988c1b0ce6cae586822fa39b07df3881

Sharing

Copy URL Twitter E-mail

Reason

office: invalid record header

Reason

office: invalid record header

General

Target

988c1b0ce6cae586822fa39b07df3881
Size

3.9MB
MD5

988c1b0ce6cae586822fa39b07df3881
SHA1

2d86e3a5bf6c6d8eb00ea6c92358e20d4c3133b8
SHA256

c4d5aefb6e4e987816b07b1009a43dea9a8f13fa4152cda63dd43939b4f987e3
SHA512

7993c927f968768e40bd4bcab0ddf91b1263f93f420c8c361b7a9b2189a9d70482b1a10da767c4d065eefb2b5d1d415311c659a524d6ebbec064ab2c9b8f6d21
SSDEEP

98304:RNcujbcx2MOdDz8pxJYm2fpghv9VkMoIxlTI/:fjbAA58VYm2f6lSMHTC

Score

3^/10

Malware Config

Signatures

Unsigned PE 12 IoCs

Checks for missing Authenticode signature.

resource
unpack001/KERNEL32.DLL
unpack001/libjcc.dll
unpack001/pbdwe80.dll
unpack001/pbodb80.dll
unpack001/pbvm80.dll
unpack001/utils.dll
unpack001/zrpk.dll
unpack001/zrpk_f.dll
unpack001/zrpk_setw.dll
unpack001/zrpk_w.dll
unpack001/zrpk_wb.dll
unpack001/智能排课.exe

Files

988c1b0ce6cae586822fa39b07df3881
.rar
D0928_2.gif
.gif
HTML_HELP.chm
.chm
KERNEL32.DLL
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Exports

Exports

AddAtomA
AddAtomW
AllocConsole
AllocLSCallback
AllocSLCallback
AreFileApisANSI
BackupRead
BackupSeek
BackupWrite
Beep
BeginUpdateResourceA
BeginUpdateResourceW
BuildCommDCBA
BuildCommDCBAndTimeoutsA
BuildCommDCBAndTimeoutsW
BuildCommDCBW
CallNamedPipeA
CallNamedPipeW
Callback12
Callback16
Callback20
Callback24
Callback28
Callback32
Callback36
Callback4
Callback40
Callback44
Callback48
Callback52
Callback56
Callback60
Callback64
Callback8
CancelDeviceWakeupRequest
CancelIo
CancelWaitableTimer
ClearCommBreak
ClearCommError
CloseHandle
CloseProfileUserMapping
CloseSystemHandle
CommConfigDialogA
CommConfigDialogW
CompareFileTime
CompareStringA
CompareStringW
ConnectNamedPipe
ContinueDebugEvent
ConvertDefaultLocale
ConvertThreadToFiber
ConvertToGlobalHandle
CopyFileA
CopyFileExA
CopyFileExW
CopyFileW
CreateConsoleScreenBuffer
CreateDirectoryA
CreateDirectoryExA
CreateDirectoryExW
CreateDirectoryW
CreateEventA
CreateEventW
CreateFiber
CreateFileA
CreateFileMappingA
CreateFileMappingW
CreateFileW
CreateIoCompletionPort
CreateKernelThread
CreateMailslotA
CreateMailslotW
CreateMutexA
CreateMutexW
CreateNamedPipeA
CreateNamedPipeW
CreatePipe
CreateProcessA
CreateProcessW
CreateRemoteThread
CreateSemaphoreA
CreateSemaphoreW
CreateSocketHandle
CreateTapePartition
CreateThread
CreateToolhelp32Snapshot
CreateWaitableTimerA
CreateWaitableTimerW
DebugActiveProcess
DebugBreak
DefineDosDeviceA
DefineDosDeviceW
DeleteAtom
DeleteCriticalSection
DeleteFiber
DeleteFileA
DeleteFileW
DeviceIoControl
DisableThreadLibraryCalls
DisconnectNamedPipe
DosDateTimeToFileTime
DuplicateHandle
EndUpdateResourceA
EndUpdateResourceW
EnterCriticalSection
EnumCalendarInfoA
EnumCalendarInfoExA
EnumCalendarInfoExW
EnumCalendarInfoW
EnumDateFormatsA
EnumDateFormatsExA
EnumDateFormatsExW
EnumDateFormatsW
EnumResourceLanguagesA
EnumResourceLanguagesW
EnumResourceNamesA
EnumResourceNamesW
EnumResourceTypesA
EnumResourceTypesW
EnumSystemCodePagesA
EnumSystemCodePagesW
EnumSystemLocalesA
EnumSystemLocalesW
EnumTimeFormatsA
EnumTimeFormatsW
EraseTape
EscapeCommFunction
ExitProcess
ExitThread
ExpandEnvironmentStringsA
ExpandEnvironmentStringsW
FT_Exit0
FT_Exit12
FT_Exit16
FT_Exit20
FT_Exit24
FT_Exit28
FT_Exit32
FT_Exit36
FT_Exit4
FT_Exit40
FT_Exit44
FT_Exit48
FT_Exit52
FT_Exit56
FT_Exit8
FT_Prolog
FT_Thunk
FatalAppExitA
FatalAppExitW
FatalExit
FileTimeToDosDateTime
FileTimeToLocalFileTime
FileTimeToSystemTime
FillConsoleOutputAttribute
FillConsoleOutputCharacterA
FillConsoleOutputCharacterW
FindAtomA
FindAtomW
FindClose
FindCloseChangeNotification
FindFirstChangeNotificationA
FindFirstChangeNotificationW
FindFirstFileA
FindFirstFileExA
FindFirstFileExW
FindFirstFileW
FindNextChangeNotification
FindNextFileA
FindNextFileW
FindResourceA
FindResourceExA
FindResourceExW
FindResourceW
FlushConsoleInputBuffer
FlushFileBuffers
FlushInstructionCache
FlushViewOfFile
FoldStringA
FoldStringW
FormatMessageA
FormatMessageW
FreeConsole
FreeEnvironmentStringsA
FreeEnvironmentStringsW
FreeLSCallback
FreeLibrary
FreeLibraryAndExitThread
FreeResource
FreeSLCallback
GenerateConsoleCtrlEvent
GetACP
GetAtomNameA
GetAtomNameW
GetBinaryType
GetBinaryTypeA
GetBinaryTypeW
GetCPInfo
GetCPInfoExA
GetCPInfoExW
GetCalendarInfoA
GetCalendarInfoW
GetCommConfig
GetCommMask
GetCommModemStatus
GetCommProperties
GetCommState
GetCommTimeouts
GetCommandLineA
GetCommandLineW
GetCompressedFileSizeA
GetCompressedFileSizeW
GetComputerNameA
GetComputerNameW
GetConsoleCP
GetConsoleCursorInfo
GetConsoleMode
GetConsoleOutputCP
GetConsoleScreenBufferInfo
GetConsoleTitleA
GetConsoleTitleW
GetCurrencyFormatA
GetCurrencyFormatW
GetCurrentDirectoryA
GetCurrentDirectoryW
GetCurrentProcess
GetCurrentProcessId
GetCurrentThread
GetCurrentThreadId
GetDateFormatA
GetDateFormatW
GetDaylightFlag
GetDefaultCommConfigA
GetDefaultCommConfigW
GetDevicePowerState
GetDiskFreeSpaceA
GetDiskFreeSpaceExA
GetDiskFreeSpaceExW
GetDiskFreeSpaceW
GetDriveTypeA
GetDriveTypeW
GetEnvironmentStrings
GetEnvironmentStringsA
GetEnvironmentStringsW
GetEnvironmentVariableA
GetEnvironmentVariableW
GetErrorMode
GetExitCodeProcess
GetExitCodeThread
GetFileAttributesA
GetFileAttributesExA
GetFileAttributesExW
GetFileAttributesW
GetFileInformationByHandle
GetFileSize
GetFileTime
GetFileType
GetFullPathNameA
GetFullPathNameW
GetHandleContext
GetHandleInformation
GetLSCallbackTarget
GetLSCallbackTemplate
GetLargestConsoleWindowSize
GetLastError
GetLocalTime
GetLocaleInfoA
GetLocaleInfoW
GetLogicalDriveStringsA
GetLogicalDriveStringsW
GetLogicalDrives
GetLongPathNameA
GetLongPathNameW
GetMailslotInfo
GetModuleFileNameA
GetModuleFileNameW
GetModuleHandleA
GetModuleHandleW
GetNamedPipeHandleStateA
GetNamedPipeHandleStateW
GetNamedPipeInfo
GetNumberFormatA
GetNumberFormatW
GetNumberOfConsoleInputEvents
GetNumberOfConsoleMouseButtons
GetOEMCP
GetOverlappedResult
GetPriorityClass
GetPrivateProfileIntA
GetPrivateProfileIntW
GetPrivateProfileSectionA
GetPrivateProfileSectionNamesA
GetPrivateProfileSectionNamesW
GetPrivateProfileSectionW
GetPrivateProfileStringA
GetPrivateProfileStringW
GetPrivateProfileStructA
GetPrivateProfileStructW
GetProcAddress
GetProcessAffinityMask
GetProcessFlags
GetProcessHeap
GetProcessHeaps
GetProcessPriorityBoost
GetProcessShutdownParameters
GetProcessTimes
GetProcessVersion
GetProcessWorkingSetSize
GetProductName
GetProfileIntA
GetProfileIntW
GetProfileSectionA
GetProfileSectionW
GetProfileStringA
GetProfileStringW
GetQueuedCompletionStatus
GetSLCallbackTarget
GetSLCallbackTemplate
GetShortPathNameA
GetShortPathNameW
GetStartupInfoA
GetStartupInfoW
GetStdHandle
GetStringTypeA
GetStringTypeExA
GetStringTypeExW
GetStringTypeW
GetSystemDefaultLCID
GetSystemDefaultLangID
GetSystemDirectoryA
GetSystemDirectoryW
GetSystemInfo
GetSystemPowerStatus
GetSystemTime
GetSystemTimeAdjustment
GetSystemTimeAsFileTime
GetTapeParameters
GetTapePosition
GetTapeStatus
GetTempFileNameA
GetTempFileNameW
GetTempPathA
GetTempPathW
GetThreadContext
GetThreadLocale
GetThreadPriority
GetThreadPriorityBoost
GetThreadSelectorEntry
GetThreadTimes
GetTickCount
GetTimeFormatA
GetTimeFormatW
GetTimeZoneInformation
GetUserDefaultLCID
GetUserDefaultLangID
GetVersion
GetVersionExA
GetVersionExW
GetVolumeInformationA
GetVolumeInformationW
GetWindowsDirectoryA
GetWindowsDirectoryW
GetWriteWatch
GlobalAddAtomA
GlobalAddAtomW
GlobalAlloc
GlobalCompact
GlobalDeleteAtom
GlobalFindAtomA
GlobalFindAtomW
GlobalFix
GlobalFlags
GlobalFree
GlobalGetAtomNameA
GlobalGetAtomNameW
GlobalHandle
GlobalLock
GlobalMemoryStatus
GlobalReAlloc
GlobalSize
GlobalUnWire
GlobalUnfix
GlobalUnlock
GlobalWire
Heap32First
Heap32ListFirst
Heap32ListNext
Heap32Next
HeapAlloc
HeapCompact
HeapCreate
HeapDestroy
HeapFree
HeapLock
HeapReAlloc
HeapSetFlags
HeapSize
HeapUnlock
HeapValidate
HeapWalk
InitAtomTable
InitializeCriticalSection
InitializeCriticalSectionAndSpinCount
InterlockedCompareExchange
InterlockedDecrement
InterlockedExchange
InterlockedExchangeAdd
InterlockedIncrement
InvalidateNLSCache
IsBadCodePtr
IsBadHugeReadPtr
IsBadHugeWritePtr
IsBadReadPtr
IsBadStringPtrA
IsBadStringPtrW
IsBadWritePtr
IsDBCSLeadByte
IsDBCSLeadByteEx
IsDebuggerPresent
IsLSCallback
IsProcessorFeaturePresent
IsSLCallback
IsSystemResumeAutomatic
IsValidCodePage
IsValidLocale
K32Thk1632Epilog
K32Thk1632Prolog
K32_NtCreateFile
K32_RtlNtStatusToDosError
LCMapStringA
LCMapStringW
LeaveCriticalSection
LoadLibraryA
LoadLibraryExA
LoadLibraryExW
LoadLibraryW
LoadModule
LoadResource
LocalAlloc
LocalCompact
LocalFileTimeToFileTime
LocalFlags
LocalFree
LocalHandle
LocalLock
LocalReAlloc
LocalShrink
LocalSize
LocalUnlock
LockFile
LockFileEx
LockResource
MakeCriticalSectionGlobal
MapHInstLS
MapHInstLS_PN
MapHInstSL
MapHInstSL_PN
MapHModuleLS
MapHModuleSL
MapLS
MapSL
MapSLFix
MapViewOfFile
MapViewOfFileEx
Module32First
Module32Next
MoveFileA
MoveFileExA
MoveFileExW
MoveFileW
MulDiv
MultiByteToWideChar
NotifyNLSUserCache
OpenEventA
OpenEventW
OpenFile
OpenFileMappingA
OpenFileMappingW
OpenMutexA
OpenMutexW
OpenProcess
OpenProfileUserMapping
OpenSemaphoreA
OpenSemaphoreW
OpenVxDHandle
OpenWaitableTimerA
OpenWaitableTimerW
OutputDebugStringA
OutputDebugStringW
PeekConsoleInputA
PeekConsoleInputW
PeekNamedPipe
PostQueuedCompletionStatus
PrepareTape
Process32First
Process32Next
PulseEvent
PurgeComm
QT_Thunk
QueryDosDeviceA

Sections

_FREQASM
Size: 32KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.text
Size: 312KB - Virtual size: 308KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

_INIT
Size: 12KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 16KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 88KB - Virtual size: 85KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
excel/jh.xls
.xls windows office2003
excel/js.xls
.xls windows office2003
excel/kb_data.xls
.xls windows office2003
excel/下载说明.htm
.html .js polyglot
info1.ico
libjcc.dll
.dll windows:4 windows x86 arch:x86

5c8ced2ee02b8ac71ee4a62110c1734c

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

wsock32

WSAGetLastError
closesocket
connect
WSAStartup
setsockopt
recv
__WSAFDIsSet
select
socket
send
htons
gethostbyname
ioctlsocket

kernel32

SetEvent
DisableThreadLibraryCalls
SetThreadPriority
CloseHandle
CreateEventA
TlsAlloc
GetCurrentThreadId
TlsSetValue
Sleep
GetProcAddress
TlsGetValue
GetTickCount
ResetEvent
GetLastError
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
InitializeCriticalSection
LoadLibraryA
SetErrorMode

user32

MsgWaitForMultipleObjects
PeekMessageA
TranslateMessage
DispatchMessageA

msvcrt

strcmp
vsprintf
_ftol
_adjust_fdiv
_initterm
fread
fclose
memmove
printf
realloc
free
_endthreadex
_beginthreadex
difftime
strncpy
tolower
getenv
fopen
perror
memcmp
sprintf
strlen
vfprintf
strstr
strncmp
time
memcpy
memset
sscanf
strchr
strrchr
_strnicmp
strcpy
toupper
__p___mb_cur_max
strcat
atoi
_errno
__p__pctype
_isctype
abort
fprintf
__p__iob
fputs
malloc
fflush
fputc

Exports

Exports

JagAny_endValue
JagAny_getValue
JagAny_putValue
JagAny_tc
JagBCD_BinaryToString
JagBCD_StringToBinary
JagClient_FuncLookup
JagClient_LoadLibrary
JagCodesetConvert
JagCosTS_getReceiver
JagCosTS_getSender
JagCosTS_pack_PropCtx
JagCosTS_setCosTSInternalRef
JagCosTS_setReceiver
JagCosTS_setSender
JagCosTS_unpack_PropCtx
JagGetQOP
JagHash
JagHashTable_fast_get
JagHashTable_fast_put
JagHashTable_fast_remove
JagHashTable_get
JagHashTable_getByValue
JagHashTable_getKeyValPairs
JagHashTable_put
JagHashTable_remove
JagHashTable_size
JagIIOPStream_asParent
JagIIOPStream_decodeIOR
JagIIOPStream_encodeIOR
JagIIOPStream_endMessage
JagIIOPStream_getBuffer
JagIIOPStream_getEndian
JagIIOPStream_getIIOPVersion
JagIIOPStream_getJavaBuffer
JagIIOPStream_getJavaInput
JagIIOPStream_getLocateReply
JagIIOPStream_getLocateRequest
JagIIOPStream_getMessage
JagIIOPStream_getRequest
JagIIOPStream_getServiceContextList
JagIIOPStream_getTxnContext
JagIIOPStream_initCodeSet
JagIIOPStream_initLogFile
JagIIOPStream_initMaxSize
JagIIOPStream_insertServiceContext
JagIIOPStream_isTransactional
JagIIOPStream_newBuffer
JagIIOPStream_putJavaOutput
JagIIOPStream_putLocateReply
JagIIOPStream_putLocateRequest
JagIIOPStream_putMessageError
JagIIOPStream_putReplySystemException
JagIIOPStream_putRequest
JagIIOPStream_putServiceContextList
JagIIOPStream_setBuffer
JagIIOPStream_setEndian
JagIIOPStream_setIIOPVersion
JagIIOPStream_setTransactional
JagMemory__alloc
JagMemory__free
JagMemory_checkOff
JagMemory_checkOn
JagMemory_dump
JagMemory_log
JagMemory_setParent
JagMemory_size
JagMemory_traceOff
JagMemory_traceOn
JagORB_async
JagORB_getTransactionCurrent
JagORB_getTxnControlRef
JagORB_init
JagORB_initErrFunc
JagORB_initLogFile
JagORB_isClient
JagORB_isPseudo
JagORB_isPseudoJava
JagORB_lock
JagORB_log
JagORB_logServer
JagORB_object_to_string
JagORB_setTxnControlRef
JagORB_setenv
JagORB_string_to_object
JagORB_unlock
JagObjectRef_dup
JagObjectRef_isa
JagObjectRef_narrow
JagObjectRef_str
JagPseudoJava_getJNIEnv
JagPseudoJava_setJNIEnv
JagPseudoJava_setReplyFunction
JagPseudo_setReplyFunction
JagQOPComparedToCipher
JagQOPCompatible
JagQOPToString
JagStream_getAny
JagStream_getReplyAsync
JagStream_getTypeCode
JagStream_getUnionDisc
JagStream_invoke
JagStream_local
JagStream_putAny
JagStream_putTypeCode
JagStream_putUnionDisc
JagStream_setInvoke
JagString_alloc
JagString_dup
JagTypeCode_bounds
JagTypeCode_eq
JagTypeCode_id
JagTypeCode_kind
JagTypeCode_labels
JagTypeCode_length
JagTypeCode_max
JagTypeCode_member
JagTypeCode_name
JagTypeCode_switch
JagTypeCode_type
Java_com_sybase_CORBA_PseudoCppProfile_deleteObjectRef
Java_com_sybase_CORBA_PseudoCppProfile_dupObjectRef
Java_com_sybase_CORBA_PseudoCppProfile_invoke
Java_com_sybase_CORBA_PseudoCppProfile_newObjectRef
__sybase_DLL_info@0
default_JagORB
delete_JagHashTable
delete_JagObjectRef
jag_client_dbg_stop
lookupCharset
lookupCharsetID
new_JagAny
new_JagHTTPSocket
new_JagHashTable
new_JagHashTableEx
new_JagIIOPSocket
new_JagIIOPStream
new_JagORB
new_JagObjectRef
new_JagStream
new_JagTypeCode

Sections

.text
Size: 128KB - Virtual size: 128KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 85KB - Virtual size: 86KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
pbdwe80.dll
.dll windows:4 windows x86 arch:x86

284b2db66b3376c67d70487fc02bd715

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

pbvm80

ord5596
ord5599
ord5612
ord5610
ord5575
ord5611
ord5621
ord5004
ord5059
ord5032
ord5043
ord5187
ord5183
ord5804
ord5550
ord5538
ord5549
ord5547
ord2012
ord2578
ord5129
ord5126
ord5554
ord5551
ord5553
ord2004
ord2320
ord2011
ord2501
ord2167
ord2202
ord2420
ord3604
ord2117
ord3600
ord2333
ord2150
ord2288
ord2129
ord2048
ord3603
ord2599
ord2597
ord2595
ord2423
ord2098
ord2099
ord2422
ord2119
ord2584
ord2120
ord2082
ord2562
ord2574
ord2563
ord2573
ord2087
ord2603
ord2255
ord2244
ord2151
ord2152
ord2149
ord2132
ord2852
ord2287
ord2121
ord2576
ord3210
ord3598
ord3602
ord3531
ord3589
ord3590
ord3597
ord5721
ord5632
ord10033
ord10043
ord10053
ord10023
ord10055
ord10054
ord10056
ord10057
ord5252
ord5153
ord5577
ord5194
ord5156
ord5175
ord5716
ord5392
ord5441
ord5421
ord5526
ord5772
ord5350
ord5442
ord5564
ord5065
ord5005
ord9115
ord5615
ord5606
ord5778
ord5653
ord5626
ord5877
ord5172
ord5070
ord5071
ord5862
ord5014
ord250
ord5869
ord5868
ord5876
ord5867
ord5010
ord5012
ord5008
ord5325
ord5170
ord5609
ord5614
ord5026
ord5122
ord5366
ord5437
ord5513
ord5396
ord5460
ord5031
ord419
ord2500
ord2061
ord2165
ord2049
ord2143
ord2136
ord2046
ord2468
ord2405
ord2407
ord2490
ord2279
ord2341
ord2140
ord2756
ord2252
ord2045
ord2251
ord2414
ord2183
ord2060
ord2159
ord5155
ord2318
ord453
ord2299
ord2298
ord2301
ord2302
ord2300
ord2296
ord2307
ord2567
ord2229
ord2906
ord5265
ord5673
ord5669
ord5665
ord5571
ord5574
ord5300
ord5015
ord5286
ord5018
ord5021
ord5287
ord5020
ord5288
ord5017
ord5016
ord5786
ord5789
ord5787
ord2415
ord2411
ord2487
ord5788
ord2412
ord5752
ord5114
ord5154
ord5157
ord5198
ord5562
ord5260
ord5258
ord5257
ord5259
ord5875
ord5002
ord5251
ord5821
ord5843
ord5820
ord5116
ord5845
ord5837
ord5814
ord5144
ord5806
ord5115
ord5819
ord5844
ord5860
ord5836
ord5835
ord5840
ord5425
ord5371
ord5458
ord5423
ord5283
ord5285
ord5668
ord5284
ord5667
ord5069
ord5045
ord5038
ord5176
ord5557
ord5262
ord5261
ord5604
ord5605
ord5607
ord5622
ord5140
ord5528
ord5274
ord10003
ord11020
ord5009
ord5360
ord5372
ord5373
ord5753
ord5445
ord5047
ord5048
ord5435
ord5013
ord3502
ord3503
ord5717
ord5102
ord5105
ord5104
ord5103
ord5134
ord5137
ord5136
ord5135
ord5098
ord5101
ord5100
ord5099
ord5106
ord5109
ord5108
ord5107
ord5094
ord5097
ord5096
ord5095
ord5090
ord5093
ord5092
ord5091
ord5082
ord5085
ord5084
ord5083
ord5086
ord5089
ord5088
ord5087
ord5110
ord5113
ord5112
ord5111
ord5808
ord5811
ord5810
ord5809
ord5078
ord5081
ord5080
ord5079
ord5777
ord5307
ord5795
ord5305
ord5150
ord5616
ord2295
ord2363
ord5760
ord2361
ord2362
ord2153
ord5770
ord5174
ord2050
ord5133
ord5120
ord5074
ord5863
ord5072
ord5118
ord5119
ord5173
ord5171
ord5165
ord5188
ord5181
ord5182
ord5003
ord5186
ord5184
ord5369
ord5349
ord5378
ord5341
ord5377
ord5355
ord5344
ord5347
ord5353
ord5555
ord5552
ord5142
ord5067
ord5306
ord5068
ord5298
ord5576
ord5019
ord5062
ord5063
ord5123
ord5436
ord5351
ord5383
ord5346
ord5370
ord5374
ord5037
ord5540
ord5169
ord5195
ord5164
ord5130
ord5131
ord5056
ord5030
ord5040
ord5039
ord5054
ord5158
ord2373
ord5053
ord5152
ord5783
ord5790
ord5791
ord5024
ord3929
ord3520
ord3527
ord3536
ord3574
ord3573
ord3575
ord5402
ord5066
ord5782
ord5529
ord5361
ord5057
ord5417
ord5401
ord3586
ord3537
ord3521
ord3596
ord3528
ord3585
ord3583
ord3584
ord5162
ord3532
ord3588
ord5076
ord5075
ord5077
ord2226
ord5064
ord5124
ord5866
ord5073
ord5159
ord5141
ord5143
ord5343
ord5352
ord5151
ord5042
ord5125
ord5299

msvcrt

_stricmp
_strnicmp
_memicmp
_strlwr
isspace
_onexit
__dllonexit
_adjust_fdiv
_initterm
abort
srand
_except_handler3
?_query_new_mode@@YAHXZ
?_query_new_handler@@YAP6AHI@ZXZ
islower
isupper
modf
_fcvt
_errno
tolower
wcslen
toupper
strtol
_setjmp3
wcscmp
wcstombs
strtoul
_itoa
strncat
sprintf
_mbsstr
strstr
_CIpow
_CIfmod
_CIasin
_CIacos
ceil
floor
rand
frexp
ldexp
_mbslwr
longjmp
_ismbcdigit
isdigit
_mbsbtype
atol
_mbscat
strncmp
_ftol
_mbscmp
_mbsicmp
_purecall
_mbschr
strchr
_ismbbtrail
_ismbcalnum
isalnum
_ismbcalpha
isalpha
atoi
strncpy
_mbsrchr
strrchr
mbstowcs
memmove
_mbscpy
atof
_ismbcspace

kernel32

GetTickCount
LeaveCriticalSection
GetCPInfo
EnterCriticalSection
IsDBCSLeadByte
GetProfileStringA
InterlockedDecrement
lstrcmpiA
InterlockedIncrement
GlobalFree
GlobalAlloc
GlobalUnlock
GlobalLock
Sleep
SetEvent
CreateEventA
DeleteCriticalSection
InitializeCriticalSection
CreateMutexA
GetCurrentProcessId
WaitForSingleObject
VirtualQueryEx
GetCurrentProcess
OpenProcess
CreateFileMappingA
ReleaseMutex
OpenFileMappingA
MapViewOfFile
UnmapViewOfFile
MapViewOfFileEx
OpenMutexA
IsBadCodePtr
GetSystemInfo
VirtualFree
VirtualAlloc
VirtualLock
VirtualQuery
HeapFree
HeapReAlloc
GetProcessHeap
HeapAlloc
WritePrivateProfileStringA
CreateFileA
GetPrivateProfileIntA
FreeResource
lstrcpyA
MultiByteToWideChar
WideCharToMultiByte
GetModuleFileNameA
GetVersion
DebugBreak
GetCurrentThreadId
GlobalSize
WriteFile
ReadFile
SetFilePointer
SetEndOfFile
CloseHandle
GetProfileIntA
lstrcmpA
GlobalReAlloc
AddAtomA
GetTempPathA
GetTempFileNameA
GetLastError
GetProcAddress
FindResourceA
LoadResource
LockResource
LoadLibraryA
MulDiv
FreeLibrary
GetPrivateProfileStringA

user32

SetCapture
SetRect
RegisterClipboardFormatA
DrawMenuBar
CheckRadioButton
CharNextA
GetDlgItemInt
GetScrollInfo
GetScrollPos
SetScrollInfo
GetScrollRange
ScrollDC
ShowScrollBar
GetClipboardData
IsClipboardFormatAvailable
PostThreadMessageA
DispatchMessageA
TranslateMessage
PeekMessageA
FillRect
DrawFocusRect
WinHelpA
GetDoubleClickTime
GetClassInfoA
IsRectEmpty
IsDialogMessageA
CreateDialogParamA
IsWindowEnabled
EnableMenuItem
GetSystemMenu
EnumChildWindows
SubtractRect
OffsetRect
InvertRect
LoadIconA
SetParent
FrameRect
RegisterClassA
UnregisterClassA
ScrollWindow
IntersectRect
CreateWindowExA
OpenClipboard
EmptyClipboard
SetClipboardData
CloseClipboard
GetFocus
DefWindowProcA
GetUpdateRgn
ValidateRgn
GetUpdateRect
BeginPaint
DrawIcon
EndPaint
UnionRect
GetWindow
DestroyIcon
KillTimer
GetMessageTime
SetTimer
CharUpperBuffA
CharLowerBuffA
GetWindowTextA
GetClassLongA
CharLowerA
CharUpperA
SetWindowTextA
IsDlgButtonChecked
ReleaseCapture
MapWindowPoints
CheckDlgButton
GetCursorPos
ScreenToClient
GetClientRect
SendDlgItemMessageA
MessageBeep
EnableWindow
DestroyCursor
DestroyWindow
InflateRect
GetClassNameA
GetWindowRect
SetWindowPos
ClientToScreen
MoveWindow
GetSystemMetrics
DrawTextA
PtInRect
PostMessageA
CopyRect
IsWindow
GetParent
GetKeyState
IsWindowVisible
CallWindowProcA
SetScrollRange
SetDlgItemInt
SetDlgItemTextA
LoadStringA
ShowWindow
GetWindowLongA
UpdateWindow
GetDC
ReleaseDC
SetWindowLongA
MessageBoxA
GetPropA
GetDlgItem
SetCursor
LoadBitmapA
LoadCursorA
GetDlgItemTextA
EndDialog
RemovePropA
InvalidateRect
SendMessageA
wsprintfA
DialogBoxParamA
ShowCursor
SetFocus
GetSysColor
SetPropA
GetWindowTextLengthA
SetScrollPos

gdi32

CreateSolidBrush
DeleteObject
SetBkColor
DeleteDC
BitBlt
GetObjectA
SelectObject
CreateCompatibleDC
RectInRegion
Rectangle
CreatePen
SetBkMode
LineTo
MoveToEx
GetStockObject
PatBlt
GetTextMetricsA
GetDeviceCaps
SetTextColor
SelectClipRgn
GetRgnBox
CombineRgn
CreateCompatibleBitmap
GdiSetBatchLimit
CreateRectRgn
RealizePalette
SelectPalette
DeleteMetaFile
GetMetaFileBitsEx
GetTextExtentPointA
SetROP2
GetTextFaceA
Ellipse
RoundRect
CloseMetaFile
CreateRectRgnIndirect
SetWindowExtEx
DPtoLP
SetMapMode
CreateMetaFileA
GetBkColor
StretchBlt
CreatePatternBrush
Escape
Polygon
EndDoc
AbortDoc
EndPage
StartPage
RestoreDC
StartDocA
SetAbortProc
SaveDC
CreateDCA
PaintRgn
CreateHatchBrush
SetTextCharacterExtra
CreateBrushIndirect
GetTextColor
TextOutA
CreateFontIndirectA
SetTextAlign
SetViewportOrgEx
PtInRegion
CreatePolygonRgn
InvertRgn
LPtoDP
GetCharWidthA
Polyline

comdlg32

GetSaveFileNameA
CommDlgExtendedError

winspool.drv

OpenPrinterA
DocumentPropertiesA
ClosePrinter

ole32

ProgIDFromCLSID
OleIsRunning
OleRun
CoGetMalloc
StgIsStorageFile
StgOpenStorage
StgCreateDocfile

oleaut32

VariantClear
SysAllocString
SysFreeString
VariantInit

msvcirt

?close@ofstream@@QAEXXZ
??1ios@@UAE@XZ
??0ofstream@@QAE@XZ
??6ostream@@QAEAAV0@PBD@Z
?openprot@filebuf@@2HB
?open@ofstream@@QAEXPBDHH@Z
??1ofstream@@UAE@XZ

Exports

Exports

BGR_Clipboard
BGR_CopyGraph
BGR_CopyGraphAcrossStorage
BGR_CreateGraph
BGR_CreateSampleData
BGR_CreateSeries
BGR_CreateTestData
BGR_DeleteCategory
BGR_DeleteCategoryObData
BGR_DeleteItem
BGR_DestroyExpressionAnchor
BGR_DestroyGraph
BGR_DestroySeries
BGR_DumpStorage
BGR_EnableChildWindowProc
BGR_FindCategory
BGR_FindCategoryObData
BGR_ForceNoCoprocessor
BGR_FreePropertyPages
BGR_Get3D
BGR_Get3DObjects
BGR_GetAxisAutoScale
BGR_GetAxisDropLines
BGR_GetAxisFrame
BGR_GetAxisLabel
BGR_GetAxisLabelEveryN
BGR_GetAxisMajorDivs
BGR_GetAxisMajorGridLine
BGR_GetAxisMajorTic
BGR_GetAxisMaxVal
BGR_GetAxisMaxValDateTime
BGR_GetAxisMaxValString
BGR_GetAxisMinVal
BGR_GetAxisMinValDateTime
BGR_GetAxisMinValString
BGR_GetAxisMinorDivs
BGR_GetAxisMinorGridLine
BGR_GetAxisMinorTic
BGR_GetAxisOriginLine
BGR_GetAxisPrimaryLine
BGR_GetAxisRoundTo
BGR_GetAxisRoundToUnit
BGR_GetAxisScaleType
BGR_GetAxisSecondaryLine
BGR_GetAxisShadeBackEdge
BGR_GetAxisValueType
BGR_GetAxisValues
BGR_GetBkColor
BGR_GetBorder
BGR_GetCategoryCount
BGR_GetCategoryDataType
BGR_GetCategoryLabel
BGR_GetCategorySort
BGR_GetClickedObject
BGR_GetClickedObjectTypeName
BGR_GetColor
BGR_GetDepth
BGR_GetDisplayAttributes
BGR_GetElevation
BGR_GetExpressionAnchor
BGR_GetExpressionComputeColumnNumber
BGR_GetFill
BGR_GetFontHeight
BGR_GetGap
BGR_GetGraphType
BGR_GetItemBitmapEnum
BGR_GetItemBkColor
BGR_GetItemColor
BGR_GetItemCount
BGR_GetItemDateTime
BGR_GetItemFill
BGR_GetItemLineColor
BGR_GetItemLineType
BGR_GetItemLineTypeEx
BGR_GetItemNumber
BGR_GetItemPieExplodePercent
BGR_GetItemShadeColor
BGR_GetItemString
BGR_GetLastGraph
BGR_GetLegend
BGR_GetOverlap
BGR_GetPainterObject
BGR_GetPerspective
BGR_GetPropertyPages
BGR_GetRotation
BGR_GetSeriesBitmapEnum
BGR_GetSeriesBkColor
BGR_GetSeriesByName
BGR_GetSeriesBySequence
BGR_GetSeriesColor
BGR_GetSeriesCount
BGR_GetSeriesDataType
BGR_GetSeriesFill
BGR_GetSeriesLineColor
BGR_GetSeriesLineType
BGR_GetSeriesLineTypeEx
BGR_GetSeriesName
BGR_GetSeriesOverlay
BGR_GetSeriesShadeColor
BGR_GetSeriesSort
BGR_GetShadeColor
BGR_GetStacked
BGR_GetTitle
BGR_GetValueDataType
BGR_GetXisString
BGR_Graph3DDlg
BGR_GraphAXDlg
BGR_GraphDefDlg
BGR_GraphGalleryDlg
BGR_GraphTextDlg
BGR_Import
BGR_Init
BGR_InsertCategory
BGR_InsertCategoryObData
BGR_InsertItem
BGR_InsertItemDouble
BGR_InsertItemObData
BGR_InvertPainterObject
BGR_ItemIsNull
BGR_ReCreateGraph
BGR_ReleaseExpressionAnchor
BGR_Reset
BGR_ResetItemColors
BGR_SaveAs
BGR_Set3D
BGR_Set3DObjects
BGR_SetAllBkColors
BGR_SetAllColors
BGR_SetAllowDataTypeChange
BGR_SetAxisAutoScale
BGR_SetAxisDropLines
BGR_SetAxisFrame
BGR_SetAxisLabel
BGR_SetAxisLabelEveryN
BGR_SetAxisMajorDivs
BGR_SetAxisMajorGridLine
BGR_SetAxisMajorTic
BGR_SetAxisMaxVal
BGR_SetAxisMaxValDateTime
BGR_SetAxisMinMaxVal
BGR_SetAxisMinMaxValDateTime
BGR_SetAxisMinMaxValString
BGR_SetAxisMinVal
BGR_SetAxisMinValDateTime
BGR_SetAxisMinorDivs
BGR_SetAxisMinorGridLine
BGR_SetAxisMinorTic
BGR_SetAxisOriginLine
BGR_SetAxisPrimaryLine
BGR_SetAxisRoundTo
BGR_SetAxisRoundToUnit
BGR_SetAxisScaleType
BGR_SetAxisSecondaryLine
BGR_SetAxisShadeBackEdge
BGR_SetAxisValueType
BGR_SetAxisValues
BGR_SetBkColor
BGR_SetBorder
BGR_SetCategoryDataType
BGR_SetCategoryLabel
BGR_SetCategorySort
BGR_SetColor
BGR_SetDepth
BGR_SetDisplayAttributes
BGR_SetElevation
BGR_SetExpressionAnchor
BGR_SetExpressionAnchorEx
BGR_SetFill
BGR_SetFontHeight
BGR_SetGap
BGR_SetGraphType
BGR_SetItem
BGR_SetItemBitmapEnum
BGR_SetItemBkColor
BGR_SetItemColor
BGR_SetItemDouble
BGR_SetItemFill
BGR_SetItemLineColor
BGR_SetItemLineType
BGR_SetItemLineTypeEx
BGR_SetItemNull
BGR_SetItemObData
BGR_SetItemPieExplodePercent
BGR_SetItemShadeColor
BGR_SetLegend
BGR_SetOverlap
BGR_SetPerspective
BGR_SetRotation
BGR_SetSeriesBitmapEnum
BGR_SetSeriesBkColor
BGR_SetSeriesColor
BGR_SetSeriesDataType
BGR_SetSeriesFill
BGR_SetSeriesLabel
BGR_SetSeriesLineColor
BGR_SetSeriesLineType
BGR_SetSeriesLineTypeEx
BGR_SetSeriesName
BGR_SetSeriesOverlay
BGR_SetSeriesShadeColor
BGR_SetSeriesSort
BGR_SetShadeColor
BGR_SetStacked
BGR_SetTitle
BGR_SetValueDataType
BGR_SetXisString
BGR_ShowGraph
BGR_ShowGraphDirect
BGR_TextSampleWindowProc
BGR_UpdateGraph
BGR_ValidItemDataType
DW_AcceptText
DW_CanUndo
DW_Clear
DW_ClearValues
DW_Copy
DW_CreateFrom_RS
DW_CrosstabDialog
DW_Cut
DW_DBCancel
DW_DBErrorCode
DW_DBErrorMessage
DW_DeleteRow
DW_DeletedCount
DW_Describe
DW_Filter
DW_FilteredCount
DW_Find
DW_FindGroupChange
DW_FindRequired
DW_GenerateHTMLForm
DW_GenerateResultSet
DW_GenerateResultSet_RS
DW_GetBandAtPointer
DW_GetBorderStyle
DW_GetChanges
DW_GetChild
DW_GetClickedColumn
DW_GetClickedRow
DW_GetColumn
DW_GetColumnName
DW_GetFormat
DW_GetFullState
DW_GetItemDate
DW_GetItemDateTime
DW_GetItemDecimal
DW_GetItemNumber
DW_GetItemStatus
DW_GetItemString
DW_GetItemTime
DW_GetMessageText
DW_GetNextModified
DW_GetObjectAtPointer
DW_GetRow
DW_GetRowFromId
DW_GetRowId
DW_GetSQLPreview
DW_GetSQLSelect
DW_GetSelectedRow
DW_GetStateStatus
DW_GetText
DW_GetTrans
DW_GetUpdateStatus
DW_GetValidate
DW_GetValue
DW_GroupCalc
DW_ImportClipboard
DW_ImportDlgProc
DW_ImportFile
DW_ImportString
DW_InsertRow
DW_IsSelected
DW_LineCount
DW_ModifiedCount
DW_Modify
DW_OleActivate
DW_PSXcritDlgProc
DW_Paste
DW_Position
DW_Print
DW_PrintCancel
DW_Print_Filename_Proc
DW_ReplaceText
DW_ReselectRow
DW_Reset
DW_ResetTransObject
DW_ResetUpdate
DW_Retrieve
DW_RowCount
DW_RowsCopy
DW_RowsDiscard
DW_RowsMove
DW_SaveAs
DW_SaveAsAscii
DW_Scroll
DW_ScrollNextPage
DW_ScrollNextRow
DW_ScrollPriorPage
DW_ScrollPriorRow
DW_ScrollToRow
DW_SelectRow
DW_SelectText
DW_SelectedLength
DW_SelectedLine
DW_SelectedStart
DW_SelectedText
DW_SetBorderStyle
DW_SetChanges
DW_SetColumn
DW_SetDetailHeight
DW_SetFilter
DW_SetFormat
DW_SetFullState
DW_SetHTMLAction
DW_SetItem
DW_SetItemStatus
DW_SetPosition
DW_SetRow
DW_SetSQLPreview
DW_SetSQLSelect
DW_SetSort
DW_SetTabOrder
DW_SetText
DW_SetTrans
DW_SetTransObject
DW_SetValidate
DW_SetValue
DW_ShareData
DW_ShareDataOff
DW_Sort
DW_SortDlgProc
DW_SubClassArgEditProc
DW_SyntaxFromSQL
DW_TextLine
DW_Undo
DW_Update
DW_ole_control_notify
GraphWindowProc
PBBGraphAXDlgProc
PBBGraphDefDlgProc
PBBGraphTextDlgProc
PBStgCreateDocfile
PBStgOpenStorage
WEP
dbf_import_begin
dbf_import_end
dbf_import_get_item
dbf_import_next_row
dwCanChangeQryMode
dwClearOriginalValues
dwClientToObject
dwCompile
dwControlFlags
dwControlInfo
dwControlStyle
dwControlStyleDlgProc
dwCreateObjectStorage
dwCreateWindow
dwCreateWindowEx
dwCrosstabBuildModel
dwCrosstabDLG
dwCrosstabDef
dwCrosstabDefDynamic
dwCrosstabDlgProc
dwCrosstabModifyDynamic
dwCrosstabModifyStatic
dwCrosstabSortCmp
dwDBCancel
dwDefaultArgs
dwDefaultArgsFree
dwDeleteCrosstabSourceList
dwDescribe
dwDestroyObjectStorage
dwDragObjectCreate
dwDragObjectDestroy
dwExprDialog
dwExprValidate
dwFilterDlgProc
dwFind
dwFindGroupChange
dwFindRequired
dwFitColumn
dwFree
dwFreeBlob
dwGenJSFile
dwGenTableName
dwGenerateHTMLForm
dwGetBandUnderMouse
dwGetColumnFormat
dwGetColumnFormatLength
dwGetColumnNumber
dwGetColumnType
dwGetColumnValidation
dwGetColumnValidationLength
dwGetColumnValue
dwGetColumnValueLength
dwGetCurrentRowCol
dwGetCurrentText
dwGetCurrentTextLength
dwGetDBError
dwGetDBErrorLength
dwGetDBdatabase
dwGetDBdatabaseLength
dwGetDBdatabasepass
dwGetDBdatabasepassLength
dwGetDBlogid
dwGetDBlogidLength
dwGetDBlogpass
dwGetDBlogpassLength
dwGetDBparm
dwGetDBparmLength
dwGetDBserver
dwGetDBserverLength
dwGetDBuserid
dwGetDBuseridLength
dwGetDBvendor
dwGetDBvendorLength
dwGetExceedPageMessage
dwGetItemDateTime
dwGetItemDecimal
dwGetItemDouble
dwGetItemLength
dwGetItemLengthLong
dwGetItemStatus
dwGetItemString
dwGetItemStringLong
dwGetItemType
dwGetMessageText
dwGetNextModifiedRow
dwGetNotifyArgs
dwGetObjectUnderMouse
dwGetProgram
dwGetProperty
dwGetPropertyItem
dwGetRowColUnderPoint
dwGraphSortCmp
dwGroupCalc
dwInfoBegin
dwInfoBitmap
dwInfoBlob
dwInfoButton
dwInfoColumn
dwInfoCompute
dwInfoCrosstab
dwInfoDataWindow
dwInfoEnd
dwInfoFunctions
dwInfoGetDWWidth
dwInfoGetFirstColumn
dwInfoGetFirstObject
dwInfoGetNextColumn
dwInfoGetNextObject
dwInfoGetObjectType
dwInfoGraph
dwInfoGroupBox
dwInfoLine
dwInfoOle
dwInfoOval
dwInfoParseStmt
dwInfoProcessType
dwInfoRect
dwInfoRegionFirst
dwInfoRegionNext
dwInfoReport
dwInfoResourceNames
dwInfoRoundRect
dwInfoSetPSRFileName
dwInfoSparse
dwInfoTable
dwInfoTableExtract
dwInfoText
dwInfoVerifyCompute
dwInfoVerifyFilter
dwInfoVerifyStmt
dwInvokeCriteriaUpdate
dwInvokeMethod
dwIsPointOutsideEditCol
dwLBSortCmp
dwLoadDW
dwLoadData
dwLoadDataOle
dwLoadDataStorage
dwLoadFile
dwLoadLibrary
dwLoadMemory
dwLoadStorage
dwMessageBoxDlgProc
dwMetaFile
dwModify
dwModifyExprDlgProc
dwOleActivateItem
dwOleDeactivate
dwOleGetControlInfo
dwOleIPResize
dwOleIPactivate
dwOleReset
dwOleSortCmp
dwPaintDC
dwPosition
dwPrtAbortDlg

Sections

.text
Size: 1.6MB - Virtual size: 1.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 40KB - Virtual size: 39KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 96KB - Virtual size: 110KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 189KB - Virtual size: 189KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 60KB - Virtual size: 60KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
pbodb80.dll
.dll regsvr32 windows:4 windows x86 arch:x86

cf9bc3eeb472072ee606d5d8ea4d058c

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

pbvm80

ord5056
ord5043
ord5521
ord5524
ord5053
ord5341
ord5039
ord5404
ord3938
ord3942
ord5062
ord5522
ord5040
ord5054
ord5164
ord5031
ord5030
ord3927
ord5377
ord5027
ord5028
ord5514
ord5143
ord5405
ord5408
ord5063
ord5057
ord5032
ord5126
ord5065
ord5052
ord5451
ord5523
ord5178
ord5068
ord5454
ord12014
ord5452
ord5461
ord5037
ord5528
ord3943
ord5340
ord5162
ord3923
ord12011
ord5453
ord5455
ord5153
ord5347
ord12010
ord2862
ord5344
ord5355
ord5376
ord5371
ord5439
ord5327
ord5042
ord5416
ord5156
ord5326
ord5159
ord5529
ord5456
ord5309
ord10003
ord5337
ord5717
ord5680
ord11040
ord5872
ord3925
ord3926
ord5407
ord5151
ord5459

msvcrt

_stat
_strnicmp
rand
_strlwr
_strupr
_strnset
_stricmp
rename
_onexit
__dllonexit
_adjust_fdiv
_initterm
abort
srand
sprintf
_mbsicmp
_mbscmp
strchr
_mbschr
_mbscpy
strncmp
_mbscat
strstr
_mbsstr
_mbsupr
strncpy
atol
_mbslwr
memmove
atoi
_mbsbtype
strpbrk
_mbspbrk
isdigit
_ismbcdigit
strrchr
_mbsrchr
_ismbbtrail
_purecall
strtok
_mbstok
tolower
isupper
toupper
islower
?_query_new_handler@@YAP6AHI@ZXZ
?_query_new_mode@@YAHXZ
_except_handler3

kernel32

LeaveCriticalSection
HeapAlloc
lstrcmpiA
IsDBCSLeadByte
GetVersionExA
GetPrivateProfileSectionA
ReleaseMutex
OpenFileMappingA
GetCurrentProcess
GetTickCount
GlobalAlloc
GlobalFree
GetModuleHandleW
GetProcAddress
FreeLibrary
LocalFree
LocalUnlock
LocalLock
LocalAlloc
LoadLibraryA
GetSystemDirectoryA
GetVersion
Sleep
SetEvent
CreateEventA
DeleteCriticalSection
InitializeCriticalSection
GetCurrentThreadId
GetLastError
CreateMutexA
GetCurrentProcessId
WaitForSingleObject
VirtualQueryEx
OpenProcess
CreateFileMappingA
GlobalUnlock
HeapReAlloc
MapViewOfFile
UnmapViewOfFile
CloseHandle
MapViewOfFileEx
OpenMutexA
IsBadCodePtr
GetSystemInfo
VirtualFree
VirtualAlloc
VirtualLock
VirtualQuery
HeapFree
InterlockedIncrement
GetProcessHeap
EnterCriticalSection
GetCPInfo
InterlockedDecrement
GetPrivateProfileStringA
GlobalLock
GetModuleFileNameA
WritePrivateProfileStringA
GetPrivateProfileIntA

user32

GetDlgItemTextA
MessageBeep
LoadMenuA
EnableMenuItem
LoadBitmapA
GetWindowLongA
SendDlgItemMessageA
GetWindowTextA
SetWindowTextA
GetWindowTextLengthA
SetDlgItemTextA
SetFocus
EnableWindow
InsertMenuA
GetPropA
EndDialog
RemovePropA
SetPropA
SetTimer
GetMessageA
TranslateMessage
DispatchMessageA
KillTimer
GetDlgItem
SendMessageA
CharUpperA
CharLowerA
wsprintfA
GetActiveWindow
GetDesktopWindow
MessageBoxA
LoadCursorA
SetCursor
LoadStringA

gdi32

DeleteObject

odbc32

ord59
ord69
ord19
ord21
ord6
ord60
ord46
ord53
ord8
ord65
ord20
ord12
ord40
ord54
ord3
ord51
ord47
ord11
ord13
ord44
ord4
ord50
ord16
ord42
ord14
ord41
ord9
ord45
ord1
ord7
ord5
ord18
ord23
ord43
ord49
ord61
ord22
ord72
ord48
ord66
ord57
ord62
ord17
ord67
ord10
ord56
ord70
ord58
ord2
ord15

Exports

Exports

DllRegisterServer
DllUnregisterServer
ODBC_ColumnBoxProc
ODBC_DataSourceProc
ODBC_GroupBoxProc
ODBC_ModifyUserBoxProc
ODBC_NewGroupBoxProc
ODBC_NewUserBoxProc
ODBC_SecurityBoxProc
ODBC_UserBoxProc
PB_DB_Rout
ProfileControlInfo
WEP

Sections

.text
Size: 341KB - Virtual size: 340KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 80KB - Virtual size: 80KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 19KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 17KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
pbvm80.dll
.dll windows:4 windows x86 arch:x86

6d28d2c6b84c8669beb89b4250b398ff

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

libjcc

JagORB_log
JagORB_async
default_JagORB
JagStream_getReplyAsync
JagBCD_StringToBinary
JagBCD_BinaryToString
JagORB_object_to_string
JagObjectRef_str
JagObjectRef_dup
JagObjectRef_isa
JagORB_init
JagString_dup
new_JagObjectRef
JagMemory_dump
JagMemory_traceOff
JagString_alloc
JagMemory_checkOff
JagMemory_checkOn
JagMemory_traceOn
JagMemory_setParent
JagMemory_log
JagMemory_size
delete_JagObjectRef
JagMemory__free
new_JagORB
new_JagStream
JagORB_string_to_object
JagMemory__alloc
JagObjectRef_narrow

msvcrt

_initterm
getc
?_query_new_mode@@YAHXZ
?_query_new_handler@@YAP6AHI@ZXZ
??1type_info@@UAE@XZ
_adjust_fdiv
__dllonexit
_splitpath
setlocale
longjmp
_setjmp3
getenv
_beginthreadex
_onexit
_endthreadex
__lconv_init
tmpfile
fread
_iob
putc
_ismbcupper
islower
_memicmp
_strlwr
_strupr
_strnicmp
_stricmp
strcspn
signal
strtok
_mbscpy
_mbsbtype
_errno
wcstombs
_mbscat
_mbscmp
_strdup
_mbstok
modf
ftell
fseek
fwrite
setvbuf
strlen
strcpy
__CxxFrameHandler
_CxxThrowException
rand
_CIfmod
ceil
_CIasin
_CIacos
memcpy
strcmp
memset
srand
strncat
memchr
_CIpow
strtod
remove
_isctype
__mb_cur_max
_pctype
_mbspbrk
strpbrk
abort
_ltoa
strtol
fscanf
fgets
_mbsspn
strspn
sscanf
strtoul
isxdigit
fopen
fclose
fputs
fprintf
fputc
_mbscspn
_mbsstr
_ftol
floor
_ismbclower
_mbslwr
strstr
isupper
toupper
time
_getsystime
localtime
_ismbbtrail
_ismbcalnum
isalnum
_ismbcalpha
isalpha
atof
_ismbcspace
_ismbcdigit
isdigit
atol
memmove
_ultoa
tolower
_itoa
mbstowcs
_mbsupr
ldiv
sprintf
qsort
wcslen
isspace
strncpy
_wcsicmp
strrchr
_mbsrchr
strncmp
atoi
_purecall
_mbsicmp
_mbschr
strchr
_except_handler3

kernel32

WaitForMultipleObjects
OpenSemaphoreA
OpenEventA
ResumeThread
EnterCriticalSection
IsBadCodePtr
InitializeCriticalSection
AddAtomA
GetCurrentProcessId
VirtualQueryEx
OpenProcess
CreateFileMappingA
OpenFileMappingA
MapViewOfFile
UnmapViewOfFile
MapViewOfFileEx
OpenMutexA
VirtualFree
VirtualAlloc
VirtualLock
VirtualQuery
HeapFree
HeapReAlloc
GetProcessHeap
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
GetModuleFileNameA
WideCharToMultiByte
MultiByteToWideChar
lstrcpyA
ReleaseMutex
CreateMutexA
CloseHandle
WaitForSingleObject
GetCurrentThreadId
GetProcAddress
GetModuleHandleA
LoadLibraryA
InterlockedIncrement
InterlockedDecrement
GetUserDefaultLCID
FreeLibrary
IsBadWritePtr
_lclose
_lwrite
_llseek
MulDiv
GlobalSize
GlobalLock
GlobalFree
GlobalUnlock
_hread
GlobalAlloc
GlobalReAlloc
LoadLibraryExA
lstrcatA
CreateFileA
GetTempFileNameA
GetTempPathA
lstrcpyW
lstrlenW
IsBadReadPtr
lstrcmpiA
FreeResource
LockResource
LoadResource
FindResourceA
SizeofResource
GetVersion
GetLocalTime
GetTickCount
GetProfileStringA
IsDBCSLeadByte
DeleteAtom
CreateNamedPipeA
SetHandleCount
GetPrivateProfileIntA
GetPrivateProfileStringA
WritePrivateProfileStringA
WriteProfileStringA
GetSystemDefaultLangID
GetProfileIntA
LocalFree
LocalUnlock
LocalLock
LocalAlloc
CreateDirectoryA
GetFileAttributesA
HeapAlloc
DeleteCriticalSection
ConnectNamedPipe
LeaveCriticalSection
GetVersionExA
lstrlenA
GlobalFlags
GlobalHandle
GetStdHandle
SetConsoleCtrlHandler
AllocConsole
Sleep
WriteFile
_lread
DebugBreak
FindClose
FindFirstFileA
GetLogicalDrives
FindNextFileA
GetCurrentDirectoryA
SetCurrentDirectoryA
DeleteFileA
GetLastError
GetFullPathNameA
SearchPathA
GetStringTypeExA
FatalAppExitA
lstrcmpA
CreateProcessA
GetFileSize
SetFilePointer
ReadFile
SetEndOfFile
GetCPInfo
RemoveDirectoryA
CopyFileA
MoveFileA
GetSystemInfo
GlobalDeleteAtom
GlobalAddAtomA
GlobalGetAtomNameA
GetCurrentThread
GetCurrentProcess
QueryPerformanceFrequency
QueryPerformanceCounter
GetProcessTimes
GetThreadTimes
SetEvent
ResetEvent
CreateEventA
FormatMessageA
ReleaseSemaphore
CreateSemaphoreA
GetComputerNameA
SleepEx
GetOverlappedResult
WaitNamedPipeA

user32

LoadCursorFromFileA
IsIconic
AppendMenuA
CreatePopupMenu
CreateMenu
EnableMenuItem
GetSystemMenu
GetMessagePos
SetMenuItemInfoA
GetMenuItemInfoA
CheckMenuItem
ModifyMenuA
IsZoomed
TranslateMDISysAccel
TranslateAcceleratorA
LoadImageA
DrawTextExA
InsertMenuItemA
TrackPopupMenu
CreateAcceleratorTableA
GetMenuStringA
CopyImage
PostThreadMessageA
DrawIconEx
CopyIcon
LoadMenuA
DeleteMenu
DefMDIChildProcA
DefFrameProcA
DestroyAcceleratorTable
GetClassLongA
IsClipboardFormatAvailable
CharLowerBuffA
UnpackDDElParam
PackDDElParam
DlgDirSelectExA
DlgDirSelectComboBoxExA
GetTabbedTextExtentA
SetCursorPos
GetWindowThreadProcessId
GetIconInfo
GetCursor
FreeDDElParam
WaitMessage
MsgWaitForMultipleObjects
ClientToScreen
ChildWindowFromPoint
CreateCursor
CreateIconIndirect
wvsprintfA
WindowFromPoint
EnumChildWindows
EqualRect
GetDCEx
DestroyCursor
GetClipboardData
OpenClipboard
EmptyClipboard
SetClipboardData
CloseClipboard
GetKeyboardState
SetKeyboardState
MapDialogRect
LoadIconA
GetMessageA
PostQuitMessage
IsChild
FindWindowA
DestroyMenu
GetSysColorBrush
GetMenuState
SetParent
SystemParametersInfoA
RedrawWindow
GetCapture
MapWindowPoints
SetClassLongA
TranslateMessage
CharUpperA
GetScrollPos
ReleaseCapture
SetCapture
GetKeyState
SetTimer
GetScrollInfo
GetScrollRange
ScrollWindow
KillTimer
IntersectRect
IsWindowEnabled
CharNextA
CreateWindowExA
CharLowerA
SetScrollInfo
SetScrollRange
SetScrollPos
IsWindowVisible
MoveWindow
DrawTextA
GetClassInfoA
MessageBeep
UnregisterClassA
BringWindowToTop
InflateRect
FrameRect
InvertRect
GetWindowTextLengthA
SetWindowTextA
SetWindowWord
GetWindowWord
GetWindowLongA
BeginPaint
EndPaint
FillRect
DefWindowProcA
RegisterClassA
CreateIcon
DrawIcon
DrawFocusRect
ShowCursor
InvalidateRect
RegisterWindowMessageA
GetSystemMetrics
DestroyIcon
CheckRadioButton
GetWindowTextA
OemToCharA
CharPrevA
GetDialogBaseUnits
IsDlgButtonChecked
CheckDlgButton
GetFocus
GetDlgItemTextA
SendDlgItemMessageA
SetDlgItemTextA
EnableWindow
PeekMessageA
GetKeyboardLayoutList
GetCursorPos
CreateDialogIndirectParamA
ActivateKeyboardLayout
DispatchMessageA
GetMenuItemCount
GetSubMenu
RemoveMenu
GetWindow
GetClassNameA
GetMenu
SetMenu
DrawMenuBar
InsertMenuA
SetRect
UpdateWindow
WinHelpA
DialogBoxParamA
GetSysColor
GetPropA
CallWindowProcA
SetPropA
IsRectEmpty
GetActiveWindow
GetWindowDC
SetRectEmpty
SetWindowLongA
RemovePropA
ScreenToClient
PtInRect
GetClientRect
IsWindow
PostMessageA
GetParent
RegisterClipboardFormatA
SendMessageA
LoadCursorA
SetCursor
ShowWindow
SetWindowPos
GetDesktopWindow
CreateDialogParamA
GetWindowRect
DestroyWindow
GetDlgItem
SetFocus
EndDialog
GetDC
ReleaseDC
CharUpperBuffA
wsprintfA
LoadBitmapA
LoadStringA
MessageBoxA
UnionRect
CopyRect
OffsetRect

gdi32

SetMapMode
Rectangle
CreateSolidBrush
CreateCompatibleBitmap
BitBlt
GetBkColor
GetTextMetricsA
GetTextExtentPoint32A
DeleteMetaFile
ExtTextOutA
EnumMetaFile
GetBitmapBits
SetDIBits
CreateBitmap
SetBrushOrgEx
UnrealizeObject
RestoreDC
PlayMetaFile
SetViewportExtEx
SetViewportOrgEx
SaveDC
SetStretchBltMode
CreateDIBitmap
GetStockObject
SetBkMode
PatBlt
CreatePatternBrush
CloseMetaFile
SetWindowExtEx
SetWindowOrgEx
CreateMetaFileA
GetTextExtentPointA
SelectClipRgn
GetObjectA
Polyline
CreateCompatibleDC
LPtoDP
SelectPalette
CreatePen
GetDIBits
DeleteObject
CombineRgn
CreateRectRgn
SetDIBitsToDevice
LineTo
MoveToEx
TextOutA
GetNearestColor
CreateFontIndirectA
CreateBrushIndirect
SetPixel
StartPage
StartDocA
SetAbortProc
EndDoc
EndPage
AbortDoc
Escape
GetTextFaceA
StretchDIBits
SetBitmapDimensionEx
CreateDCA
RoundRect
Ellipse
EnumFontsA
CreateFontA
GetMapMode
DPtoLP
CreateBitmapIndirect
CreatePalette
GetSystemPaletteEntries
PlayMetaFileRecord
GetClipRgn
SetMetaFileBitsEx
GetMetaFileA
CreateHatchBrush
SetTextJustification
SetTextAlign
GetTextAlign
FrameRgn
SelectObject
GetDeviceCaps
GetTextColor
SetTextColor
SetBkColor
StretchBlt
DeleteDC
SetROP2
RealizePalette
CreateRectRgnIndirect
FillRgn

comdlg32

CommDlgExtendedError
GetOpenFileNameA
ChooseColorA
ChooseFontA
PrintDlgA
GetSaveFileNameA

winspool.drv

OpenPrinterA
ClosePrinter
DocumentPropertiesA

ole32

StringFromCLSID
CLSIDFromProgID
StgOpenStorageOnILockBytes
OleGetAutoConvert
CoUninitialize
CoInitialize
CoCreateInstance
CoTaskMemFree
CLSIDFromString
CreateItemMoniker
CreateFileMoniker
StgOpenStorage
StgIsStorageFile
OleCreateFromData
OleRegEnumFormatEtc
StgIsStorageILockBytes
OleGetIconOfClass
CoGetClassObject
OleInitialize
CoIsOle1Class
CoGetMalloc
CoFreeUnusedLibraries
OleIsRunning
ReleaseStgMedium
OleRun
OleLockRunning
OleSetContainedObject
CreateBindCtx
OleConvertOLESTREAMToIStorage
StgCreateDocfile
OleDraw
OleSetMenuDescriptor
CreateGenericComposite
IsAccelerator
CreateILockBytesOnHGlobal
GetHGlobalFromILockBytes
StgCreateDocfileOnILockBytes
OleSave
WriteClassStg
CoCreateGuid
CoRevokeClassObject
CoRegisterClassObject
DoDragDrop
CoLockObjectExternal
RegisterDragDrop
RevokeDragDrop
GetRunningObjectTable
OleDuplicateData
OleMetafilePictFromIconAndLabel
OleGetIconOfFile
GetClassFile
OleQueryLinkFromData
OleGetClipboard
OleQueryCreateFromData
CoRegisterMessageFilter
OleFlushClipboard
CoBuildVersion
OleUninitialize
ProgIDFromCLSID
OleSetClipboard
MkParseDisplayName
OleCreateLinkToFile
OleCreate
OleCreateFromFile
OleCreateDefaultHandler
OleCreateLink
OleCreateLinkFromData
OleDoAutoConvert
OleLoad

olepro32

ord250

oleaut32

GetActiveObject
SafeArrayUnaccessData
VariantChangeType
SafeArrayGetElement
QueryPathOfRegTypeLi
SafeArrayGetDim
SysAllocStringLen
VarDateFromR8
SafeArrayAccessData
SafeArrayGetLBound
SafeArrayGetUBound
CreateTypeLi
SysStringLen
SafeArrayPutElement
SafeArrayCreate
VariantCopy
SysFreeString
SysStringByteLen
SysAllocStringByteLen
VariantInit
VariantClear
LoadTypeLi
LoadRegTypeLi
SysAllocString
CreateErrorInfo
SetErrorInfo
GetErrorInfo

advapi32

RegFlushKey
RegDeleteValueA
RegCloseKey
RegSetValueExA
RegCreateKeyExA
RegQueryValueA
RegEnumKeyExA
RegDeleteKeyA
RegEnumValueA
GetUserNameA
SetSecurityDescriptorDacl
InitializeSecurityDescriptor
RevertToSelf
ImpersonateNamedPipeClient
RegOpenKeyExA
RegisterEventSourceA
RegSetValueA
RegCreateKeyA
RegOpenKeyA
RegEnumKeyA
ReportEventA
RegQueryValueExA
DeregisterEventSource

shell32

ExtractIconA
ExtractIconExA
SHGetPathFromIDListA
SHBrowseForFolderA
SHGetMalloc

version

GetFileVersionInfoSizeA
GetFileVersionInfoA
VerQueryValueA

oledlg

ord4
ord9
ord5
ord1

imm32

ImmGetCompositionStringA
ImmSetConversionStatus
ImmGetConversionStatus
ImmSetOpenStatus
ImmGetOpenStatus
ImmGetContext
ImmReleaseContext
ImmSetCompositionFontA

wsock32

accept
listen
bind
select
shutdown
closesocket
setsockopt
gethostbyname
__WSAFDIsSet
ioctlsocket
htons
send
recv
htonl
ntohl
socket
WSAGetLastError
connect
WSACleanup
WSAStartup
getservbyname

msvcirt

??0ofstream@@QAE@PBDHH@Z
??6ostream@@QAEAAV0@G@Z
??6ostream@@QAEAAV0@K@Z
?openprot@filebuf@@2HB
??1ios@@UAE@XZ
??1ofstream@@UAE@XZ
??6ostream@@QAEAAV0@PBD@Z

Exports

Exports

?emit_message@@YGXPAUjpeg_common_struct@@H@Z
?error_exit@@YGXPAUjpeg_common_struct@@@Z
?fill_input_buffer@@YGHPAUjpeg_decompress_struct@@@Z
?format_message@@YGXPAUjpeg_common_struct@@PAD@Z
?init_source@@YGXPAUjpeg_decompress_struct@@@Z
?output_message@@YGXPAUjpeg_common_struct@@@Z
?reset_error_mgr@@YGXPAUjpeg_common_struct@@@Z
?resync_to_restart@@YGHPAUjpeg_decompress_struct@@H@Z
?skip_input_data@@YGXPAUjpeg_decompress_struct@@J@Z
?term_source@@YGXPAUjpeg_decompress_struct@@@Z
AbsoluteDecimal
AddDecimal
ArrayBounds_getLowerbound
ArrayBounds_getUpperbound
ChangeSignDecimal
ClassDef_FindMatchingFunction
ClassDef_GetAncestor
ClassDef_GetIsAutoinstantiate
ClassDef_GetNestedClass
ClassDef_GetNestedClassList
ClassDef_GetNumNstClasses
ClassDef_GetNumScripts
ClassDef_GetNumVariables
ClassDef_GetRoutine
ClassDef_GetRoutineList
ClassDef_GetVariable
ClassDef_GetVariableList
ClassDef_GetWithInClass
ClassDefinitionObject_destroyObject
CompareDecimal
ConvAsciiToDecimal
ConvDecToDouble
ConvDecToFloat
ConvDecToInt
ConvDecToLong
ConvDecToUns
ConvDecToUnsLong
ConvDecimalToAscii
ConvDoubleToDecimal
ConvDoubleToDecimalRound
ConvFloatToDecimal
ConvIntToDecimal
ConvLongToDecimal
ConvUnsLongToDecimal
ConvUnsToDecimal
CopyDateTimeToPSH_TIME
CopyDateToPSH_TIME
CopyDecimalToPSH_DEC
CopyTimeToPSH_TIME
CreateBlob
CreateBlobFromBytes
CreateBlobFromLPTSTR
CreateBlobWithSize
CreateDateFromLPTSTR
CreateDateFromPSH_TIME
CreateDateFromString
CreateDateTimeFromLPTSTR
CreateDateTimeFromPSH_TIME
CreateDateTimeFromString
CreateDebugLog
CreateDecimal
CreateDecimalFromDouble
CreateDecimalFromLPTSTR
CreateDecimalFromLong
CreateDecimalFromPSH_DEC
CreateDynamicVector
CreateDynamicVectorFromArray
CreateDynamicVectorWithSize
CreateEnumUnknown
CreateList
CreateListFromArray
CreateLogManager
CreateNTEventLog
CreatePBIArgument
CreatePBIArray
CreatePBIArrayBounds
CreatePBIArrayBoundsList
CreatePBIArrayOfObject
CreatePBIArrayRuntime
CreatePBIBlob
CreatePBIBlobRuntime
CreatePBIClassDef
CreatePBIClassDefList
CreatePBIContextRuntime
CreatePBIDate
CreatePBIDateRuntime
CreatePBIDateTime
CreatePBIDateTimeRuntime
CreatePBIDateToday
CreatePBIDecimal
CreatePBIDecimalRuntime
CreatePBIException
CreatePBIGeneratorRegistry
CreatePBIInstance
CreatePBIInstanceRuntime
CreatePBIScriptDef
CreatePBIScriptDefList
CreatePBISession
CreatePBISessionRuntime
CreatePBIString
CreatePBIStringList
CreatePBITime
CreatePBITimeNow
CreatePBITimeRuntime
CreatePBITypeDef
CreatePBIUnboundedArray
CreatePBIUnboundedArrayOfObject
CreatePBIValue
CreatePBIValueRuntime
CreatePBIVariableDefList
CreateString
CreateStringBuffer
CreateStringBufferFromLPTSTR
CreateStringDictionary
CreateStringDictionaryWithFlags
CreateStringDictionaryWithSize
CreateTimeFromLPTSTR
CreateTimeFromPSH_TIME
CreateTimeFromString
CreateUlongDictionary
CreateUlongDictionaryWithFlags
CreateUlongDictionaryWithSize
DBGVW_AddINT
DBGVW_AddLPTSTR
DBGVW_DlgProc
DBGVW_Remove
DBGVW_Show
DBI_AddSyntaxLine
DBI_AlterForeignKeySyntax
DBI_AlterPrimaryKeySyntax
DBI_AttrInfo
DBI_BindSelectBuffer
DBI_BuildComboList
DBI_BuildRPCAlias
DBI_CanIdentifySystemProcs
DBI_Cancel
DBI_CleanUpColumnList
DBI_ComboList
DBI_Command_Tran
DBI_Commit
DBI_Connect
DBI_CreateForeignKeySyntax
DBI_CreateNoLogPKeySyntax
DBI_CreatePrimaryKeySyntax
DBI_CtrlChars2Text
DBI_CursorConnect
DBI_DBHandle
DBI_DWCursorConnect
DBI_DataTypeListString
DBI_DatabaseInfo
DBI_DatabaseLoad
DBI_DateString
DBI_DecimalString
DBI_DeleteDir
DBI_DeleteProcDir
DBI_DeleteSyntaxList
DBI_DelimitReservedWord
DBI_Describe
DBI_DescribeExtra
DBI_DescribeInput
DBI_DescribeOutput
DBI_DialogBoxCenter
DBI_DialogConnect
DBI_Disconnect
DBI_DoCompare
DBI_DoCompareFirst
DBI_DoCompareFirstWithSkip
DBI_DoubleString
DBI_DoubleTheQuotes
DBI_DummyConnect
DBI_DynamicBind
DBI_EditStyleHash
DBI_EditStyleInfo
DBI_EditUpdate
DBI_EndSyntax
DBI_ErrorSQL
DBI_ExecPlan
DBI_Execute
DBI_FetchFirst
DBI_FetchLast
DBI_FetchNext
DBI_FetchPrev
DBI_FetchRandom
DBI_FetchRelative
DBI_FillBlanks
DBI_FindComboListString
DBI_FindComboString
DBI_FinishLine
DBI_FormatHash
DBI_FreeColBlkList
DBI_FreeMem
DBI_FreeParmList
DBI_FreePrepList
DBI_FreeValidHash
DBI_FreeWhereList
DBI_GetBlobConnect
DBI_GetColumnExpression
DBI_GetDriverObjects
DBI_GetForeignKYOptions
DBI_GetIdentityValue
DBI_GetNextResultSet
DBI_GetPBTypeString
DBI_GetParm
DBI_GetSelectInfo
DBI_GetSelectItems
DBI_GetTimestamp
DBI_LibraryName
DBI_LoadString
DBI_LogIn
DBI_LookForKeyWord
DBI_MPowerFetchNext
DBI_MatchCombo
DBI_MatchString
DBI_NewDBParm
DBI_NumericString
DBI_OuterJoinSyntax
DBI_OuterJoinSyntax_ANSI
DBI_PBC_DialogBox
DBI_PBC_DialogBoxParam
DBI_PBC_ShowWindow
DBI_PBToArgs
DBI_PBToSQL
DBI_Parse
DBI_ParseBasicSelect
DBI_ParseColList
DBI_ParseColSubset
DBI_ParseFrom
DBI_ParseIdentifier
DBI_ParseKeyWords
DBI_ParseParms
DBI_ParseWhere
DBI_Prepare
DBI_PrepareWithParms
DBI_PrimaryKeyReferences
DBI_ProcDescribe
DBI_ProcInfo
DBI_ProcPrepare
DBI_ProcText
DBI_PubProcList
DBI_PubProcRPCSyntax
DBI_RPC_DoCall
DBI_ReadBlob
DBI_RegisterVendor
DBI_ReleaseInputParms
DBI_ReplaceDbParm
DBI_RollBack
DBI_Rows
DBI_RuntimeExecute
DBI_RuntimeFetchNext
DBI_SQLCacheBegin
DBI_SQLCacheDiscardEntry
DBI_SQLCacheEnd
DBI_SQLCacheFlushEntries
DBI_SQLCacheMakeSQLStatementAvailable
DBI_SQLCacheRegisterDescribe
DBI_SQLCacheRegisterSQLStatement
DBI_SQLCacheRequestDescribe
DBI_SQLCacheRequestSqlStatement
DBI_SQLCacheSetSelectCacheSize
DBI_SQLCacheStatistics
DBI_SearchReplace
DBI_SquishSyntax
DBI_StartSyntax
DBI_StartTran
DBI_Step
DBI_SystemDatabaseLoad
DBI_TableExplode
DBI_TableLoad
DBI_TerminateSQL
DBI_Text2CtrlChars
DBI_ThreadSafeEnabled
DBI_UnRegisterVendor
DBI_UniqueKey
DBI_ValidHash
DBI_ViewText
DBI_WriteBlob
DBI_YesTrue1
DPBApplicationNameGet
DPBApplicationNameSet
DPBConnectStringGet
DPBConnectStringSet
DPBConnectToRemote
DPBCreateConnectObject
DPBCreateInstance
DPBCreateInstanceFromProxy
DPBCreateTransportObject
DPBDestroyConnectObject
DPBDestroyTransportObject
DPBDisconnectRemote
DPBDriverErrorCodeGet
DPBDriverErrorStrGet
DPBDriverNameGet
DPBDriverNameSet
DPBGetConnectionInfo
DPBGetSessionInfo
DPBLocationNameGet
DPBLocationNameSet
DPBLookup
DPBORB_Create
DPBORB_Destroy
DPBORB_Init
DPBORB_ObjectToString
DPBORB_ResolveInitialReferences
DPBORB_StringToObject
DPBOptionsGet
DPBOptionsSet
DPBPasswordGet
DPBPasswordSet
DPBRemoteServerStopListen
DPBRemoteServerStopUserConnection
DPBServerListen
DPBServerStopListen
DPBTimeOutGet
DPBTimeOutSet
DPBTraceGet
DPBTraceSet
DPBUserIDGet
DPBUserIDSet
DP_ApplyDDLSyntax
DP_ArgdProc
DP_BlocksToText
DP_BuildCreateBlks
DP_BuildCreateSyntax
DP_BuildDropSyntax
DP_BuildNdxBlks
DP_BuildNdxSyntax
DP_BuildPrimaryKeyBlks
DP_BuildPrimaryKeySyntax
DP_BuildTablename
DP_CheckKeytype
DP_CreateTable
DP_DestroyBindBuffer
DP_DestroyColumnList
DP_DestroyCreateBlks
DP_DestroyDPBlob
DP_DestroyDPBlobList
DP_DestroyDPinfo
DP_DestroyDPtable
DP_DestroySyntax
DP_ExecuteError
DP_ExecuteSelect
DP_MatchPBtype
DP_MatchTypeName
DP_Parsecname
DP_Parsetname
DP_RTCancelPipe
DP_RTClosePipe
DP_RTCreatePipe
DP_RTRepairPipe
DP_RTRunPipe
DP_SetBlobs
DP_SetDefaultBind
DP_SetDefaultText
DP_TableStatus
DP_TextToBlocks
DP_TransferData
DP_dwCloseError
DP_dwCreate
DP_dwDestroy
DP_genSQLData
DP_getKeyDef
DP_getTblDef
DP_setKeys
DecimalPrecision
DivideDecimal
DivideDecimalAndRound
DivideDecimalAndTruncate
DllCanUnloadNow
DllGetClassObject
EnumerationDefinition_EnumUpperBound
EnumerationDefinition_GetEnumeration
EnumerationDefinition_GetEnumerationList
EnumerationItemDefinition_getName
EnumerationItemDefinition_getValue
FNX_DataWindowDescribe
FNX_DataWindowGetBandAtPointer
FNX_DataWindowGetChild
FNX_DataWindowGetCurrentColumn
FNX_DataWindowGetCurrentRow
FNX_DataWindowGetItemDateTime
FNX_DataWindowGetItemNumber
FNX_DataWindowGetItemString
FNX_DataWindowGetObjectAtPointer
FNX_DataWindowGetRowCount
FNX_DataWindowSaveAs
FNX_DataWindowSelectRow
FNX_DataWindowSetAllEvents
FNX_DataWindowSetCurrentColumn
FNX_DataWindowSetCurrentRow
FNX_IsPowerObject
FNX_ObjectClassName
FNX_ObjectIUnknown
FNX_RteGetCharFormat
FNX_RteGetCurrentBand
FNX_RteGetLine
FNX_RteGetSelection
FNX_RteLineCount
FNX_RteLineLength
FNX_RteSetCurrentBand
FNX_RteSetSelection
FN_BeginTrace
FN_CheckBoxWnd
FN_CloseTrace
FN_CommandButtonWnd
FN_ConvertUnits
FN_CtlColor
FN_CtlCreate
FN_CtlCreateAll
FN_CtlFree
FN_CtlFreeAll
FN_CtlRecreate
FN_CtlResCreate
FN_CtlResFree
FN_DWGetHandle
FN_DataStoreWnd
FN_DataWindowChange
FN_DataWindowWnd
FN_DisableEventTrace
FN_DrawLine
FN_DrawRectangle
FN_DropDownEditWnd
FN_DropDownListWnd
FN_DropDownMainWnd
FN_DumpTrace
FN_EditMaskWnd
FN_EnableEventTrace
FN_EndTrace
FN_EvtTimerWnd
FN_FieldGetAppString
FN_FieldGetCtl
FN_FieldGetDS
FN_FieldGetDW
FN_FieldGetMN
FN_FieldGetUO
FN_FieldGetWN
FN_FieldItemUpdate
FN_FieldUpdate
FN_FileDlgHook
FN_FileGetHandle
FN_FormatData
FN_GetApplicationObInst
FN_GetExeInstance
FN_GraphWnd
FN_GroupBoxWnd
FN_HScrollBarWnd
FN_HelpWnd
FN_Init
FN_LibraryEntryList
FN_ListBoxWnd
FN_ListViewCompare
FN_ListViewCompare2
FN_ListViewDeleteItem
FN_ListViewGetDispInfo
FN_ListViewWnd
FN_LookupEventDecl
FN_MDIClientWnd
FN_MailIsAvailable
FN_MailWithAttachment
FN_MenuBarCreate
FN_MinimumVersion
FN_MultiLineEditWnd
FN_OleControlWnd
FN_OpenTrace
FN_OwnerDraw
FN_OwnerInit
FN_PictureWnd
FN_PipelineNotify
FN_PluginPollLoop
FN_PluginStart
FN_PluginStop
FN_PostedRoutine
FN_RadioButtonWnd
FN_ResCreateBitmap
FN_ResCreateBitmap3D
FN_ResCreateBitmapFromIcon
FN_ResDestroy
FN_ResGetBitmapID
FN_ResGetBitmapName
FN_ResGetBitmapTable
FN_ResGetColor
FN_ResGetCursorID
FN_ResGetCursorTable
FN_ResGetIconID
FN_ResGetIconTable
FN_RichTextEditWnd
FN_RtActive
FN_RtActiveWnd
FN_RtBroadcast
FN_RtHandle
FN_RtMenuInfo
FN_RtRespCnt
FN_RtSuspend
FN_RtSuspended
FN_RtTerminate
FN_RtWndAccel
FN_RtWndInfo
FN_RtWndMenu
FN_RtWndMenuSelect
FN_RtWndProp
FN_RunApplication

Sections

.text
Size: 2.6MB - Virtual size: 2.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 176KB - Virtual size: 175KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 236KB - Virtual size: 255KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 438KB - Virtual size: 438KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 113KB - Virtual size: 113KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
utils.dll
.dll windows:4 windows x86 arch:x86

8a7aaad44596e3b45769a8ebbd51d568

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

CloseHandle
CreateFileA
EnterCriticalSection
ExitProcess
FreeEnvironmentStringsA
GetACP
GetCPInfo
GetCurrentThreadId
GetEnvironmentStrings
GetFileType
GetLastError
GetLocalTime
GetModuleFileNameA
GetModuleHandleA
GetOEMCP
GetProcAddress
GetProcessHeap
GetStartupInfoA
GetStdHandle
GetStringTypeW
GetVersion
GetVersionExA
GlobalMemoryStatus
HeapAlloc
HeapFree
InitializeCriticalSection
LCMapStringA
LCMapStringW
LeaveCriticalSection
LoadLibraryA
RaiseException
RtlUnwind
SetConsoleCtrlHandler
SetFilePointer
SetHandleCount
SetLastError
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
UnhandledExceptionFilter
VirtualAlloc
VirtualFree
VirtualQuery
WriteFile

netapi32

Netbios

user32

EnumThreadWindows
MessageBoxA
wsprintfA

Exports

Exports

GetLanaID
GetMACAddress
___CPPdebugHook

Sections

.text
Size: 31KB - Virtual size: 32KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 10KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.edata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
zrpk.dll
.dll windows:1 windows x86 arch:x86

b4a6f91b7546c17491d717200b1eb238

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

user32

CharUpperBuffA
MessageBoxA

kernel32

CloseHandle
CreateEventA
CreateFileA
CreateThread
DeleteCriticalSection
EnterCriticalSection
ExitProcess
ExitThread
FreeEnvironmentStringsA
GetACP
GetCPInfo
GetCommandLineA
GetCommandLineW
GetCurrentThreadId
GetCurrentThread
GetEnvironmentStrings
GetFileType
GetLastError
GetModuleFileNameA
GetModuleFileNameW
GetModuleHandleA
GetOEMCP
GetProcAddress
GetStdHandle
GetVersion
InitializeCriticalSection
LeaveCriticalSection
LoadLibraryA
MultiByteToWideChar
SetConsoleCtrlHandler
SetEnvironmentVariableA
SetEnvironmentVariableW
SetEvent
SetLastError
SetStdHandle
SetUnhandledExceptionFilter
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
UnhandledExceptionFilter
VirtualAlloc
VirtualFree
VirtualQuery
WaitForSingleObject
WideCharToMultiByte
WriteFile

pbvm80

ord5237
ord2405
ord5236
ord2384
ord2653
ord2599
ord2546
ord2541
ord2520
ord2531
ord2513
ord5164
ord2624
ord2426
ord2469
ord2057
ord2497
ord2473
ord2495
ord2474
ord2496
ord2416
ord2582
ord2646
ord5245
ord2644
ord2645
ord2484
ord2456
ord2611
ord2537
ord2455
ord2492
ord2458
ord2578
ord2539
ord2412
ord2632
ord2480
ord2488
ord2295
ord2050
ord2639
ord2638
ord2479
ord2486
ord2461
ord2462
ord2404
ord2453
ord2454
ord5151
ord2012
ord2468
ord2448
ord2459
ord2183
ord2515
ord2865
ord2043
ord2864

Exports

Exports

_DllMain@12
__fn_1_32770_0@8
__fn_1_32770_1@8
__fn_1_32770_21@8
__fn_1_32770_27@8
__fn_1_32770_28@8
__fn_1_32770_29@8
__fn_1_32770_30@8
__fn_1_32770_31@8
__fn_23_32770_0@8
__fn_23_32770_1@8
__fn_23_32770_38@8
__fn_23_32795_44@8
__fn_23_32799_34@8
__fn_23_32800_34@8
__fn_24_32770_0@8
__fn_24_32770_1@8
__fn_24_32789_34@8
__fn_24_32790_34@8
__fn_24_32799_60@8
__fn_2_32770_0@8
__fn_2_32770_1@8
__fn_2_32770_38@8
__fn_5_32770_0@8
__fn_5_32770_1@8
__fn_5_32784_0@8
__fn_5_32784_1@8
__fn_5_32785_0@8
__fn_5_32785_1@8
__fn_5_32785_21@8
__fn_5_32786_0@8
__fn_5_32786_1@8
__fn_5_32786_21@8
__fn_5_32787_0@8
__fn_5_32787_1@8
__fn_5_32787_21@8
__fn_5_32788_0@8
__fn_5_32788_1@8
__fn_5_32788_21@8
__fn_5_32789_0@8
__fn_5_32789_1@8
__fn_5_32789_21@8
__fn_5_32790_0@8
__fn_5_32790_1@8
__fn_5_32791_0@8
__fn_5_32791_1@8
__fn_5_32791_21@8
__fn_5_32792_0@8
__fn_5_32792_1@8
__fn_5_32792_21@8
__fn_5_32793_0@8
__fn_5_32793_1@8
__fn_5_32794_0@8
__fn_5_32794_1@8
__fn_5_32794_21@8
__fn_5_32795_0@8
__fn_5_32795_1@8
__fn_5_32795_21@8
__fn_5_32796_0@8
__fn_5_32796_1@8
__fn_5_32796_21@8
__fn_5_32797_0@8
__fn_5_32797_1@8
__fn_5_32797_21@8
__fn_5_32798_0@8
__fn_5_32798_1@8
__fn_5_32799_0@8
__fn_5_32799_1@8
__fn_5_32799_21@8
__fn_5_32800_0@8
__fn_5_32800_1@8
__fn_5_32800_21@8
__fn_5_32801_0@8
__fn_5_32801_1@8
__fn_5_32801_21@8
__fn_5_32802_0@8
__fn_5_32802_1@8
__fn_5_32803_0@8
__fn_5_32803_1@8
__fn_5_32803_21@8
__fn_5_32804_0@8
__fn_5_32804_1@8
__fn_5_32804_21@8
__fn_5_32805_0@8
__fn_5_32805_1@8
__fn_5_32805_21@8
__fn_5_32806_0@8
__fn_5_32806_1@8
__fn_5_32807_0@8
__fn_5_32807_1@8
__fn_5_32807_21@8
__fn_5_32808_0@8
__fn_5_32808_1@8
__fn_5_32808_21@8
__fn_5_32809_0@8
__fn_5_32809_1@8
__fn_5_32809_21@8
__fn_5_32810_0@8
__fn_5_32810_1@8
__fn_5_32811_0@8
__fn_5_32811_1@8
__fn_5_32811_21@8
__fn_5_32812_0@8
__fn_5_32812_1@8
__fn_5_32812_21@8
__fn_5_32813_0@8
__fn_5_32813_1@8
__fn_5_32813_21@8
__fn_5_32814_0@8
__fn_5_32814_1@8
__fn_5_32815_0@8
__fn_5_32815_1@8
__fn_5_32815_21@8
__fn_5_32816_0@8
__fn_5_32816_1@8
__fn_5_32816_21@8
__fn_5_32817_0@8
__fn_5_32817_1@8
__fn_5_32817_21@8
__fn_5_32818_0@8
__fn_5_32818_1@8
__fn_5_32819_0@8
__fn_5_32819_1@8
__fn_5_32819_21@8
__fn_5_32820_0@8
__fn_5_32820_1@8
__fn_5_32821_0@8
__fn_5_32821_1@8
__fn_5_32821_21@8
__fn_5_32822_0@8
__fn_5_32822_1@8
__fn_5_32822_21@8
__fn_5_32823_0@8
__fn_5_32823_1@8
__fn_5_32823_21@8
__fn_5_32824_0@8
__fn_5_32824_1@8
__fn_5_32824_21@8
__fn_5_32825_0@8
__fn_5_32825_1@8
__fn_5_32825_21@8
__fn_6_32770_0@8
__fn_6_32770_1@8
__fn_6_32787_34@8
__fn_6_32791_34@8
__fn_6_32799_60@8
__fn_7_32770_0@8
__fn_7_32770_1@8
__fn_7_32770_38@8
__fn_7_32797_34@8
__fn_7_32799_44@8
_getVtableInfo_m_menu@12
_getVtableInfo_w_login@12
_getVtableInfo_w_login_bak@12
_getVtableInfo_w_main@12
_getVtableInfo_w_setauther@12
_getVtableInfo_w_setpass@12
_getVtableInfo_zrpk@12

Sections

AUTO
Size: 163KB - Virtual size:

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.idata
Size: 2KB - Virtual size:

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

DGROUP
Size: 20KB - Virtual size:

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: 5KB - Virtual size:

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 4KB - Virtual size:

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size:

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size:

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
zrpk_data.mdb
zrpk_f.dll
.dll windows:1 windows x86 arch:x86

5b711a438296feb8d4072415fb1a81f4

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

user32

CharUpperBuffA
MessageBoxA

kernel32

CloseHandle
CreateEventA
CreateFileA
CreateThread
DeleteCriticalSection
EnterCriticalSection
ExitProcess
ExitThread
FreeEnvironmentStringsA
GetACP
GetCPInfo
GetCommandLineA
GetCommandLineW
GetCurrentThreadId
GetCurrentThread
GetEnvironmentStrings
GetFileType
GetLastError
GetModuleFileNameA
GetModuleFileNameW
GetModuleHandleA
GetOEMCP
GetProcAddress
GetStdHandle
GetVersion
InitializeCriticalSection
LeaveCriticalSection
LoadLibraryA
MultiByteToWideChar
SetConsoleCtrlHandler
SetEnvironmentVariableA
SetEnvironmentVariableW
SetEvent
SetLastError
SetStdHandle
SetUnhandledExceptionFilter
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
UnhandledExceptionFilter
VirtualAlloc
VirtualFree
VirtualQuery
WaitForSingleObject
WideCharToMultiByte
WriteFile

pbvm80

ord2611
ord2481
ord2646
ord5245
ord2644
ord2645
ord2484
ord2295
ord2426
ord2632
ord2479
ord2448
ord2050
ord2599
ord2183
ord5151
ord2012
ord2639
ord2638
ord2480
ord2488
ord2486
ord2505
ord2865
ord2043
ord2864

Exports

Exports

_DllMain@12
__fn_25_32769_19@8
__fn_26_32769_19@8
__fn_27_32769_19@8
__fn_28_32769_19@8
__fn_29_32769_19@8
__fn_3_32769_19@8
__fn_4_32769_19@8
__fn_8_32769_19@8
_getVtableInfo_f_10_16@12
_getVtableInfo_f_dpwtospw@12
_getVtableInfo_f_mac@12
_getVtableInfo_f_mactojq@12
_getVtableInfo_f_rig@12
_getVtableInfo_f_spwtodpw@12
_getVtableInfo_gf_coltoname@12
_getVtableInfo_gf_coltonamew@12

Sections

AUTO
Size: 66KB - Virtual size:

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.idata
Size: 2KB - Virtual size:

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

DGROUP
Size: 4KB - Virtual size:

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: 5KB - Virtual size:

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 1024B - Virtual size:

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size:

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size:

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
zrpk_setw.dll
.dll windows:1 windows x86 arch:x86

89a3aa46e55fb47c66cd4785f2633b78

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

user32

CharUpperBuffA
MessageBoxA

kernel32

CloseHandle
CreateEventA
CreateFileA
CreateThread
DeleteCriticalSection
EnterCriticalSection
ExitProcess
ExitThread
FreeEnvironmentStringsA
GetACP
GetCPInfo
GetCommandLineA
GetCommandLineW
GetCurrentThreadId
GetCurrentThread
GetEnvironmentStrings
GetFileType
GetLastError
GetModuleFileNameA
GetModuleFileNameW
GetModuleHandleA
GetOEMCP
GetProcAddress
GetStdHandle
GetVersion
InitializeCriticalSection
LeaveCriticalSection
LoadLibraryA
MultiByteToWideChar
SetConsoleCtrlHandler
SetEnvironmentVariableA
SetEnvironmentVariableW
SetEvent
SetLastError
SetStdHandle
SetUnhandledExceptionFilter
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
UnhandledExceptionFilter
VirtualAlloc
VirtualFree
VirtualQuery
WaitForSingleObject
WideCharToMultiByte
WriteFile

pbvm80

ord5237
ord2456
ord5164
ord2455
ord2450
ord5544
ord5538
ord5540
ord5555
ord5539
ord2401
ord2490
ord2279
ord2646
ord5245
ord2644
ord2645
ord2404
ord2453
ord2541
ord2452
ord2531
ord2426
ord2537
ord2468
ord2611
ord2412
ord2634
ord2521
ord2536
ord2520
ord2632
ord2295
ord2050
ord2448
ord2624
ord2484
ord2407
ord2405
ord2454
ord2639
ord2638
ord2479
ord2488
ord5236
ord2384
ord2486
ord2461
ord2462
ord2469
ord2057
ord2497
ord2473
ord2495
ord2474
ord2496
ord2458
ord2578
ord5151
ord2012
ord2416
ord2582
ord2459
ord2183
ord2515
ord2865
ord2043
ord2864

Exports

Exports

_DllMain@12
__fn_21_32770_0@8
__fn_21_32770_119@8
__fn_21_32770_1@8
__fn_21_32770_23@8
__fn_21_32770_38@8
__fn_21_32787_36@8
__fn_21_32787_420@8
__fn_21_32787_60@8
__fn_21_32791_34@8
__fn_21_32795_420@8
__fn_21_32795_47@8
__fn_21_32796_420@8
__fn_21_32796_60@8
__fn_21_32797_34@8
__fn_21_32798_34@8
__fn_21_32803_34@8
__fn_21_32804_34@8
__fn_21_32805_34@8
__fn_21_32806_34@8
__fn_21_32807_34@8
__fn_22_32770_0@8
__fn_22_32770_119@8
__fn_22_32770_1@8
__fn_22_32770_24@8
__fn_22_32770_38@8
__fn_22_32787_34@8
__fn_22_32792_34@8
__fn_22_32793_34@8
__fn_22_32795_420@8
__fn_22_32795_47@8
__fn_22_32798_34@8
__fn_22_32799_34@8
__fn_23_32770_0@8
__fn_23_32770_119@8
__fn_23_32770_1@8
__fn_23_32770_38@8
__fn_23_32787_420@8
__fn_23_32787_47@8
__fn_23_32790_420@8
__fn_23_32790_60@8
__fn_23_32792_34@8
__fn_23_32796_34@8
__fn_23_32797_34@8
__fn_23_32798_34@8
__fn_23_32799_34@8
__fn_23_32800_34@8
__fn_23_32800_44@8
__fn_23_32801_34@8
__fn_24_32770_0@8
__fn_24_32770_119@8
__fn_24_32770_1@8
__fn_24_32770_38@8
__fn_24_32787_34@8
__fn_24_32792_420@8
__fn_24_32792_47@8
__fn_24_32795_36@8
__fn_24_32795_420@8
__fn_24_32795_60@8
__fn_24_32796_34@8
__fn_24_32797_34@8
__fn_24_32798_34@8
__fn_24_32799_34@8
__fn_24_32800_34@8
__fn_25_32770_0@8
__fn_25_32770_119@8
__fn_25_32770_1@8
__fn_25_32770_23@8
__fn_25_32770_38@8
__fn_25_32787_34@8
__fn_25_32792_34@8
__fn_25_32793_34@8
__fn_25_32795_34@8
__fn_25_32798_34@8
__fn_25_32805_34@8
__fn_25_32805_44@8
__fn_25_32806_34@8
__fn_26_32770_0@8
__fn_26_32770_1@8
__fn_26_32770_38@8
__fn_27_32770_0@8
__fn_27_32770_119@8
__fn_27_32770_1@8
__fn_27_32770_38@8
__fn_27_32787_34@8
__fn_27_32792_420@8
__fn_27_32792_47@8
__fn_27_32795_420@8
__fn_27_32795_60@8
__fn_27_32796_34@8
__fn_27_32797_34@8
__fn_27_32798_34@8
__fn_27_32799_34@8
__fn_27_32800_34@8
__fn_28_32770_0@8
__fn_28_32770_119@8
__fn_28_32770_1@8
__fn_28_32770_24@8
__fn_28_32770_38@8
__fn_28_32787_420@8
__fn_28_32787_47@8
__fn_28_32791_34@8
__fn_28_32795_34@8
__fn_28_32796_34@8
__fn_29_32770_0@8
__fn_29_32770_119@8
__fn_29_32770_1@8
__fn_29_32770_38@8
__fn_29_32787_34@8
__fn_29_32792_420@8
__fn_29_32792_47@8
__fn_29_32795_420@8
__fn_29_32795_60@8
__fn_29_32796_34@8
__fn_29_32797_34@8
__fn_29_32798_34@8
__fn_29_32799_34@8
__fn_29_32800_34@8
__fn_30_32770_0@8
__fn_30_32770_119@8
__fn_30_32770_120@8
__fn_30_32770_121@8
__fn_30_32770_1@8
__fn_30_32770_38@8
__fn_30_32798_34@8
__fn_30_32806_34@8
__fn_30_32810_34@8
_getVtableInfo_w_injsmc@12
_getVtableInfo_w_jxjh_p@12
_getVtableInfo_w_jxjh_pre@12
_getVtableInfo_w_rkjsmc@12
_getVtableInfo_w_s_bjkcwp@12
_getVtableInfo_w_s_bjsz@12
_getVtableInfo_w_s_bjztsz@12
_getVtableInfo_w_s_cdsz@12
_getVtableInfo_w_s_kcsz@12
_getVtableInfo_w_s_kssz@12

Sections

AUTO
Size: 736KB - Virtual size:

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.idata
Size: 2KB - Virtual size:

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

DGROUP
Size: 116KB - Virtual size:

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: 5KB - Virtual size:

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 4KB - Virtual size:

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 11KB - Virtual size:

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size:

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
zrpk_w.dll
.dll windows:1 windows x86 arch:x86

9f7edf319bcd9bc9595588c722f0dd04

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

user32

CharUpperBuffA
MessageBoxA

kernel32

CloseHandle
CreateEventA
CreateFileA
CreateThread
DeleteCriticalSection
EnterCriticalSection
ExitProcess
ExitThread
FreeEnvironmentStringsA
GetACP
GetCPInfo
GetCommandLineA
GetCommandLineW
GetCurrentThreadId
GetCurrentThread
GetEnvironmentStrings
GetFileType
GetLastError
GetModuleFileNameA
GetModuleFileNameW
GetModuleHandleA
GetOEMCP
GetProcAddress
GetStdHandle
GetVersion
InitializeCriticalSection
LeaveCriticalSection
LoadLibraryA
MultiByteToWideChar
SetConsoleCtrlHandler
SetEnvironmentVariableA
SetEnvironmentVariableW
SetEvent
SetLastError
SetStdHandle
SetUnhandledExceptionFilter
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
UnhandledExceptionFilter
VirtualAlloc
VirtualFree
VirtualQuery
WaitForSingleObject
WideCharToMultiByte
WriteFile

pbvm80

ord5237
ord5547
ord2480
ord2451
ord2502
ord2450
ord2646
ord5245
ord2644
ord2645
ord2407
ord2536
ord2520
ord2456
ord2455
ord2624
ord5530
ord2404
ord2453
ord2537
ord2454
ord2461
ord2462
ord2469
ord2057
ord2497
ord2473
ord2495
ord2474
ord2496
ord2416
ord2582
ord2468
ord2488
ord5552
ord5559
ord5784
ord5532
ord5544
ord5531
ord5540
ord5538
ord2401
ord5555
ord5539
ord2412
ord2426
ord2632
ord2639
ord2638
ord2479
ord5151
ord2405
ord2459
ord2504
ord2505
ord2599
ord2634
ord2611
ord2484
ord2448
ord2012
ord2458
ord2578
ord2295
ord2050
ord5236
ord2384
ord2183
ord2486
ord2515
ord2865
ord2043
ord2864

Exports

Exports

_DllMain@12
__fn_15_32770_0@8
__fn_15_32770_119@8
__fn_15_32770_1@8
__fn_15_32770_24@8
__fn_15_32770_38@8
__fn_15_32770_49@8
__fn_15_32796_34@8
__fn_15_32797_34@8
__fn_15_32798_34@8
__fn_15_32800_36@8
__fn_15_32800_414@8
__fn_15_32802_36@8
__fn_15_32802_414@8
__fn_15_32802_415@8
__fn_15_32802_47@8
__fn_15_32802_50@8
__fn_15_32804_34@8
__fn_15_32806_36@8
__fn_15_32806_414@8
__fn_15_32806_47@8
__fn_15_32806_50@8
__fn_17_32770_0@8
__fn_17_32770_119@8
__fn_17_32770_1@8
__fn_17_32770_24@8
__fn_17_32770_38@8
__fn_17_32770_49@8
__fn_17_32795_34@8
__fn_17_32796_34@8
__fn_17_32797_34@8
__fn_17_32800_36@8
__fn_17_32800_414@8
__fn_17_32802_36@8
__fn_17_32802_414@8
__fn_17_32802_415@8
__fn_17_32802_47@8
__fn_17_32802_50@8
__fn_17_32804_34@8
__fn_17_32806_36@8
__fn_17_32806_414@8
__fn_17_32806_47@8
__fn_17_32806_50@8
__fn_18_32770_0@8
__fn_18_32770_119@8
__fn_18_32770_120@8
__fn_18_32770_121@8
__fn_18_32770_122@8
__fn_18_32770_123@8
__fn_18_32770_124@8
__fn_18_32770_125@8
__fn_18_32770_126@8
__fn_18_32770_127@8
__fn_18_32770_128@8
__fn_18_32770_129@8
__fn_18_32770_130@8
__fn_18_32770_131@8
__fn_18_32770_132@8
__fn_18_32770_133@8
__fn_18_32770_134@8
__fn_18_32770_135@8
__fn_18_32770_136@8
__fn_18_32770_137@8
__fn_18_32770_138@8
__fn_18_32770_139@8
__fn_18_32770_140@8
__fn_18_32770_141@8
__fn_18_32770_142@8
__fn_18_32770_143@8
__fn_18_32770_144@8
__fn_18_32770_145@8
__fn_18_32770_146@8
__fn_18_32770_147@8
__fn_18_32770_148@8
__fn_18_32770_149@8
__fn_18_32770_150@8
__fn_18_32770_151@8
__fn_18_32770_152@8
__fn_18_32770_153@8
__fn_18_32770_154@8
__fn_18_32770_155@8
__fn_18_32770_156@8
__fn_18_32770_157@8
__fn_18_32770_158@8
__fn_18_32770_159@8
__fn_18_32770_160@8
__fn_18_32770_161@8
__fn_18_32770_162@8
__fn_18_32770_163@8
__fn_18_32770_164@8
__fn_18_32770_165@8
__fn_18_32770_166@8
__fn_18_32770_167@8
__fn_18_32770_168@8
__fn_18_32770_169@8
__fn_18_32770_170@8
__fn_18_32770_171@8
__fn_18_32770_172@8
__fn_18_32770_173@8
__fn_18_32770_174@8
__fn_18_32770_175@8
__fn_18_32770_1@8
__fn_18_32770_24@8
__fn_18_32770_38@8
__fn_18_32770_49@8
__fn_18_32787_36@8
__fn_18_32787_414@8
__fn_18_32787_47@8
__fn_18_32787_50@8
__fn_18_32798_34@8
__fn_18_32801_34@8
__fn_18_32803_36@8
__fn_18_32803_414@8
__fn_18_32804_36@8
__fn_18_32804_414@8
__fn_18_32804_415@8
__fn_18_32804_50@8
__fn_18_32804_60@8
__fn_18_32805_34@8
__fn_18_32806_36@8
__fn_18_32806_414@8
__fn_18_32806_60@8
__fn_2_32770_0@8
__fn_2_32770_119@8
__fn_2_32770_120@8
__fn_2_32770_121@8
__fn_2_32770_122@8
__fn_2_32770_123@8
__fn_2_32770_124@8
__fn_2_32770_125@8
__fn_2_32770_126@8
__fn_2_32770_127@8
__fn_2_32770_128@8
__fn_2_32770_129@8
__fn_2_32770_130@8
__fn_2_32770_131@8
__fn_2_32770_132@8
__fn_2_32770_133@8
__fn_2_32770_134@8
__fn_2_32770_135@8
__fn_2_32770_136@8
__fn_2_32770_137@8
__fn_2_32770_138@8
__fn_2_32770_139@8
__fn_2_32770_140@8
__fn_2_32770_141@8
__fn_2_32770_142@8
__fn_2_32770_143@8
__fn_2_32770_144@8
__fn_2_32770_145@8
__fn_2_32770_146@8
__fn_2_32770_147@8
__fn_2_32770_148@8
__fn_2_32770_149@8
__fn_2_32770_150@8
__fn_2_32770_151@8
__fn_2_32770_152@8
__fn_2_32770_153@8
__fn_2_32770_154@8
__fn_2_32770_155@8
__fn_2_32770_156@8
__fn_2_32770_157@8
__fn_2_32770_158@8
__fn_2_32770_159@8
__fn_2_32770_160@8
__fn_2_32770_161@8
__fn_2_32770_162@8
__fn_2_32770_163@8
__fn_2_32770_164@8
__fn_2_32770_165@8
__fn_2_32770_166@8
__fn_2_32770_167@8
__fn_2_32770_168@8
__fn_2_32770_169@8
__fn_2_32770_170@8
__fn_2_32770_171@8
__fn_2_32770_172@8
__fn_2_32770_173@8
__fn_2_32770_174@8
__fn_2_32770_175@8
__fn_2_32770_176@8
__fn_2_32770_177@8
__fn_2_32770_1@8
__fn_2_32770_23@8
__fn_2_32770_24@8
__fn_2_32770_38@8
__fn_2_32787_34@8
__fn_2_32793_34@8
__fn_2_32798_34@8
__fn_2_32799_34@8
__fn_2_32800_34@8
__fn_2_32802_36@8
__fn_2_32802_420@8
__fn_2_32802_47@8
__fn_2_32802_55@8
__fn_2_32802_60@8
__fn_2_32804_34@8
__fn_2_32805_36@8
__fn_2_32805_414@8
__fn_2_32805_55@8
__fn_2_32806_34@8
__fn_2_32808_36@8
__fn_2_32808_55@8
__fn_37_32770_0@8
__fn_37_32770_119@8
__fn_37_32770_120@8
__fn_37_32770_121@8
__fn_37_32770_122@8
__fn_37_32770_123@8
__fn_37_32770_124@8
__fn_37_32770_125@8
__fn_37_32770_126@8
__fn_37_32770_127@8
__fn_37_32770_128@8
__fn_37_32770_129@8
__fn_37_32770_130@8
__fn_37_32770_131@8
__fn_37_32770_132@8
__fn_37_32770_133@8
__fn_37_32770_134@8
__fn_37_32770_135@8
__fn_37_32770_136@8
__fn_37_32770_137@8
__fn_37_32770_138@8
__fn_37_32770_139@8
__fn_37_32770_140@8
__fn_37_32770_141@8
__fn_37_32770_142@8
__fn_37_32770_143@8
__fn_37_32770_144@8
__fn_37_32770_145@8
__fn_37_32770_146@8
__fn_37_32770_147@8
__fn_37_32770_148@8
__fn_37_32770_149@8
__fn_37_32770_150@8
__fn_37_32770_151@8
__fn_37_32770_152@8
__fn_37_32770_153@8
__fn_37_32770_154@8
__fn_37_32770_155@8
__fn_37_32770_156@8
__fn_37_32770_157@8
__fn_37_32770_158@8
__fn_37_32770_159@8
__fn_37_32770_160@8
__fn_37_32770_161@8
__fn_37_32770_162@8
__fn_37_32770_163@8
__fn_37_32770_164@8
__fn_37_32770_165@8
__fn_37_32770_166@8
__fn_37_32770_167@8
__fn_37_32770_168@8
__fn_37_32770_169@8
__fn_37_32770_170@8
__fn_37_32770_171@8
__fn_37_32770_172@8
__fn_37_32770_173@8
__fn_37_32770_174@8
__fn_37_32770_175@8
__fn_37_32770_176@8
__fn_37_32770_177@8
__fn_37_32770_1@8
__fn_37_32770_23@8
__fn_37_32770_24@8
__fn_37_32770_38@8
__fn_37_32795_34@8
__fn_37_32798_36@8
__fn_37_32798_420@8
__fn_37_32798_47@8
__fn_37_32798_55@8
__fn_37_32798_60@8
__fn_37_32800_36@8
__fn_37_32800_414@8
__fn_37_32800_55@8
__fn_37_32801_34@8
__fn_37_32803_36@8
__fn_37_32803_55@8
__fn_37_32804_34@8
__fn_37_32805_34@8
__fn_37_32806_34@8
__fn_37_32807_34@8
__fn_37_32808_34@8
__fn_4_32770_0@8
__fn_4_32770_119@8
__fn_4_32770_120@8
__fn_4_32770_121@8
__fn_4_32770_122@8
__fn_4_32770_123@8
__fn_4_32770_124@8
__fn_4_32770_125@8
__fn_4_32770_1@8
__fn_4_32770_38@8
__fn_4_32770_49@8
__fn_4_32787_34@8
__fn_4_32793_34@8
__fn_4_32799_36@8
__fn_4_32799_420@8
__fn_4_32799_55@8
__fn_4_32799_60@8
__fn_4_32801_34@8
__fn_4_32802_36@8
__fn_4_32802_414@8
__fn_4_32802_55@8
__fn_4_32802_60@8
__fn_4_32803_36@8
__fn_4_32803_414@8
__fn_4_32803_55@8
__fn_4_32803_60@8
__fn_5_32770_0@8
__fn_5_32770_119@8
__fn_5_32770_120@8
__fn_5_32770_121@8
__fn_5_32770_122@8
__fn_5_32770_123@8
__fn_5_32770_124@8
__fn_5_32770_125@8
__fn_5_32770_126@8
__fn_5_32770_127@8
__fn_5_32770_128@8
__fn_5_32770_129@8
__fn_5_32770_130@8
__fn_5_32770_131@8
__fn_5_32770_132@8
__fn_5_32770_133@8
__fn_5_32770_134@8
__fn_5_32770_135@8
__fn_5_32770_136@8
__fn_5_32770_137@8
__fn_5_32770_138@8
__fn_5_32770_139@8
__fn_5_32770_140@8
__fn_5_32770_141@8
__fn_5_32770_142@8
__fn_5_32770_143@8
__fn_5_32770_144@8
__fn_5_32770_145@8
__fn_5_32770_146@8
__fn_5_32770_147@8
__fn_5_32770_148@8
__fn_5_32770_149@8
__fn_5_32770_150@8
__fn_5_32770_151@8
__fn_5_32770_152@8
__fn_5_32770_153@8
__fn_5_32770_154@8
__fn_5_32770_155@8
__fn_5_32770_156@8
__fn_5_32770_157@8
__fn_5_32770_158@8
__fn_5_32770_159@8
__fn_5_32770_160@8
__fn_5_32770_161@8
__fn_5_32770_162@8
__fn_5_32770_163@8
__fn_5_32770_164@8
__fn_5_32770_165@8
__fn_5_32770_166@8
__fn_5_32770_167@8
__fn_5_32770_168@8
__fn_5_32770_169@8
__fn_5_32770_170@8
__fn_5_32770_171@8
__fn_5_32770_172@8
__fn_5_32770_173@8
__fn_5_32770_174@8
__fn_5_32770_175@8
__fn_5_32770_176@8
__fn_5_32770_177@8
__fn_5_32770_178@8
__fn_5_32770_179@8
__fn_5_32770_180@8
__fn_5_32770_181@8
__fn_5_32770_182@8
__fn_5_32770_183@8
__fn_5_32770_1@8
__fn_5_32770_38@8
__fn_5_32770_49@8
__fn_5_32787_34@8
__fn_5_32798_36@8
__fn_5_32798_414@8
__fn_5_32800_36@8
__fn_5_32800_414@8
__fn_5_32800_415@8
__fn_5_32800_55@8
__fn_5_32800_60@8
__fn_5_32801_34@8
__fn_5_32802_36@8
__fn_5_32802_414@8
__fn_5_32802_55@8
__fn_5_32802_60@8
__fn_5_32803_36@8
__fn_5_32803_414@8
__fn_5_32804_36@8
__fn_5_32804_55@8
__fn_5_32805_36@8
__fn_5_32805_414@8
__fn_5_32805_55@8
__fn_6_32770_0@8
__fn_6_32770_119@8
__fn_6_32770_120@8
__fn_6_32770_121@8
__fn_6_32770_122@8
__fn_6_32770_123@8
__fn_6_32770_124@8
__fn_6_32770_125@8
__fn_6_32770_126@8
__fn_6_32770_127@8
__fn_6_32770_128@8
__fn_6_32770_129@8
__fn_6_32770_130@8
__fn_6_32770_131@8
__fn_6_32770_132@8
__fn_6_32770_133@8
__fn_6_32770_134@8
__fn_6_32770_135@8
__fn_6_32770_136@8
__fn_6_32770_137@8
__fn_6_32770_138@8
__fn_6_32770_139@8
__fn_6_32770_140@8
__fn_6_32770_141@8
__fn_6_32770_142@8
__fn_6_32770_143@8
__fn_6_32770_144@8
__fn_6_32770_145@8
__fn_6_32770_146@8
__fn_6_32770_147@8
__fn_6_32770_148@8
__fn_6_32770_149@8
__fn_6_32770_150@8
__fn_6_32770_151@8
__fn_6_32770_152@8
__fn_6_32770_153@8
__fn_6_32770_154@8
__fn_6_32770_155@8
__fn_6_32770_156@8
__fn_6_32770_157@8
__fn_6_32770_158@8
__fn_6_32770_159@8
__fn_6_32770_160@8
__fn_6_32770_161@8
__fn_6_32770_162@8
__fn_6_32770_163@8
__fn_6_32770_164@8
__fn_6_32770_165@8
__fn_6_32770_166@8
__fn_6_32770_167@8
__fn_6_32770_168@8
__fn_6_32770_169@8
__fn_6_32770_170@8
__fn_6_32770_171@8
__fn_6_32770_172@8
__fn_6_32770_1@8
__fn_6_32770_38@8
__fn_6_32770_49@8
__fn_6_32787_34@8
__fn_6_32798_36@8
__fn_6_32798_420@8
__fn_6_32798_421@8
__fn_6_32798_55@8
__fn_6_32798_60@8
__fn_6_32800_34@8
__fn_6_32801_36@8
__fn_6_32801_414@8
__fn_6_32801_55@8
__fn_6_32801_60@8
__fn_6_32802_34@8
__fn_6_32803_36@8
__fn_6_32803_55@8
__fn_7_32770_0@8
__fn_7_32770_1@8
__fn_7_32770_38@8
_getVtableInfo_w_bjgdksz@12
_getVtableInfo_w_fbpk@12
_getVtableInfo_w_jspkxz@12
_getVtableInfo_w_kcpkxz@12
_getVtableInfo_w_plkb@12
_getVtableInfo_w_plkbx@12
_getVtableInfo_w_plwkb@12
_getVtableInfo_w_plzzx@12
_getVtableInfo_w_wpkc@12

Sections

AUTO
Size: 3.0MB - Virtual size:

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.idata
Size: 2KB - Virtual size:

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

DGROUP
Size: 346KB - Virtual size:

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: 5KB - Virtual size:

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 14KB - Virtual size:

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 30KB - Virtual size:

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size:

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
zrpk_wb.dll
.dll windows:1 windows x86 arch:x86

6d8765ae99b9cd9306c956a5fde9edeb

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

user32

CharUpperBuffA
MessageBoxA

kernel32

CloseHandle
CreateEventA
CreateFileA
CreateThread
DeleteCriticalSection
EnterCriticalSection
ExitProcess
ExitThread
FreeEnvironmentStringsA
GetACP
GetCPInfo
GetCommandLineA
GetCommandLineW
GetCurrentThreadId
GetCurrentThread
GetEnvironmentStrings
GetFileType
GetLastError
GetModuleFileNameA
GetModuleFileNameW
GetModuleHandleA
GetOEMCP
GetProcAddress
GetStdHandle
GetVersion
InitializeCriticalSection
LeaveCriticalSection
LoadLibraryA
MultiByteToWideChar
SetConsoleCtrlHandler
SetEnvironmentVariableA
SetEnvironmentVariableW
SetEvent
SetLastError
SetStdHandle
SetUnhandledExceptionFilter
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
UnhandledExceptionFilter
VirtualAlloc
VirtualFree
VirtualQuery
WaitForSingleObject
WideCharToMultiByte
WriteFile

pbvm80

ord5237
ord2456
ord2646
ord5245
ord2644
ord2645
ord2412
ord2455
ord2404
ord2624
ord2480
ord2453
ord2537
ord2454
ord2405
ord2468
ord2488
ord2461
ord2462
ord2469
ord2057
ord2497
ord2473
ord2495
ord2474
ord2496
ord5151
ord2416
ord2582
ord2459
ord2634
ord2426
ord2632
ord2639
ord2638
ord2479
ord2448
ord2490
ord2279
ord2484
ord2611
ord2295
ord2050
ord5236
ord2384
ord2012
ord2458
ord2578
ord2183
ord2486
ord2515
ord2865
ord2043
ord2864

Exports

Exports

_DllMain@12
__fn_22_32770_0@8
__fn_22_32770_119@8
__fn_22_32770_120@8
__fn_22_32770_121@8
__fn_22_32770_122@8
__fn_22_32770_123@8
__fn_22_32770_124@8
__fn_22_32770_125@8
__fn_22_32770_126@8
__fn_22_32770_1@8
__fn_22_32770_23@8
__fn_22_32770_38@8
__fn_22_32787_34@8
__fn_22_32787_44@8
__fn_22_32792_34@8
__fn_22_32794_34@8
__fn_22_32798_34@8
__fn_22_32801_34@8
__fn_22_32802_34@8
__fn_22_32803_34@8
__fn_22_32804_34@8
__fn_22_32805_34@8
__fn_22_32806_34@8
__fn_22_32808_40@8
__fn_22_32808_414@8
__fn_22_32808_55@8
__fn_22_32810_34@8
__fn_35_32770_0@8
__fn_35_32770_1@8
__fn_35_32770_38@8
__fn_35_32787_34@8
_getVtableInfo_w_pre@12
_getVtableInfo_w_print@12

Sections

AUTO
Size: 543KB - Virtual size:

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.idata
Size: 2KB - Virtual size:

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

DGROUP
Size: 56KB - Virtual size:

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: 5KB - Virtual size:

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 1KB - Virtual size:

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 7KB - Virtual size:

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size:

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
下载说明.htm
.html .js polyglot
使用说明.txt
智能排课.exe
.exe windows:1 windows x86 arch:x86

c781fbc21f0deec4cce073cc3b8ca9e5

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE

Imports

user32

CharUpperBuffA

kernel32

CloseHandle
CreateEventA
CreateFileA
CreateThread
DeleteCriticalSection
EnterCriticalSection
ExitProcess
ExitThread
FreeEnvironmentStringsA
GetACP
GetCPInfo
GetCommandLineA
GetCommandLineW
GetCurrentThreadId
GetCurrentThread
GetEnvironmentStrings
GetFileType
GetLastError
GetModuleFileNameA
GetModuleFileNameW
GetModuleHandleA
GetOEMCP
GetProcAddress
GetStdHandle
GetVersion
InitializeCriticalSection
LeaveCriticalSection
LoadLibraryA
MultiByteToWideChar
SetConsoleCtrlHandler
SetEnvironmentVariableA
SetEnvironmentVariableW
SetEvent
SetLastError
SetStdHandle
SetUnhandledExceptionFilter
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
UnhandledExceptionFilter
VirtualAlloc
VirtualFree
VirtualQuery
WaitForSingleObject
WideCharToMultiByte
WriteFile

pbvm80

ord137

Sections

AUTO
Size: 16KB - Virtual size:

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.idata
Size: 1KB - Virtual size:

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

DGROUP
Size: 3KB - Virtual size:

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: 4KB - Virtual size:

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1KB - Virtual size:

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size:

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

Errors

General

Malware Config

Signatures

Files

Headers

File Characteristics

Exports

Exports

Sections

_FREQASM Size: 32KB - Virtual size: 28KB

.text Size: 312KB - Virtual size: 308KB

_INIT Size: 12KB - Virtual size: 8KB

.data Size: 16KB - Virtual size: 12KB

.rsrc Size: 88KB - Virtual size: 85KB

5c8ced2ee02b8ac71ee4a62110c1734c

Headers

File Characteristics

Imports

wsock32

kernel32

user32

msvcrt

Exports

Exports

Sections

.text Size: 128KB - Virtual size: 128KB

.rdata Size: 5KB - Virtual size: 4KB

.data Size: 85KB - Virtual size: 86KB

.idata Size: 2KB - Virtual size: 1KB

.reloc Size: 8KB - Virtual size: 8KB

284b2db66b3376c67d70487fc02bd715

Headers

File Characteristics

Imports

pbvm80

msvcrt

kernel32

user32

gdi32

comdlg32

winspool.drv

ole32

oleaut32

msvcirt

Exports

Exports

Sections

.text Size: 1.6MB - Virtual size: 1.6MB

.rdata Size: 40KB - Virtual size: 39KB

.data Size: 96KB - Virtual size: 110KB

.rsrc Size: 189KB - Virtual size: 189KB

.reloc Size: 60KB - Virtual size: 60KB

cf9bc3eeb472072ee606d5d8ea4d058c

Headers

File Characteristics

Imports

pbvm80

msvcrt

kernel32

user32

gdi32

odbc32

Exports

Exports

Sections

.text Size: 341KB - Virtual size: 340KB

.rdata Size: 5KB - Virtual size: 5KB

.data Size: 80KB - Virtual size: 80KB

.rsrc Size: 19KB - Virtual size: 19KB

.reloc Size: 17KB - Virtual size: 17KB

6d28d2c6b84c8669beb89b4250b398ff

Headers

File Characteristics

Imports

libjcc

msvcrt

kernel32

user32

_FREQASM
Size: 32KB - Virtual size: 28KB

.text
Size: 312KB - Virtual size: 308KB

_INIT
Size: 12KB - Virtual size: 8KB

.data
Size: 16KB - Virtual size: 12KB

.rsrc
Size: 88KB - Virtual size: 85KB

.text
Size: 128KB - Virtual size: 128KB

.rdata
Size: 5KB - Virtual size: 4KB

.data
Size: 85KB - Virtual size: 86KB

.idata
Size: 2KB - Virtual size: 1KB

.reloc
Size: 8KB - Virtual size: 8KB

.text
Size: 1.6MB - Virtual size: 1.6MB

.rdata
Size: 40KB - Virtual size: 39KB

.data
Size: 96KB - Virtual size: 110KB

.rsrc
Size: 189KB - Virtual size: 189KB

.reloc
Size: 60KB - Virtual size: 60KB

.text
Size: 341KB - Virtual size: 340KB

.rdata
Size: 5KB - Virtual size: 5KB

.data
Size: 80KB - Virtual size: 80KB

.rsrc
Size: 19KB - Virtual size: 19KB

.reloc
Size: 17KB - Virtual size: 17KB

.text
Size: 2.6MB - Virtual size: 2.6MB

.rdata
Size: 176KB - Virtual size: 175KB

.data
Size: 236KB - Virtual size: 255KB

.rsrc
Size: 438KB - Virtual size: 438KB

.reloc
Size: 113KB - Virtual size: 113KB

.text
Size: 31KB - Virtual size: 32KB

.data
Size: 10KB - Virtual size: 28KB

.tls
Size: 512B - Virtual size: 4KB

.idata
Size: 1KB - Virtual size: 4KB

.edata
Size: 512B - Virtual size: 4KB

.rsrc
Size: 512B - Virtual size: 4KB

.reloc
Size: 2KB - Virtual size: 4KB

AUTO
Size: 163KB - Virtual size:

.idata
Size: 2KB - Virtual size:

DGROUP
Size: 20KB - Virtual size:

.bss
Size: 5KB - Virtual size:

.edata
Size: 4KB - Virtual size:

.reloc
Size: 4KB - Virtual size:

.rsrc
Size: 1024B - Virtual size:

AUTO
Size: 66KB - Virtual size:

.idata
Size: 2KB - Virtual size:

DGROUP
Size: 4KB - Virtual size:

.bss
Size: 5KB - Virtual size: