NTWKS351_UPD[.]iso

Sharing

Copy URL Twitter E-mail

General

Target

NTWKS351_UPD.iso
Size

55.6MB
MD5

1503e98a99ada23697101e7b6a4a6519
SHA1

1ca175544bf5fc0946b6f8e583fc9e2e4a326b88
SHA256

6a5937b992b97ab21225042c7f78c948249c8d30e345798dfb6bcd0bbe28465b
SHA512

75bd73f22d88801fdf7143c0fa4a7d790abcea3a6515360d78dadc63b1f35e2c6d030fb2fdd7c380ba962f66d8467a276cec14719691ada7015a40ce2bd81f9d
SSDEEP

786432:21LHLwAIudlg2IkULt3Qmx7IVVz85l9pmY1Bl6ibhSNJOT85Un2CcmQZYK7Hp7f1:yLU/mi2IzBTpFX6FN0T8NCahpuPUx1

Score

3^/10

Malware Config

Signatures

Unsigned PE 115 IoCs

Checks for missing Authenticode signature.

resource
unpack002/I386/ABIOSDSK.SYS
unpack002/I386/AHA154X.SYS
unpack002/I386/AHA174X.SYS
unpack002/I386/AIC78XX.SYS
unpack002/I386/ALWAYS.SYS
unpack002/I386/AMI0NT.SYS
unpack002/I386/AMSINT.SYS
unpack002/I386/ARROW.SYS
unpack002/I386/ATAPI.SYS
unpack002/I386/ATDISK.SYS
unpack002/I386/AUTOCHK.EXE
unpack002/I386/BUSLOGIC.SYS
unpack002/I386/CDFS.SYS
unpack002/I386/CPQARRAY.SYS
unpack002/I386/DAC960NT.SYS
unpack002/I386/DELLDSA.SYS
unpack002/I386/DPTSCSI.SYS
unpack002/I386/DTC329X.SYS
unpack002/I386/EXPAND.EXE
unpack002/I386/FASTFAT.SYS
unpack002/I386/FD16_700.SYS
unpack002/I386/FD7000EX.SYS
unpack002/I386/FD8XX.SYS
unpack002/I386/FLOPPY.SYS
unpack002/I386/HAL486C.DLL
unpack002/I386/HALAPIC.DLL
unpack002/I386/HALMCA.DLL
unpack002/I386/HALMPS.DLL
unpack002/I386/HALNCR.DLL
unpack002/I386/I8042PRT.SYS
unpack002/I386/KBDBE.DLL
unpack002/I386/KBDBR.DLL
unpack002/I386/KBDBU.DLL
unpack002/I386/KBDCA.DLL
unpack002/I386/KBDCLASS.SYS
unpack002/I386/KBDCR.DLL
unpack002/I386/KBDCZ.DLL
unpack002/I386/KBDDA.DLL
unpack002/I386/KBDDV.DLL
unpack002/I386/KBDES.DLL
unpack002/I386/KBDFC.DLL
unpack002/I386/KBDFI.DLL
unpack002/I386/KBDFR.DLL
unpack002/I386/KBDGR.DLL
unpack002/I386/KBDHE.DLL
unpack002/I386/KBDHE220.DLL
unpack002/I386/KBDHE319.DLL
unpack002/I386/KBDHELA2.DLL
unpack002/I386/KBDHELA3.DLL
unpack002/I386/KBDHU.DLL
unpack002/I386/KBDHU1.DLL
unpack002/I386/KBDIC.DLL
unpack002/I386/KBDIT.DLL
unpack002/I386/KBDIT142.DLL
unpack002/I386/KBDLA.DLL
unpack002/I386/KBDNE.DLL
unpack002/I386/KBDNO.DLL
unpack002/I386/KBDPL.DLL
unpack002/I386/KBDPL1.DLL
unpack002/I386/KBDPO.DLL
unpack002/I386/KBDRO.DLL
unpack002/I386/KBDRU.DLL
unpack002/I386/KBDSF.DLL
unpack002/I386/KBDSG.DLL
unpack002/I386/KBDSL.DLL
unpack002/I386/KBDSP.DLL
unpack002/I386/KBDSW.DLL
unpack002/I386/KBDTUF.DLL
unpack002/I386/KBDTUQ.DLL
unpack002/I386/KBDUK.DLL
unpack002/I386/KBDUS.DLL
unpack002/I386/KBDUSL.DLL
unpack002/I386/KBDUSR.DLL
unpack002/I386/KBDUSX.DLL
unpack002/I386/MAKECAB.EXE
unpack002/I386/MITSUMI.SYS
unpack002/I386/MKECR5XX.SYS
unpack002/I386/NCR53C9X.SYS
unpack002/I386/NCRC700.SYS
unpack002/I386/NCRC710.SYS
unpack002/I386/NCRC810.SYS
unpack002/I386/NTDLL.DLL
unpack002/I386/NTFS.SYS
unpack002/I386/NTKRNLMP.EXE
unpack002/I386/OLISCSI.SYS
unpack002/I386/PCMCIA.SYS
unpack002/I386/PINBALL.SYS
unpack002/I386/QL10WNT.SYS
unpack002/I386/SCSICDRM.SYS
unpack002/I386/SCSIDISK.SYS
unpack002/I386/SCSIFLOP.SYS
unpack002/I386/SCSIPORT.SYS
unpack002/I386/SETUPDD.SYS
unpack002/I386/SLCD32.SYS
unpack002/I386/SPARROW.SYS
unpack002/I386/SPOCK.SYS
unpack002/I386/SYSTEM32/NTDLL.DLL
unpack002/I386/SYSTEM32/SMSS.EXE
unpack002/I386/T128.SYS
unpack002/I386/T13B.SYS
unpack002/I386/TMV1.SYS
unpack002/I386/ULTRA124.SYS
unpack002/I386/ULTRA14F.SYS
unpack002/I386/ULTRA24F.SYS
unpack002/I386/UNIATA.SYS
unpack002/I386/USETUP.EXE
unpack002/I386/VGA.SYS
unpack002/I386/VIADSK.SYS
unpack002/I386/VIDEOPRT.SYS
unpack002/I386/WD33C93.SYS
unpack002/I386/WINNT32.EXE
unpack002/MEDIA/AMOV4IE.EXE
unpack002/MEDIA/DIVX505.EXE
unpack002/MEDIA/INDEO/ISDBGN.DLL
unpack002/MEDIA/NSPLY351.EXE

Files

NTWKS351_UPD.iso
.iso
out.iso
.iso
CDROM.W
DISK1
DISK1.W
DISK10.W
DISK11.W
DISK12.W
DISK13.W
DISK14.W
DISK15.W
DISK16.W
DISK17.W
DISK18.W
DISK19.W
DISK2.W
DISK20.W
DISK21.W
DISK22.W
DISK23.W
DISK24.W
DISK25.W
DISK26.W
DISK27.W
DISK28.W
DISK29.W
DISK3.W
DISK30.W
DISK4.W
DISK5.W
DISK6.W
DISK7.W
DISK8.W
DISK9.W
DISK90.W
DISK91.W
DISK92.W
I386/256COLOR.BM_
.cab
256color.bmp
I386/3DGARRO.CU_
.cab
3dgarro.cur
I386/3DGMOVE.CU_
.cab
3dgmove.cur
I386/3DGNESW.CU_
.cab
3dgnesw.cur
I386/3DGNO.CU_
.cab
3dgno.cur
I386/3DGNS.CU_
.cab
3dgns.cur
I386/3DGNWSE.CU_
.cab
3dgnwse.cur
I386/3DGWE.CU_
.cab
I386/3DSMOVE.CU_
.cab
I386/3DSNS.CU_
.cab
I386/3DSNWSE.CU_
.cab
I386/3DWARRO.CU_
.cab
I386/3DWMOVE.CU_
.cab
I386/3DWNESW.CU_
.cab
I386/3DWNO.CU_
.cab
I386/3DWNS.CU_
.cab
I386/3DWNWSE.CU_
.cab
I386/3DWWE.CU_
.cab
I386/40291730.PP_
.cab
I386/40293930.PP_
.cab
I386/4MMDAT.SY_
.cab
I386/4MMSONY.SY_
.cab
I386/8514A.DL_
.cab
I386/8514A.SY_
.cab
I386/8514FIX.FO_
.cab
I386/8514FIXE.FO_
.cab
I386/8514FIXG.FO_
.cab
I386/8514FIXR.FO_
.cab
I386/8514FIXT.FO_
.cab
I386/8514OEM.FO_
.cab
I386/8514OEME.FO_
.cab
I386/8514OEMG.FO_
.cab
I386/8514OEMR.FO_
.cab
I386/8514OEMT.FO_
.cab
I386/8514SYS.FO_
.cab
I386/8514SYSE.FO_
.cab
I386/8514SYSG.FO_
.cab
I386/8514SYSR.FO_
.cab
I386/8514SYST.FO_
.cab
I386/AB32.DL_
.cab
I386/ABIOSDSK.SYS
.sys windows:3 windows x86 arch:x86

b8b8f071f102830f516c2ba75d0d9604

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

ntoskrnl.exe

KeI386AbiosCall
KeI386FlatToGdtSelector
ExAllocatePoolWithTag
IoCreateController
RtlFreeUnicodeString
KeInitializeDpc
IoCreateDevice
RtlAnsiStringToUnicodeString
RtlInitString
sprintf
ZwClose
ZwMakeTemporaryObject
ZwCreateDirectoryObject
KeI386ReleaseLid
KeInitializeTimer
IoAllocateController
IoAllocateAdapterChannel
KeSynchronizeExecution
KeSetTimer
MmMapLockedPages
memmove
IoStartNextPacket
IoFreeController
IoSetHardErrorOrVerifyDevice
KeCancelTimer
KeInsertQueueDpc
IoWriteErrorLogEntry
IoAllocateErrorLogEntry
IoConnectInterrupt
IoDeleteController
IoDisconnectInterrupt
ExFreePool
KeI386GetLid
IoGetConfigurationInformation
KeI386AllocateGdtSelectors
IofCompleteRequest
KeI386ReleaseGdtSelectors
IoStartPacket

hal

IoSetPartitionInformation
IoWritePartitionTable
IoFlushAdapterBuffers
IoFreeMapRegisters
KeStallExecutionProcessor
IoReadPartitionTable
HalGetInterruptVector
IoMapTransfer
HalGetAdapter

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 32B - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

INIT
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 960B - Virtual size: 936B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 352B - Virtual size: 334B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/AC500503.PP_
.cab
I386/ACLCONV.EX_
.cab
I386/ACLEDIT.DL_
.cab
I386/ADP.BI_
.cab
I386/ADVAPI32.DL_
.cab
I386/AFD.SY_
.cab
I386/AGFAP400.PP_
.cab
I386/AHA154X.SYS
.sys windows:3 windows x86 arch:x86

3ff663ac4f6c3e2f00f298fd26187c7e

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

scsiport.sys

ScsiPortGetDeviceBase
ScsiPortGetPhysicalAddress
ScsiPortLogError
ScsiPortGetUncachedExtension
ScsiPortWritePortUchar
ScsiPortGetBusData
ScsiPortFreeDeviceBase
ScsiPortConvertUlongToPhysicalAddress
ScsiPortReadPortUchar
ScsiPortInitialize
ScsiPortReadRegisterUchar
ScsiPortStallExecution
ScsiPortNotification
ScsiPortGetLogicalUnit
ScsiPortGetVirtualAddress
ScsiPortMoveMemory
ScsiPortCompleteRequest

Sections

.text
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

INIT
Size: 576B - Virtual size: 572B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 960B - Virtual size: 940B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 288B - Virtual size: 260B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/AHA174X.SYS
.sys windows:3 windows x86 arch:x86

1a3bffcadaf0f5ccfe6763e567bad75c

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

scsiport.sys

ScsiPortCompleteRequest
ScsiPortConvertUlongToPhysicalAddress
ScsiPortReadPortUchar
ScsiPortFreeDeviceBase
ScsiPortGetDeviceBase
ScsiPortNotification
ScsiPortGetPhysicalAddress
ScsiPortGetSrb
ScsiPortInitialize
ScsiPortLogError
ScsiPortGetVirtualAddress
ScsiPortWritePortUchar
ScsiPortReadPortUlong
ScsiPortMoveMemory
ScsiPortWritePortUlong
ScsiPortStallExecution

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

INIT
Size: 544B - Virtual size: 528B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 960B - Virtual size: 944B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 224B - Virtual size: 216B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/AIC78XX.SYS
.sys windows:3 windows x86 arch:x86

ed1f1f7bd981c78cb1c478be6b84692f

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

scsiport.sys

ScsiPortGetPhysicalAddress
ScsiPortWritePortUchar
ScsiPortLogError
ScsiPortInitialize
ScsiPortSetBusDataByOffset
ScsiPortGetBusData
ScsiPortReadPortUchar
ScsiPortGetUncachedExtension
ScsiPortGetDeviceBase
ScsiPortNotification
ScsiPortGetSrb
ScsiPortMoveMemory
ScsiPortCompleteRequest

Sections

.text
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

INIT
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 960B - Virtual size: 948B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 704B - Virtual size: 690B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/ALJII523.PP_
.cab
I386/ALRSVC.DL_
.cab
I386/ALWAYS.SYS
.sys windows:3 windows x86 arch:x86

a224f8be03b30536ef3076d71466bb66

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

scsiport.sys

ScsiPortReadPortBufferUshort
ScsiPortWritePortUchar
ScsiPortLogError
ScsiPortFreeDeviceBase
ScsiPortGetDeviceBase
ScsiPortConvertUlongToPhysicalAddress
ScsiPortWritePortUshort
ScsiPortWritePortBufferUshort
ScsiPortReadPortUchar
ScsiPortGetPhysicalAddress
ScsiPortNotification
ScsiPortCompleteRequest
ScsiPortStallExecution
ScsiPortGetLogicalUnit
ScsiPortGetUncachedExtension
ScsiPortInitialize

Sections

.text
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

INIT
Size: 576B - Virtual size: 558B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 960B - Virtual size: 960B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 384B - Virtual size: 376B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/AM1500T.SY_
.cab
I386/AMCHR518.PP_
.cab
I386/AMDDLG.DL_
.cab
I386/AMDNCDET.DL_
.cab
I386/AMDPCN.SY_
.cab
I386/AMI0NT.SYS
.sys windows:3 windows x86 arch:x86

cef71c57a62a410a305eee9fa0ea42f7

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

scsiport.sys

ScsiPortFreeDeviceBase
ScsiPortGetPhysicalAddress
ScsiPortLogError
ScsiPortGetUncachedExtension
ScsiPortConvertUlongToPhysicalAddress
ScsiPortGetDeviceBase
ScsiPortReadPortUchar
ScsiPortInitialize
ScsiPortWritePortUchar
ScsiPortStallExecution
ScsiPortNotification
ScsiPortGetVirtualAddress
ScsiPortMoveMemory
ScsiPortCompleteRequest

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 256B - Virtual size: 234B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

INIT
Size: 512B - Virtual size: 484B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 960B - Virtual size: 956B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 352B - Virtual size: 324B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/AMSINT.SYS
.sys windows:3 windows x86 arch:x86

7208a97e30a4539f40c98207b609c96b

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

scsiport.sys

ScsiPortReadPortUlong
ScsiPortNotification
ScsiPortCompleteRequest
ScsiPortGetLogicalUnit
ScsiPortGetSrb
ScsiPortReadPortUchar
ScsiPortGetVirtualAddress
ScsiPortWritePortUlong
ScsiPortLogError
ScsiPortStallExecution
ScsiPortWritePortUchar
ScsiPortGetPhysicalAddress
ScsiPortInitialize
ScsiPortGetUncachedExtension
ScsiPortConvertUlongToPhysicalAddress
ScsiPortGetDeviceBase
ScsiPortFreeDeviceBase
ScsiPortSetBusDataByOffset
ScsiPortGetBusData

Sections

.text
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

INIT
Size: 640B - Virtual size: 628B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 928B - Virtual size: 924B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 352B - Virtual size: 328B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/ANSI.SY_
.cab
I386/APLW8101.PP_
.cab
I386/APLWGRI.PP_
.cab
I386/APLWIIF1.PP_
.cab
I386/APLWIIG1.PP_
.cab
I386/APLWNTR1.PP_
.cab
I386/APLWSEL.PP_
.cab
I386/APP.IN_
.cab
I386/APP850.FO_
.cab
I386/APP852.FO_
.cab
I386/APP857.FO_
.cab
I386/APP866.FO_
.cab
I386/APPEND.EX_
.cab
I386/APPLE230.PP_
.cab
I386/APPLE380.PP_
.cab
I386/APPLE422.PP_
.cab
I386/APPSTAR2.AN_
.cab
I386/APPSTAR3.AN_
.cab
I386/APPSTART.AN_
.cab
I386/APS08522.PP_
.cab
I386/APS12522.PP_
.cab
I386/APS26522.PP_
.cab
I386/APS80522.PP_
.cab
I386/APTOLLD1.PP_
.cab
I386/APTOLLW1.PP_
.cab
I386/AP_NTXJ1.PP_
.cab
I386/ARCADE.BM_
.cab
I386/ARCHES.BM_
.cab
I386/ARCHQIC.SY_
.cab
I386/ARGYLE.BM_
.cab
I386/ARIAL.FO_
.cab
I386/ARIAL.TT_
.cab
I386/ARIALBD.FO_
.cab
I386/ARIALBD.TT_
.cab
I386/ARIALBI.FO_
.cab
I386/ARIALBI.TT_
.cab
I386/ARIALI.FO_
.cab
I386/ARIALI.TT_
.cab
I386/ARP.EX_
.cab
I386/ARROW.SYS
.sys windows:3 windows x86 arch:x86

f6107862ccdc0303765508f3bf4f1e1a

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

scsiport.sys

ScsiPortConvertUlongToPhysicalAddress
ScsiPortReadPortUchar
ScsiPortStallExecution
ScsiPortInitialize
ScsiPortGetPhysicalAddress
ScsiPortGetUncachedExtension
ScsiPortWritePortUchar
ScsiPortFreeDeviceBase
ScsiPortGetDeviceBase
ScsiPortNotification
ScsiPortGetSrb
ScsiPortCompleteRequest

Sections

.text
Size: 26KB - Virtual size: 26KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

Init
Size: 288B - Virtual size: 283B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

INIT
Size: 448B - Virtual size: 424B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 960B - Virtual size: 932B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/AST__470.PP_
.cab
I386/ASYCFILT.DL_
.cab
I386/ASYNCMAC.SY_
.cab
I386/AT.EX_
.cab
I386/ATAPI.SYS
.sys windows:3 windows x86 arch:x86

66328a42ca52b0b262b5e80459d6aaab

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

scsiport.sys

ScsiPortConvertUlongToPhysicalAddress
ScsiPortMoveMemory
ScsiPortReadPortBufferUshort
ScsiPortStallExecution
ScsiPortReadPortUchar
ScsiPortWritePortUchar
ScsiPortNotification
ScsiPortCompleteRequest
ScsiPortLogError
ScsiPortFreeDeviceBase
ScsiPortGetDeviceBase
ScsiPortReadPortUshort
ScsiPortGetPhysicalAddress
ScsiPortGetUncachedExtension
ScsiPortGetBusData
ScsiPortReadPortBufferUlong
ScsiPortWritePortBufferUlong
ScsiPortWritePortBufferUshort
ScsiPortInitialize
ScsiPortWritePortUlong
ScsiPortReadPortUlong
ScsiPortSetBusDataByOffset

Sections

.text
Size: 18KB - Virtual size: 18KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 928B - Virtual size: 920B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 608B - Virtual size: 600B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/ATDISK.SYS
.sys windows:4 windows x86 arch:x86

00e99dd094253b91efd45796fd1855e4

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

ntoskrnl.exe

RtlAnsiStringToUnicodeString
RtlInitString
sprintf
IoCreateDevice
HalDispatchTable
KeInitializeDpc
IoStartTimer
IoInitializeTimer
ZwMakeTemporaryObject
ZwCreateDirectoryObject
IofCompleteRequest
IoStartPacket
IoAllocateController
MmMapLockedPages
KeSynchronizeExecution
KeInsertQueueDpc
IoStartNextPacketByKey
IoFreeController
IoDeleteDevice
RtlFreeUnicodeString
MmMapIoSpace
IoReportResourceUsage
RtlCompareMemory
ZwSetValueKey
memchr
ZwCreateKey
RtlInitUnicodeString
RtlAppendUnicodeStringToString
RtlIntegerToUnicodeString
RtlCopyUnicodeString
RtlAppendUnicodeToString
ZwQueryValueKey
ZwOpenKey
strncmp
MmUnmapIoSpace
RtlEqualUnicodeString
IoQueryDeviceDescription
IoGetConfigurationInformation
IoStopTimer
IoConnectInterrupt
ZwClose
IoCreateController
memmove
IoDisconnectInterrupt
IoDeleteController
ExAllocatePoolWithTag
RtlQueryRegistryValues
DbgBreakPoint
IoWriteErrorLogEntry
ExFreePool
IoAllocateErrorLogEntry

hal

HalSetBusData
HalGetBusData
HalTranslateBusAddress
READ_PORT_BUFFER_USHORT
HalGetInterruptVector
READ_PORT_UCHAR
WRITE_PORT_BUFFER_USHORT
KeStallExecutionProcessor
IoWritePartitionTable
IoReadPartitionTable
IoSetPartitionInformation
WRITE_PORT_UCHAR

Sections

.text
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 448B - Virtual size: 421B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 64B - Virtual size: 48B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

INIT
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 928B - Virtual size: 916B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 960B - Virtual size: 956B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/ATI.DL_
.cab
I386/ATI.SY_
.cab
I386/ATKCTRS.DL_
.cab
I386/ATSVC.EX_
.cab
I386/ATTRIB.EX_
.cab
I386/AUDIOCDC.HL_
.cab
I386/AUTOCHK.EXE
.sys windows:3 windows x86 arch:x86

15fca68d3cb4799a14b8a2ec54735dd6

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

ntdll

RtlExtendedIntegerMultiply
wcsstr
NtClose
NtQueryValueKey
NtOpenKey
RtlInitUnicodeString
NtQueryInformationFile
NtOpenFile
NtDeviceIoControlFile
NtReadFile
NtWriteFile
NtFsControlFile
memmove
RtlAllocateHeap
NtCurrentTeb
RtlFreeHeap
wcscmp
_wcsicmp
RtlOemToUnicodeN
RtlMultiByteToUnicodeN
sprintf
RtlUnicodeToOemN
RtlUnicodeToMultiByteN
_wcsupr
_wcslwr
RtlDosPathNameToNtPathName_U
NtShutdownSystem
NtAdjustPrivilegesToken
RtlConvertUlongToLargeInteger
NtOpenProcessToken
NtQuerySystemTime
RtlTimeToSecondsSince1970
RtlSystemTimeToLocalTime
NtQuerySystemInformation
NtQuerySymbolicLinkObject
NtOpenSymbolicLinkObject
RtlExpandEnvironmentStrings_U
NtSetInformationFile
RtlConvertLongToLargeInteger
NtCreateFile
RtlLengthSid
RtlSizeHeap
NtDisplayString
wcslen
RtlLargeIntegerDivide
RtlQueryRegistryValues
RtlWriteRegistryValue
RtlSubAuthoritySid
RtlInitializeSid
RtlLengthRequiredSid
RtlAddAce
RtlCopySid
RtlQueryInformationAcl
RtlCreateAcl
RtlLengthSecurityDescriptor
RtlValidSecurityDescriptor
RtlNewSecurityObject
RtlSetDaclSecurityDescriptor
RtlSetGroupSecurityDescriptor
RtlSetOwnerSecurityDescriptor
RtlCreateSecurityDescriptor
RtlAddAccessAllowedAce
RtlTimeToTimeFields
RtlFreeUnicodeString
RtlFormatMessage
RtlAnsiStringToUnicodeString
RtlInitAnsiString
RtlFindMessage
wcscpy
swprintf
RtlUpcaseUnicodeString
RtlDecompressBuffer
strchr
RtlDestroyHeap
RtlCreateHeap
RtlSetBits
RtlInitializeBitMap
RtlInsertElementGenericTable
RtlInitializeGenericTable
RtlDeleteElementGenericTable
RtlFindSetBits
RtlClearBits
RtlLookupElementGenericTable
RtlNumberOfSetBits
RtlEnumerateGenericTableWithoutSplaying
_chkstk
NtTerminateProcess
DbgBreakPoint
RtlUnicodeStringToAnsiString
RtlNormalizeProcessParams

Sections

.text
Size: 310KB - Virtual size: 309KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 59KB - Virtual size: 143KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 456B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 67KB - Virtual size: 66KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/AUTOCONV.EX_
.cab
I386/AUTOEXEC.NT_
.cab
I386/AUTOSETP.EX_
.cab
I386/AVICAP.DL_
.cab
I386/AVICAP32.DL_
.cab
I386/AVIFIL32.DL_
.cab
I386/AVIFILE.DL_
.cab
I386/A_PNT518.PP_
.cab
I386/BACKUP.CN_
.cab
I386/BACKUP.EX_
.cab
I386/BACKUP.FT_
.cab
I386/BACKUP.HL_
.cab
I386/BALL.BM_
.cab
I386/BANANA.AN_
.cab
I386/BARBER.AN_
.cab
I386/BASESRV.DL_
.cab
I386/BEEP.SY_
.cab
I386/BHMON.DL_
.cab
I386/BHNETB.DL_
.cab
I386/BHNT.SY_
.cab
I386/BHSUPP.DL_
.cab
I386/BIOS1.RO_
.cab
I386/BIOS2.RO_
.cab
I386/BLACK16.SC_
.cab
I386/BOOTFIX.BIN
I386/BOOTOK.EX_
.cab
I386/BOOTVRFY.EX_
.cab
I386/BRHJ770.DL_
.cab
I386/BROTHER9.DL_
.cab
I386/BROTHR24.DL_
.cab
I386/BROWSER.DL_
.cab
I386/BUSLOGIC.SYS
.sys windows:3 windows x86 arch:x86

add80609ca4ae3cbfeae76b434d170a1

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

scsiport.sys

ScsiPortGetDeviceBase
ScsiPortReadPortUchar
ScsiPortGetPhysicalAddress
ScsiPortLogError
ScsiPortGetUncachedExtension
ScsiPortWritePortUchar
ScsiPortConvertUlongToPhysicalAddress
ScsiPortValidateRange
ScsiPortInitialize
ScsiPortFreeDeviceBase
ScsiPortNotification
ScsiPortGetLogicalUnit
ScsiPortCompleteRequest
ScsiPortStallExecution
ScsiPortGetVirtualAddress
ScsiPortMoveMemory

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 64B - Virtual size: 52B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

INIT
Size: 544B - Virtual size: 542B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 960B - Virtual size: 948B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 288B - Virtual size: 270B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/BUSMOUSE.SY_
.cab
I386/CACLS.EX_
.cab
I386/CALC.CN_
.cab
I386/CALC.EX_
.cab
I386/CALC.HL_
.cab
I386/CANON330.DL_
.cab
I386/CANON800.DL_
.cab
I386/CANONLBP.DL_
.cab
I386/CANYON.MI_
.cab
I386/CARDFILE.CN_
.cab
I386/CARDFILE.EX_
.cab
I386/CARDFILE.HL_
.cab
I386/CARDS.DL_
.cab
I386/CARS.BM_
.cab
I386/CASTLE.BM_
.cab
I386/CDAUDIO.SY_
.cab
I386/CDFS.SYS
.sys windows:4 windows x86 arch:x86

8e03fd404dbd16a564b74abb66b8f5a4

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

ntoskrnl.exe

ExAllocatePoolWithTag
CcPurgeCacheSection
ExLocalTimeToSystemTime
RtlTimeFieldsToTime
CcSetFileSizes
CcInitializeCacheMap
IoCreateStreamFileObject
CcUninitializeCacheMap
CcMdlReadComplete
InterlockedDecrement
InterlockedIncrement
MmFlushImageSection
KeLeaveCriticalRegion
IoIsOperationSynchronous
KeEnterCriticalRegion
KeBugCheckEx
FsRtlIsNtstatusExpected
IoSetDeviceToVerify
IoRaiseHardError
IoGetDeviceToVerify
IofCompleteRequest
IoSetTopLevelIrp
IoGetInitialStack
IoGetTopLevelIrp
FsRtlFastCheckLockForRead
IoGetCurrentProcess
IoRegisterFileSystem
IoCreateDevice
RtlInitUnicodeString
MmQuerySystemSize
KeInitializeEvent
ExInitializeResourceLite
FsRtlCopyRead
IoRemoveShareAccess
FsRtlOplockIsFastIoPossible
FsRtlFastUnlockAll
IoGetRequestorProcess
FsRtlCheckOplock
FsRtlNotifyCleanup
ExAcquireResourceExclusiveLite
ExQueueWorkItem
FsRtlDoesNameContainWildCards
memmove
IoUpdateShareAccess
IoCheckShareAccess
IoSetShareAccess
FsRtlCurrentBatchOplock
IofCallDriver
MmMapLockedPages
FsRtlNormalizeNtstatus
KeWaitForSingleObject
IoBuildSynchronousFsdRequest
IoFreeMdl
KeGetCurrentThread
ObfDereferenceObject
IoBuildDeviceIoControlRequest
MmBuildMdlForNonPagedPool
IoFreeIrp
IoBuildPartialMdl
IoMakeAssociatedIrp
KeResetEvent
KeSetEvent
InterlockedExchange
ExReleaseResourceForThreadLite
FsRtlNotifyFullChangeDirectory
RtlUpcaseUnicodeString
CcMapData
RtlOemToUnicodeN
ExAcquireResourceSharedLite
IoDeleteDevice
KeInitializeSpinLock
RtlOemStringToCountedUnicodeString
FsRtlOplockFsctrl
IoReleaseVpbSpinLock
IoAcquireVpbSpinLock
ObReferenceObjectByHandle
IoFileObjectType
SeSinglePrivilegeCheck
FsRtlProcessFileLock
FsRtlPrivateLock
FsRtlFastUnlockSingle
FsRtlFastUnlockAllByKey
FsRtlIsFatDbcsLegal
RtlUnicodeStringToCountedOemString
RtlGenerate8dot3Name
FsRtlIsNameInExpression
RtlCompareMemory
RtlDelete
RtlSplay
CcMdlRead
CcCopyRead
CcSetReadAheadGranularity
FsRtlCheckLockForReadAccess
ExIsResourceAcquiredSharedLite
RtlInitializeGenericTable
FsRtlNotifyInitializeSync
FsRtlNotifyUninitializeSync
ExDeleteResourceLite
RtlInsertElementGenericTable
FsRtlInitializeFileLock
RtlDeleteElementGenericTable
RtlLookupElementGenericTable
RtlEnumerateGenericTableWithoutSplaying
FsRtlUninitializeOplock
FsRtlUninitializeFileLock
IoSetHardErrorOrVerifyDevice
IoVerifyVolume
RtlUnwind
CcUnpinData
ExRaiseStatus
ExReleaseResourceLite
MmProbeAndLockPages
ExFreePool
IoAllocateMdl

hal

KfAcquireSpinLock
KfReleaseSpinLock
ExAcquireFastMutex
ExReleaseFastMutex
KeGetCurrentIrql

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 544B - Virtual size: 536B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

PAGE
Size: 43KB - Virtual size: 43KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

INIT
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 928B - Virtual size: 924B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/CDPLAYER.CN_
.cab
I386/CDPLAYER.EX_
.cab
I386/CDPLAYER.FT_
.cab
I386/CDPLAYER.HL_
.cab
I386/CFGMGR32.DL_
.cab
I386/CFM30.DL_
.cab
I386/CFM30U.DL_
.cab
I386/CFMO30.DL_
.cab
I386/CFMO30U.DL_
.cab
I386/CG94_493.PP_
.cab
I386/CGA40737.FO_
.cab
I386/CGA40850.FO_
.cab
I386/CGA40852.FO_
.cab
I386/CGA40857.FO_
.cab
I386/CGA40866.FO_
.cab
I386/CGA40869.FO_
.cab
I386/CGA40WOA.FO_
.cab
I386/CGA80737.FO_
.cab
I386/CGA80850.FO_
.cab
I386/CGA80852.FO_
.cab
I386/CGA80857.FO_
.cab
I386/CGA80866.FO_
.cab
I386/CGA80869.FO_
.cab
I386/CGA80WOA.FO_
.cab
I386/CHARMAP.CN_
.cab
I386/CHARMAP.EX_
.cab
I386/CHARMAP.HL_
.cab
I386/CHCP.CO_
.cab
I386/CHIMES.WA_
.cab
I386/CHITZ.BM_
.cab
I386/CHKDSK.EX_
.cab
I386/CHORD.WA_
.cab
I386/CIRRUS.DL_
.cab
I386/CIRRUS.SY_
.cab
I386/CIT24US.DL_
.cab
I386/CIT9US.DL_
.cab
I386/CITOH.DL_
.cab
I386/CLB.DL_
.cab
I386/CLIP01.SE_
.cab
I386/CLIP02.SE_
.cab
I386/CLIP03.SE_
.cab
I386/CLIPBRD.CN_
.cab
I386/CLIPBRD.EX_
.cab
I386/CLIPBRD.FT_
.cab
I386/CLIPBRD.HL_
.cab
I386/CLIPSRV.EX_
.cab
I386/CLOCK.AV_
.cab
I386/CLOCK.EX_
.cab
I386/CMD.EX_
.cab
I386/CMOS.RA_
.cab
I386/CNLBP4_1.PP_
.cab
I386/CNLBP8R1.PP_
.cab
I386/CNLBP8T1.PP_
.cab
I386/CNLBP8_1.PP_
.cab
I386/CN_500J1.PP_
.cab
I386/CN_500_1.PP_
.cab
I386/COIN.AN_
.cab
I386/COLORQ.PP_
.cab
I386/COMCAT.DL_
.cab
I386/COMCTL32.DL_
.cab
I386/COMDLG32.DL_
.cab
I386/COMM.DR_
.cab
I386/COMM01.SE_
.cab
I386/COMM02.SE_
.cab
I386/COMMAND.CO_
.cab
I386/COMMDLG.DL_
.cab
I386/COMP.EX_
.cab
I386/COMPACT.EX_
.cab
I386/COMPOBJ.DL_
.cab
I386/CONFIG.NT_
.cab
I386/CONN01.SE_
.cab
I386/CONN02.SE_
.cab
I386/CONSOLE.CP_
.cab
I386/CONTROL.CN_
.cab
I386/CONTROL.EX_
.cab
I386/CONTROL.HL_
.cab
I386/CONVERT.EX_
.cab
I386/COUNTER.AN_
.cab
I386/COUNTRY.SY_
.cab
I386/COUR.FO_
.cab
I386/COUR.TT_
.cab
I386/COURBD.FO_
.cab
I386/COURBD.TT_
.cab
I386/COURBI.FO_
.cab
I386/COURBI.TT_
.cab
I386/COURE.FO_
.cab
I386/COUREE.FO_
.cab
I386/COUREG.FO_
.cab
I386/COURER.FO_
.cab
I386/COURET.FO_
.cab
I386/COURF.FO_
.cab
I386/COURFE.FO_
.cab
I386/COURFG.FO_
.cab
I386/COURFR.FO_
.cab
I386/COURFT.FO_
.cab
I386/COURI.FO_
.cab
I386/COURI.TT_
.cab
I386/CPPMQ151.PP_
.cab
I386/CPPMQ201.PP_
.cab
I386/CPQARRAY.SYS
.sys windows:3 windows x86 arch:x86

4948c4e3596491c3ef5b20f712810c45

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

scsiport.sys

ScsiPortGetSrb
ScsiPortWritePortUchar
ScsiPortStallExecution
ScsiPortNotification
ScsiPortGetPhysicalAddress
ScsiPortWritePortUshort
ScsiPortWritePortUlong
ScsiPortReadPortUchar
ScsiPortLogError
ScsiPortGetBusData
ScsiPortGetVirtualAddress
ScsiPortConvertUlongToPhysicalAddress
ScsiPortReadPortUlong
ScsiPortGetLogicalUnit
ScsiPortMoveMemory
ScsiPortGetUncachedExtension
ScsiPortGetDeviceBase
ScsiPortInitialize

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

INIT
Size: 608B - Virtual size: 590B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 960B - Virtual size: 936B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 192B - Virtual size: 166B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/CREAT01.SE_
.cab
I386/CREAT02.SE_
.cab
I386/CROSS.CU_
.cab
I386/CRTDLL.DL_
.cab
I386/CSRSRV.DL_
.cab
I386/CSRSS.EX_
.cab
I386/CTL3D32.DL_
.cab
I386/CTYPE.NL_
.cab
I386/CUFAT.DL_
.cab
I386/CUHPFS.DL_
.cab
I386/CURSORS.CP_
.cab
I386/CXBIOS.BI_
.cab
I386/CXFEP.BI_
.cab
I386/C_037.NL_
.cab
I386/C_10000.NL_
.cab
I386/C_10001.NL_
.cab
I386/C_10006.NL_
.cab
I386/C_10007.NL_
.cab
I386/C_10029.NL_
.cab
I386/C_10079.NL_
.cab
I386/C_10081.NL_
.cab
I386/C_1026.NL_
.cab
I386/C_1250.NL_
.cab
I386/C_1251.NL_
.cab
I386/C_1252.NLS
I386/C_1253.NL_
.cab
I386/C_1254.NL_
.cab
I386/C_20261.NL_
.cab
I386/C_28592.NL_
.cab
I386/C_437.NLS
I386/C_500.NL_
.cab
I386/C_737.NL_
.cab
I386/C_850.NLS
I386/C_852.NL_
.cab
I386/C_855.NL_
.cab
I386/C_857.NL_
.cab
I386/C_860.NL_
.cab
I386/C_861.NL_
.cab
I386/C_863.NL_
.cab
I386/C_865.NL_
.cab
I386/C_866.NL_
.cab
I386/C_869.NL_
.cab
I386/C_875.NL_
.cab
I386/DAC960NT.SYS
.sys windows:3 windows x86 arch:x86

8d64022e76ba489b3b745a14827d923c

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

scsiport.sys

ScsiPortFreeDeviceBase
ScsiPortReadPortUchar
ScsiPortStallExecution
ScsiPortWritePortUlong
ScsiPortReadPortUshort
ScsiPortGetPhysicalAddress
ScsiPortGetUncachedExtension
ScsiPortConvertUlongToPhysicalAddress
ScsiPortWritePortUchar
ScsiPortReadPortUlong
ScsiPortGetDeviceBase
ScsiPortLogError
ScsiPortWritePortUshort
ScsiPortCompleteRequest
ScsiPortNotification
ScsiPortInitialize

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

INIT
Size: 544B - Virtual size: 544B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 960B - Virtual size: 944B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 288B - Virtual size: 286B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/DATAP462.PP_
.cab
I386/DC1152F1.PP_
.cab
I386/DC1152_1.PP_
.cab
I386/DC2150P1.PP_
.cab
I386/DC21X4.HL_
.cab
I386/DC21X4.SY_
.cab
I386/DC2250P1.PP_
.cab
I386/DC3500_1.PP_
.cab
I386/DC5100N1.PP_
.cab
I386/DCD11501.PP_
.cab
I386/DCD21501.PP_
.cab
I386/DCD22501.PP_
.cab
I386/DCIMAN32.DL_
.cab
I386/DCKPS201.PP_
.cab
I386/DCKPS321.PP_
.cab
I386/DCKPS401.PP_
.cab
I386/DCLF02F1.PP_
.cab
I386/DCLF02_1.PP_
.cab
I386/DCLN03R1.PP_
.cab
I386/DCLPS171.PP_
.cab
I386/DCLPS201.PP_
.cab
I386/DCLPS321.PP_
.cab
I386/DCLPS401.PP_
.cab
I386/DCPS1721.PP_
.cab
I386/DCPS1761.PP_
.cab
I386/DCTPS201.PP_
.cab
I386/DDEML.DL_
.cab
I386/DDESHARE.CN_
.cab
I386/DDESHARE.EX_
.cab
I386/DDESHARE.HL_
.cab
I386/DEBUG.EX_
.cab
I386/DEC24PIN.DL_
.cab
I386/DEC3200.DL_
.cab
I386/DEC3250.PP_
.cab
I386/DEC9PIN.DL_
.cab
I386/DECCOLOR.PP_
.cab
I386/DECPSMON.DL_
.cab
I386/DECPSMON.HL_
.cab
I386/DEFAULT._
.cab
I386/DEFDDI.HL_
.cab
I386/DEFEA.DL_
.cab
I386/DEFEA.SY_
.cab
I386/DEFPA.DL_
.cab
I386/DEFPA.SY_
.cab
I386/DELLDSA.SYS
.sys windows:3 windows x86 arch:x86

1c8e49d2c4d7658b4247245c3ff385dc

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

scsiport.sys

ScsiPortReadPortUshort
ScsiPortStallExecution
ScsiPortReadPortUchar
ScsiPortGetPhysicalAddress
ScsiPortWritePortUlong
ScsiPortNotification
ScsiPortCompleteRequest
ScsiPortWritePortUchar
ScsiPortGetBusData
ScsiPortGetUncachedExtension
ScsiPortLogError
ScsiPortGetDeviceBase
ScsiPortInitialize

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

INIT
Size: 448B - Virtual size: 438B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 928B - Virtual size: 924B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 192B - Virtual size: 172B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/DELL_DGX.SY_
.cab
I386/DEMIL32.DL_
.cab
I386/DGCONFIG.CN_
.cab
I386/DGCONFIG.DL_
.cab
I386/DGCONFIG.HL_
.cab
I386/DHCPCSVC.DL_
.cab
I386/DHCPSAPI.DL_
.cab
I386/DICONIX.DL_
.cab
I386/DIGIFEP5.SY_
.cab
I386/DIGIINST.DL_
.cab
I386/DING.WA_
.cab
I386/DINOSAU2.AN_
.cab
I386/DINOSAUR.AN_
.cab
I386/DISK1
I386/DISKCOMP.CO_
.cab
I386/DISKCOPY.CO_
.cab
I386/DISKDUMP.SY_
.cab
I386/DISKPERF.EX_
.cab
I386/DISKPERF.SY_
.cab
I386/DISPLAY.CP_
.cab
I386/DLC.SY_
.cab
I386/DLCAPI.DL_
.cab
I386/DLTTAPE.SY_
.cab
I386/DOS737.FO_
.cab
I386/DOS869.FO_
.cab
I386/DOSAPP.FO_
.cab
I386/DOSCALLS.DL_
.cab
I386/DOSHELP.HL_
.cab
I386/DOSKEY.EX_
.cab
I386/DOSNET.INF
I386/DOSX.EX_
.cab
I386/DP4TY161.PP_
.cab
I386/DP4TY201.PP_
.cab
I386/DP4TYP81.PP_
.cab
I386/DPL15601.PP_
.cab
I386/DPL15804.PP_
.cab
I386/DPL20804.PP_
.cab
I386/DPLZ9601.PP_
.cab
I386/DPTSCSI.SYS
.sys windows:3 windows x86 arch:x86

714a393ef145afb209bc6f55e10fac9c

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

scsiport.sys

ScsiPortLogError
ScsiPortConvertUlongToPhysicalAddress
ScsiPortGetDeviceBase
ScsiPortFreeDeviceBase
ScsiPortSetBusDataByOffset
ScsiPortGetBusData
ScsiPortReadPortUshort
ScsiPortStallExecution
ScsiPortNotification
ScsiPortGetSrb
ScsiPortInitialize
ScsiPortGetLogicalUnit
ScsiPortReadPortUchar
ScsiPortMoveMemory
ScsiPortWritePortUchar
ScsiPortWritePortUshort
ScsiPortReadPortUlong
ScsiPortGetPhysicalAddress
ScsiPortGetUncachedExtension

Sections

.text
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

INIT
Size: 640B - Virtual size: 622B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 960B - Virtual size: 952B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 544B - Virtual size: 542B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/DP_US470.PP_
.cab
I386/DRIVERS.DL_
.cab
I386/DRUM.AN_
.cab
I386/DRWATSON.EX_
.cab
I386/DRWTSN32.CN_
.cab
I386/DRWTSN32.EX_
.cab
I386/DRWTSN32.HL_
.cab
I386/DTC329X.SYS
.sys windows:3 windows x86 arch:x86

d73357cc77dded6c850ea0794a540c86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

scsiport.sys

ScsiPortReadPortUchar
ScsiPortGetPhysicalAddress
ScsiPortLogError
ScsiPortGetUncachedExtension
ScsiPortFreeDeviceBase
ScsiPortConvertUlongToPhysicalAddress
ScsiPortStallExecution
ScsiPortWritePortUchar
ScsiPortInitialize
ScsiPortGetDeviceBase
ScsiPortNotification
ScsiPortGetLogicalUnit
ScsiPortGetVirtualAddress
ScsiPortMoveMemory
ScsiPortCompleteRequest

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

INIT
Size: 544B - Virtual size: 514B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 960B - Virtual size: 940B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 256B - Virtual size: 256B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/EDIT.CO_
.cab
I386/EDIT.HL_
.cab
I386/EDLIN.EX_
.cab
I386/EE16.SY_
.cab
I386/EGA.CP_
.cab
I386/EGA40737.FO_
.cab
I386/EGA40850.FO_
.cab
I386/EGA40852.FO_
.cab
I386/EGA40857.FO_
.cab
I386/EGA40866.FO_
.cab
I386/EGA40869.FO_
.cab
I386/EGA40WOA.FO_
.cab
I386/EGA80737.FO_
.cab
I386/EGA80850.FO_
.cab
I386/EGA80852.FO_
.cab
I386/EGA80857.FO_
.cab
I386/EGA80866.FO_
.cab
I386/EGA80869.FO_
.cab
I386/EGA80WOA.FO_
.cab
I386/EGYPT.BM_
.cab
I386/ELNK16.SY_
.cab
I386/ELNK3.SY_
.cab
I386/ELNKII.SY_
.cab
I386/ELNKMC.SY_
.cab
I386/EP826051.PP_
.cab
I386/EPL3KF21.PP_
.cab
I386/EPL3KF51.PP_
.cab
I386/EPL75523.PP_
.cab
I386/EPSON24.DL_
.cab
I386/EPSON9.DL_
.cab
I386/ESCP2E.DL_
.cab
I386/ESCP2MS.DL_
.cab
I386/ET4000.SY_
.cab
I386/EVENTLOG.DL_
.cab
I386/EVENTVWR.CN_
.cab
I386/EVENTVWR.EX_
.cab
I386/EVENTVWR.FT_
.cab
I386/EVENTVWR.HL_
.cab
I386/EXABYTE1.SY_
.cab
I386/EXABYTE2.SY_
.cab
I386/EXE2BIN.EX_
.cab
I386/EXPAND.EXE
.exe windows:3 windows x86 arch:x86

9e9507173984b7e7f366e91b6c6ecf31

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

user32

CharNextA
IsCharLowerA
IsCharUpperA
CharToOemA
LoadStringA

kernel32

FindFirstFileA
WideCharToMultiByte
lstrcpyA
GetFullPathNameA
lstrcatA
lstrlenA
SetFileTime
GetFileTime
GlobalFree
GlobalAlloc
LocalAlloc
LocalFree
_lclose
_llseek
_lopen
_lcreat
_lwrite
_lread
lstrcmpA
GetLastError
DeleteFileA
GetFileSize
GetVersion
GetEnvironmentStrings
GetCommandLineA
GetModuleFileNameA
FindClose
FindNextFileA
LCMapStringW
MultiByteToWideChar
ExitProcess
RtlUnwind
UnhandledExceptionFilter
GetStdHandle
GetFileType
GetStartupInfoA
GetProcessHeap
WriteFile
HeapAlloc
HeapFree
GetStringTypeW
FlushFileBuffers
SetFilePointer
SetStdHandle
CloseHandle
GetFileAttributesA

Sections

.text
Size: 25KB - Virtual size: 25KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/F71RX503.PP_
.cab
I386/FASTFAT.SYS
.sys windows:3 windows x86 arch:x86

8147b4ccb925c809c68431517edd8d33

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

ntoskrnl.exe

NlsMbOemCodePageTag
ExConvertExclusiveToSharedLite
RtlInitializeBitMap
CcInitializeCacheMap
FsRtlRemoveMcbEntry
MmMapLockedPages
FsRtlIsTotalDeviceFailure
ExFreePool
CcUnpinData
RtlSetBits
RtlClearBits
RtlUnwind
CcCanIWrite
CcDeferWrite
FsRtlCheckLockForWriteAccess
ObReferenceObjectByPointer
CcPrepareMdlWrite
IoVerifyVolume
RtlEqualString
FsRtlBalanceReads
IoBuildAsynchronousFsdRequest
RtlTimeFieldsToTime
RtlTimeToTimeFields
RtlSplay
RtlDelete
RtlDowncaseUnicodeString
ExfInterlockedPushEntryList
ExfInterlockedPopEntryList
RtlFreeUnicodeString
FsRtlInitializeFileLock
FsRtlInitializeOplock
FsRtlUninitializeOplock
FsRtlUninitializeFileLock
FsRtlAllocateResource
FsRtlNotifyUninitializeSync
FsRtlNotifyInitializeSync
KeInitializeTimer
KeInitializeDpc
ExDeleteResourceLite
ExAcquireSharedWaitForExclusive
ExGetSharedWaiterCount
ExGetExclusiveWaiterCount
MmIsRecursiveIoFault
ExIsResourceAcquiredSharedLite
FsRtlCheckLockForReadAccess
CcSetReadAheadGranularity
CcCopyRead
CcMdlRead
FsRtlPostStackOverflow
FsRtlPostPagingFileStackOverflow
IoGetInitialStack
RtlGenerate8dot3Name
FsRtlIsDbcsInExpression
FsRtlProcessFileLock
FsRtlFastUnlockAllByKey
FsRtlFastUnlockSingle
FsRtlPrivateLock
IoBuildSynchronousFsdRequest
IoFileObjectType
ObReferenceObjectByHandle
RtlUnicodeStringToCountedOemString
CcIsThereDirtyData
FsRtlOplockFsctrl
RtlOemStringToCountedUnicodeString
ZwOpenKey
ZwQueryValueKey
ZwClose
RtlInitUnicodeString
IoCreateDevice
FsRtlCopyRead
FsRtlCopyWrite
ExInitializeResourceLite
KeInitializeSpinLock
MmQuerySystemSize
ExInitializeZone
IoRegisterFileSystem
IoIsSystemThread
IoRaiseInformationalHardError
ExAcquireResourceSharedLite
FsRtlFastCheckLockForRead
FsRtlFastCheckLockForWrite
IoGetTopLevelIrp
IoGetDeviceToVerify
IoRaiseHardError
IoSetDeviceToVerify
CcCopyWrite
NlsOemLeadByteInfo
RtlCompareString
RtlUpperString
IoCheckEaBufferValidity
FsRtlIsNameInExpression
FsRtlAreNamesEqual
RtlCompareMemory
FsRtlDoesNameContainWildCards
RtlFreeOemString
FsRtlAddMcbEntry
ExSystemTimeToLocalTime
RtlxOemStringToUnicodeSize
RtlOemToUnicodeN
IoBuildDeviceIoControlRequest
CcSetFileSizes
FsRtlAllocatePoolWithTag
ExAllocatePoolWithTag
ExfInterlockedAddUlong
ExReleaseResourceForThreadLite
InterlockedDecrement
KeSetEvent
KeResetEvent
MmProbeAndLockPages
MmUnlockPages
IoFreeMdl
IoMakeAssociatedIrp
IoAllocateMdl
IoBuildPartialMdl
KeGetCurrentThread
IoFreeIrp
KeDelayExecutionThread
IofCallDriver
IoIsOperationSynchronous
MmCanFileBeTruncated
FsRtlCurrentBatchOplock
MmFlushImageSection
IoUpdateShareAccess
IoCheckShareAccess
IoSetShareAccess
memmove
FsRtlDissectName
RtlUpcaseUnicodeStringToCountedOemString
FsRtlIsFatDbcsLegal
FsRtlLegalAnsiCharacterArray
RtlUpcaseUnicodeString
SeSinglePrivilegeCheck
ObfDereferenceObject
IoDeleteDevice
ExQueueWorkItem
IoGetCurrentProcess
IoAcquireVpbSpinLock
IoReleaseVpbSpinLock
FsRtlNotifyFullChangeDirectory
FsRtlNotifyCleanup
IoGetRequestorProcess
FsRtlFastUnlockAll
CcPurgeCacheSection
ExLocalTimeToSystemTime
CcFlushCache
ExAcquireResourceExclusiveLite
FsRtlNotifyFullReportChange
FsRtlIsNtstatusExpected
IoRemoveShareAccess
FsRtlCheckOplock
FsRtlOplockIsFastIoPossible
ExReleaseResourceLite
IofCompleteRequest
KeEnterCriticalRegion
IoSetTopLevelIrp
KeLeaveCriticalRegion
CcPinMappedData
KeInitializeEvent
CcUninitializeCacheMap
KeWaitForSingleObject
CcMdlReadComplete
CcMdlWriteComplete
CcZeroData
CcGetFileObjectFromBcb
CcUnpinRepinnedBcb
CcSetDirtyPinnedData
IoSetHardErrorOrVerifyDevice
FsRtlNormalizeNtstatus
CcRepinBcb
KeCancelTimer
KeRemoveQueueDpc
KeQuerySystemTime
KeSetTimer
CcSetAdditionalCacheAttributes
IoCreateStreamFileObject
CcPinRead
FsRtlUninitializeMcb
CcMapData
FsRtlGetNextMcbEntry
RtlFindLongestRunClear
RtlFindClearBits
FsRtlInitializeMcb
FsRtlLookupMcbEntry
FsRtlLookupLastMcbEntry
FsRtlNumberOfRunsInMcb
KeBugCheckEx
ExRaiseStatus

hal

KeGetCurrentIrql
KfAcquireSpinLock
KfReleaseSpinLock
ExAcquireFastMutex
ExReleaseFastMutex

Sections

.text
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 480B - Virtual size: 480B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

PAGE
Size: 103KB - Virtual size: 103KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

INIT
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 996B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/FASTOPEN.EX_
.cab
I386/FC.EX_
.cab
I386/FD16_700.SYS
.sys windows:3 windows x86 arch:x86

c3e2c32d3989e641c090464664f7fa21

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

scsiport.sys

ScsiPortWritePortBufferUlong
ScsiPortLogError
ScsiPortStallExecution
ScsiPortReadPortUchar
ScsiPortReadPortUshort
ScsiPortReadPortBufferUchar
ScsiPortReadPortBufferUshort
ScsiPortReadPortBufferUlong
ScsiPortWritePortBufferUchar
ScsiPortWritePortBufferUshort
ScsiPortWritePortUchar
ScsiPortNotification
ScsiPortGetLogicalUnit
ScsiPortCompleteRequest
ScsiPortReadRegisterUchar
ScsiPortFreeDeviceBase
ScsiPortGetDeviceBase
ScsiPortConvertUlongToPhysicalAddress
ScsiPortInitialize

Sections

.text
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

INIT
Size: 672B - Virtual size: 660B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 992B - Virtual size: 972B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 498B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/FD7000EX.SYS
.sys windows:3 windows x86 arch:x86

df579e9c3323d5e0b4fd9aae751d1890

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

scsiport.sys

ScsiPortGetPhysicalAddress
ScsiPortReadPortUchar
ScsiPortInitialize
ScsiPortFreeDeviceBase
ScsiPortGetDeviceBase
ScsiPortConvertUlongToPhysicalAddress
ScsiPortStallExecution
ScsiPortLogError
ScsiPortWritePortUchar
ScsiPortGetUncachedExtension
ScsiPortNotification
ScsiPortGetVirtualAddress
ScsiPortReadPortUlong
ScsiPortMoveMemory
ScsiPortCompleteRequest
ScsiPortWritePortUlong

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

INIT
Size: 544B - Virtual size: 542B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 992B - Virtual size: 972B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 224B - Virtual size: 212B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/FD8XX.SYS
.sys windows:3 windows x86 arch:x86

902901e9ebc96a8cbd0df6ac99a9bfd8

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

scsiport.sys

ScsiPortGetLogicalUnit
ScsiPortLogError
ScsiPortStallExecution
ScsiPortReadRegisterUchar
ScsiPortWriteRegisterBufferUchar
ScsiPortReadRegisterBufferUchar
ScsiPortNotification
ScsiPortWriteRegisterUchar
ScsiPortCompleteRequest
ScsiPortConvertUlongToPhysicalAddress
ScsiPortFreeDeviceBase
ScsiPortGetDeviceBase
ScsiPortInitialize

Sections

.text
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

INIT
Size: 480B - Virtual size: 472B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 928B - Virtual size: 928B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 352B - Virtual size: 340B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/FILLITUP.AN_
.cab
I386/FIND.EX_
.cab
I386/FINDSTR.EX_
.cab
I386/FINGER.EX_
.cab
I386/FLOPPY.SYS
.sys windows:3 windows x86 arch:x86

22ad1274fc5b27fb00ac55768b1fee5f

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

ntoskrnl.exe

IoDeleteDevice
IoConnectInterrupt
KeInitializeDpc
RtlFreeUnicodeString
IoCreateSynchronizationEvent
RtlAnsiStringToUnicodeString
RtlInitString
sprintf
KeWaitForSingleObject
KeInitializeSpinLock
KeInitializeSemaphore
IoCreateSymbolicLink
IoCreateDevice
KeReleaseSemaphore
ExfInterlockedInsertTailList
ZwClose
PsCreateSystemThread
MmResetDriverPaging
IofCompleteRequest
IoSetHardErrorOrVerifyDevice
KeResetEvent
IoQueryDeviceDescription
KeDelayExecutionThread
ExfInterlockedInsertHeadList
KeSynchronizeExecution
IoAllocateAdapterChannel
MmProbeAndLockPages
MmFreeContiguousMemory
IoAllocateMdl
MmAllocateContiguousMemory
IoFreeMdl
MmUnlockPages
ExfInterlockedRemoveHeadList
PsTerminateSystemThread
KeSetPriorityThread
KeGetCurrentThread
IoFreeIrp
IoBuildAsynchronousFsdRequest
MmMapLockedPages
MmMapIoSpace
IoWriteErrorLogEntry
IoAllocateErrorLogEntry
IoDisconnectInterrupt
IoReportResourceUsage
RtlCompareMemory
IoGetConfigurationInformation
RtlInitUnicodeString
DbgBreakPoint
memmove
RtlQueryRegistryValues
KeInitializeEvent
ExFreePool
ExAllocatePoolWithTag
KeInsertQueueDpc
MmPageEntireDriver
KeSetEvent

hal

HalTranslateBusAddress
IoMapTransfer
IoFreeAdapterChannel
KfRaiseIrql
IoFlushAdapterBuffers
READ_PORT_UCHAR
ExAcquireFastMutex
KfLowerIrql
WRITE_PORT_UCHAR
KeStallExecutionProcessor
ExReleaseFastMutex
HalGetInterruptVector
HalGetAdapter

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 672B - Virtual size: 644B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

PAGE
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

INIT
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 928B - Virtual size: 904B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 704B - Virtual size: 696B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/FMIFS.DL_
.cab
I386/FORCEDOS.EX_
.cab
I386/FORMAT.CO_
.cab
I386/FRAME32.DL_
.cab
I386/FRAMEBUF.DL_
.cab
I386/FREECELL.CN_
.cab
I386/FREECELL.EX_
.cab
I386/FREECELL.HL_
.cab
I386/FS_REC.SY_
.cab
I386/FTDISK.SY_
.cab
I386/FTP.EX_
.cab
I386/FTPCTRS.DL_
.cab
I386/FTPMGR.CP_
.cab
I386/FTPSVAPI.DL_
.cab
I386/FTPSVC.DL_
.cab
I386/FTSRCH.DL_
.cab
I386/FUJI24.DL_
.cab
I386/FUJI9.DL_
.cab
I386/FXBIOS.BI_
.cab
I386/FXFEP.BI_
.cab
I386/GCBL4921.PP_
.cab
I386/GCBL5141.PP_
.cab
I386/GCBLP2S1.PP_
.cab
I386/GCBLP2_1.PP_
.cab
I386/GCBLPEL1.PP_
.cab
I386/GCCTONE2.PP_
.cab
I386/GCELT6_2.PP_
.cab
I386/GCSP12_3.PP_
.cab
I386/GCSP6_3.PP_
.cab
I386/GDGL8001.PP_
.cab
I386/GDI.EX_
.cab
I386/GDI32.DL_
.cab
I386/GLOSSARY.CN_
.cab
I386/GLOSSARY.FT_
.cab
I386/GLOSSARY.HL_
.cab
I386/GLSRV.DL_
.cab
I386/GLU32.DL_
.cab
I386/GORILLA.BA_
.cab
I386/GRAFTABL.CO_
.cab
I386/GRAPHICS.CO_
.cab
I386/GRAPHICS.PR_
.cab
I386/HAL.DL_
.cab
I386/HAL486C.DLL
.dll windows:3 windows x86 arch:x86

f30a01ec4fa82070f06140fd71f57f26

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Imports

ntoskrnl.exe

_stricmp
Kei386EoiHelper
KeSetTimeIncrement
DbgBreakPoint
KiCoprocessorError
KeSetEventBoostPriority
KeWaitForSingleObject
KiUnexpectedInterrupt
KeProfileInterrupt
KiDeliverApc
KiDispatchInterrupt
DbgPrint
RtlZeroMemory
ExAllocatePool
ExFreePool
RtlMoveMemory
ZwClose
ZwQueryValueKey
RtlAnsiStringToUnicodeString
RtlInitAnsiString
ZwOpenKey
RtlInitUnicodeString
KeInitializeSpinLock
RtlIntegerToUnicodeString
RtlInitializeBitMap
RtlFillMemory
KiAcquireSpinLock
KiReleaseSpinLock
IoAssignResources
ZwSetValueKey
swprintf
strncpy
KeUpdateSystemTime
MmMapLockedPages
MmGetPhysicalAddress
MmFreeContiguousMemory
MmAllocateContiguousMemory
RtlFindClearBitsAndSet
KeRemoveDeviceQueue
RtlClearBits
KeInsertDeviceQueue
RtlSetBits
ObfDereferenceObject
KeSetEvent
KeEnterKernelDebugger
MmUnlockPagableImageSection
MmLockPagableDataSection
MmMapIoSpace
RtlSetAllBits
KeInitializeDeviceQueue
ObInsertObject
ObReferenceObjectByPointer
IoAdapterObjectType
ObCreateObject
RtlFreeUnicodeString
IoReportHalResourceUsage
strstr
HalPrivateDispatchTable
HalDispatchTable
KeBugCheckEx
sprintf
KeFindConfigurationEntry
KeInitializeEvent
ExAllocatePoolWithTag

Exports

Exports

ExAcquireFastMutex
ExReleaseFastMutex
ExTryToAcquireFastMutex
HalAcquireDisplayOwnership
HalAdjustResourceList
HalAllProcessorsStarted
HalAllocateAdapterChannel
HalAllocateCommonBuffer
HalAllocateCrashDumpRegisters
HalAssignSlotResources
HalBeginSystemInterrupt
HalCalibratePerformanceCounter
HalClearSoftwareInterrupt
HalDisableSystemInterrupt
HalDisplayString
HalEnableSystemInterrupt
HalEndSystemInterrupt
HalFlushCommonBuffer
HalFreeCommonBuffer
HalGetAdapter
HalGetBusData
HalGetBusDataByOffset
HalGetEnvironmentVariable
HalGetInterruptVector
HalHandleNMI
HalInitSystem
HalInitializeProcessor
HalMakeBeep
HalProcessorIdle
HalQueryDisplayParameters
HalQueryRealTimeClock
HalReadDmaCounter
HalReportResourceUsage
HalRequestIpi
HalRequestSoftwareInterrupt
HalReturnToFirmware
HalSetBusData
HalSetBusDataByOffset
HalSetDisplayParameters
HalSetEnvironmentVariable
HalSetProfileInterval
HalSetRealTimeClock
HalSetTimeIncrement
HalStartNextProcessor
HalStartProfileInterrupt
HalStopProfileInterrupt
HalTranslateBusAddress
IoAssignDriveLetters
IoFlushAdapterBuffers
IoFreeAdapterChannel
IoFreeMapRegisters
IoMapTransfer
IoReadPartitionTable
IoSetPartitionInformation
IoWritePartitionTable
KdComPortInUse
KdPortGetByte
KdPortInitialize
KdPortPollByte
KdPortPutByte
KdPortRestore
KdPortSave
KeAcquireSpinLock
KeFlushWriteBuffer
KeGetCurrentIrql
KeLowerIrql
KeQueryPerformanceCounter
KeRaiseIrql
KeReleaseSpinLock
KeStallExecutionProcessor
KfAcquireSpinLock
KfLowerIrql
KfRaiseIrql
KfReleaseSpinLock
READ_PORT_BUFFER_UCHAR
READ_PORT_BUFFER_ULONG
READ_PORT_BUFFER_USHORT
READ_PORT_UCHAR
READ_PORT_ULONG
READ_PORT_USHORT
WRITE_PORT_BUFFER_UCHAR
WRITE_PORT_BUFFER_ULONG
WRITE_PORT_BUFFER_USHORT
WRITE_PORT_UCHAR
WRITE_PORT_ULONG
WRITE_PORT_USHORT

Sections

.text
Size: 18KB - Virtual size: 18KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

PAGE
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

PAGELK
Size: 864B - Virtual size: 842B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.edata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

INIT
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 928B - Virtual size: 924B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/HALAPIC.DLL
.dll windows:3 windows x86 arch:x86

1e7e477a042a520c6334cb64280cf887

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Imports

ntoskrnl.exe

ObfDereferenceObject
DbgPrint
Kei386EoiHelper
KeUpdateSystemTime
KeUpdateRunTime
KiIpiServiceRoutine
KiDeliverApc
KiDispatchInterrupt
KeProfileInterrupt
KeSetEventBoostPriority
KeWaitForSingleObject
RtlZeroMemory
ExAllocatePool
strncpy
_stricmp
RtlMoveMemory
MmMapLockedPages
MmGetPhysicalAddress
MmFreeContiguousMemory
MmAllocateContiguousMemory
RtlFindClearBitsAndSet
KeRemoveDeviceQueue
RtlClearBits
ExFreePool
ZwClose
ZwQueryValueKey
RtlAnsiStringToUnicodeString
RtlInitAnsiString
ZwOpenKey
RtlInitUnicodeString
KeInsertDeviceQueue
RtlSetBits
DbgBreakPoint
KeSetEvent
KeInitializeSpinLock
RtlIntegerToUnicodeString
RtlInitializeBitMap
RtlFillMemory
KiAcquireSpinLock
KiReleaseSpinLock
IoAssignResources
ZwSetValueKey
swprintf
MmUnlockPagableImageSection
MmLockPagableDataSection
MmMapIoSpace
RtlSetAllBits
KeInitializeDeviceQueue
ObInsertObject
ObReferenceObjectByPointer
IoAdapterObjectType
ObCreateObject
IoReportHalResourceUsage
sprintf
KeFindConfigurationEntry
HalPrivateDispatchTable
RtlFreeUnicodeString
strstr
HalDispatchTable
KeBugCheckEx
KeSetTimeIncrement
KeEnterKernelDebugger
KeInitializeEvent
ExAllocatePoolWithTag

Exports

Exports

ExAcquireFastMutex
ExReleaseFastMutex
ExTryToAcquireFastMutex
HalAcquireDisplayOwnership
HalAdjustResourceList
HalAllProcessorsStarted
HalAllocateAdapterChannel
HalAllocateCommonBuffer
HalAllocateCrashDumpRegisters
HalAssignSlotResources
HalBeginSystemInterrupt
HalCalibratePerformanceCounter
HalClearSoftwareInterrupt
HalDisableSystemInterrupt
HalDisplayString
HalEnableSystemInterrupt
HalEndSystemInterrupt
HalFlushCommonBuffer
HalFreeCommonBuffer
HalGetAdapter
HalGetBusData
HalGetBusDataByOffset
HalGetEnvironmentVariable
HalGetInterruptVector
HalHandleNMI
HalInitSystem
HalInitializeProcessor
HalMakeBeep
HalProcessorIdle
HalQueryDisplayParameters
HalQueryRealTimeClock
HalReadDmaCounter
HalReportResourceUsage
HalRequestIpi
HalRequestSoftwareInterrupt
HalReturnToFirmware
HalSetBusData
HalSetBusDataByOffset
HalSetDisplayParameters
HalSetEnvironmentVariable
HalSetProfileInterval
HalSetRealTimeClock
HalSetTimeIncrement
HalStartNextProcessor
HalStartProfileInterrupt
HalStopProfileInterrupt
HalTranslateBusAddress
IoAssignDriveLetters
IoFlushAdapterBuffers
IoFreeAdapterChannel
IoFreeMapRegisters
IoMapTransfer
IoReadPartitionTable
IoSetPartitionInformation
IoWritePartitionTable
KdComPortInUse
KdPortGetByte
KdPortInitialize
KdPortPollByte
KdPortPutByte
KdPortRestore
KdPortSave
KeAcquireSpinLock
KeFlushWriteBuffer
KeGetCurrentIrql
KeLowerIrql
KeQueryPerformanceCounter
KeRaiseIrql
KeReleaseSpinLock
KeStallExecutionProcessor
KfAcquireSpinLock
KfLowerIrql
KfRaiseIrql
KfReleaseSpinLock
READ_PORT_BUFFER_UCHAR
READ_PORT_BUFFER_ULONG
READ_PORT_BUFFER_USHORT
READ_PORT_UCHAR
READ_PORT_ULONG
READ_PORT_USHORT
WRITE_PORT_BUFFER_UCHAR
WRITE_PORT_BUFFER_ULONG
WRITE_PORT_BUFFER_USHORT
WRITE_PORT_UCHAR
WRITE_PORT_ULONG
WRITE_PORT_USHORT

Sections

.text
Size: 23KB - Virtual size: 23KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

PAGE
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

PAGELK
Size: 864B - Virtual size: 842B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.edata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

INIT
Size: 17KB - Virtual size: 17KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 928B - Virtual size: 924B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/HALAST.DL_
.cab
I386/HALCBUS.DL_
.cab
I386/HALCBUSM.DL_
.cab
I386/HALFTONE.CN_
.cab
I386/HALFTONE.HL_
.cab
I386/HALMCA.DLL
.dll windows:3 windows x86 arch:x86

f30a01ec4fa82070f06140fd71f57f26

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Imports

ntoskrnl.exe

_stricmp
Kei386EoiHelper
KeSetTimeIncrement
DbgBreakPoint
KiCoprocessorError
KeSetEventBoostPriority
KeWaitForSingleObject
KiUnexpectedInterrupt
KeProfileInterrupt
KiDeliverApc
KiDispatchInterrupt
DbgPrint
RtlZeroMemory
ExAllocatePool
ExFreePool
RtlMoveMemory
ZwClose
ZwQueryValueKey
RtlAnsiStringToUnicodeString
RtlInitAnsiString
ZwOpenKey
RtlInitUnicodeString
KeInitializeSpinLock
RtlIntegerToUnicodeString
RtlInitializeBitMap
RtlFillMemory
KiAcquireSpinLock
KiReleaseSpinLock
IoAssignResources
ZwSetValueKey
swprintf
strncpy
KeUpdateSystemTime
MmMapLockedPages
MmGetPhysicalAddress
MmFreeContiguousMemory
MmAllocateContiguousMemory
RtlFindClearBitsAndSet
KeRemoveDeviceQueue
RtlClearBits
KeInsertDeviceQueue
RtlSetBits
ObfDereferenceObject
KeSetEvent
KeEnterKernelDebugger
MmUnlockPagableImageSection
MmLockPagableDataSection
MmMapIoSpace
RtlSetAllBits
KeInitializeDeviceQueue
ObInsertObject
ObReferenceObjectByPointer
IoAdapterObjectType
ObCreateObject
RtlFreeUnicodeString
IoReportHalResourceUsage
strstr
HalPrivateDispatchTable
HalDispatchTable
KeBugCheckEx
sprintf
KeFindConfigurationEntry
KeInitializeEvent
ExAllocatePoolWithTag

Exports

Exports

ExAcquireFastMutex
ExReleaseFastMutex
ExTryToAcquireFastMutex
HalAcquireDisplayOwnership
HalAdjustResourceList
HalAllProcessorsStarted
HalAllocateAdapterChannel
HalAllocateCommonBuffer
HalAllocateCrashDumpRegisters
HalAssignSlotResources
HalBeginSystemInterrupt
HalCalibratePerformanceCounter
HalClearSoftwareInterrupt
HalDisableSystemInterrupt
HalDisplayString
HalEnableSystemInterrupt
HalEndSystemInterrupt
HalFlushCommonBuffer
HalFreeCommonBuffer
HalGetAdapter
HalGetBusData
HalGetBusDataByOffset
HalGetEnvironmentVariable
HalGetInterruptVector
HalHandleNMI
HalInitSystem
HalInitializeProcessor
HalMakeBeep
HalProcessorIdle
HalQueryDisplayParameters
HalQueryRealTimeClock
HalReadDmaCounter
HalReportResourceUsage
HalRequestIpi
HalRequestSoftwareInterrupt
HalReturnToFirmware
HalSetBusData
HalSetBusDataByOffset
HalSetDisplayParameters
HalSetEnvironmentVariable
HalSetProfileInterval
HalSetRealTimeClock
HalSetTimeIncrement
HalStartNextProcessor
HalStartProfileInterrupt
HalStopProfileInterrupt
HalTranslateBusAddress
IoAssignDriveLetters
IoFlushAdapterBuffers
IoFreeAdapterChannel
IoFreeMapRegisters
IoMapTransfer
IoReadPartitionTable
IoSetPartitionInformation
IoWritePartitionTable
KdComPortInUse
KdPortGetByte
KdPortInitialize
KdPortPollByte
KdPortPutByte
KdPortRestore
KdPortSave
KeAcquireSpinLock
KeFlushWriteBuffer
KeGetCurrentIrql
KeLowerIrql
KeQueryPerformanceCounter
KeRaiseIrql
KeReleaseSpinLock
KeStallExecutionProcessor
KfAcquireSpinLock
KfLowerIrql
KfRaiseIrql
KfReleaseSpinLock
READ_PORT_BUFFER_UCHAR
READ_PORT_BUFFER_ULONG
READ_PORT_BUFFER_USHORT
READ_PORT_UCHAR
READ_PORT_ULONG
READ_PORT_USHORT
WRITE_PORT_BUFFER_UCHAR
WRITE_PORT_BUFFER_ULONG
WRITE_PORT_BUFFER_USHORT
WRITE_PORT_UCHAR
WRITE_PORT_ULONG
WRITE_PORT_USHORT

Sections

.text
Size: 18KB - Virtual size: 18KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

PAGE
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

PAGELK
Size: 864B - Virtual size: 852B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.edata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

INIT
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 928B - Virtual size: 924B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/HALMPS.DLL
.dll windows:3 windows x86 arch:x86

c8761e5e2f8ba9f3a659ab5279406091

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Imports

ntoskrnl.exe

ObfDereferenceObject
DbgPrint
Kei386EoiHelper
KeUpdateSystemTime
KeUpdateRunTime
KiIpiServiceRoutine
KiDeliverApc
KiDispatchInterrupt
KeProfileInterrupt
KeSetEventBoostPriority
KeWaitForSingleObject
RtlZeroMemory
ExAllocatePool
strncpy
_stricmp
RtlMoveMemory
MmMapLockedPages
MmGetPhysicalAddress
MmFreeContiguousMemory
MmAllocateContiguousMemory
RtlFindClearBitsAndSet
KeRemoveDeviceQueue
RtlClearBits
ExFreePool
ZwClose
ZwQueryValueKey
RtlAnsiStringToUnicodeString
RtlInitAnsiString
ZwOpenKey
RtlInitUnicodeString
KeInsertDeviceQueue
RtlSetBits
DbgBreakPoint
KeSetEvent
KeInitializeSpinLock
RtlIntegerToUnicodeString
RtlInitializeBitMap
RtlFillMemory
KiAcquireSpinLock
KiReleaseSpinLock
IoAssignResources
ZwSetValueKey
swprintf
MmUnlockPagableImageSection
MmLockPagableDataSection
MmMapIoSpace
RtlSetAllBits
KeInitializeDeviceQueue
ObInsertObject
ObReferenceObjectByPointer
IoAdapterObjectType
ObCreateObject
IoReportHalResourceUsage
sprintf
KeFindConfigurationEntry
HalPrivateDispatchTable
RtlFreeUnicodeString
MmUnmapIoSpace
strstr
HalDispatchTable
KeBugCheckEx
KeSetTimeIncrement
KeEnterKernelDebugger
KeInitializeEvent
ExAllocatePoolWithTag

Exports

Exports

ExAcquireFastMutex
ExReleaseFastMutex
ExTryToAcquireFastMutex
HalAcquireDisplayOwnership
HalAdjustResourceList
HalAllProcessorsStarted
HalAllocateAdapterChannel
HalAllocateCommonBuffer
HalAllocateCrashDumpRegisters
HalAssignSlotResources
HalBeginSystemInterrupt
HalCalibratePerformanceCounter
HalClearSoftwareInterrupt
HalDisableSystemInterrupt
HalDisplayString
HalEnableSystemInterrupt
HalEndSystemInterrupt
HalFlushCommonBuffer
HalFreeCommonBuffer
HalGetAdapter
HalGetBusData
HalGetBusDataByOffset
HalGetEnvironmentVariable
HalGetInterruptVector
HalHandleNMI
HalInitSystem
HalInitializeProcessor
HalMakeBeep
HalProcessorIdle
HalQueryDisplayParameters
HalQueryRealTimeClock
HalReadDmaCounter
HalReportResourceUsage
HalRequestIpi
HalRequestSoftwareInterrupt
HalReturnToFirmware
HalSetBusData
HalSetBusDataByOffset
HalSetDisplayParameters
HalSetEnvironmentVariable
HalSetProfileInterval
HalSetRealTimeClock
HalSetTimeIncrement
HalStartNextProcessor
HalStartProfileInterrupt
HalStopProfileInterrupt
HalTranslateBusAddress
IoAssignDriveLetters
IoFlushAdapterBuffers
IoFreeAdapterChannel
IoFreeMapRegisters
IoMapTransfer
IoReadPartitionTable
IoSetPartitionInformation
IoWritePartitionTable
KdComPortInUse
KdPortGetByte
KdPortInitialize
KdPortPollByte
KdPortPutByte
KdPortRestore
KdPortSave
KeAcquireSpinLock
KeFlushWriteBuffer
KeGetCurrentIrql
KeLowerIrql
KeQueryPerformanceCounter
KeRaiseIrql
KeReleaseSpinLock
KeStallExecutionProcessor
KfAcquireSpinLock
KfLowerIrql
KfRaiseIrql
KfReleaseSpinLock
READ_PORT_BUFFER_UCHAR
READ_PORT_BUFFER_ULONG
READ_PORT_BUFFER_USHORT
READ_PORT_UCHAR
READ_PORT_ULONG
READ_PORT_USHORT
WRITE_PORT_BUFFER_UCHAR
WRITE_PORT_BUFFER_ULONG
WRITE_PORT_BUFFER_USHORT
WRITE_PORT_UCHAR
WRITE_PORT_ULONG
WRITE_PORT_USHORT

Sections

.text
Size: 23KB - Virtual size: 23KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

_INIT16
Size: 64B - Virtual size: 57B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

PAGE
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

PAGELK
Size: 864B - Virtual size: 842B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.edata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

INIT
Size: 19KB - Virtual size: 19KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 928B - Virtual size: 924B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/HALNCR.DLL
.dll windows:3 windows x86 arch:x86

8d0d622dcbb3dd1bcdc6cc83fed47ff6

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Imports

ntoskrnl.exe

MmMapLockedPages
KeProfileInterrupt
Kei386EoiHelper
KiDeliverApc
KiDispatchInterrupt
DbgPrint
KeUpdateSystemTime
KeUpdateRunTime
KeSetTimeIncrement
KiCoprocessorError
KiIpiServiceRoutine
KeSetEventBoostPriority
KeWaitForSingleObject
KiUnexpectedInterrupt
RtlZeroMemory
ExAllocatePool
ExFreePool
RtlMoveMemory
ZwClose
ZwQueryValueKey
RtlAnsiStringToUnicodeString
RtlInitAnsiString
ZwOpenKey
RtlInitUnicodeString
KeInitializeSpinLock
RtlIntegerToUnicodeString
RtlInitializeBitMap
RtlFillMemory
KiAcquireSpinLock
KiReleaseSpinLock
IoAssignResources
ZwSetValueKey
swprintf
strncpy
_stricmp
DbgBreakPoint
MmGetPhysicalAddress
MmFreeContiguousMemory
MmAllocateContiguousMemory
RtlFindClearBitsAndSet
KeRemoveDeviceQueue
RtlClearBits
MmUnlockPagableImageSection
MmLockPagableDataSection
MmMapIoSpace
ObfDereferenceObject
RtlSetAllBits
KeInitializeDeviceQueue
ObInsertObject
ObReferenceObjectByPointer
IoAdapterObjectType
ObCreateObject
KeInsertDeviceQueue
RtlSetBits
KeSetEvent
IoReportHalResourceUsage
HalPrivateDispatchTable
HalDispatchTable
KeBugCheckEx
sprintf
KeFindConfigurationEntry
KeEnterKernelDebugger
RtlFreeUnicodeString
MmUnmapIoSpace
ZwCreateKey
RtlAppendUnicodeToString
RtlAppendUnicodeStringToString
RtlCopyUnicodeString
strncmp
KeLoaderBlock
KeInitializeEvent
ExAllocatePoolWithTag

Exports

Exports

ExAcquireFastMutex
ExReleaseFastMutex
ExTryToAcquireFastMutex
HalAcquireDisplayOwnership
HalAdjustResourceList
HalAllProcessorsStarted
HalAllocateAdapterChannel
HalAllocateCommonBuffer
HalAllocateCrashDumpRegisters
HalAssignSlotResources
HalBeginSystemInterrupt
HalBumpWatchDogCount
HalCalibratePerformanceCounter
HalCatBusAvailable
HalCatBusIo
HalCatBusReset
HalClearSoftwareInterrupt
HalDisableSystemInterrupt
HalDisplayString
HalEnableSystemInterrupt
HalEndSystemInterrupt
HalFlushCommonBuffer
HalFreeCommonBuffer
HalGetAdapter
HalGetBusData
HalGetBusDataByOffset
HalGetEnvironmentVariable
HalGetInterruptVector
HalGetSUSErrorLogEntry
HalHandleNMI
HalInitSystem
HalInitializeProcessor
HalMakeBeep
HalPowerOffSystem
HalProcessorIdle
HalQueryDisplayParameters
HalQueryRealTimeClock
HalReadDmaCounter
HalReportResourceUsage
HalRequestIpi
HalRequestSoftwareInterrupt
HalReturnToFirmware
HalSetBusData
HalSetBusDataByOffset
HalSetDisplayParameters
HalSetEnvironmentVariable
HalSetProfileInterval
HalSetRealTimeClock
HalSetStatusChangeInterruptState
HalSetTimeIncrement
HalSetWatchDogPeriod
HalStartNextProcessor
HalStartProfileInterrupt
HalStopProfileInterrupt
HalTranslateBusAddress
IoAssignDriveLetters
IoFlushAdapterBuffers
IoFreeAdapterChannel
IoFreeMapRegisters
IoMapTransfer
IoReadPartitionTable
IoSetPartitionInformation
IoWritePartitionTable
KdComPortInUse
KdPortGetByte
KdPortInitialize
KdPortPollByte
KdPortPutByte
KdPortRestore
KdPortSave
KeAcquireSpinLock
KeFlushWriteBuffer
KeGetCurrentIrql
KeLowerIrql
KeQueryPerformanceCounter
KeRaiseIrql
KeReleaseSpinLock
KeStallExecutionProcessor
KfAcquireSpinLock
KfLowerIrql
KfRaiseIrql
KfReleaseSpinLock
READ_PORT_BUFFER_UCHAR
READ_PORT_BUFFER_ULONG
READ_PORT_BUFFER_USHORT
READ_PORT_UCHAR
READ_PORT_ULONG
READ_PORT_USHORT
WRITE_PORT_BUFFER_UCHAR
WRITE_PORT_BUFFER_ULONG
WRITE_PORT_BUFFER_USHORT
WRITE_PORT_UCHAR
WRITE_PORT_ULONG
WRITE_PORT_USHORT

Sections

.text
Size: 42KB - Virtual size: 42KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

_TEXT16
Size: 64B - Virtual size: 57B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

PAGE
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

PAGELK
Size: 864B - Virtual size: 850B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.edata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

INIT
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 928B - Virtual size: 924B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/HALOLI.DL_
.cab
I386/HALSP.DL_
.cab
I386/HALWS3.DL_
.cab
I386/HALWYSE7.DL_
.cab
I386/HAND.AN_
.cab
I386/HANDAPST.AN_
.cab
I386/HANDNESW.AN_
.cab
I386/HANDNO.AN_
.cab
I386/HANDNS.AN_
.cab
I386/HANDNWSE.AN_
.cab
I386/HANDWAIT.AN_
.cab
I386/HANDWE.AN_
.cab
I386/HARDWARE.IN_
.cab
I386/HARROW.CU_
.cab
I386/HCROSS.CU_
.cab
I386/HELP.EX_
.cab
I386/HERMES_1.PP_
.cab
I386/HERMES_2.PP_
.cab
I386/HIBEAM.CU_
.cab
I386/HIMEM.SY_
.cab
I386/HMOVE.CU_
.cab
I386/HNESW.CU_
.cab
I386/HNODROP.CU_
.cab
I386/HNS.CU_
.cab
I386/HNWSE.CU_
.cab
I386/HONEY.BM_
.cab
I386/HORSE.AN_
.cab
I386/HOSTNAME.EX_
.cab
I386/HOSTS
I386/HOURGLA2.AN_
.cab
I386/HOURGLA3.AN_
.cab
I386/HOURGLAS.AN_
.cab
I386/HP1200C1.PP_
.cab
I386/HP20022.PC_
.cab
I386/HP20036.PC_
.cab
I386/HP3SI523.PP_
.cab
I386/HP4M3_V1.PP_
.cab
I386/HP4M6_V1.PP_
.cab
I386/HP4ML_V1.PP_
.cab
I386/HP4MP3_1.PP_
.cab
I386/HP4MP6_1.PP_
.cab
I386/HP4PLUS3.PP_
.cab
I386/HP4PLUS6.PP_
.cab
I386/HP4SI3_1.PP_
.cab
I386/HP4SI6_1.PP_
.cab
I386/HP60022.PC_
.cab
I386/HP60036.PC_
.cab
I386/HP650C22.PC_
.cab
I386/HP650C36.PC_
.cab
I386/HP7550PL.PC_
.cab
I386/HPDESIGN.PC_
.cab
I386/HPDMRXMX.PC_
.cab
I386/HPDMSX.PC_
.cab
I386/HPDPP22.PC_
.cab
I386/HPDPP36.PC_
.cab
I386/HPDSKJET.DL_
.cab
I386/HPELI522.PP_
.cab
I386/HPGL2PEN.PC_
.cab
I386/HPIID522.PP_
.cab
I386/HPIII522.PP_
.cab
I386/HPIIP522.PP_
.cab
I386/HPLJ4MV1.PP_
.cab
I386/HPLJ5P_1.PP_
.cab
I386/HPLJ_31.PP_
.cab
I386/HPLJ_3D1.PP_
.cab
I386/HPLJ_3P1.PP_
.cab
I386/HPMON.DL_
.cab
I386/HPMON.HL_
.cab
I386/HPPCL.DL_
.cab
I386/HPPCL5MS.DL_
.cab
I386/HPPJXL31.PP_
.cab
I386/HPSCAN16.SY_
.cab
I386/HPSCAN32.DL_
.cab
I386/HP_3D522.PP_
.cab
I386/HP_3P522.PP_
.cab
I386/HP_650C1.PP_
.cab
I386/HP__CLJ1.PP_
.cab
I386/HTUI.DL_
.cab
I386/HWE.CU_
.cab
I386/I8042PRT.SYS
.sys windows:3 windows x86 arch:x86

389e968ff602b1e28abe050ec2c9031c

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

ntoskrnl.exe

IoStartPacket
memmove
InterlockedDecrement
InterlockedIncrement
KeSetTimer
IoReleaseCancelSpinLock
IoAcquireCancelSpinLock
ExFreePool
IoDeleteDevice
IoDeleteSymbolicLink
MmUnmapIoSpace
IoDisconnectInterrupt
IoReportResourceUsage
RtlWriteRegistryValue
IoConnectInterrupt
KeInitializeTimer
KeInitializeDpc
ExAllocatePoolWithTag
IoAllocateErrorLogEntry
KeSynchronizeExecution
IoCreateSymbolicLink
RtlAppendUnicodeToString
RtlInitUnicodeString
KeInitializeSpinLock
MmMapIoSpace
IoCreateDevice
KeQueryTimeIncrement
RtlCopyUnicodeString
RtlQueryRegistryValues
KeInsertQueueDpc
DbgBreakPoint
KdDebuggerNotPresent
KeTickCount
IoQueryDeviceDescription
RtlFreeAnsiString
strstr
RtlUnicodeStringToAnsiString
RtlUnwind
IoStartNextPacket
IoWriteErrorLogEntry
KeCancelTimer
RtlAppendUnicodeStringToString
IofCompleteRequest
RtlIntegerToUnicodeString

hal

WRITE_PORT_UCHAR
KeStallExecutionProcessor
HalTranslateBusAddress
HalGetInterruptVector
READ_PORT_UCHAR

Sections

.text
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 32B - Virtual size: 28B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

INIT
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 640B - Virtual size: 620B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/IBM17523.PP_
.cab
I386/IBM20470.PP_
.cab
I386/IBM238X.DL_
.cab
I386/IBM239X.DL_
.cab
I386/IBM30505.PP_
.cab
I386/IBM31514.PP_
.cab
I386/IBM39523.PP_
.cab
I386/IBM4039.PP_
.cab
I386/IBM4039P.PP_
.cab
I386/IBM4079.PP_
.cab
I386/IBM5204.DL_
.cab
I386/IBMPORT.DL_
.cab
I386/IBMPPDSL.DL_
.cab
I386/IBMTOK.SY_
.cab
I386/IBMTOK2I.SY_
.cab
I386/ICCVID.DL_
.cab
I386/ICMP.DL_
.cab
I386/IDP_XFS.BI_
.cab
I386/IFSUTIL.DL_
.cab
I386/IMAADP32.AC_
.cab
I386/IMAGEHLP.DL_
.cab
I386/IMM32.DL_
.cab
I386/IMPEXP32.DL_
.cab
I386/INETMIB1.DL_
.cab
I386/INITIAL.IN_
.cab
I386/INPORT.SY_
.cab
I386/INTRO.EX_
.cab
I386/INTRO.IC_
.cab
I386/INTRO1.SE_
.cab
I386/INTRO2.SE_
.cab
I386/IOLOGMSG.DL_
.cab
I386/IPCONFIG.EX_
.cab
I386/IPINFO.INF
.vbs
I386/IPXCFG.DL_
.cab
I386/IPXROUTE.EX_
.cab
I386/IR32_32.DL_
.cab
I386/ISDNHELP.CN_
.cab
I386/ISDNHELP.HL_
.cab
I386/JP350.DL_
.cab
I386/JX9460PS.PP_
.cab
I386/JX9500PS.PP_
.cab
I386/JX9600PS.PP_
.cab
I386/JX9660PS.PP_
.cab
I386/JX9700PS.PP_
.cab
I386/KB16.CO_
.cab
I386/KBDBE.DLL
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Exports

Exports

KbdLayerDescriptor

Sections

.data
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 916B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 184B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/KBDBR.DLL
.dll windows:3 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Exports

Exports

KbdLayerDescriptor

Sections

.text
Size: 512B - Virtual size: 90B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 79B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 924B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 228B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/KBDBU.DLL
.dll windows:3 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Exports

Exports

KbdLayerDescriptor

Sections

.text
Size: 512B - Virtual size: 90B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 79B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 912B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 222B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/KBDCA.DLL
.dll windows:3 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Exports

Exports

KbdLayerDescriptor

Sections

.text
Size: 512B - Virtual size: 90B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 79B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 908B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 202B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/KBDCLASS.SYS
.sys windows:3 windows x86 arch:x86

da0101a58da7a8e201210bdba10784c9

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

ntoskrnl.exe

IoWriteErrorLogEntry
RtlWriteRegistryValue
RtlAppendUnicodeStringToString
RtlIntegerToUnicodeString
ExAllocatePoolWithTag
RtlInitUnicodeString
RtlCopyUnicodeString
RtlAppendUnicodeToString
memmove
IofCompleteRequest
IoReleaseCancelSpinLock
KeRemoveEntryDeviceQueue
IoAcquireCancelSpinLock
ExFreePool
IoAllocateErrorLogEntry
IofCallDriver
SeSinglePrivilegeCheck
IoStartPacket
KefReleaseSpinLockFromDpcLevel
KefAcquireSpinLockAtDpcLevel
RtlQueryRegistryValues
ObfDereferenceObject
IoGetDeviceObjectPointer
KeInitializeSpinLock
IoCreateDevice
KeWaitForSingleObject
IoBuildDeviceIoControlRequest
KeInitializeEvent
IoStartNextPacket
IoDeleteDevice
KeRemoveDeviceQueue

hal

KfAcquireSpinLock
KfReleaseSpinLock

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

INIT
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 352B - Virtual size: 340B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/KBDCR.DLL
.dll windows:3 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Exports

Exports

KbdLayerDescriptor

Sections

.text
Size: 512B - Virtual size: 90B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 79B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 932B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 236B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/KBDCZ.DLL
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Exports

Exports

KbdLayerDescriptor

Sections

.data
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 912B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 228B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/KBDDA.DLL
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Exports

Exports

KbdLayerDescriptor

Sections

.data
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 916B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 182B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/KBDDLL.DL_
.cab
I386/KBDDV.DLL
.dll windows:3 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Exports

Exports

KbdLayerDescriptor

Sections

.text
Size: 512B - Virtual size: 90B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 79B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 928B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 188B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/KBDES.DLL
.dll windows:3 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Exports

Exports

KbdLayerDescriptor

Sections

.text
Size: 512B - Virtual size: 90B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 79B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 928B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 200B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/KBDFC.DLL
.dll windows:3 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Exports

Exports

KbdLayerDescriptor

Sections

.text
Size: 512B - Virtual size: 90B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 79B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 924B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 212B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/KBDFI.DLL
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Exports

Exports

KbdLayerDescriptor

Sections

.data
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 916B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 182B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/KBDFR.DLL
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Exports

Exports

KbdLayerDescriptor

Sections

.data
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 916B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 180B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/KBDGR.DLL
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Exports

Exports

KbdLayerDescriptor

Sections

.data
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 916B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 178B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/KBDHE.DLL
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Exports

Exports

KbdLayerDescriptor

Sections

.data
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 912B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 204B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/KBDHE220.DLL
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Exports

Exports

KbdLayerDescriptor

Sections

.data
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 944B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 204B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/KBDHE319.DLL
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Exports

Exports

KbdLayerDescriptor

Sections

.data
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 944B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 206B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/KBDHELA2.DLL
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Exports

Exports

KbdLayerDescriptor

Sections

.data
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 956B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 204B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/KBDHELA3.DLL
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Exports

Exports

KbdLayerDescriptor

Sections

.data
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 956B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 206B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/KBDHU.DLL
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Exports

Exports

KbdLayerDescriptor

Sections

.data
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 920B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 218B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/KBDHU1.DLL
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Exports

Exports

KbdLayerDescriptor

Sections

.data
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 944B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 190B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/KBDIC.DLL
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Exports

Exports

KbdLayerDescriptor

Sections

.data
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 920B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 182B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/KBDIT.DLL
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Exports

Exports

KbdLayerDescriptor

Sections

.data
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 916B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 170B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/KBDIT142.DLL
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Exports

Exports

KbdLayerDescriptor

Sections

.data
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 940B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 168B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/KBDLA.DLL
.dll windows:3 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Exports

Exports

KbdLayerDescriptor

Sections

.text
Size: 512B - Virtual size: 90B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 79B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 940B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 200B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/KBDNE.DLL
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Exports

Exports

KbdLayerDescriptor

Sections

.data
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 912B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 184B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/KBDNO.DLL
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Exports

Exports

KbdLayerDescriptor

Sections

.data
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 920B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 182B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/KBDPL.DLL
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Exports

Exports

KbdLayerDescriptor

Sections

.data
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 916B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 218B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/KBDPL1.DLL
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Exports

Exports

KbdLayerDescriptor

Sections

.data
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 948B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 202B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/KBDPO.DLL
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Exports

Exports

KbdLayerDescriptor

Sections

.data
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 924B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 182B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/KBDRO.DLL
.dll windows:3 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Exports

Exports

KbdLayerDescriptor

Sections

.text
Size: 512B - Virtual size: 90B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 79B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 912B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 224B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/KBDRU.DLL
.dll windows:3 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Exports

Exports

KbdLayerDescriptor

Sections

.text
Size: 512B - Virtual size: 90B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 79B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 908B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 214B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/KBDSEL.EX_
.cab
I386/KBDSF.DLL
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Exports

Exports

KbdLayerDescriptor

Sections

.data
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 928B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 182B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/KBDSG.DLL
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Exports

Exports

KbdLayerDescriptor

Sections

.data
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 928B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 182B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/KBDSL.DLL
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Exports

Exports

KbdLayerDescriptor

Sections

.data
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 916B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 216B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/KBDSP.DLL
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Exports

Exports

KbdLayerDescriptor

Sections

.data
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 916B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 180B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/KBDSW.DLL
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Exports

Exports

KbdLayerDescriptor

Sections

.data
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 916B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 208B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/KBDTUF.DLL
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Exports

Exports

KbdLayerDescriptor

Sections

.data
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 928B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 212B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/KBDTUQ.DLL
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Exports

Exports

KbdLayerDescriptor

Sections

.data
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 928B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 212B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/KBDUK.DLL
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Exports

Exports

KbdLayerDescriptor

Sections

.data
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 932B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 170B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/KBDUS.DLL
.dll windows:3 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Exports

Exports

KbdLayerDescriptor

Sections

.text
Size: 512B - Virtual size: 90B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 79B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 916B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 212B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/KBDUSL.DLL
.dll windows:3 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Exports

Exports

KbdLayerDescriptor

Sections

.text
Size: 512B - Virtual size: 90B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 80B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 956B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 214B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/KBDUSR.DLL
.dll windows:3 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Exports

Exports

KbdLayerDescriptor

Sections

.text
Size: 512B - Virtual size: 90B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 80B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 960B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 214B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/KBDUSX.DLL
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Exports

Exports

KbdLayerDescriptor

Sections

.data
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 944B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 184B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/KD8600P1.PP_
.cab
I386/KDCOLOR1.PP_
.cab
I386/KERNEL32.DL_
.cab
I386/KEYB.CO_
.cab
I386/KEYBOARD.DR_
.cab
I386/KEYBOARD.IN_
.cab
I386/KEYBOARD.SY_
.cab
I386/KRNL386.EX_
.cab
I386/KYOCERA.DL_
.cab
I386/L100_425.PP_
.cab
I386/L200230.PP_
.cab
I386/L200_471.PP_
.cab
I386/L200_493.PP_
.cab
I386/L300_471.PP_
.cab
I386/L300_493.PP_
.cab
I386/L330_523.PP_
.cab
I386/L3330523.PP_
.cab
I386/L500_493.PP_
.cab
I386/L530_523.PP_
.cab
I386/L5330523.PP_
.cab
I386/LABEL.EX_
.cab
I386/LANCE.SY_
.cab
I386/LANGUAGE.IN_
.cab
I386/LANMAN.DR_
.cab
I386/LAPPSTRT.CU_
.cab
I386/LARROW.CU_
.cab
I386/LAYOUT.IN_
.cab
I386/LCROSS.CU_
.cab
I386/LEAVES.BM_
.cab
I386/LEX4039P.PP_
.cab
I386/LEXOPTRA.PP_
.cab
I386/LH830__1.PP_
.cab
I386/LH930__1.PP_
.cab
I386/LHPR60_1.PP_
.cab
I386/LH_630_1.PP_
.cab
I386/LIBEAM.CU_
.cab
I386/LMHOSTS.SA_
.cab
I386/LMHSVC.DL_
.cab
I386/LMMIB2.DL_
.cab
I386/LMOVE.CU_
.cab
I386/LMREPL.EX_
.cab
I386/LNESW.CU_
.cab
I386/LNODROP.CU_
.cab
I386/LNS.CU_
.cab
I386/LNWSE.CU_
.cab
I386/LOADFIX.CO_
.cab
I386/LOCALE.NL_
.cab
I386/LOCALMON.DL_
.cab
I386/LOCALSPL.DL_
.cab
I386/LOCATOR.EX_
.cab
I386/LODCTR.EX_
.cab
I386/LOG01.SE_
.cab
I386/LOGON.SC_
.cab
I386/LOOP.SY_
.cab
I386/LPDSVC.DL_
.cab
I386/LPQ.EX_
.cab
I386/LPR.EX_
.cab
I386/LPRHELP.DL_
.cab
I386/LPRMON.DL_
.cab
I386/LSASRV.DL_
.cab
I386/LSASS.EX_
.cab
I386/LT200.SY_
.cab
I386/LUCON.FO_
.cab
I386/LUCON.TT_
.cab
I386/LWAIT.CU_
.cab
I386/LWE.CU_
.cab
I386/LWNTX470.PP_
.cab
I386/LWNTX518.PP_
.cab
I386/LWNT_470.PP_
.cab
I386/LZ32.DL_
.cab
I386/LZEXPAND.DL_
.cab
I386/L_10646.TT_
.cab
I386/L_INTL.NLS
I386/L_TRK.NL_
.cab
I386/MAILM32.DL_
.cab
I386/MAILSP32.EX_
.cab
I386/MAIN.CP_
.cab
I386/MAKECAB.EXE
.exe windows:4 windows x86 arch:x86

4bbf00470be7bafe4698d3b35c055e2a

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualAlloc
GetFileAttributesA
CloseHandle
FileTimeToDosDateTime
FileTimeToLocalFileTime
GetFileTime
CreateFileA
SetFileAttributesA
SetFileTime
LocalFileTimeToFileTime
DosDateTimeToFileTime
GetLastError
HeapFree
HeapAlloc
ExitProcess
TerminateProcess
GetCurrentProcess
GetTimeZoneInformation
GetSystemTime
GetLocalTime
GetFileType
ReadFile
WriteFile
SetFilePointer
DeleteFileA
FindClose
FileTimeToSystemTime
FindFirstFileA
CreateDirectoryA
GetCurrentDirectoryA
GetCommandLineA
GetVersion
HeapDestroy
HeapCreate
VirtualFree
GetDriveTypeA
GetStringTypeA
WideCharToMultiByte
GetStringTypeW
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetProcAddress
GetModuleHandleA
SetEndOfFile
SetHandleCount
GetStdHandle
GetStartupInfoA
SetStdHandle
GetFullPathNameA
RtlUnwind
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCPInfo
GetACP
GetOEMCP
FlushFileBuffers
LoadLibraryA
CompareStringA
CompareStringW
SetEnvironmentVariableA
HeapReAlloc

version

GetFileVersionInfoSizeA
VerQueryValueA
GetFileVersionInfoA

Sections

.text
Size: 116KB - Virtual size: 115KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 19KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/MANTAL24.DL_
.cab
I386/MANTAL90.DL_
.cab
I386/MAPI.DL_
.cab
I386/MAPI32.DL_
.cab
I386/MAPISRV.EX_
.cab
I386/MAPIXX.DL_
.cab
I386/MARBLE.BM_
.cab
I386/MCIAVI.DR_
.cab
I386/MCIAVI32.DL_
.cab
I386/MCICDA.DL_
.cab
I386/MCIOLE16.DL_
.cab
I386/MCIOLE32.DL_
.cab
I386/MCISEQ.DL_
.cab
I386/MCISEQ.DR_
.cab
I386/MCIWAVE.DL_
.cab
I386/MCIWAVE.DR_
.cab
I386/MEM.EX_
.cab
I386/METRONOM.AN_
.cab
I386/MF3216.DL_
.cab
I386/MFC40.DL_
.cab
I386/MFC40U.DL_
.cab
I386/MFC42.DL_
.cab
I386/MFC42U.DL_
.cab
I386/MFCUIX.HL_
.cab
I386/MGA.DL_
.cab
I386/MGA.SY_
.cab
I386/MGMTAPI.DL_
.cab .ps1 polyglot
I386/MIB.BI_
.cab
I386/MIDIMAP.CF_
.cab
I386/MIDIMAP.DL_
.cab
I386/MINIQIC.SY_
.cab
I386/MITSUMI.SYS
.sys windows:3 windows x86 arch:x86

ae0940cea3b1db08f2cf9dc3d0c59d1e

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

scsiport.sys

ScsiPortReadPortUchar
ScsiPortConvertUlongToPhysicalAddress
ScsiPortFreeDeviceBase
ScsiPortGetDeviceBase
ScsiPortWritePortUchar
ScsiPortInitialize
ScsiPortStallExecution
ScsiPortNotification
ScsiPortReadPortBufferUchar
ScsiPortCompleteRequest

Sections

.text
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

INIT
Size: 384B - Virtual size: 366B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 992B - Virtual size: 964B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 448B - Virtual size: 438B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/MKECR5XX.SYS
.sys windows:3 windows x86 arch:x86

9c942a8c271b9d5297266a0aaede874b

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

scsiport.sys

ScsiPortWritePortUchar
ScsiPortConvertUlongToPhysicalAddress
ScsiPortFreeDeviceBase
ScsiPortGetDeviceBase
ScsiPortReadPortUchar
ScsiPortStallExecution
ScsiPortInitialize
ScsiPortNotification
ScsiPortReadPortBufferUchar
ScsiPortCompleteRequest
ScsiPortMoveMemory

Sections

.text
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 64B - Virtual size: 46B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

INIT
Size: 416B - Virtual size: 392B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 960B - Virtual size: 944B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 640B - Virtual size: 628B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/MMDRIVER.IN_
.cab
I386/MMDRV.DL_
.cab
I386/MMSYSTEM.DL_
.cab
I386/MMTASK.TS_
.cab
I386/MODE.CO_
.cab
I386/MODEM.IN_
.cab
I386/MODERN.FO_
.cab
I386/MOIM1201.PP_
.cab
I386/MONEY.BA_
.cab
I386/MONITOR.IN_
.cab
I386/MONO_522.PP_
.cab
I386/MORE.CO_
.cab
I386/MORICONS.DL_
.cab
I386/MOUCLASS.SY_
.cab
I386/MOUSE.DR_
.cab
I386/MPLAY32.EX_
.cab
I386/MPLAYER.CN_
.cab
I386/MPLAYER.FT_
.cab
I386/MPLAYER.HL_
.cab
I386/MPNOTIFY.EX_
.cab
I386/MPR.DL_
.cab
I386/MPRUI.DL_
.cab
I386/MSACM.DL_
.cab
I386/MSACM32.DL_
.cab
I386/MSACM32.DR_
.cab
I386/MSADP32.AC_
.cab
I386/MSAUDITE.DL_
.cab
I386/MSCDEXNT.EX_
.cab
I386/MSFS.SY_
.cab
I386/MSGINA.DL_
.cab
I386/MSGSM32.AC_
.cab
I386/MSGSVC.DL_
.cab
I386/MSMAIL32.CN_
.cab
I386/MSMAIL32.EX_
.cab
I386/MSMAIL32.FT_
.cab
I386/MSMAIL32.HL_
.cab
I386/MSNCDET.DL_
.cab
I386/MSOBJS.DL_
.cab
I386/MSP32_AM.LE_
.cab
I386/MSPELL32.DL_
.cab
I386/MSPRIVS.DL_
.cab
I386/MSRLE32.DL_
.cab
I386/MSRMND32.EX_
.cab
I386/MSSCHD32.DL_
.cab
I386/MSSFS32.DL_
.cab
I386/MSV1_0.DL_
.cab
I386/MSVBVM50.DL_
.cab
I386/MSVCP50.DL_
.cab
I386/MSVCRT.DL_
.cab
I386/MSVCRT20.DL_
.cab
I386/MSVCRT40.DL_
.cab
I386/MSVFW32.DL_
.cab
I386/MSVIDC32.DL_
.cab
I386/MSVIDEO.DL_
.cab
I386/MT735.DL_
.cab
I386/MT_TI101.PP_
.cab
I386/MULTIMED.CP_
.cab
I386/MUP.SY_
.cab
I386/MUSRMGR.CN_
.cab
I386/MUSRMGR.EX_
.cab
I386/MUSRMGR.HL_
.cab
I386/MVAUDIO.DL_
.cab
I386/MVAUDIO.SY_
.cab
I386/N2090522.PP_
.cab
I386/N2290520.PP_
.cab
I386/N890X505.PP_
.cab
I386/N890_470.PP_
.cab
I386/NAL.DL_
.cab
I386/NBF.SY_
.cab
I386/NBINFO.IN_
.cab
I386/NBTSTAT.EX_
.cab
I386/NC95FAX1.PP_
.cab
I386/NC97FAX1.PP_
.cab
I386/NCCPS401.PP_
.cab
I386/NCCPS801.PP_
.cab
I386/NCOL_519.PP_
.cab
I386/NCPA.CP_
.cab
I386/NCPARAM.IN_
.cab
I386/NCPASHEL.IN_
.cab
I386/NCR53C9X.SYS
.sys windows:3 windows x86 arch:x86

6e01e11efacc89e3b4ac9dc6a1607ffe

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

scsiport.sys

ScsiPortIoMapTransfer
ScsiPortNotification
ScsiPortCompleteRequest
ScsiPortGetLogicalUnit
ScsiPortFlushDma
ScsiPortGetSrb
ScsiPortReadPortUchar
ScsiPortStallExecution
ScsiPortWritePortUchar
ScsiPortLogError
ScsiPortInitialize
ScsiDebugPrint
ScsiPortConvertUlongToPhysicalAddress
ScsiPortGetBusData
ScsiPortFreeDeviceBase
ScsiPortGetDeviceBase

Sections

.text
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

INIT
Size: 512B - Virtual size: 508B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 928B - Virtual size: 920B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 416B - Virtual size: 394B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/NCR77C22.SY_
.cab
I386/NCRC700.SYS
.sys windows:3 windows x86 arch:x86

e401a83f6a890e5d1b08a0b49f85c15d

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

scsiport.sys

ScsiPortGetBusData
ScsiPortStallExecution
ScsiPortReadPortUchar
ScsiPortNotification
ScsiPortCompleteRequest
ScsiPortGetLogicalUnit
ScsiPortInitialize
ScsiPortGetUncachedExtension
ScsiPortConvertUlongToPhysicalAddress
ScsiPortWritePortUchar
ScsiPortGetDeviceBase
ScsiPortLogError
ScsiPortGetPhysicalAddress
ScsiPortMoveMemory
ScsiPortReadPortUlong
ScsiPortGetSrb
ScsiPortWritePortUlong

Sections

.text
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

INIT
Size: 576B - Virtual size: 558B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 928B - Virtual size: 912B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 384B - Virtual size: 374B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/NCRC710.SYS
.sys windows:3 windows x86 arch:x86

58d5adb16de1ffb227dd5c6633d557f2

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

scsiport.sys

ScsiPortInitialize
ScsiPortWritePortUchar
ScsiPortStallExecution
ScsiPortReadPortUchar
ScsiPortNotification
ScsiPortCompleteRequest
ScsiPortGetLogicalUnit
ScsiPortGetPhysicalAddress
ScsiPortMoveMemory
ScsiPortWritePortUlong
ScsiPortGetUncachedExtension
ScsiPortConvertUlongToPhysicalAddress
ScsiPortLogError
ScsiPortGetDeviceBase
ScsiPortGetBusData
ScsiPortFreeDeviceBase
ScsiPortReadPortUlong
ScsiPortGetSrb

Sections

.text
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

INIT
Size: 608B - Virtual size: 588B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 928B - Virtual size: 912B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 384B - Virtual size: 368B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/NCRC810.SYS
.sys windows:3 windows x86 arch:x86

381dad357b3b88acb0d2291d52e19218

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

scsiport.sys

ScsiPortFreeDeviceBase
ScsiPortWritePortUchar
ScsiPortStallExecution
ScsiPortReadPortUchar
ScsiPortNotification
ScsiPortCompleteRequest
ScsiPortGetPhysicalAddress
ScsiPortMoveMemory
ScsiPortInitialize
ScsiPortWritePortUlong
ScsiPortReadRegisterBufferUchar
ScsiPortGetDeviceBase
ScsiPortConvertUlongToPhysicalAddress
ScsiPortGetUncachedExtension
ScsiPortLogError
ScsiPortGetLogicalUnit
ScsiPortReadPortUlong
ScsiPortGetSrb

Sections

.text
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

INIT
Size: 608B - Virtual size: 600B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 928B - Virtual size: 928B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 384B - Virtual size: 376B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/NCS29901.PP_
.cab
I386/NCSW_951.PP_
.cab
I386/NDDEAGNT.EX_
.cab
I386/NDDEAPI.DL_
.cab
I386/NDDEAPIR.EX_
.cab
I386/NDDENB32.DL_
.cab
I386/NDIS.SY_
.cab
I386/NDIS30.DL_
.cab
I386/NDISTAPI.SY_
.cab
I386/NDISWAN.SY_
.cab
I386/NE1000.SY_
.cab
I386/NE2000.SY_
.cab
I386/NE3200.BI_
.cab
I386/NE3200.SY_
.cab
I386/NEC24PIN.DL_
.cab
I386/NET.EX_
.cab
I386/NET.HL_
.cab
I386/NET1.EX_
.cab
I386/NETAPI.DL_
.cab
I386/NETAPI.OS_
.cab
I386/NETAPI32.DL_
.cab
I386/NETBIOS.SY_
.cab
I386/NETBT.SY_
.cab
I386/NETDDE.EX_
.cab
I386/NETDTECT.DL_
.cab
I386/NETDTECT.IN_
.cab
I386/NETDTECT.SY_
.cab
I386/NETEVENT.DL_
.cab
I386/NETFLX.BI_
.cab
I386/NETFLX.DL_
.cab
I386/NETFLX.SY_
.cab
I386/NETH.DL_
.cab
I386/NETLOGON.DL_
.cab
I386/NETMSG.DL_
.cab
I386/NETRAP.DL_
.cab
I386/NETSTAT.EX_
.cab
I386/NETUI0.DL_
.cab
I386/NETUI1.DL_
.cab
I386/NETUI2.DL_
.cab
I386/NETWARE.DR_
.cab
I386/NETWORK.CN_
.cab
I386/NETWORK.HL_
.cab
I386/NETWORK.WR_
.cab
I386/NETWORKS._
.cab
I386/NIBBLES.BA_
.cab
I386/NLSFUNC.EX_
.cab
I386/NMAGENT.EX_
.cab
I386/NOTEPAD.CN_
.cab
I386/NOTEPAD.EX_
.cab
I386/NOTEPAD.HL_
.cab
I386/NPEISA.SY_
.cab
I386/NPFS.SY_
.cab
I386/NPMCA.SY_
.cab
I386/NT.DO_
.cab
I386/NT.FN_
.cab
I386/NT2.FN_
.cab
I386/NTBACKUP.EX_
.cab
I386/NTBOOKS.EX_
.cab
I386/NTCMDS.CN_
.cab
I386/NTCMDS.FT_
.cab
I386/NTCMDS.HL_
.cab
I386/NTCTL3D.DL_
.cab
I386/NTCX.SY_
.cab
I386/NTDETECT.COM
I386/NTDLL.DLL
.dll windows:3 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Exports

Exports

CsrAllocateCaptureBuffer
CsrAllocateCapturePointer
CsrAllocateMessagePointer
CsrCaptureMessageBuffer
CsrCaptureMessageString
CsrCaptureTimeout
CsrClientCallServer
CsrClientConnectToServer
CsrClientMaxMessage
CsrClientSendMessage
CsrClientThreadConnect
CsrFreeCaptureBuffer
CsrIdentifyAlertableThread
CsrNewThread
CsrProbeForRead
CsrProbeForWrite
CsrSetPriorityClass
CsrpProcessCallbackRequest
DbgBreakPoint
DbgPrint
DbgPrompt
DbgSsHandleKmApiMsg
DbgSsInitialize
DbgUiConnectToDbg
DbgUiContinue
DbgUiWaitStateChange
DbgUserBreakPoint
KiUserApcDispatcher
KiUserCallbackDispatcher
KiUserExceptionDispatcher
LdrAccessResource
LdrDisableThreadCalloutsForDll
LdrEnumResources
LdrFindEntryForAddress
LdrFindResourceDirectory_U
LdrFindResource_U
LdrGetDllHandle
LdrGetProcedureAddress
LdrInitializeThunk
LdrLoadDll
LdrProcessRelocationBlock
LdrQueryImageFileExecutionOptions
LdrQueryProcessModuleInformation
LdrShutdownProcess
LdrShutdownThread
LdrUnloadDll
LdrVerifyImageMatchesChecksum
NPXEMULATORTABLE
NlsMbCodePageTag
NlsMbOemCodePageTag
NtAcceptConnectPort
NtAccessCheck
NtAccessCheckAndAuditAlarm
NtAdjustGroupsToken
NtAdjustPrivilegesToken
NtAlertResumeThread
NtAlertThread
NtAllocateLocallyUniqueId
NtAllocateUuids
NtAllocateVirtualMemory
NtCallbackReturn
NtCancelIoFile
NtCancelTimer
NtClearEvent
NtClose
NtCloseObjectAuditAlarm
NtCompleteConnectPort
NtConnectPort
NtContinue
NtCreateDirectoryObject
NtCreateEvent
NtCreateEventPair
NtCreateFile
NtCreateIoCompletion
NtCreateKey
NtCreateMailslotFile
NtCreateMutant
NtCreateNamedPipeFile
NtCreatePagingFile
NtCreatePort
NtCreateProcess
NtCreateProfile
NtCreateSection
NtCreateSemaphore
NtCreateSymbolicLinkObject
NtCreateThread
NtCreateTimer
NtCreateToken
NtCurrentTeb
NtDelayExecution
NtDeleteFile
NtDeleteKey
NtDeleteValueKey
NtDeviceIoControlFile
NtDisplayString
NtDuplicateObject
NtDuplicateToken
NtEnumerateBus
NtEnumerateKey
NtEnumerateValueKey
NtExtendSection
NtFlushBuffersFile
NtFlushInstructionCache
NtFlushKey
NtFlushVirtualMemory
NtFlushWriteBuffer
NtFreeVirtualMemory
NtFsControlFile
NtGetContextThread
NtGetPlugPlayEvent
NtGetTickCount
NtImpersonateClientOfPort
NtImpersonateThread
NtInitializeRegistry
NtListenPort
NtLoadDriver
NtLoadKey
NtLockFile
NtLockVirtualMemory
NtMakeTemporaryObject
NtMapViewOfSection
NtNotifyChangeDirectoryFile
NtNotifyChangeKey
NtOpenDirectoryObject
NtOpenEvent
NtOpenEventPair
NtOpenFile
NtOpenIoCompletion
NtOpenKey
NtOpenMutant
NtOpenObjectAuditAlarm
NtOpenProcess
NtOpenProcessToken
NtOpenSection
NtOpenSemaphore
NtOpenSymbolicLinkObject
NtOpenThread
NtOpenThreadToken
NtOpenTimer
NtPlugPlayControl
NtPrivilegeCheck
NtPrivilegeObjectAuditAlarm
NtPrivilegedServiceAuditAlarm
NtProtectVirtualMemory
NtPulseEvent
NtQueryAttributesFile
NtQueryDefaultLocale
NtQueryDirectoryFile
NtQueryDirectoryObject
NtQueryEaFile
NtQueryEvent
NtQueryInformationFile
NtQueryInformationPort
NtQueryInformationProcess
NtQueryInformationThread
NtQueryInformationToken
NtQueryIntervalProfile
NtQueryIoCompletion
NtQueryKey
NtQueryMutant
NtQueryObject
NtQueryPerformanceCounter
NtQuerySection
NtQuerySecurityObject
NtQuerySemaphore
NtQuerySymbolicLinkObject
NtQuerySystemEnvironmentValue
NtQuerySystemInformation
NtQuerySystemTime
NtQueryTimer
NtQueryTimerResolution
NtQueryValueKey
NtQueryVirtualMemory
NtQueryVolumeInformationFile
NtRaiseException
NtRaiseHardError
NtReadFile
NtReadRequestData
NtReadVirtualMemory
NtRegisterNewDevice
NtRegisterThreadTerminatePort
NtReleaseMutant
NtReleaseProcessMutant
NtReleaseSemaphore
NtRemoveIoCompletion
NtReplaceKey
NtReplyPort
NtReplyWaitReceivePort
NtReplyWaitReplyPort
NtRequestPort
NtRequestWaitReplyPort
NtResetEvent
NtRestoreKey
NtResumeThread
NtSaveKey
NtSetContextThread
NtSetDefaultHardErrorPort
NtSetDefaultLocale
NtSetEaFile
NtSetEvent
NtSetHighEventPair
NtSetHighWaitLowEventPair
NtSetHighWaitLowThread
NtSetInformationFile
NtSetInformationKey
NtSetInformationObject
NtSetInformationProcess
NtSetInformationThread
NtSetInformationToken
NtSetIntervalProfile
NtSetIoCompletion
NtSetLdtEntries
NtSetLowEventPair
NtSetLowWaitHighEventPair
NtSetLowWaitHighThread
NtSetSecurityObject
NtSetSystemEnvironmentValue
NtSetSystemInformation
NtSetSystemPowerState
NtSetSystemTime
NtSetTimer
NtSetTimerResolution
NtSetValueKey
NtSetVolumeInformationFile
NtShutdownSystem
NtStartProfile
NtStopProfile
NtSuspendThread
NtSystemDebugControl
NtTerminateProcess
NtTerminateThread
NtTestAlert
NtUnloadDriver
NtUnloadKey
NtUnlockFile
NtUnlockVirtualMemory
NtUnmapViewOfSection
NtVdmControl
NtW32Call
NtWaitForMultipleObjects
NtWaitForProcessMutant
NtWaitForSingleObject
NtWaitHighEventPair
NtWaitLowEventPair
NtWriteFile
NtWriteRequestData
NtWriteVirtualMemory
PfxFindPrefix
PfxInitialize
PfxInsertPrefix
PfxRemovePrefix
RestoreEm87Context
RtlAbortRXact
RtlAbsoluteToSelfRelativeSD
RtlAcquirePebLock
RtlAcquireResourceExclusive
RtlAcquireResourceShared
RtlAddAccessAllowedAce
RtlAddAccessDeniedAce
RtlAddAce
RtlAddActionToRXact
RtlAddAttributeActionToRXact
RtlAddAuditAccessAce
RtlAdjustPrivilege
RtlAllocateAndInitializeSid
RtlAllocateHeap
RtlAnsiCharToUnicodeChar
RtlAnsiStringToUnicodeSize
RtlAnsiStringToUnicodeString
RtlAppendAsciizToString
RtlAppendStringToString
RtlAppendUnicodeStringToString
RtlAppendUnicodeToString
RtlApplyRXact
RtlApplyRXactNoFlush
RtlAreAllAccessesGranted
RtlAreAnyAccessesGranted
RtlAreBitsClear
RtlAreBitsSet
RtlAssert
RtlCaptureStackBackTrace
RtlCharToInteger
RtlCheckRegistryKey
RtlClearAllBits
RtlClearBits
RtlCompactHeap
RtlCompareMemory
RtlCompareMemoryUlong
RtlCompareString
RtlCompareUnicodeString
RtlCompressBuffer
RtlConsoleMultiByteToUnicodeN
RtlConvertExclusiveToShared
RtlConvertLongToLargeInteger
RtlConvertSharedToExclusive
RtlConvertSidToUnicodeString
RtlConvertUiListToApiList
RtlConvertUlongToLargeInteger
RtlCopyLuid
RtlCopyLuidAndAttributesArray
RtlCopySecurityDescriptor
RtlCopySid
RtlCopySidAndAttributesArray
RtlCopyString
RtlCopyUnicodeString
RtlCreateAcl
RtlCreateAndSetSD
RtlCreateEnvironment
RtlCreateHeap
RtlCreateProcessParameters
RtlCreateQueryDebugBuffer
RtlCreateRegistryKey
RtlCreateSecurityDescriptor
RtlCreateTagHeap
RtlCreateUnicodeString
RtlCreateUnicodeStringFromAsciiz
RtlCreateUserProcess
RtlCreateUserSecurityObject
RtlCreateUserThread
RtlCustomCPToUnicodeN
RtlCutoverTimeToSystemTime
RtlDeNormalizeProcessParams
RtlDecompressBuffer
RtlDecompressFragment
RtlDelete
RtlDeleteAce
RtlDeleteCriticalSection
RtlDeleteElementGenericTable
RtlDeleteRegistryValue
RtlDeleteResource
RtlDeleteSecurityObject
RtlDestroyEnvironment
RtlDestroyHeap
RtlDestroyProcessParameters
RtlDestroyQueryDebugBuffer
RtlDetermineDosPathNameType_U
RtlDoesFileExists_U
RtlDosPathNameToNtPathName_U
RtlDosSearchPath_U
RtlDumpResource
RtlEnlargedIntegerMultiply
RtlEnlargedUnsignedDivide
RtlEnlargedUnsignedMultiply
RtlEnterCriticalSection
RtlEnumProcessHeaps
RtlEnumerateGenericTable
RtlEnumerateGenericTableWithoutSplaying
RtlEqualComputerName
RtlEqualDomainName
RtlEqualLuid
RtlEqualPrefixSid
RtlEqualSid
RtlEqualString
RtlEqualUnicodeString
RtlEraseUnicodeString
RtlExpandEnvironmentStrings_U
RtlExtendHeap
RtlExtendedIntegerMultiply
RtlExtendedLargeIntegerDivide
RtlExtendedMagicDivide
RtlFillMemory
RtlFillMemoryUlong
RtlFindClearBits
RtlFindClearBitsAndSet
RtlFindLongestRunClear
RtlFindLongestRunSet
RtlFindMessage
RtlFindSetBits
RtlFindSetBitsAndClear
RtlFirstFreeAce
RtlFormatCurrentUserKeyPath
RtlFormatMessage
RtlFreeAnsiString
RtlFreeHeap
RtlFreeOemString
RtlFreeSid
RtlFreeUnicodeString
RtlGenerate8dot3Name
RtlGetAce
RtlGetCallersAddress
RtlGetCompressionWorkSpaceSize
RtlGetControlSecurityDescriptor
RtlGetCurrentDirectory_U
RtlGetDaclSecurityDescriptor
RtlGetElementGenericTable
RtlGetFullPathName_U
RtlGetGroupSecurityDescriptor
RtlGetLongestNtPathLength
RtlGetNtGlobalFlags
RtlGetNtProductType
RtlGetOwnerSecurityDescriptor
RtlGetProcessHeaps
RtlGetSaclSecurityDescriptor
RtlGetUserInfoHeap
RtlIdentifierAuthoritySid
RtlImageDirectoryEntryToData
RtlImageNtHeader
RtlImpersonateSelf
RtlInitAnsiString
RtlInitCodePageTable
RtlInitNlsTables
RtlInitString
RtlInitUnicodeString
RtlInitializeBitMap
RtlInitializeContext
RtlInitializeCriticalSection
RtlInitializeGenericTable
RtlInitializeRXact
RtlInitializeResource
RtlInitializeSid
RtlInsertElementGenericTable
RtlIntegerToChar
RtlIntegerToUnicodeString
RtlIsDosDeviceName_U
RtlIsGenericTableEmpty
RtlIsNameLegalDOS8Dot3
RtlIsTextUnicode
RtlLargeIntegerAdd
RtlLargeIntegerArithmeticShift
RtlLargeIntegerDivide
RtlLargeIntegerNegate
RtlLargeIntegerShiftLeft
RtlLargeIntegerShiftRight
RtlLargeIntegerSubtract
RtlLargeIntegerToChar
RtlLeaveCriticalSection
RtlLengthRequiredSid
RtlLengthSecurityDescriptor
RtlLengthSid
RtlLocalTimeToSystemTime
RtlLockHeap
RtlLookupElementGenericTable
RtlMakeSelfRelativeSD
RtlMapGenericMask
RtlMoveMemory
RtlMultiByteToUnicodeN
RtlMultiByteToUnicodeSize
RtlNewInstanceSecurityObject
RtlNewSecurityGrantedAccess
RtlNewSecurityObject
RtlNormalizeProcessParams
RtlNtStatusToDosError
RtlNumberGenericTableElements
RtlNumberOfClearBits
RtlNumberOfSetBits
RtlOemStringToUnicodeSize
RtlOemStringToUnicodeString
RtlOemToUnicodeN
RtlOpenCurrentUser
RtlPcToFileHeader
RtlPrefixString
RtlPrefixUnicodeString
RtlProtectHeap
RtlQueryEnvironmentVariable_U
RtlQueryInformationAcl
RtlQueryProcessBackTraceInformation
RtlQueryProcessDebugInformation
RtlQueryProcessHeapInformation
RtlQueryProcessLockInformation
RtlQueryRegistryValues
RtlQuerySecurityObject
RtlQueryTagHeap
RtlQueryTimeZoneInformation
RtlRaiseException
RtlRaiseStatus
RtlRandom
RtlReAllocateHeap
RtlRealPredecessor
RtlRealSuccessor
RtlReleasePebLock
RtlReleaseResource
RtlRemoteCall
RtlResetRtlTranslations
RtlRunDecodeUnicodeString
RtlRunEncodeUnicodeString
RtlSecondsSince1970ToTime
RtlSecondsSince1980ToTime
RtlSelfRelativeToAbsoluteSD
RtlSetAllBits
RtlSetBits
RtlSetCurrentDirectory_U
RtlSetCurrentEnvironment
RtlSetDaclSecurityDescriptor
RtlSetEnvironmentVariable
RtlSetGroupSecurityDescriptor
RtlSetInformationAcl
RtlSetOwnerSecurityDescriptor
RtlSetSaclSecurityDescriptor
RtlSetSecurityObject
RtlSetTimeZoneInformation
RtlSetUserFlagsHeap
RtlSetUserValueHeap
RtlSizeHeap
RtlSplay
RtlStartRXact
RtlSubAuthorityCountSid
RtlSubAuthoritySid
RtlSubtreePredecessor
RtlSubtreeSuccessor
RtlSystemTimeToLocalTime

Sections

.text
Size: 189KB - Virtual size: 189KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

ECODE
Size: 17KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 9KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

EDATA
Size: 512B - Virtual size: 364B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 64KB - Virtual size: 64KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/NTDOS.SY_
.cab
I386/NTEPC.SY_
.cab
I386/NTFS.SYS
.sys windows:3 windows x86 arch:x86

a53d7d8e8b1d3d28a0405eab92748a9b

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

ntoskrnl.exe

ExAcquireResourceExclusiveLite
FsRtlAllocatePoolWithTag
RtlCompareMemory
RtlInitUnicodeString
ExIsResourceAcquiredExclusiveLite
FsRtlOplockIsFastIoPossible
CcUnpinData
memmove
RtlGenerate8dot3Name
KeBugCheckEx
MmSetAddressRangeModified
CcCopyWrite
ExRaiseStatus
ExReleaseFastMutexUnsafe
ExAcquireFastMutexUnsafe
KeQuerySystemTime
MmCanFileBeTruncated
FsRtlInitializeLargeMcb
FsRtlAddLargeMcbEntry
RtlFindLongestRunClear
RtlNumberOfClearBits
FsRtlTruncateLargeMcb
FsRtlUninitializeLargeMcb
CcFlushCache
RtlAreBitsClear
RtlSetBits
RtlAreBitsSet
RtlClearBits
RtlFindClearBits
FsRtlGetNextLargeMcbEntry
FsRtlLookupLargeMcbEntry
FsRtlRemoveLargeMcbEntry
IoGetInitialStack
ObfDereferenceObject
CcUninitializeCacheMap
CcSetLogHandleForFile
CcInitializeCacheMap
IoCreateStreamFileObject
CcMapData
CcPinMappedData
CcPinRead
CcPreparePinWrite
KeSetTimer
CcSetDirtyPinnedData
CcMdlWriteComplete
CcMdlReadComplete
CcZeroData
KeLeaveCriticalRegion
IoSetTopLevelIrp
IoIsOperationSynchronous
KeEnterCriticalRegion
IofCompleteRequest
CcPurgeCacheSection
IoRemoveShareAccess
FsRtlNotifyFullReportChange
FsRtlIsNtstatusExpected
FsRtlFastUnlockAll
IoGetRequestorProcess
FsRtlCheckOplock
FsRtlNotifyCleanup
IoGetCurrentProcess
ExConvertExclusiveToSharedLite
ExQueueWorkItem
IoSetInformation
SeSinglePrivilegeCheck
MmFlushImageSection
IoCheckShareAccess
IoCheckEaBufferValidity
IoSetShareAccess
IoUpdateShareAccess
FsRtlCurrentBatchOplock
IofCallDriver
IoFreeMdl
MmProbeAndLockPages
IoAllocateMdl
MmMapLockedPages
IoFreeIrp
IoBuildPartialMdl
IoMakeAssociatedIrp
KeGetCurrentThread
RtlCompressBuffer
RtlGetCompressionWorkSpaceSize
RtlDecompressBuffer
RtlDecompressFragment
KeInitializeEvent
MmBuildMdlForNonPagedPool
ExGetExclusiveWaiterCount
KeDelayExecutionThread
ExAllocatePoolWithTag
MmUnlockPages
IoBuildAsynchronousFsdRequest
KeResetEvent
KeWaitForSingleObject
ExReleaseResourceForThreadLite
InterlockedDecrement
KeSetEvent
FsRtlIsTotalDeviceFailure
ObReferenceObjectByPointer
IoFileObjectType
RtlLookupElementGenericTable
FsRtlAreNamesEqual
FsRtlIsNameInExpression
ExFreePool
RtlInitializeBitMap
ExReleaseResourceLite
RtlUpperString
RtlCompareString
RtlInitString
FsRtlLegalAnsiCharacterArray
NlsOemLeadByteInfo
NlsMbOemCodePageTag
RtlDeleteElementGenericTable
FsRtlNormalizeNtstatus
FsRtlBalanceReads
ObQueryNameString
CcCopyRead
CcSetAdditionalCacheAttributes
IoCreateDevice
FsRtlOplockFsctrl
IoBuildDeviceIoControlRequest
CcCanIWrite
ExfInterlockedAddUlong
FsRtlPrivateLock
FsRtlFastUnlockSingle
FsRtlFastUnlockAllByKey
FsRtlProcessFileLock
KeSetPriorityThread
CcGetDirtyPages
ExInitializeResourceLite
KeInitializeSpinLock
ExDeleteResourceLite
FsRtlLookupLastLargeMcbEntry
FsRtlNumberOfRunsInLargeMcb
FsRtlSplitLargeMcb
FsRtlDissectName
RtlFreeOemString
RtlUnicodeStringToCountedOemString
FsRtlIsFatDbcsLegal
FsRtlFastCheckLockForWrite
FsRtlFastCheckLockForRead
IoRaiseInformationalHardError
IoIsSystemThread
KeInitializeDpc
KeInitializeTimer
IoRegisterFileSystem
KeBugCheck
MmQuerySystemSize
FsRtlCopyWrite
FsRtlCopyRead
ZwClose
ZwQueryValueKey
ZwOpenKey
RtlDelete
RtlSplay
FsRtlPostStackOverflow
FsRtlPostPagingFileStackOverflow
CcMdlRead
CcSetReadAheadGranularity
FsRtlCheckLockForReadAccess
ExIsResourceAcquiredSharedLite
ExAcquireSharedWaitForExclusive
ExAcquireSharedStarveExclusive
MmIsRecursiveIoFault
IoReleaseVpbSpinLock
IoAcquireVpbSpinLock
SeDeassignSecurity
RtlLengthSecurityDescriptor
SeAssignSecurity
IoGetFileObjectGenericMapping
SeSetSecurityDescriptorInfo
SeQuerySecurityDescriptorInfo
SeUnlockSubjectContext
SeOpenObjectAuditAlarm
RtlAppendUnicodeStringToString
RtlCopyUnicodeString
SeAuditingFileEvents
SeFreePrivileges
SeAppendPrivileges
SeAccessCheck
SeLockSubjectContext
SeValidSecurityDescriptor
IoBuildSynchronousFsdRequest
MmIsThisAnNtAsSystem
FsRtlNotifyInitializeSync
RtlInitializeGenericTable
IoDeleteDevice
FsRtlNotifyUninitializeSync
RtlInsertElementGenericTable
RtlEnumerateGenericTableWithoutSplaying
FsRtlUninitializeOplock
FsRtlInitializeOplock
FsRtlUninitializeFileLock
FsRtlInitializeFileLock
SeReleaseSubjectContext
ExReinitializeResourceLite
ExQueryPoolBlockSize
IoGetRelatedDeviceObject
CcPrepareMdlWrite
FsRtlCheckLockForWriteAccess
CcDeferWrite
RtlUnwind
CcSetFileSizes
ExAcquireResourceSharedLite
IoGetTopLevelIrp
FsRtlNotifyFullChangeDirectory
FsRtlDoesNameContainWildCards
SeCaptureSubjectContext
CcUnpinDataForThread
RtlFillMemoryUlong

hal

ExTryToAcquireFastMutex
KfAcquireSpinLock
KfReleaseSpinLock
ExAcquireFastMutex
ExReleaseFastMutex

Sections

.text
Size: 60KB - Virtual size: 60KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

PAGE
Size: 219KB - Virtual size: 219KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

INIT
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 928B - Virtual size: 912B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/NTIO.SY_
.cab
I386/NTKRNLMP.EXE
.sys windows:3 windows x86 arch:x86

707df60117d063beb6ec387e30998738

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

hal

KdPortSave
KfAcquireSpinLock
KfRaiseIrql
KfLowerIrql
HalQueryRealTimeClock
HalSetRealTimeClock
ExReleaseFastMutex
HalSetTimeIncrement
ExAcquireFastMutex
KeGetCurrentIrql
HalDisplayString
HalReturnToFirmware
KeQueryPerformanceCounter
HalGetEnvironmentVariable
HalSetEnvironmentVariable
HalInitSystem
HalReportResourceUsage
HalAllProcessorsStarted
HalAllocateAdapterChannel
HalGetInterruptVector
HalTranslateBusAddress
HalAdjustResourceList
IoAssignDriveLetters
IoReadPartitionTable
HalAllocateCommonBuffer
KdPortInitialize
KdPortGetByte
KdPortPutByte
KdPortPollByte
KfReleaseSpinLock
KdPortRestore
READ_PORT_ULONG
READ_PORT_USHORT
READ_PORT_UCHAR
WRITE_PORT_ULONG
WRITE_PORT_USHORT
WRITE_PORT_UCHAR
HalInitializeProcessor
HalProcessorIdle
HalClearSoftwareInterrupt
HalRequestSoftwareInterrupt
HalRequestIpi
HalHandleNMI
HalBeginSystemInterrupt
HalEndSystemInterrupt
KeStallExecutionProcessor
HalEnableSystemInterrupt
HalDisableSystemInterrupt
KeRaiseIrql
KeLowerIrql
HalSetProfileInterval
HalStartProfileInterrupt
HalStopProfileInterrupt
HalCalibratePerformanceCounter
HalStartNextProcessor
HalQueryDisplayParameters
KeFlushWriteBuffer
ExTryToAcquireFastMutex

Exports

Exports

CcCanIWrite
CcCopyRead
CcCopyWrite
CcDeferWrite
CcFlushCache
CcGetDirtyPages
CcGetFileObjectFromBcb
CcGetFileObjectFromSectionPtrs
CcGetLsnForFileObject
CcInitializeCacheMap
CcIsThereDirtyData
CcMapData
CcMdlRead
CcMdlReadComplete
CcMdlWriteComplete
CcPinMappedData
CcPinRead
CcPrepareMdlWrite
CcPreparePinWrite
CcPurgeCacheSection
CcRepinBcb
CcScheduleReadAhead
CcSetAdditionalCacheAttributes
CcSetDirtyPageThreshold
CcSetDirtyPinnedData
CcSetFileSizes
CcSetLogHandleForFile
CcSetReadAheadGranularity
CcUninitializeCacheMap
CcUnpinData
CcUnpinDataForThread
CcUnpinRepinnedBcb
CcZeroData
DbgBreakPoint
DbgLoadImageSymbols
DbgPrint
DbgPrompt
ExAcquireFastMutexUnsafe
ExAcquireResourceExclusive
ExAcquireResourceExclusiveLite
ExAcquireResourceSharedLite
ExAcquireSharedStarveExclusive
ExAcquireSharedWaitForExclusive
ExAllocatePool
ExAllocatePoolWithQuota
ExAllocatePoolWithQuotaTag
ExAllocatePoolWithTag
ExConvertExclusiveToSharedLite
ExCreateCallback
ExDeleteResource
ExDeleteResourceLite
ExDisableResourceBoostLite
ExEventObjectType
ExExtendZone
ExFreePool
ExGetExclusiveWaiterCount
ExGetSharedWaiterCount
ExInitializeResource
ExInitializeResourceLite
ExInitializeZone
ExInterlockedAddLargeInteger
ExInterlockedAddLargeStatistic
ExInterlockedAddUlong
ExInterlockedDecrementLong
ExInterlockedExchangeUlong
ExInterlockedExtendZone
ExInterlockedIncrementLong
ExInterlockedInsertHeadList
ExInterlockedInsertTailList
ExInterlockedPopEntryList
ExInterlockedPushEntryList
ExInterlockedRemoveHeadList
ExIsResourceAcquiredExclusiveLite
ExIsResourceAcquiredSharedLite
ExLocalTimeToSystemTime
ExNotifyCallback
ExPostSystemEvent
ExQueryPoolBlockSize
ExQueueWorkItem
ExRaiseAccessViolation
ExRaiseDatatypeMisalignment
ExRaiseException
ExRaiseHardError
ExRaiseStatus
ExRegisterCallback
ExReinitializeResourceLite
ExReleaseFastMutexUnsafe
ExReleaseResourceForThread
ExReleaseResourceForThreadLite
ExReleaseResourceLite
ExSystemExceptionFilter
ExSystemTimeToLocalTime
ExUnregisterCallback
ExfInterlockedAddUlong
ExfInterlockedInsertHeadList
ExfInterlockedInsertTailList
ExfInterlockedPopEntryList
ExfInterlockedPushEntryList
ExfInterlockedRemoveHeadList
Exfi386InterlockedDecrementLong
Exfi386InterlockedExchangeUlong
Exfi386InterlockedIncrementLong
Exi386InterlockedDecrementLong
Exi386InterlockedExchangeUlong
Exi386InterlockedIncrementLong
FsRtlAddLargeMcbEntry
FsRtlAddMcbEntry
FsRtlAllocatePool
FsRtlAllocatePoolWithQuota
FsRtlAllocatePoolWithQuotaTag
FsRtlAllocatePoolWithTag
FsRtlAllocateResource
FsRtlAreNamesEqual
FsRtlBalanceReads
FsRtlCheckLockForReadAccess
FsRtlCheckLockForWriteAccess
FsRtlCheckOplock
FsRtlCopyRead
FsRtlCopyWrite
FsRtlCurrentBatchOplock
FsRtlDeregisterUncProvider
FsRtlDissectDbcs
FsRtlDissectName
FsRtlDoesDbcsContainWildCards
FsRtlDoesNameContainWildCards
FsRtlFastCheckLockForRead
FsRtlFastCheckLockForWrite
FsRtlFastUnlockAll
FsRtlFastUnlockAllByKey
FsRtlFastUnlockSingle
FsRtlGetNextFileLock
FsRtlGetNextLargeMcbEntry
FsRtlGetNextMcbEntry
FsRtlInitializeFileLock
FsRtlInitializeLargeMcb
FsRtlInitializeMcb
FsRtlInitializeOplock
FsRtlIsDbcsInExpression
FsRtlIsFatDbcsLegal
FsRtlIsHpfsDbcsLegal
FsRtlIsNameInExpression
FsRtlIsNtstatusExpected
FsRtlIsTotalDeviceFailure
FsRtlLegalAnsiCharacterArray
FsRtlLookupLargeMcbEntry
FsRtlLookupLastLargeMcbEntry
FsRtlLookupLastMcbEntry
FsRtlLookupMcbEntry
FsRtlMdlRead
FsRtlNormalizeNtstatus
FsRtlNotifyChangeDirectory
FsRtlNotifyCleanup
FsRtlNotifyFullChangeDirectory
FsRtlNotifyFullReportChange
FsRtlNotifyInitializeSync
FsRtlNotifyReportChange
FsRtlNotifyUninitializeSync
FsRtlNumberOfRunsInLargeMcb
FsRtlNumberOfRunsInMcb
FsRtlOplockFsctrl
FsRtlOplockIsFastIoPossible
FsRtlPostPagingFileStackOverflow
FsRtlPostStackOverflow
FsRtlPrepareMdlWrite
FsRtlPrivateLock
FsRtlProcessFileLock
FsRtlRegisterUncProvider
FsRtlRemoveLargeMcbEntry
FsRtlRemoveMcbEntry
FsRtlSplitLargeMcb
FsRtlSyncVolumes
FsRtlTruncateLargeMcb
FsRtlTruncateMcb
FsRtlUninitializeFileLock
FsRtlUninitializeLargeMcb
FsRtlUninitializeMcb
FsRtlUninitializeOplock
HalDispatchTable
HalPrivateDispatchTable
InterlockedDecrement
InterlockedExchange
InterlockedIncrement
IoAcquireCancelSpinLock
IoAcquireVpbSpinLock
IoAdapterObjectType
IoAllocateAdapterChannel
IoAllocateController
IoAllocateErrorLogEntry
IoAllocateIrp
IoAllocateMdl
IoAssignResources
IoAttachDevice
IoAttachDeviceByPointer
IoBuildAsynchronousFsdRequest
IoBuildDeviceIoControlRequest
IoBuildPartialMdl
IoBuildSynchronousFsdRequest
IoCallDriver
IoCancelIrp
IoCheckDesiredAccess
IoCheckEaBufferValidity
IoCheckFunctionAccess
IoCheckShareAccess
IoCompleteRequest
IoConnectInterrupt
IoCreateController
IoCreateDevice
IoCreateFile
IoCreateStreamFileObject
IoCreateSymbolicLink
IoCreateSynchronizationEvent
IoCreateUnprotectedSymbolicLink
IoDeleteController
IoDeleteDevice
IoDeleteSymbolicLink
IoDetachDevice
IoDeviceObjectType
IoDisconnectInterrupt
IoDriverObjectType
IoEnqueueIrp
IoFileObjectType
IoFreeController
IoFreeIrp
IoFreeMdl
IoGetAttachedDevice
IoGetConfigurationInformation
IoGetCurrentProcess
IoGetDeviceObjectPointer
IoGetDeviceToVerify
IoGetFileObjectGenericMapping
IoGetInitialStack
IoGetRelatedDeviceObject
IoGetRequestorProcess
IoGetTopLevelIrp
IoInitializeIrp
IoInitializeTimer
IoIsOperationSynchronous
IoIsSystemThread
IoMakeAssociatedIrp
IoPageRead
IoQueryDeviceDescription
IoQueryFileInformation
IoQueryVolumeInformation
IoRaiseHardError
IoRaiseInformationalHardError
IoReadOperationCount
IoReadTransferCount
IoRegisterDriverReinitialization
IoRegisterFileSystem
IoRegisterFsRegistrationChange
IoRegisterShutdownNotification
IoReleaseCancelSpinLock
IoReleaseVpbSpinLock
IoRemoveShareAccess
IoReportHalResourceUsage
IoReportResourceUsage
IoSetDeviceToVerify
IoSetHardErrorOrVerifyDevice
IoSetInformation
IoSetShareAccess
IoSetTopLevelIrp
IoStartNextPacket
IoStartNextPacketByKey
IoStartPacket
IoStartTimer
IoStatisticsLock
IoStopTimer
IoSynchronousPageWrite
IoThreadToProcess
IoUnregisterFileSystem
IoUnregisterFsRegistrationChange
IoUnregisterShutdownNotification
IoUpdateShareAccess
IoVerifyVolume
IoWriteErrorLogEntry
IoWriteOperationCount
IoWriteTransferCount
IofCallDriver
IofCompleteRequest
KdDebuggerEnabled
KdDebuggerNotPresent
KdPollBreakIn
Ke386CallBios
Ke386IoSetAccessProcess
Ke386QueryIoAccessMap
Ke386SetIoAccessMap
KeAcquireSpinLockAtDpcLevel
KeAddSystemServiceTable
KeAttachProcess
KeBugCheck
KeBugCheckEx
KeCancelTimer
KeClearEvent
KeConnectInterrupt
KeDcacheFlushCount
KeDelayExecutionThread
KeDeregisterBugCheckCallback
KeDetachProcess
KeDisconnectInterrupt
KeEnterCriticalRegion
KeEnterKernelDebugger
KeFindConfigurationEntry
KeFindConfigurationNextEntry
KeFlushEntireTb
KeGetCurrentThread
KeGetPreviousMode
KeI386AbiosCall
KeI386AllocateGdtSelectors
KeI386Call16BitFunction
KeI386FlatToGdtSelector
KeI386GetLid
KeI386MachineType
KeI386ReleaseGdtSelectors
KeI386ReleaseLid
KeI386SetGdtSelector
KeIcacheFlushCount
KeInitializeApc
KeInitializeDeviceQueue
KeInitializeDpc
KeInitializeEvent
KeInitializeInterrupt
KeInitializeMutant
KeInitializeMutex
KeInitializeQueue
KeInitializeSemaphore
KeInitializeSpinLock
KeInitializeTimer
KeInsertByKeyDeviceQueue
KeInsertDeviceQueue
KeInsertHeadQueue
KeInsertQueue
KeInsertQueueApc
KeInsertQueueDpc
KeIsExecutingDpc
KeLeaveCriticalRegion
KeLoaderBlock
KeNumberProcessors
KeProfileInterrupt
KeProfileInterruptWithSource
KePulseEvent
KeQuerySystemTime
KeQueryTickCount
KeQueryTimeIncrement
KeReadStateEvent
KeReadStateMutant
KeReadStateMutex
KeReadStateQueue
KeReadStateSemaphore
KeReadStateTimer
KeRegisterBugCheckCallback
KeReleaseMutant
KeReleaseMutex
KeReleaseSemaphore
KeReleaseSpinLockFromDpcLevel
KeRemoveByKeyDeviceQueue
KeRemoveDeviceQueue
KeRemoveEntryDeviceQueue
KeRemoveQueue
KeRemoveQueueDpc
KeResetEvent
KeServiceDescriptorTable
KeSetBasePriorityThread
KeSetDmaIoCoherency
KeSetEvent
KeSetEventBoostPriority
KeSetImportanceDpc
KeSetPriorityThread
KeSetTargetProcessorDpc
KeSetTimeIncrement
KeSetTimer
KeSynchronizeExecution
KeTerminateThread
KeTickCount
KeUpdateRunTime
KeUpdateSystemTime
KeUserModeCallback
KeWaitForMultipleObjects
KeWaitForMutexObject
KeWaitForSingleObject
KefAcquireSpinLockAtDpcLevel
KefReleaseSpinLockFromDpcLevel
Kei386EoiHelper
KiAcquireSpinLock
KiCoprocessorError
KiDeliverApc
KiDispatchInterrupt
KiIpiSend
KiIpiServiceRoutine
KiReleaseSpinLock
KiUnexpectedInterrupt
Kii386SpinOnSpinLock
LdrAccessResource
LdrEnumResources
LdrFindResource_U
LpcRequestPort
LsaCallAuthenticationPackage
LsaDeregisterLogonProcess
LsaFreeReturnBuffer
LsaLogonUser
LsaLookupAuthenticationPackage
LsaRegisterLogonProcess
MmAdjustWorkingSetSize
MmAllocateContiguousMemory
MmAllocateNonCachedMemory
MmBuildMdlForNonPagedPool
MmCanFileBeTruncated
MmCreateMdl
MmCreateSection
MmDbgTranslatePhysicalAddress
MmDisableModifiedWriteOfSection
MmFlushImageSection
MmForceSectionClosed
MmFreeContiguousMemory
MmFreeNonCachedMemory
MmGetPhysicalAddress
MmIsAddressValid
MmIsNonPagedSystemAddressValid
MmIsRecursiveIoFault
MmIsThisAnNtAsSystem
MmLockPagableDataSection
MmLockPagableImageSection
MmLockPagableSectionByHandle
MmMapIoSpace
MmMapLockedPages
MmMapMemoryDumpMdl
MmMapViewInSystemSpace
MmMapViewOfSection
MmPageEntireDriver
MmProbeAndLockPages
MmQuerySystemSize
MmResetDriverPaging
MmSectionObjectType
MmSecureVirtualMemory
MmSetAddressRangeModified
MmSetBankedSection
MmSizeOfMdl
MmUnlockPagableImageSection
MmUnlockPages
MmUnmapIoSpace
MmUnmapLockedPages
MmUnmapViewInSystemSpace
MmUnmapViewOfSection
MmUnsecureVirtualMemory
NlsLeadByteInfo
NlsMbCodePageTag
NlsMbOemCodePageTag
NlsOemLeadByteInfo
NtAdjustPrivilegesToken
NtAllocateLocallyUniqueId
NtAllocateUuids
NtAllocateVirtualMemory
NtBuildNumber
NtClose
NtConnectPort
NtCreateEvent
NtCreateFile
NtCreateSection
NtDeleteFile
NtDeviceIoControlFile
NtDuplicateObject
NtDuplicateToken
NtFreeVirtualMemory
NtFsControlFile
NtGlobalFlag
NtLockFile
NtMapViewOfSection
NtNotifyChangeDirectoryFile
NtOpenFile
NtOpenProcess
NtOpenProcessToken
NtQueryDirectoryFile
NtQueryEaFile
NtQueryInformationFile
NtQueryInformationProcess
NtQueryInformationToken
NtQuerySecurityObject
NtQueryVolumeInformationFile
NtReadFile
NtRequestPort
NtRequestWaitReplyPort
NtSetEvent
NtSetInformationFile
NtSetInformationProcess
NtSetInformationThread
NtSetSecurityObject
NtUnlockFile
NtVdmControl
NtWaitForSingleObject
NtWriteFile
ObCreateObject
ObDereferenceObject
ObGetObjectPointerCount
ObInsertObject
ObMakeTemporaryObject
ObOpenObjectByPointer
ObQueryNameString
ObReferenceObjectByHandle
ObReferenceObjectByPointer
ObfDereferenceObject
PfxFindPrefix

Sections

.text
Size: 255KB - Virtual size: 255KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 36KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

PAGELK
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

PAGE
Size: 337KB - Virtual size: 337KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

PAGEKD
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

PAGEPO
Size: 64B - Virtual size: 8B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.edata
Size: 25KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

PAGE
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

PAGEKD
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

INIT
Size: 69KB - Virtual size: 69KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/NTLANMAN.DL_
.cab
I386/NTLANMAN.IN_
.cab
I386/NTLANUI.DL_
.cab
I386/NTLDR
I386/NTLMINST.IN_
.cab
I386/NTLMSSPS.DL_
.cab
I386/NTLSAPI.DL_
.cab
I386/NTMENU.SE_
.cab
I386/NTOSKRNL.EX_
.cab
I386/NTVDM.EX_
.cab
I386/NTXALL.SY_
.cab
I386/NTXEM.SY_
.cab
I386/NULL.SY_
.cab
I386/NW16.EX_
.cab
I386/NWAPI16.DL_
.cab
I386/NWAPI32.DL_
.cab
I386/NWC.CP_
.cab
I386/NWCFG.DL_
.cab
I386/NWDOC.CN_
.cab
I386/NWDOC.HL_
.cab
I386/NWEVENT.DL_
.cab
I386/NWLNKIPX.SY_
.cab
I386/NWLNKNB.SY_
.cab
I386/NWLNKRIP.SY_
.cab
I386/NWLNKSPX.SY_
.cab
I386/NWPROVAU.DL_
.cab
I386/NWRDR.SY_
.cab
I386/NWSAP.DL_
.cab
I386/NWWKS.DL_
.cab
I386/O5241503.PP_
.cab
I386/O5242503.PP_
.cab
I386/OEMNADAM.IN_
.cab
I386/OEMNADAP.IN_
.cab
I386/OEMNADAR.IN_
.cab
I386/OEMNADD1.IN_
.cab
I386/OEMNADD2.IN_
.cab
I386/OEMNADD3.IN_
.cab
I386/OEMNADD4.IN_
.cab
I386/OEMNADDE.IN_
.cab
I386/OEMNADDF.IN_
.cab
I386/OEMNADDI.IN_
.cab
I386/OEMNADDS.IN_
.cab
I386/OEMNADDT.IN_
.cab
I386/OEMNADE1.IN_
.cab
I386/OEMNADE2.IN_
.cab
I386/OEMNADE3.IN_
.cab
I386/OEMNADEE.IN_
.cab
I386/OEMNADEM.IN_
.cab
I386/OEMNADEN.IN_
.cab
I386/OEMNADFD.IN_
.cab
I386/OEMNADIM.IN_
.cab
I386/OEMNADIN.IN_
.cab
I386/OEMNADLB.IN_
.cab
I386/OEMNADLM.IN_
.cab
I386/OEMNADLT.IN_
.cab
I386/OEMNADN1.IN_
.cab
I386/OEMNADN2.IN_
.cab
I386/OEMNADNE.IN_
.cab
I386/OEMNADNF.IN_
.cab
I386/OEMNADNI.IN_
.cab
I386/OEMNADNM.IN_
.cab
I386/OEMNADNP.IN_
.cab
I386/OEMNADP3.IN_
.cab
I386/OEMNADP9.IN_
.cab
I386/OEMNADPM.IN_
.cab
I386/OEMNADT2.IN_
.cab
I386/OEMNADTK.IN_
.cab
I386/OEMNADTM.IN_
.cab
I386/OEMNADUB.IN_
.cab
I386/OEMNADUM.IN_
.cab
I386/OEMNADWD.IN_
.cab
I386/OEMNADWM.IN_
.cab
I386/OEMNADZZ.IN_
.cab
I386/OEMNSVBH.IN_
.cab
I386/OEMNSVCU.IN_
.cab
I386/OEMNSVFT.IN_
.cab
I386/OEMNSVNB.IN_
.cab
I386/OEMNSVNW.IN_
.cab
I386/OEMNSVRA.IN_
.cab
I386/OEMNSVRP.IN_
.cab
I386/OEMNSVSA.IN_
.cab
I386/OEMNSVSM.IN_
.cab
I386/OEMNSVSP.IN_
.cab
I386/OEMNSVSV.IN_
.cab
I386/OEMNSVTP.IN_
.cab
I386/OEMNSVWK.IN_
.cab
I386/OEMNXPDL.IN_
.cab
I386/OEMNXPIP.IN_
.cab
I386/OEMNXPNB.IN_
.cab
I386/OEMNXPSN.IN_
.cab
I386/OEMNXPST.IN_
.cab
I386/OEMNXPTC.IN_
.cab
I386/OK801PF1.PP_
.cab
I386/OKI24.DL_
.cab
I386/OKI9.DL_
.cab
I386/OKI9IBM.DL_
.cab
I386/OKOL8501.PP_
.cab
I386/OKOL8701.PP_
.cab
I386/OL830525.PP_
.cab
I386/OL840518.PP_
.cab
I386/OLE2.DL_
.cab
I386/OLE2DISP.DL_
.cab
I386/OLE2NLS.DL_
.cab
I386/OLE32.DL_
.cab
I386/OLEAUT32.DL_
.cab
I386/OLECLI.DL_
.cab
I386/OLECLI32.DL_
.cab
I386/OLECNV32.DL_
.cab
I386/OLEDLG.DL_
.cab
I386/OLEPRO32.DL_
.cab
I386/OLESVR.DL_
.cab
I386/OLESVR32.DL_
.cab
I386/OLETHK32.DL_
.cab
I386/OLIDM24.DL_
.cab
I386/OLIDM9.DL_
.cab
I386/OLISCSI.SYS
.sys windows:3 windows x86 arch:x86

261050b8e3536ff46425dc537827d9db

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

scsiport.sys

ScsiPortFreeDeviceBase
ScsiPortMoveMemory
ScsiPortWritePortUchar
ScsiPortReadPortUlong
ScsiPortReadPortUshort
ScsiPortReadPortUchar
ScsiPortStallExecution
ScsiPortInitialize
ScsiPortLogError
ScsiPortConvertUlongToPhysicalAddress
ScsiPortGetPhysicalAddress
ScsiPortGetDeviceBase
ScsiPortGetLogicalUnit
ScsiPortCompleteRequest
ScsiPortNotification
ScsiPortGetVirtualAddress
ScsiPortWritePortUlong
ScsiPortWritePortUshort
ScsiPortGetUncachedExtension
ScsiPortGetSrb

Sections

.text
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

INIT
Size: 672B - Virtual size: 654B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 960B - Virtual size: 944B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 608B - Virtual size: 608B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/OLIV5000.PP_
.cab
I386/OLIVETI1.PP_
.cab
I386/OLIVETI2.PP_
.cab
I386/OPENGL32.DL_
.cab
I386/OS2.EX_
.cab
I386/OS2SRV.EX_
.cab
I386/OS2SS.EX_
.cab
I386/OSO007._
.cab
I386/OSO009._
.cab
I386/OSO010._
.cab
I386/OSO012._
.cab
I386/OSO016._
.cab
I386/OSO029._
.cab
I386/OTHER.IN_
.cab
I386/P4455514.PP_
.cab
I386/PABNSP32.DL_
.cab
I386/PACKAGER.CN_
.cab
I386/PACKAGER.HL_
.cab
I386/PACKGR32.EX_
.cab
I386/PAD.IN_
.cab
I386/PAINTJET.DL_
.cab
I386/PANEL.SE_
.cab
I386/PANSON24.DL_
.cab
I386/PANSON9.DL_
.cab
I386/PAP54001.PP_
.cab
I386/PAP54101.PP_
.cab
I386/PARALLEL.SY_
.cab
I386/PARPORT.SY_
.cab
I386/PARTIAL.IN_
.cab
I386/PASSPORT.MI_
.cab
I386/PAUSE.SE_
.cab
I386/PAX.EX_
.cab
I386/PBRUSH.CN_
.cab
I386/PBRUSH.EX_
.cab
I386/PBRUSH.HL_
.cab
I386/PCIMAC.SY_
.cab
I386/PCL.SE_
.cab
I386/PCL1200.DL_
.cab
I386/PCMCIA.SYS
.sys windows:3 windows x86 arch:x86

c8fba19172ed2229c195c4386d962063

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

ntoskrnl.exe

RtlAppendUnicodeToString
ExAllocatePoolWithTag
IoCreateSymbolicLink
IoCreateDevice
RtlCompareUnicodeString
RtlFreeUnicodeString
RtlAnsiStringToUnicodeString
RtlInitAnsiString
IofCompleteRequest
memmove
IoWriteErrorLogEntry
ZwOpenKey
RtlAppendUnicodeStringToString
ZwSetValueKey
ZwCreateKey
RtlIntegerToUnicodeString
RtlCompareMemory
ZwEnumerateKey
READ_REGISTER_UCHAR
WRITE_REGISTER_UCHAR
MmUnmapIoSpace
MmMapIoSpace
ZwQueryValueKey
strstr
IoStartTimer
IoInitializeTimer
READ_REGISTER_USHORT
RtlLargeIntegerDivide
ZwClose
RtlQueryRegistryValues
ExFreePool
RtlInitUnicodeString
KeInitializeSpinLock
KeSynchronizeExecution
KeInitializeDpc
IoDeleteSymbolicLink
IoDeleteDevice
IoAllocateErrorLogEntry
IoRegisterShutdownNotification
IoQueryDeviceDescription

hal

KeQueryPerformanceCounter
WRITE_PORT_USHORT
HalTranslateBusAddress
HalGetBusData
READ_PORT_USHORT
WRITE_PORT_UCHAR
READ_PORT_UCHAR
HalAssignSlotResources
KeStallExecutionProcessor

Sections

.text
Size: 15KB - Virtual size: 15KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 704B - Virtual size: 700B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

INIT
Size: 18KB - Virtual size: 18KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/PCNET.HL_
.cab
I386/PENTNT.EX_
.cab
I386/PERFC009.DA_
.cab
I386/PERFCTRS.DL_
.cab
I386/PERFH009.DA_
.cab
I386/PERFMON.CN_
.cab
I386/PERFMON.EX_
.cab
I386/PERFMON.FT_
.cab
I386/PERFMON.HL_
.cab
I386/PERFNW.DL_
.cab
I386/PHIIPX.PP_
.cab
I386/PIANO.AN_
.cab
I386/PID.EX_
.cab
I386/PID.HL_
.cab
I386/PIFEDIT.CN_
.cab
I386/PIFEDIT.EX_
.cab
I386/PIFEDIT.HL_
.cab
I386/PINBALL.SYS
.sys windows:3 windows x86 arch:x86

92fd499634f8b50e97f639c58f2a3fbd

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

ntoskrnl.exe

ExRaiseStatus
IoCreateStreamFileObject
memmove
CcSetFileSizes
CcCopyWrite
ObfDereferenceObject
CcUninitializeCacheMap
KeBugCheckEx
FsRtlAddMcbEntry
FsRtlLookupMcbEntry
FsRtlUninitializeMcb
FsRtlGetNextMcbEntry
FsRtlLookupLastMcbEntry
FsRtlInitializeMcb
FsRtlRemoveMcbEntry
ExReleaseResourceLite
ExFreePool
FsRtlAllocatePoolWithTag
RtlNumberOfSetBits
RtlInitializeBitMap
RtlClearBits
RtlAreBitsSet
RtlSetBits
RtlAreBitsClear
RtlFindSetBits
RtlFindLongestRunSet
RtlFindFirstRunSet
CcMapData
CcPinRead
CcPinMappedData
CcPreparePinWrite
KeSetTimer
KeRemoveQueueDpc
KeCancelTimer
KeQuerySystemTime
CcSetDirtyPinnedData
CcRepinBcb
CcUnpinRepinnedBcb
CcMdlWriteComplete
CcMdlReadComplete
KeWaitForSingleObject
KeInitializeEvent
ExAcquireResourceSharedLite
ExAcquireResourceExclusiveLite
KeLeaveCriticalRegion
IoSetTopLevelIrp
IoIsOperationSynchronous
KeEnterCriticalRegion
IofCompleteRequest
IoRemoveShareAccess
FsRtlNotifyFullReportChange
FsRtlFastUnlockAll
IoGetRequestorProcess
FsRtlNotifyCleanup
FsRtlOplockIsFastIoPossible
FsRtlCheckOplock
ExQueueWorkItem
ExAllocatePoolWithTag
IoGetCurrentProcess
RtlFreeOemString
SeSinglePrivilegeCheck
NlsOemLeadByteInfo
NlsMbOemCodePageTag
RtlUnicodeStringToCountedOemString
IoSetShareAccess
IoCheckShareAccess
IoUpdateShareAccess
MmFlushImageSection
FsRtlCurrentBatchOplock
CcPurgeCacheSection
MmCanFileBeTruncated
IofCallDriver
IoFreeIrp
IoFreeMdl
IoBuildPartialMdl
IoAllocateMdl
IoMakeAssociatedIrp
KeGetCurrentThread
KeInitializeSpinLock
KeSetEvent
FsRtlIsNtstatusExpected
MmProbeAndLockPages
MmMapLockedPages
RtlOemToUnicodeN
RtlxOemStringToUnicodeSize
FsRtlNotifyFullChangeDirectory
FsRtlDoesDbcsContainWildCards
CcCopyRead
CcInitializeCacheMap
RtlInitString
RtlUpperString
FsRtlLegalAnsiCharacterArray
RtlFreeUnicodeString
RtlOemStringToCountedUnicodeString
strncpy
CcFlushCache
CcGetFileObjectFromSectionPtrs
IoDeleteDevice
FsRtlBalanceReads
RtlCompareMemory
IoCreateDevice
IoBuildDeviceIoControlRequest
FsRtlOplockFsctrl
FsRtlIsHpfsDbcsLegal
IoBuildSynchronousFsdRequest
ExfInterlockedAddUlong
FsRtlPrivateLock
FsRtlFastUnlockSingle
FsRtlFastUnlockAllByKey
FsRtlProcessFileLock
FsRtlDissectDbcs
FsRtlIsDbcsInExpression
IoGetTopLevelIrp
IoSetDeviceToVerify
IoGetDeviceToVerify
FsRtlFastCheckLockForWrite
FsRtlFastCheckLockForRead
IoRegisterFileSystem
ExInitializeZone
MmQuerySystemSize
ExInitializeResourceLite
FsRtlCopyWrite
FsRtlCopyRead
RtlInitUnicodeString
PfxInsertPrefix
PfxRemovePrefix
PfxFindPrefix
RtlEqualString
FsRtlPostStackOverflow
FsRtlPostPagingFileStackOverflow
IoGetInitialStack
CcMdlRead
CcSetReadAheadGranularity
FsRtlCheckLockForReadAccess
MmIsRecursiveIoFault
KeResetEvent
KeInitializeDpc
KeInitializeTimer
FsRtlNotifyInitializeSync
PfxInitialize
ExDeleteResourceLite
FsRtlNotifyUninitializeSync
FsRtlInitializeOplock
FsRtlInitializeFileLock
FsRtlAllocateResource
FsRtlUninitializeOplock
FsRtlUninitializeFileLock
IoReleaseVpbSpinLock
IoAcquireVpbSpinLock
RtlTimeToSecondsSince1970
ExSystemTimeToLocalTime
ExLocalTimeToSystemTime
RtlSecondsSince1970ToTime
IoSetHardErrorOrVerifyDevice
CcIsThereDirtyData
MmUnlockPages
IoBuildAsynchronousFsdRequest
IoRaiseInformationalHardError
IoIsSystemThread
IoVerifyVolume
RtlInitializeGenericTable
KeInitializeMutex
KeReleaseMutex
RtlInsertElementGenericTable
RtlDeleteElementGenericTable
RtlLookupElementGenericTable
RtlEnumerateGenericTable
RtlNumberGenericTableElements
RtlUpcaseUnicodeString
CcPrepareMdlWrite
CcZeroData
FsRtlCheckLockForWriteAccess
CcDeferWrite
CcCanIWrite
RtlUnwind
FsRtlNormalizeNtstatus
CcUnpinData
IoCheckEaBufferValidity
RtlCompareString

hal

KeGetCurrentIrql
KfAcquireSpinLock
KfReleaseSpinLock

Sections

.text
Size: 21KB - Virtual size: 21KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 288B - Virtual size: 272B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

PAGE
Size: 80KB - Virtual size: 80KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

INIT
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 928B - Virtual size: 924B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/PING.EX_
.cab
I386/PLOTTER.DL_
.cab
I386/PLOTUI.CN_
.cab
I386/PLOTUI.DL_
.cab
I386/PLOTUI.HL_
.cab
I386/PMSPL.DL_
.cab
I386/POINTER.IN_
.cab
I386/PORTUAS.EX_
.cab
I386/POSIX.EX_
.cab
I386/PRFLBMSG.DL_
.cab
I386/PRINT.EX_
.cab
I386/PRINT01.SE_
.cab
I386/PRINTER.INF
I386/PRINTER.WR_
.cab
I386/PRINTMAN.CN_
.cab
I386/PRINTMAN.EX_
.cab
I386/PRINTMAN.FT_
.cab
I386/PRINTMAN.HL_
.cab
I386/PRNSETUP.IN_
.cab
I386/PROBREP.TXT
I386/PROGMAN.CN_
.cab
I386/PROGMAN.EX_
.cab
I386/PROGMAN.FT_
.cab
I386/PROGMAN.HL_
.cab
I386/PRONET16.SY_
.cab
I386/PROPRINT.DL_
.cab
I386/PROPRN24.DL_
.cab
I386/PRORAPM.DW_
.cab
I386/PROTOCOL._
.cab
I386/PS1.DL_
.cab
I386/PSAPI.DL_
.cab
I386/PSCRIPT.CN_
.cab
I386/PSCRIPT.DL_
.cab
I386/PSCRIPT.HL_
.cab
I386/PSCRIPT.SE_
.cab
I386/PSCRPTUI.DL_
.cab
I386/PSXDLL.DL_
.cab
I386/PSXSS.EX_
.cab
I386/PX.PP_
.cab
I386/Q2200523.PP_
.cab
I386/Q2210523.PP_
.cab
I386/Q2220523.PP_
.cab
I386/Q30SI503.PP_
.cab
I386/Q810T517.PP_
.cab
I386/Q820T517.PP_
.cab
I386/Q820_517.PP_
.cab
I386/Q860PLS2.PP_
.cab
I386/QBASIC.EX_
.cab
I386/QBASIC.HL_
.cab
I386/QCS10001.PP_
.cab
I386/QCS10002.PP_
.cab
I386/QCS10503.PP_
.cab
I386/QCS20503.PP_
.cab
I386/QCS30503.PP_
.cab
I386/QIC117.SY_
.cab
I386/QL10WNT.SYS
.sys windows:3 windows x86 arch:x86

0b8b51a72944bca78501fae09ed0c805

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

scsiport.sys

ScsiPortWritePortUshort
ScsiPortGetPhysicalAddress
ScsiPortFreeDeviceBase
ScsiPortGetUncachedExtension
ScsiPortGetDeviceBase
ScsiPortSetBusDataByOffset
ScsiPortGetBusData
ScsiPortInitialize
ScsiPortReadPortUshort
ScsiPortStallExecution
ScsiPortNotification
ScsiPortGetLogicalUnit
ScsiPortMoveMemory
ScsiPortLogError

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 19KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

INIT
Size: 480B - Virtual size: 470B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 960B - Virtual size: 932B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 288B - Virtual size: 270B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/QM1700_1.PP_
.cab
I386/QM2000_1.PP_
.cab
I386/QM815MR1.PP_
.cab
I386/QM825MR1.PP_
.cab
I386/QMPS4104.PP_
.cab
I386/QMPS8151.PP_
.cab
I386/QMPS8251.PP_
.cab
I386/QMS10602.PP_
.cab
I386/QMS16602.PP_
.cab
I386/QMS1725.PP_
.cab
I386/QMS2025.PP_
.cab
I386/QMS3225.PP_
.cab
I386/QMS420.PP_
.cab
I386/QMS4525.PP_
.cab
I386/QMS45252.PP_
.cab
I386/QMS81470.PP_
.cab
I386/QMS860.PP_
.cab
I386/QMS8P461.PP_
.cab
I386/QMS8_461.PP_
.cab
I386/QMSCS210.PP_
.cab
I386/QMSCS230.PP_
.cab
I386/QMSCS494.PP_
.cab
I386/QMSJP461.PP_
.cab
I386/QMSJ_461.PP_
.cab
I386/QUIETJET.DL_
.cab
I386/QUME_470.PP_
.cab
I386/QUOTES._
.cab
I386/QV.DL_
.cab
I386/QV.SY_
.cab
I386/QWIII.DL_
.cab
I386/R6000505.PP_
.cab
I386/RAINBOW.AN_
.cab
I386/RAINDROP.AN_
.cab
I386/RAS.IC_
.cab
I386/RASADMIN.CN_
.cab
I386/RASADMIN.DL_
.cab
I386/RASADMIN.EX_
.cab
I386/RASADMIN.HL_
.cab
I386/RASAPI16.DL_
.cab
I386/RASAPI32.DL_
.cab
I386/RASARP.SY_
.cab
I386/RASCAUTH.DL_
.cab
I386/RASCBCP.DL_
.cab
I386/RASCCP.DL_
.cab
I386/RASCFG.DL_
.cab
I386/RASCHAP.DL_
.cab
I386/RASCTRS.DL_
.cab
I386/RASDD.DL_
.cab
I386/RASDDUI.CN_
.cab
I386/RASDDUI.DL_
.cab
I386/RASDDUI.HL_
.cab
I386/RASDIAL.EX_
.cab
I386/RASFIL32.DL_
.cab
I386/RASGLOSS.CN_
.cab
I386/RASGLOSS.HL_
.cab
I386/RASGPRXY.DL_
.cab
I386/RASGTWY.DL_
.cab
I386/RASIPCP.DL_
.cab
I386/RASIPHLP.DL_
.cab
I386/RASIPXCP.DL_
.cab
I386/RASMAN.DL_
.cab
I386/RASMAN.EX_
.cab
I386/RASMON.EX_
.cab
I386/RASMSG.DL_
.cab
I386/RASMXS.DL_
.cab
I386/RASNBFCP.DL_
.cab
I386/RASNBIPC.DL_
.cab
I386/RASPAP.DL_
.cab
I386/RASPHONE.CN_
.cab
I386/RASPHONE.EX_
.cab
I386/RASPHONE.HL_
.cab
I386/RASPPP.DL_
.cab
I386/RASPPPEN.DL_
.cab
I386/RASREAD.TX_
.cab
I386/RASRES.DL_
.cab
I386/RASSAUTH.DL_
.cab
I386/RASSER.DL_
.cab
I386/RASSETUP.CN_
.cab
I386/RASSETUP.HL_
.cab
I386/RASSPAP.DL_
.cab
I386/RASSPRXY.EX_
.cab
I386/RASSRV.EX_
.cab
I386/RASTAPI.DL_
.cab
I386/RCP.EX_
.cab
I386/RDISK.CN_
.cab
I386/RDISK.EX_
.cab
I386/RDISK.HL_
.cab
I386/RDR.SY_
.cab
I386/README.WR_
.cab
I386/RECOVER.EX_
.cab
I386/REDBRICK.BM_
.cab
I386/REDIR.EX_
.cab
I386/REGEDIT.EX_
.cab
I386/REGEDIT.HL_
.cab
I386/REGEDITV.CN_
.cab
I386/REGEDITV.HL_
.cab
I386/REGEDT32.CN_
.cab
I386/REGEDT32.EX_
.cab
I386/REGEDT32.HL_
.cab
I386/REGISTRY.IN_
.cab
I386/REMLINE.BA_
.cab
I386/REPLACE.EX_
.cab
I386/RESTORE.EX_
.cab
I386/REVIEW.SE_
.cab
I386/REXEC.EX_
.cab
I386/RICHED20.DL_
.cab
I386/RICHED32.DL_
.cab
I386/RINGIN.WA_
.cab
I386/RINGOUT.WA_
.cab
I386/RIVETS.BM_
.cab
I386/RNAL.DL_
.cab
I386/ROMAN.FO_
.cab
I386/ROUTE.EX_
.cab
I386/RPCDCE4.DL_
.cab
I386/RPCDGC3.DL_
.cab
I386/RPCDGC6.DL_
.cab
I386/RPCDGS3.DL_
.cab
I386/RPCDGS6.DL_
.cab
I386/RPCLTC1.DL_
.cab
I386/RPCLTC3.DL_
.cab
I386/RPCLTC5.DL_
.cab
I386/RPCLTC6.DL_
.cab
I386/RPCLTC7.DL_
.cab
I386/RPCLTS1.DL_
.cab
I386/RPCLTS3.DL_
.cab
I386/RPCLTS5.DL_
.cab
I386/RPCLTS6.DL_
.cab
I386/RPCLTS7.DL_
.cab
I386/RPCNS4.DL_
.cab
I386/RPCRT4.DL_
.cab
I386/RPCSS.EX_
.cab
I386/RSH.EX_
.cab
I386/S3.DL_
.cab
I386/S3.SY_
.cab
I386/S5232503.PP_
.cab
I386/S746J522.PP_
.cab
I386/SAMLIB.DL_
.cab
I386/SAMSRV.DL_
.cab
I386/SAVEDUMP.EX_
.cab
I386/SCG20522.PP_
.cab
I386/SCHDPL32.CN_
.cab
I386/SCHDPL32.EX_
.cab
I386/SCHDPL32.FT_
.cab
I386/SCHDPL32.HL_
.cab
I386/SCHMSG32.DL_
.cab
I386/SCM.EX_
.cab
I386/SCRIPT.FO_
.cab
I386/SCRNSAVE.SC_
.cab
I386/SCSI.IN_
.cab
I386/SCSICDRM.SYS
.sys windows:3 windows x86 arch:x86

aa8f826783936e199e0734fb94dd8111

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

ntoskrnl.exe

RtlFreeUnicodeString
IoGetDeviceObjectPointer
RtlAnsiStringToUnicodeString
RtlInitString
sprintf
ExFreePool
IoGetConfigurationInformation
IoDeleteDevice
ExAllocatePoolWithTag
RtlCompareMemory
KeInitializeSpinLock
IoCreateDevice
IofCompleteRequest
IofCallDriver
IoSetHardErrorOrVerifyDevice
memmove
strncmp
IoBuildAsynchronousFsdRequest
KeWaitForSingleObject
IoBuildDeviceIoControlRequest
KeInitializeEvent
ObfDereferenceObject
IoAllocateIrp
IoFreeIrp
IoFreeMdl
MmUnlockPages
ExfInterlockedPushEntryList
InterlockedDecrement
KeDelayExecutionThread
IoWriteErrorLogEntry
RtlExtendedIntegerMultiply
IoAllocateErrorLogEntry
ExfInterlockedPopEntryList
MmBuildMdlForNonPagedPool
IoAllocateMdl
InterlockedIncrement
ObReferenceObjectByPointer

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

PAGE
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

INIT
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 928B - Virtual size: 924B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 544B - Virtual size: 536B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/SCSIDISK.SYS
.sys windows:3 windows x86 arch:x86

5418bb9409781b5ed9b15c0dc8c717ac

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ntoskrnl.exe

sprintf
IoGetConfigurationInformation
ExFreePool
ExInitializeZone
KeInitializeSpinLock
ExAllocatePoolWithTag
RtlInitString
HalDispatchTable
IoDeleteDevice
IoCreateDevice
ZwClose
ZwMakeTemporaryObject
ZwCreateDirectoryObject
IofCompleteRequest
RtlFreeUnicodeString
RtlAnsiStringToUnicodeString
memmove
KeWaitForSingleObject
IoBuildSynchronousFsdRequest
KeInitializeEvent
RtlFreeAnsiString
RtlCompareString
ObfDereferenceObject
ZwQueryValueKey
RtlInitUnicodeString
ZwOpenKey
IoWriteErrorLogEntry
IoAllocateErrorLogEntry
strncmp
IoAllocateIrp
IoGetDeviceObjectPointer
IofCallDriver
IoSetHardErrorOrVerifyDevice
RtlUnicodeStringToAnsiString
IoBuildDeviceIoControlRequest
IoFreeIrp
IoFreeMdl
MmUnlockPages
ExfInterlockedPushEntryList
InterlockedDecrement
KeDelayExecutionThread
RtlExtendedIntegerMultiply
ExfInterlockedPopEntryList
MmBuildMdlForNonPagedPool
IoAllocateMdl
InterlockedIncrement
ObReferenceObjectByPointer

hal

IoWritePartitionTable
IoSetPartitionInformation
IoReadPartitionTable

Sections

PAGE
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.text
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 544B - Virtual size: 524B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 960B - Virtual size: 936B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 640B - Virtual size: 634B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/SCSIFLOP.SYS
.sys windows:3 windows x86 arch:x86

1a4d39a9c83d9fb6486c633d1c3fc707

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

ntoskrnl.exe

IoGetDeviceObjectPointer
RtlInitString
sprintf
ExFreePool
IoGetConfigurationInformation
IoDeleteDevice
IoCreateSymbolicLink
ExAllocatePoolWithTag
RtlFreeUnicodeString
RtlAnsiStringToUnicodeString
IofCallDriver
IoSetHardErrorOrVerifyDevice
memmove
RtlCompareMemory
IoBuildAsynchronousFsdRequest
KeWaitForSingleObject
IoBuildSynchronousFsdRequest
ObfDereferenceObject
IoCreateDevice
IofCompleteRequest
KeInitializeEvent
IoBuildDeviceIoControlRequest
IoAllocateIrp
IoFreeIrp
IoFreeMdl
MmUnlockPages
ExfInterlockedPushEntryList
InterlockedDecrement
KeDelayExecutionThread
IoWriteErrorLogEntry
RtlExtendedIntegerMultiply
IoAllocateErrorLogEntry
ExfInterlockedPopEntryList
MmBuildMdlForNonPagedPool
IoAllocateMdl
InterlockedIncrement
ObReferenceObjectByPointer

hal

KfRaiseIrql
KfLowerIrql

Sections

.text
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 352B - Virtual size: 332B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

PAGE
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

INIT
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 928B - Virtual size: 924B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 608B - Virtual size: 594B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/SCSIPORT.SYS
.sys windows:3 windows x86 arch:x86

e1d2e54fd41996787a068c6d77a0132c

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

ntoskrnl.exe

MmUnmapIoSpace
IoStopTimer
IoQueryDeviceDescription
RtlInitAnsiString
_wcsnicmp
RtlUnicodeStringToAnsiString
DbgBreakPoint
ZwEnumerateValueKey
ZwSetValueKey
wcslen
ZwCreateKey
RtlAppendUnicodeStringToString
RtlIntegerToUnicodeString
RtlCopyUnicodeString
_strnicmp
ZwQueryValueKey
READ_REGISTER_UCHAR
READ_REGISTER_USHORT
READ_REGISTER_ULONG
READ_REGISTER_BUFFER_UCHAR
READ_REGISTER_BUFFER_USHORT
READ_REGISTER_BUFFER_ULONG
WRITE_REGISTER_UCHAR
WRITE_REGISTER_USHORT
IoDeleteDevice
IoDisconnectInterrupt
WRITE_REGISTER_BUFFER_ULONG
WRITE_REGISTER_ULONG
IoStartPacket
KeInsertByKeyDeviceQueue
IofCompleteRequest
KeRemoveDeviceQueue
KefReleaseSpinLockFromDpcLevel
KefAcquireSpinLockAtDpcLevel
IoAllocateAdapterChannel
InterlockedIncrement
KeInsertQueueDpc
MmMapLockedPages
IoStartNextPacket
InterlockedDecrement
KeSetTimer
KeCancelTimer
IoBuildAsynchronousFsdRequest
IoFreeIrp
IoFreeMdl
MmUnlockPages
KeRemoveByKeyDeviceQueue
IoBuildSynchronousFsdRequest
RtlUnwind
MmMapIoSpace
KeInitializeDeviceQueue
KeInitializeEvent
IoBuildDeviceIoControlRequest
IofCallDriver
KeWaitForSingleObject
IoGetConfigurationInformation
ZwOpenKey
IoCreateDevice
IoInitializeTimer
KeInitializeTimer
KeInitializeDpc
RtlInitUnicodeString
IoReportResourceUsage
KeSynchronizeExecution
KeInitializeSpinLock
IoConnectInterrupt
IoStartTimer
ExAllocatePoolWithTag
sprintf
RtlInitString
RtlAnsiStringToUnicodeString
IoCreateSymbolicLink
RtlFreeUnicodeString
IoAllocateErrorLogEntry
IoWriteErrorLogEntry
ZwClose
ExFreePool
WRITE_REGISTER_BUFFER_UCHAR
WRITE_REGISTER_BUFFER_USHORT

hal

IoFreeMapRegisters
IoFlushAdapterBuffers
IoMapTransfer
IoFreeAdapterChannel
KfReleaseSpinLock
WRITE_PORT_BUFFER_ULONG
WRITE_PORT_BUFFER_USHORT
WRITE_PORT_BUFFER_UCHAR
WRITE_PORT_ULONG
WRITE_PORT_USHORT
WRITE_PORT_UCHAR
READ_PORT_BUFFER_ULONG
READ_PORT_BUFFER_USHORT
READ_PORT_BUFFER_UCHAR
READ_PORT_ULONG
READ_PORT_USHORT
READ_PORT_UCHAR
KeStallExecutionProcessor
HalSetBusDataByOffset
HalAssignSlotResources
HalFreeCommonBuffer
HalGetBusData
HalAllocateCommonBuffer
HalTranslateBusAddress
KfAcquireSpinLock
HalGetAdapter
HalGetInterruptVector
KfRaiseIrql
KfLowerIrql

Exports

Exports

ScsiDebugPrint
ScsiPortCompleteRequest
ScsiPortConvertPhysicalAddressToUlong
ScsiPortConvertUlongToPhysicalAddress
ScsiPortFlushDma
ScsiPortFreeDeviceBase
ScsiPortGetBusData
ScsiPortGetDeviceBase
ScsiPortGetLogicalUnit
ScsiPortGetPhysicalAddress
ScsiPortGetSrb
ScsiPortGetUncachedExtension
ScsiPortGetVirtualAddress
ScsiPortInitialize
ScsiPortIoMapTransfer
ScsiPortLogError
ScsiPortMoveMemory
ScsiPortNotification
ScsiPortReadPortBufferUchar
ScsiPortReadPortBufferUlong
ScsiPortReadPortBufferUshort
ScsiPortReadPortUchar
ScsiPortReadPortUlong
ScsiPortReadPortUshort
ScsiPortReadRegisterBufferUchar
ScsiPortReadRegisterBufferUlong
ScsiPortReadRegisterBufferUshort
ScsiPortReadRegisterUchar
ScsiPortReadRegisterUlong
ScsiPortReadRegisterUshort
ScsiPortSetBusDataByOffset
ScsiPortStallExecution
ScsiPortValidateRange
ScsiPortWritePortBufferUchar
ScsiPortWritePortBufferUlong
ScsiPortWritePortBufferUshort
ScsiPortWritePortUchar
ScsiPortWritePortUlong
ScsiPortWritePortUshort
ScsiPortWriteRegisterBufferUchar
ScsiPortWriteRegisterBufferUlong
ScsiPortWriteRegisterBufferUshort
ScsiPortWriteRegisterUchar
ScsiPortWriteRegisterUlong
ScsiPortWriteRegisterUshort

Sections

.text
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 32B - Virtual size: 1B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

PAGE
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.edata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

INIT
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 928B - Virtual size: 920B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/SCSIPRNT.SY_
.cab
I386/SCSISCAN.SY_
.cab
I386/SECURITY.DL_
.cab
I386/SEIKO.DL_
.cab
I386/SEIKO24E.DL_
.cab
I386/SEIKOSH9.DL_
.cab
I386/SEIKO_04.PP_
.cab
I386/SEIKO_14.PP_
.cab
I386/SENDFL32.DL_
.cab
I386/SERIAL.SY_
.cab
I386/SERIFE.FO_
.cab
I386/SERIFEE.FO_
.cab
I386/SERIFEG.FO_
.cab
I386/SERIFER.FO_
.cab
I386/SERIFET.FO_
.cab
I386/SERIFF.FO_
.cab
I386/SERIFFE.FO_
.cab
I386/SERIFFG.FO_
.cab
I386/SERIFFR.FO_
.cab
I386/SERIFFT.FO_
.cab
I386/SERMOUSE.SY_
.cab
I386/SERVICES.EX_
.cab
I386/SERVICES._
.cab
I386/SETACL.EX_
.cab
I386/SETT01.SE_
.cab
I386/SETT02.SE_
.cab
I386/SETT03.SE_
.cab
I386/SETT04.SE_
.cab
I386/SETUP.EX_
.cab
I386/SETUP.IN_
.cab
I386/SETUP.TXT
I386/SETUP16.IN_
.cab
I386/SETUPAPI.DL_
.cab
I386/SETUPDD.SYS
.sys windows:3 windows x86 arch:x86

3b21f2ab4763b865ae946194d939aefe

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

ntoskrnl.exe

ZwOpenDirectoryObject
wcscpy
wcslen
strchr
_strnicmp
_stricmp
atol
ZwReadFile
strncmp
_snprintf
RtlImageNtHeader
_wcsicmp
RtlExtendedLargeIntegerDivide
RtlUpcaseUnicodeChar
ExAllocatePoolWithTag
ExFreePool
_wcsnicmp
ZwQuerySymbolicLinkObject
ZwCreateFile
RtlInitUnicodeString
swprintf
ZwDeviceIoControlFile
IoGetConfigurationInformation
wcscat
wcschr
strncpy
isspace
wcsncpy
wcsstr
ZwFlushKey
ZwOpenKey
ZwCreateKey
ZwSetValueKey
ZwQueryValueKey
ZwDeleteValueKey
ZwSetInformationFile
ZwFsControlFile
ZwQueryInformationFile
ZwOpenSymbolicLinkObject
memmove
ZwOpenFile
ZwMapViewOfSection
ZwCreateSection
ZwUnmapViewOfSection
RtlExtendedIntegerMultiply
ZwQueryVolumeInformationFile
_snwprintf
ObfDereferenceObject
ObQueryNameString
ObReferenceObjectByHandle
IoFileObjectType
IoCreateDevice
IoDeleteDevice
IofCompleteRequest
KeWaitForSingleObject
KeSetEvent
RtlUnicodeToOemN
IoSetInformation
KeI386MachineType
wcscmp
ZwEnumerateKey
RtlOemToUnicodeN
ExAllocatePool
RtlOemStringToUnicodeString
RtlxOemStringToUnicodeSize
NlsMbOemCodePageTag
ZwDeleteKey
NtClose
ZwLoadDriver
IoRegisterDriverReinitialization
KeLoaderBlock
wcsncmp
isdigit
RtlUnicodeStringToOemString
ZwEnumerateValueKey
ZwQueryDirectoryFile
KeDelayExecutionThread
RtlUnwind
sprintf
ZwWriteFile
wcsrchr
ZwClose

hal

HalReturnToFirmware
HalQueryRealTimeClock
HalDisplayString

Sections

.text
Size: 129KB - Virtual size: 129KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 64KB - Virtual size: 64KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

INIT
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 1004B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/SETUPDLL.DL_
.cab
I386/SETUPLDR.BIN
I386/SETUPNT.CN_
.cab
I386/SETUPNT.HL_
.cab
I386/SETUPREG.HIV
I386/SETVER.EX_
.cab
I386/SFMAPI.DL_
.cab
I386/SFMATALK.SY_
.cab
I386/SFMATCFG.DL_
.cab
I386/SFMATMSG.DL_
.cab
I386/SFMMGR.CN_
.cab
I386/SFMMGR.CP_
.cab
I386/SFMMGR.HL_
.cab
I386/SFMMON.DL_
.cab
I386/SFMUTIL.DL_
.cab
I386/SFMWSHAT.DL_
.cab
I386/SHARE.EX_
.cab
I386/SHARE01.SE_
.cab
I386/SHARE02.SE_
.cab
I386/SHELL.DL_
.cab
I386/SHELL32.DL_
.cab
I386/SIMPTCP.DL_
.cab
I386/SIZENESW.AN_
.cab
I386/SIZENS.AN_
.cab
I386/SIZENWSE.AN_
.cab
I386/SIZEWE.AN_
.cab
I386/SKPSFCD1.PP_
.cab
I386/SLCD32.SYS
.sys windows:3 windows x86 arch:x86

8754123c6568bc80cbd932f212449ced

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

scsiport.sys

ScsiPortLogError
ScsiPortFreeDeviceBase
ScsiPortGetDeviceBase
ScsiPortConvertUlongToPhysicalAddress
ScsiPortNotification
ScsiPortWritePortUchar
ScsiPortGetLogicalUnit
ScsiPortCompleteRequest
ScsiPortInitialize
ScsiPortReadPortUchar
ScsiPortStallExecution
ScsiPortWritePortBufferUchar
ScsiPortReadPortBufferUchar
ScsiPortWritePortUshort
ScsiPortReadPortUshort

Sections

.text
Size: 22KB - Virtual size: 22KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 928B - Virtual size: 908B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

INIT
Size: 544B - Virtual size: 516B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 960B - Virtual size: 936B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 896B - Virtual size: 878B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/SMALLE.FO_
.cab
I386/SMALLEE.FO_
.cab
I386/SMALLEG.FO_
.cab
I386/SMALLER.FO_
.cab
I386/SMALLET.FO_
.cab
I386/SMALLF.FO_
.cab
I386/SMALLFE.FO_
.cab
I386/SMALLFG.FO_
.cab
I386/SMALLFR.FO_
.cab
I386/SMALLFT.FO_
.cab
I386/SMCISA.SY_
.cab
I386/SMSS.EX_
.cab
I386/SNDBLST.DL_
.cab
I386/SNDBLST.SY_
.cab
I386/SNDREC32.EX_
.cab
I386/SNDSYS.SY_
.cab
I386/SNDSYS32.DL_
.cab
I386/SNDVOL32.CN_
.cab
I386/SNDVOL32.EX_
.cab
I386/SNDVOL32.FT_
.cab
I386/SNDVOL32.HL_
.cab
I386/SNMP.EX_
.cab
I386/SNMPAPI.DL_
.cab
I386/SNMPTRAP.EX_
.cab
I386/SOFTWARE._
.cab
I386/SOL.CN_
.cab
I386/SOL.EX_
.cab
I386/SOL.HL_
.cab
I386/SORT.EX_
.cab
I386/SORTKEY.NL_
.cab
I386/SORTTBLS.NL_
.cab
I386/SOUND.DL_
.cab
I386/SOUND.DR_
.cab
I386/SOUNDREC.CN_
.cab
I386/SOUNDREC.FT_
.cab
I386/SOUNDREC.HL_
.cab
I386/SPARROW.SYS
.sys windows:3 windows x86 arch:x86

17c4aae652df57bfbd47b76ccf131d22

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

scsiport.sys

ScsiPortStallExecution
ScsiPortFreeDeviceBase
ScsiPortConvertUlongToPhysicalAddress
ScsiPortReadRegisterUchar
ScsiPortGetDeviceBase
ScsiPortNotification
ScsiPortLogError
ScsiPortReadPortUchar
ScsiPortWritePortUchar
ScsiPortReadPortBufferUchar
ScsiPortInitialize
ScsiPortGetLogicalUnit
ScsiPortFlushDma
ScsiPortWritePortBufferUchar
ScsiPortWritePortBufferUshort
ScsiPortWritePortBufferUlong
ScsiPortReadPortBufferUshort
ScsiPortReadPortBufferUlong
ScsiPortIoMapTransfer

Sections

Init
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.text
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 96B - Virtual size: 69B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

INIT
Size: 672B - Virtual size: 652B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 960B - Virtual size: 940B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 480B - Virtual size: 470B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/SPOCK.SYS
.sys windows:3 windows x86 arch:x86

c38979a7e34cf5962cd918d0a58be06d

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

scsiport.sys

ScsiPortGetLogicalUnit
ScsiPortLogError
ScsiPortWritePortUchar
ScsiPortStallExecution
ScsiPortReadPortUchar
ScsiPortGetPhysicalAddress
ScsiPortGetUncachedExtension
ScsiPortNotification
ScsiPortInitialize
ScsiPortGetVirtualAddress
ScsiPortConvertUlongToPhysicalAddress
ScsiPortCompleteRequest
ScsiPortWritePortUlong
ScsiPortMoveMemory
ScsiPortFreeDeviceBase
ScsiPortGetDeviceBase

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

INIT
Size: 544B - Virtual size: 544B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 960B - Virtual size: 932B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 224B - Virtual size: 222B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/SPOOLSS.DL_
.cab
I386/SPOOLSS.EX_
.cab
I386/SQUARES.BM_
.cab
I386/SRV.SY_
.cab
I386/SRVMGR.CP_
.cab
I386/SRVSVC.DL_
.cab
I386/SS3DFO.SC_
.cab
I386/SSBEZIER.SC_
.cab
I386/SSERIFE.FO_
.cab
I386/SSERIFEE.FO_
.cab
I386/SSERIFEG.FO_
.cab
I386/SSERIFER.FO_
.cab
I386/SSERIFET.FO_
.cab
I386/SSERIFF.FO_
.cab
I386/SSERIFFE.FO_
.cab
I386/SSERIFFG.FO_
.cab
I386/SSERIFFR.FO_
.cab
I386/SSERIFFT.FO_
.cab
I386/SSMARQUE.SC_
.cab
I386/SSMYST.SC_
.cab
I386/SSPIPES.SC_
.cab
I386/SSSTARS.SC_
.cab
I386/SSTEXT3D.SC_
.cab
I386/STAR24E.DL_
.cab
I386/STAR9E.DL_
.cab
I386/STARJET.DL_
.cab
I386/STDOLE.TL_
.cab
I386/STDOLE2.TL_
.cab
I386/STDOLE32.TL_
.cab
I386/STOPWTCH.AN_
.cab
I386/STORAGE.DL_
.cab
I386/STORE32.DL_
.cab
I386/STREAMS.SY_
.cab
I386/SUBROUTN.IN_
.cab
I386/SUBST.EX_
.cab
I386/SWITCH.IN_
.cab
I386/SXBIOS.BI_
.cab
I386/SXFEP.BI_
.cab
I386/SYMBOL.FO_
.cab
I386/SYMBOL.TT_
.cab
I386/SYMBOLE.FO_
.cab
I386/SYMBOLF.FO_
.cab
I386/SYNTH.DL_
.cab
I386/SYNTH.PA_
.cab
I386/SYNTH.SY_
.cab
I386/SYSEDIT.EX_
.cab
I386/SYSPRINT.SE_
.cab
I386/SYSTEM.DR_
.cab
I386/SYSTEM.IN_
.cab
I386/SYSTEM.MD_
.cab
I386/SYSTEM._
.cab
I386/SYSTEM32/NTDLL.DLL
.dll windows:3 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Exports

Exports

CsrAllocateCaptureBuffer
CsrAllocateCapturePointer
CsrAllocateMessagePointer
CsrCaptureMessageBuffer
CsrCaptureMessageString
CsrCaptureTimeout
CsrClientCallServer
CsrClientConnectToServer
CsrClientMaxMessage
CsrClientSendMessage
CsrClientThreadConnect
CsrFreeCaptureBuffer
CsrIdentifyAlertableThread
CsrNewThread
CsrProbeForRead
CsrProbeForWrite
CsrSetPriorityClass
CsrpProcessCallbackRequest
DbgBreakPoint
DbgPrint
DbgPrompt
DbgSsHandleKmApiMsg
DbgSsInitialize
DbgUiConnectToDbg
DbgUiContinue
DbgUiWaitStateChange
DbgUserBreakPoint
KiUserApcDispatcher
KiUserCallbackDispatcher
KiUserExceptionDispatcher
LdrAccessResource
LdrDisableThreadCalloutsForDll
LdrEnumResources
LdrFindEntryForAddress
LdrFindResourceDirectory_U
LdrFindResource_U
LdrGetDllHandle
LdrGetProcedureAddress
LdrInitializeThunk
LdrLoadDll
LdrProcessRelocationBlock
LdrQueryImageFileExecutionOptions
LdrQueryProcessModuleInformation
LdrShutdownProcess
LdrShutdownThread
LdrUnloadDll
LdrVerifyImageMatchesChecksum
NPXEMULATORTABLE
NlsMbCodePageTag
NlsMbOemCodePageTag
NtAcceptConnectPort
NtAccessCheck
NtAccessCheckAndAuditAlarm
NtAdjustGroupsToken
NtAdjustPrivilegesToken
NtAlertResumeThread
NtAlertThread
NtAllocateLocallyUniqueId
NtAllocateUuids
NtAllocateVirtualMemory
NtCallbackReturn
NtCancelIoFile
NtCancelTimer
NtClearEvent
NtClose
NtCloseObjectAuditAlarm
NtCompleteConnectPort
NtConnectPort
NtContinue
NtCreateDirectoryObject
NtCreateEvent
NtCreateEventPair
NtCreateFile
NtCreateIoCompletion
NtCreateKey
NtCreateMailslotFile
NtCreateMutant
NtCreateNamedPipeFile
NtCreatePagingFile
NtCreatePort
NtCreateProcess
NtCreateProfile
NtCreateSection
NtCreateSemaphore
NtCreateSymbolicLinkObject
NtCreateThread
NtCreateTimer
NtCreateToken
NtCurrentTeb
NtDelayExecution
NtDeleteFile
NtDeleteKey
NtDeleteValueKey
NtDeviceIoControlFile
NtDisplayString
NtDuplicateObject
NtDuplicateToken
NtEnumerateBus
NtEnumerateKey
NtEnumerateValueKey
NtExtendSection
NtFlushBuffersFile
NtFlushInstructionCache
NtFlushKey
NtFlushVirtualMemory
NtFlushWriteBuffer
NtFreeVirtualMemory
NtFsControlFile
NtGetContextThread
NtGetPlugPlayEvent
NtGetTickCount
NtImpersonateClientOfPort
NtImpersonateThread
NtInitializeRegistry
NtListenPort
NtLoadDriver
NtLoadKey
NtLockFile
NtLockVirtualMemory
NtMakeTemporaryObject
NtMapViewOfSection
NtNotifyChangeDirectoryFile
NtNotifyChangeKey
NtOpenDirectoryObject
NtOpenEvent
NtOpenEventPair
NtOpenFile
NtOpenIoCompletion
NtOpenKey
NtOpenMutant
NtOpenObjectAuditAlarm
NtOpenProcess
NtOpenProcessToken
NtOpenSection
NtOpenSemaphore
NtOpenSymbolicLinkObject
NtOpenThread
NtOpenThreadToken
NtOpenTimer
NtPlugPlayControl
NtPrivilegeCheck
NtPrivilegeObjectAuditAlarm
NtPrivilegedServiceAuditAlarm
NtProtectVirtualMemory
NtPulseEvent
NtQueryAttributesFile
NtQueryDefaultLocale
NtQueryDirectoryFile
NtQueryDirectoryObject
NtQueryEaFile
NtQueryEvent
NtQueryInformationFile
NtQueryInformationPort
NtQueryInformationProcess
NtQueryInformationThread
NtQueryInformationToken
NtQueryIntervalProfile
NtQueryIoCompletion
NtQueryKey
NtQueryMutant
NtQueryObject
NtQueryPerformanceCounter
NtQuerySection
NtQuerySecurityObject
NtQuerySemaphore
NtQuerySymbolicLinkObject
NtQuerySystemEnvironmentValue
NtQuerySystemInformation
NtQuerySystemTime
NtQueryTimer
NtQueryTimerResolution
NtQueryValueKey
NtQueryVirtualMemory
NtQueryVolumeInformationFile
NtRaiseException
NtRaiseHardError
NtReadFile
NtReadRequestData
NtReadVirtualMemory
NtRegisterNewDevice
NtRegisterThreadTerminatePort
NtReleaseMutant
NtReleaseProcessMutant
NtReleaseSemaphore
NtRemoveIoCompletion
NtReplaceKey
NtReplyPort
NtReplyWaitReceivePort
NtReplyWaitReplyPort
NtRequestPort
NtRequestWaitReplyPort
NtResetEvent
NtRestoreKey
NtResumeThread
NtSaveKey
NtSetContextThread
NtSetDefaultHardErrorPort
NtSetDefaultLocale
NtSetEaFile
NtSetEvent
NtSetHighEventPair
NtSetHighWaitLowEventPair
NtSetHighWaitLowThread
NtSetInformationFile
NtSetInformationKey
NtSetInformationObject
NtSetInformationProcess
NtSetInformationThread
NtSetInformationToken
NtSetIntervalProfile
NtSetIoCompletion
NtSetLdtEntries
NtSetLowEventPair
NtSetLowWaitHighEventPair
NtSetLowWaitHighThread
NtSetSecurityObject
NtSetSystemEnvironmentValue
NtSetSystemInformation
NtSetSystemPowerState
NtSetSystemTime
NtSetTimer
NtSetTimerResolution
NtSetValueKey
NtSetVolumeInformationFile
NtShutdownSystem
NtStartProfile
NtStopProfile
NtSuspendThread
NtSystemDebugControl
NtTerminateProcess
NtTerminateThread
NtTestAlert
NtUnloadDriver
NtUnloadKey
NtUnlockFile
NtUnlockVirtualMemory
NtUnmapViewOfSection
NtVdmControl
NtW32Call
NtWaitForMultipleObjects
NtWaitForProcessMutant
NtWaitForSingleObject
NtWaitHighEventPair
NtWaitLowEventPair
NtWriteFile
NtWriteRequestData
NtWriteVirtualMemory
PfxFindPrefix
PfxInitialize
PfxInsertPrefix
PfxRemovePrefix
RestoreEm87Context
RtlAbortRXact
RtlAbsoluteToSelfRelativeSD
RtlAcquirePebLock
RtlAcquireResourceExclusive
RtlAcquireResourceShared
RtlAddAccessAllowedAce
RtlAddAccessDeniedAce
RtlAddAce
RtlAddActionToRXact
RtlAddAttributeActionToRXact
RtlAddAuditAccessAce
RtlAdjustPrivilege
RtlAllocateAndInitializeSid
RtlAllocateHeap
RtlAnsiCharToUnicodeChar
RtlAnsiStringToUnicodeSize
RtlAnsiStringToUnicodeString
RtlAppendAsciizToString
RtlAppendStringToString
RtlAppendUnicodeStringToString
RtlAppendUnicodeToString
RtlApplyRXact
RtlApplyRXactNoFlush
RtlAreAllAccessesGranted
RtlAreAnyAccessesGranted
RtlAreBitsClear
RtlAreBitsSet
RtlAssert
RtlCaptureStackBackTrace
RtlCharToInteger
RtlCheckRegistryKey
RtlClearAllBits
RtlClearBits
RtlCompactHeap
RtlCompareMemory
RtlCompareMemoryUlong
RtlCompareString
RtlCompareUnicodeString
RtlCompressBuffer
RtlConsoleMultiByteToUnicodeN
RtlConvertExclusiveToShared
RtlConvertLongToLargeInteger
RtlConvertSharedToExclusive
RtlConvertSidToUnicodeString
RtlConvertUiListToApiList
RtlConvertUlongToLargeInteger
RtlCopyLuid
RtlCopyLuidAndAttributesArray
RtlCopySecurityDescriptor
RtlCopySid
RtlCopySidAndAttributesArray
RtlCopyString
RtlCopyUnicodeString
RtlCreateAcl
RtlCreateAndSetSD
RtlCreateEnvironment
RtlCreateHeap
RtlCreateProcessParameters
RtlCreateQueryDebugBuffer
RtlCreateRegistryKey
RtlCreateSecurityDescriptor
RtlCreateTagHeap
RtlCreateUnicodeString
RtlCreateUnicodeStringFromAsciiz
RtlCreateUserProcess
RtlCreateUserSecurityObject
RtlCreateUserThread
RtlCustomCPToUnicodeN
RtlCutoverTimeToSystemTime
RtlDeNormalizeProcessParams
RtlDecompressBuffer
RtlDecompressFragment
RtlDelete
RtlDeleteAce
RtlDeleteCriticalSection
RtlDeleteElementGenericTable
RtlDeleteRegistryValue
RtlDeleteResource
RtlDeleteSecurityObject
RtlDestroyEnvironment
RtlDestroyHeap
RtlDestroyProcessParameters
RtlDestroyQueryDebugBuffer
RtlDetermineDosPathNameType_U
RtlDoesFileExists_U
RtlDosPathNameToNtPathName_U
RtlDosSearchPath_U
RtlDumpResource
RtlEnlargedIntegerMultiply
RtlEnlargedUnsignedDivide
RtlEnlargedUnsignedMultiply
RtlEnterCriticalSection
RtlEnumProcessHeaps
RtlEnumerateGenericTable
RtlEnumerateGenericTableWithoutSplaying
RtlEqualComputerName
RtlEqualDomainName
RtlEqualLuid
RtlEqualPrefixSid
RtlEqualSid
RtlEqualString
RtlEqualUnicodeString
RtlEraseUnicodeString
RtlExpandEnvironmentStrings_U
RtlExtendHeap
RtlExtendedIntegerMultiply
RtlExtendedLargeIntegerDivide
RtlExtendedMagicDivide
RtlFillMemory
RtlFillMemoryUlong
RtlFindClearBits
RtlFindClearBitsAndSet
RtlFindLongestRunClear
RtlFindLongestRunSet
RtlFindMessage
RtlFindSetBits
RtlFindSetBitsAndClear
RtlFirstFreeAce
RtlFormatCurrentUserKeyPath
RtlFormatMessage
RtlFreeAnsiString
RtlFreeHeap
RtlFreeOemString
RtlFreeSid
RtlFreeUnicodeString
RtlGenerate8dot3Name
RtlGetAce
RtlGetCallersAddress
RtlGetCompressionWorkSpaceSize
RtlGetControlSecurityDescriptor
RtlGetCurrentDirectory_U
RtlGetDaclSecurityDescriptor
RtlGetElementGenericTable
RtlGetFullPathName_U
RtlGetGroupSecurityDescriptor
RtlGetLongestNtPathLength
RtlGetNtGlobalFlags
RtlGetNtProductType
RtlGetOwnerSecurityDescriptor
RtlGetProcessHeaps
RtlGetSaclSecurityDescriptor
RtlGetUserInfoHeap
RtlIdentifierAuthoritySid
RtlImageDirectoryEntryToData
RtlImageNtHeader
RtlImpersonateSelf
RtlInitAnsiString
RtlInitCodePageTable
RtlInitNlsTables
RtlInitString
RtlInitUnicodeString
RtlInitializeBitMap
RtlInitializeContext
RtlInitializeCriticalSection
RtlInitializeGenericTable
RtlInitializeRXact
RtlInitializeResource
RtlInitializeSid
RtlInsertElementGenericTable
RtlIntegerToChar
RtlIntegerToUnicodeString
RtlIsDosDeviceName_U
RtlIsGenericTableEmpty
RtlIsNameLegalDOS8Dot3
RtlIsTextUnicode
RtlLargeIntegerAdd
RtlLargeIntegerArithmeticShift
RtlLargeIntegerDivide
RtlLargeIntegerNegate
RtlLargeIntegerShiftLeft
RtlLargeIntegerShiftRight
RtlLargeIntegerSubtract
RtlLargeIntegerToChar
RtlLeaveCriticalSection
RtlLengthRequiredSid
RtlLengthSecurityDescriptor
RtlLengthSid
RtlLocalTimeToSystemTime
RtlLockHeap
RtlLookupElementGenericTable
RtlMakeSelfRelativeSD
RtlMapGenericMask
RtlMoveMemory
RtlMultiByteToUnicodeN
RtlMultiByteToUnicodeSize
RtlNewInstanceSecurityObject
RtlNewSecurityGrantedAccess
RtlNewSecurityObject
RtlNormalizeProcessParams
RtlNtStatusToDosError
RtlNumberGenericTableElements
RtlNumberOfClearBits
RtlNumberOfSetBits
RtlOemStringToUnicodeSize
RtlOemStringToUnicodeString
RtlOemToUnicodeN
RtlOpenCurrentUser
RtlPcToFileHeader
RtlPrefixString
RtlPrefixUnicodeString
RtlProtectHeap
RtlQueryEnvironmentVariable_U
RtlQueryInformationAcl
RtlQueryProcessBackTraceInformation
RtlQueryProcessDebugInformation
RtlQueryProcessHeapInformation
RtlQueryProcessLockInformation
RtlQueryRegistryValues
RtlQuerySecurityObject
RtlQueryTagHeap
RtlQueryTimeZoneInformation
RtlRaiseException
RtlRaiseStatus
RtlRandom
RtlReAllocateHeap
RtlRealPredecessor
RtlRealSuccessor
RtlReleasePebLock
RtlReleaseResource
RtlRemoteCall
RtlResetRtlTranslations
RtlRunDecodeUnicodeString
RtlRunEncodeUnicodeString
RtlSecondsSince1970ToTime
RtlSecondsSince1980ToTime
RtlSelfRelativeToAbsoluteSD
RtlSetAllBits
RtlSetBits
RtlSetCurrentDirectory_U
RtlSetCurrentEnvironment
RtlSetDaclSecurityDescriptor
RtlSetEnvironmentVariable
RtlSetGroupSecurityDescriptor
RtlSetInformationAcl
RtlSetOwnerSecurityDescriptor
RtlSetSaclSecurityDescriptor
RtlSetSecurityObject
RtlSetTimeZoneInformation
RtlSetUserFlagsHeap
RtlSetUserValueHeap
RtlSizeHeap
RtlSplay
RtlStartRXact
RtlSubAuthorityCountSid
RtlSubAuthoritySid
RtlSubtreePredecessor
RtlSubtreeSuccessor
RtlSystemTimeToLocalTime

Sections

.text
Size: 189KB - Virtual size: 189KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

ECODE
Size: 17KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 9KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

EDATA
Size: 512B - Virtual size: 364B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 64KB - Virtual size: 64KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/SYSTEM32/SMSS.EXE
.sys windows:3 windows x86 arch:x86

5a4647e12c71d2714144f3d59b7dafe2

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

ntdll

NtUnloadKey
RtlSetOwnerSecurityDescriptor
RtlSetDaclSecurityDescriptor
RtlCreateSecurityDescriptor
RtlAddAccessAllowedAce
RtlCreateAcl
RtlAllocateAndInitializeSid
NtClose
NtSetSecurityObject
NtOpenFile
RtlInitUnicodeString
RtlAdjustPrivilege
LdrUnloadDll
LdrGetProcedureAddress
LdrLoadDll
NtQueryInformationProcess
NtWaitForSingleObject
NtResumeThread
NtTerminateProcess
RtlDestroyProcessParameters
RtlCreateUserProcess
RtlCreateProcessParameters
RtlFreeSid
NtLoadKey
NtDeleteKey
NtOpenKey
NtSaveKey
NtQueryDirectoryObject
NtFlushVirtualMemory
NtShutdownSystem
NtFsControlFile
NtSetEvent
NtDeviceIoControlFile
RtlPcToFileHeader
RtlCreateUserThread
NtCreateFile
NtCreateEvent
NtQuerySystemInformation
NtInitializeRegistry
DbgBreakPoint
RtlAllocateHeap
RtlUnicodeStringToAnsiString
RtlNormalizeProcessParams

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 78KB - Virtual size: 78KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 622B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/T128.SYS
.sys windows:3 windows x86 arch:x86

16cfac920ab92584dfe426a63f89fc4b

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

scsiport.sys

ScsiPortGetLogicalUnit
ScsiPortInitialize
ScsiPortFreeDeviceBase
ScsiPortConvertUlongToPhysicalAddress
ScsiPortGetDeviceBase
ScsiPortNotification
ScsiPortLogError
ScsiPortCompleteRequest
ScsiPortReadRegisterUchar
ScsiPortStallExecution
ScsiPortWriteRegisterUchar

Sections

.text
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 64B - Virtual size: 48B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

INIT
Size: 416B - Virtual size: 394B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 960B - Virtual size: 940B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 320B - Virtual size: 310B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/T13B.SYS
.sys windows:3 windows x86 arch:x86

d219062d74aac59c84a1abebf5cfc5ef

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

scsiport.sys

ScsiPortReadPortUchar
ScsiPortInitialize
ScsiPortFreeDeviceBase
ScsiPortConvertUlongToPhysicalAddress
ScsiPortGetDeviceBase
ScsiPortNotification
ScsiPortGetLogicalUnit
ScsiPortCompleteRequest
ScsiPortLogError
ScsiPortStallExecution
ScsiPortWritePortUchar
ScsiPortWritePortBufferUshort
ScsiPortReadPortBufferUshort

Sections

.text
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 64B - Virtual size: 48B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

INIT
Size: 480B - Virtual size: 458B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 960B - Virtual size: 940B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 384B - Virtual size: 354B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/T1513470.PP_
.cab
I386/T1535470.PP_
.cab
I386/T1INSTAL.DL_
.cab
I386/TADA.WA_
.cab
I386/TANDQIC.SY_
.cab
I386/TAPE.IN_
.cab
I386/TAPISRV.DL_
.cab
I386/TARTAN.BM_
.cab
I386/TASKMAN.EX_
.cab
I386/TCARC.SY_
.cab
I386/TCPCFG.DL_
.cab
I386/TCPIP.CN_
.cab
I386/TCPIP.HL_
.cab
I386/TCPIP.SY_
.cab
I386/TCPSVCS.EX_
.cab
I386/TDI.SY_
.cab
I386/TELNET.CN_
.cab
I386/TELNET.EX_
.cab
I386/TELNET.HL_
.cab
I386/TERMINAL.CN_
.cab
I386/TERMINAL.EX_
.cab
I386/TERMINAL.HL_
.cab
I386/TFTP.EX_
.cab
I386/THATCH.BM_
.cab
I386/THINKJET.DL_
.cab
I386/TI08_450.PP_
.cab
I386/TI15_470.PP_
.cab
I386/TI850.DL_
.cab
I386/TIM17521.PP_
.cab
I386/TIM35521.PP_
.cab
I386/TIMER.DR_
.cab
I386/TIMES.FO_
.cab
I386/TIMES.TT_
.cab
I386/TIMESBD.FO_
.cab
I386/TIMESBD.TT_
.cab
I386/TIMESBI.FO_
.cab
I386/TIMESBI.TT_
.cab
I386/TIMESI.FO_
.cab
I386/TIMESI.TT_
.cab
I386/TIML6231.PP_
.cab
I386/TIMLP231.PP_
.cab
I386/TIMLP232.PP_
.cab
I386/TIMLP233.PP_
.cab
I386/TIMLP651.PP_
.cab
I386/TIMLP652.PP_
.cab
I386/TIMLP671.PP_
.cab
I386/TIMLP672.PP_
.cab
I386/TIMP3231.PP_
.cab
I386/TIMPE231.PP_
.cab
I386/TITRB161.PP_
.cab
I386/TITRBO61.PP_
.cab
I386/TITRBO91.PP_
.cab
I386/TIX17521.PP_
.cab
I386/TIX35521.PP_
.cab
I386/TK200172.PP_
.cab
I386/TK200392.PP_
.cab
I386/TK220171.PP_
.cab
I386/TK220391.PP_
.cab
I386/TK340171.PP_
.cab
I386/TK340691.PP_
.cab
I386/TKP200I2.PP_
.cab
I386/TKP200J1.PP_
.cab
I386/TKP220I1.PP_
.cab
I386/TKP220J1.PP_
.cab
I386/TKP2SDJ1.PP_
.cab
I386/TKP2SDX1.PP_
.cab
I386/TKP300I1.PP_
.cab
I386/TKP300J1.PP_
.cab
I386/TKP480J1.PP_
.cab
I386/TKPH1401.PP_
.cab
I386/TKPH2SD1.PP_
.cab
I386/TKPH4401.PP_
.cab
I386/TKPH4801.PP_
.cab
I386/TKPH5401.PP_
.cab
I386/TKPHPXI1.PP_
.cab
I386/TKPHZ2J1.PP_
.cab
I386/TKPHZ3J1.PP_
.cab
I386/TKPHZR21.PP_
.cab
I386/TKPHZR22.PP_
.cab
I386/TKPHZR31.PP_
.cab
I386/TKPHZR32.PP_
.cab
I386/TKPXE171.PP_
.cab
I386/TKPXE391.PP_
.cab
I386/TMV1.SYS
.sys windows:3 windows x86 arch:x86

437142c6f482859ecc17c29329e7623e

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

scsiport.sys

ScsiPortCompleteRequest
ScsiPortInitialize
ScsiPortFreeDeviceBase
ScsiPortConvertUlongToPhysicalAddress
ScsiPortGetDeviceBase
ScsiPortNotification
ScsiPortGetLogicalUnit
ScsiPortLogError
ScsiPortStallExecution
ScsiPortWritePortUchar
ScsiPortReadPortUchar

Sections

.text
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 64B - Virtual size: 48B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

INIT
Size: 416B - Virtual size: 386B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 992B - Virtual size: 968B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 320B - Virtual size: 292B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/TOOLHELP.DL_
.cab
I386/TRACERT.EX_
.cab
I386/TREE.CO_
.cab
I386/TRIDENT.SY_
.cab
I386/TRIUMPH1.PP_
.cab
I386/TRIUMPH2.PP_
.cab
I386/TRNSCH32.DL_
.cab
I386/TSD32.DL_
.cab
I386/TSSOFT32.AC_
.cab
I386/TXTONLY.DL_
.cab
I386/TXTSETUP.SIF
I386/TYPELIB.DL_
.cab
I386/U1200XL4.PP_
.cab
I386/U1800PMR.PP_
.cab
I386/U1800XL.PP_
.cab
I386/U1800XLO.PP_
.cab
I386/U9415470.PP_
.cab
I386/UBNEI.BI_
.cab
I386/UBNEI.SY_
.cab
I386/UFAT.DL_
.cab
I386/UHPFS.DL_
.cab
I386/ULIB.DL_
.cab
I386/ULTRA124.SYS
.sys windows:3 windows x86 arch:x86

5ae9398a33f615acd8ef03e0a108b405

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

scsiport.sys

ScsiPortGetSrb
ScsiPortConvertUlongToPhysicalAddress
ScsiPortReadPortUchar
ScsiPortFreeDeviceBase
ScsiPortReadPortUlong
ScsiPortGetDeviceBase
ScsiPortWritePortUchar
ScsiPortNotification
ScsiPortInitialize
ScsiPortWritePortUlong
ScsiPortStallExecution
ScsiPortGetPhysicalAddress
ScsiPortGetVirtualAddress
ScsiPortLogError
ScsiPortCompleteRequest

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

INIT
Size: 512B - Virtual size: 502B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 960B - Virtual size: 956B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 192B - Virtual size: 178B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/ULTRA14F.SYS
.sys windows:3 windows x86 arch:x86

a8f94b489d9b90d1182aae6cf07e02af

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

scsiport.sys

ScsiPortGetLogicalUnit
ScsiPortConvertUlongToPhysicalAddress
ScsiPortReadPortUchar
ScsiPortFreeDeviceBase
ScsiPortGetDeviceBase
ScsiPortWritePortUchar
ScsiPortStallExecution
ScsiPortNotification
ScsiPortWritePortUlong
ScsiPortInitialize
ScsiPortGetPhysicalAddress
ScsiPortGetSrb
ScsiPortGetVirtualAddress
ScsiPortReadPortUlong
ScsiPortMoveMemory
ScsiPortLogError
ScsiPortCompleteRequest

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

INIT
Size: 576B - Virtual size: 558B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 960B - Virtual size: 952B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 192B - Virtual size: 180B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/ULTRA24F.SYS
.sys windows:3 windows x86 arch:x86

2f29db187effb950080b53f2928570f3

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

scsiport.sys

ScsiPortStallExecution
ScsiPortConvertUlongToPhysicalAddress
ScsiPortReadPortUchar
ScsiPortFreeDeviceBase
ScsiPortReadPortUlong
ScsiPortGetDeviceBase
ScsiPortWritePortUchar
ScsiPortNotification
ScsiPortInitialize
ScsiPortGetPhysicalAddress
ScsiPortGetSrb
ScsiPortGetVirtualAddress
ScsiPortLogError
ScsiPortMoveMemory
ScsiPortCompleteRequest

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

INIT
Size: 512B - Virtual size: 498B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 960B - Virtual size: 948B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 160B - Virtual size: 130B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/UNATTEND.TXT
I386/UNI17521.PP_
.cab
I386/UNI39521.PP_
.cab
I386/UNIATA.SYS
.sys windows:4 windows x86 arch:x86

0e38d4ce027500f0b045f9152185f832

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ntoskrnl.exe

IoCreateDevice
ExFreePool
RtlInitUnicodeString
KeQuerySystemTime
_strnicmp
IoConnectInterrupt
_snwprintf
IoDisconnectInterrupt
RtlQueryRegistryValues
wcsncpy
wcscmp
MmAllocateContiguousMemory
MmFreeContiguousMemory
MmGetPhysicalAddress
_vsnprintf
wcslen
RtlAppendUnicodeToString
swprintf
KeNumberProcessors
strncpy
InterlockedIncrement
InterlockedDecrement
InterlockedExchange
RtlCompareUnicodeString
NtBuildNumber
KefReleaseSpinLockFromDpcLevel
KefAcquireSpinLockAtDpcLevel
KeGetCurrentThread
RtlUnwind
IoDeleteDevice
_snprintf
IoGetConfigurationInformation
ExAllocatePoolWithTag
sprintf

hal

KfRaiseIrql
KfReleaseSpinLock
KfLowerIrql
KfAcquireSpinLock
KeGetCurrentIrql
HalGetBusData
HalDisplayString
HalGetInterruptVector
HalAssignSlotResources
HalSetBusDataByOffset

scsiport.sys

ScsiPortFreeDeviceBase
ScsiPortWritePortUshort
ScsiPortWriteRegisterUchar
ScsiPortStallExecution
ScsiPortValidateRange
ScsiPortGetBusData
ScsiPortInitialize
ScsiPortGetSrb
ScsiPortLogError
ScsiPortSetBusDataByOffset
ScsiPortMoveMemory
ScsiPortNotification
ScsiPortReadPortBufferUshort
ScsiPortReadPortBufferUlong
ScsiPortWritePortBufferUshort
ScsiPortWritePortBufferUlong
ScsiPortReadPortUchar
ScsiPortReadRegisterUchar
ScsiPortReadPortUshort
ScsiPortReadRegisterUshort
ScsiPortReadPortUlong
ScsiPortReadRegisterUlong
ScsiPortGetDeviceBase
ScsiPortConvertUlongToPhysicalAddress
ScsiPortWritePortUlong
ScsiPortWritePortUchar
ScsiPortWriteRegisterUlong
ScsiPortWriteRegisterUshort

Sections

.text
Size: 103KB - Virtual size: 102KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 51B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

INIT
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/UNICODE.NL_
.cab
I386/UNLODCTR.EX_
.cab
I386/UNTFS.DL_
.cab
I386/UPS.CP_
.cab .ps1 polyglot
I386/UPS.EX_
.cab
I386/UREG.DL_
.cab
I386/URLMON.DL_
.cab
I386/USER.EX_
.cab
I386/USER32.DL_
.cab
I386/USERINIT.EX_
.cab
I386/USETUP.EXE
.sys windows:3 windows x86 arch:x86

5a4647e12c71d2714144f3d59b7dafe2

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

ntdll

NtUnloadKey
RtlSetOwnerSecurityDescriptor
RtlSetDaclSecurityDescriptor
RtlCreateSecurityDescriptor
RtlAddAccessAllowedAce
RtlCreateAcl
RtlAllocateAndInitializeSid
NtClose
NtSetSecurityObject
NtOpenFile
RtlInitUnicodeString
RtlAdjustPrivilege
LdrUnloadDll
LdrGetProcedureAddress
LdrLoadDll
NtQueryInformationProcess
NtWaitForSingleObject
NtResumeThread
NtTerminateProcess
RtlDestroyProcessParameters
RtlCreateUserProcess
RtlCreateProcessParameters
RtlFreeSid
NtLoadKey
NtDeleteKey
NtOpenKey
NtSaveKey
NtQueryDirectoryObject
NtFlushVirtualMemory
NtShutdownSystem
NtFsControlFile
NtSetEvent
NtDeviceIoControlFile
RtlPcToFileHeader
RtlCreateUserThread
NtCreateFile
NtCreateEvent
NtQuerySystemInformation
NtInitializeRegistry
DbgBreakPoint
RtlAllocateHeap
RtlUnicodeStringToAnsiString
RtlNormalizeProcessParams

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 78KB - Virtual size: 78KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 622B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/UTILITY.IN_
.cab
I386/V5334522.PP_
.cab
I386/V7VGA.RO_
.cab
I386/V7VRAM.SY_
.cab
I386/VANISHER.AN_
.cab
I386/VCDEX.DL_
.cab
I386/VDMDBG.DL_
.cab
I386/VDMREDIR.DL_
.cab
I386/VER.DL_
.cab
I386/VERSION.DL_
.cab
I386/VFORM32.DL_
.cab
I386/VGA.DL_
.cab
I386/VGA.DR_
.cab
I386/VGA.SYS
.sys windows:3 windows x86 arch:x86

812a550a3bfff92f6f6e08a308e5f3bd

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

ntoskrnl.exe

RtlUpcaseUnicodeString
ExAllocatePool
RtlQueryRegistryValues
wcsstr
ExFreePool

videoprt.sys

VideoPortInitialize
VideoPortGetDeviceBase
VideoPortWritePortUlong
VideoPortReadPortUlong
VideoPortWriteRegisterUchar
VideoPortWritePortUchar
VideoPortReadPortUchar
VideoPortWritePortUshort
VideoPortReadPortUshort
VideoPortWritePortBufferUshort
VideoPortInt10
VideoPortZeroMemory
VideoPortZeroDeviceMemory
VideoPortReadRegisterUchar
VideoPortSynchronizeExecution
VideoPortVerifyAccessRanges
VideoPortGetRegistryParameters
VideoPortUnmapMemory
VideoPortMapMemory
VideoPortSetTrappedEmulatorPorts
VideoPortWriteRegisterBufferUchar
VideoPortMoveMemory

Sections

.text
Size: 448B - Virtual size: 444B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 32B - Virtual size: 8B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

PAGE
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

PAGE
Size: 864B - Virtual size: 858B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

INIT
Size: 928B - Virtual size: 902B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 928B - Virtual size: 916B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 288B - Virtual size: 282B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/VGA256.DL_
.cab
I386/VGA64K.DL_
.cab
I386/VGA737.FO_
.cab
I386/VGA850.FON
I386/VGA852.FO_
.cab
I386/VGA857.FO_
.cab
I386/VGA860.FO_
.cab
I386/VGA861.FO_
.cab
I386/VGA863.FO_
.cab
I386/VGA865.FO_
.cab
I386/VGA866.FO_
.cab
I386/VGA869.FO_
.cab
I386/VGAFIX.FO_
.cab
I386/VGAFIXE.FO_
.cab
I386/VGAFIXG.FO_
.cab
I386/VGAFIXR.FO_
.cab
I386/VGAFIXT.FO_
.cab
I386/VGAOEM.FON
I386/VGASYS.FO_
.cab
I386/VGASYSE.FO_
.cab
I386/VGASYSG.FO_
.cab
I386/VGASYSR.FO_
.cab
I386/VGASYST.FO_
.cab
I386/VIADSK.SYS
.sys windows:4 windows x86 arch:x86

24055a76da7a7f18f0e5c48388815511

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ntoskrnl.exe

ExFreePool
MmGetPhysicalAddress
ZwClose
RtlIntegerToUnicodeString
RtlAppendUnicodeToString
RtlAnsiStringToUnicodeString
RtlAppendUnicodeStringToString
memchr
RtlInitUnicodeString
RtlWriteRegistryValue
RtlDeleteRegistryValue
ExAllocatePoolWithTag
ZwOpenKey
ZwQueryValueKey

hal

WRITE_PORT_ULONG
READ_PORT_ULONG

scsiport.sys

ScsiPortReadPortUshort
ScsiPortMoveMemory
ScsiPortReadPortBufferUshort
ScsiPortInitialize
ScsiPortWritePortBufferUlong
ScsiPortConvertUlongToPhysicalAddress
ScsiPortGetDeviceBase
ScsiPortReadPortBufferUlong
ScsiPortWritePortUlong
ScsiPortGetBusData
ScsiPortFreeDeviceBase
ScsiPortCompleteRequest
ScsiPortNotification
ScsiPortReadPortUchar
ScsiPortStallExecution
ScsiPortWritePortBufferUshort
ScsiPortWritePortUchar

Sections

.text
Size: 22KB - Virtual size: 22KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 15KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

INIT
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 928B - Virtual size: 898B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/VIDEO.IN_
.cab
I386/VIDEOPRT.SYS
.sys windows:3 windows x86 arch:x86

4d07e0ff04f82f3b3ccfddb08ceb65fa

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

ntoskrnl.exe

IoCreateSymbolicLink
IoQueryDeviceDescription
ZwReadFile
ZwQueryInformationFile
ZwOpenFile
RtlQueryRegistryValues
IoDeleteDevice
IoDeleteSymbolicLink
IoDisconnectInterrupt
MmUnmapIoSpace
MmMapIoSpace
RtlAppendUnicodeStringToString
RtlAppendUnicodeToString
RtlIntegerToUnicodeString
ZwOpenSection
IoInitializeTimer
IoConnectInterrupt
KeInitializeDpc
KeInitializeEvent
IoCreateDevice
RtlWriteRegistryValue
IofCompleteRequest
IoAllocateErrorLogEntry
ZwMapViewOfSection
ObOpenObjectByPointer
MmSetBankedSection
READ_REGISTER_UCHAR
READ_REGISTER_USHORT
READ_REGISTER_ULONG
READ_REGISTER_BUFFER_UCHAR
READ_REGISTER_BUFFER_USHORT
READ_REGISTER_BUFFER_ULONG
IoStartTimer
IoStopTimer
KeSynchronizeExecution
DbgBreakPoint
WRITE_REGISTER_UCHAR
WRITE_REGISTER_USHORT
WRITE_REGISTER_ULONG
WRITE_REGISTER_BUFFER_UCHAR
WRITE_REGISTER_BUFFER_USHORT
WRITE_REGISTER_BUFFER_ULONG
KeWaitForSingleObject
KeSetEvent
memmove
RtlCompareMemory
IoReportResourceUsage
RtlCompareUnicodeString
IoAssignResources
RtlInitUnicodeString
ExAllocatePool
ZwOpenKey
ZwClose
ExFreePool
Ke386QueryIoAccessMap
Ke386SetIoAccessMap
Ke386CallBios
ZwAllocateVirtualMemory
ZwFreeVirtualMemory
PsProcessType
SeSinglePrivilegeCheck
ZwSetInformationProcess
ObfDereferenceObject
ObReferenceObjectByHandle
Ke386IoSetAccessProcess
KeInsertQueueDpc
ZwUnmapViewOfSection
IoWriteErrorLogEntry

hal

WRITE_PORT_BUFFER_ULONG
WRITE_PORT_BUFFER_USHORT
WRITE_PORT_ULONG
WRITE_PORT_USHORT
WRITE_PORT_BUFFER_UCHAR
KeGetCurrentIrql
KfRaiseIrql
WRITE_PORT_UCHAR
KeStallExecutionProcessor
HalSetBusDataByOffset
KfLowerIrql
READ_PORT_BUFFER_USHORT
READ_PORT_BUFFER_UCHAR
READ_PORT_BUFFER_ULONG
READ_PORT_USHORT
READ_PORT_UCHAR
READ_PORT_ULONG
HalTranslateBusAddress
HalGetBusDataByOffset
HalGetInterruptVector
HalAcquireDisplayOwnership
HalDisableSystemInterrupt
HalEnableSystemInterrupt
HalGetBusData
HalAssignSlotResources

Exports

Exports

VideoPortCompareMemory
VideoPortDisableInterrupt
VideoPortEnableInterrupt
VideoPortFreeDeviceBase
VideoPortGetAccessRanges
VideoPortGetBusData
VideoPortGetDeviceBase
VideoPortGetDeviceData
VideoPortGetRegistryParameters
VideoPortInitialize
VideoPortInt10
VideoPortLogError
VideoPortMapBankedMemory
VideoPortMapMemory
VideoPortMoveMemory
VideoPortReadPortBufferUchar
VideoPortReadPortBufferUlong
VideoPortReadPortBufferUshort
VideoPortReadPortUchar
VideoPortReadPortUlong
VideoPortReadPortUshort
VideoPortReadRegisterBufferUchar
VideoPortReadRegisterBufferUlong
VideoPortReadRegisterBufferUshort
VideoPortReadRegisterUchar
VideoPortReadRegisterUlong
VideoPortReadRegisterUshort
VideoPortScanRom
VideoPortSetBusData
VideoPortSetRegistryParameters
VideoPortSetTrappedEmulatorPorts
VideoPortStallExecution
VideoPortStartTimer
VideoPortStopTimer
VideoPortSynchronizeExecution
VideoPortUnmapMemory
VideoPortVerifyAccessRanges
VideoPortWritePortBufferUchar
VideoPortWritePortBufferUlong
VideoPortWritePortBufferUshort
VideoPortWritePortUchar
VideoPortWritePortUlong
VideoPortWritePortUshort
VideoPortWriteRegisterBufferUchar
VideoPortWriteRegisterBufferUlong
VideoPortWriteRegisterBufferUshort
VideoPortWriteRegisterUchar
VideoPortWriteRegisterUlong
VideoPortWriteRegisterUshort
VideoPortZeroDeviceMemory
VideoPortZeroMemory

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 128B - Virtual size: 128B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

PAGE
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.edata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

INIT
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 928B - Virtual size: 920B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 448B - Virtual size: 444B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/VIDEOSIM.SY_
.cab
I386/VIRTUAL.IN_
.cab
I386/VT42P522.PP_
.cab
I386/VT43P522.PP_
.cab
I386/VT4510A1.PP_
.cab
I386/VT4530A1.PP_
.cab
I386/VT4530B1.PP_
.cab
I386/VT4530C1.PP_
.cab
I386/VT4533B1.PP_
.cab
I386/VT4533C1.PP_
.cab
I386/VT453EA1.PP_
.cab
I386/VT453EB1.PP_
.cab
I386/VT4550A1.PP_
.cab
I386/VT4550B1.PP_
.cab
I386/VT4550C1.PP_
.cab
I386/VT4551A1.PP_
.cab
I386/VT4563A1.PP_
.cab
I386/VT4563B1.PP_
.cab
I386/VT49901.PP_
.cab
I386/VT4L3001.PP_
.cab
I386/VT4L3301.PP_
.cab
I386/VT4L5001.PP_
.cab
I386/VT4L5301.PP_
.cab
I386/VT530522.PP_
.cab
I386/VT550522.PP_
.cab
I386/VT600P1.PP_
.cab
I386/VT600W1.PP_
.cab
I386/VT60P480.PP_
.cab
I386/VWIPXSPX.DL_
.cab
I386/VWIPXSPX.EX_
.cab
I386/W32.DL_
.cab
I386/WAGTAIL.AN_
.cab
I386/WANG15.PP_
.cab
I386/WANG15FP.PP_
.cab
I386/WANGQIC.SY_
.cab
I386/WD33C93.SYS
.sys windows:3 windows x86 arch:x86

9ce03b5e114435da643fa8f441c4feef

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

scsiport.sys

ScsiPortIoMapTransfer
ScsiPortNotification
ScsiPortGetLogicalUnit
ScsiPortFlushDma
ScsiPortReadPortUchar
ScsiPortStallExecution
ScsiPortWritePortUchar
ScsiPortLogError
ScsiPortInitialize
ScsiPortFreeDeviceBase
ScsiPortGetDeviceBase
ScsiPortConvertUlongToPhysicalAddress

Sections

.text
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

INIT
Size: 416B - Virtual size: 408B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 960B - Virtual size: 956B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 384B - Virtual size: 360B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/WDL.TR_
.cab
I386/WDVGA.SY_
.cab
I386/WEITEKP9.DL_
.cab
I386/WEITEKP9.SY_
.cab
I386/WFWNET.DR_
.cab
I386/WGPOMG32.DL_
.cab
I386/WIN.CO_
.cab
I386/WIN.IN_
.cab
I386/WIN32SPL.DL_
.cab
I386/WIN87EM.DL_
.cab
I386/WINCHAT.CN_
.cab
I386/WINCHAT.EX_
.cab
I386/WINCHAT.HL_
.cab
I386/WINDISK.CN_
.cab
I386/WINDISK.EX_
.cab
I386/WINDISK.FT_
.cab
I386/WINDISK.HL_
.cab
I386/WINDOWS.HL_
.cab
I386/WINFILE.CN_
.cab
I386/WINFILE.EX_
.cab
I386/WINFILE.FT_
.cab
I386/WINFILE.HL_
.cab
I386/WINFILE.IN_
.cab
I386/WINGDING.FO_
.cab
I386/WINGDING.TT_
.cab
I386/WINHELP.EX_
.cab
I386/WINHELP.HL_
.cab
I386/WINHLP32.CN_
.cab
I386/WINHLP32.EX_
.cab
I386/WINHLP32.HL_
.cab
I386/WININET.DL_
.cab
I386/WINLOGO.BM_
.cab
I386/WINLOGON.EX_
.cab
I386/WINMINE.CN_
.cab
I386/WINMINE.EX_
.cab
I386/WINMINE.HL_
.cab
I386/WINMM.DL_
.cab
I386/WINMSD.DL_
.cab
I386/WINMSD.EX_
.cab
I386/WINNT.BM_
.cab
I386/WINNT.CN_
.cab
I386/WINNT.EXE
I386/WINNT.FT_
.cab
I386/WINNT.HL_
.cab
I386/WINNT256.BM_
.cab
I386/WINNT32.EXE
.exe windows:3 windows x86 arch:x86

9359a7c7e80c4d3d14037b6cbb1ea168

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

ntdll

NtClose
RtlInitUnicodeString
NtQuerySymbolicLinkObject
NtOpenSymbolicLinkObject
RtlImageNtHeader
RtlUnwind

advapi32

AllocateAndInitializeSid
GetTokenInformation
OpenServiceA
QueryServiceStatus
OpenSCManagerA
InitiateSystemShutdownA
FreeSid
EqualSid
CloseServiceHandle
ControlService
OpenProcessToken
LookupPrivilegeValueA
AdjustTokenPrivileges

kernel32

GetModuleFileNameA
CreateThread
FindFirstFileA
lstrlenA
GetDriveTypeA
SetErrorMode
GetCurrentDirectoryA
GetProcAddress
lstrcpyA
FindClose
WaitForSingleObject
ExitProcess
WriteFile
DeleteFileA
SetFileAttributesA
CopyFileA
Sleep
ReleaseMutex
VirtualLock
GetModuleHandleA
ExitThread
CreateFileMappingA
GetFileSize
CreateFileA
UnmapViewOfFile
DeviceIoControl
GetFileAttributesA
CreateMutexA
MapViewOfFile
CreateDirectoryA
lstrcmpiA
LocalAlloc
LocalFree
LocalReAlloc
ReadFile
GetVolumeInformationA
GetCurrentProcess
GetVersion
RemoveDirectoryA
FindNextFileA
lstrcmpA
QueryDosDeviceW
CreateFileW
lstrlenW
GetEnvironmentStrings
GetCommandLineA
lstrcatA
GetStdHandle
GetFileType
GetStartupInfoA
GetProcessHeap
WideCharToMultiByte
LCMapStringW
MultiByteToWideChar
GetStringTypeW
GetLocalTime
HeapAlloc
HeapFree
GetTimeZoneInformation
CloseHandle
GetDiskFreeSpaceA
FormatMessageA
GetLastError
UnhandledExceptionFilter

gdi32

ExtTextOutA
SetTextColor
SetBkColor
GetTextExtentPoint32A
GetStockObject
BitBlt
DeleteObject
DeleteDC
GetDeviceCaps
CreateCompatibleDC
SelectObject

user32

GetDesktopWindow
RegisterClassA
CharLowerW
wsprintfW
CheckDlgButton
EnableWindow
MessageBeep
WinHelpA
EndDialog
SetDlgItemTextA
SetWindowTextA
LoadStringA
DialogBoxParamA
PostMessageA
GetDlgItem
GetDlgItemTextA
SetFocus
SendDlgItemMessageA
EndPaint
LoadBitmapA
BeginPaint
CharUpperA
LoadIconA
ReleaseDC
GetDC
SetWindowLongA
SetForegroundWindow
LoadCursorA
wsprintfA
GetWindowLongA
InflateRect
FrameRect
GetClientRect
UpdateWindow
InvalidateRect
MoveWindow
DefWindowProcA
ShowWindow
SendMessageA
MessageBoxA
GetWindowRect
GetSystemMetrics
CharNextA
IsDlgButtonChecked
GetWindowTextLengthA

Sections

.text
Size: 37KB - Virtual size: 37KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/WINNT32.HLP
I386/WINOLDAP.MO_
.cab
I386/WINPERMS.TX_
.cab
I386/WINPRINT.DL_
.cab
I386/WINSOCK.DL_
.cab
I386/WINSPOOL.DR_
.cab
I386/WINSPOOL.EX_
.cab
I386/WINSRV.DL_
.cab
I386/WINSSPI.DL_
.cab
I386/WINSTRM.DL_
.cab
I386/WINVER.EX_
.cab
I386/WKSSVC.DL_
.cab
I386/WOW32.DL_
.cab
I386/WOWDEB.EX_
.cab
I386/WOWEXEC.EX_
.cab
I386/WOWFAX.DL_
.cab
I386/WOWFAXUI.DL_
.cab
I386/WRITE.CN_
.cab
I386/WRITE.EX_
.cab
I386/WRITE.HL_
.cab
I386/WSHISN.DL_
.cab
I386/WSHNETBS.DL_
.cab
I386/WSHTCPIP.DL_
.cab
I386/WSOCK32.DL_
.cab
I386/XABIOS.BI_
.cab
I386/XACOOK.BI_
.cab
I386/XACTSRV.DL_
.cab
I386/XCOPY.EX_
.cab
I386/XGA.DL_
.cab
I386/XGA.SY_
.cab
I386/XPORTS.IN_
.cab
I386/XRDT0851.PP_
.cab
I386/XRDT0901.PP_
.cab
I386/XRDT1351.PP_
.cab
I386/XR_45051.PP_
.cab
I386/XR_45201.PP_
.cab
I386/XR_49001.PP_
.cab
I386/XT_82001.PP_
.cab
I386/ZIGZAG.BM_
.cab
I386/_DEFAULT.PI_
.cab
MDAC/JET35SP3.EXE
.exe windows:5 windows x86 arch:x86

b83464d8132ecd9f810820e192566e15

Code Sign

03:c7:8f:37:db:92:28:df:3c:bb:1a:ad:82:fa:67:10
Certificate

Issuer

OU=VeriSign Commercial Software Publishers CA,O=VeriSign\, Inc.,L=Internet

Not Before

09/04/1996, 00:00

Not After

07/01/2004, 23:59

Subject

OU=VeriSign Commercial Software Publishers CA,O=VeriSign\, Inc.,L=Internet

13:89:b4:d1:8a:e8:a7:c4:bd:35:c7:9b:8d:88:ca:1f:ca:53:56:91
Certificate

Issuer

OU=VeriSign\, Inc.+OU=VeriSign Time Stamping Service Root+OU=NO LIABILITY ACCEPTED\, (c)97 VeriSign\, Inc.,O=VeriSign Trust Network

Not Before

12/05/1997, 07:00

Not After

31/12/1999, 07:00

Subject

OU=VeriSign\, Inc.+OU=VeriSign Time Stamping Service Root+OU=NO LIABILITY ACCEPTED\, (c)97 VeriSign\, Inc.,O=VeriSign Trust Network

bd:11:9a:da:43:ed:21:fb:46:58:84:89:ca:46:88:90:25:ee:14:60
Certificate

Issuer

OU=VeriSign\, Inc.+OU=VeriSign Time Stamping Service Root+OU=NO LIABILITY ACCEPTED\, (c)97 VeriSign\, Inc.,O=VeriSign Trust Network

Not Before

12/05/1997, 07:00

Not After

31/12/1999, 07:00

Subject

OU=VeriSign Time Stamping Service+OU=VeriSign Trust Network+OU=NO LIABILITY ACCEPTED\, (c)97 VeriSign\, Inc.,O=VeriSign\, Inc.,L=Internet

55:0d:88:f5:3f:64:16:d7:0c:73:00:d8:45:92:16:34
Certificate

Issuer

OU=VeriSign Commercial Software Publishers CA,O=VeriSign\, Inc.,L=Internet

Not Before

19/03/1999, 00:00

Not After

16/04/2000, 23:59

Subject

CN=Microsoft Corporation,OU=VeriSign Commercial Software Publishers CA+OU=www.verisign.com/repository/RPA Incorp. by Ref.\,LIAB.LTD(c)98+OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=Microsoft Corporation,O=VeriSign\, Inc.,L=Internet+L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageKeyEncipherment

Signer

Actual PE Digest

Digest Algorithm

PE Digest Matches

false

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

advapi32

RegCloseKey
EqualSid
AllocateAndInitializeSid
GetTokenInformation
OpenProcessToken
AdjustTokenPrivileges
LookupPrivilegeValueA
FreeSid
RegDeleteValueA
RegOpenKeyExA
RegSetValueExA
RegQueryValueExA
RegCreateKeyExA
RegQueryInfoKeyA

kernel32

lstrcatA
GetFileAttributesA
GetShortPathNameA
GetPrivateProfileStringA
GetPrivateProfileIntA
GetCurrentProcess
lstrlenA
lstrcmpiA
lstrcpyA
GetModuleFileNameA
FreeLibrary
LocalAlloc
GetLastError
GetSystemDirectoryA
LoadLibraryA
FindClose
FindNextFileA
DeleteFileA
SetFileAttributesA
lstrcmpA
FindFirstFileA
_lclose
_llseek
_lopen
GetWindowsDirectoryA
GetProcAddress
RemoveDirectoryA
GlobalUnlock
GlobalLock
GlobalAlloc
ExitProcess
GetModuleHandleA
GetStartupInfoA
CloseHandle
LoadResource
FindResourceA
CreateMutexA
SetEvent
CreateEventA
SetCurrentDirectoryA
CreateThread
ResetEvent
TerminateThread
GetVersionExA
LocalFree
GetExitCodeProcess
WaitForSingleObject
CreateProcessA
GetTempPathA
FreeResource
LockResource
SizeofResource
CreateFileA
ReadFile
WriteFile
SetFilePointer
SetFileTime
LocalFileTimeToFileTime
DosDateTimeToFileTime
GetTempFileNameA
GetSystemInfo
GetDiskFreeSpaceA
GetDriveTypeA
lstrcpynA
GetVolumeInformationA
GetCurrentDirectoryA
LoadLibraryExA
GetCommandLineA
CreateDirectoryA
GlobalFree
FormatMessageA
IsDBCSLeadByte

gdi32

GetDeviceCaps

user32

EndDialog
wsprintfA
ExitWindowsEx
CharNextA
CharUpperA
GetDesktopWindow
SetWindowLongA
GetWindowLongA
CallWindowProcA
GetDlgItem
SetForegroundWindow
SetWindowTextA
SendDlgItemMessageA
EnableWindow
GetDlgItemTextA
SendMessageA
DispatchMessageA
LoadStringA
PeekMessageA
MessageBoxA
CharPrevA
SetWindowPos
ReleaseDC
GetDC
GetWindowRect
ShowWindow
DialogBoxIndirectParamA
SetDlgItemTextA
MessageBeep
MsgWaitForMultipleObjects

comctl32

ord17

version

GetFileVersionInfoSizeA
VerQueryValueA
GetFileVersionInfoA

Sections

.text
Size: 36KB - Virtual size: 35KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1.2MB - Virtual size: 1.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
MDAC/MDACFULL.EXE
.exe windows:5 windows x86 arch:x86

b83464d8132ecd9f810820e192566e15

Code Sign

13:89:b4:d1:8a:e8:a7:c4:bd:35:c7:9b:8d:88:ca:1f:ca:53:56:91
Certificate

Issuer

OU=VeriSign\, Inc.+OU=VeriSign Time Stamping Service Root+OU=NO LIABILITY ACCEPTED\, (c)97 VeriSign\, Inc.,O=VeriSign Trust Network

Not Before

12/05/1997, 07:00

Not After

31/12/1999, 07:00

Subject

OU=VeriSign\, Inc.+OU=VeriSign Time Stamping Service Root+OU=NO LIABILITY ACCEPTED\, (c)97 VeriSign\, Inc.,O=VeriSign Trust Network

bd:11:9a:da:43:ed:21:fb:46:58:84:89:ca:46:88:90:25:ee:14:60
Certificate

Issuer

OU=VeriSign\, Inc.+OU=VeriSign Time Stamping Service Root+OU=NO LIABILITY ACCEPTED\, (c)97 VeriSign\, Inc.,O=VeriSign Trust Network

Not Before

12/05/1997, 07:00

Not After

31/12/1999, 07:00

Subject

OU=VeriSign Time Stamping Service+OU=VeriSign Trust Network+OU=NO LIABILITY ACCEPTED\, (c)97 VeriSign\, Inc.,O=VeriSign\, Inc.,L=Internet

10:47:36:cd:35:24:07:d2:1a:09:3a:95:1f:ac:c1:8c
Certificate

Issuer

OU=VeriSign Commercial Software Publishers CA,O=VeriSign\, Inc.,L=Internet

Not Before

10/05/1997, 00:00

Not After

10/05/1998, 23:59

Subject

CN=Microsoft Corporation,OU=VeriSign Commercial Software Publishers CA+OU=www.verisign.com/repository/CPS Incorp. by Ref.\,LIAB.LTD(c)96+OU=Digital ID Class 3 - Microsoft Software Validation,O=VeriSign\, Inc.,L=Internet+L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageKeyEncipherment

Signer

Actual PE Digest

Digest Algorithm

PE Digest Matches

false

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

advapi32

RegCloseKey
EqualSid
AllocateAndInitializeSid
GetTokenInformation
OpenProcessToken
AdjustTokenPrivileges
LookupPrivilegeValueA
FreeSid
RegDeleteValueA
RegOpenKeyExA
RegSetValueExA
RegQueryValueExA
RegCreateKeyExA
RegQueryInfoKeyA

kernel32

lstrcatA
GetFileAttributesA
GetShortPathNameA
GetPrivateProfileStringA
GetPrivateProfileIntA
GetCurrentProcess
lstrlenA
lstrcmpiA
lstrcpyA
GetModuleFileNameA
FreeLibrary
LocalAlloc
GetLastError
GetSystemDirectoryA
LoadLibraryA
FindClose
FindNextFileA
DeleteFileA
SetFileAttributesA
lstrcmpA
FindFirstFileA
_lclose
_llseek
_lopen
GetWindowsDirectoryA
GetProcAddress
RemoveDirectoryA
GlobalUnlock
GlobalLock
GlobalAlloc
ExitProcess
GetModuleHandleA
GetStartupInfoA
CloseHandle
LoadResource
FindResourceA
CreateMutexA
SetEvent
CreateEventA
SetCurrentDirectoryA
CreateThread
ResetEvent
TerminateThread
GetVersionExA
LocalFree
GetExitCodeProcess
WaitForSingleObject
CreateProcessA
GetTempPathA
FreeResource
LockResource
SizeofResource
CreateFileA
ReadFile
WriteFile
SetFilePointer
SetFileTime
LocalFileTimeToFileTime
DosDateTimeToFileTime
GetTempFileNameA
GetSystemInfo
GetDiskFreeSpaceA
GetDriveTypeA
lstrcpynA
GetVolumeInformationA
GetCurrentDirectoryA
LoadLibraryExA
GetCommandLineA
CreateDirectoryA
GlobalFree
FormatMessageA
IsDBCSLeadByte

gdi32

GetDeviceCaps

user32

EndDialog
wsprintfA
ExitWindowsEx
CharNextA
CharUpperA
GetDesktopWindow
SetWindowLongA
GetWindowLongA
CallWindowProcA
GetDlgItem
SetForegroundWindow
SetWindowTextA
SendDlgItemMessageA
EnableWindow
GetDlgItemTextA
SendMessageA
DispatchMessageA
LoadStringA
PeekMessageA
MessageBoxA
CharPrevA
SetWindowPos
ReleaseDC
GetDC
GetWindowRect
ShowWindow
DialogBoxIndirectParamA
SetDlgItemTextA
MessageBeep
MsgWaitForMultipleObjects

comctl32

ord17

version

GetFileVersionInfoSizeA
VerQueryValueA
GetFileVersionInfoA

Sections

.text
Size: 36KB - Virtual size: 35KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3.4MB - Virtual size: 3.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
MEDIA/AMOV4IE.EXE
.exe windows:4 windows x86 arch:x86

2168924e42703f48f13006228d84cfc2

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LockResource
LoadResource
SizeofResource
FreeResource
FindResourceA
lstrcatA
lstrlenA
CreateFileA
RtlMoveMemory
ReadFile
WriteFile
SetFilePointer
SetFileTime
LocalFileTimeToFileTime
DosDateTimeToFileTime
GlobalAlloc
GlobalFree
SetFileAttributesA
DeleteFileA
GetCurrentProcess
GetTempFileNameA
GetWindowsDirectoryA
GetDriveTypeA
GetModuleFileNameA
GetTempPathA
lstrcpynA
GetDiskFreeSpaceA
GetCurrentDirectoryA
CreateProcessA
GetPrivateProfileStringA
GetPrivateProfileIntA
FindClose
FindNextFileA
FindFirstFileA
_lclose
_llseek
_lopen
WaitForSingleObject
GetExitCodeProcess
CloseHandle
lstrcpyA
lstrcmpiA
LoadLibraryA
GetProcAddress
FreeLibrary
GetLastError
FormatMessageA
LocalAlloc
lstrcmpA
LocalFree
GetVersionExA
CreateThread
TerminateThread
FlushFileBuffers
SetCurrentDirectoryA
GetFileAttributesA
CreateDirectoryA
RemoveDirectoryA
WideCharToMultiByte
GetStringTypeA
SetStdHandle
HeapAlloc
HeapFree
HeapCreate
TlsGetValue
SetLastError
TlsAlloc
TlsSetValue
GetCurrentThreadId
GetStdHandle
GetFileType
SetHandleCount
GetOEMCP
GetACP
GetCPInfo
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
UnhandledExceptionFilter
RtlUnwind
LCMapStringW
LCMapStringA
ExitProcess
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
LeaveCriticalSection
GetStringTypeW
MultiByteToWideChar
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection

user32

DialogBoxParamA
SetWindowLongA
GetWindowLongA
CallWindowProcA
EndDialog
GetDlgItem
SetForegroundWindow
SetWindowTextA
SetDlgItemTextA
GetDesktopWindow
SendDlgItemMessageA
LoadStringA
GetDlgItemTextA
EnableWindow
MsgWaitForMultipleObjects
PeekMessageA
SetWindowPos
ReleaseDC
GetDC
GetWindowRect
CharPrevA
ExitWindowsEx
wsprintfA
CharNextA
ShowWindow
MessageBeep
MessageBoxA
DispatchMessageA
SendMessageA

gdi32

GetDeviceCaps

advapi32

RegDeleteValueA
FreeSid
EqualSid
AllocateAndInitializeSid
GetTokenInformation
OpenProcessToken
AdjustTokenPrivileges
LookupPrivilegeValueA
RegCloseKey
RegCreateKeyExA
RegOpenKeyExA
RegSetValueExA
RegQueryValueExA
RegOpenKeyA
RegQueryInfoKeyA

comctl32

ord17

Sections

.text
Size: 49KB - Virtual size: 48KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 213B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 6KB - Virtual size: 33KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 565KB - Virtual size: 568KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
MEDIA/DIVX505.EXE
.exe windows:4 windows x86 arch:x86

6c6e8576f6d86b0e67e45f26ef4de96d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

_lopen
FindFirstFileA
lstrlenA
lstrcpyA
GetWindowsDirectoryA
lstrcatA
RemoveDirectoryA
FindNextFileA
DeleteFileA
lstrcmpA
SetFileAttributesA
_lread
FindClose
_lcreat
LoadLibraryA
GetProcAddress
FreeLibrary
GetVersionExA
GetLastError
GetCurrentProcess
_llseek
GetModuleFileNameA
GlobalFree
GlobalAlloc
SetFileTime
DosDateTimeToFileTime
LocalFileTimeToFileTime
GetLocalTime
UnhandledExceptionFilter
FreeEnvironmentStringsA
HeapReAlloc
_hread
_hwrite
CreateDirectoryA
GetTimeZoneInformation
GetSystemTime
_lclose
FileTimeToSystemTime
FileTimeToLocalFileTime
GetDriveTypeA
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
GetCPInfo
GetACP
GetOEMCP
WideCharToMultiByte
TerminateProcess
GetFullPathNameA
GetCurrentDirectoryA
RtlUnwind
HeapFree
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
HeapDestroy
HeapCreate
VirtualFree
SetEnvironmentVariableA
VirtualAlloc
WriteFile
HeapAlloc
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
CompareStringA
CompareStringW

user32

LoadIconA
wsprintfA
ExitWindowsEx
MessageBoxA

advapi32

AdjustTokenPrivileges
LookupPrivilegeValueA
OpenProcessToken

Sections

.text
Size: 48KB - Virtual size: 47KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data1
Size: 4KB - Virtual size: 192B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
MEDIA/DIVXAUD3.ZIP
.zip
MEDIA/INDEO/COPYRITE.TXT
MEDIA/INDEO/DATA.Z
MEDIA/INDEO/DISK1.ID
MEDIA/INDEO/ISDBGN.DLL
.dll windows:1 windows x86 arch:x86

9dafd62a1d0f3d9a9a46c4a809d3bcac

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

user32

MessageBoxA
LoadStringA
wsprintfA
MessageBeep
ShowWindow
GetDlgItem
IsWindow
SetWindowLongA
GetWindowTextA
SendMessageA
CreateDialogParamA
RegisterWindowMessageA
GetWindowLongA
SetWindowTextA
SetWindowPos
EnableWindow
CallWindowProcA
GetWindow
DestroyWindow
UpdateWindow
GetDlgCtrlID
DialogBoxParamA
AppendMenuA
ScreenToClient
GetWindowRect
IsWindowEnabled
GetSystemMenu
LoadBitmapA
GetKeyState
GetScrollPos
ScrollWindow
PostMessageA
OffsetRect
SetScrollRange
InvertRect
SetFocus
CharNextA
SetScrollPos
CharPrevA
CharUpperA
CharLowerA
CharToOemA
DrawFocusRect
PostQuitMessage
InflateRect
MoveWindow
SetRect
GetFocus
GetClassInfoA
CreateWindowExA
LoadCursorA
DrawTextA
FindWindowA
ReleaseCapture
RegisterClassA
GetParent
EndPaint
DefWindowProcA
BeginPaint
KillTimer
GetSysColor
GetSystemMetrics
SetTimer
GetClientRect
FillRect
EndDialog
GetDC
ReleaseDC
InvalidateRect

gdi32

MoveToEx
CreatePen
RestoreDC
GetTextExtentPointA
GetDeviceCaps
EnumFontFamiliesA
EnumFontsA
GetTextMetricsA
SetBkColor
ExtTextOutA
SetPixel
LineTo
Rectangle
SaveDC
DeleteObject
CreateSolidBrush
GetStockObject
BitBlt
CreateCompatibleDC
CreateCompatibleBitmap
SelectObject
PatBlt
SetTextColor
SetBkMode
TextOutA
DeleteDC
GetObjectA
CreateFontIndirectA

kernel32

GetModuleFileNameA
lstrlenA
RtlUnwind
VirtualFree
ExitProcess
VirtualAlloc
MoveFileA
MultiByteToWideChar
lstrcatA
GetCurrentDirectoryA
WriteFile
HeapCreate
HeapDestroy
HeapAlloc
FindResourceA
HeapFree
LockResource
SizeofResource
LoadResource
GlobalUnlock
GlobalFree
FreeResource
GlobalLock
_hread
GlobalAlloc
GetPrivateProfileIntA
GetPrivateProfileStringA
WritePrivateProfileStringA
CreateDirectoryA
GetModuleHandleA
GetWindowsDirectoryA
IsDBCSLeadByte
FindNextFileA
GetProcAddress
RemoveDirectoryA
lstrcmpiA
SetCurrentDirectoryA
GetFileAttributesA
SetErrorMode
SetFileAttributesA
_lread
_lwrite
_llseek
SetFilePointer
SetEndOfFile
DeleteFileA
OpenFile
_lclose
GetFileSize
FindClose
DosDateTimeToFileTime
FindFirstFileA
SetFileTime
GetFileTime
LocalFileTimeToFileTime
lstrcmpA
lstrcpyA
GetVersion
FileTimeToDosDateTime
FileTimeToLocalFileTime
GetLastError
CreateFileA

version

GetFileVersionInfoSizeA
GetFileVersionInfoA
VerQueryValueA

Exports

Exports

BoxWndProc
BreakDlgProc
EdtWndProc
FonEnumNames
ISdbgAboutProc
ISdbgBreak
ISdbgDlgProc
ISdbgExit
ISdbgInit
ISdbgStaticOvlProc
ISdbgSubWndProc
SclrDlgProc
ScriptDlgProc
WEP
WatchWndProc

Sections

.text
Size: 77KB - Virtual size: 77KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 5KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 74B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 425B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 32KB - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
MEDIA/INDEO/LICENSE.TXT
MEDIA/INDEO/README32.TXT
MEDIA/INDEO/SETUP.BMP
MEDIA/INDEO/SETUP.EXE
MEDIA/INDEO/SETUP.INS
MEDIA/INDEO/SETUP.PKG
MEDIA/INDEO/_INST32I.EX_
MEDIA/INDEO/_ISDEL.EXE
MEDIA/INDEO/_SETUP.DLL
MEDIA/INDEO/_SETUP.LIB
MEDIA/NSPLY351.EXE
.exe windows:4 windows x86 arch:x86

ec175680921a2715662de338b92377d1

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

advapi32

RegDeleteValueA
EqualSid
AllocateAndInitializeSid
GetTokenInformation
OpenProcessToken
AdjustTokenPrivileges
LookupPrivilegeValueA
RegCloseKey
FreeSid
RegOpenKeyExA
RegSetValueExA
RegQueryValueExA
RegCreateKeyExA
RegOpenKeyA
RegQueryInfoKeyA

kernel32

lstrcatA
GetFileAttributesA
lstrlenA
lstrcmpiA
GetPrivateProfileStringA
GetCurrentProcess
GetPrivateProfileIntA
lstrcpyA
GetModuleFileNameA
RemoveDirectoryA
FindClose
FindNextFileA
DeleteFileA
SetFileAttributesA
lstrcmpA
FindFirstFileA
_lclose
_llseek
_lopen
GetWindowsDirectoryA
CreateDirectoryA
GetSystemDirectoryA
GlobalUnlock
GlobalFree
GlobalLock
GlobalAlloc
LoadResource
CreateMutexA
GetLastError
SetEvent
CreateEventA
SetCurrentDirectoryA
TerminateThread
ResetEvent
CreateThread
GetVersionExA
FormatMessageA
FreeLibrary
GetProcAddress
GetExitCodeProcess
WaitForSingleObject
CreateProcessA
GetTempPathA
LoadLibraryA
FreeResource
LockResource
SizeofResource
CreateFileA
ReadFile
WriteFile
LocalAlloc
SetFileTime
LocalFileTimeToFileTime
DosDateTimeToFileTime
GetTempFileNameA
GetSystemInfo
GetDiskFreeSpaceA
FindResourceA
GetDriveTypeA
GetVolumeInformationA
GetCurrentDirectoryA
LoadLibraryExA
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
TerminateProcess
LocalFree
UnhandledExceptionFilter
FreeEnvironmentStringsA
MultiByteToWideChar
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
WideCharToMultiByte
GetCPInfo
GetACP
GetOEMCP
SetHandleCount
GetFileType
GetStdHandle
DeleteCriticalSection
GetCurrentThreadId
TlsSetValue
TlsAlloc
SetLastError
TlsGetValue
HeapDestroy
HeapCreate
VirtualFree
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
HeapFree
HeapAlloc
VirtualAlloc
GetLocaleInfoA
GetLocaleInfoW
FlushFileBuffers
SetStdHandle
CloseHandle
lstrcpynA
SetFilePointer
RtlUnwind

gdi32

GetDeviceCaps

user32

PeekMessageA
LoadStringA
GetDesktopWindow
wsprintfA
ExitWindowsEx
CharPrevA
CharNextA
SetWindowLongA
GetWindowLongA
CallWindowProcA
GetDlgItem
SetForegroundWindow
SetWindowTextA
SendDlgItemMessageA
GetDlgItemTextA
EnableWindow
SendMessageA
SetDlgItemTextA
DispatchMessageA
MsgWaitForMultipleObjects
MessageBoxA
SetWindowPos
ReleaseDC
GetDC
GetWindowRect
ShowWindow
DialogBoxIndirectParamA
MessageBeep
EndDialog

comctl32

ord17

version

GetFileVersionInfoA
GetFileVersionInfoSizeA
VerQueryValueA

Sections

.text
Size: 62KB - Virtual size: 62KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 13KB - Virtual size: 37KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2.0MB - Virtual size: 2.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
NT351RUS/APPFONTS/ARICYR.TTF
NT351RUS/APPFONTS/ARICYRB.TTF
NT351RUS/APPFONTS/ARICYRBI.TTF
NT351RUS/APPFONTS/ARICYRI.TTF
NT351RUS/APPFONTS/COUCYR.TTF
NT351RUS/APPFONTS/COUCYRB.TTF
NT351RUS/APPFONTS/COUCYRBI.TTF
NT351RUS/APPFONTS/COUCYRI.TTF
NT351RUS/APPFONTS/COURE.CYR
NT351RUS/APPFONTS/SERIFE.CYR
NT351RUS/APPFONTS/SERIFF.FON
NT351RUS/APPFONTS/SMALLE.FON
NT351RUS/APPFONTS/SMALLF.FON
NT351RUS/APPFONTS/TIMCYR.TTF
NT351RUS/APPFONTS/TIMCYRB.TTF
NT351RUS/APPFONTS/TIMCYRBI.TTF
NT351RUS/APPFONTS/TIMCYRI.TTF
NT351RUS/FONTSUP.BAT
NT351RUS/README.TXT
NT351RUS/RUS_DOS/COUNTRY.SYS
NT351RUS/RUS_DOS/KEYRUS.COM
NT351RUS/SETUP.BAT
NT351RUS/SYSTEM/APP866.FON
NT351RUS/SYSTEM/CGA40866.FON
NT351RUS/SYSTEM/CGA80866.FON
NT351RUS/SYSTEM/EGA40866.FON
NT351RUS/SYSTEM/EGA80866.FON
NT351RUS/SYSTEM/SSERIFER.FON
NT351RUS/SYSTEM/VGA866.FON
NT351RUS/SYSTEM/VGAFIXR.FON
NT351RUS/SYSTEM/VGASYSR.FON
NT351RUS/SYSTEM32/REGISTRY.IN_
NT351RUS/X86/KBDDLL.DL_
.cab
NT351RUS/X86/KBDSEL.EX_
.cab
NT351RUS/X86/LANGUAGE.IN_
NT351RUS/X86/LANGUAGE.SR_
NT351RUS/X86/SUBLOCAL.EX_
.cab
PRINTER/I_CLRLSR.EXE
PRINTER/I_DSKJET.EXE
PRINTER/I_DSNJET.EXE
PRINTER/I_LEXMRK.EXE
PRINTER/I_LSRJT5.EXE
PRINTER/I_OKI.EXE
PRINTER/I_PCL5.EXE
PRINTER/I_PCL5MS.EXE
PRINTER/I_STYLUS.EXE
PRINTER/I_TALLY.EXE
PRINTER/NT351PRE.EXE
[BOOT]/Boot-NoEmul.img

Sharing

General

Malware Config

Signatures

Files

b8b8f071f102830f516c2ba75d0d9604

Headers

File Characteristics

Imports

ntoskrnl.exe

hal

Sections

.text Size: 4KB - Virtual size: 4KB

.data Size: 32B - Virtual size: 4B

INIT Size: 3KB - Virtual size: 3KB

.rsrc Size: 960B - Virtual size: 936B

.reloc Size: 352B - Virtual size: 334B

3ff663ac4f6c3e2f00f298fd26187c7e

Headers

File Characteristics

Imports

scsiport.sys

Sections

.text Size: 6KB - Virtual size: 6KB

INIT Size: 576B - Virtual size: 572B

.rsrc Size: 960B - Virtual size: 940B

.reloc Size: 288B - Virtual size: 260B

1a3bffcadaf0f5ccfe6763e567bad75c

Headers

File Characteristics

Imports

scsiport.sys

Sections

.text Size: 2KB - Virtual size: 2KB

INIT Size: 544B - Virtual size: 528B

.rsrc Size: 960B - Virtual size: 944B

.reloc Size: 224B - Virtual size: 216B

ed1f1f7bd981c78cb1c478be6b84692f

Headers

File Characteristics

Imports

scsiport.sys

Sections

.text Size: 20KB - Virtual size: 20KB

.data Size: 2KB - Virtual size: 2KB

INIT Size: 1KB - Virtual size: 1KB

.rsrc Size: 960B - Virtual size: 948B

.reloc Size: 704B - Virtual size: 690B

a224f8be03b30536ef3076d71466bb66

Headers

File Characteristics

Imports

scsiport.sys

Sections

.text Size: 11KB - Virtual size: 11KB

.data Size: 8KB - Virtual size: 8KB

INIT Size: 576B - Virtual size: 558B

.rsrc Size: 960B - Virtual size: 960B

.reloc Size: 384B - Virtual size: 376B

cef71c57a62a410a305eee9fa0ea42f7

Headers

File Characteristics

Imports

scsiport.sys

Sections

.text Size: 5KB - Virtual size: 5KB

.data Size: 256B - Virtual size: 234B

INIT Size: 512B - Virtual size: 484B

.rsrc Size: 960B - Virtual size: 956B

.reloc Size: 352B - Virtual size: 324B

7208a97e30a4539f40c98207b609c96b

Headers

File Characteristics

Imports

scsiport.sys

Sections

.text Size: 9KB - Virtual size: 9KB

INIT Size: 640B - Virtual size: 628B

.rsrc Size: 928B - Virtual size: 924B

.reloc Size: 352B - Virtual size: 328B

.text
Size: 4KB - Virtual size: 4KB

.data
Size: 32B - Virtual size: 4B

INIT
Size: 3KB - Virtual size: 3KB

.rsrc
Size: 960B - Virtual size: 936B

.reloc
Size: 352B - Virtual size: 334B

.text
Size: 6KB - Virtual size: 6KB

INIT
Size: 576B - Virtual size: 572B

.rsrc
Size: 960B - Virtual size: 940B

.reloc
Size: 288B - Virtual size: 260B

.text
Size: 2KB - Virtual size: 2KB

INIT
Size: 544B - Virtual size: 528B

.rsrc
Size: 960B - Virtual size: 944B

.reloc
Size: 224B - Virtual size: 216B

.text
Size: 20KB - Virtual size: 20KB

.data
Size: 2KB - Virtual size: 2KB

INIT
Size: 1KB - Virtual size: 1KB

.rsrc
Size: 960B - Virtual size: 948B

.reloc
Size: 704B - Virtual size: 690B

.text
Size: 11KB - Virtual size: 11KB

.data
Size: 8KB - Virtual size: 8KB

INIT
Size: 576B - Virtual size: 558B

.rsrc
Size: 960B - Virtual size: 960B

.reloc
Size: 384B - Virtual size: 376B

.text
Size: 5KB - Virtual size: 5KB

.data
Size: 256B - Virtual size: 234B

INIT
Size: 512B - Virtual size: 484B

.rsrc
Size: 960B - Virtual size: 956B

.reloc
Size: 352B - Virtual size: 324B

.text
Size: 9KB - Virtual size: 9KB

INIT
Size: 640B - Virtual size: 628B

.rsrc
Size: 928B - Virtual size: 924B

.reloc
Size: 352B - Virtual size: 328B

.text
Size: 26KB - Virtual size: 26KB

Init
Size: 288B - Virtual size: 283B

.data
Size: 5KB - Virtual size: 5KB

INIT
Size: 448B - Virtual size: 424B

.rsrc
Size: 960B - Virtual size: 932B

.reloc
Size: 1KB - Virtual size: 1KB

.text
Size: 18KB - Virtual size: 18KB

.data
Size: 1KB - Virtual size: 1KB

.rsrc
Size: 928B - Virtual size: 920B

.reloc
Size: 608B - Virtual size: 600B

.text
Size: 12KB - Virtual size: 12KB

.rdata
Size: 448B - Virtual size: 421B

.data
Size: 64B - Virtual size: 48B

INIT
Size: 10KB - Virtual size: 10KB

.rsrc
Size: 928B - Virtual size: 916B

.reloc
Size: 960B - Virtual size: 956B

.text
Size: 310KB - Virtual size: 309KB

.data
Size: 59KB - Virtual size: 143KB

.CRT
Size: 512B - Virtual size: 456B

.rsrc
Size: 67KB - Virtual size: 66KB

.reloc
Size: 7KB - Virtual size: 7KB

.text
Size: 5KB - Virtual size: 5KB

.data
Size: 64B - Virtual size: 52B

INIT
Size: 544B - Virtual size: 542B

.rsrc
Size: 960B - Virtual size: 948B

.reloc
Size: 288B - Virtual size: 270B

.text
Size: 4KB - Virtual size: 4KB

.rdata
Size: 1KB - Virtual size: 1KB

.data
Size: 544B - Virtual size: 536B

PAGE
Size: 43KB - Virtual size: 43KB

INIT
Size: 3KB - Virtual size: 3KB

.rsrc
Size: 928B - Virtual size: 924B