e:cb:00:04:00:00:00:65Certificate
IssuerCN=Microsoft Code Signing PCA,OU=Copyright (c) 2000 Microsoft Corp.,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USNot Before04-04-2006 19:43Not After04-10-2007 19:53SubjectCN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USExtended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
KeyUsageContentCommitment
45:af:49:6a:d8:80:9a:0d:bc:ff:e2:bf:46:8b:76:96:74:06:10:e3Signer
Actual PE Digest45:af:49:6a:d8:80:9a:0d:bc:ff:e2:bf:46:8b:76:96:74:06:10:e3Digest Algorithmsha1PE Digest MatchestrueHeaders
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetACP
GetOEMCP
GetProcAddress
LCMapStringW
SetStdHandle
FlushFileBuffers
ReadFile
LCMapStringA
GetCPInfo
GetLastError
WriteFile
GetModuleHandleA
LocalAlloc
LoadLibraryA
SetFilePointer
LocalFree
HeapAlloc
HeapFree
GetCommandLineA
GetVersion
ExitProcess
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
HeapReAlloc
MultiByteToWideChar
GetStringTypeA
GetStringTypeW
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
RtlUnwind
CloseHandle
user32
DialogBoxIndirectParamA
LoadCursorA
SetCursor
InflateRect
GetDlgItem
GetSysColorBrush
EndDialog
SetWindowTextA
SendMessageA
gdi32
EndPage
GetDeviceCaps
SetMapMode
StartDocA
StartPage
EndDoc
comdlg32
PrintDlgA
advapi32
RegQueryValueExA
RegSetValueExA
RegCloseKey
RegCreateKeyA
Sections
.text Size: 24KB - Virtual size: 21KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 108KB - Virtual size: 112KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
wintaylor2.1/Programs/tools/sysinternals/junction.exe.exe windows:4 windows x86
14e577546b54e63c7d37aad59ed535d8
Code Sign
c1:00:8b:3c:3c:88:11:d1:3e:f6:63:ec:df:40Certificate
IssuerCN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft CorporationNot Before10-01-1997 07:00Not After31-12-2020 07:00SubjectCN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporationc1:00:8b:3c:3c:88:11:d1:3e:f6:63:ec:df:40Certificate
IssuerCN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft CorporationNot Before10-01-1997 07:00Not After31-12-2020 07:00SubjectCN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation61:47:52:ba:00:00:00:00:00:04Certificate
IssuerCN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USNot Before16-09-2006 01:53Not After16-09-2011 02:03SubjectCN=Microsoft Timestamping Service,OU=nCipher DSE ESN:D8A9-CFCC-579C,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageContentCommitment
61:49:7c:ed:00:00:00:00:00:05Certificate
IssuerCN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USNot Before16-09-2006 01:55Not After16-09-2011 02:05SubjectCN=Microsoft Timestamping Service,OU=nCipher DSE ESN:10D8-5847-CBF8,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageContentCommitment
6a:0b:99:4f:c0:00:25:ab:11:db:45:1f:58:7a:67:a2Certificate
IssuerCN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft CorporationNot Before16-09-2006 01:04Not After15-09-2019 07:00SubjectCN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
6a:0b:99:4f:c0:00:1d:ab:11:da:c4:02:a1:66:27:baCertificate
IssuerCN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft CorporationNot Before04-04-2006 17:44Not After26-04-2012 07:00SubjectCN=Microsoft Code Signing PCA,OU=Copyright (c) 2000 Microsoft Corp.,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USExtended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageContentCommitment
KeyUsageCertSign
KeyUsageCRLSign
61:46:9e:cb:00:04:00:00:00:65Certificate
IssuerCN=Microsoft Code Signing PCA,OU=Copyright (c) 2000 Microsoft Corp.,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USNot Before04-04-2006 19:43Not After04-10-2007 19:53SubjectCN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USExtended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
KeyUsageContentCommitment
46:6b:9b:80:c9:8b:ff:52:e3:d8:f3:2c:c4:03:6a:bc:7b:53:bf:f1Signer
Actual PE Digest46:6b:9b:80:c9:8b:ff:52:e3:d8:f3:2c:c4:03:6a:bc:7b:53:bf:f1Digest Algorithmsha1PE Digest MatchestrueHeaders
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CreateDirectoryW
GetVolumeInformationW
GetFullPathNameW
GetCurrentDirectoryW
RemoveDirectoryW
SetStdHandle
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
FindFirstFileW
FindNextFileW
FindClose
CreateFileW
GetLastError
DeviceIoControl
GetFileAttributesW
FormatMessageW
CloseHandle
LocalAlloc
LoadLibraryW
LocalFree
CreateFileA
GetModuleHandleW
HeapAlloc
HeapFree
EnterCriticalSection
LeaveCriticalSection
HeapReAlloc
GetProcAddress
GetModuleHandleA
ExitProcess
GetVersionExA
GetProcessHeap
DeleteCriticalSection
VirtualFree
VirtualAlloc
HeapDestroy
HeapCreate
WriteFile
GetStdHandle
GetModuleFileNameA
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetCPInfo
InterlockedIncrement
InterlockedDecrement
GetACP
GetOEMCP
IsValidCodePage
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
GetCurrentThreadId
WideCharToMultiByte
GetConsoleCP
GetConsoleMode
FlushFileBuffers
SetHandleCount
GetFileType
GetStartupInfoA
Sleep
HeapSize
LoadLibraryA
InitializeCriticalSection
GetModuleFileNameW
FreeEnvironmentStringsA
MultiByteToWideChar
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineA
GetCommandLineW
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
RtlUnwind
SetFilePointer
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
user32
DialogBoxIndirectParamW
GetDlgItem
GetSysColorBrush
EndDialog
SetWindowTextW
LoadCursorW
SetCursor
InflateRect
SendMessageW
gdi32
SetMapMode
StartDocW
StartPage
EndPage
EndDoc
GetDeviceCaps
comdlg32
PrintDlgW
advapi32
RegQueryValueExW
RegSetValueExW
RegCloseKey
RegCreateKeyW
Sections
.text Size: 44KB - Virtual size: 43KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 24KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
wintaylor2.1/Programs/tools/sysinternals/ldmdump.exe.exe windows:4 windows x86
62430f16891f2bbc3e224c30b3127f73
Code Sign
47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4Certificate
IssuerCN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZANot Before04-12-2003 00:00Not After03-12-2013 23:59SubjectCN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=USExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageCertSign
KeyUsageCRLSign
0d:e9:2b:f0:d4:d8:29:88:18:32:05:09:5e:9a:76:88Certificate
IssuerCN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=USNot Before04-12-2003 00:00Not After03-12-2008 23:59SubjectCN=VeriSign Time Stamping Services Signer,O=VeriSign\, Inc.,C=USExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageContentCommitment
c1:00:8b:3c:3c:88:11:d1:3e:f6:63:ec:df:40Certificate
IssuerCN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft CorporationNot Before10-01-1997 07:00Not After31-12-2020 07:00SubjectCN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation6a:0b:99:4f:c0:00:1d:ab:11:da:c4:02:a1:66:27:baCertificate
IssuerCN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft CorporationNot Before04-04-2006 17:44Not After26-04-2012 07:00SubjectCN=Microsoft Code Signing PCA,OU=Copyright (c) 2000 Microsoft Corp.,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USExtended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageContentCommitment
KeyUsageCertSign
KeyUsageCRLSign
61:46:9e:cb:00:04:00:00:00:65Certificate
IssuerCN=Microsoft Code Signing PCA,OU=Copyright (c) 2000 Microsoft Corp.,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USNot Before04-04-2006 19:43Not After04-10-2007 19:53SubjectCN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USExtended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
KeyUsageContentCommitment
cd:66:fb:ce:39:19:bc:b9:14:88:64:7c:3a:e0:21:8f:f0:93:2c:eaSigner
Actual PE Digestcd:66:fb:ce:39:19:bc:b9:14:88:64:7c:3a:e0:21:8f:f0:93:2c:eaDigest Algorithmsha1PE Digest MatchestrueHeaders
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
LocalAlloc
GetModuleHandleA
LCMapStringA
SetStdHandle
CreateFileA
GetProcAddress
SetFilePointer
GetACP
GetCPInfo
GetStringTypeW
GetStringTypeA
MultiByteToWideChar
CloseHandle
DeviceIoControl
FileTimeToLocalFileTime
FileTimeToSystemTime
GetDateFormatA
FlushFileBuffers
GetTimeFormatA
WriteFile
RtlUnwind
ReadFile
GetLastError
FormatMessageA
LocalFree
GetOEMCP
ExitProcess
TerminateProcess
GetCurrentProcess
HeapAlloc
HeapFree
GetCommandLineA
GetVersion
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
HeapReAlloc
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
LCMapStringW
user32
DialogBoxIndirectParamA
LoadCursorA
SetCursor
InflateRect
GetDlgItem
GetSysColorBrush
EndDialog
SetWindowTextA
SendMessageA
gdi32
SetMapMode
StartDocA
StartPage
EndPage
EndDoc
GetDeviceCaps
comdlg32
PrintDlgA
advapi32
RegCreateKeyA
RegQueryValueExA
RegSetValueExA
RegCloseKey
Sections
.text Size: 24KB - Virtual size: 22KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 112KB - Virtual size: 115KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
wintaylor2.1/Programs/tools/sysinternals/listdlls.exe.exe windows:4 windows x86
8e10c341fcaf4a63a89dfa85916cbf29
Code Sign
47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4Certificate
IssuerCN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZANot Before04-12-2003 00:00Not After03-12-2013 23:59SubjectCN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=USExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageCertSign
KeyUsageCRLSign
0d:e9:2b:f0:d4:d8:29:88:18:32:05:09:5e:9a:76:88Certificate
IssuerCN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=USNot Before04-12-2003 00:00Not After03-12-2008 23:59SubjectCN=VeriSign Time Stamping Services Signer,O=VeriSign\, Inc.,C=USExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageContentCommitment
c1:00:8b:3c:3c:88:11:d1:3e:f6:63:ec:df:40Certificate
IssuerCN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft CorporationNot Before10-01-1997 07:00Not After31-12-2020 07:00SubjectCN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation6a:0b:99:4f:c0:00:1d:ab:11:da:c4:02:a1:66:27:baCertificate
IssuerCN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft CorporationNot Before04-04-2006 17:44Not After26-04-2012 07:00SubjectCN=Microsoft Code Signing PCA,OU=Copyright (c) 2000 Microsoft Corp.,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USExtended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageContentCommitment
KeyUsageCertSign
KeyUsageCRLSign
61:46:9e:cb:00:04:00:00:00:65Certificate
IssuerCN=Microsoft Code Signing PCA,OU=Copyright (c) 2000 Microsoft Corp.,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USNot Before04-04-2006 19:43Not After04-10-2007 19:53SubjectCN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USExtended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
KeyUsageContentCommitment
ae:fc:1c:c9:6d:44:c1:6b:a5:8f:2a:f1:7f:75:6c:f2:61:d0:b5:43Signer
Actual PE Digestae:fc:1c:c9:6d:44:c1:6b:a5:8f:2a:f1:7f:75:6c:f2:61:d0:b5:43Digest Algorithmsha1PE Digest MatchestrueHeaders
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CompareStringW
CompareStringA
LCMapStringW
LCMapStringA
SetStdHandle
GetOEMCP
GetProcAddress
GetCPInfo
SetFilePointer
LocalAlloc
GetModuleHandleA
LoadLibraryA
GetVersion
GetCurrentProcess
OpenProcess
FlushFileBuffers
GetTimeZoneInformation
WriteFile
RtlUnwind
GetStartupInfoA
GetFileType
ReadProcessMemory
CreateFileA
ReadFile
CloseHandle
FormatMessageA
LocalFree
GetLastError
GetACP
GetStdHandle
SetHandleCount
HeapAlloc
HeapFree
ExitProcess
TerminateProcess
GetCommandLineA
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
HeapReAlloc
MultiByteToWideChar
GetStringTypeA
GetStringTypeW
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetEnvironmentVariableA
user32
DialogBoxIndirectParamA
SendMessageA
SetWindowTextA
EndDialog
GetSysColorBrush
GetDlgItem
LoadCursorA
SetCursor
InflateRect
gdi32
EndPage
GetDeviceCaps
SetMapMode
StartDocA
StartPage
EndDoc
version
GetFileVersionInfoSizeA
GetFileVersionInfoA
comdlg32
PrintDlgA
advapi32
RegCreateKeyA
RegQueryValueExA
RegSetValueExA
RegCloseKey
OpenProcessToken
LookupPrivilegeValueA
AdjustTokenPrivileges
imagehlp
ImageNtHeader
Sections
.text Size: 36KB - Virtual size: 33KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 112KB - Virtual size: 114KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 968B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
wintaylor2.1/Programs/tools/sysinternals/livekd.exe.exe windows:5 windows x86
46abe5f03035a117f0df786f73720521
Code Sign
2e:ab:11:dc:50:ff:5c:9d:cb:c0Certificate
IssuerCN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft CorporationNot Before22-08-2007 22:31Not After25-08-2012 07:00SubjectCN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USExtended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
61:01:cf:3e:00:00:00:00:00:0fCertificate
IssuerCN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USNot Before07-12-2009 22:40Not After07-03-2011 22:40SubjectCN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USExtended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
6a:0b:99:4f:c0:00:25:ab:11:db:45:1f:58:7a:67:a2Certificate
IssuerCN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft CorporationNot Before16-09-2006 01:04Not After15-09-2019 07:00SubjectCN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
61:05:a2:30:00:00:00:00:00:08Certificate
IssuerCN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USNot Before25-07-2008 19:01Not After25-07-2013 19:11SubjectCN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:85D3-305C-5BCF,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageContentCommitment
94:da:db:9d:bb:cb:d8:7a:80:14:9a:9d:8b:7f:e0:20:33:64:1e:94Signer
Actual PE Digest94:da:db:9d:bb:cb:d8:7a:80:14:9a:9d:8b:7f:e0:20:33:64:1e:94Digest Algorithmsha1PE Digest MatchestrueHeaders
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
version
GetFileVersionInfoSizeA
GetFileVersionInfoA
kernel32
TerminateProcess
DeleteFileA
SetFileAttributesA
GetSystemInfo
FreeLibrary
LoadLibraryW
GetVersionExA
DeviceIoControl
WriteFile
GetModuleFileNameA
IsProcessorFeaturePresent
WaitForSingleObject
CreateProcessA
GetCommandLineA
ExpandEnvironmentStringsA
GetFileAttributesA
SetEndOfFile
SetFilePointerEx
GetSystemDirectoryA
SetEnvironmentVariableA
FormatMessageA
GetCurrentDirectoryA
SearchPathA
SetCurrentDirectoryA
GetEnvironmentStrings
GetStartupInfoA
SetConsoleCtrlHandler
GetWindowsDirectoryA
GetFullPathNameA
GlobalMemoryStatusEx
HeapSize
GetTimeZoneInformation
GetProcessHeap
ReadFile
InterlockedExchange
IsValidLocale
EnumSystemLocalesA
GetLocaleInfoA
GetUserDefaultLCID
GetDateFormatA
GetCommandLineW
LocalAlloc
LoadLibraryA
LocalFree
GetModuleHandleA
SetLastError
GetProcAddress
FindResourceA
CreateFileA
LoadResource
SizeofResource
LockResource
GetCurrentProcess
GetLastError
CompareStringW
CloseHandle
GetLocaleInfoW
CompareStringA
GetEnvironmentVariableA
HeapAlloc
HeapFree
EnterCriticalSection
LeaveCriticalSection
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
WideCharToMultiByte
GetConsoleCP
GetConsoleMode
RtlUnwind
GetCPInfo
InterlockedIncrement
InterlockedDecrement
GetACP
GetOEMCP
IsValidCodePage
GetModuleHandleW
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
GetCurrentThreadId
GetCurrentThread
LCMapStringA
MultiByteToWideChar
LCMapStringW
DeleteCriticalSection
FatalAppExitA
VirtualFree
VirtualAlloc
HeapReAlloc
HeapCreate
HeapDestroy
Sleep
ExitProcess
GetStdHandle
SetHandleCount
GetFileType
FlushFileBuffers
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
SetStdHandle
SetFilePointer
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
InitializeCriticalSectionAndSpinCount
GetStringTypeA
GetStringTypeW
GetTimeFormatA
user32
DialogBoxIndirectParamA
GetDlgItem
GetSysColorBrush
EndDialog
SetWindowTextA
LoadCursorA
SetCursor
InflateRect
SendMessageA
gdi32
SetMapMode
StartDocA
StartPage
EndPage
EndDoc
GetDeviceCaps
comdlg32
PrintDlgA
advapi32
RegSetValueExA
RegOpenKeyA
RegQueryValueExA
RegCreateKeyA
RegCloseKey
RegDeleteKeyA
OpenProcessToken
LookupPrivilegeValueA
AdjustTokenPrivileges
Sections
.text Size: 116KB - Virtual size: 115KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 26KB - Virtual size: 25KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 6KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 219KB - Virtual size: 218KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
wintaylor2.1/Programs/tools/sysinternals/movefile.exe.exe windows:4 windows x86
00b6ca1f234c6bdbcfbff0daf0a566f2
Code Sign
47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4Certificate
IssuerCN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZANot Before04-12-2003 00:00Not After03-12-2013 23:59SubjectCN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=USExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageCertSign
KeyUsageCRLSign
0d:e9:2b:f0:d4:d8:29:88:18:32:05:09:5e:9a:76:88Certificate
IssuerCN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=USNot Before04-12-2003 00:00Not After03-12-2008 23:59SubjectCN=VeriSign Time Stamping Services Signer,O=VeriSign\, Inc.,C=USExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageContentCommitment
c1:00:8b:3c:3c:88:11:d1:3e:f6:63:ec:df:40Certificate
IssuerCN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft CorporationNot Before10-01-1997 07:00Not After31-12-2020 07:00SubjectCN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation6a:0b:99:4f:c0:00:1d:ab:11:da:c4:02:a1:66:27:baCertificate
IssuerCN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft CorporationNot Before04-04-2006 17:44Not After26-04-2012 07:00SubjectCN=Microsoft Code Signing PCA,OU=Copyright (c) 2000 Microsoft Corp.,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USExtended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageContentCommitment
KeyUsageCertSign
KeyUsageCRLSign
61:46:9e:cb:00:04:00:00:00:65Certificate
IssuerCN=Microsoft Code Signing PCA,OU=Copyright (c) 2000 Microsoft Corp.,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USNot Before04-04-2006 19:43Not After04-10-2007 19:53SubjectCN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USExtended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
KeyUsageContentCommitment
f0:8e:6d:22:ff:f3:66:4f:d2:3f:f7:83:0f:94:54:da:8a:cf:ef:19Signer
Actual PE Digestf0:8e:6d:22:ff:f3:66:4f:d2:3f:f7:83:0f:94:54:da:8a:cf:ef:19Digest Algorithmsha1PE Digest MatchestrueHeaders
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
SetStdHandle
FlushFileBuffers
MultiByteToWideChar
LocalAlloc
GetACP
GetModuleHandleA
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
GetProcAddress
GetCPInfo
SetFilePointer
LoadLibraryA
LocalFree
MoveFileExA
GetOEMCP
GetLastError
HeapAlloc
HeapFree
GetCommandLineA
GetVersion
ExitProcess
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
HeapReAlloc
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
RtlUnwind
WriteFile
CloseHandle
user32
DialogBoxIndirectParamA
LoadCursorA
SetCursor
InflateRect
GetDlgItem
GetSysColorBrush
EndDialog
SetWindowTextA
SendMessageA
gdi32
EndDoc
GetDeviceCaps
SetMapMode
StartDocA
StartPage
EndPage
comdlg32
PrintDlgA
advapi32
RegQueryValueExA
RegSetValueExA
RegCloseKey
RegCreateKeyA
Sections
.text Size: 20KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 108KB - Virtual size: 112KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
wintaylor2.1/Programs/tools/sysinternals/ntfsinfo.exe.exe windows:4 windows x86
ad192e4578fb7d605b78b24eb33204a7
Code Sign
47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4Certificate
IssuerCN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZANot Before04-12-2003 00:00Not After03-12-2013 23:59SubjectCN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=USExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageCertSign
KeyUsageCRLSign
0d:e9:2b:f0:d4:d8:29:88:18:32:05:09:5e:9a:76:88Certificate
IssuerCN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=USNot Before04-12-2003 00:00Not After03-12-2008 23:59SubjectCN=VeriSign Time Stamping Services Signer,O=VeriSign\, Inc.,C=USExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageContentCommitment
c1:00:8b:3c:3c:88:11:d1:3e:f6:63:ec:df:40Certificate
IssuerCN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft CorporationNot Before10-01-1997 07:00Not After31-12-2020 07:00SubjectCN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation6a:0b:99:4f:c0:00:1d:ab:11:da:c4:02:a1:66:27:baCertificate
IssuerCN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft CorporationNot Before04-04-2006 17:44Not After26-04-2012 07:00SubjectCN=Microsoft Code Signing PCA,OU=Copyright (c) 2000 Microsoft Corp.,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USExtended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageContentCommitment
KeyUsageCertSign
KeyUsageCRLSign
61:46:9e:cb:00:04:00:00:00:65Certificate
IssuerCN=Microsoft Code Signing PCA,OU=Copyright (c) 2000 Microsoft Corp.,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USNot Before04-04-2006 19:43Not After04-10-2007 19:53SubjectCN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USExtended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
KeyUsageContentCommitment
48:7b:93:1e:28:f9:a2:73:dc:5b:89:59:c3:02:b2:6a:b9:53:89:ceSigner
Actual PE Digest48:7b:93:1e:28:f9:a2:73:dc:5b:89:59:c3:02:b2:6a:b9:53:89:ceDigest Algorithmsha1PE Digest MatchestrueHeaders
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvcrt
_controlfp
_except_handler3
__set_app_type
printf
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
__p___initenv
_XcptFilter
_exit
wcslen
wcscpy
free
malloc
exit
sprintf
kernel32
LocalAlloc
LoadLibraryA
GetModuleHandleA
CreateFileA
GetLastError
CloseHandle
FindFirstFileA
FindClose
FormatMessageA
LocalFree
GetProcAddress
user32
LoadCursorA
SetCursor
InflateRect
GetDlgItem
GetSysColorBrush
EndDialog
SetWindowTextA
SendMessageA
DialogBoxIndirectParamA
gdi32
StartDocA
StartPage
EndDoc
GetDeviceCaps
SetMapMode
EndPage
advapi32
RegQueryValueExA
RegSetValueExA
RegCloseKey
RegCreateKeyA
comdlg32
PrintDlgA
Sections
.text Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 106KB - Virtual size: 106KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
wintaylor2.1/Programs/tools/sysinternals/pagedfrg.exe.exe windows:4 windows x86
bd450e46d8e9a796db50878d454ea94a
Code Sign
47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4Certificate
IssuerCN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZANot Before04-12-2003 00:00Not After03-12-2013 23:59SubjectCN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=USExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageCertSign
KeyUsageCRLSign
0d:e9:2b:f0:d4:d8:29:88:18:32:05:09:5e:9a:76:88Certificate
IssuerCN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=USNot Before04-12-2003 00:00Not After03-12-2008 23:59SubjectCN=VeriSign Time Stamping Services Signer,O=VeriSign\, Inc.,C=USExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageContentCommitment
c1:00:8b:3c:3c:88:11:d1:3e:f6:63:ec:df:40Certificate
IssuerCN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft CorporationNot Before10-01-1997 07:00Not After31-12-2020 07:00SubjectCN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation6a:0b:99:4f:c0:00:1d:ab:11:da:c4:02:a1:66:27:baCertificate
IssuerCN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft CorporationNot Before04-04-2006 17:44Not After26-04-2012 07:00SubjectCN=Microsoft Code Signing PCA,OU=Copyright (c) 2000 Microsoft Corp.,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USExtended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageContentCommitment
KeyUsageCertSign
KeyUsageCRLSign
61:46:9e:cb:00:04:00:00:00:65Certificate
IssuerCN=Microsoft Code Signing PCA,OU=Copyright (c) 2000 Microsoft Corp.,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USNot Before04-04-2006 19:43Not After04-10-2007 19:53SubjectCN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USExtended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
KeyUsageContentCommitment
21:c6:2d:44:65:d6:c5:c9:b3:b6:44:70:1c:8a:a3:6d:64:53:58:daSigner
Actual PE Digest21:c6:2d:44:65:d6:c5:c9:b3:b6:44:70:1c:8a:a3:6d:64:53:58:daDigest Algorithmsha1PE Digest MatchestrueHeaders
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetSystemDirectoryA
CreateEventA
GetVersion
LocalFree
LoadLibraryA
LocalAlloc
LCMapStringA
GetStringTypeW
GetStringTypeA
ReadFile
SetEndOfFile
GetOEMCP
GetACP
GetCPInfo
MultiByteToWideChar
SetFilePointer
FlushFileBuffers
SetStdHandle
RtlUnwind
GetFileType
DeleteFileA
SetHandleCount
GetEnvironmentStringsW
GetEnvironmentStrings
WideCharToMultiByte
FreeEnvironmentStringsW
FreeEnvironmentStringsA
GetModuleFileNameA
UnhandledExceptionFilter
TerminateProcess
IsBadWritePtr
HeapReAlloc
VirtualAlloc
VirtualFree
HeapCreate
HeapDestroy
WriteFile
ExitProcess
GetStartupInfoA
HeapAlloc
LCMapStringW
HeapFree
FindFirstFileA
FindNextFileA
FindClose
GetCurrentProcessId
OpenProcess
GetCommandLineA
DeviceIoControl
DuplicateHandle
CreateThread
TerminateThread
SetEvent
WaitForSingleObject
GetDriveTypeA
GetProcAddress
GetModuleHandleA
SetLastError
CreateFileA
FindResourceA
LoadResource
SizeofResource
LockResource
GetCurrentProcess
GetLastError
GetStdHandle
CloseHandle
user32
EndDialog
SendMessageA
SetWindowTextA
DialogBoxIndirectParamA
LoadIconA
RegisterClassExA
CreateDialogParamA
GetMessageA
TranslateMessage
DispatchMessageA
IsDialogMessageA
IsDlgButtonChecked
GetDlgItemTextA
WinHelpA
GetDlgItem
EnableWindow
SendDlgItemMessageA
InflateRect
CheckDlgButton
SetDlgItemTextA
LoadCursorA
GetWindowRect
GetClientRect
CreateWindowExA
SetWindowPos
ShowWindow
PostQuitMessage
GetSysColorBrush
GetSysColor
ChildWindowFromPoint
InvalidateRect
SetCursor
DefWindowProcA
PostMessageA
MessageBoxA
gdi32
SetMapMode
StartDocA
StartPage
EndPage
EndDoc
GetStockObject
GetObjectA
CreateFontIndirectA
SetBkMode
SetTextColor
SelectObject
GetDeviceCaps
comctl32
ord17
comdlg32
PrintDlgA
advapi32
RegQueryValueExA
RegSetValueExA
RegCloseKey
RegDeleteKeyA
OpenProcessToken
LookupPrivilegeValueA
AdjustTokenPrivileges
RegOpenKeyA
RegCreateKeyA
shell32
ShellExecuteA
Sections
.text Size: 36KB - Virtual size: 35KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 112KB - Virtual size: 253KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 44KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
wintaylor2.1/Programs/tools/sysinternals/pagedfrg.hlp
-
wintaylor2.1/Programs/tools/sysinternals/pdh.dll.dll windows:5 windows x86
63db478edeb55ea635f2a1b63cbe23b6
Code Sign
c1:00:8b:3c:3c:88:11:d1:3e:f6:63:ec:df:40Certificate
IssuerCN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft CorporationNot Before10-01-1997 07:00Not After31-12-2020 07:00SubjectCN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporationc1:00:8b:3c:3c:88:11:d1:3e:f6:63:ec:df:40Certificate
IssuerCN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft CorporationNot Before10-01-1997 07:00Not After31-12-2020 07:00SubjectCN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation2e:ab:11:dc:50:ff:5c:9d:cb:c0Certificate
IssuerCN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft CorporationNot Before22-08-2007 22:31Not After25-08-2012 07:00SubjectCN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USExtended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
61:0f:78:4d:00:00:00:00:00:03Certificate
IssuerCN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USNot Before23-08-2007 00:23Not After23-02-2009 00:33SubjectCN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USExtended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
KeyUsageContentCommitment
61:47:52:ba:00:00:00:00:00:04Certificate
IssuerCN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USNot Before16-09-2006 01:53Not After16-09-2011 02:03SubjectCN=Microsoft Timestamping Service,OU=nCipher DSE ESN:D8A9-CFCC-579C,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageContentCommitment
61:47:52:ba:00:00:00:00:00:04Certificate
IssuerCN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USNot Before16-09-2006 01:53Not After16-09-2011 02:03SubjectCN=Microsoft Timestamping Service,OU=nCipher DSE ESN:D8A9-CFCC-579C,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageContentCommitment
6a:0b:99:4f:c0:00:25:ab:11:db:45:1f:58:7a:67:a2Certificate
IssuerCN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft CorporationNot Before16-09-2006 01:04Not After15-09-2019 07:00SubjectCN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
c6:17:f5:37:fa:ba:03:4c:13:b6:4c:c0:5e:42:a6:5f:32:6e:69:c7Signer
Actual PE Digestc6:17:f5:37:fa:ba:03:4c:13:b6:4c:c0:5e:42:a6:5f:32:6e:69:c7Digest Algorithmsha1PE Digest MatchestrueHeaders
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL
Imports
msvcrt
mbstowcs
??2@YAPAXI@Z
??3@YAXPAX@Z
atof
atol
_ultoa
_wfopen
sprintf
rewind
fclose
fgets
_wsplitpath
wcsncmp
strstr
wcstol
swprintf
_ultow
wcsncpy
_CIpow
wcstoul
_ltoa
_ftol
floor
_except_handler3
setlocale
wcstombs
_ltow
kernel32
SetErrorMode
InterlockedIncrement
CreateThread
CreateMutexW
GetExitCodeThread
WaitForMultipleObjects
LockFile
SetEndOfFile
FlushViewOfFile
UnlockFile
WriteFile
lstrcpyA
GetWindowsDirectoryA
HeapFree
HeapAlloc
SetLastError
lstrlenW
lstrcpyW
lstrcmpW
lstrcatW
HeapReAlloc
lstrcmpiW
GetLastError
ReleaseMutex
lstrlenA
WaitForSingleObject
lstrcatA
HeapSize
FileTimeToLocalFileTime
SystemTimeToFileTime
GetUserDefaultLangID
InterlockedExchange
InterlockedCompareExchange
GetSystemTimeAsFileTime
CreateMutexA
CloseHandle
Sleep
FlushFileBuffers
InterlockedDecrement
SetEvent
CreateEventW
HeapDestroy
GetProcessHeap
HeapCreate
GetComputerNameW
DisableThreadLibraryCalls
GetVersionExW
UnmapViewOfFile
MapViewOfFile
CreateFileMappingW
CreateFileW
lstrcmpiA
GetFileSize
GetCurrentProcessId
lstrcpynW
lstrcmpA
lstrcpynA
ReadFile
SetFilePointer
FileTimeToSystemTime
SearchPathW
advapi32
CloseServiceHandle
RegCloseKey
ControlService
RegQueryValueExA
OpenSCManagerW
OpenServiceW
StartServiceA
RegQueryInfoKeyA
DeregisterEventSource
RegisterEventSourceW
RegConnectRegistryW
RegOpenKeyExW
RegQueryValueExW
comdlg32
GetOpenFileNameW
user32
SetWindowTextW
SetWindowTextA
SetCursor
SendDlgItemMessageW
SetWindowLongW
SendMessageA
GetWindowLongW
LoadCursorA
SetFocus
MessageBoxW
MessageBeep
CheckRadioButton
GetDlgItemTextW
ReleaseDC
GetDC
IsDlgButtonChecked
ShowWindow
IsWindowEnabled
CreateDialogParamW
DialogBoxParamW
SetWindowPos
GetWindowRect
GetParent
PostMessageW
SendMessageW
EndDialog
GetDlgCtrlID
GetDlgItem
EnableWindow
WinHelpA
LoadStringW
GetWindowTextW
GetFocus
ole32
CoInitializeEx
CoGetInterfaceAndReleaseStream
CoUninitialize
CoMarshalInterThreadInterfaceInStream
CoInitializeSecurity
CoCreateInstance
gdi32
GetTextExtentPoint32W
oleaut32
SafeArrayDestroy
SysFreeString
VariantClear
SafeArrayGetElement
SysAllocString
SafeArrayGetUBound
VariantInit
SafeArrayGetLBound
Exports
Exports
PdhAddCounterA
PdhAddCounterW
PdhBrowseCountersA
PdhBrowseCountersW
PdhCalculateCounterFromRawValue
PdhCloseLog
PdhCloseQuery
PdhCollectQueryData
PdhCollectQueryDataEx
PdhComputeCounterStatistics
PdhConnectMachineA
PdhConnectMachineW
PdhEnumMachinesA
PdhEnumMachinesW
PdhEnumObjectItemsA
PdhEnumObjectItemsW
PdhEnumObjectsA
PdhEnumObjectsW
PdhExpandCounterPathA
PdhExpandCounterPathW
PdhExpandWildCardPathA
PdhExpandWildCardPathW
PdhFormatFromRawValue
PdhGetCounterInfoA
PdhGetCounterInfoW
PdhGetCounterTimeBase
PdhGetDataSourceTimeRangeA
PdhGetDataSourceTimeRangeW
PdhGetDefaultPerfCounterA
PdhGetDefaultPerfCounterW
PdhGetDefaultPerfObjectA
PdhGetDefaultPerfObjectW
PdhGetDllVersion
PdhGetFormattedCounterArrayA
PdhGetFormattedCounterArrayW
PdhGetFormattedCounterValue
PdhGetLogFileSize
PdhGetRawCounterArrayA
PdhGetRawCounterArrayW
PdhGetRawCounterValue
PdhIsRealTimeQuery
PdhLogServiceCommandA
PdhLogServiceCommandW
PdhLogServiceControlA
PdhLogServiceControlW
PdhLookupPerfIndexByNameA
PdhLookupPerfIndexByNameW
PdhLookupPerfNameByIndexA
PdhLookupPerfNameByIndexW
PdhMakeCounterPathA
PdhMakeCounterPathW
PdhOpenLogA
PdhOpenLogW
PdhOpenQuery
PdhOpenQueryA
PdhOpenQueryW
PdhParseCounterPathA
PdhParseCounterPathW
PdhParseInstanceNameA
PdhParseInstanceNameW
PdhReadRawLogRecord
PdhRemoveCounter
PdhSelectDataSourceA
PdhSelectDataSourceW
PdhSetCounterScaleFactor
PdhSetDefaultRealTimeDataSource
PdhSetQueryTimeRange
PdhUpdateLogA
PdhUpdateLogFileCatalog
PdhUpdateLogW
PdhValidatePathA
PdhValidatePathW
PdhVbAddCounter
PdhVbCreateCounterPathList
PdhVbGetCounterPathElements
PdhVbGetCounterPathFromList
PdhVbGetDoubleCounterValue
PdhVbGetLogFileSize
PdhVbGetOneCounterPath
PdhVbIsGoodStatus
PdhVbOpenLog
PdhVbOpenQuery
PdhVbUpdateLog
Sections
.text Size: 121KB - Virtual size: 121KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 11KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
wintaylor2.1/Programs/tools/sysinternals/pendmoves.exe.exe windows:4 windows x86
5a91fba10cbf977c4bc79b6c310ba433
Code Sign
47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4Certificate
IssuerCN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZANot Before04-12-2003 00:00Not After03-12-2013 23:59SubjectCN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=USExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageCertSign
KeyUsageCRLSign
0d:e9:2b:f0:d4:d8:29:88:18:32:05:09:5e:9a:76:88Certificate
IssuerCN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=USNot Before04-12-2003 00:00Not After03-12-2008 23:59SubjectCN=VeriSign Time Stamping Services Signer,O=VeriSign\, Inc.,C=USExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageContentCommitment
c1:00:8b:3c:3c:88:11:d1:3e:f6:63:ec:df:40Certificate
IssuerCN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft CorporationNot Before10-01-1997 07:00Not After31-12-2020 07:00SubjectCN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation6a:0b:99:4f:c0:00:1d:ab:11:da:c4:02:a1:66:27:baCertificate
IssuerCN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft CorporationNot Before04-04-2006 17:44Not After26-04-2012 07:00SubjectCN=Microsoft Code Signing PCA,OU=Copyright (c) 2000 Microsoft Corp.,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USExtended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageContentCommitment
KeyUsageCertSign
KeyUsageCRLSign
61:46:9e:cb:00:04:00:00:00:65Certificate
IssuerCN=Microsoft Code Signing PCA,OU=Copyright (c) 2000 Microsoft Corp.,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USNot Before04-04-2006 19:43Not After04-10-2007 19:53SubjectCN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USExtended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
KeyUsageContentCommitment
53:ae:e5:b1:43:01:f0:0b:78:d8:5f:1e:10:a8:f7:b4:77:f6:8b:daSigner
Actual PE Digest53:ae:e5:b1:43:01:f0:0b:78:d8:5f:1e:10:a8:f7:b4:77:f6:8b:daDigest Algorithmsha1PE Digest MatchestrueHeaders
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
SetStdHandle
GetTimeFormatA
GetProcAddress
GetOEMCP
GetACP
GetModuleHandleA
LocalAlloc
LoadLibraryA
FileTimeToLocalFileTime
FileTimeToSystemTime
MultiByteToWideChar
GetDateFormatA
GetCPInfo
SetFilePointer
GetFileAttributesA
GetLastError
FormatMessageA
GetStdHandle
WriteFile
LocalFree
FlushFileBuffers
HeapFree
HeapAlloc
GetCommandLineA
GetVersion
ExitProcess
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
HeapReAlloc
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetFileType
GetStartupInfoA
RtlUnwind
CloseHandle
user32
DialogBoxIndirectParamA
LoadCursorA
SetCursor
InflateRect
GetDlgItem
GetSysColorBrush
EndDialog
SetWindowTextA
SendMessageA
gdi32
SetMapMode
StartDocA
StartPage
EndPage
EndDoc
GetDeviceCaps
comdlg32
PrintDlgA
advapi32
RegCreateKeyA
RegSetValueExA
RegOpenKeyA
RegQueryInfoKeyA
RegCloseKey
RegQueryValueExA
Sections
.text Size: 20KB - Virtual size: 18KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 108KB - Virtual size: 112KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 1000B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
wintaylor2.1/Programs/tools/sysinternals/pipelist.exe.exe windows:4 windows x86
266fbb448c826115d3a974ad4a7e81a4
Code Sign
47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4Certificate
IssuerCN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZANot Before04-12-2003 00:00Not After03-12-2013 23:59SubjectCN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=USExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageCertSign
KeyUsageCRLSign
0d:e9:2b:f0:d4:d8:29:88:18:32:05:09:5e:9a:76:88Certificate
IssuerCN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=USNot Before04-12-2003 00:00Not After03-12-2008 23:59SubjectCN=VeriSign Time Stamping Services Signer,O=VeriSign\, Inc.,C=USExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageContentCommitment
c1:00:8b:3c:3c:88:11:d1:3e:f6:63:ec:df:40Certificate
IssuerCN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft CorporationNot Before10-01-1997 07:00Not After31-12-2020 07:00SubjectCN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation6a:0b:99:4f:c0:00:1d:ab:11:da:c4:02:a1:66:27:baCertificate
IssuerCN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft CorporationNot Before04-04-2006 17:44Not After26-04-2012 07:00SubjectCN=Microsoft Code Signing PCA,OU=Copyright (c) 2000 Microsoft Corp.,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USExtended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageContentCommitment
KeyUsageCertSign
KeyUsageCRLSign
61:46:9e:cb:00:04:00:00:00:65Certificate
IssuerCN=Microsoft Code Signing PCA,OU=Copyright (c) 2000 Microsoft Corp.,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USNot Before04-04-2006 19:43Not After04-10-2007 19:53SubjectCN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USExtended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
KeyUsageContentCommitment
30:ef:e6:66:a8:23:7c:bd:22:8f:cf:15:97:41:2c:d7:10:55:12:9eSigner
Actual PE Digest30:ef:e6:66:a8:23:7c:bd:22:8f:cf:15:97:41:2c:d7:10:55:12:9eDigest Algorithmsha1PE Digest MatchestrueHeaders
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LCMapStringA
SetStdHandle
FlushFileBuffers
LCMapStringW
CreateFileA
GetCPInfo
SetFilePointer
MultiByteToWideChar
GetStringTypeA
LocalAlloc
LoadLibraryA
GetModuleHandleA
GetOEMCP
GetProcAddress
WriteFile
RtlUnwind
GetLastError
CloseHandle
FormatMessageA
GetACP
LocalFree
HeapFree
HeapAlloc
ExitProcess
TerminateProcess
GetCurrentProcess
GetCommandLineA
GetVersion
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
HeapReAlloc
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
GetStringTypeW
user32
DialogBoxIndirectParamA
LoadCursorA
SetCursor
InflateRect
GetDlgItem
GetSysColorBrush
EndDialog
SetWindowTextA
SendMessageA
gdi32
SetMapMode
StartDocA
StartPage
EndPage
EndDoc
GetDeviceCaps
comdlg32
PrintDlgA
advapi32
RegQueryValueExA
RegSetValueExA
RegCloseKey
RegCreateKeyA
Sections
.text Size: 24KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 108KB - Virtual size: 112KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
wintaylor2.1/Programs/tools/sysinternals/portmon.exe.exe windows:4 windows x86
318b0ededb6f2e0a03cd54fdae35e0d9
Code Sign
47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4Certificate
IssuerCN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZANot Before04-12-2003 00:00Not After03-12-2013 23:59SubjectCN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=USExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageCertSign
KeyUsageCRLSign
0d:e9:2b:f0:d4:d8:29:88:18:32:05:09:5e:9a:76:88Certificate
IssuerCN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=USNot Before04-12-2003 00:00Not After03-12-2008 23:59SubjectCN=VeriSign Time Stamping Services Signer,O=VeriSign\, Inc.,C=USExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageContentCommitment
c1:00:8b:3c:3c:88:11:d1:3e:f6:63:ec:df:40Certificate
IssuerCN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft CorporationNot Before10-01-1997 07:00Not After31-12-2020 07:00SubjectCN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation6a:0b:99:4f:c0:00:1d:ab:11:da:c4:02:a1:66:27:baCertificate
IssuerCN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft CorporationNot Before04-04-2006 17:44Not After26-04-2012 07:00SubjectCN=Microsoft Code Signing PCA,OU=Copyright (c) 2000 Microsoft Corp.,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USExtended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageContentCommitment
KeyUsageCertSign
KeyUsageCRLSign
61:46:9e:cb:00:04:00:00:00:65Certificate
IssuerCN=Microsoft Code Signing PCA,OU=Copyright (c) 2000 Microsoft Corp.,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USNot Before04-04-2006 19:43Not After04-10-2007 19:53SubjectCN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USExtended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
KeyUsageContentCommitment
bf:b7:b3:e5:68:3d:49:32:9f:e8:91:c4:80:38:3c:06:08:e1:3f:85Signer
Actual PE Digestbf:b7:b3:e5:68:3d:49:32:9f:e8:91:c4:80:38:3c:06:08:e1:3f:85Digest Algorithmsha1PE Digest MatchestrueHeaders
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
mpr
WNetAddConnection2A
WNetCancelConnection2A
ws2_32
inet_ntoa
closesocket
ioctlsocket
WSAGetLastError
accept
inet_addr
gethostbyaddr
connect
WSAStartup
socket
gethostbyname
htonl
htons
bind
getsockname
listen
comctl32
CreateToolbarEx
ord17
kernel32
EnterCriticalSection
LockResource
SizeofResource
LoadResource
FindResourceA
GlobalReAlloc
GlobalUnlock
GlobalLock
GlobalAlloc
GlobalFree
lstrlenA
GetTimeFormatA
DosDateTimeToFileTime
FileTimeToSystemTime
FileTimeToLocalFileTime
lstrcatA
HeapFree
lstrcpyA
HeapAlloc
GetProcessHeap
WriteFileEx
CopyFileA
GetCurrentThreadId
QueryPerformanceCounter
FreeLibrary
GetProcAddress
LoadLibraryA
QueueUserAPC
SleepEx
GlobalMemoryStatus
FindClose
SearchPathA
FindFirstFileA
InitializeCriticalSection
GetFullPathNameA
GetCommandLineA
GetVersion
LeaveCriticalSection
GetModuleHandleA
InterlockedDecrement
SetFilePointer
GetFileType
GetStdHandle
SetHandleCount
GetEnvironmentStringsW
GetEnvironmentStrings
WideCharToMultiByte
FreeEnvironmentStringsW
FreeEnvironmentStringsA
GetModuleFileNameA
GetStringTypeW
GetStringTypeA
MultiByteToWideChar
GetOEMCP
GetACP
GetCPInfo
HeapReAlloc
VirtualAlloc
VirtualFree
HeapCreate
HeapDestroy
DeleteCriticalSection
FlushFileBuffers
RtlUnwind
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
TlsGetValue
TlsAlloc
ExitProcess
GetStartupInfoA
ExitThread
TlsSetValue
CreateThread
ResumeThread
FormatMessageA
LocalFree
DeleteFileA
GetCurrentDirectoryA
GetComputerNameA
TerminateThread
SetEvent
CreateEventA
WaitForMultipleObjects
OutputDebugStringA
DeviceIoControl
QueryPerformanceFrequency
WriteFile
ResetEvent
ReadFile
WaitForSingleObject
GetOverlappedResult
CreateFileA
CloseHandle
GetTickCount
GetLastError
SetLastError
InterlockedIncrement
SetStdHandle
LCMapStringA
LCMapStringW
SetEndOfFile
LocalAlloc
user32
EnumWindows
LoadAcceleratorsA
TranslateAcceleratorA
IsWindow
GetWindowTextA
UpdateWindow
RegisterClassA
LoadBitmapA
LoadStringA
WinHelpA
SetWindowPos
KillTimer
SendDlgItemMessageA
AttachThreadInput
AppendMenuA
DeleteMenu
DestroyMenu
GetMenu
EnableMenuItem
RemoveMenu
CreatePopupMenu
InsertMenuA
GetSubMenu
EnumDesktopWindows
SetCapture
SetWindowLongA
GetCursorPos
wsprintfA
EndDialog
SendMessageA
GetDlgItem
MessageBoxA
SetDlgItemTextA
GetClientRect
CreateWindowExA
CallWindowProcA
GetSysColor
DrawFocusRect
SetCursor
OemToCharA
GetWindowRect
IsIconic
IsZoomed
InvalidateRgn
SetForegroundWindow
RegisterWindowMessageA
CheckRadioButton
SetFocus
InflateRect
GetSysColorBrush
SetMenuItemBitmaps
DialogBoxIndirectParamA
OpenClipboard
EmptyClipboard
SetClipboardData
CloseClipboard
GetFocus
DrawTextA
GetSystemMetrics
MoveWindow
ClientToScreen
ScreenToClient
PostMessageA
DestroyWindow
GetDC
GetMenuCheckMarkDimensions
ReleaseDC
SetWindowTextA
DialogBoxParamA
CheckMenuItem
InvalidateRect
CheckDlgButton
GetDlgItemTextA
IsDlgButtonChecked
LoadIconA
LoadCursorA
RegisterClassExA
CreateDialogParamA
ShowWindow
GetMessageA
IsDialogMessageA
TranslateMessage
DispatchMessageA
SetTimer
PostQuitMessage
DefWindowProcA
ReleaseCapture
gdi32
CreateFontIndirectA
GetObjectA
SetBkColor
GetStockObject
SetAbortProc
GetTextExtentPoint32A
ExtTextOutA
DeleteObject
CreateSolidBrush
CreateCompatibleBitmap
SetMapMode
StartDocA
GetDeviceCaps
CreateFontA
GetTextMetricsA
GetTextExtentPointA
StartPage
TextOutA
EndPage
AbortDoc
EndDoc
SetTextColor
SetBkMode
SelectObject
StretchBlt
DeleteDC
CreateCompatibleDC
comdlg32
PrintDlgA
ChooseColorA
FindTextA
ChooseFontA
GetSaveFileNameA
advapi32
RegEnumValueA
RegCloseKey
RegOpenKeyA
RegSetValueExA
RegCreateKeyA
RegQueryValueExA
DeleteService
ControlService
OpenSCManagerA
OpenServiceA
StartServiceA
QueryServiceStatus
CreateServiceA
CloseServiceHandle
shell32
SHGetMalloc
SHGetSpecialFolderLocation
SHBrowseForFolderA
ShellExecuteExA
Sections
.text Size: 96KB - Virtual size: 92KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 124KB - Virtual size: 554KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 116KB - Virtual size: 115KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
wintaylor2.1/Programs/tools/sysinternals/procdump.exe.exe windows:5 windows x86
5ae7cced40af988bd85baeaa5d9b99ec
Code Sign
2e:ab:11:dc:50:ff:5c:9d:cb:c0Certificate
IssuerCN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft CorporationNot Before22-08-2007 22:31Not After25-08-2012 07:00SubjectCN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USExtended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
61:01:cf:3e:00:00:00:00:00:0fCertificate
IssuerCN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USNot Before07-12-2009 22:40Not After07-03-2011 22:40SubjectCN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USExtended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
6a:0b:99:4f:c0:00:25:ab:11:db:45:1f:58:7a:67:a2Certificate
IssuerCN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft CorporationNot Before16-09-2006 01:04Not After15-09-2019 07:00SubjectCN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
61:06:94:2d:00:00:00:00:00:09Certificate
IssuerCN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USNot Before25-07-2008 19:02Not After25-07-2013 19:12SubjectCN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:7A82-688A-9F92,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageContentCommitment
fc:a9:80:7c:45:fb:b7:71:bc:5f:1d:55:7e:7d:fd:ca:52:13:80:83Signer
Actual PE Digestfc:a9:80:7c:45:fb:b7:71:bc:5f:1d:55:7e:7d:fd:ca:52:13:80:83Digest Algorithmsha1PE Digest MatchestrueHeaders
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
dbghelp
MiniDumpWriteDump
kernel32
WaitForSingleObject
SetEvent
OpenProcess
Sleep
SizeofResource
FormatMessageW
GetExitCodeProcess
GetTimeFormatW
GetFileAttributesW
TerminateProcess
GetModuleFileNameW
CreateFileW
GetLastError
Process32FirstW
GetProcessId
SetConsoleCtrlHandler
LockResource
CreateEventW
GetSystemInfo
WaitForMultipleObjects
Process32NextW
GetCurrentProcess
CreateToolhelp32Snapshot
WaitForDebugEvent
CloseHandle
DeleteFileW
GetSystemTime
ExpandEnvironmentStringsW
CreateFileA
ReadFile
GetProcessHeap
SetEndOfFile
HeapSize
FlushFileBuffers
SetStdHandle
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
LoadLibraryA
SystemTimeToTzSpecificLocalTime
CreateProcessW
LoadResource
FindResourceW
DebugActiveProcessStop
DebugActiveProcess
GetDateFormatW
LocalFree
GetFullPathNameW
LocalAlloc
GetProcAddress
LoadLibraryW
GetModuleHandleW
GetCommandLineW
ContinueDebugEvent
HeapAlloc
HeapFree
ExitThread
ResumeThread
CreateThread
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetCPInfo
InterlockedIncrement
InterlockedDecrement
GetACP
GetOEMCP
IsValidCodePage
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
GetCurrentThreadId
HeapCreate
VirtualFree
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
VirtualAlloc
HeapReAlloc
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameA
RtlUnwind
LCMapStringW
WideCharToMultiByte
GetConsoleCP
GetConsoleMode
RaiseException
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetFileType
GetStartupInfoA
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
LCMapStringA
MultiByteToWideChar
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
InitializeCriticalSectionAndSpinCount
SetFilePointer
user32
IsHungAppWindow
EnumWindows
IsWindowVisible
GetWindowThreadProcessId
SetCursor
DialogBoxIndirectParamW
LoadCursorW
InflateRect
GetDlgItem
EndDialog
GetSysColorBrush
SendMessageW
SetWindowTextW
gdi32
StartPage
GetDeviceCaps
SetMapMode
StartDocW
EndDoc
EndPage
comdlg32
PrintDlgW
advapi32
LookupPrivilegeValueW
OpenProcessToken
RegSetValueExW
RegCloseKey
RegQueryValueExW
RegCreateKeyW
AdjustTokenPrivileges
Sections
.text Size: 80KB - Virtual size: 79KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 32KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 148KB - Virtual size: 148KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
wintaylor2.1/Programs/tools/sysinternals/procexp.chm.chm
-
wintaylor2.1/Programs/tools/sysinternals/procexp.exe.exe windows:5 windows x86
28006e813fb35a41640d0ecb88fa2ced
Code Sign
2e:ab:11:dc:50:ff:5c:9d:cb:c0Certificate
IssuerCN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft CorporationNot Before22-08-2007 22:31Not After25-08-2012 07:00SubjectCN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USExtended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
61:01:cf:3e:00:00:00:00:00:0fCertificate
IssuerCN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USNot Before07-12-2009 22:40Not After07-03-2011 22:40SubjectCN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USExtended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
6a:0b:99:4f:c0:00:25:ab:11:db:45:1f:58:7a:67:a2Certificate
IssuerCN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft CorporationNot Before16-09-2006 01:04Not After15-09-2019 07:00SubjectCN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
61:06:94:2d:00:00:00:00:00:09Certificate
IssuerCN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USNot Before25-07-2008 19:02Not After25-07-2013 19:12SubjectCN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:7A82-688A-9F92,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageContentCommitment
f3:ca:f1:8a:c8:1b:bd:ce:c7:40:77:c0:ef:a3:9b:86:c0:8e:9a:73Signer
Actual PE Digestf3:ca:f1:8a:c8:1b:bd:ce:c7:40:77:c0:ef:a3:9b:86:c0:8e:9a:73Digest Algorithmsha1PE Digest MatchestrueHeaders
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
ws2_32
getservbyport
htons
ntohs
ntohl
WSAStartup
gethostbyaddr
htonl
mpr
WNetGetConnectionA
comctl32
ImageList_Destroy
CreateToolbarEx
CreatePropertySheetPageA
ord6
PropertySheetA
ord17
ImageList_Create
ImageList_DrawEx
InitCommonControlsEx
ImageList_ReplaceIcon
version
GetFileVersionInfoSizeA
VerQueryValueA
GetFileVersionInfoA
kernel32
CreateFileA
SetLastError
GetCommandLineW
OpenEventA
InterlockedIncrement
GetTickCount
lstrcatA
HeapFree
lstrcpyA
HeapAlloc
GetProcessHeap
InterlockedDecrement
ReadProcessMemory
GetDateFormatA
lstrcmpA
lstrcmpiA
GetEnvironmentVariableA
MulDiv
CreateProcessA
ExpandEnvironmentStringsA
SearchPathA
GetFileAttributesA
GetNumberFormatA
lstrcpynA
GetSystemDirectoryA
GetProcessAffinityMask
Sleep
SetThreadAffinityMask
GetCurrentThread
DeleteFileA
GetCommandLineA
VirtualQueryEx
OpenProcess
SetFilePointer
ReadFile
UnmapViewOfFile
IsBadReadPtr
MapViewOfFile
CreateFileMappingA
PulseEvent
GlobalMemoryStatus
WaitForMultipleObjects
SetErrorMode
GetCurrentProcessId
SetPriorityClass
FindClose
FindFirstFileA
SetEnvironmentVariableA
CreateEventA
GlobalUnlock
GlobalAlloc
GlobalLock
FindResourceA
SetProcessWorkingSetSize
GetLocaleInfoA
FormatMessageA
OutputDebugStringA
TerminateProcess
GetProcessWorkingSetSize
DeviceIoControl
GetDriveTypeA
GetCurrentDirectoryA
GetFileTime
GetExitCodeThread
DuplicateHandle
VirtualFree
VirtualAlloc
GetPriorityClass
GetThreadContext
ResetEvent
MultiByteToWideChar
GlobalAddAtomA
GetSystemInfo
SetConsoleCtrlHandler
InitializeCriticalSectionAndSpinCount
QueryPerformanceCounter
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetFileType
SetHandleCount
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
GetConsoleMode
GetConsoleCP
HeapSize
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
TlsFree
TlsSetValue
TlsAlloc
TlsGetValue
GetStdHandle
WriteFile
ExitProcess
GetModuleHandleW
FatalAppExitA
HeapDestroy
HeapCreate
GetStartupInfoA
ResumeThread
CreateThread
GetCurrentThreadId
ExitThread
RtlUnwind
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
HeapReAlloc
lstrlenW
RaiseException
InterlockedExchange
LoadResource
SizeofResource
LockResource
GetCurrentProcess
IsBadStringPtrA
lstrlenA
InitializeCriticalSection
GetUserDefaultLCID
EnumSystemLocalesA
IsValidLocale
SetStdHandle
GetSystemTimeAsFileTime
DeleteCriticalSection
FileTimeToLocalFileTime
FileTimeToSystemTime
GetTimeFormatA
EnterCriticalSection
LeaveCriticalSection
SetEvent
GetModuleHandleA
WaitForSingleObject
TerminateThread
WideCharToMultiByte
CreateToolhelp32Snapshot
Module32First
CloseHandle
Module32Next
GetVersion
FreeLibrary
LoadLibraryA
GetProcAddress
GetLastError
LocalFree
LocalAlloc
GetModuleFileNameA
FlushFileBuffers
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
GetTimeZoneInformation
SetEndOfFile
CompareStringA
CompareStringW
GlobalReAlloc
GetLocaleInfoW
user32
CheckMenuRadioItem
GetDlgItemTextA
ReleaseCapture
CreateDialogParamA
DispatchMessageA
IsDialogMessageA
TranslateMessage
TranslateAcceleratorA
GetMessageA
LoadAcceleratorsA
RedrawWindow
ExitWindowsEx
CloseClipboard
SetClipboardData
EmptyClipboard
OpenClipboard
DrawMenuBar
RemoveMenu
CreateMenu
RegisterWindowMessageA
GetDlgCtrlID
SendMessageTimeoutA
GetWindow
GetUserObjectSecurity
SetUserObjectSecurity
GetKeyState
CheckRadioButton
MsgWaitForMultipleObjects
PeekMessageA
ScrollWindowEx
SetScrollInfo
GetScrollInfo
IntersectRect
GetUpdateRgn
GetClassLongA
wsprintfA
GetMenuCheckMarkDimensions
ShowWindowAsync
SetForegroundWindow
CheckMenuItem
FindWindowExA
IsIconic
GetWindowDC
SetMenuItemInfoA
SetClassLongA
FillRect
EnumWindows
GetWindowThreadProcessId
GetWindowTextA
DeleteMenu
EnableWindow
CheckDlgButton
IsDlgButtonChecked
GetWindowPlacement
ModifyMenuA
CreatePopupMenu
TrackPopupMenuEx
AppendMenuA
GetMenu
GetSubMenu
GetMenuItemCount
GetMenuItemID
EnableMenuItem
DestroyIcon
FrameRect
GetDoubleClickTime
InvalidateRgn
MessageBoxA
SetFocus
SetTimer
WindowFromPoint
KillTimer
LoadStringA
LoadImageA
RegisterClassExA
RegisterClassA
FindWindowA
SetWindowPlacement
UpdateWindow
DialogBoxIndirectParamA
SetWindowTextA
PostQuitMessage
DrawIconEx
LoadMenuA
InsertMenuA
TrackPopupMenu
GetCapture
SetCapture
GetDesktopWindow
DrawEdge
InflateRect
DefDlgProcA
DefFrameProcA
DefMDIChildProcA
ClientToScreen
SystemParametersInfoA
CreateIconIndirect
MapWindowPoints
DestroyWindow
CreateWindowExA
IsWindowVisible
GetFocus
DrawTextA
GetDC
ReleaseDC
GetCursorPos
SetWindowPos
PostMessageA
SendMessageA
ShowWindow
IsZoomed
PtInRect
BeginPaint
EndPaint
DrawFrameControl
CallWindowProcA
CopyRect
SetWindowLongA
SetPropA
GetPropA
BeginDeferWindowPos
EnumChildWindows
EndDeferWindowPos
GetClientRect
GetSystemMetrics
OffsetRect
UnionRect
GetParent
GetClassNameA
GetWindowLongA
DeferWindowPos
ScreenToClient
DefWindowProcA
DialogBoxParamA
EndDialog
GetDlgItem
GetWindowRect
MoveWindow
SetDlgItemTextA
LoadCursorA
GetSysColorBrush
GetSysColor
ChildWindowFromPoint
InvalidateRect
SetCursor
LoadIconA
gdi32
GetStockObject
GetObjectA
CreateSolidBrush
GetTextExtentPoint32A
ExtTextOutA
SetTextAlign
GetDeviceCaps
Rectangle
CreatePen
SetROP2
SaveDC
Ellipse
CreateCompatibleBitmap
LineTo
MoveToEx
GetTextMetricsA
Polyline
GetBkColor
SelectClipRgn
CreateRectRgnIndirect
RectInRegion
CreateRectRgn
EndPage
SetMapMode
StartDocA
CreateFontIndirectA
SetBkMode
SetTextColor
RestoreDC
SelectObject
EndDoc
SetBkColor
BitBlt
CreateDIBSection
CreateCompatibleDC
DeleteDC
DeleteObject
StartPage
comdlg32
PrintDlgA
ChooseFontA
GetOpenFileNameA
ChooseColorA
GetSaveFileNameA
FindTextA
shell32
SHGetMalloc
SHGetSpecialFolderLocation
SHBrowseForFolderA
SHGetPathFromIDListA
ShellExecuteExA
Shell_NotifyIconA
ShellExecuteA
SHGetFileInfoA
ole32
CoInitialize
CoUninitialize
CoCreateInstance
oleaut32
SysAllocString
SysFreeString
VariantClear
SysStringLen
VariantInit
SysAllocStringByteLen
GetErrorInfo
VariantChangeType
SetErrorInfo
CreateErrorInfo
Sections
.text Size: 504KB - Virtual size: 504KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 68KB - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 18KB - Virtual size: 138KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3.1MB - Virtual size: 3.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 40KB - Virtual size: 39KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
wintaylor2.1/Programs/tools/sysinternals/procmon.chm.chm
-
wintaylor2.1/Programs/tools/sysinternals/psexec.exe.exe windows:5 windows x86
a04dd9f5ee88d7774203e0a0cfa1b941
Code Sign
2e:ab:11:dc:50:ff:5c:9d:cb:c0Certificate
IssuerCN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft CorporationNot Before22-08-2007 22:31Not After25-08-2012 07:00SubjectCN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USExtended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
61:01:cf:3e:00:00:00:00:00:0fCertificate
IssuerCN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USNot Before07-12-2009 22:40Not After07-03-2011 22:40SubjectCN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USExtended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
6a:0b:99:4f:c0:00:25:ab:11:db:45:1f:58:7a:67:a2Certificate
IssuerCN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft CorporationNot Before16-09-2006 01:04Not After15-09-2019 07:00SubjectCN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
61:05:a2:30:00:00:00:00:00:08Certificate
IssuerCN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USNot Before25-07-2008 19:01Not After25-07-2013 19:11SubjectCN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:85D3-305C-5BCF,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageContentCommitment
14:32:e4:ad:0e:d7:35:5e:37:df:24:21:cd:1a:8f:3b:b9:33:92:3fSigner
Actual PE Digest14:32:e4:ad:0e:d7:35:5e:37:df:24:21:cd:1a:8f:3b:b9:33:92:3fDigest Algorithmsha1PE Digest MatchestrueHeaders
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
version
GetFileVersionInfoW
GetFileVersionInfoSizeW
VerQueryValueW
netapi32
NetApiBufferFree
NetServerEnum
ws2_32
WSAStartup
gethostname
inet_ntoa
gethostbyname
mpr
WNetAddConnection2W
WNetCancelConnection2W
kernel32
GetModuleFileNameW
SetEvent
ConnectNamedPipe
GetFileAttributesW
DisconnectNamedPipe
ReadConsoleW
ReadFile
GetFileTime
WaitNamedPipeW
SetFileAttributesW
CopyFileW
WaitForMultipleObjects
SetConsoleTitleW
DuplicateHandle
GetCurrentProcessId
TransactNamedPipe
SetNamedPipeHandleState
GetVersion
CreateEventW
GetExitCodeProcess
ResumeThread
SetProcessAffinityMask
GetEnvironmentVariableW
GetFullPathNameW
GetUserDefaultLCID
GetDateFormatA
GetTimeFormatA
GetStringTypeA
SetFilePointer
GetSystemTimeAsFileTime
QueryPerformanceCounter
GetEnvironmentStringsW
FreeEnvironmentStringsW
LCMapStringW
LoadResource
GetCurrentProcess
MultiByteToWideChar
WaitForSingleObject
GetComputerNameW
GetSystemDirectoryW
DeleteFileW
FindResourceW
SizeofResource
LockResource
GetConsoleScreenBufferInfo
LoadLibraryExW
FormatMessageA
GetStdHandle
WriteFile
FreeLibrary
CreateFileW
CloseHandle
GetTickCount
SetEnvironmentVariableA
Sleep
SetLastError
GetLastError
GetCommandLineW
LocalAlloc
GetModuleHandleW
LocalFree
SetPriorityClass
LoadLibraryW
GetProcAddress
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
HeapSize
GetLocaleInfoW
GetTimeZoneInformation
SetEndOfFile
GetProcessHeap
CompareStringA
CompareStringW
SetConsoleCtrlHandler
HeapAlloc
HeapFree
EnterCriticalSection
LeaveCriticalSection
ExitThread
GetCurrentThreadId
CreateThread
ReadConsoleInputA
SetConsoleMode
GetConsoleMode
PeekConsoleInputA
GetNumberOfConsoleInputEvents
ExitProcess
DeleteCriticalSection
FatalAppExitA
VirtualFree
VirtualAlloc
HeapReAlloc
HeapCreate
HeapDestroy
GetModuleFileNameA
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetCPInfo
InterlockedIncrement
InterlockedDecrement
GetACP
GetOEMCP
IsValidCodePage
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
GetCurrentThread
SetHandleCount
GetFileType
GetStartupInfoA
WideCharToMultiByte
GetConsoleCP
RtlUnwind
CreateFileA
FlushFileBuffers
InterlockedExchange
LoadLibraryA
InitializeCriticalSectionAndSpinCount
GetStringTypeW
LCMapStringA
user32
LoadCursorW
SetCursor
SetWindowTextW
SendMessageW
EndDialog
GetSysColorBrush
GetDlgItem
DialogBoxIndirectParamW
InflateRect
gdi32
GetDeviceCaps
SetMapMode
StartDocW
StartPage
EndPage
EndDoc
comdlg32
PrintDlgW
advapi32
InitializeAcl
CreateProcessAsUserW
OpenProcessToken
AdjustTokenPrivileges
LogonUserW
ImpersonateLoggedOnUser
RegConnectRegistryW
RevertToSelf
DeleteService
ControlService
OpenSCManagerW
OpenServiceW
StartServiceW
QueryServiceStatus
CreateServiceW
CloseServiceHandle
RegCreateKeyW
RegQueryValueExW
RegSetValueExW
RegCloseKey
AllocateAndInitializeSid
GetTokenInformation
GetLengthSid
SetTokenInformation
GetSecurityInfo
GetAce
AddAce
AddAccessAllowedAce
SetSecurityInfo
FreeSid
LsaOpenPolicy
LsaEnumerateAccountRights
LookupPrivilegeValueW
LsaFreeMemory
LsaClose
Sections
.text Size: 146KB - Virtual size: 145KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 33KB - Virtual size: 33KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 181KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 178KB - Virtual size: 178KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
wintaylor2.1/Programs/tools/sysinternals/psfile.exe.exe windows:4 windows x86
bcaee2d1f3ce48e6df654e8fc92f6e46
Code Sign
47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4Certificate
IssuerCN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZANot Before04-12-2003 00:00Not After03-12-2013 23:59SubjectCN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=USExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageCertSign
KeyUsageCRLSign
0d:e9:2b:f0:d4:d8:29:88:18:32:05:09:5e:9a:76:88Certificate
IssuerCN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=USNot Before04-12-2003 00:00Not After03-12-2008 23:59SubjectCN=VeriSign Time Stamping Services Signer,O=VeriSign\, Inc.,C=USExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageContentCommitment
c1:00:8b:3c:3c:88:11:d1:3e:f6:63:ec:df:40Certificate
IssuerCN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft CorporationNot Before10-01-1997 07:00Not After31-12-2020 07:00SubjectCN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation6a:0b:99:4f:c0:00:1d:ab:11:da:c4:02:a1:66:27:baCertificate
IssuerCN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft CorporationNot Before04-04-2006 17:44Not After26-04-2012 07:00SubjectCN=Microsoft Code Signing PCA,OU=Copyright (c) 2000 Microsoft Corp.,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USExtended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageContentCommitment
KeyUsageCertSign
KeyUsageCRLSign
61:46:9e:cb:00:04:00:00:00:65Certificate
IssuerCN=Microsoft Code Signing PCA,OU=Copyright (c) 2000 Microsoft Corp.,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USNot Before04-04-2006 19:43Not After04-10-2007 19:53SubjectCN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USExtended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
KeyUsageContentCommitment
bb:e6:1e:63:56:9a:4b:f9:b0:6a:88:88:03:9b:c2:3e:b9:a2:1f:bdSigner
Actual PE Digestbb:e6:1e:63:56:9a:4b:f9:b0:6a:88:88:03:9b:c2:3e:b9:a2:1f:bdDigest Algorithmsha1PE Digest MatchestrueHeaders
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
version
VerQueryValueW
GetFileVersionInfoW
GetFileVersionInfoSizeW
netapi32
NetFileGetInfo
NetFileEnum
NetFileClose
mpr
WNetAddConnection2W
WNetCancelConnection2W
kernel32
SetLastError
Sleep
GetTickCount
CloseHandle
FreeLibrary
WriteFile
GetStdHandle
FormatMessageA
LoadLibraryExW
GetComputerNameW
GetLastError
GetLocaleInfoA
MultiByteToWideChar
GetCurrentProcess
GetVersion
GetModuleFileNameW
LCMapStringW
LCMapStringA
SetFilePointer
GetSystemTimeAsFileTime
GetCurrentProcessId
QueryPerformanceCounter
GetCommandLineW
GetCommandLineA
GetEnvironmentStringsW
LocalAlloc
LoadLibraryW
LocalFree
GetModuleHandleW
FreeEnvironmentStringsW
GetEnvironmentStrings
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
HeapSize
ReadFile
HeapAlloc
HeapFree
EnterCriticalSection
LeaveCriticalSection
GetCurrentThreadId
ReadConsoleInputA
SetConsoleMode
GetConsoleMode
GetProcAddress
GetModuleHandleA
ExitProcess
GetVersionExA
GetProcessHeap
DeleteCriticalSection
VirtualFree
VirtualAlloc
HeapReAlloc
HeapDestroy
HeapCreate
GetModuleFileNameA
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetCPInfo
InterlockedIncrement
InterlockedDecrement
GetACP
GetOEMCP
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetHandleCount
GetFileType
GetStartupInfoA
WideCharToMultiByte
GetConsoleCP
RtlUnwind
CreateFileA
FlushFileBuffers
LoadLibraryA
InitializeCriticalSection
GetStringTypeA
GetStringTypeW
FreeEnvironmentStringsA
user32
SetCursor
LoadCursorW
SendMessageW
SetWindowTextW
EndDialog
GetSysColorBrush
InflateRect
GetDlgItem
DialogBoxIndirectParamW
gdi32
SetMapMode
StartDocW
StartPage
EndPage
EndDoc
GetDeviceCaps
comdlg32
PrintDlgW
advapi32
RegCreateKeyW
RegQueryValueExW
RegSetValueExW
RegCloseKey
Sections
.text Size: 56KB - Virtual size: 52KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 24KB - Virtual size: 21KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
wintaylor2.1/Programs/tools/sysinternals/psgetsid.exe.exe windows:5 windows x86
a29a3eeb3909714dbdb858ef1c800f15
Code Sign
2e:ab:11:dc:50:ff:5c:9d:cb:c0Certificate
IssuerCN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft CorporationNot Before22-08-2007 22:31Not After25-08-2012 07:00SubjectCN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USExtended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
61:01:cf:3e:00:00:00:00:00:0fCertificate
IssuerCN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USNot Before07-12-2009 22:40Not After07-03-2011 22:40SubjectCN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USExtended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
6a:0b:99:4f:c0:00:25:ab:11:db:45:1f:58:7a:67:a2Certificate
IssuerCN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft CorporationNot Before16-09-2006 01:04Not After15-09-2019 07:00SubjectCN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
61:05:a2:30:00:00:00:00:00:08Certificate
IssuerCN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USNot Before25-07-2008 19:01Not After25-07-2013 19:11SubjectCN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:85D3-305C-5BCF,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageContentCommitment
56:ab:69:90:d6:2b:c6:d9:68:3b:d4:ef:5b:ee:04:f3:21:eb:91:a3Signer
Actual PE Digest56:ab:69:90:d6:2b:c6:d9:68:3b:d4:ef:5b:ee:04:f3:21:eb:91:a3Digest Algorithmsha1PE Digest MatchestrueHeaders
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
version
GetFileVersionInfoA
GetFileVersionInfoSizeA
VerQueryValueA
netapi32
NetApiBufferFree
NetServerEnum
ws2_32
WSAStartup
gethostname
inet_ntoa
gethostbyname
mpr
WNetAddConnection2A
WNetCancelConnection2A
kernel32
FindResourceA
DeleteFileA
GetSystemDirectoryA
WaitForSingleObject
GetCurrentProcess
WideCharToMultiByte
GetModuleFileNameA
SetEvent
ConnectNamedPipe
lstrlenA
lstrcpyA
LoadResource
GetLocaleInfoA
GetUserDefaultLCID
GetDateFormatA
GetTimeFormatA
GetStringTypeW
GetStringTypeA
GetSystemTimeAsFileTime
GetCurrentProcessId
QueryPerformanceCounter
GetEnvironmentStringsW
FreeEnvironmentStringsW
SizeofResource
LockResource
GetConsoleScreenBufferInfo
LoadLibraryExA
CloseHandle
FormatMessageA
GetStdHandle
FreeLibrary
GetTickCount
Sleep
SetLastError
GetVersion
GetCommandLineA
GetFullPathNameA
GetComputerNameA
CreateFileA
GetLastError
WriteFile
ReadFile
GetProcAddress
GetCommandLineW
LocalAlloc
LoadLibraryA
LocalFree
GetModuleHandleA
EnumSystemLocalesA
SetEnvironmentVariableA
IsValidLocale
SetFilePointer
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
SetStdHandle
HeapSize
GetLocaleInfoW
GetTimeZoneInformation
SetEndOfFile
GetProcessHeap
CompareStringA
CompareStringW
HeapAlloc
HeapFree
EnterCriticalSection
LeaveCriticalSection
ReadConsoleInputA
SetConsoleMode
GetConsoleMode
PeekConsoleInputA
GetNumberOfConsoleInputEvents
GetModuleHandleW
ExitProcess
ExitThread
GetCurrentThreadId
CreateThread
GetCPInfo
InterlockedIncrement
InterlockedDecrement
GetACP
GetOEMCP
IsValidCodePage
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
GetCurrentThread
LCMapStringA
MultiByteToWideChar
LCMapStringW
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
DeleteCriticalSection
FatalAppExitA
VirtualFree
VirtualAlloc
HeapReAlloc
HeapCreate
HeapDestroy
SetHandleCount
GetFileType
GetStartupInfoA
GetConsoleCP
FlushFileBuffers
SetConsoleCtrlHandler
InterlockedExchange
InitializeCriticalSectionAndSpinCount
RtlUnwind
FreeEnvironmentStringsA
GetEnvironmentStrings
user32
SetWindowTextA
LoadCursorA
EndDialog
InflateRect
SendMessageA
GetSysColorBrush
GetDlgItem
DialogBoxIndirectParamA
wsprintfA
SetCursor
gdi32
GetDeviceCaps
StartDocA
StartPage
EndPage
EndDoc
SetMapMode
comdlg32
PrintDlgA
advapi32
LogonUserA
LsaOpenPolicy
LsaNtStatusToWinError
LsaQueryInformationPolicy
LsaClose
IsValidSid
GetSidIdentifierAuthority
GetSidSubAuthorityCount
GetSidLengthRequired
InitializeSid
GetSidSubAuthority
OpenProcessToken
LookupPrivilegeValueA
AdjustTokenPrivileges
ImpersonateLoggedOnUser
RegConnectRegistryA
RevertToSelf
DeleteService
ControlService
OpenSCManagerA
OpenServiceA
StartServiceA
QueryServiceStatus
CreateServiceA
CloseServiceHandle
LookupAccountSidA
LookupAccountNameA
RegCreateKeyA
RegQueryValueExA
RegSetValueExA
RegCloseKey
Sections
.text Size: 123KB - Virtual size: 123KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 27KB - Virtual size: 26KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 163KB - Virtual size: 163KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
wintaylor2.1/Programs/tools/sysinternals/psinfo.exe.exe windows:5 windows x86
b5b9a3c9f35a81554e2618a8297dca2e
Code Sign
2e:ab:11:dc:50:ff:5c:9d:cb:c0Certificate
IssuerCN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft CorporationNot Before22-08-2007 22:31Not After25-08-2012 07:00SubjectCN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USExtended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
61:01:cf:3e:00:00:00:00:00:0fCertificate
IssuerCN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USNot Before07-12-2009 22:40Not After07-03-2011 22:40SubjectCN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USExtended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
6a:0b:99:4f:c0:00:25:ab:11:db:45:1f:58:7a:67:a2Certificate
IssuerCN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft CorporationNot Before16-09-2006 01:04Not After15-09-2019 07:00SubjectCN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
61:05:a2:30:00:00:00:00:00:08Certificate
IssuerCN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USNot Before25-07-2008 19:01Not After25-07-2013 19:11SubjectCN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:85D3-305C-5BCF,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageContentCommitment
59:14:c9:4c:1c:60:aa:23:d4:52:0f:d8:42:69:f2:77:5f:49:7e:34Signer
Actual PE Digest59:14:c9:4c:1c:60:aa:23:d4:52:0f:d8:42:69:f2:77:5f:49:7e:34Digest Algorithmsha1PE Digest MatchestrueHeaders
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
pdh
PdhOpenQueryW
PdhAddCounterW
PdhCollectQueryData
PdhGetFormattedCounterValue
PdhCloseQuery
version
VerQueryValueW
GetFileVersionInfoSizeW
GetFileVersionInfoW
netapi32
NetServerEnum
NetApiBufferFree
ws2_32
inet_ntoa
WSAStartup
gethostbyname
gethostname
mpr
WNetCancelConnection2W
WNetAddConnection2W
kernel32
GetTickCount
CloseHandle
CreateFileW
FreeLibrary
WriteFile
GetStdHandle
FormatMessageA
LoadLibraryExW
GetConsoleScreenBufferInfo
LockResource
SizeofResource
LoadResource
FindResourceW
DeleteFileW
GetSystemDirectoryW
GetComputerNameW
WaitForSingleObject
MultiByteToWideChar
Sleep
GetVersion
GetModuleFileNameW
SetEvent
ConnectNamedPipe
ReadFile
GetDateFormatW
FileTimeToSystemTime
GetSystemTimeAsFileTime
GetCurrentProcessId
QueryPerformanceCounter
GetEnvironmentStringsW
FreeEnvironmentStringsW
LCMapStringW
LCMapStringA
GetModuleHandleA
InitializeCriticalSectionAndSpinCount
LoadLibraryA
SetLastError
GetLastError
GetProcAddress
GetCommandLineW
LocalAlloc
LocalFree
LoadLibraryW
SetErrorMode
GetModuleHandleW
GetLogicalDrives
GetVolumeInformationW
GetDriveTypeW
GetDiskFreeSpaceExW
SetFilePointer
GetStringTypeA
GetStringTypeW
GetTimeFormatA
GetDateFormatA
GetUserDefaultLCID
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale
SetStdHandle
SetEnvironmentVariableA
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
HeapSize
GetLocaleInfoW
GetTimeZoneInformation
SetEndOfFile
GetProcessHeap
CompareStringA
CompareStringW
GetCurrentProcess
InterlockedExchange
SetConsoleCtrlHandler
FlushFileBuffers
CreateFileA
RtlUnwind
GetConsoleCP
WideCharToMultiByte
HeapAlloc
HeapFree
EnterCriticalSection
LeaveCriticalSection
ExitThread
GetCurrentThreadId
CreateThread
ReadConsoleInputA
SetConsoleMode
GetConsoleMode
PeekConsoleInputA
GetNumberOfConsoleInputEvents
ExitProcess
HeapReAlloc
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
DeleteCriticalSection
FatalAppExitA
VirtualFree
VirtualAlloc
HeapCreate
HeapDestroy
GetModuleFileNameA
GetCPInfo
InterlockedIncrement
InterlockedDecrement
GetACP
GetOEMCP
IsValidCodePage
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
GetCurrentThread
SetHandleCount
GetFileType
GetStartupInfoA
user32
GetDlgItem
GetSysColorBrush
EndDialog
SetWindowTextW
LoadCursorW
SetCursor
InflateRect
SendMessageW
DialogBoxIndirectParamW
gdi32
SetMapMode
StartDocW
StartPage
EndPage
EndDoc
GetDeviceCaps
comdlg32
PrintDlgW
advapi32
ImpersonateLoggedOnUser
RegEnumKeyW
RegQueryInfoKeyW
RegOpenKeyW
RegOpenKeyExW
RegEnumValueW
RegEnumKeyExW
OpenProcessToken
LookupPrivilegeValueW
AdjustTokenPrivileges
LogonUserW
RegConnectRegistryW
RevertToSelf
DeleteService
ControlService
OpenSCManagerW
OpenServiceW
StartServiceW
QueryServiceStatus
CreateServiceW
CloseServiceHandle
RegCreateKeyW
RegQueryValueExW
RegSetValueExW
RegCloseKey
ole32
CoInitializeEx
CoInitializeSecurity
CoCreateInstance
oleaut32
SysAllocString
SysFreeString
Sections
.text Size: 167KB - Virtual size: 166KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 40KB - Virtual size: 39KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 5KB - Virtual size: 42KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 162KB - Virtual size: 161KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
wintaylor2.1/Programs/tools/sysinternals/pskill.exe.exe windows:5 windows x86
581bbb78c43ca05f50cb74db6ef4e6aa
Code Sign
2e:ab:11:dc:50:ff:5c:9d:cb:c0Certificate
IssuerCN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft CorporationNot Before22-08-2007 22:31Not After25-08-2012 07:00SubjectCN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USExtended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
61:01:64:0f:00:00:00:00:00:0bCertificate
IssuerCN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USNot Before20-01-2009 01:58Not After20-03-2010 02:08SubjectCN=Microsoft Corporation,OU=AOC,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USExtended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
KeyUsageContentCommitment
6a:0b:99:4f:c0:00:25:ab:11:db:45:1f:58:7a:67:a2Certificate
IssuerCN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft CorporationNot Before16-09-2006 01:04Not After15-09-2019 07:00SubjectCN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
61:05:a2:30:00:00:00:00:00:08Certificate
IssuerCN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USNot Before25-07-2008 19:01Not After25-07-2013 19:11SubjectCN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:85D3-305C-5BCF,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageContentCommitment
11:bd:3d:fc:16:a1:85:2e:49:da:96:f4:ee:ff:8c:58:8f:9a:50:8bSigner
Actual PE Digest11:bd:3d:fc:16:a1:85:2e:49:da:96:f4:ee:ff:8c:58:8f:9a:50:8bDigest Algorithmsha1PE Digest MatchestrueHeaders
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
version
GetFileVersionInfoA
GetFileVersionInfoSizeA
VerQueryValueA
netapi32
NetApiBufferFree
NetServerEnum
ws2_32
WSAStartup
gethostname
inet_ntoa
gethostbyname
mpr
WNetAddConnection2A
WNetCancelConnection2A
kernel32
FreeLibrary
WriteFile
GetStdHandle
FormatMessageA
LoadLibraryExA
LockResource
SizeofResource
LoadResource
FindResourceA
DeleteFileA
GetSystemDirectoryA
GetComputerNameA
WaitForSingleObject
GetCurrentProcess
WideCharToMultiByte
GetVersion
CreateFileA
SetEvent
ConnectNamedPipe
ReadFile
GetFullPathNameA
GetCommandLineA
GetLocaleInfoA
GetUserDefaultLCID
GetDateFormatA
GetTimeFormatA
GetStringTypeW
GetStringTypeA
GetSystemTimeAsFileTime
GetCurrentProcessId
QueryPerformanceCounter
GetEnvironmentStringsW
GetTickCount
Sleep
SetLastError
GetCommandLineW
LocalAlloc
LocalFree
LoadLibraryA
GetLastError
OpenProcess
TerminateProcess
CloseHandle
GetModuleHandleA
GetProcAddress
EnumSystemLocalesA
IsValidLocale
SetFilePointer
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
HeapSize
SetEnvironmentVariableA
GetLocaleInfoW
GetTimeZoneInformation
SetEndOfFile
GetProcessHeap
CompareStringA
CompareStringW
GetModuleFileNameA
HeapFree
HeapAlloc
EnterCriticalSection
LeaveCriticalSection
ExitThread
GetCurrentThreadId
CreateThread
ReadConsoleInputA
SetConsoleMode
GetConsoleMode
PeekConsoleInputA
GetNumberOfConsoleInputEvents
GetModuleHandleW
ExitProcess
HeapCreate
HeapDestroy
VirtualFree
DeleteCriticalSection
FatalAppExitA
VirtualAlloc
HeapReAlloc
GetCPInfo
InterlockedIncrement
InterlockedDecrement
GetACP
GetOEMCP
IsValidCodePage
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
GetCurrentThread
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
LCMapStringA
MultiByteToWideChar
LCMapStringW
SetHandleCount
GetFileType
GetStartupInfoA
GetConsoleCP
RtlUnwind
FlushFileBuffers
SetConsoleCtrlHandler
InterlockedExchange
InitializeCriticalSectionAndSpinCount
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
user32
LoadCursorA
SetCursor
SetWindowTextA
SendMessageA
EndDialog
GetSysColorBrush
GetDlgItem
DialogBoxIndirectParamA
InflateRect
gdi32
SetMapMode
StartDocA
StartPage
EndPage
EndDoc
GetDeviceCaps
comdlg32
PrintDlgA
advapi32
RevertToSelf
OpenProcessToken
LookupPrivilegeValueA
AdjustTokenPrivileges
LogonUserA
ImpersonateLoggedOnUser
RegConnectRegistryA
DeleteService
ControlService
OpenSCManagerA
OpenServiceA
StartServiceA
QueryServiceStatus
CreateServiceA
CloseServiceHandle
RegCreateKeyA
RegQueryValueExA
RegSetValueExA
RegCloseKey
Sections
.text Size: 113KB - Virtual size: 113KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 26KB - Virtual size: 25KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 456KB - Virtual size: 456KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
wintaylor2.1/Programs/tools/sysinternals/pslist.exe.exe windows:5 windows x86
6f5f404a0f036f081074d4220baf3a50
Code Sign
2e:ab:11:dc:50:ff:5c:9d:cb:c0Certificate
IssuerCN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft CorporationNot Before22-08-2007 22:31Not After25-08-2012 07:00SubjectCN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USExtended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
61:01:cf:3e:00:00:00:00:00:0fCertificate
IssuerCN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USNot Before07-12-2009 22:40Not After07-03-2011 22:40SubjectCN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USExtended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
6a:0b:99:4f:c0:00:25:ab:11:db:45:1f:58:7a:67:a2Certificate
IssuerCN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft CorporationNot Before16-09-2006 01:04Not After15-09-2019 07:00SubjectCN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
61:05:a2:30:00:00:00:00:00:08Certificate
IssuerCN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USNot Before25-07-2008 19:01Not After25-07-2013 19:11SubjectCN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:85D3-305C-5BCF,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageContentCommitment
6a:3d:af:b6:94:c5:8f:f3:d9:7f:ba:b6:78:86:ef:c8:8b:98:ab:52Signer
Actual PE Digest6a:3d:af:b6:94:c5:8f:f3:d9:7f:ba:b6:78:86:ef:c8:8b:98:ab:52Digest Algorithmsha1PE Digest MatchestrueHeaders
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mpr
WNetAddConnection2A
WNetCancelConnection2A
version
VerQueryValueA
GetFileVersionInfoSizeA
GetFileVersionInfoA
netapi32
NetApiBufferFree
NetServerEnum
ws2_32
inet_ntoa
gethostbyname
WSAStartup
gethostname
kernel32
FileTimeToSystemTime
FileTimeToLocalFileTime
GetSystemTimeAsFileTime
SetConsoleCursorPosition
SetConsoleCtrlHandler
SetPriorityClass
GetCurrentProcess
GetComputerNameA
GetLastError
SetLastError
GetTickCount
CloseHandle
CreateFileA
FreeLibrary
WriteFile
FormatMessageA
LoadLibraryExA
LockResource
SizeofResource
LoadResource
GetDateFormatA
DeleteFileA
GetSystemDirectoryA
WaitForSingleObject
WideCharToMultiByte
GetVersion
GetModuleFileNameA
SetEvent
ConnectNamedPipe
EnumSystemLocalesA
GetLocaleInfoA
GetUserDefaultLCID
GetCurrentProcessId
QueryPerformanceCounter
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetStartupInfoA
GetFileType
GetTimeFormatA
Sleep
GetStdHandle
GetConsoleScreenBufferInfo
FillConsoleOutputCharacterA
GetProcAddress
lstrcpynA
LocalAlloc
GetCommandLineW
LoadLibraryA
LocalFree
GetModuleHandleA
IsBadStringPtrA
lstrlenA
IsValidLocale
HeapSize
SetFilePointer
SetEnvironmentVariableA
GetLocaleInfoW
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
SetStdHandle
ReadFile
GetTimeZoneInformation
SetEndOfFile
GetProcessHeap
CompareStringA
CompareStringW
FindResourceA
HeapAlloc
HeapFree
RtlUnwind
GetModuleHandleW
ExitProcess
ReadConsoleInputA
SetConsoleMode
GetConsoleMode
PeekConsoleInputA
GetNumberOfConsoleInputEvents
ExitThread
ResumeThread
CreateThread
EnterCriticalSection
LeaveCriticalSection
GetCurrentThreadId
GetCommandLineA
GetCPInfo
InterlockedIncrement
InterlockedDecrement
GetACP
GetOEMCP
IsValidCodePage
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
GetCurrentThread
LCMapStringA
MultiByteToWideChar
LCMapStringW
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RaiseException
DeleteCriticalSection
FatalAppExitA
VirtualFree
VirtualAlloc
HeapReAlloc
HeapCreate
HeapDestroy
GetStringTypeA
GetStringTypeW
InterlockedExchange
InitializeCriticalSectionAndSpinCount
GetConsoleCP
FlushFileBuffers
SetHandleCount
user32
SetWindowTextA
LoadCursorA
EndDialog
InflateRect
SendMessageA
GetSysColorBrush
GetDlgItem
DialogBoxIndirectParamA
wsprintfA
SetCursor
gdi32
SetMapMode
StartDocA
StartPage
EndPage
EndDoc
GetDeviceCaps
comdlg32
PrintDlgA
advapi32
StartServiceA
OpenProcessToken
LookupPrivilegeValueA
AdjustTokenPrivileges
LogonUserA
ImpersonateLoggedOnUser
RegConnectRegistryA
RevertToSelf
DeleteService
ControlService
OpenSCManagerA
OpenServiceA
QueryServiceStatus
CreateServiceA
CloseServiceHandle
RegCreateKeyA
RegSetValueExA
RegOpenKeyExA
RegQueryValueExA
RegCloseKey
Sections
.text Size: 176KB - Virtual size: 175KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 33KB - Virtual size: 33KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
wintaylor2.1/Programs/tools/sysinternals/psloggedon.exe.exe windows:5 windows x86
db609bc4f5b49c2544ac641a6ec02fe2
Code Sign
2e:ab:11:dc:50:ff:5c:9d:cb:c0Certificate
IssuerCN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft CorporationNot Before22-08-2007 22:31Not After25-08-2012 07:00SubjectCN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USExtended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
61:01:cf:3e:00:00:00:00:00:0fCertificate
IssuerCN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USNot Before07-12-2009 22:40Not After07-03-2011 22:40SubjectCN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USExtended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
6a:0b:99:4f:c0:00:25:ab:11:db:45:1f:58:7a:67:a2Certificate
IssuerCN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft CorporationNot Before16-09-2006 01:04Not After15-09-2019 07:00SubjectCN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
61:05:a2:30:00:00:00:00:00:08Certificate
IssuerCN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USNot Before25-07-2008 19:01Not After25-07-2013 19:11SubjectCN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:85D3-305C-5BCF,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageContentCommitment
5b:eb:1d:b8:b6:5a:6a:ae:68:ec:b5:d0:4c:10:4f:b9:a0:80:9f:48Signer
Actual PE Digest5b:eb:1d:b8:b6:5a:6a:ae:68:ec:b5:d0:4c:10:4f:b9:a0:80:9f:48Digest Algorithmsha1PE Digest MatchestrueHeaders
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
version
GetFileVersionInfoSizeW
VerQueryValueW
GetFileVersionInfoW
netapi32
NetApiBufferFree
NetServerEnum
NetSessionEnum
ws2_32
gethostbyname
gethostname
WSAStartup
inet_ntoa
mpr
WNetAddConnection2W
WNetCancelConnection2W
kernel32
WriteFile
GetStdHandle
FormatMessageA
LoadLibraryExW
GetConsoleScreenBufferInfo
LockResource
SizeofResource
LoadResource
FindResourceW
DeleteFileW
GetSystemDirectoryW
GetComputerNameW
WaitForSingleObject
MultiByteToWideChar
FreeLibrary
SystemTimeToFileTime
GetModuleFileNameW
SetEvent
ConnectNamedPipe
GetUserDefaultLCID
GetDateFormatA
GetTimeFormatA
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
SetFilePointer
GetSystemTimeAsFileTime
GetCurrentProcessId
CreateFileW
CloseHandle
GetTickCount
Sleep
SetLastError
FileTimeToLocalFileTime
GetLastError
GetCurrentProcess
GetLocalTime
FileTimeToSystemTime
GetDateFormatW
GetTimeFormatW
FormatMessageW
GetProcAddress
GetCommandLineW
LocalAlloc
LoadLibraryW
LocalFree
GetModuleHandleW
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale
WriteConsoleA
SetEnvironmentVariableA
GetConsoleOutputCP
WriteConsoleW
SetStdHandle
HeapSize
GetLocaleInfoW
GetTimeZoneInformation
SetEndOfFile
GetProcessHeap
ReadFile
CompareStringA
CompareStringW
GetVersion
HeapAlloc
HeapFree
EnterCriticalSection
LeaveCriticalSection
ExitThread
GetCurrentThreadId
CreateThread
ReadConsoleInputA
SetConsoleMode
GetConsoleMode
PeekConsoleInputA
GetNumberOfConsoleInputEvents
ExitProcess
DeleteCriticalSection
FatalAppExitA
VirtualFree
VirtualAlloc
HeapReAlloc
HeapCreate
HeapDestroy
GetModuleFileNameA
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetCPInfo
InterlockedIncrement
InterlockedDecrement
GetACP
GetOEMCP
IsValidCodePage
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
GetCurrentThread
WideCharToMultiByte
GetConsoleCP
FlushFileBuffers
SetHandleCount
GetFileType
GetStartupInfoA
RtlUnwind
CreateFileA
SetConsoleCtrlHandler
InterlockedExchange
LoadLibraryA
InitializeCriticalSectionAndSpinCount
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
user32
SetCursor
InflateRect
SendMessageW
LoadCursorW
SetWindowTextW
EndDialog
DialogBoxIndirectParamW
GetDlgItem
GetSysColorBrush
gdi32
SetMapMode
StartDocW
StartPage
EndPage
EndDoc
GetDeviceCaps
comdlg32
PrintDlgW
advapi32
QueryServiceStatus
OpenProcessToken
LookupPrivilegeValueW
AdjustTokenPrivileges
LogonUserW
ImpersonateLoggedOnUser
RevertToSelf
DeleteService
ControlService
OpenSCManagerW
OpenServiceW
StartServiceW
CreateServiceW
CloseServiceHandle
LookupAccountNameW
RegConnectRegistryW
RegEnumKeyExW
AllocateAndInitializeSid
LookupAccountSidW
FreeSid
RegOpenKeyW
RegQueryInfoKeyW
RegCreateKeyW
RegQueryValueExW
RegSetValueExW
RegCloseKey
Sections
.text Size: 138KB - Virtual size: 137KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 28KB - Virtual size: 27KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
wintaylor2.1/Programs/tools/sysinternals/psloglist.exe.exe windows:5 windows x86
fdd454d119a63499b070a81a331060e5
Code Sign
2e:ab:11:dc:50:ff:5c:9d:cb:c0Certificate
IssuerCN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft CorporationNot Before22-08-2007 22:31Not After25-08-2012 07:00SubjectCN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USExtended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
61:01:cf:3e:00:00:00:00:00:0fCertificate
IssuerCN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USNot Before07-12-2009 22:40Not After07-03-2011 22:40SubjectCN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USExtended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
6a:0b:99:4f:c0:00:25:ab:11:db:45:1f:58:7a:67:a2Certificate
IssuerCN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft CorporationNot Before16-09-2006 01:04Not After15-09-2019 07:00SubjectCN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
61:05:a2:30:00:00:00:00:00:08Certificate
IssuerCN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USNot Before25-07-2008 19:01Not After25-07-2013 19:11SubjectCN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:85D3-305C-5BCF,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageContentCommitment
23:03:07:18:57:c3:a6:45:e3:ce:a5:2a:d0:39:d2:6a:ba:c0:18:33Signer
Actual PE Digest23:03:07:18:57:c3:a6:45:e3:ce:a5:2a:d0:39:d2:6a:ba:c0:18:33Digest Algorithmsha1PE Digest MatchestrueHeaders
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
version
GetFileVersionInfoA
GetFileVersionInfoSizeA
VerQueryValueA
netapi32
NetApiBufferFree
NetServerEnum
ws2_32
WSAStartup
gethostname
inet_ntoa
gethostbyname
mpr
WNetAddConnection2A
WNetCancelConnection2A
kernel32
GetCommandLineW
GetProcAddress
SetLastError
Sleep
GetTickCount
CloseHandle
CreateFileA
FreeLibrary
WriteFile
GetStdHandle
GetConsoleScreenBufferInfo
LockResource
SizeofResource
LoadResource
FindResourceA
LoadLibraryA
WideCharToMultiByte
GetModuleFileNameA
SetEvent
ConnectNamedPipe
EnumSystemLocalesA
GetLocaleInfoA
GetUserDefaultLCID
GetStringTypeW
GetStringTypeA
GetCurrentProcessId
QueryPerformanceCounter
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
GetModuleHandleA
GetVersion
GetComputerNameA
CreateEventA
SystemTimeToFileTime
FindFirstFileA
GetSystemTimeAsFileTime
FindClose
GetLastError
GetCurrentProcess
DuplicateHandle
WaitForSingleObject
FileTimeToSystemTime
GetTimeFormatA
GetDateFormatA
FormatMessageA
LocalAlloc
LocalFree
FileTimeToLocalFileTime
CompareFileTime
LoadLibraryExA
ExpandEnvironmentStringsA
SetEnvironmentVariableA
GetSystemDirectoryA
IsValidLocale
SetFilePointer
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
SetStdHandle
HeapSize
GetLocaleInfoW
ReadFile
GetTimeZoneInformation
SetEndOfFile
GetProcessHeap
CompareStringA
CompareStringW
DeleteFileA
HeapAlloc
EnterCriticalSection
LeaveCriticalSection
HeapReAlloc
ReadConsoleInputA
SetConsoleMode
GetConsoleMode
PeekConsoleInputA
GetNumberOfConsoleInputEvents
GetModuleHandleW
ExitProcess
HeapFree
ExitThread
GetCurrentThreadId
CreateThread
GetCommandLineA
GetCPInfo
InterlockedIncrement
InterlockedDecrement
GetACP
GetOEMCP
IsValidCodePage
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
GetCurrentThread
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
DeleteCriticalSection
FatalAppExitA
VirtualFree
VirtualAlloc
HeapCreate
HeapDestroy
RtlUnwind
LCMapStringA
MultiByteToWideChar
LCMapStringW
SetHandleCount
GetFileType
GetStartupInfoA
GetConsoleCP
FlushFileBuffers
SetConsoleCtrlHandler
InterlockedExchange
InitializeCriticalSectionAndSpinCount
FreeEnvironmentStringsA
user32
LoadCursorA
SetCursor
SetWindowTextA
SendMessageA
EndDialog
GetSysColorBrush
GetDlgItem
DialogBoxIndirectParamA
InflateRect
gdi32
SetMapMode
StartDocA
StartPage
EndPage
EndDoc
GetDeviceCaps
comdlg32
PrintDlgA
advapi32
RegCreateKeyA
OpenProcessToken
LookupPrivilegeValueA
AdjustTokenPrivileges
LogonUserA
ImpersonateLoggedOnUser
RegConnectRegistryA
RevertToSelf
DeleteService
ControlService
OpenSCManagerA
OpenServiceA
StartServiceA
QueryServiceStatus
CreateServiceA
CloseServiceHandle
RegSetValueExA
OpenBackupEventLogA
OpenEventLogA
BackupEventLogA
CloseEventLog
NotifyChangeEventLog
ReadEventLogA
LookupAccountSidA
RegEnumKeyA
ClearEventLogA
RegOpenKeyA
RegQueryValueExA
RegCloseKey
Sections
.text Size: 131KB - Virtual size: 131KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 29KB - Virtual size: 29KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
wintaylor2.1/Programs/tools/sysinternals/pspasswd.exe.exe windows:4 windows x86
b901a4e8c09cd7a9b7cb7d2daa286ce5
Code Sign
47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4Certificate
IssuerCN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZANot Before04-12-2003 00:00Not After03-12-2013 23:59SubjectCN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=USExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageCertSign
KeyUsageCRLSign
0d:e9:2b:f0:d4:d8:29:88:18:32:05:09:5e:9a:76:88Certificate
IssuerCN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=USNot Before04-12-2003 00:00Not After03-12-2008 23:59SubjectCN=VeriSign Time Stamping Services Signer,O=VeriSign\, Inc.,C=USExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageContentCommitment
c1:00:8b:3c:3c:88:11:d1:3e:f6:63:ec:df:40Certificate
IssuerCN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft CorporationNot Before10-01-1997 07:00Not After31-12-2020 07:00SubjectCN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation6a:0b:99:4f:c0:00:1d:ab:11:da:c4:02:a1:66:27:baCertificate
IssuerCN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft CorporationNot Before04-04-2006 17:44Not After26-04-2012 07:00SubjectCN=Microsoft Code Signing PCA,OU=Copyright (c) 2000 Microsoft Corp.,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USExtended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageContentCommitment
KeyUsageCertSign
KeyUsageCRLSign
61:46:9e:cb:00:04:00:00:00:65Certificate
IssuerCN=Microsoft Code Signing PCA,OU=Copyright (c) 2000 Microsoft Corp.,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USNot Before04-04-2006 19:43Not After04-10-2007 19:53SubjectCN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USExtended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
KeyUsageContentCommitment
53:5c:e0:18:cf:e6:31:cd:87:8e:17:96:b2:29:df:eb:0f:4f:bd:68Signer
Actual PE Digest53:5c:e0:18:cf:e6:31:cd:87:8e:17:96:b2:29:df:eb:0f:4f:bd:68Digest Algorithmsha1PE Digest MatchestrueHeaders
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
version
VerQueryValueW
GetFileVersionInfoW
GetFileVersionInfoSizeW
netapi32
NetApiBufferFree
NetServerEnum
NetUserSetInfo
NetUserGetInfo
mpr
WNetAddConnection2W
WNetCancelConnection2W
kernel32
Sleep
GetTickCount
CloseHandle
CreateFileW
FreeLibrary
WriteFile
GetStdHandle
FormatMessageA
LoadLibraryExW
GetComputerNameW
SetLastError
GetLocaleInfoA
GetVersion
GetModuleFileNameW
GetFullPathNameW
GetCommandLineW
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
SetFilePointer
GetSystemTimeAsFileTime
GetCurrentProcessId
QueryPerformanceCounter
GetLastError
LocalAlloc
LoadLibraryW
LocalFree
GetModuleHandleW
MultiByteToWideChar
GetCommandLineA
GetEnvironmentStringsW
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
HeapSize
SetEndOfFile
ReadFile
GetCurrentProcess
HeapAlloc
HeapFree
EnterCriticalSection
LeaveCriticalSection
GetCurrentThreadId
ReadConsoleInputA
SetConsoleMode
GetConsoleMode
GetProcAddress
GetModuleHandleA
ExitProcess
GetVersionExA
GetProcessHeap
DeleteCriticalSection
VirtualFree
VirtualAlloc
HeapReAlloc
HeapDestroy
HeapCreate
GetModuleFileNameA
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetCPInfo
InterlockedIncrement
InterlockedDecrement
GetACP
GetOEMCP
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetHandleCount
GetFileType
GetStartupInfoA
WideCharToMultiByte
GetConsoleCP
RtlUnwind
CreateFileA
FlushFileBuffers
LoadLibraryA
InitializeCriticalSection
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
user32
LoadCursorW
SetCursor
InflateRect
SetWindowTextW
EndDialog
GetSysColorBrush
SendMessageW
DialogBoxIndirectParamW
GetDlgItem
gdi32
SetMapMode
StartDocW
StartPage
EndPage
EndDoc
GetDeviceCaps
comdlg32
PrintDlgW
advapi32
RegCreateKeyW
RegQueryValueExW
RegSetValueExW
RegCloseKey
Sections
.text Size: 56KB - Virtual size: 52KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 24KB - Virtual size: 22KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
wintaylor2.1/Programs/tools/sysinternals/psservice.exe.exe windows:5 windows x86
bafb11fdb26d45b94cff5758c03ec8d6
Code Sign
2e:ab:11:dc:50:ff:5c:9d:cb:c0Certificate
IssuerCN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft CorporationNot Before22-08-2007 22:31Not After25-08-2012 07:00SubjectCN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USExtended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
61:01:cf:3e:00:00:00:00:00:0fCertificate
IssuerCN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USNot Before07-12-2009 22:40Not After07-03-2011 22:40SubjectCN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USExtended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
6a:0b:99:4f:c0:00:25:ab:11:db:45:1f:58:7a:67:a2Certificate
IssuerCN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft CorporationNot Before16-09-2006 01:04Not After15-09-2019 07:00SubjectCN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
61:05:a2:30:00:00:00:00:00:08Certificate
IssuerCN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USNot Before25-07-2008 19:01Not After25-07-2013 19:11SubjectCN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:85D3-305C-5BCF,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageContentCommitment
82:91:bf:43:0e:d4:c5:9f:85:f5:6c:b3:47:27:91:94:63:af:23:faSigner
Actual PE Digest82:91:bf:43:0e:d4:c5:9f:85:f5:6c:b3:47:27:91:94:63:af:23:faDigest Algorithmsha1PE Digest MatchestrueHeaders
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
version
GetFileVersionInfoA
GetFileVersionInfoSizeA
VerQueryValueA
ws2_32
inet_ntoa
gethostbyname
gethostname
WSAStartup
netapi32
NetServerEnum
NetApiBufferFree
mpr
WNetAddConnection2A
WNetCancelConnection2A
kernel32
WideCharToMultiByte
GetVersion
GetModuleFileNameA
SetEvent
ConnectNamedPipe
lstrlenA
EnumSystemLocalesA
GetCurrentProcess
SizeofResource
GetDateFormatA
GetTimeFormatA
GetStringTypeW
GetStringTypeA
GetSystemTimeAsFileTime
GetCurrentProcessId
QueryPerformanceCounter
GetEnvironmentStringsW
WaitForSingleObject
GetComputerNameA
GetSystemDirectoryA
DeleteFileA
FindResourceA
GetLocaleInfoA
LoadResource
LockResource
GetConsoleScreenBufferInfo
LoadLibraryExA
FormatMessageA
GetStdHandle
WriteFile
FreeLibrary
CreateFileA
CloseHandle
GetTickCount
Sleep
SetLastError
GetLastError
GetProcAddress
GetCommandLineW
LocalAlloc
LoadLibraryA
LocalFree
GetModuleHandleA
IsValidLocale
SetFilePointer
SetStdHandle
WriteConsoleA
SetEnvironmentVariableA
GetConsoleOutputCP
WriteConsoleW
ReadFile
HeapSize
GetLocaleInfoW
GetTimeZoneInformation
SetEndOfFile
GetProcessHeap
CompareStringA
CompareStringW
GetUserDefaultLCID
HeapAlloc
HeapFree
EnterCriticalSection
LeaveCriticalSection
ExitThread
GetCurrentThreadId
CreateThread
ReadConsoleInputA
SetConsoleMode
GetConsoleMode
PeekConsoleInputA
GetNumberOfConsoleInputEvents
GetModuleHandleW
ExitProcess
GetCommandLineA
GetCPInfo
InterlockedIncrement
InterlockedDecrement
GetACP
GetOEMCP
IsValidCodePage
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
GetCurrentThread
LCMapStringA
MultiByteToWideChar
LCMapStringW
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
DeleteCriticalSection
FatalAppExitA
VirtualFree
VirtualAlloc
HeapReAlloc
HeapCreate
HeapDestroy
SetHandleCount
GetFileType
GetStartupInfoA
GetConsoleCP
RtlUnwind
FlushFileBuffers
SetConsoleCtrlHandler
InterlockedExchange
InitializeCriticalSectionAndSpinCount
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
user32
SetWindowTextA
LoadCursorA
EndDialog
InflateRect
SendMessageA
GetSysColorBrush
GetDlgItem
DialogBoxIndirectParamA
wsprintfA
SetCursor
gdi32
SetMapMode
StartDocA
StartPage
EndPage
EndDoc
GetDeviceCaps
comdlg32
PrintDlgA
advapi32
GetSidIdentifierAuthority
EnumDependentServicesA
ChangeServiceConfigA
QueryServiceConfigA
QueryServiceObjectSecurity
GetSecurityDescriptorDacl
GetAce
LookupAccountSidA
MapGenericMask
EnumServicesStatusA
IsValidSid
GetSidSubAuthorityCount
GetSidSubAuthority
OpenProcessToken
LookupPrivilegeValueA
AdjustTokenPrivileges
LogonUserA
ImpersonateLoggedOnUser
RegConnectRegistryA
RevertToSelf
DeleteService
ControlService
OpenSCManagerA
OpenServiceA
StartServiceA
QueryServiceStatus
CreateServiceA
CloseServiceHandle
RegCreateKeyA
RegQueryValueExA
RegSetValueExA
RegCloseKey
Sections
.text Size: 121KB - Virtual size: 120KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 31KB - Virtual size: 30KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 5KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
wintaylor2.1/Programs/tools/sysinternals/psshutdown.exe.exe windows:4 windows x86
02069cdeb9ebc09da43e4d2cd0d07e53
Code Sign
47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4Certificate
IssuerCN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZANot Before04-12-2003 00:00Not After03-12-2013 23:59SubjectCN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=USExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageCertSign
KeyUsageCRLSign
0d:e9:2b:f0:d4:d8:29:88:18:32:05:09:5e:9a:76:88Certificate
IssuerCN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=USNot Before04-12-2003 00:00Not After03-12-2008 23:59SubjectCN=VeriSign Time Stamping Services Signer,O=VeriSign\, Inc.,C=USExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageContentCommitment
c1:00:8b:3c:3c:88:11:d1:3e:f6:63:ec:df:40Certificate
IssuerCN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft CorporationNot Before10-01-1997 07:00Not After31-12-2020 07:00SubjectCN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation6a:0b:99:4f:c0:00:1d:ab:11:da:c4:02:a1:66:27:baCertificate
IssuerCN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft CorporationNot Before04-04-2006 17:44Not After26-04-2012 07:00SubjectCN=Microsoft Code Signing PCA,OU=Copyright (c) 2000 Microsoft Corp.,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USExtended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageContentCommitment
KeyUsageCertSign
KeyUsageCRLSign
61:46:9e:cb:00:04:00:00:00:65Certificate
IssuerCN=Microsoft Code Signing PCA,OU=Copyright (c) 2000 Microsoft Corp.,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USNot Before04-04-2006 19:43Not After04-10-2007 19:53SubjectCN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USExtended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
KeyUsageContentCommitment
6a:ec:9b:c0:6a:85:05:30:07:0b:d5:6b:7a:e5:d2:7a:bb:ba:65:e2Signer
Actual PE Digest6a:ec:9b:c0:6a:85:05:30:07:0b:d5:6b:7a:e5:d2:7a:bb:ba:65:e2Digest Algorithmsha1PE Digest MatchestrueHeaders
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
version
VerQueryValueA
GetFileVersionInfoA
GetFileVersionInfoSizeA
netapi32
NetApiBufferFree
NetServerEnum
ws2_32
gethostbyname
gethostname
WSAStartup
inet_ntoa
mpr
WNetCancelConnection2A
WNetAddConnection2A
kernel32
CreateFileA
FreeLibrary
WriteFile
GetStdHandle
FormatMessageA
LoadLibraryExA
LockResource
SizeofResource
LoadResource
FindResourceA
DeleteFileA
GetSystemDirectoryA
GetComputerNameA
TerminateThread
WaitForSingleObject
GetCurrentProcess
WideCharToMultiByte
CloseHandle
GetModuleHandleA
ReadFile
GetLocalTime
GetLocaleInfoA
GetStringTypeW
GetStringTypeA
GetSystemTimeAsFileTime
GetCurrentProcessId
QueryPerformanceCounter
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetTickCount
Sleep
SetLastError
GetLastError
LocalAlloc
GetVersion
LocalFree
GetEnvironmentStrings
FreeEnvironmentStringsA
LoadLibraryA
GetProcAddress
SetFilePointer
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
HeapSize
SetEndOfFile
GetModuleFileNameA
HeapAlloc
HeapFree
EnterCriticalSection
LeaveCriticalSection
ExitThread
GetCurrentThreadId
CreateThread
ReadConsoleInputA
SetConsoleMode
GetConsoleMode
ExitProcess
GetCommandLineA
GetVersionExA
GetProcessHeap
GetCPInfo
InterlockedIncrement
InterlockedDecrement
GetACP
GetOEMCP
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
LCMapStringA
MultiByteToWideChar
LCMapStringW
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
DeleteCriticalSection
VirtualFree
VirtualAlloc
HeapReAlloc
HeapDestroy
HeapCreate
SetHandleCount
GetFileType
GetStartupInfoA
GetConsoleCP
RtlUnwind
FlushFileBuffers
InitializeCriticalSection
user32
EndDialog
SetWindowTextA
LoadCursorA
SetCursor
GetSysColorBrush
SendMessageA
ExitWindowsEx
GetDlgItem
DialogBoxIndirectParamA
InflateRect
gdi32
SetMapMode
StartDocA
StartPage
EndPage
EndDoc
GetDeviceCaps
comdlg32
PrintDlgA
advapi32
LookupPrivilegeValueA
GetTokenInformation
LookupAccountSidA
OpenProcessToken
AdjustTokenPrivileges
DeleteService
ControlService
OpenSCManagerA
OpenServiceA
StartServiceA
QueryServiceStatus
CreateServiceA
CloseServiceHandle
RegCreateKeyA
RegQueryValueExA
RegSetValueExA
RegCloseKey
Sections
.text Size: 68KB - Virtual size: 64KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 28KB - Virtual size: 25KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 88KB - Virtual size: 86KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
wintaylor2.1/Programs/tools/sysinternals/pssuspend.exe.exe windows:4 windows x86
ce3946baee4ca946ca42e16c1c6defea
Code Sign
47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4Certificate
IssuerCN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZANot Before04-12-2003 00:00Not After03-12-2013 23:59SubjectCN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=USExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageCertSign
KeyUsageCRLSign
0d:e9:2b:f0:d4:d8:29:88:18:32:05:09:5e:9a:76:88Certificate
IssuerCN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=USNot Before04-12-2003 00:00Not After03-12-2008 23:59SubjectCN=VeriSign Time Stamping Services Signer,O=VeriSign\, Inc.,C=USExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageContentCommitment
c1:00:8b:3c:3c:88:11:d1:3e:f6:63:ec:df:40Certificate
IssuerCN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft CorporationNot Before10-01-1997 07:00Not After31-12-2020 07:00SubjectCN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation6a:0b:99:4f:c0:00:1d:ab:11:da:c4:02:a1:66:27:baCertificate
IssuerCN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft CorporationNot Before04-04-2006 17:44Not After26-04-2012 07:00SubjectCN=Microsoft Code Signing PCA,OU=Copyright (c) 2000 Microsoft Corp.,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USExtended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageContentCommitment
KeyUsageCertSign
KeyUsageCRLSign
61:46:9e:cb:00:04:00:00:00:65Certificate
IssuerCN=Microsoft Code Signing PCA,OU=Copyright (c) 2000 Microsoft Corp.,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USNot Before04-04-2006 19:43Not After04-10-2007 19:53SubjectCN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USExtended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
KeyUsageContentCommitment
6a:e0:f1:bb:dd:17:25:4d:e9:cb:77:18:c7:f3:b5:b1:5a:f1:49:b7Signer
Actual PE Digest6a:e0:f1:bb:dd:17:25:4d:e9:cb:77:18:c7:f3:b5:b1:5a:f1:49:b7Digest Algorithmsha1PE Digest MatchestrueHeaders
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
ws2_32
gethostbyname
inet_ntoa
WSAStartup
gethostname
mpr
WNetAddConnection2A
WNetCancelConnection2A
version
GetFileVersionInfoA
VerQueryValueA
GetFileVersionInfoSizeA
kernel32
LoadLibraryA
LocalAlloc
SetLastError
GetTickCount
CreateFileA
FreeLibrary
WriteFile
GetStdHandle
FormatMessageA
LoadLibraryExA
LockResource
SizeofResource
LoadResource
FindResourceA
DeleteFileA
GetSystemDirectoryA
GetComputerNameA
TerminateThread
LocalFree
GetCurrentProcess
GetProcAddress
GetModuleFileNameA
ReadFile
GetFullPathNameA
GetCommandLineA
GetLocaleInfoA
GetStringTypeW
GetStringTypeA
GetSystemTimeAsFileTime
GetCurrentProcessId
QueryPerformanceCounter
GetEnvironmentStringsW
Sleep
OpenProcess
GetLastError
GetVersion
CloseHandle
WaitForSingleObject
GetModuleHandleA
FreeEnvironmentStringsW
GetEnvironmentStrings
SetFilePointer
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
HeapSize
SetEndOfFile
WideCharToMultiByte
HeapFree
HeapAlloc
EnterCriticalSection
LeaveCriticalSection
ExitThread
GetCurrentThreadId
CreateThread
ReadConsoleInputA
SetConsoleMode
GetConsoleMode
ExitProcess
GetVersionExA
GetProcessHeap
HeapDestroy
HeapCreate
VirtualFree
DeleteCriticalSection
VirtualAlloc
HeapReAlloc
GetCPInfo
InterlockedIncrement
InterlockedDecrement
GetACP
GetOEMCP
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
LCMapStringA
MultiByteToWideChar
LCMapStringW
SetHandleCount
GetFileType
GetStartupInfoA
GetConsoleCP
RtlUnwind
FlushFileBuffers
InitializeCriticalSection
FreeEnvironmentStringsA
user32
EndDialog
SetWindowTextA
LoadCursorA
SetCursor
InflateRect
GetSysColorBrush
GetDlgItem
DialogBoxIndirectParamA
SendMessageA
gdi32
SetMapMode
StartDocA
StartPage
EndPage
EndDoc
GetDeviceCaps
comdlg32
PrintDlgA
advapi32
DeleteService
OpenProcessToken
LookupPrivilegeValueA
AdjustTokenPrivileges
ControlService
OpenSCManagerA
OpenServiceA
StartServiceA
QueryServiceStatus
CreateServiceA
CloseServiceHandle
RegCreateKeyA
RegQueryValueExA
RegSetValueExA
RegCloseKey
Sections
.text Size: 56KB - Virtual size: 53KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 24KB - Virtual size: 21KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 84KB - Virtual size: 82KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
wintaylor2.1/Programs/tools/sysinternals/psuptime.exe.exe windows:4 windows x86
912d6bc6f64ad07796438a46d2964d5a
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
WideCharToMultiByte
GetEnvironmentStrings
GetVersion
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
GetCommandLineA
ExitProcess
GetLastError
FlushFileBuffers
WriteFile
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
HeapAlloc
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
CloseHandle
MultiByteToWideChar
GetEnvironmentStringsW
HeapDestroy
HeapCreate
VirtualFree
HeapFree
RtlUnwind
SetFilePointer
SetStdHandle
VirtualAlloc
HeapReAlloc
GetCPInfo
GetACP
GetOEMCP
GetProcAddress
LoadLibraryA
pdh
PdhOpenQueryA
PdhAddCounterA
PdhCollectQueryData
PdhGetFormattedCounterValue
PdhCloseQuery
Sections
.text Size: 20KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
wintaylor2.1/Programs/tools/sysinternals/psversion.txt
-
wintaylor2.1/Programs/tools/sysinternals/readme.txt
-
wintaylor2.1/Programs/tools/sysinternals/regjump.exe.exe windows:4 windows x86
2d50cddb751176a0626607a64334a6c0
Code Sign
47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4Certificate
IssuerCN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZANot Before04-12-2003 00:00Not After03-12-2013 23:59SubjectCN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=USExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageCertSign
KeyUsageCRLSign
0d:e9:2b:f0:d4:d8:29:88:18:32:05:09:5e:9a:76:88Certificate
IssuerCN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=USNot Before04-12-2003 00:00Not After03-12-2008 23:59SubjectCN=VeriSign Time Stamping Services Signer,O=VeriSign\, Inc.,C=USExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageContentCommitment
c1:00:8b:3c:3c:88:11:d1:3e:f6:63:ec:df:40Certificate
IssuerCN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft CorporationNot Before10-01-1997 07:00Not After31-12-2020 07:00SubjectCN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation6a:0b:99:4f:c0:00:1d:ab:11:da:c4:02:a1:66:27:baCertificate
IssuerCN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft CorporationNot Before04-04-2006 17:44Not After26-04-2012 07:00SubjectCN=Microsoft Code Signing PCA,OU=Copyright (c) 2000 Microsoft Corp.,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USExtended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageContentCommitment
KeyUsageCertSign
KeyUsageCRLSign
61:46:9e:cb:00:04:00:00:00:65Certificate
IssuerCN=Microsoft Code Signing PCA,OU=Copyright (c) 2000 Microsoft Corp.,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USNot Before04-04-2006 19:43Not After04-10-2007 19:53SubjectCN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USExtended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
KeyUsageContentCommitment
ff:a0:a3:77:18:14:36:28:1f:4e:63:83:56:13:d0:dd:70:58:b7:f1Signer
Actual PE Digestff:a0:a3:77:18:14:36:28:1f:4e:63:83:56:13:d0:dd:70:58:b7:f1Digest Algorithmsha1PE Digest MatchestrueHeaders
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
shell32
ShellExecuteExA
kernel32
FlushFileBuffers
SetFilePointer
GetLastError
GetStringTypeW
GetStringTypeA
WriteFile
GetCPInfo
LoadLibraryA
GetEnvironmentStrings
FreeEnvironmentStringsW
FreeEnvironmentStringsA
GetModuleFileNameA
UnhandledExceptionFilter
GetACP
GetOEMCP
GetProcAddress
GetModuleHandleA
RtlUnwind
LocalAlloc
HeapReAlloc
VirtualAlloc
LocalFree
OpenProcess
Sleep
SetStdHandle
GetEnvironmentStringsW
CloseHandle
HeapAlloc
HeapFree
GetCommandLineA
GetVersion
ExitProcess
WideCharToMultiByte
MultiByteToWideChar
LCMapStringA
LCMapStringW
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
TerminateProcess
GetCurrentProcess
HeapDestroy
HeapCreate
VirtualFree
user32
LoadCursorA
SetCursor
InflateRect
GetDlgItem
GetSysColorBrush
EndDialog
SetWindowTextA
DialogBoxIndirectParamA
EnumDisplaySettingsA
FindWindowA
WaitForInputIdle
GetWindowThreadProcessId
ShowWindow
SetForegroundWindow
FindWindowExA
SetFocus
SendMessageA
gdi32
SetMapMode
StartDocA
StartPage
EndPage
EndDoc
GetDeviceCaps
comdlg32
PrintDlgA
advapi32
RegQueryValueExA
RegSetValueExA
RegOpenKeyA
RegCloseKey
RegCreateKeyA
Sections
.text Size: 20KB - Virtual size: 19KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 108KB - Virtual size: 112KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 1008B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
wintaylor2.1/Programs/tools/sysinternals/regmon.hlp
-
wintaylor2.1/Programs/tools/sysinternals/rootkitrevealer.chm.chm
-
wintaylor2.1/Programs/tools/sysinternals/rootkitrevealer.exe.exe windows:4 windows x86
c2971e27e558678b614d78284a46f77e
Code Sign
47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4Certificate
IssuerCN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZANot Before04-12-2003 00:00Not After03-12-2013 23:59SubjectCN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=USExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageCertSign
KeyUsageCRLSign
0d:e9:2b:f0:d4:d8:29:88:18:32:05:09:5e:9a:76:88Certificate
IssuerCN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=USNot Before04-12-2003 00:00Not After03-12-2008 23:59SubjectCN=VeriSign Time Stamping Services Signer,O=VeriSign\, Inc.,C=USExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageContentCommitment
c1:00:8b:3c:3c:88:11:d1:3e:f6:63:ec:df:40Certificate
IssuerCN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft CorporationNot Before10-01-1997 07:00Not After31-12-2020 07:00SubjectCN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation6a:0b:99:4f:c0:00:1d:ab:11:da:c4:02:a1:66:27:baCertificate
IssuerCN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft CorporationNot Before04-04-2006 17:44Not After26-04-2012 07:00SubjectCN=Microsoft Code Signing PCA,OU=Copyright (c) 2000 Microsoft Corp.,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USExtended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageContentCommitment
KeyUsageCertSign
KeyUsageCRLSign
61:46:9e:cb:00:04:00:00:00:65Certificate
IssuerCN=Microsoft Code Signing PCA,OU=Copyright (c) 2000 Microsoft Corp.,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USNot Before04-04-2006 19:43Not After04-10-2007 19:53SubjectCN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USExtended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
KeyUsageContentCommitment
01:c2:d8:95:ba:79:32:68:57:54:49:ab:f3:e2:ce:96:01:b8:ed:fcSigner
Actual PE Digest01:c2:d8:95:ba:79:32:68:57:54:49:ab:f3:e2:ce:96:01:b8:ed:fcDigest Algorithmsha1PE Digest MatchestrueHeaders
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
version
GetFileVersionInfoSizeW
VerQueryValueW
GetFileVersionInfoW
kernel32
SystemTimeToTzSpecificLocalTime
GetTimeZoneInformation
TerminateProcess
CreateProcessW
GetDriveTypeW
GetLogicalDrives
CreateThread
ResetEvent
OpenEventW
SetEvent
LoadLibraryW
CreateEventW
InitializeCriticalSection
GetFullPathNameW
GetSystemDirectoryW
WaitForMultipleObjects
GetTempPathW
GetCommandLineW
GetVersion
GetModuleFileNameW
FlushFileBuffers
LocalAlloc
SetConsoleCtrlHandler
SetEndOfFile
IsBadCodePtr
SetUnhandledExceptionFilter
SetStdHandle
GetStringTypeW
GetStringTypeA
GetVersionExA
GetUserDefaultLCID
EnumSystemLocalesA
GetLocaleInfoA
IsValidCodePage
IsValidLocale
GetCPInfo
GetModuleFileNameA
ReadFile
GetFileType
GetStdHandle
SetHandleCount
GetCommandLineA
GetEnvironmentStrings
GetEnvironmentStringsW
FreeEnvironmentStringsW
FreeEnvironmentStringsA
UnhandledExceptionFilter
SystemTimeToFileTime
GetCurrentThread
TlsGetValue
TlsFree
TlsAlloc
TlsSetValue
GetCurrentThreadId
IsBadWritePtr
VirtualAlloc
VirtualFree
HeapCreate
HeapDestroy
LCMapStringW
LCMapStringA
FatalAppExitA
DeleteCriticalSection
ExitProcess
GetStartupInfoW
GetModuleHandleA
WideCharToMultiByte
RtlUnwind
HeapFree
HeapAlloc
HeapReAlloc
LoadLibraryA
FindFirstFileW
FindNextFileW
FindClose
CompareFileTime
FileTimeToLocalFileTime
SetEnvironmentVariableA
lstrlenW
CreateFileMappingW
MapViewOfFile
GetFileSize
UnmapViewOfFile
GetTickCount
VirtualProtect
IsBadReadPtr
GetCurrentDirectoryW
GetOEMCP
DeviceIoControl
SetFileAttributesW
DeleteFileW
CopyFileW
InterlockedIncrement
InterlockedDecrement
WaitForSingleObject
EnterCriticalSection
LeaveCriticalSection
WriteFile
MultiByteToWideChar
DosDateTimeToFileTime
LocalFileTimeToFileTime
FileTimeToSystemTime
GetDateFormatW
GetTimeFormatW
GetLocaleInfoW
GlobalAlloc
GlobalLock
GlobalUnlock
GetFileAttributesW
LocalFree
FormatMessageW
Sleep
HeapSize
DebugBreak
GetModuleHandleW
GetProcAddress
InterlockedExchange
SetLastError
CreateFileW
FindResourceW
LoadResource
SizeofResource
LockResource
GetCurrentProcess
CloseHandle
GetVersionExW
CreateFileA
SetFilePointer
GetLastError
CompareStringA
CompareStringW
GetACP
GetStartupInfoA
RaiseException
user32
EndPaint
BeginPaint
PtInRect
IsZoomed
CallWindowProcW
DrawFrameControl
CreateDialogParamW
UnionRect
OffsetRect
GetSystemMetrics
EndDeferWindowPos
EnumChildWindows
BeginDeferWindowPos
GetPropW
DeferWindowPos
GetClassNameW
SetWindowPlacement
UpdateWindow
LoadAcceleratorsW
GetMessageW
TranslateAcceleratorW
ScreenToClient
DrawTextW
GetWindowTextW
wsprintfW
IsDialogMessageW
TranslateMessage
DispatchMessageW
DialogBoxIndirectParamW
GetWindowLongW
SetWindowLongW
SetFocus
GetMenu
CheckMenuItem
GetWindowPlacement
GetDlgItemTextW
SetTimer
EnableWindow
DialogBoxParamW
KillTimer
DefWindowProcW
MsgWaitForMultipleObjects
LoadIconW
SetWindowTextW
DestroyIcon
PostQuitMessage
SetDlgItemTextW
IsWindowEnabled
CheckDlgButton
IsDlgButtonChecked
RegisterClassExW
ShowWindow
MapWindowPoints
CreateWindowExW
SetCapture
ReleaseCapture
EndDialog
GetParent
GetWindowRect
MoveWindow
GetDlgItem
LoadCursorW
GetSysColorBrush
GetSysColor
ChildWindowFromPoint
InvalidateRect
SetCursor
OpenClipboard
EmptyClipboard
SendMessageW
SetClipboardData
CloseClipboard
LoadStringW
PostMessageW
MessageBoxW
InflateRect
SetPropW
GetClientRect
gdi32
EndDoc
GetStockObject
GetObjectW
EndPage
SetBkMode
SetTextColor
SelectObject
StartPage
StartDocW
SetMapMode
CreateFontIndirectW
GetDeviceCaps
comdlg32
GetSaveFileNameW
PrintDlgW
advapi32
RegQueryInfoKeyW
GetSecurityDescriptorLength
MakeAbsoluteSD
MakeSelfRelativeSD
RegOpenKeyExW
RegQueryValueW
RegConnectRegistryW
RegEnumKeyExW
RegCreateKeyExW
RegCreateKeyW
RegSetValueExW
RegCloseKey
RegDeleteKeyW
OpenProcessToken
LookupPrivilegeValueW
AdjustTokenPrivileges
RegQueryValueExA
RegOpenKeyExA
RegQueryValueExW
RegGetKeySecurity
IsValidSecurityDescriptor
CloseServiceHandle
DeleteService
QueryServiceStatus
ControlService
OpenServiceW
OpenSCManagerW
StartServiceW
CreateServiceW
SetServiceStatus
RegEnumKeyW
RegDeleteValueW
FreeSid
EqualSid
GetTokenInformation
AllocateAndInitializeSid
RegisterServiceCtrlHandlerW
StartServiceCtrlDispatcherW
RegEnumValueW
shell32
CommandLineToArgvW
ShellExecuteW
ExtractIconExW
ole32
CreateBindCtx
oleaut32
SetErrorInfo
GetErrorInfo
CreateErrorInfo
VariantChangeType
VariantInit
VariantClear
VariantTimeToSystemTime
SysAllocStringByteLen
SysAllocString
SysFreeString
SysStringLen
comctl32
ImageList_Create
ImageList_ReplaceIcon
PropertySheetW
ord17
mpr
WNetEnumResourceW
WNetOpenEnumW
WNetCloseEnum
Sections
.text Size: 140KB - Virtual size: 138KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 16KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 120KB - Virtual size: 140KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 28KB - Virtual size: 26KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 12KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
wintaylor2.1/Programs/tools/sysinternals/sdelete.exe.exe windows:4 windows x86
f8dd17cd22c15cf622ea86852c467c6b
Code Sign
47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4Certificate
IssuerCN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZANot Before04-12-2003 00:00Not After03-12-2013 23:59SubjectCN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=USExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageCertSign
KeyUsageCRLSign
0d:e9:2b:f0:d4:d8:29:88:18:32:05:09:5e:9a:76:88Certificate
IssuerCN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=USNot Before04-12-2003 00:00Not After03-12-2008 23:59SubjectCN=VeriSign Time Stamping Services Signer,O=VeriSign\, Inc.,C=USExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageContentCommitment
c1:00:8b:3c:3c:88:11:d1:3e:f6:63:ec:df:40Certificate
IssuerCN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft CorporationNot Before10-01-1997 07:00Not After31-12-2020 07:00SubjectCN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation6a:0b:99:4f:c0:00:1d:ab:11:da:c4:02:a1:66:27:baCertificate
IssuerCN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft CorporationNot Before04-04-2006 17:44Not After26-04-2012 07:00SubjectCN=Microsoft Code Signing PCA,OU=Copyright (c) 2000 Microsoft Corp.,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USExtended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageContentCommitment
KeyUsageCertSign
KeyUsageCRLSign
61:46:9e:cb:00:04:00:00:00:65Certificate
IssuerCN=Microsoft Code Signing PCA,OU=Copyright (c) 2000 Microsoft Corp.,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USNot Before04-04-2006 19:43Not After04-10-2007 19:53SubjectCN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USExtended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
KeyUsageContentCommitment
3f:8d:e9:a2:1b:20:47:da:a7:65:64:4b:ab:8d:fe:a6:4b:91:09:38Signer
Actual PE Digest3f:8d:e9:a2:1b:20:47:da:a7:65:64:4b:ab:8d:fe:a6:4b:91:09:38Digest Algorithmsha1PE Digest MatchestrueHeaders
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetDiskFreeSpaceA
RemoveDirectoryA
FindClose
FindNextFileA
FindFirstFileA
DeviceIoControl
ExpandEnvironmentStringsA
GetProcAddress
GetModuleHandleA
GetVersion
GetCurrentDirectoryA
GetFullPathNameA
WaitForSingleObject
WriteFile
CompareStringW
CompareStringA
SetStdHandle
GetStringTypeW
GetStringTypeA
RtlUnwind
GetEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsW
FreeEnvironmentStringsA
CreateFileA
GetLastError
CloseHandle
DeleteFileA
VirtualAlloc
LoadLibraryA
SetFilePointer
SetEnvironmentVariableA
GetModuleFileNameA
VirtualFree
MoveFileA
FormatMessageA
LocalAlloc
LocalFree
GetTimeZoneInformation
GetSystemTime
GetLocalTime
ExitProcess
TerminateProcess
GetCurrentProcess
HeapAlloc
HeapFree
GetCommandLineA
GetCPInfo
GetACP
GetOEMCP
FlushFileBuffers
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
WideCharToMultiByte
MultiByteToWideChar
LCMapStringA
LCMapStringW
HeapDestroy
HeapCreate
HeapReAlloc
UnhandledExceptionFilter
user32
GetSysColorBrush
LoadCursorA
SetCursor
InflateRect
GetDlgItem
SendMessageA
EndDialog
SetWindowTextA
DialogBoxIndirectParamA
gdi32
SetMapMode
StartDocA
StartPage
EndPage
EndDoc
GetDeviceCaps
comdlg32
PrintDlgA
advapi32
RegQueryValueExA
RegSetValueExA
RegCloseKey
RegCreateKeyA
Sections
.text Size: 32KB - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 112KB - Virtual size: 114KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 960B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
wintaylor2.1/Programs/tools/sysinternals/servicelist.exe.exe windows:4 windows x86
f23ab4279f5eea03de7ef0c32ce26e62
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
advapi32
OpenSCManagerA
EnumServicesStatusA
kernel32
GetVersion
GetCommandLineA
ExitProcess
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
HeapDestroy
HeapCreate
VirtualFree
HeapFree
RtlUnwind
WriteFile
HeapAlloc
GetCPInfo
GetACP
GetOEMCP
VirtualAlloc
HeapReAlloc
GetProcAddress
LoadLibraryA
GetLastError
FlushFileBuffers
SetFilePointer
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
SetStdHandle
CloseHandle
Sections
.text Size: 20KB - Virtual size: 17KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
wintaylor2.1/Programs/tools/sysinternals/sigcheck.exe.exe windows:5 windows x86
4e732e9cbb3593bd6d8da1e7e09a27f7
Code Sign
2e:ab:11:dc:50:ff:5c:9d:cb:c0Certificate
IssuerCN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft CorporationNot Before22-08-2007 22:31Not After25-08-2012 07:00SubjectCN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USExtended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
61:01:cf:3e:00:00:00:00:00:0fCertificate
IssuerCN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USNot Before07-12-2009 22:40Not After07-03-2011 22:40SubjectCN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USExtended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
6a:0b:99:4f:c0:00:25:ab:11:db:45:1f:58:7a:67:a2Certificate
IssuerCN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft CorporationNot Before16-09-2006 01:04Not After15-09-2019 07:00SubjectCN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
61:06:94:2d:00:00:00:00:00:09Certificate
IssuerCN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USNot Before25-07-2008 19:02Not After25-07-2013 19:12SubjectCN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:7A82-688A-9F92,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageContentCommitment
7e:d0:88:26:ad:53:df:0b:90:da:76:10:0f:a5:8c:33:b7:05:2e:d5Signer
Actual PE Digest7e:d0:88:26:ad:53:df:0b:90:da:76:10:0f:a5:8c:33:b7:05:2e:d5Digest Algorithmsha1PE Digest MatchestrueHeaders
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
version
GetFileVersionInfoSizeW
VerQueryValueW
GetFileVersionInfoW
kernel32
FreeLibrary
FreeResource
SizeofResource
LockResource
LoadResource
FindResourceW
LoadLibraryExW
GetFileInformationByHandle
CreateFileW
ReadFile
FindClose
FindNextFileW
FindFirstFileW
GetFileAttributesW
GetModuleFileNameW
InterlockedDecrement
FileTimeToLocalFileTime
GetCurrentDirectoryW
GetLastError
GetFullPathNameW
WideCharToMultiByte
MultiByteToWideChar
CompareStringA
CreateFileA
GetTimeZoneInformation
GetLocaleInfoW
SetStdHandle
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
HeapSize
IsValidLocale
FileTimeToSystemTime
GetDateFormatW
GetTimeFormatW
GetCurrentProcess
CreateFileMappingW
MapViewOfFile
GetFileSize
CloseHandle
UnmapViewOfFile
GetProcAddress
GetCommandLineW
LocalAlloc
LoadLibraryW
LocalFree
GetModuleHandleW
CompareStringW
SetEnvironmentVariableA
lstrlenW
FormatMessageW
EnterCriticalSection
EnumSystemLocalesA
GetLocaleInfoA
GetUserDefaultLCID
HeapAlloc
HeapFree
GetModuleHandleA
LeaveCriticalSection
RtlUnwind
DeleteCriticalSection
FatalAppExitA
VirtualFree
VirtualAlloc
HeapReAlloc
HeapCreate
HeapDestroy
Sleep
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameA
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetCPInfo
InterlockedIncrement
GetACP
GetOEMCP
IsValidCodePage
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
GetCurrentThreadId
GetCurrentThread
RaiseException
SetHandleCount
GetFileType
GetStartupInfoA
GetConsoleCP
GetConsoleMode
FlushFileBuffers
LCMapStringW
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
InitializeCriticalSectionAndSpinCount
SetConsoleCtrlHandler
InterlockedExchange
LoadLibraryA
SetFilePointer
LCMapStringA
GetStringTypeA
GetStringTypeW
GetTimeFormatA
GetDateFormatA
user32
SetWindowTextW
SetCursor
InflateRect
SendMessageW
EndDialog
GetSysColorBrush
GetDlgItem
DialogBoxIndirectParamW
LoadCursorW
gdi32
SetMapMode
StartDocW
StartPage
EndPage
EndDoc
GetDeviceCaps
comdlg32
PrintDlgW
advapi32
CryptCreateHash
CryptHashData
CryptGetHashParam
CryptDestroyHash
CryptReleaseContext
RegCreateKeyW
RegQueryValueExW
RegSetValueExW
RegCloseKey
CryptAcquireContextW
oleaut32
SysFreeString
SysAllocString
VariantChangeType
GetErrorInfo
VariantInit
SetErrorInfo
CreateErrorInfo
VariantClear
Sections
.text Size: 170KB - Virtual size: 170KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 31KB - Virtual size: 30KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 5KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
wintaylor2.1/Programs/tools/sysinternals/streams.exe.exe windows:4 windows x86
e068200622901cf23a22e2b77cfb548c
Code Sign
c1:00:8b:3c:3c:88:11:d1:3e:f6:63:ec:df:40Certificate
IssuerCN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft CorporationNot Before10-01-1997 07:00Not After31-12-2020 07:00SubjectCN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporationc1:00:8b:3c:3c:88:11:d1:3e:f6:63:ec:df:40Certificate
IssuerCN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft CorporationNot Before10-01-1997 07:00Not After31-12-2020 07:00SubjectCN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation61:47:52:ba:00:00:00:00:00:04Certificate
IssuerCN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USNot Before16-09-2006 01:53Not After16-09-2011 02:03SubjectCN=Microsoft Timestamping Service,OU=nCipher DSE ESN:D8A9-CFCC-579C,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageContentCommitment
61:47:52:ba:00:00:00:00:00:04Certificate
IssuerCN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USNot Before16-09-2006 01:53Not After16-09-2011 02:03SubjectCN=Microsoft Timestamping Service,OU=nCipher DSE ESN:D8A9-CFCC-579C,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageContentCommitment
6a:0b:99:4f:c0:00:25:ab:11:db:45:1f:58:7a:67:a2Certificate
IssuerCN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft CorporationNot Before16-09-2006 01:04Not After15-09-2019 07:00SubjectCN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
6a:0b:99:4f:c0:00:1d:ab:11:da:c4:02:a1:66:27:baCertificate
IssuerCN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft CorporationNot Before04-04-2006 17:44Not After26-04-2012 07:00SubjectCN=Microsoft Code Signing PCA,OU=Copyright (c) 2000 Microsoft Corp.,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USExtended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageContentCommitment
KeyUsageCertSign
KeyUsageCRLSign
61:46:9e:cb:00:04:00:00:00:65Certificate
IssuerCN=Microsoft Code Signing PCA,OU=Copyright (c) 2000 Microsoft Corp.,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USNot Before04-04-2006 19:43Not After04-10-2007 19:53SubjectCN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USExtended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
KeyUsageContentCommitment
6c:d3:cc:fd:d1:aa:0e:8c:59:58:04:20:58:80:09:5b:b8:ed:45:c5Signer
Actual PE Digest6c:d3:cc:fd:d1:aa:0e:8c:59:58:04:20:58:80:09:5b:b8:ed:45:c5Digest Algorithmsha1PE Digest MatchestrueHeaders
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CreateFileA
HeapSize
SetStdHandle
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
GetProcAddress
GetFullPathNameW
GetVolumeInformationW
FindFirstFileW
FindNextFileW
CreateFileW
FindClose
CloseHandle
DeleteFileW
GetCurrentProcess
GetLastError
FormatMessageW
LocalAlloc
LoadLibraryW
LocalFree
GetModuleHandleW
HeapAlloc
HeapFree
EnterCriticalSection
LeaveCriticalSection
GetModuleHandleA
ExitProcess
GetVersionExA
GetProcessHeap
DeleteCriticalSection
VirtualFree
VirtualAlloc
HeapReAlloc
HeapDestroy
HeapCreate
WriteFile
GetStdHandle
GetModuleFileNameA
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetCPInfo
InterlockedIncrement
InterlockedDecrement
GetACP
GetOEMCP
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
GetCurrentThreadId
WideCharToMultiByte
GetConsoleCP
GetConsoleMode
FlushFileBuffers
SetHandleCount
GetFileType
GetStartupInfoA
Sleep
LoadLibraryA
InitializeCriticalSection
GetModuleFileNameW
FreeEnvironmentStringsA
MultiByteToWideChar
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineA
GetCommandLineW
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
RtlUnwind
SetFilePointer
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
user32
DialogBoxIndirectParamW
GetDlgItem
GetSysColorBrush
EndDialog
SetWindowTextW
LoadCursorW
SetCursor
InflateRect
SendMessageW
gdi32
SetMapMode
StartDocW
StartPage
EndPage
EndDoc
GetDeviceCaps
comdlg32
PrintDlgW
advapi32
LookupPrivilegeValueW
AdjustTokenPrivileges
RegCreateKeyW
RegQueryValueExW
RegSetValueExW
RegCloseKey
OpenProcessToken
Sections
.text Size: 44KB - Virtual size: 43KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 20KB - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 980B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
wintaylor2.1/Programs/tools/sysinternals/strings.exe.exe windows:5 windows x86
62cbe6407326d5453381bb4b4cb15c89
Code Sign
c1:00:8b:3c:3c:88:11:d1:3e:f6:63:ec:df:40Certificate
IssuerCN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft CorporationNot Before10-01-1997 07:00Not After31-12-2020 07:00SubjectCN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation2e:ab:11:dc:50:ff:5c:9d:cb:c0Certificate
IssuerCN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft CorporationNot Before22-08-2007 22:31Not After25-08-2012 07:00SubjectCN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USExtended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
61:01:64:0f:00:00:00:00:00:0bCertificate
IssuerCN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USNot Before20-01-2009 01:58Not After20-03-2010 02:08SubjectCN=Microsoft Corporation,OU=AOC,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USExtended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
KeyUsageContentCommitment
6a:0b:99:4f:c0:00:25:ab:11:db:45:1f:58:7a:67:a2Certificate
IssuerCN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft CorporationNot Before16-09-2006 01:04Not After15-09-2019 07:00SubjectCN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
61:06:94:2d:00:00:00:00:00:09Certificate
IssuerCN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USNot Before25-07-2008 19:02Not After25-07-2013 19:12SubjectCN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:7A82-688A-9F92,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageContentCommitment
fb:2c:d8:24:dd:14:23:7d:6c:cb:ad:7a:74:f9:98:57:36:eb:e3:a3Signer
Actual PE Digestfb:2c:d8:24:dd:14:23:7d:6c:cb:ad:7a:74:f9:98:57:36:eb:e3:a3Digest Algorithmsha1PE Digest MatchestrueHeaders
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
FindNextFileA
FindFirstFileA
GetCurrentDirectoryA
GetFullPathNameA
CompareStringW
CompareStringA
FindClose
HeapSize
GetTimeZoneInformation
SetStdHandle
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
InterlockedExchange
CreateFileA
GetLastError
ReadFile
SetFilePointer
CloseHandle
FormatMessageA
GetCurrentProcess
GetCommandLineW
GetProcAddress
LocalAlloc
LoadLibraryA
LocalFree
GetLocaleInfoW
GetModuleHandleA
HeapAlloc
HeapFree
EnterCriticalSection
LeaveCriticalSection
GetCommandLineA
GetCPInfo
InterlockedIncrement
InterlockedDecrement
GetACP
GetOEMCP
IsValidCodePage
GetModuleHandleW
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
GetCurrentThreadId
GetCurrentThread
LCMapStringA
WideCharToMultiByte
MultiByteToWideChar
LCMapStringW
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
DeleteCriticalSection
FatalAppExitA
VirtualFree
VirtualAlloc
HeapReAlloc
HeapCreate
HeapDestroy
Sleep
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameA
SetHandleCount
GetFileType
GetStartupInfoA
GetStringTypeA
GetStringTypeW
GetConsoleCP
GetConsoleMode
FlushFileBuffers
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
GetTimeFormatA
GetDateFormatA
GetUserDefaultLCID
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale
InitializeCriticalSectionAndSpinCount
RtlUnwind
SetConsoleCtrlHandler
FreeLibrary
SetEnvironmentVariableA
user32
DialogBoxIndirectParamA
GetDlgItem
GetSysColorBrush
EndDialog
SetWindowTextA
LoadCursorA
SetCursor
InflateRect
SendMessageA
gdi32
SetMapMode
StartDocA
StartPage
EndPage
EndDoc
GetDeviceCaps
comdlg32
PrintDlgA
advapi32
RegQueryValueExA
RegSetValueExA
RegCloseKey
RegCreateKeyA
Sections
.text Size: 98KB - Virtual size: 97KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 22KB - Virtual size: 21KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
wintaylor2.1/Programs/tools/sysinternals/sync.exe.exe windows:4 windows x86
9003944e49ef2848ccf4a2bfcade2941
Code Sign
47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4Certificate
IssuerCN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZANot Before04-12-2003 00:00Not After03-12-2013 23:59SubjectCN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=USExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageCertSign
KeyUsageCRLSign
0d:e9:2b:f0:d4:d8:29:88:18:32:05:09:5e:9a:76:88Certificate
IssuerCN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=USNot Before04-12-2003 00:00Not After03-12-2008 23:59SubjectCN=VeriSign Time Stamping Services Signer,O=VeriSign\, Inc.,C=USExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageContentCommitment
c1:00:8b:3c:3c:88:11:d1:3e:f6:63:ec:df:40Certificate
IssuerCN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft CorporationNot Before10-01-1997 07:00Not After31-12-2020 07:00SubjectCN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation6a:0b:99:4f:c0:00:1d:ab:11:da:c4:02:a1:66:27:baCertificate
IssuerCN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft CorporationNot Before04-04-2006 17:44Not After26-04-2012 07:00SubjectCN=Microsoft Code Signing PCA,OU=Copyright (c) 2000 Microsoft Corp.,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USExtended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageContentCommitment
KeyUsageCertSign
KeyUsageCRLSign
61:46:9e:cb:00:04:00:00:00:65Certificate
IssuerCN=Microsoft Code Signing PCA,OU=Copyright (c) 2000 Microsoft Corp.,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USNot Before04-04-2006 19:43Not After04-10-2007 19:53SubjectCN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USExtended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
KeyUsageContentCommitment
53:eb:7e:4b:20:50:0b:a1:bc:54:b9:ed:e5:10:fa:f1:70:60:50:45Signer
Actual PE Digest53:eb:7e:4b:20:50:0b:a1:bc:54:b9:ed:e5:10:fa:f1:70:60:50:45Digest Algorithmsha1PE Digest MatchestrueHeaders
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetVersionExA
LoadLibraryA
LocalAlloc
GetModuleHandleA
GetStringTypeA
LCMapStringW
SetErrorMode
MultiByteToWideChar
Sleep
GetOEMCP
GetACP
GetCPInfo
SetFilePointer
SetStdHandle
RtlUnwind
GetLogicalDrives
GetDriveTypeA
CreateFileA
FlushFileBuffers
CloseHandle
LCMapStringA
GetLastError
GetEnvironmentStringsW
GetEnvironmentStrings
GetFileAttributesA
DeviceIoControl
LocalFree
FormatMessageA
GetProcAddress
ExitProcess
TerminateProcess
GetCurrentProcess
HeapAlloc
HeapFree
GetCommandLineA
GetVersion
WriteFile
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
HeapReAlloc
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetStringTypeW
user32
wsprintfA
LoadCursorA
SetCursor
InflateRect
GetDlgItem
GetSysColorBrush
EndDialog
SetWindowTextA
SendMessageA
DialogBoxIndirectParamA
gdi32
SetMapMode
StartDocA
StartPage
EndPage
EndDoc
GetDeviceCaps
comdlg32
PrintDlgA
advapi32
RegQueryValueExA
RegCreateKeyA
RegSetValueExA
RegCloseKey
Sections
.text Size: 20KB - Virtual size: 19KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 108KB - Virtual size: 112KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 976B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
wintaylor2.1/Programs/tools/sysinternals/tcpvcon.exe.exe windows:5 windows x86
f100b2f0ed54522b7df1d1d5f93b0983
Code Sign
2e:ab:11:dc:50:ff:5c:9d:cb:c0Certificate
IssuerCN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft CorporationNot Before22-08-2007 22:31Not After25-08-2012 07:00SubjectCN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USExtended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
61:06:27:81:00:00:00:00:00:08Certificate
IssuerCN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USNot Before22-10-2008 21:24Not After22-01-2010 21:34SubjectCN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USExtended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
61:49:7c:ed:00:00:00:00:00:05Certificate
IssuerCN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USNot Before16-09-2006 01:55Not After16-09-2011 02:05SubjectCN=Microsoft Timestamping Service,OU=nCipher DSE ESN:10D8-5847-CBF8,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageContentCommitment
6a:0b:99:4f:c0:00:25:ab:11:db:45:1f:58:7a:67:a2Certificate
IssuerCN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft CorporationNot Before16-09-2006 01:04Not After15-09-2019 07:00SubjectCN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ba:9a:d6:c2:01:fa:ed:f2:bb:9f:15:4c:af:06:b8:ba:de:6f:23:e5Signer
Actual PE Digestba:9a:d6:c2:01:fa:ed:f2:bb:9f:15:4c:af:06:b8:ba:de:6f:23:e5Digest Algorithmsha1PE Digest MatchestrueHeaders
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
version
VerQueryValueA
GetFileVersionInfoA
GetFileVersionInfoSizeA
ws2_32
socket
closesocket
gethostbyname
send
gethostname
recv
ntohl
htonl
htons
ntohs
getservbyport
gethostbyaddr
WSAGetLastError
connect
WSAStartup
iphlpapi
GetTcpTable
SetTcpEntry
GetUdpTable
comctl32
ord17
ImageList_ReplaceIcon
ord6
ImageList_Create
CreateToolbarEx
kernel32
OpenProcess
ReadProcessMemory
CreateEventA
GetSystemDirectoryA
DeviceIoControl
GetModuleFileNameA
DuplicateHandle
GetVersion
GetCurrentProcessId
DeleteFileA
lstrlenA
HeapAlloc
HeapFree
GlobalLock
SetEvent
GetTickCount
GetProcessHeap
FormatMessageA
GetUserDefaultLangID
InitializeCriticalSection
GlobalAlloc
LeaveCriticalSection
TerminateProcess
lstrcatA
GlobalUnlock
EnterCriticalSection
GlobalReAlloc
lstrcpyA
ExpandEnvironmentStringsA
GetConsoleOutputCP
WriteConsoleA
InitializeCriticalSectionAndSpinCount
SetFilePointer
GetSystemTimeAsFileTime
QueryPerformanceCounter
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
FlushFileBuffers
GetStartupInfoA
GetFileType
SetHandleCount
GetStdHandle
LocalFree
Sleep
VirtualAlloc
DeleteCriticalSection
VirtualFree
HeapCreate
LCMapStringW
MultiByteToWideChar
LCMapStringA
GetCurrentThreadId
TlsFree
TlsSetValue
TlsAlloc
TlsGetValue
GetModuleHandleW
IsValidCodePage
GetOEMCP
GetACP
InterlockedDecrement
InterlockedIncrement
GetCPInfo
GetConsoleMode
WriteConsoleW
GetConsoleCP
WideCharToMultiByte
WriteFile
RtlUnwind
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCommandLineA
HeapReAlloc
CreateThread
ResumeThread
ExitThread
GetLocaleInfoA
SetEndOfFile
ReadFile
HeapSize
LocalAlloc
LoadLibraryA
GetCommandLineW
CloseHandle
GetModuleHandleA
LockResource
GetProcAddress
SetLastError
GetLastError
SizeofResource
GetCurrentProcess
LoadResource
FindResourceA
CreateFileA
GetStringTypeW
GetStringTypeA
SetStdHandle
ExitProcess
GetEnvironmentStringsW
user32
CloseClipboard
SetTimer
ScreenToClient
DestroyWindow
PostQuitMessage
TrackPopupMenu
IsIconic
SetCapture
ClientToScreen
GetWindowRect
KillTimer
IsZoomed
DrawTextA
GetSubMenu
DrawIconEx
LoadStringA
GetFocus
GetParent
LoadMenuA
LoadIconA
InvalidateRgn
GetClientRect
SetFocus
GetDC
ChildWindowFromPoint
GetMenu
SetWindowLongA
InvalidateRect
GetWindowLongA
CreateWindowExA
ReleaseDC
EnableMenuItem
EmptyClipboard
DefWindowProcA
GetSysColor
SetWindowPos
GetCursorPos
ShowWindow
PostMessageA
OpenClipboard
ReleaseCapture
GetSystemMetrics
InsertMenuA
SetClipboardData
CallWindowProcA
DialogBoxParamA
DestroyIcon
SetDlgItemTextA
CheckMenuItem
MoveWindow
MessageBoxA
SetCursor
SendMessageA
InflateRect
GetDlgItem
EndDialog
GetSysColorBrush
SetWindowTextA
DialogBoxIndirectParamA
LoadCursorA
CreateMenu
gdi32
StartDocA
SetMapMode
GetDeviceCaps
GetTextExtentPoint32A
SetTextColor
CreateFontIndirectA
SetBkColor
SetBkMode
DeleteObject
SelectObject
CreateCompatibleDC
GetTextMetricsA
GetObjectA
GetStockObject
ExtTextOutA
EndPage
StartPage
EndDoc
comdlg32
PrintDlgA
ChooseFontA
GetSaveFileNameA
advapi32
RegQueryValueExA
RegOpenKeyExA
RegOpenKeyA
OpenProcessToken
RegSetValueExA
RegDeleteKeyA
RegCreateKeyA
LookupPrivilegeValueA
AdjustTokenPrivileges
RegCloseKey
shell32
ShellExecuteA
SHGetFileInfoA
Sections
.text Size: 89KB - Virtual size: 89KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 17KB - Virtual size: 26KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 21KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
wintaylor2.1/Programs/tools/sysinternals/tcpview.chm.chm
-
wintaylor2.1/Programs/tools/sysinternals/tcpview.hlp
-
wintaylor2.1/Programs/tools/sysinternals/vmmap.exe.exe windows:5 windows x86
1c35c6d3dcb14e84e77b679691837a29
Code Sign
2e:ab:11:dc:50:ff:5c:9d:cb:c0Certificate
IssuerCN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft CorporationNot Before22-08-2007 22:31Not After25-08-2012 07:00SubjectCN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USExtended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
61:01:cf:3e:00:00:00:00:00:0fCertificate
IssuerCN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USNot Before07-12-2009 22:40Not After07-03-2011 22:40SubjectCN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USExtended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
6a:0b:99:4f:c0:00:25:ab:11:db:45:1f:58:7a:67:a2Certificate
IssuerCN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft CorporationNot Before16-09-2006 01:04Not After15-09-2019 07:00SubjectCN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
61:05:a2:30:00:00:00:00:00:08Certificate
IssuerCN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USNot Before25-07-2008 19:01Not After25-07-2013 19:11SubjectCN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:85D3-305C-5BCF,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageContentCommitment
28:f9:1f:68:65:12:69:ce:6d:be:a6:f1:a2:dc:0b:c0:35:40:e4:b1Signer
Actual PE Digest28:f9:1f:68:65:12:69:ce:6d:be:a6:f1:a2:dc:0b:c0:35:40:e4:b1Digest Algorithmsha1PE Digest MatchestrueHeaders
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
comctl32
ImageList_DrawEx
InitCommonControlsEx
ImageList_Destroy
ImageList_Create
ImageList_ReplaceIcon
ord17
ImageList_SetBkColor
version
VerQueryValueW
GetFileVersionInfoW
GetFileVersionInfoSizeW
kernel32
QueryDosDeviceW
SetProcessWorkingSetSize
GetSystemInfo
Process32NextW
FileTimeToLocalFileTime
GetVersion
GetCurrentProcessId
GetTempPathA
SuspendThread
ResumeThread
VirtualQueryEx
DebugBreak
MultiByteToWideChar
lstrlenA
WideCharToMultiByte
ExpandEnvironmentStringsA
LoadLibraryA
SetEndOfFile
GetLocaleInfoA
FlushFileBuffers
SetStdHandle
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
InitializeCriticalSectionAndSpinCount
GetModuleHandleA
GetTickCount
QueryPerformanceCounter
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetCurrentDirectoryA
InterlockedDecrement
PeekNamedPipe
GetFileInformationByHandle
GetFullPathNameA
LCMapStringA
ReadFile
SetFilePointer
GetFileType
SetHandleCount
LCMapStringW
GetStringTypeW
GetStringTypeA
GetModuleFileNameA
GetStdHandle
CreateFileMappingW
DeleteCriticalSection
VirtualFree
HeapCreate
ExitProcess
HeapSize
GetCurrentThreadId
TlsFree
TlsSetValue
TlsAlloc
TlsGetValue
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
GetConsoleMode
GetConsoleCP
WriteFile
LeaveCriticalSection
EnterCriticalSection
RaiseException
RtlUnwind
GetStartupInfoA
GetCommandLineA
FindFirstFileA
GetDriveTypeA
FindClose
HeapReAlloc
HeapAlloc
HeapFree
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
InterlockedIncrement
FreeLibrary
ExpandEnvironmentStringsW
DeleteFileW
CloseHandle
LockResource
GetProcAddress
GetCurrentDirectoryW
SetEnvironmentVariableA
GetLastError
GetModuleFileNameW
GetFileAttributesW
SizeofResource
Sleep
GetModuleHandleW
WaitForSingleObject
GetCurrentProcess
CreateProcessW
LoadResource
FindResourceW
GetProcessHeap
GetTimeZoneInformation
OpenThread
Process32FirstW
GlobalFree
SetLastError
GlobalUnlock
CreateFileW
Thread32Next
FileTimeToSystemTime
TerminateProcess
GetTimeFormatW
FormatMessageW
Thread32First
GlobalAlloc
OpenProcess
GetSystemTimeAsFileTime
IsBadReadPtr
GlobalLock
UnmapViewOfFile
MapViewOfFile
GetNativeSystemInfo
GetThreadContext
GlobalAddAtomW
GetNumberFormatW
ReadProcessMemory
CompareStringW
GetLocaleInfoW
LocalFree
GetCommandLineW
LocalAlloc
Module32NextW
CreateToolhelp32Snapshot
Module32FirstW
SetCurrentDirectoryW
VirtualAlloc
LoadLibraryW
VirtualQuery
CompareStringA
CreateFileA
user32
IsDialogMessageW
DrawIconEx
GetMenu
GetWindowTextW
ChildWindowFromPoint
LoadAcceleratorsW
TranslateMessage
DialogBoxParamW
GetMenuItemInfoW
UnionRect
GetSubMenu
IsZoomed
PostMessageW
RegisterWindowMessageW
PostQuitMessage
GetMessageW
TranslateAcceleratorW
CloseClipboard
SetWindowPlacement
GetWindowPlacement
GetClassNameW
EnableMenuItem
EmptyClipboard
EnumChildWindows
CreateDialogParamW
DrawMenuBar
GetActiveWindow
InsertMenuW
OpenClipboard
MessageBoxW
GetDlgItemTextW
SetDlgItemTextW
SetClipboardData
DestroyIcon
DrawFrameControl
SetMenuItemInfoW
CheckMenuItem
MoveWindow
DispatchMessageW
EndPaint
GetUpdateRgn
DrawTextW
GetKeyState
GetFocus
GetParent
SetFocus
BeginPaint
GetClassLongW
SetPropW
GetDC
IntersectRect
GetScrollInfo
InvalidateRect
ReleaseDC
ScrollWindowEx
GetPropW
SetScrollInfo
CallWindowProcW
ScreenToClient
FillRect
SetCapture
GetCapture
RegisterClassExW
OffsetRect
SetWindowLongW
SetWindowPos
CreateWindowExW
DeferWindowPos
ReleaseCapture
BeginDeferWindowPos
MapWindowPoints
EndDeferWindowPos
DefWindowProcW
GetWindowRect
LoadImageW
GetClientRect
PtInRect
LoadIconW
GetWindowLongW
GetSysColor
LoadStringW
GetSystemMetrics
UpdateWindow
SetCursor
DialogBoxIndirectParamW
LoadCursorW
InflateRect
GetDlgItem
EndDialog
GetSysColorBrush
SendMessageW
SetWindowTextW
ShowWindow
DrawFocusRect
gdi32
GetObjectW
BitBlt
GetTextMetricsW
SetTextColor
DeleteDC
SetBkColor
SetBkMode
DeleteObject
SelectObject
SelectClipRgn
CreateCompatibleDC
CreateRectRgnIndirect
RectInRegion
CreateCompatibleBitmap
GetBkColor
CreateRectRgn
Polyline
CreatePen
GetStockObject
CreateSolidBrush
EndPage
StartPage
GetDeviceCaps
SetMapMode
StartDocW
EndDoc
CreateFontIndirectW
comdlg32
GetSaveFileNameW
GetOpenFileNameW
ChooseFontW
PrintDlgW
FindTextW
advapi32
RegSetValueExW
RegOpenKeyExA
RegQueryValueExA
EnumServicesStatusExW
AdjustTokenPrivileges
LookupAccountSidW
LookupPrivilegeValueW
OpenSCManagerW
RegCloseKey
RegOpenKeyW
RegCreateKeyW
RegQueryValueExW
OpenProcessToken
GetTokenInformation
RegCreateKeyExW
RegSetValueW
EqualSid
AllocateAndInitializeSid
FreeSid
CloseServiceHandle
shell32
ShellExecuteW
CommandLineToArgvW
SHGetFileInfoW
ShellExecuteExW
SHChangeNotify
oleaut32
VariantClear
SysFreeString
SysAllocStringByteLen
SysStringLen
SysAllocString
Sections
.text Size: 199KB - Virtual size: 198KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 42KB - Virtual size: 42KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 6KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 370KB - Virtual size: 370KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 15KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
wintaylor2.1/Programs/tools/sysinternals/whois.exe.exe windows:4 windows x86
a5ad285d6992ccb9c3fa95c3126360e1
Code Sign
47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4Certificate
IssuerCN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZANot Before04-12-2003 00:00Not After03-12-2013 23:59SubjectCN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=USExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageCertSign
KeyUsageCRLSign
0d:e9:2b:f0:d4:d8:29:88:18:32:05:09:5e:9a:76:88Certificate
IssuerCN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=USNot Before04-12-2003 00:00Not After03-12-2008 23:59SubjectCN=VeriSign Time Stamping Services Signer,O=VeriSign\, Inc.,C=USExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageContentCommitment
c1:00:8b:3c:3c:88:11:d1:3e:f6:63:ec:df:40Certificate
IssuerCN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft CorporationNot Before10-01-1997 07:00Not After31-12-2020 07:00SubjectCN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation6a:0b:99:4f:c0:00:1d:ab:11:da:c4:02:a1:66:27:baCertificate
IssuerCN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft CorporationNot Before04-04-2006 17:44Not After26-04-2012 07:00SubjectCN=Microsoft Code Signing PCA,OU=Copyright (c) 2000 Microsoft Corp.,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USExtended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageContentCommitment
KeyUsageCertSign
KeyUsageCRLSign
61:46:9e:cb:00:04:00:00:00:65Certificate
IssuerCN=Microsoft Code Signing PCA,OU=Copyright (c) 2000 Microsoft Corp.,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USNot Before04-04-2006 19:43Not After04-10-2007 19:53SubjectCN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USExtended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
KeyUsageContentCommitment
ce:f7:96:86:cf:61:72:1a:84:28:84:da:43:d2:d5:60:2a:fa:f0:19Signer
Actual PE Digestce:f7:96:86:cf:61:72:1a:84:28:84:da:43:d2:d5:60:2a:fa:f0:19Digest Algorithmsha1PE Digest MatchestrueHeaders
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
ws2_32
closesocket
WSAGetLastError
WSAStartup
inet_addr
gethostbyaddr
WSACleanup
gethostbyname
htons
socket
connect
send
recv
kernel32
MultiByteToWideChar
LocalFree
WriteFile
GetStdHandle
FormatMessageA
LoadLibraryA
LocalAlloc
GetModuleHandleA
GetCPInfo
GetStringTypeW
RtlUnwind
GetStartupInfoA
GetFileType
SetHandleCount
GetEnvironmentStringsW
GetEnvironmentStrings
WideCharToMultiByte
FreeEnvironmentStringsW
GetACP
GetOEMCP
GetProcAddress
SetStdHandle
FlushFileBuffers
SetFilePointer
GetStringTypeA
FreeEnvironmentStringsA
GetModuleFileNameA
ReadFile
LCMapStringA
CloseHandle
LCMapStringW
GetLastError
HeapReAlloc
HeapAlloc
ExitProcess
TerminateProcess
GetCurrentProcess
HeapFree
GetCommandLineA
GetVersion
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
UnhandledExceptionFilter
user32
GetDlgItem
SendMessageA
LoadCursorA
SetCursor
InflateRect
DialogBoxIndirectParamA
GetSysColorBrush
EndDialog
SetWindowTextA
gdi32
SetMapMode
StartDocA
StartPage
EndPage
EndDoc
GetDeviceCaps
comdlg32
PrintDlgA
advapi32
RegQueryValueExA
RegCreateKeyA
RegSetValueExA
RegCloseKey
Sections
.text Size: 28KB - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 108KB - Virtual size: 112KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
wintaylor2.1/Programs/tools/sysinternals/winobj.exe.exe windows:4 windows x86
21095d3077f7e9c193972ab3f98700c0
Code Sign
47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4Certificate
IssuerCN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZANot Before04-12-2003 00:00Not After03-12-2013 23:59SubjectCN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=USExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageCertSign
KeyUsageCRLSign
0d:e9:2b:f0:d4:d8:29:88:18:32:05:09:5e:9a:76:88Certificate
IssuerCN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=USNot Before04-12-2003 00:00Not After03-12-2008 23:59SubjectCN=VeriSign Time Stamping Services Signer,O=VeriSign\, Inc.,C=USExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageContentCommitment
c1:00:8b:3c:3c:88:11:d1:3e:f6:63:ec:df:40Certificate
IssuerCN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft CorporationNot Before10-01-1997 07:00Not After31-12-2020 07:00SubjectCN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation6a:0b:99:4f:c0:00:1d:ab:11:da:c4:02:a1:66:27:baCertificate
IssuerCN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft CorporationNot Before04-04-2006 17:44Not After26-04-2012 07:00SubjectCN=Microsoft Code Signing PCA,OU=Copyright (c) 2000 Microsoft Corp.,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USExtended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageContentCommitment
KeyUsageCertSign
KeyUsageCRLSign
61:46:9e:cb:00:04:00:00:00:65Certificate
IssuerCN=Microsoft Code Signing PCA,OU=Copyright (c) 2000 Microsoft Corp.,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USNot Before04-04-2006 19:43Not After04-10-2007 19:53SubjectCN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USExtended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
KeyUsageContentCommitment
d5:73:76:c9:a5:fe:6a:40:51:83:d7:34:d3:65:60:76:96:a5:70:5bSigner
Actual PE Digestd5:73:76:c9:a5:fe:6a:40:51:83:d7:34:d3:65:60:76:96:a5:70:5bDigest Algorithmsha1PE Digest MatchestrueHeaders
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
VirtualAlloc
VirtualFree
HeapCreate
HeapDestroy
ExitProcess
HeapReAlloc
GetCommandLineA
GetStartupInfoA
HeapFree
HeapAlloc
TerminateProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
RtlUnwind
WriteFile
SetFilePointer
GetCPInfo
GetACP
GetOEMCP
SetStdHandle
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
FreeLibrary
LocalAlloc
GetCurrentProcess
lstrlenA
GetProcAddress
FileTimeToLocalFileTime
FileTimeToSystemTime
CreateFileA
GetLastError
CloseHandle
GetModuleHandleA
LoadLibraryA
LocalFree
GetVersion
FlushFileBuffers
user32
MoveWindow
ChildWindowFromPoint
GetMenu
GetSubMenu
TrackPopupMenu
DeferWindowPos
EndDeferWindowPos
SetFocus
GetParent
GetDC
DialogBoxIndirectParamA
BeginDeferWindowPos
InvertRect
ReleaseDC
SetCapture
ReleaseCapture
PostQuitMessage
InvalidateRect
DefWindowProcA
WinHelpA
DialogBoxParamA
LoadStringA
UpdateWindow
GetSysColor
RegisterClassA
LoadAcceleratorsA
GetMessageA
TranslateAcceleratorA
TranslateMessage
DispatchMessageA
GetWindowRect
IsIconic
IsZoomed
LoadBitmapA
PostMessageA
SetDlgItemTextA
CheckDlgButton
ShowWindow
EnableWindow
MessageBoxA
wsprintfA
GetMessagePos
ScreenToClient
GetCursorPos
GetWindowLongA
SetWindowLongA
GetClientRect
CreateWindowExA
LoadIconA
LoadCursorA
SetCursor
InflateRect
GetDlgItem
GetSysColorBrush
EndDialog
SetWindowTextA
SendMessageA
gdi32
GetObjectA
CreateFontIndirectA
SetBkMode
SetTextColor
SelectObject
CreateBrushIndirect
DeleteObject
GetDeviceCaps
SetMapMode
StartPage
EndDoc
GetStockObject
EndPage
StartDocA
comdlg32
PrintDlgA
advapi32
MapGenericMask
OpenProcessToken
LookupPrivilegeValueA
AdjustTokenPrivileges
RegOpenKeyA
IsValidSecurityDescriptor
SetKernelObjectSecurity
GetKernelObjectSecurity
RegCreateKeyA
RegQueryValueExA
RegSetValueExA
RegCloseKey
shell32
ShellExecuteA
comctl32
ord17
ord6
ImageList_Destroy
ImageList_Add
ImageList_GetImageCount
CreatePropertySheetPageA
PropertySheetA
ImageList_Create
ImageList_ReplaceIcon
CreateToolbarEx
Sections
.text Size: 36KB - Virtual size: 34KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 116KB - Virtual size: 154KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 32KB - Virtual size: 30KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
wintaylor2.1/Programs/tools/sysinternals/winobj.hlp
-
wintaylor2.1/Programs/tools/unxutils/bunzip2.exe.exe windows:4 windows x86
8d77798c08ff5cd06d907758a5a084de
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
ExitProcess
SetUnhandledExceptionFilter
msvcrt
_chmod
_fdopen
_fileno
_isatty
_setmode
_utime
__getmainargs
__p__environ
__set_app_type
_cexit
_errno
_fileno
_fmode
_fpreset
_iob
_setmode
_stat
atexit
exit
fclose
ferror
fflush
fgetc
fopen
fprintf
fread
free
fwrite
getenv
isdigit
isspace
malloc
memset
perror
remove
signal
strcat
strcmp
strcpy
strerror
strncmp
strncpy
strstr
ungetc
Sections
.text Size: 68KB - Virtual size: 67KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: - Virtual size: 4KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
wintaylor2.1/Programs/tools/unxutils/dd.exe.exe windows:4 windows x86
64d9aef39f523506361ff18b89009f8e
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_AGGRESIVE_WS_TRIM
IMAGE_FILE_32BIT_MACHINE
Imports
wsock32
gethostname
msvcrt
bsearch
fclose
realloc
fgets
fopen
putc
strerror
vfprintf
fflush
calloc
getenv
qsort
strncpy
_strlwr
_stat
_get_osfhandle
puts
malloc
strrchr
sprintf
_dup
_pipe
_exit
strncmp
signal
fprintf
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
_isctype
toupper
__mb_cur_max
_pctype
tolower
strchr
free
_iob
_setmode
_ftol
_fstat
setlocale
_open
_fileno
_lseek
_close
_getpid
_strdup
_getcwd
_read
_write
_access
_utime
_chsize
_unlink
_mktemp
printf
exit
_errno
_XcptFilter
__p___initenv
__getmainargs
kernel32
RaiseException
GetLastError
InterlockedExchange
LocalAlloc
GetVersion
CreateProcessA
GetCurrentProcessId
OpenProcess
TerminateProcess
Sleep
GetExitCodeProcess
GetFullPathNameA
CreateFileA
GetFileInformationByHandle
CloseHandle
GetProcAddress
FreeLibrary
LoadLibraryA
Sections
.text Size: 28KB - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
wintaylor2.1/Programs/tools/unxutils/grep.exe.exe windows:4 windows x86
c97b49126e50ac1ce7b74b693d30c071
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ExitProcess
SetUnhandledExceptionFilter
VirtualProtect
msvcrt
_access
_fstat
_getcwd
_isatty
_lseek
_open
_read
_close
_setmode
_stat
_strdup
_cexit
_errno
_fileno
_findclose
_findfirst
_findnext
_fmode
_fpreset
_iob
_setmode
_stat
__getmainargs
_stricmp
_strnicmp
_wcsicmp
abort
atexit
atoi
bsearch
calloc
exit
fclose
feof
ferror
fgets
fopen
fprintf
fputc
fputs
fread
free
fwrite
getenv
isalnum
isalpha
iscntrl
isdigit
islower
isprint
ispunct
isspace
isupper
__p__environ
isxdigit
malloc
memchr
memcpy
memmove
printf
puts
qsort
realloc
setlocale
signal
strcat
strchr
strcmp
strcoll
strcpy
strerror
strncmp
strrchr
tolower
toupper
__set_app_type
Sections
.text Size: 74KB - Virtual size: 73KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 872B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: - Virtual size: 2KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
wintaylor2.1/Programs/tools/unxutils/md5sum.exe.exe windows:4 windows x86
74dfe5058611c7bdd5067483cd452676
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ExitProcess
SetUnhandledExceptionFilter
msvcrt
_fstat
_getcwd
_isatty
_open
_read
_close
_strdup
_cexit
_errno
_fileno
_fmode
_fpreset
_iob
_setmode
__getmainargs
_stricmp
_strnicmp
_wcsicmp
atexit
bsearch
calloc
exit
fclose
feof
ferror
fflush
fgets
fopen
fprintf
fputs
fread
free
getc
getenv
isalnum
isalpha
isdigit
isspace
__p__environ
isxdigit
malloc
memcpy
printf
putc
putchar
puts
qsort
realloc
setlocale
signal
strchr
strcmp
strerror
strncmp
tolower
vfprintf
__set_app_type
Sections
.text Size: 24KB - Virtual size: 23KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 108B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: - Virtual size: 1KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
wintaylor2.1/Programs/tools/unxutils/pclip.exe.exe windows:4 windows x86
0cfa302adbb1b76ea6709c750e0f6893
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
CloseClipboard
GetClipboardData
OpenClipboard
EmptyClipboard
SetClipboardData
msvcrt
exit
fprintf
getc
strstr
_strlwr
printf
_setmode
_iob
fputs
strncmp
getenv
_exit
_XcptFilter
_except_handler3
__p___initenv
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_controlfp
kernel32
GlobalAlloc
GlobalLock
GlobalUnlock
GlobalReAlloc
Sections
.text Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 902B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
wintaylor2.1/Programs/tools/unxutils/sha1sum.exe.exe windows:4 windows x86
9f24d3c8953d4355cc499d35ee5dea58
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
ExitProcess
SetUnhandledExceptionFilter
msvcrt
_isatty
__getmainargs
__p__environ
__set_app_type
_cexit
_errno
_fileno
_fmode
_fpreset
_iob
_setmode
abort
atexit
calloc
exit
fclose
feof
ferror
fflush
fopen
fprintf
fputs
fread
free
getc
getenv
isprint
isxdigit
malloc
memcpy
memset
printf
putc
putchar
realloc
setlocale
signal
strchr
strcmp
strerror
strncmp
tolower
vfprintf
Sections
.text Size: 27KB - Virtual size: 26KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 96B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: - Virtual size: 576B
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
wintaylor2.1/Programs/tools/unxutils/tar.exe.exe windows:4 windows x86
0e91ddeceb0d2f397a70c67d6655c406
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_AGGRESIVE_WS_TRIM
IMAGE_FILE_32BIT_MACHINE
Imports
wsock32
gethostname
WSAStartup
msvcrt
__mb_cur_max
_pctype
qsort
fputc
strncpy
_isctype
putc
localtime
atol
fwrite
strrchr
strstr
bsearch
realloc
rename
strerror
vfprintf
calloc
gmtime
mktime
strncmp
tolower
_get_osfhandle
_fstat
_mkdir
_dup
_pipe
signal
toupper
_ftol
_exit
_XcptFilter
fgets
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
system
fscanf
fclose
malloc
_errno
sprintf
time
abort
getenv
strchr
atoi
setlocale
_setmode
free
fputs
printf
exit
_iob
fopen
fprintf
fflush
getc
_stat
_strlwr
__p___initenv
_utime
_access
_chsize
_open
_creat
_write
_read
_close
_lseek
_spawnl
_mktemp
_chdir
_unlink
_umask
_chmod
_getcwd
_rmdir
_execl
_strdup
kernel32
InterlockedExchange
LoadLibraryA
LocalAlloc
FreeLibrary
GetProcAddress
GetVersion
FindClose
FindFirstFileA
FindNextFileA
GetFileInformationByHandle
CreateProcessA
GetCurrentProcessId
OpenProcess
TerminateProcess
Sleep
GetExitCodeProcess
FlushFileBuffers
FormatMessageA
LocalFree
CreateFileA
GetFullPathNameA
MultiByteToWideChar
BackupWrite
CloseHandle
GetLastError
GetCurrentProcess
RaiseException
Sections
.text Size: 80KB - Virtual size: 77KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 24KB - Virtual size: 25KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
wintaylor2.1/Programs/tools/unxutils/uname.exe.exe windows:4 windows x86
af1ee8a9b74fc1417ba53ef316a970de
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
wsock32
gethostname
WSAStartup
msvcrt
strncmp
strlen
getenv
_sys_nerr
_sys_errlist
strcmp
_pipe
sprintf
calloc
strncpy
_strlwr
_stat
_dup
signal
_exit
_XcptFilter
__p___initenv
__getmainargs
fflush
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
putc
_iob
fprintf
exit
printf
_errno
_fstat
_get_osfhandle
_initterm
_read
_open
_close
_unlink
_utime
_access
_mktemp
_chsize
kernel32
CreateFileA
GetFullPathNameA
CreateProcessA
GetCurrentProcessId
OpenProcess
TerminateProcess
CloseHandle
GetExitCodeProcess
GetVersion
GetFileInformationByHandle
Sleep
Sections
.text Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
wintaylor2.1/Programs/tools/unxutils/unzip.exe.exe windows:4 windows x86
b882c964ffdbd098c3d5211bcef15e8e
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_DEBUG_STRIPPED
Imports
advapi32
AdjustTokenPrivileges
GetKernelObjectSecurity
GetSecurityDescriptorControl
GetSecurityDescriptorDacl
GetSecurityDescriptorGroup
GetSecurityDescriptorLength
GetSecurityDescriptorOwner
GetSecurityDescriptorSacl
IsValidAcl
IsValidSecurityDescriptor
IsValidSid
LookupPrivilegeValueA
OpenProcessToken
SetKernelObjectSecurity
kernel32
CloseHandle
CreateFileA
CreateMutexA
EnterCriticalSection
ExitProcess
FileTimeToDosDateTime
FileTimeToLocalFileTime
FindClose
FindFirstFileA
FindNextFileA
GetConsoleMode
GetConsoleScreenBufferInfo
GetCurrentProcess
GetDriveTypeA
GetFileAttributesA
GetFileTime
GetFullPathNameA
GetLastError
GetLocaleInfoA
GetProcessHeap
GetStdHandle
GetTimeZoneInformation
GetVersion
GetVolumeInformationA
HeapAlloc
HeapFree
InitializeCriticalSection
InterlockedExchange
LeaveCriticalSection
ReadFile
ReleaseMutex
SetConsoleMode
SetFileAttributesA
SetFileTime
SetUnhandledExceptionFilter
SetVolumeLabelA
WaitForSingleObject
lstrcmpiA
lstrcpynA
lstrlenA
msvcrt
_chmod
_close
_fileno
_isatty
_lseek
_mkdir
_open
_putenv
_read
_setmode
_stat
_strnicmp
_strupr
_unlink
_write
__getmainargs
__mb_cur_max
__p__environ
__set_app_type
_cexit
_fileno
_fmode
_fpreset
_iob
_setmode
_tzset
atexit
exit
fclose
fflush
fgets
fopen
fprintf
fputs
free
getenv
gmtime
isalpha
isdigit
isprint
isspace
isupper
localtime
malloc
mblen
memcpy
memset
perror
putc
realloc
setlocale
signal
sprintf
strcat
strcpy
strncmp
strncpy
tolower
user32
CharToOemA
OemToCharA
Sections
.text Size: 95KB - Virtual size: 94KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 392B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: - Virtual size: 51KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
wintaylor2.1/Programs/tools/unxutils/wget.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 368KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 245KB - Virtual size: 248KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
wintaylor2.1/Programs/tools/unxutils/whoami.exe.exe windows:4 windows x86
b06267ca0c263d788450e37049d05d0f
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_AGGRESIVE_WS_TRIM
IMAGE_FILE_32BIT_MACHINE
Imports
advapi32
GetUserNameA
msvcrt
_iob
puts
malloc
printf
fprintf
exit
strlen
strncmp
strcmp
getenv
_errno
_exit
_XcptFilter
__p___initenv
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
Sections
.text Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 610B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 984B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
wintaylor2.1/Programs/tools/usbHistory/output/usbHistory.obj
-
wintaylor2.1/Programs/tools/usbHistory/output/usbHistory.res
-
wintaylor2.1/Programs/tools/usbHistory/res1.ico
-
wintaylor2.1/Programs/tools/usbHistory/usbHistory.c
-
wintaylor2.1/Programs/tools/usbHistory/usbHistory.exe.exe windows:4 windows x86
5ac5dbd818b210c3dd77f8069b438b56
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
FileTimeToSystemTime
SystemTimeToTzSpecificLocalTime
VirtualAlloc
VirtualQuery
HeapCreate
HeapDestroy
HeapAlloc
HeapReAlloc
HeapFree
HeapSize
HeapValidate
RtlUnwind
ExitProcess
GetSystemTimeAsFileTime
GetStartupInfoA
GetFileType
GetStdHandle
GetCurrentProcess
DuplicateHandle
SetHandleCount
GetCommandLineA
GetModuleFileNameA
GetEnvironmentStrings
FreeEnvironmentStringsA
UnhandledExceptionFilter
SetConsoleCtrlHandler
WriteFile
GetLastError
CloseHandle
SetFilePointer
SetStdHandle
DeleteFileA
advapi32
RegOpenKeyExA
RegQueryInfoKeyA
RegCloseKey
RegEnumKeyExA
RegEnumValueA
Sections
.text Size: 25KB - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
wintaylor2.1/Programs/tools/usbHistory/usbHistory.ppj
-
wintaylor2.1/Programs/tools/usbHistory/usbHistory.rc
-
wintaylor2.1/Programs/tools/vista/arp.exe.exe windows:6 windows x86
6962ec669dd9b2be262033f3bc12c108
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
HeapSetInformation
SetThreadUILanguage
LocalFree
GetSystemDirectoryA
GetLastError
LoadLibraryA
GetProcAddress
FormatMessageA
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
GetModuleHandleA
InterlockedCompareExchange
Sleep
InterlockedExchange
msvcrt
_controlfp
_except_handler4_common
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_amsg_exit
_initterm
__initenv
_exit
_cexit
__getmainargs
toupper
sscanf
exit
fprintf
_setmode
_fileno
_iob
time
isdigit
isxdigit
islower
isspace
_vsnprintf
_XcptFilter
snmpapi
SnmpUtilMemAlloc
SnmpUtilMemFree
SnmpUtilVarBindFree
SnmpUtilOidCpy
ws2_32
ntohl
inet_addr
WSAStartup
gethostbyname
iphlpapi
GetIcmpStatisticsEx
GetIpStatisticsEx
GetUdpStatisticsEx
GetTcpStatisticsEx
user32
CharToOemBuffA
Sections
.text Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 892B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
wintaylor2.1/Programs/tools/vista/at.exe.exe windows:6 windows x86
3e5c25d5a3ddfbbc4cb526c5d4df8c54
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
advapi32
RegQueryValueExW
RegOpenKeyExW
RegCloseKey
kernel32
WideCharToMultiByte
FormatMessageW
GetConsoleMode
GetFileType
GetStdHandle
WriteFile
WriteConsoleW
LocalFree
GetConsoleOutputCP
GetTimeFormatW
GetThreadLocale
GetSystemTime
MultiByteToWideChar
ReadConsoleW
GetCommandLineW
LoadLibraryW
GetLastError
ExpandEnvironmentStringsW
SetThreadUILanguage
GetCPInfo
HeapSetInformation
GetProfileStringA
FreeLibrary
LoadLibraryExW
LocalAlloc
GetProfileIntA
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
GetModuleHandleA
InterlockedCompareExchange
Sleep
InterlockedExchange
msvcrt
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler4_common
_amsg_exit
_initterm
__initenv
_XcptFilter
_stricmp
_exit
_cexit
__getmainargs
_controlfp
strcpy_s
strcat_s
memset
strpbrk
strspn
sscanf
_iob
fgets
strchr
wcsrchr
wcstok
wcschr
_wcsupr
exit
_wcsicmp
malloc
free
_vsnwprintf
wcscpy_s
_itoa_s
netapi32
NetScheduleJobAdd
NetScheduleJobDel
NetScheduleJobEnum
NetApiBufferFree
NetScheduleJobGetInfo
shell32
CommandLineToArgvW
ntdll
NtQuerySystemTime
RtlTimeToSecondsSince1970
Sections
.text Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
wintaylor2.1/Programs/tools/vista/cmd.exe.exe windows:6 windows x86
a6f8a7ffe976ee0405919bfd7236c2ec
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
advapi32
RevertToSelf
SaferRecordEventLogEntry
ImpersonateLoggedOnUser
SaferCloseLevel
SaferComputeTokenFromLevel
SaferIdentifyLevel
RegCloseKey
RegQueryValueExW
RegOpenKeyExW
RegEnumKeyW
RegDeleteValueW
RegOpenKeyW
RegDeleteKeyW
RegSetValueW
CreateProcessAsUserW
RegSetValueExW
RegCreateKeyExW
LookupAccountSidW
GetSecurityDescriptorOwner
GetFileSecurityW
kernel32
SetFilePointer
lstrcmpW
lstrcmpiW
HeapFree
GetProcessHeap
MultiByteToWideChar
ReadFile
SetThreadLocale
GetProcAddress
GetModuleHandleW
VirtualQuery
HeapAlloc
CloseHandle
WriteConsoleW
FillConsoleOutputCharacterW
SetConsoleCursorPosition
ReadConsoleW
GetConsoleScreenBufferInfo
GetStdHandle
GetFileType
GetLastError
WideCharToMultiByte
GetFileSize
FlushConsoleInputBuffer
GetCPInfo
GetConsoleOutputCP
CreateFileW
FindClose
FindNextFileW
FindFirstFileW
GetFullPathNameW
GetUserDefaultLCID
SetLocalTime
SystemTimeToFileTime
GetSystemTime
FileTimeToSystemTime
GetLocaleInfoW
GetDateFormatW
FileTimeToLocalFileTime
GetTimeFormatW
GetLocalTime
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetEnvironmentVariableW
SetEnvironmentStringsW
SetConsoleMode
GetConsoleMode
GetCommandLineW
GetEnvironmentVariableW
SetErrorMode
SetLastError
ReadProcessMemory
LoadLibraryW
GetConsoleWindow
CreateProcessW
GetCurrentThreadId
DeleteProcThreadAttributeList
UpdateProcThreadAttribute
InitializeProcThreadAttributeList
GetBinaryTypeW
NeedCurrentDirectoryForExePathW
GetFileAttributesW
GetConsoleTitleW
MoveFileExW
LocalFree
SetConsoleTitleW
MoveFileW
SetFilePointerEx
WriteFile
SearchPathW
GetVolumeInformationW
LeaveCriticalSection
EnterCriticalSection
CancelSynchronousIo
ExpandEnvironmentStringsW
GetModuleFileNameW
GetVersion
GetWindowsDirectoryW
SetConsoleCtrlHandler
InitializeCriticalSection
GetDriveTypeW
GetFileAttributesExW
HeapSetInformation
OpenThread
VirtualFree
VirtualAlloc
HeapSize
HeapReAlloc
FlushFileBuffers
DuplicateHandle
FormatMessageW
ScrollConsoleScreenBufferW
SetConsoleTextAttribute
FillConsoleOutputAttribute
CreateDirectoryW
SetFileTime
DeleteFileW
SetEndOfFile
SetFileAttributesW
CopyFileW
GetExitCodeProcess
WaitForSingleObject
TerminateProcess
SetCurrentDirectoryW
GetCurrentDirectoryW
RemoveDirectoryW
CompareFileTime
GetDiskFreeSpaceExW
FindNextStreamW
FindFirstStreamW
DeviceIoControl
ResumeThread
SetProcessAffinityMask
GetSystemInfo
GetThreadLocale
GetVolumePathNameW
CreateSymbolicLinkW
CreateHardLinkW
RaiseException
LoadLibraryA
FreeLibrary
LocalAlloc
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
GetModuleHandleA
InterlockedCompareExchange
Sleep
InterlockedExchange
GetVDMCurrentDirectories
CmdBatNotification
msvcrt
wcsrchr
rand
iswalpha
wcstoul
_errno
_local_unwind4
wcsstr
_setjmp3
exit
fflush
srand
time
_wtol
iswxdigit
wcsncmp
_setmode
_pipe
_ultoa
swscanf
_close
_open_osfhandle
_dup
_dup2
qsort
_wcslwr
free
calloc
__getmainargs
_cexit
_exit
_XcptFilter
memcpy
_initterm
_amsg_exit
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler4_common
_controlfp
feof
_pclose
memmove
wcschr
_tell
iswspace
memset
wcsspn
towupper
longjmp
_wcsnicmp
_wcsicmp
_vsnwprintf
printf
_iob
fprintf
towlower
realloc
_get_osfhandle
_getch
iswdigit
wcstol
setlocale
_wcsupr
_wpopen
ferror
__initenv
fgets
user32
GetThreadDesktop
GetProcessWindowStation
GetUserObjectInformationW
MessageBeep
ntdll
RtlDosPathNameToNtPathName_U
NtFsControlFile
RtlFreeHeap
RtlNtStatusToDosError
NtQueryInformationToken
NtClose
NtOpenProcessToken
NtOpenThreadToken
mpr
WNetAddConnection2W
WNetCancelConnection2W
WNetGetConnectionW
Sections
.text Size: 138KB - Virtual size: 137KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 114KB - Virtual size: 114KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 52KB - Virtual size: 51KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
wintaylor2.1/Programs/tools/vista/cmdenv.bat.bat .vbs
-
wintaylor2.1/Programs/tools/vista/doskey.exe.exe windows:6 windows x86
955f46d2f3998d54b33f907930362048
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
ulib
?QueryInvalidArgument@ARGUMENT_LEXEMIZER@@QAEPAVWSTRING@@XZ
??1PATH_ARGUMENT@@UAE@XZ
??1STRING_ARGUMENT@@UAE@XZ
?Set@STREAM_MESSAGE@@UAEEKW4MESSAGE_TYPE@@K@Z
??1ARGUMENT_LEXEMIZER@@UAE@XZ
??1STREAM_MESSAGE@@UAE@XZ
?IsValueSet@ARGUMENT@@QAEEXZ
?DoParsing@ARGUMENT_LEXEMIZER@@QAEEPAVARRAY@@@Z
?Put@ARRAY@@UAEEPAVOBJECT@@@Z
?Initialize@REST_OF_LINE_ARGUMENT@@QAEEXZ
?Initialize@STRING_ARGUMENT@@QAEEPAD@Z
?Initialize@PATH_ARGUMENT@@QAEEPADE@Z
?Initialize@LONG_ARGUMENT@@QAEEPAD@Z
?Initialize@FLAG_ARGUMENT@@QAEEPAD@Z
??0STREAM_MESSAGE@@QAE@XZ
??0ARGUMENT_LEXEMIZER@@QAE@XZ
??0ARRAY@@QAE@XZ
??0STRING_ARGUMENT@@QAE@XZ
??0FLAG_ARGUMENT@@QAE@XZ
??0LONG_ARGUMENT@@QAE@XZ
??0PATH_ARGUMENT@@QAE@XZ
??0REST_OF_LINE_ARGUMENT@@QAE@XZ
?Get_Standard_Input_Stream@@YGPAVSTREAM@@XZ
?Get_Standard_Output_Stream@@YGPAVSTREAM@@XZ
?Initialize@STREAM_MESSAGE@@QAEEPAVSTREAM@@00@Z
?Initialize@ARRAY@@QAEEKK@Z
?Initialize@ARGUMENT_LEXEMIZER@@QAEEPAVARRAY@@@Z
?SetCaseSensitive@ARGUMENT_LEXEMIZER@@QAEXE@Z
?PutSeparators@ARGUMENT_LEXEMIZER@@QAEXPBD@Z
?PrepareToParse@ARGUMENT_LEXEMIZER@@QAEEPAVWSTRING@@@Z
??1ARRAY@@UAE@XZ
??1OBJECT@@UAE@XZ
?QueryFile@SYSTEM@@SGPAVFSN_FILE@@PBVPATH@@EPAE@Z
?QueryStream@FSN_FILE@@QAEPAVFILE_STREAM@@W4STREAMACCESS@@K@Z
?ReadLine@STREAM@@QAEEPAVWSTRING@@E@Z
?Initialize@WSTRING@@QAEEPBV1@KK@Z
?QueryWSTR@WSTRING@@QBEPAGKKPAGKE@Z
??0DSTRING@@QAE@XZ
?Initialize@WSTRING@@QAEEPBGK@Z
?Strcat@WSTRING@@QAEEPBV1@@Z
??1DSTRING@@UAE@XZ
?DeleteChAt@WSTRING@@QAEXKK@Z
?Display@MESSAGE@@QAAEPBDZZ
?Initialize@WSTRING@@QAEEPBDK@Z
kernel32
GetConsoleAliasExesLengthW
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
GetModuleHandleA
InterlockedCompareExchange
Sleep
InterlockedExchange
HeapSetInformation
ExpungeConsoleCommandHistoryW
SetConsoleNumberOfCommandsW
GetStdHandle
GetConsoleMode
SetConsoleMode
GetConsoleCommandHistoryLengthW
GetConsoleCommandHistoryW
AddConsoleAliasW
SetUnhandledExceptionFilter
GetConsoleAliasExesW
GetConsoleAliasesLengthW
GetConsoleAliasesW
ntdll
wcschr
RtlFreeHeap
RtlAllocateHeap
_wcsicmp
msvcrt
_controlfp
_except_handler4_common
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_amsg_exit
_initterm
__initenv
exit
_XcptFilter
_exit
_cexit
__getmainargs
Sections
.text Size: 10KB - Virtual size: 10KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 892B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 824B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
wintaylor2.1/Programs/tools/vista/find.exe.exe windows:6 windows x86
0786f8c0aea5d7c66705749df4c02f04
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CompareStringW
HeapSetInformation
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
GetModuleHandleA
InterlockedCompareExchange
Sleep
InterlockedExchange
SetUnhandledExceptionFilter
msvcrt
__set_app_type
_except_handler4_common
_controlfp
_wcsupr
__getmainargs
_cexit
_exit
_XcptFilter
__initenv
_initterm
_amsg_exit
__setusermatherr
_adjust_fdiv
__p__commode
exit
__p__fmode
ulib
??1DSTRING@@UAE@XZ
??1MULTIPLE_PATH_ARGUMENT@@UAE@XZ
??1STREAM_MESSAGE@@UAE@XZ
??1OBJECT@@UAE@XZ
?Initialize@WSTRING@@QAEEPBGK@Z
?ReadLine@STREAM@@QAEEPAVWSTRING@@E@Z
?GetStandardError@PROGRAM@@UAEPAVSTREAM@@XZ
?Initialize@WSTRING@@QAEEXZ
?QueryStream@FSN_FILE@@QAEPAVFILE_STREAM@@W4STREAMACCESS@@K@Z
?QueryFile@SYSTEM@@SGPAVFSN_FILE@@PBVPATH@@EPAE@Z
?IsDrive@PATH@@QBEEXZ
?QueryDirectory@SYSTEM@@SGPAVFSN_DIRECTORY@@PBVPATH@@E@Z
?Initialize@WSTRING@@QAEEPBV1@KK@Z
?IsValueSet@ARGUMENT@@QAEEXZ
?GetStandardOutput@PROGRAM@@UAEPAVSTREAM@@XZ
?PrepareToParse@ARGUMENT_LEXEMIZER@@QAEEPAVWSTRING@@@Z
?SetCaseSensitive@ARGUMENT_LEXEMIZER@@QAEXE@Z
?PutSeparators@ARGUMENT_LEXEMIZER@@QAEXPBD@Z
??1PROGRAM@@UAE@XZ
?Initialize@ARGUMENT_LEXEMIZER@@QAEEPAVARRAY@@@Z
?Put@ARRAY@@UAEEPAVOBJECT@@@Z
?Initialize@MULTIPLE_PATH_ARGUMENT@@QAEEPADEE@Z
?Initialize@FLAG_ARGUMENT@@QAEEPAD@Z
?Initialize@STRING_ARGUMENT@@QAEEPAD@Z
?Initialize@ARRAY@@QAEEKK@Z
?IsCorrectVersion@SYSTEM@@SGEXZ
??1ARGUMENT_LEXEMIZER@@UAE@XZ
??1ARRAY@@UAE@XZ
??1STRING_ARGUMENT@@UAE@XZ
?Initialize@PROGRAM@@QAEEKKK@Z
??0FLAG_ARGUMENT@@QAE@XZ
??0STRING_ARGUMENT@@QAE@XZ
??0ARRAY@@QAE@XZ
??0ARGUMENT_LEXEMIZER@@QAE@XZ
?Initialize@CLASS_DESCRIPTOR@@QAEEXZ
??0CLASS_DESCRIPTOR@@QAE@XZ
?ValidateVersion@PROGRAM@@UBEXKK@Z
?PutSwitches@ARGUMENT_LEXEMIZER@@QAEXPBD@Z
?Usage@PROGRAM@@UBEXXZ
?GetStandardInput@PROGRAM@@UAEPAVSTREAM@@XZ
?Fatal@PROGRAM@@UBEXXZ
?Fatal@PROGRAM@@UBAXKKPADZZ
?DisplayMessage@PROGRAM@@UBEEKW4MESSAGE_TYPE@@@Z
?DisplayMessage@PROGRAM@@UBAEKW4MESSAGE_TYPE@@PADZZ
?Compare@OBJECT@@UBEJPBV1@@Z
??0PROGRAM@@IAE@XZ
??0DSTRING@@QAE@XZ
??0MULTIPLE_PATH_ARGUMENT@@QAE@XZ
??0STREAM_MESSAGE@@QAE@XZ
?Initialize@WSTRING@@QAEEPBDK@Z
?DoParsing@ARGUMENT_LEXEMIZER@@QAEEPAVARRAY@@@Z
?SetConsoleConversions@WSTRING@@SGXXZ
ntdll
RtlAllocateHeap
RtlFreeHeap
Sections
.text Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 884B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 472B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
wintaylor2.1/Programs/tools/vista/findstr.exe.exe windows:6 windows x86
8b31cb09283a561cd0e0797b5eb7d576
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
FindClose
FindNextFileA
FindFirstFileA
ReadFile
WriteFile
LeaveCriticalSection
SetConsoleTextAttribute
GetStdHandle
EnterCriticalSection
SetFileApisToOEM
IsDBCSLeadByte
GetLastError
FormatMessageA
CreateFileA
GetFileAttributesA
ExitProcess
SetConsoleCtrlHandler
InitializeCriticalSection
UnmapViewOfFile
CloseHandle
MapViewOfFile
CreateFileMappingA
GetFileSize
SetCurrentDirectoryA
GetCurrentDirectoryA
lstrlenA
GetConsoleOutputCP
GetConsoleScreenBufferInfo
SetThreadPreferredUILanguages
HeapSetInformation
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
GetModuleHandleA
InterlockedCompareExchange
Sleep
InterlockedExchange
SetUnhandledExceptionFilter
msvcrt
strcpy_s
strcat_s
_splitpath_s
malloc
fprintf
isalnum
isspace
isprint
_iob
_ultoa
strchr
fclose
fgets
fopen
_itoa
_isatty
tolower
isxdigit
_stricmp
_setmode
_fileno
strncpy_s
_wsetlocale
clock
memset
__getmainargs
_cexit
_exit
_XcptFilter
__initenv
_initterm
_amsg_exit
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler4_common
_controlfp
swprintf_s
isalpha
_strupr
_strnicoll
_strncoll
memmove
memcpy
exit
free
strcspn
strcoll
isupper
_strlwr
islower
sprintf_s
user32
CharToOemA
ntdll
RtlUnicodeToOemN
DbgPrint
RtlMultiByteToUnicodeN
Sections
.text Size: 20KB - Virtual size: 19KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 35KB - Virtual size: 35KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
wintaylor2.1/Programs/tools/vista/hostname.exe.exe windows:6 windows x86
ef52f5de033253957b04d94f40995f21
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetLastError
SetThreadUILanguage
HeapSetInformation
Sleep
FormatMessageA
LocalFree
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
GetModuleHandleA
InterlockedCompareExchange
InterlockedExchange
msvcrt
_controlfp
_except_handler4_common
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_amsg_exit
_initterm
__initenv
_XcptFilter
_exit
_cexit
__getmainargs
exit
strchr
_write
puts
user32
CharToOemBuffA
ws2_32
gethostname
WSAStartup
mswsock
s_perror
Sections
.text Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 444B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
wintaylor2.1/Programs/tools/vista/ipconfig.exe.exe windows:6 windows x86
3c5c5ae799a239e61aa1b3d3423004e5
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
advapi32
RegOpenKeyExW
RegCloseKey
RegSetValueExW
RegQueryValueExW
CheckTokenMembership
FreeSid
AllocateAndInitializeSid
kernel32
GlobalFree
GetCommandLineW
SetThreadUILanguage
HeapSetInformation
CompareStringW
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
GetModuleHandleA
InterlockedCompareExchange
Sleep
InterlockedExchange
GetFileType
WriteConsoleW
GetComputerNameExW
GetProcessHeap
HeapAlloc
HeapFree
MultiByteToWideChar
FileTimeToLocalFileTime
FileTimeToSystemTime
GetDateFormatW
GetLastError
GetTimeFormatW
FormatMessageW
GetStdHandle
GetSystemTimeAsFileTime
LocalAlloc
LocalFree
LoadLibraryW
GetProcAddress
FreeLibrary
msvcrt
toupper
memset
memcpy
_vsnwprintf
printf
exit
setlocale
__getmainargs
_cexit
_exit
_XcptFilter
__initenv
_amsg_exit
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler4_common
_controlfp
_initterm
dnsapi
DnsGetCacheDataTable
DnsResolverOp
DnsFree
DnsQuery_W
DnsFreeConfigStructure
DnsQueryConfigAllocEx
DnsFlushResolverCache
ws2_32
inet_ntoa
iphlpapi
SetCurrentThreadCompartmentId
ConvertLengthToIpv4Mask
GetNetworkParams
ConvertInterfaceIndexToLuid
ConvertInterfaceLuidToNameW
GetAdaptersAddresses
ConvertInterfaceLuidToGuid
GetCurrentThreadCompartmentId
ConvertGuidToStringW
dhcpcsvc
DhcpEnumClasses
DhcpReleaseParameters
DhcpAcquireParameters
DhcpHandlePnPEvent
dhcpcsvc6
Dhcpv6ReleaseParameters
Dhcpv6AcquireParameters
nsi
NsiSetAllParameters
NsiGetAllParameters
NsiFreeTable
NsiAllocateAndGetTable
ntdll
RtlStringFromGUID
RtlIpv6AddressToStringExW
RtlIpv4AddressToStringExW
DbgPrint
RtlIpv6AddressToStringW
RtlFreeUnicodeString
shell32
CommandLineToArgvW
ole32
CoInitializeEx
CoUninitialize
CoTaskMemFree
CoCreateInstance
Sections
.text Size: 18KB - Virtual size: 18KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 808B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
wintaylor2.1/Programs/tools/vista/mem.exe
-
wintaylor2.1/Programs/tools/vista/nbtstat.exe.exe windows:6 windows x86
9e91c463b702b73d72aa8ed0a42b797d
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
advapi32
RegQueryValueExA
RegOpenKeyExA
RegCloseKey
kernel32
LocalFree
LocalAlloc
Sleep
SetThreadUILanguage
HeapSetInformation
SetUnhandledExceptionFilter
MultiByteToWideChar
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
WideCharToMultiByte
InterlockedExchange
InterlockedCompareExchange
GetModuleHandleA
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
FormatMessageA
msvcrt
_write
_controlfp
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_amsg_exit
_initterm
__initenv
_XcptFilter
_exit
_cexit
__getmainargs
exit
atoi
memset
memmove
isprint
_vsnprintf
_except_handler4_common
ntdll
RtlExtendedLargeIntegerDivide
NtClose
RtlUnicodeStringToAnsiString
RtlFreeAnsiString
RtlUpcaseUnicodeStringToOemString
RtlIpv4AddressToStringA
NtDeviceIoControlFile
NtWaitForSingleObject
RtlInitString
RtlAnsiStringToUnicodeString
NtCreateFile
RtlFreeUnicodeString
RtlInitUnicodeString
RtlGUIDFromString
user32
CharToOemBuffA
OemToCharBuffA
wsock32
ord1108
ioctlsocket
ntohl
iphlpapi
NhGetInterfaceNameFromDeviceGuid
Sections
.text Size: 10KB - Virtual size: 9KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 43KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 794B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
wintaylor2.1/Programs/tools/vista/net.exe.exe windows:6 windows x86
1e849117fce3f6703fd1ca7b05bcee7c
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
advapi32
RegQueryValueExW
RegOpenKeyExW
RegSetValueExW
RegCreateKeyExW
RegEnumValueW
RegCloseKey
kernel32
SetThreadUILanguage
GetCPInfo
GetConsoleOutputCP
GetLastError
HeapSetInformation
GetExitCodeProcess
WaitForSingleObject
CloseHandle
CreateProcessW
GetSystemDirectoryW
GetDriveTypeW
GetProcAddress
FreeLibrary
InterlockedCompareExchange
LoadLibraryA
LocalAlloc
GetStdHandle
LoadLibraryW
WriteConsoleW
WideCharToMultiByte
WriteFile
FormatMessageW
LocalFree
SetLastError
GetModuleFileNameW
PeekConsoleInputW
GetConsoleMode
SetConsoleMode
ReadConsoleW
GetFileType
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
GetModuleHandleA
Sleep
InterlockedExchange
DelayLoadFailureHook
GetCommandLineW
GetConsoleScreenBufferInfo
GetVersion
msvcrt
_controlfp
_except_handler4_common
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_amsg_exit
_initterm
__initenv
_XcptFilter
_exit
_cexit
__getmainargs
wcsrchr
wcsncpy_s
wcsncmp
qsort
_ultow
wcspbrk
iswctype
_wcsupr
_wcsicmp
wcschr
wcscpy_s
wcscat_s
exit
sprintf_s
setlocale
_wcsnicmp
memset
_iob
_fileno
_setmode
free
_vsnwprintf_s
_snwprintf_s
putchar
malloc
wcsspn
wcscspn
calloc
wcsncat_s
_wcsdup
wcstok
_local_unwind4
memmove
_ultoa
__set_app_type
netapi32
NetApiBufferFree
NetUseEnum
NetUseGetInfo
I_NetPathType
NetUserGetInfo
NetShareEnum
NetapipBufferAllocate
NetApiBufferAllocate
NetApiBufferReallocate
I_NetNameValidate
NetWkstaUserGetInfo
NetServerEnum
NetServerGetInfo
NetWkstaGetInfo
mpr
WNetAddConnection2W
WNetCancelConnection2W
WNetGetLastErrorW
WNetGetConnectionW
WNetOpenEnumW
WNetEnumResourceW
WNetCloseEnum
iphlpapi
GetCurrentThreadCompartmentId
ntdll
RtlInitUnicodeString
RtlInitAnsiString
RtlOemStringToUnicodeString
RtlAllocateHeap
Sections
.text Size: 33KB - Virtual size: 33KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 7KB - Virtual size: 49KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
wintaylor2.1/Programs/tools/vista/netstat.exe.exe windows:6 windows x86
d30856e7732e9a416eac49e150ed2d93
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
advapi32
AdjustTokenPrivileges
LookupPrivilegeValueA
OpenProcessToken
CheckTokenMembership
FreeSid
AllocateAndInitializeSid
kernel32
GetProcessHeap
Sleep
SetThreadUILanguage
HeapSetInformation
CloseHandle
GetSystemDirectoryA
OpenProcess
GetLastError
CompareStringA
LoadLibraryA
GetSystemDirectoryW
LoadLibraryW
GetProcAddress
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
GetModuleHandleA
InterlockedCompareExchange
InterlockedExchange
FreeLibrary
FormatMessageW
FormatMessageA
LocalFree
GetCurrentProcess
HeapFree
msvcrt
__p__fmode
__set_app_type
_except_handler4_common
_controlfp
_amsg_exit
_initterm
__initenv
_adjust_fdiv
_exit
_cexit
__getmainargs
_strupr
sscanf
toupper
_XcptFilter
__p__commode
__setusermatherr
memset
strchr
system
exit
time
_iob
_fileno
_setmode
fprintf
_vsnprintf
dbghelp
SymCleanup
psapi
GetModuleBaseNameA
iphlpapi
InternalGetTcpTableWithOwnerModule
InternalGetTcp6Table2
InternalGetUdpTableWithOwnerModule
InternalGetTcp6TableWithOwnerModule
InternalGetTcpTable2
GetTcpStatisticsEx
GetIcmpStatisticsEx
GetIpStatisticsEx
GetUdpStatisticsEx
InternalGetUdp6TableWithOwnerModule
user32
CharToOemBuffA
CharToOemBuffW
ws2_32
htons
gethostname
ntohs
WSAStartup
ntohl
getnameinfo
snmpapi
SnmpUtilVarBindFree
SnmpUtilMemFree
SnmpUtilMemAlloc
SnmpUtilOidCpy
Sections
.text Size: 18KB - Virtual size: 18KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
wintaylor2.1/Programs/tools/vista/reg.exe.exe windows:6 windows x86
974e52aa59355fa7b64a1262c43a76e2
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
advapi32
RegCloseKey
RegConnectRegistryW
RegQueryValueExW
RegOpenKeyW
RegSetValueExW
RegCreateKeyExW
RegOpenKeyExW
RegEnumKeyExW
RegEnumValueW
RegQueryInfoKeyW
AdjustTokenPrivileges
LookupPrivilegeValueW
OpenProcessToken
RegSaveKeyW
RegSaveKeyExW
RegRestoreKeyW
RegLoadKeyW
RegUnLoadKeyW
RegGetValueW
RegDeleteKeyW
RegDeleteValueW
RegEnumKeyW
RegCreateKeyW
RegFlushKey
RegSetValueW
RegSetValueExA
kernel32
SetLastError
LocalFree
GetLastError
DeleteFileW
GetTempFileNameW
GetTempPathW
CloseHandle
GetCurrentProcess
CopyFileW
CreateFileW
MultiByteToWideChar
ReadFile
WriteFile
LocalAlloc
lstrcmpW
LocalReAlloc
WideCharToMultiByte
lstrlenW
OutputDebugStringW
SetFilePointer
GetFileSize
SearchPathW
HeapReAlloc
HeapFree
HeapSize
HeapAlloc
GetProcessHeap
HeapValidate
GetThreadLocale
CompareStringW
GetFileType
GetStdHandle
GetConsoleMode
WriteConsoleW
FormatMessageW
SetThreadUILanguage
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
GetModuleHandleA
InterlockedCompareExchange
Sleep
ExitProcess
GetConsoleOutputCP
InterlockedExchange
msvcrt
_get_osfhandle
_errno
_fileno
_controlfp
_except_handler4_common
__set_app_type
__p__fmode
_adjust_fdiv
__setusermatherr
_amsg_exit
_initterm
__winitenv
exit
_XcptFilter
_exit
_cexit
__wgetmainargs
_resetstkoflw
_vsnwprintf
memset
__iob_func
fflush
fgetwc
__p__commode
fprintf
ntdll
wcstol
wcstoul
_memicmp
NtSetInformationKey
NtQueryKey
user32
LoadStringW
CharNextW
IsCharAlphaNumericW
CharUpperW
ws2_32
WSACleanup
shlwapi
StrChrW
StrToIntW
StrChrIW
StrDupW
StrStrIW
StrStrW
Sections
.text Size: 53KB - Virtual size: 52KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 1KB - Virtual size: 257KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
wintaylor2.1/Programs/tools/vista/route.exe.exe windows:6 windows x86
97bb8ed0e3fdd8a3ddecd96d1be3a6be
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
GetModuleHandleA
InterlockedCompareExchange
Sleep
InterlockedExchange
SetThreadUILanguage
HeapSetInformation
GetVersion
GetProcessHeap
HeapFree
HeapAlloc
FormatMessageA
GetSystemTimeAsFileTime
LocalFree
msvcrt
_initterm
__initenv
_XcptFilter
_exit
_cexit
__getmainargs
malloc
realloc
free
_amsg_exit
__set_app_type
_stricmp
atoi
strtol
toupper
exit
printf
memset
isdigit
_vsnprintf
_iob
_controlfp
_strupr
_except_handler4_common
fprintf
_setmode
_fileno
__p__fmode
__p__commode
_adjust_fdiv
strchr
__setusermatherr
iphlpapi
ConvertIpv4MaskToLength
ConvertInterfaceIndexToLuid
GetAdaptersAddresses
ConvertInterfaceLuidToIndex
ConvertLengthToIpv4Mask
GetIpAddrTable
GetBestInterfaceEx
user32
CharToOemBuffA
ws2_32
inet_ntoa
WSAStartup
ntdll
RtlIpv6StringToAddressA
RtlIpv4AddressToStringA
RtlIpv4StringToAddressA
RtlIpv6AddressToStringA
nsi
NsiAllocateAndGetTable
NsiGetParameter
NsiSetAllParameters
NsiFreeTable
advapi32
CheckTokenMembership
AllocateAndInitializeSid
FreeSid
Sections
.text Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 728B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
wintaylor2.1/Programs/tools/vista/systeminfo.exe.exe windows:6 windows x86
b9ced44eac8e0a2bde56fe3707789ce0
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
advapi32
RegQueryValueExW
RegCloseKey
RegOpenKeyExW
RegConnectRegistryW
kernel32
WriteConsoleW
SetConsoleCursorPosition
GetNumberFormatW
GetLocaleInfoW
GetConsoleScreenBufferInfo
GetLastError
InterlockedDecrement
GetStdHandle
InterlockedIncrement
LocalAlloc
lstrlenW
FormatMessageW
GetModuleFileNameW
GetComputerNameExW
FileTimeToSystemTime
ExitProcess
GetConsoleOutputCP
SetConsoleMode
ReadFile
GetDateFormatW
HeapReAlloc
HeapFree
HeapSize
HeapAlloc
GetProcessHeap
HeapValidate
WideCharToMultiByte
MultiByteToWideChar
CompareStringA
GetThreadLocale
CompareStringW
lstrlenA
GetUserDefaultLCID
GetFileType
GetConsoleMode
VerSetConditionMask
VerifyVersionInfoW
SetThreadUILanguage
GetVersion
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
InterlockedExchange
LocalFree
GetTimeFormatW
SetLastError
ReadConsoleW
InterlockedCompareExchange
GetModuleHandleA
QueryPerformanceCounter
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
Sleep
msvcrt
_XcptFilter
fprintf
fflush
wcstol
wcstoul
wcstod
_vsnwprintf
_controlfp
_except_handler4_common
?terminate@@YAXXZ
??1type_info@@UAE@XZ
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_amsg_exit
_initterm
__winitenv
exit
wcstok
_exit
_cexit
__wgetmainargs
_CxxThrowException
memcpy
_wcsicmp
_wtoi64
_ui64tow
??2@YAPAXI@Z
__iob_func
??3@YAXPAX@Z
memset
__CxxFrameHandler3
_memicmp
_get_osfhandle
_errno
_fileno
user32
LoadStringW
CharUpperW
wsprintfW
mpr
WNetCancelConnection2W
WNetGetLastErrorW
ole32
CoTaskMemFree
CoTaskMemAlloc
CoCreateInstance
CoInitializeSecurity
CoInitializeEx
CoUninitialize
oleaut32
VariantClear
VariantChangeType
SysAllocStringByteLen
SafeArrayGetElement
VariantCopy
SafeArrayGetLBound
VariantInit
SafeArrayGetUBound
SysFreeString
SysAllocString
SysStringLen
framedynos
??0CHString@@QAE@PBG@Z
?Mid@CHString@@QBE?AV1@H@Z
??H@YG?AVCHString@@PBGABV0@@Z
??YCHString@@QAEABV0@ABV0@@Z
?Format@CHString@@QAAXPBGZZ
?Mid@CHString@@QBE?AV1@HH@Z
?GetBuffer@CHString@@QAEPAGH@Z
?ReleaseBuffer@CHString@@QAEXH@Z
??0CHString@@QAE@XZ
??1CHString@@QAE@XZ
?Right@CHString@@QBE?AV1@H@Z
?Empty@CHString@@QAEXXZ
?Left@CHString@@QBE?AV1@H@Z
?FindOneOf@CHString@@QBEHPBG@Z
??4CHString@@QAEABV0@ABV0@@Z
??4CHString@@QAEABV0@PBG@Z
?GetData@CHString@@IBEPAUCHStringData@@XZ
?GetBufferSetLength@CHString@@QAEPAGH@Z
?Compare@CHString@@QBEHPBG@Z
?Find@CHString@@QBEHG@Z
secur32
GetUserNameExW
ws2_32
WSAStartup
WSAGetLastError
WSACleanup
FreeAddrInfoW
GetNameInfoW
GetAddrInfoW
shlwapi
StrStrIW
StrStrW
StrChrIW
StrChrW
ord487
version
GetFileVersionInfoSizeW
GetFileVersionInfoW
VerQueryValueW
Sections
.text Size: 66KB - Virtual size: 66KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
wintaylor2.1/Programs/tools/vista/tracert.exe.exe windows:6 windows x86
ff01fd972202913ed0b405f5e7860ad8
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
SetThreadUILanguage
InterlockedCompareExchange
InterlockedExchange
HeapSetInformation
GetLastError
GetModuleHandleA
Sleep
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
TerminateProcess
GetCurrentProcess
FormatMessageA
LocalFree
SetUnhandledExceptionFilter
UnhandledExceptionFilter
QueryPerformanceCounter
msvcrt
_controlfp
_except_handler4_common
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_amsg_exit
_initterm
__initenv
_XcptFilter
_exit
_cexit
__getmainargs
memset
memcpy
exit
strtoul
_write
icmp
IcmpSendEcho2
IcmpCloseHandle
IcmpCreateFile
iphlpapi
Icmp6CreateFile
Icmp6SendEcho2
user32
CharToOemBuffA
ws2_32
WSACleanup
freeaddrinfo
getaddrinfo
WSAStartup
getnameinfo
inet_addr
closesocket
WSAIoctl
WSAGetLastError
socket
Sections
.text Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 550B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
wintaylor2.1/Programs/tools/vista/whoami.exe.exe windows:6 windows x86
7d20beb74f84143fc4e2cfa2bbd97bf3
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
advapi32
LookupPrivilegeNameW
LookupPrivilegeDisplayNameW
CopySid
GetLengthSid
AdjustTokenPrivileges
LookupPrivilegeValueW
OpenProcessToken
LookupAccountSidW
GetSidSubAuthority
GetSidSubAuthorityCount
GetSidIdentifierAuthority
IsValidSid
GetTokenInformation
kernel32
GetLastError
SetLastError
SetThreadUILanguage
HeapSetInformation
CloseHandle
GetCurrentProcess
FileTimeToSystemTime
GetTimeFormatW
GetModuleFileNameW
ExitProcess
GetConsoleOutputCP
WriteConsoleW
HeapReAlloc
HeapFree
HeapSize
HeapAlloc
GetProcessHeap
HeapValidate
WideCharToMultiByte
CompareStringA
GetThreadLocale
CompareStringW
lstrlenW
GetFileType
GetStdHandle
GetConsoleMode
VerSetConditionMask
VerifyVersionInfoW
FormatMessageW
LocalFree
InterlockedCompareExchange
Sleep
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
GetSystemTimeAsFileTime
InterlockedExchange
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetModuleHandleA
msvcrt
_controlfp
_except_handler4_common
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_amsg_exit
_initterm
__winitenv
exit
_XcptFilter
_exit
_cexit
__wgetmainargs
??2@YAPAXI@Z
??3@YAXPAX@Z
memset
_ultow
_vsnwprintf
__CxxFrameHandler3
_iob
_memicmp
_get_osfhandle
_errno
_fileno
wcstod
wcstoul
wcstol
fflush
fprintf
__iob_func
wcstok
user32
CharUpperW
LoadStringW
CharLowerW
secur32
GetUserNameExW
ws2_32
WSACleanup
shlwapi
StrChrW
StrChrIW
StrStrW
StrStrIW
version
GetFileVersionInfoSizeW
VerQueryValueW
GetFileVersionInfoW
Sections
.text Size: 36KB - Virtual size: 36KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
wintaylor2.1/Programs/tools/xp/arp.exe.exe windows:5 windows x86
880bb6799a6e1a5ff7b4f022ff4003a9
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvcrt
_cexit
_XcptFilter
_exit
_c_exit
toupper
sprintf
sscanf
__set_app_type
fprintf
_setmode
_iob
time
exit
isdigit
isxdigit
islower
_except_handler3
__p__fmode
_controlfp
isspace
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
__initenv
kernel32
GetModuleHandleA
GetLastError
GetSystemDirectoryA
GetProcAddress
LoadLibraryA
FormatMessageA
LocalFree
snmpapi
SnmpUtilVarBindFree
SnmpUtilMemFree
SnmpUtilMemAlloc
SnmpUtilOidCpy
ws2_32
gethostbyname
inet_addr
ntohl
WSAStartup
iphlpapi
GetUdpStatsFromStackEx
GetTcpStatsFromStackEx
GetIpStatsFromStackEx
GetIcmpStatsFromStackEx
user32
CharToOemBuffA
Sections
.text Size: 10KB - Virtual size: 9KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
wintaylor2.1/Programs/tools/xp/at.exe.exe windows:5 windows x86
3903d472502c3b078763a01265f6e2ad
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvcrt
__setusermatherr
_initterm
__getmainargs
__initenv
_cexit
_XcptFilter
_adjust_fdiv
_c_exit
_iob
fgets
strchr
wcsncpy
wcsrchr
wcstok
__p__commode
__p__fmode
__set_app_type
_vsnwprintf
_except_handler3
_controlfp
_exit
wcschr
_wcsupr
wcslen
exit
_wcsicmp
malloc
free
sscanf
strspn
strpbrk
_stricmp
wcscpy
_itoa
wcscmp
advapi32
RegQueryValueExW
RegCloseKey
RegOpenKeyExW
kernel32
LocalAlloc
GetProfileIntA
GetProfileStringA
SetThreadUILanguage
GetModuleHandleA
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
QueryPerformanceCounter
GetCPInfo
ExpandEnvironmentStringsW
GetLastError
LoadLibraryW
GetCommandLineW
ReadConsoleW
MultiByteToWideChar
GetThreadLocale
GetTimeFormatW
GetConsoleOutputCP
LocalFree
WriteConsoleW
LoadLibraryExW
FreeLibrary
GetTickCount
GetSystemTime
WideCharToMultiByte
FormatMessageW
GetConsoleMode
GetFileType
GetStdHandle
WriteFile
netapi32
NetScheduleJobAdd
NetScheduleJobDel
NetScheduleJobGetInfo
NetScheduleJobEnum
NetApiBufferFree
I_NetNameValidate
shell32
CommandLineToArgvW
ntdll
NtQuerySystemTime
RtlTimeToSecondsSince1970
Sections
.text Size: 15KB - Virtual size: 14KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
wintaylor2.1/Programs/tools/xp/cmd.exe.exe windows:5 windows x86
a6e4db6d0301308509a7f5737a79f454
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvcrt
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
__initenv
_cexit
_XcptFilter
_exit
_c_exit
calloc
_wcslwr
qsort
_vsnwprintf
wcsstr
_dup2
_dup
_open_osfhandle
_close
swscanf
_ultoa
_pipe
_seh_longjmp_unwind
_setmode
wcsncmp
iswxdigit
fflush
exit
_wtol
time
srand
__set_app_type
wcsrchr
malloc
free
wcstoul
_errno
iswalpha
printf
rand
swprintf
_iob
fprintf
towlower
realloc
setlocale
_snwprintf
wcscat
_wcsupr
wcsncpy
_wpopen
fgets
_pclose
memmove
wcschr
iswspace
_tell
longjmp
wcscmp
_wcsnicmp
_wcsicmp
wcstol
iswdigit
_getch
_get_osfhandle
_controlfp
_setjmp3
_except_handler3
wcscpy
wcslen
wcsspn
towupper
kernel32
FlushConsoleInputBuffer
LoadLibraryA
InterlockedExchange
FreeLibrary
LocalAlloc
GetVDMCurrentDirectories
CmdBatNotification
GetModuleHandleA
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
GetThreadLocale
GetDiskFreeSpaceExW
CompareFileTime
RemoveDirectoryW
GetCurrentDirectoryW
SetCurrentDirectoryW
TerminateProcess
WaitForSingleObject
GetExitCodeProcess
CopyFileW
SetFileAttributesW
DeleteFileW
SetFileTime
CreateDirectoryW
FillConsoleOutputAttribute
SetConsoleTextAttribute
ScrollConsoleScreenBufferW
FormatMessageW
DuplicateHandle
FlushFileBuffers
HeapReAlloc
HeapSize
GetFileAttributesExW
LocalFree
GetDriveTypeW
InitializeCriticalSection
SetConsoleCtrlHandler
GetWindowsDirectoryW
GetConsoleTitleW
GetModuleFileNameW
GetVersion
EnterCriticalSection
LeaveCriticalSection
ExpandEnvironmentStringsW
SearchPathW
WriteFile
GetVolumeInformationW
SetLastError
MoveFileW
SetConsoleTitleW
MoveFileExW
GetBinaryTypeW
GetFileAttributesW
GetCurrentThreadId
CreateProcessW
LoadLibraryW
ReadProcessMemory
SetErrorMode
GetConsoleMode
SetConsoleMode
VirtualAlloc
VirtualFree
SetEnvironmentVariableW
GetEnvironmentVariableW
GetCommandLineW
GetEnvironmentStringsW
GetLocalTime
GetTimeFormatW
FileTimeToLocalFileTime
GetDateFormatW
GetLastError
CloseHandle
SetThreadLocale
GetProcAddress
GetModuleHandleW
SetFilePointer
lstrcmpW
lstrcmpiW
HeapAlloc
GetProcessHeap
HeapFree
MultiByteToWideChar
ReadFile
WriteConsoleW
FillConsoleOutputCharacterW
SetConsoleCursorPosition
ReadConsoleW
GetConsoleScreenBufferInfo
GetStdHandle
GetFileType
VirtualQuery
RaiseException
GetCPInfo
GetConsoleOutputCP
WideCharToMultiByte
GetFileSize
CreateFileW
FindClose
FindNextFileW
FindFirstFileW
GetFullPathNameW
GetUserDefaultLCID
GetLocaleInfoW
SetLocalTime
SystemTimeToFileTime
GetSystemTime
FileTimeToSystemTime
user32
GetUserObjectInformationW
GetThreadDesktop
MessageBeep
GetProcessWindowStation
Sections
.text Size: 125KB - Virtual size: 125KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 114KB - Virtual size: 114KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 138KB - Virtual size: 138KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
wintaylor2.1/Programs/tools/xp/cmdenv.bat.bat .vbs
-
wintaylor2.1/Programs/tools/xp/doskey.exe.exe windows:5 windows x86
ee081908cf045bfcfd32c8054474c462
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
ulib
?Get_Standard_Input_Stream@@YGPAVSTREAM@@XZ
??0REST_OF_LINE_ARGUMENT@@QAE@XZ
??0PATH_ARGUMENT@@QAE@XZ
??0LONG_ARGUMENT@@QAE@XZ
?PutSeparators@ARGUMENT_LEXEMIZER@@QAEXPBD@Z
??0STRING_ARGUMENT@@QAE@XZ
??0ARRAY@@QAE@XZ
??0ARGUMENT_LEXEMIZER@@QAE@XZ
??0STREAM_MESSAGE@@QAE@XZ
?Get_Standard_Output_Stream@@YGPAVSTREAM@@XZ
?Initialize@STRING_ARGUMENT@@QAEEPAD@Z
?Initialize@FLAG_ARGUMENT@@QAEEPAD@Z
?Initialize@LONG_ARGUMENT@@QAEEPAD@Z
?Initialize@PATH_ARGUMENT@@QAEEPADE@Z
?Initialize@REST_OF_LINE_ARGUMENT@@QAEEXZ
?Put@ARRAY@@UAEEPAVOBJECT@@@Z
?DoParsing@ARGUMENT_LEXEMIZER@@QAEEPAVARRAY@@@Z
?Set@STREAM_MESSAGE@@UAEEKW4MESSAGE_TYPE@@K@Z
?QueryInvalidArgument@ARGUMENT_LEXEMIZER@@QAEPAVWSTRING@@XZ
?IsValueSet@ARGUMENT@@QAEEXZ
?Initialize@STREAM_MESSAGE@@QAEEPAVSTREAM@@00@Z
?Initialize@ARRAY@@QAEEKK@Z
?Initialize@ARGUMENT_LEXEMIZER@@QAEEPAVARRAY@@@Z
?PrepareToParse@ARGUMENT_LEXEMIZER@@QAEEPAVWSTRING@@@Z
?SetCaseSensitive@ARGUMENT_LEXEMIZER@@QAEXE@Z
??1PATH_ARGUMENT@@UAE@XZ
??1STRING_ARGUMENT@@UAE@XZ
??1ARRAY@@UAE@XZ
??1ARGUMENT_LEXEMIZER@@UAE@XZ
??1STREAM_MESSAGE@@UAE@XZ
??1OBJECT@@UAE@XZ
?QueryFile@SYSTEM@@SGPAVFSN_FILE@@PBVPATH@@EPAE@Z
?QueryStream@FSN_FILE@@QAEPAVFILE_STREAM@@W4STREAMACCESS@@K@Z
?ReadLine@STREAM@@QAEEPAVWSTRING@@E@Z
?Initialize@WSTRING@@QAEEPBV1@KK@Z
?QueryWSTR@WSTRING@@QBEPAGKKPAGKE@Z
??0DSTRING@@QAE@XZ
?Initialize@WSTRING@@QAEEPBGK@Z
?Strcat@WSTRING@@QAEEPBV1@@Z
??1DSTRING@@UAE@XZ
?DeleteChAt@WSTRING@@QAEXKK@Z
?Display@MESSAGE@@QAAEPBDZZ
??0FLAG_ARGUMENT@@QAE@XZ
?Initialize@WSTRING@@QAEEPBDK@Z
kernel32
GetModuleHandleA
GetConsoleAliasesLengthW
GetConsoleAliasExesW
GetConsoleAliasExesLengthW
AddConsoleAliasW
GetConsoleCommandHistoryW
GetConsoleCommandHistoryLengthW
SetConsoleCommandHistoryMode
SetConsoleNumberOfCommandsW
ExpungeConsoleCommandHistoryW
GetConsoleAliasesW
ntdll
wcschr
RtlFreeHeap
RtlAllocateHeap
_wcsicmp
msvcrt
__initenv
exit
__getmainargs
_XcptFilter
_exit
_c_exit
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_controlfp
_except_handler3
_cexit
Sections
.text Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 32B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 992B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
wintaylor2.1/Programs/tools/xp/framedyn.dll.dll windows:5 windows x86
0c10fb1bd6a6e762649940d2116ecd8f
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
msvcrt
_onexit
_except_handler3
_wcsicmp
wcscoll
__CxxFrameHandler
_purecall
_CxxThrowException
_wrename
_wunlink
_wtoi64
wcscmp
_wcsupr
wcscpy
malloc
__dllonexit
_wtol
wcspbrk
wcsrchr
wcsstr
_wcslwr
_wcsrev
memmove
vswprintf
iswdigit
wcsspn
wcscspn
swscanf
_vsnwprintf
mbstowcs
?terminate@@YAXXZ
??1type_info@@UAE@XZ
_adjust_fdiv
_initterm
free
iswspace
wcsncpy
sprintf
atol
sscanf
wcscat
swprintf
wcschr
?_set_se_translator@@YAP6AXIPAU_EXCEPTION_POINTERS@@@ZP6AXI0@Z@Z
_wtoi
_ui64tow
_i64tow
wcslen
kernel32
CompareFileTime
FormatMessageW
FormatMessageA
lstrlenA
FileTimeToLocalFileTime
FileTimeToSystemTime
GetTimeZoneInformation
EnterCriticalSection
LeaveCriticalSection
InterlockedIncrement
InterlockedDecrement
InitializeCriticalSection
DeleteCriticalSection
GetCurrentThread
CloseHandle
GetSystemTimeAsFileTime
GetFileSizeEx
WriteFile
SetFilePointer
WideCharToMultiByte
GetCurrentThreadId
SystemTimeToFileTime
CreateFileW
ReleaseMutex
WaitForSingleObject
GetLastError
SetLastError
GetModuleHandleW
MultiByteToWideChar
GetComputerNameA
GetComputerNameW
CreateMutexA
CreateMutexW
ExpandEnvironmentStringsA
ExpandEnvironmentStringsW
ExitProcess
GetVersionExA
Sleep
HeapAlloc
GetProcessHeap
HeapFree
HeapReAlloc
CreateEventW
SetEvent
SetConsoleCtrlHandler
CreateThread
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
lstrlenW
LocalFree
DisableThreadLibraryCalls
LCMapStringW
GetVersionExW
GetLocalTime
advapi32
ImpersonateSelf
RegOpenCurrentUser
RegEnumValueW
RegEnumValueA
RegEnumKeyW
RegEnumKeyA
RegQueryInfoKeyW
RegQueryInfoKeyA
RegOpenKeyExW
RegOpenKeyExA
RegDeleteKeyW
RegDeleteKeyA
RegDeleteValueW
RegDeleteValueA
RegQueryValueExW
RegQueryValueExA
RegSetValueExW
RegSetValueExA
RegCreateKeyExW
RegCreateKeyExA
RegCloseKey
InitiateSystemShutdownW
ImpersonateLoggedOnUser
OpenThreadToken
RevertToSelf
GetTokenInformation
user32
UnregisterClassW
RegisterClassW
CreateWindowExW
DefWindowProcW
SendMessageW
GetMessageW
TranslateMessage
DispatchMessageW
ExitWindowsEx
PostMessageW
oleaut32
SysAllocStringLen
VariantChangeTypeEx
SysStringLen
SafeArrayCreate
SafeArrayPutElement
SafeArrayCopy
VariantCopy
SafeArrayGetDim
SafeArrayGetLBound
SafeArrayGetUBound
SafeArrayGetElement
SafeArrayDestroy
VariantClear
SysFreeString
SysAllocString
SysAllocStringByteLen
SysStringByteLen
VariantInit
ole32
CoGetCallContext
StringFromGUID2
CoCreateInstance
OleRun
CoLockObjectExternal
secur32
GetUserNameExW
Exports
Exports
??0CAutoEvent@@QAE@XZ
??0CFrameworkQuery@@QAE@ABV0@@Z
??0CFrameworkQuery@@QAE@XZ
??0CFrameworkQueryEx@@QAE@ABV0@@Z
??0CFrameworkQueryEx@@QAE@XZ
??0CHPtrArray@@QAE@XZ
??0CHString@@QAE@ABV0@@Z
??0CHString@@QAE@GH@Z
??0CHString@@QAE@PBD@Z
??0CHString@@QAE@PBE@Z
??0CHString@@QAE@PBG@Z
??0CHString@@QAE@PBGH@Z
??0CHString@@QAE@XZ
??0CHStringArray@@QAE@XZ
??0CInstance@@QAE@ABV0@@Z
??0CInstance@@QAE@PAUIWbemClassObject@@PAVMethodContext@@@Z
??0CObjectPathParser@@QAE@W4ObjectParserFlags@@@Z
??0CRegistry@@QAE@ABV0@@Z
??0CRegistry@@QAE@XZ
??0CRegistrySearch@@QAE@ABV0@@Z
??0CRegistrySearch@@QAE@XZ
??0CThreadBase@@QAE@ABV0@@Z
??0CThreadBase@@QAE@W4THREAD_SAFETY_MECHANISM@0@@Z
??0CWbemGlueFactory@@QAE@ABV0@@Z
??0CWbemGlueFactory@@QAE@PAJ@Z
??0CWbemGlueFactory@@QAE@XZ
??0CWbemProviderGlue@@QAE@ABV0@@Z
??0CWbemProviderGlue@@QAE@PAJ@Z
??0CWbemProviderGlue@@QAE@XZ
??0CWinMsgEvent@@QAE@ABV0@@Z
??0CWinMsgEvent@@QAE@XZ
??0CreateMutexAsProcess@@QAE@PBG@Z
??0KeyRef@@QAE@PBGPBUtagVARIANT@@@Z
??0KeyRef@@QAE@XZ
??0MethodContext@@QAE@ABV0@@Z
??0MethodContext@@QAE@PAUIWbemContext@@PAVCWbemProviderGlue@@@Z
??0ParsedObjectPath@@QAE@XZ
??0Provider@@QAE@ABV0@@Z
??0Provider@@QAE@PBG0@Z
??0ProviderLog@@QAE@ABV0@@Z
??0ProviderLog@@QAE@XZ
??0WBEMTime@@QAE@ABJ@Z
??0WBEMTime@@QAE@ABU_FILETIME@@@Z
??0WBEMTime@@QAE@ABU_SYSTEMTIME@@@Z
??0WBEMTime@@QAE@ABUtm@@@Z
??0WBEMTime@@QAE@QAG@Z
??0WBEMTime@@QAE@XZ
??0WBEMTimeSpan@@QAE@ABJ@Z
??0WBEMTimeSpan@@QAE@ABU_FILETIME@@@Z
??0WBEMTimeSpan@@QAE@HHHHHHH@Z
??0WBEMTimeSpan@@QAE@QAG@Z
??0WBEMTimeSpan@@QAE@XZ
??0_Lockit@std@@QAE@XZ
??1CAutoEvent@@QAE@XZ
??1CFrameworkQuery@@QAE@XZ
??1CFrameworkQueryEx@@QAE@XZ
??1CHPtrArray@@QAE@XZ
??1CHString@@QAE@XZ
??1CHStringArray@@QAE@XZ
??1CInstance@@UAE@XZ
??1CObjectPathParser@@QAE@XZ
??1CRegistry@@QAE@XZ
??1CRegistrySearch@@QAE@XZ
??1CThreadBase@@UAE@XZ
??1CWbemGlueFactory@@QAE@XZ
??1CWbemProviderGlue@@QAE@XZ
??1CWinMsgEvent@@QAE@XZ
??1CreateMutexAsProcess@@QAE@XZ
??1KeyRef@@QAE@XZ
??1MethodContext@@UAE@XZ
??1ParsedObjectPath@@QAE@XZ
??1Provider@@UAE@XZ
??1ProviderLog@@UAE@XZ
??1_Lockit@std@@QAE@XZ
??4CAutoEvent@@QAEAAV0@ABV0@@Z
??4CFrameworkQuery@@QAEAAV0@ABV0@@Z
??4CFrameworkQueryEx@@QAEAAV0@ABV0@@Z
??4CHPtrArray@@QAEAAV0@ABV0@@Z
??4CHString@@QAEABV0@ABV0@@Z
??4CHString@@QAEABV0@D@Z
??4CHString@@QAEABV0@G@Z
??4CHString@@QAEABV0@PAV0@@Z
??4CHString@@QAEABV0@PBD@Z
??4CHString@@QAEABV0@PBE@Z
??4CHString@@QAEABV0@PBG@Z
??4CHStringArray@@QAEAAV0@ABV0@@Z
??4CInstance@@QAEAAV0@ABV0@@Z
??4CObjectPathParser@@QAEAAV0@ABV0@@Z
??4CRegistry@@QAEAAV0@ABV0@@Z
??4CRegistrySearch@@QAEAAV0@ABV0@@Z
??4CThreadBase@@QAEAAV0@ABV0@@Z
??4CWbemGlueFactory@@QAEAAV0@ABV0@@Z
??4CWbemProviderGlue@@QAEAAV0@ABV0@@Z
??4CWinMsgEvent@@QAEAAV0@ABV0@@Z
??4CreateMutexAsProcess@@QAEAAV0@ABV0@@Z
??4KeyRef@@QAEAAU0@ABU0@@Z
??4MethodContext@@QAEAAV0@ABV0@@Z
??4ParsedObjectPath@@QAEAAU0@ABU0@@Z
??4Provider@@QAEAAV0@ABV0@@Z
??4ProviderLog@@QAEAAV0@ABV0@@Z
??4WBEMTime@@QAEAAV0@ABV0@@Z
??4WBEMTime@@QAEABV0@ABJ@Z
??4WBEMTime@@QAEABV0@ABU_FILETIME@@@Z
??4WBEMTime@@QAEABV0@ABU_SYSTEMTIME@@@Z
??4WBEMTime@@QAEABV0@ABUtm@@@Z
??4WBEMTime@@QAEABV0@QAG@Z
??4WBEMTimeSpan@@QAEAAV0@ABV0@@Z
??4WBEMTimeSpan@@QAEABV0@ABJ@Z
??4WBEMTimeSpan@@QAEABV0@ABU_FILETIME@@@Z
??4WBEMTimeSpan@@QAEABV0@QAG@Z
??4_Lockit@std@@QAEAAV01@ABV01@@Z
??8WBEMTime@@QBEHABV0@@Z
??8WBEMTimeSpan@@QBEHABV0@@Z
??9WBEMTime@@QBEHABV0@@Z
??9WBEMTimeSpan@@QBEHABV0@@Z
??ACHPtrArray@@QAEAAPAXH@Z
??ACHPtrArray@@QBEPAXH@Z
??ACHString@@QBEGH@Z
??ACHStringArray@@QAEAAVCHString@@H@Z
??ACHStringArray@@QBE?AVCHString@@H@Z
??BCHString@@QBEPBGXZ
??GWBEMTime@@QAE?AVWBEMTimeSpan@@ABV0@@Z
??GWBEMTime@@QBE?AV0@ABVWBEMTimeSpan@@@Z
??GWBEMTimeSpan@@QBE?AV0@ABV0@@Z
??H@YG?AVCHString@@ABV0@0@Z
??H@YG?AVCHString@@ABV0@G@Z
??H@YG?AVCHString@@ABV0@PBG@Z
??H@YG?AVCHString@@GABV0@@Z
??H@YG?AVCHString@@PBGABV0@@Z
??HWBEMTime@@QBE?AV0@ABVWBEMTimeSpan@@@Z
??HWBEMTimeSpan@@QBE?AV0@ABV0@@Z
??MWBEMTime@@QBEHABV0@@Z
??MWBEMTimeSpan@@QBEHABV0@@Z
??NWBEMTime@@QBEHABV0@@Z
??NWBEMTimeSpan@@QBEHABV0@@Z
??OWBEMTime@@QBEHABV0@@Z
??OWBEMTimeSpan@@QBEHABV0@@Z
??PWBEMTime@@QBEHABV0@@Z
??PWBEMTimeSpan@@QBEHABV0@@Z
??YCHString@@QAEABV0@ABV0@@Z
??YCHString@@QAEABV0@D@Z
??YCHString@@QAEABV0@G@Z
??YCHString@@QAEABV0@PBG@Z
??YWBEMTime@@QAEABV0@ABVWBEMTimeSpan@@@Z
??YWBEMTimeSpan@@QAEABV0@ABV0@@Z
??ZWBEMTime@@QAEABV0@ABVWBEMTimeSpan@@@Z
??ZWBEMTimeSpan@@QAEABV0@ABV0@@Z
??_7CFrameworkQueryEx@@6B@
??_7CInstance@@6B@
??_7CThreadBase@@6B@
??_7CWbemGlueFactory@@6B@
??_7CWbemProviderGlue@@6BIWbemProviderInit@@@
??_7CWbemProviderGlue@@6BIWbemServices@@@
??_7CWinMsgEvent@@6B@
??_7MethodContext@@6B@
??_7Provider@@6B@
??_7ProviderLog@@6B@
??_FCObjectPathParser@@QAEXXZ
??_FCThreadBase@@QAEXXZ
?Add@CHPtrArray@@QAEHPAX@Z
?Add@CHStringArray@@QAEHPBG@Z
?AddFlushPtr@CWbemProviderGlue@@AAEXPAX@Z
?AddKeyRef@ParsedObjectPath@@QAEHPAUKeyRef@@@Z
?AddKeyRef@ParsedObjectPath@@QAEHPBGPBUtagVARIANT@@@Z
?AddKeyRefEx@ParsedObjectPath@@QAEHPBGPBUtagVARIANT@@@Z
?AddNamespace@ParsedObjectPath@@QAEHPBG@Z
?AddProviderToMap@CWbemProviderGlue@@CGPAVProvider@@PBG0PAV2@@Z
?AddRef@CInstance@@QAEJXZ
?AddRef@CThreadBase@@QAEJXZ
?AddRef@CWbemGlueFactory@@UAGKXZ
?AddRef@CWbemProviderGlue@@UAGKXZ
?AddRef@MethodContext@@QAEJXZ
?AddToFactoryMap@CWbemProviderGlue@@KGXPBVCWbemGlueFactory@@PAJ@Z
?AllPropertiesAreRequired@CFrameworkQuery@@QAE_NXZ
?AllocBeforeWrite@CHString@@IAEXH@Z
?AllocBuffer@CHString@@IAEXH@Z
?AllocCopy@CHString@@IBEXAAV1@HHH@Z
?AllocSysString@CHString@@QBEPAGXZ
?Append@CHPtrArray@@QAEHABV1@@Z
?Append@CHStringArray@@QAEHABV1@@Z
?AssignCopy@CHString@@IAEXHPBG@Z
?BeginRead@CThreadBase@@QAEHK@Z
?BeginWrite@CThreadBase@@QAEHK@Z
?CancelAsyncCall@CWbemProviderGlue@@UAGJPAUIWbemObjectSink@@@Z
?CancelAsyncRequest@CWbemProviderGlue@@UAGJJ@Z
?CheckAndAddToList@CRegistrySearch@@AAEXPAVCRegistry@@VCHString@@1AAVCHPtrArray@@11H@Z
?CheckFileSize@ProviderLog@@AAEXAAT_LARGE_INTEGER@@ABVCHString@@@Z
?CheckImpersonationLevel@CWbemProviderGlue@@CGJXZ
?Clear@WBEMTime@@QAEXXZ
?Clear@WBEMTimeSpan@@QAEXXZ
?ClearKeys@ParsedObjectPath@@QAEXXZ
?Close@CRegistry@@QAEXXZ
?CloseSubKey@CRegistry@@AAEXXZ
?Collate@CHString@@QBEHPBG@Z
?Commit@CInstance@@QAEJXZ
?Commit@Provider@@IAEJPAVCInstance@@_N@Z
?Compare@CHString@@QBEHPBG@Z
?CompareNoCase@CHString@@QBEHPBG@Z
?ConcatCopy@CHString@@IAEXHPBGH0@Z
?ConcatInPlace@CHString@@IAEXHPBG@Z
?Copy@CHPtrArray@@QAEXABV1@@Z
?Copy@CHStringArray@@QAEXABV1@@Z
?CopyBeforeWrite@CHString@@IAEXXZ
?CreateClassEnum@CWbemProviderGlue@@UAGJQAGJPAUIWbemContext@@PAPAUIEnumWbemClassObject@@@Z
?CreateClassEnumAsync@CWbemProviderGlue@@UAGJQAGJPAUIWbemContext@@PAUIWbemObjectSink@@@Z
?CreateInstance@CWbemGlueFactory@@UAGJPAUIUnknown@@ABU_GUID@@PAPAX@Z
?CreateInstanceEnum@CWbemProviderGlue@@UAGJQAGJPAUIWbemContext@@PAPAUIEnumWbemClassObject@@@Z
?CreateInstanceEnum@Provider@@AAEJPAVMethodContext@@J@Z
?CreateInstanceEnumAsync@CWbemProviderGlue@@UAGJQAGJPAUIWbemContext@@PAUIWbemObjectSink@@@Z
?CreateMsgProvider@CWinMsgEvent@@CGXXZ
?CreateMsgWindow@CWinMsgEvent@@CGPAUHWND__@@XZ
?CreateNewInstance@Provider@@IAEPAVCInstance@@PAVMethodContext@@@Z
?CreateOpen@CRegistry@@QAEJPAUHKEY__@@PBGPAGKKPAU_SECURITY_ATTRIBUTES@@PAK@Z
?CtrlHandlerRoutine@CWinMsgEvent@@CGHK@Z
?DecrementMapCount@CWbemProviderGlue@@KGJPAJ@Z
?DecrementMapCount@CWbemProviderGlue@@KGJPBVCWbemGlueFactory@@@Z
?DecrementObjectCount@CWbemProviderGlue@@SGJXZ
?DeleteClass@CWbemProviderGlue@@UAGJQAGJPAUIWbemContext@@PAPAUIWbemCallResult@@@Z
?DeleteClassAsync@CWbemProviderGlue@@UAGJQAGJPAUIWbemContext@@PAUIWbemObjectSink@@@Z
?DeleteCurrentKeyValue@CRegistry@@QAEKPAUHKEY__@@PBG@Z
?DeleteCurrentKeyValue@CRegistry@@QAEKPBG@Z
?DeleteInstance@CWbemProviderGlue@@UAGJQAGJPAUIWbemContext@@PAPAUIWbemCallResult@@@Z
?DeleteInstance@Provider@@AAEJPAUParsedObjectPath@@JPAVMethodContext@@@Z
?DeleteInstance@Provider@@MAEJABVCInstance@@J@Z
?DeleteInstanceAsync@CWbemProviderGlue@@UAGJQAGJPAUIWbemContext@@PAUIWbemObjectSink@@@Z
?DeleteKey@CRegistry@@QAEJPAVCHString@@@Z
?DeleteValue@CRegistry@@QAEJPBG@Z
?DestroyMsgWindow@CWinMsgEvent@@CGXXZ
?ElementAt@CHPtrArray@@QAEAAPAXH@Z
?ElementAt@CHStringArray@@QAEAAVCHString@@H@Z
?Empty@CHString@@QAEXXZ
?Empty@CObjectPathParser@@AAEXXZ
?EndRead@CThreadBase@@QAEXXZ
?EndWrite@CThreadBase@@QAEXXZ
?EnumerateAndGetValues@CRegistry@@QAEJAAKAAPAGAAPAE@Z
?EnumerateInstances@Provider@@MAEJPAVMethodContext@@J@Z
?ExecMethod@CWbemProviderGlue@@UAGJQAG0JPAUIWbemContext@@PAUIWbemClassObject@@PAPAU3@PAPAUIWbemCallResult@@@Z
?ExecMethod@Provider@@AAEJPAUParsedObjectPath@@PAGJPAVCInstance@@2PAVMethodContext@@@Z
?ExecMethod@Provider@@MAEJABVCInstance@@QAGPAV2@2J@Z
?ExecMethodAsync@CWbemProviderGlue@@UAGJQAG0JPAUIWbemContext@@PAUIWbemClassObject@@PAUIWbemObjectSink@@@Z
?ExecNotificationQuery@CWbemProviderGlue@@UAGJQAG0JPAUIWbemContext@@PAPAUIEnumWbemClassObject@@@Z
?ExecNotificationQueryAsync@CWbemProviderGlue@@UAGJQAG0JPAUIWbemContext@@PAUIWbemObjectSink@@@Z
?ExecQuery@CWbemProviderGlue@@UAGJQAG0JPAUIWbemContext@@PAPAUIEnumWbemClassObject@@@Z
?ExecQuery@Provider@@MAEJPAVMethodContext@@AAVCFrameworkQuery@@J@Z
?ExecQueryAsync@CWbemProviderGlue@@UAGJQAG0JPAUIWbemContext@@PAUIWbemObjectSink@@@Z
?ExecuteQuery@Provider@@AAEJPAVMethodContext@@AAVCFrameworkQuery@@J@Z
?FillInstance@CWbemProviderGlue@@SGJPAVCInstance@@PBG@Z
?FillInstance@CWbemProviderGlue@@SGJPAVMethodContext@@PAVCInstance@@@Z
?Find@CHString@@QBEHG@Z
?Find@CHString@@QBEHPBG@Z
?FindOneOf@CHString@@QBEHPBG@Z
?Flush@Provider@@MAEXXZ
?FlushAll@CWbemProviderGlue@@AAEXXZ
?Format@CHString@@QAAXIZZ
?Format@CHString@@QAAXPBGZZ
?FormatMessageW@CHString@@QAAXIZZ
?FormatMessageW@CHString@@QAAXPBGZZ
?FormatV@CHString@@QAEXPBGPAD@Z
?FrameworkLogin@CWbemProviderGlue@@SGXPBGPAVProvider@@0@Z
?FrameworkLoginDLL@CWbemProviderGlue@@SGHPBG@Z
?FrameworkLoginDLL@CWbemProviderGlue@@SGHPBGPAJ@Z
?FrameworkLogoff@CWbemProviderGlue@@SGXPBG0@Z
?FrameworkLogoffDLL@CWbemProviderGlue@@SGHPBG@Z
?FrameworkLogoffDLL@CWbemProviderGlue@@SGHPBGPAJ@Z
?Free@CObjectPathParser@@QAEXPAUParsedObjectPath@@@Z
?FreeExtra@CHPtrArray@@QAEXXZ
?FreeExtra@CHString@@QAEXXZ
?FreeExtra@CHStringArray@@QAEXXZ
?FreeSearchList@CRegistrySearch@@QAEHHAAVCHPtrArray@@@Z
?GetAllDerivedInstances@CWbemProviderGlue@@SGJPBGPAV?$TRefPointerCollection@VCInstance@@@@PAVMethodContext@@0@Z
?GetAllDerivedInstancesAsynch@CWbemProviderGlue@@SGJPBGPAVProvider@@P6GJ1PAVCInstance@@PAVMethodContext@@PAX@Z034@Z
?GetAllInstances@CWbemProviderGlue@@SGJPBGPAV?$TRefPointerCollection@VCInstance@@@@0PAVMethodContext@@@Z
?GetAllInstancesAsynch@CWbemProviderGlue@@SGJPBGPAVProvider@@P6GJ1PAVCInstance@@PAVMethodContext@@PAX@Z034@Z
?GetAllocLength@CHString@@QBEHXZ
?GetAt@CHPtrArray@@QBEPAXH@Z
?GetAt@CHString@@QBEGH@Z
?GetAt@CHStringArray@@QBE?AVCHString@@H@Z
?GetBSTR@WBEMTime@@QBEPAGXZ
?GetBSTR@WBEMTimeSpan@@QBEPAGXZ
?GetBuffer@CHString@@QAEPAGH@Z
?GetBufferSetLength@CHString@@QAEPAGH@Z
?GetByte@CInstance@@QBE_NPBGAAE@Z
?GetCHString@CInstance@@QBE_NPBGAAVCHString@@@Z
?GetCSDVersion@CWbemProviderGlue@@SGPBGXZ
?GetClassNameW@CRegistry@@QAEPAGXZ
?GetClassObjectInterface@CInstance@@QAEPAUIWbemClassObject@@XZ
?GetClassObjectInterface@Provider@@AAEPAUIWbemClassObject@@PAVMethodContext@@@Z
?GetComputerNameW@CWbemProviderGlue@@CGXAAVCHString@@@Z
?GetCurrentBinaryKeyValue@CRegistry@@QAEKPAUHKEY__@@PBGPAEPAK@Z
?GetCurrentBinaryKeyValue@CRegistry@@QAEKPBGAAVCHString@@@Z
?GetCurrentBinaryKeyValue@CRegistry@@QAEKPBGPAEPAK@Z
?GetCurrentKeyValue@CRegistry@@QAEKPAUHKEY__@@PBGAAK@Z
?GetCurrentKeyValue@CRegistry@@QAEKPAUHKEY__@@PBGAAVCHString@@@Z
?GetCurrentKeyValue@CRegistry@@QAEKPAUHKEY__@@PBGAAVCHStringArray@@@Z
?GetCurrentKeyValue@CRegistry@@QAEKPBGAAK@Z
?GetCurrentKeyValue@CRegistry@@QAEKPBGAAVCHString@@@Z
?GetCurrentKeyValue@CRegistry@@QAEKPBGAAVCHStringArray@@@Z
?GetCurrentRawKeyValue@CRegistry@@AAEKPAUHKEY__@@PBGPAXPAK3@Z
?GetCurrentRawSubKeyValue@CRegistry@@AAEKPBGPAXPAK2@Z
?GetCurrentSubKeyCount@CRegistry@@QAEKXZ
?GetCurrentSubKeyName@CRegistry@@QAEKAAVCHString@@@Z
?GetCurrentSubKeyPath@CRegistry@@QAEKAAVCHString@@@Z
?GetCurrentSubKeyValue@CRegistry@@QAEKPBGAAK@Z
?GetCurrentSubKeyValue@CRegistry@@QAEKPBGAAVCHString@@@Z
?GetCurrentSubKeyValue@CRegistry@@QAEKPBGPAXPAK@Z
?GetDMTF@WBEMTime@@QBEPAGH@Z
?GetDMTFNonNtfs@WBEMTime@@QBEPAGXZ
?GetDOUBLE@CInstance@@QBE_NPBGAAN@Z
?GetDWORD@CInstance@@QBE_NPBGAAK@Z
?GetData@CHPtrArray@@QAEPAPAXXZ
?GetData@CHPtrArray@@QBEPAPBXXZ
?GetData@CHString@@IBEPAUCHStringData@@XZ
?GetData@CHStringArray@@QAEPAVCHString@@XZ
?GetData@CHStringArray@@QBEPBVCHString@@XZ
?GetDateTime@CInstance@@QBE_NPBGAAVWBEMTime@@@Z
?GetEmbeddedObject@CInstance@@QBE_NPBGPAPAV1@PAVMethodContext@@@Z
?GetEmptyInstance@CWbemProviderGlue@@SGJPAVMethodContext@@PBGPAPAVCInstance@@1@Z
?GetEmptyInstance@CWbemProviderGlue@@SGJPBGPAPAVCInstance@@0@Z
?GetFILETIME@WBEMTime@@QBEHPAU_FILETIME@@@Z
?GetFILETIME@WBEMTimeSpan@@QBEHPAU_FILETIME@@@Z
?GetIWBEMContext@MethodContext@@UAEPAUIWbemContext@@XZ
?GetInstanceByPath@CWbemProviderGlue@@SGJPBGPAPAVCInstance@@PAVMethodContext@@@Z
?GetInstanceFromCIMOM@CWbemProviderGlue@@CGJPBG0PAVMethodContext@@PAPAVCInstance@@@Z
?GetInstanceKeysByPath@CWbemProviderGlue@@SGJPBGPAPAVCInstance@@PAVMethodContext@@@Z
?GetInstancePropertiesByPath@CWbemProviderGlue@@SGJPBGPAPAVCInstance@@PAVMethodContext@@AAVCHStringArray@@@Z
?GetInstancesByQuery@CWbemProviderGlue@@SGJPBGPAV?$TRefPointerCollection@VCInstance@@@@PAVMethodContext@@0@Z
?GetInstancesByQueryAsynch@CWbemProviderGlue@@SGJPBGPAVProvider@@P6GJ1PAVCInstance@@PAVMethodContext@@PAX@Z034@Z
?GetKeyString@ParsedObjectPath@@QAEPAGXZ
?GetLength@CHString@@QBEHXZ
?GetLocalComputerName@Provider@@IAEABVCHString@@XZ
?GetLocalInstancePath@Provider@@IAE_NPBVCInstance@@AAVCHString@@@Z
?GetLocalOffsetForDate@WBEMTime@@SGJABJ@Z
?GetLocalOffsetForDate@WBEMTime@@SGJPBU_FILETIME@@@Z
?GetLocalOffsetForDate@WBEMTime@@SGJPBU_SYSTEMTIME@@@Z
?GetLocalOffsetForDate@WBEMTime@@SGJPBUtm@@@Z
?GetLongestClassStringSize@CRegistry@@QAEKXZ
?GetLongestSubKeySize@CRegistry@@QAEKXZ
?GetLongestValueData@CRegistry@@QAEKXZ
?GetLongestValueName@CRegistry@@QAEKXZ
?GetMapCountPtr@CWbemProviderGlue@@KGPAJPBVCWbemGlueFactory@@@Z
?GetMethodContext@CInstance@@QBEPAVMethodContext@@XZ
?GetNamespace@CFrameworkQuery@@IAEABVCHString@@XZ
?GetNamespace@Provider@@IAEABVCHString@@XZ
?GetNamespaceConnection@CWbemProviderGlue@@SGPAUIWbemServices@@PBG@Z
?GetNamespaceConnection@CWbemProviderGlue@@SGPAUIWbemServices@@PBGPAVMethodContext@@@Z
?GetNamespacePart@ParsedObjectPath@@QAEPAGXZ
?GetOSMajorVersion@CWbemProviderGlue@@SGKXZ
?GetObject@CWbemProviderGlue@@UAGJQAGJPAUIWbemContext@@PAPAUIWbemClassObject@@PAPAUIWbemCallResult@@@Z
?GetObject@Provider@@AAEJPAUParsedObjectPath@@PAVMethodContext@@J@Z
?GetObject@Provider@@MAEJPAVCInstance@@J@Z
?GetObject@Provider@@MAEJPAVCInstance@@JAAVCFrameworkQuery@@@Z
?GetObjectAsync@CWbemProviderGlue@@UAGJQAGJPAUIWbemContext@@PAUIWbemObjectSink@@@Z
?GetParentNamespacePart@ParsedObjectPath@@QAEPAGXZ
?GetPlatform@CWbemProviderGlue@@SGKXZ
?GetPlatformID@CRegistry@@CGKXZ
?GetPropertyBitMask@CFrameworkQueryEx@@QAEXABVCHPtrArray@@PAX@Z
?GetProviderGlue@MethodContext@@AAEPAVCWbemProviderGlue@@XZ
?GetProviderName@Provider@@IAEABVCHString@@XZ
?GetQuery@CFrameworkQuery@@QAEABVCHString@@XZ
?GetQueryClassName@CFrameworkQuery@@QAEPAGXZ
?GetRelativePath@CObjectPathParser@@SGPAGPAG@Z
?GetRequiredProperties@CFrameworkQuery@@QAEXAAVCHStringArray@@@Z
?GetSYSTEMTIME@WBEMTime@@QBEHPAU_SYSTEMTIME@@@Z
?GetSize@CHPtrArray@@QBEHXZ
?GetSize@CHStringArray@@QBEHXZ
?GetStatus@CInstance@@QBE_NPBGAA_NAAG@Z
?GetStatusObject@CWbemProviderGlue@@CGPAUIWbemClassObject@@PAVMethodContext@@PBG@Z
?GetStatusObject@MethodContext@@QAEPAUIWbemClassObject@@XZ
?GetStringArray@CInstance@@QBE_NPBGAAPAUtagSAFEARRAY@@@Z
?GetStructtm@WBEMTime@@QBEHPAUtm@@@Z
?GetTime@WBEMTime@@QBE_KXZ
?GetTime@WBEMTimeSpan@@QBE_KXZ
?GetTimeSpan@CInstance@@QBE_NPBGAAVWBEMTimeSpan@@@Z
?GetUpperBound@CHPtrArray@@QBEHXZ
?GetUpperBound@CHStringArray@@QBEHXZ
?GetValueCount@CRegistry@@QAEKXZ
?GetValuesForProp@CFrameworkQuery@@QAEJPBGAAV?$vector@V_bstr_t@@V?$allocator@V_bstr_t@@@std@@@std@@@Z
?GetValuesForProp@CFrameworkQuery@@QAEJPBGAAVCHStringArray@@@Z
?GetValuesForProp@CFrameworkQueryEx@@QAEJPBGAAV?$vector@HV?$allocator@H@std@@@std@@@Z
?GetValuesForProp@CFrameworkQueryEx@@QAEJPBGAAV?$vector@V_variant_t@@V?$allocator@V_variant_t@@@std@@@std@@@Z
?GetVariant@CInstance@@QBE_NPBGAAUtagVARIANT@@@Z
?GetWBEMINT16@CInstance@@QBE_NPBGAAF@Z
?GetWBEMINT64@CInstance@@QBE_NPBGAAVCHString@@@Z
?GetWBEMINT64@CInstance@@QBE_NPBGAA_J@Z
?GetWBEMINT64@CInstance@@QBE_NPBGAA_K@Z
?GetWCHAR@CInstance@@QBE_NPBGPAPAG@Z
?GetWORD@CInstance@@QBE_NPBGAAG@Z
?Getbool@CInstance@@QBE_NPBGAA_N@Z
?GethKey@CRegistry@@QAEPAUHKEY__@@XZ
?Gettime_t@WBEMTime@@QBEHPAJ@Z
?Gettime_t@WBEMTimeSpan@@QBEHPAJ@Z
?IncrementMapCount@CWbemProviderGlue@@KGJPAJ@Z
?IncrementMapCount@CWbemProviderGlue@@KGJPBVCWbemGlueFactory@@@Z
?IncrementObjectCount@CWbemProviderGlue@@SGXXZ
?Init2@CFrameworkQuery@@QAEXPAUIWbemClassObject@@@Z
?Init@CFrameworkQuery@@QAEJPAUParsedObjectPath@@PAUIWbemContext@@PBGAAVCHString@@@Z
?Init@CFrameworkQuery@@QAEJQAG0JAAVCHString@@@Z
?Init@CHString@@IAEXXZ
?Init@CWbemProviderGlue@@CGXXZ
?InitComputerName@Provider@@CGXXZ
?InitEx@CFrameworkQueryEx@@UAEJQAG0JAAVCHString@@@Z
?Initialize@CWbemProviderGlue@@UAGJPAGJ00PAUIWbemServices@@PAUIWbemContext@@PAUIWbemProviderInitSink@@@Z
?InsertAt@CHPtrArray@@QAEXHPAV1@@Z
?InsertAt@CHPtrArray@@QAEXHPAXH@Z
?InsertAt@CHStringArray@@QAEXHPAV1@@Z
?InsertAt@CHStringArray@@QAEXHPBGH@Z
?InternalGetNamespaceConnection@CWbemProviderGlue@@AAGPAUIWbemServices@@PBG@Z
?Is3TokenOR@CFrameworkQueryEx@@QAEHPBG0AAUtagVARIANT@@1@Z
?IsClass@ParsedObjectPath@@QAEHXZ
?IsDerivedFrom@CWbemProviderGlue@@SG_NPBG0PAVMethodContext@@0@Z
?IsEmpty@CHString@@QBEHXZ
?IsExtended@CFrameworkQueryEx@@UAE_NXZ
?IsInList@CFrameworkQuery@@IAEKABVCHStringArray@@PBG@Z
?IsInstance@ParsedObjectPath@@QAEHXZ
?IsLocal@ParsedObjectPath@@QAEHPBG@Z
?IsLoggingOn@ProviderLog@@QAE?AW4LogLevel@1@PAVCHString@@@Z
?IsNTokenAnd@CFrameworkQueryEx@@QAEHAAVCHStringArray@@AAVCHPtrArray@@@Z
?IsNull@CInstance@@QBE_NPBG@Z
?IsObject@ParsedObjectPath@@QAEHXZ
?IsOk@WBEMTime@@QBE_NXZ
?IsOk@WBEMTimeSpan@@QBE_NXZ
?IsPropertyRequired@CFrameworkQuery@@QAE_NPBG@Z
?IsReference@CFrameworkQuery@@IAEHPBG@Z
?IsRelative@ParsedObjectPath@@QAEHPBG0@Z
?KeysOnly@CFrameworkQuery@@QAE_NXZ
?Left@CHString@@QBE?AV1@H@Z
?LoadStringW@CHString@@IAEHIPAGI@Z
?LoadStringW@CHString@@QAEHI@Z
?LocalLogMessage@ProviderLog@@QAAXPBGHW4LogLevel@1@0ZZ
?LocalLogMessage@ProviderLog@@QAEXPBG0HW4LogLevel@1@@Z
?LocateKeyByNameOrValueName@CRegistrySearch@@QAEHPAUHKEY__@@PBG1PAPBGKAAVCHString@@3@Z
?Lock@CThreadBase@@AAEXXZ
?LockBuffer@CHString@@QAEPAGXZ
?LockFactoryMap@CWbemProviderGlue@@CGXXZ
?LockProviderMap@CWbemProviderGlue@@CGXXZ
?LockServer@CWbemGlueFactory@@UAGJH@Z
?LogError@CInstance@@IBEXPBG00J@Z
?MakeLocalPath@Provider@@IAE?AVCHString@@ABV2@@Z
?MakeLower@CHString@@QAEXXZ
?MakeReverse@CHString@@QAEXXZ
?MakeUpper@CHString@@QAEXXZ
?Mid@CHString@@QBE?AV1@H@Z
?Mid@CHString@@QBE?AV1@HH@Z
?MsgWndProc@CWinMsgEvent@@CGJPAUHWND__@@IIJ@Z
?NextSubKey@CRegistry@@QAEKXZ
?NextToken@CObjectPathParser@@AAEHXZ
?NormalizePath@@YGKPBG00KAAVCHString@@@Z
?NullOutUnsetProperties@CWbemProviderGlue@@AAEJPAUIWbemClassObject@@PAPAU2@ABUtagVARIANT@@@Z
?OnFinalRelease@CThreadBase@@MAEXXZ
?Open@CRegistry@@QAEJPAUHKEY__@@PBGK@Z
?OpenAndEnumerateSubKeys@CRegistry@@QAEJPAUHKEY__@@PBGK@Z
?OpenCurrentUser@CRegistry@@QAEKPBGK@Z
?OpenLocalMachineKeyAndReadValue@CRegistry@@QAEJPBG0AAVCHString@@@Z
?OpenNamespace@CWbemProviderGlue@@UAGJQAGJPAUIWbemContext@@PAPAUIWbemServices@@PAPAUIWbemCallResult@@@Z
?OpenSubKey@CRegistry@@AAEKXZ
?Parse@CObjectPathParser@@QAEHPBGPAPAUParsedObjectPath@@@Z
?PreProcessPutInstanceParms@CWbemProviderGlue@@AAEJPAUIWbemClassObject@@PAPAU2@PAUIWbemContext@@@Z
?PrepareToReOpen@CRegistry@@AAEXXZ
?PutClass@CWbemProviderGlue@@UAGJPAUIWbemClassObject@@JPAUIWbemContext@@PAPAUIWbemCallResult@@@Z
?PutClassAsync@CWbemProviderGlue@@UAGJPAUIWbemClassObject@@JPAUIWbemContext@@PAUIWbemObjectSink@@@Z
?PutInstance@CWbemProviderGlue@@UAGJPAUIWbemClassObject@@JPAUIWbemContext@@PAPAUIWbemCallResult@@@Z
?PutInstance@Provider@@AAEJPAUIWbemClassObject@@JPAVMethodContext@@@Z
?PutInstance@Provider@@MAEJABVCInstance@@J@Z
?PutInstanceAsync@CWbemProviderGlue@@UAGJPAUIWbemClassObject@@JPAUIWbemContext@@PAUIWbemObjectSink@@@Z
?QueryInterface@CWbemGlueFactory@@UAGJABU_GUID@@PAPAX@Z
?QueryInterface@CWbemProviderGlue@@UAGJABU_GUID@@PAPAX@Z
?QueryObjectSink@CWbemProviderGlue@@UAGJJPAPAUIWbemObjectSink@@@Z
?QueryPostProcess@MethodContext@@UAEXXZ
?RegisterForMessage@CWinMsgEvent@@IAEXI@Z
?Release@CHString@@IAEXXZ
?Release@CHString@@KGXPAUCHStringData@@@Z
?Release@CInstance@@QAEJXZ
?Release@CThreadBase@@QAEJXZ
?Release@CWbemGlueFactory@@UAGKXZ
?Release@CWbemProviderGlue@@UAGKXZ
?Release@MethodContext@@QAEJXZ
?ReleaseBuffer@CHString@@QAEXH@Z
?RemoveAll@CHPtrArray@@QAEXXZ
?RemoveAll@CHStringArray@@QAEXXZ
?RemoveAt@CHPtrArray@@QAEXHH@Z
?RemoveAt@CHStringArray@@QAEXHH@Z
?RemoveFromFactoryMap@CWbemProviderGlue@@KGXPBVCWbemGlueFactory@@@Z
?Reset@CFrameworkQuery@@AAEXXZ
?ReverseFind@CHString@@QBEHG@Z
?RewindSubKeys@CRegistry@@QAEXXZ
?Right@CHString@@QBE?AV1@H@Z
?SafeStrlen@CHString@@KGHPBG@Z
?SearchAndBuildList@CRegistrySearch@@QAEHVCHString@@AAVCHPtrArray@@00HPAUHKEY__@@@Z
?SearchMapForProvider@CWbemProviderGlue@@CGPAVProvider@@PBG0@Z
?SetAt@CHPtrArray@@QAEXHPAX@Z
?SetAt@CHString@@QAEXHG@Z
?SetAt@CHStringArray@@QAEXHPBG@Z
?SetAtGrow@CHPtrArray@@QAEXHPAX@Z
?SetAtGrow@CHStringArray@@QAEXHPBG@Z
?SetByte@CInstance@@QAE_NPBGE@Z
?SetCHString@CInstance@@QAE_NPBG0@Z
?SetCHString@CInstance@@QAE_NPBGABVCHString@@@Z
?SetCHString@CInstance@@QAE_NPBGPBD@Z
?SetCHStringResourceHandle@@YGXPAUHINSTANCE__@@@Z
?SetCharSplat@CInstance@@QAE_NPBG0@Z
Sections
.text Size: 167KB - Virtual size: 167KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 9KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
wintaylor2.1/Programs/tools/xp/gpresult.exe.exe windows:5 windows x86
c18a93106ce14460df5f92809776736a
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
LoadStringW
CharUpperW
wsprintfW
mpr
WNetAddConnection2W
WNetCancelConnection2W
WNetGetLastErrorW
ole32
CoInitializeSecurity
CoCreateInstance
CoTaskMemAlloc
CoTaskMemFree
CoUninitialize
CoInitializeEx
oleaut32
SafeArrayGetLBound
SafeArrayGetUBound
SysAllocStringByteLen
VariantChangeType
VariantClear
VariantCopy
VariantInit
SysFreeString
SafeArrayGetElement
SysStringLen
SysAllocString
secur32
TranslateNameW
GetComputerObjectNameW
GetUserNameExW
ws2_32
WSACleanup
inet_addr
WSAGetLastError
WSAStartup
gethostbyaddr
netapi32
NetApiBufferFree
DsGetDcNameW
NetServerGetInfo
framedyn
??1CHString@@QAE@XZ
??0CHString@@QAE@XZ
?GetData@CHString@@IBEPAUCHStringData@@XZ
?Empty@CHString@@QAEXXZ
?Compare@CHString@@QBEHPBG@Z
?ReleaseBuffer@CHString@@QAEXH@Z
?GetBufferSetLength@CHString@@QAEPAGH@Z
?Format@CHString@@QAAXPBGZZ
??4CHString@@QAEABV0@ABV0@@Z
?Mid@CHString@@QBE?AV1@H@Z
?Find@CHString@@QBEHG@Z
?FindOneOf@CHString@@QBEHPBG@Z
?Left@CHString@@QBE?AV1@H@Z
??YCHString@@QAEABV0@PBG@Z
??0CHString@@QAE@PBG@Z
?Mid@CHString@@QBE?AV1@HH@Z
?Find@CHString@@QBEHPBG@Z
??0CHString@@QAE@ABV0@@Z
??H@YG?AVCHString@@ABV0@PBG@Z
?MakeLower@CHString@@QAEXXZ
?SetAt@CHString@@QAEXHG@Z
??H@YG?AVCHString@@ABV0@0@Z
?GetBuffer@CHString@@QAEPAGH@Z
??4CHString@@QAEABV0@PBG@Z
ntdsapi
DsBindWithCredW
DsUnBindW
DsFreeNameResultW
DsCrackNamesW
msvcrt
calloc
wcstok
wcslen
free
_wcsicmp
??2@YAPAXI@Z
??3@YAXPAX@Z
__CxxFrameHandler
_iob
wcstod
wcstol
wcsstr
wcsncmp
_wcsnicmp
fflush
fprintf
wcschr
strtok
_CxxThrowException
_c_exit
_exit
?terminate@@YAXXZ
_controlfp
??1type_info@@UAE@XZ
_except_handler3
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
_initterm
__setusermatherr
__wgetmainargs
__winitenv
exit
_cexit
wcscpy
_XcptFilter
realloc
advapi32
RegCloseKey
RegQueryInfoKeyW
RegOpenKeyExW
RegConnectRegistryW
LookupAccountSidW
ConvertStringSidToSidW
ConvertStringSecurityDescriptorToSecurityDescriptorW
kernel32
CreateMutexW
CloseHandle
GetModuleHandleA
GetConsoleMode
SetConsoleMode
GetConsoleScreenBufferInfo
GetStdHandle
SetLastError
lstrlenW
WriteConsoleW
SetConsoleCursorPosition
lstrcmpiW
lstrcpyW
lstrcmpW
InterlockedIncrement
LocalAlloc
FormatMessageW
lstrcatW
InterlockedDecrement
GetComputerNameW
GetUserDefaultLCID
ReadFile
ReadConsoleW
MultiByteToWideChar
LoadLibraryW
GetProcAddress
FreeLibrary
LocalFree
GetLastError
OpenMutexW
GetTimeFormatW
lstrcpynW
WideCharToMultiByte
VerSetConditionMask
VerifyVersionInfoW
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
GetComputerNameExW
WaitForSingleObject
ReleaseMutex
FileTimeToLocalFileTime
FileTimeToSystemTime
GetLocalTime
GetDateFormatW
Sections
.text Size: 95KB - Virtual size: 94KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 176B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 21B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 20KB - Virtual size: 19KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
wintaylor2.1/Programs/tools/xp/hostname.exe.exe windows:5 windows x86
0493264954cd5100c5fa796a7d50d2fc
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvcrt
__p__commode
__p__fmode
__set_app_type
_controlfp
_cexit
_adjust_fdiv
_except_handler3
_XcptFilter
_exit
_c_exit
__setusermatherr
_initterm
__getmainargs
__initenv
_write
strchr
puts
exit
kernel32
FormatMessageA
LocalFree
GetModuleHandleA
GetLastError
user32
CharToOemBuffA
ws2_32
gethostname
WSAStartup
mswsock
s_perror
Sections
.text Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 480B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
wintaylor2.1/Programs/tools/xp/ipconfig.exe.exe windows:5 windows x86
2f7e45d749df4666ad04e44b570c3ad8
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvcrt
__setusermatherr
printf
toupper
swprintf
exit
setlocale
_c_exit
_exit
_XcptFilter
_cexit
wcscpy
__initenv
__getmainargs
_initterm
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
time
wcscat
wcslen
advapi32
OpenSCManagerW
OpenServiceW
ControlService
CloseServiceHandle
RegSetValueExW
RegCloseKey
RegQueryValueExA
RegOpenKeyExW
RegQueryValueExW
kernel32
GetModuleHandleA
SetUnhandledExceptionFilter
CloseHandle
EnterCriticalSection
LeaveCriticalSection
LocalFree
SetLastError
GetLastError
LocalAlloc
MultiByteToWideChar
GetSystemTimeAsFileTime
DeviceIoControl
CreateFileW
GetProcessHeap
GetComputerNameExW
WriteConsoleW
GetFileType
CompareStringW
GlobalFree
GetStdHandle
GetCommandLineW
FormatMessageW
GetUserDefaultLCID
GetTimeFormatW
GetDateFormatW
FileTimeToSystemTime
FileTimeToLocalFileTime
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
netman
HrPnpInstanceIdFromGuid
HrLanConnectionNameFromGuidOrPath
dnsapi
DnsFreeConfigStructure
DnsQuery_W
DnsRecordListFree
DnsFlushResolverCache
DnsQueryConfigAllocEx
DnsGetCacheDataTable
ws2_32
WSAAddressToStringW
inet_addr
htonl
inet_ntoa
WSAGetLastError
WSAStartup
iphlpapi
NhGetInterfaceNameFromGuid
GetInterfaceInfo
GetIfTable
GetIpAddrTable
GetIpForwardTable
NhpAllocateAndGetInterfaceInfoFromStack
GetNetworkParams
GetIpStatistics
GetAdaptersAddresses
ntdll
sprintf
RtlIpv6AddressToStringW
NtOpenFile
DbgPrint
NtCreateFile
RtlNtStatusToDosError
NtDeviceIoControlFile
NtWaitForSingleObject
NtClose
RtlInitUnicodeString
RtlIpv6AddressToStringA
rpcrt4
UuidFromStringW
setupapi
SetupDiCreateDeviceInfoList
SetupDiOpenDeviceInfoW
SetupDiDestroyDeviceInfoList
SetupDiGetDeviceRegistryPropertyW
shell32
CommandLineToArgvW
dhcpcsvc
DhcpStaticRefreshParams
DhcpHandlePnPEvent
DhcpEnumClasses
DhcpReleaseParameters
DhcpAcquireParameters
Sections
.text Size: 28KB - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 21KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
wintaylor2.1/Programs/tools/xp/ipxroute.exe.exe windows:5 windows x86
60b70dce519aed9ba8f6bff801f1881b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvcrt
__p__fmode
__p__commode
_adjust_fdiv
atoi
__setusermatherr
_initterm
__getmainargs
__initenv
_cexit
_controlfp
_exit
_c_exit
_strupr
strtoul
qsort
sprintf
exit
malloc
_iob
fprintf
free
printf
_except_handler3
_XcptFilter
__set_app_type
memmove
kernel32
GetLastError
FormatMessageA
MultiByteToWideChar
LocalAlloc
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetModuleHandleA
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
LocalFree
mprapi
MprConfigServerConnect
MprConfigGetGuidName
MprConfigGetFriendlyName
MprConfigServerDisconnect
ntdll
RtlInitUnicodeString
NtOpenFile
NtClose
NtDeviceIoControlFile
NtRequestWaitReplyPort
NtConnectPort
user32
CharToOemA
winstrm
s_ioctl
s_open
Sections
.text Size: 11KB - Virtual size: 10KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 384B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 10KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
wintaylor2.1/Programs/tools/xp/mem.exe
-
wintaylor2.1/Programs/tools/xp/nbtstat.exe.exe windows:5 windows x86
704d064ab89c81be8f16734e06488ed4
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvcrt
_except_handler3
__initenv
_cexit
_XcptFilter
_exit
exit
atoi
strncpy
memmove
sprintf
isprint
_write
vsprintf
__set_app_type
_controlfp
__p__fmode
__p__commode
__setusermatherr
_adjust_fdiv
_initterm
_c_exit
__getmainargs
advapi32
RegCloseKey
RegOpenKeyExA
RegQueryValueExA
kernel32
Sleep
MultiByteToWideChar
WideCharToMultiByte
GetModuleHandleA
FormatMessageA
LocalAlloc
LocalFree
ntdll
RtlUnicodeStringToAnsiString
NtClose
RtlFreeAnsiString
RtlUpcaseUnicodeStringToOemString
RtlExtendedLargeIntegerDivide
NtDeviceIoControlFile
NtWaitForSingleObject
RtlInitString
RtlAnsiStringToUnicodeString
NtCreateFile
RtlFreeUnicodeString
RtlGUIDFromString
RtlInitUnicodeString
user32
OemToCharBuffA
CharToOemBuffA
wsock32
ntohl
ord1108
ioctlsocket
iphlpapi
NhGetInterfaceNameFromDeviceGuid
Sections
.text Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 42KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 11KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
wintaylor2.1/Programs/tools/xp/net.exe.exe windows:5 windows x86
80c9d923cc8b4ddc6c2a925eb59ed60f
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvcrt
_setmode
qsort
wcsncmp
wcsncpy
wcsrchr
_c_exit
_exit
_XcptFilter
_cexit
__initenv
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
_ultow
wcspbrk
iswctype
_wcsupr
wcscmp
_wcsicmp
wcschr
wcscpy
wcscat
exit
sprintf
setlocale
_wcsnicmp
wcslen
_iob
_vsnwprintf
_snwprintf
putchar
malloc
swprintf
wcsspn
wcscspn
calloc
fread
ftell
_wcsdup
wcstok
_wfopen
_local_unwind2
memmove
_ultoa
advapi32
RegOpenKeyExW
RegQueryValueExW
RegCloseKey
RegEnumValueW
kernel32
LoadLibraryW
FormatMessageW
LocalFree
GetModuleFileNameW
SetLastError
PeekConsoleInputW
GetConsoleMode
SetConsoleMode
ReadConsoleW
GetFileType
DelayLoadFailureHook
GetModuleHandleA
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetConsoleScreenBufferInfo
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
LoadLibraryA
InterlockedCompareExchange
FreeLibrary
WriteConsoleW
GetDriveTypeW
WriteProfileStringW
GetProfileStringW
CreateProcessW
CloseHandle
WaitForSingleObject
WriteFile
WideCharToMultiByte
LocalAlloc
GetCurrentProcess
GetProcAddress
GetCommandLineW
GetLastError
GetStdHandle
SetThreadLocale
GetSystemDefaultLangID
GetCPInfo
GetConsoleOutputCP
GetExitCodeProcess
netapi32
NetServerGetInfo
NetServerEnum
NetWkstaGetInfo
NetWkstaUserGetInfo
I_NetPathType
I_NetNameValidate
NetApiBufferReallocate
NetApiBufferAllocate
NetapipBufferAllocate
NetShareEnum
NetApiBufferFree
NetUseEnum
NetUseGetInfo
NetUserGetInfo
mpr
WNetGetLastErrorW
WNetAddConnection2W
WNetCancelConnection2W
WNetCloseEnum
WNetGetConnectionW
WNetOpenEnumW
WNetEnumResourceW
ntdll
RtlAllocateHeap
RtlInitUnicodeString
RtlOemStringToUnicodeString
RtlInitAnsiString
Sections
.text Size: 32KB - Virtual size: 31KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 7KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 976B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
wintaylor2.1/Programs/tools/xp/netstat.exe.exe windows:5 windows x86
9b2e0e6048c9be88c7fb33585f4e1f8a
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvcrt
_iob
exit
toupper
sscanf
_strupr
_c_exit
_exit
_XcptFilter
_cexit
__initenv
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
sprintf
_except_handler3
_controlfp
time
fprintf
strchr
_setmode
system
advapi32
LookupPrivilegeValueA
AdjustTokenPrivileges
OpenProcessToken
kernel32
GetModuleHandleA
SetUnhandledExceptionFilter
UnhandledExceptionFilter
CloseHandle
LoadLibraryA
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
LoadLibraryExA
Sleep
FreeLibrary
HeapFree
GetProcessHeap
OpenProcess
lstrcmpiA
GetProcAddress
GetCurrentProcess
GetSystemTimeAsFileTime
TerminateProcess
GetLastError
GetSystemDirectoryA
LocalFree
FormatMessageA
dbghelp
SymInitialize
SymSetSearchPath
SymLoadModuleEx
SymGetModuleInfo64
SymCleanup
psapi
EnumProcessModules
GetModuleInformation
GetModuleBaseNameA
GetModuleFileNameExA
iphlpapi
AllocateAndGetTcpExTableFromStack
AllocateAndGetUdpExTableFromStack
GetIcmpStatsFromStackEx
GetUdpStatsFromStackEx
AllocateAndGetUdpExTable2FromStack
GetIpStatsFromStackEx
AllocateAndGetTcpExTable2FromStack
GetTcpStatsFromStackEx
user32
CharToOemBuffA
ws2_32
htons
getnameinfo
gethostname
ntohl
ntohs
WSAStartup
ntdll
RtlAllocateHeap
RtlFreeHeap
NtQuerySystemInformation
snmpapi
SnmpUtilVarBindFree
SnmpUtilMemFree
SnmpUtilMemAlloc
SnmpUtilOidCpy
Sections
.text Size: 18KB - Virtual size: 18KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 14KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
wintaylor2.1/Programs/tools/xp/route.exe.exe windows:5 windows x86
e2895047f39a35c5d9cbe1c02206efe5
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvcrt
printf
_strupr
strchr
_stricmp
strtol
toupper
exit
_except_handler3
malloc
realloc
free
_ultoa
atoi
strncpy
_iob
_controlfp
__set_app_type
__p__fmode
__p__commode
__setusermatherr
_adjust_fdiv
_initterm
__getmainargs
__initenv
_cexit
_XcptFilter
_exit
sprintf
_c_exit
_setmode
fprintf
advapi32
RegSetValueExA
RegOpenKeyA
RegEnumValueA
RegDeleteValueA
kernel32
HeapFree
GetLastError
GetProcessHeap
CloseHandle
FormatMessageA
LocalFree
GetModuleHandleA
GetVersion
iphlpapi
GetBestRoute
AllocateAndGetIpForwardTableFromStack
DeleteIpForwardEntry
AllocateAndGetIpAddrTableFromStack
CreateIpForwardEntry
GetIpAddrTable
AllocateAndGetIfTableFromStack
user32
CharToOemBuffA
ws2_32
inet_addr
inet_ntoa
WSAStartup
htonl
gethostbyname
mswsock
inet_network
getnetbyname
Sections
.text Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 60B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 10KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
wintaylor2.1/Programs/tools/xp/schtasks.exe.exe windows:5 windows x86
864cf7bf955aa07288c51feaba878727
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
wsprintfW
LoadStringW
MessageBeep
CharUpperW
mpr
WNetGetLastErrorW
WNetCancelConnection2W
WNetAddConnection2W
ole32
CoInitializeSecurity
CoCreateInstance
CoUninitialize
CoTaskMemFree
CoInitializeEx
secur32
GetUserNameExW
ws2_32
WSACleanup
inet_addr
WSAGetLastError
WSAStartup
gethostbyaddr
netapi32
NetServerGetInfo
NetApiBufferFree
shlwapi
StrTrimW
msvcrt
__set_app_type
_except_handler3
_controlfp
__winitenv
_cexit
_XcptFilter
_exit
_c_exit
strtok
fprintf
fflush
realloc
_wcsnicmp
wcsncmp
__p__fmode
wcstol
wcstod
free
calloc
wcscat
_ultow
wcsspn
swprintf
wcspbrk
iswctype
wcstok
wcstoul
wcsrchr
wcslen
wcscpy
wcschr
_iob
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
wcsstr
__wgetmainargs
exit
kernel32
FormatMessageW
lstrcmpiW
lstrlenW
GetLocalTime
GetLastError
lstrcatW
GetLocaleInfoW
GetUserDefaultLCID
GetModuleHandleA
FileTimeToSystemTime
GetComputerNameExW
lstrcmpW
MultiByteToWideChar
LoadLibraryExA
ReadConsoleW
LocalFree
LoadLibraryW
GetProcAddress
FreeLibrary
lstrcpynW
WideCharToMultiByte
ReadFile
WriteConsoleW
SetConsoleMode
GetConsoleMode
GetStdHandle
VerSetConditionMask
VerifyVersionInfoW
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
SetLastError
GetDateFormatW
GetTimeFormatW
lstrcpyW
Sections
.text Size: 71KB - Virtual size: 70KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 112B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 21B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 46KB - Virtual size: 45KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
wintaylor2.1/Programs/tools/xp/tasklist.exe.exe windows:5 windows x86
081fa98fe610ece9cc0b15849b57e52d
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvcrt
__winitenv
__wgetmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
??1type_info@@UAE@XZ
_controlfp
__CxxFrameHandler
_except_handler3
?terminate@@YAXXZ
wcscpy
_wcsicmp
_wcsdup
calloc
_iob
wcschr
??2@YAPAXI@Z
??3@YAXPAX@Z
free
exit
_cexit
_XcptFilter
_exit
_c_exit
_CxxThrowException
wcstod
wcstol
wcsstr
wcsncmp
_wcsnicmp
realloc
fflush
fprintf
strtok
_wtoi64
wcstok
wcslen
advapi32
EnumServicesStatusExW
CloseServiceHandle
LookupAccountSidW
RegConnectRegistryW
RegCloseKey
RegQueryValueExW
OpenProcessToken
LookupPrivilegeValueW
AdjustTokenPrivileges
OpenSCManagerW
kernel32
VerifyVersionInfoW
VerSetConditionMask
GetModuleHandleA
LocalFree
lstrcatW
FormatMessageW
LocalAlloc
InterlockedIncrement
WideCharToMultiByte
GetLastError
SetConsoleCursorPosition
WriteConsoleW
HeapAlloc
HeapReAlloc
InterlockedDecrement
OpenProcess
GetNumberFormatW
lstrcmpiW
lstrlenW
lstrcpynW
MultiByteToWideChar
ReadConsoleW
ReadFile
SetConsoleMode
GetConsoleMode
lstrcmpW
GetComputerNameExW
FileTimeToSystemTime
GetCurrentThreadId
GetTimeFormatW
CloseHandle
GetCurrentProcess
FreeLibrary
HeapFree
GetProcessHeap
GetConsoleScreenBufferInfo
GetStdHandle
GetProcAddress
LoadLibraryW
lstrcpyW
GetLocaleInfoW
SetLastError
ntdll
RtlTimeToElapsedTimeFields
RtlLargeIntegerToChar
user32
GetWindow
GetWindowLongW
GetWindowThreadProcessId
CloseDesktop
EnumWindows
SetThreadDesktop
OpenDesktopW
GetThreadDesktop
GetWindowTextW
EnumDesktopsW
SetProcessWindowStation
OpenWindowStationW
GetProcessWindowStation
EnumWindowStationsW
wsprintfW
CharUpperW
LoadStringW
CloseWindowStation
FindWindowExW
mpr
WNetCancelConnection2W
WNetGetLastErrorW
WNetAddConnection2W
ole32
CoCreateInstance
CoInitializeEx
CoTaskMemFree
CoUninitialize
CoTaskMemAlloc
CoInitializeSecurity
oleaut32
SysAllocStringByteLen
VariantInit
SysFreeString
VariantChangeType
VariantCopy
VariantClear
SysAllocString
SysStringLen
secur32
GetUserNameExW
ws2_32
WSAGetLastError
inet_addr
gethostbyaddr
WSACleanup
WSAStartup
framedyn
??H@YG?AVCHString@@ABV0@PBG@Z
??4CHString@@QAEABV0@ABV0@@Z
?Left@CHString@@QBE?AV1@H@Z
?GetBuffer@CHString@@QAEPAGH@Z
??4CHString@@QAEABV0@PBD@Z
??4CHString@@QAEABV0@PBG@Z
??YCHString@@QAEABV0@ABV0@@Z
?TrimLeft@CHString@@QAEXXZ
?TrimRight@CHString@@QAEXXZ
?Find@CHString@@QBEHG@Z
?Compare@CHString@@QBEHPBG@Z
?Format@CHString@@QAAXPBGZZ
?Empty@CHString@@QAEXXZ
?GetBufferSetLength@CHString@@QAEPAGH@Z
?Mid@CHString@@QBE?AV1@HH@Z
?ReleaseBuffer@CHString@@QAEXH@Z
?GetData@CHString@@IBEPAUCHStringData@@XZ
??0CHString@@QAE@XZ
??1CHString@@QAE@XZ
?FindOneOf@CHString@@QBEHPBG@Z
??YCHString@@QAEABV0@PBG@Z
??0CHString@@QAE@PBG@Z
?Find@CHString@@QBEHPBG@Z
?Mid@CHString@@QBE?AV1@H@Z
netapi32
NetApiBufferFree
NetServerGetInfo
dbghelp
EnumerateLoadedModules
Sections
.text Size: 55KB - Virtual size: 55KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 108B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 21B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 13KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
wintaylor2.1/Programs/tools/xp/wmic.exe.exe windows:5 windows x86
9568be97a635354a409e5b38875082fa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvcrt
?terminate@@YAXXZ
_controlfp
??2@YAPAXI@Z
__CxxFrameHandler
swprintf
_ltow
_CxxThrowException
_wcsicmp
wcstok
??1type_info@@UAE@XZ
_onexit
__dllonexit
_except_handler3
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__wgetmainargs
__winitenv
exit
_cexit
_XcptFilter
_exit
_c_exit
_wfreopen
_wtoi64
_i64tow
_kbhit
_filelength
_wremove
fputws
fprintf
fflush
fwprintf
wcsncpy
wcsncmp
fread
fseek
towlower
swscanf
wctomb
wcsstr
fgets
wcscmp
wcstoul
_wfopen
fwrite
fclose
_ftol
_getch
ceil
_wsystem
_wtoi
_itow
wcslen
??0exception@@QAE@ABV0@@Z
_iob
fgetws
sprintf
_wcsnicmp
wcscpy
_wtol
??3@YAXPAX@Z
msvcp60
??0out_of_range@std@@QAE@ABV01@@Z
??1out_of_range@std@@UAE@XZ
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??0out_of_range@std@@QAE@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@1@@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBDABV?$allocator@D@1@@Z
?append@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV12@PBG@Z
?compare@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QBEHIIPBG@Z
?replace@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV12@IIPBG@Z
??1?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@XZ
?data@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QBEPBGXZ
??0logic_error@std@@QAE@ABV01@@Z
?npos@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@2IB
?find@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QBEIPBGII@Z
??0?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@PBGABV?$allocator@G@1@@Z
?find@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QBEIPBGI@Z
?end@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEPAGXZ
??A?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAGI@Z
?size@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QBEIXZ
?begin@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEPAGXZ
??4?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV01@PBG@Z
??0?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@ABV?$allocator@G@1@@Z
?rfind@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QBEIPBGII@Z
??0_Lockit@std@@QAE@XZ
??1_Lockit@std@@QAE@XZ
??1_Winit@std@@QAE@XZ
??1Init@ios_base@std@@QAE@XZ
??0_Winit@std@@QAE@XZ
??0Init@ios_base@std@@QAE@XZ
?substr@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QBE?AV12@II@Z
advapi32
RegCloseKey
RegOpenKeyExW
GetTokenInformation
AdjustTokenPrivileges
OpenProcessToken
RegSetValueExW
RegCreateKeyExW
RegDeleteValueW
RegQueryValueExW
kernel32
CompareFileTime
CreateEventW
CreateThread
SetEvent
WaitForSingleObject
DeleteFileW
GetCommandLineW
GlobalFree
GlobalAlloc
GlobalLock
GlobalUnlock
LocalAlloc
LoadLibraryW
FreeLibrary
GetProcAddress
GetWindowsDirectoryW
GetSystemDirectoryW
GetCurrentProcess
SetConsoleScreenBufferSize
GetConsoleMode
SetConsoleMode
ReadConsoleW
SetConsoleCursorPosition
WriteConsoleW
WideCharToMultiByte
GetFileTime
MultiByteToWideChar
GetComputerNameW
GetSystemDefaultUILanguage
GetConsoleScreenBufferInfo
FormatMessageW
GetStdHandle
GetFileType
lstrcatW
GetLocalTime
GetFileSizeEx
GetLastError
WriteFile
CreateFileW
SetFilePointer
SetLastError
CloseHandle
LocalFree
lstrcpynW
lstrcpyW
lstrlenW
GetCurrentThreadId
InterlockedDecrement
InterlockedIncrement
GetUserDefaultUILanguage
SetConsoleCtrlHandler
QueryPerformanceCounter
GetTickCount
GetModuleHandleA
lstrlenA
GetCurrentProcessId
GetSystemTimeAsFileTime
TerminateProcess
UnhandledExceptionFilter
CompareStringW
CopyFileW
SetUnhandledExceptionFilter
ole32
CoUninitialize
CoInitializeEx
CoSetProxyBlanket
CoCreateInstanceEx
CoCreateInstance
CoInitializeSecurity
oleaut32
SysStringLen
SysFreeString
SysAllocStringByteLen
VariantClear
SafeArrayGetElement
SafeArrayGetUBound
SafeArrayGetLBound
VariantInit
SafeArrayDestroy
SafeArrayPutElement
SafeArrayCreate
VariantChangeType
VariantCopy
SysStringByteLen
SafeArrayGetVartype
SysAllocString
user32
SetClipboardData
EmptyClipboard
OpenClipboard
LoadStringW
CloseClipboard
wsprintfW
CharUpperW
framedyn
?FindOneOf@CHString@@QBEHPBG@Z
?GetBuffer@CHString@@QAEPAGH@Z
?TrimRight@CHString@@QAEXXZ
?TrimLeft@CHString@@QAEXXZ
??0CHString@@QAE@PBG@Z
?Mid@CHString@@QBE?AV1@H@Z
??YCHString@@QAEABV0@ABV0@@Z
?GetData@CHString@@IBEPAUCHStringData@@XZ
?Left@CHString@@QBE?AV1@H@Z
?Find@CHString@@QBEHPBG@Z
??0CHString@@QAE@ABV0@@Z
??4CHString@@QAEABV0@PBG@Z
??0CHString@@QAE@XZ
??1CHString@@QAE@XZ
?Empty@CHString@@QAEXXZ
??YCHString@@QAEABV0@PBG@Z
??0CHString@@QAE@PBD@Z
??H@YG?AVCHString@@ABV0@PBG@Z
?Right@CHString@@QBE?AV1@H@Z
??4CHString@@QAEABV0@ABV0@@Z
?Format@CHString@@QAAXPBGZZ
shlwapi
StrStrIW
ws2_32
gethostbyname
WSACleanup
WSAStartup
inet_addr
secur32
GetUserNameExW
iphlpapi
IcmpSendEcho
IcmpCreateFile
IcmpCloseHandle
Sections
.text Size: 289KB - Virtual size: 289KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 59KB - Virtual size: 59KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
wintaylor2.1/Programs/whoistd.cfg
-
wintaylor2.1/Programs/whoistd.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 48KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 30KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
wintaylor2.1/RegOcx4Vista.bat
-
wintaylor2.1/WinTaylor.exe.exe windows:4 windows x86
070c468ec536f964f03c55a37885f83e
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvbvm60
_CIcos
_adj_fptan
__vbaVarMove
__vbaFreeVar
__vbaFreeVarList
_adj_fdiv_m64
__vbaFreeObjList
_adj_fprem1
__vbaStrCat
__vbaSetSystemError
__vbaHresultCheckObj
_adj_fdiv_m32
__vbaObjSet
ord595
__vbaOnError
_adj_fdiv_m16i
__vbaObjSetAddref
_adj_fdivr_m16i
_CIsin
__vbaChkstk
EVENT_SINK_AddRef
DllFunctionCall
_adj_fpatan
EVENT_SINK_Release
ord600
_CIsqrt
EVENT_SINK_QueryInterface
__vbaExceptHandler
_adj_fprem
_adj_fdivr_m64
__vbaFPException
_CIlog
__vbaNew2
_adj_fdiv_m32i
_adj_fdivr_m32i
__vbaFreeStrList
_adj_fdivr_m32
_adj_fdiv_r
ord685
ord100
__vbaLateMemCall
__vbaVarDup
__vbaStrToAnsi
_CIatan
__vbaStrMove
_allmul
_CItan
_CIexp
__vbaFreeStr
__vbaFreeObj
Sections
.text Size: 664KB - Virtual size: 662KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 376KB - Virtual size: 374KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
wintaylor2.1/autorun.inf
-
wintaylor2.1/icon.ico
-
wintaylor2.1/vbrun60.exe.exe windows:5 windows x86
b83464d8132ecd9f810820e192566e15
Code Sign
03:c7:8f:37:db:92:28:df:3c:bb:1a:ad:82:fa:67:10Certificate
IssuerOU=VeriSign Commercial Software Publishers CA,O=VeriSign\, Inc.,L=InternetNot Before09-04-1996 00:00Not After07-01-2004 23:59SubjectOU=VeriSign Commercial Software Publishers CA,O=VeriSign\, Inc.,L=Internetfc:a4:a5:9f:2c:0f:c0:b9:03:98:33:1b:7b:54:54:1dCertificate
IssuerOU=VeriSign\, Inc.+OU=VeriSign Time Stamping Service Root+OU=NO LIABILITY ACCEPTED\, (c)97 VeriSign\, Inc.,O=VeriSign Trust NetworkNot Before16-11-1999 00:00Not After06-01-2004 23:59SubjectCN=VeriSign Time Stamping Service CA SW1,OU=VeriSign Trust Network+OU=www.verisign.com/repository/RPA Incorp. by Ref.\,LIAB.LTD(c)98,O=VeriSign\, Inc.Extended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageContentCommitment
75:f2:8e:f8:a8:fb:ea:6d:11:52:97:14:95:4b:65:5cCertificate
IssuerOU=VeriSign Commercial Software Publishers CA,O=VeriSign\, Inc.,L=InternetNot Before04-04-2000 00:00Not After17-04-2001 23:59SubjectCN=Microsoft Corporation,OU=VeriSign Commercial Software Publishers CA+OU=www.verisign.com/repository/RPA Incorp. by Ref.\,LIAB.LTD(c)98+OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=Microsoft Corporation,O=VeriSign\, Inc.,L=Internet+L=Redmond,ST=Washington,C=USKey Usages
KeyUsageDigitalSignature
KeyUsageKeyEncipherment
Signer
Actual PE DigestDigest AlgorithmPE Digest MatchesfalseHeaders
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
advapi32
RegCloseKey
EqualSid
AllocateAndInitializeSid
GetTokenInformation
OpenProcessToken
AdjustTokenPrivileges
LookupPrivilegeValueA
FreeSid
RegDeleteValueA
RegOpenKeyExA
RegSetValueExA
RegQueryValueExA
RegCreateKeyExA
RegQueryInfoKeyA
kernel32
lstrcatA
GetFileAttributesA
GetShortPathNameA
GetPrivateProfileStringA
GetPrivateProfileIntA
GetCurrentProcess
lstrlenA
lstrcmpiA
lstrcpyA
GetModuleFileNameA
FreeLibrary
LocalAlloc
GetLastError
GetSystemDirectoryA
LoadLibraryA
FindClose
FindNextFileA
DeleteFileA
SetFileAttributesA
lstrcmpA
FindFirstFileA
_lclose
_llseek
_lopen
GetWindowsDirectoryA
GetProcAddress
RemoveDirectoryA
GlobalUnlock
GlobalLock
GlobalAlloc
ExitProcess
GetModuleHandleA
GetStartupInfoA
CloseHandle
LoadResource
FindResourceA
CreateMutexA
SetEvent
CreateEventA
SetCurrentDirectoryA
CreateThread
ResetEvent
TerminateThread
GetVersionExA
LocalFree
GetExitCodeProcess
WaitForSingleObject
CreateProcessA
GetTempPathA
FreeResource
LockResource
SizeofResource
CreateFileA
ReadFile
WriteFile
SetFilePointer
SetFileTime
LocalFileTimeToFileTime
DosDateTimeToFileTime
GetTempFileNameA
GetSystemInfo
GetDiskFreeSpaceA
GetDriveTypeA
lstrcpynA
GetVolumeInformationA
GetCurrentDirectoryA
LoadLibraryExA
GetCommandLineA
CreateDirectoryA
GlobalFree
FormatMessageA
IsDBCSLeadByte
gdi32
GetDeviceCaps
user32
EndDialog
wsprintfA
ExitWindowsEx
CharNextA
CharUpperA
GetDesktopWindow
SetWindowLongA
GetWindowLongA
CallWindowProcA
GetDlgItem
SetForegroundWindow
SetWindowTextA
SendDlgItemMessageA
EnableWindow
GetDlgItemTextA
SendMessageA
DispatchMessageA
LoadStringA
PeekMessageA
MessageBoxA
CharPrevA
SetWindowPos
ReleaseDC
GetDC
GetWindowRect
ShowWindow
DialogBoxIndirectParamA
SetDlgItemTextA
MessageBeep
MsgWaitForMultipleObjects
comctl32
ord17
version
GetFileVersionInfoSizeA
VerQueryValueA
GetFileVersionInfoA
Sections
.text Size: 36KB - Virtual size: 35KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 993KB - Virtual size: 996KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ