0a47543e9eb86c7ae33c21919c80aca7

Sharing

Copy URL Twitter E-mail

General

Target

0a47543e9eb86c7ae33c21919c80aca7
Size

8.0MB
MD5

0a47543e9eb86c7ae33c21919c80aca7
SHA1

46f7d3d95693a04321d27fc95757cc982cbd1a88
SHA256

5614332e03754e3439c7a357ce506d81f001c7a862bbcea432aa2feb26dbcb25
SHA512

ecd80252f413f5343eb9cb769fd172288da7df7f0ee50ce871fc9d9a4ad8e0d0b2db33f8aab9b67d3fc05c65dabfae2a951fe03838805be00febce923167729a
SSDEEP

196608:E+ZNkNEmGSB8qBuOyIdi0o8kcupOk/kvaJ8l:tZNQh4OsRfl/Yrl

Score

3^/10

Malware Config

Signatures

Unsigned PE 15 IoCs

Checks for missing Authenticode signature.

resource
unpack001/200691417145441/莒南妇保院门诊收款管理系统/门诊收款/Avi_play.exe
unpack001/200691417145441/莒南妇保院门诊收款管理系统/门诊收款/CKY95H.dll
unpack001/200691417145441/莒南妇保院门诊收款管理系统/门诊收款/Pcomm.dll
unpack001/200691417145441/莒南妇保院门诊收款管理系统/门诊收款/PrintCtrl.dll
unpack001/200691417145441/莒南妇保院门诊收款管理系统/门诊收款/dbnetlib.dll
unpack001/200691417145441/莒南妇保院门诊收款管理系统/门诊收款/dbnmpntw.dll
unpack001/200691417145441/莒南妇保院门诊收款管理系统/门诊收款/kernel32.dll
unpack001/200691417145441/莒南妇保院门诊收款管理系统/门诊收款/libjcc.dll
unpack001/200691417145441/莒南妇保院门诊收款管理系统/门诊收款/libjsybheap.dll
unpack001/200691417145441/莒南妇保院门诊收款管理系统/门诊收款/msxml4.dll
unpack001/200691417145441/莒南妇保院门诊收款管理系统/门诊收款/msxml4r.dll
unpack001/200691417145441/莒南妇保院门诊收款管理系统/门诊收款/ntwdblib.DLL
unpack001/200691417145441/莒南妇保院门诊收款管理系统/门诊收款/pbmenubitmap.dll
unpack001/200691417145441/莒南妇保院门诊收款管理系统/门诊收款/pbpl_dwsrv.dll
unpack001/200691417145441/莒南妇保院门诊收款管理系统/门诊收款/sk.dll

Files

0a47543e9eb86c7ae33c21919c80aca7
.rar
200691417145441/下载说明.htm
.html .js polyglot
200691417145441/免费『商业源码』.url
200691417145441/新云软件.url
.url
200691417145441/莒南妇保院门诊收款管理系统/免费『商业源码』.url
200691417145441/莒南妇保院门诊收款管理系统/门诊收款/0265.ico
200691417145441/莒南妇保院门诊收款管理系统/门诊收款/Avi_play.exe
.exe windows:1 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 160KB - Virtual size: 159KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

DATA
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 1KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 348KB - Virtual size: 364KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
200691417145441/莒南妇保院门诊收款管理系统/门诊收款/CKY95H.dll
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

drawpic
dsbdll

Sections

CODE
Size: 482KB - Virtual size: 481KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 86B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 33KB - Virtual size: 33KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 3.6MB - Virtual size: 3.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
200691417145441/莒南妇保院门诊收款管理系统/门诊收款/Clock.ico
200691417145441/莒南妇保院门诊收款管理系统/门诊收款/Com10.ICO
200691417145441/莒南妇保院门诊收款管理系统/门诊收款/H_point.cur
200691417145441/莒南妇保院门诊收款管理系统/门诊收款/Handshak.ico
200691417145441/莒南妇保院门诊收款管理系统/门诊收款/Hispublic.pbl
200691417145441/莒南妇保院门诊收款管理系统/门诊收款/Hourglss.ico
200691417145441/莒南妇保院门诊收款管理系统/门诊收款/Install.log
200691417145441/莒南妇保院门诊收款管理系统/门诊收款/LyData.ini
200691417145441/莒南妇保院门诊收款管理系统/门诊收款/P_1.bmp
200691417145441/莒南妇保院门诊收款管理系统/门诊收款/P_2.bmp
200691417145441/莒南妇保院门诊收款管理系统/门诊收款/P_3.bmp
200691417145441/莒南妇保院门诊收款管理系统/门诊收款/Pcomm.dll
.dll windows:4 windows x86 arch:x86

4881409017ce4266fba153f91972666c

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

TlsFree
LeaveCriticalSection
EnterCriticalSection
EscapeCommFunction
CloseHandle
WriteFile
CreateFileA
SetCommTimeouts
GetCommTimeouts
ReadFile
SetFilePointer
SetCommState
ClearCommBreak
Sleep
SetCommBreak
SuspendThread
GetCurrentThread
SetCommMask
DeleteCriticalSection
GetTickCount
GetVersion
ClearCommError
PurgeComm
GetOverlappedResult
GetLastError
SetLastError
DeviceIoControl
CreateThread
ResumeThread
GetCommMask
WaitCommEvent
GetCommModemStatus
InitializeCriticalSection
CreateEventA
GetCommState
WaitForSingleObject
lstrlenA
lstrcpyA
MultiByteToWideChar
GetStringTypeA
GetCommandLineA
ExitProcess
TerminateProcess
GetCurrentProcess
GetCurrentThreadId
TlsSetValue
TlsAlloc
SetEvent
TlsGetValue
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
GetModuleHandleA
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
HeapFree
RtlUnwind
LCMapStringA
GetStringTypeW
HeapAlloc
GetCPInfo
GetACP
GetOEMCP
VirtualAlloc
HeapReAlloc
GetProcAddress
LoadLibraryA
LCMapStringW
InterlockedDecrement
InterlockedIncrement

user32

wsprintfA

Exports

Exports

sio_AbortRead
sio_AbortWrite
sio_ActXoff
sio_ActXon
sio_DTR
sio_DirectGetLStatus
sio_FtASCIIRx
sio_FtASCIITx
sio_FtKermitRx
sio_FtKermitTx
sio_FtXmodem1KCRCRx
sio_FtXmodem1KCRCTx
sio_FtXmodemCRCRx
sio_FtXmodemCRCTx
sio_FtXmodemCheckSumRx
sio_FtXmodemCheckSumTx
sio_FtYmodemRx
sio_FtYmodemTx
sio_FtZmodemRx
sio_FtZmodemRxAuto
sio_FtZmodemTx
sio_GetPCISlot
sio_GetReadTimeouts
sio_GetWriteTimeouts
sio_IRQTest
sio_IsMoxaBoard
sio_MoxaBoardType
sio_RTS
sio_SetReadTimeouts
sio_SetWriteTimeouts
sio_TxLowWater
sio_Tx_empty_irq
sio_Tx_hold
sio_UARTTest
sio_baud
sio_break
sio_break_ex
sio_break_irq
sio_close
sio_cnt_irq
sio_data_status
sio_flowctrl
sio_flush
sio_getbaud
sio_getch
sio_getflow
sio_getmode
sio_ioctl
sio_iqueue
sio_lctrl
sio_linput
sio_loopback
sio_lstatus
sio_modem_irq
sio_open
sio_oqueue
sio_putb_x
sio_putb_x_ex
sio_putch
sio_read
sio_term_irq
sio_view
sio_write

Sections

.text
Size: 48KB - Virtual size: 44KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 96KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
200691417145441/莒南妇保院门诊收款管理系统/门诊收款/Player.ico
200691417145441/莒南妇保院门诊收款管理系统/门诊收款/PrintCtrl.dll
.dll windows:4 windows x86 arch:x86

40927c00b70b924f907639bf408b08a9

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

RtlUnwind
GetCommandLineA
RaiseException
HeapAlloc
TerminateProcess
HeapSize
HeapReAlloc
GetACP
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
ExitProcess
HeapFree
HeapDestroy
HeapCreate
VirtualFree
SetUnhandledExceptionFilter
VirtualAlloc
IsBadWritePtr
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
IsBadReadPtr
IsBadCodePtr
SetStdHandle
FindResourceA
LoadResource
lstrcmpA
lstrlenA
lstrcpyA
lstrcatA
WriteProfileStringA
GlobalAlloc
SetFilePointer
FlushFileBuffers
WriteFile
GetCurrentProcess
WritePrivateProfileStringA
GetProcessVersion
GetOEMCP
GetCPInfo
SetLastError
GetLastError
lstrcpynA
GlobalFlags
MulDiv
LocalReAlloc
SetErrorMode
TlsGetValue
GlobalReAlloc
GlobalLock
GlobalFree
TlsSetValue
EnterCriticalSection
GlobalHandle
LeaveCriticalSection
TlsFree
InitializeCriticalSection
DeleteCriticalSection
TlsAlloc
GetEnvironmentStrings
LocalFree
LocalAlloc
GlobalUnlock
InterlockedDecrement
MultiByteToWideChar
WideCharToMultiByte
InterlockedIncrement
GetModuleFileNameA
CloseHandle
FreeLibrary
GetCurrentThread
LoadLibraryA
GlobalGetAtomNameA
GetVersion
GetCurrentThreadId
GlobalFindAtomA
lstrcmpiA
GlobalAddAtomA
GetProcAddress
GlobalDeleteAtom
GetModuleHandleA
GetEnvironmentStringsW
LockResource
GetEnvironmentVariableA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetVersionExA

user32

IsDialogMessageA
SetWindowTextA
ShowWindow
EnableMenuItem
CheckMenuItem
SetMenuItemBitmaps
ModifyMenuA
GetMenuState
LoadBitmapA
GetMenuCheckMarkDimensions
PostQuitMessage
SetCursor
GetCursorPos
ValidateRect
TranslateMessage
GetMessageA
UnregisterClassA
GetClassNameA
PtInRect
ClientToScreen
ReleaseDC
GetDC
TabbedTextOutA
DrawTextA
GrayStringA
LoadCursorA
GetSysColorBrush
DestroyMenu
LoadStringA
SendDlgItemMessageA
MapWindowPoints
GetSysColor
PeekMessageA
DispatchMessageA
GetFocus
SetFocus
AdjustWindowRectEx
PostMessageA
LoadIconA
CopyRect
UpdateWindow
IsWindowVisible
GetTopWindow
MessageBoxA
GetCapture
WinHelpA
wsprintfA
GetClassInfoA
GetMenu
GetMenuItemCount
GetSubMenu
GetMenuItemID
GetWindowTextA
GetDlgCtrlID
GetKeyState
DefWindowProcA
CallNextHookEx
GetClassLongA
SetPropA
UnhookWindowsHookEx
GetPropA
CallWindowProcA
RemovePropA
GetMessageTime
GetMessagePos
GetLastActivePopup
GetForegroundWindow
SetForegroundWindow
GetWindow
SetWindowLongA
SetWindowPos
RegisterWindowMessageA
SystemParametersInfoA
IsIconic
GetWindowPlacement
GetWindowRect
GetNextDlgTabItem
EndDialog
GetActiveWindow
SetActiveWindow
IsWindow
GetSystemMetrics
CreateDialogIndirectParamA
DestroyWindow
GetParent
GetClientRect
GetWindowLongA
GetDlgItem
IsWindowEnabled
SendMessageA
SendMessageTimeoutA
EnableWindow
SetWindowsHookExA
CreateWindowExA
RegisterClassA

gdi32

SetBkColor
GetObjectA
SetTextColor
DeleteObject
CreateBitmap
SelectObject
GetDeviceCaps
GetStockObject
SaveDC
RestoreDC
SetMapMode
OffsetViewportOrgEx
SetViewportExtEx
SetViewportOrgEx
ScaleViewportExtEx
ScaleWindowExtEx
DeleteDC
PtVisible
RectVisible
ExtTextOutA
Escape
TextOutA
SetWindowExtEx
GetClipBox

comdlg32

PrintDlgA

winspool.drv

OpenPrinterA
SetFormA
DeleteFormA
DeviceCapabilitiesA
GetPrinterA
SetPrinterA
DocumentPropertiesA
EnumPrintersA
ord202
WritePrinter
EndPagePrinter
AddFormA
StartDocPrinterA
StartPagePrinter
EndDocPrinter
ClosePrinter

advapi32

RegCreateKeyExA
RegOpenKeyExA
RegCloseKey
RegSetValueExA

comctl32

ord17

Exports

Exports

About
AddCustomPaper
DeleteCustomPaper
GetBin
GetBinName
GetBinNameList
GetDefaultPaper
GetDefaultPrinter
GetPaperList
GetPaperName
GetPaperSize
GetPrinterList
GetPrinterPort
GetPrinterStatus
GetUserDefinePaperMinMax
IsWindowsNT
PrintClose_
PrintOpen_
PrintSend_
SetDefaultPaper
SetPrinterDefault
SetUserDefinePaper

Sections

.text
Size: 76KB - Virtual size: 73KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 20KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
200691417145441/莒南妇保院门诊收款管理系统/门诊收款/Public.pbl
.vbs
200691417145441/莒南妇保院门诊收款管理系统/门诊收款/Save.ico
200691417145441/莒南妇保院门诊收款管理系统/门诊收款/Setup.bmp
200691417145441/莒南妇保院门诊收款管理系统/门诊收款/Support.pbl
.vbs
200691417145441/莒南妇保院门诊收款管理系统/门诊收款/Sysini.ini
200691417145441/莒南妇保院门诊收款管理系统/门诊收款/Welcome.bmp
200691417145441/莒南妇保院门诊收款管理系统/门诊收款/about.ico
200691417145441/莒南妇保院门诊收款管理系统/门诊收款/act.ICO
200691417145441/莒南妇保院门诊收款管理系统/门诊收款/assistant.ico
200691417145441/莒南妇保院门诊收款管理系统/门诊收款/back.ICO
200691417145441/莒南妇保院门诊收款管理系统/门诊收款/calendar.ICO
200691417145441/莒南妇保院门诊收款管理系统/门诊收款/dbnetlib.dll
.dll windows:5 windows x86 arch:x86

30cb7492f9869ccce0bd56c59a019d38

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_BIND

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

advapi32

RegSetValueExA
RegQueryValueExA
RegDeleteValueA
RegCreateKeyExA
RegEnumValueA
RegCloseKey
RegOpenKeyExA
RegQueryInfoKeyA

kernel32

CloseHandle
SetErrorMode
CreateEventA
CreateThread
ResetEvent
Sleep
WaitForSingleObject
SetEvent
LocalAlloc
GetLastError
GetCurrentThreadId
InterlockedIncrement
InterlockedDecrement
EnterCriticalSection
DeleteCriticalSection
FreeLibrary
GetComputerNameA
InitializeCriticalSection
GetVersionExA
GetProcAddress
LoadLibraryA
MultiByteToWideChar
WideCharToMultiByte
LeaveCriticalSection

msvcrt

sprintf
isdigit
strtok
strchr
malloc
strstr
getenv
calloc
wcsstr
printf
memmove
atoi
toupper
free
strcspn
_strlwr
strncpy
_strupr
wcslen
wcstok
_wtoi
_ftime
_stricmp
wcscat
wcscpy
_wcsupr

ole32

CoInitializeEx
CoUninitialize
CoInitialize

oleaut32

VariantInit
VariantClear

wsock32

getsockname
connect
socket
bind
sendto
inet_ntoa
htons
htonl
select
send
WSASetLastError
recv
ioctlsocket
gethostbyname
gethostbyaddr
setsockopt
recvfrom
WSAGetLastError
closesocket
WSAStartup
WSACleanup

Exports

Exports

CloseEnumServers
ConnectionCheckForData
ConnectionClose
ConnectionError
ConnectionErrorW
ConnectionFlushCache
ConnectionGetSvrUser
ConnectionMode
ConnectionObjectSize
ConnectionOpen
ConnectionOpenW
ConnectionOption
ConnectionRead
ConnectionServerEnum
ConnectionServerEnumW
ConnectionSqlVer
ConnectionStatus
ConnectionTransact
ConnectionVer
ConnectionWrite
ConnectionWriteOOB
GenClientContext
GetNextEnumeration
InitEnumServers
InitSSPIPackage
InitSession
TermSSPIPackage
TermSession

Sections

.text
Size: 44KB - Virtual size: 41KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
200691417145441/莒南妇保院门诊收款管理系统/门诊收款/dbnmpntw.dll
.dll windows:5 windows x86 arch:x86

a6cd47cb7fa8ec9c3e8d904759ea39d5

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_BIND

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

SetLastError
GetComputerNameA
GetComputerNameW
ResetEvent
CreateEventA
CreateFileW
WideCharToMultiByte
CreateFileA
SetNamedPipeHandleState
CreateThread
MultiByteToWideChar
CloseHandle
Sleep
LoadLibraryA
GetProcAddress
FreeLibrary
GetVersionExA
ExitThread
SetEvent
GetLastError
ReadFile
WaitForSingleObject
PeekNamedPipe
WriteFile
TransactNamedPipe
GetOverlappedResult
WaitForSingleObjectEx

msvcrt

_adjust_fdiv
malloc
_initterm
free
_stricmp
sprintf
getenv
_wcsicmp
swprintf
_wgetenv
wcstombs
wcslen
wcscpy
strncat

Exports

Exports

ConnectionCheckForData
ConnectionClose
ConnectionError
ConnectionErrorW
ConnectionMode
ConnectionObjectSize
ConnectionOpen
ConnectionOpenW
ConnectionRead
ConnectionServerEnum
ConnectionServerEnumW
ConnectionStatus
ConnectionTransact
ConnectionVer
ConnectionWrite
ConnectionWriteOOB

Sections

.text
Size: 12KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 132B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 416B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
200691417145441/莒南妇保院门诊收款管理系统/门诊收款/email.ico
200691417145441/莒南妇保院门诊收款管理系统/门诊收款/find.ico
200691417145441/莒南妇保院门诊收款管理系统/门诊收款/flash.BMP
200691417145441/莒南妇保院门诊收款管理系统/门诊收款/hand.cur
200691417145441/莒南妇保院门诊收款管理系统/门诊收款/help.ICO
200691417145441/莒南妇保院门诊收款管理系统/门诊收款/hx.ico
200691417145441/莒南妇保院门诊收款管理系统/门诊收款/ie.ico
200691417145441/莒南妇保院门诊收款管理系统/门诊收款/import.ico
200691417145441/莒南妇保院门诊收款管理系统/门诊收款/issue.ICO
200691417145441/莒南妇保院门诊收款管理系统/门诊收款/jczl.pbl
200691417145441/莒南妇保院门诊收款管理系统/门诊收款/kernel32.dll
.dll windows:5 windows x86 arch:x86

737a429debae35282bdac82edeed2098

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Imports

ntdll

NtGetWriteWatch
RtlAllocateHeap
NtFsControlFile
NtOpenFile
NtQueryInformationFile
NtQueryEaFile
RtlLengthSecurityDescriptor
NtQuerySecurityObject
_wcsnicmp
NtCreateFile
NtSetEaFile
NtSetSecurityObject
NtSetInformationFile
NtClose
NtDeviceIoControlFile
RtlInitUnicodeString
CsrClientCallServer
wcslen
NtQueryValueKey
NtOpenKey
NtSetValueKey
NtCreateKey
NtFlushKey
wcscspn
RtlUnicodeToMultiByteSize
RtlGetNtProductType
RtlFreeUnicodeString
RtlDnsHostNameToComputerName
RtlUnicodeStringToAnsiString
RtlxUnicodeStringToAnsiSize
NlsMbCodePageTag
RtlAnsiStringToUnicodeString
RtlInitAnsiString
RtlCreateUnicodeStringFromAsciiz
RtlNtStatusToDosError
wcschr
wcsstr
RtlPrefixString
RtlReleasePebLock
RtlEqualUnicodeString
RtlAcquirePebLock
RtlFreeAnsiString
memmove
RtlGetFullPathName_U
RtlGetCurrentDirectory_U
RtlSetCurrentDirectory_U
NtQueryInformationProcess
RtlTimeToTimeFields
NtSetSystemTime
RtlTimeFieldsToTime
NtQuerySystemInformation
RtlSetTimeZoneInformation
NtSetSystemInformation
RtlCutoverTimeToSystemTime
_allmul
DbgBreakPoint
RtlFreeSid
RtlSetDaclSecurityDescriptor
RtlCreateSecurityDescriptor
RtlAddAccessAllowedAce
RtlCreateAcl
RtlLengthSid
RtlAllocateAndInitializeSid
DbgPrint
NtOpenThread
NtQueryInformationThread
DbgUiWaitStateChange
DbgUiContinue
DbgUiConnectToDbg
NtRaiseHardError
NtContinue
RtlIsDosDeviceName_U
RtlDosPathNameToNtPathName_U
RtlCreateAtomTable
NtAddAtom
RtlAddAtomToAtomTable
NtFindAtom
RtlLookupAtomInAtomTable
NtDeleteAtom
RtlDeleteAtomFromAtomTable
NtQueryInformationAtom
RtlQueryAtomInAtomTable
RtlCharToInteger
strncpy
wcsncpy
RtlCreateUnicodeString
RtlFormatCurrentUserKeyPath
CsrFreeCaptureBuffer
CsrCaptureMessageString
CsrAllocateCaptureBuffer
RtlGetLongestNtPathLength
RtlMultiByteToUnicodeN
RtlUnicodeToMultiByteN
RtlMultiByteToUnicodeSize
RtlPrefixUnicodeString
RtlLeaveCriticalSection
RtlEnterCriticalSection
NtQueryKey
RtlAppendUnicodeStringToString
RtlAppendUnicodeToString
NtEnumerateKey
NtEnumerateValueKey
NtDeleteValueKey
RtlIsTextUnicode
NtReadFile
NtAllocateVirtualMemory
NtUnlockFile
NtLockFile
RtlCopyUnicodeString
NtFreeVirtualMemory
NtWriteFile
RtlEqualString
RtlUpcaseUnicodeChar
RtlUpcaseUnicodeString
CsrAllocateMessagePointer
wcscmp
NtQueryDirectoryObject
NtQuerySymbolicLinkObject
NtOpenSymbolicLinkObject
NtOpenDirectoryObject
NtSetInformationProcess
NtCreateIoCompletion
NtSetIoCompletion
NtRemoveIoCompletion
RtlInitializeCriticalSection
NtQueryDirectoryFile
RtlDeleteCriticalSection
RtlCompareMemory
NtNotifyChangeDirectoryFile
NtWaitForSingleObject
NtQueryVolumeInformationFile
NtFlushBuffersFile
NtCancelIoFile
NtReadFileScatter
NtWriteFileGather
NtCreateSection
NtOpenSection
NtMapViewOfSection
NtFlushVirtualMemory
NtUnmapViewOfSection
NtQueryAttributesFile
NtQueryFullAttributesFile
RtlUnicodeStringToOemString
RtlDetermineDosPathNameType_U
swprintf
RtlUnlockHeap
RtlSetUserValueHeap
RtlFreeHandle
RtlAllocateHandle
RtlLockHeap
RtlSizeHeap
RtlGetUserInfoHeap
RtlReAllocateHeap
RtlIsValidHandle
RtlCompactHeap
RtlImageNtHeader
NtProtectVirtualMemory
NtQueryVirtualMemory
NtLockVirtualMemory
NtUnlockVirtualMemory
NtFlushInstructionCache
NtAllocateUserPhysicalPages
NtFreeUserPhysicalPages
NtMapUserPhysicalPages
NtMapUserPhysicalPagesScatter
RtlFreeHeap
NtResetWriteWatch
NtDuplicateObject
NtQueryObject
NtSetInformationObject
RtlOemStringToUnicodeString
RtlDoesFileExists_U
CsrNewThread
CsrClientConnectToServer
wcscpy
RtlCreateTagHeap
RtlSetThreadPoolStartFunc
_stricmp
_wcsicmp
wcscat
RtlInitializeHandleTable
RtlCreateHeap
RtlDestroyHeap
RtlExtendHeap
RtlQueryTagHeap
RtlUsageHeap
RtlValidateHeap
RtlGetProcessHeaps
RtlWalkHeap
NtCreateMailslotFile
RtlExtendedLargeIntegerDivide
RtlFormatMessage
RtlFindMessage
_strcmpi
LdrLoadAlternateResourceModule
LdrLoadDll
LdrGetDllHandle
LdrUnloadDll
LdrUnloadAlternateResourceModule
LdrDisableThreadCalloutsForDll
LdrGetProcedureAddress
RtlInitString
RtlGetVersion
RtlVerifyVersionInfo
LdrFindResource_U
LdrAccessResource
LdrFindResourceDirectory_U
RtlImageDirectoryEntryToData
RtlUnicodeStringToInteger
NtCreateNamedPipeFile
RtlDefaultNpAcl
NtSetInformationThread
NtOpenThreadToken
RtlQueryEnvironmentVariable_U
RtlAnsiCharToUnicodeChar
RtlIntegerToChar
NtSetVolumeInformationFile
NtQueryPerformanceCounter
sprintf
NtPowerInformation
NtInitiatePowerAction
NtSetThreadExecutionState
NtRequestWakeupLatency
NtGetDevicePowerState
NtIsSystemResumeAutomatic
NtRequestDeviceWakeup
NtCancelDeviceWakeupRequest
RtlQueryRegistryValues
RtlxAnsiStringToUnicodeSize
NtWriteVirtualMemory
NtResumeThread
NtTerminateProcess
NtCreateThread
NtReadVirtualMemory
NtCreateProcess
LdrQueryImageFileExecutionOptions
NtQuerySection
RtlDestroyEnvironment
NtQueryInformationJobObject
NtOpenProcess
LdrShutdownProcess
RtlRaiseStatus
RtlSetEnvironmentVariable
RtlExpandEnvironmentStrings_U
RtlCompareUnicodeString
NtTerminateThread
RtlDestroyProcessParameters
RtlCreateProcessParameters
RtlxOemStringToUnicodeSize
NlsMbOemCodePageTag
RtlxUnicodeStringToOemSize
NtAdjustPrivilegesToken
NtOpenProcessToken
RtlInitializeCriticalSectionAndSpinCount
NtCreateEvent
NtOpenEvent
NtSetEvent
NtClearEvent
NtPulseEvent
NtCreateSemaphore
NtOpenSemaphore
NtReleaseSemaphore
NtCreateMutant
NtOpenMutant
NtReleaseMutant
NtSignalAndWaitForSingleObject
NtWaitForMultipleObjects
NtDelayExecution
NtCreateTimer
NtOpenTimer
NtSetTimer
NtCancelTimer
RtlCopyLuid
NtQueryInformationToken
wcsrchr
strchr
strrchr
LdrShutdownThread
NtGetContextThread
NtSetContextThread
NtSuspendThread
RtlRaiseException
CsrIdentifyAlertableThread
RtlClearBits
RtlFindClearBitsAndSet
RtlAreBitsSet
NtQueueApcThread
NtYieldExecution
RtlRegisterWait
RtlDeregisterWait
RtlDeregisterWaitEx
RtlQueueWorkItem
RtlSetIoCompletionCallback
RtlCreateTimerQueue
RtlCreateTimer
RtlUpdateTimer
RtlDeleteTimer
RtlDeleteTimerQueueEx
RtlDestroyQueryDebugBuffer
RtlQueryProcessDebugInformation
RtlCreateQueryDebugBuffer
RtlFreeOemString
strstr
NtQueryEvent
RtlCreateEnvironment
toupper
wcsncmp
isdigit
atol
tolower
NtCreateJobObject
NtOpenJobObject
NtAssignProcessToJobObject
NtTerminateJobObject
NtSetInformationJobObject
CsrCaptureMessageBuffer
NtQueryInstallUILanguage
NtQueryDefaultUILanguage
wcspbrk
_chkstk
RtlIntegerToUnicodeString
NtCreateDirectoryObject
RtlOpenCurrentUser
RtlSubAuthoritySid
RtlInitializeSid
RtlLengthRequiredSid
RtlGetDaclSecurityDescriptor
NtQueryDefaultLocale
_strlwr
RtlUnwind

Exports

Exports

AddAtomA
AddAtomW
AddConsoleAliasA
AddConsoleAliasW
AllocConsole
AllocateUserPhysicalPages
AreFileApisANSI
AssignProcessToJobObject
BackupRead
BackupSeek
BackupWrite
BaseAttachCompleteThunk
Beep
BeginUpdateResourceA
BeginUpdateResourceW
BindIoCompletionCallback
BuildCommDCBA
BuildCommDCBAndTimeoutsA
BuildCommDCBAndTimeoutsW
BuildCommDCBW
CallNamedPipeA
CallNamedPipeW
CancelDeviceWakeupRequest
CancelIo
CancelTimerQueueTimer
CancelWaitableTimer
ChangeTimerQueueTimer
ClearCommBreak
ClearCommError
CloseConsoleHandle
CloseHandle
CloseProfileUserMapping
CmdBatNotification
CommConfigDialogA
CommConfigDialogW
CompareFileTime
CompareStringA
CompareStringW
ConnectNamedPipe
ConsoleMenuControl
ContinueDebugEvent
ConvertDefaultLocale
ConvertThreadToFiber
CopyFileA
CopyFileExA
CopyFileExW
CopyFileW
CreateConsoleScreenBuffer
CreateDirectoryA
CreateDirectoryExA
CreateDirectoryExW
CreateDirectoryW
CreateEventA
CreateEventW
CreateFiber
CreateFiberEx
CreateFileA
CreateFileMappingA
CreateFileMappingW
CreateFileW
CreateHardLinkA
CreateHardLinkW
CreateIoCompletionPort
CreateJobObjectA
CreateJobObjectW
CreateMailslotA
CreateMailslotW
CreateMutexA
CreateMutexW
CreateNamedPipeA
CreateNamedPipeW
CreatePipe
CreateProcessA
CreateProcessInternalA
CreateProcessInternalW
CreateProcessW
CreateRemoteThread
CreateSemaphoreA
CreateSemaphoreW
CreateTapePartition
CreateThread
CreateTimerQueue
CreateTimerQueueTimer
CreateToolhelp32Snapshot
CreateVirtualBuffer
CreateWaitableTimerA
CreateWaitableTimerW
DebugActiveProcess
DebugBreak
DefineDosDeviceA
DefineDosDeviceW
DelayLoadFailureHook
DeleteAtom
DeleteCriticalSection
DeleteFiber
DeleteFileA
DeleteFileW
DeleteTimerQueue
DeleteTimerQueueEx
DeleteTimerQueueTimer
DeleteVolumeMountPointA
DeleteVolumeMountPointW
DeviceIoControl
DisableThreadLibraryCalls
DisconnectNamedPipe
DnsHostnameToComputerNameA
DnsHostnameToComputerNameW
DosDateTimeToFileTime
DosPathToSessionPathA
DosPathToSessionPathW
DuplicateConsoleHandle
DuplicateHandle
EndUpdateResourceA
EndUpdateResourceW
EnterCriticalSection
EnumCalendarInfoA
EnumCalendarInfoExA
EnumCalendarInfoExW
EnumCalendarInfoW
EnumDateFormatsA
EnumDateFormatsExA
EnumDateFormatsExW
EnumDateFormatsW
EnumLanguageGroupLocalesA
EnumLanguageGroupLocalesW
EnumResourceLanguagesA
EnumResourceLanguagesW
EnumResourceNamesA
EnumResourceNamesW
EnumResourceTypesA
EnumResourceTypesW
EnumSystemCodePagesA
EnumSystemCodePagesW
EnumSystemLanguageGroupsA
EnumSystemLanguageGroupsW
EnumSystemLocalesA
EnumSystemLocalesW
EnumTimeFormatsA
EnumTimeFormatsW
EnumUILanguagesA
EnumUILanguagesW
EraseTape
EscapeCommFunction
ExitProcess
ExitThread
ExitVDM
ExpandEnvironmentStringsA
ExpandEnvironmentStringsW
ExpungeConsoleCommandHistoryA
ExpungeConsoleCommandHistoryW
ExtendVirtualBuffer
FatalAppExitA
FatalAppExitW
FatalExit
FileTimeToDosDateTime
FileTimeToLocalFileTime
FileTimeToSystemTime
FillConsoleOutputAttribute
FillConsoleOutputCharacterA
FillConsoleOutputCharacterW
FindAtomA
FindAtomW
FindClose
FindCloseChangeNotification
FindFirstChangeNotificationA
FindFirstChangeNotificationW
FindFirstFileA
FindFirstFileExA
FindFirstFileExW
FindFirstFileW
FindFirstVolumeA
FindFirstVolumeMountPointA
FindFirstVolumeMountPointW
FindFirstVolumeW
FindNextChangeNotification
FindNextFileA
FindNextFileW
FindNextVolumeA
FindNextVolumeMountPointA
FindNextVolumeMountPointW
FindNextVolumeW
FindResourceA
FindResourceExA
FindResourceExW
FindResourceW
FindVolumeClose
FindVolumeMountPointClose
FlushConsoleInputBuffer
FlushFileBuffers
FlushInstructionCache
FlushViewOfFile
FoldStringA
FoldStringW
FormatMessageA
FormatMessageW
FreeConsole
FreeEnvironmentStringsA
FreeEnvironmentStringsW
FreeLibrary
FreeLibraryAndExitThread
FreeResource
FreeUserPhysicalPages
FreeVirtualBuffer
GenerateConsoleCtrlEvent
GetACP
GetAtomNameA
GetAtomNameW
GetBinaryType
GetBinaryTypeA
GetBinaryTypeW
GetCPInfo
GetCPInfoExA
GetCPInfoExW
GetCalendarInfoA
GetCalendarInfoW
GetCommConfig
GetCommMask
GetCommModemStatus
GetCommProperties
GetCommState
GetCommTimeouts
GetCommandLineA
GetCommandLineW
GetCompressedFileSizeA
GetCompressedFileSizeW
GetComputerNameA
GetComputerNameExA
GetComputerNameExW
GetComputerNameW
GetConsoleAliasA
GetConsoleAliasExesA
GetConsoleAliasExesLengthA
GetConsoleAliasExesLengthW
GetConsoleAliasExesW
GetConsoleAliasW
GetConsoleAliasesA
GetConsoleAliasesLengthA
GetConsoleAliasesLengthW
GetConsoleAliasesW
GetConsoleCP
GetConsoleCharType
GetConsoleCommandHistoryA
GetConsoleCommandHistoryLengthA
GetConsoleCommandHistoryLengthW
GetConsoleCommandHistoryW
GetConsoleCursorInfo
GetConsoleCursorMode
GetConsoleDisplayMode
GetConsoleFontInfo
GetConsoleFontSize
GetConsoleHardwareState
GetConsoleInputExeNameA
GetConsoleInputExeNameW
GetConsoleInputWaitHandle
GetConsoleKeyboardLayoutNameA
GetConsoleKeyboardLayoutNameW
GetConsoleMode
GetConsoleNlsMode
GetConsoleOutputCP
GetConsoleScreenBufferInfo
GetConsoleTitleA
GetConsoleTitleW
GetConsoleWindow
GetCurrencyFormatA
GetCurrencyFormatW
GetCurrentConsoleFont
GetCurrentDirectoryA
GetCurrentDirectoryW
GetCurrentProcess
GetCurrentProcessId
GetCurrentThread
GetCurrentThreadId
GetDateFormatA
GetDateFormatW
GetDefaultCommConfigA
GetDefaultCommConfigW
GetDefaultSortkeySize
GetDevicePowerState
GetDiskFreeSpaceA
GetDiskFreeSpaceExA
GetDiskFreeSpaceExW
GetDiskFreeSpaceW
GetDriveTypeA
GetDriveTypeW
GetEnvironmentStrings
GetEnvironmentStringsA
GetEnvironmentStringsW
GetEnvironmentVariableA
GetEnvironmentVariableW
GetExitCodeProcess
GetExitCodeThread
GetFileAttributesA
GetFileAttributesExA
GetFileAttributesExW
GetFileAttributesW
GetFileInformationByHandle
GetFileSize
GetFileSizeEx
GetFileTime
GetFileType
GetFullPathNameA
GetFullPathNameW
GetHandleInformation
GetLargestConsoleWindowSize
GetLastError
GetLinguistLangSize
GetLocalTime
GetLocaleInfoA
GetLocaleInfoW
GetLogicalDriveStringsA
GetLogicalDriveStringsW
GetLogicalDrives
GetLongPathNameA
GetLongPathNameW
GetMailslotInfo
GetModuleFileNameA
GetModuleFileNameW
GetModuleHandleA
GetModuleHandleW
GetNamedPipeHandleStateA
GetNamedPipeHandleStateW
GetNamedPipeInfo
GetNextVDMCommand
GetNlsSectionName
GetNumberFormatA
GetNumberFormatW
GetNumberOfConsoleFonts
GetNumberOfConsoleInputEvents
GetNumberOfConsoleMouseButtons
GetOEMCP
GetOverlappedResult
GetPriorityClass
GetPrivateProfileIntA
GetPrivateProfileIntW
GetPrivateProfileSectionA
GetPrivateProfileSectionNamesA
GetPrivateProfileSectionNamesW
GetPrivateProfileSectionW
GetPrivateProfileStringA
GetPrivateProfileStringW
GetPrivateProfileStructA
GetPrivateProfileStructW
GetProcAddress
GetProcessAffinityMask
GetProcessHeap
GetProcessHeaps
GetProcessIoCounters
GetProcessPriorityBoost
GetProcessShutdownParameters
GetProcessTimes
GetProcessVersion
GetProcessWorkingSetSize
GetProfileIntA
GetProfileIntW
GetProfileSectionA
GetProfileSectionW
GetProfileStringA
GetProfileStringW
GetQueuedCompletionStatus
GetShortPathNameA
GetShortPathNameW
GetStartupInfoA
GetStartupInfoW
GetStdHandle
GetStringTypeA
GetStringTypeExA
GetStringTypeExW
GetStringTypeW
GetSystemDefaultLCID
GetSystemDefaultLangID
GetSystemDefaultUILanguage
GetSystemDirectoryA
GetSystemDirectoryW
GetSystemInfo
GetSystemPowerStatus
GetSystemTime
GetSystemTimeAdjustment
GetSystemTimeAsFileTime
GetSystemWindowsDirectoryA
GetSystemWindowsDirectoryW
GetTapeParameters
GetTapePosition
GetTapeStatus
GetTempFileNameA
GetTempFileNameW
GetTempPathA
GetTempPathW
GetThreadContext
GetThreadLocale
GetThreadPriority
GetThreadPriorityBoost
GetThreadSelectorEntry
GetThreadTimes
GetTickCount
GetTimeFormatA
GetTimeFormatW
GetTimeZoneInformation
GetUserDefaultLCID
GetUserDefaultLangID
GetUserDefaultUILanguage
GetVDMCurrentDirectories
GetVersion
GetVersionExA
GetVersionExW
GetVolumeInformationA
GetVolumeInformationW
GetVolumeNameForVolumeMountPointA
GetVolumeNameForVolumeMountPointW
GetVolumePathNameA
GetVolumePathNameW
GetWindowsDirectoryA
GetWindowsDirectoryW
GetWriteWatch
GlobalAddAtomA
GlobalAddAtomW
GlobalAlloc
GlobalCompact
GlobalDeleteAtom
GlobalFindAtomA
GlobalFindAtomW
GlobalFix
GlobalFlags
GlobalFree
GlobalGetAtomNameA
GlobalGetAtomNameW
GlobalHandle
GlobalLock
GlobalMemoryStatus
GlobalMemoryStatusEx
GlobalReAlloc
GlobalSize
GlobalUnWire
GlobalUnfix
GlobalUnlock
GlobalWire
Heap32First
Heap32ListFirst
Heap32ListNext
Heap32Next
HeapAlloc
HeapCompact
HeapCreate
HeapCreateTagsW
HeapDestroy
HeapExtend
HeapFree
HeapLock
HeapQueryTagW
HeapReAlloc
HeapSize
HeapSummary
HeapUnlock
HeapUsage
HeapValidate
HeapWalk
InitAtomTable
InitializeCriticalSection
InitializeCriticalSectionAndSpinCount
InterlockedCompareExchange
InterlockedDecrement
InterlockedExchange
InterlockedExchangeAdd
InterlockedIncrement
InvalidateConsoleDIBits
IsBadCodePtr
IsBadHugeReadPtr
IsBadHugeWritePtr
IsBadReadPtr
IsBadStringPtrA
IsBadStringPtrW
IsBadWritePtr
IsDBCSLeadByte
IsDBCSLeadByteEx
IsDebuggerPresent
IsProcessorFeaturePresent
IsSystemResumeAutomatic
IsValidCodePage
IsValidLanguageGroup
IsValidLocale
LCMapStringA
LCMapStringW
LeaveCriticalSection
LoadLibraryA
LoadLibraryExA
LoadLibraryExW
LoadLibraryW
LoadModule
LoadResource
LocalAlloc
LocalCompact
LocalFileTimeToFileTime
LocalFlags
LocalFree
LocalHandle
LocalLock
LocalReAlloc
LocalShrink
LocalSize
LocalUnlock
LockFile

Sections

.text
Size: 374KB - Virtual size: 373KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 447KB - Virtual size: 448KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
200691417145441/莒南妇保院门诊收款管理系统/门诊收款/key.ICO
200691417145441/莒南妇保院门诊收款管理系统/门诊收款/libjcc.dll
.dll windows:4 windows x86 arch:x86

1cacbb27831291b59a06f22fb24e8d69

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

wsock32

htonl
ntohl
ntohs
WSAGetLastError
closesocket
connect
WSAStartup
setsockopt
recv
__WSAFDIsSet
select
socket
send
htons
gethostbyname
ioctlsocket

kernel32

WaitForSingleObject
DisableThreadLibraryCalls
SetThreadPriority
CloseHandle
CreateEventA
TlsAlloc
GetCurrentThreadId
TlsSetValue
Sleep
SetEvent
SetErrorMode
TlsGetValue
GetTickCount
GetLastError
ResetEvent
DeleteCriticalSection
VirtualAlloc
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
GetProcAddress
LoadLibraryA

msvcrt

strcmp
_ftol
vsprintf
strrchr
_adjust_fdiv
_initterm
fread
fclose
memmove
printf
malloc
realloc
free
_endthreadex
_beginthreadex
abort
fputc
strtok
memcmp
sprintf
strlen
_stricmp
strcat
tolower
memset
strncmp
strstr
time
memcpy
strcpy
_strnicmp
sscanf
strchr
vfprintf
strncpy
__p__iob
atoi
_errno
__p__pctype
_isctype
__p___mb_cur_max
toupper
fputs
fprintf
perror
fopen
getenv
fflush

Exports

Exports

JagAny_endValue
JagAny_getValue
JagAny_putValue
JagAny_tc
JagBCD_BinaryToString
JagBCD_StringToBinary
JagCSIIOP_dup_csi_sec_mech_list
JagCSI_GSSUP_ExportName
JagCSI_GSSUP_ImportName
JagCSI_GSSUP_get
JagCSI_GSSUP_put
JagCSI_Get_ITTPrincipalName
JagCSI_SASContextBody_getStream
JagCSI_SASContextBody_putStream
JagClient_FuncLookup
JagClient_LoadLibrary
JagCodesetConvert
JagCosTS_getReceiver
JagCosTS_getSender
JagCosTS_pack_PropCtx
JagCosTS_setCosTSInternalRef
JagCosTS_setReceiver
JagCosTS_setSender
JagCosTS_unpack_PropCtx
JagGetQOP
JagGetSupportedAssertedIdentities
JagHash
JagHashTable_fast_get
JagHashTable_fast_put
JagHashTable_fast_remove
JagHashTable_get
JagHashTable_getByValue
JagHashTable_getKeyValPairs
JagHashTable_put
JagHashTable_remove
JagHashTable_removeAllByValue
JagHashTable_size
JagHashV
JagIIOPStream_asParent
JagIIOPStream_decodeIOR
JagIIOPStream_encodeIOR
JagIIOPStream_endMessage
JagIIOPStream_endPutEncapsulation
JagIIOPStream_getBuffer
JagIIOPStream_getByteOrder
JagIIOPStream_getEndian
JagIIOPStream_getGIOPVersion
JagIIOPStream_getIIOPVersion
JagIIOPStream_getIfFragmented
JagIIOPStream_getJavaBuffer
JagIIOPStream_getJavaInput
JagIIOPStream_getLocateReply
JagIIOPStream_getLocateRequest
JagIIOPStream_getMessage
JagIIOPStream_getRequest
JagIIOPStream_getRequestId
JagIIOPStream_getResponseServiceContextList
JagIIOPStream_getServiceContextList
JagIIOPStream_getTxnContext
JagIIOPStream_initLogFile
JagIIOPStream_initMaxSize
JagIIOPStream_insertServiceContext
JagIIOPStream_isOTSClient
JagIIOPStream_isSharedTxn
JagIIOPStream_isTransactional
JagIIOPStream_isValidGIOPHeader
JagIIOPStream_newBuffer
JagIIOPStream_putByteOrder
JagIIOPStream_putEncapsulation
JagIIOPStream_putJavaOutput
JagIIOPStream_putLocateReply
JagIIOPStream_putLocateRequest
JagIIOPStream_putMessageError
JagIIOPStream_putReplySystemException
JagIIOPStream_putRequest
JagIIOPStream_putServiceContextList
JagIIOPStream_regetServiceContextList
JagIIOPStream_resetOffset
JagIIOPStream_setAsParent
JagIIOPStream_setBuffer
JagIIOPStream_setEndian
JagIIOPStream_setIIOPVersion
JagIIOPStream_setOTSClient
JagIIOPStream_setSharedTxn
JagIIOPStream_setTransactional
JagIIOPStream_toWString
JagIIOPStream_unsetTransactional
JagMemory__alloc
JagMemory__free
JagMemory_checkOff
JagMemory_checkOn
JagMemory_dump
JagMemory_log
JagMemory_setParent
JagMemory_size
JagMemory_traceOff
JagMemory_traceOn
JagORB_async
JagORB_getInstance
JagORB_getTransactionCurrent
JagORB_getTxnControlRef
JagORB_init
JagORB_initErrFunc
JagORB_initLogFile
JagORB_isClient
JagORB_isExPseudoJava
JagORB_isLocal
JagORB_isPseudo
JagORB_isPseudoJava
JagORB_lock
JagORB_log
JagORB_logServer
JagORB_object_to_string
JagORB_setTxnControlRef
JagORB_setenv
JagORB_string_to_object
JagORB_unlock
JagObjectRef_dup
JagObjectRef_isa
JagObjectRef_narrow
JagObjectRef_str
JagPseudoCompByteArrayToStream
JagPseudoCompJStringToString
JagPseudoCompPrepareException
JagPseudoCompStreamToByteArray
JagPseudoCompStringToJString
JagPseudoCompThrowException
JagPseudoJava_attach
JagPseudoJava_checkForException
JagPseudoJava_detach
JagPseudoJava_getJNIEnv
JagPseudoJava_getObjectRef
JagPseudoJava_setJNIEnv
JagPseudoJava_setReplyFunction
JagPseudo_createMethodTable
JagPseudo_fillMethodTable
JagPseudo_getMethod
JagPseudo_getMethodTable
JagPseudo_getObjectInstance
JagPseudo_getObjectRef
JagPseudo_setReplyFunction
JagQOPComparedToCipher
JagQOPCompatible
JagQOPToString
JagStream_JagPseudoGetBuffer
JagStream_JagPseudoGetOffset
JagStream_JagPseudoResetOffset
JagStream_getAny
JagStream_getReplyAsync
JagStream_getTypeCode
JagStream_getUnionDisc
JagStream_invoke
JagStream_local
JagStream_putAny
JagStream_putTypeCode
JagStream_putUnionDisc
JagStream_setInvoke
JagString_alloc
JagString_dup
JagTypeCode_bounds
JagTypeCode_eq
JagTypeCode_id
JagTypeCode_kind
JagTypeCode_labels
JagTypeCode_length
JagTypeCode_max
JagTypeCode_member
JagTypeCode_name
JagTypeCode_switch
JagTypeCode_type
JavaPseudoComp_JNILockMutex
JavaPseudoComp_JNIUnLockMutex
JavaPseudoComp_getMethodId
JavaPseudoComp_getSkeleton
Java_com_sybase_CORBA_PseudoCppProfile_deleteObjectRef
Java_com_sybase_CORBA_PseudoCppProfile_dupObjectRef
Java_com_sybase_CORBA_PseudoCppProfile_invoke
Java_com_sybase_CORBA_PseudoCppProfile_newObjectRef
SybHeap_adopt
SybHeap_alloc
SybHeap_allocPerm
SybHeap_calloc
SybHeap_check
SybHeap_checkAll
SybHeap_checkOff
SybHeap_checkOn
SybHeap_debugOff
SybHeap_debugOn
SybHeap_dump
SybHeap_error
SybHeap_exception
SybHeap_free
SybHeap_freeIfParent
SybHeap_init
SybHeap_initByte
SybHeap_log
SybHeap_malloc
SybHeap_parent
SybHeap_print
SybHeap_realloc
SybHeap_setCheckInterval
SybHeap_showBufferMaximumBytes
SybHeap_showFullPath
SybHeap_showSuffixMaximumBytes
SybHeap_size
SybHeap_totalSize
SybHeap_totalSizeVM
SybHeap_traceOff
SybHeap_traceOn
_Java_com_sybase_CORBA_PseudoCppProfile_setJVMVersion@12
__sybase_DLL_info@0
default_JagORB
delete_JagHashTable
delete_JagObjectRef
jag_client_dbg_stop
lookupCharset
lookupCharsetID
new_JagAny
new_JagHTTPSocket
new_JagHashTable
new_JagHashTableEx
new_JagIIOPSocket
new_JagIIOPStream
new_JagORB
new_JagObjectRef
new_JagPseudoStream
new_JagStream
new_JagStreamEx
new_JagTypeCode

Sections

.text
Size: 180KB - Virtual size: 180KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 172KB - Virtual size: 176KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 19KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
200691417145441/莒南妇保院门诊收款管理系统/门诊收款/libjsybheap.dll
.dll windows:4 windows x86 arch:x86

cd185ae96e493c13224d6c93f6fa483f

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

msvcrt

strcmp
getenv
sscanf
memcpy
memset
strlen
fputs
_initterm
malloc
_adjust_fdiv
__dllonexit
_onexit
sprintf
abort
_iob
fputc
fflush
memcmp
vsprintf
free

kernel32

DisableThreadLibraryCalls
VirtualFree
VirtualAlloc
InitializeCriticalSection
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection

Exports

Exports

Syb_Heap__alloc
Syb_Heap_adopt
Syb_Heap_alloc
Syb_Heap_allocFromPool
Syb_Heap_allocPool
Syb_Heap_calloc
Syb_Heap_check
Syb_Heap_checkAll
Syb_Heap_checkOff
Syb_Heap_checkOn
Syb_Heap_debugOff
Syb_Heap_debugOn
Syb_Heap_dump
Syb_Heap_error
Syb_Heap_exception
Syb_Heap_free
Syb_Heap_freeIfParent
Syb_Heap_freePool
Syb_Heap_init
Syb_Heap_initByte
Syb_Heap_log
Syb_Heap_malloc
Syb_Heap_parent
Syb_Heap_poolSize
Syb_Heap_print
Syb_Heap_realloc
Syb_Heap_setCheckInterval
Syb_Heap_setChunkSize
Syb_Heap_showBufferMaximumBytes
Syb_Heap_showFullPath
Syb_Heap_showSuffixMaximumBytes
Syb_Heap_size
Syb_Heap_totalSize
Syb_Heap_totalSizeVM
Syb_Heap_traceOff
Syb_Heap_traceOn
Syb_Heap_userData

Sections

.text
Size: 21KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 6KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 288B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
200691417145441/莒南妇保院门诊收款管理系统/门诊收款/msxml4.dll
.dll regsvr32 windows:5 windows x86 arch:x86

2db21972500269e7606cb50fb803991c

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

ole32

CoCreateFreeThreadedMarshaler
CreateBindCtx
StringFromCLSID
CoTaskMemFree
CLSIDFromProgID
CoTaskMemAlloc
GetHGlobalFromStream
CreateStreamOnHGlobal
CoCreateInstance

shlwapi

UrlCombineW
ord15
StrCmpIW
ord150
ord44
ord45
PathIsURLW
ord28
StrCpyW
StrCatW
ord158
ord156
ord66
ord29
ord38
StrToIntW
StrCmpNIW
StrCmpNW
StrCmpW
UrlUnescapeW
PathSearchAndQualifyW
UrlCreateFromPathW
ord115
ord52
UrlCanonicalizeW
UrlGetLocationW
UrlIsW
PathIsRelativeW
PathCreateFromUrlW

kernel32

SetEvent
LocalAlloc
SetEndOfFile
ReadFile
FlushFileBuffers
SetFilePointer
lstrcmpiW
VirtualQuery
VirtualProtect
LCMapStringW
LCMapStringA
GetLocaleInfoA
GetStringTypeW
GetStringTypeA
GetOEMCP
GetACP
WriteFile
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
DebugBreak
lstrcpyA
lstrlenA
GetProcAddress
LoadLibraryA
FreeLibrary
MultiByteToWideChar
lstrcmpA
ExpandEnvironmentStringsA
GetModuleFileNameA
TlsGetValue
OutputDebugStringA
InterlockedDecrement
InterlockedIncrement
lstrlenW
HeapFree
HeapSize
HeapAlloc
HeapReAlloc
VirtualFree
VirtualAlloc
GetProcessHeap
TlsSetValue
CloseHandle
GetCurrentThreadId
DuplicateHandle
GetCurrentThread
GetCurrentProcess
GetModuleHandleA
GetVersionExA
TlsAlloc
TlsFree
WaitForSingleObject
GetTickCount
ReleaseSemaphore
InterlockedExchange
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSection
DeleteCriticalSection
CreateSemaphoreA
CreateEventA
GetThreadContext
Sleep
ResumeThread
SuspendThread
ResetEvent
HeapDestroy
GetLastError
HeapCreate
GetSystemInfo
SetLastError
RaiseException
WideCharToMultiByte
LoadResource
LoadLibraryExA
FormatMessageA
FormatMessageW
FileTimeToSystemTime
SystemTimeToFileTime
GlobalUnlock
GlobalLock
GetThreadLocale
GetTimeFormatA
GetDateFormatA
GetTimeFormatW
GetDateFormatW
GetModuleHandleW
GetCPInfo
GetCommandLineA
RtlUnwind
ExitProcess
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 967KB - Virtual size: 967KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 65KB - Virtual size: 66KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 108KB - Virtual size: 107KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 59KB - Virtual size: 59KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
200691417145441/莒南妇保院门诊收款管理系统/门诊收款/msxml4r.dll
.dll windows:5 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.rsrc
Size: 79KB - Virtual size: 79KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 8B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
200691417145441/莒南妇保院门诊收款管理系统/门诊收款/mz_sfcl.pbl
200691417145441/莒南妇保院门诊收款管理系统/门诊收款/mzpublic.pbl
200691417145441/莒南妇保院门诊收款管理系统/门诊收款/next.ICO
200691417145441/莒南妇保院门诊收款管理系统/门诊收款/ntwdblib.DLL
.dll windows:4 windows x86 arch:x86

6844cfb6e32d89a609393587b4609cb4

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_BIND

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

InitializeCriticalSection
HeapCreate
GetVersionExA
LeaveCriticalSection
EnterCriticalSection
FreeLibrary
TlsAlloc
GetLastError
GetComputerNameA
IsDBCSLeadByte
GetLocaleInfoA
GetLocaleInfoW
Sleep
GlobalFix
DeleteCriticalSection
GetConsoleCP
GetEnvironmentVariableA
HeapAlloc
LoadLibraryA
lstrcatA
GetFileSize
MapViewOfFile
CreateFileMappingA
CreateFileA
CloseHandle
UnmapViewOfFile
ReadFile
WriteFile
SetFilePointer
OpenFileMappingA
GetCurrentProcessId
GetCurrentThreadId
TlsSetValue
GlobalUnfix
HeapFree
HeapReAlloc
GetVersionExW
TlsGetValue
GetProcAddress
TlsFree
DeviceIoControl
GetDiskFreeSpaceA
GlobalMemoryStatus
QueryPerformanceCounter
SetErrorMode
HeapDestroy
SetLastError

advapi32

RegQueryValueExA
RegEnumValueA
RegCreateKeyExA
RegCloseKey
RegOpenKeyExA
RegSetValueExA
AllocateLocallyUniqueId

msvcrt

atoi
atol
atof
strncat
time
vsprintf
fflush
_iob
putchar
_errno
_except_handler3
strncmp
memmove
memchr
tolower
_ultoa
_stricmp
_itoa
_getpid
_gcvt
_ltoa
_strnicmp
modf
strncpy
__mb_cur_max
_isctype
_pctype
_ftol
_abnormal_termination
_local_unwind2
sprintf
malloc
free
_assert

user32

LoadStringA
OemToCharA
CharToOemA
CharToOemW
wsprintfA

netapi32

Netbios

Exports

Exports

SQLDebug
abort_xact
bcpDefaultPrefix
bcp_batch
bcp_bind
bcp_colfmt
bcp_collen
bcp_colptr
bcp_columns
bcp_control
bcp_done
bcp_exec
bcp_init
bcp_moretext
bcp_readfmt
bcp_sendrow
bcp_setl
bcp_writefmt
build_xact_string
close_commit
commit_xact
dbadata
dbadlen
dbaltbind
dbaltcolid
dbaltlen
dbaltop
dbalttype
dbaltutype
dbanullbind
dbbcmd
dbbind
dbbylist
dbcancel
dbcanquery
dbchange
dbclose
dbclrbuf
dbclropt
dbcmd
dbcmdrow
dbcolbrowse
dbcolinfo
dbcollen
dbcolname
dbcolntype
dbcolsource
dbcoltype
dbcolutype
dbconnectionread
dbconvert
dbcount
dbcurcmd
dbcurrow
dbcursor
dbcursorbind
dbcursorclose
dbcursorcolinfo
dbcursorfetch
dbcursorfetchex
dbcursorinfo
dbcursorinfoex
dbcursoropen
dbdata
dbdataready
dbdatecrack
dbdatlen
dbdead
dbenlisttrans
dbenlistxatrans
dberrhandle
dbexit
dbfcmd
dbfirstrow
dbfreebuf
dbfreelogin
dbfreequal
dbgetchar
dbgetmaxprocs
dbgetoff
dbgetpacket
dbgetrow
dbgettime
dbgetuserdata
dbhasretstat
dbinit
dbisavail
dbiscount
dbisopt
dblastrow
dblocklib
dblogin
dbmorecmds
dbmoretext
dbmsghandle
dbname
dbnextrow
dbnullbind
dbnumalts
dbnumcols
dbnumcompute
dbnumorders
dbnumrets
dbopen
dbordercol
dbprhead
dbprocerrhandle
dbprocinfo
dbprocmsghandle
dbprrow
dbprtype
dbqual
dbreadpage
dbreadtext
dbresults
dbretdata
dbretlen
dbretname
dbretstatus
dbrettype
dbrows
dbrowtype
dbrpcexec
dbrpcinit
dbrpcparam
dbrpcsend
dbrpwclr
dbrpwset
dbserverenum
dbsetavail
dbsetlname
dbsetlogintime
dbsetlpacket
dbsetmaxprocs
dbsetnull
dbsetopt
dbsettime
dbsetuserdata
dbsqlexec
dbsqlok
dbsqlsend
dbstrcpy
dbstrlen
dbtabbrowse
dbtabcount
dbtabname
dbtabsource
dbtsnewlen
dbtsnewval
dbtsput
dbtxptr
dbtxtimestamp
dbtxtsnewval
dbtxtsput
dbunlocklib
dbupdatetext
dbuse
dbvarylen
dbwillconvert
dbwinexit
dbwritepage
dbwritetext
open_commit
remove_xact
start_xact
stat_xact

Sections

.text
Size: 216KB - Virtual size: 215KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 20KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
200691417145441/莒南妇保院门诊收款管理系统/门诊收款/out.ico
200691417145441/莒南妇保院门诊收款管理系统/门诊收款/pbmenubitmap.dll
.dll windows:4 windows x86 arch:x86

02e9bcf15c03190ff97887ed557a9a1a

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GlobalGetAtomNameA
GlobalAddAtomA
FreeLibrary
LoadLibraryA
GetProcessVersion
GetCPInfo
GetOEMCP
GetCurrentProcess
WriteFile
SetFilePointer
FlushFileBuffers
GlobalDeleteAtom
RtlUnwind
GetCommandLineA
GetProcAddress
GlobalFindAtomA
GlobalFlags
RaiseException
HeapSize
HeapReAlloc
ExitProcess
TerminateProcess
GetACP
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
IsBadWritePtr
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
SetUnhandledExceptionFilter
IsBadReadPtr
IsBadCodePtr
SetStdHandle
HeapAlloc
lstrcmpA
InterlockedIncrement
lstrcmpiA
GetLastError
GetModuleHandleA
lstrcpynA
SetLastError
GetVersion
lstrcatA
GetModuleFileNameA
lstrcpyA
LocalReAlloc
SetErrorMode
TlsGetValue
GlobalAlloc
TlsSetValue
EnterCriticalSection
LeaveCriticalSection
GlobalReAlloc
GlobalLock
GlobalUnlock
TlsFree
GlobalHandle
TlsAlloc
GlobalFree
DeleteCriticalSection
InitializeCriticalSection
LocalAlloc
GetCurrentThreadId
LocalFree
CloseHandle
lstrlenA
MultiByteToWideChar
WideCharToMultiByte
HeapFree
InterlockedDecrement

user32

GetClassLongA
DestroyWindow
DefWindowProcA
GetDlgItem
GetMenuItemID
GetSubMenu
GetMenu
RegisterClassA
GetClassInfoA
WinHelpA
GetCapture
MessageBoxA
GetTopWindow
EnableWindow
CopyRect
GetClientRect
AdjustWindowRectEx
SetFocus
MapWindowPoints
PostMessageA
LoadIconA
IsWindowEnabled
LoadCursorA
GetSysColorBrush
ReleaseDC
GetDC
PostQuitMessage
SetPropA
CreateWindowExA
GetPropA
RemovePropA
GetMessageTime
GetMessagePos
GetLastActivePopup
GetForegroundWindow
SetForegroundWindow
SetWindowPos
RegisterWindowMessageA
IsIconic
GetWindowPlacement
GetMenuCheckMarkDimensions
GetMenuState
ModifyMenuA
SetMenuItemBitmaps
CheckMenuItem
EnableMenuItem
GetNextDlgTabItem
GetFocus
GetParent
GetWindowTextA
SetWindowTextA
ClientToScreen
GetWindow
GetDlgCtrlID
GetWindowRect
PtInRect
GetWindowLongA
GetClassNameA
LoadStringA
UnregisterClassA
UnhookWindowsHookEx
DispatchMessageA
SendMessageA
GetKeyState
CallNextHookEx
PeekMessageA
CallWindowProcA
LoadImageA
LoadBitmapA
InflateRect
DrawEdge
OffsetRect
GetSysColor
DrawStateA
DestroyIcon
GetSystemMetrics
GetWindowDC
TabbedTextOutA
GrayStringA
DrawTextA
SystemParametersInfoA
GetMenuItemCount
GetMenuItemInfoA
SetMenuItemInfoA
SetWindowLongA
SetWindowsHookExA
DestroyMenu

gdi32

DeleteObject
PatBlt
Escape
CreateFontIndirectA
BitBlt
SetBkColor
GetStockObject
CreateCompatibleDC
GetObjectA
CreateBitmap
CreateCompatibleBitmap
CreatePatternBrush
TextOutA
PtVisible
RectVisible
SetBkMode
ExtTextOutA
SetTextColor
SelectObject
CreateSolidBrush
DeleteDC
GetDeviceCaps
RestoreDC
SaveDC
SetViewportOrgEx
OffsetViewportOrgEx
SetMapMode
ScaleViewportExtEx
SetViewportExtEx
SetWindowExtEx
ScaleWindowExtEx
GetClipBox

comctl32

ord17
ImageList_Destroy
ImageList_Create
ImageList_ReplaceIcon
ImageList_Draw
ImageList_GetIcon
ImageList_GetImageInfo
ImageList_AddMasked

winspool.drv

DocumentPropertiesA
OpenPrinterA
ClosePrinter

Exports

Exports

AddImage
InstallCoolMenu
SetButtonOn
SetImageNameId

Sections

.text
Size: 88KB - Virtual size: 85KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 24KB - Virtual size: 42KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 136KB - Virtual size: 134KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 16KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
200691417145441/莒南妇保院门诊收款管理系统/门诊收款/pbpl_dwsrv.dll
.dll windows:1 windows x86 arch:x86

296a810c4cb5d84eec78ec8443b72c28

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

user32

CharUpperBuffA
MessageBoxA

kernel32

CloseHandle
CreateEventA
CreateFileA
CreateThread
DeleteCriticalSection
EnterCriticalSection
ExitProcess
ExitThread
FreeEnvironmentStringsA
GetACP
GetCPInfo
GetCommandLineA
GetCommandLineW
GetCurrentThreadId
GetCurrentThread
GetEnvironmentStrings
GetFileType
GetLastError
GetModuleFileNameA
GetModuleFileNameW
GetModuleHandleA
GetOEMCP
GetProcAddress
GetStdHandle
GetVersion
InitializeCriticalSection
LeaveCriticalSection
LoadLibraryA
MultiByteToWideChar
SetConsoleCtrlHandler
SetEnvironmentVariableA
SetEnvironmentVariableW
SetEvent
SetLastError
SetStdHandle
SetUnhandledExceptionFilter
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
UnhandledExceptionFilter
VirtualAlloc
VirtualFree
VirtualQuery
WaitForSingleObject
WideCharToMultiByte
WriteFile

pbvm90

ord5237
ord2689
ord2480
ord2519
ord2529
ord2533
ord2650
ord2535
ord2081
ord2435
ord2436
ord2410
ord2653
ord5119
ord5118
ord5552
ord5544
ord2453
ord2452
ord5547
ord2455
ord2456
ord2451
ord5123
ord2386
ord2441
ord5073
ord2493
ord2606
ord2624
ord2274
ord2604
ord2609
ord2412
ord2640
ord2463
ord2385
ord2513
ord2514
ord2546
ord2579
ord2634
ord2449
ord5545
ord2403
ord5153
ord2425
ord5540
ord2406
ord2408
ord2490
ord2279
ord2409
ord2401
ord5551
ord5530
ord5538
ord2404
ord2498
ord2450
ord5555
ord5532
ord5164
ord2599
ord2505
ord2488
ord2515
ord2646
ord5245
ord2644
ord2645
ord2454
ord2384
ord2461
ord2469
ord2057
ord2497
ord2473
ord2495
ord2474
ord2496
ord2416
ord2582
ord2484
ord2405
ord2468
ord2611
ord2295
ord2426
ord2632
ord2050
ord2639
ord2638
ord2479
ord2448
ord2458
ord2578
ord2486
ord5239
ord2462
ord5151
ord2012
ord2407
ord2459
ord2183
ord5236
ord5238
ord2510
ord5234
ord2865
ord2043
ord2864

Exports

Exports

_DllMain@12
__fn_100_32770_0@8
__fn_100_32770_135@8
__fn_100_32770_136@8
__fn_100_32770_137@8
__fn_100_32770_1@8
__fn_100_32770_54@8
__fn_100_32789_50@8
__fn_100_32793_50@8
__fn_100_32795_0@8
__fn_100_32795_1@8
__fn_100_32799_0@8
__fn_100_32799_1@8
__fn_100_32805_64@8
__fn_100_32806_50@8
__fn_100_32814_50@8
__fn_100_32815_50@8
__fn_100_32816_50@8
__fn_100_32820_50@8
__fn_100_32821_50@8
__fn_100_32830_0@8
__fn_100_32830_1@8
__fn_100_32833_57@8
__fn_100_32833_58@8
__fn_100_32834_57@8
__fn_100_32834_58@8
__fn_100_32835_57@8
__fn_100_32835_58@8
__fn_100_32841_57@8
__fn_100_32841_58@8
__fn_100_32847_0@8
__fn_100_32847_1@8
__fn_100_32857_61@8
__fn_100_32859_57@8
__fn_100_32859_58@8
__fn_100_32860_57@8
__fn_100_32860_58@8
__fn_100_32864_0@8
__fn_100_32864_1@8
__fn_100_32871_50@8
__fn_100_32873_50@8
__fn_100_32877_57@8
__fn_100_32877_58@8
__fn_100_32889_57@8
__fn_100_32889_58@8
__fn_100_32891_50@8
__fn_100_32892_50@8
__fn_102_32769_19@8
__fn_33_32770_0@8
__fn_33_32770_135@8
__fn_33_32770_136@8
__fn_33_32770_137@8
__fn_33_32770_138@8
__fn_33_32770_139@8
__fn_33_32770_1@8
__fn_33_32770_54@8
__fn_33_32801_50@8
__fn_33_32803_441@8
__fn_33_32803_52@8
__fn_33_32803_63@8
__fn_33_32803_65@8
__fn_33_32803_76@8
__fn_33_32805_50@8
__fn_33_32806_50@8
__fn_33_32806_60@8
__fn_41_32769_19@8
__fn_76_32770_0@8
__fn_76_32770_1@8
__fn_76_32770_50@8
__fn_76_32770_65@8
__fn_76_32770_66@8
__fn_77_32770_52@8
__fn_77_32770_87@8
__fn_77_32770_88@8
__fn_77_32770_89@8
__fn_78_32770_51@8
__fn_78_32770_62@8
__fn_78_32770_63@8
__fn_78_32770_64@8
__fn_78_32770_65@8
__fn_78_32770_66@8
__fn_78_32770_67@8
__fn_78_32770_68@8
__fn_78_32770_69@8
__fn_78_32770_70@8
__fn_78_32770_71@8
__fn_78_32770_72@8
__fn_78_32770_73@8
__fn_78_32770_74@8
__fn_78_32770_75@8
__fn_78_32770_76@8
__fn_78_32770_77@8
__fn_78_32770_78@8
__fn_78_32770_79@8
__fn_78_32770_80@8
__fn_78_32770_81@8
__fn_78_32770_82@8
__fn_78_32770_83@8
__fn_78_32770_84@8
__fn_78_32770_85@8
__fn_78_32770_86@8
__fn_79_32770_0@8
__fn_79_32770_19@8
__fn_79_32770_1@8
__fn_79_32770_21@8
__fn_79_32770_22@8
__fn_79_32770_23@8
__fn_79_32770_24@8
__fn_79_32770_25@8
__fn_79_32770_26@8
__fn_79_32770_27@8
__fn_79_32770_28@8
__fn_79_32770_29@8
__fn_79_32770_30@8
__fn_79_32770_31@8
__fn_79_32770_32@8
__fn_79_32770_33@8
__fn_79_32770_34@8
__fn_79_32770_35@8
__fn_79_32770_36@8
__fn_80_32770_51@8
__fn_80_32770_62@8
__fn_80_32770_63@8
__fn_80_32770_64@8
__fn_80_32770_65@8
__fn_80_32770_66@8
__fn_80_32770_67@8
__fn_80_32770_68@8
__fn_80_32770_69@8
__fn_80_32770_70@8
__fn_80_32770_71@8
__fn_80_32770_72@8
__fn_80_32770_73@8
__fn_80_32770_74@8
__fn_80_32770_75@8
__fn_80_32770_76@8
__fn_80_32770_77@8
__fn_80_32770_78@8
__fn_80_32770_79@8
__fn_81_32770_0@8
__fn_81_32770_1@8
__fn_81_32770_50@8
__fn_81_32770_65@8
__fn_81_32770_66@8
__fn_81_32770_67@8
__fn_81_32770_68@8
__fn_81_32770_69@8
__fn_81_32770_70@8
__fn_81_32770_71@8
__fn_81_32770_72@8
__fn_81_32787_50@8
__fn_81_32791_50@8
__fn_81_32792_50@8
__fn_81_32792_60@8
__fn_81_32794_64@8
__fn_81_32794_66@8
__fn_82_32770_0@8
__fn_82_32770_1@8
__fn_82_32770_50@8
__fn_82_32770_65@8
__fn_82_32770_66@8
__fn_82_32770_67@8
__fn_82_32770_68@8
__fn_82_32770_69@8
__fn_82_32770_70@8
__fn_82_32770_71@8
__fn_82_32787_50@8
__fn_82_32791_50@8
__fn_82_32793_57@8
__fn_82_32793_58@8
__fn_82_32793_60@8
__fn_82_32793_62@8
__fn_82_32793_63@8
__fn_83_32770_0@8
__fn_83_32770_135@8
__fn_83_32770_136@8
__fn_83_32770_137@8
__fn_83_32770_138@8
__fn_83_32770_139@8
__fn_83_32770_140@8
__fn_83_32770_141@8
__fn_83_32770_142@8
__fn_83_32770_143@8
__fn_83_32770_144@8
__fn_83_32770_1@8
__fn_83_32770_54@8
__fn_83_32789_50@8
__fn_83_32800_50@8
__fn_83_32802_64@8
__fn_83_32804_50@8
__fn_83_32805_50@8
__fn_83_32807_50@8
__fn_83_32808_50@8
__fn_83_32810_59@8
__fn_83_32810_60@8
__fn_83_32810_75@8
__fn_84_32770_0@8
__fn_84_32770_140@8
__fn_84_32770_145@8
__fn_84_32770_146@8
__fn_84_32770_147@8
__fn_84_32770_148@8
__fn_84_32770_1@8
__fn_84_32809_58@8
__fn_84_32809_59@8
__fn_84_32809_75@8
__fn_84_32835_58@8
__fn_84_32837_50@8
__fn_84_32838_50@8
__fn_84_32840_50@8
__fn_85_32770_441@8
__fn_85_32770_442@8
__fn_85_32770_443@8
__fn_85_32770_444@8
__fn_85_32770_445@8
__fn_85_32770_446@8
__fn_85_32770_447@8
__fn_85_32770_448@8
__fn_85_32770_449@8
__fn_85_32770_450@8
__fn_85_32770_451@8
__fn_85_32770_452@8
__fn_85_32770_453@8
__fn_85_32770_454@8
__fn_85_32770_455@8
__fn_85_32770_456@8
__fn_85_32770_457@8
__fn_85_32770_458@8
__fn_85_32770_459@8
__fn_85_32770_460@8
__fn_85_32770_461@8
__fn_85_32770_462@8
__fn_85_32770_463@8
__fn_85_32770_464@8
__fn_85_32770_465@8
__fn_85_32770_466@8
__fn_85_32770_467@8
__fn_85_32770_468@8
__fn_85_32770_469@8
__fn_85_32770_470@8
__fn_85_32770_471@8
__fn_85_32770_472@8
__fn_85_32770_473@8
__fn_85_32770_474@8
__fn_85_32770_475@8
__fn_85_32770_476@8
__fn_85_32770_477@8
__fn_85_32770_478@8
__fn_85_32770_52@8
__fn_85_32770_53@8
__fn_85_32770_71@8
__fn_85_32770_78@8
__fn_86_32770_0@8
__fn_86_32770_135@8
__fn_86_32770_136@8
__fn_86_32770_1@8
__fn_86_32770_54@8
__fn_86_32802_50@8
__fn_86_32804_52@8
__fn_86_32804_56@8
__fn_86_32804_57@8
__fn_86_32804_59@8
__fn_86_32804_60@8
__fn_86_32806_50@8
__fn_86_32807_52@8
__fn_86_32807_53@8
__fn_86_32807_56@8
__fn_86_32807_57@8
__fn_88_32770_0@8
__fn_88_32770_135@8
__fn_88_32770_136@8
__fn_88_32770_137@8
__fn_88_32770_138@8
__fn_88_32770_139@8
__fn_88_32770_140@8
__fn_88_32770_141@8
__fn_88_32770_1@8
__fn_88_32770_39@8
__fn_88_32770_54@8
__fn_88_32770_62@8
__fn_88_32789_50@8
__fn_88_32798_50@8
__fn_88_32799_50@8
__fn_88_32800_50@8
__fn_88_32801_50@8
__fn_88_32802_50@8
__fn_88_32804_57@8
__fn_88_32804_58@8
__fn_88_32806_60@8
__fn_88_32810_50@8
__fn_88_32814_50@8
__fn_88_32815_50@8
__fn_88_32816_50@8
__fn_88_32817_50@8
__fn_88_32818_50@8
__fn_88_32819_50@8
__fn_88_32820_50@8
__fn_88_32821_50@8
__fn_88_32822_50@8
__fn_88_32827_51@8
__fn_88_32833_52@8
__fn_88_32833_76@8
__fn_89_32770_0@8
__fn_89_32770_135@8
__fn_89_32770_136@8
__fn_89_32770_1@8
__fn_89_32770_54@8
__fn_89_32789_50@8
__fn_89_32789_51@8
__fn_89_32816_50@8
__fn_89_32817_50@8
__fn_89_32822_64@8
__fn_90_32770_0@8
__fn_90_32770_135@8
__fn_90_32770_136@8
__fn_90_32770_137@8
__fn_90_32770_138@8
__fn_90_32770_1@8
__fn_90_32770_65@8
__fn_91_32770_0@8
__fn_91_32770_1@8
__fn_91_32786_0@8
__fn_91_32786_1@8
__fn_91_32787_0@8
__fn_91_32787_37@8
__fn_91_32788_0@8
__fn_91_32788_37@8
__fn_91_32789_0@8
__fn_91_32789_37@8
__fn_91_32790_0@8
__fn_91_32790_37@8
__fn_91_32791_0@8
__fn_91_32791_37@8
__fn_91_32792_0@8
__fn_91_32793_0@8
__fn_91_32793_37@8
__fn_91_32794_0@8
__fn_91_32794_37@8
__fn_92_32770_441@8
__fn_92_32770_442@8
__fn_92_32770_53@8
__fn_93_32770_0@8
__fn_93_32770_135@8
__fn_93_32770_136@8
__fn_93_32770_137@8
__fn_93_32770_1@8
__fn_93_32770_54@8
__fn_93_32789_0@8
__fn_93_32789_1@8
__fn_93_32796_0@8
__fn_93_32796_1@8
__fn_93_32800_64@8
__fn_93_32808_50@8
__fn_93_32809_50@8
__fn_93_32810_50@8
__fn_93_32813_50@8
__fn_93_32814_50@8
__fn_93_32816_64@8
__fn_93_32829_0@8
__fn_93_32829_1@8
__fn_93_32832_57@8
__fn_93_32832_58@8
__fn_93_32833_57@8
__fn_93_32833_58@8
__fn_93_32834_57@8
__fn_93_32834_58@8
__fn_93_32840_57@8
__fn_93_32840_58@8
__fn_93_32846_0@8
__fn_93_32846_1@8
__fn_93_32854_50@8
__fn_93_32857_50@8
__fn_93_32861_57@8
__fn_93_32861_58@8
__fn_93_32873_57@8
__fn_93_32873_58@8
__fn_93_32875_50@8
__fn_93_32876_50@8
__fn_94_32769_19@8
__fn_95_32770_0@8
__fn_95_32770_135@8
__fn_95_32770_1@8
__fn_95_32770_39@8
__fn_95_32770_54@8
__fn_95_32800_50@8
__fn_96_32770_0@8
__fn_96_32770_19@8
__fn_96_32770_1@8
__fn_96_32770_21@8
__fn_96_32770_22@8
__fn_96_32770_23@8
__fn_96_32770_24@8
__fn_96_32770_25@8
__fn_96_32770_26@8
__fn_96_32770_27@8
__fn_96_32770_28@8
__fn_96_32770_29@8
__fn_96_32770_30@8
__fn_97_32770_0@8
__fn_97_32770_135@8
__fn_97_32770_136@8
__fn_97_32770_137@8
__fn_97_32770_1@8
__fn_97_32770_54@8
__fn_97_32789_50@8
__fn_97_32793_50@8
__fn_97_32794_50@8
__fn_97_32795_50@8
__fn_97_32796_50@8
__fn_97_32797_50@8
__fn_98_32770_0@8
__fn_98_32770_1@8
__fn_98_32770_50@8
__fn_98_32770_54@8
__fn_99_32770_0@8
__fn_99_32770_135@8
__fn_99_32770_1@8
__fn_99_32770_54@8
__fn_99_32789_50@8
__fn_99_32793_50@8
__fn_99_32794_50@8
__fn_99_32795_50@8
__fn_99_32797_58@8
__fn_99_32802_50@8
__fn_99_32804_52@8
__fn_99_32811_50@8
__fn_99_32812_50@8
__fn_99_32813_50@8
_getVtableInfo_f_settime@12
_getVtableInfo_m_dw_popmenu@12
_getVtableInfo_pfc_n_cst_resize@12
_getVtableInfo_readme@12
_getVtableInfo_str_printtool@12
_getVtableInfo_systemtime@12
_getVtableInfo_uo_dw_disp_row@12
_getVtableInfo_uo_dw_super@12
_getVtableInfo_uo_dw_vscroll_4@12
_getVtableInfo_uo_ivan_query@12
_getVtableInfo_uo_printer@12
_getVtableInfo_uo_printer_lag@12
_getVtableInfo_uo_processbar@12
_getVtableInfo_uo_progress@12
_getVtableInfo_uo_splitbar@12
_getVtableInfo_w_dw_filter@12
_getVtableInfo_w_dw_find@12
_getVtableInfo_w_dw_prnpreview_printer@12
_getVtableInfo_w_dw_replace@12
_getVtableInfo_w_dw_retrieve_progress@12
_getVtableInfo_w_dw_sort@12
_getVtableInfo_w_dw_statistic@12
_getVtableInfo_w_message@12
_getVtableInfo_w_printdialog@12
_getVtableInfo_w_printer@12
_getVtableInfo_w_printtool@12
_getVtableInfo_w_showtip@12
_getVtableInfo_w_super_dw_sort@12
_getVtableInfo_whatnew@12

Sections

AUTO
Size: 2.8MB - Virtual size:

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.idata
Size: 2KB - Virtual size:

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

DGROUP
Size: 511KB - Virtual size:

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: 5KB - Virtual size:

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 13KB - Virtual size:

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 43KB - Virtual size:

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size:

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
200691417145441/莒南妇保院门诊收款管理系统/门诊收款/pbpl_dwsrv.pbd
200691417145441/莒南妇保院门诊收款管理系统/门诊收款/pbpl_dwsrv.pbl
200691417145441/莒南妇保院门诊收款管理系统/门诊收款/prior.ICO
200691417145441/莒南妇保院门诊收款管理系统/门诊收款/search.ico
200691417145441/莒南妇保院门诊收款管理系统/门诊收款/search1.ICO
200691417145441/莒南妇保院门诊收款管理系统/门诊收款/send.ICO
200691417145441/莒南妇保院门诊收款管理系统/门诊收款/server.ico
200691417145441/莒南妇保院门诊收款管理系统/门诊收款/sk.dll
.dll windows:1 windows x86 arch:x86

846221d5dd4c4e57072648292f87f27d

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

user32

CharUpperBuffA
MessageBoxA

kernel32

CloseHandle
CreateEventA
CreateFileA
CreateThread
DeleteCriticalSection
EnterCriticalSection
ExitProcess
ExitThread
FreeEnvironmentStringsA
GetACP
GetCPInfo
GetCommandLineA
GetCommandLineW
GetCurrentThreadId
GetCurrentThread
GetEnvironmentStrings
GetFileType
GetLastError
GetModuleFileNameA
GetModuleFileNameW
GetModuleHandleA
GetOEMCP
GetProcAddress
GetStdHandle
GetVersion
InitializeCriticalSection
LeaveCriticalSection
LoadLibraryA
MultiByteToWideChar
SetConsoleCtrlHandler
SetEnvironmentVariableA
SetEnvironmentVariableW
SetEvent
SetLastError
SetStdHandle
SetUnhandledExceptionFilter
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
UnhandledExceptionFilter
VirtualAlloc
VirtualFree
VirtualQuery
WaitForSingleObject
WideCharToMultiByte
WriteFile

pbvm90

ord5237
ord2689
ord2457
ord5539
ord5556
ord2531
ord5531
ord5547
ord2451
ord2427
ord2504
ord5552
ord2402
ord2442
ord2417
ord2487
ord5073
ord2579
ord2386
ord2475
ord2149
ord2148
ord2640
ord2506
ord2512
ord2449
ord5545
ord2403
ord5153
ord2425
ord5532
ord2441
ord2514
ord2526
ord2513
ord2147
ord2607
ord2435
ord2408
ord2418
ord2505
ord2406
ord2452
ord2407
ord2490
ord2279
ord2529
ord2532
ord5164
ord2498
ord2274
ord2604
ord2609
ord5118
ord2624
ord2519
ord2524
ord2650
ord2493
ord2606
ord2081
ord5530
ord2521
ord5551
ord5540
ord2401
ord5538
ord2384
ord5544
ord2426
ord2632
ord2536
ord2541
ord2469
ord2057
ord2497
ord2473
ord2495
ord2474
ord2496
ord2540
ord2520
ord2539
ord2492
ord2453
ord2515
ord2611
ord2295
ord2450
ord5555
ord2480
ord2412
ord2455
ord2461
ord2653
ord2599
ord2416
ord2582
ord2468
ord2546
ord2404
ord2456
ord2448
ord2537
ord2454
ord2050
ord2646
ord5245
ord2644
ord2645
ord5239
ord2484
ord2462
ord2405
ord2458
ord2578
ord2459
ord2183
ord5151
ord2012
ord2639
ord2638
ord2479
ord2488
ord5236
ord2486
ord2634
ord5238
ord2510
ord5234
ord2865
ord2043
ord2864

Exports

Exports

_DllMain@12
__fn_10_32770_0@8
__fn_10_32770_1@8
__fn_10_32770_54@8
__fn_10_32795_50@8
__fn_10_32799_50@8
__fn_10_32800_50@8
__fn_11_32770_50@8
__fn_11_32770_65@8
__fn_12_32770_0@8
__fn_12_32770_1@8
__fn_12_32770_54@8
__fn_12_32803_50@8
__fn_12_32804_50@8
__fn_12_32805_50@8
__fn_12_32810_73@8
__fn_12_32810_75@8
__fn_13_32770_0@8
__fn_13_32770_1@8
__fn_13_32770_54@8
__fn_13_32798_50@8
__fn_13_32802_50@8
__fn_13_32803_50@8
__fn_13_32806_73@8
__fn_13_32806_75@8
__fn_14_32770_0@8
__fn_14_32770_1@8
__fn_14_32770_54@8
__fn_14_32789_50@8
__fn_14_32793_50@8
__fn_14_32794_50@8
__fn_14_32805_73@8
__fn_14_32805_75@8
__fn_15_32770_0@8
__fn_15_32770_1@8
__fn_15_32770_54@8
__fn_15_32789_50@8
__fn_15_32793_50@8
__fn_15_32794_50@8
__fn_16_32770_0@8
__fn_16_32770_1@8
__fn_16_32770_54@8
__fn_16_32789_50@8
__fn_16_32793_50@8
__fn_16_32794_50@8
__fn_17_32770_0@8
__fn_17_32770_1@8
__fn_17_32770_54@8
__fn_17_32789_50@8
__fn_17_32794_58@8
__fn_17_32799_58@8
__fn_17_32800_50@8
__fn_17_32801_50@8
__fn_17_32803_73@8
__fn_17_32803_75@8
__fn_17_32805_50@8
__fn_18_32770_0@8
__fn_18_32770_1@8
__fn_18_32770_54@8
__fn_18_32789_50@8
__fn_18_32793_50@8
__fn_18_32794_50@8
__fn_18_32795_50@8
__fn_18_32797_52@8
__fn_18_32797_76@8
__fn_19_32770_0@8
__fn_19_32770_1@8
__fn_19_32789_50@8
__fn_19_32793_50@8
__fn_1_32770_0@8
__fn_1_32770_19@8
__fn_1_32770_1@8
__fn_1_32770_21@8
__fn_1_32770_27@8
__fn_1_32770_28@8
__fn_1_32770_29@8
__fn_1_32770_30@8
__fn_1_32770_31@8
__fn_1_32770_32@8
__fn_1_32770_33@8
__fn_1_32770_34@8
__fn_1_32770_35@8
__fn_1_32770_36@8
__fn_1_32770_37@8
__fn_1_32770_38@8
__fn_1_32770_39@8
__fn_1_32770_40@8
__fn_1_32770_41@8
__fn_1_32770_42@8
__fn_1_32770_43@8
__fn_1_32770_44@8
__fn_1_32770_45@8
__fn_1_32770_46@8
__fn_1_32770_47@8
__fn_1_32770_48@8
__fn_1_32770_49@8
__fn_1_32770_50@8
__fn_1_32770_51@8
__fn_1_32770_52@8
__fn_1_32770_53@8
__fn_1_32770_54@8
__fn_1_32770_55@8
__fn_1_32770_56@8
__fn_1_32770_57@8
__fn_1_32770_58@8
__fn_1_32770_59@8
__fn_1_32770_60@8
__fn_20_32770_0@8
__fn_20_32770_1@8
__fn_20_32770_54@8
__fn_20_32789_50@8
__fn_20_32793_50@8
__fn_21_32770_0@8
__fn_21_32770_1@8
__fn_21_32770_54@8
__fn_21_32801_50@8
__fn_21_32802_50@8
__fn_21_32802_61@8
__fn_22_32770_0@8
__fn_22_32770_1@8
__fn_22_32770_54@8
__fn_22_32800_50@8
__fn_22_32801_50@8
__fn_23_32770_0@8
__fn_23_32770_1@8
__fn_23_32770_54@8
__fn_24_32770_0@8
__fn_24_32770_135@8
__fn_24_32770_1@8
__fn_24_32770_40@8
__fn_24_32770_54@8
__fn_24_32770_62@8
__fn_25_32769_19@8
__fn_26_32769_19@8
__fn_27_32769_19@8
__fn_28_32769_19@8
__fn_29_32770_0@8
__fn_29_32770_1@8
__fn_2_32769_19@8
__fn_30_32770_0@8
__fn_30_32770_1@8
__fn_30_32770_54@8
__fn_30_32803_50@8
__fn_30_32805_50@8
__fn_31_32770_0@8
__fn_31_32770_1@8
__fn_31_32770_54@8
__fn_31_32797_60@8
__fn_31_32797_75@8
__fn_31_32800_61@8
__fn_31_32800_64@8
__fn_31_32800_87@8
__fn_31_32809_50@8
__fn_31_32810_50@8
__fn_31_32810_61@8
__fn_32_32770_0@8
__fn_32_32770_1@8
__fn_34_32770_0@8
__fn_34_32770_135@8
__fn_34_32770_136@8
__fn_34_32770_137@8
__fn_34_32770_1@8
__fn_34_32770_54@8
__fn_34_32789_50@8
__fn_34_32793_50@8
__fn_34_32795_0@8
__fn_34_32795_1@8
__fn_34_32799_0@8
__fn_34_32799_1@8
__fn_34_32805_64@8
__fn_34_32806_50@8
__fn_34_32814_50@8
__fn_34_32815_50@8
__fn_34_32816_50@8
__fn_34_32820_50@8
__fn_34_32821_50@8
__fn_34_32830_0@8
__fn_34_32830_1@8
__fn_34_32833_57@8
__fn_34_32833_58@8
__fn_34_32834_57@8
__fn_34_32834_58@8
__fn_34_32835_57@8
__fn_34_32835_58@8
__fn_34_32841_57@8
__fn_34_32841_58@8
__fn_34_32847_0@8
__fn_34_32847_1@8
__fn_34_32857_61@8
__fn_34_32859_57@8
__fn_34_32859_58@8
__fn_34_32860_57@8
__fn_34_32860_58@8
__fn_34_32864_0@8
__fn_34_32864_1@8
__fn_34_32871_50@8
__fn_34_32873_50@8
__fn_34_32877_57@8
__fn_34_32877_58@8
__fn_34_32889_57@8
__fn_34_32889_58@8
__fn_34_32891_50@8
__fn_34_32892_50@8
__fn_35_32770_0@8
__fn_35_32770_1@8
__fn_36_32769_19@8
__fn_37_32770_0@8
__fn_37_32770_136@8
__fn_37_32770_137@8
__fn_37_32770_138@8
__fn_37_32770_139@8
__fn_37_32770_140@8
__fn_37_32770_141@8
__fn_37_32770_142@8
__fn_37_32770_143@8
__fn_37_32770_1@8
__fn_37_32770_54@8
__fn_37_32770_56@8
__fn_37_32770_65@8
__fn_37_32789_50@8
__fn_37_32797_50@8
__fn_37_32801_50@8
__fn_37_32803_50@8
__fn_37_32804_50@8
__fn_37_32805_50@8
__fn_37_32807_76@8
__fn_37_32808_50@8
__fn_37_32810_60@8
__fn_37_32811_60@8
__fn_37_32817_60@8
__fn_37_32819_54@8
__fn_37_32819_58@8
__fn_37_32819_60@8
__fn_37_32819_62@8
__fn_37_32819_75@8
__fn_37_32827_50@8
__fn_37_32830_50@8
__fn_37_32831_50@8
__fn_37_32832_50@8
__fn_37_32833_50@8
__fn_37_32834_52@8
__fn_37_32834_56@8
__fn_37_32834_65@8
__fn_37_32834_76@8
__fn_37_32836_441@8
__fn_37_32836_442@8
__fn_37_32836_52@8
__fn_37_32836_54@8
__fn_37_32836_61@8
__fn_37_32836_62@8
__fn_37_32836_63@8
__fn_37_32836_64@8
__fn_37_32836_65@8
__fn_37_32836_66@8
__fn_37_32836_71@8
__fn_37_32836_76@8
__fn_37_32836_83@8
__fn_37_32837_58@8
__fn_37_32837_59@8
__fn_37_32837_75@8
__fn_37_32839_76@8
__fn_38_32769_19@8
__fn_39_32770_0@8
__fn_39_32770_135@8
__fn_39_32770_1@8
__fn_39_32770_54@8
__fn_39_32770_65@8
__fn_3_32769_19@8
__fn_40_32770_0@8
__fn_40_32770_1@8
__fn_40_32770_62@8
__fn_40_32789_50@8
__fn_40_32793_50@8
__fn_40_32794_50@8
__fn_40_32795_50@8
__fn_40_32796_50@8
__fn_40_32797_50@8
__fn_40_32798_50@8
__fn_40_32799_50@8
__fn_40_32800_50@8
__fn_40_32801_50@8
__fn_40_32802_50@8
__fn_40_32803_50@8
__fn_40_32804_50@8
__fn_40_32805_50@8
__fn_40_32806_50@8
__fn_40_32807_50@8
__fn_42_32770_0@8
__fn_42_32770_19@8
__fn_42_32770_1@8
__fn_42_32770_21@8
__fn_42_32770_22@8
__fn_42_32770_23@8
__fn_42_32770_24@8
__fn_42_32770_25@8
__fn_42_32770_26@8
__fn_42_32770_27@8
__fn_42_32770_28@8
__fn_42_32770_29@8
__fn_42_32770_30@8
__fn_42_32770_31@8
__fn_42_32770_32@8
__fn_42_32770_33@8
__fn_42_32770_34@8
__fn_42_32770_35@8
__fn_42_32770_36@8
__fn_42_32770_37@8
__fn_42_32770_38@8
__fn_42_32770_39@8
__fn_43_32770_0@8
__fn_43_32770_1@8
__fn_43_32786_0@8
__fn_43_32786_1@8
__fn_43_32786_37@8
__fn_43_32787_0@8
__fn_43_32787_1@8
__fn_43_32787_37@8
__fn_43_32788_0@8
__fn_43_32788_1@8
__fn_43_32788_37@8
__fn_43_32789_0@8
__fn_43_32789_1@8
__fn_43_32789_37@8
__fn_43_32790_0@8
__fn_43_32790_1@8
__fn_43_32791_0@8
__fn_43_32791_1@8
__fn_43_32791_37@8
__fn_43_32792_0@8
__fn_43_32792_1@8
__fn_43_32792_37@8
__fn_43_32793_0@8
__fn_43_32793_1@8
__fn_43_32794_0@8
__fn_43_32794_1@8
__fn_43_32794_37@8
__fn_43_32795_0@8
__fn_43_32795_1@8
__fn_43_32795_37@8
__fn_43_32796_0@8
__fn_43_32796_1@8
__fn_43_32796_37@8
__fn_44_32769_19@8
__fn_45_32769_19@8
__fn_46_32769_19@8
__fn_47_32770_0@8
__fn_47_32770_1@8
__fn_47_32770_65@8
__fn_47_32770_66@8
__fn_47_32787_52@8
__fn_47_32787_73@8
__fn_47_32787_76@8
__fn_48_32770_0@8
__fn_48_32770_1@8
__fn_48_32770_50@8
__fn_48_32770_65@8
__fn_48_32770_66@8
__fn_48_32770_67@8
__fn_48_32770_68@8
__fn_48_32770_69@8
__fn_48_32770_70@8
__fn_48_32770_71@8
__fn_48_32770_72@8
__fn_48_32770_73@8
__fn_48_32770_74@8
__fn_48_32770_75@8
__fn_48_32770_76@8
__fn_48_32770_77@8
__fn_48_32770_78@8
__fn_48_32790_52@8
__fn_48_32790_76@8
__fn_49_32770_0@8
__fn_49_32770_19@8
__fn_49_32770_1@8
__fn_49_32770_21@8
__fn_49_32770_22@8
__fn_49_32770_23@8
__fn_49_32770_24@8
__fn_49_32770_25@8
__fn_49_32770_26@8
__fn_49_32770_27@8
__fn_49_32770_28@8
__fn_49_32770_29@8
__fn_49_32770_30@8
__fn_49_32770_31@8
__fn_49_32770_32@8
__fn_49_32770_33@8
__fn_49_32770_34@8
__fn_49_32770_35@8
__fn_49_32770_36@8
__fn_4_32770_0@8
__fn_4_32770_1@8
__fn_4_32786_0@8
__fn_4_32786_1@8
__fn_4_32787_0@8
__fn_4_32787_1@8
__fn_4_32787_37@8
__fn_4_32788_0@8
__fn_4_32788_1@8
__fn_4_32788_37@8
__fn_4_32789_0@8
__fn_4_32789_1@8
__fn_4_32790_0@8
__fn_4_32790_1@8
__fn_4_32791_0@8
__fn_4_32791_1@8
__fn_4_32791_37@8
__fn_4_32792_0@8
__fn_4_32792_1@8
__fn_4_32793_0@8
__fn_4_32793_1@8
__fn_4_32793_37@8
__fn_4_32794_0@8
__fn_4_32794_1@8
__fn_4_32794_37@8
__fn_4_32795_0@8
__fn_4_32795_1@8
__fn_4_32795_37@8
__fn_4_32796_0@8
__fn_4_32796_1@8
__fn_4_32797_0@8
__fn_4_32797_1@8
__fn_4_32797_37@8
__fn_4_32798_0@8
__fn_4_32798_1@8
__fn_4_32798_37@8
__fn_4_32799_0@8
__fn_4_32799_1@8
__fn_4_32799_37@8
__fn_4_32800_0@8
__fn_4_32800_1@8
__fn_4_32800_37@8
__fn_4_32801_0@8
__fn_4_32801_1@8
__fn_4_32802_0@8
__fn_4_32802_1@8
__fn_4_32802_37@8
__fn_4_32803_0@8
__fn_4_32803_1@8
__fn_4_32803_37@8
__fn_4_32804_0@8
__fn_4_32804_1@8
__fn_4_32804_37@8
__fn_4_32805_0@8
__fn_4_32805_1@8
__fn_4_32805_37@8
__fn_4_32806_0@8
__fn_4_32806_1@8
__fn_4_32807_0@8
__fn_4_32807_1@8
__fn_4_32807_37@8
__fn_4_32808_0@8
__fn_4_32808_1@8
__fn_4_32808_37@8
__fn_4_32809_0@8
__fn_4_32809_1@8
__fn_4_32810_0@8
__fn_4_32810_1@8
__fn_4_32810_37@8
__fn_4_32811_0@8
__fn_4_32811_1@8
__fn_4_32812_0@8
__fn_4_32812_1@8
__fn_4_32812_37@8
__fn_4_32813_0@8
__fn_4_32813_1@8
__fn_4_32814_0@8
__fn_4_32814_1@8
__fn_4_32814_37@8
__fn_4_32815_0@8
__fn_4_32815_1@8
__fn_4_32815_37@8
__fn_4_32816_0@8
__fn_4_32816_1@8
__fn_4_32817_0@8
__fn_4_32817_1@8
__fn_4_32817_37@8
__fn_4_32818_0@8
__fn_4_32818_1@8
__fn_4_32819_0@8
__fn_4_32819_1@8
__fn_4_32819_37@8
__fn_4_32820_0@8
__fn_4_32820_1@8
__fn_4_32820_37@8
__fn_4_32821_0@8
__fn_4_32821_1@8
__fn_4_32822_0@8
__fn_4_32822_1@8
__fn_4_32822_37@8
__fn_4_32823_0@8
__fn_4_32823_1@8
__fn_4_32823_37@8
__fn_50_32770_0@8
__fn_50_32770_19@8
__fn_50_32770_1@8
__fn_50_32770_21@8
__fn_50_32770_22@8
__fn_52_32770_0@8
__fn_52_32770_1@8

Sections

AUTO
Size: 2.8MB - Virtual size:

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.idata
Size: 2KB - Virtual size:

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

DGROUP
Size: 520KB - Virtual size:

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: 5KB - Virtual size:

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 23KB - Virtual size:

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 47KB - Virtual size:

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size:

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
200691417145441/莒南妇保院门诊收款管理系统/门诊收款/sk.pbd
200691417145441/莒南妇保院门诊收款管理系统/门诊收款/sk.pbl
200691417145441/莒南妇保院门诊收款管理系统/门诊收款/sk.pbt
200691417145441/莒南妇保院门诊收款管理系统/门诊收款/sk.pbw
200691417145441/莒南妇保院门诊收款管理系统/门诊收款/time.ico
200691417145441/莒南妇保院门诊收款管理系统/门诊收款/user.jpg
.jpg
200691417145441/莒南妇保院门诊收款管理系统/门诊收款/weather.ICO
200691417145441/莒南妇保院门诊收款管理系统/门诊收款/免费『商业源码』.url
200691417145441/莒南妇保院门诊收款管理系统/门诊收款/天堂.jpg
.jpg
200691417145441/莒南妇保院门诊收款管理系统/门诊收款/请稍候.bmp
200691417145441/莒南妇保院门诊收款管理系统/门诊收款/门诊收费.ico

Sharing

General

Malware Config

Signatures

Files

Headers

File Characteristics

Sections

CODE Size: 160KB - Virtual size: 159KB

DATA Size: 3KB - Virtual size: 2KB

BSS Size: - Virtual size: 1KB

.idata Size: 6KB - Virtual size: 6KB

.tls Size: - Virtual size: 8B

.rdata Size: 512B - Virtual size: 24B

.reloc Size: 12KB - Virtual size: 11KB

.rsrc Size: 348KB - Virtual size: 364KB

Headers

File Characteristics

Exports

Exports

Sections

CODE Size: 482KB - Virtual size: 481KB

DATA Size: 5KB - Virtual size: 5KB

BSS Size: - Virtual size: 3KB

.idata Size: 9KB - Virtual size: 9KB

.edata Size: 512B - Virtual size: 86B

.reloc Size: 33KB - Virtual size: 33KB

.rsrc Size: 3.6MB - Virtual size: 3.6MB

4881409017ce4266fba153f91972666c

Headers

File Characteristics

Imports

kernel32

user32

Exports

Exports

Sections

.text Size: 48KB - Virtual size: 44KB

.rdata Size: 8KB - Virtual size: 4KB

.data Size: 12KB - Virtual size: 96KB

.rsrc Size: 4KB - Virtual size: 1KB

.reloc Size: 8KB - Virtual size: 4KB

40927c00b70b924f907639bf408b08a9

Headers

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

comctl32

Exports

Exports

Sections

.text Size: 76KB - Virtual size: 73KB

.rdata Size: 20KB - Virtual size: 18KB

.data Size: 16KB - Virtual size: 27KB

.rsrc Size: 8KB - Virtual size: 7KB

.reloc Size: 12KB - Virtual size: 11KB

30cb7492f9869ccce0bd56c59a019d38

Headers

DLL Characteristics

File Characteristics

Imports

advapi32

kernel32

msvcrt

ole32

oleaut32

wsock32

Exports

Exports

Sections

.text Size: 44KB - Virtual size: 41KB

.data Size: 8KB - Virtual size: 12KB

.rsrc Size: 4KB - Virtual size: 1KB

.reloc Size: 4KB - Virtual size: 2KB

a6cd47cb7fa8ec9c3e8d904759ea39d5

CODE
Size: 160KB - Virtual size: 159KB

DATA
Size: 3KB - Virtual size: 2KB

BSS
Size: - Virtual size: 1KB

.idata
Size: 6KB - Virtual size: 6KB

.tls
Size: - Virtual size: 8B

.rdata
Size: 512B - Virtual size: 24B

.reloc
Size: 12KB - Virtual size: 11KB

.rsrc
Size: 348KB - Virtual size: 364KB

CODE
Size: 482KB - Virtual size: 481KB

DATA
Size: 5KB - Virtual size: 5KB

BSS
Size: - Virtual size: 3KB

.idata
Size: 9KB - Virtual size: 9KB

.edata
Size: 512B - Virtual size: 86B

.reloc
Size: 33KB - Virtual size: 33KB

.rsrc
Size: 3.6MB - Virtual size: 3.6MB

.text
Size: 48KB - Virtual size: 44KB

.rdata
Size: 8KB - Virtual size: 4KB

.data
Size: 12KB - Virtual size: 96KB

.rsrc
Size: 4KB - Virtual size: 1KB

.reloc
Size: 8KB - Virtual size: 4KB

.text
Size: 76KB - Virtual size: 73KB

.rdata
Size: 20KB - Virtual size: 18KB

.data
Size: 16KB - Virtual size: 27KB

.rsrc
Size: 8KB - Virtual size: 7KB

.reloc
Size: 12KB - Virtual size: 11KB

.text
Size: 44KB - Virtual size: 41KB

.data
Size: 8KB - Virtual size: 12KB

.rsrc
Size: 4KB - Virtual size: 1KB

.reloc
Size: 4KB - Virtual size: 2KB

.text
Size: 12KB - Virtual size: 8KB

.data
Size: 4KB - Virtual size: 132B

.rsrc
Size: 4KB - Virtual size: 1KB

.reloc
Size: 4KB - Virtual size: 416B

.text
Size: 374KB - Virtual size: 373KB

.data
Size: 6KB - Virtual size: 6KB

.rsrc
Size: 447KB - Virtual size: 448KB

.reloc
Size: 13KB - Virtual size: 13KB

.text
Size: 180KB - Virtual size: 180KB

.rdata
Size: 7KB - Virtual size: 7KB

.data
Size: 172KB - Virtual size: 176KB

.idata
Size: 2KB - Virtual size: 1KB

.reloc
Size: 19KB - Virtual size: 19KB

.text
Size: 21KB - Virtual size: 20KB

.rdata
Size: 2KB - Virtual size: 1KB

.data
Size: 6KB - Virtual size: 8KB

.idata
Size: 1KB - Virtual size: 1KB

.rsrc
Size: 512B - Virtual size: 288B

.reloc
Size: 1KB - Virtual size: 1KB

.text
Size: 967KB - Virtual size: 967KB

.data
Size: 65KB - Virtual size: 66KB

.rsrc
Size: 108KB - Virtual size: 107KB