en_windows_xp_professional_with_service_pack_3_x86_cd_vl_x14-73974[.]iso

Sharing

Copy URL Twitter E-mail

General

Target

en_windows_xp_professional_with_service_pack_3_x86_cd_vl_x14-73974.iso
Size

589.1MB
MD5

5bf476e2fc445b8d06b3c2a6091fe3aa
SHA1

66ac289ae27724c5ae17139227cbe78c01eefe40
SHA256

fd8c8d42c1581e8767217fe800bfc0d5649c0ad20d754c927d6c763e446d1927
SHA512

6179390d74fea7845ba8b37894f75e1dbb840a5ba7d993e4e4606e51ad222fb814380f90bbb550467b49986ceb8adc58ff0354913906fbe5fda2a8e7d11d5e3f
SSDEEP

12582912:XgIbmCnfnAzYbvNdC2TEyWw/6jGP3GQL7gC9XsQqxk6zqRCpU:XgIb//AAC2TEyxh2+LX76zQCK

Score

3^/10

Malware Config

Signatures

Unsigned PE 277 IoCs

Checks for missing Authenticode signature.

resource
unpack002/DOTNETFX/ACCMGR.DLL
unpack002/DOTNETFX/CDMGR.DLL
unpack002/DOTNETFX/CMNRES.DLL
unpack002/DOTNETFX/DEFHELP.DLL
unpack002/DOTNETFX/DELTEMP.EXE
unpack002/DOTNETFX/DEPMGR.DLL
unpack002/DOTNETFX/DFCHGFLD.DLL
unpack002/DOTNETFX/DFDEPUI.DLL
unpack002/DOTNETFX/DFFACT.DLL
unpack002/DOTNETFX/DISKMGR.DLL
unpack002/DOTNETFX/GENCOMP.DLL
unpack002/DOTNETFX/HTMLLITE.DLL
unpack002/DOTNETFX/MSVCP70.DLL
unpack002/DOTNETFX/MSVCR70.DLL
unpack002/DOTNETFX/REBOOTST.EXE
unpack002/DOTNETFX/SETLOG.DLL
unpack002/DOTNETFX/SETUPDB.DLL
unpack002/DOTNETFX/SITSETUP.DLL
unpack002/DOTNETFX/SUITE.DLL
unpack002/DOTNETFX/SVRGRMGR.DLL
unpack002/DOTNETFX/TEMPLMGR.DLL
unpack002/DOTNETFX/UIMGR.DLL
unpack002/DOTNETFX/VALIDATE.DLL
unpack002/DOTNETFX/XPSPREQS.DLL
unpack002/DOTNETFX/XPSPSCEN.DLL
unpack002/DOTNETFX/XPSPUI.DLL
unpack006/1394bus.sys
unpack008/1394vdbg.sys
unpack002/I386/ASMS/1000/MSFT/WINDOWS/GDIPLUS/GDIPLUS.DLL
unpack002/I386/ASMS/6000/MSFT/VCRTL/ATL.DLL
unpack002/I386/ASMS/6000/MSFT/VCRTL/MFC42.DLL
unpack002/I386/ASMS/6000/MSFT/VCRTL/MFC42U.DLL
unpack002/I386/ASMS/6000/MSFT/VCRTL/MSVCP60.DLL
unpack002/I386/ASMS/6000/MSFT/WINDOWS/COMMON/CONTROLS/COMCTL32.DLL
unpack002/I386/ASMS/7000/MSFT/WINDOWS/MSWINCRT/MSVCIRT.DLL
unpack002/I386/ASMS/7000/MSFT/WINDOWS/MSWINCRT/MSVCRT.DLL
unpack002/I386/AUTOCHK.EXE
unpack002/I386/AUTOFMT.EXE
unpack002/I386/CABINET.DLL
unpack002/I386/DBGENG.DLL
unpack002/I386/DBGHELP.DLL
unpack002/I386/DRW/FAULTH.DLL
unpack002/I386/EXPAND.EXE
unpack002/I386/EXTS.DLL
unpack002/I386/FAXPATCH.EXE
unpack002/I386/HWDB.DLL
unpack002/I386/IMAGEHLP.DLL
unpack002/I386/KBDA1.DLL
unpack002/I386/KBDA2.DLL
unpack002/I386/KBDA3.DLL
unpack002/I386/KBDAL.DLL
unpack002/I386/KBDARME.DLL
unpack002/I386/KBDARMW.DLL
unpack002/I386/KBDAZE.DLL
unpack002/I386/KBDAZEL.DLL
unpack002/I386/KBDBE.DLL
unpack002/I386/KBDBLR.DLL
unpack002/I386/KBDBR.DLL
unpack002/I386/KBDBU.DLL
unpack002/I386/KBDCA.DLL
unpack002/I386/KBDCR.DLL
unpack002/I386/KBDCZ.DLL
unpack002/I386/KBDCZ1.DLL
unpack002/I386/KBDCZ2.DLL
unpack002/I386/KBDDA.DLL
unpack002/I386/KBDDIV1.DLL
unpack002/I386/KBDDIV2.DLL
unpack002/I386/KBDDV.DLL
unpack002/I386/KBDES.DLL
unpack002/I386/KBDEST.DLL
unpack002/I386/KBDFA.DLL
unpack002/I386/KBDFC.DLL
unpack002/I386/KBDFI.DLL
unpack002/I386/KBDFR.DLL
unpack002/I386/KBDGAE.DLL
unpack002/I386/KBDGEO.DLL
unpack002/I386/KBDGKL.DLL
unpack002/I386/KBDGR.DLL
unpack002/I386/KBDGR1.DLL
unpack002/I386/KBDHE.DLL
unpack002/I386/KBDHE220.DLL
unpack002/I386/KBDHE319.DLL
unpack002/I386/KBDHEB.DLL
unpack002/I386/KBDHELA2.DLL
unpack002/I386/KBDHELA3.DLL
unpack002/I386/KBDHEPT.DLL
unpack002/I386/KBDHU.DLL
unpack002/I386/KBDHU1.DLL
unpack002/I386/KBDIC.DLL
unpack002/I386/KBDINDEV.DLL
unpack002/I386/KBDINGUJ.DLL
unpack002/I386/KBDINHIN.DLL
unpack002/I386/KBDINKAN.DLL
unpack002/I386/KBDINMAR.DLL
unpack002/I386/KBDINPUN.DLL
unpack002/I386/KBDINTAM.DLL
unpack002/I386/KBDINTEL.DLL
unpack002/I386/KBDIR.DLL
unpack002/I386/KBDIT.DLL
unpack002/I386/KBDIT142.DLL
unpack002/I386/KBDKAZ.DLL
unpack002/I386/KBDKYR.DLL
unpack002/I386/KBDLA.DLL
unpack002/I386/KBDLT.DLL
unpack002/I386/KBDLT1.DLL
unpack002/I386/KBDLV.DLL
unpack002/I386/KBDLV1.DLL
unpack002/I386/KBDMON.DLL
unpack002/I386/KBDNE.DLL
unpack002/I386/KBDNEC.DLL
unpack002/I386/KBDNO.DLL
unpack002/I386/KBDPL.DLL
unpack002/I386/KBDPL1.DLL
unpack002/I386/KBDPO.DLL
unpack002/I386/KBDRO.DLL
unpack002/I386/KBDRU.DLL
unpack002/I386/KBDRU1.DLL
unpack002/I386/KBDSF.DLL
unpack002/I386/KBDSG.DLL
unpack002/I386/KBDSL.DLL
unpack002/I386/KBDSL1.DLL
unpack002/I386/KBDSP.DLL
unpack002/I386/KBDSW.DLL
unpack002/I386/KBDSYR1.DLL
unpack002/I386/KBDSYR2.DLL
unpack002/I386/KBDTAT.DLL
unpack002/I386/KBDTH0.DLL
unpack002/I386/KBDTH1.DLL
unpack002/I386/KBDTH2.DLL
unpack002/I386/KBDTH3.DLL
unpack002/I386/KBDTUF.DLL
unpack002/I386/KBDTUQ.DLL
unpack002/I386/KBDUK.DLL
unpack002/I386/KBDUR.DLL
unpack002/I386/KBDURDU.DLL
unpack002/I386/KBDUS.DLL
unpack002/I386/KBDUSL.DLL
unpack002/I386/KBDUSR.DLL
unpack002/I386/KBDUSX.DLL
unpack002/I386/KBDUZB.DLL
unpack002/I386/KBDVNTC.DLL
unpack002/I386/KBDYCC.DLL
unpack002/I386/KBDYCL.DLL
unpack002/I386/KSECDD.SYS
unpack002/I386/LHMSTSC.MUI
unpack002/I386/NETSETUP.EXE
unpack002/I386/NTDLL.DLL
unpack002/I386/NTFS.SYS
unpack002/I386/NTSD.EXE
unpack002/I386/NTSDEXTS.DLL
unpack002/I386/PIDGEN.DLL
unpack002/I386/REGEDIT.EXE
unpack002/I386/SPCMDCON.SYS
unpack002/I386/SPNPINST.EXE
unpack002/I386/SYSPARSE.EXE
unpack002/I386/SYSTEM32/NTDLL.DLL
unpack002/I386/SYSTEM32/SMSS.EXE
unpack002/I386/TELNET.EXE
unpack002/I386/TSCUPDC.DLL
unpack002/I386/USETUP.EXE
unpack002/I386/WIN9XMIG/ACROBAT/FILES/FILE1
unpack002/I386/WIN9XMIG/ACROBAT/FILES/FILE10
unpack002/I386/WIN9XMIG/ACROBAT/FILES/FILE11
unpack002/I386/WIN9XMIG/ACROBAT/FILES/FILE12
unpack002/I386/WIN9XMIG/ACROBAT/FILES/FILE13
unpack002/I386/WIN9XMIG/ACROBAT/FILES/FILE3
unpack002/I386/WIN9XMIG/ACROBAT/FILES/FILE5
unpack002/I386/WIN9XMIG/ACROBAT/FILES/FILE6
unpack002/I386/WIN9XMIG/ACROBAT/FILES/FILE7
unpack002/I386/WIN9XMIG/ACROBAT/FILES/FILE8
unpack002/I386/WIN9XMIG/ACROBAT/FILES/FILE9
unpack002/I386/WIN9XMIG/ACROBAT/MIGRATE.DLL
unpack002/I386/WIN9XMIG/CMMGR/MIGRATE.DLL
unpack002/I386/WIN9XMIG/DEVUPGRD/MIGRATE.DLL
unpack002/I386/WIN9XMIG/DMICALL/DMICALL.SYS
unpack002/I386/WIN9XMIG/DMICALL/MIGRATE.DLL
unpack002/I386/WIN9XMIG/DVD/MIGRATE.DLL
unpack002/I386/WIN9XMIG/EASTMAN/MIGRATE.DLL
unpack002/I386/WIN9XMIG/FAX/AWDVSTUB.EXE
unpack002/I386/WIN9XMIG/FAX/MIGRATE.DLL
unpack002/I386/WIN9XMIG/HPTOOLS/MIGRATE.DLL
unpack002/I386/WIN9XMIG/IBMAV/MIGRATE.DLL
unpack002/I386/WIN9XMIG/ICM/MIGRATE.DLL
unpack002/I386/WIN9XMIG/IEMIG/MIGRATE.DLL
unpack002/I386/WIN9XMIG/MAPI/DLL/MIGRATE.DLL
unpack002/I386/WIN9XMIG/MAPI/DLL/MKNTFRMCACHE.EXE
unpack002/I386/WIN9XMIG/MAPI/DLL/MSPATCHA.DLL
unpack002/I386/WIN9XMIG/MODEMS/MIGRATE.DLL
unpack002/I386/WIN9XMIG/MSGQUEUE/MIGRATE.DLL
unpack002/I386/WIN9XMIG/MSI/MIGRATE.DLL
unpack002/I386/WIN9XMIG/MSI/MSI9XMIG.DLL
unpack002/I386/WIN9XMIG/MSI/MSINTMIG.DLL
unpack002/I386/WIN9XMIG/MSP/MIGRATE.DLL
unpack002/I386/WIN9XMIG/NECKBD/MIGRATE.DLL
unpack002/I386/WIN9XMIG/NECPA/MIGRATE.DLL
unpack002/I386/WIN9XMIG/NECWPS/MIGRATE.DLL
unpack002/I386/WIN9XMIG/OCTOPUS/MIGRATE.DLL
unpack002/I386/WIN9XMIG/OEWAB/MIGRATE.DLL
unpack002/I386/WIN9XMIG/PRINT/MIGRATE.DLL
unpack002/I386/WIN9XMIG/PWS/MIGRATE.DLL
unpack002/I386/WIN9XMIG/RUMBA/MIGRATE.DLL
unpack002/I386/WIN9XMIG/SETUP/MIGRATE.DLL
unpack002/I386/WIN9XMIG/TRANSACT/MIGRATE.DLL
unpack002/I386/WIN9XMIG/WIA/MIGRATE.DLL
unpack002/I386/WIN9XMIG/WMP/MIGRATE.DLL
unpack002/I386/WIN9XUPG/CABINET.DLL
unpack002/I386/WIN9XUPG/CFGMGR32.DLL
unpack002/I386/WIN9XUPG/IMAGEHLP.DLL
unpack002/I386/WIN9XUPG/ISMIG.DLL
unpack002/I386/WIN9XUPG/MSVCRT.DLL
unpack002/I386/WIN9XUPG/SETUPAPI.DLL
unpack002/I386/WIN9XUPG/W95UPG.DLL
unpack002/I386/WINNT32.EXE
unpack002/I386/WINNT32A.DLL
unpack002/I386/WINNT32U.DLL
unpack002/I386/WINNTBBA.DLL
unpack002/I386/WINNTBBU.DLL
unpack002/I386/WINNTUPG/APMUPGRD.DLL
unpack002/I386/WINNTUPG/BOSCOMP.DLL
unpack002/I386/WINNTUPG/CFGMGR32.DLL
unpack002/I386/WINNTUPG/CLUSCOMP.DLL
unpack002/I386/WINNTUPG/FSFILTER.DLL
unpack002/I386/WINNTUPG/FTCOMP.DLL
unpack002/I386/WINNTUPG/INPUPGRD.DLL
unpack002/I386/WINNTUPG/MS/MODEMSHR/MDMSHRUP.DLL
unpack002/I386/WINNTUPG/MS/SNA/IBMMGUG.DLL
unpack002/I386/WINNTUPG/MS/SNA/NTSNAUPG.DLL
unpack002/I386/WINNTUPG/MS/SNA/SNADLCUG.DLL
unpack002/I386/WINNTUPG/MSMQCOMP.DLL
unpack002/I386/WINNTUPG/NETUPGRD.DLL
unpack002/I386/WINNTUPG/NTDSUPG.DLL
unpack002/I386/WINNTUPG/NV4PREP.DLL
unpack002/I386/WINNTUPG/OEM/DIGI/ASYNC/DGUPGRD.DLL
unpack002/I386/WINNTUPG/OEM/DIGI/ISDN/BRI/DIGIUPG.DLL
unpack002/I386/WINNTUPG/OEM/DIGI/ISDN/PRI/DIGPRIUP.DLL
unpack002/I386/WINNTUPG/OEM/DIGI/REALPORT/DGRPUPG.DLL
unpack002/I386/WINNTUPG/OEM/EQN/EQNUPGRD.DLL
unpack002/I386/WINNTUPG/OEM/SPX/MPS/SPXUPGRD.DLL
unpack002/I386/WINNTUPG/OEM/TIGERJET/TJUPG.DLL
unpack002/I386/WINNTUPG/SETUPAPI.DLL
unpack002/I386/WINNTUPG/TSCOMP.DLL
unpack002/I386/WINNTUPG/VIDUPGRD.DLL
unpack002/I386/WSDU.DLL
unpack002/I386/WSDUENG.DLL
unpack002/SETUP.EXE
unpack002/SUPPORT/TOOLS/ACT20.EXE
unpack002/SUPPORT/TOOLS/FASTWIZ.EXE
unpack002/SUPPORT/TOOLS/GBUNICNV.EXE
unpack002/SUPPORT/TOOLS/MSRDPCLI.EXE
unpack002/SUPPORT/TOOLS/SETUP.EXE
unpack002/VALUEADD/3RDPARTY/MGMT/CITRIX/ICA32.EXE
unpack002/VALUEADD/MSFT/MGMT/IAS/IASNT4.EXE
unpack002/VALUEADD/MSFT/MGMT/PBA/PBAINST.EXE
unpack002/VALUEADD/MSFT/NET/NETBEUI/NBF.SYS
unpack002/VALUEADD/MSFT/NET/TOOLS/TTCP.EXE
unpack002/VALUEADD/MSFT/USMT/ANSI/ICONLIB.DLL
unpack002/VALUEADD/MSFT/USMT/ANSI/LOG.DLL
unpack002/VALUEADD/MSFT/USMT/ANSI/MIGISM.DLL
unpack002/VALUEADD/MSFT/USMT/ANSI/SCANSTATE.EXE
unpack002/VALUEADD/MSFT/USMT/ANSI/SCRIPT.DLL
unpack002/VALUEADD/MSFT/USMT/ANSI/SHFOLDER.DLL
unpack002/VALUEADD/MSFT/USMT/ANSI/SYSMOD.DLL
unpack002/VALUEADD/MSFT/USMT/ANSI/UNCTRN.DLL
unpack002/VALUEADD/MSFT/USMT/ICONLIB.DLL
unpack002/VALUEADD/MSFT/USMT/LOADSTATE.EXE
unpack002/VALUEADD/MSFT/USMT/LOG.DLL
unpack002/VALUEADD/MSFT/USMT/MIGISM.DLL
unpack002/VALUEADD/MSFT/USMT/MIGISM_A.DLL
unpack002/VALUEADD/MSFT/USMT/SCANSTATE.EXE
unpack002/VALUEADD/MSFT/USMT/SCANSTATE_A.EXE
unpack002/VALUEADD/MSFT/USMT/SCRIPT.DLL
unpack002/VALUEADD/MSFT/USMT/SCRIPT_A.DLL
unpack002/VALUEADD/MSFT/USMT/SHFOLDER.DLL
unpack002/VALUEADD/MSFT/USMT/SYSMOD.DLL
unpack002/VALUEADD/MSFT/USMT/SYSMOD_A.DLL
unpack002/VALUEADD/MSFT/USMT/UNCTRN.DLL
unpack002/VALUEADD/MSFT/USMT/UNCTRN_A.DLL

Files

en_windows_xp_professional_with_service_pack_3_x86_cd_vl_x14-73974.iso
.iso
out.iso
.iso
AUTORUN.INF
DOCS/WINXP_LOGO_HORIZ_SM.GIF
.gif
DOTNETFX/ACCMGR.DLL
.dll windows:4 windows x86 arch:x86

db4aa5da2f65f369c15faa7963f07a30

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

AccMgr.pdb

Imports

kernel32

InterlockedDecrement
lstrcpynA
IsDBCSLeadByte
GetModuleFileNameA
FreeLibrary
SizeofResource
LoadResource
FindResourceA
LoadLibraryExA
GetProcAddress
LoadLibraryA
CloseHandle
CreateFileA
GetSystemDirectoryA
GetComputerNameA
GetVersionExW
LoadLibraryW
HeapFree
GetCurrentThread
HeapAlloc
GetProcessHeap
SetLastError
WriteFile
GetStdHandle
InterlockedIncrement
SetStdHandle
FlushFileBuffers
SetFilePointer
IsBadCodePtr
IsBadReadPtr
VirtualQuery
GetSystemInfo
VirtualProtect
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
GetCPInfo
GetOEMCP
HeapSize
IsBadWritePtr
VirtualAlloc
SetUnhandledExceptionFilter
GetCurrentProcessId
lstrcmpiA
DisableThreadLibraryCalls
lstrlenA
GetLastError
DeleteCriticalSection
InitializeCriticalSection
LeaveCriticalSection
EnterCriticalSection
lstrlenW
WideCharToMultiByte
MultiByteToWideChar
GetVersionExA
GetThreadLocale
GetLocaleInfoA
GetACP
InterlockedExchange
GetTickCount
QueryPerformanceCounter
VirtualFree
HeapCreate
HeapDestroy
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetStartupInfoA
GetFileType
SetHandleCount
TlsAlloc
TlsGetValue
TlsFree
GetCurrentProcess
TerminateProcess
GetCurrentThreadId
TlsSetValue
GetCommandLineA
ExitProcess
RaiseException
RtlUnwind
HeapReAlloc
GetSystemTimeAsFileTime
GetModuleHandleA

user32

CharNextA
LoadStringA
RegisterWindowMessageW
RegisterWindowMessageA

oleaut32

SysFreeString
VarUI4FromStr
SysAllocStringLen
LoadRegTypeLi
LoadTypeLi
SysStringLen
SetErrorInfo
CreateErrorInfo
SysAllocString

advapi32

RegOpenKeyA
RegQueryValueExA
RegEnumKeyExA
RegQueryInfoKeyA
RegSetValueExA
RegOpenKeyExA
RegCreateKeyExA
RegCloseKey
RegDeleteValueA
RegDeleteKeyA

ole32

CoTaskMemRealloc
CoTaskMemFree
StringFromCLSID
CoCreateInstance
CoTaskMemAlloc

version

GetFileVersionInfoSizeA
GetFileVersionInfoA
VerQueryValueA

Exports

Exports

DllCanUnloadNow
DllGetClassObject
GetClassID

Sections

.text
Size: 108KB - Virtual size: 107KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
DOTNETFX/BASELINE.DAT
DOTNETFX/CDMGR.DLL
.dll windows:4 windows x86 arch:x86

a89b915fa513f5259e87cc23d16ed4c9

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

CDMgr.pdb

Imports

kernel32

lstrcmpiA
InterlockedIncrement
InterlockedDecrement
DisableThreadLibraryCalls
lstrcpynA
IsDBCSLeadByte
FreeLibrary
SizeofResource
LoadResource
FindResourceA
LoadLibraryExA
GetModuleFileNameA
CloseHandle
WriteFile
GetFileAttributesA
LoadLibraryA
lstrlenA
DeleteCriticalSection
FlushFileBuffers
SetStdHandle
SetFilePointer
VirtualQuery
GetSystemInfo
VirtualProtect
IsBadCodePtr
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
GetCPInfo
GetOEMCP
HeapSize
IsBadWritePtr
VirtualAlloc
SetUnhandledExceptionFilter
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
VirtualFree
HeapCreate
GetLastError
InitializeCriticalSection
InterlockedExchange
LeaveCriticalSection
EnterCriticalSection
lstrlenW
WideCharToMultiByte
MultiByteToWideChar
GetVersionExA
GetThreadLocale
GetLocaleInfoA
GetACP
HeapDestroy
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetStartupInfoA
GetFileType
GetStdHandle
SetHandleCount
TlsAlloc
TlsGetValue
SetLastError
TlsFree
GetCurrentThreadId
TlsSetValue
GetCommandLineA
ExitProcess
RaiseException
HeapAlloc
HeapFree
RtlUnwind
HeapReAlloc
IsBadReadPtr
GetSystemTimeAsFileTime
GetProcAddress
GetModuleHandleA
TerminateProcess
GetCurrentProcess

user32

LoadStringA
CharPrevA
CharLowerA
CharNextA
RegisterWindowMessageA

oleaut32

SysFreeString
VarUI4FromStr
SysAllocStringLen
LoadRegTypeLi
LoadTypeLi
SysStringLen
SetErrorInfo
CreateErrorInfo
VariantInit
VariantClear
VariantCopy
SafeArrayDestroy
SysAllocString
SafeArrayGetDim
SafeArrayGetLBound
SafeArrayGetUBound
SafeArrayGetElement

advapi32

RegDeleteValueA
RegEnumKeyExA
RegQueryInfoKeyA
RegSetValueExA
RegOpenKeyExA
RegCreateKeyExA
RegCloseKey
RegDeleteKeyA

ole32

CLSIDFromString
StringFromCLSID
CoCreateInstance
CoTaskMemRealloc
CoTaskMemFree
CoTaskMemAlloc

Exports

Exports

DllCanUnloadNow
DllGetClassObject
GetClassID

Sections

.text
Size: 108KB - Virtual size: 105KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
DOTNETFX/CMNRES.DLL
.dll windows:4 windows x86 arch:x86

919b6f3405c36f1a9c0ab39dee1803da

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

CmnRes.pdb

Imports

kernel32

GetCurrentThreadId
TlsSetValue
GetCommandLineA
GetVersionExA
ExitProcess
GetProcAddress
GetModuleHandleA
TerminateProcess
GetCurrentProcess
TlsFree
SetLastError
TlsGetValue
GetLastError
TlsAlloc
HeapFree
HeapAlloc
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
DeleteCriticalSection
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
HeapDestroy
HeapCreate
VirtualFree
WriteFile
LeaveCriticalSection
EnterCriticalSection
GetACP
GetOEMCP
GetCPInfo
VirtualAlloc
HeapReAlloc
InitializeCriticalSection
LoadLibraryA
HeapSize
GetLocaleInfoA
GetStringTypeA
MultiByteToWideChar
GetStringTypeW
RtlUnwind
LCMapStringA
LCMapStringW
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
VirtualProtect
GetSystemInfo
VirtualQuery

Sections

.text
Size: 24KB - Virtual size: 23KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
DOTNETFX/DEFHELP.DLL
.dll windows:4 windows x86 arch:x86

2b337d006adbf5230635c3ae54830cb9

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

DefHelp.pdb

Imports

kernel32

lstrcmpiA
InterlockedIncrement
InterlockedDecrement
DisableThreadLibraryCalls
lstrcpynA
IsDBCSLeadByte
FreeLibrary
SizeofResource
LoadResource
FindResourceA
LoadLibraryExA
GetModuleFileNameA
CloseHandle
WriteFile
LoadLibraryA
lstrlenA
FlushFileBuffers
SetStdHandle
SetFilePointer
VirtualQuery
GetSystemInfo
VirtualProtect
IsBadCodePtr
IsBadReadPtr
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
GetCPInfo
GetOEMCP
HeapSize
IsBadWritePtr
VirtualAlloc
SetUnhandledExceptionFilter
GetCurrentProcessId
DeleteCriticalSection
GetLastError
InitializeCriticalSection
LeaveCriticalSection
EnterCriticalSection
InterlockedExchange
lstrlenW
WideCharToMultiByte
MultiByteToWideChar
GetVersionExA
GetThreadLocale
GetLocaleInfoA
GetACP
GetTickCount
QueryPerformanceCounter
VirtualFree
HeapCreate
HeapDestroy
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetStartupInfoA
GetFileType
GetStdHandle
SetHandleCount
TlsAlloc
GetProcAddress
GetCurrentThreadId
TlsSetValue
GetCommandLineA
ExitProcess
RaiseException
HeapAlloc
HeapFree
RtlUnwind
HeapReAlloc
GetSystemTimeAsFileTime
GetModuleHandleA
TerminateProcess
GetCurrentProcess
TlsFree
SetLastError
TlsGetValue

user32

LoadStringA
WinHelpA
CharNextA

oleaut32

SysFreeString
VarUI4FromStr
SysAllocStringLen
LoadRegTypeLi
LoadTypeLi
SysStringLen
SetErrorInfo
CreateErrorInfo
SysAllocString

advapi32

RegCreateKeyExA
RegQueryValueExA
RegEnumKeyExA
RegQueryInfoKeyA
RegSetValueExA
RegOpenKeyExA
RegCloseKey
RegDeleteValueA
RegDeleteKeyA

ole32

CoTaskMemFree
CoCreateInstance
CoTaskMemRealloc
StringFromCLSID
CoTaskMemAlloc

shell32

ShellExecuteA

Exports

Exports

DllCanUnloadNow
DllGetClassObject
GetClassID

Sections

.text
Size: 92KB - Virtual size: 91KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 12KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
DOTNETFX/DELTEMP.EXE
.exe windows:4 windows x86 arch:x86

450c3d7ac3c6d0610a09167108d198ff

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

DelTemp.pdb

Imports

kernel32

SetThreadPriority
CreateProcessA
CloseHandle
WriteFile
lstrlenA
CreateFileA
GetModuleFileNameA
Sleep
DeleteFileA
SetFileAttributesA
RemoveDirectoryA
FindClose
FindNextFileA
GetCurrentThread
FindFirstFileA
GetPrivateProfileSectionA
WaitForSingleObject
OpenProcess
ReleaseSemaphore
OpenSemaphoreA
SetCurrentDirectoryA
GetTempPathA
GetCurrentProcess
SetPriorityClass
GetFileAttributesA
ResumeThread
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersionExA
ExitProcess
GetLastError
GetProcAddress
TerminateProcess
GetStdHandle
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetFileType
DeleteCriticalSection
TlsFree
SetLastError
GetCurrentThreadId
TlsSetValue
TlsGetValue
TlsAlloc
HeapDestroy
HeapCreate
VirtualFree
HeapFree
GetACP
GetOEMCP
GetCPInfo
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
LeaveCriticalSection
EnterCriticalSection
LoadLibraryA
HeapAlloc
InitializeCriticalSection
VirtualAlloc
HeapReAlloc
LCMapStringA
MultiByteToWideChar
LCMapStringW
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
RtlUnwind
HeapSize
VirtualProtect
GetSystemInfo
VirtualQuery

user32

CharNextA
wsprintfA
GetSystemMetrics

advapi32

RegQueryValueExA
RegCloseKey
RegOpenKeyExA

Sections

.text
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DOTNETFX/DEPMGR.DLL
.dll windows:4 windows x86 arch:x86

6cfb1d550bc05efafcba74d78d53024e

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

DepMgr.pdb

Imports

kernel32

lstrcmpiA
DisableThreadLibraryCalls
InterlockedIncrement
InterlockedDecrement
lstrcpynA
IsDBCSLeadByte
GetModuleFileNameA
FreeLibrary
SizeofResource
LoadResource
FindResourceA
LoadLibraryExA
CloseHandle
WriteFile
LoadLibraryA
lstrlenA
FlushFileBuffers
SetStdHandle
SetFilePointer
VirtualQuery
GetSystemInfo
VirtualProtect
IsBadCodePtr
GetStringTypeW
GetStringTypeA
GetCPInfo
GetOEMCP
LCMapStringW
LCMapStringA
HeapSize
IsBadWritePtr
VirtualAlloc
SetUnhandledExceptionFilter
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
VirtualFree
DeleteCriticalSection
GetLastError
InitializeCriticalSection
LeaveCriticalSection
InterlockedExchange
EnterCriticalSection
lstrlenW
WideCharToMultiByte
MultiByteToWideChar
GetVersionExA
GetThreadLocale
GetLocaleInfoA
GetACP
HeapCreate
HeapDestroy
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetStartupInfoA
GetFileType
GetStdHandle
SetHandleCount
TlsAlloc
TlsGetValue
SetLastError
GetCurrentThreadId
TlsSetValue
GetCommandLineA
ExitProcess
RaiseException
HeapAlloc
HeapFree
RtlUnwind
HeapReAlloc
IsBadReadPtr
GetSystemTimeAsFileTime
GetProcAddress
GetModuleHandleA
TerminateProcess
GetCurrentProcess
TlsFree

user32

LoadStringA
CharNextA
RegisterWindowMessageA

oleaut32

SysFreeString
VarUI4FromStr
SysAllocStringLen
LoadRegTypeLi
LoadTypeLi
SysStringLen
SetErrorInfo
CreateErrorInfo
VariantInit
VariantClear
VariantCopy
SysAllocString
SafeArrayGetDim
SafeArrayGetLBound
SafeArrayGetUBound
SafeArrayGetElement
SafeArrayDestroy
SafeArrayCreate
SafeArrayPutElement

advapi32

RegCloseKey
RegEnumKeyExA
RegQueryInfoKeyA
RegSetValueExA
RegOpenKeyExA
RegCreateKeyExA
RegDeleteValueA
RegDeleteKeyA

ole32

CLSIDFromString
StringFromCLSID
CoCreateInstance
CoTaskMemRealloc
CoTaskMemFree
CoTaskMemAlloc

Exports

Exports

DllCanUnloadNow
DllGetClassObject
GetClassID

Sections

.text
Size: 152KB - Virtual size: 148KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
DOTNETFX/DFCHGFLD.DLL
.dll windows:4 windows x86 arch:x86

bbeefc4173eb19763f8174066d2dc67f

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

DfChgFld.pdb

Imports

kernel32

lstrlenW
WideCharToMultiByte
InitializeCriticalSection
DeleteCriticalSection
GetLastError
lstrcmpiA
DisableThreadLibraryCalls
InterlockedIncrement
InterlockedDecrement
lstrcpynA
IsDBCSLeadByte
FreeLibrary
SizeofResource
LoadResource
FindResourceA
LoadLibraryExA
CloseHandle
CreateFileA
FindClose
FindNextFileA
FindFirstFileA
RemoveDirectoryA
CreateDirectoryA
GetFileAttributesA
GetVolumeInformationA
SetErrorMode
WriteFile
LoadLibraryA
GetModuleFileNameA
SetStdHandle
SetFilePointer
VirtualQuery
GetSystemInfo
VirtualProtect
IsBadCodePtr
IsBadReadPtr
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
HeapSize
IsBadWritePtr
VirtualAlloc
SetUnhandledExceptionFilter
SetHandleCount
TlsAlloc
TlsGetValue
SetLastError
TlsFree
TerminateProcess
GetModuleHandleA
GetProcAddress
GetSystemTimeAsFileTime
HeapReAlloc
RtlUnwind
RaiseException
ExitProcess
GetCommandLineA
TlsSetValue
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
MultiByteToWideChar
lstrlenA
GetCurrentThreadId
HeapAlloc
GetProcessHeap
HeapFree
GetCurrentProcess
FlushInstructionCache
LeaveCriticalSection
EnterCriticalSection
GetVersionExA
GetThreadLocale
GetLocaleInfoA
GetACP
FlushFileBuffers
InterlockedExchange
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
GetCPInfo
GetOEMCP
VirtualFree
HeapCreate
GetEnvironmentStringsW
HeapDestroy
GetStdHandle

user32

SetWindowLongA
DialogBoxParamA
LoadStringA
GetActiveWindow
RegisterWindowMessageA
CharNextA
GetWindowLongA
SendMessageA
SetWindowTextA
GetWindowTextA
GetDlgItemTextA
CharPrevA
LoadCursorA
SetCursor
EnableWindow
CallWindowProcA
DefWindowProcA
EndDialog
GetWindow
GetWindowRect
SystemParametersInfoA
GetClientRect
MapWindowPoints
SetWindowPos
GetDlgItem
GetParent
SetDlgItemTextA
UnregisterClassA

oleaut32

GetErrorInfo
SysAllocString
VarUI4FromStr
CreateErrorInfo
SetErrorInfo
SysStringLen
LoadTypeLi
LoadRegTypeLi
SysAllocStringLen
SysFreeString
VariantInit

advapi32

RegQueryInfoKeyA
RegQueryValueExA
RegEnumKeyExA
RegDeleteKeyA
RegSetValueExA
RegOpenKeyExA
RegCreateKeyExA
RegCloseKey
RegDeleteValueA

comctl32

ImageList_LoadImageA

ole32

CoCreateInstance
CoTaskMemRealloc
CoTaskMemFree
StringFromCLSID
CoTaskMemAlloc

mpr

WNetGetUniversalNameA

Exports

Exports

DllCanUnloadNow
DllGetClassObject
GetClassID

Sections

.text
Size: 124KB - Virtual size: 120KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
DOTNETFX/DFDEPUI.DLL
.dll windows:4 windows x86 arch:x86

86291ca6ceab90fbc84bf3bf29b4a757

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

DfDepUI.pdb

Imports

kernel32

GetCurrentProcess
HeapFree
GetProcessHeap
HeapAlloc
GetCurrentThreadId
CloseHandle
WriteFile
GlobalFree
GlobalUnlock
GlobalLock
GlobalAlloc
LoadLibraryA
GetProcAddress
GetComputerNameA
MulDiv
FlushFileBuffers
SetStdHandle
SetFilePointer
FlushInstructionCache
VirtualQuery
GetSystemInfo
VirtualProtect
IsBadCodePtr
IsBadReadPtr
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
GetCPInfo
GetOEMCP
HeapSize
IsBadWritePtr
VirtualAlloc
SetUnhandledExceptionFilter
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
VirtualFree
TerminateProcess
GetModuleHandleA
GetSystemTimeAsFileTime
HeapReAlloc
RtlUnwind
RaiseException
ExitProcess
GetCommandLineA
TlsSetValue
SetLastError
TlsGetValue
TlsAlloc
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
LoadLibraryExA
FindResourceA
LoadResource
SizeofResource
FreeLibrary
GetModuleFileNameA
IsDBCSLeadByte
lstrcpynA
InterlockedDecrement
InterlockedIncrement
DisableThreadLibraryCalls
lstrlenA
lstrcmpiA
GetLastError
DeleteCriticalSection
InitializeCriticalSection
LeaveCriticalSection
EnterCriticalSection
lstrlenW
WideCharToMultiByte
MultiByteToWideChar
GetVersionExA
GetThreadLocale
GetLocaleInfoA
GetACP
InterlockedExchange
HeapCreate
HeapDestroy
GetEnvironmentStringsW
TlsFree

user32

CharNextA
LoadStringA
RegisterWindowMessageA
SetWindowLongA
DialogBoxParamA
GetActiveWindow
EndDialog
EnableWindow
ShowWindow
SetFocus
SendMessageA
GetFocus
GetParent
InvalidateRect
UpdateWindow
GetSystemMetrics
GetDesktopWindow
GetDC
ReleaseDC
GetSysColor
FillRect
DrawTextA
CallWindowProcA
GetWindowLongA
DefWindowProcA
OffsetRect
GetScrollPos
GetWindowTextA
SetWindowTextA
LoadImageA
GetDlgItem
UnregisterClassA

oleaut32

SafeArrayGetDim
SafeArrayGetLBound
SafeArrayGetUBound
SafeArrayGetElement
SafeArrayDestroy
SafeArrayCreate
SafeArrayPutElement
SysAllocString
VariantInit
CreateErrorInfo
SetErrorInfo
SysStringLen
LoadTypeLi
LoadRegTypeLi
SysAllocStringLen
VarUI4FromStr
SysFreeString

gdi32

CreateFontIndirectA
DeleteObject
SetBkMode
Polyline
CreateBrushIndirect
GetDeviceCaps
CreatePen
SetTextColor
SelectObject
MoveToEx
LineTo
CreateSolidBrush

advapi32

RegQueryInfoKeyA
RegEnumKeyExA
RegDeleteKeyA
RegSetValueExA
RegOpenKeyExA
RegCreateKeyExA
RegCloseKey
RegDeleteValueA

comctl32

ImageList_Create

ole32

CoCreateInstance
CoTaskMemRealloc
CoTaskMemFree
CLSIDFromString
StringFromCLSID
CoTaskMemAlloc

Exports

Exports

DllCanUnloadNow
DllGetClassObject
GetClassID

Sections

.text
Size: 188KB - Virtual size: 184KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 16KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
DOTNETFX/DFFACT.DAT
DOTNETFX/DFFACT.DLL
.dll windows:4 windows x86 arch:x86

ba0da0de14cb7c44a8f52940fd7dbe3c

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

DfFact.pdb

Imports

kernel32

lstrcmpiA
DisableThreadLibraryCalls
InterlockedIncrement
InterlockedDecrement
lstrcpynA
IsDBCSLeadByte
GetModuleFileNameA
FreeLibrary
SizeofResource
LoadResource
FindResourceA
LoadLibraryExA
CloseHandle
WriteFile
LoadLibraryA
lstrlenA
FlushFileBuffers
SetStdHandle
SetFilePointer
VirtualQuery
GetSystemInfo
VirtualProtect
IsBadCodePtr
IsBadReadPtr
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
GetCPInfo
GetOEMCP
HeapSize
IsBadWritePtr
VirtualAlloc
SetUnhandledExceptionFilter
GetCurrentProcessId
DeleteCriticalSection
GetLastError
InitializeCriticalSection
LeaveCriticalSection
EnterCriticalSection
InterlockedExchange
lstrlenW
WideCharToMultiByte
MultiByteToWideChar
GetVersionExA
GetThreadLocale
GetLocaleInfoA
GetACP
GetTickCount
QueryPerformanceCounter
VirtualFree
HeapCreate
HeapDestroy
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetStartupInfoA
GetFileType
GetStdHandle
SetHandleCount
TlsAlloc
GetCurrentThreadId
TlsSetValue
GetCommandLineA
ExitProcess
RaiseException
HeapAlloc
HeapFree
RtlUnwind
HeapReAlloc
GetSystemTimeAsFileTime
GetProcAddress
GetModuleHandleA
TerminateProcess
GetCurrentProcess
TlsFree
SetLastError
TlsGetValue

user32

RegisterWindowMessageA
LoadStringA
CharNextA

oleaut32

SysFreeString
VarUI4FromStr
SysAllocStringLen
LoadRegTypeLi
LoadTypeLi
SysStringLen
SetErrorInfo
CreateErrorInfo
SafeArrayDestroy
SysAllocString
SafeArrayPutElement
SafeArrayGetDim
SafeArrayGetLBound
SafeArrayGetUBound
SafeArrayGetElement
SafeArrayCreate

advapi32

RegCreateKeyExA
RegEnumKeyExA
RegQueryInfoKeyA
RegSetValueExA
RegOpenKeyExA
RegCloseKey
RegDeleteValueA
RegDeleteKeyA

ole32

CLSIDFromString
StringFromCLSID
CoCreateInstance
CoTaskMemRealloc
CoTaskMemFree
CoTaskMemAlloc

Exports

Exports

DllCanUnloadNow
DllGetClassObject
GetClassID

Sections

.text
Size: 100KB - Virtual size: 96KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 12KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
DOTNETFX/DISKMGR.DLL
.dll windows:4 windows x86 arch:x86

8c254de05b242a9a075eaeaca233c562

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

DiskMgr.pdb

Imports

kernel32

lstrcmpiA
InterlockedIncrement
InterlockedDecrement
DisableThreadLibraryCalls
lstrcpynA
IsDBCSLeadByte
FreeLibrary
SizeofResource
LoadResource
FindResourceA
LoadLibraryExA
GetModuleFileNameA
GetLogicalDriveStringsA
GetProcAddress
LoadLibraryA
GetDiskFreeSpaceA
CloseHandle
CreateFileA
GetSystemDirectoryA
DeviceIoControl
GetDriveTypeA
GetVolumeInformationA
WriteFile
lstrlenA
FlushFileBuffers
SetStdHandle
SetFilePointer
VirtualQuery
GetSystemInfo
VirtualProtect
IsBadCodePtr
IsBadReadPtr
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
GetCPInfo
GetOEMCP
HeapSize
IsBadWritePtr
VirtualAlloc
SetUnhandledExceptionFilter
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
VirtualFree
InterlockedExchange
GetLastError
DeleteCriticalSection
InitializeCriticalSection
LeaveCriticalSection
EnterCriticalSection
lstrlenW
WideCharToMultiByte
MultiByteToWideChar
GetVersionExA
GetThreadLocale
GetLocaleInfoA
GetACP
HeapCreate
HeapDestroy
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetStartupInfoA
GetFileType
GetStdHandle
SetHandleCount
TlsAlloc
TlsGetValue
SetLastError
GetCurrentThreadId
TlsSetValue
GetCommandLineA
ExitProcess
RaiseException
HeapAlloc
HeapFree
RtlUnwind
HeapReAlloc
GetSystemTimeAsFileTime
GetModuleHandleA
TerminateProcess
GetCurrentProcess
TlsFree

user32

LoadStringA
CharUpperA
CharNextA
RegisterWindowMessageA

oleaut32

SysFreeString
VarUI4FromStr
SysAllocStringLen
LoadRegTypeLi
LoadTypeLi
SysStringLen
SetErrorInfo
CreateErrorInfo
VariantInit
VariantClear
VariantCopy
SysAllocString

advapi32

RegOpenKeyA
RegQueryValueExA
RegEnumKeyExA
RegQueryInfoKeyA
RegSetValueExA
RegOpenKeyExA
RegCreateKeyExA
RegCloseKey
RegDeleteValueA
RegDeleteKeyA

ole32

StringFromCLSID
CoCreateInstance
CoTaskMemRealloc
CoTaskMemFree
CoTaskMemAlloc

version

GetFileVersionInfoSizeA
GetFileVersionInfoA
VerQueryValueA

Exports

Exports

DllCanUnloadNow
DllGetClassObject
GetClassID

Sections

.text
Size: 108KB - Virtual size: 104KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
DOTNETFX/DOTNETFX.EXE
.exe windows:5 windows x86 arch:x86

5b5affe5cc3d8e2098fc60270b23e0a6

Code Sign

4a:19:d2:38:8c:82:59:1c:a5:5d:73:5f:15:5d:dc:a3
Certificate

Issuer

OU=VeriSign\, Inc.+OU=VeriSign Time Stamping Service Root+OU=NO LIABILITY ACCEPTED\, (c)97 VeriSign\, Inc.,O=VeriSign Trust Network

Not Before

12/05/1997, 00:00

Not After

07/01/2004, 23:59

Subject

OU=VeriSign\, Inc.+OU=VeriSign Time Stamping Service Root+OU=NO LIABILITY ACCEPTED\, (c)97 VeriSign\, Inc.,O=VeriSign Trust Network

08:7a:6d:5c:6f:62:93:4f:ba:c4:fd:43:e1:14:18:9d
Certificate

Issuer

OU=VeriSign\, Inc.+OU=VeriSign Time Stamping Service Root+OU=NO LIABILITY ACCEPTED\, (c)97 VeriSign\, Inc.,O=VeriSign Trust Network

Not Before

28/02/2001, 00:00

Not After

06/01/2004, 23:59

Subject

CN=VeriSign Time Stamping Service,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)01,O=VeriSign\, Inc.

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

c1:00:8b:3c:3c:88:11:d1:3e:f6:63:ec:df:40
Certificate

Issuer

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

Not Before

10/01/1997, 07:00

Not After

31/12/2020, 07:00

Subject

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

6a:0b:99:4f:c0:00:de:aa:11:d4:d8:40:9a:a8:be:e6
Certificate

Issuer

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

Not Before

10/12/2000, 08:00

Not After

12/11/2005, 08:00

Subject

CN=Microsoft Code Signing PCA,OU=Copyright (c) 2000 Microsoft Corp.,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageContentCommitment
KeyUsageCertSign
KeyUsageCRLSign

61:07:11:43:00:00:00:00:00:34
Certificate

Issuer

CN=Microsoft Code Signing PCA,OU=Copyright (c) 2000 Microsoft Corp.,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

25/05/2002, 00:55

Not After

25/11/2003, 01:05

Subject

CN=Microsoft Corporation,OU=Copyright (c) 2002 Microsoft Corp.,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

Signer

Actual PE Digest

Digest Algorithm

PE Digest Matches

false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

advapi32

RegCloseKey
AllocateAndInitializeSid
EqualSid
GetTokenInformation
OpenProcessToken
AdjustTokenPrivileges
LookupPrivilegeValueA
FreeSid
RegDeleteValueA
RegOpenKeyExA
RegSetValueExA
RegQueryValueExA
RegCreateKeyExA
RegQueryInfoKeyA

kernel32

LocalAlloc
GetLastError
GetCurrentProcess
LoadLibraryA
CloseHandle
LocalFree
GetFileAttributesA
GetPrivateProfileStringA
GetPrivateProfileIntA
lstrlenA
lstrcmpiA
lstrcatA
GetShortPathNameA
GetSystemDirectoryA
RemoveDirectoryA
lstrcpyA
FindNextFileA
DeleteFileA
SetFileAttributesA
lstrcmpA
FindFirstFileA
_lclose
_llseek
_lopen
WritePrivateProfileStringA
GetWindowsDirectoryA
GetModuleFileNameA
FindClose
GlobalFree
GlobalUnlock
GlobalLock
GlobalAlloc
IsDBCSLeadByte
ExitProcess
GetProcAddress
GetStartupInfoA
GetCommandLineA
LoadResource
FindResourceA
CreateMutexA
SetEvent
CreateEventA
SetCurrentDirectoryA
CreateThread
ResetEvent
TerminateThread
GetVersionExA
FreeLibrary
GetExitCodeProcess
WaitForSingleObject
CreateProcessA
GetTempPathA
FreeResource
LockResource
SizeofResource
CreateFileA
ReadFile
WriteFile
SetFilePointer
SetFileTime
LocalFileTimeToFileTime
DosDateTimeToFileTime
GetTempFileNameA
GetSystemInfo
GetDriveTypeA
lstrcpynA
GetVolumeInformationA
GetCurrentDirectoryA
LoadLibraryExA
GetModuleHandleA
CreateDirectoryA
ExpandEnvironmentStringsA
FormatMessageA
EnumResourceLanguagesA
MulDiv
GetDiskFreeSpaceA

gdi32

GetDeviceCaps

user32

ExitWindowsEx
CharNextA
CharUpperA
CharPrevA
SetWindowLongA
wsprintfA
GetWindowLongA
CallWindowProcA
GetDlgItem
SetForegroundWindow
SetWindowTextA
SendDlgItemMessageA
EnableWindow
GetDesktopWindow
EndDialog
DispatchMessageA
LoadStringA
PeekMessageA
MessageBoxA
SetWindowPos
ReleaseDC
GetDC
GetWindowRect
ShowWindow
DialogBoxIndirectParamA
SetDlgItemTextA
MessageBeep
SendMessageA
GetDlgItemTextA
MsgWaitForMultipleObjects
GetSystemMetrics

comctl32

ord17

version

GetFileVersionInfoA
VerQueryValueA
GetFileVersionInfoSizeA

Sections

.text
Size: 34KB - Virtual size: 33KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 23.1MB - Virtual size: 23.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
DOTNETFX/EULA.TXT
DOTNETFX/GENCOMP.DLL
.dll windows:4 windows x86 arch:x86

02c6beda71dc00846bbe58ae95649324

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

gencomp.pdb

Imports

kernel32

DeleteCriticalSection
DisableThreadLibraryCalls
InterlockedIncrement
InterlockedDecrement
GetLastError
FreeLibrary
LoadLibraryExA
lstrcmpiA
lstrcpynA
IsDBCSLeadByte
UnmapViewOfFile
GetFileAttributesA
WriteFile
GetProcAddress
GetModuleHandleA
MapViewOfFile
CreateFileMappingA
MulDiv
InitializeCriticalSection
FindClose
FindFirstFileA
CompareStringW
GetLocaleInfoW
FlushFileBuffers
SetStdHandle
IsValidCodePage
IsValidLocale
EnumSystemLocalesA
GetUserDefaultLCID
SetFilePointer
GetTimeZoneInformation
VirtualQuery
GetSystemInfo
VirtualProtect
IsBadCodePtr
CreateProcessA
Sleep
GetExitCodeProcess
CloseHandle
FormatMessageA
LocalFree
LeaveCriticalSection
EnterCriticalSection
GetModuleFileNameA
CompareStringA
lstrlenA
lstrlenW
FindResourceA
LoadResource
LockResource
SizeofResource
WideCharToMultiByte
MultiByteToWideChar
GetVersionExA
GetThreadLocale
GetLocaleInfoA
GetACP
LoadLibraryA
InterlockedExchange
GetStringTypeW
GetStringTypeA
IsBadWritePtr
VirtualAlloc
HeapSize
SetEnvironmentVariableA
GetCurrentDirectoryA
GetFullPathNameA
SetUnhandledExceptionFilter
LCMapStringW
LCMapStringA
GetCPInfo
GetOEMCP
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
VirtualFree
HeapCreate
HeapDestroy
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetStartupInfoA
GetFileType
GetStdHandle
SetHandleCount
TlsAlloc
TlsGetValue
SetLastError
TlsFree
GetCurrentProcess
TerminateProcess
GetCurrentThreadId
TlsSetValue
GetCommandLineA
ExitProcess
RtlUnwind
RaiseException
FileTimeToSystemTime
FileTimeToLocalFileTime
GetDriveTypeA
IsBadReadPtr
HeapFree
HeapReAlloc
HeapAlloc
GetSystemTimeAsFileTime

user32

LoadStringA
wsprintfA
TranslateMessage
PeekMessageA
MsgWaitForMultipleObjects
SendMessageA
DispatchMessageA
GetDC
CharNextA

gdi32

CreateFontIndirectA
DeleteObject
GetDeviceCaps

advapi32

RegQueryValueExA
RegSetValueExA
RegEnumKeyExA
RegQueryInfoKeyA
RegOpenKeyExA
RegDeleteValueA
RegCreateKeyExA
RegDeleteKeyA
RegOpenKeyExW
RegQueryValueExW
RegCloseKey
RegOpenKeyA

ole32

CoCreateInstance
CoTaskMemAlloc
CoTaskMemRealloc
StringFromCLSID
CLSIDFromString
StringFromGUID2
CoTaskMemFree

oleaut32

SysAllocStringLen
SysFreeString
SysAllocString
SysStringLen
VarUI4FromStr
VariantCopy
VariantClear
CreateErrorInfo
SetErrorInfo
LoadTypeLi
LoadRegTypeLi
VariantInit
DispGetParam

version

GetFileVersionInfoA
GetFileVersionInfoSizeA
VerQueryValueA

Exports

Exports

DllCanUnloadNow
DllGetClassObject
GetClassID

Sections

.text
Size: 244KB - Virtual size: 243KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 32KB - Virtual size: 38KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 28KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
DOTNETFX/HTMLLITE.DLL
.dll windows:4 windows x86 arch:x86

fb983387b83699754a3c8f4e49ffe45e

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

HtmlLite.pdb

Imports

kernel32

GetLocaleInfoA
LoadLibraryA
InitializeCriticalSection
IsBadWritePtr
VirtualQuery
GetSystemInfo
VirtualAlloc
VirtualProtect
HeapSize
GetCPInfo
GetOEMCP
IsBadReadPtr
GetSystemTimeAsFileTime
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
SetUnhandledExceptionFilter
EnterCriticalSection
LeaveCriticalSection
GetStringTypeW
GetStringTypeA
WriteFile
VirtualFree
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetModuleFileNameA
IsBadCodePtr
LCMapStringA
LCMapStringW
GetProcAddress
HeapReAlloc
HeapAlloc
HeapCreate
HeapFree
HeapDestroy
CloseHandle
GetVersionExA
CreateFileW
CreateFileA
FindResourceW
FindResourceA
GetModuleHandleW
GetModuleHandleA
MultiByteToWideChar
WideCharToMultiByte
MulDiv
GetLastError
LoadResource
LockResource
GetFileSize
CreateFileMappingA
MapViewOfFile
UnmapViewOfFile
GetACP
DeleteCriticalSection
GetStartupInfoA
GetCurrentThreadId
TlsSetValue
GetCommandLineA
RtlUnwind
RaiseException
ExitProcess
TerminateProcess
GetCurrentProcess
TlsFree
SetLastError
TlsGetValue
TlsAlloc
SetHandleCount
GetStdHandle
GetFileType

user32

IsChild
GetKeyState
IsWindowVisible
SetFocus
GetFocus
DestroyCaret
CreateCaret
SetCaretPos
SetCursor
IsWindowUnicode
LoadCursorA
GetUpdateRect
BeginPaint
EndPaint
SystemParametersInfoA
GetClientRect
InvalidateRect
MapWindowPoints
SetRectEmpty
CopyRect
PtInRect
UnionRect
IntersectRect
RegisterClassExA
GetParent
DefWindowProcA
IsWindow
GetDlgItem
GetWindowRect
ScreenToClient
GetWindow
GetWindowTextLengthA
GetWindowTextA
SendMessageA
DestroyWindow
CreateWindowExA
SetWindowPos
UnregisterClassA
SetWindowLongA
GetWindowLongA
GetSysColor
GetDC
ReleaseDC
IsRectEmpty

gdi32

CreateRectRgnIndirect
CreateCompatibleBitmap
CreateFontW
CreateFontA
GetObjectW
GetObjectType
GetObjectA
GetDeviceCaps
SetBkMode
SetTextAlign
FillRgn
ExtTextOutA
ExtTextOutW
CreateBitmapIndirect
CreatePatternBrush
CreateSolidBrush
PatBlt
CreateRectRgn
CombineRgn
GetTextMetricsA
GetTextExtentPoint32W
SetTextColor
CreateCompatibleDC
SelectPalette
RealizePalette
CreateDIBitmap
CreateBitmap
SelectObject
GetPixel
SetBkColor
BitBlt
DeleteObject
DeleteDC

shell32

ShellExecuteA

Exports

Exports

DllMain
_CchHtmlBreakLinesA@12
_CchHtmlBreakLinesW@12
_CchHtmlEscapeTextA@16
_CchHtmlEscapeTextW@16
_FHtmlReplaceCtl@8
_FRegisterHtmlLiteClass@4
_FUnregisterHtmlLiteClass@4

Sections

.text
Size: 104KB - Virtual size: 103KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
DOTNETFX/MSVCP70.DLL
.dll windows:4 windows x86 arch:x86

9c9d5a6a41b422f068adc3b7bbc96c4b

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

msvcp70.pdb

Imports

kernel32

GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
ExitProcess
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSection
GetLocaleInfoA
WideCharToMultiByte
InterlockedIncrement
InterlockedDecrement
MultiByteToWideChar
DisableThreadLibraryCalls

msvcr70

setvbuf
fflush
ungetc
fgetc
fwrite
fputc
fgetpos
fseek
fsetpos
fclose
_Getdays
_Getmonths
__iob_func
fopen
atan2
cos
exp
ldexp
log
pow
sin
sqrt
tan
fgetwc
fputwc
ungetwc
strtol
_errno
_Strftime
isdigit
strcspn
strtoul
_strtoi64
_strtoui64
sprintf
abort
_CxxThrowException
setlocale
??1exception@@UAE@XZ
??0exception@@QAE@XZ
malloc
?what@exception@@UBEPBDXZ
??0exception@@QAE@ABQBD@Z
?_set_new_handler@@YAP6AHI@ZP6AHI@Z@Z
__uncaught_exception
towlower
towupper
strcmp
__pctype_func
___lc_codepage_func
___lc_handle_func
_unlock
_lock
___setlc_active_func
___unguarded_readlc_active_add_func
__crtCompareStringA
___lc_collate_cp_func
__crtLCMapStringA
isupper
islower
__crtGetStringTypeW
_callnewh
__crtCompareStringW
__crtLCMapStringW
strtod
??1type_info@@UAE@XZ
?terminate@@YAXXZ
__security_error_handler
__dllonexit
_onexit
_initterm
_adjust_fdiv
_except_handler3
??0bad_cast@@QAE@PBD@Z
??1bad_cast@@UAE@XZ
??0bad_cast@@QAE@ABV0@@Z
??0exception@@QAE@ABV0@@Z
__CxxFrameHandler
___mb_cur_max_func
??_V@YAXPAX@Z
??3@YAXPAX@Z
_Gettnames
localeconv
free
memset
memchr
strlen
memcmp
wcslen
memmove
realloc
memcpy

Exports

Exports

??0?$_Complex_base@M@std@@QAE@ABM0@Z
??0?$_Complex_base@N@std@@QAE@ABN0@Z
??0?$_Complex_base@O@std@@QAE@ABO0@Z
??0?$_Mpunct@D@std@@QAE@ABV_Locinfo@1@I_N@Z
??0?$_Mpunct@D@std@@QAE@I_N@Z
??0?$_Mpunct@G@std@@QAE@ABV_Locinfo@1@I_N@Z
??0?$_Mpunct@G@std@@QAE@I_N@Z
??0?$_Mpunct@_W@std@@QAE@ABV_Locinfo@1@I_N@Z
??0?$_Mpunct@_W@std@@QAE@I_N@Z
??0?$_String_val@DV?$allocator@D@std@@@std@@IAE@V?$allocator@D@1@@Z
??0?$_String_val@DV?$allocator@D@std@@@std@@QAE@ABV01@@Z
??0?$_String_val@GV?$allocator@G@std@@@std@@IAE@V?$allocator@G@1@@Z
??0?$_String_val@GV?$allocator@G@std@@@std@@QAE@ABV01@@Z
??0?$_String_val@_WV?$allocator@_W@std@@@std@@IAE@V?$allocator@_W@1@@Z
??0?$_String_val@_WV?$allocator@_W@std@@@std@@QAE@ABV01@@Z
??0?$allocator@X@std@@QAE@ABV01@@Z
??0?$allocator@X@std@@QAE@XZ
??0?$basic_filebuf@DU?$char_traits@D@std@@@std@@QAE@PAU_iobuf@@@Z
??0?$basic_filebuf@DU?$char_traits@D@std@@@std@@QAE@W4_Uninitialized@1@@Z
??0?$basic_filebuf@GU?$char_traits@G@std@@@std@@QAE@PAU_iobuf@@@Z
??0?$basic_filebuf@GU?$char_traits@G@std@@@std@@QAE@W4_Uninitialized@1@@Z
??0?$basic_filebuf@_WU?$char_traits@_W@std@@@std@@QAE@PAU_iobuf@@@Z
??0?$basic_filebuf@_WU?$char_traits@_W@std@@@std@@QAE@W4_Uninitialized@1@@Z
??0?$basic_fstream@DU?$char_traits@D@std@@@std@@QAE@PBDH@Z
??0?$basic_fstream@DU?$char_traits@D@std@@@std@@QAE@XZ
??0?$basic_fstream@GU?$char_traits@G@std@@@std@@QAE@PBDH@Z
??0?$basic_fstream@GU?$char_traits@G@std@@@std@@QAE@XZ
??0?$basic_fstream@_WU?$char_traits@_W@std@@@std@@QAE@PBDH@Z
??0?$basic_fstream@_WU?$char_traits@_W@std@@@std@@QAE@XZ
??0?$basic_ifstream@DU?$char_traits@D@std@@@std@@QAE@PBDH@Z
??0?$basic_ifstream@DU?$char_traits@D@std@@@std@@QAE@XZ
??0?$basic_ifstream@GU?$char_traits@G@std@@@std@@QAE@PBDH@Z
??0?$basic_ifstream@GU?$char_traits@G@std@@@std@@QAE@XZ
??0?$basic_ifstream@_WU?$char_traits@_W@std@@@std@@QAE@PBDH@Z
??0?$basic_ifstream@_WU?$char_traits@_W@std@@@std@@QAE@XZ
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IAE@XZ
??0?$basic_ios@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z
??0?$basic_ios@GU?$char_traits@G@std@@@std@@IAE@XZ
??0?$basic_ios@GU?$char_traits@G@std@@@std@@QAE@PAV?$basic_streambuf@GU?$char_traits@G@std@@@1@@Z
??0?$basic_ios@_WU?$char_traits@_W@std@@@std@@IAE@XZ
??0?$basic_ios@_WU?$char_traits@_W@std@@@std@@QAE@PAV?$basic_streambuf@_WU?$char_traits@_W@std@@@1@@Z
??0?$basic_iostream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z
??0?$basic_iostream@GU?$char_traits@G@std@@@std@@QAE@PAV?$basic_streambuf@GU?$char_traits@G@std@@@1@@Z
??0?$basic_iostream@_WU?$char_traits@_W@std@@@std@@QAE@PAV?$basic_streambuf@_WU?$char_traits@_W@std@@@1@@Z
??0?$basic_istream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N1@Z
??0?$basic_istream@DU?$char_traits@D@std@@@std@@QAE@W4_Uninitialized@1@@Z
??0?$basic_istream@GU?$char_traits@G@std@@@std@@QAE@PAV?$basic_streambuf@GU?$char_traits@G@std@@@1@_N1@Z
??0?$basic_istream@GU?$char_traits@G@std@@@std@@QAE@W4_Uninitialized@1@@Z
??0?$basic_istream@_WU?$char_traits@_W@std@@@std@@QAE@PAV?$basic_streambuf@_WU?$char_traits@_W@std@@@1@_N1@Z
??0?$basic_istream@_WU?$char_traits@_W@std@@@std@@QAE@W4_Uninitialized@1@@Z
??0?$basic_istringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@1@H@Z
??0?$basic_istringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@H@Z
??0?$basic_istringstream@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@ABV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@1@H@Z
??0?$basic_istringstream@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@H@Z
??0?$basic_istringstream@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@ABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@1@H@Z
??0?$basic_istringstream@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@H@Z
??0?$basic_ofstream@DU?$char_traits@D@std@@@std@@QAE@PBDH@Z
??0?$basic_ofstream@DU?$char_traits@D@std@@@std@@QAE@XZ
??0?$basic_ofstream@GU?$char_traits@G@std@@@std@@QAE@PBDH@Z
??0?$basic_ofstream@GU?$char_traits@G@std@@@std@@QAE@XZ
??0?$basic_ofstream@_WU?$char_traits@_W@std@@@std@@QAE@PBDH@Z
??0?$basic_ofstream@_WU?$char_traits@_W@std@@@std@@QAE@XZ
??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QAE@W4_Uninitialized@1@@Z
??0?$basic_ostream@GU?$char_traits@G@std@@@std@@QAE@PAV?$basic_streambuf@GU?$char_traits@G@std@@@1@_N@Z
??0?$basic_ostream@GU?$char_traits@G@std@@@std@@QAE@W4_Uninitialized@1@@Z
??0?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAE@PAV?$basic_streambuf@_WU?$char_traits@_W@std@@@1@_N@Z
??0?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAE@W4_Uninitialized@1@@Z
??0?$basic_ostringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@1@H@Z
??0?$basic_ostringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@H@Z
??0?$basic_ostringstream@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@ABV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@1@H@Z
??0?$basic_ostringstream@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@H@Z
??0?$basic_ostringstream@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@ABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@1@H@Z
??0?$basic_ostringstream@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@H@Z
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAE@W4_Uninitialized@1@@Z
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAE@XZ
??0?$basic_streambuf@GU?$char_traits@G@std@@@std@@IAE@W4_Uninitialized@1@@Z
??0?$basic_streambuf@GU?$char_traits@G@std@@@std@@IAE@XZ
??0?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IAE@W4_Uninitialized@1@@Z
??0?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IAE@XZ
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@II@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@IIABV?$allocator@D@1@@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV?$allocator@D@1@@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ID@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@IDABV?$allocator@D@1@@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBD0@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBD@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBDABV?$allocator@D@1@@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBDI@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBDIABV?$allocator@D@1@@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@V?$_Ptrit@DHPBDABDPADAAD@1@0@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??0?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@ABV01@@Z
??0?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@ABV01@II@Z
??0?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@ABV01@IIABV?$allocator@G@1@@Z
??0?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@ABV?$allocator@G@1@@Z
??0?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@IG@Z
??0?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@IGABV?$allocator@G@1@@Z
??0?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@PBG0@Z
??0?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@PBG@Z
??0?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@PBGABV?$allocator@G@1@@Z
??0?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@PBGI@Z
??0?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@PBGIABV?$allocator@G@1@@Z
??0?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@V?$_Ptrit@GHPBGABGPAGAAG@1@0@Z
??0?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@XZ
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@ABV01@@Z
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@ABV01@II@Z
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@ABV01@IIABV?$allocator@_W@1@@Z
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@ABV?$allocator@_W@1@@Z
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@I_W@Z
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@I_WABV?$allocator@_W@1@@Z
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@PB_W0@Z
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@PB_W@Z
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@PB_WABV?$allocator@_W@1@@Z
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@PB_WI@Z
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@PB_WIABV?$allocator@_W@1@@Z
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@V?$_Ptrit@_WHPB_WAB_WPA_WAA_W@1@0@Z
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@XZ
??0?$basic_stringbuf@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@1@H@Z
??0?$basic_stringbuf@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@H@Z
??0?$basic_stringbuf@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@ABV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@1@H@Z
??0?$basic_stringbuf@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@H@Z
??0?$basic_stringbuf@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@ABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@1@H@Z
??0?$basic_stringbuf@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@H@Z
??0?$basic_stringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@1@H@Z
??0?$basic_stringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@H@Z
??0?$basic_stringstream@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@ABV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@1@H@Z
??0?$basic_stringstream@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@H@Z
??0?$basic_stringstream@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@ABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@1@H@Z
??0?$basic_stringstream@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@H@Z
??0?$codecvt@DDH@std@@QAE@ABV_Locinfo@1@I@Z
??0?$codecvt@DDH@std@@QAE@I@Z
??0?$codecvt@GDH@std@@QAE@ABV_Locinfo@1@I@Z
??0?$codecvt@GDH@std@@QAE@I@Z
??0?$codecvt@_WDH@std@@QAE@ABV_Locinfo@1@I@Z
??0?$codecvt@_WDH@std@@QAE@I@Z
??0?$collate@D@std@@QAE@ABV_Locinfo@1@I@Z
??0?$collate@D@std@@QAE@I@Z
??0?$collate@G@std@@QAE@ABV_Locinfo@1@I@Z
??0?$collate@G@std@@QAE@I@Z
??0?$collate@_W@std@@QAE@ABV_Locinfo@1@I@Z
??0?$collate@_W@std@@QAE@I@Z
??0?$complex@M@std@@QAE@ABM0@Z
??0?$complex@M@std@@QAE@ABV?$complex@N@1@@Z
??0?$complex@M@std@@QAE@ABV?$complex@O@1@@Z
??0?$complex@N@std@@QAE@ABN0@Z
??0?$complex@N@std@@QAE@ABV?$complex@M@1@@Z
??0?$complex@N@std@@QAE@ABV?$complex@O@1@@Z
??0?$complex@O@std@@QAE@ABO0@Z
??0?$complex@O@std@@QAE@ABV?$complex@M@1@@Z
??0?$complex@O@std@@QAE@ABV?$complex@N@1@@Z
??0?$ctype@D@std@@QAE@ABV_Locinfo@1@I@Z
??0?$ctype@D@std@@QAE@PBF_NI@Z
??0?$ctype@G@std@@QAE@ABV_Locinfo@1@I@Z
??0?$ctype@G@std@@QAE@I@Z
??0?$ctype@_W@std@@QAE@ABV_Locinfo@1@I@Z
??0?$ctype@_W@std@@QAE@I@Z
??0?$messages@D@std@@QAE@ABV_Locinfo@1@I@Z
??0?$messages@D@std@@QAE@I@Z
??0?$messages@G@std@@QAE@ABV_Locinfo@1@I@Z
??0?$messages@G@std@@QAE@I@Z
??0?$messages@_W@std@@QAE@ABV_Locinfo@1@I@Z
??0?$messages@_W@std@@QAE@I@Z
??0?$money_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QAE@ABV_Locinfo@1@I@Z
??0?$money_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QAE@I@Z
??0?$money_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@QAE@ABV_Locinfo@1@I@Z
??0?$money_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@QAE@I@Z
??0?$money_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@QAE@ABV_Locinfo@1@I@Z
??0?$money_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@QAE@I@Z
??0?$money_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QAE@ABV_Locinfo@1@I@Z
??0?$money_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QAE@I@Z
??0?$money_put@GV?$ostreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@QAE@ABV_Locinfo@1@I@Z
??0?$money_put@GV?$ostreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@QAE@I@Z
??0?$money_put@_WV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@QAE@ABV_Locinfo@1@I@Z
??0?$money_put@_WV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@QAE@I@Z
??0?$moneypunct@D$00@std@@QAE@ABV_Locinfo@1@I@Z
??0?$moneypunct@D$00@std@@QAE@I@Z
??0?$moneypunct@D$0A@@std@@QAE@ABV_Locinfo@1@I@Z
??0?$moneypunct@D$0A@@std@@QAE@I@Z
??0?$moneypunct@G$00@std@@QAE@ABV_Locinfo@1@I@Z
??0?$moneypunct@G$00@std@@QAE@I@Z
??0?$moneypunct@G$0A@@std@@QAE@ABV_Locinfo@1@I@Z
??0?$moneypunct@G$0A@@std@@QAE@I@Z
??0?$moneypunct@_W$00@std@@QAE@ABV_Locinfo@1@I@Z
??0?$moneypunct@_W$00@std@@QAE@I@Z
??0?$moneypunct@_W$0A@@std@@QAE@ABV_Locinfo@1@I@Z
??0?$moneypunct@_W$0A@@std@@QAE@I@Z
??0?$num_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QAE@ABV_Locinfo@1@I@Z
??0?$num_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QAE@I@Z
??0?$num_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@QAE@ABV_Locinfo@1@I@Z
??0?$num_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@QAE@I@Z
??0?$num_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@QAE@ABV_Locinfo@1@I@Z
??0?$num_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@QAE@I@Z
??0?$num_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QAE@ABV_Locinfo@1@I@Z
??0?$num_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QAE@I@Z
??0?$num_put@GV?$ostreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@QAE@ABV_Locinfo@1@I@Z
??0?$num_put@GV?$ostreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@QAE@I@Z
??0?$num_put@_WV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@QAE@ABV_Locinfo@1@I@Z
??0?$num_put@_WV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@QAE@I@Z
??0?$numpunct@D@std@@QAE@ABV_Locinfo@1@I@Z
??0?$numpunct@D@std@@QAE@I@Z
??0?$numpunct@G@std@@QAE@ABV_Locinfo@1@I@Z
??0?$numpunct@G@std@@QAE@I@Z
??0?$numpunct@_W@std@@QAE@ABV_Locinfo@1@I@Z
??0?$numpunct@_W@std@@QAE@I@Z
??0?$time_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QAE@ABV_Locinfo@1@I@Z
??0?$time_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QAE@I@Z
??0?$time_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@QAE@ABV_Locinfo@1@I@Z
??0?$time_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@QAE@I@Z
??0?$time_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@QAE@ABV_Locinfo@1@I@Z
??0?$time_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@QAE@I@Z
??0?$time_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QAE@ABV_Locinfo@1@I@Z
??0?$time_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QAE@I@Z
??0?$time_put@GV?$ostreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@QAE@ABV_Locinfo@1@I@Z
??0?$time_put@GV?$ostreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@QAE@I@Z
??0?$time_put@_WV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@QAE@ABV_Locinfo@1@I@Z
??0?$time_put@_WV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@QAE@I@Z
??0Init@ios_base@std@@QAE@XZ
??0_Locimp@locale@std@@AAE@ABV012@@Z
??0_Locinfo@std@@QAE@HPBD@Z
??0_Locinfo@std@@QAE@PBD@Z
??0_Lockit@std@@QAE@H@Z
??0_Lockit@std@@QAE@XZ
??0_Mutex@std@@QAE@XZ
??0_Timevec@std@@QAE@ABV01@@Z
??0_Timevec@std@@QAE@PAX@Z
??0_UShinit@std@@QAE@XZ
??0_Winit@std@@QAE@XZ
??0codecvt_base@std@@QAE@I@Z
??0ctype_base@std@@QAE@I@Z
??0facet@locale@std@@IAE@I@Z
??0id@locale@std@@QAE@I@Z
??0ios_base@std@@IAE@XZ
??0ios_base@std@@QAE@ABV01@@Z
??0locale@std@@AAE@PAV_Locimp@01@@Z
??0locale@std@@QAE@ABV01@0H@Z
??0locale@std@@QAE@ABV01@@Z
??0locale@std@@QAE@ABV01@PBDH@Z
??0locale@std@@QAE@PBDH@Z
??0locale@std@@QAE@W4_Uninitialized@1@@Z
??0locale@std@@QAE@XZ
??0messages_base@std@@QAE@I@Z
??0money_base@std@@QAE@I@Z
??0ostrstream@std@@QAE@PADHH@Z
??0strstream@std@@QAE@PADHH@Z
??0time_base@std@@QAE@I@Z
??1?$_Mpunct@D@std@@MAE@XZ
??1?$_Mpunct@G@std@@MAE@XZ
??1?$_Mpunct@_W@std@@MAE@XZ
??1?$basic_filebuf@DU?$char_traits@D@std@@@std@@UAE@XZ
??1?$basic_filebuf@GU?$char_traits@G@std@@@std@@UAE@XZ
??1?$basic_filebuf@_WU?$char_traits@_W@std@@@std@@UAE@XZ
??1?$basic_fstream@DU?$char_traits@D@std@@@std@@UAE@XZ
??1?$basic_fstream@GU?$char_traits@G@std@@@std@@UAE@XZ
??1?$basic_fstream@_WU?$char_traits@_W@std@@@std@@UAE@XZ
??1?$basic_ifstream@DU?$char_traits@D@std@@@std@@UAE@XZ
??1?$basic_ifstream@GU?$char_traits@G@std@@@std@@UAE@XZ
??1?$basic_ifstream@_WU?$char_traits@_W@std@@@std@@UAE@XZ
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UAE@XZ
??1?$basic_ios@GU?$char_traits@G@std@@@std@@UAE@XZ
??1?$basic_ios@_WU?$char_traits@_W@std@@@std@@UAE@XZ
??1?$basic_iostream@DU?$char_traits@D@std@@@std@@UAE@XZ
??1?$basic_iostream@GU?$char_traits@G@std@@@std@@UAE@XZ
??1?$basic_iostream@_WU?$char_traits@_W@std@@@std@@UAE@XZ
??1?$basic_istream@DU?$char_traits@D@std@@@std@@UAE@XZ
??1?$basic_istream@GU?$char_traits@G@std@@@std@@UAE@XZ
??1?$basic_istream@_WU?$char_traits@_W@std@@@std@@UAE@XZ
??1?$basic_istringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@UAE@XZ
??1?$basic_istringstream@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@UAE@XZ
??1?$basic_istringstream@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@UAE@XZ
??1?$basic_ofstream@DU?$char_traits@D@std@@@std@@UAE@XZ
??1?$basic_ofstream@GU?$char_traits@G@std@@@std@@UAE@XZ
??1?$basic_ofstream@_WU?$char_traits@_W@std@@@std@@UAE@XZ
??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UAE@XZ
??1?$basic_ostream@GU?$char_traits@G@std@@@std@@UAE@XZ
??1?$basic_ostream@_WU?$char_traits@_W@std@@@std@@UAE@XZ
??1?$basic_ostringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@UAE@XZ
??1?$basic_ostringstream@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@UAE@XZ
??1?$basic_ostringstream@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@UAE@XZ
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAE@XZ
??1?$basic_streambuf@GU?$char_traits@G@std@@@std@@UAE@XZ
??1?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UAE@XZ
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??1?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@XZ
??1?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@XZ
??1?$basic_stringbuf@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@UAE@XZ
??1?$basic_stringbuf@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@UAE@XZ
??1?$basic_stringbuf@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@UAE@XZ
??1?$basic_stringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@UAE@XZ
??1?$basic_stringstream@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@UAE@XZ
??1?$basic_stringstream@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@UAE@XZ
??1?$codecvt@DDH@std@@MAE@XZ
??1?$codecvt@GDH@std@@MAE@XZ
??1?$codecvt@_WDH@std@@MAE@XZ
??1?$collate@D@std@@MAE@XZ
??1?$collate@G@std@@MAE@XZ
??1?$collate@_W@std@@MAE@XZ
??1?$ctype@D@std@@MAE@XZ
??1?$ctype@G@std@@MAE@XZ
??1?$ctype@_W@std@@MAE@XZ
??1?$messages@D@std@@UAE@XZ
??1?$messages@G@std@@UAE@XZ
??1?$messages@_W@std@@UAE@XZ
??1?$money_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@MAE@XZ
??1?$money_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@MAE@XZ
??1?$money_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@MAE@XZ
??1?$money_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@MAE@XZ
??1?$money_put@GV?$ostreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@MAE@XZ
??1?$money_put@_WV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@MAE@XZ
??1?$moneypunct@D$00@std@@UAE@XZ
??1?$moneypunct@D$0A@@std@@UAE@XZ
??1?$moneypunct@G$00@std@@UAE@XZ
??1?$moneypunct@G$0A@@std@@UAE@XZ
??1?$moneypunct@_W$00@std@@UAE@XZ
??1?$moneypunct@_W$0A@@std@@UAE@XZ
??1?$num_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@MAE@XZ
??1?$num_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@MAE@XZ
??1?$num_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@MAE@XZ
??1?$num_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@MAE@XZ
??1?$num_put@GV?$ostreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@MAE@XZ
??1?$num_put@_WV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@MAE@XZ
??1?$numpunct@D@std@@MAE@XZ
??1?$numpunct@G@std@@MAE@XZ
??1?$numpunct@_W@std@@MAE@XZ
??1?$time_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@MAE@XZ
??1?$time_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@MAE@XZ
??1?$time_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@MAE@XZ
??1?$time_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@MAE@XZ
??1?$time_put@GV?$ostreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@MAE@XZ
??1?$time_put@_WV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@MAE@XZ
??1Init@ios_base@std@@QAE@XZ
??1_Locinfo@std@@QAE@XZ
??1_Lockit@std@@QAE@XZ
??1_Mutex@std@@QAE@XZ
??1_Timevec@std@@QAE@XZ
??1_UShinit@std@@QAE@XZ
??1_Winit@std@@QAE@XZ
??1codecvt_base@std@@UAE@XZ
??1ctype_base@std@@UAE@XZ
??1facet@locale@std@@UAE@XZ
??1ios_base@std@@UAE@XZ
??1istrstream@std@@UAE@XZ
??1locale@std@@QAE@XZ
??1messages_base@std@@UAE@XZ
??1money_base@std@@UAE@XZ
??1ostrstream@std@@UAE@XZ
??1strstream@std@@UAE@XZ
??1strstreambuf@std@@UAE@XZ
??1time_base@std@@UAE@XZ
??4?$_Complex_base@M@std@@QAEAAV01@ABV01@@Z
??4?$_Complex_base@N@std@@QAEAAV01@ABV01@@Z
??4?$_Complex_base@O@std@@QAEAAV01@ABV01@@Z
??4?$_Ctraits@M@std@@QAEAAV01@ABV01@@Z
??4?$_Ctraits@N@std@@QAEAAV01@ABV01@@Z
??4?$_Ctraits@O@std@@QAEAAV01@ABV01@@Z
??4?$_Iosb@H@std@@QAEAAV01@ABV01@@Z
??4?$_Locbase@H@std@@QAEAAV01@ABV01@@Z
??4?$_String_val@DV?$allocator@D@std@@@std@@QAEAAV01@ABV01@@Z
??4?$_String_val@GV?$allocator@G@std@@@std@@QAEAAV01@ABV01@@Z
??4?$_String_val@_WV?$allocator@_W@std@@@std@@QAEAAV01@ABV01@@Z
??4?$allocator@X@std@@QAEAAV01@ABV01@@Z
??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@ABV01@@Z
??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@D@Z
??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@PBD@Z
??4?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV01@ABV01@@Z
??4?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV01@G@Z
??4?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV01@PBG@Z
??4?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV01@ABV01@@Z
??4?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV01@PB_W@Z
??4?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV01@_W@Z
??4?$char_traits@D@std@@QAEAAU01@ABU01@@Z
??4?$char_traits@G@std@@QAEAAU01@ABU01@@Z
??4?$char_traits@_W@std@@QAEAAU01@ABU01@@Z
??4?$complex@M@std@@QAEAAV01@ABM@Z
??4?$complex@M@std@@QAEAAV01@ABV01@@Z
??4?$complex@N@std@@QAEAAV01@ABN@Z
??4?$complex@N@std@@QAEAAV01@ABV01@@Z
??4?$complex@O@std@@QAEAAV01@ABO@Z
??4?$complex@O@std@@QAEAAV01@ABV01@@Z
??4?$numeric_limits@C@std@@QAEAAV01@ABV01@@Z
??4?$numeric_limits@D@std@@QAEAAV01@ABV01@@Z
??4?$numeric_limits@E@std@@QAEAAV01@ABV01@@Z
??4?$numeric_limits@F@std@@QAEAAV01@ABV01@@Z
??4?$numeric_limits@G@std@@QAEAAV01@ABV01@@Z
??4?$numeric_limits@H@std@@QAEAAV01@ABV01@@Z
??4?$numeric_limits@I@std@@QAEAAV01@ABV01@@Z
??4?$numeric_limits@J@std@@QAEAAV01@ABV01@@Z
??4?$numeric_limits@K@std@@QAEAAV01@ABV01@@Z
??4?$numeric_limits@M@std@@QAEAAV01@ABV01@@Z
??4?$numeric_limits@N@std@@QAEAAV01@ABV01@@Z
??4?$numeric_limits@O@std@@QAEAAV01@ABV01@@Z
??4?$numeric_limits@_J@std@@QAEAAV01@ABV01@@Z
??4?$numeric_limits@_K@std@@QAEAAV01@ABV01@@Z
??4?$numeric_limits@_N@std@@QAEAAV01@ABV01@@Z
??4?$numeric_limits@_W@std@@QAEAAV01@ABV01@@Z
??4Init@ios_base@std@@QAEAAV012@ABV012@@Z
??4_Num_base@std@@QAEAAU01@ABU01@@Z
??4_Num_float_base@std@@QAEAAU01@ABU01@@Z
??4_Num_int_base@std@@QAEAAU01@ABU01@@Z
??4_String_base@std@@QAEAAV01@ABV01@@Z
??4_Timevec@std@@QAEAAV01@ABV01@@Z
??4_UShinit@std@@QAEAAV01@ABV01@@Z
??4_Winit@std@@QAEAAV01@ABV01@@Z
??4ios_base@std@@QAEAAV01@ABV01@@Z
??4locale@std@@QAEAAV01@ABV01@@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@AAF@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@AAG@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@AAH@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@AAI@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@AAJ@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@AAK@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@AAM@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@AAN@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@AAO@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@AAPAX@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@AA_J@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@AA_K@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@AA_N@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAV01@AAV01@@Z@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAV?$basic_ios@DU?$char_traits@D@std@@@1@AAV21@@Z@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAVios_base@1@AAV21@@Z@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z
??5?$basic_istream@GU?$char_traits@G@std@@@std@@QAEAAV01@AAF@Z
??5?$basic_istream@GU?$char_traits@G@std@@@std@@QAEAAV01@AAG@Z
??5?$basic_istream@GU?$char_traits@G@std@@@std@@QAEAAV01@AAH@Z
??5?$basic_istream@GU?$char_traits@G@std@@@std@@QAEAAV01@AAI@Z
??5?$basic_istream@GU?$char_traits@G@std@@@std@@QAEAAV01@AAJ@Z
??5?$basic_istream@GU?$char_traits@G@std@@@std@@QAEAAV01@AAK@Z
??5?$basic_istream@GU?$char_traits@G@std@@@std@@QAEAAV01@AAM@Z
??5?$basic_istream@GU?$char_traits@G@std@@@std@@QAEAAV01@AAN@Z
??5?$basic_istream@GU?$char_traits@G@std@@@std@@QAEAAV01@AAO@Z
??5?$basic_istream@GU?$char_traits@G@std@@@std@@QAEAAV01@AAPAX@Z
??5?$basic_istream@GU?$char_traits@G@std@@@std@@QAEAAV01@AA_J@Z
??5?$basic_istream@GU?$char_traits@G@std@@@std@@QAEAAV01@AA_K@Z
??5?$basic_istream@GU?$char_traits@G@std@@@std@@QAEAAV01@AA_N@Z
??5?$basic_istream@GU?$char_traits@G@std@@@std@@QAEAAV01@P6AAAV01@AAV01@@Z@Z
??5?$basic_istream@GU?$char_traits@G@std@@@std@@QAEAAV01@P6AAAV?$basic_ios@GU?$char_traits@G@std@@@1@AAV21@@Z@Z
??5?$basic_istream@GU?$char_traits@G@std@@@std@@QAEAAV01@P6AAAVios_base@1@AAV21@@Z@Z
??5?$basic_istream@GU?$char_traits@G@std@@@std@@QAEAAV01@PAV?$basic_streambuf@GU?$char_traits@G@std@@@1@@Z
??5?$basic_istream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@AAF@Z
??5?$basic_istream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@AAG@Z
??5?$basic_istream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@AAH@Z
??5?$basic_istream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@AAI@Z
??5?$basic_istream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@AAJ@Z
??5?$basic_istream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@AAK@Z
??5?$basic_istream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@AAM@Z
??5?$basic_istream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@AAN@Z
??5?$basic_istream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@AAO@Z
??5?$basic_istream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@AAPAX@Z
??5?$basic_istream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@AA_J@Z
??5?$basic_istream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@AA_K@Z
??5?$basic_istream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@AA_N@Z
??5?$basic_istream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@P6AAAV01@AAV01@@Z@Z
??5?$basic_istream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@P6AAAV?$basic_ios@_WU?$char_traits@_W@std@@@1@AAV21@@Z@Z
??5?$basic_istream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@P6AAAVios_base@1@AAV21@@Z@Z
??5?$basic_istream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@PAV?$basic_streambuf@_WU?$char_traits@_W@std@@@1@@Z
??5std@@YAAAV?$basic_istream@DU?$char_traits@D@std@@@0@AAV10@AAC@Z
??5std@@YAAAV?$basic_istream@DU?$char_traits@D@std@@@0@AAV10@AAD@Z
??5std@@YAAAV?$basic_istream@DU?$char_traits@D@std@@@0@AAV10@AAE@Z
??5std@@YAAAV?$basic_istream@DU?$char_traits@D@std@@@0@AAV10@AAV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@@Z
??5std@@YAAAV?$basic_istream@DU?$char_traits@D@std@@@0@AAV10@AAV?$complex@M@0@@Z
??5std@@YAAAV?$basic_istream@DU?$char_traits@D@std@@@0@AAV10@AAV?$complex@N@0@@Z
??5std@@YAAAV?$basic_istream@DU?$char_traits@D@std@@@0@AAV10@AAV?$complex@O@0@@Z
??5std@@YAAAV?$basic_istream@DU?$char_traits@D@std@@@0@AAV10@PAC@Z
??5std@@YAAAV?$basic_istream@DU?$char_traits@D@std@@@0@AAV10@PAD@Z
??5std@@YAAAV?$basic_istream@DU?$char_traits@D@std@@@0@AAV10@PAE@Z
??5std@@YAAAV?$basic_istream@GU?$char_traits@G@std@@@0@AAV10@AAG@Z
??5std@@YAAAV?$basic_istream@GU?$char_traits@G@std@@@0@AAV10@AAV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@0@@Z
??5std@@YAAAV?$basic_istream@GU?$char_traits@G@std@@@0@AAV10@AAV?$complex@M@0@@Z
??5std@@YAAAV?$basic_istream@GU?$char_traits@G@std@@@0@AAV10@AAV?$complex@N@0@@Z
??5std@@YAAAV?$basic_istream@GU?$char_traits@G@std@@@0@AAV10@AAV?$complex@O@0@@Z
??5std@@YAAAV?$basic_istream@GU?$char_traits@G@std@@@0@AAV10@PAG@Z
??5std@@YAAAV?$basic_istream@_WU?$char_traits@_W@std@@@0@AAV10@AAV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@0@@Z
??5std@@YAAAV?$basic_istream@_WU?$char_traits@_W@std@@@0@AAV10@AAV?$complex@M@0@@Z
??5std@@YAAAV?$basic_istream@_WU?$char_traits@_W@std@@@0@AAV10@AAV?$complex@N@0@@Z
??5std@@YAAAV?$basic_istream@_WU?$char_traits@_W@std@@@0@AAV10@AAV?$complex@O@0@@Z
??5std@@YAAAV?$basic_istream@_WU?$char_traits@_W@std@@@0@AAV10@AA_W@Z
??5std@@YAAAV?$basic_istream@_WU?$char_traits@_W@std@@@0@AAV10@PA_W@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@F@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@G@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@H@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@I@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@J@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@K@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@M@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@N@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@O@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAV01@AAV01@@Z@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAV?$basic_ios@DU?$char_traits@D@std@@@1@AAV21@@Z@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAVios_base@1@AAV21@@Z@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@PBX@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@_J@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@_K@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@_N@Z
??6?$basic_ostream@GU?$char_traits@G@std@@@std@@QAEAAV01@F@Z
??6?$basic_ostream@GU?$char_traits@G@std@@@std@@QAEAAV01@G@Z
??6?$basic_ostream@GU?$char_traits@G@std@@@std@@QAEAAV01@H@Z
??6?$basic_ostream@GU?$char_traits@G@std@@@std@@QAEAAV01@I@Z

Sections

.text
Size: 180KB - Virtual size: 179KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 260KB - Virtual size: 259KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 960B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 16KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
DOTNETFX/MSVCR70.DLL
.dll windows:4 windows x86 arch:x86

1042bb30696d4426da7447f341f51a6e

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

msvcr70.pdb

Imports

kernel32

GetModuleFileNameA
GetModuleFileNameW
ExitProcess
GetProcAddress
GetModuleHandleA
TerminateProcess
GetCurrentProcess
WriteFile
GetStdHandle
GetCurrentThreadId
TlsSetValue
GetCommandLineA
GetVersionExA
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
ExitThread
CloseHandle
TlsGetValue
GetLastError
ResumeThread
CreateThread
TlsFree
SetLastError
GetCurrentThread
TlsAlloc
FindNextFileA
FindFirstFileA
FindClose
FindNextFileW
FindFirstFileW
HeapAlloc
HeapFree
GetEnvironmentVariableA
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
HeapReAlloc
IsBadWritePtr
SetHandleCount
GetFileType
GetStartupInfoA
GetACP
GetOEMCP
GetCPInfo
LoadLibraryA
MultiByteToWideChar
GetCommandLineW
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
InitializeCriticalSection
UnhandledExceptionFilter
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
SetConsoleCtrlHandler
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
SetEnvironmentVariableA
SetEnvironmentVariableW
GetUserDefaultLCID
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale
IsValidCodePage
RtlUnwind
GetLocaleInfoW
GetTimeFormatA
GetDateFormatA
GetTimeZoneInformation
HeapSize
VirtualProtect
GetSystemInfo
VirtualQuery
FlushFileBuffers
SetFilePointer
SetStdHandle
CompareStringA
CompareStringW
Sleep
Beep
FileTimeToSystemTime
FileTimeToLocalFileTime
GetDiskFreeSpaceA
GetLogicalDrives
SetErrorMode
GetFileAttributesA
GetCurrentDirectoryA
SetCurrentDirectoryA
SetFileAttributesA
GetFullPathNameA
GetDriveTypeA
CreateDirectoryA
RemoveDirectoryA
DeleteFileA
GetFileAttributesW
GetCurrentDirectoryW
SetCurrentDirectoryW
SetFileAttributesW
GetFullPathNameW
CreateDirectoryW
DeleteFileW
MoveFileW
RemoveDirectoryW
GetDriveTypeW
MoveFileA
RaiseException
IsBadReadPtr
SetUnhandledExceptionFilter
IsBadCodePtr
GetExitCodeProcess
WaitForSingleObject
FreeLibrary
CreateProcessA
CreateProcessW
HeapValidate
HeapCompact
HeapWalk
ReadConsoleA
SetConsoleMode
GetConsoleMode
IsDBCSLeadByteEx
GetConsoleCP
ReadConsoleW
SetEndOfFile
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
DuplicateHandle
GetFileInformationByHandle
PeekNamedPipe
ReadConsoleInputA
PeekConsoleInputA
GetNumberOfConsoleInputEvents
ReadConsoleInputW
LockFile
UnlockFile
CreateFileA
CreatePipe
ReadFile
CreateFileW
SetFileTime
LocalFileTimeToFileTime
SystemTimeToFileTime
GetLocalTime
SetLocalTime

Exports

Exports

$I10_OUTPUT
??0__non_rtti_object@@QAE@ABV0@@Z
??0__non_rtti_object@@QAE@PBD@Z
??0bad_cast@@AAE@PBQBD@Z
??0bad_cast@@QAE@ABQBD@Z
??0bad_cast@@QAE@ABV0@@Z
??0bad_cast@@QAE@PBD@Z
??0bad_typeid@@QAE@ABV0@@Z
??0bad_typeid@@QAE@PBD@Z
??0exception@@QAE@ABQBD@Z
??0exception@@QAE@ABV0@@Z
??0exception@@QAE@XZ
??1__non_rtti_object@@UAE@XZ
??1bad_cast@@UAE@XZ
??1bad_typeid@@UAE@XZ
??1exception@@UAE@XZ
??1type_info@@UAE@XZ
??2@YAPAXI@Z
??3@YAXPAX@Z
??4__non_rtti_object@@QAEAAV0@ABV0@@Z
??4bad_cast@@QAEAAV0@ABV0@@Z
??4bad_typeid@@QAEAAV0@ABV0@@Z
??4exception@@QAEAAV0@ABV0@@Z
??8type_info@@QBEHABV0@@Z
??9type_info@@QBEHABV0@@Z
??_7__non_rtti_object@@6B@
??_7bad_cast@@6B@
??_7bad_typeid@@6B@
??_7exception@@6B@
??_E__non_rtti_object@@UAEPAXI@Z
??_Ebad_cast@@UAEPAXI@Z
??_Ebad_typeid@@UAEPAXI@Z
??_Eexception@@UAEPAXI@Z
??_Fbad_cast@@QAEXXZ
??_Fbad_typeid@@QAEXXZ
??_G__non_rtti_object@@UAEPAXI@Z
??_Gbad_cast@@UAEPAXI@Z
??_Gbad_typeid@@UAEPAXI@Z
??_Gexception@@UAEPAXI@Z
??_U@YAPAXI@Z
??_V@YAXPAX@Z
?_query_new_handler@@YAP6AHI@ZXZ
?_query_new_mode@@YAHXZ
?_set_new_handler@@YAP6AHI@ZP6AHI@Z@Z
?_set_new_mode@@YAHH@Z
?_set_se_translator@@YAP6AXIPAU_EXCEPTION_POINTERS@@@ZP6AXI0@Z@Z
?before@type_info@@QBEHABV1@@Z
?name@type_info@@QBEPBDXZ
?raw_name@type_info@@QBEPBDXZ
?set_new_handler@@YAP6AXXZP6AXXZ@Z
?set_terminate@@YAP6AXXZP6AXXZ@Z
?set_unexpected@@YAP6AXXZP6AXXZ@Z
?terminate@@YAXXZ
?unexpected@@YAXXZ
?what@exception@@UBEPBDXZ
_CIacos
_CIasin
_CIatan
_CIatan2
_CIcos
_CIcosh
_CIexp
_CIfmod
_CIlog
_CIlog10
_CIpow
_CIsin
_CIsinh
_CIsqrt
_CItan
_CItanh
_CRT_RTC_INIT
_CxxThrowException
_EH_prolog
_Getdays
_Getmonths
_Gettnames
_HUGE
_Strftime
_XcptFilter
__CxxCallUnwindDtor
__CxxCallUnwindVecDtor
__CxxDetectRethrow
__CxxExceptionFilter
__CxxFrameHandler
__CxxLongjmpUnwind
__CxxQueryExceptionSize
__CxxRegisterExceptionObject
__CxxUnregisterExceptionObject
__DestructExceptionObject
__RTCastToVoid
__RTDynamicCast
__RTtypeid
__STRINGTOLD
___lc_codepage_func
___lc_collate_cp_func
___lc_handle_func
___mb_cur_max_func
___setlc_active_func
___unguarded_readlc_active_add_func
__argc
__argv
__badioinfo
__buffer_overrun
__crtCompareStringA
__crtCompareStringW
__crtGetLocaleInfoW
__crtGetStringTypeW
__crtLCMapStringA
__crtLCMapStringW
__dllonexit
__doserrno
__fpecode
__getmainargs
__initenv
__iob_func
__isascii
__iscsym
__iscsymf
__lc_clike
__lc_codepage
__lc_collate_cp
__lc_handle
__lconv_init
__mb_cur_max
__p___argc
__p___argv
__p___initenv
__p___mb_cur_max
__p___wargv
__p___winitenv
__p__acmdln
__p__amblksiz
__p__commode
__p__daylight
__p__dstbias
__p__environ
__p__fileinfo
__p__fmode
__p__iob
__p__mbcasemap
__p__mbctype
__p__osver
__p__pctype
__p__pgmptr
__p__pwctype
__p__timezone
__p__tzname
__p__wcmdln
__p__wenviron
__p__winmajor
__p__winminor
__p__winver
__p__wpgmptr
__pctype_func
__pioinfo
__pwctype_func
__pxcptinfoptrs
__security_error_handler
__set_app_type
__set_buffer_overrun_handler
__setlc_active
__setusermatherr
__threadhandle
__threadid
__toascii
__unDName
__unDNameEx
__uncaught_exception
__unguarded_readlc_active
__wargv
__wcserror
__wgetmainargs
__winitenv
_abnormal_termination
_access
_acmdln
_adj_fdiv_m16i
_adj_fdiv_m32
_adj_fdiv_m32i
_adj_fdiv_m64
_adj_fdiv_r
_adj_fdivr_m16i
_adj_fdivr_m32
_adj_fdivr_m32i
_adj_fdivr_m64
_adj_fpatan
_adj_fprem
_adj_fprem1
_adj_fptan
_adjust_fdiv
_aexit_rtn
_aligned_free
_aligned_malloc
_aligned_offset_malloc
_aligned_offset_realloc
_aligned_realloc
_amsg_exit
_assert
_atodbl
_atoi64
_atoldbl
_beep
_beginthread
_beginthreadex
_c_exit
_cabs
_callnewh
_cexit
_cgets
_cgetws
_chdir
_chdrive
_chgsign
_chkesp
_chmod
_chsize
_clearfp
_close
_commit
_commode
_control87
_controlfp
_copysign
_cprintf
_cputs
_cputws
_creat
_cscanf
_ctime64
_ctype
_cwait
_cwprintf
_cwscanf
_daylight
_dstbias
_dup
_dup2
_ecvt
_endthread
_endthreadex
_environ
_eof
_errno
_except_handler2
_except_handler3
_execl
_execle
_execlp
_execlpe
_execv
_execve
_execvp
_execvpe
_exit
_expand
_fcloseall
_fcvt
_fdopen
_fgetchar
_fgetwchar
_filbuf
_fileinfo
_filelength
_filelengthi64
_fileno
_findclose
_findfirst
_findfirst64
_findfirsti64
_findnext
_findnext64
_findnexti64
_finite
_flsbuf
_flushall
_fmode
_fpclass
_fpieee_flt
_fpreset
_fputchar
_fputwchar
_fsopen
_fstat
_fstat64
_fstati64
_ftime
_ftime64
_ftol
_fullpath
_futime
_futime64
_gcvt
_get_osfhandle
_get_sbh_threshold
_getch
_getche
_getcwd
_getdcwd
_getdiskfree
_getdllprocaddr
_getdrive
_getdrives
_getmaxstdio
_getmbcp
_getpid
_getsystime
_getw
_getwch
_getwche
_getws
_global_unwind2
_gmtime64
_heapadd
_heapchk
_heapmin
_heapset
_heapused
_heapwalk
_hypot
_i64toa
_i64tow
_initterm
_inp
_inpd
_inpw
_iob
_isatty
_isctype
_ismbbalnum
_ismbbalpha
_ismbbgraph
_ismbbkalnum
_ismbbkana
_ismbbkprint
_ismbbkpunct
_ismbblead
_ismbbprint
_ismbbpunct
_ismbbtrail
_ismbcalnum
_ismbcalpha
_ismbcdigit
_ismbcgraph
_ismbchira
_ismbckata
_ismbcl0
_ismbcl1
_ismbcl2
_ismbclegal
_ismbclower
_ismbcprint
_ismbcpunct
_ismbcspace
_ismbcsymbol
_ismbcupper
_ismbslead
_ismbstrail
_isnan
_itoa
_itow
_j0
_j1
_jn
_kbhit
_lfind
_loaddll
_local_unwind2
_localtime64
_lock
_locking
_logb
_longjmpex
_lrotl
_lrotr
_lsearch
_lseek
_lseeki64
_ltoa
_ltow
_makepath
_mbbtombc
_mbbtype
_mbcasemap
_mbccpy
_mbcjistojms
_mbcjmstojis
_mbclen
_mbctohira
_mbctokata
_mbctolower
_mbctombb
_mbctoupper
_mbctype
_mbsbtype
_mbscat
_mbschr
_mbscmp
_mbscoll
_mbscpy
_mbscspn
_mbsdec
_mbsdup
_mbsicmp
_mbsicoll
_mbsinc
_mbslen
_mbslwr
_mbsnbcat
_mbsnbcmp
_mbsnbcnt
_mbsnbcoll
_mbsnbcpy
_mbsnbicmp
_mbsnbicoll
_mbsnbset
_mbsncat
_mbsnccnt
_mbsncmp
_mbsncoll
_mbsncpy
_mbsnextc
_mbsnicmp
_mbsnicoll
_mbsninc
_mbsnset
_mbspbrk
_mbsrchr
_mbsrev
_mbsset
_mbsspn
_mbsspnp
_mbsstr
_mbstok
_mbstrlen
_mbsupr
_memccpy
_memicmp
_mkdir
_mktemp
_mktime64
_msize
_nextafter
_onexit
_open
_open_osfhandle
_osplatform
_osver
_outp
_outpd
_outpw
_pclose
_pctype
_pgmptr
_pipe
_popen
_purecall
_putch
_putenv
_putw
_putwch
_putws
_pwctype
_read
_resetstkoflw
_rmdir
_rmtmp
_rotl
_rotr
_safe_fdiv
_safe_fdivr
_safe_fprem
_safe_fprem1
_scalb
_scprintf
_scwprintf
_searchenv
_seh_longjmp_unwind
_set_SSE2_enable
_set_error_mode
_set_sbh_threshold
_set_security_error_handler
_seterrormode
_setjmp
_setjmp3
_setmaxstdio
_setmbcp
_setmode
_setsystime
_sleep
_snprintf
_snscanf
_snwprintf
_snwscanf
_sopen
_spawnl
_spawnle
_spawnlp
_spawnlpe
_spawnv

Sections

.text
Size: 224KB - Virtual size: 222KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 64KB - Virtual size: 63KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 28KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 952B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
DOTNETFX/NDPSP.EXE
.exe windows:4 windows x86 arch:x86

91ad961a0995bb2868ea3e2eaf249ad5

Code Sign

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04/12/2003, 00:00

Not After

03/12/2013, 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0d:e9:2b:f0:d4:d8:29:88:18:32:05:09:5e:9a:76:88
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

04/12/2003, 00:00

Not After

03/12/2008, 23:59

Subject

CN=VeriSign Time Stamping Services Signer,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

c1:00:8b:3c:3c:88:11:d1:3e:f6:63:ec:df:40
Certificate

Issuer

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

Not Before

10/01/1997, 07:00

Not After

31/12/2020, 07:00

Subject

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

6a:0b:99:4f:c0:00:de:aa:11:d4:d8:40:9a:a8:be:e6
Certificate

Issuer

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

Not Before

10/12/2000, 08:00

Not After

12/11/2005, 08:00

Subject

CN=Microsoft Code Signing PCA,OU=Copyright (c) 2000 Microsoft Corp.,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageContentCommitment
KeyUsageCertSign
KeyUsageCRLSign

61:0e:7d:a7:00:00:00:00:00:48
Certificate

Issuer

CN=Microsoft Code Signing PCA,OU=Copyright (c) 2000 Microsoft Corp.,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

25/10/2003, 05:59

Not After

25/01/2005, 06:09

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

12:4f:6c:b1:c8:68:8d:2f:66:c1:5e:b2:f3:d5:a8:23:74:e2:d7:97
Signer

Actual PE Digest

12:4f:6c:b1:c8:68:8d:2f:66:c1:5e:b2:f3:d5:a8:23:74:e2:d7:97

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

MessageBoxA

kernel32

GetSystemTimeAsFileTime
GetVersionExA
GetLastError
WriteFile
ReadFile
SetFilePointer
CloseHandle
CreateFileA
GetLocalTime
GetTempPathA
FindNextFileA
FindFirstFileA
FindClose
CopyFileA
MoveFileExA
CreateDirectoryA
GetCurrentProcessId
RemoveDirectoryA
DeleteFileA
GetModuleFileNameA
FormatMessageA
Sleep
GetExitCodeProcess
WaitForSingleObject
ReleaseMutex
WaitForMultipleObjects
CreateProcessA
GetSystemDirectoryA
GetTempFileNameA
FreeLibrary
LoadLibraryA
CreateEventA
CreateMutexA
ExitProcess
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetACP
GetOEMCP
GetCPInfo
TlsFree
SetLastError
GetCurrentThreadId
TlsSetValue
TlsGetValue
TlsAlloc
QueryPerformanceCounter
GetTickCount
HeapFree
HeapAlloc
GetProcAddress
TerminateProcess
GetCurrentProcess
GetStdHandle
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetFileType
DeleteCriticalSection
HeapDestroy
HeapCreate
VirtualFree
LCMapStringA
MultiByteToWideChar
LCMapStringW
GetStringTypeA
GetStringTypeW
LeaveCriticalSection
EnterCriticalSection
VirtualAlloc
HeapReAlloc
InitializeCriticalSection
GetLocaleInfoA
VirtualProtect
GetSystemInfo
VirtualQuery
RtlUnwind
SetStdHandle
HeapSize
FlushFileBuffers

Sections

.text
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
DOTNETFX/REBOOTST.EXE
.exe windows:4 windows x86 arch:x86

f99e4d9bb0f2b5d1361305b5f71c1f51

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

RebootSt.pdb

Imports

kernel32

ReadFile
GetFileSize
CreateFileA
InitializeCriticalSection
DeleteCriticalSection
InterlockedIncrement
InterlockedDecrement
MultiByteToWideChar
lstrlenA
GetModuleFileNameA
GetLastError
FreeLibrary
LoadLibraryExA
lstrcmpiA
lstrcpynA
IsDBCSLeadByte
DeleteFileA
CreateProcessA
GetCommandLineA
UnmapViewOfFile
GetFileAttributesA
GetTempPathA
WriteFile
GetTempFileNameA
GetProcAddress
GetModuleHandleA
MapViewOfFile
CreateFileMappingA
MulDiv
LocalFree
lstrcmpA
LocalAlloc
GetVersion
LoadLibraryA
WritePrivateProfileSectionA
WaitForSingleObject
CreateSemaphoreA
GetCurrentProcessId
CopyFileA
VirtualQuery
GetSystemInfo
VirtualProtect
CloseHandle
SetFilePointer
GetStringTypeW
GetStringTypeA
IsBadCodePtr
IsBadReadPtr
LCMapStringW
LCMapStringA
HeapSize
IsBadWritePtr
VirtualAlloc
SetUnhandledExceptionFilter
GetCPInfo
GetOEMCP
GetTickCount
QueryPerformanceCounter
VirtualFree
HeapCreate
HeapDestroy
TlsAlloc
TlsGetValue
TlsSetValue
SetLastError
TlsFree
GetFileType
SetHandleCount
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
UnhandledExceptionFilter
GetStdHandle
TerminateProcess
GetSystemTimeAsFileTime
HeapReAlloc
RaiseException
RtlUnwind
ExitProcess
FlushFileBuffers
SetStdHandle
GetStartupInfoA
GetDriveTypeA
Sleep
GetCurrentThreadId
lstrlenW
HeapAlloc
GetProcessHeap
HeapFree
GetCurrentProcess
FlushInstructionCache
FindResourceA
LoadResource
LockResource
SizeofResource
LeaveCriticalSection
EnterCriticalSection
WideCharToMultiByte
GetVersionExA
GetThreadLocale
GetLocaleInfoA
GetACP
InterlockedExchange

user32

CallWindowProcA
DefWindowProcA
SetCursor
ReleaseCapture
SetCapture
EndPaint
BeginPaint
GetSystemMetrics
CharPrevA
SendMessageA
GetActiveWindow
MsgWaitForMultipleObjects
CharNextA
DialogBoxParamA
PeekMessageA
TranslateMessage
DispatchMessageA
GetWindowTextLengthA
MessageBoxA
CreateWindowExA
RegisterClassExA
DestroyWindow
LoadCursorA
wsprintfA
GetClassInfoExA
GetWindow
GetWindowRect
SystemParametersInfoA
GetClientRect
MapWindowPoints
SetWindowPos
GetDlgItem
GetParent
SetDlgItemTextA
GetDlgItemTextA
SetWindowTextA
GetWindowLongA
SetWindowLongA
EndDialog
GetDC
UnregisterClassA

shell32

ShellExecuteA
SHGetSpecialFolderLocation
SHGetPathFromIDListA

ole32

CoUninitialize
CoTaskMemRealloc
CoTaskMemAlloc
CoTaskMemFree
CoCreateInstance
CoInitialize

oleaut32

VarUI4FromStr
SysAllocStringLen
SysFreeString

advapi32

RegQueryValueExA
RegCreateKeyExA
RegDeleteValueA
RegCloseKey
RegOpenKeyExA
RegQueryInfoKeyA
RegEnumKeyExA
RegOpenKeyA
RegDeleteKeyA
RegSetValueExA

gdi32

DeleteObject
CreateFontIndirectA
GetDeviceCaps

Sections

.text
Size: 100KB - Virtual size: 98KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
DOTNETFX/SETLOG.DLL
.dll windows:4 windows x86 arch:x86

322deff390b7190626f54e64583ed82a

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

SetLog.pdb

Imports

kernel32

lstrcmpiA
CloseHandle
FlushFileBuffers
DisableThreadLibraryCalls
InterlockedIncrement
InterlockedDecrement
lstrcpynA
IsDBCSLeadByte
FreeLibrary
SizeofResource
LoadResource
FindResourceA
LoadLibraryExA
GetModuleFileNameA
CompareStringA
SetFilePointer
CreateFileA
WriteFile
DeleteFileA
LoadLibraryA
lstrlenA
DeleteCriticalSection
SetEndOfFile
VirtualQuery
GetSystemInfo
VirtualProtect
SetStdHandle
IsBadCodePtr
IsBadReadPtr
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
GetCPInfo
GetOEMCP
HeapSize
ReadFile
IsBadWritePtr
VirtualAlloc
SetUnhandledExceptionFilter
GetLastError
InitializeCriticalSection
LeaveCriticalSection
InterlockedExchange
EnterCriticalSection
lstrlenW
WideCharToMultiByte
MultiByteToWideChar
GetVersionExA
GetThreadLocale
GetLocaleInfoA
GetACP
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
VirtualFree
HeapCreate
HeapDestroy
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetStartupInfoA
GetFileType
GetStdHandle
SetHandleCount
GetCurrentThreadId
TlsSetValue
GetCommandLineA
ExitProcess
RaiseException
HeapAlloc
HeapFree
RtlUnwind
HeapReAlloc
GetLocalTime
GetSystemTimeAsFileTime
GetProcAddress
GetModuleHandleA
TerminateProcess
GetCurrentProcess
TlsFree
SetLastError
TlsGetValue
TlsAlloc

user32

LoadStringA
CharNextA

oleaut32

SysFreeString
VarUI4FromStr
SysAllocStringLen
SetErrorInfo
CreateErrorInfo
DispGetParam
VariantInit
SysAllocString

advapi32

RegCloseKey
RegEnumKeyExA
RegQueryInfoKeyA
RegSetValueExA
RegOpenKeyExA
RegCreateKeyExA
RegDeleteValueA
RegDeleteKeyA

ole32

CoCreateInstance
StringFromCLSID
CoTaskMemFree
CoTaskMemRealloc
CoTaskMemAlloc

Exports

Exports

DllCanUnloadNow
DllGetClassObject
GetClassID

Sections

.text
Size: 104KB - Virtual size: 100KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 12KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
DOTNETFX/SETUP.EXE
.exe windows:4 windows x86 arch:x86

1635ad10c79be9fef863e0e4b12acb0c

Code Sign

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04/12/2003, 00:00

Not After

03/12/2013, 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0d:e9:2b:f0:d4:d8:29:88:18:32:05:09:5e:9a:76:88
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

04/12/2003, 00:00

Not After

03/12/2008, 23:59

Subject

CN=VeriSign Time Stamping Services Signer,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

c1:00:8b:3c:3c:88:11:d1:3e:f6:63:ec:df:40
Certificate

Issuer

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

Not Before

10/01/1997, 07:00

Not After

31/12/2020, 07:00

Subject

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

6a:0b:99:4f:c0:00:de:aa:11:d4:d8:40:9a:a8:be:e6
Certificate

Issuer

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

Not Before

10/12/2000, 08:00

Not After

12/11/2005, 08:00

Subject

CN=Microsoft Code Signing PCA,OU=Copyright (c) 2000 Microsoft Corp.,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageContentCommitment
KeyUsageCertSign
KeyUsageCRLSign

61:0e:7d:a7:00:00:00:00:00:48
Certificate

Issuer

CN=Microsoft Code Signing PCA,OU=Copyright (c) 2000 Microsoft Corp.,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

25/10/2003, 05:59

Not After

25/01/2005, 06:09

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

6f:2d:93:44:4e:27:28:92:1d:0a:dc:ba:4c:b1:e5:25:be:cf:fd:fa
Signer

Actual PE Digest

6f:2d:93:44:4e:27:28:92:1d:0a:dc:ba:4c:b1:e5:25:be:cf:fd:fa

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

\\cpvsbuild\drops\WinSP\raw\4199\vsbuilt\retail\bin\i386\Cartman\setup.pdb

Imports

kernel32

GetLocaleInfoA
GetThreadLocale
GetVersionExA
MultiByteToWideChar
WideCharToMultiByte
InitializeCriticalSection
DeleteCriticalSection
SetEnvironmentVariableA
GetEnvironmentVariableA
GetLastError
MapViewOfFile
CreateFileMappingA
CloseHandle
UnmapViewOfFile
CopyFileA
LocalFree
DeleteFileA
SetFileAttributesA
GetFileAttributesA
FormatMessageA
GetModuleFileNameA
ReadFile
GetFileSize
CreateFileA
InterlockedIncrement
InterlockedDecrement
lstrlenA
lstrlenW
FreeLibrary
SizeofResource
LoadResource
FindResourceA
LoadLibraryExA
lstrcmpiA
lstrcpynA
IsDBCSLeadByte
GetProcAddress
GetSystemDirectoryA
GetCommandLineA
WritePrivateProfileStringA
GetWindowsDirectoryA
WaitForSingleObject
CreateProcessA
GetTempFileNameA
GetTempPathA
GetACP
LoadLibraryA
WriteFile
WritePrivateProfileSectionA
GetPrivateProfileSectionA
GetShortPathNameA
MoveFileExA
FlushFileBuffers
SetStdHandle
SetFilePointer
IsBadCodePtr
IsBadReadPtr
VirtualQuery
GetSystemInfo
VirtualProtect
HeapSize
IsBadWritePtr
VirtualAlloc
GetStringTypeW
GetStringTypeA
SetUnhandledExceptionFilter
EnterCriticalSection
LeaveCriticalSection
GetCurrentProcessId
GetTickCount
GetCurrentProcess
InterlockedExchange
QueryPerformanceCounter
LCMapStringW
LCMapStringA
GetCPInfo
GetOEMCP
VirtualFree
HeapCreate
HeapDestroy
TlsAlloc
TlsGetValue
TlsSetValue
GetCurrentThreadId
SetLastError
TlsFree
GetFileType
SetHandleCount
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
LocalAlloc
RaiseException
GetModuleHandleA
GetStartupInfoA
ExitProcess
RtlUnwind
HeapFree
HeapReAlloc
HeapAlloc
GetSystemTimeAsFileTime
TerminateProcess
GetStdHandle
UnhandledExceptionFilter

user32

CharPrevA
LoadStringA
MessageBoxA
ExitWindowsEx
SetForegroundWindow
GetSystemMetrics
CharNextA

oleaut32

SysAllocStringLen
SysFreeString
SysStringLen
VarUI4FromStr
SysAllocString

ole32

CoFreeUnusedLibraries
CoCreateInstance
StringFromCLSID
CoUninitialize
CoLoadLibrary
CoRegisterClassObject
CoTaskMemRealloc
CoTaskMemAlloc
CoInitialize
CoRevokeClassObject
CoTaskMemFree

version

GetFileVersionInfoA
GetFileVersionInfoSizeA
VerQueryValueA

shell32

ShellExecuteA
SHGetSpecialFolderLocation
SHGetPathFromIDListA

Sections

.text
Size: 104KB - Virtual size: 102KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
DOTNETFX/SETUP.SDB
DOTNETFX/SETUPDB.DLL
.dll windows:4 windows x86 arch:x86

1d742a306cdb275716ed266016134c39

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

setupdb.pdb

Imports

kernel32

lstrcmpiA
GetProcAddress
LoadLibraryA
FreeLibrary
DisableThreadLibraryCalls
InterlockedIncrement
InterlockedDecrement
lstrcpynA
IsDBCSLeadByte
CompareStringA
SizeofResource
LoadResource
FindResourceA
LoadLibraryExA
GetModuleFileNameA
GetPrivateProfileStringA
WritePrivateProfileStringA
CloseHandle
FlushFileBuffers
ReadFile
WriteFile
CreateFileA
lstrlenA
SetStdHandle
SetFilePointer
IsBadCodePtr
IsBadReadPtr
VirtualQuery
GetSystemInfo
VirtualProtect
GetStringTypeW
GetStringTypeA
HeapSize
IsBadWritePtr
VirtualAlloc
SetUnhandledExceptionFilter
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
LCMapStringW
LCMapStringA
GetLastError
InterlockedExchange
DeleteCriticalSection
InitializeCriticalSection
LeaveCriticalSection
EnterCriticalSection
lstrlenW
WideCharToMultiByte
MultiByteToWideChar
GetVersionExA
GetThreadLocale
GetLocaleInfoA
GetACP
GetCPInfo
GetOEMCP
VirtualFree
HeapCreate
HeapDestroy
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetStartupInfoA
GetFileType
GetStdHandle
SetHandleCount
TlsAlloc
GetCurrentThreadId
TlsSetValue
GetCommandLineA
ExitProcess
RaiseException
HeapAlloc
HeapFree
RtlUnwind
HeapReAlloc
GetSystemTimeAsFileTime
GetModuleHandleA
TerminateProcess
GetCurrentProcess
TlsFree
SetLastError
TlsGetValue

user32

LoadStringA
CharNextA

oleaut32

SysAllocStringLen
SysFreeString
VarUI4FromStr
DispGetParam
VariantInit
SetErrorInfo
CreateErrorInfo
SysAllocString
SafeArrayDestroy
SysStringLen
SafeArrayPutElement
SafeArrayGetDim
SafeArrayGetLBound
SafeArrayGetUBound
SafeArrayGetElement
SafeArrayCreate

advapi32

RegEnumKeyExA
RegQueryInfoKeyA
RegSetValueExA
RegOpenKeyExA
RegCreateKeyExA
RegCloseKey
RegDeleteValueA
RegDeleteKeyA

ole32

CoCreateInstance
CLSIDFromString
StringFromCLSID
CoTaskMemFree
CoTaskMemRealloc
CoTaskMemAlloc

Exports

Exports

DllCanUnloadNow
DllGetClassObject
GetClassID

Sections

.text
Size: 120KB - Virtual size: 119KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
DOTNETFX/SITSETUP.DLL
.dll windows:4 windows x86 arch:x86

4d02d9dd430e6bec5efe87768ca661c1

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

SITSetup.pdb

Imports

kernel32

SetFileAttributesA
FindNextFileA
FindFirstFileA
HeapFree
HeapAlloc
GetProcessHeap
SetLastError
GetComputerNameA
GetPrivateProfileStringA
FindClose
EnterCriticalSection
LeaveCriticalSection
FlushInstructionCache
GetCurrentProcess
GetCurrentThreadId
GetCommandLineA
SetEvent
WritePrivateProfileStringA
CreateDirectoryA
WriteFile
OutputDebugStringA
CreateProcessA
WaitForSingleObject
GetWindowsDirectoryA
GetDriveTypeA
CreateThread
CreateEventA
GlobalFree
GlobalAlloc
CompareStringA
InitializeCriticalSection
DeleteCriticalSection
lstrcmpiA
DisableThreadLibraryCalls
InterlockedIncrement
InterlockedDecrement
lstrcpynA
IsDBCSLeadByte
SizeofResource
LoadResource
FindResourceA
LoadLibraryExA
GetTempPathA
WritePrivateProfileSectionA
RemoveDirectoryA
DeleteFileA
CreateSemaphoreA
GetCurrentProcessId
ReadFile
SetEndOfFile
SetFilePointer
FlushFileBuffers
SetStdHandle
VirtualQuery
GetSystemInfo
VirtualProtect
IsBadCodePtr
IsBadWritePtr
VirtualAlloc
HeapSize
GetStringTypeW
TlsGetValue
TlsFree
TerminateProcess
GetModuleHandleA
GetSystemTimeAsFileTime
HeapReAlloc
IsBadReadPtr
GetLocalTime
RaiseException
RtlUnwind
ExitProcess
TlsSetValue
TlsAlloc
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
HeapDestroy
HeapCreate
FormatMessageA
GetLastError
LocalFree
CopyFileA
GetSystemDirectoryA
CreateFileA
CloseHandle
GetFileAttributesA
LoadLibraryA
GetProcAddress
lstrlenA
MultiByteToWideChar
GetModuleFileNameA
lstrlenW
FreeLibrary
WideCharToMultiByte
GetVersionExA
GetThreadLocale
GetLocaleInfoA
GetACP
GetTempFileNameA
InterlockedExchange
GetStringTypeA
LCMapStringW
LCMapStringA
SetUnhandledExceptionFilter
GetTickCount
QueryPerformanceCounter
GetCPInfo
GetOEMCP
VirtualFree

user32

CharPrevA
MessageBoxA
GetForegroundWindow
LoadStringA
CharNextA
SetWindowLongA
SendMessageA
SendDlgItemMessageA
LoadIconA
GetDlgItem
DestroyWindow
CreateDialogParamA
DispatchMessageA
TranslateMessage
IsDialogMessageA
GetMessageA
ShowWindow
wsprintfA
GetSystemMetrics
PostMessageA
SetWindowPos
UnregisterClassA

oleaut32

VarUI4FromStr
DispGetParam
SafeArrayCreate
SafeArrayPutElement
VariantCopy
VariantClear
SafeArrayGetDim
SafeArrayGetLBound
SafeArrayGetUBound
SafeArrayGetElement
SysAllocString
CreateErrorInfo
SetErrorInfo
LoadTypeLi
LoadRegTypeLi
SafeArrayDestroy
VariantInit
SysStringByteLen
SysAllocStringByteLen
SysStringLen
SysAllocStringLen
SysFreeString

advapi32

RegQueryInfoKeyA
GetUserNameW
RegEnumKeyA
RegDeleteValueA
RegCreateKeyExA
RegEnumKeyExA
GetUserNameA
GetSidSubAuthorityCount
GetSidLengthRequired
GetSidIdentifierAuthority
InitializeSid
GetSidSubAuthority
RegOpenKeyA
RegSetValueExA
RegDeleteKeyA
RegQueryValueExA
RegOpenKeyExA
RegCloseKey
RegCreateKeyA

ole32

CoCreateGuid
CLSIDFromString
CoFreeLibrary
StringFromCLSID
CoCreateInstance
CoRegisterClassObject
CoTaskMemRealloc
CoTaskMemAlloc
CoTaskMemFree
CoRevokeClassObject
CoLoadLibrary
CoFreeUnusedLibraries

version

GetFileVersionInfoSizeA
GetFileVersionInfoA
VerQueryValueA

shell32

SHGetSpecialFolderLocation
SHGetPathFromIDListA
ShellExecuteA

Exports

Exports

DllCanUnloadNow
DllGetClassObject

Sections

.text
Size: 508KB - Virtual size: 507KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 44KB - Virtual size: 50KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 36KB - Virtual size: 35KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 40KB - Virtual size: 39KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
DOTNETFX/SUITE.DLL
.dll windows:4 windows x86 arch:x86

f2edf4c7275b68cd34adfc7a4d76d7a7

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

suite.pdb

Imports

kernel32

GetCommandLineA
GetVersionExA
ExitProcess
GetProcAddress
GetModuleHandleA
TerminateProcess
GetCurrentProcess
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
GetModuleFileNameA
HeapDestroy
HeapCreate
VirtualFree
HeapFree
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetLastError
GetEnvironmentStringsW
HeapAlloc
GetACP
GetOEMCP
GetCPInfo
VirtualAlloc
HeapReAlloc
LoadLibraryA
HeapSize
LCMapStringA
MultiByteToWideChar
LCMapStringW
GetStringTypeA
GetStringTypeW
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
GetLocaleInfoA
VirtualProtect
GetSystemInfo
VirtualQuery
RtlUnwind

Sections

.text
Size: 20KB - Virtual size: 17KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
DOTNETFX/SVRGRMGR.DLL
.dll windows:4 windows x86 arch:x86

fc9b4e5d0809283b5b45126913e88a0f

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

SvrGrMgr.pdb

Imports

kernel32

InterlockedDecrement
lstrcpynA
IsDBCSLeadByte
GetModuleFileNameA
FreeLibrary
SizeofResource
LoadResource
FindResourceA
LoadLibraryExA
GetComputerNameA
CloseHandle
WriteFile
LoadLibraryA
InterlockedIncrement
FlushFileBuffers
SetStdHandle
lstrcmpiA
SetFilePointer
VirtualQuery
GetSystemInfo
VirtualProtect
IsBadCodePtr
IsBadReadPtr
GetStringTypeW
GetStringTypeA
GetCPInfo
GetOEMCP
LCMapStringW
LCMapStringA
HeapSize
IsBadWritePtr
VirtualAlloc
SetUnhandledExceptionFilter
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
VirtualFree
DisableThreadLibraryCalls
lstrlenA
GetLastError
InterlockedExchange
DeleteCriticalSection
InitializeCriticalSection
LeaveCriticalSection
EnterCriticalSection
lstrlenW
WideCharToMultiByte
MultiByteToWideChar
GetVersionExA
GetThreadLocale
HeapCreate
HeapDestroy
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetStartupInfoA
GetFileType
GetStdHandle
SetHandleCount
TlsAlloc
GetLocaleInfoA
GetACP
TlsGetValue
SetLastError
GetCurrentThreadId
TlsSetValue
GetCommandLineA
ExitProcess
RaiseException
HeapAlloc
HeapFree
RtlUnwind
HeapReAlloc
GetSystemTimeAsFileTime
GetProcAddress
GetModuleHandleA
TerminateProcess
GetCurrentProcess
TlsFree

user32

LoadStringA
wsprintfW
CharNextA
RegisterWindowMessageA

oleaut32

SysFreeString
VarUI4FromStr
LoadRegTypeLi
LoadTypeLi
SysStringLen
SysAllocStringLen
SysAllocString
VariantInit
VariantClear
VariantCopy
SafeArrayDestroy
SafeArrayUnaccessData
SafeArrayAccessData
SafeArrayGetLBound
SafeArrayGetUBound
SafeArrayGetElement
SafeArrayCreate

advapi32

RegQueryValueExA
RegEnumKeyExA
RegQueryInfoKeyA
RegSetValueExA
RegOpenKeyExA
RegCreateKeyExA
RegDeleteValueA
RegDeleteKeyA
RegCloseKey

ole32

CoCreateInstance
CoTaskMemRealloc
CoTaskMemFree
CoTaskMemAlloc

activeds

ord3
ord7

Exports

Exports

DllCanUnloadNow
DllGetClassObject
GetClassID
TestObject

Sections

.text
Size: 148KB - Virtual size: 146KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 16KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 16KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
DOTNETFX/TEMPLMGR.DLL
.dll windows:4 windows x86 arch:x86

b41da441625bd4c57fa8421f87437112

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

TemplMgr.pdb

Imports

kernel32

lstrcmpiA
DisableThreadLibraryCalls
InterlockedIncrement
InterlockedDecrement
lstrcpynA
IsDBCSLeadByte
GetModuleFileNameA
FreeLibrary
SizeofResource
LoadResource
FindResourceA
LoadLibraryExA
FlushInstructionCache
GetCurrentProcess
HeapFree
GetProcessHeap
HeapAlloc
GetCurrentThreadId
GetProcAddress
LoadLibraryA
CreateProcessA
CloseHandle
WaitForSingleObject
WriteFile
lstrlenA
FlushFileBuffers
SetStdHandle
SetFilePointer
VirtualQuery
GetSystemInfo
VirtualProtect
IsBadCodePtr
IsBadReadPtr
GetStringTypeW
GetStringTypeA
GetCPInfo
GetOEMCP
LCMapStringW
LCMapStringA
GetStdHandle
SetHandleCount
TlsAlloc
TlsGetValue
SetLastError
TlsFree
TerminateProcess
GetModuleHandleA
GetSystemTimeAsFileTime
HeapReAlloc
RtlUnwind
RaiseException
ExitProcess
GetCommandLineA
TlsSetValue
GetStartupInfoA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
DeleteCriticalSection
GetLastError
InitializeCriticalSection
LeaveCriticalSection
EnterCriticalSection
lstrlenW
WideCharToMultiByte
MultiByteToWideChar
GetVersionExA
GetThreadLocale
GetLocaleInfoA
GetACP
InterlockedExchange
HeapSize
IsBadWritePtr
VirtualAlloc
SetUnhandledExceptionFilter
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
VirtualFree
HeapCreate
HeapDestroy
GetEnvironmentStringsW
GetFileType

user32

RegisterWindowMessageA
CharNextA
LoadStringA
SetWindowLongA
ShowWindow
EnableWindow
GetDlgItemTextA
SetDlgItemTextA
GetDlgItem
LoadCursorA
SendMessageA
SetCursor
GetWindowLongA
SetFocus
SendDlgItemMessageA
GetWindowTextLengthA
PeekMessageA
MsgWaitForMultipleObjects
TranslateMessage
DispatchMessageA
PostThreadMessageA
UnregisterClassA

oleaut32

SysAllocString
CreateErrorInfo
SetErrorInfo
SysStringLen
LoadTypeLi
LoadRegTypeLi
SysAllocStringLen
VarUI4FromStr
SysFreeString

advapi32

RegEnumKeyExA
RegQueryInfoKeyA
RegSetValueExA
RegOpenKeyExA
RegCreateKeyExA
RegCloseKey
RegDeleteValueA
RegDeleteKeyA

ole32

CoCreateGuid
CoCreateInstance
CoTaskMemRealloc
CoTaskMemFree
CLSIDFromString
StringFromCLSID
CoTaskMemAlloc

shell32

ShellExecuteExA

Exports

Exports

DllCanUnloadNow
DllGetClassObject
GetClassID

Sections

.text
Size: 120KB - Virtual size: 116KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 184KB - Virtual size: 183KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
DOTNETFX/UIMGR.DLL
.dll windows:4 windows x86 arch:x86

6e0061f38dc58077d8d48e44484ef45c

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

uimgr.pdb

Imports

kernel32

FlushInstructionCache
GetCurrentProcess
HeapFree
GetProcessHeap
HeapAlloc
GetCurrentThreadId
lstrlenW
Sleep
GetDriveTypeA
MultiByteToWideChar
GetVersion
GetPrivateProfileStringA
SetFileAttributesA
WaitForSingleObject
GetCommandLineA
ResetEvent
SetEvent
lstrlenA
GetModuleFileNameA
FindClose
GetFileAttributesA
FindNextFileA
FindFirstFileA
LoadLibraryA
GetFullPathNameA
CloseHandle
GetExitCodeThread
GetProcAddress
SetErrorMode
GetLastError
CreateThread
CreateEventA
InitializeCriticalSection
DeleteCriticalSection
InterlockedIncrement
InterlockedDecrement
DisableThreadLibraryCalls
FreeLibrary
LoadLibraryExA
lstrcmpiA
lstrcpynA
IsDBCSLeadByte
LocalFree
FormatMessageA
UnmapViewOfFile
GetTempPathA
WriteFile
CreateFileA
GetModuleHandleA
MapViewOfFile
CreateFileMappingA
MulDiv
lstrcmpA
LocalAlloc
GetSystemInfo
FindResourceA
IsBadCodePtr
HeapSize
GetStringTypeW
GetStringTypeA
IsBadWritePtr
VirtualAlloc
SetUnhandledExceptionFilter
LCMapStringW
LCMapStringA
GetCPInfo
GetOEMCP
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
VirtualFree
HeapCreate
HeapDestroy
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetStartupInfoA
GetFileType
GetStdHandle
SetHandleCount
TlsAlloc
TlsGetValue
SetLastError
TlsFree
TerminateProcess
GetSystemTimeAsFileTime
IsBadReadPtr
HeapReAlloc
RaiseException
RtlUnwind
ExitProcess
TlsSetValue
VirtualQuery
SetFilePointer
GetUserDefaultLCID
EnumSystemLocalesA
IsValidLocale
IsValidCodePage
SetStdHandle
FlushFileBuffers
GetLocaleInfoW
LoadResource
LockResource
SizeofResource
LeaveCriticalSection
EnterCriticalSection
WideCharToMultiByte
GetVersionExA
GetThreadLocale
GetLocaleInfoA
GetACP
VirtualProtect
InterlockedExchange

user32

IsWindow
LoadIconA
GetDesktopWindow
GetSystemMetrics
ReleaseDC
GetDC
SetCapture
ReleaseCapture
PostMessageA
PostThreadMessageA
CharNextA
CallWindowProcA
CharPrevA
CreateDialogParamA
DefWindowProcA
SendMessageA
EndPaint
BeginPaint
GetFocus
GetSystemMenu
EnableMenuItem
MsgWaitForMultipleObjects
IsWindowUnicode
GetMessageW
GetMessageA
DispatchMessageW
SetFocus
SetForegroundWindow
EnableWindow
GetWindowTextLengthA
LoadStringA
GetDlgItemTextA
SetDlgItemTextA
ShowWindow
SetCursor
PeekMessageA
TranslateMessage
DispatchMessageA
GetWindowTextA
CreateWindowExA
RegisterClassExA
MessageBoxA
DestroyWindow
LoadCursorA
wsprintfA
GetClassInfoExA
GetParent
GetWindow
GetWindowRect
SystemParametersInfoA
GetClientRect
MapWindowPoints
SetWindowPos
GetDlgItem
SetWindowTextA
GetWindowLongA
SetWindowLongA
EndDialog
DialogBoxParamA
UnregisterClassA

gdi32

CreateFontIndirectA
DeleteObject
GetStockObject
GetTextExtentPoint32A
GetDeviceCaps

comdlg32

GetOpenFileNameA

shell32

ShellExecuteExA
SHGetSpecialFolderLocation
SHGetPathFromIDListA

ole32

CoTaskMemRealloc
CoTaskMemAlloc
CoTaskMemFree
CoInitialize
StringFromCLSID
CoRevokeClassObject
CoLoadLibrary
CoRegisterClassObject
CoCreateInstance
StringFromGUID2
CLSIDFromString
CoUninitialize

oleaut32

SafeArrayGetLBound
SafeArrayGetUBound
SafeArrayGetElement
VarUI4FromStr
SafeArrayDestroy
CreateErrorInfo
SetErrorInfo
SysStringLen
LoadTypeLi
LoadRegTypeLi
SysStringByteLen
SysAllocStringByteLen
SysAllocString
SysAllocStringLen
SysFreeString
SafeArrayGetDim

Exports

Exports

DllCanUnloadNow
DllGetClassObject
GetClassID

Sections

.text
Size: 204KB - Virtual size: 203KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 28KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 20KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
DOTNETFX/VALIDATE.DLL
.dll windows:4 windows x86 arch:x86

dbfb07fc784af9d69ce052ea8eb11085

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

Validate.pdb

Imports

kernel32

lstrcmpiA
InterlockedIncrement
InterlockedDecrement
DisableThreadLibraryCalls
lstrcpynA
IsDBCSLeadByte
FreeLibrary
SizeofResource
LoadResource
FindResourceA
LoadLibraryExA
GetModuleFileNameA
GetProcAddress
LoadLibraryA
CloseHandle
WriteFile
GetFileAttributesA
lstrlenA
DeleteCriticalSection
FlushFileBuffers
SetStdHandle
SetFilePointer
VirtualQuery
GetSystemInfo
VirtualProtect
IsBadCodePtr
IsBadReadPtr
GetStringTypeW
GetStringTypeA
GetCPInfo
GetOEMCP
LCMapStringW
LCMapStringA
HeapSize
IsBadWritePtr
VirtualAlloc
SetUnhandledExceptionFilter
GetCurrentProcessId
GetLastError
InitializeCriticalSection
LeaveCriticalSection
InterlockedExchange
EnterCriticalSection
lstrlenW
WideCharToMultiByte
MultiByteToWideChar
GetVersionExA
GetThreadLocale
GetLocaleInfoA
GetACP
GetTickCount
QueryPerformanceCounter
VirtualFree
HeapCreate
HeapDestroy
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetStartupInfoA
GetFileType
GetStdHandle
SetHandleCount
TlsAlloc
GetCurrentThreadId
TlsSetValue
GetCommandLineA
ExitProcess
RaiseException
HeapAlloc
HeapFree
RtlUnwind
HeapReAlloc
GetSystemTimeAsFileTime
GetModuleHandleA
TerminateProcess
GetCurrentProcess
TlsFree
SetLastError
TlsGetValue

user32

LoadStringA
CharNextA
RegisterWindowMessageA

oleaut32

SysFreeString
VarUI4FromStr
SysAllocStringLen
LoadRegTypeLi
LoadTypeLi
SysStringLen
SetErrorInfo
CreateErrorInfo
SysAllocString

advapi32

RegCloseKey
RegEnumKeyExA
RegQueryInfoKeyA
RegSetValueExA
RegOpenKeyExA
RegCreateKeyExA
RegDeleteValueA
RegDeleteKeyA

ole32

StringFromCLSID
CoCreateInstance
CoTaskMemRealloc
CoTaskMemFree
CoTaskMemAlloc

Exports

Exports

DllCanUnloadNow
DllGetClassObject
GetClassID

Sections

.text
Size: 100KB - Virtual size: 96KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 12KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
DOTNETFX/VS_SETUP.PDI
DOTNETFX/XPSPREQS.DLL
.dll windows:4 windows x86 arch:x86

ea7039ed88fff1eb9a919ce8c4c04b4f

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

XPSPReqs.pdb

Imports

kernel32

CloseHandle
UnmapViewOfFile
GetFileAttributesA
GetTempPathA
GetModuleHandleA
MapViewOfFile
CreateFileMappingA
MulDiv
LocalFree
LocalAlloc
GetCurrentProcess
GetCurrentThread
SetLastError
FreeLibrary
ReadFile
SetEndOfFile
FlushFileBuffers
LoadLibraryA
GetProcAddress
GetPrivateProfileSectionA
IsDBCSLeadByte
lstrcpynA
lstrcmpiA
LoadLibraryExA
FindResourceA
LoadResource
SizeofResource
GetLastError
InterlockedDecrement
InterlockedIncrement
DisableThreadLibraryCalls
DeleteCriticalSection
InitializeCriticalSection
GetSystemDirectoryA
GetDiskFreeSpaceExA
GetCommandLineA
CreateFileA
WriteFile
ExitProcess
lstrlenW
LeaveCriticalSection
EnterCriticalSection
GetModuleFileNameA
lstrlenA
MultiByteToWideChar
GetPrivateProfileStringA
WideCharToMultiByte
GetVersionExA
GetThreadLocale
GetLocaleInfoA
InterlockedExchange
GetACP
SetStdHandle
SetFilePointer
VirtualQuery
GetSystemInfo
VirtualProtect
IsBadCodePtr
IsBadReadPtr
GetStringTypeW
GetStringTypeA
IsBadWritePtr
VirtualAlloc
HeapSize
SetUnhandledExceptionFilter
LCMapStringW
LCMapStringA
GetCPInfo
GetOEMCP
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
VirtualFree
HeapCreate
HeapDestroy
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetStartupInfoA
GetFileType
GetStdHandle
SetHandleCount
TlsAlloc
GetCurrentThreadId
TlsSetValue
RtlUnwind
GetDriveTypeA
GetCurrentDirectoryA
GetFullPathNameA
RaiseException
HeapFree
HeapReAlloc
HeapAlloc
GetLocalTime
GetSystemTimeAsFileTime
TerminateProcess
TlsFree
TlsGetValue

user32

CharNextA
LoadStringA
wsprintfA
GetDC
GetSystemMetrics

gdi32

CreateFontIndirectA
DeleteObject
GetDeviceCaps

advapi32

OpenThreadToken
ImpersonateSelf
OpenProcessToken
AllocateAndInitializeSid
InitializeSecurityDescriptor
GetLengthSid
InitializeAcl
AddAccessAllowedAce
SetSecurityDescriptorDacl
SetSecurityDescriptorGroup
SetSecurityDescriptorOwner
IsValidSecurityDescriptor
AccessCheck
RevertToSelf
FreeSid
RegOpenKeyA
RegQueryValueExA
RegSetValueExA
RegEnumKeyExA
RegQueryInfoKeyA
RegOpenKeyExA
RegCloseKey
RegDeleteValueA
RegCreateKeyExA
RegDeleteKeyA

ole32

CoTaskMemFree
StringFromCLSID
CoCreateInstance
CoTaskMemAlloc
CoTaskMemRealloc
CoUninitialize
CoInitialize
CLSIDFromString

oleaut32

SysFreeString
LoadRegTypeLi
LoadTypeLi
SysAllocString
VarUI4FromStr
CreateErrorInfo
SetErrorInfo
SysAllocStringLen
SysStringLen

version

GetFileVersionInfoSizeA
GetFileVersionInfoA
VerQueryValueA

Exports

Exports

DllCanUnloadNow
DllGetClassObject
GetClassID

Sections

.text
Size: 156KB - Virtual size: 155KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 16KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
DOTNETFX/XPSPSCEN.DLL
.dll windows:4 windows x86 arch:x86

99769cbaa647887af4dd61441b941342

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

XPSPscen.pdb

Imports

kernel32

SizeofResource
LoadResource
FindResourceA
LoadLibraryExA
LockResource
GetCommandLineA
GetPrivateProfileStringA
GetPrivateProfileSectionA
GetSystemDirectoryA
GetProcAddress
LoadLibraryA
CloseHandle
UnmapViewOfFile
GetFileAttributesA
GetTempPathA
WriteFile
CreateFileA
GetModuleHandleA
FreeLibrary
CreateFileMappingA
MulDiv
LocalAlloc
GetLocaleInfoW
ReadFile
SetEndOfFile
FlushFileBuffers
SetStdHandle
IsValidCodePage
IsValidLocale
GetModuleFileNameA
IsDBCSLeadByte
lstrcpynA
InterlockedDecrement
InterlockedIncrement
DisableThreadLibraryCalls
lstrcmpiA
lstrlenA
GetLastError
InitializeCriticalSection
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
lstrlenW
WideCharToMultiByte
MultiByteToWideChar
GetVersionExA
GetThreadLocale
GetLocaleInfoA
GetACP
MapViewOfFile
InterlockedExchange
EnumSystemLocalesA
GetUserDefaultLCID
VirtualQuery
GetSystemInfo
VirtualProtect
SetFilePointer
IsBadCodePtr
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
GetCPInfo
GetOEMCP
HeapSize
IsBadWritePtr
VirtualAlloc
SetUnhandledExceptionFilter
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
VirtualFree
HeapCreate
HeapDestroy
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetStartupInfoA
GetFileType
GetStdHandle
SetHandleCount
TlsAlloc
GetCurrentThreadId
TlsSetValue
ExitProcess
RtlUnwind
RaiseException
HeapAlloc
HeapFree
HeapReAlloc
IsBadReadPtr
GetLocalTime
GetSystemTimeAsFileTime
TerminateProcess
GetCurrentProcess
TlsFree
SetLastError
TlsGetValue

user32

GetDC
LoadStringA
wsprintfA
GetSystemMetrics
CharNextA

gdi32

CreateFontIndirectA
DeleteObject
GetDeviceCaps

advapi32

RegQueryValueExA
RegEnumKeyExA
RegQueryInfoKeyA
RegSetValueExA
RegOpenKeyExA
RegCreateKeyExA
RegCloseKey
RegDeleteValueA
RegDeleteKeyA
RegOpenKeyA

ole32

CoTaskMemAlloc
CoTaskMemFree
CoTaskMemRealloc
CoCreateInstance
StringFromGUID2
CoUninitialize
CLSIDFromString
CoInitialize
StringFromCLSID

oleaut32

LoadRegTypeLi
SysFreeString
VarUI4FromStr
SysAllocStringLen
SafeArrayGetDim
SafeArrayGetLBound
SafeArrayGetUBound
SafeArrayGetElement
SafeArrayCreate
SafeArrayPutElement
SysAllocString
VariantCopy
VariantClear
SafeArrayDestroy
VariantInit
CreateErrorInfo
SetErrorInfo
SysStringLen
LoadTypeLi

version

GetFileVersionInfoA
GetFileVersionInfoSizeA
VerQueryValueA

Exports

Exports

DllCanUnloadNow
DllGetClassObject
GetClassID

Sections

.text
Size: 236KB - Virtual size: 233KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 20KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
DOTNETFX/XPSPUI.DLL
.dll windows:4 windows x86 arch:x86

4f3075837ce99fdc60c2112fb86dbc8d

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

XPSPUI.pdb

Imports

kernel32

GetFileSize
LoadLibraryA
DisableThreadLibraryCalls
InterlockedIncrement
InterlockedDecrement
LoadLibraryExA
lstrcmpiA
lstrcpynA
IsDBCSLeadByte
GetPrivateProfileSectionA
GetProcAddress
SetFilePointer
UnmapViewOfFile
GetFileAttributesA
GetTempPathA
WriteFile
GetModuleHandleA
MapViewOfFile
CreateFileMappingA
LocalFree
FormatMessageA
LocalAlloc
GlobalReAlloc
GetLocaleInfoW
SetEndOfFile
FlushFileBuffers
SetStdHandle
IsValidCodePage
IsValidLocale
EnumSystemLocalesA
ReadFile
VirtualQuery
GetSystemInfo
VirtualProtect
IsBadCodePtr
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
HeapSize
IsBadWritePtr
VirtualAlloc
SetUnhandledExceptionFilter
GetCPInfo
GetOEMCP
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
VirtualFree
HeapCreate
HeapDestroy
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetStartupInfoA
GetFileType
GetStdHandle
SetHandleCount
TlsAlloc
TlsGetValue
TlsFree
TerminateProcess
GetSystemTimeAsFileTime
HeapReAlloc
IsBadReadPtr
RaiseException
RtlUnwind
ExitProcess
GetCommandLineA
TlsSetValue
CreateFileA
CloseHandle
FreeLibrary
InitializeCriticalSection
DeleteCriticalSection
GetLocalTime
SystemTimeToFileTime
GetSystemDirectoryA
GetDiskFreeSpaceExA
InterlockedExchange
GetPrivateProfileStringA
GlobalHandle
GlobalFree
GetCurrentThreadId
lstrcmpA
MulDiv
GetLastError
GlobalAlloc
GlobalLock
GlobalUnlock
lstrlenW
LeaveCriticalSection
EnterCriticalSection
GetModuleFileNameA
SetLastError
lstrlenA
HeapAlloc
GetProcessHeap
HeapFree
GetCurrentProcess
FlushInstructionCache
FindResourceA
LoadResource
LockResource
SizeofResource
WideCharToMultiByte
MultiByteToWideChar
GetVersionExA
GetThreadLocale
GetLocaleInfoA
GetACP
GetUserDefaultLCID

user32

SetActiveWindow
GetDlgItem
SetDlgItemTextA
ScreenToClient
CreateWindowExA
SendMessageA
GetWindowLongA
SetWindowLongA
PostQuitMessage
CallWindowProcA
EnableWindow
MoveWindow
SetFocus
GetClientRect
GetWindowRect
CreateCaret
GetSystemMetrics
DefWindowProcA
IsDialogMessageA
DestroyWindow
SendDlgItemMessageA
IsWindowVisible
SetScrollPos
SetScrollInfo
KillTimer
SetTimer
MapWindowPoints
PostMessageA
CreateDialogIndirectParamA
wsprintfA
CreateAcceleratorTableA
CharNextA
GetParent
GetClassNameA
RedrawWindow
IsWindow
GetFocus
IsChild
BeginPaint
EndPaint
GetSysColor
GetDesktopWindow
InvalidateRgn
FillRect
SetCapture
ReleaseCapture
DestroyAcceleratorTable
GetWindowTextLengthA
GetWindowTextA
SetWindowTextA
RegisterWindowMessageA
GetClassInfoExA
LoadCursorA
RegisterClassExA
GetWindow
MapDialogRect
SetWindowContextHelpId
SetWindowPos
LoadStringA
GetDC
ReleaseDC
InvalidateRect
ShowWindow
UnregisterClassA

gdi32

GetPaletteEntries
CreateFontIndirectA
CreateDIBitmap
SetBkMode
GetStockObject
GetObjectA
GetDeviceCaps
CreatePalette
CreateCompatibleDC
CreateCompatibleBitmap
DeleteDC
CreateSolidBrush
SelectObject
PatBlt
CreateBrushIndirect
SelectPalette
RealizePalette
SetDIBitsToDevice
BitBlt
SetTextColor
DeleteObject

comctl32

InitCommonControlsEx

advapi32

RegOpenKeyExA
RegCloseKey
RegDeleteValueA
RegCreateKeyExA
RegDeleteKeyA
RegOpenKeyA
RegQueryValueExA
RegSetValueExA
RegEnumKeyExA
RegQueryInfoKeyA

shell32

ShellExecuteA
ShellExecuteExA

ole32

StringFromCLSID
CoInitialize
CoUninitialize
CoTaskMemRealloc
CoTaskMemFree
CLSIDFromString
CLSIDFromProgID
CoGetClassObject
OleLockRunning
CoTaskMemAlloc
StringFromGUID2
OleUninitialize
OleInitialize
CreateStreamOnHGlobal
CoCreateInstance

oleaut32

SafeArrayGetLBound
SafeArrayGetUBound
SafeArrayGetElement
VarUI4FromStr
SafeArrayDestroy
VariantInit
VariantClear
OleCreateFontIndirect
SysStringByteLen
CreateErrorInfo
SetErrorInfo
SysStringLen
LoadTypeLi
LoadRegTypeLi
SysAllocString
SysAllocStringLen
SysFreeString
SafeArrayGetDim

version

GetFileVersionInfoSizeA
GetFileVersionInfoA
VerQueryValueA

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllSetInstallMode

Sections

.text
Size: 328KB - Virtual size: 327KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 372KB - Virtual size: 370KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 36KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/12520437.CP_
.cab
12520437.cpx
I386/12520850.CP_
.cab
12520850.cpx
I386/1394.IN_
.cab
1394.inf
I386/1394BUS.SY_
.cab
1394bus.sys
.sys windows:5 windows x86 arch:x86

7965ad1d54d650bb26d55ea5b25d6945

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_WDM_DRIVER

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

1394bus.pdb

Imports

ntoskrnl.exe

ExFreePool
ExAllocatePoolWithTag
IoWMIRegistrationControl
KeInitializeSpinLock
IofCallDriver
IoBuildPartialMdl
IoAllocateMdl
IoFreeMdl
ZwCreateKey
ZwClose
IoOpenDeviceRegistryKey
RtlAnsiStringToUnicodeString
RtlInitAnsiString
sprintf
RtlAppendUnicodeToString
ZwDeleteKey
ZwOpenKey
IoFreeIrp
IoAllocateIrp
memmove
InterlockedIncrement
IoDeleteDevice
RtlInitUnicodeString
IoCreateDevice
RtlCompareUnicodeString
ZwEnumerateKey
MmMapLockedPagesSpecifyCache
IoInvalidateDeviceRelations
KeSetEvent
KeInsertQueueDpc
ExfInterlockedInsertTailList
KefReleaseSpinLockFromDpcLevel
KefAcquireSpinLockAtDpcLevel
InterlockedDecrement
ExfInterlockedRemoveHeadList
MmBuildMdlForNonPagedPool
MmCreateMdl
KeInitializeDpc
InterlockedPopEntrySList
InterlockedPushEntrySList
RtlAppendUnicodeStringToString
PoSetPowerState
PoStartNextPowerIrp
KeWaitForSingleObject
KeInitializeEvent
ZwQueryValueKey
swprintf
IoGetDeviceProperty
IoInitializeIrp
RtlFreeUnicodeString
ExQueueWorkItem
ObfDereferenceObject
ObfReferenceObject
RtlCopyUnicodeString
RtlIntegerToUnicodeString
ExDeleteNPagedLookasideList
KeCancelTimer
KeSetTimer
ExInitializeNPagedLookasideList
KeInitializeTimer
KeTickCount
KeBugCheckEx
IofCompleteRequest
ProbeForRead
ExAllocatePoolWithQuotaTag
RtlUnwind

hal

KeStallExecutionProcessor
KfAcquireSpinLock
ExReleaseFastMutex
KfReleaseSpinLock
ExAcquireFastMutex

wmilib.sys

WmiCompleteRequest
WmiSystemControl
WmiFireEvent

Exports

Exports

Bus1394RegisterPortDriver
DllInitialize
DllUnload

Sections

.text
Size: 31KB - Virtual size: 31KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 768B - Virtual size: 760B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 256B - Virtual size: 236B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

PAGE
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.edata
Size: 256B - Virtual size: 132B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

PAGECONS
Size: 128B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

INIT
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/1394VDBG.IN_
.cab
1394vdbg.inf
I386/1394VDBG.SY_
.cab
1394vdbg.sys
.sys windows:5 windows x86 arch:x86

7511116f68dde23b7c00f0eb7df9285f

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_WDM_DRIVER

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

1394VDBG.pdb

Imports

ntoskrnl.exe

KeSetEvent
IoFreeMdl
KefAcquireSpinLockAtDpcLevel
IoAllocateMdl
MmMapLockedPages
KefReleaseSpinLockFromDpcLevel
IofCompleteRequest
KeWaitForSingleObject
KeInitializeEvent
MmBuildMdlForNonPagedPool
IoBuildPartialMdl
InterlockedPopEntrySList
InterlockedPushEntrySList
IoAttachDeviceToDeviceStack
KeInitializeSpinLock
IoDeleteDevice
IoRegisterDeviceInterface
IoCreateDevice
IoSetDeviceInterfaceState
RtlFreeUnicodeString
IoFreeIrp
IoAllocateIrp
ExFreePool
ExAllocatePoolWithTag
ExInitializeNPagedLookasideList
IoCreateUnprotectedSymbolicLink
RtlInitUnicodeString
swprintf
ExDeleteNPagedLookasideList
IoDeleteSymbolicLink
IoDetachDevice
PoCallDriver
PoStartNextPowerIrp
IofCallDriver
RtlUnwind

hal

KfAcquireSpinLock
KfReleaseSpinLock
KeGetCurrentIrql
ExAcquireFastMutex
ExReleaseFastMutex

Sections

.text
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 384B - Virtual size: 273B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

INIT
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 1024B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 426B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/3DFXVS2K.IN_
.cab
3dfxvs2k.inf
I386/3DGARRO.CU_
.cab
I386/3DGMOVE.CU_
.cab
I386/3DGNESW.CU_
.cab
I386/3DGNO.CU_
.cab
I386/3DGNS.CU_
.cab
I386/3DGNWSE.CU_
.cab
I386/3DGWE.CU_
.cab
I386/3DSMOVE.CU_
.cab
I386/3DSNS.CU_
.cab
I386/3DSNWSE.CU_
.cab
I386/3DWARRO.CU_
.cab
I386/3DWMOVE.CU_
.cab
I386/3DWNESW.CU_
.cab
I386/3DWNO.CU_
.cab
I386/3DWNS.CU_
.cab
I386/3DWNWSE.CU_
.cab
I386/3DWWE.CU_
.cab
I386/61883.IN_
.cab
I386/6TO4SVC.DL_
.cab
I386/8514FIX.FO_
.cab
I386/8514FIXE.FO_
.cab
I386/8514FIXG.FO_
.cab
I386/8514FIXR.FO_
.cab
I386/8514FIXT.FO_
.cab
I386/8514OEM.FO_
.cab
I386/8514OEME.FO_
.cab
I386/8514OEMG.FO_
.cab
I386/8514OEMR.FO_
.cab
I386/8514OEMT.FO_
.cab
I386/8514SYS.FO_
.cab
I386/8514SYSE.FO_
.cab
I386/8514SYSG.FO_
.cab
I386/8514SYSR.FO_
.cab
I386/8514SYST.FO_
.cab
I386/85775.FO_
.cab
I386/85855.FO_
.cab
I386/85F1255.FO_
.cab
I386/85F1256.FO_
.cab
I386/85F1257.FO_
.cab
I386/85F874.FO_
.cab
I386/85S1255.FO_
.cab
I386/85S1256.FO_
.cab
I386/85S1257.FO_
.cab
I386/85S874.FO_
.cab
I386/AAAAMON.DL_
.cab
I386/AACLIENT.DL_
.cab
I386/AACLIENT.MU_
.cab
I386/ABP480N5.SY_
.cab
I386/ACADPROC.DL_
.cab
I386/ACCESS.CH_
.cab
I386/ACCESS.CP_
.cab
I386/ACCESS.HL_
.cab
I386/ACCESSIB.CH_
.cab
I386/ACCESSOR.IN_
.cab
I386/ACCSERV.MI_
.cab
I386/ACCTRES.DL_
.cab
I386/ACCWIZ.EX_
.cab
I386/ACC_DIS.CH_
.cab
I386/ACELPDEC.AX_
.cab
I386/ACERSCAN.IN_
.cab
I386/ACGENRAL.DL_
.cab
I386/ACLAYERS.DL_
.cab
I386/ACLEDIT.DL_
.cab
I386/ACLUA.DL_
.cab
I386/ACLUI.CH_
.cab
I386/ACLUI.DL_
.cab
I386/ACLUI.HL_
.cab
I386/ACPI.IN_
.cab
I386/ACPI.SY_
.cab
I386/ACPIEC.SY_
.cab
I386/ACSPECFC.DL_
.cab
I386/ACTC094.IN_
.cab
I386/ACTCONN.HT_
.cab
I386/ACTDONE.HT_
.cab
I386/ACTERROR.HT_
.cab
I386/ACTIV.HT_
.cab
I386/ACTIVATE.HT_
.cab
I386/ACTIVEDS.DL_
.cab
I386/ACTIVEDS.TL_
.cab
I386/ACTIVERR.HT_
.cab
I386/ACTIVSVC.HT_
.cab
I386/ACTLAN.HT_
.cab
I386/ACTMOVIE.EX_
.cab
I386/ACTSHELL.HT_
.cab
I386/ACTXPRXY.DL_
.cab
I386/ACT_PLCY.HT_
.cab
I386/ACT_RS.PN_
.cab
I386/ACXTRNAL.DL_
.cab
I386/ADCJAVAS.IN_
.cab
I386/ADCVBS.IN_
.cab
I386/ADDREMOV.CH_
.cab
I386/ADE.HL_
.cab
I386/ADESKERR.HT_
.cab
I386/ADMEXS.DL_
.cab
I386/ADMPARSE.DL_
.cab
I386/ADMTOOLW.CH_
.cab
I386/ADMWPROX.DL_
.cab
I386/ADMXPROX.DL_
.cab
I386/ADM_MULT.IN_
.cab
I386/ADM_PORT.IN_
.cab
I386/ADOJAVAS.IN_
.cab
I386/ADOVBS.IN_
.cab
I386/ADPROP.HL_
.cab
I386/ADPTIF.DL_
.cab
I386/ADPU160M.SY_
.cab
I386/ADRDYREG.HT_
.cab
I386/ADROT.DL_
.cab
I386/ADSIIS51.DL_
.cab
I386/ADSLDP.DL_
.cab
I386/ADSLDPC.DL_
.cab
I386/ADSMSEXT.DL_
.cab
I386/ADSNDS.DL_
.cab
I386/ADSNT.DL_
.cab
I386/ADSNW.DL_
.cab
I386/ADSUTIL.VB_
.cab
I386/ADVAPI32.DL_
.cab
I386/ADVPACK.DL_
.cab
I386/AFD.SY_
.cab
I386/AGENTANM.DL_
.cab
I386/AGENTCTL.DL_
.cab
I386/AGENTDP2.DL_
.cab
I386/AGENTDPV.DL_
.cab
I386/AGENTMPX.DL_
.cab
I386/AGENTPSH.DL_
.cab
I386/AGENTSR.DL_
.cab
I386/AGENTSVR.EX_
.cab
I386/AGP.IN_
.cab
I386/AGT0401.DL_
.cab
I386/AGT0401.HL_
.cab
I386/AGT0404.DL_
.cab
I386/AGT0404.HL_
.cab
I386/AGT0405.DL_
.cab
I386/AGT0405.HL_
.cab
I386/AGT0406.DL_
.cab
I386/AGT0406.HL_
.cab
I386/AGT0407.DL_
.cab
I386/AGT0407.HL_
.cab
I386/AGT0408.DL_
.cab
I386/AGT0408.HL_
.cab
I386/AGT0409.DL_
.cab
I386/AGT0409.HL_
.cab
I386/AGT040B.DL_
.cab
I386/AGT040B.HL_
.cab
I386/AGT040C.DL_
.cab
I386/AGT040C.HL_
.cab
I386/AGT040D.DL_
.cab
I386/AGT040D.HL_
.cab
I386/AGT040E.DL_
.cab
I386/AGT040E.HL_
.cab
I386/AGT0410.DL_
.cab
I386/AGT0410.HL_
.cab
I386/AGT0411.DL_
.cab
I386/AGT0411.HL_
.cab
I386/AGT0412.DL_
.cab
I386/AGT0412.HL_
.cab
I386/AGT0413.DL_
.cab
I386/AGT0413.HL_
.cab
I386/AGT0414.DL_
.cab
I386/AGT0414.HL_
.cab
I386/AGT0415.DL_
.cab
I386/AGT0415.HL_
.cab
I386/AGT0416.DL_
.cab
I386/AGT0416.HL_
.cab
I386/AGT0419.DL_
.cab
I386/AGT0419.HL_
.cab
I386/AGT041D.DL_
.cab
I386/AGT041D.HL_
.cab
I386/AGT041F.DL_
.cab
I386/AGT041F.HL_
.cab
I386/AGT0804.DL_
.cab
I386/AGT0804.HL_
.cab
I386/AGT0816.DL_
.cab
I386/AGT0816.HL_
.cab
I386/AGT0C0A.DL_
.cab
I386/AGT0C0A.HL_
.cab
I386/AGTCORE.JS_
.cab
I386/AGTCTL15.TL_
.cab
I386/AGTINST.IN_
.cab
I386/AGTINTL.DL_
.cab
I386/AGTSCRP2.JS_
.cab
I386/AGTSCRPT.JS_
.cab
I386/AHA154X.SY_
.cab
I386/AHRONBD.TT_
.cab
I386/AHUI.EX_
.cab
I386/AIC78U2.SY_
.cab
I386/AIC78XX.SY_
.cab
I386/AIRPLANE.BM_
.cab
I386/ALEABANR.GI_
.cab
I386/ALG.EX_
.cab
I386/ALIIDE.SY_
.cab
I386/ALRSVC.DL_
.cab
I386/AMAIZRUL.GI_
.cab
I386/AMIPRO.SA_
.cab
I386/AMSINT.SY_
.cab
I386/AMSTREAM.DL_
.cab
I386/ANABNR2.GI_
.cab
I386/ANDLSO.TT_
.cab
I386/ANGSA.TT_
.cab
I386/ANGSAB.TT_
.cab
I386/ANGSAI.TT_
.cab
I386/ANGSAU.TT_
.cab
I386/ANGSAUB.TT_
.cab
I386/ANGSAUI.TT_
.cab
I386/ANGSAUZ.TT_
.cab
I386/ANGSAZ.TT_
.cab
I386/ANSI.SY_
.cab
I386/APCOMPAT.IN_
.cab
I386/APCUPS.DL_
.cab
I386/APOLICY.HT_
.cab
I386/APP775.FO_
.cab
I386/APP850.FO_
.cab
I386/APP852.FO_
.cab
I386/APP855.FO_
.cab
I386/APP857.FO_
.cab
I386/APP866.FO_
.cab
I386/APPCONF.DL_
.cab
I386/APPEND.EX_
.cab
I386/APPHELP.DL_
.cab
I386/APPHELP.SD_
.cab
I386/APPH_SP.SD_
.cab
I386/APPMGMTS.DL_
.cab
I386/APPMGR.DL_
.cab
I386/APPMIG.IN_
.cab
I386/APPS.CH_
.cab
I386/APPS.IN_
.cab
I386/APPSTAR2.AN_
.cab
I386/APPSTAR3.AN_
.cab
I386/APPSTART.AN_
.cab
I386/APPS_SP.CH_
.cab
I386/APPWIZ.CP_
.cab
I386/APRVCYMS.HT_
.cab
I386/AQUEUE.DL_
.cab
I386/ARCHVAPP.IN_
.cab
I386/AREG1.HT_
.cab
I386/AREGDIAL.HT_
.cab
I386/AREGDONE.HT_
.cab
I386/AREGSTY2.CS_
.cab
I386/AREGSTYL.CS_
.cab
I386/ARIAL.TT_
.cab
I386/ARIALBD.TT_
.cab
I386/ARIALBI.TT_
.cab
I386/ARIALI.TT_
.cab
I386/ARIBLK.TT_
.cab
I386/ARP.EX_
.cab
I386/ARROW.GI_
.cab
I386/ARROW_I.CU_
.cab
I386/ARROW_IL.CU_
.cab
I386/ARROW_IM.CU_
.cab
I386/ARROW_L.CU_
.cab
I386/ARROW_M.CU_
.cab
I386/ARROW_R.CU_
.cab
I386/ARROW_RL.CU_
.cab
I386/ARROW_RM.CU_
.cab
I386/ARTICLE.CH_
.cab
I386/ARTRBDO.TT_
.cab
I386/ARTRO.TT_
.cab
I386/ASC.SY_
.cab
I386/ASC3350P.SY_
.cab
I386/ASC3550.SY_
.cab
I386/ASCENT.JP_
.cab
I386/ASCTRLS.OC_
.cab
I386/ASFERROR.DL_
.cab
I386/ASMS/1/DEFAULT/DEFAULT.CA_
.cab
I386/ASMS/1/DEFAULT/DEFAULT.MAN
.xml
I386/ASMS/10/MSFT/WINDOWS/GDIPLUS/GDIPLUS.CA_
.cab
I386/ASMS/10/MSFT/WINDOWS/GDIPLUS/GDIPLUS.DL_
.cab
I386/ASMS/10/MSFT/WINDOWS/GDIPLUS/GDIPLUS.MAN
.xml
I386/ASMS/10/POLICY/MSFT/WINDOWS/GDIPLUS/GDIPLUS.CA_
.cab
I386/ASMS/10/POLICY/MSFT/WINDOWS/GDIPLUS/GDIPLUS.MAN
.xml
I386/ASMS/1000/MSFT/WINDOWS/GDIPLUS/GDIPLUS.CAT
I386/ASMS/1000/MSFT/WINDOWS/GDIPLUS/GDIPLUS.DLL
.dll windows:5 windows x86 arch:x86

68a82f89c3fde2fdb45bbeddb19a9697

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

microsoftwindowsgdiplus-1.0.2600.5512-gdiplus.pdb

Imports

advapi32

RegOpenKeyW
RegOpenKeyA
RegCloseKey
RegEnumValueW
RegQueryInfoKeyA
RegOpenKeyExA
RegOpenKeyExW
RegQueryInfoKeyW
RegQueryValueExA
RegQueryValueExW
RegEnumKeyExA
RegEnumKeyExW
RegCreateKeyExA
RegSetValueExW
RegSetValueExA
RegDeleteKeyW
RegDeleteKeyA
RegCreateKeyExW
RegEnumValueA

gdi32

GetDIBColorTable
FillRgn
SetMiterLimit
CreateSolidBrush
StrokePath
GetGraphicsMode
SetPolyFillMode
FillPath
StrokeAndFillPath
PolyPolyline
GetNearestPaletteIndex
ExtTextOutA
GetTextCharsetInfo
TranslateCharsetInfo
PolylineTo
Polyline
LineTo
GetCurrentPositionEx
ArcTo
SetArcDirection
SelectClipPath
GetPath
CloseFigure
AbortPath
FlattenPath
WidenPath
BeginPath
Ellipse
AngleArc
PolyBezierTo
PolyBezier
RoundRect
PolyDraw
Pie
Chord
Arc
EndPath
OffsetClipRgn
GetRgnBox
CombineRgn
SetPaletteEntries
ResizePalette
ExcludeClipRect
MoveToEx
PlayEnhMetaFile
GetWinMetaFileBits
PlgBlt
BitBlt
OffsetViewportOrgEx
StretchBlt
ScaleViewportExtEx
ScaleWindowExtEx
CombineTransform
SetMapperFlags
CreatePen
CreateDIBitmap
CreatePatternBrush
ExtSelectClipRgn
GetBkMode
GetTextAlign
ModifyWorldTransform
ExtCreateRegion
CreateCompatibleBitmap
GetNearestColor
SetStretchBltMode
StretchDIBits
SetTextAlign
SetTextJustification
PolyPolygon
PlayMetaFileRecord
ExtCreatePen
GetWorldTransform
GetROP2
SetROP2
Rectangle
Polygon
IntersectClipRect
SetBrushOrgEx
GetClipRgn
SelectClipRgn
GetBkColor
GetTextColor
CreatePenIndirect
GetObjectW
DPtoLP
CreateDIBPatternBrushPt
ExtTextOutW
SetBitmapBits
SetDIBColorTable
CreateEnhMetaFileW
GdiComment
GetMetaFileW
GetMetaFileA
SaveDC
SetWindowOrgEx
SetViewportOrgEx
SetGraphicsMode
SetWorldTransform
GetEnhMetaFileW
GetEnhMetaFileA
GetEnhMetaFileBits
CopyEnhMetaFileA
CopyMetaFileA
DeleteMetaFile
GetEnhMetaFileHeader
SetMetaFileBitsEx
SetEnhMetaFileBits
CreateEnhMetaFileA
SetMapMode
SetViewportExtEx
SetWindowExtEx
PlayMetaFile
CloseEnhMetaFile
DeleteEnhMetaFile
SetMetaRgn
GetMetaFileBitsEx
EnumMetaFile
EnumEnhMetaFile
PlayEnhMetaFileRecord
RestoreDC
GetStockObject
CreateBitmap
SetTextColor
SetBkColor
SetBkMode
CreatePalette
GetSystemPaletteEntries
GetSystemPaletteUse
GetDeviceCaps
ExtEscape
GetObjectType
GetPixel
DeleteObject
SelectPalette
GetTextFaceA
GetTextMetricsA
GetTextFaceW
GetTextMetricsW
EnumFontFamiliesExA
EnumFontFamiliesExW
SelectObject
CreateFontIndirectW
CreateFontIndirectA
GetRegionData
DeleteDC
CreateDCA
CreateICA
CreateRectRgn
GetRandomRgn
LPtoDP
GetWindowExtEx
GetViewportExtEx
GetWindowOrgEx
GetViewportOrgEx
GetMapMode
SetICMMode
Escape
GetDCOrgEx
GetObjectA
GetCurrentObject
GetDIBits
CreateCompatibleDC
CreateDIBSection
RealizePalette
GetPaletteEntries
GdiFlush
PatBlt
CreateBrushIndirect
SetDIBits

kernel32

CreateSemaphoreA
InterlockedDecrement
EnterCriticalSection
LeaveCriticalSection
HeapAlloc
InterlockedExchange
GetCurrentThreadId
InitializeCriticalSection
DeleteCriticalSection
DisableThreadLibraryCalls
QueryPerformanceCounter
GetTickCount
RaiseException
GetCurrentProcessId
GetSystemTimeAsFileTime
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
Sleep
CloseHandle
WriteFile
CreateFileA
WaitForSingleObject
SetEvent
lstrcmpiA
CreateThread
CreateEventA
WideCharToMultiByte
MultiByteToWideChar
VirtualProtect
GetLocaleInfoA
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
GetCPInfo
VirtualQuery
RtlUnwind
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetStartupInfoA
GetFileType
GetStdHandle
SetHandleCount
ExitProcess
GetCommandLineA
GetSystemInfo
HeapReAlloc
HeapFree
VirtualAlloc
IsValidLocale
ConvertDefaultLocale
GetLocaleInfoW
GetModuleFileNameW
GetModuleFileNameA
FindResourceA
LoadResource
LockResource
GetProfileIntA
GetProfileStringA
lstrcmpiW
IsDBCSLeadByteEx
LocalReAlloc
MulDiv
SetLastError
LocalAlloc
LocalFree
GetFileTime
SearchPathW
SearchPathA
GetOEMCP
InterlockedIncrement
LoadLibraryW
GetSystemDirectoryA
CreateFileMappingW
ReleaseSemaphore
GetProfileSectionA
CreateFileW
SetEndOfFile
SetFilePointer
ReadFile
UnlockFile
GetFileInformationByHandle
LockFile
FlushFileBuffers
GetLastError
VirtualFree
GlobalAlloc
GetFileSize
CreateFileMappingA
MapViewOfFile
UnmapViewOfFile
GlobalLock
GlobalSize
GlobalUnlock
GlobalFree
HeapCreate
GetModuleHandleA
GetSystemDirectoryW
GetWindowsDirectoryA
FreeLibrary
HeapDestroy
LoadLibraryA
GetVersionExA
GetACP
GetModuleHandleW
GetProcAddress
GetSystemDefaultLCID

ole32

CoTaskMemAlloc
CoTaskMemFree
CreateStreamOnHGlobal

user32

MsgWaitForMultipleObjects
LoadBitmapW
LoadBitmapA
wsprintfW
ReleaseDC
GetDC
wsprintfA
GetSysColor
UnregisterClassA
DestroyWindow
GetSystemMetrics
DefWindowProcA
CreateWindowExA
RegisterWindowMessageA
RegisterClassA
DispatchMessageA
TranslateMessage
PeekMessageA
GetClientRect
GetDesktopWindow
GetWindowRect
WindowFromDC
ClientToScreen
wvsprintfA
CreateIconIndirect
GetIconInfo
GetDCEx
GetWindowLongA
GetClassLongA
SystemParametersInfoA

Exports

Exports

GdipAddPathArc
GdipAddPathArcI
GdipAddPathBezier
GdipAddPathBezierI
GdipAddPathBeziers
GdipAddPathBeziersI
GdipAddPathClosedCurve
GdipAddPathClosedCurve2
GdipAddPathClosedCurve2I
GdipAddPathClosedCurveI
GdipAddPathCurve
GdipAddPathCurve2
GdipAddPathCurve2I
GdipAddPathCurve3
GdipAddPathCurve3I
GdipAddPathCurveI
GdipAddPathEllipse
GdipAddPathEllipseI
GdipAddPathLine
GdipAddPathLine2
GdipAddPathLine2I
GdipAddPathLineI
GdipAddPathPath
GdipAddPathPie
GdipAddPathPieI
GdipAddPathPolygon
GdipAddPathPolygonI
GdipAddPathRectangle
GdipAddPathRectangleI
GdipAddPathRectangles
GdipAddPathRectanglesI
GdipAddPathString
GdipAddPathStringI
GdipAlloc
GdipBeginContainer
GdipBeginContainer2
GdipBeginContainerI
GdipBitmapGetPixel
GdipBitmapLockBits
GdipBitmapSetPixel
GdipBitmapSetResolution
GdipBitmapUnlockBits
GdipClearPathMarkers
GdipCloneBitmapArea
GdipCloneBitmapAreaI
GdipCloneBrush
GdipCloneCustomLineCap
GdipCloneFont
GdipCloneFontFamily
GdipCloneImage
GdipCloneImageAttributes
GdipCloneMatrix
GdipClonePath
GdipClonePen
GdipCloneRegion
GdipCloneStringFormat
GdipClosePathFigure
GdipClosePathFigures
GdipCombineRegionPath
GdipCombineRegionRect
GdipCombineRegionRectI
GdipCombineRegionRegion
GdipComment
GdipCreateAdjustableArrowCap
GdipCreateBitmapFromDirectDrawSurface
GdipCreateBitmapFromFile
GdipCreateBitmapFromFileICM
GdipCreateBitmapFromGdiDib
GdipCreateBitmapFromGraphics
GdipCreateBitmapFromHBITMAP
GdipCreateBitmapFromHICON
GdipCreateBitmapFromResource
GdipCreateBitmapFromScan0
GdipCreateBitmapFromStream
GdipCreateBitmapFromStreamICM
GdipCreateCachedBitmap
GdipCreateCustomLineCap
GdipCreateFont
GdipCreateFontFamilyFromName
GdipCreateFontFromDC
GdipCreateFontFromLogfontA
GdipCreateFontFromLogfontW
GdipCreateFromHDC
GdipCreateFromHDC2
GdipCreateFromHWND
GdipCreateFromHWNDICM
GdipCreateHBITMAPFromBitmap
GdipCreateHICONFromBitmap
GdipCreateHalftonePalette
GdipCreateHatchBrush
GdipCreateImageAttributes
GdipCreateLineBrush
GdipCreateLineBrushFromRect
GdipCreateLineBrushFromRectI
GdipCreateLineBrushFromRectWithAngle
GdipCreateLineBrushFromRectWithAngleI
GdipCreateLineBrushI
GdipCreateMatrix
GdipCreateMatrix2
GdipCreateMatrix3
GdipCreateMatrix3I
GdipCreateMetafileFromEmf
GdipCreateMetafileFromFile
GdipCreateMetafileFromStream
GdipCreateMetafileFromWmf
GdipCreateMetafileFromWmfFile
GdipCreatePath
GdipCreatePath2
GdipCreatePath2I
GdipCreatePathGradient
GdipCreatePathGradientFromPath
GdipCreatePathGradientI
GdipCreatePathIter
GdipCreatePen1
GdipCreatePen2
GdipCreateRegion
GdipCreateRegionHrgn
GdipCreateRegionPath
GdipCreateRegionRect
GdipCreateRegionRectI
GdipCreateRegionRgnData
GdipCreateSolidFill
GdipCreateStreamOnFile
GdipCreateStringFormat
GdipCreateTexture
GdipCreateTexture2
GdipCreateTexture2I
GdipCreateTextureIA
GdipCreateTextureIAI
GdipDeleteBrush
GdipDeleteCachedBitmap
GdipDeleteCustomLineCap
GdipDeleteFont
GdipDeleteFontFamily
GdipDeleteGraphics
GdipDeleteMatrix
GdipDeletePath
GdipDeletePathIter
GdipDeletePen
GdipDeletePrivateFontCollection
GdipDeleteRegion
GdipDeleteStringFormat
GdipDisposeImage
GdipDisposeImageAttributes
GdipDrawArc
GdipDrawArcI
GdipDrawBezier
GdipDrawBezierI
GdipDrawBeziers
GdipDrawBeziersI
GdipDrawCachedBitmap
GdipDrawClosedCurve
GdipDrawClosedCurve2
GdipDrawClosedCurve2I
GdipDrawClosedCurveI
GdipDrawCurve
GdipDrawCurve2
GdipDrawCurve2I
GdipDrawCurve3
GdipDrawCurve3I
GdipDrawCurveI
GdipDrawDriverString
GdipDrawEllipse
GdipDrawEllipseI
GdipDrawImage
GdipDrawImageI
GdipDrawImagePointRect
GdipDrawImagePointRectI
GdipDrawImagePoints
GdipDrawImagePointsI
GdipDrawImagePointsRect
GdipDrawImagePointsRectI
GdipDrawImageRect
GdipDrawImageRectI
GdipDrawImageRectRect
GdipDrawImageRectRectI
GdipDrawLine
GdipDrawLineI
GdipDrawLines
GdipDrawLinesI
GdipDrawPath
GdipDrawPie
GdipDrawPieI
GdipDrawPolygon
GdipDrawPolygonI
GdipDrawRectangle
GdipDrawRectangleI
GdipDrawRectangles
GdipDrawRectanglesI
GdipDrawString
GdipEmfToWmfBits
GdipEndContainer
GdipEnumerateMetafileDestPoint
GdipEnumerateMetafileDestPointI
GdipEnumerateMetafileDestPoints
GdipEnumerateMetafileDestPointsI
GdipEnumerateMetafileDestRect
GdipEnumerateMetafileDestRectI
GdipEnumerateMetafileSrcRectDestPoint
GdipEnumerateMetafileSrcRectDestPointI
GdipEnumerateMetafileSrcRectDestPoints
GdipEnumerateMetafileSrcRectDestPointsI
GdipEnumerateMetafileSrcRectDestRect
GdipEnumerateMetafileSrcRectDestRectI
GdipFillClosedCurve
GdipFillClosedCurve2
GdipFillClosedCurve2I
GdipFillClosedCurveI
GdipFillEllipse
GdipFillEllipseI
GdipFillPath
GdipFillPie
GdipFillPieI
GdipFillPolygon
GdipFillPolygon2
GdipFillPolygon2I
GdipFillPolygonI
GdipFillRectangle
GdipFillRectangleI
GdipFillRectangles
GdipFillRectanglesI
GdipFillRegion
GdipFlattenPath
GdipFlush
GdipFree
GdipGetAdjustableArrowCapFillState
GdipGetAdjustableArrowCapHeight
GdipGetAdjustableArrowCapMiddleInset
GdipGetAdjustableArrowCapWidth
GdipGetAllPropertyItems
GdipGetBrushType
GdipGetCellAscent
GdipGetCellDescent
GdipGetClip
GdipGetClipBounds
GdipGetClipBoundsI
GdipGetCompositingMode
GdipGetCompositingQuality
GdipGetCustomLineCapBaseCap
GdipGetCustomLineCapBaseInset
GdipGetCustomLineCapStrokeCaps
GdipGetCustomLineCapStrokeJoin
GdipGetCustomLineCapType
GdipGetCustomLineCapWidthScale
GdipGetDC
GdipGetDpiX
GdipGetDpiY
GdipGetEmHeight
GdipGetEncoderParameterList
GdipGetEncoderParameterListSize
GdipGetFamily
GdipGetFamilyName
GdipGetFontCollectionFamilyCount
GdipGetFontCollectionFamilyList
GdipGetFontHeight
GdipGetFontHeightGivenDPI
GdipGetFontSize
GdipGetFontStyle
GdipGetFontUnit
GdipGetGenericFontFamilyMonospace
GdipGetGenericFontFamilySansSerif
GdipGetGenericFontFamilySerif
GdipGetHatchBackgroundColor
GdipGetHatchForegroundColor
GdipGetHatchStyle
GdipGetHemfFromMetafile
GdipGetImageAttributesAdjustedPalette
GdipGetImageBounds
GdipGetImageDecoders
GdipGetImageDecodersSize
GdipGetImageDimension
GdipGetImageEncoders
GdipGetImageEncodersSize
GdipGetImageFlags
GdipGetImageGraphicsContext
GdipGetImageHeight
GdipGetImageHorizontalResolution
GdipGetImagePalette
GdipGetImagePaletteSize
GdipGetImagePixelFormat
GdipGetImageRawFormat
GdipGetImageThumbnail
GdipGetImageType
GdipGetImageVerticalResolution
GdipGetImageWidth
GdipGetInterpolationMode
GdipGetLineBlend
GdipGetLineBlendCount
GdipGetLineColors
GdipGetLineGammaCorrection
GdipGetLinePresetBlend
GdipGetLinePresetBlendCount
GdipGetLineRect
GdipGetLineRectI
GdipGetLineSpacing
GdipGetLineTransform
GdipGetLineWrapMode
GdipGetLogFontA
GdipGetLogFontW
GdipGetMatrixElements
GdipGetMetafileDownLevelRasterizationLimit
GdipGetMetafileHeaderFromEmf
GdipGetMetafileHeaderFromFile
GdipGetMetafileHeaderFromMetafile
GdipGetMetafileHeaderFromStream
GdipGetMetafileHeaderFromWmf
GdipGetNearestColor
GdipGetPageScale
GdipGetPageUnit
GdipGetPathData
GdipGetPathFillMode
GdipGetPathGradientBlend
GdipGetPathGradientBlendCount
GdipGetPathGradientCenterColor
GdipGetPathGradientCenterPoint
GdipGetPathGradientCenterPointI
GdipGetPathGradientFocusScales
GdipGetPathGradientGammaCorrection
GdipGetPathGradientPath
GdipGetPathGradientPointCount
GdipGetPathGradientPresetBlend
GdipGetPathGradientPresetBlendCount
GdipGetPathGradientRect
GdipGetPathGradientRectI
GdipGetPathGradientSurroundColorCount
GdipGetPathGradientSurroundColorsWithCount
GdipGetPathGradientTransform
GdipGetPathGradientWrapMode
GdipGetPathLastPoint
GdipGetPathPoints
GdipGetPathPointsI
GdipGetPathTypes
GdipGetPathWorldBounds
GdipGetPathWorldBoundsI
GdipGetPenBrushFill
GdipGetPenColor
GdipGetPenCompoundArray
GdipGetPenCompoundCount
GdipGetPenCustomEndCap
GdipGetPenCustomStartCap
GdipGetPenDashArray
GdipGetPenDashCap197819
GdipGetPenDashCount
GdipGetPenDashOffset
GdipGetPenDashStyle
GdipGetPenEndCap
GdipGetPenFillType
GdipGetPenLineJoin
GdipGetPenMiterLimit
GdipGetPenMode
GdipGetPenStartCap
GdipGetPenTransform
GdipGetPenUnit
GdipGetPenWidth
GdipGetPixelOffsetMode
GdipGetPointCount
GdipGetPropertyCount
GdipGetPropertyIdList
GdipGetPropertyItem
GdipGetPropertyItemSize
GdipGetPropertySize
GdipGetRegionBounds
GdipGetRegionBoundsI
GdipGetRegionData
GdipGetRegionDataSize
GdipGetRegionHRgn
GdipGetRegionScans
GdipGetRegionScansCount
GdipGetRegionScansI
GdipGetRenderingOrigin
GdipGetSmoothingMode
GdipGetSolidFillColor
GdipGetStringFormatAlign
GdipGetStringFormatDigitSubstitution
GdipGetStringFormatFlags
GdipGetStringFormatHotkeyPrefix
GdipGetStringFormatLineAlign
GdipGetStringFormatMeasurableCharacterRangeCount
GdipGetStringFormatTabStopCount
GdipGetStringFormatTabStops
GdipGetStringFormatTrimming
GdipGetTextContrast
GdipGetTextRenderingHint
GdipGetTextureImage
GdipGetTextureTransform
GdipGetTextureWrapMode
GdipGetVisibleClipBounds
GdipGetVisibleClipBoundsI
GdipGetWorldTransform
GdipGraphicsClear
GdipImageForceValidation
GdipImageGetFrameCount
GdipImageGetFrameDimensionsCount
GdipImageGetFrameDimensionsList
GdipImageRotateFlip
GdipImageSelectActiveFrame
GdipInvertMatrix
GdipIsClipEmpty
GdipIsEmptyRegion
GdipIsEqualRegion
GdipIsInfiniteRegion
GdipIsMatrixEqual
GdipIsMatrixIdentity
GdipIsMatrixInvertible
GdipIsOutlineVisiblePathPoint
GdipIsOutlineVisiblePathPointI
GdipIsStyleAvailable
GdipIsVisibleClipEmpty
GdipIsVisiblePathPoint
GdipIsVisiblePathPointI
GdipIsVisiblePoint
GdipIsVisiblePointI
GdipIsVisibleRect
GdipIsVisibleRectI
GdipIsVisibleRegionPoint
GdipIsVisibleRegionPointI
GdipIsVisibleRegionRect
GdipIsVisibleRegionRectI
GdipLoadImageFromFile
GdipLoadImageFromFileICM
GdipLoadImageFromStream
GdipLoadImageFromStreamICM
GdipMeasureCharacterRanges
GdipMeasureDriverString
GdipMeasureString
GdipMultiplyLineTransform
GdipMultiplyMatrix
GdipMultiplyPathGradientTransform
GdipMultiplyPenTransform
GdipMultiplyTextureTransform
GdipMultiplyWorldTransform
GdipNewInstalledFontCollection
GdipNewPrivateFontCollection
GdipPathIterCopyData
GdipPathIterEnumerate
GdipPathIterGetCount
GdipPathIterGetSubpathCount
GdipPathIterHasCurve
GdipPathIterIsValid
GdipPathIterNextMarker
GdipPathIterNextMarkerPath
GdipPathIterNextPathType
GdipPathIterNextSubpath
GdipPathIterNextSubpathPath
GdipPathIterRewind
GdipPlayMetafileRecord
GdipPrivateAddFontFile
GdipPrivateAddMemoryFont
GdipRecordMetafile
GdipRecordMetafileFileName
GdipRecordMetafileFileNameI
GdipRecordMetafileI
GdipRecordMetafileStream
GdipRecordMetafileStreamI
GdipReleaseDC
GdipRemovePropertyItem
GdipResetClip
GdipResetImageAttributes
GdipResetLineTransform
GdipResetPageTransform
GdipResetPath
GdipResetPathGradientTransform
GdipResetPenTransform
GdipResetTextureTransform
GdipResetWorldTransform
GdipRestoreGraphics
GdipReversePath
GdipRotateLineTransform
GdipRotateMatrix
GdipRotatePathGradientTransform
GdipRotatePenTransform
GdipRotateTextureTransform
GdipRotateWorldTransform
GdipSaveAdd
GdipSaveAddImage
GdipSaveGraphics
GdipSaveImageToFile
GdipSaveImageToStream
GdipScaleLineTransform
GdipScaleMatrix
GdipScalePathGradientTransform
GdipScalePenTransform
GdipScaleTextureTransform
GdipScaleWorldTransform
GdipSetAdjustableArrowCapFillState
GdipSetAdjustableArrowCapHeight
GdipSetAdjustableArrowCapMiddleInset
GdipSetAdjustableArrowCapWidth
GdipSetClipGraphics
GdipSetClipHrgn
GdipSetClipPath
GdipSetClipRect
GdipSetClipRectI
GdipSetClipRegion
GdipSetCompositingMode
GdipSetCompositingQuality
GdipSetCustomLineCapBaseCap
GdipSetCustomLineCapBaseInset
GdipSetCustomLineCapStrokeCaps
GdipSetCustomLineCapStrokeJoin

Sections

.text
Size: 1.5MB - Virtual size: 1.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 40KB - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Shared
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 72KB - Virtual size: 70KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 32KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/ASMS/1000/MSFT/WINDOWS/GDIPLUS/GDIPLUS.MAN
.xml
I386/ASMS/2/DEFAULT/DEFAULT.CA_
.cab
I386/ASMS/2/DEFAULT/DEFAULT.MAN
.xml
I386/ASMS/5100/MSFT/WINDOWS/SYSTEM/DEFAULT/DEFAULT.CAT
I386/ASMS/5100/MSFT/WINDOWS/SYSTEM/DEFAULT/DEFAULT.MAN
.xml
I386/ASMS/52/MSFT/WINDOWS/NET/DXMRTP/DXMRTP.CA_
.cab
I386/ASMS/52/MSFT/WINDOWS/NET/DXMRTP/DXMRTP.DL_
.cab
I386/ASMS/52/MSFT/WINDOWS/NET/DXMRTP/DXMRTP.MAN
.xml
I386/ASMS/52/MSFT/WINDOWS/NET/RTCDLL/RTCDLL.CA_
.cab
I386/ASMS/52/MSFT/WINDOWS/NET/RTCDLL/RTCDLL.DL_
.cab
I386/ASMS/52/MSFT/WINDOWS/NET/RTCDLL/RTCDLL.MAN
.xml
I386/ASMS/52/MSFT/WINDOWS/NET/RTCRES/RTCRES.CA_
.cab
I386/ASMS/52/MSFT/WINDOWS/NET/RTCRES/RTCRES.DL_
.cab
I386/ASMS/52/MSFT/WINDOWS/NET/RTCRES/RTCRES.MAN
.xml
I386/ASMS/52/POLICY/MSFT/WINDOWS/NETWORKING/DXMRTP/DXMRTP.CA_
.cab
I386/ASMS/52/POLICY/MSFT/WINDOWS/NETWORKING/DXMRTP/DXMRTP.MAN
.xml
I386/ASMS/52/POLICY/MSFT/WINDOWS/NETWORKING/RTCDLL/RTCDLL.CA_
.cab
I386/ASMS/52/POLICY/MSFT/WINDOWS/NETWORKING/RTCDLL/RTCDLL.MAN
.xml
I386/ASMS/60/MSFT/WINDOWS/COMMON/CONTROLS/COMCTL32.DL_
.cab
I386/ASMS/60/MSFT/WINDOWS/COMMON/CONTROLS/CONTROLS.CA_
.cab
I386/ASMS/60/MSFT/WINDOWS/COMMON/CONTROLS/CONTROLS.MAN
.xml
I386/ASMS/60/POLICY/60/COMCTL/COMCTL.CA_
.cab
I386/ASMS/60/POLICY/60/COMCTL/COMCTL.MAN
.xml
I386/ASMS/6000/MSFT/VCRTL/ATL.DLL
.dll regsvr32 windows:4 windows x86 arch:x86

fa0a251fc9e4949b1c0d0f3d7db94821

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetVersionExW
lstrcpyW
GetACP
InitializeCriticalSection
LeaveCriticalSection
EnterCriticalSection
HeapDestroy
DeleteCriticalSection
lstrlenW
GetShortPathNameW
GetModuleHandleW
GetModuleFileNameW
lstrcatW
FreeLibrary
GetProcAddress
LoadLibraryW
GetCurrentThreadId
WideCharToMultiByte
FreeResource
GlobalFree
GlobalHandle
LockResource
LoadResource
FindResourceW
GlobalAlloc
FindResourceA
GlobalUnlock
GlobalLock
DisableThreadLibraryCalls
GetVersionExA
HeapAlloc
GetSystemInfo
WaitForSingleObject
HeapCreate
InterlockedDecrement
InterlockedIncrement
lstrcmpW
FlushInstructionCache
GetCurrentProcess
MultiByteToWideChar
lstrlenA
SizeofResource
GetLastError
LoadLibraryExW
CloseHandle
ReadFile
GetFileSize
CreateFileW
lstrcmpiW
lstrcpynW
DebugBreak
HeapReAlloc
HeapFree
SetLastError
lstrcmpA
GetModuleHandleA
OutputDebugStringA
GetTickCount
LocalAlloc
InterlockedExchange
RaiseException
LoadLibraryA
LocalFree

Exports

Exports

AtlAdvise
AtlAxAttachControl
AtlAxCreateControl
AtlAxCreateControlEx
AtlAxCreateDialogA
AtlAxCreateDialogW
AtlAxDialogBoxA
AtlAxDialogBoxW
AtlAxGetControl
AtlAxGetHost
AtlAxWinInit
AtlComPtrAssign
AtlComQIPtrAssign
AtlCreateTargetDC
AtlDevModeW2A
AtlFreeMarshalStream
AtlGetObjectSourceInterface
AtlGetVersion
AtlHiMetricToPixel
AtlIPersistPropertyBag_Load
AtlIPersistPropertyBag_Save
AtlIPersistStreamInit_Load
AtlIPersistStreamInit_Save
AtlInternalQueryInterface
AtlMarshalPtrInProc
AtlModuleAddCreateWndData
AtlModuleAddTermFunc
AtlModuleExtractCreateWndData
AtlModuleGetClassObject
AtlModuleInit
AtlModuleLoadTypeLib
AtlModuleRegisterClassObjects
AtlModuleRegisterServer
AtlModuleRegisterTypeLib
AtlModuleRegisterWndClassInfoA
AtlModuleRegisterWndClassInfoW
AtlModuleRevokeClassObjects
AtlModuleTerm
AtlModuleUnRegisterTypeLib
AtlModuleUnregisterServer
AtlModuleUnregisterServerEx
AtlModuleUpdateRegistryFromResourceD
AtlPixelToHiMetric
AtlRegisterClassCategoriesHelper
AtlSetErrorInfo
AtlUnadvise
AtlUnmarshalPtr
AtlWaitWithMessageLoop
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 39KB - Virtual size: 39KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/ASMS/6000/MSFT/VCRTL/MFC42.DLL
.dll regsvr32 windows:4 windows x86 arch:x86

1557eebc6134cee9eb9d0583a2b40341

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

msvcrt

_initterm
?terminate@@YAXXZ
_except_handler3
_adjust_fdiv
_onexit
__dllonexit
??1type_info@@UAE@XZ
_mbsnbicmp
wcsncpy
wcscpy
_ltoa
_ultoa
swprintf
_itoa
modf
ceil
fabs
floor
labs
_ftol
_splitpath
_fullpath
atol
__p___argc
_EH_prolog
__p___argv
_beginthreadex
_endthreadex
_strdup
_mbsdec
_expand
strtod
strtol
strtoul
abs
calloc
_msize
_purecall
strftime
_mbctype
localtime
gmtime
time
_ismbcspace
atoi
_ismbcdigit
_mbsnbcmp
sprintf
strlen
_mbclen
vsprintf
_mbsrchr
_mbscspn
_mbsspn
_mbsstr
_mbsrev
_mbslwr
_mbsupr
_mbspbrk
_mbschr
wcslen
_mbscmp
realloc
fclose
fflush
fseek
ftell
fgets
fputs
fwrite
fread
clearerr
_open_osfhandle
_fdopen
__doserrno
_get_osfhandle
memset
_mbsinc
abort
free
malloc
memcmp
memmove
memcpy
_CxxThrowException
mktime
__CxxFrameHandler

kernel32

FindClose
FindFirstFileA
lstrcpyA
MultiByteToWideChar
GetFullPathNameA
GetStringTypeExA
GetThreadLocale
lstrcmpiA
GetShortPathNameA
GetModuleFileNameA
GlobalSize
GlobalLock
GlobalAlloc
GlobalReAlloc
GlobalUnlock
GlobalFree
GetFileAttributesA
GetFileSize
GetFileTime
LocalFileTimeToFileTime
SystemTimeToFileTime
SetFileTime
SetFileAttributesA
InterlockedIncrement
InterlockedDecrement
WideCharToMultiByte
LocalFree
FormatMessageA
FileTimeToSystemTime
FileTimeToLocalFileTime
GetCPInfo
GetOEMCP
LocalAlloc
InitializeCriticalSection
TlsAlloc
DeleteCriticalSection
GlobalHandle
TlsFree
LeaveCriticalSection
EnterCriticalSection
TlsSetValue
LocalReAlloc
TlsGetValue
WaitForSingleObject
CreateSemaphoreA
DeleteFileA
LoadLibraryA
ReleaseMutex
InterlockedExchange
WaitForMultipleObjects
GetModuleHandleA
GlobalDeleteAtom
GlobalFindAtomA
GlobalAddAtomA
GlobalGetAtomNameA
GetCurrentThreadId
lstrcatA
GetVersion
LockResource
LoadResource
FindResourceA
FreeLibrary
MulDiv
GetProfileIntA
VirtualProtect
FindResourceExA
SizeofResource
GetProcessVersion
GlobalFlags
GetTempFileNameA
GetDiskFreeSpaceA
LocalUnlock
LocalLock
GetTempPathA
SearchPathA
SetEvent
ResumeThread
SetThreadPriority
SuspendThread
GetCurrentThread
SetErrorMode
GetPrivateProfileIntA
GetPrivateProfileStringA
WritePrivateProfileStringA
GetCurrentDirectoryA
FindNextFileA
GetTickCount
lstrlenW
CopyFileA
lstrcpyW
GetUserDefaultLCID
IsDBCSLeadByte
GetSystemDirectoryA
GetProcAddress
UnlockFile
MoveFileA
SetEndOfFile
FlushFileBuffers
LockFile
CloseHandle
ReadFile
SetFilePointer
WriteFile
DuplicateHandle
CreateFileA
GetCurrentProcess
lstrlenA
lstrcmpA
OutputDebugStringA
IsBadStringPtrA
IsBadReadPtr
IsBadWritePtr
GetLastError
IsBadStringPtrW
lstrcpynA
ReleaseSemaphore
SetLastError
CreateMutexA
GetVolumeInformationA
CreateEventA
RaiseException

gdi32

TextOutA
GetPolyFillMode
EnumFontFamiliesA
GetPixel
CreatePalette
GetPaletteEntries
RealizePalette
OffsetRgn
SetBrushOrgEx
CreateMetaFileA
CopyMetaFileA
LPtoDP
SetAbortProc
StartPage
EndPage
EndDoc
AbortDoc
DPtoLP
CombineRgn
SetRectRgn
GetMapMode
CreateDIBPatternBrushPt
CreateHatchBrush
ExtCreatePen
PlayMetaFile
EnumMetaFile
GetObjectType
PlayMetaFileRecord
ExtSelectClipRgn
SelectClipPath
CreateRectRgn
GetClipRgn
PolyBezierTo
SetColorAdjustment
PolylineTo
PolyDraw
SetArcDirection
ArcTo
SetMapperFlags
SetTextCharacterExtra
SetTextJustification
SetTextAlign
LineTo
OffsetClipRgn
ExcludeClipRect
SelectClipRgn
OffsetWindowOrgEx
SetStretchBltMode
SetROP2
SetPolyFillMode
SetBkMode
SelectPalette
StartDocA
EnumFontFamiliesExA
CreateDCA
CreateRectRgnIndirect
Rectangle
UnrealizeObject
PatBlt
CreateBitmap
CreatePatternBrush
CreatePen
CloseMetaFile
DeleteMetaFile
RectVisible
PtVisible
IntersectClipRect
GetViewportOrgEx
GetWindowOrgEx
SetWindowOrgEx
GetDeviceCaps
Escape
GetCurrentPositionEx
MoveToEx
ScaleWindowExtEx
SetWindowExtEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
SetMapMode
GetTextFaceA
GetWindowExtEx
GetViewportExtEx
GetROP2
GetBkMode
GetTextAlign
GetNearestColor
GetBkColor
GetTextColor
SaveDC
GetStockObject
RestoreDC
GetCharWidthA
DeleteObject
CreateFontA
StretchDIBits
DeleteDC
CreateCompatibleBitmap
GetTextExtentPoint32A
ExtTextOutA
CreateSolidBrush
BitBlt
CreateFontIndirectA
CreateCompatibleDC
GetTextMetricsA
GetObjectA
SelectObject
SetTextColor
GetClipBox
SetBkColor
GetStretchBltMode

user32

SetCapture
CharToOemA
OemToCharA
UnhookWindowsHookEx
MsgWaitForMultipleObjects
GetWindowRect
GetWindowPlacement
IsIconic
SystemParametersInfoA
IntersectRect
OffsetRect
RegisterWindowMessageA
SetWindowPos
SetWindowLongA
GetWindowLongA
GetWindow
SendMessageA
SetForegroundWindow
GetForegroundWindow
GetLastActivePopup
GetMessagePos
GetMessageTime
RemovePropA
CallWindowProcA
GetPropA
SetPropA
GetClassLongA
CallNextHookEx
SetWindowsHookExA
CreateWindowExA
DestroyWindow
DefWindowProcA
GetKeyState
GetDlgCtrlID
GetWindowTextA
GetWindowTextLengthA
GetDlgItem
SetWindowPlacement
TrackPopupMenu
GetMenuItemID
GetSubMenu
GetMenuItemCount
GetMenu
RegisterClassA
GetClassInfoA
WinHelpA
GetCapture
GetParent
IsChild
MessageBoxA
GetTopWindow
SetScrollPos
GetScrollPos
SetScrollRange
GetScrollRange
ShowScrollBar
SetScrollInfo
GetScrollInfo
ScrollWindow
IsWindowVisible
EnableWindow
EndDeferWindowPos
CopyRect
BeginDeferWindowPos
GetClientRect
DeferWindowPos
EqualRect
ScreenToClient
AdjustWindowRectEx
SetFocus
IsWindow
SetActiveWindow
GetFocus
DispatchMessageA
PeekMessageA
GetSysColor
MapWindowPoints
SendDlgItemMessageA
UpdateWindow
PostMessageA
LoadIconA
SetRectEmpty
LoadAcceleratorsA
TranslateAcceleratorA
ReleaseCapture
SetCursor
IsWindowEnabled
GetDesktopWindow
ShowWindow
GetActiveWindow
DestroyMenu
LoadMenuA
SetMenu
ReuseDDElParam
UnpackDDElParam
InvalidateRect
BringWindowToTop
LoadCursorA
GetSystemMetrics
WaitMessage
GetCursorPos
GetWindowThreadProcessId
WindowFromPoint
ClientToScreen
TranslateMessage
GetMessageA
DefFrameProcA
TranslateMDISysAccel
DrawMenuBar
DefMDIChildProcA
RedrawWindow
LoadBitmapA
InflateRect
PtInRect
ReleaseDC
InvertRect
GetWindowDC
FillRect
SetTimer
KillTimer
SetRect
GetDC
IsZoomed
SetParent
IsRectEmpty
AppendMenuA
DeleteMenu
GetSystemMenu
GetDCEx
LockWindowUpdate
GetTabbedTextExtentA
DrawTextA
GrayStringA
UnionRect
DrawFocusRect
CreateDialogIndirectParamA
EndDialog
GetNextDlgTabItem
wvsprintfA
GetAsyncKeyState
MapDialogRect
GetDialogBaseUnits
BeginPaint
EndPaint
TabbedTextOutA
GetSysColorBrush
GetClassNameA
SetWindowTextA
CheckDlgButton
CheckRadioButton
GetDlgItemInt
GetDlgItemTextA
SetDlgItemInt
SetDlgItemTextA
IsDlgButtonChecked
ScrollWindowEx
IsDialogMessageA
MoveWindow
EnableMenuItem
CheckMenuItem
SetMenuItemBitmaps
ModifyMenuA
GetMenuState
GetMenuCheckMarkDimensions
DestroyIcon
SetCursorPos
DestroyCursor
FindWindowA
IsClipboardFormatAvailable
MessageBeep
RemoveMenu
ValidateRect
PostQuitMessage
UnregisterClassA
ShowOwnedPopups
InsertMenuA
GetMenuStringA
RegisterClipboardFormatA
CopyAcceleratorTableA
InSendMessage
PostThreadMessageA
CreateMenu
WindowFromDC
CountClipboardFormats
SetWindowContextHelpId
CharNextA
GetNextDlgGroupItem
ClipCursor
DrawEdge
EnumChildWindows
InvalidateRgn
FrameRect
LoadStringA
CharUpperA
wsprintfA

Exports

Exports

?classCCachedDataPathProperty@CCachedDataPathProperty@@2UCRuntimeClass@@B
?classCDataPathProperty@CDataPathProperty@@2UCRuntimeClass@@B
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 616KB - Virtual size: 613KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 212KB - Virtual size: 209KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 32KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 44KB - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 60KB - Virtual size: 59KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/ASMS/6000/MSFT/VCRTL/MFC42U.DLL
.dll regsvr32 windows:4 windows x86 arch:x86

812a1105faba586fcfb8abc7e4d75b94

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

msvcrt

_initterm
?terminate@@YAXXZ
_except_handler3
_adjust_fdiv
_onexit
__dllonexit
??1type_info@@UAE@XZ
_wcsnicmp
wcsncpy
wcscpy
_ltow
_ultow
_itow
modf
ceil
fabs
floor
labs
_ftol
_EH_prolog
_wsplitpath
_wfullpath
_wtol
__p___argc
__p___wargv
_beginthreadex
_endthreadex
_wcsdup
_expand
wcstod
wcstol
wcstoul
abs
calloc
_msize
_purecall
wcsftime
localtime
gmtime
time
iswspace
_wtoi
iswdigit
wcsncmp
wcslen
swprintf
vswprintf
wcsrchr
wcscspn
wcsspn
wcsstr
_wcsrev
_wcslwr
_wcsupr
wcspbrk
wcschr
wcscmp
realloc
fclose
fflush
fseek
ftell
fgetws
fputws
fwrite
fread
clearerr
_open_osfhandle
_fdopen
__doserrno
_get_osfhandle
memset
abort
free
malloc
memcmp
memmove
memcpy
_CxxThrowException
mktime
__CxxFrameHandler

kernel32

GetShortPathNameW
GetModuleFileNameW
GlobalSize
lstrcmpiW
FormatMessageW
GlobalAlloc
GlobalReAlloc
GlobalUnlock
GlobalFree
GetFileAttributesW
GetFileSize
GetFileTime
LocalFileTimeToFileTime
SystemTimeToFileTime
SetFileTime
SetFileAttributesW
InterlockedIncrement
InterlockedDecrement
WideCharToMultiByte
MultiByteToWideChar
GetStringTypeExW
GetThreadLocale
FileTimeToSystemTime
FileTimeToLocalFileTime
LocalAlloc
InitializeCriticalSection
TlsAlloc
DeleteCriticalSection
GlobalHandle
TlsFree
LeaveCriticalSection
EnterCriticalSection
TlsSetValue
LocalReAlloc
TlsGetValue
WaitForSingleObject
CreateSemaphoreW
ReleaseSemaphore
CreateMutexW
ReleaseMutex
CreateEventW
WaitForMultipleObjects
GetModuleHandleW
LocalFree
FindFirstFileW
GlobalAddAtomW
InterlockedExchange
lstrcatW
GetVersion
LockResource
LoadResource
FindResourceW
FreeLibrary
LoadLibraryA
GlobalGetAtomNameW
GetModuleHandleA
MulDiv
GetProfileIntW
VirtualProtect
lstrcpyA
FindResourceExW
SizeofResource
GetProcessVersion
lstrcmpW
GlobalFlags
GetTempFileNameW
GetDiskFreeSpaceW
LocalUnlock
LocalLock
GetTempPathW
SearchPathW
SetEvent
ResumeThread
SetThreadPriority
SuspendThread
GetCurrentThread
lstrcmpiA
SetErrorMode
GetPrivateProfileIntW
GetPrivateProfileStringW
WritePrivateProfileStringW
GetCurrentDirectoryW
FindNextFileW
GetTickCount
CopyFileW
GetUserDefaultLCID
IsDBCSLeadByte
lstrcatA
GetSystemDirectoryA
GetFullPathNameW
GetVolumeInformationW
LoadLibraryW
FindClose
lstrcpyW
MoveFileW
GetProcAddress
DeleteFileW
LockFile
SetEndOfFile
UnlockFile
SetFilePointer
CloseHandle
FlushFileBuffers
CreateFileW
WriteFile
ReadFile
lstrlenA
GetCurrentProcess
DuplicateHandle
lstrlenW
lstrcmpA
OutputDebugStringW
IsBadStringPtrA
IsBadReadPtr
IsBadWritePtr
GetLastError
IsBadStringPtrW
lstrcpynW
GlobalDeleteAtom
SetLastError
GlobalFindAtomW
GlobalLock
GetCurrentThreadId
RaiseException

gdi32

CreatePen
SetMapMode
EnumFontFamiliesW
GetPixel
CreatePalette
GetPaletteEntries
RealizePalette
OffsetRgn
SetBrushOrgEx
CreateMetaFileW
CopyMetaFileW
LPtoDP
SetAbortProc
StartPage
EndPage
EndDoc
AbortDoc
DPtoLP
CombineRgn
SetRectRgn
GetMapMode
CreateDIBPatternBrushPt
CreateHatchBrush
ExtCreatePen
PlayMetaFile
EnumMetaFile
GetObjectType
PlayMetaFileRecord
ExtSelectClipRgn
SelectClipPath
CreateRectRgn
GetClipRgn
PolyBezierTo
SetColorAdjustment
PolylineTo
PolyDraw
SetArcDirection
ArcTo
SetMapperFlags
SetTextCharacterExtra
SetTextJustification
SetTextAlign
LineTo
OffsetClipRgn
ExcludeClipRect
SelectClipRgn
OffsetWindowOrgEx
SetStretchBltMode
SetROP2
SetPolyFillMode
SetBkMode
SelectPalette
StartDocW
EnumFontFamiliesExW
CreateDCW
CreateRectRgnIndirect
Rectangle
UnrealizeObject
PatBlt
CreateBitmap
CreatePatternBrush
TextOutW
CloseMetaFile
DeleteMetaFile
RectVisible
PtVisible
IntersectClipRect
GetViewportOrgEx
GetWindowOrgEx
SetWindowOrgEx
GetDeviceCaps
Escape
GetTextExtentPoint32A
GetCurrentPositionEx
MoveToEx
ScaleWindowExtEx
SetWindowExtEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
GetViewportExtEx
GetROP2
GetWindowExtEx
GetTextAlign
GetPolyFillMode
GetBkMode
GetTextColor
GetNearestColor
GetStretchBltMode
RestoreDC
SaveDC
GetBkColor
CreateFontW
GetCharWidthW
GetStockObject
CreateCompatibleBitmap
StretchDIBits
DeleteObject
CreateSolidBrush
GetTextExtentPoint32W
DeleteDC
CreateCompatibleDC
BitBlt
ExtTextOutW
SelectObject
GetTextMetricsW
CreateFontIndirectW
SetBkColor
SetTextColor
GetObjectW
GetClipBox
GetTextFaceW

user32

GetCursorPos
UnhookWindowsHookEx
MsgWaitForMultipleObjects
GetWindowRect
GetWindowPlacement
IsIconic
SystemParametersInfoW
IntersectRect
OffsetRect
RegisterWindowMessageW
SetWindowPos
SetWindowLongW
GetWindowLongW
GetWindow
SendMessageW
SetForegroundWindow
GetForegroundWindow
GetLastActivePopup
GetMessagePos
GetMessageTime
RemovePropW
CallWindowProcW
GetPropW
SetPropW
CallNextHookEx
SetWindowsHookExW
CreateWindowExW
DestroyWindow
DefWindowProcW
GetKeyState
GetDlgCtrlID
GetWindowTextW
GetWindowTextLengthW
GetDlgItem
SetWindowPlacement
TrackPopupMenu
GetMenuItemID
GetSubMenu
GetMenuItemCount
GetMenu
RegisterClassW
GetClassInfoW
WinHelpW
GetCapture
GetParent
IsChild
MessageBoxW
GetTopWindow
SetScrollPos
GetScrollPos
SetScrollRange
GetScrollRange
ShowScrollBar
SetScrollInfo
GetScrollInfo
ScrollWindow
IsWindowVisible
EnableWindow
EndDeferWindowPos
CopyRect
BeginDeferWindowPos
GetClientRect
DeferWindowPos
EqualRect
ScreenToClient
AdjustWindowRectEx
SetFocus
IsWindow
SetActiveWindow
GetFocus
DispatchMessageW
PeekMessageW
GetSysColor
MapWindowPoints
SendDlgItemMessageA
SendDlgItemMessageW
UpdateWindow
PostMessageW
LoadIconW
SetRectEmpty
LoadAcceleratorsW
TranslateAcceleratorW
ReleaseCapture
SetCursor
IsWindowEnabled
GetDesktopWindow
ShowWindow
GetActiveWindow
DestroyMenu
LoadMenuW
SetMenu
ReuseDDElParam
UnpackDDElParam
InvalidateRect
BringWindowToTop
LoadCursorW
SetCapture
WaitMessage
GetSystemMetrics
GetWindowThreadProcessId
WindowFromPoint
ClientToScreen
TranslateMessage
GetMessageW
DefFrameProcW
TranslateMDISysAccel
DrawMenuBar
DefMDIChildProcW
RedrawWindow
LoadBitmapW
InflateRect
PtInRect
ReleaseDC
InvertRect
GetWindowDC
FillRect
SetTimer
KillTimer
SetRect
GetDC
IsZoomed
SetParent
IsRectEmpty
AppendMenuW
DeleteMenu
GetSystemMenu
GetDCEx
LockWindowUpdate
GetTabbedTextExtentA
DrawTextW
GrayStringW
UnionRect
DrawFocusRect
CreateDialogIndirectParamW
EndDialog
GetNextDlgTabItem
wvsprintfW
GetAsyncKeyState
MapDialogRect
GetDialogBaseUnits
BeginPaint
EndPaint
TabbedTextOutW
GetSysColorBrush
GetClassNameW
SetWindowTextW
CheckDlgButton
CheckRadioButton
GetDlgItemInt
GetDlgItemTextW
SetDlgItemInt
SetDlgItemTextW
IsDlgButtonChecked
ScrollWindowEx
IsDialogMessageW
MoveWindow
EnableMenuItem
CheckMenuItem
SetMenuItemBitmaps
ModifyMenuW
GetMenuState
GetMenuCheckMarkDimensions
DestroyIcon
SetCursorPos
DestroyCursor
FindWindowW
GetTabbedTextExtentW
IsClipboardFormatAvailable
MessageBeep
RemoveMenu
ValidateRect
PostQuitMessage
UnregisterClassW
ShowOwnedPopups
InsertMenuW
GetMenuStringW
RegisterClipboardFormatW
CopyAcceleratorTableW
InSendMessage
PostThreadMessageW
CreateMenu
WindowFromDC
CountClipboardFormats
SetWindowContextHelpId
CharNextW
GetNextDlgGroupItem
ClipCursor
DrawEdge
EnumChildWindows
InvalidateRgn
FrameRect
LoadStringW
MessageBoxA
CharUpperW
wsprintfW

Exports

Exports

?classCCachedDataPathProperty@CCachedDataPathProperty@@2UCRuntimeClass@@B
?classCDataPathProperty@CDataPathProperty@@2UCRuntimeClass@@B
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 608KB - Virtual size: 605KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 216KB - Virtual size: 214KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 36KB - Virtual size: 33KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 44KB - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 60KB - Virtual size: 59KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/ASMS/6000/MSFT/VCRTL/MSVCP60.DLL
.dll windows:4 windows x86 arch:x86

1b1839992700df52b049b87961a724e3

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

msvcrt

memmove
__CxxFrameHandler
free
localeconv
_Gettnames
_Getdays
_Getmonths
__mb_cur_max
atan2
cos
exp
ldexp
log
pow
sin
sqrt
??2@YAPAXI@Z
strtoul
_errno
strtol
sprintf
strcspn
fclose
fwrite
fputc
ungetc
fgetc
fgetpos
fseek
fsetpos
setvbuf
memchr
memset
ungetwc
fgetwc
_Strftime
fopen
_iob
setlocale
malloc
realloc
__crtCompareStringA
__lc_collate_cp
_unlock
__lc_handle
_lock
__setlc_active
__unguarded_readlc_active
__crtLCMapStringA
__lc_codepage
towlower
towupper
strcmp
_pctype
_isctype
_ftol
strtod
??1type_info@@UAE@XZ
_except_handler3
?terminate@@YAXXZ
__dllonexit
_onexit
_initterm
_adjust_fdiv
memcmp
memcpy
strlen
_CxxThrowException
wcslen
??4exception@@QAEAAV0@ABV0@@Z
??0exception@@QAE@ABQBD@Z
??0exception@@QAE@ABV0@@Z
??1exception@@UAE@XZ
fflush
?what@exception@@UBEPBDXZ
fputwc

kernel32

DisableThreadLibraryCalls
MultiByteToWideChar
DeleteCriticalSection
InterlockedExchange
LeaveCriticalSection
Sleep
EnterCriticalSection
InitializeCriticalSection
InterlockedIncrement
InterlockedDecrement
WideCharToMultiByte

Exports

Exports

??0?$_Complex_base@M@std@@QAE@ABM0@Z
??0?$_Complex_base@N@std@@QAE@ABN0@Z
??0?$_Complex_base@O@std@@QAE@ABO0@Z
??0?$_Mpunct@D@std@@QAE@ABV_Locinfo@1@I_N@Z
??0?$_Mpunct@D@std@@QAE@I_N@Z
??0?$_Mpunct@G@std@@QAE@ABV_Locinfo@1@I_N@Z
??0?$_Mpunct@G@std@@QAE@I_N@Z
??0?$basic_filebuf@DU?$char_traits@D@std@@@std@@QAE@ABV01@@Z
??0?$basic_filebuf@DU?$char_traits@D@std@@@std@@QAE@PAU_iobuf@@@Z
??0?$basic_filebuf@DU?$char_traits@D@std@@@std@@QAE@W4_Uninitialized@1@@Z
??0?$basic_filebuf@GU?$char_traits@G@std@@@std@@QAE@ABV01@@Z
??0?$basic_filebuf@GU?$char_traits@G@std@@@std@@QAE@PAU_iobuf@@@Z
??0?$basic_filebuf@GU?$char_traits@G@std@@@std@@QAE@W4_Uninitialized@1@@Z
??0?$basic_fstream@DU?$char_traits@D@std@@@std@@QAE@ABV01@@Z
??0?$basic_fstream@DU?$char_traits@D@std@@@std@@QAE@PBDH@Z
??0?$basic_fstream@DU?$char_traits@D@std@@@std@@QAE@XZ
??0?$basic_fstream@GU?$char_traits@G@std@@@std@@QAE@ABV01@@Z
??0?$basic_fstream@GU?$char_traits@G@std@@@std@@QAE@PBDH@Z
??0?$basic_fstream@GU?$char_traits@G@std@@@std@@QAE@XZ
??0?$basic_ifstream@DU?$char_traits@D@std@@@std@@QAE@ABV01@@Z
??0?$basic_ifstream@DU?$char_traits@D@std@@@std@@QAE@PBDH@Z
??0?$basic_ifstream@DU?$char_traits@D@std@@@std@@QAE@XZ
??0?$basic_ifstream@GU?$char_traits@G@std@@@std@@QAE@ABV01@@Z
??0?$basic_ifstream@GU?$char_traits@G@std@@@std@@QAE@PBDH@Z
??0?$basic_ifstream@GU?$char_traits@G@std@@@std@@QAE@XZ
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IAE@XZ
??0?$basic_ios@DU?$char_traits@D@std@@@std@@QAE@ABV01@@Z
??0?$basic_ios@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z
??0?$basic_ios@GU?$char_traits@G@std@@@std@@IAE@XZ
??0?$basic_ios@GU?$char_traits@G@std@@@std@@QAE@ABV01@@Z
??0?$basic_ios@GU?$char_traits@G@std@@@std@@QAE@PAV?$basic_streambuf@GU?$char_traits@G@std@@@1@@Z
??0?$basic_iostream@DU?$char_traits@D@std@@@std@@QAE@ABV01@@Z
??0?$basic_iostream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z
??0?$basic_iostream@GU?$char_traits@G@std@@@std@@QAE@ABV01@@Z
??0?$basic_iostream@GU?$char_traits@G@std@@@std@@QAE@PAV?$basic_streambuf@GU?$char_traits@G@std@@@1@@Z
??0?$basic_istream@DU?$char_traits@D@std@@@std@@QAE@ABV01@@Z
??0?$basic_istream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
??0?$basic_istream@DU?$char_traits@D@std@@@std@@QAE@W4_Uninitialized@1@@Z
??0?$basic_istream@GU?$char_traits@G@std@@@std@@QAE@ABV01@@Z
??0?$basic_istream@GU?$char_traits@G@std@@@std@@QAE@PAV?$basic_streambuf@GU?$char_traits@G@std@@@1@_N@Z
??0?$basic_istream@GU?$char_traits@G@std@@@std@@QAE@W4_Uninitialized@1@@Z
??0?$basic_istringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z
??0?$basic_istringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@1@H@Z
??0?$basic_istringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@H@Z
??0?$basic_istringstream@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@ABV01@@Z
??0?$basic_istringstream@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@ABV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@1@H@Z
??0?$basic_istringstream@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@H@Z
??0?$basic_ofstream@DU?$char_traits@D@std@@@std@@QAE@ABV01@@Z
??0?$basic_ofstream@DU?$char_traits@D@std@@@std@@QAE@PBDH@Z
??0?$basic_ofstream@DU?$char_traits@D@std@@@std@@QAE@XZ
??0?$basic_ofstream@GU?$char_traits@G@std@@@std@@QAE@ABV01@@Z
??0?$basic_ofstream@GU?$char_traits@G@std@@@std@@QAE@PBDH@Z
??0?$basic_ofstream@GU?$char_traits@G@std@@@std@@QAE@XZ
??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QAE@ABV01@@Z
??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N1@Z
??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QAE@W4_Uninitialized@1@@Z
??0?$basic_ostream@GU?$char_traits@G@std@@@std@@QAE@ABV01@@Z
??0?$basic_ostream@GU?$char_traits@G@std@@@std@@QAE@PAV?$basic_streambuf@GU?$char_traits@G@std@@@1@_N1@Z
??0?$basic_ostream@GU?$char_traits@G@std@@@std@@QAE@W4_Uninitialized@1@@Z
??0?$basic_ostringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z
??0?$basic_ostringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@1@H@Z
??0?$basic_ostringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@H@Z
??0?$basic_ostringstream@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@ABV01@@Z
??0?$basic_ostringstream@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@ABV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@1@H@Z
??0?$basic_ostringstream@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@H@Z
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAE@W4_Uninitialized@1@@Z
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAE@XZ
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAE@ABV01@@Z
??0?$basic_streambuf@GU?$char_traits@G@std@@@std@@IAE@W4_Uninitialized@1@@Z
??0?$basic_streambuf@GU?$char_traits@G@std@@@std@@IAE@XZ
??0?$basic_streambuf@GU?$char_traits@G@std@@@std@@QAE@ABV01@@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@IIABV?$allocator@D@1@@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV?$allocator@D@1@@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@IDABV?$allocator@D@1@@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBD0ABV?$allocator@D@1@@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBDABV?$allocator@D@1@@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBDIABV?$allocator@D@1@@Z
??0?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@ABV01@@Z
??0?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@ABV01@IIABV?$allocator@G@1@@Z
??0?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@ABV?$allocator@G@1@@Z
??0?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@IGABV?$allocator@G@1@@Z
??0?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@PBG0ABV?$allocator@G@1@@Z
??0?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@PBGABV?$allocator@G@1@@Z
??0?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@PBGIABV?$allocator@G@1@@Z
??0?$basic_stringbuf@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z
??0?$basic_stringbuf@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@1@H@Z
??0?$basic_stringbuf@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@H@Z
??0?$basic_stringbuf@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@ABV01@@Z
??0?$basic_stringbuf@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@ABV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@1@H@Z
??0?$basic_stringbuf@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@H@Z
??0?$basic_stringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z
??0?$basic_stringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@1@H@Z
??0?$basic_stringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@H@Z
??0?$basic_stringstream@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@ABV01@@Z
??0?$basic_stringstream@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@ABV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@1@H@Z
??0?$basic_stringstream@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@H@Z
??0?$codecvt@DDH@std@@QAE@ABV_Locinfo@1@I@Z
??0?$codecvt@DDH@std@@QAE@I@Z
??0?$codecvt@GDH@std@@QAE@ABV_Locinfo@1@I@Z
??0?$codecvt@GDH@std@@QAE@I@Z
??0?$collate@D@std@@QAE@ABV_Locinfo@1@I@Z
??0?$collate@D@std@@QAE@I@Z
??0?$collate@G@std@@QAE@ABV_Locinfo@1@I@Z
??0?$collate@G@std@@QAE@I@Z
??0?$complex@M@std@@QAE@ABM0@Z
??0?$complex@M@std@@QAE@ABV?$complex@N@1@@Z
??0?$complex@M@std@@QAE@ABV?$complex@O@1@@Z
??0?$complex@N@std@@QAE@ABN0@Z
??0?$complex@N@std@@QAE@ABV?$complex@M@1@@Z
??0?$complex@N@std@@QAE@ABV?$complex@O@1@@Z
??0?$complex@O@std@@QAE@ABO0@Z
??0?$complex@O@std@@QAE@ABV?$complex@M@1@@Z
??0?$complex@O@std@@QAE@ABV?$complex@N@1@@Z
??0?$ctype@D@std@@QAE@ABV_Locinfo@1@I@Z
??0?$ctype@D@std@@QAE@PBF_NI@Z
??0?$ctype@G@std@@QAE@ABV_Locinfo@1@I@Z
??0?$ctype@G@std@@QAE@I@Z
??0?$messages@D@std@@QAE@ABV_Locinfo@1@I@Z
??0?$messages@D@std@@QAE@I@Z
??0?$messages@G@std@@QAE@ABV_Locinfo@1@I@Z
??0?$messages@G@std@@QAE@I@Z
??0?$money_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QAE@ABV_Locinfo@1@I@Z
??0?$money_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QAE@I@Z
??0?$money_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@QAE@ABV_Locinfo@1@I@Z
??0?$money_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@QAE@I@Z
??0?$money_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QAE@ABV_Locinfo@1@I@Z
??0?$money_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QAE@I@Z
??0?$money_put@GV?$ostreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@QAE@ABV_Locinfo@1@I@Z
??0?$money_put@GV?$ostreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@QAE@I@Z
??0?$moneypunct@D$00@std@@QAE@ABV_Locinfo@1@I@Z
??0?$moneypunct@D$00@std@@QAE@I@Z
??0?$moneypunct@D$0A@@std@@QAE@ABV_Locinfo@1@I@Z
??0?$moneypunct@D$0A@@std@@QAE@I@Z
??0?$moneypunct@G$00@std@@QAE@ABV_Locinfo@1@I@Z
??0?$moneypunct@G$00@std@@QAE@I@Z
??0?$moneypunct@G$0A@@std@@QAE@ABV_Locinfo@1@I@Z
??0?$moneypunct@G$0A@@std@@QAE@I@Z
??0?$num_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QAE@ABV_Locinfo@1@I@Z
??0?$num_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QAE@I@Z
??0?$num_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@QAE@ABV_Locinfo@1@I@Z
??0?$num_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@QAE@I@Z
??0?$num_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QAE@ABV_Locinfo@1@I@Z
??0?$num_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QAE@I@Z
??0?$num_put@GV?$ostreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@QAE@ABV_Locinfo@1@I@Z
??0?$num_put@GV?$ostreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@QAE@I@Z
??0?$numpunct@D@std@@QAE@ABV_Locinfo@1@I@Z
??0?$numpunct@D@std@@QAE@I@Z
??0?$numpunct@G@std@@QAE@ABV_Locinfo@1@I@Z
??0?$numpunct@G@std@@QAE@I@Z
??0?$time_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QAE@ABV_Locinfo@1@I@Z
??0?$time_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QAE@I@Z
??0?$time_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@QAE@ABV_Locinfo@1@I@Z
??0?$time_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@QAE@I@Z
??0?$time_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QAE@ABV_Locinfo@1@I@Z
??0?$time_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QAE@I@Z
??0?$time_put@GV?$ostreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@QAE@ABV_Locinfo@1@I@Z
??0?$time_put@GV?$ostreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@QAE@I@Z
??0Init@ios_base@std@@QAE@XZ
??0_Locinfo@std@@QAE@ABV01@@Z
??0_Locinfo@std@@QAE@HPBD@Z
??0_Locinfo@std@@QAE@PBD@Z
??0_Lockit@std@@QAE@XZ
??0_Timevec@std@@QAE@ABV01@@Z
??0_Timevec@std@@QAE@PAX@Z
??0_Winit@std@@QAE@XZ
??0__non_rtti_object@std@@QAE@ABV01@@Z
??0__non_rtti_object@std@@QAE@PBD@Z
??0bad_alloc@std@@QAE@ABV01@@Z
??0bad_alloc@std@@QAE@PBD@Z
??0bad_cast@std@@QAE@ABV01@@Z
??0bad_cast@std@@QAE@PBD@Z
??0bad_exception@std@@QAE@ABV01@@Z
??0bad_exception@std@@QAE@PBD@Z
??0bad_typeid@std@@QAE@ABV01@@Z
??0bad_typeid@std@@QAE@PBD@Z
??0codecvt_base@std@@QAE@I@Z
??0ctype_base@std@@QAE@I@Z
??0domain_error@std@@QAE@ABV01@@Z
??0domain_error@std@@QAE@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@1@@Z
??0facet@locale@std@@IAE@I@Z
??0ios_base@std@@IAE@XZ
??0ios_base@std@@QAE@ABV01@@Z
??0length_error@std@@QAE@ABV01@@Z
??0length_error@std@@QAE@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@1@@Z
??0locale@std@@AAE@PAV_Locimp@01@@Z
??0locale@std@@QAE@ABV01@0H@Z
??0locale@std@@QAE@ABV01@@Z
??0locale@std@@QAE@ABV01@PBDH@Z
??0locale@std@@QAE@PBDH@Z
??0locale@std@@QAE@W4_Uninitialized@1@@Z
??0locale@std@@QAE@XZ
??0logic_error@std@@QAE@ABV01@@Z
??0logic_error@std@@QAE@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@1@@Z
??0messages_base@std@@QAE@I@Z
??0money_base@std@@QAE@I@Z
??0ostrstream@std@@QAE@PADHH@Z
??0out_of_range@std@@QAE@ABV01@@Z
??0out_of_range@std@@QAE@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@1@@Z
??0overflow_error@std@@QAE@ABV01@@Z
??0overflow_error@std@@QAE@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@1@@Z
??0range_error@std@@QAE@ABV01@@Z
??0range_error@std@@QAE@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@1@@Z
??0runtime_error@std@@QAE@ABV01@@Z
??0runtime_error@std@@QAE@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@1@@Z
??0strstream@std@@QAE@PADHH@Z
??0time_base@std@@QAE@I@Z
??0underflow_error@std@@QAE@ABV01@@Z
??0underflow_error@std@@QAE@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@1@@Z
??1?$_Mpunct@D@std@@UAE@XZ
??1?$_Mpunct@G@std@@UAE@XZ
??1?$basic_filebuf@DU?$char_traits@D@std@@@std@@UAE@XZ
??1?$basic_filebuf@GU?$char_traits@G@std@@@std@@UAE@XZ
??1?$basic_fstream@DU?$char_traits@D@std@@@std@@UAE@XZ
??1?$basic_fstream@GU?$char_traits@G@std@@@std@@UAE@XZ
??1?$basic_ifstream@DU?$char_traits@D@std@@@std@@UAE@XZ
??1?$basic_ifstream@GU?$char_traits@G@std@@@std@@UAE@XZ
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UAE@XZ
??1?$basic_ios@GU?$char_traits@G@std@@@std@@UAE@XZ
??1?$basic_iostream@DU?$char_traits@D@std@@@std@@UAE@XZ
??1?$basic_iostream@GU?$char_traits@G@std@@@std@@UAE@XZ
??1?$basic_istream@DU?$char_traits@D@std@@@std@@UAE@XZ
??1?$basic_istream@GU?$char_traits@G@std@@@std@@UAE@XZ
??1?$basic_istringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@UAE@XZ
??1?$basic_istringstream@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@UAE@XZ
??1?$basic_ofstream@DU?$char_traits@D@std@@@std@@UAE@XZ
??1?$basic_ofstream@GU?$char_traits@G@std@@@std@@UAE@XZ
??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UAE@XZ
??1?$basic_ostream@GU?$char_traits@G@std@@@std@@UAE@XZ
??1?$basic_ostringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@UAE@XZ
??1?$basic_ostringstream@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@UAE@XZ
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAE@XZ
??1?$basic_streambuf@GU?$char_traits@G@std@@@std@@UAE@XZ
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??1?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@XZ
??1?$basic_stringbuf@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@UAE@XZ
??1?$basic_stringbuf@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@UAE@XZ
??1?$basic_stringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@UAE@XZ
??1?$basic_stringstream@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@UAE@XZ
??1?$codecvt@DDH@std@@UAE@XZ
??1?$codecvt@GDH@std@@UAE@XZ
??1?$collate@D@std@@UAE@XZ
??1?$collate@G@std@@UAE@XZ
??1?$ctype@D@std@@UAE@XZ
??1?$ctype@G@std@@UAE@XZ
??1?$messages@D@std@@UAE@XZ
??1?$messages@G@std@@UAE@XZ
??1?$money_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@UAE@XZ
??1?$money_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@UAE@XZ
??1?$money_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@UAE@XZ
??1?$money_put@GV?$ostreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@UAE@XZ
??1?$moneypunct@D$00@std@@UAE@XZ
??1?$moneypunct@D$0A@@std@@UAE@XZ
??1?$moneypunct@G$00@std@@UAE@XZ
??1?$moneypunct@G$0A@@std@@UAE@XZ
??1?$num_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@UAE@XZ
??1?$num_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@UAE@XZ
??1?$num_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@UAE@XZ
??1?$num_put@GV?$ostreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@UAE@XZ
??1?$numpunct@D@std@@UAE@XZ
??1?$numpunct@G@std@@UAE@XZ
??1?$time_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@UAE@XZ
??1?$time_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@UAE@XZ
??1?$time_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@UAE@XZ
??1?$time_put@GV?$ostreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@UAE@XZ
??1Init@ios_base@std@@QAE@XZ
??1_Locinfo@std@@QAE@XZ
??1_Lockit@std@@QAE@XZ
??1_Timevec@std@@QAE@XZ
??1_Winit@std@@QAE@XZ
??1__non_rtti_object@std@@UAE@XZ
??1bad_alloc@std@@UAE@XZ
??1bad_cast@std@@UAE@XZ
??1bad_exception@std@@UAE@XZ
??1bad_typeid@std@@UAE@XZ
??1codecvt_base@std@@UAE@XZ
??1ctype_base@std@@UAE@XZ
??1domain_error@std@@UAE@XZ
??1facet@locale@std@@UAE@XZ
??1ios_base@std@@UAE@XZ
??1istrstream@std@@UAE@XZ
??1length_error@std@@UAE@XZ
??1locale@std@@QAE@XZ
??1logic_error@std@@UAE@XZ
??1messages_base@std@@UAE@XZ
??1money_base@std@@UAE@XZ
??1ostrstream@std@@UAE@XZ
??1out_of_range@std@@UAE@XZ
??1overflow_error@std@@UAE@XZ
??1range_error@std@@UAE@XZ
??1runtime_error@std@@UAE@XZ
??1strstream@std@@UAE@XZ
??1strstreambuf@std@@UAE@XZ
??1time_base@std@@UAE@XZ
??1underflow_error@std@@UAE@XZ
??4?$_Complex_base@M@std@@QAEAAV01@ABV01@@Z
??4?$_Complex_base@N@std@@QAEAAV01@ABV01@@Z
??4?$_Complex_base@O@std@@QAEAAV01@ABV01@@Z
??4?$_Ctr@M@std@@QAEAAV01@ABV01@@Z
??4?$_Ctr@N@std@@QAEAAV01@ABV01@@Z
??4?$_Ctr@O@std@@QAEAAV01@ABV01@@Z
??4?$allocator@X@std@@QAEAAV01@ABV01@@Z
??4?$basic_filebuf@DU?$char_traits@D@std@@@std@@QAEAAV01@ABV01@@Z
??4?$basic_filebuf@GU?$char_traits@G@std@@@std@@QAEAAV01@ABV01@@Z
??4?$basic_fstream@DU?$char_traits@D@std@@@std@@QAEAAV01@ABV01@@Z
??4?$basic_fstream@GU?$char_traits@G@std@@@std@@QAEAAV01@ABV01@@Z
??4?$basic_ifstream@DU?$char_traits@D@std@@@std@@QAEAAV01@ABV01@@Z
??4?$basic_ifstream@GU?$char_traits@G@std@@@std@@QAEAAV01@ABV01@@Z
??4?$basic_ios@DU?$char_traits@D@std@@@std@@QAEAAV01@ABV01@@Z
??4?$basic_ios@GU?$char_traits@G@std@@@std@@QAEAAV01@ABV01@@Z
??4?$basic_iostream@DU?$char_traits@D@std@@@std@@QAEAAV01@ABV01@@Z
??4?$basic_iostream@GU?$char_traits@G@std@@@std@@QAEAAV01@ABV01@@Z
??4?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@ABV01@@Z
??4?$basic_istream@GU?$char_traits@G@std@@@std@@QAEAAV01@ABV01@@Z
??4?$basic_istringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@ABV01@@Z
??4?$basic_istringstream@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV01@ABV01@@Z
??4?$basic_ofstream@DU?$char_traits@D@std@@@std@@QAEAAV01@ABV01@@Z
??4?$basic_ofstream@GU?$char_traits@G@std@@@std@@QAEAAV01@ABV01@@Z
??4?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@ABV01@@Z
??4?$basic_ostream@GU?$char_traits@G@std@@@std@@QAEAAV01@ABV01@@Z
??4?$basic_ostringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@ABV01@@Z
??4?$basic_ostringstream@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV01@ABV01@@Z
??4?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEAAV01@ABV01@@Z
??4?$basic_streambuf@GU?$char_traits@G@std@@@std@@QAEAAV01@ABV01@@Z
??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@ABV01@@Z
??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@D@Z
??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@PBD@Z
??4?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV01@ABV01@@Z
??4?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV01@G@Z
??4?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV01@PBG@Z
??4?$basic_stringbuf@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@ABV01@@Z
??4?$basic_stringbuf@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV01@ABV01@@Z
??4?$basic_stringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@ABV01@@Z
??4?$basic_stringstream@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV01@ABV01@@Z
??4?$char_traits@D@std@@QAEAAU01@ABU01@@Z
??4?$char_traits@G@std@@QAEAAU01@ABU01@@Z
??4?$complex@M@std@@QAEAAV01@ABM@Z
??4?$complex@M@std@@QAEAAV01@ABV01@@Z
??4?$complex@N@std@@QAEAAV01@ABN@Z
??4?$complex@N@std@@QAEAAV01@ABV01@@Z
??4?$complex@O@std@@QAEAAV01@ABO@Z
??4?$complex@O@std@@QAEAAV01@ABV01@@Z
??4?$numeric_limits@C@std@@QAEAAV01@ABV01@@Z
??4?$numeric_limits@D@std@@QAEAAV01@ABV01@@Z
??4?$numeric_limits@E@std@@QAEAAV01@ABV01@@Z
??4?$numeric_limits@F@std@@QAEAAV01@ABV01@@Z
??4?$numeric_limits@G@std@@QAEAAV01@ABV01@@Z
??4?$numeric_limits@H@std@@QAEAAV01@ABV01@@Z
??4?$numeric_limits@I@std@@QAEAAV01@ABV01@@Z
??4?$numeric_limits@J@std@@QAEAAV01@ABV01@@Z
??4?$numeric_limits@K@std@@QAEAAV01@ABV01@@Z
??4?$numeric_limits@M@std@@QAEAAV01@ABV01@@Z
??4?$numeric_limits@N@std@@QAEAAV01@ABV01@@Z
??4?$numeric_limits@O@std@@QAEAAV01@ABV01@@Z
??4?$numeric_limits@_N@std@@QAEAAV01@ABV01@@Z
??4Init@ios_base@std@@QAEAAV012@ABV012@@Z
??4_Locinfo@std@@QAEAAV01@ABV01@@Z
??4_Lockit@std@@QAEAAV01@ABV01@@Z
??4_Num_base@std@@QAEAAU01@ABU01@@Z
??4_Num_float_base@std@@QAEAAU01@ABU01@@Z
??4_Num_int_base@std@@QAEAAU01@ABU01@@Z
??4_Timevec@std@@QAEAAV01@ABV01@@Z
??4_Winit@std@@QAEAAV01@ABV01@@Z
??4__non_rtti_object@std@@QAEAAV01@ABV01@@Z
??4bad_alloc@std@@QAEAAV01@ABV01@@Z
??4bad_cast@std@@QAEAAV01@ABV01@@Z
??4bad_exception@std@@QAEAAV01@ABV01@@Z
??4bad_typeid@std@@QAEAAV01@ABV01@@Z
??4domain_error@std@@QAEAAV01@ABV01@@Z
??4id@locale@std@@QAEAAV012@ABV012@@Z
??4ios_base@std@@QAEAAV01@ABV01@@Z
??4length_error@std@@QAEAAV01@ABV01@@Z
??4locale@std@@QAEAAV01@ABV01@@Z
??4logic_error@std@@QAEAAV01@ABV01@@Z
??4out_of_range@std@@QAEAAV01@ABV01@@Z
??4overflow_error@std@@QAEAAV01@ABV01@@Z
??4range_error@std@@QAEAAV01@ABV01@@Z
??4runtime_error@std@@QAEAAV01@ABV01@@Z
??4underflow_error@std@@QAEAAV01@ABV01@@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@AAF@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@AAG@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@AAH@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@AAI@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@AAJ@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@AAK@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@AAM@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@AAN@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@AAO@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@AAPAX@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@AA_N@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAV01@AAV01@@Z@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAV?$basic_ios@DU?$char_traits@D@std@@@1@AAV21@@Z@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAVios_base@1@AAV21@@Z@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z
??5?$basic_istream@GU?$char_traits@G@std@@@std@@QAEAAV01@AAF@Z
??5?$basic_istream@GU?$char_traits@G@std@@@std@@QAEAAV01@AAG@Z
??5?$basic_istream@GU?$char_traits@G@std@@@std@@QAEAAV01@AAH@Z
??5?$basic_istream@GU?$char_traits@G@std@@@std@@QAEAAV01@AAI@Z
??5?$basic_istream@GU?$char_traits@G@std@@@std@@QAEAAV01@AAJ@Z
??5?$basic_istream@GU?$char_traits@G@std@@@std@@QAEAAV01@AAK@Z
??5?$basic_istream@GU?$char_traits@G@std@@@std@@QAEAAV01@AAM@Z
??5?$basic_istream@GU?$char_traits@G@std@@@std@@QAEAAV01@AAN@Z
??5?$basic_istream@GU?$char_traits@G@std@@@std@@QAEAAV01@AAO@Z
??5?$basic_istream@GU?$char_traits@G@std@@@std@@QAEAAV01@AAPAX@Z
??5?$basic_istream@GU?$char_traits@G@std@@@std@@QAEAAV01@AA_N@Z
??5?$basic_istream@GU?$char_traits@G@std@@@std@@QAEAAV01@P6AAAV01@AAV01@@Z@Z
??5?$basic_istream@GU?$char_traits@G@std@@@std@@QAEAAV01@P6AAAV?$basic_ios@GU?$char_traits@G@std@@@1@AAV21@@Z@Z
??5?$basic_istream@GU?$char_traits@G@std@@@std@@QAEAAV01@P6AAAVios_base@1@AAV21@@Z@Z
??5?$basic_istream@GU?$char_traits@G@std@@@std@@QAEAAV01@PAV?$basic_streambuf@GU?$char_traits@G@std@@@1@@Z
??5std@@YAAAV?$basic_istream@DU?$char_traits@D@std@@@0@AAV10@AAC@Z
??5std@@YAAAV?$basic_istream@DU?$char_traits@D@std@@@0@AAV10@AAD@Z
??5std@@YAAAV?$basic_istream@DU?$char_traits@D@std@@@0@AAV10@AAE@Z
??5std@@YAAAV?$basic_istream@DU?$char_traits@D@std@@@0@AAV10@AAV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@@Z
??5std@@YAAAV?$basic_istream@DU?$char_traits@D@std@@@0@AAV10@AAV?$complex@M@0@@Z
??5std@@YAAAV?$basic_istream@DU?$char_traits@D@std@@@0@AAV10@AAV?$complex@N@0@@Z
??5std@@YAAAV?$basic_istream@DU?$char_traits@D@std@@@0@AAV10@AAV?$complex@O@0@@Z
??5std@@YAAAV?$basic_istream@DU?$char_traits@D@std@@@0@AAV10@PAC@Z
??5std@@YAAAV?$basic_istream@DU?$char_traits@D@std@@@0@AAV10@PAD@Z
??5std@@YAAAV?$basic_istream@DU?$char_traits@D@std@@@0@AAV10@PAE@Z
??5std@@YAAAV?$basic_istream@GU?$char_traits@G@std@@@0@AAV10@AAG@Z
??5std@@YAAAV?$basic_istream@GU?$char_traits@G@std@@@0@AAV10@AAV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@0@@Z
??5std@@YAAAV?$basic_istream@GU?$char_traits@G@std@@@0@AAV10@AAV?$complex@M@0@@Z
??5std@@YAAAV?$basic_istream@GU?$char_traits@G@std@@@0@AAV10@AAV?$complex@N@0@@Z
??5std@@YAAAV?$basic_istream@GU?$char_traits@G@std@@@0@AAV10@AAV?$complex@O@0@@Z
??5std@@YAAAV?$basic_istream@GU?$char_traits@G@std@@@0@AAV10@PAF@Z
??5std@@YAAAV?$basic_istream@GU?$char_traits@G@std@@@0@AAV10@PAG@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@F@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@G@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@H@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@I@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@J@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@K@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@M@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@N@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@O@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAV01@AAV01@@Z@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAV?$basic_ios@DU?$char_traits@D@std@@@1@AAV21@@Z@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAVios_base@1@AAV21@@Z@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@PBX@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@_N@Z
??6?$basic_ostream@GU?$char_traits@G@std@@@std@@QAEAAV01@F@Z
??6?$basic_ostream@GU?$char_traits@G@std@@@std@@QAEAAV01@G@Z
??6?$basic_ostream@GU?$char_traits@G@std@@@std@@QAEAAV01@H@Z
??6?$basic_ostream@GU?$char_traits@G@std@@@std@@QAEAAV01@I@Z
??6?$basic_ostream@GU?$char_traits@G@std@@@std@@QAEAAV01@J@Z
??6?$basic_ostream@GU?$char_traits@G@std@@@std@@QAEAAV01@K@Z
??6?$basic_ostream@GU?$char_traits@G@std@@@std@@QAEAAV01@M@Z
??6?$basic_ostream@GU?$char_traits@G@std@@@std@@QAEAAV01@N@Z
??6?$basic_ostream@GU?$char_traits@G@std@@@std@@QAEAAV01@O@Z
??6?$basic_ostream@GU?$char_traits@G@std@@@std@@QAEAAV01@P6AAAV01@AAV01@@Z@Z
??6?$basic_ostream@GU?$char_traits@G@std@@@std@@QAEAAV01@P6AAAV?$basic_ios@GU?$char_traits@G@std@@@1@AAV21@@Z@Z
??6?$basic_ostream@GU?$char_traits@G@std@@@std@@QAEAAV01@P6AAAVios_base@1@AAV21@@Z@Z
??6?$basic_ostream@GU?$char_traits@G@std@@@std@@QAEAAV01@PAV?$basic_streambuf@GU?$char_traits@G@std@@@1@@Z
??6?$basic_ostream@GU?$char_traits@G@std@@@std@@QAEAAV01@PBX@Z
??6?$basic_ostream@GU?$char_traits@G@std@@@std@@QAEAAV01@_N@Z
??6std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@0@AAV10@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@@Z
??6std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@0@AAV10@ABV?$complex@M@0@@Z
??6std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@0@AAV10@ABV?$complex@N@0@@Z
??6std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@0@AAV10@ABV?$complex@O@0@@Z
??6std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@0@AAV10@C@Z
??6std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@0@AAV10@D@Z
??6std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@0@AAV10@E@Z
??6std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@0@AAV10@PBC@Z
??6std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@0@AAV10@PBD@Z
??6std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@0@AAV10@PBE@Z
??6std@@YAAAV?$basic_ostream@GU?$char_traits@G@std@@@0@AAV10@ABV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@0@@Z
??6std@@YAAAV?$basic_ostream@GU?$char_traits@G@std@@@0@AAV10@ABV?$complex@M@0@@Z
??6std@@YAAAV?$basic_ostream@GU?$char_traits@G@std@@@0@AAV10@ABV?$complex@N@0@@Z
??6std@@YAAAV?$basic_ostream@GU?$char_traits@G@std@@@0@AAV10@ABV?$complex@O@0@@Z
??6std@@YAAAV?$basic_ostream@GU?$char_traits@G@std@@@0@AAV10@G@Z
??6std@@YAAAV?$basic_ostream@GU?$char_traits@G@std@@@0@AAV10@PBF@Z
??6std@@YAAAV?$basic_ostream@GU?$char_traits@G@std@@@0@AAV10@PBG@Z
??7ios_base@std@@QBE_NXZ
??8locale@std@@QBE_NABV01@@Z
??8std@@YA_NABMABV?$complex@M@0@@Z
??8std@@YA_NABNABV?$complex@N@0@@Z
??8std@@YA_NABOABV?$complex@O@0@@Z
??8std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@0@Z
??8std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@PBD@Z
??8std@@YA_NABV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@0@0@Z
??8std@@YA_NABV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@0@PBG@Z
??8std@@YA_NABV?$complex@M@0@0@Z
??8std@@YA_NABV?$complex@M@0@ABM@Z
??8std@@YA_NABV?$complex@N@0@0@Z
??8std@@YA_NABV?$complex@N@0@ABN@Z
??8std@@YA_NABV?$complex@O@0@0@Z
??8std@@YA_NABV?$complex@O@0@ABO@Z
??8std@@YA_NPBDABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@@Z
??8std@@YA_NPBGABV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@0@@Z
??9locale@std@@QBE_NABV01@@Z
??9std@@YA_NABMABV?$complex@M@0@@Z
??9std@@YA_NABNABV?$complex@N@0@@Z
??9std@@YA_NABOABV?$complex@O@0@@Z
??9std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@0@Z
??9std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@PBD@Z
??9std@@YA_NABV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@0@0@Z
??9std@@YA_NABV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@0@PBG@Z
??9std@@YA_NABV?$complex@M@0@0@Z
??9std@@YA_NABV?$complex@M@0@ABM@Z

Sections

.text
Size: 168KB - Virtual size: 166KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 192KB - Virtual size: 188KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 936B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/ASMS/6000/MSFT/VCRTL/VCRTL.CAT
I386/ASMS/6000/MSFT/VCRTL/VCRTL.MAN
.xml
I386/ASMS/6000/MSFT/WINDOWS/COMMON/CONTROLS/COMCTL32.DLL
.dll windows:5 windows x86 arch:x86

09bac26da5b34fc1acb7b7a3e823cf90

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

msvcrt

wcsncpy
_ftol
wcslen
_except_handler3
memmove
wcscpy

ntdll

RtlRunEncodeUnicodeString
RtlRunDecodeUnicodeString

gdi32

GetObjectW
DeleteDC
SelectObject
RectVisible
BitBlt
CreateBitmapIndirect
CreateDIBSection
GetDIBColorTable
CreateCompatibleDC
PatBlt
GetTextMetricsW
CreateFontIndirectW
GetClipBox
CreateBitmap
GetDeviceCaps
GetTextExtentPointW
GetCharWidthW
GetLayout
GetBkColor
CreateFontW
RestoreDC
IntersectClipRect
SaveDC
CreateSolidBrush
StretchDIBits
CreateCompatibleBitmap
CreateRectRgn
SetWindowOrgEx
OffsetWindowOrgEx
TranslateCharsetInfo
Polyline
CreatePen
CreateDCW
ExcludeClipRect
CombineRgn
CreateHalftonePalette
CreatePalette
GetTextExtentPoint32W
RealizePalette
SelectPalette
UnrealizeObject
StretchBlt
SetBrushOrgEx
GetDCOrgEx
EnumFontFamiliesExW
CreatePatternBrush
GetNearestColor
SetTextAlign
GetTextAlign
SelectClipRgn
GetPaletteEntries
SetPixelV
SetPixel
GetPixel
SetDIBColorTable
GetBitmapBits
MaskBlt
SetStretchBltMode
CreateEllipticRgn
Ellipse
GetCharABCWidthsW
GetCharABCWidthsA
GetTextCharsetInfo
GetTextCharset
ExtTextOutA
GetTextExtentPointA
GetTextColor
GetBkMode
TextOutW
PlayEnhMetaFile
Rectangle
LineTo
MoveToEx
GetCurrentObject
CreateRectRgnIndirect
SetViewportOrgEx
GetClipRgn
OffsetRgn
GetBrushOrgEx
GetTextFaceW
GetCharWidthA
GetDIBits
SetDIBits
SetBoundsRect
CreateRoundRectRgn
CreatePolygonRgn
ExtTextOutW
SetBkColor
SetTextColor
SetBkMode
GetStockObject
GdiAlphaBlend
QueryFontAssocStatus
GdiTransparentBlt
SetLayoutWidth
GdiGradientFill
GdiGetCharDimensions
GetCharWidthInfo
FrameRgn
DeleteObject

kernel32

EnterCriticalSection
InitializeCriticalSection
GlobalAddAtomW
GetACP
DeleteCriticalSection
LoadLibraryW
lstrcmpiW
lstrcmpiA
FreeResource
LockResource
LoadResource
FindResourceW
CloseHandle
GetCurrentProcess
GetTickCount
lstrcpyA
lstrlenA
MulDiv
UnhandledExceptionFilter
ActivateActCtx
DeactivateActCtx
SizeofResource
InterlockedDecrement
InterlockedIncrement
lstrcmpW
EnumResourceLanguagesW
FindResourceExW
GetLocaleInfoW
GetModuleHandleW
GetUserDefaultLCID
GetThreadLocale
FindResourceExA
ReleaseActCtx
GetCurrentActCtx
lstrcpynA
GetNumberFormatW
GetProfileIntW
HeapAlloc
GetProcessHeap
HeapFree
HeapReAlloc
IsBadCodePtr
InterlockedExchange
IsBadWritePtr
GetCurrentProcessId
GetCurrentThreadId
IsDBCSLeadByte
lstrcmpA
CompareStringA
CompareStringW
GetSystemDefaultLCID
IsBadReadPtr
SetLastError
IsValidLocale
ConvertDefaultLocale
GetVersionExW
LocalLock
LocalUnlock
GlobalFree
GetCPInfo
Sleep
GetOEMCP
GlobalAlloc
GlobalReAlloc
GlobalUnlock
GlobalLock
GetUserDefaultLangID
GetDateFormatW
EnumCalendarInfoW
GetStringTypeExW
GetCalendarInfoA
GlobalHandle
GetLocalTime
GetTimeFormatW
lstrcatW
GetLastError
GetStringTypeW
GetStringTypeA
IsDBCSLeadByteEx
GetLogicalDrives
FindClose
FindNextFileW
FindFirstFileW
HeapSize
GlobalFlags
GetModuleHandleA
GetVersionExA
CreateFileW
GetWindowsDirectoryW
DelayLoadFailureHook
IsProcessorFeaturePresent
lstrcpyW
MultiByteToWideChar
LocalReAlloc
WideCharToMultiByte
lstrlenW
lstrcpynW
LocalSize
LoadLibraryA
InterlockedCompareExchange
FreeLibrary
GetProcAddress
LocalFree
LocalAlloc
DisableThreadLibraryCalls
MapViewOfFile
CreateFileMappingW
GetFileSize
LeaveCriticalSection
UnmapViewOfFile

user32

GetDoubleClickTime
GetParent
IsRectEmpty
GetWindowLongW
SystemParametersInfoW
InflateRect
EndPaint
BeginPaint
LoadStringW
TrackMouseEvent
SetCapture
PtInRect
PostMessageW
GetAsyncKeyState
GetWindowDC
SetWindowPos
GetMonitorInfoW
MonitorFromPoint
ClientToScreen
EnumChildWindows
ScreenToClient
RedrawWindow
GetClassInfoW
RegisterClassW
LoadCursorW
DrawTextExW
GetSysColorBrush
GetCursorPos
SetFocus
UnregisterClassW
CharLowerW
GetSysColor
WaitMessage
ReleaseCapture
CallMsgFilterW
GetMessageTime
MessageBeep
ScrollWindowEx
SetRectEmpty
wsprintfW
GetMessagePos
GetDlgItem
EnumDisplayDevicesW
FillRect
GetDCEx
RegisterWindowMessageW
LoadImageW
CreateDialogIndirectParamW
CreateDialogIndirectParamA
ShowWindow
SendDlgItemMessageW
IsChild
IsWindowEnabled
EnableWindow
DeferWindowPos
EndDeferWindowPos
BeginDeferWindowPos
GetClassNameW
SetLastErrorEx
GetDlgCtrlID
GetNextDlgTabItem
SetWindowTextW
IsDialogMessageW
MapDialogRect
SetForegroundWindow
CopyImage
MonitorFromWindow
DestroyIcon
SetDlgItemTextW
SetCursor
SetWindowTextA
WinHelpW
SetActiveWindow
GetActiveWindow
PostQuitMessage
GetMessageW
GetDesktopWindow
IsZoomed
CreateWindowExA
DrawIconEx
DrawFrameControl
GetIconInfo
GetWindow
MoveWindow
GetWindowTextW
GetPropW
GetWindowThreadProcessId
SetPropW
RemovePropW
CallWindowProcW
SendNotifyMessageW
CloseDesktop
EnumWindows
SetThreadDesktop
GetThreadDesktop
OpenDesktopW
EnumDesktopsW
GetProcessWindowStation
SetCursorPos
DrawIcon
LoadIconW
GetScrollPos
GetScrollRange
GetScrollInfo
ShowScrollBar
EnableScrollBar
SetScrollPos
SetScrollRange
SetScrollInfo
GetMenuItemID
GetMenuItemCount
GetMenuItemInfoW
GetSubMenu
GetSystemMenu
CheckMenuItem
SetMenu
GetMenuState
SubtractRect
CreateIconIndirect
CopyIcon
CharNextA
CharPrevW
DrawFocusRect
FrameRect
ChildWindowFromPoint
EndDialog
GetScrollBarInfo
SetWindowRgn
LoadBitmapW
AnimateWindow
GetClassLongW
DeleteMenu
InsertMenuItemW
GetKeyboardLayout
ShowCaret
HideCaret
DestroyMenu
TrackPopupMenuEx
IsClipboardFormatAvailable
EnableMenuItem
LoadMenuW
GetAncestor
PeekMessageA
OemToCharBuffW
IsCharLowerW
CharToOemBuffW
OemToCharBuffA
IsCharLowerA
CharToOemBuffA
CharUpperBuffW
CharUpperBuffA
CharLowerBuffW
CharLowerBuffA
CloseClipboard
SetClipboardData
EmptyClipboard
OpenClipboard
MapVirtualKeyW
GetCaretPos
AdjustWindowRectEx
GetWindowTextLengthW
DrawFrame
DrawStateW
GetNextDlgGroupItem
AppendMenuW
CreatePopupMenu
MonitorFromRect
TrackPopupMenu
AdjustWindowRect
GetKeyNameTextW
SetCaretPos
GrayStringW
CreateCaret
DestroyCaret
ReplyMessage
InSendMessage
InvertRect
GetShellWindow
DestroyCursor
GetUpdateRgn
GetWindowRgn
ValidateRect
LockWindowUpdate
SetKeyboardState
GetKeyboardState
SendMessageA
PostMessageA
SetParent
TabbedTextOutW
GetCaretBlinkTime
DragDetect
IsCharAlphaNumericW
ScrollDC
GetClipboardData
CharNextW
UpdateWindow
NotifyWinEvent
PeekMessageW
GetSystemMetrics
GetFocus
TranslateMessage
DispatchMessageW
IsWindowVisible
GetUpdateRect
MapWindowPoints
UnionRect
IsWindow
DestroyWindow
GetDC
ReleaseDC
InvalidateRect
CopyRect
GetClientRect
IntersectRect
EqualRect
MBToWCSEx
GetCursorFrameInfo
WCSToMBEx
GetWindowRect
OffsetRect
DefWindowProcW
DrawEdge
SetRect
DrawTextW
GetWindowLongA
SetWindowLongW
GetKeyState
GetCapture
KillTimer
SendMessageW
GetWindowInfo
GetCursor
GetForegroundWindow
GetMenu
SetLayeredWindowAttributes
InvalidateRgn
WindowFromPoint
SetTimer
CreateWindowExW
DialogBoxIndirectParamW
RegisterClassExW
GetClassInfoExW

advapi32

RegCloseKey
RegQueryValueExW
RegCreateKeyExW
RegQueryValueW
RegOpenKeyExW
RegOpenKeyW
RegCreateKeyW
RegEnumValueW
RegQueryValueExA
RegOpenKeyExA
AllocateAndInitializeSid
CheckTokenMembership
FreeSid
RegSetValueExW
OpenProcessToken

shlwapi

ord219
StrCatW
StrCatBuffW
ord429
SHRegGetBoolUSValueW
StrCmpIW

Exports

Exports

CreateMappedBitmap
CreatePropertySheetPage
CreatePropertySheetPageA
CreatePropertySheetPageW
CreateStatusWindow
CreateStatusWindowA
CreateStatusWindowW
CreateToolbar
CreateToolbarEx
CreateUpDownControl
DefSubclassProc
DestroyPropertySheetPage
DllGetVersion
DllInstall
DrawInsert
DrawShadowText
DrawStatusText
DrawStatusTextA
DrawStatusTextW
FlatSB_EnableScrollBar
FlatSB_GetScrollInfo
FlatSB_GetScrollPos
FlatSB_GetScrollProp
FlatSB_GetScrollRange
FlatSB_SetScrollInfo
FlatSB_SetScrollPos
FlatSB_SetScrollProp
FlatSB_SetScrollRange
FlatSB_ShowScrollBar
GetEffectiveClientRect
GetMUILanguage
GetWindowSubclass
HIMAGELIST_QueryInterface
ImageList_Add
ImageList_AddIcon
ImageList_AddMasked
ImageList_BeginDrag
ImageList_Copy
ImageList_Create
ImageList_Destroy
ImageList_DragEnter
ImageList_DragLeave
ImageList_DragMove
ImageList_DragShowNolock
ImageList_Draw
ImageList_DrawEx
ImageList_DrawIndirect
ImageList_Duplicate
ImageList_EndDrag
ImageList_GetBkColor
ImageList_GetDragImage
ImageList_GetFlags
ImageList_GetIcon
ImageList_GetIconSize
ImageList_GetImageCount
ImageList_GetImageInfo
ImageList_GetImageRect
ImageList_LoadImage
ImageList_LoadImageA
ImageList_LoadImageW
ImageList_Merge
ImageList_Read
ImageList_ReadEx
ImageList_Remove
ImageList_Replace
ImageList_ReplaceIcon
ImageList_SetBkColor
ImageList_SetDragCursorImage
ImageList_SetFilter
ImageList_SetFlags
ImageList_SetIconSize
ImageList_SetImageCount
ImageList_SetOverlayImage
ImageList_Write
ImageList_WriteEx
InitCommonControls
InitCommonControlsEx
InitMUILanguage
InitializeFlatSB
LBItemFromPt
MakeDragList
MenuHelp
PropertySheet
PropertySheetA
PropertySheetW
RemoveWindowSubclass
SetWindowSubclass
ShowHideMenuCtl
UninitializeFlatSB
_TrackMouseEvent

Sections

.text
Size: 542KB - Virtual size: 541KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 332KB - Virtual size: 332KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 23KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/ASMS/6000/MSFT/WINDOWS/COMMON/CONTROLS/CONTROLS.CAT
I386/ASMS/6000/MSFT/WINDOWS/COMMON/CONTROLS/CONTROLS.MAN
.xml
I386/ASMS/70/MSFT/WINDOWS/MSWINCRT/MSVCIRT.DL_
.cab
I386/ASMS/70/MSFT/WINDOWS/MSWINCRT/MSVCRT.DL_
.cab
I386/ASMS/70/MSFT/WINDOWS/MSWINCRT/MSWINCRT.CA_
.cab
I386/ASMS/70/MSFT/WINDOWS/MSWINCRT/MSWINCRT.MAN
.xml
I386/ASMS/70/POLICY/MSFT/MSWINCRT/MSWINCRT.CA_
.cab
I386/ASMS/70/POLICY/MSFT/MSWINCRT/MSWINCRT.MAN
.xml
I386/ASMS/7000/MSFT/WINDOWS/MSWINCRT/MSVCIRT.DLL
.dll windows:5 windows x86 arch:x86

e23b646356206497bf8908acf54a5366

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

msvcrt

_lseek
__pioinfo
memmove
_write
_read
??_U@YAPAXI@Z
_sopen
_setmode
strtod
isspace
isdigit
isxdigit
strtol
_errno
strtoul
toupper
sprintf
_close
_iob
fputc
fwrite
fgetc
fread
ftell
fseek
__badioinfo
free
_initterm
malloc
_adjust_fdiv
?terminate@@YAXXZ
__dllonexit
_onexit
_except_handler3
??2@YAPAXI@Z
__CxxFrameHandler
??3@YAXPAX@Z
fflush
_purecall

kernel32

LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSection
DisableThreadLibraryCalls

Exports

Exports

??0Iostream_init@@QAE@AAVios@@H@Z
??0Iostream_init@@QAE@XZ
??0exception@@QAE@ABQBD@Z
??0exception@@QAE@ABV0@@Z
??0exception@@QAE@XZ
??0filebuf@@QAE@ABV0@@Z
??0filebuf@@QAE@H@Z
??0filebuf@@QAE@HPADH@Z
??0filebuf@@QAE@XZ
??0fstream@@QAE@ABV0@@Z
??0fstream@@QAE@H@Z
??0fstream@@QAE@HPADH@Z
??0fstream@@QAE@PBDHH@Z
??0fstream@@QAE@XZ
??0ifstream@@QAE@ABV0@@Z
??0ifstream@@QAE@H@Z
??0ifstream@@QAE@HPADH@Z
??0ifstream@@QAE@PBDHH@Z
??0ifstream@@QAE@XZ
??0ios@@IAE@ABV0@@Z
??0ios@@IAE@XZ
??0ios@@QAE@PAVstreambuf@@@Z
??0iostream@@IAE@ABV0@@Z
??0iostream@@IAE@XZ
??0iostream@@QAE@PAVstreambuf@@@Z
??0istream@@IAE@ABV0@@Z
??0istream@@IAE@XZ
??0istream@@QAE@PAVstreambuf@@@Z
??0istream_withassign@@QAE@ABV0@@Z
??0istream_withassign@@QAE@PAVstreambuf@@@Z
??0istream_withassign@@QAE@XZ
??0istrstream@@QAE@ABV0@@Z
??0istrstream@@QAE@PAD@Z
??0istrstream@@QAE@PADH@Z
??0logic_error@@QAE@ABQBD@Z
??0logic_error@@QAE@ABV0@@Z
??0ofstream@@QAE@ABV0@@Z
??0ofstream@@QAE@H@Z
??0ofstream@@QAE@HPADH@Z
??0ofstream@@QAE@PBDHH@Z
??0ofstream@@QAE@XZ
??0ostream@@IAE@ABV0@@Z
??0ostream@@IAE@XZ
??0ostream@@QAE@PAVstreambuf@@@Z
??0ostream_withassign@@QAE@ABV0@@Z
??0ostream_withassign@@QAE@PAVstreambuf@@@Z
??0ostream_withassign@@QAE@XZ
??0ostrstream@@QAE@ABV0@@Z
??0ostrstream@@QAE@PADHH@Z
??0ostrstream@@QAE@XZ
??0stdiobuf@@QAE@ABV0@@Z
??0stdiobuf@@QAE@PAU_iobuf@@@Z
??0stdiostream@@QAE@ABV0@@Z
??0stdiostream@@QAE@PAU_iobuf@@@Z
??0streambuf@@IAE@PADH@Z
??0streambuf@@IAE@XZ
??0streambuf@@QAE@ABV0@@Z
??0strstream@@QAE@ABV0@@Z
??0strstream@@QAE@PADHH@Z
??0strstream@@QAE@XZ
??0strstreambuf@@QAE@ABV0@@Z
??0strstreambuf@@QAE@H@Z
??0strstreambuf@@QAE@P6APAXJ@ZP6AXPAX@Z@Z
??0strstreambuf@@QAE@PADH0@Z
??0strstreambuf@@QAE@PAEH0@Z
??0strstreambuf@@QAE@XZ
??1Iostream_init@@QAE@XZ
??1exception@@UAE@XZ
??1filebuf@@UAE@XZ
??1fstream@@UAE@XZ
??1ifstream@@UAE@XZ
??1ios@@UAE@XZ
??1iostream@@UAE@XZ
??1istream@@UAE@XZ
??1istream_withassign@@UAE@XZ
??1istrstream@@UAE@XZ
??1logic_error@@UAE@XZ
??1ofstream@@UAE@XZ
??1ostream@@UAE@XZ
??1ostream_withassign@@UAE@XZ
??1ostrstream@@UAE@XZ
??1stdiobuf@@UAE@XZ
??1stdiostream@@UAE@XZ
??1streambuf@@UAE@XZ
??1strstream@@UAE@XZ
??1strstreambuf@@UAE@XZ
??4Iostream_init@@QAEAAV0@ABV0@@Z
??4exception@@QAEAAV0@ABV0@@Z
??4filebuf@@QAEAAV0@ABV0@@Z
??4fstream@@QAEAAV0@AAV0@@Z
??4ifstream@@QAEAAV0@ABV0@@Z
??4ios@@IAEAAV0@ABV0@@Z
??4iostream@@IAEAAV0@AAV0@@Z
??4iostream@@IAEAAV0@PAVstreambuf@@@Z
??4istream@@IAEAAV0@ABV0@@Z
??4istream@@IAEAAV0@PAVstreambuf@@@Z
??4istream_withassign@@QAEAAV0@ABV0@@Z
??4istream_withassign@@QAEAAVistream@@ABV1@@Z
??4istream_withassign@@QAEAAVistream@@PAVstreambuf@@@Z
??4istrstream@@QAEAAV0@ABV0@@Z
??4logic_error@@QAEAAV0@ABV0@@Z
??4ofstream@@QAEAAV0@ABV0@@Z
??4ostream@@IAEAAV0@ABV0@@Z
??4ostream@@IAEAAV0@PAVstreambuf@@@Z
??4ostream_withassign@@QAEAAV0@ABV0@@Z
??4ostream_withassign@@QAEAAVostream@@ABV1@@Z
??4ostream_withassign@@QAEAAVostream@@PAVstreambuf@@@Z
??4ostrstream@@QAEAAV0@ABV0@@Z
??4stdiobuf@@QAEAAV0@ABV0@@Z
??4stdiostream@@QAEAAV0@AAV0@@Z
??4streambuf@@QAEAAV0@ABV0@@Z
??4strstream@@QAEAAV0@AAV0@@Z
??4strstreambuf@@QAEAAV0@ABV0@@Z
??5istream@@QAEAAV0@AAC@Z
??5istream@@QAEAAV0@AAD@Z
??5istream@@QAEAAV0@AAE@Z
??5istream@@QAEAAV0@AAF@Z
??5istream@@QAEAAV0@AAG@Z
??5istream@@QAEAAV0@AAH@Z
??5istream@@QAEAAV0@AAI@Z
??5istream@@QAEAAV0@AAJ@Z
??5istream@@QAEAAV0@AAK@Z
??5istream@@QAEAAV0@AAM@Z
??5istream@@QAEAAV0@AAN@Z
??5istream@@QAEAAV0@AAO@Z
??5istream@@QAEAAV0@P6AAAV0@AAV0@@Z@Z
??5istream@@QAEAAV0@P6AAAVios@@AAV1@@Z@Z
??5istream@@QAEAAV0@PAC@Z
??5istream@@QAEAAV0@PAD@Z
??5istream@@QAEAAV0@PAE@Z
??5istream@@QAEAAV0@PAVstreambuf@@@Z
??6ostream@@QAEAAV0@C@Z
??6ostream@@QAEAAV0@D@Z
??6ostream@@QAEAAV0@E@Z
??6ostream@@QAEAAV0@F@Z
??6ostream@@QAEAAV0@G@Z
??6ostream@@QAEAAV0@H@Z
??6ostream@@QAEAAV0@I@Z
??6ostream@@QAEAAV0@J@Z
??6ostream@@QAEAAV0@K@Z
??6ostream@@QAEAAV0@M@Z
??6ostream@@QAEAAV0@N@Z
??6ostream@@QAEAAV0@O@Z
??6ostream@@QAEAAV0@P6AAAV0@AAV0@@Z@Z
??6ostream@@QAEAAV0@P6AAAVios@@AAV1@@Z@Z
??6ostream@@QAEAAV0@PAVstreambuf@@@Z
??6ostream@@QAEAAV0@PBC@Z
??6ostream@@QAEAAV0@PBD@Z
??6ostream@@QAEAAV0@PBE@Z
??6ostream@@QAEAAV0@PBX@Z
??7ios@@QBEHXZ
??Bios@@QBEPAXXZ
??_7exception@@6B@
??_7filebuf@@6B@
??_7fstream@@6B@
??_7ifstream@@6B@
??_7ios@@6B@
??_7iostream@@6B@
??_7istream@@6B@
??_7istream_withassign@@6B@
??_7istrstream@@6B@
??_7logic_error@@6B@
??_7ofstream@@6B@
??_7ostream@@6B@
??_7ostream_withassign@@6B@
??_7ostrstream@@6B@
??_7stdiobuf@@6B@
??_7stdiostream@@6B@
??_7streambuf@@6B@
??_7strstream@@6B@
??_7strstreambuf@@6B@
??_8fstream@@7Bistream@@@
??_8fstream@@7Bostream@@@
??_8ifstream@@7B@
??_8iostream@@7Bistream@@@
??_8iostream@@7Bostream@@@
??_8istream@@7B@
??_8istream_withassign@@7B@
??_8istrstream@@7B@
??_8ofstream@@7B@
??_8ostream@@7B@
??_8ostream_withassign@@7B@
??_8ostrstream@@7B@
??_8stdiostream@@7Bistream@@@
??_8stdiostream@@7Bostream@@@
??_8strstream@@7Bistream@@@
??_8strstream@@7Bostream@@@
??_Dfstream@@QAEXXZ
??_Difstream@@QAEXXZ
??_Diostream@@QAEXXZ
??_Distream@@QAEXXZ
??_Distream_withassign@@QAEXXZ
??_Distrstream@@QAEXXZ
??_Dofstream@@QAEXXZ
??_Dostream@@QAEXXZ
??_Dostream_withassign@@QAEXXZ
??_Dostrstream@@QAEXXZ
??_Dstdiostream@@QAEXXZ
??_Dstrstream@@QAEXXZ
??_Eexception@@UAEPAXI@Z
??_Efilebuf@@UAEPAXI@Z
??_Efstream@@UAEPAXI@Z
??_Eifstream@@UAEPAXI@Z
??_Eios@@UAEPAXI@Z
??_Eiostream@@UAEPAXI@Z
??_Eistream@@UAEPAXI@Z
??_Eistream_withassign@@UAEPAXI@Z
??_Eistrstream@@UAEPAXI@Z
??_Elogic_error@@UAEPAXI@Z
??_Eofstream@@UAEPAXI@Z
??_Eostream@@UAEPAXI@Z
??_Eostream_withassign@@UAEPAXI@Z
??_Eostrstream@@UAEPAXI@Z
??_Estdiobuf@@UAEPAXI@Z
??_Estdiostream@@UAEPAXI@Z
??_Estreambuf@@UAEPAXI@Z
??_Estrstream@@UAEPAXI@Z
??_Estrstreambuf@@UAEPAXI@Z
??_Gexception@@UAEPAXI@Z
??_Gfilebuf@@UAEPAXI@Z
??_Gfstream@@UAEPAXI@Z
??_Gifstream@@UAEPAXI@Z
??_Gios@@UAEPAXI@Z
??_Giostream@@UAEPAXI@Z
??_Gistream@@UAEPAXI@Z
??_Gistream_withassign@@UAEPAXI@Z
??_Gistrstream@@UAEPAXI@Z
??_Glogic_error@@UAEPAXI@Z
??_Gofstream@@UAEPAXI@Z
??_Gostream@@UAEPAXI@Z
??_Gostream_withassign@@UAEPAXI@Z
??_Gostrstream@@UAEPAXI@Z
??_Gstdiobuf@@UAEPAXI@Z
??_Gstdiostream@@UAEPAXI@Z
??_Gstreambuf@@UAEPAXI@Z
??_Gstrstream@@UAEPAXI@Z
??_Gstrstreambuf@@UAEPAXI@Z
?adjustfield@ios@@2JB
?allocate@streambuf@@IAEHXZ
?attach@filebuf@@QAEPAV1@H@Z
?attach@fstream@@QAEXH@Z
?attach@ifstream@@QAEXH@Z
?attach@ofstream@@QAEXH@Z
?bad@ios@@QBEHXZ
?base@streambuf@@IBEPADXZ
?basefield@ios@@2JB
?binary@filebuf@@2HB
?bitalloc@ios@@SAJXZ
?blen@streambuf@@IBEHXZ
?cerr@@3Vostream_withassign@@A
?cin@@3Vistream_withassign@@A
?clear@ios@@QAEXH@Z
?clog@@3Vostream_withassign@@A
?close@filebuf@@QAEPAV1@XZ
?close@fstream@@QAEXXZ
?close@ifstream@@QAEXXZ
?close@ofstream@@QAEXXZ
?clrlock@ios@@QAAXXZ
?clrlock@streambuf@@QAEXXZ
?cout@@3Vostream_withassign@@A
?dbp@streambuf@@QAEXXZ
?dec@@YAAAVios@@AAV1@@Z
?delbuf@ios@@QAEXH@Z
?delbuf@ios@@QBEHXZ
?doallocate@streambuf@@MAEHXZ
?doallocate@strstreambuf@@MAEHXZ
?eatwhite@istream@@QAEXXZ
?eback@streambuf@@IBEPADXZ
?ebuf@streambuf@@IBEPADXZ
?egptr@streambuf@@IBEPADXZ
?endl@@YAAAVostream@@AAV1@@Z
?ends@@YAAAVostream@@AAV1@@Z
?eof@ios@@QBEHXZ
?epptr@streambuf@@IBEPADXZ
?fLockcInit@ios@@0HA
?fail@ios@@QBEHXZ
?fd@filebuf@@QBEHXZ
?fd@fstream@@QBEHXZ
?fd@ifstream@@QBEHXZ
?fd@ofstream@@QBEHXZ
?fill@ios@@QAEDD@Z
?fill@ios@@QBEDXZ
?flags@ios@@QAEJJ@Z
?flags@ios@@QBEJXZ
?floatfield@ios@@2JB
?flush@@YAAAVostream@@AAV1@@Z
?flush@ostream@@QAEAAV1@XZ
?freeze@strstreambuf@@QAEXH@Z
?gbump@streambuf@@IAEXH@Z
?gcount@istream@@QBEHXZ
?get@istream@@IAEAAV1@PADHH@Z
?get@istream@@QAEAAV1@AAC@Z
?get@istream@@QAEAAV1@AAD@Z
?get@istream@@QAEAAV1@AAE@Z
?get@istream@@QAEAAV1@AAVstreambuf@@D@Z
?get@istream@@QAEAAV1@PACHD@Z
?get@istream@@QAEAAV1@PADHD@Z
?get@istream@@QAEAAV1@PAEHD@Z
?get@istream@@QAEHXZ
?getdouble@istream@@AAEHPADH@Z
?getint@istream@@AAEHPAD@Z
?getline@istream@@QAEAAV1@PACHD@Z
?getline@istream@@QAEAAV1@PADHD@Z
?getline@istream@@QAEAAV1@PAEHD@Z
?good@ios@@QBEHXZ
?gptr@streambuf@@IBEPADXZ
?hex@@YAAAVios@@AAV1@@Z
?ignore@istream@@QAEAAV1@HH@Z
?in_avail@streambuf@@QBEHXZ
?init@ios@@IAEXPAVstreambuf@@@Z
?ipfx@istream@@QAEHH@Z
?is_open@filebuf@@QBEHXZ
?is_open@fstream@@QBEHXZ
?is_open@ifstream@@QBEHXZ
?is_open@ofstream@@QBEHXZ
?isfx@istream@@QAEXXZ
?iword@ios@@QBEAAJH@Z
?lock@ios@@QAAXXZ
?lock@streambuf@@QAEXXZ
?lockbuf@ios@@QAAXXZ
?lockc@ios@@KAXXZ
?lockptr@ios@@IAEPAU_CRT_CRITICAL_SECTION@@XZ
?lockptr@streambuf@@IAEPAU_CRT_CRITICAL_SECTION@@XZ
?oct@@YAAAVios@@AAV1@@Z
?open@filebuf@@QAEPAV1@PBDHH@Z
?open@fstream@@QAEXPBDHH@Z
?open@ifstream@@QAEXPBDHH@Z
?open@ofstream@@QAEXPBDHH@Z
?openprot@filebuf@@2HB
?opfx@ostream@@QAEHXZ
?osfx@ostream@@QAEXXZ
?out_waiting@streambuf@@QBEHXZ
?overflow@filebuf@@UAEHH@Z
?overflow@stdiobuf@@UAEHH@Z
?overflow@strstreambuf@@UAEHH@Z
?pbackfail@stdiobuf@@UAEHH@Z
?pbackfail@streambuf@@UAEHH@Z
?pbase@streambuf@@IBEPADXZ
?pbump@streambuf@@IAEXH@Z
?pcount@ostrstream@@QBEHXZ
?pcount@strstream@@QBEHXZ
?peek@istream@@QAEHXZ
?pptr@streambuf@@IBEPADXZ
?precision@ios@@QAEHH@Z
?precision@ios@@QBEHXZ
?put@ostream@@QAEAAV1@C@Z
?put@ostream@@QAEAAV1@D@Z
?put@ostream@@QAEAAV1@E@Z
?putback@istream@@QAEAAV1@D@Z
?pword@ios@@QBEAAPAXH@Z
?rdbuf@fstream@@QBEPAVfilebuf@@XZ
?rdbuf@ifstream@@QBEPAVfilebuf@@XZ
?rdbuf@ios@@QBEPAVstreambuf@@XZ
?rdbuf@istrstream@@QBEPAVstrstreambuf@@XZ
?rdbuf@ofstream@@QBEPAVfilebuf@@XZ
?rdbuf@ostrstream@@QBEPAVstrstreambuf@@XZ
?rdbuf@stdiostream@@QBEPAVstdiobuf@@XZ
?rdbuf@strstream@@QBEPAVstrstreambuf@@XZ
?rdstate@ios@@QBEHXZ
?read@istream@@QAEAAV1@PACH@Z
?read@istream@@QAEAAV1@PADH@Z
?read@istream@@QAEAAV1@PAEH@Z
?sbumpc@streambuf@@QAEHXZ
?seekg@istream@@QAEAAV1@J@Z
?seekg@istream@@QAEAAV1@JW4seek_dir@ios@@@Z
?seekoff@filebuf@@UAEJJW4seek_dir@ios@@H@Z
?seekoff@stdiobuf@@UAEJJW4seek_dir@ios@@H@Z
?seekoff@streambuf@@UAEJJW4seek_dir@ios@@H@Z
?seekoff@strstreambuf@@UAEJJW4seek_dir@ios@@H@Z
?seekp@ostream@@QAEAAV1@J@Z
?seekp@ostream@@QAEAAV1@JW4seek_dir@ios@@@Z
?seekpos@streambuf@@UAEJJH@Z
?setb@streambuf@@IAEXPAD0H@Z
?setbuf@filebuf@@UAEPAVstreambuf@@PADH@Z
?setbuf@fstream@@QAEPAVstreambuf@@PADH@Z
?setbuf@ifstream@@QAEPAVstreambuf@@PADH@Z
?setbuf@ofstream@@QAEPAVstreambuf@@PADH@Z
?setbuf@streambuf@@UAEPAV1@PADH@Z
?setbuf@strstreambuf@@UAEPAVstreambuf@@PADH@Z
?setf@ios@@QAEJJ@Z
?setf@ios@@QAEJJJ@Z
?setg@streambuf@@IAEXPAD00@Z
?setlock@ios@@QAAXXZ
?setlock@streambuf@@QAEXXZ
?setmode@filebuf@@QAEHH@Z
?setmode@fstream@@QAEHH@Z
?setmode@ifstream@@QAEHH@Z
?setmode@ofstream@@QAEHH@Z
?setp@streambuf@@IAEXPAD0@Z
?setrwbuf@stdiobuf@@QAEHHH@Z
?sgetc@streambuf@@QAEHXZ
?sgetn@streambuf@@QAEHPADH@Z
?sh_none@filebuf@@2HB
?sh_read@filebuf@@2HB
?sh_write@filebuf@@2HB
?snextc@streambuf@@QAEHXZ
?sputbackc@streambuf@@QAEHD@Z
?sputc@streambuf@@QAEHH@Z
?sputn@streambuf@@QAEHPBDH@Z
?stdiofile@stdiobuf@@QAEPAU_iobuf@@XZ
?stossc@streambuf@@QAEXXZ
?str@istrstream@@QAEPADXZ
?str@ostrstream@@QAEPADXZ
?str@strstream@@QAEPADXZ
?str@strstreambuf@@QAEPADXZ
?sunk_with_stdio@ios@@0HA
?sync@filebuf@@UAEHXZ
?sync@istream@@QAEHXZ
?sync@stdiobuf@@UAEHXZ
?sync@streambuf@@UAEHXZ
?sync@strstreambuf@@UAEHXZ
?sync_with_stdio@ios@@SAXXZ
?tellg@istream@@QAEJXZ
?tellp@ostream@@QAEJXZ
?text@filebuf@@2HB
?tie@ios@@QAEPAVostream@@PAV2@@Z
?tie@ios@@QBEPAVostream@@XZ
?unbuffered@streambuf@@IAEXH@Z
?unbuffered@streambuf@@IBEHXZ
?underflow@filebuf@@UAEHXZ
?underflow@stdiobuf@@UAEHXZ
?underflow@strstreambuf@@UAEHXZ
?unlock@ios@@QAAXXZ
?unlock@streambuf@@QAEXXZ
?unlockbuf@ios@@QAAXXZ
?unlockc@ios@@KAXXZ
?unsetf@ios@@QAEJJ@Z
?what@exception@@UBEPBDXZ
?width@ios@@QAEHH@Z
?width@ios@@QBEHXZ
?write@ostream@@QAEAAV1@PBCH@Z
?write@ostream@@QAEAAV1@PBDH@Z
?write@ostream@@QAEAAV1@PBEH@Z
?writepad@ostream@@AAEAAV1@PBD0@Z
?ws@@YAAAVistream@@AAV1@@Z
?x_curindex@ios@@0HA
?x_lockc@ios@@0U_CRT_CRITICAL_SECTION@@A
?x_maxbit@ios@@0JA
?x_statebuf@ios@@0PAJA
?xalloc@ios@@SAHXZ
?xsgetn@streambuf@@UAEHPADH@Z
?xsputn@streambuf@@UAEHPBDH@Z
__dummy_export
_mtlock
_mtunlock

Sections

.text
Size: 45KB - Virtual size: 44KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 488B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/ASMS/7000/MSFT/WINDOWS/MSWINCRT/MSVCRT.DLL
.dll windows:5 windows x86 arch:x86

2e1eba8cb75cfc08a34c0859ae1374d4

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

MultiByteToWideChar
GetLastError
WideCharToMultiByte
Sleep
Beep
FindClose
FileTimeToSystemTime
FileTimeToLocalFileTime
FindFirstFileA
FindNextFileA
GetDiskFreeSpaceA
GetLogicalDrives
SetErrorMode
FindFirstFileW
FindNextFileW
GetCurrentThreadId
TlsSetValue
GetCommandLineA
GetVersionExA
GetFileAttributesA
SetEnvironmentVariableA
GetCurrentDirectoryA
SetCurrentDirectoryA
SetFileAttributesA
GetFullPathNameA
GetDriveTypeA
GetCurrentProcessId
CreateDirectoryA
RemoveDirectoryA
DeleteFileA
GetFileAttributesW
SetEnvironmentVariableW
GetCurrentDirectoryW
SetCurrentDirectoryW
SetFileAttributesW
GetFullPathNameW
CreateDirectoryW
DeleteFileW
MoveFileW
RemoveDirectoryW
GetDriveTypeW
MoveFileA
RaiseException
RtlUnwind
IsBadReadPtr
SetUnhandledExceptionFilter
IsBadWritePtr
IsBadCodePtr
CloseHandle
GetExitCodeProcess
WaitForSingleObject
GetProcAddress
LoadLibraryA
FreeLibrary
CreateProcessA
CreateProcessW
HeapReAlloc
HeapAlloc
HeapFree
VirtualFree
VirtualAlloc
HeapValidate
HeapCompact
HeapWalk
HeapSize
VirtualProtect
GetSystemInfo
VirtualQuery
GetModuleHandleA
GetModuleFileNameA
GetProcessHeap
GetEnvironmentVariableA
HeapDestroy
HeapCreate
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
DeleteCriticalSection
ReadConsoleA
SetConsoleMode
GetConsoleMode
IsDBCSLeadByteEx
GetConsoleCP
ReadConsoleW
SetEndOfFile
FlushFileBuffers
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
DuplicateHandle
GetCurrentProcess
GetFileInformationByHandle
PeekNamedPipe
SetStdHandle
EnterCriticalSection
LeaveCriticalSection
ReadConsoleInputA
PeekConsoleInputA
GetNumberOfConsoleInputEvents
ReadConsoleInputW
LockFile
UnlockFile
SetFilePointer
CreateFileA
CreatePipe
ReadFile
CreateFileW
WriteFile
GetACP
GetOEMCP
GetCPInfo
UnhandledExceptionFilter
CompareStringA
CompareStringW
GetLocaleInfoA
GetLocaleInfoW
GetStringTypeA
GetStringTypeW
LCMapStringA
LCMapStringW
SetConsoleCtrlHandler
GetCommandLineW
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
InitializeCriticalSection
SetLastError
GetUserDefaultLCID
EnumSystemLocalesA
IsValidLocale
IsValidCodePage
ExitProcess
TlsFree
TlsGetValue
GetCurrentThread
TlsAlloc
ExitThread
ResumeThread
CreateThread
GetModuleFileNameW
GetTimeFormatA
GetDateFormatA
GetTimeZoneInformation
GetSystemTimeAsFileTime
SetFileTime
LocalFileTimeToFileTime
SystemTimeToFileTime
GetLocalTime
SetLocalTime

ntdll

RtlGetNtVersionNumbers

Exports

Exports

$I10_OUTPUT
??0__non_rtti_object@@QAE@ABV0@@Z
??0__non_rtti_object@@QAE@PBD@Z
??0bad_cast@@AAE@PBQBD@Z
??0bad_cast@@QAE@ABQBD@Z
??0bad_cast@@QAE@ABV0@@Z
??0bad_cast@@QAE@PBD@Z
??0bad_typeid@@QAE@ABV0@@Z
??0bad_typeid@@QAE@PBD@Z
??0exception@@QAE@ABQBD@Z
??0exception@@QAE@ABV0@@Z
??0exception@@QAE@XZ
??1__non_rtti_object@@UAE@XZ
??1bad_cast@@UAE@XZ
??1bad_typeid@@UAE@XZ
??1exception@@UAE@XZ
??1type_info@@UAE@XZ
??2@YAPAXI@Z
??3@YAXPAX@Z
??4__non_rtti_object@@QAEAAV0@ABV0@@Z
??4bad_cast@@QAEAAV0@ABV0@@Z
??4bad_typeid@@QAEAAV0@ABV0@@Z
??4exception@@QAEAAV0@ABV0@@Z
??8type_info@@QBEHABV0@@Z
??9type_info@@QBEHABV0@@Z
??_7__non_rtti_object@@6B@
??_7bad_cast@@6B@
??_7bad_typeid@@6B@
??_7exception@@6B@
??_E__non_rtti_object@@UAEPAXI@Z
??_Ebad_cast@@UAEPAXI@Z
??_Ebad_typeid@@UAEPAXI@Z
??_Eexception@@UAEPAXI@Z
??_Fbad_cast@@QAEXXZ
??_Fbad_typeid@@QAEXXZ
??_G__non_rtti_object@@UAEPAXI@Z
??_Gbad_cast@@UAEPAXI@Z
??_Gbad_typeid@@UAEPAXI@Z
??_Gexception@@UAEPAXI@Z
??_U@YAPAXI@Z
??_V@YAXPAX@Z
?_query_new_handler@@YAP6AHI@ZXZ
?_query_new_mode@@YAHXZ
?_set_new_handler@@YAP6AHI@ZP6AHI@Z@Z
?_set_new_mode@@YAHH@Z
?_set_se_translator@@YAP6AXIPAU_EXCEPTION_POINTERS@@@ZP6AXI0@Z@Z
?before@type_info@@QBEHABV1@@Z
?name@type_info@@QBEPBDXZ
?raw_name@type_info@@QBEPBDXZ
?set_new_handler@@YAP6AXXZP6AXXZ@Z
?set_terminate@@YAP6AXXZP6AXXZ@Z
?set_unexpected@@YAP6AXXZP6AXXZ@Z
?terminate@@YAXXZ
?unexpected@@YAXXZ
?what@exception@@UBEPBDXZ
_CIacos
_CIasin
_CIatan
_CIatan2
_CIcos
_CIcosh
_CIexp
_CIfmod
_CIlog
_CIlog10
_CIpow
_CIsin
_CIsinh
_CIsqrt
_CItan
_CItanh
_CxxThrowException
_EH_prolog
_Getdays
_Getmonths
_Gettnames
_HUGE
_Strftime
_XcptFilter
__CxxCallUnwindDtor
__CxxDetectRethrow
__CxxExceptionFilter
__CxxFrameHandler
__CxxLongjmpUnwind
__CxxQueryExceptionSize
__CxxRegisterExceptionObject
__CxxUnregisterExceptionObject
__DestructExceptionObject
__RTCastToVoid
__RTDynamicCast
__RTtypeid
__STRINGTOLD
___lc_codepage_func
___lc_handle_func
___mb_cur_max_func
___setlc_active_func
___unguarded_readlc_active_add_func
__argc
__argv
__badioinfo
__crtCompareStringA
__crtCompareStringW
__crtGetLocaleInfoW
__crtGetStringTypeW
__crtLCMapStringA
__crtLCMapStringW
__dllonexit
__doserrno
__fpecode
__getmainargs
__initenv
__iob_func
__isascii
__iscsym
__iscsymf
__lc_codepage
__lc_collate_cp
__lc_handle
__lconv_init
__mb_cur_max
__p___argc
__p___argv
__p___initenv
__p___mb_cur_max
__p___wargv
__p___winitenv
__p__acmdln
__p__amblksiz
__p__commode
__p__daylight
__p__dstbias
__p__environ
__p__fileinfo
__p__fmode
__p__iob
__p__mbcasemap
__p__mbctype
__p__osver
__p__pctype
__p__pgmptr
__p__pwctype
__p__timezone
__p__tzname
__p__wcmdln
__p__wenviron
__p__winmajor
__p__winminor
__p__winver
__p__wpgmptr
__pctype_func
__pioinfo
__pxcptinfoptrs
__set_app_type
__setlc_active
__setusermatherr
__threadhandle
__threadid
__toascii
__unDName
__unDNameEx
__uncaught_exception
__unguarded_readlc_active
__wargv
__wcserror
__wgetmainargs
__winitenv
_abnormal_termination
_access
_acmdln
_adj_fdiv_m16i
_adj_fdiv_m32
_adj_fdiv_m32i
_adj_fdiv_m64
_adj_fdiv_r
_adj_fdivr_m16i
_adj_fdivr_m32
_adj_fdivr_m32i
_adj_fdivr_m64
_adj_fpatan
_adj_fprem
_adj_fprem1
_adj_fptan
_adjust_fdiv
_aexit_rtn
_aligned_free
_aligned_malloc
_aligned_offset_malloc
_aligned_offset_realloc
_aligned_realloc
_amsg_exit
_assert
_atodbl
_atoi64
_atoldbl
_beep
_beginthread
_beginthreadex
_c_exit
_cabs
_callnewh
_cexit
_cgets
_cgetws
_chdir
_chdrive
_chgsign
_chkesp
_chmod
_chsize
_clearfp
_close
_commit
_commode
_control87
_controlfp
_copysign
_cprintf
_cputs
_cputws
_creat
_cscanf
_ctime64
_ctype
_cwait
_cwprintf
_cwscanf
_daylight
_dstbias
_dup
_dup2
_ecvt
_endthread
_endthreadex
_environ
_eof
_errno
_except_handler2
_except_handler3
_execl
_execle
_execlp
_execlpe
_execv
_execve
_execvp
_execvpe
_exit
_expand
_fcloseall
_fcvt
_fdopen
_fgetchar
_fgetwchar
_filbuf
_fileinfo
_filelength
_filelengthi64
_fileno
_findclose
_findfirst
_findfirst64
_findfirsti64
_findnext
_findnext64
_findnexti64
_finite
_flsbuf
_flushall
_fmode
_fpclass
_fpieee_flt
_fpreset
_fputchar
_fputwchar
_fsopen
_fstat
_fstat64
_fstati64
_ftime
_ftime64
_ftol
_fullpath
_futime
_futime64
_gcvt
_get_osfhandle
_get_sbh_threshold
_getch
_getche
_getcwd
_getdcwd
_getdiskfree
_getdllprocaddr
_getdrive
_getdrives
_getmaxstdio
_getmbcp
_getpid
_getsystime
_getw
_getwch
_getwche
_getws
_global_unwind2
_gmtime64
_heapadd
_heapchk
_heapmin
_heapset
_heapused
_heapwalk
_hypot
_i64toa
_i64tow
_initterm
_inp
_inpd
_inpw
_iob
_isatty
_isctype
_ismbbalnum
_ismbbalpha
_ismbbgraph
_ismbbkalnum
_ismbbkana
_ismbbkprint
_ismbbkpunct
_ismbblead
_ismbbprint
_ismbbpunct
_ismbbtrail
_ismbcalnum
_ismbcalpha
_ismbcdigit
_ismbcgraph
_ismbchira
_ismbckata
_ismbcl0
_ismbcl1
_ismbcl2
_ismbclegal
_ismbclower
_ismbcprint
_ismbcpunct
_ismbcspace
_ismbcsymbol
_ismbcupper
_ismbslead
_ismbstrail
_isnan
_itoa
_itow
_j0
_j1
_jn
_kbhit
_lfind
_loaddll
_local_unwind2
_localtime64
_lock
_locking
_logb
_longjmpex
_lrotl
_lrotr
_lsearch
_lseek
_lseeki64
_ltoa
_ltow
_makepath
_mbbtombc
_mbbtype
_mbcasemap
_mbccpy
_mbcjistojms
_mbcjmstojis
_mbclen
_mbctohira
_mbctokata
_mbctolower
_mbctombb
_mbctoupper
_mbctype
_mbsbtype
_mbscat
_mbschr
_mbscmp
_mbscoll
_mbscpy
_mbscspn
_mbsdec
_mbsdup
_mbsicmp
_mbsicoll
_mbsinc
_mbslen
_mbslwr
_mbsnbcat
_mbsnbcmp
_mbsnbcnt
_mbsnbcoll
_mbsnbcpy
_mbsnbicmp
_mbsnbicoll
_mbsnbset
_mbsncat
_mbsnccnt
_mbsncmp
_mbsncoll
_mbsncpy
_mbsnextc
_mbsnicmp
_mbsnicoll
_mbsninc
_mbsnset
_mbspbrk
_mbsrchr
_mbsrev
_mbsset
_mbsspn
_mbsspnp
_mbsstr
_mbstok
_mbstrlen
_mbsupr
_memccpy
_memicmp
_mkdir
_mktemp
_mktime64
_msize
_nextafter
_onexit
_open
_open_osfhandle
_osplatform
_osver
_outp
_outpd
_outpw
_pclose
_pctype
_pgmptr
_pipe
_popen
_purecall
_putch
_putenv
_putw
_putwch
_putws
_pwctype
_read
_resetstkoflw
_rmdir
_rmtmp
_rotl
_rotr
_safe_fdiv
_safe_fdivr
_safe_fprem
_safe_fprem1
_scalb
_scprintf
_scwprintf
_searchenv
_seh_longjmp_unwind
_set_SSE2_enable
_set_error_mode
_set_sbh_threshold
_seterrormode
_setjmp
_setjmp3
_setmaxstdio
_setmbcp
_setmode
_setsystime
_sleep
_snprintf
_snscanf
_snwprintf
_snwscanf
_sopen
_spawnl
_spawnle
_spawnlp
_spawnlpe
_spawnv
_spawnve
_spawnvp
_spawnvpe
_splitpath
_stat
_stat64
_stati64
_statusfp
_strcmpi

Sections

.text
Size: 283KB - Virtual size: 283KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 18KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 992B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/ASMS/7000/MSFT/WINDOWS/MSWINCRT/MSWINCRT.CAT
I386/ASMS/7000/MSFT/WINDOWS/MSWINCRT/MSWINCRT.MAN
.xml
I386/ASP51.DL_
.cab
I386/ASPPERF.DL_
.cab
I386/ASPTXN.DL_
.cab
I386/ASROC.IN_
.cab
I386/ASR_FMT.EX_
.cab
I386/ASR_LDM.EX_
.cab
I386/ASR_PFU.EX_
.cab
I386/ASTRO.BM_
.cab
I386/ASWRULE.GI_
.cab
I386/ASYCFILT.DL_
.cab
I386/ASYNCEQN.IN_
.cab
I386/ASYNCMAC.SY_
.cab
I386/AT.EX_
.cab
I386/ATABOOT.SY_
.cab
I386/ATAPI.SY_
.cab
I386/ATI1XWDM.IN_
.cab
I386/ATIINTAA.IN_
.cab
I386/ATIIXPAA.IN_
.cab
I386/ATIIXPAG.IN_
.cab
I386/ATIM128.IN_
.cab
I386/ATIMPAB.IN_
.cab
I386/ATIRAGE3.IN_
.cab
I386/ATIVIDIN.IN_
.cab
I386/ATIXPWDM.IN_
.cab
I386/ATKCTRS.DL_
.cab
I386/ATL.DL_
.cab
I386/ATM.CH_
.cab
I386/ATMADM.EX_
.cab
I386/ATMARPC.SY_
.cab
I386/ATMEPVC.SY_
.cab
I386/ATMFD.DL_
.cab
I386/ATMLANE.SY_
.cab
I386/ATMLIB.DL_
.cab
I386/ATMPVCNO.DL_
.cab
I386/ATMUNI.SY_
.cab
I386/ATOMIC.WM_
.cab
I386/ATRACE.DL_
.cab
I386/ATT.HT_
.cab
I386/ATTRIB.EX_
.cab
I386/AU.IN_
.cab
I386/AUDIOCDC.HL_
.cab
I386/AUDIOSRV.DL_
.cab
I386/AUDITUSR.EX_
.cab
I386/AUDITW.CH_
.cab
I386/AUSRINFO.HT_
.cab
I386/AUTHFILT.DL_
.cab
I386/AUTHSERV.MI_
.cab
I386/AUTHZ.DL_
.cab
I386/AUTOCHK.EXE
.sys windows:5 windows x86 arch:x86

86dc0edc2316855910bb10af3d8fe8da

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

autochk.pdb

Imports

ntdll

wcslen
_wcsicmp
wcsstr
NtClose
NtQueryValueKey
NtOpenKey
RtlInitUnicodeString
NtQuerySymbolicLinkObject
NtOpenSymbolicLinkObject
RtlPrefixUnicodeString
RtlEqualUnicodeString
NtQueryDirectoryObject
NtOpenDirectoryObject
NtTerminateProcess
RtlUnhandledExceptionFilter
RtlUnwind
NtQueryVirtualMemory
DbgBreakPoint
RtlAllocateHeap
RtlUnicodeStringToAnsiString
RtlNormalizeProcessParams
NtDelayExecution
isprint
swprintf
_allmul
_alldiv
NtReadFile
NtDeviceIoControlFile
_chkstk
NtFsControlFile
NtOpenFile
NtQueryInformationFile
NtWriteFile
memmove
NtQueryVolumeInformationFile
RtlOemToUnicodeN
RtlMultiByteToUnicodeN
RtlUnicodeToOemN
RtlUnicodeToMultiByteN
sprintf
_wcsupr
_wcslwr
wcscmp
wcsspn
atol
RtlFreeUnicodeString
RtlDosPathNameToNtPathName_U
NtShutdownSystem
NtAdjustPrivilegesToken
NtOpenProcessToken
NtQuerySystemTime
NtQuerySystemInformation
NtSetInformationFile
NtCreateFile
RtlValidRelativeSecurityDescriptor
RtlExpandEnvironmentStrings_U
NtSetThreadExecutionState
_aulldiv
RtlFreeHeap
RtlSizeHeap
qsort
NtDisplayString
NtWaitForMultipleObjects
NtCreateEvent
RtlFormatMessage
RtlAnsiStringToUnicodeString
RtlInitAnsiString
RtlFindMessage
wcscpy
wcsncmp
RtlQueryRegistryValues
RtlWriteRegistryValue
RtlSubAuthoritySid
RtlInitializeSid
RtlLengthRequiredSid
RtlAddAce
RtlCopySid
RtlLengthSid
RtlQueryInformationAcl
RtlCreateAcl
RtlAddAccessAllowedAce
RtlLengthSecurityDescriptor
RtlValidSecurityDescriptor
RtlNewSecurityObject
RtlSetDaclSecurityDescriptor
RtlSetGroupSecurityDescriptor
RtlCreateSecurityDescriptor
RtlTimeToTimeFields
RtlSystemTimeToLocalTime
_allrem
RtlDecompressBuffer
RtlUpcaseUnicodeString
RtlRaiseStatus
NtTerminateThread
NtSetEvent
NtWaitForSingleObject
NtQueryInformationThread
RtlCreateUserThread
RtlComputeCrc32
DbgPrint
RtlDeleteElementGenericTable
RtlFindSetBits
RtlClearBits
RtlInitializeBitMap
RtlLookupElementGenericTable
RtlNumberOfSetBits
RtlEnumerateGenericTableWithoutSplaying
RtlSetBits
RtlInsertElementGenericTable
RtlInitializeGenericTable
NtQueryPerformanceCounter

Sections

.text
Size: 366KB - Virtual size: 365KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 179KB - Virtual size: 179KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/AUTOCONV.EX_
.cab
I386/AUTODISC.DL_
.cab
I386/AUTOEXEC.NT_
.cab
I386/AUTOFMT.EXE
.sys windows:5 windows x86 arch:x86

73d5b99581b661c396f26b1627af4eca

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

autofmt.pdb

Imports

ntdll

_wcsicmp
_wcsupr
_allmul
_alldiv
NtDelayExecution
_stricmp
atoi
NtTerminateProcess
RtlUnhandledExceptionFilter
RtlUnwind
NtQueryVirtualMemory
DbgBreakPoint
RtlAllocateHeap
RtlUnicodeStringToAnsiString
RtlNormalizeProcessParams
wcslen
isprint
swprintf
RtlOemToUnicodeN
RtlMultiByteToUnicodeN
RtlUnicodeToOemN
RtlUnicodeToMultiByteN
sprintf
memmove
_wcslwr
wcscmp
_chkstk
RtlFreeUnicodeString
RtlDosPathNameToNtPathName_U
NtClose
NtShutdownSystem
NtAdjustPrivilegesToken
NtOpenProcessToken
NtQuerySystemTime
NtQuerySystemInformation
NtQuerySymbolicLinkObject
NtOpenSymbolicLinkObject
RtlInitUnicodeString
NtSetInformationFile
NtQueryInformationFile
NtOpenFile
NtWriteFile
NtCreateFile
NtFsControlFile
RtlValidRelativeSecurityDescriptor
RtlExpandEnvironmentStrings_U
NtSetThreadExecutionState
NtReadFile
NtDeviceIoControlFile
NtQueryVolumeInformationFile
NtDisplayString
NtWaitForMultipleObjects
NtCreateEvent
_aulldiv
RtlFreeHeap
RtlSizeHeap
RtlFormatMessage
RtlAnsiStringToUnicodeString
RtlInitAnsiString
RtlFindMessage
wcscpy
wcsncmp
RtlQueryRegistryValues
RtlWriteRegistryValue
RtlSubAuthoritySid
RtlInitializeSid
RtlLengthRequiredSid
RtlAddAce
RtlCopySid
RtlLengthSid
RtlQueryInformationAcl
RtlCreateAcl
RtlAddAccessAllowedAce
RtlLengthSecurityDescriptor
RtlValidSecurityDescriptor
RtlNewSecurityObject
RtlSetDaclSecurityDescriptor
RtlSetGroupSecurityDescriptor
RtlCreateSecurityDescriptor
RtlTimeToTimeFields
RtlSystemTimeToLocalTime
NtSetVolumeInformationFile
RtlPrefixUnicodeString
NtQueryValueKey
NtOpenKey
_allrem
RtlDecompressBuffer
RtlUpcaseUnicodeString
RtlRaiseStatus
NtTerminateThread
NtSetEvent
NtWaitForSingleObject
NtQueryInformationThread
RtlCreateUserThread
RtlComputeCrc32
DbgPrint
RtlDeleteElementGenericTable
RtlFindSetBits
RtlClearBits
RtlInitializeBitMap
RtlLookupElementGenericTable
RtlNumberOfSetBits
RtlEnumerateGenericTableWithoutSplaying
RtlSetBits
RtlInsertElementGenericTable
RtlInitializeGenericTable
NtQueryPerformanceCounter

Sections

.text
Size: 358KB - Virtual size: 358KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 179KB - Virtual size: 179KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/AUTOLFN.EX_
.cab
I386/AUTOUPDT.HT_
.cab
I386/AUTUMN.JP_
.cab
I386/AU_PLCY.HT_
.cab
I386/AVC.IN_
.cab
I386/AVICAP.DL_
.cab
I386/AVICAP32.DL_
.cab
I386/AVIFIL32.DL_
.cab
I386/AVIFILE.DL_
.cab
I386/AVMETER.DL_
.cab
I386/AVMISDN.IN_
.cab
I386/AVTAPI.DL_
.cab
I386/AVWAV.DL_
.cab
I386/AXANT5.IN_
.cab
I386/AXCTRNM.H2_
.cab
I386/AXPERF.IN_
.cab
I386/AZROLES.DL_
.cab
I386/AZUL.JP_
.cab
I386/BACKDOWN.JP_
.cab
I386/BACKOFF.JP_
.cab
I386/BACKOVER.JP_
.cab
I386/BACKUP.JP_
.cab
I386/BADEULA.HT_
.cab
I386/BADPKEY.HT_
.cab
I386/BALLOON.XS_
.cab
I386/BANANA.AN_
.cab
I386/BANSHEE.IN_
.cab
I386/BAR.XS_
.cab
I386/BARBER.AN_
.cab
I386/BASECRED.XS_
.cab
I386/BASEEAP.XS_
.cab
I386/BASEEAP0.XS_
.cab
I386/BASEEAP1.XS_
.cab
I386/BASESRV.DL_
.cab
I386/BATMETER.DL_
.cab
I386/BATT.DL_
.cab
I386/BATTERY.IN_
.cab
I386/BCKG.CH_
.cab
I386/BCKG.DL_
.cab
I386/BCKGRES.DL_
.cab
I386/BCKGZM.EX_
.cab
I386/BDA.IN_
.cab
I386/BEACH.BM_
.cab
I386/BEAM_I.CU_
.cab
I386/BEAM_IL.CU_
.cab
I386/BEAM_IM.CU_
.cab
I386/BEAM_L.CU_
.cab
I386/BEAM_M.CU_
.cab
I386/BEAM_R.CU_
.cab
I386/BEAM_RL.CU_
.cab
I386/BEAM_RM.CU_
.cab
I386/BEEP.SY_
.cab
I386/BEETHOV9.WM_
.cab
I386/BIDISPL.DL_
.cab
I386/BIG5.NL_
.cab
I386/BIGFOOT.BM_
.cab
I386/BINLSVC.DL_
.cab
I386/BIOS1.RO_
.cab
I386/BIOS4.RO_
.cab
I386/BIOSINFO.INF
I386/BITSPRX2.DL_
.cab
I386/BITSPRX3.DL_
.cab
I386/BITSPRX4.DL_
.cab
I386/BKTR.GI_
.cab
I386/BKTRH.GI_
.cab
I386/BLACKBOX.DL_
.cab
I386/BLANK.HT_
.cab
I386/BLANK.TXT
I386/BLANKBKG.GI_
.cab
I386/BLASTCLN.EX_
.cab
I386/BLIP.WA_
.cab
I386/BLISS.JP_
.cab
I386/BLUEBARH.GI_
.cab
I386/BLUEBARV.GI_
.cab
I386/BLUEHILL.JP_
.cab
I386/BLUESKY.WM_
.cab
I386/BLUE_SS.DL_
.cab
I386/BLULAC16.BM_
.cab
I386/BLURBS.CH_
.cab
I386/BLUTOOTH.CH_
.cab
I386/BNTS.DL_
.cab
I386/BOOTCFG.EX_
.cab
I386/BOOTCONP.CH_
.cab
I386/BOOTFIX.BIN
I386/BOOTOK.EX_
.cab
I386/BOOTVID.DL_
.cab
I386/BOOTVRFY.EX_
.cab
I386/BOPOMOFO.NL_
.cab
I386/BOPOMOFO.UC_
.cab
I386/BRIDGE.SY_
.cab
I386/BRIEF.CH_
.cab
I386/BRMFCMDM.IN_
.cab
I386/BRMFCMF.IN_
.cab
I386/BRMFCSTO.IN_
.cab
I386/BRMFCUMD.IN_
.cab
I386/BRMFCWIA.IN_
.cab
I386/BRMFPORT.IN_
.cab
I386/BRMSI02F.IC_
.cab
I386/BRMSI03.IC_
.cab
I386/BRMSI03F.IC_
.cab
I386/BROWA.TT_
.cab
I386/BROWAB.TT_
.cab
I386/BROWAI.TT_
.cab
I386/BROWAU.TT_
.cab
I386/BROWAUB.TT_
.cab
I386/BROWAUI.TT_
.cab
I386/BROWAUZ.TT_
.cab
I386/BROWAZ.TT_
.cab
I386/BROWSCAP.DL_
.cab
I386/BROWSCAP.IN_
.cab
I386/BROWSELC.DL_
.cab
I386/BROWSER.DL_
.cab
I386/BROWSEUI.DL_
.cab
I386/BROWSEWM.DL_
.cab
I386/BRPINFO.DL_
.cab
I386/BTH.IN_
.cab
I386/BTHCI.DL_
.cab
I386/BTHENUM.SY_
.cab
I386/BTHMODEM.SY_
.cab
I386/BTHPAN.IN_
.cab
I386/BTHPAN.SY_
.cab
I386/BTHPORT.SY_
.cab
I386/BTHPRINT.IN_
.cab
I386/BTHPRINT.SY_
.cab
I386/BTHPROPS.CP_
.cab
I386/BTHSERV.DL_
.cab
I386/BTHSPP.IN_
.cab
I386/BTHUSB.SY_
.cab
I386/BTN1.GI_
.cab
I386/BTN2.GI_
.cab
I386/BTN3.GI_
.cab
I386/BTPANUI.DL_
.cab
I386/BTZHSEPA.GI_
.cab
I386/BUBBLES.BM_
.cab
I386/BULLET.GI_
.cab
I386/BULLET1.GI_
.cab
I386/BULZANO.JP_
.cab
I386/BULZANOM.JP_
.cab
I386/BUSY_I.CU_
.cab
I386/BUSY_IL.CU_
.cab
I386/BUSY_IM.CU_
.cab
I386/BUSY_L.CU_
.cab
I386/BUSY_M.CU_
.cab
I386/BUSY_R.CU_
.cab
I386/BUSY_RL.CU_
.cab
I386/BUSY_RM.CU_
.cab
I386/BUT1_DWN.GI_
.cab
I386/BUT1_IDL.GI_
.cab
I386/BUT1_UP.GI_
.cab
I386/BUT2_DWN.GI_
.cab
I386/BUT2_IDL.GI_
.cab
I386/BUT2_UP.GI_
.cab
I386/BUT3_DWN.GI_
.cab
I386/BUT3_IDL.GI_
.cab
I386/BUT3_UP.GI_
.cab
I386/BUT4_DWN.GI_
.cab
I386/BUT4_IDL.GI_
.cab
I386/BUT4_UP.GI_
.cab
I386/BUTTERFL.BM_
.cab
I386/CABINET.DLL
.dll windows:5 windows x86 arch:x86

9265de4279ec2b9cc932b695004ba8dd

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_REMOVABLE_RUN_FROM_SWAP
IMAGE_FILE_NET_RUN_FROM_SWAP
IMAGE_FILE_DLL

PDB Paths

cabinet.pdb

Imports

kernel32

DeleteCriticalSection
DisableThreadLibraryCalls
CreateFileA
ReadFile
WriteFile
CloseHandle
SetFilePointer
SetFileTime
LocalFileTimeToFileTime
DosDateTimeToFileTime
lstrcmpiA
lstrlenA
CreateDirectoryA
SetFileAttributesA
GetLastError
LeaveCriticalSection
EnterCriticalSection
InitializeCriticalSection
DeleteFileA
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter

ole32

CoTaskMemFree
CoTaskMemAlloc

Exports

Exports

DeleteExtractedFiles
DllGetVersion
Extract
FCIAddFile
FCICreate
FCIDestroy
FCIFlushCabinet
FCIFlushFolder
FDICopy
FDICreate
FDIDestroy
FDIIsCabinet
FDITruncateCabinet
GetDllVersion

Sections

.text
Size: 55KB - Virtual size: 55KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 1008B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 536B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/CABVIEW.DL_
.cab
I386/CACLS.EX_
.cab
I386/CALC.CH_
.cab
I386/CALC.EX_
.cab
I386/CALC.HL_
.cab
I386/CALLCONT.DL_
.cab
I386/CAMDSH20.IN_
.cab
I386/CAMERA.CH_
.cab
I386/CAMERA.HL_
.cab
I386/CAMOCX.DL_
.cab
I386/CAMVID20.IN_
.cab
I386/CAMVID30.IN_
.cab
I386/CANVAS.WM_
.cab
I386/CAP7146.SY_
.cab
I386/CAPESNPN.DL_
.cab
I386/CAR.BM_
.cab
I386/CARDS.DL_
.cab
I386/CAT.BM_
.cab
I386/CATSRV.DL_
.cab
I386/CATSRVPS.DL_
.cab
I386/CATSRVUT.DL_
.cab
I386/CB32.EX_
.cab
I386/CBIDF2K.SY_
.cab
I386/CCDECODE.IN_
.cab
I386/CCFGNT.DL_
.cab
I386/CD20XRNT.SY_
.cab
I386/CDFS.SY_
.cab
I386/CDFVIEW.DL_
.cab
I386/CDM.DL_
.cab
I386/CDMEDIA.CH_
.cab
I386/CDMEDIA.HL_
.cab
I386/CDMODEM.DL_
.cab
I386/CDOSYS.DL_
.cab
I386/CDROM.IN_
.cab
I386/CDROM.SY_
.cab
I386/CERTCARC.AS_
.cab
I386/CERTCERT.GI_
.cab
I386/CERTCKPN.AS_
.cab
I386/CERTCLAS.IN_
.cab
I386/CERTCLI.DL_
.cab
I386/CERTDFLT.AS_
.cab
I386/CERTFNSH.AS_
.cab
I386/CERTMAP.OC_
.cab
I386/CERTMGR.DL_
.cab
I386/CERTMGR.HL_
.cab
I386/CERTMGR.MS_
.cab
I386/CERTMGRW.CH_
.cab
I386/CERTRQAD.AS_
.cab
I386/CERTRQBI.AS_
.cab
I386/CERTRQMA.AS_
.cab
I386/CERTRQTP.IN_
.cab
I386/CERTRQUS.AS_
.cab
I386/CERTRQXT.AS_
.cab
I386/CERTRSDN.AS_
.cab
I386/CERTRSER.AS_
.cab
I386/CERTRSIS.AS_
.cab
I386/CERTRSOB.AS_
.cab
I386/CERTRSPN.AS_
.cab
I386/CERTSGCL.IN_
.cab
I386/CERTSRCK.IN_
.cab
I386/CERTWIZ.OC_
.cab
I386/CEWMDM.DL_
.cab
I386/CFGBKEND.DL_
.cab
I386/CFGMGR32.DL_
.cab
I386/CGA40737.FO_
.cab
I386/CGA40850.FO_
.cab
I386/CGA40852.FO_
.cab
I386/CGA40857.FO_
.cab
I386/CGA40866.FO_
.cab
I386/CGA40869.FO_
.cab
I386/CGA40WOA.FO_
.cab
I386/CGA80737.FO_
.cab
I386/CGA80850.FO_
.cab
I386/CGA80852.FO_
.cab
I386/CGA80857.FO_
.cab
I386/CGA80866.FO_
.cab
I386/CGA80869.FO_
.cab
I386/CGA80WOA.FO_
.cab
I386/CHANGE.EX_
.cab
I386/CHANNELS.SC_
.cab
I386/CHARCHSR.XM_
.cab
I386/CHARCTXT.XM_
.cab
I386/CHARMAP.CH_
.cab
I386/CHARMAP.EX_
.cab
I386/CHARMAP.HL_
.cab
I386/CHCP.CO_
.cab
I386/CHESS.BM_
.cab
I386/CHGLOGON.EX_
.cab
I386/CHGPORT.EX_
.cab
I386/CHGUSR.EX_
.cab
I386/CHIMES.WA_
.cab
I386/CHKDSK.EX_
.cab
I386/CHKNTFS.EX_
.cab
I386/CHKR.CH_
.cab
I386/CHKR.DL_
.cab
I386/CHKRRES.DL_
.cab
I386/CHKRZM.EX_
.cab
I386/CHNSCSVR.HL_
.cab
I386/CHOOSER.HL_
.cab
I386/CHORD.WA_
.cab
I386/CIADMIN.DL_
.cab
I386/CIADMIN.HT_
.cab .js polyglot
I386/CIADV.MS_
.cab
I386/CIC.DL_
.cab
I386/CIDAEMON.EX_
.cab
I386/CIM20.DT_
.cab
I386/CIMWIN32.DL_
.cab
I386/CIMWIN32.MF_
.cab
I386/CIMWIN32.MO_
.cab
I386/CINFO.XM_
.cab
I386/CIODM.DL_
.cab
I386/CIPHER.EX_
.cab
I386/CIQUERY.HT_
.cab
I386/CIS.HT_
.cab
I386/CIS.SC_
.cab
I386/CISVC.EX_
.cab
I386/CITBANNA.GI_
.cab
I386/CITRBKG.GI_
.cab
I386/CITRPUN.HT_
.cab
I386/CKCNV.EX_
.cab
I386/CLASSIC.TH_
.cab
I386/CLASSIC.WM_
.cab
I386/CLASSPNP.SY_
.cab
I386/CLASS_SS.DL_
.cab
I386/CLB.DL_
.cab
I386/CLBCATEX.DL_
.cab
I386/CLBCATQ.DL_
.cab
I386/CLEANMGR.EX_
.cab
I386/CLEANRI.EX_
.cab
I386/CLEARDAY.HT_
.cab
I386/CLI.MO_
.cab
I386/CLICKERX.WA_
.cab
I386/CLICKHR.GI_
.cab
I386/CLICKING.GI_
.cab
I386/CLICONF.CH_
.cab
I386/CLICONFG.DL_
.cab
I386/CLICONFG.EX_
.cab
I386/CLICONFG.RL_
.cab
I386/CLIEGALI.MF_
.cab
I386/CLIEGALI.MO_
.cab
I386/CLIPBRD.CH_
.cab
I386/CLIPBRD.EX_
.cab
I386/CLIPBRD.HL_
.cab
I386/CLIPSRV.EX_
.cab
I386/CLOAPP.GI_
.cab
I386/CLOAPPH.GI_
.cab
I386/CLOCK.AV_
.cab
I386/CLRDAYBG.JP_
.cab
I386/CLUSAPI.DL_
.cab
I386/CLUSIIS4.DL_
.cab
I386/CMCFG32.DL_
.cab
I386/CMCONW.CH_
.cab
I386/CMD.EX_
.cab
I386/CMDIAL32.DL_
.cab
I386/CMDIDE.SY_
.cab
I386/CMDL32.EX_
.cab
I386/CMDLIB.WS_
.cab
I386/CMMGR32.HL_
.cab
I386/CMMON32.EX_
.cab
I386/CMNCLIM.DL_
.cab
I386/CMNICFG.XM_
.cab
I386/CMNRESM.DL_
.cab
I386/CMOS.RA_
.cab
I386/CMPBK32.DL_
.cab
I386/CMPROPS.DL_
.cab
I386/CMSETACL.DL_
.cab
I386/CMSTP.EX_
.cab
I386/CMUTIL.DL_
.cab
I386/CNETCFG.DL_
.cab
I386/CNFGPRTS.OC_
.cab
I386/CNNCTERR.HT_
.cab
I386/CNT.GI_
.cab
I386/CNTD.GI_
.cab
I386/CNTH.GI_
.cab
I386/CNVFAT.DL_
.cab
I386/COADMIN.DL_
.cab
I386/COBRAMSG.DL_
.cab
I386/COFFEEBN.BM_
.cab
I386/COIN.AN_
.cab
I386/COLBACT.DL_
.cab
I386/COLORMGT.CH_
.cab
I386/COMADDIN.DL_
.cab
I386/COMADMIN.DL_
.cab
I386/COMCAT.DL_
.cab
I386/COMCTL32.DL_
.cab
I386/COMDLG32.DL_
.cab
I386/COMEMPTY.DA_
.cab
I386/COMEXP.CH_
.cab
I386/COMEXP.HL_
.cab
I386/COMEXP.MS_
.cab
I386/COMIC.TT_
.cab
I386/COMICBD.TT_
.cab
I386/COMM.DR_
.cab
I386/COMMAND.CO_
.cab
I386/COMMDLG.DL_
.cab
I386/COMMON.CH_
.cab
I386/COMMUNIC.IN_
.cab
I386/COMNTWKS.IN_
.cab
I386/COMP.EX_
.cab
I386/COMPACT.EX_
.cab
I386/COMPACT.WM_
.cab
I386/COMPATUI.DL_
.cab
I386/COMPATWS.IN_
.cab
I386/COMPDATA/3COM.HTM
.html
I386/COMPDATA/3COM.TXT
I386/COMPDATA/AACRAID.HTM
.html
I386/COMPDATA/AACRAID.TXT
I386/COMPDATA/ACER640P.HTM
.html
I386/COMPDATA/ACER640P.TXT
I386/COMPDATA/ACLIENT.HTM
.html
I386/COMPDATA/ACLIENT.TXT
I386/COMPDATA/ACS.HTM
.html
I386/COMPDATA/ACS.TXT
I386/COMPDATA/ADAPTEC.HTM
.html
I386/COMPDATA/ADAPTEC.TXT
I386/COMPDATA/ADMPKW2K.HTM
.html
I386/COMPDATA/ADMPKW2K.TXT
I386/COMPDATA/ADMPKXP.HTM
.html
I386/COMPDATA/ADMPKXP.TXT
I386/COMPDATA/AHA8940.HTM
.html
I386/COMPDATA/AHA8940.TXT
I386/COMPDATA/AICDRV.HTM
.html
I386/COMPDATA/AICDRV.TXT
I386/COMPDATA/ALKB2K.HTM
.html
I386/COMPDATA/ALKB2K.TXT
I386/COMPDATA/ALPSPRT.HTM
.html
I386/COMPDATA/ALPSPRT.TXT
I386/COMPDATA/APFILTR.HTM
.html
I386/COMPDATA/APFILTR.TXT
I386/COMPDATA/APMERROR.HTM
.html
I386/COMPDATA/APMERROR.TXT
I386/COMPDATA/ARTCAS6E.HTM
.html
I386/COMPDATA/ARTCAS6E.TXT
I386/COMPDATA/ASSETCI.HTM
.html
I386/COMPDATA/ASSETCI.TXT
I386/COMPDATA/ATGUARD.HTM
.html
I386/COMPDATA/ATGUARD.TXT
I386/COMPDATA/ATKPROTO.HTM
.html
I386/COMPDATA/ATKPROTO.TXT
I386/COMPDATA/AVPGATEK.HTM
.html
I386/COMPDATA/AVPGATEK.TXT
I386/COMPDATA/AWARD.HTM
.html
I386/COMPDATA/AWARD.TXT
I386/COMPDATA/BAYMAN.HTM
.html
I386/COMPDATA/BAYMAN.TXT
I386/COMPDATA/BLACKICE.HTM
.html
I386/COMPDATA/BLACKICE.TXT
I386/COMPDATA/BOSERROR.HTM
.html
I386/COMPDATA/BOSERROR.TXT
I386/COMPDATA/CALCOMP.HTM
.html
I386/COMPDATA/CALCOMP.TXT
I386/COMPDATA/CANO620P.HTM
.html
I386/COMPDATA/CANO620P.TXT
I386/COMPDATA/CANOS100.HTM
.html
I386/COMPDATA/CANOS100.TXT
I386/COMPDATA/CARDEXEC.HTM
.html
I386/COMPDATA/CARDEXEC.TXT
I386/COMPDATA/CDR4VSD.HTM
.html
I386/COMPDATA/CDR4VSD.TXT
I386/COMPDATA/CERTSRV.HTM
.html
I386/COMPDATA/CERTSRV.TXT
I386/COMPDATA/CIC.HTM
.html
I386/COMPDATA/CIC.TXT
I386/COMPDATA/CIMGR.HTM
.html
I386/COMPDATA/CIMGR.TXT
I386/COMPDATA/CISCOACU.HTM
.html
I386/COMPDATA/CISCOACU.TXT
I386/COMPDATA/CLDVD.HTM
.html
I386/COMPDATA/CLDVD.TXT
I386/COMPDATA/CLTMGR.HTM
.html
I386/COMPDATA/CLTMGR.TXT
I386/COMPDATA/CNBJ51.HTM
.html
I386/COMPDATA/CNBJ51.TXT
I386/COMPDATA/CNMULTI1.HTM
.html
I386/COMPDATA/CNMULTI1.TXT
I386/COMPDATA/CPQDIAGC.HTM
.html
I386/COMPDATA/CPQDIAGC.TXT
I386/COMPDATA/CPQIJ.HTM
.html
I386/COMPDATA/CPQIJ.TXT
I386/COMPDATA/CPQKBD.HTM
.html
I386/COMPDATA/CPQKBD.TXT
I386/COMPDATA/CPQMULTI.HTM
.html
I386/COMPDATA/CPQMULTI.TXT
I386/COMPDATA/CPQPNPMG.HTM
.html
I386/COMPDATA/CPQPNPMG.TXT
I386/COMPDATA/CPQPWREX.HTM
.html
I386/COMPDATA/CPQPWREX.TXT
I386/COMPDATA/CPUFEAT.HTM
.html
I386/COMPDATA/CPUFEAT.TXT
I386/COMPDATA/CRASHMON.HTM
.html
I386/COMPDATA/CRASHMON.TXT
I386/COMPDATA/CRUISE.HTM
.html
I386/COMPDATA/CRUISE.TXT
I386/COMPDATA/CRYSTAL.HTM
.html
I386/COMPDATA/CRYSTAL.TXT
I386/COMPDATA/CS4281.HTM
.html
I386/COMPDATA/CS4281.TXT
I386/COMPDATA/CSA64XX.HTM
.html
I386/COMPDATA/CSA64XX.TXT
I386/COMPDATA/CSMIGRAT.HTM
.html
I386/COMPDATA/CSMIGRAT.TXT
I386/COMPDATA/CSREM32.HTM
.html
I386/COMPDATA/CSREM32.TXT
I386/COMPDATA/CTZ_CRDL.HTM
.html
I386/COMPDATA/CTZ_CRDL.TXT
I386/COMPDATA/DAYT.HTM
.html
I386/COMPDATA/DAYT.TXT
I386/COMPDATA/DECATAPI.HTM
.html
I386/COMPDATA/DECATAPI.TXT
I386/COMPDATA/DECML.HTM
.html
I386/COMPDATA/DECML.TXT
I386/COMPDATA/DELLPS.HTM
.html
I386/COMPDATA/DELLPS.TXT
I386/COMPDATA/DELLTH.HTM
.html
I386/COMPDATA/DELLTH.TXT
I386/COMPDATA/DELPERC2.HTM
.html
I386/COMPDATA/DELPERC2.TXT
I386/COMPDATA/DIRECTCD.HTM
.html
I386/COMPDATA/DIRECTCD.TXT
I386/COMPDATA/DLCPROTO.HTM
.html
I386/COMPDATA/DLCPROTO.TXT
I386/COMPDATA/DMIBIOS.HTM
.html
I386/COMPDATA/DMIBIOS.TXT
I386/COMPDATA/DOCK.HTM
.html
I386/COMPDATA/DOCK.TXT
I386/COMPDATA/DOCKSVC.HTM
.html
I386/COMPDATA/DOCKSVC.TXT
I386/COMPDATA/DRVMAIN.CHM
.chm
I386/COMPDATA/DRVMAIN.INF
I386/COMPDATA/DRVNCDB.HTM
.html
I386/COMPDATA/DRVNCDB.TXT
I386/COMPDATA/DSMU.HTM
.html
I386/COMPDATA/DSMU.TXT
I386/COMPDATA/DV_COMP.HTM
.html
I386/COMPDATA/DV_COMP.TXT
I386/COMPDATA/DV_GEN.HTM
.html
I386/COMPDATA/DV_GEN.TXT
I386/COMPDATA/DWRITE.HTM
.html
I386/COMPDATA/DWRITE.TXT
I386/COMPDATA/EICONTA.HTM
.html
I386/COMPDATA/EICONTA.TXT
I386/COMPDATA/ELSAMX.HTM
.html
I386/COMPDATA/ELSAMX.TXT
I386/COMPDATA/ENSONIQV.HTM
.html
I386/COMPDATA/ENSONIQV.TXT
I386/COMPDATA/ENSQAUDM.HTM
.html
I386/COMPDATA/ENSQAUDM.TXT
I386/COMPDATA/EPSCOLOR.HTM
.html
I386/COMPDATA/EPSCOLOR.TXT
I386/COMPDATA/EPSON1.HTM
.html
I386/COMPDATA/EPSON1.TXT
I386/COMPDATA/EPSON3.HTM
.html
I386/COMPDATA/EPSON3.TXT
I386/COMPDATA/EPSON4.HTM
.html
I386/COMPDATA/EPSON4.TXT
I386/COMPDATA/EPSP1270.HTM
.html
I386/COMPDATA/EPSP1270.TXT
I386/COMPDATA/EPSPHOTO.HTM
.html
I386/COMPDATA/EPSPHOTO.TXT
I386/COMPDATA/EXCHANGE.HTM
.html
I386/COMPDATA/EXCHANGE.TXT
I386/COMPDATA/FAZAM.HTM
.html
I386/COMPDATA/FAZAM.TXT
I386/COMPDATA/FIDMOU.HTM
.html
I386/COMPDATA/FIDMOU.TXT
I386/COMPDATA/FLOWCH7.HTM
.html
I386/COMPDATA/FLOWCH7.TXT
I386/COMPDATA/FTCOMP1.HTM
.html
I386/COMPDATA/FTCOMP1.TXT
I386/COMPDATA/FTCOMP2.HTM
.html
I386/COMPDATA/FTCOMP2.TXT
I386/COMPDATA/FTCOMP3.HTM
.html
I386/COMPDATA/FTCOMP3.TXT
I386/COMPDATA/GENERIC.HTM
.html
I386/COMPDATA/GENERIC.TXT
I386/COMPDATA/GENIUS.HTM
.html
I386/COMPDATA/GENIUS.TXT
I386/COMPDATA/GLINT.HTM
.html
I386/COMPDATA/GLINT.TXT
I386/COMPDATA/GSNW.HTM
.html
I386/COMPDATA/GSNW.TXT
I386/COMPDATA/HALHOOK.HTM
.html
I386/COMPDATA/HALHOOK.TXT
I386/COMPDATA/HDMIB.HTM
.html
I386/COMPDATA/HDMIB.TXT
I386/COMPDATA/HDMON.HTM
.html
I386/COMPDATA/HDMON.TXT
I386/COMPDATA/HERCULES.HTM
.html
I386/COMPDATA/HERCULES.TXT
I386/COMPDATA/HP3300C.HTM
.html
I386/COMPDATA/HP3300C.TXT
I386/COMPDATA/HP4050P6.HTM
.html
I386/COMPDATA/HP4050P6.TXT
I386/COMPDATA/HP4300C.HTM
.html
I386/COMPDATA/HP4300C.TXT
I386/COMPDATA/HP5300C.HTM
.html
I386/COMPDATA/HP5300C.TXT
I386/COMPDATA/HPAIO1.HTM
.html
I386/COMPDATA/HPAIO1.TXT
I386/COMPDATA/HPAIO2.HTM
.html
I386/COMPDATA/HPAIO2.TXT
I386/COMPDATA/HPCLJ450.HTM
.html
I386/COMPDATA/HPCLJ450.TXT
I386/COMPDATA/HPCLJ850.HTM
.html
I386/COMPDATA/HPCLJ850.TXT
I386/COMPDATA/HPCOMPAT.HTM
.html
I386/COMPDATA/HPCOMPAT.TXT
I386/COMPDATA/HPDJ1000.HTM
.html
I386/COMPDATA/HPDJ1000.TXT
I386/COMPDATA/HPDJ610.HTM
.html
I386/COMPDATA/HPDJ610.TXT
I386/COMPDATA/HPDJ810.HTM
.html
I386/COMPDATA/HPDJ810.TXT
I386/COMPDATA/HPDJ815.HTM
.html
I386/COMPDATA/HPDJ815.TXT
I386/COMPDATA/HPDJ830.HTM
.html
I386/COMPDATA/HPDJ830.TXT
I386/COMPDATA/HPDJ880.HTM
.html
I386/COMPDATA/HPDJ880.TXT
I386/COMPDATA/HPDJ900.HTM
.html
I386/COMPDATA/HPDJ900.TXT
I386/COMPDATA/HPDMI.HTM
.html
I386/COMPDATA/HPDMI.TXT
I386/COMPDATA/HPDSK1.HTM
.html
I386/COMPDATA/HPDSK1.TXT
I386/COMPDATA/HPDSK10.HTM
.html
I386/COMPDATA/HPDSK10.TXT
I386/COMPDATA/HPDSK11.HTM
.html
I386/COMPDATA/HPDSK11.TXT
I386/COMPDATA/HPDSK12.HTM
.html
I386/COMPDATA/HPDSK12.TXT
I386/COMPDATA/HPDSK13.HTM
.html
I386/COMPDATA/HPDSK13.TXT
I386/COMPDATA/HPDSK14.HTM
.html
I386/COMPDATA/HPDSK14.TXT
I386/COMPDATA/HPDSK2.HTM
.html
I386/COMPDATA/HPDSK2.TXT
I386/COMPDATA/HPDSK3.HTM
.html
I386/COMPDATA/HPDSK3.TXT
I386/COMPDATA/HPDSK4.HTM
.html
I386/COMPDATA/HPDSK4.TXT
I386/COMPDATA/HPDSK5.HTM
.html
I386/COMPDATA/HPDSK5.TXT
I386/COMPDATA/HPDSK6.HTM
.html
I386/COMPDATA/HPDSK6.TXT
I386/COMPDATA/HPDSK7.HTM
.html
I386/COMPDATA/HPDSK7.TXT
I386/COMPDATA/HPDSK8.HTM
.html
I386/COMPDATA/HPDSK8.TXT
I386/COMPDATA/HPDSK9.HTM
.html
I386/COMPDATA/HPDSK9.TXT
I386/COMPDATA/HPI_USB.HTM
.html
I386/COMPDATA/HPI_USB.TXT
I386/COMPDATA/HPLJ1100.HTM
.html
I386/COMPDATA/HPLJ1100.TXT
I386/COMPDATA/HPLJ4050.HTM
.html
I386/COMPDATA/HPLJ4050.TXT
I386/COMPDATA/HPLJ5E.HTM
.html
I386/COMPDATA/HPLJ5E.TXT
I386/COMPDATA/HPLOCK.HTM
.html
I386/COMPDATA/HPLOCK.TXT
I386/COMPDATA/HPMMKB.HTM
.html
I386/COMPDATA/HPMMKB.TXT
I386/COMPDATA/HPMON.HTM
.html
I386/COMPDATA/HPMON.TXT
I386/COMPDATA/HPNRD4M.HTM
.html
I386/COMPDATA/HPNRD4M.TXT
I386/COMPDATA/HPOJG.HTM
.html
I386/COMPDATA/HPOJG.TXT
I386/COMPDATA/HPPS.HTM
.html
I386/COMPDATA/HPPS.TXT
I386/COMPDATA/HPSMART.HTM
.html
I386/COMPDATA/HPSMART.TXT
I386/COMPDATA/HPSPARNT.HTM
.html
I386/COMPDATA/HPSPARNT.TXT
I386/COMPDATA/HPTTIDM.HTM
.html
I386/COMPDATA/HPTTIDM.TXT
I386/COMPDATA/HP_PLD.HTM
.html
I386/COMPDATA/HP_PLD.TXT
I386/COMPDATA/I2CNT.HTM
.html
I386/COMPDATA/I2CNT.TXT
I386/COMPDATA/IAVBOOT4.HTM
.html
I386/COMPDATA/IAVBOOT4.TXT
I386/COMPDATA/IBMIR.HTM
.html
I386/COMPDATA/IBMIR.TXT
I386/COMPDATA/IBMMPG.HTM
.html
I386/COMPDATA/IBMMPG.TXT
I386/COMPDATA/IBMSVA.HTM
.html
I386/COMPDATA/IBMSVA.TXT
I386/COMPDATA/IBMTP4.HTM
.html
I386/COMPDATA/IBMTP4.TXT
I386/COMPDATA/IBMVC.HTM
.html
I386/COMPDATA/IBMVC.TXT
I386/COMPDATA/IBM_UMS.HTM
.html
I386/COMPDATA/IBM_UMS.TXT
I386/COMPDATA/ICPV.HTM
.html
I386/COMPDATA/ICPV.TXT
I386/COMPDATA/ICSUPGRD.HTM
.html
I386/COMPDATA/ICSUPGRD.TXT
I386/COMPDATA/ILS.HTM
.html
I386/COMPDATA/ILS.TXT
I386/COMPDATA/IMATION.HTM
.html
I386/COMPDATA/IMATION.TXT
I386/COMPDATA/INCOMPAT.HTM
.html
I386/COMPDATA/INCOMPAT.TXT
I386/COMPDATA/INITIO.HTM
.html
I386/COMPDATA/INITIO.TXT
I386/COMPDATA/INTELAPP.HTM
.html
I386/COMPDATA/INTELAPP.TXT
I386/COMPDATA/INTELATA.HTM
.html
I386/COMPDATA/INTELATA.TXT
I386/COMPDATA/INTELLIP.HTM
.html
I386/COMPDATA/INTELLIP.TXT
I386/COMPDATA/INTLSISL.HTM
.html
I386/COMPDATA/INTLSISL.TXT
I386/COMPDATA/IOCLICK.HTM
.html
I386/COMPDATA/IOCLICK.TXT
I386/COMPDATA/IOMEGA.HTM
.html
I386/COMPDATA/IOMEGA.TXT
I386/COMPDATA/ISHRNT.HTM
.html
I386/COMPDATA/ISHRNT.TXT
I386/COMPDATA/ISOTP4.HTM
.html
I386/COMPDATA/ISOTP4.TXT
I386/COMPDATA/ISVGINA.HTM
.html
I386/COMPDATA/ISVGINA.TXT
I386/COMPDATA/IX526FC.HTM
.html
I386/COMPDATA/IX526FC.TXT
I386/COMPDATA/KMW.HTM
.html
I386/COMPDATA/KMW.TXT
I386/COMPDATA/KODK4800.HTM
.html
I386/COMPDATA/KODK4800.TXT
I386/COMPDATA/KRNLCHK.HTM
.html
I386/COMPDATA/KRNLCHK.TXT
I386/COMPDATA/LAPLINK.HTM
.html
I386/COMPDATA/LAPLINK.TXT
I386/COMPDATA/LAPLNK2K.HTM
.html
I386/COMPDATA/LAPLNK2K.TXT
I386/COMPDATA/LDCM.HTM
.html
I386/COMPDATA/LDCM.TXT
I386/COMPDATA/LEX3200.HTM
.html
I386/COMPDATA/LEX3200.TXT
I386/COMPDATA/LEXDLC.HTM
.html
I386/COMPDATA/LEXDLC.TXT
I386/COMPDATA/LEXOPTRA.HTM
.html
I386/COMPDATA/LEXOPTRA.TXT
I386/COMPDATA/LEXTCP.HTM
.html
I386/COMPDATA/LEXTCP.TXT
I386/COMPDATA/LM5700.HTM
.html
I386/COMPDATA/LM5700.TXT
I386/COMPDATA/LM75.HTM
.html
I386/COMPDATA/LM75.TXT
I386/COMPDATA/LM78.HTM
.html
I386/COMPDATA/LM78.TXT
I386/COMPDATA/LMOPTRA.HTM
.html
I386/COMPDATA/LMOPTRA.TXT
I386/COMPDATA/LMREPL.HTM
.html
I386/COMPDATA/LMREPL.TXT
I386/COMPDATA/LOGITECH.HTM
.html
I386/COMPDATA/LOGITECH.TXT
I386/COMPDATA/LOGKCMD.HTM
.html
I386/COMPDATA/LOGKCMD.TXT
I386/COMPDATA/LQDAUDIO.HTM
.html
I386/COMPDATA/LQDAUDIO.TXT
I386/COMPDATA/LTMODEM.HTM
.html
I386/COMPDATA/LTMODEM.TXT
I386/COMPDATA/MACDRIVE.HTM
.html
I386/COMPDATA/MACDRIVE.TXT
I386/COMPDATA/MAESTRO0.HTM
.html
I386/COMPDATA/MAESTRO0.TXT
I386/COMPDATA/MAXELL.HTM
.html
I386/COMPDATA/MAXELL.TXT
I386/COMPDATA/MCA.HTM
.html
I386/COMPDATA/MCA.TXT
I386/COMPDATA/MCFILTER.HTM
.html
I386/COMPDATA/MCFILTER.TXT
I386/COMPDATA/MCROTK60.HTM
.html
I386/COMPDATA/MCROTK60.TXT
I386/COMPDATA/MCROTKC3.HTM
.html
I386/COMPDATA/MCROTKC3.TXT
I386/COMPDATA/MCROTKS.HTM
.html
I386/COMPDATA/MCROTKS.TXT
I386/COMPDATA/MELCO.HTM
.html
I386/COMPDATA/MELCO.TXT
I386/COMPDATA/MFPBR.HTM
.html
I386/COMPDATA/MFPBR.TXT
I386/COMPDATA/MFPHP.HTM
.html
I386/COMPDATA/MFPHP.TXT
I386/COMPDATA/MGACTRL.HTM
.html
I386/COMPDATA/MGACTRL.TXT
I386/COMPDATA/MIN8E.HTM
.html
I386/COMPDATA/MIN8E.TXT
I386/COMPDATA/MINPW20.HTM
.html
I386/COMPDATA/MINPW20.TXT
I386/COMPDATA/MNLT1.HTM
.html
I386/COMPDATA/MNLT1.TXT
I386/COMPDATA/MPATH.HTM
.html
I386/COMPDATA/MPATH.TXT
I386/COMPDATA/MSMQCOMP.HTM
.html
I386/COMPDATA/MSMQCOMP.TXT
I386/COMPDATA/MSP1.HTM
.html
I386/COMPDATA/MSP1.TXT
I386/COMPDATA/MSP2.HTM
.html
I386/COMPDATA/MSP2.TXT
I386/COMPDATA/MSSS3.HTM
.html
I386/COMPDATA/MSSS3.TXT
I386/COMPDATA/MSTOCK.HTM
.html
I386/COMPDATA/MSTOCK.TXT
I386/COMPDATA/MTA57080.HTM
.html
I386/COMPDATA/MTA57080.TXT
I386/COMPDATA/NAV5.HTM
.html
I386/COMPDATA/NAV5.TXT
I386/COMPDATA/NBFPROTO.HTM
.html
I386/COMPDATA/NBFPROTO.TXT
I386/COMPDATA/NDCPRTNS.HTM
.html
I386/COMPDATA/NDCPRTNS.TXT
I386/COMPDATA/NECPG1.HTM
.html
I386/COMPDATA/NECPG1.TXT
I386/COMPDATA/NETFMIGT.HTM
.html
I386/COMPDATA/NETFMIGT.TXT
I386/COMPDATA/NMSMS.HTM
.html
I386/COMPDATA/NMSMS.TXT
I386/COMPDATA/NTCOMPAT.INF
I386/COMPDATA/NTDSUPG.HTM
.html
I386/COMPDATA/NTDSUPG.TXT
I386/COMPDATA/NTDSUPGD.HTM
.html
I386/COMPDATA/NTDSUPGD.TXT
I386/COMPDATA/NV_AGP.HTM
.html
I386/COMPDATA/NV_AGP.TXT
I386/COMPDATA/NWCLI32.HTM
.html
I386/COMPDATA/NWCLI32.TXT
I386/COMPDATA/OCABLOCK.HTM
.html
I386/COMPDATA/OCABLOCK.TXT
I386/COMPDATA/OILCHG25.HTM
.html
I386/COMPDATA/OILCHG25.TXT
I386/COMPDATA/OKIPG1.HTM
.html
I386/COMPDATA/OKIPG1.TXT
I386/COMPDATA/OKIPG2.HTM
.html
I386/COMPDATA/OKIPG2.TXT
I386/COMPDATA/OKIPG8W.HTM
.html
I386/COMPDATA/OKIPG8W.TXT
I386/COMPDATA/OMC.HTM
.html
I386/COMPDATA/OMC.TXT
I386/COMPDATA/OMNIPG10.HTM
.html
I386/COMPDATA/OMNIPG10.TXT
I386/COMPDATA/ONSTREAM.HTM
.html
I386/COMPDATA/ONSTREAM.TXT
I386/COMPDATA/ORB.HTM
.html
I386/COMPDATA/ORB.TXT
I386/COMPDATA/PALM.HTM
.html
I386/COMPDATA/PALM.TXT
I386/COMPDATA/PANADVD.HTM
.html
I386/COMPDATA/PANADVD.TXT
I386/COMPDATA/PANDA.HTM
.html
I386/COMPDATA/PANDA.TXT
I386/COMPDATA/PCANY.HTM
.html
I386/COMPDATA/PCANY.TXT
I386/COMPDATA/PCCILLIN.HTM
.html
I386/COMPDATA/PCCILLIN.TXT
I386/COMPDATA/PCIINFO.HTM
.html
I386/COMPDATA/PCIINFO.TXT
I386/COMPDATA/PCPNP.HTM
.html
I386/COMPDATA/PCPNP.TXT
I386/COMPDATA/PELMOUSE.HTM
.html
I386/COMPDATA/PELMOUSE.TXT
I386/COMPDATA/PFS.HTM
.html
I386/COMPDATA/PFS.TXT
I386/COMPDATA/PHNIXAD.HTM
.html
I386/COMPDATA/PHNIXAD.TXT
I386/COMPDATA/PHPIPE.HTM
.html
I386/COMPDATA/PHPIPE.TXT
I386/COMPDATA/PLUST120.HTM
.html
I386/COMPDATA/PLUST120.TXT
I386/COMPDATA/POWER.HTM
.html
I386/COMPDATA/POWER.TXT
I386/COMPDATA/POWERSHELL.HTM
I386/COMPDATA/POWERSHELL.TXT
I386/COMPDATA/POWPATH.HTM
.html
I386/COMPDATA/POWPATH.TXT
I386/COMPDATA/PROCCNT.HTM
.html
I386/COMPDATA/PROCCNT.TXT
I386/COMPDATA/PROLIGHT.HTM
.html
I386/COMPDATA/PROLIGHT.TXT
I386/COMPDATA/PS2CONT.HTM
.html
I386/COMPDATA/PS2CONT.TXT
I386/COMPDATA/PSTRIP.HTM
.html
I386/COMPDATA/PSTRIP.TXT
I386/COMPDATA/PUMACSM.HTM
.html
I386/COMPDATA/PUMACSM.TXT
I386/COMPDATA/PWRICON.HTM
.html
I386/COMPDATA/PWRICON.TXT
I386/COMPDATA/QIC117.HTM
.html
I386/COMPDATA/QIC117.TXT
I386/COMPDATA/QUICK3.HTM
.html
I386/COMPDATA/QUICK3.TXT
I386/COMPDATA/RCENTRL.HTM
.html
I386/COMPDATA/RCENTRL.TXT
I386/COMPDATA/RDPMUI.HTM
I386/COMPDATA/RDPMUI.TXT
I386/COMPDATA/REACHOUT.HTM
.html
I386/COMPDATA/REACHOUT.TXT
I386/COMPDATA/RIPTIDE.HTM
.html
I386/COMPDATA/RIPTIDE.TXT
I386/COMPDATA/RUNONCE.HTM
.html
I386/COMPDATA/RUNONCE.TXT
I386/COMPDATA/SBS45FXC.HTM
.html
I386/COMPDATA/SBS45FXC.TXT
I386/COMPDATA/SBS50FXC.HTM
.html
I386/COMPDATA/SBS50FXC.TXT
I386/COMPDATA/SCANDRV.HTM
.html
I386/COMPDATA/SCANDRV.TXT
I386/COMPDATA/SDSELECT.HTM
.html
I386/COMPDATA/SDSELECT.TXT
I386/COMPDATA/SFUNFSCG.HTM
.html
I386/COMPDATA/SFUNFSCG.TXT
I386/COMPDATA/SHAREDCT.HTM
I386/COMPDATA/SHAREDCT.TXT
I386/COMPDATA/SHARSHTL.HTM
.html
I386/COMPDATA/SHARSHTL.TXT
I386/COMPDATA/SIGMA.HTM
.html
I386/COMPDATA/SIGMA.TXT
I386/COMPDATA/SIIG.HTM
.html
I386/COMPDATA/SIIG.TXT
I386/COMPDATA/SIIGC.HTM
.html
I386/COMPDATA/SIIGC.TXT
I386/COMPDATA/SISV.HTM
.html
I386/COMPDATA/SISV.TXT
I386/COMPDATA/SIWVID.HTM
.html
I386/COMPDATA/SIWVID.TXT
I386/COMPDATA/SKUSBKBF.HTM
.html
I386/COMPDATA/SKUSBKBF.TXT
I386/COMPDATA/SMS.HTM
.html
I386/COMPDATA/SMS.TXT
I386/COMPDATA/SNA.HTM
.html
I386/COMPDATA/SNA.TXT
I386/COMPDATA/SNIDMI.HTM
.html
I386/COMPDATA/SNIDMI.TXT
I386/COMPDATA/SNIDPMS.HTM
.html
I386/COMPDATA/SNIDPMS.TXT
I386/COMPDATA/SNIPCI.HTM
.html
I386/COMPDATA/SNIPCI.TXT
I386/COMPDATA/SOFTOFF.HTM
.html
I386/COMPDATA/SOFTOFF.TXT
I386/COMPDATA/SONIC.HTM
.html
I386/COMPDATA/SONIC.TXT
I386/COMPDATA/SONYJDU.HTM
I386/COMPDATA/SONYJDU.TXT
I386/COMPDATA/SPXBLOCK.HTM
.html
I386/COMPDATA/SPXBLOCK.TXT
I386/COMPDATA/SQL.HTM
.html
I386/COMPDATA/SQL.TXT
I386/COMPDATA/SSCNTRL.HTM
.html
I386/COMPDATA/SSCNTRL.TXT
I386/COMPDATA/SSI365.HTM
.html
I386/COMPDATA/SSI365.TXT
I386/COMPDATA/SSPOWER.HTM
.html
I386/COMPDATA/SSPOWER.TXT
I386/COMPDATA/STB.HTM
.html
I386/COMPDATA/STB.TXT
I386/COMPDATA/SWOFF.HTM
.html
I386/COMPDATA/SWOFF.TXT
I386/COMPDATA/SYSHWCFG.HTM
.html
I386/COMPDATA/SYSHWCFG.TXT
I386/COMPDATA/SYSMGMT.HTM
.html
I386/COMPDATA/SYSMGMT.TXT
I386/COMPDATA/SYSMON.HTM
.html
I386/COMPDATA/SYSMON.TXT
I386/COMPDATA/TITSB.HTM
.html
I386/COMPDATA/TITSB.TXT
I386/COMPDATA/TIVOLI.HTM
.html
I386/COMPDATA/TIVOLI.TXT
I386/COMPDATA/TMASTER.HTM
.html
I386/COMPDATA/TMASTER.TXT
I386/COMPDATA/TMDIGPRO.HTM
.html
I386/COMPDATA/TMDIGPRO.TXT
I386/COMPDATA/TMDUALAG.HTM
.html
I386/COMPDATA/TMDUALAG.TXT
I386/COMPDATA/TOPTOOLS.HTM
.html
I386/COMPDATA/TOPTOOLS.TXT
I386/COMPDATA/TOSDVD.HTM
.html
I386/COMPDATA/TOSDVD.TXT
I386/COMPDATA/TPCHRSRV.HTM
.html
I386/COMPDATA/TPCHRSRV.TXT
I386/COMPDATA/TPCONFIG.HTM
.html
I386/COMPDATA/TPCONFIG.TXT
I386/COMPDATA/TPFUEL.HTM
.html
I386/COMPDATA/TPFUEL.TXT
I386/COMPDATA/TPPMPORT.HTM
.html
I386/COMPDATA/TPPMPORT.TXT
I386/COMPDATA/TRIDWNW.HTM
.html
I386/COMPDATA/TRIDWNW.TXT
I386/COMPDATA/TSBAPM.HTM
.html
I386/COMPDATA/TSBAPM.TXT
I386/COMPDATA/TSBASD.HTM
.html
I386/COMPDATA/TSBASD.TXT
I386/COMPDATA/TSBDS.HTM
.html
I386/COMPDATA/TSBDS.TXT
I386/COMPDATA/TSBHDDPW.HTM
.html
I386/COMPDATA/TSBHDDPW.TXT
I386/COMPDATA/TSBMC.HTM
.html
I386/COMPDATA/TSBMC.TXT
I386/COMPDATA/TSBSELBA.HTM
.html
I386/COMPDATA/TSBSELBA.TXT
I386/COMPDATA/TSBVCAP.HTM
.html
I386/COMPDATA/TSBVCAP.TXT
I386/COMPDATA/TSCOMP4.HTM
.html
I386/COMPDATA/TSCOMP4.TXT
I386/COMPDATA/TSCOMP5.HTM
.html
I386/COMPDATA/TSCOMP5.TXT
I386/COMPDATA/TSSCIDRV.HTM
.html
I386/COMPDATA/TSSCIDRV.TXT
I386/COMPDATA/TT128.HTM
.html
I386/COMPDATA/TT128.TXT
I386/COMPDATA/UMAX.HTM
.html
I386/COMPDATA/UMAX.TXT
I386/COMPDATA/UTUPGR05.HTM
.html
I386/COMPDATA/UTUPGR05.TXT
I386/COMPDATA/UTUPGR06.HTM
.html
I386/COMPDATA/UTUPGR06.TXT
I386/COMPDATA/VGAMODE.HTM
.html
I386/COMPDATA/VGAMODE.TXT
I386/COMPDATA/VIDAPPLT.HTM
.html
I386/COMPDATA/VIDAPPLT.TXT
I386/COMPDATA/VISN5300.HTM
.html
I386/COMPDATA/VISN5300.TXT
I386/COMPDATA/VISN6100.HTM
.html
I386/COMPDATA/VISN6100.TXT
I386/COMPDATA/WACOMDRV.HTM
.html
I386/COMPDATA/WACOMDRV.TXT
I386/COMPDATA/WCE21.HTM
.html
I386/COMPDATA/WCE21.TXT
I386/COMPDATA/WCGODRV.HTM
.html
I386/COMPDATA/WCGODRV.TXT
I386/COMPDATA/WCMIGRAT.HTM
.html
I386/COMPDATA/WCMIGRAT.TXT
I386/COMPDATA/WEBSCANX.HTM
.html
I386/COMPDATA/WEBSCANX.TXT
I386/COMPDATA/WEPOS.HTM
I386/COMPDATA/WEPOS.TXT
I386/COMPDATA/WINACHSF.HTM
.html
I386/COMPDATA/WINACHSF.TXT
I386/COMPDATA/WINFLP.HTM
I386/COMPDATA/WINFLP.TXT
I386/COMPDATA/WINSQL.HTM
.html
I386/COMPDATA/WINSQL.TXT
I386/COMPDATA/WTCLS2K.HTM
.html
I386/COMPDATA/WTCLS2K.TXT
I386/COMPDATA/XEROX1.HTM
.html
I386/COMPDATA/XEROX1.TXT
I386/COMPDATA/XEROX2.HTM
.html
I386/COMPDATA/XEROX2.TXT
I386/COMPDATA/XEROX4.HTM
.html
I386/COMPDATA/XEROX4.TXT
I386/COMPDATA/XEROX5.HTM
.html
I386/COMPDATA/XEROX5.TXT
I386/COMPDATA/XEROX6.HTM
.html
I386/COMPDATA/XEROX6.TXT
I386/COMPDATA/XEROXWCT.HTM
.html
I386/COMPDATA/XEROXWCT.TXT
I386/COMPDATA/XLINK.HTM
.html
I386/COMPDATA/XLINK.TXT
I386/COMPDATA/YACXG.HTM
.html
I386/COMPDATA/YACXG.TXT
I386/COMPDATA/YMHSYNTH.HTM
.html
I386/COMPDATA/YMHSYNTH.TXT
I386/COMPDATA/ZIPMAGIC.HTM
.html
I386/COMPDATA/ZIPMAGIC.TXT
I386/COMPFILT.DL_
.cab
I386/COMPFLDR.CH_
.cab
I386/COMPMGMT.MS_
.cab
I386/COMPMGTW.CH_
.cab
I386/COMPNAME.HT_
.cab
I386/COMPOBJ.DL_
.cab
I386/COMPSTUI.DL_
.cab
I386/COMPSTUI.HL_
.cab
I386/COMREPL.DL_
.cab
I386/COMREPL.EX_
.cab
I386/COMREREG.EX_
.cab
I386/COMRES.DL_
.cab
I386/COMSDUPD.EX_
.cab
I386/COMSETUP.DL_
.cab
I386/COMSNAP.DL_
.cab
I386/COMSVCS.DL_
.cab
I386/COMUID.DL_
.cab
I386/CONF.AD_
.cab
I386/CONF.CH_
.cab
I386/CONF.CN_
.cab
I386/CONF.EX_
.cab
I386/CONF.HL_
.cab
I386/CONF1.CH_
.cab
I386/CONFDENT.CO_
.cab
I386/CONFIG.NT_
.cab
I386/CONFMRSL.DL_
.cab
I386/CONFMSP.DL_
.cab
I386/CONIME.EX_
.cab
I386/CONNECT.CN_
.cab
I386/CONNECT.HL_
.cab
I386/CONSOLE.DL_
.cab
I386/CONTENTS.HT_
.cab
I386/CONTROL.EX_
.cab
I386/CONTROLS.CS_
.cab
I386/CONTROLS.JS_
.cab
I386/CONTROT.DL_
.cab
I386/CONVERT.EX_
.cab
I386/CONVLOG.EX_
.cab
I386/COPYCD.WM_
.cab
I386/CORDIA.TT_
.cab
I386/CORDIAB.TT_
.cab
I386/CORDIAI.TT_
.cab
I386/CORDIAU.TT_
.cab
I386/CORDIAUB.TT_
.cab
I386/CORDIAUI.TT_
.cab
I386/CORDIAUZ.TT_
.cab
I386/CORDIAZ.TT_
.cab
I386/CORELIST.IN_
.cab
I386/CORPOL.DL_
.cab
I386/COUE1255.FO_
.cab
I386/COUE1256.FO_
.cab
I386/COUE1257.FO_
.cab
I386/COUF1255.FO_
.cab
I386/COUF1256.FO_
.cab
I386/COUF1257.FO_
.cab
I386/COUNTER.AN_
.cab
I386/COUNTERS.DL_
.cab
I386/COUNTRY.SY_
.cab
I386/COUR.TT_
.cab
I386/COURBD.TT_
.cab
I386/COURBI.TT_
.cab
I386/COURE.FO_
.cab
I386/COUREE.FO_
.cab
I386/COUREG.FO_
.cab
I386/COURER.FO_
.cab
I386/COURET.FO_
.cab
I386/COURF.FO_
.cab
I386/COURFE.FO_
.cab
I386/COURFG.FO_
.cab
I386/COURFR.FO_
.cab
I386/COURFT.FO_
.cab
I386/COURI.TT_
.cab
I386/COURTNEY.AC_
.cab
I386/CPANELW.CH_
.cab
I386/CPANEL_W.CH_
.cab
I386/CPQARRAY.SY_
.cab
I386/CPROFILE.EX_
.cab
I386/CPU.IN_
.cab
I386/CREDSSP.DL_
.cab
I386/CREDUI.DL_
.cab
I386/CROSS.CU_
.cab
I386/CROSS_I.CU_
.cab
I386/CROSS_IL.CU_
.cab
I386/CROSS_IM.CU_
.cab
I386/CROSS_L.CU_
.cab
I386/CROSS_M.CU_
.cab
I386/CROSS_R.CU_
.cab
I386/CROSS_RL.CU_
.cab
I386/CROSS_RM.CU_
.cab
I386/CRTDLL.DL_
.cab
I386/CRYPT32.DL_
.cab
I386/CRYPTDLG.DL_
.cab
I386/CRYPTDLL.DL_
.cab
I386/CRYPTEXT.DL_
.cab
I386/CRYPTNET.DL_
.cab
I386/CRYPTSVC.DL_
.cab
I386/CRYPTUI.DL_
.cab
I386/CRYSTAL.JP_
.cab
I386/CSAPI3T1.DL_
.cab
I386/CSCDLL.DL_
.cab
I386/CSCRIPT.EX_
.cab
I386/CSCRIPT.MU_
.cab
I386/CSCUI.DL_
.cab
I386/CSCUI.HL_
.cab
I386/CSRSRV.DL_
.cab
I386/CSRSS.EX_
.cab
I386/CSSEQCHK.DL_
.cab
I386/CSV.XS_
.cab
I386/CTFMON.EX_
.cab
I386/CTL3D32.DL_
.cab
I386/CTL3DV2.DL_
.cab
I386/CTMAPORT.IN_
.cab
I386/CTMRCLAS.DL_
.cab
I386/CTYPE.NL_
.cab
I386/CUSTSAT.DL_
.cab
I386/CXTHSFS2.CT_
.cab
I386/CYCLAD-Z.IN_
.cab
I386/CYCLOM-Y.IN_
.cab
I386/CYYPORT.IN_
.cab
I386/CYZPORT.IN_
.cab
I386/C_037.NL_
.cab
I386/C_10000.NL_
.cab
I386/C_10001.NL_
.cab
I386/C_10002.NL_
.cab
I386/C_10003.NL_
.cab
I386/C_10004.NL_
.cab
I386/C_10005.NL_
.cab
I386/C_10006.NL_
.cab
I386/C_10007.NL_
.cab
I386/C_10008.NL_
.cab
I386/C_10010.NL_
.cab
I386/C_10017.NL_
.cab
I386/C_10021.NL_
.cab
I386/C_10029.NL_
.cab
I386/C_10079.NL_
.cab
I386/C_10081.NL_
.cab
I386/C_10082.NL_
.cab
I386/C_1026.NL_
.cab
I386/C_1047.NL_
.cab
I386/C_1140.NL_
.cab
I386/C_1141.NL_
.cab
I386/C_1142.NL_
.cab
I386/C_1143.NL_
.cab
I386/C_1144.NL_
.cab
I386/C_1145.NL_
.cab
I386/C_1146.NL_
.cab
I386/C_1147.NL_
.cab
I386/C_1148.NL_
.cab
I386/C_1149.NL_
.cab
I386/C_1250.NL_
.cab
I386/C_1251.NL_
.cab
I386/C_1252.NL_
.cab
I386/C_1253.NL_
.cab
I386/C_1254.NL_
.cab
I386/C_1255.NL_
.cab
I386/C_1256.NL_
.cab
I386/C_1257.NL_
.cab
I386/C_1258.NL_
.cab
I386/C_1361.NL_
.cab
I386/C_20000.NL_
.cab
I386/C_20001.NL_
.cab
I386/C_20002.NL_
.cab
I386/C_20003.NL_
.cab
I386/C_20004.NL_
.cab
I386/C_20005.NL_
.cab
I386/C_20105.NL_
.cab
I386/C_20106.NL_
.cab
I386/C_20107.NL_
.cab
I386/C_20108.NL_
.cab
I386/C_20127.NL_
.cab
I386/C_20261.NL_
.cab
I386/C_20269.NL_
.cab
I386/C_20273.NL_
.cab
I386/C_20277.NL_
.cab
I386/C_20278.NL_
.cab
I386/C_20280.NL_
.cab
I386/C_20284.NL_
.cab
I386/C_20285.NL_
.cab
I386/C_20290.NL_
.cab
I386/C_20297.NL_
.cab
I386/C_20420.NL_
.cab
I386/C_20423.NL_
.cab
I386/C_20424.NL_
.cab
I386/C_20833.NL_
.cab
I386/C_20838.NL_
.cab
I386/C_20866.NL_
.cab
I386/C_20871.NL_
.cab
I386/C_20880.NL_
.cab
I386/C_20905.NL_
.cab
I386/C_20924.NL_
.cab
I386/C_20930.NL_
.cab
I386/C_20931.NL_
.cab
I386/C_20932.NL_
.cab
I386/C_20933.NL_
.cab
I386/C_20935.NL_
.cab
I386/C_20936.NL_
.cab
I386/C_20937.NL_
.cab
I386/C_20939.NL_
.cab
I386/C_20949.NL_
.cab
I386/C_20950.NL_
.cab
I386/C_21025.NL_
.cab
I386/C_21027.NL_
.cab
I386/C_21866.NL_
.cab
I386/C_28591.NL_
.cab
I386/C_28592.NL_
.cab
I386/C_28593.NL_
.cab
I386/C_28594.NL_
.cab
I386/C_28595.NL_
.cab
I386/C_28596.NL_
.cab
I386/C_28597.NL_
.cab
I386/C_28598.NL_
.cab
I386/C_28599.NL_
.cab
I386/C_28603.NL_
.cab
I386/C_28605.NL_
.cab
I386/C_437.NL_
.cab
I386/C_500.NL_
.cab
I386/C_708.NL_
.cab
I386/C_720.NL_
.cab
I386/C_737.NL_
.cab
I386/C_775.NL_
.cab
I386/C_850.NL_
.cab
I386/C_852.NL_
.cab
I386/C_855.NL_
.cab
I386/C_857.NL_
.cab
I386/C_858.NL_
.cab
I386/C_860.NL_
.cab
I386/C_861.NL_
.cab
I386/C_862.NL_
.cab
I386/C_863.NL_
.cab
I386/C_864.NL_
.cab
I386/C_865.NL_
.cab
I386/C_866.NL_
.cab
I386/C_869.NL_
.cab
I386/C_870.NL_
.cab
I386/C_874.NL_
.cab
I386/C_875.NL_
.cab
I386/C_932.NL_
.cab
I386/C_936.NL_
.cab
I386/C_949.NL_
.cab
I386/C_950.NL_
.cab
I386/C_G18030.DL_
.cab
I386/C_IS2022.DL_
.cab
I386/C_ISCII.DL_
.cab
I386/D3D8.DL_
.cab
I386/D3D8THK.DL_
.cab
I386/D3D9.DL_
.cab
I386/D3DIM.DL_
.cab
I386/D3DIM700.DL_
.cab
I386/D3DPMESH.DL_
.cab
I386/D3DRAMP.DL_
.cab
I386/D3DRM.DL_
.cab
I386/D3DXOF.DL_
.cab
I386/DAC2W2K.SY_
.cab
I386/DAC960NT.SY_
.cab
I386/DANIM.DL_
.cab
I386/DAO360.DL_
.cab
I386/DATACLEN.DL_
.cab
I386/DATASPEC.XM_
.cab
I386/DATETIME.CH_
.cab
I386/DATIME.DL_
.cab
I386/DAVCDATA.EX_
.cab
I386/DAVCLNT.DL_
.cab
I386/DAVID.TT_
.cab
I386/DAVIDBD.TT_
.cab
I386/DAVIDTR.TT_
.cab
I386/DAXCTLE.OC_
.cab
I386/DBGENG.DLL
.dll windows:5 windows x86 arch:x86

6e04e55ec19d69fe032c92da300fc8ff

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

dbgeng.pdb

Imports

dbghelp

SymSetContext
SymGetModuleBase64
SymFromName
SymSetSymWithAddr64
SymCleanup
SymRegisterFunctionEntryCallback64
SymRegisterCallback64
SymInitialize
SymGetSymFromAddr64
SymGetTypeInfo
SymFromAddr
SymEnumTypes
SymGetTypeFromName
ImageNtHeader
FindExecutableImageEx
SymFindFileInPath
SymLoadModuleEx
SymGetSymPrev64
SymGetSymNext64
SymUnloadModule64
SymGetOptions
SymMatchFileName
ImagehlpApiVersionEx
SymLoadModule64
SymSetSearchPath
GetTimestampForLoadedLibrary
MiniDumpWriteDump
DbgHelpCreateUserDump
SymEnumSymbols
SymGetFileLineOffsets64
SymEnumerateSymbols64
dbghelp
SymGetModuleInfo64
SymGetLineFromName64
SymSetOptions
SymMatchString
SymFunctionTableAccess64
StackWalk64
SymGetLineFromAddr64

version

GetFileVersionInfoSizeA
GetFileVersionInfoA
VerQueryValueA

advapi32

GetUserNameA
RegDeleteValueA
RegCreateKeyExA
RegQueryValueExA
InitializeSecurityDescriptor
SetSecurityDescriptorDacl
OpenProcessToken
LookupPrivilegeValueA
AdjustTokenPrivileges
RegSetValueExA
RegConnectRegistryA
RegOpenKeyExA
RegEnumValueA
RegCloseKey
CloseServiceHandle

kernel32

LeaveCriticalSection
EnterCriticalSection
GetTickCount
OutputDebugStringA
SetEvent
GetLastError
WaitForSingleObject
GetCurrentThreadId
WaitForSingleObjectEx
QueueUserAPC
FormatMessageA
CloseHandle
InterlockedIncrement
InterlockedDecrement
ReleaseSemaphore
Sleep
DuplicateHandle
GetCurrentThread
GetCurrentProcess
CreateSemaphoreA
DeleteCriticalSection
InitializeCriticalSection
GetCurrentProcessId
CreateEventA
GetVersionExA
GetSystemInfo
DebugBreak
GetProcAddress
IsBadWritePtr
IsBadReadPtr
WideCharToMultiByte
SetCommMask
GetCommMask
SetCommTimeouts
GetCommTimeouts
WaitCommEvent
ClearCommError
GetCommModemStatus
LocalFree
DeviceIoControl
LocalAlloc
MultiByteToWideChar
SetFilePointer
CreateFileA
GetOverlappedResult
ReadFile
WriteFile
GetFullPathNameA
UnmapViewOfFile
MapViewOfFile
VirtualProtect
CreateFileMappingA
GetFileSize
GetThreadPriority
GetPriorityClass
DeleteFileA
GetLocalTime
LoadLibraryA
ResetEvent
SetLastError
GetEnvironmentVariableA
GetModuleFileNameA
FreeLibrary
SetErrorMode
SearchPathA
GetModuleHandleA
WaitForMultipleObjects
CreateNamedPipeA
CreateThread
CreateProcessA
GetCommandLineA
GetFileAttributesA
ExpandEnvironmentStringsA
FileTimeToSystemTime
RaiseException
GetDriveTypeA
GetFileTime
GetComputerNameA
SetCommState
GetCommState
SetupComm
WaitNamedPipeA
InterlockedExchange
ConnectNamedPipe
GetVersionExW
ReadProcessMemory
ResumeThread
SuspendThread
OpenProcess
DebugActiveProcess
CloseProfileUserMapping
SetEnvironmentVariableA
TerminateProcess
GetExitCodeProcess
WriteProcessMemory
VirtualQueryEx
VirtualProtectEx
VirtualAllocEx
VirtualFreeEx
GetThreadContext
SetThreadContext
GetThreadSelectorEntry
CreateRemoteThread
WaitForDebugEvent
ContinueDebugEvent
TerminateThread
DisableThreadLibraryCalls

msvcrt

tolower
strstr
strncmp
printf
_purecall
??2@YAPAXI@Z
??3@YAXPAX@Z
malloc
_write
_vsnprintf
time
_strcmpi
gets
atoi
_strdup
getenv
free
ctime
_close
_stricmp
strrchr
atol
strchr
_except_handler3
sscanf
_ftol
fclose
fgets
fopen
memmove
sprintf
_wcsicmp
strncat
_memicmp
_strupr
realloc
isdigit
iswspace
wcslen
calloc
strncpy
_strlwr
toupper
_strnicmp
isspace
__iscsym
_snprintf
_splitpath
isalpha
_makepath
strtoul
strtok
isxdigit
strtol
_open
ldexp
frexp
_itoa
_read
_lseek
wcsrchr
wcschr
_initterm
_adjust_fdiv
__dllonexit
_onexit
wcscmp

Exports

Exports

DebugConnect
DebugCreate

Sections

.text
Size: 671KB - Virtual size: 670KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 99KB - Virtual size: 246KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 55KB - Virtual size: 55KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/DBGHELP.DLL
.dll windows:5 windows x86 arch:x86

42cfa6142c38112bdaffa05fb22db82e

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

dbghelp.pdb

Imports

msvcrt

__dllonexit
_wcsicmp
wcsncpy
wcscmp
wcsncmp
__CxxFrameHandler
_wsplitpath
_wcsnicmp
towlower
__unDName
fclose
wcstol
_CxxThrowException
bsearch
_snwprintf
fread
fseek
_wfopen
fopen
_osver
_mbsnbcpy
fflush
_iob
_wmakepath
wcsrchr
wcscpy
_wcsdup
ftell
_wgetenv
_mbsicmp
_access
_fullpath
_fsopen
_wfsopen
_sopen
_wsopen
_wfullpath
_read
_write
_onexit
_chsize
_close
_get_osfhandle
_open_osfhandle
_winminor
_winmajor
_mbscmp
_memicmp
wcsncat
?terminate@@YAXXZ
??1type_info@@UAE@XZ
_adjust_fdiv
_initterm
time
memmove
_ftol
swprintf
calloc
wcscat
_ltoa
_itoa
printf
_vsnprintf
strncat
tolower
_strcmpi
_makepath
_purecall
malloc
free
_strlwr
isspace
ctime
strstr
??2@YAPAXI@Z
??3@YAXPAX@Z
qsort
strncmp
_strnicmp
isxdigit
wcslen
sprintf
strrchr
strncpy
_except_handler3
_splitpath
_stricmp
strchr
_lseeki64
wprintf

kernel32

GetFileType
Sleep
DeviceIoControl
ExpandEnvironmentStringsW
InitializeCriticalSectionAndSpinCount
CopyFileA
SetFileAttributesA
CopyFileW
GetFileAttributesW
SetFileAttributesW
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSection
InterlockedIncrement
InterlockedDecrement
CreateFileMappingW
LCMapStringW
GetDriveTypeW
GetCurrentProcess
UnmapViewOfFile
GetEnvironmentVariableA
SetLastError
CloseHandle
CreateFileA
GetLastError
SetFilePointer
FindClose
FindNextFileA
FindFirstFileA
CreateDirectoryA
GetFullPathNameA
LocalAlloc
LocalFree
lstrcpyA
GetDriveTypeA
TlsGetValue
TlsAlloc
TlsFree
HeapReAlloc
HeapAlloc
HeapFree
IsDBCSLeadByte
GetProcAddress
GetModuleHandleA
lstrlenA
HeapDestroy
HeapCreate
DisableThreadLibraryCalls
GetVersionExA
MapViewOfFile
CreateFileMappingA
FreeLibrary
GetFileSize
LoadLibraryA
DuplicateHandle
ExpandEnvironmentStringsA
MultiByteToWideChar
WideCharToMultiByte
GetCurrentProcessId
VirtualFree
SetErrorMode
GetFileAttributesA
ReadProcessMemory
VirtualProtect
VirtualAlloc
DeleteFileW
WriteFile
CreateFileW
OutputDebugStringA
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetSystemTimeAsFileTime
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetSystemInfo
GetVersionExW
GetProcessHeap
SuspendThread
ResumeThread
GetThreadContext
VirtualQueryEx
LoadLibraryW
TerminateThread
SetEndOfFile
GetThreadSelectorEntry
MapViewOfFileEx
FlushViewOfFile
TlsSetValue
CreateThread

version

GetFileVersionInfoW
VerQueryValueA
GetFileVersionInfoA
GetFileVersionInfoSizeW
GetFileVersionInfoSizeA

advapi32

CryptAcquireContextA
CryptGenRandom
CryptReleaseContext
RegOpenKeyExA
RegQueryValueExA
RegQueryValueExW
RegEnumKeyExW
RegQueryInfoKeyW
RegOpenKeyExW
RegCloseKey
SetSecurityDescriptorDacl
InitializeSecurityDescriptor

rpcrt4

UuidCreate

Exports

Exports

DbgHelpCreateUserDump
DbgHelpCreateUserDumpW
EnumerateLoadedModules
EnumerateLoadedModules64
ExtensionApiVersion
FindDebugInfoFile
FindDebugInfoFileEx
FindExecutableImage
FindExecutableImageEx
FindFileInPath
FindFileInSearchPath
GetTimestampForLoadedLibrary
ImageDirectoryEntryToData
ImageDirectoryEntryToDataEx
ImageNtHeader
ImageRvaToSection
ImageRvaToVa
ImagehlpApiVersion
ImagehlpApiVersionEx
MakeSureDirectoryPathExists
MapDebugInformation
MiniDumpReadDumpStream
MiniDumpWriteDump
SearchTreeForFile
StackWalk
StackWalk64
SymCleanup
SymEnumSourceFiles
SymEnumSym
SymEnumSymbols
SymEnumTypes
SymEnumerateModules
SymEnumerateModules64
SymEnumerateSymbols
SymEnumerateSymbols64
SymEnumerateSymbolsW
SymEnumerateSymbolsW64
SymFindFileInPath
SymFromAddr
SymFromName
SymFunctionTableAccess
SymFunctionTableAccess64
SymGetFileLineOffsets64
SymGetLineFromAddr
SymGetLineFromAddr64
SymGetLineFromName
SymGetLineFromName64
SymGetLineNext
SymGetLineNext64
SymGetLinePrev
SymGetLinePrev64
SymGetModuleBase
SymGetModuleBase64
SymGetModuleInfo
SymGetModuleInfo64
SymGetModuleInfoW
SymGetModuleInfoW64
SymGetOptions
SymGetSearchPath
SymGetSymFromAddr
SymGetSymFromAddr64
SymGetSymFromName
SymGetSymFromName64
SymGetSymNext
SymGetSymNext64
SymGetSymPrev
SymGetSymPrev64
SymGetTypeFromName
SymGetTypeInfo
SymInitialize
SymLoadModule
SymLoadModule64
SymLoadModuleEx
SymMatchFileName
SymMatchString
SymRegisterCallback
SymRegisterCallback64
SymRegisterFunctionEntryCallback
SymRegisterFunctionEntryCallback64
SymSetContext
SymSetOptions
SymSetSearchPath
SymSetSymWithAddr64
SymUnDName
SymUnDName64
SymUnloadModule
SymUnloadModule64
UnDecorateSymbolName
UnmapDebugInformation
WinDbgExtensionDllInit
dbghelp
dh
lm
lmi
omap
srcfiles
sym
vc7fpo

Sections

.text
Size: 569KB - Virtual size: 568KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 13KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 40KB - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/DBMSRPCN.DL_
.cab
I386/DBNETLIB.DL_
.cab
I386/DBNMPNTW.DL_
.cab
I386/DCACHE.BI_
.cab
I386/DCAP32.DL_
.cab
I386/DCIMAN32.DL_
.cab
I386/DCOMCNFG.EX_
.cab
I386/DDAO36U.DL_
.cab
I386/DDEML.DL_
.cab
I386/DDESHARE.CH_
.cab
I386/DDESHARE.EX_
.cab
I386/DDESHARE.HL_
.cab
I386/DDRAW.DL_
.cab
I386/DDRAWEX.DL_
.cab
I386/DEBUG.EX_
.cab
I386/DEFAULT.AS_
.cab
I386/DEFLTWK.IN_
.cab
I386/DEFRAG.EX_
.cab
I386/DEFRAG.HL_
.cab
I386/DEFRAGP.CH_
.cab
I386/DESK.CP_
.cab
I386/DESKADP.DL_
.cab
I386/DESKMON.DL_
.cab
I386/DESKMOVR.HT_
.cab
I386/DESKPERF.DL_
.cab
I386/DESKTOP.IN_
.cab
I386/DESKTOP3.GI_
.cab
I386/DEVENUM.DL_
.cab
I386/DEVMGMT.MS_
.cab
I386/DEVMGR.CH_
.cab
I386/DEVMGR.DL_
.cab
I386/DEVMGR.HL_
.cab
I386/DEVXPROP.IN_
.cab
I386/DFRG.IN_
.cab
I386/DFRG.MS_
.cab
I386/DFRGFAT.EX_
.cab
I386/DFRGNTFS.EX_
.cab
I386/DFRGRES.DL_
.cab
I386/DFRGSNAP.DL_
.cab
I386/DFRGUI.DL_
.cab
I386/DFS.HL_
.cab
I386/DFSSHLEX.DL_
.cab
I386/DGAPORT.IN_
.cab
I386/DGASYNC.IN_
.cab
I386/DGCLASS.DL_
.cab
I386/DGNET.DL_
.cab
I386/DGNET.MO_
.cab
I386/DGRPSETU.DL_
.cab
I386/DGSETUP.DL_
.cab
I386/DHCP.MI_
.cab
I386/DHCPCSVC.DL_
.cab
I386/DHCPMON.DL_
.cab
I386/DHCPQEC.DL_
.cab
I386/DHCPSAPI.DL_
.cab
I386/DHTMLED.OC_
.cab
I386/DIACTFRM.DL_
.cab
I386/DIAGBTP.CH_
.cab
I386/DIALER.CH_
.cab
I386/DIALER.EX_
.cab
I386/DIALER.HL_
.cab
I386/DIALMGR.JS_
.cab
I386/DIALTONE.GI_
.cab
I386/DIALTONE.HT_
.cab
I386/DIALUP.GI_
.cab
I386/DIALUP.HT_
.cab
I386/DIANTZ.EX_
.cab
I386/DIGCORE.EX_
.cab
I386/DIGEST.DL_
.cab
I386/DIGIASYN.IN_
.cab
I386/DIGIISDN.IN_
.cab
I386/DIGIMPS.IN_
.cab
I386/DIGIRLPT.CN_
.cab
I386/DIGIRP.IN_
.cab
I386/DIGIRPRT.IN_
.cab
I386/DIGOPT.MS_
.cab
I386/DIGREQEX.MS_
.cab
I386/DIJOY.HL_
.cab
I386/DIMAP.DL_
.cab
I386/DIMAPS.IN_
.cab
I386/DIMSNTFY.DL_
.cab
I386/DIMSROAM.DL_
.cab
I386/DING.WA_
.cab
I386/DINOSAU2.AN_
.cab
I386/DINOSAUR.AN_
.cab
I386/DINPUT.DL_
.cab
I386/DINPUT8.DL_
.cab
I386/DIRECTDB.DL_
.cab
I386/DIRTBIKE.BM_
.cab
I386/DISK.IN_
.cab
I386/DISK.SY_
.cab
I386/DISK1
I386/DISKCOMP.CO_
.cab
I386/DISKCOPY.CO_
.cab
I386/DISKCOPY.DL_
.cab
I386/DISKDUMP.SY_
.cab
I386/DISKMGMT.HL_
.cab
I386/DISKMGMT.MS_
.cab
I386/DISKMGTW.CH_
.cab
I386/DISKPART.EX_
.cab
I386/DISKPERF.EX_
.cab
I386/DISPEX.DL_
.cab
I386/DISPLAY.HL_
.cab
I386/DISPLAY.IN_
.cab
I386/DISPLAYW.CH_
.cab
I386/DIVAC.IN_
.cab
I386/DIVASRV.IN_
.cab
I386/DKCONP.CH_
.cab
I386/DLIMPORT.EX_
.cab
I386/DLLHOST.EX_
.cab
I386/DLLHST3G.EX_
.cab
I386/DMADMIN.EX_
.cab
I386/DMBAND.DL_
.cab
I386/DMBOOT.SY_
.cab
I386/DMCOMPOS.DL_
.cab
I386/DMCONFIG.DL_
.cab
I386/DMDLGS.DL_
.cab
I386/DMDSKMGR.DL_
.cab
I386/DMDSKRES.DL_
.cab
I386/DMIME.DL_
.cab
I386/DMINTF.DL_
.cab
I386/DMIO.SY_
.cab
I386/DMLOAD.SY_
.cab
I386/DMLOADER.DL_
.cab
I386/DMOCX.DL_
.cab
I386/DMREG.INF
I386/DMREMOTE.EX_
.cab
I386/DMSCRIPT.DL_
.cab
I386/DMSERVER.DL_
.cab
I386/DMSTYLE.DL_
.cab
I386/DMSYNTH.DL_
.cab
I386/DMUSIC.DL_
.cab
I386/DMVIEW.OC_
.cab
I386/DNARY.MD_
.cab
I386/DNSAPI.DL_
.cab
I386/DNSMGMT.MS_
.cab
I386/DNSRSLVR.DL_
.cab
I386/DOCPROP.DL_
.cab
I386/DOCPROP2.DL_
.cab
I386/DOG.BM_
.cab
I386/DOS737.FO_
.cab
I386/DOS869.FO_
.cab
I386/DOSAPP.FO_
.cab
I386/DOSKEY.EX_
.cab
I386/DOSNET.INF
I386/DOSX.EX_
.cab
I386/DOT3API.DL_
.cab
I386/DOT3CFG.DL_
.cab
I386/DOT3CLNT.DL_
.cab
I386/DOT3DLG.DL_
.cab
I386/DOT3MSM.DL_
.cab
I386/DOT3SVC.DL_
.cab
I386/DOT3UI.DL_
.cab
I386/DOT4.IN_
.cab
I386/DOT4PRT.IN_
.cab
I386/DPCDLL.DL_
.cab
I386/DPLAY.DL_
.cab
I386/DPLAYSVR.EX_
.cab
I386/DPLAYX.DL_
.cab
I386/DPMODEMX.DL_
.cab
I386/DPNADDR.DL_
.cab
I386/DPNET.DL_
.cab
I386/DPNHPAST.DL_
.cab
I386/DPNHUPNP.DL_
.cab
I386/DPNLOBBY.DL_
.cab
I386/DPNMODEM.DL_
.cab
I386/DPNSVR.EX_
.cab
I386/DPNWSOCK.DL_
.cab
I386/DPSERIAL.DL_
.cab
I386/DPTI2O.SY_
.cab
I386/DPVACM.DL_
.cab
I386/DPVOICE.DL_
.cab
I386/DPVSETUP.EX_
.cab
I386/DPVVOX.DL_
.cab
I386/DPWSOCK.DL_
.cab
I386/DPWSOCKX.DL_
.cab
I386/DRDYISP.HT_
.cab
I386/DRDYMIG.HT_
.cab
I386/DRDYOEM.HT_
.cab
I386/DRDYREF.HT_
.cab
I386/DRIP.BM_
.cab
I386/DRIVER.CAB
.cab
I386/DRM.IN_
.cab
I386/DRMCLIEN.DL_
.cab
I386/DRMSTOR.DL_
.cab
I386/DRMV2CLT.DL_
.cab
I386/DRPROV.DL_
.cab
I386/DRUM.AN_
.cab
I386/DRVINDEX.INF
I386/DRVMAIN.SDB
I386/DRVQRY.EX_
.cab
I386/DRVVFP.CH_
.cab
I386/DRW/1033/DWINTL.DLL
.dll windows:4 windows x86 arch:x86

Code Sign

4a:19:d2:38:8c:82:59:1c:a5:5d:73:5f:15:5d:dc:a3
Certificate

Issuer

OU=VeriSign\, Inc.+OU=VeriSign Time Stamping Service Root+OU=NO LIABILITY ACCEPTED\, (c)97 VeriSign\, Inc.,O=VeriSign Trust Network

Not Before

12/05/1997, 00:00

Not After

07/01/2004, 23:59

Subject

OU=VeriSign\, Inc.+OU=VeriSign Time Stamping Service Root+OU=NO LIABILITY ACCEPTED\, (c)97 VeriSign\, Inc.,O=VeriSign Trust Network

08:7a:6d:5c:6f:62:93:4f:ba:c4:fd:43:e1:14:18:9d
Certificate

Issuer

OU=VeriSign\, Inc.+OU=VeriSign Time Stamping Service Root+OU=NO LIABILITY ACCEPTED\, (c)97 VeriSign\, Inc.,O=VeriSign Trust Network

Not Before

28/02/2001, 00:00

Not After

06/01/2004, 23:59

Subject

CN=VeriSign Time Stamping Service,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)01,O=VeriSign\, Inc.

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

c1:00:8b:3c:3c:88:11:d1:3e:f6:63:ec:df:40
Certificate

Issuer

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

Not Before

10/01/1997, 07:00

Not After

31/12/2020, 07:00

Subject

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

61:06:2a:8d:00:00:00:00:00:0b
Certificate

Issuer

CN=Microsoft Code Signing PCA,OU=Copyright (c) 2000 Microsoft Corp.,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

29/03/2001, 21:27

Not After

29/05/2002, 21:37

Subject

CN=Microsoft Corporation,OU=Copyright (c) 2001 Microsoft Corp.,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

6a:0b:99:4f:c0:00:de:aa:11:d4:d8:40:9a:a8:be:e6
Certificate

Issuer

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

Not Before

10/12/2000, 08:00

Not After

12/11/2005, 08:00

Subject

CN=Microsoft Code Signing PCA,OU=Copyright (c) 2000 Microsoft Corp.,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageContentCommitment
KeyUsageCertSign
KeyUsageCRLSign

Signer

Actual PE Digest

Digest Algorithm

PE Digest Matches

false

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.text
Size: 4KB - Virtual size: 149B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 36KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 8B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/DRW/DWWIN.EXE
.exe windows:4 windows x86 arch:x86

eb56ff0b12ba8fed58c88a68553edb5e

Code Sign

4a:19:d2:38:8c:82:59:1c:a5:5d:73:5f:15:5d:dc:a3
Certificate

Issuer

OU=VeriSign\, Inc.+OU=VeriSign Time Stamping Service Root+OU=NO LIABILITY ACCEPTED\, (c)97 VeriSign\, Inc.,O=VeriSign Trust Network

Not Before

12/05/1997, 00:00

Not After

07/01/2004, 23:59

Subject

OU=VeriSign\, Inc.+OU=VeriSign Time Stamping Service Root+OU=NO LIABILITY ACCEPTED\, (c)97 VeriSign\, Inc.,O=VeriSign Trust Network

08:7a:6d:5c:6f:62:93:4f:ba:c4:fd:43:e1:14:18:9d
Certificate

Issuer

OU=VeriSign\, Inc.+OU=VeriSign Time Stamping Service Root+OU=NO LIABILITY ACCEPTED\, (c)97 VeriSign\, Inc.,O=VeriSign Trust Network

Not Before

28/02/2001, 00:00

Not After

06/01/2004, 23:59

Subject

CN=VeriSign Time Stamping Service,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)01,O=VeriSign\, Inc.

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

c1:00:8b:3c:3c:88:11:d1:3e:f6:63:ec:df:40
Certificate

Issuer

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

Not Before

10/01/1997, 07:00

Not After

31/12/2020, 07:00

Subject

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

61:06:2a:8d:00:00:00:00:00:0b
Certificate

Issuer

CN=Microsoft Code Signing PCA,OU=Copyright (c) 2000 Microsoft Corp.,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

29/03/2001, 21:27

Not After

29/05/2002, 21:37

Subject

CN=Microsoft Corporation,OU=Copyright (c) 2001 Microsoft Corp.,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

6a:0b:99:4f:c0:00:de:aa:11:d4:d8:40:9a:a8:be:e6
Certificate

Issuer

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

Not Before

10/12/2000, 08:00

Not After

12/11/2005, 08:00

Subject

CN=Microsoft Code Signing PCA,OU=Copyright (c) 2000 Microsoft Corp.,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageContentCommitment
KeyUsageCertSign
KeyUsageCRLSign

Signer

Actual PE Digest

Digest Algorithm

PE Digest Matches

false

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegQueryValueExW
RegCloseKey
RegOpenKeyExA
RegEnumKeyExA
RegQueryInfoKeyA
RegQueryValueExA
DeregisterEventSource
ReportEventA
RegisterEventSourceW
RegEnumValueA
GetUserNameA

comctl32

ord17

gdi32

CreateFontA
DeleteDC
RestoreDC
DeleteObject
GetTextFaceA
SelectObject
GetTextMetricsA
GetDeviceCaps
SetMapMode
SaveDC
Polyline
CreatePen
ExtTextOutW
GetTextExtentPoint32W
SetTextAlign
SetBkMode
SetTextColor
CreateFontIndirectA
GetObjectA

kernel32

GetModuleHandleA
MultiByteToWideChar
GetCommandLineA
GetCommandLineW
MapViewOfFile
ReleaseMutex
WaitForSingleObject
WaitForMultipleObjects
LeaveCriticalSection
EnterCriticalSection
ExitProcess
GetStartupInfoA
CloseHandle
CreateThread
Sleep
GetCurrentProcess
TerminateProcess
GetCurrentProcessId
LoadLibraryA
SetUnhandledExceptionFilter
MulDiv
WideCharToMultiByte
IsBadReadPtr
GetModuleFileNameA
GetSystemDefaultLangID
GetProcAddress
GetUserDefaultLangID
GetACP
GetSystemDefaultLCID
GetVersionExA
FreeLibrary
InitializeCriticalSection
GetProcessHeap
DeleteCriticalSection
lstrcpyA
GetLastError
GetProfileStringA
SetEvent
CreateSemaphoreA
CreateProcessW
ExpandEnvironmentStringsW
CreateFileMappingA
GetFileSize
CreateFileA
DeleteFileA
DeleteFileW
GetTickCount
SetEnvironmentVariableA
ReadProcessMemory
VirtualQueryEx
GetSystemInfo
GetFileAttributesA
CreateDirectoryA
WriteFile
SetFilePointer
CreateFileW
GetTempPathA
GetTempPathW
GetFileAttributesW
CreateDirectoryW
LockResource
LoadResource
FindResourceExA
GetSystemDirectoryA
SetEndOfFile
ExpandEnvironmentStringsA
IsDBCSLeadByte
CreateProcessA
SuspendThread
GetSystemTime
GetComputerNameA
CreateMutexA
TlsAlloc
TlsFree
TlsSetValue
VirtualFree
TlsGetValue
UnmapViewOfFile
SetLastError
HeapAlloc
GetLocaleInfoA
IsValidCodePage
VirtualAlloc
TerminateThread
GetCurrentThreadId
GetThreadContext
GetThreadSelectorEntry
ResumeThread
HeapFree
GetStringTypeA
GetStringTypeW
RtlUnwind
LCMapStringA
LCMapStringW

oleaut32

SysFreeString
SystemTimeToVariantTime
VariantTimeToDosDateTime
SysStringLen
SysAllocString

shell32

ShellExecuteExA
ExtractIconExA

user32

SetWindowLongA
DestroyWindow
MessageBoxA
DrawIconEx
EnableWindow
CheckDlgButton
GetSysColor
IsDlgButtonChecked
LoadIconA
DrawFocusRect
SetWindowTextW
GetWindow
LoadCursorA
DestroyIcon
GetWindowPlacement
IsIconic
wsprintfW
LoadStringW
GetWindowThreadProcessId
EnumWindows
CharPrevA
CallWindowProcA
CallWindowProcW
IsWindowUnicode
SystemParametersInfoA
GetClientRect
SendDlgItemMessageA
SetFocus
EndDialog
GetDlgItem
ShowWindow
SetCursor
InvalidateRect
DialogBoxParamW
DialogBoxParamA
CreateDialogParamW
CreateDialogParamA
SetWindowTextA
GetDC
MapWindowPoints
GetSysColorBrush
FillRect
ReleaseDC
GetSystemMetrics
SetForegroundWindow
GetWindowLongA
GetWindowRect
SetWindowPos
RegisterClassExA
CreateWindowExA
GetMessageA
IsDialogMessageA
TranslateMessage
DispatchMessageA
PostQuitMessage
DefWindowProcA
KillTimer
wsprintfA
SendMessageA
PostMessageA
SetScrollInfo
GetScrollInfo
SetDlgItemTextA
SetTimer

version

VerQueryValueA
GetFileVersionInfoSizeA
GetFileVersionInfoSizeW
GetFileVersionInfoA
GetFileVersionInfoW

wininet

InternetSetOptionA
InternetWriteFile
HttpSendRequestExA
InternetCanonicalizeUrlA
InternetReadFileExA
HttpEndRequestA
InternetOpenA
InternetSetStatusCallback
InternetAutodial
InternetGetConnectedState
InternetQueryOptionA
HttpQueryInfoA
InternetCloseHandle
HttpOpenRequestA
InternetConnectA

Sections

.text
Size: 140KB - Virtual size: 138KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
I386/DRW/FAULTH.DLL
.dll windows:5 windows x86 arch:x86

bd4e73614801dc77523e9d4dd6246073

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_REMOVABLE_RUN_FROM_SWAP
IMAGE_FILE_NET_RUN_FROM_SWAP
IMAGE_FILE_DLL

Imports

kernel32

SetEvent
SetLastError
UnmapViewOfFile
ReleaseMutex
WaitForMultipleObjects
WaitForSingleObject
GetTickCount
CloseHandle
CreateProcessA
MultiByteToWideChar
GetModuleFileNameA
lstrcpynA
GetCurrentThreadId
GetCurrentProcessId
MapViewOfFile
CreateFileMappingA
DuplicateHandle
GetCurrentProcess
CreateMutexA
GetLastError
CreateEventA
HeapFree
HeapAlloc
GetProcessHeap
GetVersionExA
WideCharToMultiByte
RtlUnwind
LCMapStringA
LCMapStringW
GetLocaleInfoA
GetCPInfo
VirtualProtect
VirtualAlloc
GetSystemInfo
VirtualQuery
GetStringTypeA
GetStringTypeW
VirtualFree
HeapReAlloc

version

GetFileVersionInfoSizeA
GetFileVersionInfoA
VerQueryValueA

user32

wsprintfA

Exports

Exports

FAULTHCreate
FAULTHDelete

Sections

.text
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 232B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 992B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 852B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/DRWATSON.EX_
.cab
I386/DRWTSN32.CH_
.cab
I386/DRWTSN32.EX_
.cab
I386/DRWTSN32.HL_
.cab
I386/DS16GT.DL_
.cab
I386/DS32GT.DL_
.cab
I386/DSAUTH.DL_
.cab
I386/DSCLIENT.HL_
.cab
I386/DSDMO.DL_
.cab .ps1 polyglot
I386/DSDMOPRP.DL_
.cab
I386/DSHOWEXT.IN_
.cab
I386/DSKQUOP.CH_
.cab
I386/DSKQUOTA.DL_
.cab
I386/DSKQUOUI.DL_
.cab
I386/DSKQUOUI.HL_
.cab
I386/DSLMAIN.HT_
.cab
I386/DSLMAIN.JS_
.cab
I386/DSL_A.HT_
.cab
I386/DSL_B.HT_
.cab
I386/DSOUND.DL_
.cab
I386/DSOUND.VX_
.cab
I386/DSOUND3D.DL_
.cab
I386/DSPROP.DL_
.cab
I386/DSPROV.DL_
.cab
I386/DSPROV.MF_
.cab
I386/DSPROV.MO_
.cab
I386/DSPRPRES.DL_
.cab
I386/DSQUERY.DL_
.cab
I386/DSSEC.DA_
.cab
I386/DSSEC.DL_
.cab
I386/DSSENH.DL_
.cab
I386/DSUIEXT.DL_
.cab
I386/DSWAVE.DL_
.cab
I386/DTCNTWKS.IN_
.cab
I386/DTIWAIT.HT_
.cab
I386/DTSGNUP.HT_
.cab
I386/DUCK.BM_
.cab
I386/DUMPREP.EX_
.cab
I386/DUSER.DL_
.cab
I386/DVD.IN_
.cab
I386/DVDUPGRD.EX_
.cab
I386/DVUSD.DL_
.cab
I386/DWIL1033.DL_
.cab
I386/DWUP.IN_
.cab
I386/DWWIN.EX_
.cab
I386/DX7VB.DL_
.cab
I386/DX8VB.DL_
.cab
I386/DXAPI.SY_
.cab
I386/DXDIAG.CH_
.cab
I386/DXDIAG.EX_
.cab
I386/DXDIAGN.DL_
.cab
I386/DXG.SY_
.cab
I386/DXGTHK.SY_
.cab
I386/DXMASF.DL_
.cab
I386/DXTMSFT.DL_
.cab
I386/DXTRANS.DL_
.cab
I386/E1.IN_
.cab
I386/EAPCOM.XS_
.cab
I386/EAPCON1.XS_
.cab
I386/EAPCONF.XS_
.cab
I386/EAPCRED.XS_
.cab
I386/EAPGEN.XS_
.cab
I386/EAPOLQEC.DL_
.cab
I386/EAPP3HST.DL_
.cab
I386/EAPPCFG.DL_
.cab
I386/EAPPGNUI.DL_
.cab
I386/EAPPHOST.DL_
.cab
I386/EAPPPRXY.DL_
.cab
I386/EAPQEC.DL_
.cab
I386/EAPSVC.DL_
.cab
I386/EAPTLS1.XS_
.cab
I386/EAPTLSV1.XS_
.cab
I386/EAPUSER1.XS_
.cab
I386/EARL.AC_
.cab
I386/EDB500.DL_
.cab
I386/EDIT.CO_
.cab
I386/EDIT.HL_
.cab
I386/EDLIN.EX_
.cab
I386/EFSADU.DL_
.cab
I386/EGA.CP_
.cab
I386/EGA40737.FO_
.cab
I386/EGA40850.FO_
.cab
I386/EGA40852.FO_
.cab
I386/EGA40857.FO_
.cab
I386/EGA40866.FO_
.cab
I386/EGA40869.FO_
.cab
I386/EGA40WOA.FO_
.cab
I386/EGA80737.FO_
.cab
I386/EGA80850.FO_
.cab
I386/EGA80852.FO_
.cab
I386/EGA80857.FO_
.cab
I386/EGA80866.FO_
.cab
I386/EGA80869.FO_
.cab
I386/EGA80WOA.FO_
.cab
I386/ELS.CH_
.cab
I386/ELS.DL_
.cab
I386/ELS.HL_
.cab
I386/EMPTY.TXT
I386/ENCAPI.DL_
.cab
I386/ENCDEC.DL_
.cab
I386/ENCRYPTW.CH_
.cab
I386/ENUM1394.IN_
.cab
I386/EPCFW2K.IN_
.cab
I386/EPSNMFP.IN_
.cab
I386/EPSNSCAN.IN_
.cab
I386/EPSTW2K.IN_
.cab
I386/EQNCLASS.DL_
.cab
I386/EQNPORT.IN_
.cab
I386/ERROR.JS_
.cab
I386/ERROR.XM_
.cab
I386/ERSVC.DL_
.cab
I386/ES.DL_
.cab
I386/ES1371MP.DL_
.cab
I386/ESENT.DL_
.cab
I386/ESENT97.DL_
.cab
I386/ESENTPRF.DL_
.cab
I386/ESENTPRF.HX_
.cab
I386/ESENTPRF.IN_
.cab
I386/ESENTUTL.EX_
.cab
I386/ESSCLI.DL_
.cab
I386/ESTRE.TT_
.cab
I386/ESUCMD.DL_
.cab
I386/ESUIMGD.DL_
.cab
I386/ESUNID.DL_
.cab
I386/ET4000.SY_
.cab
I386/EUDCEDIT.CH_
.cab
I386/EUDCEDIT.EX_
.cab
I386/EUDCEDIT.HL_
.cab
I386/EULA.TXT
I386/EVCON.CH_
.cab
I386/EVCREATE.EX_
.cab
I386/EVENTCLS.DL_
.cab
I386/EVENTLOG.DL_
.cab
I386/EVENTS.JS_
.cab
I386/EVENTVWR.EX_
.cab
I386/EVENTVWR.MS_
.cab
I386/EVNTAGNT.DL_
.cab
I386/EVNTCMD.EX_
.cab
I386/EVNTRPRV.DL_
.cab
I386/EVNTRPRV.MO_
.cab
I386/EVNTWIN.EX_
.cab
I386/EVNTWIN.HL_
.cab
I386/EVTGPROV.DL_
.cab
I386/EVTGPROV.MO_
.cab
I386/EVTQUERY.VB_
.cab
I386/EVTRIG.EX_
.cab
I386/EXCEL.XL_
.cab
I386/EXCEL4.XL_
.cab
I386/EXCLAM.GI_
.cab
I386/EXE2BIN.EX_
.cab
I386/EXP160_R.IC_
.cab
I386/EXP160_T.IC_
.cab
I386/EXP164XR.IC_
.cab
I386/EXP164XT.IC_
.cab
I386/EXP168_R.IC_
.cab
I386/EXP168_T.IC_
.cab
I386/EXP800_R.IC_
.cab
I386/EXP800_T.IC_
.cab
I386/EXP836XR.IC_
.cab
I386/EXP836XT.IC_
.cab
I386/EXPAND.EXE
.exe windows:5 windows x86 arch:x86

93b9c839c40250d5b927e08cd9f45af5

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

_except_handler3
_controlfp
__set_app_type
printf
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
__initenv
exit
_cexit
_XcptFilter
_exit
_c_exit
toupper
__p__fmode

kernel32

lstrlenA
lstrcatA
GetFileTime
GetFileAttributesA
GlobalFree
GlobalAlloc
GetStringTypeW
lstrcpynA
IsDBCSLeadByte
lstrcpyA
GetFullPathNameA
lstrcmpiA
SetThreadLocale
GetSystemDefaultLangID
GetConsoleOutputCP
GetThreadLocale
_lcreat
CloseHandle
SetFileTime
LocalFileTimeToFileTime
DosDateTimeToFileTime
CreateFileA
_lclose
LocalAlloc
LocalFree
_lopen
_lread
GetLastError
_lwrite
_llseek
DeleteFileA
GetFileSize
GetModuleHandleA
lstrcmpA

user32

LoadStringA
CharLowerA
CharToOemA

cabinet

ord21
ord22
ord20
ord23

ntdll

NlsMbCodePageTag
RtlMultiByteToUnicodeN

Sections

.text
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
I386/EXPLORER.EX_
.cab
I386/EXPLORER.SC_
.cab
I386/EXPSRV.DL_
.cab
I386/EXSTRACE.DL_
.cab
I386/EXTMGR.DL_
.cab
I386/EXTRAC32.EX_
.cab
I386/EXTS.DLL
.dll windows:5 windows x86 arch:x86

4b9df454f2e81149627e96baaeea7261

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

exts.pdb

Imports

msvcrt

_initterm
_adjust_fdiv
strncpy
strncmp
atoi
isspace
ctime
_except_handler3
strstr
sprintf
isxdigit
toupper
memchr
isprint
sscanf
strpbrk
free
malloc
_wcsnicmp
_wtoi
_wcsicmp
_stricmp
strtoul
strchr

ntdll

RtlUnicodeStringToAnsiString
RtlFreeAnsiString
RtlGetAce
RtlLengthSid
RtlConvertSidToUnicodeString
RtlFreeUnicodeString
RtlValidAcl
RtlLengthRequiredSid
NtQueryInformationProcess
RtlCompareMemoryUlong
RtlCompareMemory
NtQuerySystemInformation
RtlValidSid

kernel32

HeapCreate
HeapDestroy
VirtualQueryEx
HeapFree
HeapAlloc
RaiseException
LocalAlloc
LocalFree
GetLastError
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
DisableThreadLibraryCalls

dbgeng

DebugCreate

Exports

Exports

DebugExtensionInitialize
DebugExtensionNotify
DebugExtensionUninitialize
acl
analyzeexcep
atom
avrf
cs
cxr
dlls
exr
gflag
heap
help
kuser
list
obja
peb
psr
sd
sid
str
teb
ustr

Sections

.text
Size: 111KB - Virtual size: 110KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 984B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/F3AHVOAS.DL_
.cab
I386/FASTFAT.SY_
.cab
I386/FASTOPEN.EX_
.cab
I386/FASTPROX.DL_
.cab
I386/FAULTREP.DL_
.cab
I386/FAXPATCH.EXE
.exe windows:5 windows x86 arch:x86

2cba462a5d8fb39f4a6a6cf6ef7a861a

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

FAXPATCH.pdb

Imports

advapi32

ChangeServiceConfigW
SetFileSecurityW
ConvertStringSecurityDescriptorToSecurityDescriptorW
OpenSCManagerW
OpenServiceW
QueryServiceStatus
CloseServiceHandle

kernel32

FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetFileType
HeapDestroy
HeapCreate
VirtualFree
HeapFree
LoadLibraryA
GetACP
GetOEMCP
GetEnvironmentStrings
HeapAlloc
VirtualAlloc
HeapReAlloc
RtlUnwind
InterlockedExchange
VirtualQuery
LCMapStringA
MultiByteToWideChar
LCMapStringW
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
VirtualProtect
GetSystemInfo
FreeEnvironmentStringsA
GetModuleFileNameA
GetStdHandle
WriteFile
GetModuleHandleA
GetProcAddress
ExitProcess
GetVersionExA
GetCommandLineA
GetStartupInfoA
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
GetSystemDirectoryW
LocalFree
GetLastError
GetCPInfo

Sections

.text
Size: 17KB - Virtual size: 17KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
I386/FC.EX_
.cab
I386/FCONPROV.MF_
.cab
I386/FCONPROV.MO_
.cab
I386/FDC.IN_
.cab
I386/FDC.SY_
.cab
I386/FDE.DL_
.cab
I386/FDE.HL_
.cab
I386/FDEPLOY.DL_
.cab
I386/FEATHER.BM_
.cab
I386/FECLIENT.DL_
.cab
I386/FEVPROV.MF_
.cab
I386/FEVPROV.MO_
.cab
I386/FIERULD.GI_
.cab
I386/FIESTA.HT_
.cab
I386/FIESTABG.JP_
.cab
I386/FILEFLDW.CH_
.cab
I386/FILEFOLD.HL_
.cab
I386/FILELIST.DA_
.cab
I386/FILELIST.XM_
.cab
I386/FILEMGMT.DL_
.cab
I386/FILEMGMT.HL_
.cab
I386/FILE_SRV.CH_
.cab
I386/FILLITUP.AN_
.cab
I386/FILTERS.XM_
.cab
I386/FIND.EX_
.cab
I386/FINDSTR.EX_
.cab
I386/FINDW.CH_
.cab
I386/FINGER.EX_
.cab
I386/FINI.HT_
.cab
I386/FINISH.XM_
.cab
I386/FIPS.SY_
.cab
I386/FIREWALL.CP_
.cab
I386/FISH.BM_
.cab
I386/FIXMAPI.EX_
.cab
I386/FJTSCAN.IN_
.cab
I386/FLASH.IN_
.cab
I386/FLASH.OC_
.cab
I386/FLATTEMP.EX_
.cab
I386/FLDRCLNR.DL_
.cab
I386/FLOURISH.MI_
.cab
I386/FLPYDISK.IN_
.cab
I386/FLPYDISK.SY_
.cab
I386/FLTLIB.DL_
.cab
I386/FLTMC.EX_
.cab
I386/FLTMGR.IN_
.cab
I386/FLTMGR.SY_
.cab
I386/FMIFS.DL_
.cab
I386/FOLDEROP.CH_
.cab
I386/FOLLOW.JP_
.cab
I386/FONT.DA_
.cab
I386/FONT.IN_
.cab
I386/FONTEXT.DL_
.cab
I386/FONTS.CH_
.cab
I386/FONTS.HL_
.cab
I386/FONTSUB.DL_
.cab
I386/FONTVIEW.EX_
.cab
I386/FORCEDOS.EX_
.cab
I386/FORMAT.CO_
.cab
I386/FP4.CA_
.cab
I386/FP40EXT.CAB
.cab
I386/FP40EXT.DL_
.cab
I386/FP40EXT.IN_
.cab
I386/FRAMD.TT_
.cab
I386/FRAMDIT.TT_
.cab
I386/FRAMEBUF.DL_
.cab
I386/FRAMEDYN.DL_
.cab
I386/FRANK.TT_
.cab
I386/FREECELL.CH_
.cab
I386/FREECELL.EX_
.cab
I386/FREECELL.HL_
.cab
I386/FRIEND.JP_
.cab
I386/FROG.BM_
.cab
I386/FSCFG.DL_
.cab
I386/FSCONINS.DL_
.cab
I386/FSMGMT.MS_
.cab
I386/FSQUIRT.EX_
.cab
I386/FSUSD.DL_
.cab
I386/FSUTIL.EX_
.cab
I386/FSVGA.IN_
.cab
I386/FSVGAADD.IN_
.cab
I386/FSVGADEL.IN_
.cab
I386/FS_REC.SY_
.cab
I386/FTDISK.SY_
.cab
I386/FTLX041E.DL_
.cab
I386/FTP.EX_
.cab
I386/FTP.MI_
.cab
I386/FTPCTRS.H2_
.cab
I386/FTPCTRS.IN_
.cab
I386/FTPCTRS2.DL_
.cab
I386/FTPMIB.DL_
.cab
I386/FTPSAPI2.DL_
.cab
I386/FTPSV251.DL_
.cab
I386/FTSRCH.DL_
.cab
I386/FWCFG.DL_
.cab
I386/FWDPROV.DL_
.cab
I386/FXSAPI.DL_
.cab
I386/FXSCFGWZ.DL_
.cab
I386/FXSCLNT.CH_
.cab
I386/FXSCLNT.EX_
.cab
I386/FXSCLNT.HL_
.cab
I386/FXSCLNTR.DL_
.cab
I386/FXSCOM.DL_
.cab
I386/FXSCOMEX.DL_
.cab
I386/FXSCOUNT.H_
.cab
I386/FXSCOVER.CH_
.cab
I386/FXSCOVER.EX_
.cab
I386/FXSDRV.DL_
.cab
I386/FXSEVENT.DL_
.cab
I386/FXSEXT.EC_
.cab
I386/FXSEXT32.DL_
.cab
I386/FXSMON.DL_
.cab
I386/FXSOCM.DL_
.cab
I386/FXSOCM.IN_
.cab
I386/FXSPERF.DL_
.cab
I386/FXSPERF.IN_
.cab
I386/FXSRES.DL_
.cab
I386/FXSROUTE.DL_
.cab
I386/FXSSEND.EX_
.cab
I386/FXSSHARE.CH_
.cab
I386/FXSST.DL_
.cab
I386/FXSSVC.EX_
.cab
I386/FXST30.DL_
.cab
I386/FXSTIFF.DL_
.cab
I386/FXSUI.DL_
.cab
I386/FXSWZRD.DL_
.cab
I386/FXSXP32.DL_
.cab
I386/FYI.CO_
.cab
I386/G200.IN_
.cab
I386/G400.IN_
.cab
I386/G711CODC.AX_
.cab
I386/GAMEPORT.IN_
.cab
I386/GAMES.IN_
.cab
I386/GAUTAMI.TT_
.cab
I386/GB2312.UC_
.cab
I386/GCDEF.DL_
.cab
I386/GDI.EX_
.cab
I386/GDI32.DL_
.cab
I386/GENERIC.CO_
.cab
I386/GENPRINT.IN_
.cab
I386/GENW.CH_
.cab
I386/GEO.NL_
.cab
I386/GEORGIA.TT_
.cab
I386/GEORGIAB.TT_
.cab
I386/GEORGIAI.TT_
.cab
I386/GEORGIAZ.TT_
.cab
I386/GETMAC.EX_
.cab
I386/GETUNAME.DL_
.cab
I386/GLACIER.HT_
.cab
I386/GLACRBKG.JP_
.cab
I386/GLMDA.IN_
.cab
I386/GLMDA.PN_
.cab
I386/GLMDIGGP.IN_
.cab
I386/GLMDIGGP.PN_
.cab
I386/GLMF32.DL_
.cab
I386/GLOSW.CH_
.cab
I386/GLU32.DL_
.cab
I386/GM.DL_
.cab
I386/GMREADME.TX_
.cab
I386/GONEFISH.BM_
.cab
I386/GOO.WM_
.cab
I386/GPEDIT.DL_
.cab
I386/GPEDIT.HL_
.cab
I386/GPEDIT.MS_
.cab
I386/GPEDITW.CH_
.cab
I386/GPKCSP.DL_
.cab
I386/GPKRSRC.DL_
.cab
I386/GPRSLT.EX_
.cab
I386/GPTEXT.DL_
.cab
I386/GPTEXT.HL_
.cab
I386/GPUPDATE.EX_
.cab
I386/GR3001.IN_
.cab
I386/GR3001.PN_
.cab
I386/GR3001_G.IN_
.cab
I386/GR4001.IN_
.cab
I386/GR4001.PN_
.cab
I386/GR4001_G.IN_
.cab
I386/GR4001_G.PN_
.cab
I386/GR4003.IN_
.cab
I386/GR4003.PN_
.cab
I386/GR4005.IN_
.cab
I386/GR4005.PN_
.cab
I386/GRAFTABL.CO_
.cab
I386/GRAPHICS.CO_
.cab
I386/GRAPHICS.PR_
.cab
I386/GREENSHD.GI_
.cab
I386/GRNSTONE.BM_
.cab
I386/GRN_BTN.GI_
.cab
I386/GRPCONV.EX_
.cab
I386/GT1000_R.IC_
.cab
I386/GT3000_R.IC_
.cab
I386/GT6600R.IC_
.cab
I386/GT7000R.IC_
.cab
I386/GT7000T.IC_
.cab
I386/GT7600R.IC_
.cab
I386/GT7600T.IC_
.cab
I386/GUEST.BM_
.cab
I386/GUITAR.BM_
.cab
I386/GUITRN.DL_
.cab
I386/GUITRNA.DL_
.cab
I386/GUITRN_A.DL_
.cab
I386/GZIP.DL_
.cab
I386/H323.TS_
.cab
I386/H323CC.DL_
.cab
I386/H323MSP.DL_
.cab
I386/HAL.DL_
.cab
I386/HAL.IN_
.cab
I386/HALAACPI.DL_
.cab
I386/HALACPI.DL_
.cab
I386/HALAPIC.DL_
.cab
I386/HALFTONE.HL_
.cab
I386/HALMACPI.DL_
.cab
I386/HALMPS.DL_
.cab
I386/HALSP.DL_
.cab
I386/HAMMER.IN_
.cab
I386/HAND.AN_
.cab
I386/HAND1.GI_
.cab
I386/HAND2.GI_
.cab
I386/HANDAPST.AN_
.cab
I386/HANDLER.RE_
.cab
I386/HANDLER.SR_
.cab
I386/HANDNESW.AN_
.cab
I386/HANDNO.AN_
.cab
I386/HANDNS.AN_
.cab
I386/HANDNWSE.AN_
.cab
I386/HANDSAFE.RE_
.cab
I386/HANDWAIT.AN_
.cab
I386/HANDWE.AN_
.cab
I386/HARDWARE.CH_
.cab
I386/HARDWARE.HL_
.cab
I386/HARROW.CU_
.cab
I386/HCAPPRES.DL_
.cab
I386/HCCOIN.DL_
.cab
I386/HCROSS.CU_
.cab
I386/HDAUDBUS.IN_
.cab
I386/HDAUDBUS.SY_
.cab
I386/HDWWIZ.CP_
.cab
I386/HEADSP~1.WM_
.cab
I386/HEART.WM_
.cab
I386/HEIDELB.JP_
.cab
I386/HEIDELBM.JP_
.cab
I386/HELP.EX_
.cab
I386/HELPCTR.EX_
.cab
I386/HELPHOST.EX_
.cab
I386/HELPSVC.EX_
.cab
I386/HELP_I.CU_
.cab
I386/HELP_IL.CU_
.cab
I386/HELP_IM.CU_
.cab
I386/HELP_L.CU_
.cab
I386/HELP_M.CU_
.cab
I386/HELP_R.CU_
.cab
I386/HELP_RL.CU_
.cab
I386/HELP_RM.CU_
.cab
I386/HFORM.XS_
.cab
I386/HH.EX_
.cab
I386/HHCTRL.OC_
.cab
I386/HHCTRLUI.DL_
.cab
I386/HHSETUP.DL_
.cab
I386/HIBEAM.CU_
.cab
I386/HIDBTH.IN_
.cab
I386/HIDBTH.SY_
.cab
I386/HIDCLASS.SY_
.cab
I386/HIDDIGI.IN_
.cab
I386/HIDIR.SY_
.cab
I386/HIDPARSE.SY_
.cab
I386/HIDPHONE.TS_
.cab
I386/HIDSERV.IN_
.cab
I386/HIDUSB.SY_
.cab
I386/HILGBBS.HT_
.cab
I386/HIMEM.SY_
.cab
I386/HISECDC.IN_
.cab
I386/HISECWS.IN_
.cab
I386/HIVECLS.INF
I386/HIVEDEF.INF
I386/HIVESFT.INF
I386/HIVESYS.INF
I386/HIVEUSD.INF
I386/HLINK.DL_
.cab
I386/HMMAPI.DL_
.cab
I386/HMOVE.CU_
.cab
I386/HNDSHAKE.HT_
.cab
I386/HNESW.CU_
.cab
I386/HNETCFG.DL_
.cab
I386/HNETCFG.MO_
.cab
I386/HNETMON.DL_
.cab
I386/HNETWIZ.DL_
.cab
I386/HNODROP.CU_
.cab
I386/HNS.CU_
.cab
I386/HNWPRMPT.HT_
.cab
I386/HNWSE.CU_
.cab
I386/HOME.JP_
.cab
I386/HOMEPAGE.IN_
.cab
I386/HOME_SS.DL_
.cab
I386/HORSE.AN_
.cab
I386/HORSES.BM_
.cab
I386/HOSTMIB.DL_
.cab
I386/HOSTMIB.MI_
.cab
I386/HOSTNAME.EX_
.cab
I386/HOSTS
I386/HOTPLUG.DL_
.cab
I386/HOURGLA2.AN_
.cab
I386/HOURGLA3.AN_
.cab
I386/HOURGLAS.AN_
.cab
I386/HOWTOW.CH_
.cab
I386/HPCCLJ.DL_
.cab
I386/HPCLJ5.IN_
.cab
I386/HPCLJ5UI.DL_
.cab
I386/HPCRDP.CA_
.cab
I386/HPDIGWIA.IN_
.cab
I386/HPLJ5SI.HL_
.cab
I386/HPMCRO32.DL_
.cab
I386/HPN.SY_
.cab
I386/HPOJ780.GP_
.cab
I386/HPOJ780I.GP_
.cab
I386/HPOJSCAN.IN_
.cab
I386/HPOJV60.GP_
.cab
I386/HPOJV60I.GP_
.cab
I386/HPSCAN.IN_
.cab
I386/HRTZ.CH_
.cab
I386/HRTZ.DL_
.cab
I386/HRTZRES.DL_
.cab
I386/HRTZZM.EX_
.cab
I386/HS.CH_
.cab
I386/HSCHELPW.CH_
.cab
I386/HSCMUI.CA_
.cab
I386/HSCSP_W3.CA_
.cab
I386/HSCUPD.EX_
.cab
I386/HSFBS2S2.SY_
.cab
I386/HSFCISP2.DL_
.cab
I386/HSFCXTS2.SY_
.cab
I386/HSFDPSP2.SY_
.cab
I386/HTABLE.XS_
.cab
I386/HTBLSORT.XS_
.cab
I386/HTICONS.DL_
.cab
I386/HTML.IE_
.cab
I386/HTML32.CN_
.cab
I386/HTRN_JIS.DL_
.cab
I386/HTTP.MI_
.cab
I386/HTTP.SY_
.cab
I386/HTTPAPI.DL_
.cab
I386/HTTPEXT.DL_
.cab
I386/HTTPMB51.DL_
.cab
I386/HTTPOD51.DL_
.cab
I386/HTUI.DL_
.cab
I386/HWCOMP.DAT
I386/HWDB.DLL
.dll windows:5 windows x86 arch:x86

39d4d7c0a76699824472ab7bc56433c9

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_REMOVABLE_RUN_FROM_SWAP
IMAGE_FILE_NET_RUN_FROM_SWAP
IMAGE_FILE_DLL

Imports

kernel32

HeapDestroy
ReadFile
WriteFile
SetLastError
lstrlenA
HeapFree
CloseHandle
GetLastError
lstrcmpA
CreateFileA
GetFullPathNameA
lstrcpyA
DeleteFileA
lstrcpynA
FindClose
FindNextFileA
SetFileAttributesA
FindFirstFileA
HeapCreate
GetProcessHeap
WideCharToMultiByte
HeapAlloc
lstrlenW
MultiByteToWideChar
GetCurrentThreadId
TlsSetValue
GetCommandLineA
GetVersionExA
RtlUnwind
ExitProcess
GetProcAddress
GetModuleHandleA
TlsFree
TlsGetValue
TlsAlloc
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
DeleteCriticalSection
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
VirtualFree
GetACP
GetOEMCP
GetCPInfo
LCMapStringA
LCMapStringW
LeaveCriticalSection
EnterCriticalSection
VirtualAlloc
HeapReAlloc
InitializeCriticalSection
LoadLibraryA
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
VirtualProtect
GetSystemInfo
VirtualQuery
GetUserDefaultLCID
EnumSystemLocalesA
IsValidLocale
IsValidCodePage
SetFilePointer
SetStdHandle
GetLocaleInfoW
FlushFileBuffers
CreateEventA
WaitForSingleObject
SetEvent
IsDBCSLeadByte
LocalFree
FormatMessageA
OutputDebugStringA
GetWindowsDirectoryA

user32

wsprintfA
MessageBoxA

setupapi

SetupDecompressOrCopyFileA
SetupOpenInfFileA
SetupFindFirstLineA
SetupGetLineTextA
SetupGetStringFieldA
SetupGetMultiSzFieldA
SetupFindNextLine
SetupCloseInfFile

Exports

Exports

HwdbAppendDatabase
HwdbAppendInfsA
HwdbAppendInfsW
HwdbClose
HwdbFlushA
HwdbFlushW
HwdbHasAnyDriverA
HwdbHasAnyDriverW
HwdbHasDriverA
HwdbHasDriverW
HwdbInitializeA
HwdbInitializeW
HwdbOpenA
HwdbOpenW
HwdbTerminate

Sections

.text
Size: 52KB - Virtual size: 49KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/HWE.CU_
.cab
I386/HYPERTRM.CH_
.cab
I386/HYPERTRM.DL_
.cab
I386/HYPERTRM.EX_
.cab
I386/HYPERTRM.HL_
.cab
I386/I2OMGMT.SY_
.cab
I386/I2OMP.SY_
.cab
I386/I740NT5.IN_
.cab
I386/I8042PRT.SY_
.cab
I386/I81XNT5.IN_
.cab
I386/IA3002.IN_
.cab
I386/IA3002_1.PN_
.cab
I386/IA3002_2.PN_
.cab
I386/IAC25_32.AX_
.cab
I386/IAS.MD_
.cab
I386/IASACCT.DL_
.cab
I386/IASADS.DL_
.cab
I386/IASHLPR.DL_
.cab
I386/IASNAP.DL_
.cab
I386/IASNT4.CA_
.cab
I386/IASPOLCY.DL_
.cab
I386/IASRAD.DL_
.cab
I386/IASRECST.DL_
.cab
I386/IASSAM.DL_
.cab
I386/IASSDO.DL_
.cab
I386/IASSVCS.DL_
.cab
I386/IBMVCAP.IN_
.cab
I386/ICAAPI.DL_
.cab
I386/ICAM3.IN_
.cab
I386/ICAM4USB.IN_
.cab
I386/ICAM5USB.IN_
.cab
I386/ICCVID.DL_
.cab
I386/ICFGNT5.DL_
.cab
I386/ICM32.DL_
.cab
I386/ICMINST.IN_
.cab
I386/ICMP.DL_
.cab
I386/ICMUI.DL_
.cab
I386/ICNTLAST.HT_
.cab
I386/ICONIC.WM_
.cab
I386/ICONLIB.DL_
.cab
I386/ICONN.HT_
.cab
I386/ICONNECT.HT_
.cab
I386/ICONNECT.JS_
.cab
I386/ICS.HT_
.cab
I386/ICSDC.HT_
.cab
I386/ICSMGR.JS_
.cab
I386/ICWCONN.DL_
.cab
I386/ICWCONN1.EX_
.cab
I386/ICWCONN2.EX_
.cab
I386/ICWDIAL.CH_
.cab
I386/ICWDIAL.DL_
.cab
I386/ICWDL.DL_
.cab
I386/ICWHELP.DL_
.cab
I386/ICWIP.DU_
.cab
I386/ICWNT5.IN_
.cab
I386/ICWPHBK.DL_
.cab
I386/ICWRES.DL_
.cab
I386/ICWRMIND.EX_
.cab
I386/ICWTUTOR.EX_
.cab
I386/ICWUTIL.DL_
.cab
I386/ICWX25A.DU_
.cab
I386/ICWX25B.DU_
.cab
I386/ICWX25C.DU_
.cab
I386/IDENT.HL_
.cab
I386/IDENT1.HT_
.cab
I386/IDENT2.HT_
.cab
I386/IDEOGRAF.UC_
.cab
I386/IDQ.DL_
.cab
I386/IE.IN_
.cab
I386/IE4UINIT.EX_
.cab
I386/IEACCESS.IN_
.cab
I386/IEAKENG.DL_
.cab
I386/IEAKMMC.CH_
.cab
I386/IEAKSIE.DL_
.cab
I386/IEAKUI.DL_
.cab
I386/IEDKCS32.DL_
.cab
I386/IEDW.EX_
.cab
I386/IEENCODE.DL_
.cab
I386/IEEULA.CH_
.cab
I386/IEFILES5.IN_
.cab
I386/IEINFO5.MO_
.cab
I386/IEINFO5.OC_
.cab
I386/IEOS.CH_
.cab
I386/IEPEERS.DL_
.cab
I386/IERESET.IN_
.cab
I386/IERNONCE.DL_
.cab
I386/IESETUP.DL_
.cab
I386/IESHARED.CH_
.cab
I386/IESUPP.CH_
.cab
I386/IEUINIT.IN_
.cab
I386/IEWEBHLP.CH_
.cab
I386/IEXPLORE.CH_
.cab
I386/IEXPLORE.EX_
.cab
I386/IEXPLORE.HL_
.cab
I386/IEXPRESS.EX_
.cab
I386/IFMON.DL_
.cab
I386/IFSUTIL.DL_
.cab
I386/IGAMES.IN_
.cab
I386/IGMPAGNT.DL_
.cab
I386/IIS.DL_
.cab
I386/IIS.IN_
.cab
I386/IIS.MS_
.cab
I386/IIS6.CAB
.cab
I386/IISADMIN.DL_
.cab
I386/IISCHE51.DL_
.cab
I386/IISCLEX4.DL_
.cab
I386/IISCRMAP.DL_
.cab
I386/IISEXT51.DL_
.cab
I386/IISFECNV.DL_
.cab
I386/IISLOG51.DL_
.cab
I386/IISMAP.DL_
.cab
I386/IISMUI.DL_
.cab
I386/IISNTW.CH_
.cab
I386/IISPERF.PM_
.cab
I386/IISRESET.EX_
.cab
I386/IISRSTAP.DL_
.cab
I386/IISRSTAS.EX_
.cab
I386/IISRTL.DL_
.cab
I386/IISSUBA.DL_
.cab
I386/IISSYNC.EX_
.cab
I386/IISUI.DL_
.cab
I386/IISWMMC.CH_
.cab
I386/ILS.DL_
.cab
I386/IMAADP32.AC_
.cab
I386/IMAGE.IN_
.cab
I386/IMAGEHLP.DLL
.dll windows:5 windows x86 arch:x86

6cad306c92e9f13dc56a33e7594f4d26

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

imagehlp.pdb

Imports

kernel32

LCMapStringW
DeviceIoControl
VirtualFree
VirtualAlloc
InitializeCriticalSectionAndSpinCount
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
GetSystemInfo
GetFileAttributesA
TlsAlloc
TlsFree
HeapAlloc
HeapFree
SetLastError
IsDBCSLeadByte
GetProcAddress
GetModuleHandleA
lstrlenA
TlsGetValue
HeapDestroy
HeapCreate
DisableThreadLibraryCalls
GetVersionExA
CloseHandle
MapViewOfFileEx
UnmapViewOfFile
FlushViewOfFile
CreateFileMappingA
GetFileSize
SetFileTime
SystemTimeToFileTime
GetSystemTime
GetLastError
MapViewOfFile
CreateFileA
WideCharToMultiByte
lstrcmpiA
lstrcpyA
LoadLibraryA
lstrcatA
GetModuleFileNameA
SetEndOfFile
SetFilePointer
SearchPathA
DeleteFileA
WriteFile
SetFileAttributesA
CopyFileA
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
LocalAlloc
FreeLibrary
InterlockedExchange
RaiseException
CopyFileW
CreateFileW
GetFileAttributesW
SetFileAttributesW
MultiByteToWideChar

msvcrt

fflush
_iob
_purecall
??3@YAXPAX@Z
strchr
time
??2@YAPAXI@Z
_wmakepath
wcslen
wcsrchr
_wsplitpath
_osver
sprintf
_wcsnicmp
wcscat
_mbsicmp
_wcsicmp
printf
_fullpath
_access
qsort
bsearch
_memicmp
_sopen
_wsopen
_wfullpath
_chsize
_lseek
_close
_errno
_get_osfhandle
_read
_write
_open_osfhandle
_winminor
_winmajor
_mbscmp
??_V@YAXPAX@Z
??_U@YAPAXI@Z
_mbsnbcpy
wcsncpy
_onexit
__dllonexit
_adjust_fdiv
malloc
_initterm
free
strncmp
strrchr
_makepath
_splitpath
atoi
_ultoa
memmove
_stricmp
_except_handler3
strncpy

Exports

Exports

BindImage
BindImageEx
CheckSumMappedFile
EnumerateLoadedModules
EnumerateLoadedModules64
FindDebugInfoFile
FindDebugInfoFileEx
FindExecutableImage
FindExecutableImageEx
FindFileInPath
FindFileInSearchPath
GetImageConfigInformation
GetImageUnusedHeaderBytes
GetTimestampForLoadedLibrary
ImageAddCertificate
ImageDirectoryEntryToData
ImageDirectoryEntryToDataEx
ImageEnumerateCertificates
ImageGetCertificateData
ImageGetCertificateHeader
ImageGetDigestStream
ImageLoad
ImageNtHeader
ImageRemoveCertificate
ImageRvaToSection
ImageRvaToVa
ImageUnload
ImagehlpApiVersion
ImagehlpApiVersionEx
MakeSureDirectoryPathExists
MapAndLoad
MapDebugInformation
MapFileAndCheckSumA
MapFileAndCheckSumW
ReBaseImage
ReBaseImage64
RemovePrivateCvSymbolic
RemovePrivateCvSymbolicEx
RemoveRelocations
SearchTreeForFile
SetImageConfigInformation
SplitSymbols
StackWalk
StackWalk64
SymCleanup
SymEnumSourceFiles
SymEnumSym
SymEnumSymbols
SymEnumTypes
SymEnumerateModules
SymEnumerateModules64
SymEnumerateSymbols
SymEnumerateSymbols64
SymEnumerateSymbolsW
SymEnumerateSymbolsW64
SymFindFileInPath
SymFromAddr
SymFromName
SymFunctionTableAccess
SymFunctionTableAccess64
SymGetLineFromAddr
SymGetLineFromAddr64
SymGetLineFromName
SymGetLineFromName64
SymGetLineNext
SymGetLineNext64
SymGetLinePrev
SymGetLinePrev64
SymGetModuleBase
SymGetModuleBase64
SymGetModuleInfo
SymGetModuleInfo64
SymGetModuleInfoW
SymGetModuleInfoW64
SymGetOptions
SymGetSearchPath
SymGetSymFromAddr
SymGetSymFromAddr64
SymGetSymFromName
SymGetSymFromName64
SymGetSymNext
SymGetSymNext64
SymGetSymPrev
SymGetSymPrev64
SymGetTypeFromName
SymGetTypeInfo
SymInitialize
SymLoadModule
SymLoadModule64
SymMatchFileName
SymMatchString
SymRegisterCallback
SymRegisterCallback64
SymRegisterFunctionEntryCallback
SymRegisterFunctionEntryCallback64
SymSetContext
SymSetOptions
SymSetSearchPath
SymUnDName
SymUnDName64
SymUnloadModule
SymUnloadModule64
TouchFileTimes
UnDecorateSymbolName
UnMapAndLoad
UnmapDebugInformation
UpdateDebugInfoFile
UpdateDebugInfoFileEx

Sections

.text
Size: 132KB - Virtual size: 132KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 1008B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/IMAPI.EX_
.cab
I386/IMAPI.SY_
.cab
I386/IMESHARE.DL_
.cab
I386/IMGPREV.CH_
.cab
I386/IMGUTIL.DL_
.cab
I386/IMM32.DL_
.cab
I386/IMPACT.TT_
.cab
I386/IMS.CAB
.cab
I386/IMS.CAT
I386/IMS.IN_
.cab
I386/IMSINSNT.DL_
.cab
I386/INDXSVC.XM_
.cab
I386/INETCFG.DL_
.cab
I386/INETCOMM.DL_
.cab
I386/INETCORP.AD_
.cab
I386/INETCPL.CP_
.cab
I386/INETCPLC.DL_
.cab
I386/INETFIND.XM_
.cab
I386/INETIN51.EX_
.cab
I386/INETMGR.DL_
.cab
I386/INETMGR.EX_
.cab
I386/INETMIB1.DL_
.cab
I386/INETOPTS.XM_
.cab
I386/INETPP.DL_
.cab
I386/INETPPUI.DL_
.cab
I386/INETPREF.XM_
.cab
I386/INETRES.AD_
.cab
I386/INETRES.CH_
.cab
I386/INETRES.DL_
.cab
I386/INETSET.AD_
.cab
I386/INETSLOC.DL_
.cab
I386/INETSRCH.XM_
.cab
I386/INETSRV.MI_
.cab
I386/INETWIZ.EX_
.cab
I386/INFOADMN.DL_
.cab
I386/INFOCOMM.DL_
.cab
I386/INFOCTRS.DL_
.cab
I386/INFOCTRS.H2_
.cab
I386/INFOCTRS.IN_
.cab
I386/INFOSOFT.DL_
.cab
I386/INFOSPBZ.BM_
.cab
I386/INFOSPCE.BM_
.cab
I386/INFRARED.CH_
.cab
I386/INFRARED.HL_
.cab
I386/INI910U.SY_
.cab
I386/INITPKI.DL_
.cab
I386/INPUT.CH_
.cab
I386/INPUT.DL_
.cab
I386/INPUT.HL_
.cab
I386/INPUT.IN_
.cab
I386/INSENG.DL_
.cab
I386/INSTALL.IN_
.cab
I386/INSTCAT.SQ_
.cab
I386/INTELIDE.SY_
.cab
I386/INTELLIM.CH_
.cab
I386/INTELPPM.SY_
.cab
I386/INTENTS.XM_
.cab
I386/INTL.CP_
.cab
I386/INTL.INF
I386/INTRO.WM_
.cab
I386/INTRO.XM_
.cab
I386/IOLOGMSG.DL_
.cab
I386/IP6FW.SY_
.cab
I386/IPCFG.XM_
.cab
I386/IPCONF.TS_
.cab
I386/IPCONFIG.EX_
.cab
I386/IPFLTDRV.SY_
.cab
I386/IPFORWD.MI_
.cab
I386/IPHLPAPI.DL_
.cab
I386/IPINIP.SY_
.cab
I386/IPMONTR.DL_
.cab
I386/IPNAT.SY_
.cab
I386/IPNATHLP.DL_
.cab
I386/IPPROMON.DL_
.cab
I386/IPP_0000.IN_
.cab
I386/IPP_0001.AS_
.cab
I386/IPP_0002.AS_
.cab
I386/IPP_0002.GI_
.cab
I386/IPP_0003.AS_
.cab
I386/IPP_0003.GI_
.cab
I386/IPP_0004.AS_
.cab
I386/IPP_0004.GI_
.cab
I386/IPP_0005.AS_
.cab
I386/IPP_0005.GI_
.cab
I386/IPP_0006.AS_
.cab
I386/IPP_0007.AS_
.cab
I386/IPP_0010.AS_
.cab
I386/IPP_0012.GI_
.cab
I386/IPP_0013.AS_
.cab
I386/IPP_0014.AS_
.cab
I386/IPP_0015.AS_
.cab
I386/IPP_0015.GI_
.cab
I386/IPP_ADSI.IN_
.cab
I386/IPP_RES.IN_
.cab
I386/IPP_UTIL.IN_
.cab
I386/IPRIP.DL_
.cab
I386/IPROP.DL_
.cab
I386/IPRTPRIO.DL_
.cab
I386/IPRTRMGR.DL_
.cab
I386/IPSEC.SY_
.cab
I386/IPSEC6.EX_
.cab
I386/IPSECONW.CH_
.cab
I386/IPSECSNP.DL_
.cab
I386/IPSECSNP.HL_
.cab
I386/IPSECSVC.DL_
.cab
I386/IPSECW.CH_
.cab
I386/IPSMSNAP.DL_
.cab
I386/IPV6.EX_
.cab
I386/IPV6MON.DL_
.cab
I386/IPV6P.CH_
.cab
I386/IPXMONTR.DL_
.cab
I386/IPXPROMN.DL_
.cab
I386/IPXRIP.DL_
.cab
I386/IPXROUTE.EX_
.cab
I386/IPXRTMGR.DL_
.cab
I386/IPXSAP.DL_
.cab
I386/IPXWAN.DL_
.cab
I386/IR32_32.DL_
.cab
I386/IR41_32.AX_
.cab
I386/IR41_QC.DL_
.cab
I386/IR41_QCX.DL_
.cab
I386/IR50_32.DL_
.cab
I386/IR50_QC.DL_
.cab
I386/IR50_QCX.DL_
.cab
I386/IRBUS.IN_
.cab
I386/IRBUS.SY_
.cab .ps1 polyglot
I386/IRCLASS.DL_
.cab
I386/IRDAALIF.IN_
.cab
I386/IRDASMC.IN_
.cab
I386/IRENUM.SY_
.cab
I386/IRMK7W2K.IN_
.cab
I386/IRNSC.IN_
.cab
I386/IRPROPS.CP_
.cab
I386/IRSTUSB.IN_
.cab
I386/IRTOS4MO.IN_
.cab
I386/IS330.IC_
.cab
I386/ISAPIPS.DL_
.cab
I386/ISAPNP.SY_
.cab
I386/ISATQ.DL_
.cab
I386/ISCOMLOG.DL_
.cab
I386/ISCONW.CH_
.cab
I386/ISIGN32.DL_
.cab
I386/ISIGNUP.EX_
.cab
I386/ISM.DL_
.cab
I386/ISP.HT_
.cab
I386/ISP2BUSY.HT_
.cab
I386/ISPCNERR.HT_
.cab
I386/ISPDTONE.HT_
.cab
I386/ISPHDSHK.HT_
.cab
I386/ISPINS.HT_
.cab
I386/ISPNOANW.HT_
.cab
I386/ISPPBERR.HT_
.cab
I386/ISPPHBSY.HT_
.cab
I386/ISPSBUSY.HT_
.cab
I386/ISPTYPE.HT_
.cab
I386/ISPTYPE.JS_
.cab
I386/ISPWAIT.HT_
.cab
I386/ISRDBG32.DL_
.cab
I386/ISW.CH_
.cab
I386/ITIRCL.DL_
.cab
I386/ITSS.DL_
.cab
I386/IUENGINE.DL_
.cab
I386/IVFSRC.AX_
.cab
I386/IVY.GI_
.cab
I386/IVY.HT_
.cab
I386/IWRPS.DL_
.cab
I386/IXHELP.HL_
.cab
I386/IXQLANG.HT_
.cab
I386/IXSSO.DL_
.cab
I386/JET500.DL_
.cab
I386/JGAW400.DL_
.cab
I386/JGDW400.DL_
.cab
I386/JGMD400.DL_
.cab
I386/JGPL400.DL_
.cab
I386/JGSD400.DL_
.cab
I386/JGSH400.DL_
.cab
I386/JNDOMAIN.HT_
.cab
I386/JNDOM_A.HT_
.cab
I386/JOBEXEC.DL_
.cab
I386/JOY.CH_
.cab
I386/JOY.CP_
.cab
I386/JSCRIPT.DL_
.cab
I386/JSCRIPT.MU_
.cab
I386/JSPROXY.DL_
.cab
I386/JUPIW.DL_
.cab
I386/KANJI_1.UC_
.cab
I386/KANJI_2.UC_
.cab
I386/KARTIKA.TT_
.cab
I386/KB16.CO_
.cab
I386/KBD101.DL_
.cab
I386/KBD101A.DL_
.cab
I386/KBD106N.DL_
.cab
I386/KBDA1.DLL
.dll windows:5 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Exports

Exports

KbdLayerDescriptor

Sections

.data
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 1024B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 194B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/KBDA2.DLL
.dll windows:5 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Exports

Exports

KbdLayerDescriptor

Sections

.data
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 196B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/KBDA3.DLL
.dll windows:5 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Exports

Exports

KbdLayerDescriptor

Sections

.data
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 1016B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 196B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/KBDAL.DLL
.dll windows:5 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Exports

Exports

KbdLayerDescriptor

Sections

.data
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 218B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/KBDARME.DLL
.dll windows:5 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Exports

Exports

KbdLayerDescriptor

Sections

.data
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 1024B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 164B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/KBDARMW.DLL
.dll windows:5 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Exports

Exports

KbdLayerDescriptor

Sections

.data
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 1024B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 164B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/KBDAX2.DL_
.cab
I386/KBDAZE.DLL
.dll windows:5 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Exports

Exports

KbdLayerDescriptor

Sections

.data
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 1024B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 192B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/KBDAZEL.DLL
.dll windows:5 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Exports

Exports

KbdLayerDescriptor

Sections

.data
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 1016B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 164B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/KBDBE.DLL
.dll windows:5 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Exports

Exports

KbdLayerDescriptor

Sections

.data
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 184B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/KBDBENE.DL_
.cab
I386/KBDBHC.DL_
.cab
I386/KBDBLR.DLL
.dll windows:5 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Exports

Exports

KbdLayerDescriptor

Sections

.data
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 1008B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 192B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/KBDBR.DLL
.dll windows:5 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Exports

Exports

KbdLayerDescriptor

Sections

.data
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 208B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/KBDBU.DLL
.dll windows:5 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Exports

Exports

KbdLayerDescriptor

Sections

.data
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 188B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/KBDCA.DLL
.dll windows:5 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Exports

Exports

KbdLayerDescriptor

Sections

.data
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 1024B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 182B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/KBDCAN.DL_
.cab
I386/KBDCLASS.SY_
.cab
I386/KBDCR.DLL
.dll windows:5 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Exports

Exports

KbdLayerDescriptor

Sections

.data
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 1024B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 214B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/KBDCZ.DLL
.dll windows:5 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Exports

Exports

KbdLayerDescriptor

Sections

.data
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 992B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 228B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/KBDCZ1.DLL
.dll windows:5 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Exports

Exports

KbdLayerDescriptor

Sections

.data
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 1008B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 218B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/KBDCZ2.DLL
.dll windows:5 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Exports

Exports

KbdLayerDescriptor

Sections

.data
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 1024B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 218B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/KBDDA.DLL
.dll windows:5 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Exports

Exports

KbdLayerDescriptor

Sections

.data
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 182B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/KBDDIV1.DLL
.dll windows:5 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Exports

Exports

KbdLayerDescriptor

Sections

.data
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 1024B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 192B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/KBDDIV2.DLL
.dll windows:5 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Exports

Exports

KbdLayerDescriptor

Sections

.data
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 1024B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 192B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/KBDDV.DLL
.dll windows:5 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Exports

Exports

KbdLayerDescriptor

Sections

.data
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 1016B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 166B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/KBDES.DLL
.dll windows:5 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Exports

Exports

KbdLayerDescriptor

Sections

.data
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 1016B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 180B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/KBDEST.DLL
.dll windows:5 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Exports

Exports

KbdLayerDescriptor

Sections

.data
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 210B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/KBDFA.DLL
.dll windows:5 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Exports

Exports

KbdLayerDescriptor

Sections

.data
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 992B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 194B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/KBDFC.DLL
.dll windows:5 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Exports

Exports

KbdLayerDescriptor

Sections

.data
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 1016B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 186B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/KBDFI.DLL
.dll windows:5 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Exports

Exports

KbdLayerDescriptor

Sections

.data
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 182B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/KBDFI1.DL_
.cab
I386/KBDFO.DL_
.cab
I386/KBDFR.DLL
.dll windows:5 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Exports

Exports

KbdLayerDescriptor

Sections

.data
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 180B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/KBDGAE.DLL
.dll windows:5 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Exports

Exports

KbdLayerDescriptor

Sections

.data
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 178B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/KBDGEO.DLL
.dll windows:5 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Exports

Exports

KbdLayerDescriptor

Sections

.data
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 1008B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 166B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/KBDGKL.DLL
.dll windows:5 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Exports

Exports

KbdLayerDescriptor

Sections

.data
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 1008B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 210B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/KBDGR.DLL
.dll windows:5 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Exports

Exports

KbdLayerDescriptor

Sections

.data
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 178B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/KBDGR1.DLL
.dll windows:5 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Exports

Exports

KbdLayerDescriptor

Sections

.data
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 1008B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 180B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/KBDHE.DLL
.dll windows:5 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Exports

Exports

KbdLayerDescriptor

Sections

.data
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 992B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 204B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/KBDHE220.DLL
.dll windows:5 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Exports

Exports

KbdLayerDescriptor

Sections

.data
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 1024B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 204B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/KBDHE319.DLL
.dll windows:5 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Exports

Exports

KbdLayerDescriptor

Sections

.data
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 1024B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 206B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/KBDHEB.DLL
.dll windows:5 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Exports

Exports

KbdLayerDescriptor

Sections

.data
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 194B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/KBDHELA2.DLL
.dll windows:5 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Exports

Exports

KbdLayerDescriptor

Sections

.data
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 204B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/KBDHELA3.DLL
.dll windows:5 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Exports

Exports

KbdLayerDescriptor

Sections

.data
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 206B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/KBDHEPT.DLL
.dll windows:5 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Exports

Exports

KbdLayerDescriptor

Sections

.data
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 1024B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 216B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/KBDHID.SY_
.cab
I386/KBDHU.DLL
.dll windows:5 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Exports

Exports

KbdLayerDescriptor

Sections

.data
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 218B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/KBDHU1.DLL
.dll windows:5 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Exports

Exports

KbdLayerDescriptor

Sections

.data
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 1024B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 190B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/KBDIBM02.DL_
.cab
I386/KBDIC.DLL
.dll windows:5 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Exports

Exports

KbdLayerDescriptor

Sections

.data
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 182B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/KBDINBE1.DL_
.cab
I386/KBDINBEN.DL_
.cab
I386/KBDINDEV.DLL
.dll windows:5 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Exports

Exports

KbdLayerDescriptor

Sections

.data
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 1016B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 198B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/KBDINGUJ.DLL
.dll windows:5 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Exports

Exports

KbdLayerDescriptor

Sections

.data
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 1016B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 198B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/KBDINHIN.DLL
.dll windows:5 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Exports

Exports

KbdLayerDescriptor

Sections

.data
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 1008B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 196B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/KBDINKAN.DLL
.dll windows:5 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Exports

Exports

KbdLayerDescriptor

Sections

.data
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 1008B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 198B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/KBDINMAL.DL_
.cab
I386/KBDINMAR.DLL
.dll windows:5 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Exports

Exports

KbdLayerDescriptor

Sections

.data
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 1008B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 196B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/KBDINPUN.DLL
.dll windows:5 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Exports

Exports

KbdLayerDescriptor

Sections

.data
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 198B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/KBDINTAM.DLL
.dll windows:5 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Exports

Exports

KbdLayerDescriptor

Sections

.data
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 1008B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 196B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/KBDINTEL.DLL
.dll windows:5 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Exports

Exports

KbdLayerDescriptor

Sections

.data
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 1008B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 198B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/KBDIR.DLL
.dll windows:5 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Exports

Exports

KbdLayerDescriptor

Sections

.data
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 992B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 178B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/KBDIT.DLL
.dll windows:5 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Exports

Exports

KbdLayerDescriptor

Sections

.data
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 170B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/KBDIT142.DLL
.dll windows:5 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Exports

Exports

KbdLayerDescriptor

Sections

.data
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 1016B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 168B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/KBDIULTN.DL_
.cab
I386/KBDKAZ.DLL
.dll windows:5 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Exports

Exports

KbdLayerDescriptor

Sections

.data
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 1016B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 192B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/KBDKYR.DLL
.dll windows:5 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Exports

Exports

KbdLayerDescriptor

Sections

.data
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 194B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/KBDLA.DLL
.dll windows:5 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Exports

Exports

KbdLayerDescriptor

Sections

.data
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 180B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/KBDLK41A.DL_
.cab
I386/KBDLK41J.DL_
.cab
I386/KBDLT.DLL
.dll windows:5 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Exports

Exports

KbdLayerDescriptor

Sections

.data
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 194B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/KBDLT1.DLL
.dll windows:5 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Exports

Exports

KbdLayerDescriptor

Sections

.data
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 1008B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 196B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/KBDLV.DLL
.dll windows:5 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Exports

Exports

KbdLayerDescriptor

Sections

.data
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 208B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/KBDLV1.DLL
.dll windows:5 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Exports

Exports

KbdLayerDescriptor

Sections

.data
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 1016B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 208B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/KBDMAC.DL_
.cab
I386/KBDMAORI.DL_
.cab
I386/KBDMLT47.DL_
.cab
I386/KBDMLT48.DL_
.cab
I386/KBDMON.DLL
.dll windows:5 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Exports

Exports

KbdLayerDescriptor

Sections

.data
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 1008B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 192B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/KBDNE.DLL
.dll windows:5 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Exports

Exports

KbdLayerDescriptor

Sections

.data
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 992B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 184B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/KBDNEC.DLL
.dll windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

kbdnec.pdb

Exports

Exports

KbdLayerDescriptor
KbdNlsLayerDescriptor

Sections

.data
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 198B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/KBDNEC95.DL_
.cab
I386/KBDNECAT.DL_
.cab
I386/KBDNECNT.DL_
.cab
I386/KBDNEPR.DL_
.cab
I386/KBDNO.DLL
.dll windows:5 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Exports

Exports

KbdLayerDescriptor

Sections

.data
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 182B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/KBDNO1.DL_
.cab
I386/KBDPASH.DL_
.cab
I386/KBDPL.DLL
.dll windows:5 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Exports

Exports

KbdLayerDescriptor

Sections

.data
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 218B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/KBDPL1.DLL
.dll windows:5 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Exports

Exports

KbdLayerDescriptor

Sections

.data
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 1024B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 202B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/KBDPO.DLL
.dll windows:5 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Exports

Exports

KbdLayerDescriptor

Sections

.data
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 1008B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 182B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/KBDRO.DLL
.dll windows:5 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Exports

Exports

KbdLayerDescriptor

Sections

.data
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 190B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/KBDRU.DLL
.dll windows:5 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Exports

Exports

KbdLayerDescriptor

Sections

.data
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 192B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/KBDRU1.DLL
.dll windows:5 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Exports

Exports

KbdLayerDescriptor

Sections

.data
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 1024B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 192B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/KBDSF.DLL
.dll windows:5 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Exports

Exports

KbdLayerDescriptor

Sections

.data
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 1008B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 182B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/KBDSG.DLL
.dll windows:5 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Exports

Exports

KbdLayerDescriptor

Sections

.data
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 1008B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 182B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/KBDSL.DLL
.dll windows:5 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Exports

Exports

KbdLayerDescriptor

Sections

.data
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 216B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/KBDSL1.DLL
.dll windows:5 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Exports

Exports

KbdLayerDescriptor

Sections

.data
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 1016B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 218B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/KBDSMSFI.DL_
.cab
I386/KBDSMSNO.DL_
.cab
I386/KBDSP.DLL
.dll windows:5 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Exports

Exports

KbdLayerDescriptor

Sections

.data
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 180B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/KBDSW.DLL
.dll windows:5 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Exports

Exports

KbdLayerDescriptor

Sections

.data
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 208B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/KBDSYR1.DLL
.dll windows:5 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Exports

Exports

KbdLayerDescriptor

Sections

.data
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 1024B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 192B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/KBDSYR2.DLL
.dll windows:5 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Exports

Exports

KbdLayerDescriptor

Sections

.data
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 1024B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 192B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/KBDTAT.DLL
.dll windows:5 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Exports

Exports

KbdLayerDescriptor

Sections

.data
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 1016B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 196B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/KBDTH0.DLL
.dll windows:5 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Exports

Exports

KbdLayerDescriptor

Sections

.data
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 1016B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 192B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/KBDTH1.DLL
.dll windows:5 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Exports

Exports

KbdLayerDescriptor

Sections

.data
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 1016B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 192B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/KBDTH2.DLL
.dll windows:5 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Exports

Exports

KbdLayerDescriptor

Sections

.data
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 192B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/KBDTH3.DLL
.dll windows:5 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Exports

Exports

KbdLayerDescriptor

Sections

.data
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 192B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/KBDTUF.DLL
.dll windows:5 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Exports

Exports

KbdLayerDescriptor

Sections

.data
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 1008B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 212B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/KBDTUQ.DLL
.dll windows:5 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Exports

Exports

KbdLayerDescriptor

Sections

.data
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 1008B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 212B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/KBDUK.DLL
.dll windows:5 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Exports

Exports

KbdLayerDescriptor

Sections

.data
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 1016B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 170B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/KBDUKX.DL_
.cab
I386/KBDUR.DLL
.dll windows:5 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Exports

Exports

KbdLayerDescriptor

Sections

.data
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 194B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/KBDURDU.DLL
.dll windows:5 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Exports

Exports

KbdLayerDescriptor

Sections

.data
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 192B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/KBDUS.DLL
.dll windows:5 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Exports

Exports

KbdLayerDescriptor

Sections

.data
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 1008B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 192B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/KBDUSA.DL_
.cab
I386/KBDUSL.DLL
.dll windows:5 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Exports

Exports

KbdLayerDescriptor

Sections

.data
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 192B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/KBDUSR.DLL
.dll windows:5 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Exports

Exports

KbdLayerDescriptor

Sections

.data
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 192B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/KBDUSX.DLL
.dll windows:5 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Exports

Exports

KbdLayerDescriptor

Sections

.data
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 1024B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 184B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/KBDUZB.DLL
.dll windows:5 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Exports

Exports

KbdLayerDescriptor

Sections

.data
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 1016B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 192B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/KBDVNTC.DLL
.dll windows:5 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Exports

Exports

KbdLayerDescriptor

Sections

.data
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 1016B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 168B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/KBDYCC.DLL
.dll windows:5 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Exports

Exports

KbdLayerDescriptor

Sections

.data
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 1024B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 200B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/KBDYCL.DLL
.dll windows:5 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Exports

Exports

KbdLayerDescriptor

Sections

.data
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 1016B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 216B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/KD1394.DL_
.cab
I386/KDCOM.DL_
.cab
I386/KDK2X0.IN_
.cab
I386/KDKSCAN.IN_
.cab
I386/KERBEROS.DL_
.cab
I386/KERNEL32.DL_
.cab
I386/KEY.CH_
.cab
I386/KEY01.SY_
.cab
I386/KEYB.CH_
.cab
I386/KEYBD.HT_
.cab
I386/KEYBDCMT.HT_
.cab
I386/KEYBOARD.DR_
.cab
I386/KEYBOARD.IN_
.cab
I386/KEYBOARD.SY_
.cab
I386/KEYMGR.DL_
.cab
I386/KEYSHORT.CH_
.cab
I386/KICK.BM_
.cab
I386/KMDDSP.TS_
.cab
I386/KMSVC.DL_
.cab
I386/KOC.DL_
.cab
I386/KOC.IN_
.cab
I386/KODAK.IN_
.cab
I386/KOREAN.UC_
.cab
I386/KRNL386.EX_
.cab
I386/KRNLPROV.DL_
.cab
I386/KRNLPROV.MF_
.cab
I386/KRNLPROV.MO_
.cab
I386/KS.IN_
.cab
I386/KSC.NL_
.cab
I386/KSCAPTUR.IN_
.cab
I386/KSECDD.SYS
.dll windows:5 windows x86 arch:x86

1f852a10d38ec24e060a36079ab20202

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

ksecdd.pdb

Imports

ntoskrnl.exe

RtlCopyUnicodeString
RtlCopySid
RtlLengthSid
RtlInitUnicodeString
LpcRequestWaitReplyPort
PsGetProcessSecurityPort
PsGetCurrentProcess
ObReferenceObjectByHandle
ObfDereferenceObject
PsSetProcessSecurityPort
ObCloseHandle
ZwConnectPort
strncpy
ObOpenObjectByPointer
ObfReferenceObject
IofCompleteRequest
MmMapLockedPagesSpecifyCache
MmUserProbeAddress
KeInitializeEvent
IoCreateDevice
ZwAllocateVirtualMemory
ZwFreeVirtualMemory
RtlMapSecurityErrorToNtStatus
KeWaitForSingleObject
KeSetEvent
RtlEqualUnicodeString
ExAllocatePoolWithTag
PsGetCurrentThread
SeTokenImpersonationLevel
NtDuplicateObject
MmLockPagableDataSection
MmUnlockPagableImageSection
ZwOpenEvent
ZwClose
ZwWaitForSingleObject
PsGetProcessId
PsGetThreadProcessId
KeLeaveCriticalRegion
ExReleaseResourceLite
ExAcquireResourceExclusiveLite
KeEnterCriticalRegion
KeInitializeSpinLock
ExInitializeResourceLite
RtlIntegerToUnicodeString
PsGetProcessCreateTimeQuadPart
SeReleaseSubjectContext
SeUnlockSubjectContext
SeQueryAuthenticationIdToken
SeLockSubjectContext
SeCaptureSubjectContext
_except_handler3
KeTickCount
KeBugCheckEx
ExQueueWorkItem
KeStackAttachProcess
KeUnstackDetachProcess
PsImpersonateClient
ExFreePoolWithTag
ZwQuerySystemInformation
PsGetCurrentThreadId
PsGetCurrentProcessId
ZwCreateKey
ZwQueryValueKey
ZwSetValueKey
ExDeleteResourceLite
ZwOpenKey
ExAcquireSharedWaitForExclusive
ExGetPreviousMode
wcscpy
NtClose
ZwSetInformationObject
wcslen
ZwQueryObject
memmove
RtlFreeOemString
RtlUnicodeStringToOemString

hal

KfReleaseSpinLock
ExAcquireFastMutex
ExReleaseFastMutex
KfAcquireSpinLock

Exports

Exports

AcceptSecurityContext
AcquireCredentialsHandleW
AddCredentialsW
ApplyControlToken
CredMarshalTargetInfo
DeleteSecurityContext
EfsDecryptFek
EfsGenerateKey
EnumerateSecurityPackagesW
ExportSecurityContext
FreeContextBuffer
FreeCredentialsHandle
GenerateDirEfs
GenerateSessionKey
GetSecurityUserInfo
ImpersonateSecurityContext
ImportSecurityContextW
InitSecurityInterfaceW
InitializeSecurityContextW
KSecRegisterSecurityProvider
KSecValidateBuffer
LsaEnumerateLogonSessions
LsaGetLogonSessionData
MakeSignature
MapSecurityError
QueryContextAttributesW
QueryCredentialsAttributesW
QuerySecurityContextToken
QuerySecurityPackageInfoW
RevertSecurityContext
SealMessage
SecLookupAccountName
SecLookupAccountSid
SecMakeSPN
SecMakeSPNEx
SecSetPagingMode
UnsealMessage
VerifySignature

Sections

.text
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

PAGE
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

PAGEMSG
Size: 42KB - Virtual size: 42KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.edata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

INIT
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/KSFILTER.IN_
.cab
I386/L2STORE.DL_
.cab
I386/L3CODECA.AC_
.cab
I386/L3CODECX.AX_
.cab
I386/LABEL.EX_
.cab
I386/LANG.CH_
.cab
I386/LANG/A15.TB_
.cab
I386/LANG/A234.TB_
.cab
I386/LANG/ACODE.TB_
.cab
I386/LANG/APP932.FO_
.cab
I386/LANG/APP936.FO_
.cab
I386/LANG/APP949.FO_
.cab
I386/LANG/APP950.FO_
.cab
I386/LANG/ARPHR.TB_
.cab .ps1 polyglot
I386/LANG/ARPTR.TB_
.cab
I386/LANG/ARRAY30.TA_
.cab
I386/LANG/ARRAYHW.TA_
.cab
I386/LANG/BATANG.TT_
.cab
I386/LANG/C8514FIX.FO_
.cab
I386/LANG/C8514OEM.FO_
.cab
I386/LANG/C8514SYS.FO_
.cab
I386/LANG/CHAJEI.IM_
.cab
I386/LANG/CHSBRKR.DL_
.cab
I386/LANG/CHTAPT.CH_
.cab .ps1 polyglot
I386/LANG/CHTAPT.HL_
.cab
I386/LANG/CHTAPTEN.HL_
.cab
I386/LANG/CHTBRKR.DL_
.cab
I386/LANG/CHTMBX.DL_
.cab
I386/LANG/CHTPADEN.CH_
.cab
I386/LANG/CHTSKDIC.DI_
.cab
I386/LANG/CHTSKDIC.DL_
.cab
I386/LANG/CHTSKF.DL_
.cab
I386/LANG/CINTIME.DL_
.cab
I386/LANG/CINTLGB.IM_
.cab
I386/LANG/CINTLGD.IM_
.cab
I386/LANG/CINTLGIE.IM_
.cab
I386/LANG/CINTLGL.IM_
.cab
I386/LANG/CINTLGNT.CH_
.cab
I386/LANG/CINTLGNT.CN_
.cab
I386/LANG/CINTLGNT.HL_
.cab
I386/LANG/CINTLGNT.IM_
.cab
I386/LANG/CINTLGS.IM_
.cab
I386/LANG/CINTLGSI.IM_
.cab
I386/LANG/CINTLGU.IM_
.cab
I386/LANG/CINTLGUC.IM_
.cab
I386/LANG/CINTSETP.EX_
.cab
I386/LANG/CJHLPEN.CH_
.cab
I386/LANG/CJHLPEN.CN_
.cab
I386/LANG/CJHLPEN.HL_
.cab
I386/LANG/CPLEXE.EX_
.cab
I386/LANG/CVGAFIX.FO_
.cab
I386/LANG/CVGASYS.FO_
.cab
I386/LANG/DAYI.IM_
.cab
I386/LANG/DAYIPHR.TB_
.cab
I386/LANG/DAYIPTR.TB_
.cab
I386/LANG/FTLX0411.DL_
.cab
I386/LANG/GULIM.TT_
.cab
I386/LANG/H8514FIX.FO_
.cab
I386/LANG/H8514OEM.FO_
.cab
I386/LANG/H8514SYS.FO_
.cab
I386/LANG/HANJA.LE_
.cab
I386/LANG/HANJADIC.DL_
.cab
I386/LANG/HVGAFIX.FO_
.cab
I386/LANG/HVGASYS.FO_
.cab
I386/LANG/HWXCHT.DL_
.cab
I386/LANG/HWXJPN.DL_
.cab
I386/LANG/HWXKOR.DL_
.cab
I386/LANG/IMEKR.LE_
.cab
I386/LANG/IMEKR61.IM_
.cab
I386/LANG/IMEKRCIC.DL_
.cab
I386/LANG/IMEKRMBX.DL_
.cab
I386/LANG/IMEKRMIG.EX_
.cab
I386/LANG/IMEPADEN.HL_
.cab
I386/LANG/IMEPADSM.DL_
.cab
I386/LANG/IMEPADSV.EX_
.cab
I386/LANG/IMJP81.IM_
.cab
I386/LANG/IMJP81K.DL_
.cab
I386/LANG/IMJPCD.DI_
.cab
I386/LANG/IMJPCH.DI_
.cab
I386/LANG/IMJPCIC.DL_
.cab
I386/LANG/IMJPCL.CH_
.cab
I386/LANG/IMJPCL.HL_
.cab
I386/LANG/IMJPCLE.CH_
.cab
I386/LANG/IMJPCLE.HL_
.cab
I386/LANG/IMJPCUS.DL_
.cab
I386/LANG/IMJPDADM.EX_
.cab
I386/LANG/IMJPDCT.DL_
.cab
I386/LANG/IMJPDCT.EX_
.cab
I386/LANG/IMJPDSVR.EX_
.cab
I386/LANG/IMJPDT.CH_
.cab
I386/LANG/IMJPDTE.CH_
.cab
I386/LANG/IMJPGN.GR_
.cab
I386/LANG/IMJPINST.EX_
.cab
I386/LANG/IMJPINST.IN_
.cab
I386/LANG/IMJPLN.DI_
.cab
I386/LANG/IMJPMIG.EX_
.cab
I386/LANG/IMJPNM.DI_
.cab
I386/LANG/IMJPPD.CH_
.cab
I386/LANG/IMJPRW.EX_
.cab
I386/LANG/IMJPSB.DI_
.cab
I386/LANG/IMJPSM.CH_
.cab
I386/LANG/IMJPSM.HL_
.cab
I386/LANG/IMJPSME.CH_
.cab
I386/LANG/IMJPSME.HL_
.cab
I386/LANG/IMJPST.DI_
.cab
I386/LANG/IMJPTK.DI_
.cab
I386/LANG/IMJPTU.CH_
.cab
I386/LANG/IMJPUEX.EX_
.cab
I386/LANG/IMJPUTY.EX_
.cab
I386/LANG/IMJPUTYC.DL_
.cab
I386/LANG/IMJPZP.DI_
.cab
I386/LANG/IMKR61.CH_
.cab
I386/LANG/IMKR61.HL_
.cab
I386/LANG/IMKREN61.CH_
.cab
I386/LANG/IMKREN61.HL_
.cab
I386/LANG/IMKRINST.EX_
.cab
I386/LANG/IMKRINST.IN_
.cab
I386/LANG/IMLANG.DL_
.cab
I386/LANG/IMPDKO61.CH_
.cab
I386/LANG/IMSCINST.EX_
.cab
I386/LANG/IMSKDIC.DL_
.cab
I386/LANG/IMSKF.DL_
.cab
I386/LANG/J8514FIX.FO_
.cab
I386/LANG/J8514OEM.FO_
.cab
I386/LANG/J8514SYS.FO_
.cab
I386/LANG/JPNPADEN.CH_
.cab
I386/LANG/JSMALLE.FO_
.cab
I386/LANG/JSMALLF.FO_
.cab
I386/LANG/JVGAFIX.FO_
.cab
I386/LANG/JVGASYS.FO_
.cab
I386/LANG/KORPADEN.CH_
.cab
I386/LANG/KORWBRKR.DL_
.cab
I386/LANG/KORWBRKR.LE_
.cab
I386/LANG/LCPHRASE.TB_
.cab
I386/LANG/LCPTR.TB_
.cab
I386/LANG/MINGLIU.TT_
.cab
I386/LANG/MINIIME.TP_
.cab
I386/LANG/MSDAYI.TB_
.cab
I386/LANG/MSGOTHIC.TT_
.cab
I386/LANG/MSIR3JP.DL_
.cab
I386/LANG/MSIR3JP.LE_
.cab
I386/LANG/MSMINCHO.TT_
.cab
I386/LANG/MULTIBOX.DL_
.cab
I386/LANG/NOISE.CH_
.cab
I386/LANG/NOISE.JP_
.cab
I386/LANG/NOISE.KO_
.cab
I386/LANG/PADRS404.DL_
.cab
I386/LANG/PADRS411.DL_
.cab
I386/LANG/PADRS412.DL_
.cab
I386/LANG/PADRS804.DL_
.cab
I386/LANG/PHHLP.CH_
.cab
I386/LANG/PHHLP.CN_
.cab
I386/LANG/PHHLP.HL_
.cab
I386/LANG/PHHLPEN.CH_
.cab
I386/LANG/PHHLPEN.CN_
.cab
I386/LANG/PHHLPEN.HL_
.cab
I386/LANG/PHON.IM_
.cab
I386/LANG/PHON.TB_
.cab
I386/LANG/PHONCODE.TB_
.cab
I386/LANG/PHONPTR.TB_
.cab
I386/LANG/PINTLCSA.DL_
.cab
I386/LANG/PINTLCSD.DI_
.cab
I386/LANG/PINTLCSD.DL_
.cab
I386/LANG/PINTLCSK.DI_
.cab
I386/LANG/PINTLGC.IM_
.cab
I386/LANG/PINTLGD.IM_
.cab
I386/LANG/PINTLGDX.IM_
.cab
I386/LANG/PINTLGI.IM_
.cab
I386/LANG/PINTLGIX.IM_
.cab
I386/LANG/PINTLGL.IM_
.cab
I386/LANG/PINTLGNE.CH_
.cab
I386/LANG/PINTLGNT.CH_
.cab
I386/LANG/PINTLGNT.IM_
.cab
I386/LANG/PINTLGR.IM_
.cab
I386/LANG/PINTLGS.IM_
.cab
I386/LANG/PINTLPAD.CH_
.cab
I386/LANG/PINTLPAD.HL_
.cab
I386/LANG/PINTLPAE.CH_
.cab
I386/LANG/PINTLPAE.HL_
.cab
I386/LANG/PINTLPHR.EX_
.cab
I386/LANG/PMIGRATE.DL_
.cab
I386/LANG/QUICK.IM_
.cab
I386/LANG/ROMANIME.IM_
.cab
I386/LANG/S8514FIX.FO_
.cab
I386/LANG/S8514OEM.FO_
.cab
I386/LANG/S8514SYS.FO_
.cab
I386/LANG/SIMHEI.TT_
.cab
I386/LANG/SIMSUN.TT_
.cab
I386/LANG/SOFTKEY.DL_
.cab
I386/LANG/SVGAFIX.FO_
.cab
I386/LANG/SVGASYS.FO_
.cab
I386/LANG/TINTLGC.IM_
.cab
I386/LANG/TINTLGD_.IM_
.cab
I386/LANG/TINTLGL.IM_
.cab
I386/LANG/TINTLGNT.IM_
.cab
I386/LANG/TINTLGS.IM_
.cab
I386/LANG/TINTLPHR.EX_
.cab
I386/LANG/TINTSETP.EX_
.cab
I386/LANG/TMIGRATE.DL_
.cab
I386/LANG/UNICDIME.IM_
.cab
I386/LANG/UNIIME.DL_
.cab
I386/LANG/VGA932.FO_
.cab
I386/LANG/VGA936.FO_
.cab
I386/LANG/VGA949.FO_
.cab
I386/LANG/VGA950.FO_
.cab
I386/LANG/VOICEENG.CH_
.cab
I386/LANG/VOICEJP.CH_
.cab
I386/LANG/VOICEPAD.DL_
.cab
I386/LANG/VOICESUB.DL_
.cab
I386/LANG/WINAR30.IM_
.cab
I386/LANG/WINGB.CH_
.cab
I386/LANG/WINGB.IM_
.cab
I386/LANG/WINIME.CH_
.cab
I386/LANG/WINIME.IM_
.cab
I386/LANG/WINPY.CH_
.cab
I386/LANG/WINPY.IM_
.cab
I386/LANG/WINPY.MB_
.cab
I386/LANG/WINSP.CH_
.cab
I386/LANG/WINSP.IM_
.cab
I386/LANG/WINSP.MB_
.cab
I386/LANG/WINZM.CH_
.cab
I386/LANG/WINZM.IM_
.cab
I386/LANG/WINZM.MB_
.cab
I386/LANGBAR.CH_
.cab
I386/LANGWRBK.DL_
.cab
I386/LANMAN.DR_
.cab
I386/LANPOL.XS_
.cab
I386/LANV1.XS_
.cab
I386/LAPPSTRT.CU_
.cab
I386/LAPRXY.DL_
.cab
I386/LARROW.CU_
.cab
I386/LATHA.TT_
.cab
I386/LAYOUT.INF
I386/LBRTFDC.SY_
.cab
I386/LCLADV.XM_
.cab
I386/LCLADVD.XM_
.cab
I386/LCLADVDF.XM_
.cab
I386/LCLADVMM.XM_
.cab
I386/LCLCOMP.XM_
.cab
I386/LCLDATE.XM_
.cab
I386/LCLDOCS.XM_
.cab
I386/LCLKWRDS.XM_
.cab
I386/LCLLOOK.XM_
.cab
I386/LCLMM.XM_
.cab
I386/LCLMODE.XM_
.cab
I386/LCLOTHER.XM_
.cab
I386/LCLPROG.XM_
.cab
I386/LCLRFINE.XM_
.cab
I386/LCLSIZE.XM_
.cab
I386/LCLSRCH.XM_
.cab
I386/LCLTECHY.XM_
.cab
I386/LCROSS.CU_
.cab
I386/LEAVES.HT_
.cab
I386/LEAVESBG.JP_
.cab
I386/LEGCYDRV.IN_
.cab
I386/LGC202.IN_
.cab
I386/LGC202.PN_
.cab
I386/LGC207.IN_
.cab
I386/LGC207.PN_
.cab
I386/LGC209.IN_
.cab
I386/LGC209.PN_
.cab
I386/LGC20A.IN_
.cab
I386/LGC20A.PN_
.cab
I386/LGC291.IN_
.cab
I386/LGC291.PN_
.cab
I386/LHMSTSC.CH_
.cab
I386/LHMSTSC.EX_
.cab
I386/LHMSTSC.MUI
.dll windows:6 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.rsrc
Size: 40KB - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 8B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/LHMSTSCX.DL_
.cab
I386/LHMSTSCX.MU_
.cab
I386/LHRDESK.CH_
.cab
I386/LIBEAM.CU_
.cab
I386/LICDLL.DL_
.cab
I386/LICENSE.CH_
.cab
I386/LICMGR10.DL_
.cab
I386/LICWMI.DL_
.cab
I386/LICWMI.MF_
.cab
I386/LICWMI.MO_
.cab
I386/LIFTOFF.BM_
.cab
I386/LIGHTS.EX_
.cab
I386/LINKINFO.DL_
.cab
I386/LMHOSTS.SA_
.cab
I386/LMHSVC.DL_
.cab
I386/LMMIB2.DL_
.cab
I386/LMMIB2.MI_
.cab
I386/LMOVE.CU_
.cab
I386/LMRT.DL_
.cab
I386/LNESW.CU_
.cab
I386/LNKSTUB.EX_
.cab
I386/LNODROP.CU_
.cab
I386/LNS.CU_
.cab
I386/LNWSE.CU_
.cab
I386/LOADFIX.CO_
.cab
I386/LOADPERF.DL_
.cab
I386/LOCALE.NL_
.cab
I386/LOCALSEC.DL_
.cab
I386/LOCALSEC.HL_
.cab
I386/LOCALSPL.DL_
.cab
I386/LOCALUI.DL_
.cab
I386/LOCATOR.EX_
.cab .ps1 polyglot
I386/LOCSECW.CH_
.cab
I386/LODCTR.EX_
.cab
I386/LOG.DL_
.cab
I386/LOGAGENT.EX_
.cab
I386/LOGHOURS.DL_
.cab
I386/LOGIN.CM_
.cab
I386/LOGMAN.EX_
.cab
I386/LOGOFF.EX_
.cab
I386/LOGON.SC_
.cab
I386/LOGONUI.EX_
.cab
I386/LOGOWIN.GIF
.gif
I386/LOGSCRPT.DL_
.cab
I386/LOGTEMP.SQ_
.cab
I386/LOGUI.OC_
.cab
I386/LONSINT.DL_
.cab
I386/LOTUS.WK_
.cab
I386/LPDSVC.DL_
.cab
I386/LPE.CH_
.cab
I386/LPECON.CH_
.cab
I386/LPK.DL_
.cab
I386/LPQ.EX_
.cab
I386/LPR.EX_
.cab
I386/LPRHELP.DL_
.cab
I386/LPRMON.DL_
.cab
I386/LPRMONUI.DL_
.cab
I386/LSANS.TT_
.cab
I386/LSANSD.TT_
.cab
I386/LSANSDI.TT_
.cab
I386/LSANSI.TT_
.cab
I386/LSASRV.DL_
.cab
I386/LSASS.EX_
.cab
I386/LTTS1033.LX_
.cab
I386/LUCON.TT_
.cab
I386/LUNA.MS_
.cab
I386/LUNA.TH_
.cab
I386/LUSRMGR.MS_
.cab
I386/LUT.PL_
.cab
I386/LVNM.TT_
.cab
I386/LVNMBD.TT_
.cab
I386/LWAIT.CU_
.cab
I386/LWE.CU_
.cab
I386/LWNGMADI.IN_
.cab
I386/LWUSBHID.IN_
.cab
I386/LZ32.DL_
.cab
I386/LZEXPAND.DL_
.cab
I386/L_10646.TT_
.cab
I386/L_EXCEPT.NL_
.cab
I386/L_INTL.NL_
.cab
I386/MACHINE.IN_
.cab
I386/MAGNIFY.CH_
.cab
I386/MAGNIFY.EX_
.cab
I386/MAGNIFY.GI_
.cab
I386/MAGNIFY.HL_
.cab
I386/MAG_HOOK.DL_
.cab
I386/MAIL.CH_
.cab
I386/MAIN.CP_
.cab
I386/MAIZE.HT_
.cab
I386/MAIZEBKG.JP_
.cab
I386/MAKECAB.EX_
.cab
I386/MANAGER.CAB
.cab
I386/MANGAL.TT_
.cab
I386/MAPIMIG.CA_
.cab
I386/MAPISTUB.DL_
.cab
I386/MARKET.IN_
.cab
I386/MARKET.MA_
.cab
I386/MARLETT.TT_
.cab
I386/MCAST.DL_
.cab
I386/MCASTMIB.DL_
.cab
I386/MCASTMIB.MI_
.cab
I386/MCD.SY_
.cab
I386/MCD32.DL_
.cab
I386/MCDSRV32.DL_
.cab
I386/MCHGR.IN_
.cab
I386/MCHGRCOI.DL_
.cab
I386/MCI.HT_
.cab
I386/MCIAVI.DR_
.cab
I386/MCIAVI32.DL_
.cab
I386/MCICDA.DL_
.cab
I386/MCIOLE16.DL_
.cab
I386/MCIOLE32.DL_
.cab
I386/MCIQTZ32.DL_
.cab
I386/MCISEQ.DL_
.cab
I386/MCISEQ.DR_
.cab
I386/MCIWAVE.DL_
.cab
I386/MCIWAVE.DR_
.cab
I386/MD5FILT.DL_
.cab
I386/MDAC.IN_
.cab
I386/MDACRDME.HT_
.cab
I386/MDHCP.DL_
.cab
I386/MDLIB.WM_
.cab
I386/MDM3COM.IN_
.cab
I386/MDM3CPCM.IN_
.cab
I386/MDM3MINI.IN_
.cab
I386/MDM5674A.IN_
.cab
I386/MDM656N5.IN_
.cab
I386/MDMADC.IN_
.cab
I386/MDMAIRTE.IN_
.cab
I386/MDMAIWA.IN_
.cab
I386/MDMAIWA3.IN_
.cab
I386/MDMAIWA4.IN_
.cab
I386/MDMAIWA5.IN_
.cab
I386/MDMAIWAT.IN_
.cab
I386/MDMAR1.IN_
.cab
I386/MDMARCH.IN_
.cab
I386/MDMARN.IN_
.cab
I386/MDMATI.IN_
.cab
I386/MDMATM2K.IN_
.cab
I386/MDMATT.IN_
.cab
I386/MDMAUS.IN_
.cab
I386/MDMBCMSM.IN_
.cab
I386/MDMBOCA.IN_
.cab
I386/MDMBSB.IN_
.cab
I386/MDMBTMDM.IN_
.cab
I386/MDMBUG3.IN_
.cab
I386/MDMBW561.IN_
.cab
I386/MDMC26A.IN_
.cab
I386/MDMCDP.IN_
.cab
I386/MDMCHIPV.IN_
.cab
I386/MDMCM28.IN_
.cab
I386/MDMCODEX.IN_
.cab
I386/MDMCOM1.IN_
.cab
I386/MDMCOMMU.IN_
.cab
I386/MDMCOMP.IN_
.cab
I386/MDMCPQ.IN_
.cab
I386/MDMCPQ2.IN_
.cab
I386/MDMCPV.IN_
.cab
I386/MDMCRTIX.IN_
.cab
I386/MDMCXSF2.IN_
.cab
I386/MDMCXSFT.IN_
.cab
I386/MDMDCM5.IN_
.cab
I386/MDMDCM6.IN_
.cab
I386/MDMDF56F.IN_
.cab
I386/MDMDGDEN.IN_
.cab
I386/MDMDGITN.IN_
.cab
I386/MDMDIGI.IN_
.cab
I386/MDMDP2.IN_
.cab
I386/MDMDSI.IN_
.cab
I386/MDMDYNA.IN_
.cab
I386/MDMEIGER.IN_
.cab
I386/MDMELSA.IN_
.cab
I386/MDMERIC.IN_
.cab
I386/MDMERIC2.IN_
.cab
I386/MDMESS.IN_
.cab
I386/MDMETECH.IN_
.cab
I386/MDMEXP.IN_
.cab
I386/MDMFJ2.IN_
.cab
I386/MDMGATEW.IN_
.cab
I386/MDMGCS.IN_
.cab
I386/MDMGEN.IN_
.cab
I386/MDMGL001.IN_
.cab
I386/MDMGL002.IN_
.cab
I386/MDMGL003.IN_
.cab
I386/MDMGL004.IN_
.cab
I386/MDMGL005.IN_
.cab
I386/MDMGL006.IN_
.cab
I386/MDMGL007.IN_
.cab
I386/MDMGL008.IN_
.cab
I386/MDMGL009.IN_
.cab
I386/MDMGL010.IN_
.cab
I386/MDMGSM.IN_
.cab
I386/MDMHAEU.IN_
.cab
I386/MDMHAMRW.IN_
.cab
I386/MDMHANDY.IN_
.cab
I386/MDMHAY2.IN_
.cab
I386/MDMHAYES.IN_
.cab
I386/MDMINFOT.IN_
.cab
I386/MDMINST.DL_
.cab
I386/MDMINTEL.IN_
.cab
I386/MDMIODAT.IN_
.cab
I386/MDMIRMDM.IN_
.cab
I386/MDMISDN.IN_
.cab
I386/MDMJF56E.IN_
.cab
I386/MDMKE.IN_
.cab
I386/MDMKORTX.IN_
.cab
I386/MDMLASAT.IN_
.cab
I386/MDMLASNO.IN_
.cab
I386/MDMLT3.IN_
.cab
I386/MDMLTLEO.IN_
.cab
I386/MDMLTSFT.IN_
.cab
I386/MDMLUCNT.IN_
.cab
I386/MDMMC288.IN_
.cab
I386/MDMMCD.IN_
.cab
I386/MDMMCOM.IN_
.cab
I386/MDMMCT.IN_
.cab
I386/MDMMEGA.IN_
.cab
I386/MDMMETRI.IN_
.cab
I386/MDMMHRTZ.IN_
.cab
I386/MDMMHZA.IN_
.cab
I386/MDMMHZEL.IN_
.cab
I386/MDMMHZK1.IN_
.cab
I386/MDMMINIJ.IN_
.cab
I386/MDMMOD.IN_
.cab
I386/MDMMOTO.IN_
.cab
I386/MDMMOTO1.IN_
.cab
I386/MDMMOTOU.IN_
.cab
I386/MDMMTS.IN_
.cab
I386/MDMNEUHS.IN_
.cab
I386/MDMNIS1U.IN_
.cab
I386/MDMNIS2U.IN_
.cab
I386/MDMNIS3T.IN_
.cab
I386/MDMNIS5T.IN_
.cab
I386/MDMNOKIA.IN_
.cab
I386/MDMNOVA.IN_
.cab
I386/MDMNTSTM.IN_
.cab
I386/MDMNTT1.IN_
.cab
I386/MDMNTTD2.IN_
.cab
I386/MDMNTTD6.IN_
.cab
I386/MDMNTTME.IN_
.cab
I386/MDMNTTP.IN_
.cab
I386/MDMNTTP2.IN_
.cab
I386/MDMNTTTE.IN_
.cab
I386/MDMOLIC.IN_
.cab
I386/MDMOMRN3.IN_
.cab
I386/MDMOPTN.IN_
.cab
I386/MDMOSI.IN_
.cab
I386/MDMOSICE.IN_
.cab
I386/MDMPACE.IN_
.cab
I386/MDMPBIT.IN_
.cab
I386/MDMPCTEL.IN_
.cab
I386/MDMPENR.IN_
.cab
I386/MDMPIN.IN_
.cab
I386/MDMPN1.IN_
.cab
I386/MDMPP.IN_
.cab
I386/MDMPSION.IN_
.cab
I386/MDMRACAL.IN_
.cab
I386/MDMRISA.IN_
.cab
I386/MDMROCK.IN_
.cab
I386/MDMROCK3.IN_
.cab
I386/MDMROCK4.IN_
.cab
I386/MDMROCK5.IN_
.cab
I386/MDMRPCI.IN_
.cab
I386/MDMRPCIW.IN_
.cab
I386/MDMSETUP.IN_
.cab
I386/MDMSGSML.IN_
.cab
I386/MDMSGSMU.IN_
.cab
I386/MDMSIER.IN_
.cab
I386/MDMSII64.IN_
.cab
I386/MDMSIIL6.IN_
.cab
I386/MDMSMART.IN_
.cab
I386/MDMSONYU.IN_
.cab
I386/MDMSPQ28.IN_
.cab
I386/MDMSSYS.IN_
.cab
I386/MDMSUN1.IN_
.cab
I386/MDMSUN2.IN_
.cab
I386/MDMSUPR3.IN_
.cab
I386/MDMSUPRA.IN_
.cab
I386/MDMSUPRV.IN_
.cab
I386/MDMTDK.IN_
.cab
I386/MDMTDKJ2.IN_
.cab
I386/MDMTDKJ3.IN_
.cab
I386/MDMTDKJ4.IN_
.cab
I386/MDMTDKJ5.IN_
.cab
I386/MDMTDKJ6.IN_
.cab
I386/MDMTDKJ7.IN_
.cab
I386/MDMTEXAS.IN_
.cab
I386/MDMTI.IN_
.cab
I386/MDMTOSH.IN_
.cab
I386/MDMTRON.IN_
.cab
I386/MDMUSRF.IN_
.cab
I386/MDMUSRG.IN_
.cab
I386/MDMUSRGL.IN_
.cab
I386/MDMUSRK1.IN_
.cab
I386/MDMUSRSP.IN_
.cab
I386/MDMVDOT.IN_
.cab
I386/MDMVV.IN_
.cab
I386/MDMWHQL0.IN_
.cab
I386/MDMX5560.IN_
.cab
I386/MDMXIRCC.IN_
.cab
I386/MDMXIRMP.IN_
.cab
I386/MDMXSDK.DL_
.cab
I386/MDMXSDK.SY_
.cab
I386/MDMZOOM.IN_
.cab
I386/MDMZYP.IN_
.cab
I386/MDMZYXEL.IN_
.cab
I386/MDMZYXLG.IN_
.cab
I386/MDSYNC.DL_
.cab
I386/MEDCTROC.DL_
.cab
I386/MEDCTROC.IN_
.cab
I386/MEDIACTR.CA_
.cab
I386/MEM.EX_
.cab
I386/MEMCARD.IN_
.cab
I386/MEMSTPCI.IN_
.cab
I386/MERLIN.AC_
.cab
I386/MERLIN.GI_
.cab
I386/METADA51.DL_
.cab
I386/METADATA.DL_
.cab
I386/METAL_SS.DL_
.cab
I386/METRONOM.AN_
.cab
I386/MF.IN_
.cab
I386/MF3216.DL_
.cab
I386/MFC40.DL_
.cab
I386/MFC40U.DL_
.cab
I386/MFC42.DL_
.cab
I386/MFC42U.DL_
.cab
I386/MFCEM28.IN_
.cab
I386/MFCEM33.IN_
.cab
I386/MFCEM56.IN_
.cab
I386/MFCSUBS.DL_
.cab
I386/MFCUIX.HL_
.cab
I386/MFF56N5.IN_
.cab
I386/MFLM.IN_
.cab
I386/MFLM56.IN_
.cab
I386/MFMHZN5.IN_
.cab
I386/MFOSI5.IN_
.cab
I386/MFSOCKET.IN_
.cab
I386/MFSUPRA.IN_
.cab
I386/MFX56NF.IN_
.cab
I386/MGA.DL_
.cab
I386/MGA.SY_
.cab
I386/MGAU.IN_
.cab
I386/MGMTAPI.DL_
.cab
I386/MIB.BI_
.cab
I386/MIB_II.MI_
.cab
I386/MICROSS.TT_
.cab
I386/MIDIMAP.DL_
.cab
I386/MIGAPP.IN_
.cab
I386/MIGDIAL.HT_
.cab
I386/MIGIP.DU_
.cab
I386/MIGISM.DL_
.cab
I386/MIGISM.IN_
.cab
I386/MIGISMA.DL_
.cab
I386/MIGISM_A.DL_
.cab
I386/MIGISOL.EX_
.cab
I386/MIGLIBNT.DL_
.cab
I386/MIGLIST.HT_
.cab
I386/MIGLOAD.EX_
.cab
I386/MIGPAGE.HT_
.cab
I386/MIGPWD.EX_
.cab
I386/MIGRATE.EX_
.cab
I386/MIGRATE.IS_
.cab
I386/MIGRATE.JS_
.cab
I386/MIGRATE.OB_
.cab
I386/MIGREGDB.EX_
.cab
I386/MIGSYS.IN_
.cab
I386/MIGUSER.IN_
.cab
I386/MIGWIZ.EX_
.cab
I386/MIGWIZ.HT_
.cab
I386/MIGWIZ.IN_
.cab
I386/MIGWIZ.MA_
.cab
I386/MIGWIZ2.HT_
.cab
I386/MIGWIZA.EX_
.cab
I386/MIGWIZ_A.EX_
.cab
I386/MIGX25A.DU_
.cab
I386/MIGX25B.DU_
.cab
I386/MIGX25C.DU_
.cab
I386/MIMEFILT.DL_
.cab
I386/MINDEX.DL_
.cab
I386/MINIOC.IN_
.cab
I386/MINIPL~1.WM_
.cab
I386/MIPX.MI_
.cab
I386/MISCANW.DL_
.cab
I386/MISCW.CH_
.cab
I386/MLANG.DA_
.cab
I386/MLANG.DL_
.cab
I386/MLL_HP.DL_
.cab
I386/MLL_MTF.DL_
.cab
I386/MLL_QIC.DL_
.cab
I386/MLS_TRB.CH_
.cab
I386/MMC.CH_
.cab
I386/MMC.EX_
.cab
I386/MMC30.DL_
.cab
I386/MMC30R.DL_
.cab
I386/MMCBASE.DL_
.cab
I386/MMCEX.DL_
.cab
I386/MMCEXR.DL_
.cab
I386/MMCFXC.DL_
.cab
I386/MMCFXCR.DL_
.cab
I386/MMCNDMGR.DL_
.cab
I386/MMCPERF.EX_
.cab
I386/MMCS.CH_
.cab
I386/MMCSHEXT.DL_
.cab
I386/MMC_DLG.HL_
.cab
I386/MMDRIVER.IN_
.cab
I386/MMDRV.DL_
.cab
I386/MMFUTIL.DL_
.cab
I386/MMOPT.IN_
.cab
I386/MMSSETUP.CAB
.cab
I386/MMSYS.CP_
.cab
I386/MMSYSTEM.DL_
.cab
I386/MMTASK.TS_
.cab
I386/MMUTILSE.DL_
.cab
I386/MNMDD.DL_
.cab
I386/MNMDD.SY_
.cab
I386/MNMSRVC.EX_
.cab
I386/MOBSYNC.CH_
.cab
I386/MOBSYNC.DL_
.cab
I386/MOBSYNC.EX_
.cab
I386/MOBSYNC.HL_
.cab
I386/MODE.CO_
.cab
I386/MODEM.CAB
.cab
I386/MODEM.HL_
.cab
I386/MODEMCSA.IN_
.cab
I386/MODEMUI.DL_
.cab
I386/MODERN.FO_
.cab
I386/MODEW.CH_
.cab
I386/MODEX.DL_
.cab
I386/MOF.XS_
.cab
I386/MOFCOMP.EX_
.cab
I386/MOFD.DL_
.cab
I386/MONITOR.GI_
.cab
I386/MONITOR.IN_
.cab
I386/MONITOR2.GI_
.cab
I386/MONITOR2.IN_
.cab
I386/MONITOR3.IN_
.cab
I386/MONITOR4.IN_
.cab
I386/MONITOR5.IN_
.cab
I386/MONITOR6.IN_
.cab
I386/MONITOR7.IN_
.cab
I386/MONITOR8.IN_
.cab
I386/MOON.JP_
.cab
I386/MORE.CO_
.cab
I386/MORICONS.DL_
.cab
I386/MOUNTMGR.SY_
.cab
I386/MOUNTVOL.EX_
.cab
I386/MOUSE.CH_
.cab
I386/MOUSE.DR_
.cab
I386/MOUSE.GI_
.cab
I386/MOUSE.HL_
.cab
I386/MOUSE.HT_
.cab
I386/MOUSE4.GI_
.cab
I386/MOUSEIMG.GI_
.cab
I386/MOUSETUT.JS_
.cab
I386/MOUSEWN1.GI_
.cab
I386/MOUSE_A.HT_
.cab
I386/MOUSE_B.HT_
.cab
I386/MOUSE_C.HT_
.cab
I386/MOUSE_D.HT_
.cab
I386/MOUSE_E.HT_
.cab
I386/MOUSE_F.HT_
.cab
I386/MOUSE_G.HT_
.cab
I386/MOUSE_H.HT_
.cab
I386/MOUSE_I.HT_
.cab
I386/MOUSE_J.HT_
.cab
I386/MOUSE_K.HT_
.cab
I386/MOVE_I.CU_
.cab
I386/MOVE_IL.CU_
.cab
I386/MOVE_IM.CU_
.cab
I386/MOVE_L.CU_
.cab
I386/MOVE_M.CU_
.cab
I386/MOVE_R.CU_
.cab
I386/MOVE_RL.CU_
.cab
I386/MOVE_RM.CU_
.cab
I386/MOVIEMK.CH_
.cab
I386/MOVIEMK.EX_
.cab
I386/MOVIEMK.IN_
.cab
I386/MP43DMOD.DL_
.cab
I386/MP4SDMOD.DL_
.cab
I386/MPCONW.CH_
.cab
I386/MPE.IN_
.cab
I386/MPG2DATA.AX_
.cab
I386/MPG2SPLT.AX_
.cab
I386/MPG4DMOD.DL_
.cab
I386/MPG4DS32.AX_
.cab
I386/MPLAY32.EX_
.cab
I386/MPLAYER2.CN_
.cab
I386/MPLAYER2.EX_
.cab
I386/MPLAYER2.HL_
.cab
I386/MPLAYER2.IN_
.cab
I386/MPLOGO.GI_
.cab
I386/MPLOGOH.GI_
.cab
I386/MPNETWRK.HL_
.cab
I386/MPNOTIFY.EX_
.cab
I386/MPR.DL_
.cab
I386/MPRAPI.DL_
.cab
I386/MPRDDM.DL_
.cab
I386/MPRDIM.DL_
.cab
I386/MPRMSG.DL_
.cab
I386/MPRUI.DL_
.cab
I386/MPSSTLN.IN_
.cab
I386/MPVIS.DL_
.cab
I386/MQAC.SY_
.cab
I386/MQAD.DL_
.cab
I386/MQBKUP.EX_
.cab
I386/MQCERTUI.DL_
.cab
I386/MQDSCLI.DL_
.cab
I386/MQGENTR.DL_
.cab
I386/MQISE.DL_
.cab
I386/MQLOGMGR.DL_
.cab
I386/MQOA.DL_
.cab
I386/MQOA.TL_
.cab
I386/MQOA10.TL_
.cab
I386/MQOA20.TL_
.cab
I386/MQPERF.DL_
.cab
I386/MQPERF.IN_
.cab
I386/MQPRFSYM.H_
.cab
I386/MQQM.DL_
.cab
I386/MQRT.DL_
.cab
I386/MQRTDEP.DL_
.cab
I386/MQSEC.DL_
.cab
I386/MQSNAP.DL_
.cab
I386/MQSNAP.HL_
.cab
I386/MQSVC.EX_
.cab
I386/MQSYSOC.IN_
.cab
I386/MQTGSVC.EX_
.cab
I386/MQTRIG.DL_
.cab
I386/MQUPGRD.DL_
.cab
I386/MQUTIL.DL_
.cab
I386/MRAID35X.SY_
.cab
I386/MRIAM.TT_
.cab
I386/MRIAMC.TT_
.cab
I386/MRIAMFX.TT_
.cab
I386/MRIAMTR.TT_
.cab
I386/MRINFO.EX_
.cab
I386/MRIPSAP.MI_
.cab
I386/MRXDAV.SY_
.cab
I386/MRXSMB.SY_
.cab
I386/MS1B.IN_
.cab
I386/MS1B.PN_
.cab
I386/MS1B_01.PN_
.cab
I386/MS1B_02.PN_
.cab
I386/MS1B_03.PN_
.cab
I386/MS1B_04.PN_
.cab
I386/MS1B_05.PN_
.cab
I386/MS1B_06.PN_
.cab
I386/MS1B_07.PN_
.cab
I386/MS1B_08.PN_
.cab
I386/MS1B_09.PN_
.cab
I386/MS1B_10.PN_
.cab
I386/MS26.IN_
.cab
I386/MS26.PN_
.cab
I386/MS26_01.PN_
.cab
I386/MS26_02.PN_
.cab
I386/MS26_03.PN_
.cab
I386/MS26_04.PN_
.cab
I386/MS26_05.PN_
.cab
I386/MS26_06.PN_
.cab
I386/MS26_07.PN_
.cab
I386/MS26_08.PN_
.cab
I386/MS27.IN_
.cab
I386/MS27.PN_
.cab
I386/MS27_1.PN_
.cab
I386/MS27_2.PN_
.cab
I386/MS27_3.PN_
.cab
I386/MS27_4.PN_
.cab
I386/MS27_5.PN_
.cab
I386/MS28.IN_
.cab
I386/MS28.PN_
.cab
I386/MS28_1.PN_
.cab
I386/MS28_2.PN_
.cab
I386/MS28_3.PN_
.cab
I386/MS28_4.PN_
.cab
I386/MS28_5.PN_
.cab
I386/MS28_6.PN_
.cab
I386/MS28_7.PN_
.cab
I386/MS28_8.PN_
.cab
I386/MS34.IN_
.cab
I386/MS34.PN_
.cab
I386/MS34_01.PN_
.cab
I386/MS34_02.PN_
.cab
I386/MS34_03.PN_
.cab
I386/MS34_04.PN_
.cab
I386/MS34_05.PN_
.cab
I386/MS34_06.PN_
.cab
I386/MS34_07.PN_
.cab
I386/MS34_08.PN_
.cab
I386/MS3B.IN_
.cab
I386/MS3B.PN_
.cab
I386/MS3B_1.PN_
.cab
I386/MS3B_2.PN_
.cab
I386/MS3B_3.PN_
.cab
I386/MS3B_4.PN_
.cab
I386/MS3B_A.PN_
.cab
I386/MS3B_C.PN_
.cab
I386/MS3B_M.PN_
.cab
I386/MS3B_T.PN_
.cab
I386/MS56.IN_
.cab
I386/MS56.PN_
.cab
I386/MS56_1.PN_
.cab
I386/MS56_10.PN_
.cab
I386/MS56_2.PN_
.cab
I386/MS56_3.PN_
.cab
I386/MS56_4.PN_
.cab
I386/MS56_5.PN_
.cab
I386/MS56_6.PN_
.cab
I386/MS56_7.PN_
.cab
I386/MS56_8.PN_
.cab
I386/MS56_9.PN_
.cab
I386/MS6.IN_
.cab
I386/MS6.PN_
.cab
I386/MS6_1.PN_
.cab
I386/MS6_10.PN_
.cab
I386/MS6_2.PN_
.cab
I386/MS6_3.PN_
.cab
I386/MS6_4.PN_
.cab
I386/MS6_5.PN_
.cab
I386/MS6_6.PN_
.cab
I386/MS6_7.PN_
.cab
I386/MS6_8.PN_
.cab
I386/MS6_9.PN_
.cab
I386/MS7.IN_
.cab
I386/MS7.PN_
.cab
I386/MS7_1.PN_
.cab
I386/MS7_2.PN_
.cab
I386/MS7_3.PN_
.cab
I386/MS7_4.PN_
.cab
I386/MS7_5.PN_
.cab
I386/MS7_6.PN_
.cab
I386/MS7_7.PN_
.cab
I386/MS7_8.PN_
.cab
I386/MS7_9.PN_
.cab
I386/MS7_G.IN_
.cab
I386/MS8.IN_
.cab
I386/MS8.PN_
.cab
I386/MS8_1.PN_
.cab
I386/MS8_10.PN_
.cab
I386/MS8_2.PN_
.cab
I386/MS8_3.PN_
.cab
I386/MS8_4.PN_
.cab
I386/MS8_5.PN_
.cab
I386/MS8_6.PN_
.cab
I386/MS8_7.PN_
.cab
I386/MS8_8.PN_
.cab
I386/MS8_9.PN_
.cab
I386/MS8_G.IN_
.cab
I386/MSAATEXT.DL_
.cab
I386/MSACM.DL_
.cab
I386/MSACM32.DL_
.cab
I386/MSACM32.DR_
.cab
I386/MSADCE.DL_
.cab
I386/MSADCER.DL_
.cab
I386/MSADCF.DL_
.cab
I386/MSADCFR.DL_
.cab
I386/MSADCO.DL_
.cab
I386/MSADCOR.DL_
.cab
I386/MSADCS.DL_
.cab
I386/MSADDS.DL_
.cab
I386/MSADDS32.AX_
.cab
I386/MSADDSR.DL_
.cab
I386/MSADER15.DL_
.cab
I386/MSADO15.DL_
.cab
I386/MSADO20.TL_
.cab
I386/MSADO21.TL_
.cab
I386/MSADO25.TL_
.cab
I386/MSADO26.TL_
.cab
I386/MSADO27.TL_
.cab
I386/MSADOMD.DL_
.cab
I386/MSADOR15.DL_
.cab
I386/MSADOX.DL_
.cab
I386/MSADP32.AC_
.cab
I386/MSADRH15.DL_
.cab
I386/MSAFD.DL_
.cab
I386/MSAPSSPC.DL_
.cab
I386/MSASN1.DL_
.cab
I386/MSAUD32.AC_
.cab
I386/MSAUDITE.DL_
.cab
I386/MSBBS.HT_
.cab
I386/MSCANDUI.DL_
.cab
I386/MSCAT32.DL_
.cab
I386/MSCDEXNT.EX_
.cab
I386/MSCHAP2.XS_
.cab
I386/MSCHAPV2.XS_
.cab
I386/MSCMS.DL_
.cab
I386/MSCONF.DL_
.cab
I386/MSCONFIG.CH_
.cab
I386/MSCONFIG.EX_
.cab
I386/MSCONV97.DL_
.cab
I386/MSCPQPA1.IN_
.cab
I386/MSCPX32R.DL_
.cab
I386/MSCPXL32.DL_
.cab
I386/MSCTF.DL_
.cab
I386/MSCTFIME.IM_
.cab
I386/MSCTFP.DL_
.cab
I386/MSDADC.DL_
.cab
I386/MSDADIAG.DL_
.cab
I386/MSDAENUM.DL_
.cab
I386/MSDAER.DL_
.cab
I386/MSDAORA.DL_
.cab
I386/MSDAORAR.DL_
.cab
I386/MSDAOSP.DL_
.cab
I386/MSDAPRSR.DL_
.cab
I386/MSDAPRST.DL_
.cab
I386/MSDAPS.DL_
.cab
I386/MSDAREM.DL_
.cab
I386/MSDAREMR.DL_
.cab
I386/MSDART.DL_
.cab
I386/MSDASC.CH_
.cab
I386/MSDASC.DL_
.cab
I386/MSDASQL.DL_
.cab
I386/MSDASQLR.DL_
.cab
I386/MSDATL3.DL_
.cab
I386/MSDATSRC.TL_
.cab
I386/MSDATT.DL_
.cab
I386/MSDAURL.DL_
.cab
I386/MSDFMAP.DL_
.cab
I386/MSDFMAP.IN_
.cab
I386/MSDLG874.FO_
.cab
I386/MSDMO.DL_
.cab
I386/MSDTC.EX_
.cab
I386/MSDTCLOG.DL_
.cab
I386/MSDTCPRF.H_
.cab
I386/MSDTCPRF.IN_
.cab
I386/MSDTCPRX.DL_
.cab
I386/MSDTCSTP.DL_
.cab
I386/MSDTCTM.DL_
.cab
I386/MSDTCTR.MO_
.cab
I386/MSDTCUIU.DL_
.cab
I386/MSDTCVTR.BA_
.cab
I386/MSDV.IN_
.cab
I386/MSDWINTL.DL_
.cab
I386/MSDXM.OC_
.cab
I386/MSDXMLC.DL_
.cab
I386/MSE.IN_
.cab
I386/MSE.PN_
.cab
I386/MSENCODE.DL_
.cab
I386/MSEXCH40.DL_
.cab
I386/MSEXCL40.DL_
.cab
I386/MSE_1.PN_
.cab
I386/MSE_10.PN_
.cab
I386/MSE_2.PN_
.cab
I386/MSE_3.PN_
.cab
I386/MSE_4.PN_
.cab
I386/MSE_5.PN_
.cab
I386/MSE_6.PN_
.cab
I386/MSE_7.PN_
.cab
I386/MSE_8.PN_
.cab
I386/MSE_9.PN_
.cab
I386/MSE_G.IN_
.cab
I386/MSF1F.IN_
.cab
I386/MSF1F.PN_
.cab
I386/MSF1F_1.PN_
.cab
I386/MSF1F_10.PN_
.cab
I386/MSF1F_2.PN_
.cab
I386/MSF1F_3.PN_
.cab
I386/MSF1F_4.PN_
.cab
I386/MSF1F_5.PN_
.cab
I386/MSF1F_6.PN_
.cab
I386/MSF1F_7.PN_
.cab
I386/MSF1F_8.PN_
.cab
I386/MSF1F_9.PN_
.cab
I386/MSFS.SY_
.cab
I386/MSFT.MI_
.cab
I386/MSFTEDIT.DL_
.cab
I386/MSG.EX_
.cab
I386/MSG711.AC_
.cab
I386/MSG723.AC_
.cab
I386/MSGINA.DL_
.cab
I386/MSGPC.SY_
.cab
I386/MSGR3EN.DL_
.cab
I386/MSGROCM.DL_
.cab
I386/MSGSM32.AC_
.cab
I386/MSGSVC.DL_
.cab
I386/MSH261.DR_
.cab
I386/MSHDC.IN_
.cab
I386/MSHEARTS.CH_
.cab
I386/MSHEARTS.CN_
.cab
I386/MSHEARTS.EX_
.cab
I386/MSHEARTS.HL_
.cab
I386/MSHTA.EX_
.cab
I386/MSHTML.DL_
.cab
I386/MSHTML.TL_
.cab
I386/MSHTMLED.DL_
.cab
I386/MSHTMLER.DL_
.cab
I386/MSI.DL_
.cab
I386/MSI.MF_
.cab
I386/MSI.MO_
.cab
I386/MSICW.IS_
.cab
I386/MSIDENT.DL_
.cab
I386/MSIDLE.DL_
.cab
I386/MSIDNTLD.DL_
.cab
I386/MSIEFTP.DL_
.cab
I386/MSIEXEC.EX_
.cab
I386/MSIHND.DL_
.cab
I386/MSIMAIN.SD_
.cab
I386/MSIMG32.DL_
.cab
I386/MSIMN.EX_
.cab
I386/MSIMSG.DL_
.cab
I386/MSIMTF.DL_
.cab
I386/MSINFO.DL_
.cab
I386/MSINFO32.CH_
.cab
I386/MSINFO32.EX_
.cab
I386/MSINFO32.IN_
.cab
I386/MSIPBTP.MI_
.cab
I386/MSIPRIP2.MI_
.cab
I386/MSIPROV.DL_
.cab
I386/MSIREGMV.EX_
.cab
I386/MSISAM11.DL_
.cab
I386/MSISIP.DL_
.cab
I386/MSJET40.DL_
.cab
I386/MSJETOL1.DL_
.cab
I386/MSJINT40.DL_
.cab
I386/MSJRO.DL_
.cab
I386/MSJTER40.DL_
.cab
I386/MSJTES40.DL_
.cab
I386/MSLBUI.DL_
.cab
I386/MSLOGO.JP_
.cab
I386/MSLS31.DL_
.cab
I386/MSLTUS40.DL_
.cab
I386/MSLWVTTS.DL_
.cab
I386/MSMAIL.IN_
.cab
I386/MSMOUSE.IN_
.cab
I386/MSMQCONW.CH_
.cab
I386/MSMQOCM.DL_
.cab
I386/MSMQOCMW.IN_
.cab
I386/MSMQW.CH_
.cab
I386/MSMSCSI.IN_
.cab
I386/MSMSGS.CA_
.cab
I386/MSMSGS.IN_
.cab
I386/MSMUSB.IN_
.cab
I386/MSN.IS_
.cab
I386/MSN100.IN_
.cab
I386/MSN14.IN_
.cab
I386/MSN150.IN_
.cab
I386/MSN163.IN_
.cab
I386/MSN188.IN_
.cab
I386/MSN220.IN_
.cab
I386/MSN222.IN_
.cab
I386/MSN238.IN_
.cab
I386/MSN36.IN_
.cab
I386/MSN7.CA_
.cab
I386/MSN9.CA_
.cab
I386/MSN9XMIG.DL_
.cab
I386/MSNAUTH.CN_
.cab
I386/MSNAUTH.HL_
.cab
I386/MSNCLI.EX_
.cab
I386/MSNCPQ.IC_
.cab
I386/MSNCSAPI.DL_
.cab
I386/MSNDELL.IC_
.cab
I386/MSNEMAIL.IC_
.cab
I386/MSNETMTG.IN_
.cab
I386/MSNETOBJ.DL_
.cab
I386/MSNIKE.IN_
.cab
I386/MSNLICEN.TX_
.cab
I386/MSNMETAL.JC_
.cab
I386/MSNMETAL.WE_
.cab
I386/MSNMIGR.IN_
.cab
I386/MSNMS.IC_
.cab
I386/MSNMSGS.MS_
.cab
I386/MSNMSN.IN_
.cab
I386/MSNREAD.HT_
.cab
I386/MSNSSPC.DL_
.cab
I386/MSNSUSII.EX_
.cab
I386/MSOBCOMM.DL_
.cab
I386/MSOBDL.DL_
.cab
I386/MSOBE.IS_
.cab
I386/MSOBJS.DL_
.cab
I386/MSOBMAIN.DL_
.cab
I386/MSOBSHEL.DL_
.cab
I386/MSOBSHEL.HT_
.cab
I386/MSOBWEB.DL_
.cab
I386/MSOE.CH_
.cab
I386/MSOE.DL_
.cab
I386/MSOE.HL_
.cab
I386/MSOE.TX_
.cab
I386/MSOE50.IN_
.cab
I386/MSOEACCT.DL_
.cab
I386/MSOEACCT.HL_
.cab
I386/MSOERES.DL_
.cab
I386/MSOERT2.DL_
.cab
I386/MSOOBE.EX_
.cab
I386/MSORC32R.DL_
.cab
I386/MSORCL32.CH_
.cab
I386/MSORCL32.DL_
.cab
I386/MSPAINT.CH_
.cab
I386/MSPAINT.EX_
.cab
I386/MSPAINT.HL_
.cab
I386/MSPATCHA.DL_
.cab
I386/MSPBDE40.DL_
.cab
I386/MSPEAP1.XS_
.cab
I386/MSPEAPV1.XS_
.cab
I386/MSPMSNSV.DL_
.cab
I386/MSPMSP.DL_
.cab
I386/MSPORTS.DL_
.cab
I386/MSPORTS.IN_
.cab
I386/MSPRIVS.DL_
.cab
I386/MSPRW.IN_
.cab
I386/MSPRW.PN_
.cab
I386/MSPRW_1.PN_
.cab
I386/MSPRW_2.PN_
.cab
I386/MSPRW_3.PN_
.cab
I386/MSPRW_4.PN_
.cab
I386/MSPRW_5.PN_
.cab
I386/MSPRW_6.PN_
.cab
I386/MSPRW_7.PN_
.cab
I386/MSPRW_8.PN_
.cab
I386/MSR2C.DL_
.cab
I386/MSR2CENU.DL_
.cab
I386/MSRATELC.DL_
.cab
I386/MSRATING.DL_
.cab
I386/MSRCLR40.DL_
.cab
I386/MSRD2X40.DL_
.cab
I386/MSRD3X40.DL_
.cab
I386/MSRDP.CA_
.cab
I386/MSRECR40.DL_
.cab
I386/MSREPL40.DL_
.cab
I386/MSRIO.IN_
.cab
I386/MSRIO8.IN_
.cab
I386/MSRLE32.DL_
.cab
I386/MSSAP.DL_
.cab
I386/MSSCDS32.AX_
.cab
I386/MSSCP.DL_
.cab
I386/MSSCRIPT.MU_
.cab
I386/MSSCRIPT.OC_
.cab
I386/MSSHA.DL_
.cab
I386/MSSHAMSG.DL_
.cab
I386/MSSIGN32.DL_
.cab
I386/MSSIP32.DL_
.cab
I386/MSSOAP1.DL_
.cab
I386/MSSOAPR.DL_
.cab
I386/MSSWCH.DL_
.cab
I386/MSSWCHX.EX_
.cab
I386/MST120.DL_
.cab
I386/MST123.DL_
.cab
I386/MSTAPE.IN_
.cab
I386/MSTASK.DL_
.cab
I386/MSTASK.HL_
.cab
I386/MSTASK.INF
I386/MSTASK.INI
I386/MSTASKW.CH_
.cab
I386/MSTEXT40.DL_
.cab
I386/MSTIME.DL_
.cab
I386/MSTINIT.EX_
.cab
I386/MSTLSAPI.DL_
.cab
I386/MSTSC.CH_
.cab
I386/MSTSC.EX_
.cab
I386/MSTSCAX.DL_
.cab
I386/MSTSWEB.CA_
.cab
I386/MSUNI11.DL_
.cab
I386/MSUTB.DL_
.cab
I386/MSV1_0.DL_
.cab
I386/MSVBVM50.DL_
.cab
I386/MSVBVM60.DL_
.cab
I386/MSVCIRT.DL_
.cab
I386/MSVCP50.DL_
.cab
I386/MSVCP60.DL_
.cab
I386/MSVCRT.DL_
.cab
I386/MSVCRT20.DL_
.cab
I386/MSVCRT40.DL_
.cab
I386/MSVFW32.DL_
.cab
I386/MSVIDC32.DL_
.cab
I386/MSVIDCTL.DL_
.cab
I386/MSVIDEO.DL_
.cab
I386/MSW3PRT.DL_
.cab
I386/MSWDAT10.DL_
.cab
I386/MSWEBDVD.DL_
.cab
I386/MSWMDM.DL_
.cab
I386/MSWRD6.WP_
.cab
I386/MSWRD632.WP_
.cab
I386/MSWRD8.WP_
.cab
I386/MSWRD832.CN_
.cab
I386/MSWSOCK.DL_
.cab
I386/MSWSTR10.DL_
.cab
I386/MSXACTPS.DL_
.cab
I386/MSXBDE40.DL_
.cab
I386/MSXML.DL_
.cab
I386/MSXML2.DL_
.cab
I386/MSXML2R.DL_
.cab
I386/MSXML3.DL_
.cab
I386/MSXML3R.DL_
.cab
I386/MSXML6.DL_
.cab
I386/MSXML6R.DL_
.cab
I386/MSXMLR.DL_
.cab
I386/MTLMNT5.SY_
.cab
I386/MTLSTRM.SY_
.cab
I386/MTSADMIN.TL_
.cab
I386/MTSTOCOM.EX_
.cab
I386/MTXCLU.DL_
.cab
I386/MTXDM.DL_
.cab
I386/MTXEX.DL_
.cab
I386/MTXLEGIH.DL_
.cab
I386/MTXOCI.DL_
.cab
I386/MTXVIDEO.IN_
.cab
I386/MUISETUP.EX_
.cab
I386/MULTILNG.OS_
.cab
I386/MULTIMED.IN_
.cab
I386/MULTIPRT.IN_
.cab
I386/MUP.SY_
.cab
I386/MUSIC.AS_
.cab
I386/MUSIC.BM_
.cab
I386/MUSIC.WM_
.cab
I386/MUTOHPEN.SY_
.cab
I386/MVBOLI.TT_
.cab
I386/MW770.CA_
.cab
I386/MWAVMDM1.IN_
.cab
I386/MWCI.DL_
.cab
I386/MWCI32.DL_
.cab
I386/MWMBATAM.IN_
.cab
I386/MWREMOVE.IN_
.cab
I386/MWSETUPK.SY_
.cab
I386/MWTPDSP.IN_
.cab
I386/MXBOARD.IN_
.cab
I386/MXPORT.IN_
.cab
I386/MYCOMPUT.DL_
.cab
I386/MYDOCS.DL_
.cab
I386/MYMUSIC.IN_
.cab
I386/N2K.BM_
.cab
I386/NABTSFEC.IN_
.cab
I386/NAC.DL_
.cab
I386/NAPIPSEC.DL_
.cab
I386/NAPMONTR.DL_
.cab
I386/NAPPROV.MO_
.cab
I386/NAPSCHEM.MO_
.cab
I386/NAPSTAT.EX_
.cab
I386/NARRATOR.EX_
.cab
I386/NARRHOOK.DL_
.cab
I386/NATURE.HT_
.cab
I386/NATUREBG.JP_
.cab
I386/NBTSTAT.EX_
.cab
I386/NCOBJAPI.DL_
.cab
I386/NCPA.CP_
.cab
I386/NCPROV.DL_
.cab
I386/NCPROV.MF_
.cab
I386/NCPROV.MO_
.cab
I386/NCXPNT.DL_
.cab
I386/NDDEAPI.DL_
.cab
I386/NDDEAPIR.EX_
.cab
I386/NDDENB32.DL_
.cab
I386/NDIS.SY_
.cab
I386/NDISIP.IN_
.cab
I386/NDISNPP.DL_
.cab
I386/NDISTAPI.SY_
.cab
I386/NDISUIO.IN_
.cab
I386/NDISWAN.SY_
.cab
I386/NDPROXY.SY_
.cab
I386/NDPTSP.TS_
.cab
I386/NEO20XX.IN_
.cab
I386/NET.EX_
.cab
I386/NET.HL_
.cab
I386/NET1.EX_
.cab
I386/NET10.IN_
.cab
I386/NET1394.IN_
.cab
I386/NET21X4.IN_
.cab
I386/NET3C556.IN_
.cab
I386/NET3C589.IN_
.cab
I386/NET3C985.IN_
.cab
I386/NET3SR.IN_
.cab
I386/NET5515N.IN_
.cab
I386/NET557.IN_
.cab
I386/NET559IB.IN_
.cab
I386/NET575NT.IN_
.cab
I386/NET650D.IN_
.cab
I386/NET656C5.IN_
.cab
I386/NET656N5.IN_
.cab
I386/NET713.IN_
.cab
I386/NET83820.IN_
.cab
I386/NET8511.IN_
.cab
I386/NETALI.IN_
.cab
I386/NETAMBI.IN_
.cab
I386/NETAMD.IN_
.cab
I386/NETAMD2.IN_
.cab
I386/NETAMDHL.IN_
.cab
I386/NETAN983.IN_
.cab
I386/NETANA.IN_
.cab
I386/NETAPI.DL_
.cab
I386/NETAPI32.DL_
.cab
I386/NETASP2K.IN_
.cab
I386/NETAUNI.IN_
.cab
I386/NETB57XP.IN_
.cab
I386/NETBCM4E.IN_
.cab
I386/NETBCM4P.IN_
.cab
I386/NETBCM4U.IN_
.cab
I386/NETBEAC.IN_
.cab
I386/NETBIOS.SY_
.cab
I386/NETBLITZ.HT_
.cab
I386/NETBLZBG.GI_
.cab
I386/NETBRDGM.IN_
.cab
I386/NETBRDGS.IN_
.cab
I386/NETBRZW.IN_
.cab
I386/NETBT.SY_
.cab
I386/NETCB102.IN_
.cab
I386/NETCB325.IN_
.cab
I386/NETCBE.IN_
.cab
I386/NETCE2.IN_
.cab
I386/NETCE3.IN_
.cab
I386/NETCEM28.IN_
.cab
I386/NETCEM33.IN_
.cab
I386/NETCEM56.IN_
.cab
I386/NETCFG.HL_
.cab
I386/NETCFGW.CH_
.cab
I386/NETCFGX.DL_
.cab
I386/NETCICAP.IN_
.cab
I386/NETCIS.IN_
.cab
I386/NETCLASS.IN_
.cab
I386/NETCPQC.IN_
.cab
I386/NETCPQG.IN_
.cab
I386/NETCPQI.IN_
.cab
I386/NETCPQMT.IN_
.cab
I386/NETCTMRK.IN_
.cab
I386/NETDAV.IN_
.cab
I386/NETDDE.EX_
.cab
I386/NETDEFXA.IN_
.cab
I386/NETDF650.IN_
.cab
I386/NETDGDXB.IN_
.cab
I386/NETDLH5X.IN_
.cab
I386/NETDM.IN_
.cab
I386/NETE1000.IN_
.cab
I386/NETE100I.IN_
.cab
I386/NETEJXMP.IN_
.cab
I386/NETEL515.IN_
.cab
I386/NETEL574.IN_
.cab
I386/NETEL5X9.IN_
.cab
I386/NETEL90A.IN_
.cab
I386/NETEL90B.IN_
.cab
I386/NETEL980.IN_
.cab
I386/NETEL99X.IN_
.cab
I386/NETEPICN.IN_
.cab
I386/NETEPRO.IN_
.cab
I386/NETEPVCM.IN_
.cab
I386/NETEPVCP.IN_
.cab
I386/NETEVENT.DL_
.cab
I386/NETEX10.IN_
.cab
I386/NETF56N5.IN_
.cab
I386/NETFA312.IN_
.cab
I386/NETFA410.IN_
.cab
I386/NETFJVI.IN_
.cab
I386/NETFJVJ.IN_
.cab
I386/NETFORE.IN_
.cab
I386/NETFOREH.IN_
.cab
I386/NETFW.IN_
.cab
I386/NETFX.CA_
.cab
I386/NETFXOCM.DL_
.cab
I386/NETFXOCM.IN_
.cab
I386/NETGPC.IN_
.cab
I386/NETH.DL_
.cab
I386/NETIAS.IN_
.cab
I386/NETIBM.IN_
.cab
I386/NETIBM2.IN_
.cab
I386/NETID.DL_
.cab
I386/NETIP6.IN_
.cab
I386/NETIPRIP.IN_
.cab
I386/NETIRDA.IN_
.cab
I386/NETIRSIR.IN_
.cab
I386/NETKLSI.IN_
.cab
I386/NETKTC.IN_
.cab
I386/NETLANEM.IN_
.cab
I386/NETLANEP.IN_
.cab
I386/NETLM.IN_
.cab
I386/NETLM56.IN_
.cab
I386/NETLNEV2.IN_
.cab
I386/NETLOGON.DL_
.cab
I386/NETLOOP.IN_
.cab
I386/NETLPD.IN_
.cab
I386/NETMADGE.IN_
.cab
I386/NETMAN.DL_
.cab
I386/NETMEET.HT_
.cab
I386/NETMHZN5.IN_
.cab
I386/NETMSCLI.IN_
.cab
I386/NETMSG.DL_
.cab
I386/NETNB.IN_
.cab
I386/NETNF3.IN_
.cab
I386/NETNGR.IN_
.cab
I386/NETNM.IN_
.cab
I386/NETNOVEL.IN_
.cab
I386/NETNWCLI.IN_
.cab
I386/NETNWLNK.IN_
.cab
I386/NETOC.DL_
.cab
I386/NETOC.IN_
.cab
I386/NETOSI2C.IN_
.cab
I386/NETOSI5.IN_
.cab
I386/NETPC100.IN_
.cab
I386/NETPLWIZ.DL_
.cab
I386/NETPNIC.IN_
.cab
I386/NETPSA.IN_
.cab
I386/NETPSCHD.IN_
.cab
I386/NETPWR2.IN_
.cab
I386/NETRAP.DL_
.cab
I386/NETRASA.IN_
.cab
I386/NETRASS.IN_
.cab
I386/NETRAST.IN_
.cab
I386/NETRLW2K.IN_
.cab
I386/NETRNDIS.IN_
.cab
I386/NETRSVP.IN_
.cab
I386/NETRTPNT.IN_
.cab
I386/NETRTSNT.IN_
.cab
I386/NETRWAN.IN_
.cab
I386/NETSAP.IN_
.cab
I386/NETSERV.IN_
.cab
I386/NETSETUP.CP_
.cab
I386/NETSETUP.EXE
.exe windows:5 windows x86 arch:x86

1494de9b53e05fc1f40cb92afbdd6ce4

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

FreeSid
AllocateAndInitializeSid
EqualSid
GetTokenInformation
OpenProcessToken
AdjustTokenPrivileges
LookupPrivilegeValueA
RegCloseKey
RegDeleteValueA
RegOpenKeyExA
RegSetValueExA
RegQueryValueExA
RegCreateKeyExA
RegQueryInfoKeyA

kernel32

LocalFree
LocalAlloc
GetLastError
GetCurrentProcess
GetModuleFileNameA
lstrlenA
GetSystemDirectoryA
RemoveDirectoryA
FindClose
FindNextFileA
DeleteFileA
SetFileAttributesA
lstrcmpA
FindFirstFileA
lstrcatA
lstrcpyA
_lclose
_llseek
_lopen
WritePrivateProfileStringA
GetWindowsDirectoryA
CreateDirectoryA
GetFileAttributesA
ExpandEnvironmentStringsA
IsDBCSLeadByte
GetShortPathNameA
GetPrivateProfileStringA
GetPrivateProfileIntA
lstrcmpiA
GetProcAddress
GlobalUnlock
GlobalLock
GlobalAlloc
FreeResource
CloseHandle
LoadResource
SizeofResource
FindResourceA
ReadFile
WriteFile
SetFilePointer
SetFileTime
LocalFileTimeToFileTime
DosDateTimeToFileTime
SetCurrentDirectoryA
GetTempFileNameA
ExitProcess
CreateFileA
LoadLibraryExA
lstrcpynA
GetVolumeInformationA
FormatMessageA
GetCurrentDirectoryA
GetVersionExA
GetExitCodeProcess
WaitForSingleObject
CreateProcessA
GetTempPathA
GetSystemInfo
CreateMutexA
SetEvent
CreateEventA
CreateThread
ResetEvent
TerminateThread
GetDriveTypeA
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
LockResource
LoadLibraryA
GetDiskFreeSpaceA
MulDiv
EnumResourceLanguagesA
FreeLibrary
GlobalFree

gdi32

GetDeviceCaps

user32

ExitWindowsEx
wsprintfA
CharNextA
CharUpperA
CharPrevA
SetWindowLongA
GetWindowLongA
CallWindowProcA
DispatchMessageA
MsgWaitForMultipleObjects
PeekMessageA
SendMessageA
SetWindowPos
ReleaseDC
GetDC
GetWindowRect
SendDlgItemMessageA
GetDlgItem
SetForegroundWindow
SetWindowTextA
MessageBoxA
DialogBoxIndirectParamA
ShowWindow
EnableWindow
GetDlgItemTextA
EndDialog
GetDesktopWindow
MessageBeep
SetDlgItemTextA
LoadStringA
GetSystemMetrics

comctl32

ord17

version

GetFileVersionInfoA
VerQueryValueA
GetFileVersionInfoSizeA

Sections

.text
Size: 34KB - Virtual size: 33KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 286KB - Virtual size: 288KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
I386/NETSH.EX_
.cab
I386/NETSHELL.DL_
.cab
I386/NETSIS.IN_
.cab
I386/NETSK98.IN_
.cab
I386/NETSK_FP.IN_
.cab
I386/NETSLA30.IN_
.cab
I386/NETSMC.IN_
.cab
I386/NETSNIP.IN_
.cab
I386/NETSNMP.IN_
.cab
I386/NETSTAT.EX_
.cab
I386/NETTB155.IN_
.cab
I386/NETTCPIP.IN_
.cab
I386/NETTDKB.IN_
.cab
I386/NETTIGER.IN_
.cab
I386/NETTPRO.IN_
.cab
I386/NETTPSMP.IN_
.cab
I386/NETTUN.IN_
.cab
I386/NETUI0.DL_
.cab
I386/NETUI1.DL_
.cab
I386/NETUI2.DL_
.cab
I386/NETUPNP.IN_
.cab
I386/NETUPNPH.IN_
.cab
I386/NETVT86.IN_
.cab
I386/NETW840.IN_
.cab
I386/NETW926.IN_
.cab
I386/NETW940.IN_
.cab
I386/NETWARE.DR_
.cab
I386/NETWLAN.IN_
.cab
I386/NETWLAN2.IN_
.cab
I386/NETWORKS._
.cab
I386/NETWORKW.CH_
.cab
I386/NETWV48.IN_
.cab
I386/NETWZC.IN_
.cab
I386/NETX500.IN_
.cab
I386/NETX56N5.IN_
.cab
I386/NETXCPQ.IN_
.cab
I386/NEWALERT.WA_
.cab
I386/NEWBTM1.JP_
.cab
I386/NEWBTM8.JP_
.cab
I386/NEWDEV.DL_
.cab
I386/NEWEMAIL.WA_
.cab
I386/NEWEULA.HT_
.cab
I386/NEWEULA2.HT_
.cab
I386/NEWFEAT1.CH_
.cab
I386/NEWFEAT1.HL_
.cab
I386/NEWFEAT2.CH_
.cab
I386/NEWFEAT2.HL_
.cab
I386/NEWFEAT3.CH_
.cab
I386/NEWFEAT3.HL_
.cab
I386/NEWFEAT4.CH_
.cab
I386/NEWFEAT4.HL_
.cab
I386/NEWFEAT5.CH_
.cab
I386/NEWFEAT5.HL_
.cab
I386/NEWMARK1.JP_
.cab
I386/NEWMARK8.JP_
.cab
I386/NEWS.PN_
.cab
I386/NEWSTRYS.WM_
.cab
I386/NEWTOP1.JP_
.cab
I386/NEWTOP8.JP_
.cab
I386/NEXTDOWN.JP_
.cab
I386/NEXTLINK.DL_
.cab
I386/NEXTOFF.JP_
.cab
I386/NEXTOVER.JP_
.cab
I386/NEXTUP.JP_
.cab
I386/NIPX.MI_
.cab
I386/NLHTML.DL_
.cab
I386/NLS302EN.LE_
.cab
I386/NLSFUNC.EX_
.cab
I386/NMAS.DL_
.cab
I386/NMASNT.DL_
.cab
I386/NMCHAT.CH_
.cab
I386/NMCHAT.DL_
.cab
I386/NMCOM.DL_
.cab
I386/NMEVTMSG.DL_
.cab
I386/NMFT.DL_
.cab
I386/NMMKCERT.DL_
.cab
I386/NMNT.SY_
.cab
I386/NMOLDWB.DL_
.cab
I386/NMPGMGRP.EX_
.cab
I386/NMWB.DL_
.cab
I386/NMWHITEB.CH_
.cab
I386/NOANSWER.HT_
.cab
I386/NOCONTNT.CN_
.cab
I386/NOFTS.CH_
.cab
I386/NOISE.CHS
I386/NOISE.CHT
I386/NOISE.DA_
.cab
I386/NOISE.DE_
.cab
I386/NOISE.ENG
I386/NOISE.ENU
I386/NOISE.ES_
.cab
I386/NOISE.FR_
.cab
I386/NOISE.IT_
.cab
I386/NOISE.NL_
.cab
I386/NOISE.SV_
.cab
I386/NOISE.TH_
.cab
I386/NOTEPAD.CH_
.cab
I386/NOTEPAD.EX_
.cab
I386/NOTEPAD.HL_
.cab
I386/NOTIFLAG.EX_
.cab
I386/NOTIFY.WA_
.cab
I386/NO_I.CU_
.cab
I386/NO_IL.CU_
.cab
I386/NO_IM.CU_
.cab
I386/NO_L.CU_
.cab
I386/NO_M.CU_
.cab
I386/NO_R.CU_
.cab
I386/NO_RL.CU_
.cab
I386/NO_RM.CU_
.cab
I386/NPDRMV2.DL_
.cab
I386/NPDRMV2.ZI_
.cab .zip polyglot
I386/NPDS.ZI_
.cab
I386/NPDSPLAY.DL_
.cab
I386/NPFS.SY_
.cab
I386/NPPAGENT.EX_
.cab
I386/NPPTOOLS.DL_
.cab
I386/NPWMSDRM.DL_
.cab
I386/NRKIS.TT_
.cab
I386/NSEPM.DL_
.cab
I386/NSLOOKUP.EX_
.cab
I386/NT5.CA_
.cab
I386/NT5IIS.CA_
.cab
I386/NT5INF.CA_
.cab
I386/NTAPM.IN_
.cab
I386/NTARTW.CH_
.cab
I386/NTBACKUP.EX_
.cab
I386/NTBACKUP.HL_
.cab
I386/NTBCKUPW.CH_
.cab
I386/NTCHOWTO.CH_
.cab
I386/NTCMDSW.CH_
.cab
I386/NTDEFW.CH_
.cab
I386/NTDETECT.COM
I386/NTDLL.DLL
.dll windows:5 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

ntdll.pdb

Exports

Exports

CsrAllocateCaptureBuffer
CsrAllocateMessagePointer
CsrCaptureMessageBuffer
CsrCaptureMessageMultiUnicodeStringsInPlace
CsrCaptureMessageString
CsrCaptureTimeout
CsrClientCallServer
CsrClientConnectToServer
CsrFreeCaptureBuffer
CsrGetProcessId
CsrIdentifyAlertableThread
CsrNewThread
CsrProbeForRead
CsrProbeForWrite
CsrSetPriorityClass
DbgBreakPoint
DbgPrint
DbgPrintEx
DbgPrintReturnControlC
DbgPrompt
DbgQueryDebugFilterState
DbgSetDebugFilterState
DbgUiConnectToDbg
DbgUiContinue
DbgUiConvertStateChangeStructure
DbgUiDebugActiveProcess
DbgUiGetThreadDebugObject
DbgUiIssueRemoteBreakin
DbgUiRemoteBreakin
DbgUiSetThreadDebugObject
DbgUiStopDebugging
DbgUiWaitStateChange
DbgUserBreakPoint
KiFastSystemCall
KiFastSystemCallRet
KiIntSystemCall
KiRaiseUserExceptionDispatcher
KiUserApcDispatcher
KiUserCallbackDispatcher
KiUserExceptionDispatcher
LdrAccessOutOfProcessResource
LdrAccessResource
LdrAddRefDll
LdrAlternateResourcesEnabled
LdrCreateOutOfProcessImage
LdrDestroyOutOfProcessImage
LdrDisableThreadCalloutsForDll
LdrEnumResources
LdrEnumerateLoadedModules
LdrFindCreateProcessManifest
LdrFindEntryForAddress
LdrFindResourceDirectory_U
LdrFindResourceEx_U
LdrFindResource_U
LdrFlushAlternateResourceModules
LdrGetDllHandle
LdrGetDllHandleEx
LdrGetProcedureAddress
LdrHotPatchRoutine
LdrInitShimEngineDynamic
LdrInitializeThunk
LdrLoadAlternateResourceModule
LdrLoadDll
LdrLockLoaderLock
LdrProcessRelocationBlock
LdrQueryImageFileExecutionOptions
LdrQueryProcessModuleInformation
LdrSetAppCompatDllRedirectionCallback
LdrSetDllManifestProber
LdrShutdownProcess
LdrShutdownThread
LdrUnloadAlternateResourceModule
LdrUnloadDll
LdrUnlockLoaderLock
LdrVerifyImageMatchesChecksum
NlsAnsiCodePage
NlsMbCodePageTag
NlsMbOemCodePageTag
NtAcceptConnectPort
NtAccessCheck
NtAccessCheckAndAuditAlarm
NtAccessCheckByType
NtAccessCheckByTypeAndAuditAlarm
NtAccessCheckByTypeResultList
NtAccessCheckByTypeResultListAndAuditAlarm
NtAccessCheckByTypeResultListAndAuditAlarmByHandle
NtAddAtom
NtAddBootEntry
NtAdjustGroupsToken
NtAdjustPrivilegesToken
NtAlertResumeThread
NtAlertThread
NtAllocateLocallyUniqueId
NtAllocateUserPhysicalPages
NtAllocateUuids
NtAllocateVirtualMemory
NtAreMappedFilesTheSame
NtAssignProcessToJobObject
NtCallbackReturn
NtCancelDeviceWakeupRequest
NtCancelIoFile
NtCancelTimer
NtClearEvent
NtClose
NtCloseObjectAuditAlarm
NtCompactKeys
NtCompareTokens
NtCompleteConnectPort
NtCompressKey
NtConnectPort
NtContinue
NtCreateDebugObject
NtCreateDirectoryObject
NtCreateEvent
NtCreateEventPair
NtCreateFile
NtCreateIoCompletion
NtCreateJobObject
NtCreateJobSet
NtCreateKey
NtCreateKeyedEvent
NtCreateMailslotFile
NtCreateMutant
NtCreateNamedPipeFile
NtCreatePagingFile
NtCreatePort
NtCreateProcess
NtCreateProcessEx
NtCreateProfile
NtCreateSection
NtCreateSemaphore
NtCreateSymbolicLinkObject
NtCreateThread
NtCreateTimer
NtCreateToken
NtCreateWaitablePort
NtCurrentTeb
NtDebugActiveProcess
NtDebugContinue
NtDelayExecution
NtDeleteAtom
NtDeleteBootEntry
NtDeleteFile
NtDeleteKey
NtDeleteObjectAuditAlarm
NtDeleteValueKey
NtDeviceIoControlFile
NtDisplayString
NtDuplicateObject
NtDuplicateToken
NtEnumerateBootEntries
NtEnumerateKey
NtEnumerateSystemEnvironmentValuesEx
NtEnumerateValueKey
NtExtendSection
NtFilterToken
NtFindAtom
NtFlushBuffersFile
NtFlushInstructionCache
NtFlushKey
NtFlushVirtualMemory
NtFlushWriteBuffer
NtFreeUserPhysicalPages
NtFreeVirtualMemory
NtFsControlFile
NtGetContextThread
NtGetDevicePowerState
NtGetPlugPlayEvent
NtGetWriteWatch
NtImpersonateAnonymousToken
NtImpersonateClientOfPort
NtImpersonateThread
NtInitializeRegistry
NtInitiatePowerAction
NtIsProcessInJob
NtIsSystemResumeAutomatic
NtListenPort
NtLoadDriver
NtLoadKey
NtLoadKey2
NtLockFile
NtLockProductActivationKeys
NtLockRegistryKey
NtLockVirtualMemory
NtMakePermanentObject
NtMakeTemporaryObject
NtMapUserPhysicalPages
NtMapUserPhysicalPagesScatter
NtMapViewOfSection
NtModifyBootEntry
NtNotifyChangeDirectoryFile
NtNotifyChangeKey
NtNotifyChangeMultipleKeys
NtOpenDirectoryObject
NtOpenEvent
NtOpenEventPair
NtOpenFile
NtOpenIoCompletion
NtOpenJobObject
NtOpenKey
NtOpenKeyedEvent
NtOpenMutant
NtOpenObjectAuditAlarm
NtOpenProcess
NtOpenProcessToken
NtOpenProcessTokenEx
NtOpenSection
NtOpenSemaphore
NtOpenSymbolicLinkObject
NtOpenThread
NtOpenThreadToken
NtOpenThreadTokenEx
NtOpenTimer
NtPlugPlayControl
NtPowerInformation
NtPrivilegeCheck
NtPrivilegeObjectAuditAlarm
NtPrivilegedServiceAuditAlarm
NtProtectVirtualMemory
NtPulseEvent
NtQueryAttributesFile
NtQueryBootEntryOrder
NtQueryBootOptions
NtQueryDebugFilterState
NtQueryDefaultLocale
NtQueryDefaultUILanguage
NtQueryDirectoryFile
NtQueryDirectoryObject
NtQueryEaFile
NtQueryEvent
NtQueryFullAttributesFile
NtQueryInformationAtom
NtQueryInformationFile
NtQueryInformationJobObject
NtQueryInformationPort
NtQueryInformationProcess
NtQueryInformationThread
NtQueryInformationToken
NtQueryInstallUILanguage
NtQueryIntervalProfile
NtQueryIoCompletion
NtQueryKey
NtQueryMultipleValueKey
NtQueryMutant
NtQueryObject
NtQueryOpenSubKeys
NtQueryPerformanceCounter
NtQueryPortInformationProcess
NtQueryQuotaInformationFile
NtQuerySection
NtQuerySecurityObject
NtQuerySemaphore
NtQuerySymbolicLinkObject
NtQuerySystemEnvironmentValue
NtQuerySystemEnvironmentValueEx
NtQuerySystemInformation
NtQuerySystemTime
NtQueryTimer
NtQueryTimerResolution
NtQueryValueKey
NtQueryVirtualMemory
NtQueryVolumeInformationFile
NtQueueApcThread
NtRaiseException
NtRaiseHardError
NtReadFile
NtReadFileScatter
NtReadRequestData
NtReadVirtualMemory
NtRegisterThreadTerminatePort
NtReleaseKeyedEvent
NtReleaseMutant
NtReleaseSemaphore
NtRemoveIoCompletion
NtRemoveProcessDebug
NtRenameKey
NtReplaceKey
NtReplyPort
NtReplyWaitReceivePort
NtReplyWaitReceivePortEx
NtReplyWaitReplyPort
NtRequestDeviceWakeup
NtRequestPort
NtRequestWaitReplyPort
NtRequestWakeupLatency
NtResetEvent
NtResetWriteWatch
NtRestoreKey
NtResumeProcess
NtResumeThread
NtSaveKey
NtSaveKeyEx
NtSaveMergedKeys
NtSecureConnectPort
NtSetBootEntryOrder
NtSetBootOptions
NtSetContextThread
NtSetDebugFilterState
NtSetDefaultHardErrorPort
NtSetDefaultLocale
NtSetDefaultUILanguage
NtSetEaFile
NtSetEvent
NtSetEventBoostPriority
NtSetHighEventPair
NtSetHighWaitLowEventPair
NtSetInformationDebugObject
NtSetInformationFile
NtSetInformationJobObject
NtSetInformationKey
NtSetInformationObject
NtSetInformationProcess
NtSetInformationThread
NtSetInformationToken
NtSetIntervalProfile
NtSetIoCompletion
NtSetLdtEntries
NtSetLowEventPair
NtSetLowWaitHighEventPair
NtSetQuotaInformationFile
NtSetSecurityObject
NtSetSystemEnvironmentValue
NtSetSystemEnvironmentValueEx
NtSetSystemInformation
NtSetSystemPowerState
NtSetSystemTime
NtSetThreadExecutionState
NtSetTimer
NtSetTimerResolution
NtSetUuidSeed
NtSetValueKey
NtSetVolumeInformationFile
NtShutdownSystem
NtSignalAndWaitForSingleObject
NtStartProfile
NtStopProfile
NtSuspendProcess
NtSuspendThread
NtSystemDebugControl
NtTerminateJobObject
NtTerminateProcess
NtTerminateThread
NtTestAlert
NtTraceEvent
NtTranslateFilePath
NtUnloadDriver
NtUnloadKey
NtUnloadKeyEx
NtUnlockFile
NtUnlockVirtualMemory
NtUnmapViewOfSection
NtVdmControl
NtWaitForDebugEvent
NtWaitForKeyedEvent
NtWaitForMultipleObjects
NtWaitForSingleObject
NtWaitHighEventPair
NtWaitLowEventPair
NtWriteFile
NtWriteFileGather
NtWriteRequestData
NtWriteVirtualMemory
NtYieldExecution
PfxFindPrefix
PfxInitialize
PfxInsertPrefix
PfxRemovePrefix
PropertyLengthAsVariant
RtlAbortRXact
RtlAbsoluteToSelfRelativeSD
RtlAcquirePebLock
RtlAcquireResourceExclusive
RtlAcquireResourceShared
RtlActivateActivationContext
RtlActivateActivationContextEx
RtlActivateActivationContextUnsafeFast
RtlAddAccessAllowedAce
RtlAddAccessAllowedAceEx
RtlAddAccessAllowedObjectAce
RtlAddAccessDeniedAce
RtlAddAccessDeniedAceEx
RtlAddAccessDeniedObjectAce
RtlAddAce
RtlAddActionToRXact
RtlAddAtomToAtomTable
RtlAddAttributeActionToRXact
RtlAddAuditAccessAce
RtlAddAuditAccessAceEx
RtlAddAuditAccessObjectAce
RtlAddCompoundAce
RtlAddRange
RtlAddRefActivationContext
RtlAddRefMemoryStream
RtlAddVectoredExceptionHandler
RtlAddressInSectionTable
RtlAdjustPrivilege
RtlAllocateAndInitializeSid
RtlAllocateHandle
RtlAllocateHeap
RtlAnsiCharToUnicodeChar
RtlAnsiStringToUnicodeSize
RtlAnsiStringToUnicodeString
RtlAppendAsciizToString
RtlAppendPathElement
RtlAppendStringToString
RtlAppendUnicodeStringToString
RtlAppendUnicodeToString
RtlApplicationVerifierStop
RtlApplyRXact
RtlApplyRXactNoFlush
RtlAreAllAccessesGranted
RtlAreAnyAccessesGranted
RtlAreBitsClear
RtlAreBitsSet
RtlAssert
RtlAssert2
RtlCancelTimer
RtlCaptureContext
RtlCaptureStackBackTrace
RtlCaptureStackContext
RtlCharToInteger
RtlCheckForOrphanedCriticalSections
RtlCheckProcessParameters
RtlCheckRegistryKey
RtlClearAllBits
RtlClearBits
RtlCloneMemoryStream
RtlCommitMemoryStream
RtlCompactHeap
RtlCompareMemory
RtlCompareMemoryUlong
RtlCompareString
RtlCompareUnicodeString
RtlCompressBuffer
RtlComputeCrc32
RtlComputeImportTableHash
RtlComputePrivatizedDllName_U
RtlConsoleMultiByteToUnicodeN
RtlConvertExclusiveToShared
RtlConvertLongToLargeInteger
RtlConvertPropertyToVariant
RtlConvertSharedToExclusive
RtlConvertSidToUnicodeString
RtlConvertToAutoInheritSecurityObject
RtlConvertUiListToApiList
RtlConvertUlongToLargeInteger
RtlConvertVariantToProperty
RtlCopyLuid
RtlCopyLuidAndAttributesArray
RtlCopyMemoryStreamTo
RtlCopyOutOfProcessMemoryStreamTo
RtlCopyRangeList
RtlCopySecurityDescriptor
RtlCopySid
RtlCopySidAndAttributesArray
RtlCopyString
RtlCopyUnicodeString
RtlCreateAcl
RtlCreateActivationContext
RtlCreateAndSetSD
RtlCreateAtomTable
RtlCreateBootStatusDataFile
RtlCreateEnvironment
RtlCreateHeap
RtlCreateProcessParameters
RtlCreateQueryDebugBuffer
RtlCreateRegistryKey
RtlCreateSecurityDescriptor
RtlCreateSystemVolumeInformationFolder
RtlCreateTagHeap
RtlCreateTimer
RtlCreateTimerQueue
RtlCreateUnicodeString
RtlCreateUnicodeStringFromAsciiz
RtlCreateUserProcess
RtlCreateUserSecurityObject
RtlCreateUserThread
RtlCustomCPToUnicodeN
RtlCutoverTimeToSystemTime
RtlDeNormalizeProcessParams
RtlDeactivateActivationContext
RtlDeactivateActivationContextUnsafeFast
RtlDebugPrintTimes
RtlDecodePointer
RtlDecodeSystemPointer
RtlDecompressBuffer
RtlDecompressFragment
RtlDefaultNpAcl
RtlDelete
RtlDeleteAce
RtlDeleteAtomFromAtomTable
RtlDeleteCriticalSection
RtlDeleteElementGenericTable
RtlDeleteElementGenericTableAvl
RtlDeleteNoSplay
RtlDeleteOwnersRanges
RtlDeleteRange
RtlDeleteRegistryValue
RtlDeleteResource
RtlDeleteSecurityObject

Sections

.text
Size: 488KB - Virtual size: 487KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 176KB - Virtual size: 175KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/NTDOS.SY_
.cab
I386/NTDOS404.SY_
.cab
I386/NTDOS411.SY_
.cab
I386/NTDOS412.SY_
.cab
I386/NTDOS804.SY_
.cab
I386/NTDSAPI.DL_
.cab
I386/NTDSBCLI.DL_
.cab
I386/NTEVT.DL_
.cab
I386/NTEVT.MF_
.cab
I386/NTEVT.MO_
.cab
I386/NTFS.SYS
.sys windows:5 windows x86 arch:x86

ee6ed54a49092b26cc5a23b7b5258000

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

ntfs.pdb

Imports

hal

KeAcquireInStackQueuedSpinLock
ExAcquireFastMutex
KeReleaseQueuedSpinLock
KeAcquireQueuedSpinLock
KfReleaseSpinLock
ExTryToAcquireFastMutex
ExReleaseFastMutex
KeReleaseInStackQueuedSpinLock
KfAcquireSpinLock

ksecdd.sys

GenerateSessionKey
EfsGenerateKey
GenerateDirEfs
InitSecurityInterfaceW
EfsDecryptFek

ntoskrnl.exe

ExRaiseStatus
FsRtlNormalizeNtstatus
CcFlushCache
ExIsResourceAcquiredExclusiveLite
RtlInitUnicodeString
InterlockedPopEntrySList
InterlockedPushEntrySList
KeQuerySystemTime
RtlCompareMemory
FsRtlAreNamesEqual
FsRtlCheckLockForWriteAccess
FsRtlOplockIsFastIoPossible
FsRtlCheckOplock
CcSetDirtyPinnedData
MmSetAddressRangeModified
MmCanFileBeTruncated
RtlGenerate8dot3Name
RtlUpcaseUnicodeString
CcCopyWrite
CcCanIWrite
CcMdlWriteComplete
MmMapLockedPagesSpecifyCache
CcPrepareMdlWrite
IoGetTopLevelIrp
_aullshr
_allshl
IoGetStackLimits
RtlSetBits
RtlClearBits
FsRtlGetNextLargeMcbEntry
RtlAreBitsSet
RtlFindLastBackwardRunClear
RtlNumberOfClearBits
_allmul
RtlAreBitsClear
RtlFindClearBits
RtlFindClearRuns
FsRtlRemoveLargeMcbEntry
FsRtlLookupLargeMcbEntry
FsRtlAddLargeMcbEntry
KeReleaseMutant
ObfDereferenceObject
CcUninitializeCacheMap
CcSetLogHandleForFile
CcInitializeCacheMap
IoCreateStreamFileObjectLite
KeWaitForSingleObject
CcMapData
CcPinMappedData
CcPinRead
CcPreparePinWrite
CcMdlReadComplete
KeBugCheckEx
CcZeroData
FsRtlIsNtstatusExpected
DbgBreakPoint
DbgPrint
KdDebuggerEnabled
FsRtlNotifyVolumeEvent
RtlDeleteElementGenericTableAvl
IoRemoveShareAccess
FsRtlAddToTunnelCache
FsRtlFastUnlockAll
IoGetRequestorProcess
FsRtlNotifyFilterReportChange
FsRtlDeleteKeyFromTunnelCache
FsRtlNotifyCleanup
FsRtlNotifyFilterChangeDirectory
MmFlushImageSection
KeLeaveCriticalRegion
IoSetTopLevelIrp
KeEnterCriticalRegion
IofCompleteRequest
ExQueueWorkItem
IoGetCurrentProcess
FsRtlIsNameInExpression
FsRtlDoesNameContainWildCards
IoCheckEaBufferValidity
ExIsResourceAcquiredSharedLite
KeSetEvent
IoSetInformation
FsRtlOplockFsctrl
IoUpdateShareAccess
IoSetShareAccess
IoCheckShareAccess
FsRtlCurrentBatchOplock
ObReleaseObjectSecurity
ObGetObjectSecurity
SePrivilegeCheck
CcWaitForCurrentLazyWriterActivity
RtlGetOwnerSecurityDescriptor
FsRtlFindInTunnelCache
SeSinglePrivilegeCheck
KeClearEvent
FsRtlDissectName
_alloca_probe
IoCancelIrp
KeSetKernelStackSwapEnable
KeInitializeEvent
IoIsOperationSynchronous
IofCallDriver
MmUnmapLockedPages
IoBuildPartialMdl
IoFreeMdl
MmProbeAndLockPages
IoAllocateMdl
KeGetCurrentThread
RtlDecompressBuffer
RtlDecompressFragment
RtlGetCompressionWorkSpaceSize
MmBuildMdlForNonPagedPool
IoFreeIrp
ExReleaseResourceForThreadLite
CcUnpinDataForThread
CcSetBcbOwnerPointer
FsRtlIsTotalDeviceFailure
IoMakeAssociatedIrp
ObfReferenceObject
ExGetExclusiveWaiterCount
KeDelayExecutionThread
ObReferenceObjectByHandle
IoFileObjectType
_local_unwind2
RtlCompressBuffer
MmUnlockPages
IoBuildAsynchronousFsdRequest
RtlLookupElementGenericTableAvl
SeCaptureSubjectContext
RtlUpperString
RtlCompareString
RtlInitString
FsRtlLegalAnsiCharacterArray
NlsOemLeadByteInfo
NlsMbOemCodePageTag
SeDeleteObjectAuditAlarm
ObQueryObjectAuditingByHandle
CcPurgeCacheSection
_allrem
SeAuditHardLinkCreation
SeAuditingHardLinkEventsWithContext
IoBuildDeviceIoControlRequest
CcMdlRead
KeNumberProcessors
CcDeferWrite
ZwClose
ZwCreateFile
ProbeForRead
IoBuildSynchronousFsdRequest
IoGetRelatedDeviceObject
MmPrefetchPages
ProbeForWrite
_alldiv
RtlLengthSid
SeReleaseSubjectContext
SeUnlockSubjectContext
SeAccessCheck
SeLockSubjectContext
RtlMapGenericMask
IoGetFileObjectGenericMapping
CcSetAdditionalCacheAttributes
FsRtlBalanceReads
ObQueryNameString
wcslen
IoCreateDevice
FsRtlIncrementCcFastReadResourceMiss
FsRtlIncrementCcFastReadNotPossible
CcFastCopyRead
FsRtlIncrementCcFastReadNoWait
FsRtlIncrementCcFastReadWait
CcFastCopyWrite
CcFastMdlReadWait
FsRtlUninitializeLargeMcb
FsRtlInitializeLargeMcb
FsRtlPrivateLock
FsRtlFastUnlockSingle
FsRtlFastUnlockAllByKey
FsRtlProcessFileLock
ExDeleteResourceLite
ExInitializeResourceLite
KeInitializeSpinLock
FsRtlResetLargeMcb
KeSetTimer
ExAcquireSharedStarveExclusive
CcGetDirtyPages
KeSetPriorityThread
FsRtlLookupLastLargeMcbEntry
FsRtlNumberOfRunsInLargeMcb
FsRtlSplitLargeMcb
FsRtlTruncateLargeMcb
CcRemapBcb
RtlFreeOemString
RtlUnicodeStringToCountedOemString
FsRtlIsFatDbcsLegal
FsRtlFastCheckLockForWrite
FsRtlFastCheckLockForRead
IoRaiseInformationalHardError
RtlAppendUnicodeStringToString
RtlCopyUnicodeString
IoVolumeDeviceToDosName
IoReleaseCancelSpinLock
IoAcquireCancelSpinLock
CcMdlWriteAbort
IoIsSystemThread
RtlLengthSecurityDescriptor
SeAssignSecurity
RtlSetDaclSecurityDescriptor
RtlCreateSecurityDescriptor
RtlAddAccessAllowedAce
RtlCreateAcl
RtlSubAuthoritySid
RtlInitializeSid
RtlLengthRequiredSid
ExInitializePagedLookasideList
ExInitializeNPagedLookasideList
MmIsThisAnNtAsSystem
MmQuerySystemSize
ZwQueryValueKey
ZwOpenKey
RtlVerifyVersionInfo
VerSetConditionMask
IoRegisterDriverReinitialization
KeInitializeDpc
KeInitializeTimer
IoRegisterFileSystem
KeBugCheck
KeInitializeMutant
FsRtlMdlWriteCompleteDev
FsRtlMdlReadCompleteDev
ExUuidCreate
RtlDelete
RtlSplay
RtlValidSid
RtlInsertElementGenericTableFullAvl
RtlLookupElementGenericTableFullAvl
SeQueryInformationToken
RtlEqualSid
SeExports
IoCheckQuotaBufferValidity
RtlInitializeGenericTableAvl
CcSetReadAheadGranularity
FsRtlCheckLockForReadAccess
ExAcquireSharedWaitForExclusive
FsRtlPostStackOverflow
FsRtlPostPagingFileStackOverflow
IoReleaseVpbSpinLock
IoAcquireVpbSpinLock
SeValidSecurityDescriptor
SeFreePrivileges
SeDeassignSecurity
SeSetSecurityDescriptorInfo
SeQuerySecurityDescriptorInfo
SeOpenObjectAuditAlarm
SeOpenObjectForDeleteAuditAlarm
SeAppendPrivileges
SeAuditingFileEventsWithContext
RtlEnumerateGenericTableWithoutSplayingAvl
FsRtlFreeFileLock
FsRtlAllocateFileLock
ExReinitializeResourceLite
FsRtlNotifyInitializeSync
FsRtlInitializeTunnelCache
RtlInsertElementGenericTableAvl
FsRtlUninitializeOplock
FsRtlInitializeOplock
FsRtlTeardownPerStreamContexts
IoDeleteDevice
FsRtlDeleteTunnelCache
FsRtlNotifyUninitializeSync
RtlEnumerateGenericTableAvl
IoWriteErrorLogEntry
IoAllocateErrorLogEntry
IoSetDeviceToVerify
KeTickCount
_abnormal_termination
_except_handler3
RtlFindNextForwardRunClear
ExAcquireFastMutexUnsafe
ExAllocatePoolWithTag
RtlInitializeBitMap
ExFreePoolWithTag
memmove
ExReleaseFastMutexUnsafe
ExReleaseResourceLite
_allshr
ExAcquireResourceSharedLite
ExAcquireResourceExclusiveLite
CcUnpinData
CcCopyRead
CcSetFileSizes
RtlFillMemoryUlong
IoPageRead
IoFreeErrorLogEntry
IoSynchronousPageWrite
ExDeletePagedLookasideList
ExDeleteNPagedLookasideList
IoGetDeviceObjectPointer
KeUnstackDetachProcess
KeStackAttachProcess
PsLookupProcessByProcessId
ZwWaitForSingleObject
PsCreateSystemThread
ZwCreateEvent
PoQueueShutdownWorkItem
ZwFreeVirtualMemory
PsRevertToSelf
PsDereferenceImpersonationToken
PsImpersonateClient
PsReferenceImpersonationToken
ZwAllocateVirtualMemory
ObReferenceObjectByPointer

Sections

.text
Size: 94KB - Virtual size: 94KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 28KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

PAGE
Size: 402KB - Virtual size: 402KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

INIT
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 992B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/NTGRIP.IN_
.cab
I386/NTHELP.CH_
.cab
I386/NTIMAGE.GI_
.cab
I386/NTIO.SY_
.cab
I386/NTIO404.SY_
.cab
I386/NTIO411.SY_
.cab
I386/NTIO412.SY_
.cab
I386/NTIO804.SY_
.cab
I386/NTKRNLMP.EX_
.cab
I386/NTLANMAN.DL_
.cab
I386/NTLANUI.DL_
.cab
I386/NTLANUI2.DL_
.cab
I386/NTLDR
I386/NTLSAPI.DL_
.cab
I386/NTMARTA.DL_
.cab
I386/NTMSAPI.DL_
.cab
I386/NTMSDBA.DL_
.cab
I386/NTMSEVT.DL_
.cab
I386/NTMSMGR.DL_
.cab
I386/NTMSMGR.MS_
.cab
I386/NTMSOPRQ.MS_
.cab
I386/NTMSSVC.DL_
.cab
I386/NTMTLFAX.SY_
.cab
I386/NTOC.DL_
.cab
I386/NTOSKRNL.EX_
.cab
I386/NTPRINT.CAT
I386/NTPRINT.DL_
.cab
I386/NTPRINT.INF
I386/NTSD.EXE
.exe windows:5 windows x86 arch:x86

99f0922107666544b27935aad2ad1f42

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

ntsd.pdb

Imports

msvcrt

exit
_cexit
_XcptFilter
__initenv
_c_exit
_stricmp
atoi
__getmainargs
_exit
_initterm
__setusermatherr
strrchr
sscanf
_strnicmp
strtoul
rewind
calloc
fgetc
tolower
_strcmpi
getenv
printf
isspace
fopen
_snprintf
strncpy
_iob
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
fgets
fclose
sprintf
_spawnlp
_vsnprintf

kernel32

FormatMessageA
LocalAlloc
FreeLibrary
InterlockedExchange
GetModuleFileNameA
CreateEventA
GetModuleHandleA
SetPriorityClass
GetCurrentThread
GetCommandLineA
GetEnvironmentVariableA
SetConsoleCtrlHandler
GetCurrentProcess
DuplicateHandle
GetStdHandle
GetPriorityClass
CreateProcessA
SetStdHandle
SetLastError
GetVersionExA
LoadLibraryA
GetProcAddress
InitializeCriticalSection
RaiseException
CreateNamedPipeA
CreateFileA
GetLastError
AllocConsole
OutputDebugStringA
WriteFile
ExitProcess
InterlockedDecrement
ReadFile
GetCurrentProcessId
SetEvent
Sleep
LeaveCriticalSection
InterlockedIncrement
EnterCriticalSection
WaitForSingleObject
CloseHandle
SetThreadPriority
CreateThread

dbgeng

DebugCreate
DebugConnect

advapi32

RegCloseKey
RegOpenKeyExA
RegQueryValueExA

Sections

.text
Size: 27KB - Virtual size: 26KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
I386/NTSDEXTS.DLL
.dll windows:5 windows x86 arch:x86

12a2a6e68d876a728b1721cfb6937efb

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

msvcrt

free
malloc
isprint
sprintf
sscanf
mbstowcs
_wcsicmp
wcscmp

ntdll

NtQuerySystemInformation
NtOpenThreadToken
NtOpenProcessToken
RtlTimeToElapsedTimeFields
RtlConvertSidToUnicodeString
NtQueryIoCompletion
NtQueryKey
NtQuerySection
NtQueryTimer
NtQueryMutant
NtQuerySemaphore
NtQueryEvent
RtlCreateUnicodeStringFromAsciiz
RtlFreeUnicodeString
NtQueryInformationToken
NtQueryInformationThread
NtQueryInformationProcess
NtDuplicateObject
NtQueryObject
NtClose
RtlFreeHeap
RtlAllocateHeap
NtQueryInformationAtom
RtlNtStatusToDosError

kernel32

LocalAlloc
LocalFree
GetVersionExA
GetLastError
GetModuleHandleA
FormatMessageA
FileTimeToLocalFileTime
FileTimeToSystemTime
lstrcmpiA
lstrcmpA
ExpandEnvironmentStringsA
lstrlenA
GetSystemTimeAsFileTime
VirtualQueryEx
GetCurrentProcess
DuplicateHandle
GetProcAddress
LoadLibraryA

advapi32

RegQueryValueExA
RegOpenKeyExA
LookupAccountSidW
RegEnumKeyExA
RegEnumValueA
RegQueryInfoKeyA
RegCloseKey

Exports

Exports

DebugExtensionInitialize
critsec
dp
dreg
dt
error
gatom
gle
handle
help
hleak
htrace
locks
runaway
threadtoken
version
vprot

Sections

.text
Size: 30KB - Virtual size: 29KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/NTSHARED.CH_
.cab
I386/NTSHRUI.DL_
.cab
I386/NTSHRUI.HL_
.cab
I386/NTVDM.EX_
.cab
I386/NTVDMD.DL_
.cab
I386/NULL.SY_
.cab
I386/NUSKIN.WM_
.cab
I386/NUSRMGR.CP_
.cab
I386/NUSRMGRW.CH_
.cab
I386/NV3.IN_
.cab
I386/NV4.IN_
.cab
I386/NV4_DISP.IN_
.cab
I386/NVCT.IN_
.cab
I386/NVDM.IN_
.cab
I386/NVTS.IN_
.cab
I386/NW16.EX_
.cab
I386/NWAPI16.DL_
.cab
I386/NWAPI32.DL_
.cab
I386/NWC.CP_
.cab
I386/NWCFG.DL_
.cab
I386/NWDOC.HL_
.cab
I386/NWDOCW.CH_
.cab
I386/NWEVENT.DL_
.cab
I386/NWLNKFLT.SY_
.cab
I386/NWLNKFWD.SY_
.cab
I386/NWLNKIPX.SY_
.cab
I386/NWLNKNB.SY_
.cab
I386/NWLNKSPX.SY_
.cab
I386/NWPROVAU.DL_
.cab
I386/NWRDR.SY_
.cab
I386/NWSCRIPT.EX_
.cab
I386/NWWKS.DL_
.cab
I386/OAKLEY.DL_
.cab
I386/OBEIP.DU_
.cab
I386/OBELOG.DL_
.cab
I386/OBEMETAL.DL_
.cab
I386/OBEMTLLC.DL_
.cab
I386/OBEPOPC.DL_
.cab
I386/OBJSEL.DL_
.cab
I386/OBJSEL.HL_
.cab
I386/OBRB0401.DL_
.cab
I386/OBRB0404.DL_
.cab
I386/OBRB0405.DL_
.cab
I386/OBRB0406.DL_
.cab
I386/OBRB0407.DL_
.cab
I386/OBRB0408.DL_
.cab
I386/OBRB040B.DL_
.cab
I386/OBRB040C.DL_
.cab
I386/OBRB040D.DL_
.cab
I386/OBRB040E.DL_
.cab
I386/OBRB0410.DL_
.cab
I386/OBRB0411.DL_
.cab
I386/OBRB0412.DL_
.cab
I386/OBRB0413.DL_
.cab
I386/OBRB0414.DL_
.cab
I386/OBRB0415.DL_
.cab
I386/OBRB0416.DL_
.cab
I386/OBRB0419.DL_
.cab
I386/OBRB041B.DL_
.cab
I386/OBRB041D.DL_
.cab
I386/OBRB041F.DL_
.cab
I386/OBRB0424.DL_
.cab
I386/OBRB0804.DL_
.cab
I386/OBRB0816.DL_
.cab
I386/OBRB0C0A.DL_
.cab
I386/OCCACHE.DL_
.cab
I386/OCGEN.DL_
.cab
I386/OCMANAGE.DL_
.cab
I386/OCMSN.DL_
.cab
I386/ODBC16GT.DL_
.cab
I386/ODBC32.DL_
.cab
I386/ODBC32GT.DL_
.cab
I386/ODBCAD32.EX_
.cab
I386/ODBCBCP.DL_
.cab
I386/ODBCCONF.DL_
.cab
I386/ODBCCONF.EX_
.cab
I386/ODBCCONF.RS_
.cab
I386/ODBCCP32.CP_
.cab
I386/ODBCCP32.DL_
.cab
I386/ODBCCR32.DL_
.cab
I386/ODBCCU32.DL_
.cab
I386/ODBCINST.CH_
.cab
I386/ODBCINT.DL_
.cab
I386/ODBCJET.CH_
.cab
I386/ODBCJI32.DL_
.cab
I386/ODBCJT32.DL_
.cab
I386/ODBCP32R.DL_
.cab
I386/ODBCTRAC.DL_
.cab
I386/ODDBSE32.DL_
.cab
I386/ODEXL32.DL_
.cab
I386/ODFOX32.DL_
.cab
I386/ODPDX32.DL_
.cab
I386/ODTEXT32.DL_
.cab
I386/OEACCESS.IN_
.cab
I386/OEIMPORT.DL_
.cab
I386/OEMBIOS.BI_
.cab
I386/OEMBIOS.CA_
.cab
I386/OEMBIOS.DA_
.cab
I386/OEMBIOS.SI_
.cab
I386/OEMCOA.JP_
.cab
I386/OEMIG50.EX_
.cab
I386/OEMIGLIB.DL_
.cab
I386/OEMLOGO.GI_
.cab
I386/OEMPRIV.HT_
.cab
I386/OE_MSGR.CH_
.cab
I386/OFFFILT.DL_
.cab
I386/OFFLFDRW.CH_
.cab
I386/OHCI1394.SY_
.cab
I386/OLE2.DL_
.cab
I386/OLE2DISP.DL_
.cab
I386/OLE2NLS.DL_
.cab
I386/OLE32.DL_
.cab
I386/OLEACC.DL_
.cab
I386/OLEACCRC.DL_
.cab
I386/OLEAUT32.DL_
.cab
I386/OLECLI.DL_
.cab
I386/OLECLI32.DL_
.cab
I386/OLECNV32.DL_
.cab
I386/OLEDB32.DL_
.cab
I386/OLEDB32R.DL_
.cab
I386/OLEDBJVS.IN_
.cab
I386/OLEDBVBS.IN_
.cab
I386/OLEDLG.DL_
.cab
I386/OLEPRN.DL_
.cab
I386/OLEPRO32.DL_
.cab
I386/OLESVR.DL_
.cab
I386/OLESVR32.DL_
.cab
I386/OLETHK32.DL_
.cab
I386/OMC.CH_
.cab
I386/ONESTOP.MI_
.cab
I386/ONEX.DL_
.cab
I386/ONEX_V1.XS_
.cab
I386/ONLINE.WA_
.cab
I386/OOBE.IN_
.cab
I386/OOBEBALN.EX_
.cab
I386/OOBEDISC.HT_
.cab
I386/OOBEDKN.HT_
.cab
I386/OOBEDN.HT_
.cab
I386/OOBEINFO.IN_
.cab
I386/OOBESTYL.CS_
.cab
I386/OOBEUTIL.JS_
.cab
I386/OPENGL32.DL_
.cab
I386/OPNFILES.EX_
.cab
I386/OPRGHDLR.SY_
.cab
I386/OPTIK.WM_
.cab
I386/OPTIONAL.IN_
.cab
I386/OSC.CAB
.cab
I386/OSCCAB.CA_
.cab
I386/OSCHOICE.EX_
.cab
I386/OSINFO.XM_
.cab
I386/OSK.CH_
.cab
I386/OSK.EX_
.cab
I386/OSK.HL_
.cab
I386/OSLOADER.EX_
.cab
I386/OSLOADER.NT_
.cab
I386/OSUNINST.DL_
.cab
I386/OSUNINST.EX_
.cab
I386/OVCAM.IN_
.cab
I386/OVCOMP.IN_
.cab
I386/OVSOUND.IN_
.cab
I386/P2P.DL_
.cab
I386/P2P.IN_
.cab
I386/P2PGASVC.DL_
.cab
I386/P2PGRAPH.DL_
.cab
I386/P2PNETSH.DL_
.cab
I386/P2PSVC.DL_
.cab
I386/PACKAGER.CH_
.cab
I386/PACKAGER.EX_
.cab
I386/PAD.IN_
.cab
I386/PAGE1.AS_
.cab
I386/PAGECNT.DL_
.cab
I386/PAGEFILE.VB_
.cab
I386/PAINT.PN_
.cab
I386/PALA.TT_
.cab
I386/PALAB.TT_
.cab
I386/PALABI.TT_
.cab
I386/PALAI.TT_
.cab
I386/PALMTREE.BM_
.cab
I386/PANMAP.DL_
.cab
I386/PARHMSE.IN_
.cab
I386/PARIS.JP_
.cab
I386/PARISM.JP_
.cab
I386/PARTMGR.SY_
.cab
I386/PARVDM.SY_
.cab
I386/PASSWRDW.CH_
.cab
I386/PATHPING.EX_
.cab
I386/PAUTOENR.DL_
.cab
I386/PBERR.HT_
.cab
I386/PCHDT_W3.CA_
.cab
I386/PCHEALTH.IN_
.cab
I386/PCHSHELL.DL_
.cab
I386/PCHSVC.DL_
.cab
I386/PCI.SY_
.cab
I386/PCIIDE.SY_
.cab
I386/PCIIDEX.SY_
.cab
I386/PCL.SE_
.cab
I386/PCMCIA.IN_
.cab
I386/PCMCIA.SY_
.cab
I386/PCNFGMIN.H_
.cab
I386/PCNFGMIN.IN_
.cab
I386/PDH.DL_
.cab
I386/PEACE.JP_
.cab
I386/PEER.EX_
.cab
I386/PENTNT.EX_
.cab
I386/PEN_I.CU_
.cab
I386/PEN_IL.CU_
.cab
I386/PEN_IM.CU_
.cab
I386/PEN_L.CU_
.cab
I386/PEN_M.CU_
.cab
I386/PEN_R.CU_
.cab
I386/PEN_RL.CU_
.cab
I386/PEN_RM.CU_
.cab
I386/PER124_R.IC_
.cab
I386/PER124_T.IC_
.cab
I386/PER164_R.IC_
.cab
I386/PER164_T.IC_
.cab
I386/PER640_R.IC_
.cab
I386/PERC2.SY_
.cab
I386/PERC2HIB.SY_
.cab
I386/PERFC009.DA_
.cab
I386/PERFCI.H_
.cab
I386/PERFCI.IN_
.cab
I386/PERFCTRS.DL_
.cab
I386/PERFD009.DA_
.cab
I386/PERFDISK.DL_
.cab
I386/PERFFILT.H_
.cab
I386/PERFFILT.IN_
.cab
I386/PERFH009.DA_
.cab
I386/PERFI009.DA_
.cab
I386/PERFMON.EX_
.cab
I386/PERFMON.MS_
.cab
I386/PERFNET.DL_
.cab
I386/PERFNW.DL_
.cab
I386/PERFOS.DL_
.cab
I386/PERFPROC.DL_
.cab
I386/PERFTS.DL_
.cab
I386/PERFWCI.H_
.cab
I386/PERFWCI.IN_
.cab
I386/PERM2.IN_
.cab
I386/PERM3.IN_
.cab
I386/PERMCHK.DL_
.cab
I386/PERSONAL.WM_
.cab
I386/PHDSEXT.IN_
.cab
I386/PHIL1VID.IN_
.cab
I386/PHIL2VID.IN_
.cab
I386/PHILDEC.IN_
.cab
I386/PHILTUNE.IN_
.cab
I386/PHONE.IC_
.cab
I386/PHONE.IN_
.cab
I386/PHONE.OB_
.cab
I386/PHONE.VE_
.cab
I386/PHOTOWIZ.DL_
.cab
I386/PHOWTO.CH_
.cab
I386/PIANO.AN_
.cab
I386/PID.INF
I386/PIDGEN.DLL
.dll windows:5 windows x86 arch:x86

219d5021d55cd9f37888e5d345300c85

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_REMOVABLE_RUN_FROM_SWAP
IMAGE_FILE_NET_RUN_FROM_SWAP
IMAGE_FILE_DLL

PDB Paths

vpidgen.pdb

Imports

msvcrt

_adjust_fdiv
malloc
_initterm
free
wcscmp
??3@YAXPAX@Z

kernel32

GetProcessHeap
HeapAlloc
lstrlenA
lstrcpyA
GlobalMemoryStatus
QueryPerformanceCounter
SystemTimeToFileTime
GetLocalTime
GetTickCount
FreeResource
LockResource
LoadResource
FindResourceA
SetLastError
MultiByteToWideChar
WideCharToMultiByte
GetVolumeInformationA
CloseHandle
DeviceIoControl
CreateFileA
lstrcmpA
QueryDosDeviceA
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
HeapFree

user32

CharNextA
wsprintfA

advapi32

RegOpenKeyW
RegQueryValueExW
RegOpenKeyExA
RegQueryValueExA
RegCloseKey

Exports

Exports

PIDGenA
PIDGenSimpA
PIDGenSimpW
PIDGenW
SetupPIDGenA
SetupPIDGenW
VerifyPIDSequenceW

Sections

.text
Size: 19KB - Virtual size: 19KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 412B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 508B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/PIECHTBG.JP_
.cab
I386/PIECHTS.HT_
.cab
I386/PIFMGR.DL_
.cab
I386/PINBALL.CH_
.cab
I386/PINBALL.DA_
.cab
I386/PINBALL.EX_
.cab
I386/PINBALL.HL_
.cab
I386/PINBALL.IN_
.cab
I386/PINBALL.MI_
.cab
I386/PINBALL2.MI_
.cab
I386/PING.EX_
.cab
I386/PING6.EX_
.cab
I386/PISA.JP_
.cab
I386/PISAM.JP_
.cab
I386/PLUGIN.OC_
.cab
I386/PLUSTAB.DL_
.cab
I386/PLYLST1.WP_
.cab
I386/PLYLST10.WP_
.cab
I386/PLYLST11.WP_
.cab
I386/PLYLST12.WP_
.cab
I386/PLYLST13.WP_
.cab
I386/PLYLST14.WP_
.cab
I386/PLYLST15.WP_
.cab
I386/PLYLST2.WP_
.cab
I386/PLYLST3.WP_
.cab
I386/PLYLST4.WP_
.cab
I386/PLYLST5.WP_
.cab
I386/PLYLST6.WP_
.cab
I386/PLYLST7.WP_
.cab
I386/PLYLST8.WP_
.cab
I386/PLYLST9.WP_
.cab
I386/PLYR_ERR.CH_
.cab
I386/PMH.DL_
.cab
I386/PMSPL.DL_
.cab
I386/PMXGL.DL_
.cab
I386/PMXMCRO.DL_
.cab
I386/PMXMCRO.IN_
.cab
I386/PMXVICEO.DL_
.cab
I386/PNGFILT.DL_
.cab
I386/PNKFLOWR.BM_
.cab
I386/PNPSCSI.IN_
.cab
I386/PNRPNSP.DL_
.cab
I386/POLICMAN.DL_
.cab
I386/POLICMAN.MF_
.cab
I386/POLICMAN.MO_
.cab
I386/POLSTORE.DL_
.cab
I386/PORTMON.EX_
.cab
I386/POTSCFG.XM_
.cab
I386/POWER.JP_
.cab
I386/POWERCFG.CP_
.cab
I386/POWERCFG.EX_
.cab
I386/POWERPNT.PP_
.cab
I386/POWRPROF.DL_
.cab
I386/PPA.IN_
.cab
I386/PPA3.IN_
.cab
I386/PPPCFG.XM_
.cab
I386/PPPMENU.SC_
.cab
I386/PRAGUE.JP_
.cab
I386/PRAGUEM.JP_
.cab
I386/PRAIRIE.BM_
.cab
I386/PRC.NL_
.cab
I386/PRCP.NL_
.cab
I386/PRESENTA.SH_
.cab
I386/PRFLBMSG.DL_
.cab
I386/PRINT.EX_
.cab
I386/PRINTFND.CH_
.cab
I386/PRINTUI.DL_
.cab
I386/PRINTUPG.IN_
.cab
I386/PRINTW.CH_
.cab
I386/PRIVACY.HT_
.cab
I386/PRNCNFG.VB_
.cab
I386/PRNDRVR.VB_
.cab
I386/PRNJOBS.VB_
.cab
I386/PRNMNGR.VB_
.cab
I386/PRNPORT.VB_
.cab
I386/PRNQCTL.VB_
.cab
I386/PRO.WM_
.cab
I386/PROCTEXE.OC_
.cab
I386/PRODKEY.GI_
.cab
I386/PRODKEY.HT_
.cab
I386/PRODSPEC.INI
I386/PROFMAP.DL_
.cab
I386/PROGMAN.CN_
.cab
I386/PROGMAN.EX_
.cab
I386/PROGMAN.HL_
.cab
I386/PROGRESS.GI_
.cab
I386/PROQUOTA.EX_
.cab
I386/PROTOCOL._
.cab
I386/PROVTHRD.DL_
.cab
I386/PROXYCFG.EX_
.cab
I386/PRO_INTR.SW_
.cab
I386/PRO_INTR.TX_
.cab
I386/PRO_NAV.SW_
.cab
I386/PRO_NAV.TX_
.cab
I386/PRO_SEG1.SW_
.cab
I386/PRO_SEG1.TX_
.cab
I386/PRO_SEG2.SW_
.cab
I386/PRO_SEG2.TX_
.cab
I386/PRO_SEG3.SW_
.cab
I386/PRO_SEG3.TX_
.cab
I386/PRO_SEG4.SW_
.cab
I386/PRO_SEG4.TX_
.cab
I386/PRO_SEG5.SW_
.cab
I386/PRO_SEG5.TX_
.cab
I386/PRTUPG9X.IN_
.cab
I386/PRTWEBVW.CS_
.cab
I386/PRVCYMS.HT_
.cab
I386/PS5333.IN_
.cab
I386/PSAPI.DL_
.cab
I386/PSBASE.DL_
.cab
I386/PSCHDCNT.H_
.cab
I386/PSCHDPRF.DL_
.cab
I386/PSCHDPRF.IN_
.cab
I386/PSCHED.SY_
.cab
I386/PSCRIPT.SE_
.cab
I386/PSNPPAGN.DL_
.cab
I386/PSTOREC.DL_
.cab
I386/PSTORSVC.DL_
.cab
I386/PTILINK.SY_
.cab
I386/PTPUSB.IN_
.cab
I386/PUBPRN.VB_
.cab
I386/PULSE.HT_
.cab
I386/PURPLEF.JP_
.cab
I386/PWRMN.HL_
.cab
I386/PWRMNW.CH_
.cab
I386/PWSDATA.DL_
.cab
I386/PYRITE.WM_
.cab
I386/QAGENT.DL_
.cab
I386/QAGENTRT.DL_
.cab
I386/QAPPSRV.EX_
.cab
I386/QASF.DL_
.cab
I386/QCAP.DL_
.cab
I386/QCLIPROV.DL_
.cab
I386/QDV.DL_
.cab
I386/QDVD.DL_
.cab
I386/QEDIT.DL_
.cab
I386/QEDWIPES.DL_
.cab
I386/QL1080.SY_
.cab
I386/QL10WNT.SY_
.cab
I386/QL12160.SY_
.cab
I386/QL1240.SY_
.cab
I386/QL1280.SY_
.cab
I386/QMARK.AC_
.cab
I386/QMARK.GI_
.cab
I386/QMGR.DL_
.cab
I386/QMGR.IN_
.cab
I386/QMGRPRXY.DL_
.cab
I386/QOSCONW.CH_
.cab
I386/QOSNAME.DL_
.cab
I386/QPROCESS.EX_
.cab
I386/QUARTZ.DL_
.cab
I386/QUATTRO.WB_
.cab
I386/QUERY.AS_
.cab
I386/QUERY.DL_
.cab
I386/QUERY.EX_
.cab
I386/QUOTES._
.cab
I386/QUSER.EX_
.cab
I386/QUTIL.DL_
.cab
I386/QWINSTA.EX_
.cab
I386/R1033TTS.LX_
.cab
I386/RAAVI.TT_
.cab
I386/RACPLDLG.DL_
.cab
I386/RADIANCE.JP_
.cab
I386/RADIO.WM_
.cab
I386/RAIDERPD.IN_
.cab
I386/RAINBOW.AN_
.cab
I386/RAINDROP.AN_
.cab
I386/RAMDISK.IN_
.cab
I386/RAMDISK.SY_
.cab
I386/RASACD.SY_
.cab
I386/RASADHLP.DL_
.cab
I386/RASAPI32.DL_
.cab
I386/RASAUTO.DL_
.cab
I386/RASAUTOU.EX_
.cab
I386/RASCHAP.DL_
.cab
I386/RASCTRNM.H_
.cab
I386/RASCTRS.DL_
.cab
I386/RASCTRS.IN_
.cab
I386/RASDIAL.EX_
.cab
I386/RASDLG.DL_
.cab
I386/RASL2TP.SY_
.cab
I386/RASMAN.DL_
.cab
I386/RASMANS.DL_
.cab
I386/RASMONTR.DL_
.cab
I386/RASMXS.DL_
.cab
I386/RASPHONE.EX_
.cab
I386/RASPPP.DL_
.cab
I386/RASPPPOE.SY_
.cab
I386/RASPPTP.SY_
.cab
I386/RASPTI.SY_
.cab
I386/RASQEC.DL_
.cab
I386/RASRAD.DL_
.cab
I386/RASSAPI.DL_
.cab
I386/RASSER.DL_
.cab
I386/RASTAPI.DL_
.cab
I386/RASTLS.DL_
.cab
I386/RATINGS.CH_
.cab
I386/RATINGS.CN_
.cab
I386/RATINGS.HL_
.cab
I386/RAWWAN.SY_
.cab
I386/RAWXML.XS_
.cab
I386/RCBDYCTL.DL_
.cab
I386/RCIMLBY.EX_
.cab
I386/RCNTERR.HT_
.cab
I386/RCP.EX_
.cab
I386/RDBSS.SY_
.cab
I386/RDCHOST.DL_
.cab
I386/RDPCDD.SY_
.cab
I386/RDPCFGEX.DL_
.cab
I386/RDPCLIP.EX_
.cab
I386/RDPDD.DL_
.cab
I386/RDPSND.DL_
.cab
I386/RDPWD.SY_
.cab
I386/RDPWSX.DL_
.cab
I386/RDSADDIN.EX_
.cab
I386/RDSHOST.EX_
.cab
I386/RDSKTPW.CH_
.cab
I386/RDTONE.HT_
.cab
I386/READER.CH_
.cab
I386/READER.HL_
.cab
I386/RECAGENT.SY_
.cab
I386/RECOVER.EX_
.cab
I386/RECYCLE.CH_
.cab
I386/RECYCLE.WA_
.cab
I386/REDFLOWR.BM_
.cab
I386/REDIR.EX_
.cab
I386/REDMOON.JP_
.cab
I386/REDSHD.GI_
.cab
I386/REFDIAL.HT_
.cab
I386/REG.EX_
.cab
I386/REG.IS_
.cab
I386/REG1.HT_
.cab
I386/REG3.HT_
.cab
I386/REGAPI.DL_
.cab
I386/REGDIAL.HT_
.cab
I386/REGEDIT.CH_
.cab
I386/REGEDIT.EXE
.exe windows:5 windows x86 arch:x86

dccff42573edbebc16f4c14991579bbc

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

regedit.pdb

Imports

msvcrt

__p__commode
_adjust_fdiv
__p__fmode
_initterm
__getmainargs
_acmdln
__set_app_type
_except_handler3
__setusermatherr
_controlfp
exit
_XcptFilter
_exit
_c_exit
swprintf
iswprint
wcsncpy
wcslen
wcscat
wcscpy
_purecall
iswctype
wcscmp
wcschr
wcsncmp
wcsrchr
_cexit
memmove

advapi32

RegQueryValueExA
RegOpenKeyExA
InitializeSecurityDescriptor
RegDeleteValueW
InitializeAcl
SetSecurityDescriptorDacl
SetSecurityDescriptorSacl
SetSecurityDescriptorOwner
SetSecurityDescriptorGroup
GetInheritanceSourceW
LookupAccountSidW
GetSidSubAuthorityCount
GetSidSubAuthority
GetSecurityDescriptorControl
GetSecurityDescriptorOwner
GetSecurityDescriptorGroup
GetSecurityDescriptorDacl
GetSecurityDescriptorSacl
SetSecurityInfo
SetNamedSecurityInfoW
GetNamedSecurityInfoW
MapGenericMask
RegSetValueExA
RegSetValueW
RegFlushKey
RegSaveKeyW
RegRestoreKeyW
RegConnectRegistryW
RegQueryValueExW
RegCloseKey
RegOpenKeyW
RegSetValueExW
RegCreateKeyW
RegEnumValueW
RegEnumKeyW
AdjustTokenPrivileges
LookupPrivilegeValueW
OpenProcessToken
RegUnLoadKeyW
RegLoadKeyW
RegOpenKeyExW
RegQueryInfoKeyW
RegDeleteKeyW

kernel32

ReadFile
DeleteFileW
WriteFile
WideCharToMultiByte
CreateFileW
OutputDebugStringW
GetLastError
SetFilePointer
GetFileSize
SearchPathW
GetTimeFormatW
GetDateFormatW
GetSystemDefaultLCID
FileTimeToSystemTime
FileTimeToLocalFileTime
FreeLibrary
LoadLibraryW
MulDiv
lstrcpynW
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetModuleHandleA
GetStartupInfoA
MultiByteToWideChar
lstrcmpW
FormatMessageW
GetThreadLocale
GetModuleHandleW
ExitProcess
GetCommandLineW
GetProcessHeap
lstrcatW
LocalAlloc
GetCurrentProcess
CloseHandle
LocalFree
GetComputerNameW
lstrcmpiW
lstrlenW
lstrcpyW
LocalReAlloc
GlobalAlloc
GlobalLock
GlobalUnlock
GetProcAddress
LoadLibraryA

gdi32

GetStockObject
SetAbortProc
StartDocW
StartPage
SetViewportOrgEx
EndPage
EndDoc
AbortDoc
DeleteDC
CreateBitmap
CreatePatternBrush
PatBlt
ExcludeClipRect
SelectClipRgn
DeleteObject
SetBkColor
SetTextColor
ExtTextOutW
GetDeviceCaps
CreateFontIndirectW
SelectObject
GetTextMetricsW

user32

SendDlgItemMessageW
SetDlgItemTextW
SetWindowLongW
DefWindowProcW
ReleaseDC
GetDC
SetScrollInfo
wsprintfW
DestroyCaret
ReleaseCapture
KillTimer
SetCaretPos
ScrollWindowEx
ShowCaret
HideCaret
InvalidateRect
CloseClipboard
SetClipboardData
EmptyClipboard
OpenClipboard
GetClipboardData
WinHelpW
EndDialog
GetWindowLongW
EndPaint
BeginPaint
CreateCaret
SetTimer
SetCapture
SetFocus
CharLowerW
GetDlgItem
DestroyMenu
TrackPopupMenuEx
IsClipboardFormatAvailable
EnableMenuItem
GetSubMenu
LoadMenuW
GetKeyState
RegisterClassW
LoadCursorW
RegisterClipboardFormatW
CheckRadioButton
SendMessageW
GetWindowTextW
GetParent
GetDlgItemTextW
IsDlgButtonChecked
GetDlgCtrlID
CallWindowProcW
GetWindowTextLengthW
GetDlgItemInt
PostQuitMessage
GetWindowPlacement
SetWindowTextW
EnableWindow
GetWindowRect
DrawMenuBar
InsertMenuItemW
DeleteMenu
SetMenuItemInfoW
GetMenu
GetMenuItemInfoW
EndDeferWindowPos
DeferWindowPos
BeginDeferWindowPos
IsIconic
DestroyIcon
LoadImageW
GetSysColor
SetCursor
ShowCursor
ShowWindow
SetWindowPlacement
CreateWindowExW
GetProcessDefaultLayout
GetMessageW
ScreenToClient
SetCursorPos
DispatchMessageW
ClientToScreen
GetDesktopWindow
LoadIconW
PostMessageW
SetMenuDefaultItem
InsertMenuW
GetMenuItemID
CheckMenuItem
UpdateWindow
RegisterClassExW
CharNextW
GetClientRect
DestroyWindow
CreateDialogParamW
CheckDlgButton
DrawAnimatedRects
IntersectRect
ModifyMenuW
GetMessagePos
TranslateMessage
TranslateAcceleratorW
LoadAcceleratorsW
SetForegroundWindow
GetLastActivePopup
BringWindowToTop
FindWindowW
LoadStringW
GetWindow
IsDialogMessageW
PeekMessageW
MessageBoxW
CharUpperBuffW
CharUpperW
IsCharAlphaNumericW
GetSystemMetrics
MoveWindow
MapWindowPoints
DialogBoxParamW
SetWindowPos
MessageBeep

comctl32

ord338
ord334
ord236
ord340
InitCommonControlsEx
ord365
ord337
ImageList_SetBkColor
ImageList_Create
ImageList_Destroy
ord2
ord4
ImageList_ReplaceIcon
ord329
ord359
ord358
ord363
CreateStatusWindowW

comdlg32

GetOpenFileNameW
GetSaveFileNameW
PrintDlgExW

shell32

ShellAboutW
DragQueryFileW
DragFinish

authz

AuthzInitializeContextFromSid
AuthzAccessCheck
AuthzFreeContext
AuthzFreeResourceManager
AuthzInitializeResourceManager

aclui

ord2

ole32

CoCreateInstance
CoUninitialize
CoInitializeEx
ReleaseStgMedium

ulib

?Resize@DSTRING@@UAEEK@Z
?Initialize@ARRAY@@QAEEKK@Z
?NewBuf@DSTRING@@UAEEK@Z
??1DSTRING@@UAE@XZ
??1OBJECT@@UAE@XZ
??0OBJECT@@IAE@XZ
?Compare@OBJECT@@UBEJPBV1@@Z
??0DSTRING@@QAE@XZ
?Initialize@WSTRING@@QAEEPBV1@KK@Z
?Strcat@WSTRING@@QAEEPBV1@@Z
??0ARRAY@@QAE@XZ
?Initialize@WSTRING@@QAEEPBGK@Z

clb

ClbAddData
ClbSetColumnWidths

ntdll

RtlFreeHeap
RtlAllocateHeap

Sections

.text
Size: 94KB - Virtual size: 94KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 259KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 46KB - Virtual size: 46KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
I386/REGEDIT.HL_
.cab
I386/REGEDT32.EX_
.cab
I386/REGEVENT.MF_
.cab
I386/REGEVENT.MO_
.cab
I386/REGINI.EX_
.cab
I386/REGISTER.EX_
.cab
I386/REGOPT.CH_
.cab
I386/REGSVC.DL_
.cab
I386/REGSVR32.EX_
.cab
I386/REGWIZ.EX_
.cab
I386/REGWIZC.DL_
.cab
I386/RELOG.EX_
.cab
I386/REMASST.CH_
.cab
I386/REMINST.IN_
.cab
I386/REMOTEPG.DL_
.cab
I386/REMOTESP.TS_
.cab
I386/REND.DL_
.cab
I386/REPDRVFS.DL_
.cab
I386/REPLACE.EX_
.cab
I386/RESET.EX_
.cab
I386/RESKITW.CH_
.cab
I386/RESUTILS.DL_
.cab
I386/REVERT.WM_
.cab
I386/REXEC.EX_
.cab
I386/RFCOMM.SY_
.cab
I386/RHNDSHK.HT_
.cab
I386/RHODY.BM_
.cab
I386/RHTTPAA.DL_
.cab
I386/RICHED20.DL_
.cab
I386/RICHED32.DL_
.cab
I386/RICOH.IN_
.cab
I386/RINGIN.WA_
.cab
I386/RINGOUT.WA_
.cab
I386/RINORPRT.SI_
.cab
I386/RIPPLE.JP_
.cab
I386/RISTNDRD.SI_
.cab
I386/RKTOOLS.CH_
.cab
I386/RMCAST.SY_
.cab
I386/RNDISMP.SY_
.cab
I386/RNDISMPX.SY_
.cab
I386/RNOANSW.HT_
.cab
I386/RNOMDM.HT_
.cab
I386/RNR20.DL_
.cab
I386/ROD.TT_
.cab
I386/RODTR.TT_
.cab
I386/ROMAN.FO_
.cab
I386/ROOTAU.IN_
.cab
I386/ROOTMDM.SY_
.cab
I386/ROOTSEC.IN_
.cab
I386/ROUNDLET.WM_
.cab
I386/ROUTE.EX_
.cab
I386/ROUTEMON.EX_
.cab
I386/ROUTETAB.DL_
.cab
I386/ROVER.AC_
.cab
I386/RPBERR.HT_
.cab
I386/RPCNS4.DL_
.cab
I386/RPCREF.DL_
.cab
I386/RPCRT4.DL_
.cab
I386/RPCSS.DL_
.cab
I386/RPULSE.HT_
.cab
I386/RRCM.DL_
.cab
I386/RRCW.CH_
.cab
I386/RSACI.RA_
.cab
I386/RSAENH.DL_
.cab
I386/RSFSAPS.DL_
.cab
I386/RSH.EX_
.cab
I386/RSHX32.DL_
.cab
I386/RSM.EX_
.cab
I386/RSM.HL_
.cab
I386/RSMCONW.CH_
.cab
I386/RSMPS.DL_
.cab
I386/RSMSINK.EX_
.cab
I386/RSMUI.EX_
.cab
I386/RSMW.CH_
.cab
I386/RSNOTIFY.EX_
.cab
I386/RSOP.MF_
.cab
I386/RSOP.MO_
.cab
I386/RSOP.MS_
.cab
I386/RSOPPROV.EX_
.cab
I386/RSOPSNPW.CH_
.cab
I386/RSOPW.CH_
.cab
I386/RSTRUI.EX_
.cab
I386/RSVP.EX_
.cab
I386/RSVP.IN_
.cab
I386/RSVPCNTS.H_
.cab
I386/RSVPMSG.DL_
.cab
I386/RSVPPERF.DL_
.cab
I386/RSVPSP.DL_
.cab
I386/RTCSHARE.EX_
.cab
I386/RTIPXMIB.DL_
.cab
I386/RTM.DL_
.cab
I386/RTOOBUSY.HT_
.cab
I386/RTUNER.WM_
.cab
I386/RTUTILS.DL_
.cab
I386/RUNAS.EX_
.cab
I386/RUNDLL32.EX_
.cab
I386/RUNONCE.EX_
.cab
I386/RUNW32.BAT
.bat .vbs
I386/RUSTY.WM_
.cab
I386/RVRSUMID.BM_
.cab
I386/RVSE.CH_
.cab
I386/RVSE.DL_
.cab
I386/RVSERES.DL_
.cab
I386/RVSEZM.EX_
.cab
I386/RW001EXT.DL_
.cab
I386/RW330EXT.DL_
.cab
I386/RWIA001.DL_
.cab
I386/RWIA330.DL_
.cab
I386/RWINSTA.EX_
.cab
I386/RWNH.DL_
.cab
I386/S3SAV3D.IN_
.cab
I386/S3SAV4.IN_
.cab
I386/S3SAVMX.IN_
.cab
I386/S3TRIO3D.IN_
.cab
I386/SAFEMODE.HT_
.cab
I386/SAFERW.CH_
.cab
I386/SAFRCDLG.DL_
.cab
I386/SAFRCONW.CH_
.cab
I386/SAFRDM.DL_
.cab
I386/SAFRSLV.DL_
.cab
I386/SAM.SD_
.cab
I386/SAM.SP_
.cab
I386/SAMLIB.DL_
.cab
I386/SAMPLE.AS_
.cab
I386/SAMPLE1.JP_
.cab
I386/SAMPLE2.JP_
.cab
I386/SAMSRV.DL_
.cab
I386/SANTAFE.BM_
.cab
I386/SAPI.CP_
.cab
I386/SAPI.DL_
.cab
I386/SAPI5.IN_
.cab
I386/SAPICPL.HL_
.cab
I386/SAPISVR.EX_
.cab
I386/SAVEDUMP.EX_
.cab
I386/SBE.DL_
.cab
I386/SBEIO.DL_
.cab
I386/SBP2.IN_
.cab
I386/SBP2PORT.SY_
.cab
I386/SC.EX_
.cab
I386/SCARDDLG.DL_
.cab
I386/SCARDDLG.HL_
.cab
I386/SCARDSSP.DL_
.cab
I386/SCARDSVR.EX_
.cab
I386/SCCBASE.DL_
.cab
I386/SCCSCCP.DL_
.cab
I386/SCECLI.DL_
.cab
I386/SCECONW.CH_
.cab
I386/SCEREGVL.IN_
.cab
I386/SCERSOP.MO_
.cab
I386/SCESRV.DL_
.cab
I386/SCEW.CH_
.cab
I386/SCHANNEL.DL_
.cab
I386/SCHEDSVC.DL_
.cab
I386/SCLGNTFY.DL_
.cab
I386/SCM.CH_
.cab
I386/SCM.MO_
.cab
I386/SCMCON.CH_
.cab
I386/SCNTLAST.HT_
.cab
I386/SCONNECT.HT_
.cab
I386/SCONNECT.JS_
.cab
I386/SCRCONS.EX_
.cab
I386/SCRCONS.MF_
.cab
I386/SCRCONS.MO_
.cab
I386/SCREDIR.DL_
.cab
I386/SCRIPT.DL_
.cab
I386/SCRIPT.FO_
.cab
I386/SCRIPTA.DL_
.cab
I386/SCRIPTO.DL_
.cab
I386/SCRIPTPW.DL_
.cab
I386/SCRIPT_A.DL_
.cab
I386/SCRNSAVE.SC_
.cab
I386/SCROBJ.DL_
.cab
I386/SCROBJ.MU_
.cab
I386/SCRRUN.DL_
.cab
I386/SCRRUN.MU_
.cab
I386/SCSI.IN_
.cab
I386/SCSIDEV.IN_
.cab
I386/SCSIPORT.SY_
.cab
I386/SCTASKS.EX_
.cab
I386/SCW.CH_
.cab
I386/SDBINST.EX_
.cab
I386/SDBUS.IN_
.cab
I386/SDBUS.SY_
.cab
I386/SDHCINST.DL_
.cab
I386/SDPBLB.DL_
.cab
I386/SDWNDR2K.IN_
.cab
I386/SEARCH.AS_
.cab
I386/SECAUTH.HL_
.cab
I386/SECDRV.IN_
.cab
I386/SECDRV.SY_
.cab
I386/SECEDIT.CH_
.cab
I386/SECEDIT.EX_
.cab
I386/SECLOGON.DL_
.cab
I386/SECPOL.MS_
.cab
I386/SECRCW32.MF_
.cab
I386/SECRCW32.MO_
.cab
I386/SECRECS.IN_
.cab
I386/SECSCONW.CH_
.cab
I386/SECSETW.CH_
.cab
I386/SECUPD.DAT
I386/SECUPD.SIG
I386/SECUR32.DL_
.cab
I386/SECUREDC.IN_
.cab
I386/SECUREWS.IN_
.cab
I386/SECURITY.DL_
.cab
I386/SECURITY.HT_
.cab
I386/SENDCMSG.CH_
.cab
I386/SENDCMSG.DL_
.cab
I386/SENDCMSG.HL_
.cab
I386/SENDMAIL.DL_
.cab
I386/SENS.DL_
.cab
I386/SENSAPI.DL_
.cab
I386/SENSCFG.DL_
.cab
I386/SEO.DL_
.cab
I386/SERE1255.FO_
.cab
I386/SERE1256.FO_
.cab
I386/SERE1257.FO_
.cab
I386/SERENUM.SY_
.cab
I386/SERF1255.FO_
.cab
I386/SERF1256.FO_
.cab
I386/SERF1257.FO_
.cab
I386/SERIAL.SY_
.cab
I386/SERIALUI.DL_
.cab
I386/SERIFE.FO_
.cab
I386/SERIFEE.FO_
.cab
I386/SERIFEG.FO_
.cab
I386/SERIFER.FO_
.cab
I386/SERIFET.FO_
.cab
I386/SERIFF.FO_
.cab
I386/SERIFFE.FO_
.cab
I386/SERIFFG.FO_
.cab
I386/SERIFFR.FO_
.cab
I386/SERIFFT.FO_
.cab
I386/SERVDEPS.DL_
.cab
I386/SERVICES.EX_
.cab
I386/SERVICES.MS_
.cab
I386/SERVICES._
.cab
I386/SERWVDRV.DL_
.cab
I386/SESSMGR.EX_
.cab
I386/SETHC.EX_
.cab
I386/SETPATHS.CM_
.cab
I386/SETUP.EX_
.cab
I386/SETUP16.IN_
.cab
I386/SETUP50.EX_
.cab
I386/SETUPACC.TXT
I386/SETUPAPI.DL_
.cab
I386/SETUPDD.SY_
.cab
I386/SETUPDLL.DL_
.cab
I386/SETUPLDR.BIN
I386/SETUPLDR.EX_
.cab
I386/SETUPN.EX_
.cab
I386/SETUPP.INI
I386/SETUPQRY.DL_
.cab
I386/SETUPQRY.IN_
.cab
I386/SETUPREG.HIV
I386/SETUP_W.BM_
.cab
I386/SETUP_WM.EX_
.cab
I386/SETVER.EX_
.cab
I386/SFC.DL_
.cab
I386/SFC.EX_
.cab
I386/SFCFILES.DL_
.cab
I386/SFC_OS.DL_
.cab
I386/SFFDISK.IN_
.cab
I386/SFFDISK.SY_
.cab
I386/SFFP_MMC.SY_
.cab
I386/SFFP_SD.SY_
.cab
I386/SFLOPPY.SY_
.cab
I386/SFMAPI.DL_
.cab
I386/SFMMGR.HL_
.cab
I386/SGIU.IN_
.cab
I386/SHADOW.EX_
.cab
I386/SHARE.EX_
.cab
I386/SHDOCLC.DL_
.cab
I386/SHDOCVW.DL_
.cab
I386/SHELL.DL_
.cab
I386/SHELL.HL_
.cab
I386/SHELL.IN_
.cab
I386/SHELL32.DL_
.cab
I386/SHFOLDER.DL_
.cab
I386/SHGINA.DL_
.cab
I386/SHIFTJIS.UC_
.cab
I386/SHIMENG.DL_
.cab
I386/SHIMGVW.DL_
.cab
I386/SHLWAPI.DL_
.cab
I386/SHL_IMG.IN_
.cab
I386/SHMEDIA.DL_
.cab
I386/SHMGRATE.EX_
.cab
I386/SHRPUBW.EX_
.cab
I386/SHRUTI.TT_
.cab
I386/SHSCRAP.DL_
.cab
I386/SHSVCS.DL_
.cab
I386/SHUTDOWN.EX_
.cab
I386/SHVL.CH_
.cab
I386/SHVL.DL_
.cab
I386/SHVLRES.DL_
.cab
I386/SHVLZM.EX_
.cab
I386/SIGNIN.HL_
.cab
I386/SIGNUP.MA_
.cab
I386/SIGTAB.DL_
.cab
I386/SIGVERIF.EX_
.cab
I386/SIGVERIF.HL_
.cab
I386/SIINT5.DL_
.cab
I386/SIMPBDO.TT_
.cab
I386/SIMPDATA.TL_
.cab
I386/SIMPFXO.TT_
.cab
I386/SIMPO.TT_
.cab
I386/SIMPTCP.DL_
.cab
I386/SIS300I.IN_
.cab
I386/SIS6306.IN_
.cab
I386/SISBKUP.DL_
.cab
I386/SISGR.IN_
.cab
I386/SISV6326.IN_
.cab
I386/SIZE1_I.CU_
.cab
I386/SIZE1_IL.CU_
.cab
I386/SIZE1_IM.CU_
.cab
I386/SIZE1_L.CU_
.cab
I386/SIZE1_M.CU_
.cab
I386/SIZE1_R.CU_
.cab
I386/SIZE1_RL.CU_
.cab
I386/SIZE1_RM.CU_
.cab
I386/SIZE2_I.CU_
.cab
I386/SIZE2_IL.CU_
.cab
I386/SIZE2_IM.CU_
.cab
I386/SIZE2_L.CU_
.cab
I386/SIZE2_M.CU_
.cab
I386/SIZE2_R.CU_
.cab
I386/SIZE2_RL.CU_
.cab
I386/SIZE2_RM.CU_
.cab
I386/SIZE3_I.CU_
.cab
I386/SIZE3_IL.CU_
.cab
I386/SIZE3_IM.CU_
.cab
I386/SIZE3_L.CU_
.cab
I386/SIZE3_M.CU_
.cab
I386/SIZE3_R.CU_
.cab
I386/SIZE3_RL.CU_
.cab
I386/SIZE3_RM.CU_
.cab
I386/SIZE4_I.CU_
.cab
I386/SIZE4_IL.CU_
.cab
I386/SIZE4_IM.CU_
.cab
I386/SIZE4_L.CU_
.cab
I386/SIZE4_M.CU_
.cab
I386/SIZE4_R.CU_
.cab
I386/SIZE4_RL.CU_
.cab
I386/SIZE4_RM.CU_
.cab
I386/SIZENESW.AN_
.cab
I386/SIZENS.AN_
.cab
I386/SIZENWSE.AN_
.cab
I386/SIZEWE.AN_
.cab
I386/SKATER.BM_
.cab
I386/SKDLL.DL_
.cab
I386/SKEYS.EX_
.cab
I386/SKINS.IN_
.cab
I386/SKIPDOWN.JP_
.cab
I386/SKIPOFF.JP_
.cab
I386/SKIPOVER.JP_
.cab
I386/SKIPUP.JP_
.cab
I386/SLAYERXP.DL_
.cab
I386/SLBCSP.DL_
.cab
I386/SLBIOP.DL_
.cab
I386/SLBRCCSP.DL_
.cab
I386/SLCOINST.DL_
.cab
I386/SLEXTSPK.DL_
.cab
I386/SLGEN.DL_
.cab
I386/SLIP.IN_
.cab
I386/SLIP.SC_
.cab
I386/SLIP.SY_
.cab
I386/SLIPMENU.SC_
.cab
I386/SLNT7554.SY_
.cab
I386/SLNTAMR.SY_
.cab
I386/SLNTHAL.SY_
.cab
I386/SLRUNDLL.EX_
.cab
I386/SLSERV.EX_
.cab
I386/SLWDMSUP.SY_
.cab
I386/SL_ANET.AC_
.cab
I386/SM59W.DL_
.cab
I386/SM81W.DL_
.cab
I386/SM87W.DL_
.cab
I386/SM89W.DL_
.cab
I386/SM8AW.DL_
.cab
I386/SM8CW.DL_
.cab
I386/SM8DW.DL_
.cab
I386/SM90W.DL_
.cab
I386/SM92W.DL_
.cab
I386/SM93W.DL_
.cab
I386/SM9AW.DL_
.cab
I386/SMA3W.DL_
.cab
I386/SMAE1255.FO_
.cab
I386/SMAE1256.FO_
.cab
I386/SMAE1257.FO_
.cab
I386/SMAF1255.FO_
.cab
I386/SMAF1256.FO_
.cab
I386/SMAF1257.FO_
.cab
I386/SMALLE.FO_
.cab
I386/SMALLEE.FO_
.cab
I386/SMALLEG.FO_
.cab
I386/SMALLER.FO_
.cab
I386/SMALLET.FO_
.cab
I386/SMALLF.FO_
.cab
I386/SMALLFE.FO_
.cab
I386/SMALLFG.FO_
.cab
I386/SMALLFR.FO_
.cab
I386/SMALLFT.FO_
.cab
I386/SMARTCRD.IN_
.cab
I386/SMB6W.DL_
.cab
I386/SMBINST.EX_
.cab
I386/SMCLIB.SY_
.cab
I386/SMI.IN_
.cab
I386/SMI.MI_
.cab
I386/SMI2SMIR.EX_
.cab
I386/SMIERRSM.DL_
.cab
I386/SMIERRSY.DL_
.cab
I386/SMIMSGIF.DL_
.cab
I386/SMLGCFGW.CH_
.cab
I386/SMLOGCFG.DL_
.cab
I386/SMLOGSVC.EX_
.cab
I386/SMSS.EX_
.cab
I386/SMTPADM.DL_
.cab
I386/SMTPAPI.DL_
.cab
I386/SMTPCONS.DL_
.cab
I386/SMTPCONS.MF_
.cab
I386/SMTPCONS.MO_
.cab
I386/SMTPSNAP.CN_
.cab
I386/SMTPSNAP.DL_
.cab
I386/SMTPSNAP.HL_
.cab
I386/SMTPSVC.DL_
.cab
I386/SND.HT_
.cab
I386/SNDREC.WA_
.cab
I386/SNDREC32.EX_
.cab
I386/SNDVOL32.CH_
.cab
I386/SNDVOL32.EX_
.cab
I386/SNDVOL32.HL_
.cab
I386/SNIFFPOL.DL_
.cab
I386/SNMP.EX_
.cab
I386/SNMPAPI.DL_
.cab
I386/SNMPCL.DL_
.cab
I386/SNMPCON.CH_
.cab
I386/SNMPINCL.DL_
.cab
I386/SNMPMIB.DL_
.cab
I386/SNMPREG.MO_
.cab
I386/SNMPSMIR.DL_
.cab
I386/SNMPSMIR.MO_
.cab
I386/SNMPSNAP.DL_
.cab
I386/SNMPSNAP.HL_
.cab
I386/SNMPSTUP.DL_
.cab
I386/SNMPTHRD.DL_
.cab
I386/SNMPTRAP.EX_
.cab
I386/SNWFLAKE.BM_
.cab
I386/SOCCER.BM_
.cab
I386/SOFTBAR.IN_
.cab
I386/SOFTKBD.DL_
.cab
I386/SOFTPUB.DL_
.cab
I386/SOL.CH_
.cab
I386/SOL.EX_
.cab
I386/SOL.HL_
.cab
I386/SONYNC.DL_
.cab
I386/SONYPVU1.IN_
.cab
I386/SORT.EX_
.cab
I386/SORTKEY.NL_
.cab
I386/SORTTBLS.NL_
.cab
I386/SOUND.DR_
.cab
I386/SOUND1.WA_
.cab
I386/SOUND104.WA_
.cab
I386/SOUND105.WA_
.cab
I386/SOUND108.WA_
.cab
I386/SOUND111.WA_
.cab
I386/SOUND112.WA_
.cab
I386/SOUND12.WA_
.cab
I386/SOUND13.WA_
.cab
I386/SOUND131.WA_
.cab
I386/SOUND136.WA_
.cab
I386/SOUND14.WA_
.cab
I386/SOUND16.WA_
.cab
I386/SOUND17.WA_
.cab
I386/SOUND18.WA_
.cab
I386/SOUND181.WA_
.cab
I386/SOUND19.WA_
.cab
I386/SOUND20.WA_
.cab
I386/SOUND21.WA_
.cab
I386/SOUND22.WA_
.cab
I386/SOUND24.WA_
.cab
I386/SOUND240.WA_
.cab
I386/SOUND243.WA_
.cab
I386/SOUND25.WA_
.cab
I386/SOUND26.WA_
.cab
I386/SOUND27.WA_
.cab
I386/SOUND28.WA_
.cab
I386/SOUND29.WA_
.cab
I386/SOUND3.WA_
.cab
I386/SOUND30.WA_
.cab
I386/SOUND34.WA_
.cab
I386/SOUND35.WA_
.cab
I386/SOUND36.WA_
.cab
I386/SOUND38.WA_
.cab
I386/SOUND39.WA_
.cab
I386/SOUND4.WA_
.cab
I386/SOUND42.WA_
.cab
I386/SOUND43.WA_
.cab
I386/SOUND45.WA_
.cab
I386/SOUND49.WA_
.cab
I386/SOUND49D.WA_
.cab
I386/SOUND5.WA_
.cab
I386/SOUND50.WA_
.cab
I386/SOUND528.WA_
.cab
I386/SOUND53.WA_
.cab
I386/SOUND54.WA_
.cab
I386/SOUND55.WA_
.cab
I386/SOUND560.WA_
.cab
I386/SOUND563.WA_
.cab
I386/SOUND57.WA_
.cab
I386/SOUND58.WA_
.cab
I386/SOUND6.WA_
.cab
I386/SOUND65.WA_
.cab
I386/SOUND68.WA_
.cab
I386/SOUND7.WA_
.cab
I386/SOUND713.WA_
.cab
I386/SOUND735.WA_
.cab
I386/SOUND8.WA_
.cab
I386/SOUND827.WA_
.cab
I386/SOUND9.WA_
.cab
I386/SOUND999.WA_
.cab
I386/SOUNDREC.CH_
.cab
I386/SOUNDREC.HL_
.cab
I386/SOUNDS.CH_
.cab
I386/SP3.CAB
.cab
I386/SP3.CAT
I386/SPAD.CH_
.cab
I386/SPARROW.SY_
.cab
I386/SPCMDCON.SYS
.sys windows:5 windows x86 arch:x86

8419e9e97a8423e1931065e7bb89ce17

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

spcmdcon.pdb

Imports

ntoskrnl.exe

KeTickCount
IoCreateSymbolicLink
ZwCreateFile
_wcsnicmp
IoDeleteSymbolicLink
wcsncmp
ZwCreateKey
ZwEnumerateValueKey
ZwDeleteValueKey
ZwSetValueKey
ZwQueryKey
ZwEnumerateKey
_strnicmp
ZwQuerySymbolicLinkObject
NtClose
ExGetPreviousMode
KeDelayExecutionThread
RtlSecondsSince1970ToTime
ExSystemTimeToLocalTime
RtlTimeToTimeFields
_snwprintf
ZwOpenKey
ZwQueryValueKey
ZwReadFile
wcsncat
RtlUnicodeToMultiByteN
wcsstr
RtlUnicodeStringToInteger
KeAttachProcess
KeDetachProcess
KeBugCheckEx
wcsncpy
_alldiv
_allrem
ZwQueryDirectoryFile
swprintf
ZwOpenSymbolicLinkObject
wcscat
ZwQueryVolumeInformationFile
NlsMbOemCodePageTag
NlsOemLeadByteInfo
RtlUnicodeToOemN
ZwWriteFile
wcscmp
wcsrchr
ZwQueryInformationFile
DbgPrint
_wcsicmp
wcschr
wcslen
wcscpy
ZwOpenFile
ZwSetInformationFile
_except_handler3
ZwDeviceIoControlFile
ZwFsControlFile
memmove
RtlMultiByteToUnicodeN
ZwClose
RtlInitUnicodeString
_allmul
RtlCompareMemory
RtlCopyUnicodeString
ExAllocatePool
ExFreePoolWithTag
RtlUnicodeStringToAnsiString
RtlInitAnsiString

hal

HalGetEnvironmentVariable

setupdd.sys

SpStringToUpper
SpRtlFormatMessage
SpArcNameFromRegion
CommandConsoleInterface
SpdInitialize
SpdTerminate
SpStringToLower
SpInputDrain
SpCmdConsEnableStatusText
SpDisplayStatusText
SpSelectAndLoadLayoutDll
GetDefaultAttr
SpDisplayStatusOptions
SpPromptForDisk
SpEnumFilesRecursiveLimited
SpIsNtInDirectory
SpFileExists
SpLoadUnloadKey
SpPtGetOrdinal
SpFormatMessage
SpPtDetermineRegionSpace
SpSetAutochkCallback
SpExecuteImage
SpSetRedirectSwitchMode
SpSetDefaultBootEntry
SpAddNTInstallToBootList
SpFreeExportedBootEntries
SpExportBootEntries
SpPtMakeDiskRaw
SpRegionFromNtName
SpPtDoDelete
SpPtDoCreate
SpPtPrepareDisks
SpPtSectorCountToMB
SpExpandFile
SpInputIsKeyWaiting
SpGetFullPathName
SpCopyFileUsingNames
SpvidDisplayOemString
SpvidScrollUp
SpvidDisplayString
SpInputGetKeypress
SpvidClearScreenRegion
SpRenameFile
SpConcatenatePaths
SpEnumerateDiskRegions
SpRetreiveMessageText
SpNtNameFromRegion
SpDupStringW
NtfsMirrorBootSector
SpPtGetSectorLayoutInformation
FmtFillFormatBuffer
pSpBootCodeIoC
SpDetermineOsTypeFromBootSectorC
WriteNtfsBootSector
SpOpenAndMapFile
SpUnmapFile
SpMemFree
SpMemAlloc
SpRegionFromDosName

spddlang.sys

SplangGetCursorChar

Sections

.text
Size: 65KB - Virtual size: 64KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 96KB - Virtual size: 96KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

INIT
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 51KB - Virtual size: 51KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/SPCOMMON.DL_
.cab
I386/SPCONW.CH_
.cab
I386/SPCPLUI.DL_
.cab
I386/SPDDLANG.SY_
.cab
I386/SPEECH.CH_
.cab
I386/SPGRMR.DL_
.cab
I386/SPIDER.CH_
.cab
I386/SPIDER.EX_
.cab
I386/SPIDER.HL_
.cab
I386/SPIISUPD.EX_
.cab
I386/SPLASH.CH_
.cab
I386/SPLAT.WM_
.cab
I386/SPNPINST.EXE
.exe windows:5 windows x86 arch:x86

c8925dc08431c109a962996e462f68b3

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

spnpinst.pdb

Imports

msvcrt

__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__wgetmainargs
__winitenv
exit
__set_app_type
_XcptFilter
_exit
_c_exit
_wcsicmp
_wcslwr
wcsstr
wcslen
wcstoul
_wsystem
_except_handler3
_controlfp
_cexit
_vsnwprintf

advapi32

RegSetValueExW
RegQueryValueExW
RegCloseKey
RegCreateKeyExW
RegOpenKeyExW

kernel32

GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
GetTempPathW
GetTempFileNameW
UnhandledExceptionFilter
GetLastError
lstrlenW
WriteFile
CreateProcessW
WaitForSingleObject
DeleteFileW
SetUnhandledExceptionFilter
GetCurrentProcessId
OpenProcess
CloseHandle
GetModuleHandleA
CreateFileW
GetPrivateProfileStringW
ExpandEnvironmentStringsW

ntdll

NtQueryInformationProcess

ws2_32

socket
WSAGetLastError
WSAStartup
WSACleanup
closesocket

ole32

CoInitializeEx
CoCreateInstance
CoTaskMemFree
CoUninitialize

psapi

GetModuleFileNameExW

Sections

.text
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 140B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 1016B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
I386/SPOLCONW.CH_
.cab
I386/SPOOLSS.DL_
.cab
I386/SPOOLSV.EX_
.cab
I386/SPRA0401.DL_
.cab
I386/SPRA0402.DL_
.cab
I386/SPRA0404.DL_
.cab
I386/SPRA0405.DL_
.cab
I386/SPRA0406.DL_
.cab
I386/SPRA0407.DL_
.cab
I386/SPRA0408.DL_
.cab
I386/SPRA040B.DL_
.cab
I386/SPRA040C.DL_
.cab
I386/SPRA040D.DL_
.cab
I386/SPRA040E.DL_
.cab
I386/SPRA0410.DL_
.cab
I386/SPRA0411.DL_
.cab
I386/SPRA0412.DL_
.cab
I386/SPRA0413.DL_
.cab
I386/SPRA0414.DL_
.cab
I386/SPRA0415.DL_
.cab
I386/SPRA0416.DL_
.cab
I386/SPRA0418.DL_
.cab
I386/SPRA0419.DL_
.cab
I386/SPRA041A.DL_
.cab
I386/SPRA041B.DL_
.cab
I386/SPRA041D.DL_
.cab
I386/SPRA041E.DL_
.cab
I386/SPRA041F.DL_
.cab
I386/SPRA0424.DL_
.cab
I386/SPRA0425.DL_
.cab
I386/SPRA0426.DL_
.cab
I386/SPRA0427.DL_
.cab
I386/SPRA0804.DL_
.cab
I386/SPRA0816.DL_
.cab
I386/SPRA0C0A.DL_
.cab
I386/SPRB0401.DL_
.cab
I386/SPRB0404.DL_
.cab
I386/SPRB0405.DL_
.cab
I386/SPRB0406.DL_
.cab
I386/SPRB0407.DL_
.cab
I386/SPRB0408.DL_
.cab
I386/SPRB040B.DL_
.cab
I386/SPRB040C.DL_
.cab
I386/SPRB040D.DL_
.cab
I386/SPRB040E.DL_
.cab
I386/SPRB0410.DL_
.cab
I386/SPRB0411.DL_
.cab
I386/SPRB0412.DL_
.cab
I386/SPRB0413.DL_
.cab
I386/SPRB0414.DL_
.cab
I386/SPRB0415.DL_
.cab
I386/SPRB0416.DL_
.cab
I386/SPRB0419.DL_
.cab
I386/SPRB041B.DL_
.cab
I386/SPRB041D.DL_
.cab
I386/SPRB041F.DL_
.cab
I386/SPRB0424.DL_
.cab
I386/SPRB0804.DL_
.cab
I386/SPRB0816.DL_
.cab
I386/SPRB0C0A.DL_
.cab
I386/SPRC0401.DL_
.cab
I386/SPRC0404.DL_
.cab
I386/SPRC0405.DL_
.cab
I386/SPRC0406.DL_
.cab
I386/SPRC0407.DL_
.cab
I386/SPRC0408.DL_
.cab
I386/SPRC040B.DL_
.cab
I386/SPRC040C.DL_
.cab
I386/SPRC040D.DL_
.cab
I386/SPRC040E.DL_
.cab
I386/SPRC0410.DL_
.cab
I386/SPRC0411.DL_
.cab
I386/SPRC0412.DL_
.cab
I386/SPRC0413.DL_
.cab
I386/SPRC0414.DL_
.cab
I386/SPRC0415.DL_
.cab
I386/SPRC0416.DL_
.cab
I386/SPRC0419.DL_
.cab
I386/SPRC041B.DL_
.cab
I386/SPRC041D.DL_
.cab
I386/SPRC041F.DL_
.cab
I386/SPRC0424.DL_
.cab
I386/SPRC0804.DL_
.cab
I386/SPRC0816.DL_
.cab
I386/SPRC0C0A.DL_
.cab
I386/SPRESTRT.EX_
.cab
I386/SPTIP.DL_
.cab
I386/SPTTSENG.DL_
.cab
I386/SPX.IN_
.cab
I386/SPXCOINS.DL_
.cab
I386/SPXPORTS.DL_
.cab
I386/SPXPORTS.IN_
.cab
I386/SQDLL.DL_
.cab
I386/SQLDB20.DL_
.cab
I386/SQLOLEDB.DL_
.cab
I386/SQLOLEDB.RL_
.cab
I386/SQLQP20.DL_
.cab
I386/SQLSE20.DL_
.cab
I386/SQLSODBC.CH_
.cab
I386/SQLSOLDB.CH_
.cab
I386/SQLSRV32.DL_
.cab
I386/SQLSRV32.RL_
.cab
I386/SQLUNIRL.DL_
.cab
I386/SQLWID.DL_
.cab
I386/SQLWOA.DL_
.cab
I386/SQLXMLX.DL_
.cab
I386/SQLXMLX.RL_
.cab
I386/SR.IN_
.cab
I386/SR.MO_
.cab
I386/SR.SY_
.cab
I386/SRCHASST.IN_
.cab
I386/SRCHCTLS.DL_
.cab
I386/SRCHUI.DL_
.cab
I386/SRCLIENT.DL_
.cab
I386/SRDIAG.EX_
.cab
I386/SRFRAME.MM_
.cab
I386/SRRSTR.DL_
.cab
I386/SRSVC.DL_
.cab
I386/SRUSBUSD.DL_
.cab
I386/SRUSBUSD.IN_
.cab
I386/SRV.SY_
.cab
I386/SRVSVC.DL_
.cab
I386/SR_UIW.CH_
.cab
I386/SS3DFO.SC_
.cab
I386/SSBEZIER.SC_
.cab
I386/SSDPAPI.DL_
.cab
I386/SSDPSRV.DL_
.cab
I386/SSEE1255.FO_
.cab
I386/SSEE1256.FO_
.cab
I386/SSEE1257.FO_
.cab
I386/SSEE874.FO_
.cab
I386/SSEF1255.FO_
.cab
I386/SSEF1256.FO_
.cab
I386/SSEF1257.FO_
.cab
I386/SSEF874.FO_
.cab
I386/SSERIFE.FO_
.cab
I386/SSERIFEE.FO_
.cab
I386/SSERIFEG.FO_
.cab
I386/SSERIFER.FO_
.cab
I386/SSERIFET.FO_
.cab
I386/SSERIFF.FO_
.cab
I386/SSERIFFE.FO_
.cab
I386/SSERIFFG.FO_
.cab
I386/SSERIFFR.FO_
.cab
I386/SSERIFFT.FO_
.cab
I386/SSFLWBOX.SC_
.cab
I386/SSINC51.DL_
.cab
I386/SSMARQUE.SC_
.cab
I386/SSMYPICS.SC_
.cab
I386/SSMYST.SC_
.cab
I386/SSPIFILT.DL_
.cab
I386/SSPIPES.SC_
.cab
I386/SSSTARS.SC_
.cab
I386/SSTEXT3D.SC_
.cab
I386/SSTUB.DL_
.cab
I386/STALPORT.IN_
.cab
I386/START.WA_
.cab
I386/STARTROM.CO_
.cab
I386/STARTROM.N1_
.cab
I386/STATE.IC_
.cab
I386/STATUS.DL_
.cab
I386/STAXMEM.DL_
.cab
I386/STCLIENT.DL_
.cab
I386/STDOLE.TL_
.cab
I386/STDOLE2.TL_
.cab
I386/STDOLE32.TL_
.cab
I386/STDPROV.DL_
.cab
I386/STI.DL_
.cab
I386/STI.IN_
.cab
I386/STILLCAM.IN_
.cab
I386/STIMON.EX_
.cab
I386/STI_CI.DL_
.cab
I386/STOBJECT.DL_
.cab
I386/STONEH.JP_
.cab
I386/STOPWTCH.AN_
.cab
I386/STORAGE.DL_
.cab
I386/STREAMIP.IN_
.cab
I386/STREAMIP.SY_
.cab
I386/STRMDLL.DL_
.cab
I386/STRMFILT.DL_
.cab
I386/SUBRANGE.UC_
.cab
I386/SUBSCRPT.MO_
.cab
I386/SUBST.EX_
.cab
I386/SUNBANNA.GI_
.cab
I386/SUNFBKG.JP_
.cab
I386/SUNFLOWR.HT_
.cab
I386/SUNSET.JP_
.cab
I386/SUPPORT.IC_
.cab
I386/SUPP_ED.CH_
.cab
I386/SUPTOOLS.CH_
.cab
I386/SV-262E1.PN_
.cab
I386/SV-262E3.PN_
.cab
I386/SV-262E4.PN_
.cab
I386/SV2511.PN_
.cab
I386/SV2512.PN_
.cab
I386/SVCEXT51.DL_
.cab
I386/SVCHOST.EX_
.cab
I386/SVCPACK.DL_
.cab
I386/SVCPACK.IN_
.cab
I386/SWEETS.HT_
.cab
I386/SWEETSBG.GI_
.cab
I386/SWFLASH.IN_
.cab
I386/SWITCH.IN_
.cab
I386/SWNT.IN_
.cab
I386/SWPRV.DL_
.cab
I386/SWTCHBRD.BM_
.cab
I386/SXS.DL_
.cab
I386/SYLFAEN.TT_
.cab
I386/SYMBOL.TT_
.cab
I386/SYMBOLE.FO_
.cab
I386/SYMBOLF.FO_
.cab
I386/SYMC810.SY_
.cab
I386/SYMC8XX.SY_
.cab
I386/SYM_HI.SY_
.cab
I386/SYM_U3.SY_
.cab
I386/SYNCAPP.EX_
.cab
I386/SYNCENG.DL_
.cab
I386/SYNCUI.DL_
.cab
I386/SYSCOMP.IN_
.cab
I386/SYSDM.CP_
.cab
I386/SYSDM.HL_
.cab
I386/SYSDMW.CH_
.cab
I386/SYSEDIT.EX_
.cab
I386/SYSFILES.IN_
.cab
I386/SYSINFO.EX_
.cab
I386/SYSINV.DL_
.cab
I386/SYSKEY.EX_
.cab
I386/SYSMAIN.SD_
.cab
I386/SYSMOD.DL_
.cab
I386/SYSMODA.DL_
.cab
I386/SYSMOD_A.DL_
.cab
I386/SYSMON.HL_
.cab
I386/SYSMON.OC_
.cab
I386/SYSMONW.CH_
.cab
I386/SYSOC.IN_
.cab
I386/SYSOCMGR.EX_
.cab
I386/SYSPARSE.EXE
.exe windows:5 windows x86 arch:x86

c9e4fd16b28676da6dc0078a8b86f5f1

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_REMOVABLE_RUN_FROM_SWAP
IMAGE_FILE_NET_RUN_FROM_SWAP

Imports

advapi32

RegCreateKeyExA
RegSetValueExA
RegQueryValueExA
RegOpenKeyExA
GetUserNameA
RegEnumKeyExA
RegCloseKey

kernel32

lstrcpyA
lstrcmpA
SetErrorMode
lstrlenA
GetCommandLineA
GetWindowsDirectoryA
GetProcAddress
LoadLibraryExA
GetVersionExA
GetPrivateProfileStringA
GetSystemTime
HeapFree
CloseHandle
WriteFile
CreateFileA
HeapAlloc
GetProcessHeap
GetDiskFreeSpaceA
GetVolumeInformationA
GlobalMemoryStatus
ReadFile
GetFileSize
lstrcatA
SizeofResource
LockResource
LoadResource
FindResourceA
GetComputerNameA
SetLastError
FindClose
FindFirstFileA
GetModuleFileNameA
DeleteFileA
SetFileAttributesA
GetSystemDirectoryA
SetFilePointer
FreeLibrary
MultiByteToWideChar
FindNextFileA
GetCurrentDirectoryA
SetCurrentDirectoryA
FormatMessageA
GetModuleHandleA
GetStartupInfoA
ExitProcess
GetStdHandle
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetLastError
GetEnvironmentStringsW
SetHandleCount
GetFileType
HeapDestroy
HeapCreate
VirtualFree
VirtualProtect
VirtualAlloc
GetSystemInfo
VirtualQuery
LCMapStringA
LCMapStringW
HeapReAlloc
HeapSize
LoadLibraryA
GetACP
GetOEMCP
GetCPInfo
GetLocaleInfoA
SetStdHandle
FlushFileBuffers
GetStringTypeA
GetStringTypeW
GetExitCodeProcess
WaitForSingleObject
CreateProcessA
GetFileAttributesA
RtlUnwind
SetEndOfFile

user32

PostQuitMessage
ShowWindow
MessageBoxA
KillTimer
DispatchMessageA
SetTimer
IsDialogMessageA
IsWindow
GetMessageA
CreateDialogParamA
wsprintfA
GetDlgItem
TranslateMessage
SendMessageA

version

GetFileVersionInfoSizeA
GetFileVersionInfoA
VerQueryValueA

rpcrt4

UuidToStringA
UuidCreate

ole32

CoInitialize
CoCreateInstance

Sections

.text
Size: 57KB - Virtual size: 57KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 178KB - Virtual size: 178KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
I386/SYSPRINT.SE_
.cab
I386/SYSPROP.CH_
.cab
I386/SYSPRTJ.SE_
.cab
I386/SYSRESTR.HL_
.cab
I386/SYSRESTW.CH_
.cab
I386/SYSSETUP.DL_
.cab
I386/SYSSETUP.IN_
.cab
I386/SYSTEM.AD_
.cab
I386/SYSTEM.CH_
.cab
I386/SYSTEM.DR_
.cab
I386/SYSTEM.IN_
.cab
I386/SYSTEM.MO_
.cab
I386/SYSTEM32/NTDLL.DLL
.dll windows:5 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

ntdll.pdb

Exports

Exports

CsrAllocateCaptureBuffer
CsrAllocateMessagePointer
CsrCaptureMessageBuffer
CsrCaptureMessageMultiUnicodeStringsInPlace
CsrCaptureMessageString
CsrCaptureTimeout
CsrClientCallServer
CsrClientConnectToServer
CsrFreeCaptureBuffer
CsrGetProcessId
CsrIdentifyAlertableThread
CsrNewThread
CsrProbeForRead
CsrProbeForWrite
CsrSetPriorityClass
DbgBreakPoint
DbgPrint
DbgPrintEx
DbgPrintReturnControlC
DbgPrompt
DbgQueryDebugFilterState
DbgSetDebugFilterState
DbgUiConnectToDbg
DbgUiContinue
DbgUiConvertStateChangeStructure
DbgUiDebugActiveProcess
DbgUiGetThreadDebugObject
DbgUiIssueRemoteBreakin
DbgUiRemoteBreakin
DbgUiSetThreadDebugObject
DbgUiStopDebugging
DbgUiWaitStateChange
DbgUserBreakPoint
KiFastSystemCall
KiFastSystemCallRet
KiIntSystemCall
KiRaiseUserExceptionDispatcher
KiUserApcDispatcher
KiUserCallbackDispatcher
KiUserExceptionDispatcher
LdrAccessOutOfProcessResource
LdrAccessResource
LdrAddRefDll
LdrAlternateResourcesEnabled
LdrCreateOutOfProcessImage
LdrDestroyOutOfProcessImage
LdrDisableThreadCalloutsForDll
LdrEnumResources
LdrEnumerateLoadedModules
LdrFindCreateProcessManifest
LdrFindEntryForAddress
LdrFindResourceDirectory_U
LdrFindResourceEx_U
LdrFindResource_U
LdrFlushAlternateResourceModules
LdrGetDllHandle
LdrGetDllHandleEx
LdrGetProcedureAddress
LdrHotPatchRoutine
LdrInitShimEngineDynamic
LdrInitializeThunk
LdrLoadAlternateResourceModule
LdrLoadDll
LdrLockLoaderLock
LdrProcessRelocationBlock
LdrQueryImageFileExecutionOptions
LdrQueryProcessModuleInformation
LdrSetAppCompatDllRedirectionCallback
LdrSetDllManifestProber
LdrShutdownProcess
LdrShutdownThread
LdrUnloadAlternateResourceModule
LdrUnloadDll
LdrUnlockLoaderLock
LdrVerifyImageMatchesChecksum
NlsAnsiCodePage
NlsMbCodePageTag
NlsMbOemCodePageTag
NtAcceptConnectPort
NtAccessCheck
NtAccessCheckAndAuditAlarm
NtAccessCheckByType
NtAccessCheckByTypeAndAuditAlarm
NtAccessCheckByTypeResultList
NtAccessCheckByTypeResultListAndAuditAlarm
NtAccessCheckByTypeResultListAndAuditAlarmByHandle
NtAddAtom
NtAddBootEntry
NtAdjustGroupsToken
NtAdjustPrivilegesToken
NtAlertResumeThread
NtAlertThread
NtAllocateLocallyUniqueId
NtAllocateUserPhysicalPages
NtAllocateUuids
NtAllocateVirtualMemory
NtAreMappedFilesTheSame
NtAssignProcessToJobObject
NtCallbackReturn
NtCancelDeviceWakeupRequest
NtCancelIoFile
NtCancelTimer
NtClearEvent
NtClose
NtCloseObjectAuditAlarm
NtCompactKeys
NtCompareTokens
NtCompleteConnectPort
NtCompressKey
NtConnectPort
NtContinue
NtCreateDebugObject
NtCreateDirectoryObject
NtCreateEvent
NtCreateEventPair
NtCreateFile
NtCreateIoCompletion
NtCreateJobObject
NtCreateJobSet
NtCreateKey
NtCreateKeyedEvent
NtCreateMailslotFile
NtCreateMutant
NtCreateNamedPipeFile
NtCreatePagingFile
NtCreatePort
NtCreateProcess
NtCreateProcessEx
NtCreateProfile
NtCreateSection
NtCreateSemaphore
NtCreateSymbolicLinkObject
NtCreateThread
NtCreateTimer
NtCreateToken
NtCreateWaitablePort
NtCurrentTeb
NtDebugActiveProcess
NtDebugContinue
NtDelayExecution
NtDeleteAtom
NtDeleteBootEntry
NtDeleteFile
NtDeleteKey
NtDeleteObjectAuditAlarm
NtDeleteValueKey
NtDeviceIoControlFile
NtDisplayString
NtDuplicateObject
NtDuplicateToken
NtEnumerateBootEntries
NtEnumerateKey
NtEnumerateSystemEnvironmentValuesEx
NtEnumerateValueKey
NtExtendSection
NtFilterToken
NtFindAtom
NtFlushBuffersFile
NtFlushInstructionCache
NtFlushKey
NtFlushVirtualMemory
NtFlushWriteBuffer
NtFreeUserPhysicalPages
NtFreeVirtualMemory
NtFsControlFile
NtGetContextThread
NtGetDevicePowerState
NtGetPlugPlayEvent
NtGetWriteWatch
NtImpersonateAnonymousToken
NtImpersonateClientOfPort
NtImpersonateThread
NtInitializeRegistry
NtInitiatePowerAction
NtIsProcessInJob
NtIsSystemResumeAutomatic
NtListenPort
NtLoadDriver
NtLoadKey
NtLoadKey2
NtLockFile
NtLockProductActivationKeys
NtLockRegistryKey
NtLockVirtualMemory
NtMakePermanentObject
NtMakeTemporaryObject
NtMapUserPhysicalPages
NtMapUserPhysicalPagesScatter
NtMapViewOfSection
NtModifyBootEntry
NtNotifyChangeDirectoryFile
NtNotifyChangeKey
NtNotifyChangeMultipleKeys
NtOpenDirectoryObject
NtOpenEvent
NtOpenEventPair
NtOpenFile
NtOpenIoCompletion
NtOpenJobObject
NtOpenKey
NtOpenKeyedEvent
NtOpenMutant
NtOpenObjectAuditAlarm
NtOpenProcess
NtOpenProcessToken
NtOpenProcessTokenEx
NtOpenSection
NtOpenSemaphore
NtOpenSymbolicLinkObject
NtOpenThread
NtOpenThreadToken
NtOpenThreadTokenEx
NtOpenTimer
NtPlugPlayControl
NtPowerInformation
NtPrivilegeCheck
NtPrivilegeObjectAuditAlarm
NtPrivilegedServiceAuditAlarm
NtProtectVirtualMemory
NtPulseEvent
NtQueryAttributesFile
NtQueryBootEntryOrder
NtQueryBootOptions
NtQueryDebugFilterState
NtQueryDefaultLocale
NtQueryDefaultUILanguage
NtQueryDirectoryFile
NtQueryDirectoryObject
NtQueryEaFile
NtQueryEvent
NtQueryFullAttributesFile
NtQueryInformationAtom
NtQueryInformationFile
NtQueryInformationJobObject
NtQueryInformationPort
NtQueryInformationProcess
NtQueryInformationThread
NtQueryInformationToken
NtQueryInstallUILanguage
NtQueryIntervalProfile
NtQueryIoCompletion
NtQueryKey
NtQueryMultipleValueKey
NtQueryMutant
NtQueryObject
NtQueryOpenSubKeys
NtQueryPerformanceCounter
NtQueryPortInformationProcess
NtQueryQuotaInformationFile
NtQuerySection
NtQuerySecurityObject
NtQuerySemaphore
NtQuerySymbolicLinkObject
NtQuerySystemEnvironmentValue
NtQuerySystemEnvironmentValueEx
NtQuerySystemInformation
NtQuerySystemTime
NtQueryTimer
NtQueryTimerResolution
NtQueryValueKey
NtQueryVirtualMemory
NtQueryVolumeInformationFile
NtQueueApcThread
NtRaiseException
NtRaiseHardError
NtReadFile
NtReadFileScatter
NtReadRequestData
NtReadVirtualMemory
NtRegisterThreadTerminatePort
NtReleaseKeyedEvent
NtReleaseMutant
NtReleaseSemaphore
NtRemoveIoCompletion
NtRemoveProcessDebug
NtRenameKey
NtReplaceKey
NtReplyPort
NtReplyWaitReceivePort
NtReplyWaitReceivePortEx
NtReplyWaitReplyPort
NtRequestDeviceWakeup
NtRequestPort
NtRequestWaitReplyPort
NtRequestWakeupLatency
NtResetEvent
NtResetWriteWatch
NtRestoreKey
NtResumeProcess
NtResumeThread
NtSaveKey
NtSaveKeyEx
NtSaveMergedKeys
NtSecureConnectPort
NtSetBootEntryOrder
NtSetBootOptions
NtSetContextThread
NtSetDebugFilterState
NtSetDefaultHardErrorPort
NtSetDefaultLocale
NtSetDefaultUILanguage
NtSetEaFile
NtSetEvent
NtSetEventBoostPriority
NtSetHighEventPair
NtSetHighWaitLowEventPair
NtSetInformationDebugObject
NtSetInformationFile
NtSetInformationJobObject
NtSetInformationKey
NtSetInformationObject
NtSetInformationProcess
NtSetInformationThread
NtSetInformationToken
NtSetIntervalProfile
NtSetIoCompletion
NtSetLdtEntries
NtSetLowEventPair
NtSetLowWaitHighEventPair
NtSetQuotaInformationFile
NtSetSecurityObject
NtSetSystemEnvironmentValue
NtSetSystemEnvironmentValueEx
NtSetSystemInformation
NtSetSystemPowerState
NtSetSystemTime
NtSetThreadExecutionState
NtSetTimer
NtSetTimerResolution
NtSetUuidSeed
NtSetValueKey
NtSetVolumeInformationFile
NtShutdownSystem
NtSignalAndWaitForSingleObject
NtStartProfile
NtStopProfile
NtSuspendProcess
NtSuspendThread
NtSystemDebugControl
NtTerminateJobObject
NtTerminateProcess
NtTerminateThread
NtTestAlert
NtTraceEvent
NtTranslateFilePath
NtUnloadDriver
NtUnloadKey
NtUnloadKeyEx
NtUnlockFile
NtUnlockVirtualMemory
NtUnmapViewOfSection
NtVdmControl
NtWaitForDebugEvent
NtWaitForKeyedEvent
NtWaitForMultipleObjects
NtWaitForSingleObject
NtWaitHighEventPair
NtWaitLowEventPair
NtWriteFile
NtWriteFileGather
NtWriteRequestData
NtWriteVirtualMemory
NtYieldExecution
PfxFindPrefix
PfxInitialize
PfxInsertPrefix
PfxRemovePrefix
PropertyLengthAsVariant
RtlAbortRXact
RtlAbsoluteToSelfRelativeSD
RtlAcquirePebLock
RtlAcquireResourceExclusive
RtlAcquireResourceShared
RtlActivateActivationContext
RtlActivateActivationContextEx
RtlActivateActivationContextUnsafeFast
RtlAddAccessAllowedAce
RtlAddAccessAllowedAceEx
RtlAddAccessAllowedObjectAce
RtlAddAccessDeniedAce
RtlAddAccessDeniedAceEx
RtlAddAccessDeniedObjectAce
RtlAddAce
RtlAddActionToRXact
RtlAddAtomToAtomTable
RtlAddAttributeActionToRXact
RtlAddAuditAccessAce
RtlAddAuditAccessAceEx
RtlAddAuditAccessObjectAce
RtlAddCompoundAce
RtlAddRange
RtlAddRefActivationContext
RtlAddRefMemoryStream
RtlAddVectoredExceptionHandler
RtlAddressInSectionTable
RtlAdjustPrivilege
RtlAllocateAndInitializeSid
RtlAllocateHandle
RtlAllocateHeap
RtlAnsiCharToUnicodeChar
RtlAnsiStringToUnicodeSize
RtlAnsiStringToUnicodeString
RtlAppendAsciizToString
RtlAppendPathElement
RtlAppendStringToString
RtlAppendUnicodeStringToString
RtlAppendUnicodeToString
RtlApplicationVerifierStop
RtlApplyRXact
RtlApplyRXactNoFlush
RtlAreAllAccessesGranted
RtlAreAnyAccessesGranted
RtlAreBitsClear
RtlAreBitsSet
RtlAssert
RtlAssert2
RtlCancelTimer
RtlCaptureContext
RtlCaptureStackBackTrace
RtlCaptureStackContext
RtlCharToInteger
RtlCheckForOrphanedCriticalSections
RtlCheckProcessParameters
RtlCheckRegistryKey
RtlClearAllBits
RtlClearBits
RtlCloneMemoryStream
RtlCommitMemoryStream
RtlCompactHeap
RtlCompareMemory
RtlCompareMemoryUlong
RtlCompareString
RtlCompareUnicodeString
RtlCompressBuffer
RtlComputeCrc32
RtlComputeImportTableHash
RtlComputePrivatizedDllName_U
RtlConsoleMultiByteToUnicodeN
RtlConvertExclusiveToShared
RtlConvertLongToLargeInteger
RtlConvertPropertyToVariant
RtlConvertSharedToExclusive
RtlConvertSidToUnicodeString
RtlConvertToAutoInheritSecurityObject
RtlConvertUiListToApiList
RtlConvertUlongToLargeInteger
RtlConvertVariantToProperty
RtlCopyLuid
RtlCopyLuidAndAttributesArray
RtlCopyMemoryStreamTo
RtlCopyOutOfProcessMemoryStreamTo
RtlCopyRangeList
RtlCopySecurityDescriptor
RtlCopySid
RtlCopySidAndAttributesArray
RtlCopyString
RtlCopyUnicodeString
RtlCreateAcl
RtlCreateActivationContext
RtlCreateAndSetSD
RtlCreateAtomTable
RtlCreateBootStatusDataFile
RtlCreateEnvironment
RtlCreateHeap
RtlCreateProcessParameters
RtlCreateQueryDebugBuffer
RtlCreateRegistryKey
RtlCreateSecurityDescriptor
RtlCreateSystemVolumeInformationFolder
RtlCreateTagHeap
RtlCreateTimer
RtlCreateTimerQueue
RtlCreateUnicodeString
RtlCreateUnicodeStringFromAsciiz
RtlCreateUserProcess
RtlCreateUserSecurityObject
RtlCreateUserThread
RtlCustomCPToUnicodeN
RtlCutoverTimeToSystemTime
RtlDeNormalizeProcessParams
RtlDeactivateActivationContext
RtlDeactivateActivationContextUnsafeFast
RtlDebugPrintTimes
RtlDecodePointer
RtlDecodeSystemPointer
RtlDecompressBuffer
RtlDecompressFragment
RtlDefaultNpAcl
RtlDelete
RtlDeleteAce
RtlDeleteAtomFromAtomTable
RtlDeleteCriticalSection
RtlDeleteElementGenericTable
RtlDeleteElementGenericTableAvl
RtlDeleteNoSplay
RtlDeleteOwnersRanges
RtlDeleteRange
RtlDeleteRegistryValue
RtlDeleteResource
RtlDeleteSecurityObject

Sections

.text
Size: 488KB - Virtual size: 487KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 176KB - Virtual size: 175KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/SYSTEM32/SMSS.EXE
.sys windows:5 windows x86 arch:x86

871739a6665ecc97b4837cb569e1dc79

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_REMOVABLE_RUN_FROM_SWAP

PDB Paths

usetup.pdb

Imports

ntdll

RtlSetOwnerSecurityDescriptor
RtlSetDaclSecurityDescriptor
RtlCreateSecurityDescriptor
RtlAddAccessAllowedAce
RtlCreateAcl
RtlFreeSid
RtlAllocateAndInitializeSid
NtClose
NtSetSecurityObject
NtOpenFile
RtlInitUnicodeString
LdrUnloadDll
LdrGetProcedureAddress
LdrLoadDll
NtQueryInformationProcess
NtResumeThread
NtWaitForSingleObject
NtTerminateProcess
RtlDestroyProcessParameters
RtlCreateUserProcess
RtlCreateProcessParameters
NtDeleteKey
NtOpenKey
NtQueryDirectoryObject
NtFlushVirtualMemory
NtShutdownSystem
NtFsControlFile
NtCreatePagingFile
RtlGetFullPathName_U
wcslen
NtSetEvent
NtDeviceIoControlFile
RtlPcToFileHeader
RtlCreateUserThread
NtCreateFile
NtCreateEvent
NtQuerySystemInformation
NtInitializeRegistry
RtlAdjustPrivilege
DbgBreakPoint
RtlAllocateHeap
RtlUnicodeStringToAnsiString
RtlNormalizeProcessParams

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 452KB - Virtual size: 452KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/SYSTRAY.EX_
.cab
I386/SYS_SRV.CH_
.cab
I386/T2EMBED.DL_
.cab
I386/TABLE.BM_
.cab
I386/TABLETOC.DL_
.cab
I386/TABLETPC.CA_
.cab
I386/TABLETPC.IN_
.cab
I386/TADA.WA_
.cab
I386/TAHOMA.TT_
.cab
I386/TAHOMABD.TT_
.cab
I386/TAOFF.GI_
.cab
I386/TAOFFH.GI_
.cab
I386/TAON.GI_
.cab
I386/TAONH.GI_
.cab
I386/TAPE.IN_
.cab
I386/TAPE.SY_
.cab
I386/TAPI.DL_
.cab
I386/TAPI.HL_
.cab
I386/TAPI3.DL_
.cab
I386/TAPI32.DL_
.cab
I386/TAPIP.CH_
.cab
I386/TAPIPERF.DL_
.cab
I386/TAPISRV.DL_
.cab
I386/TAPIUI.DL_
.cab
I386/TASKBARW.CH_
.cab
I386/TASKKILL.EX_
.cab
I386/TASKLIST.EX_
.cab
I386/TASKMAN.EX_
.cab
I386/TASKMGR.EX_
.cab
I386/TASKMGR.HL_
.cab
I386/TASKMGRW.CH_
.cab
I386/TCMSETUP.EX_
.cab
I386/TCPIP.SY_
.cab
I386/TCPIP6.SY_
.cab
I386/TCPIPW.CH_
.cab
I386/TCPMIB.DL_
.cab
I386/TCPMON.DL_
.cab
I386/TCPMON.HL_
.cab
I386/TCPMON.IN_
.cab
I386/TCPMONUI.DL_
.cab
I386/TCPSVCS.EX_
.cab
I386/TDASYNC.SY_
.cab
I386/TDC.OC_
.cab
I386/TDI.SY_
.cab
I386/TDIBTH.IN_
.cab
I386/TDIPX.SY_
.cab
I386/TDPIPE.SY_
.cab
I386/TDSPX.SY_
.cab
I386/TDTCP.SY_
.cab
I386/TECH.GI_
.cab
I386/TECH.HT_
.cab
I386/TELEPHON.CP_
.cab
I386/TELNET.EXE
.exe windows:5 windows x86 arch:x86

20902e75edc1c9ee8fb94a2345a302cc

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

telnet.pdb

Imports

msvcrt

_wcslwr
towlower
setlocale
_c_exit
_exit
_XcptFilter
wcsstr
__winitenv
__wgetmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
isalpha
tolower
exit
atoi
towupper
toupper
_strnicmp
strncmp
wcstok
_wcsnicmp
_wtoi
_snprintf
wcsncat
wcscat
wcscpy
calloc
strncpy
strtoul
strchr
sprintf
memchr
_cexit
__set_app_type
_except_handler3
_controlfp
wcscmp
wcsncpy
iswctype
_wcsicmp
_snwprintf
wcslen
_vsnwprintf
malloc
free

advapi32

RegSetValueExW
RegOpenKeyExW
RegQueryValueExA
RegCloseKey
RegCreateKeyExW
RegQueryValueExW
OpenProcessToken
GetTokenInformation
LookupAccountSidW
GetUserNameW

kernel32

GetStdHandle
CreateThread
ExitProcess
GetConsoleOutputCP
GetModuleHandleW
SetLastError
GetSystemDefaultLangID
SetConsoleCtrlHandler
CreateEventW
CreateConsoleScreenBuffer
PulseEvent
GetConsoleMode
SetUnhandledExceptionFilter
ReadConsoleInputW
ReadConsoleInputA
MultiByteToWideChar
GetConsoleCursorInfo
QueryPerformanceCounter
GetFileType
IsDBCSLeadByte
WriteConsoleOutputCharacterA
WriteConsoleA
ReadConsoleOutputAttribute
WriteConsoleOutputAttribute
ScrollConsoleScreenBufferW
GetLargestConsoleWindowSize
LoadLibraryExW
GetCurrentProcessId
OpenProcess
Sleep
SetConsoleActiveScreenBuffer
GetEnvironmentVariableA
GetConsoleCP
GetModuleHandleA
GetTickCount
GetCurrentThreadId
GetSystemTimeAsFileTime
GetCurrentProcess
TerminateProcess
SetConsoleCursorInfo
UnhandledExceptionFilter
SetConsoleMode
WriteFile
WaitForSingleObject
WriteConsoleInputW
ResetEvent
WriteConsoleW
lstrcpynW
LocalFree
SetConsoleTitleW
SetEvent
SetConsoleWindowInfo
SetConsoleScreenBufferSize
GetConsoleScreenBufferInfo
GetEnvironmentVariableW
LocalAlloc
CloseHandle
GetLastError
CreateFileW
GetACP
SetEnvironmentVariableW
FillConsoleOutputAttribute
FillConsoleOutputCharacterW
SetConsoleCursorPosition
WideCharToMultiByte
ReadConsoleW
WriteConsoleOutputW
ReadConsoleOutputW
FreeLibrary
GetProcAddress
LoadLibraryA
GetSystemDirectoryA
FormatMessageW
GetThreadLocale
SetThreadLocale

user32

wsprintfW
GetMessageW
TranslateMessage
DispatchMessageW
RegisterClassW
CreateWindowExW
DefWindowProcW
KillTimer
SetWindowLongW
GetKeyboardType
DestroyWindow
VkKeyScanW
MessageBeep
SetRectEmpty
GetWindowLongW
PostMessageW
IsCharAlphaW
IsCharAlphaNumericW
LoadStringW
MapVirtualKeyW

wsock32

WSAStartup
WSACleanup
socket
bind
setsockopt
connect
closesocket
WSAAsyncSelect
recv
send
WSASetLastError
getservbyport
ntohs
gethostbyaddr
htonl
inet_addr
gethostbyname
WSAGetLastError
ioctlsocket
getservbyname
htons

security

AcquireCredentialsHandleW
QuerySecurityPackageInfoW
InitializeSecurityContextW

imm32

ImmGetContext
ImmSetCompositionFontW
ImmSetCompositionWindow
ImmReleaseContext

ole32

CoCreateInstanceEx
CoUninitialize
CoInitializeEx

gdi32

TranslateCharsetInfo

Sections

.text
Size: 52KB - Virtual size: 52KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 6KB - Virtual size: 114KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
I386/TELNET.HL_
.cab
I386/TELNETW.CH_
.cab
I386/TERMCAP._
.cab
I386/TERMMGR.DL_
.cab
I386/TERMSRV.DL_
.cab
I386/TESTSND.WA_
.cab
I386/TEXTTBL.XS_
.cab
I386/TEXTTBLW.XS_
.cab
I386/TEXTVALU.XS_
.cab
I386/TFFSPORT.SY_
.cab
I386/TFTP.EX_
.cab
I386/TFTPD.EX_
.cab
I386/TGIU.IN_
.cab
I386/THANKS10.PN_
.cab
I386/THANKS8.PN_
.cab
I386/THAWBRKR.DL_
.cab
I386/THEMEUI.DL_
.cab
I386/TIMEDATE.CP_
.cab
I386/TIMER.DR_
.cab
I386/TIMES.TT_
.cab
I386/TIMESBD.TT_
.cab
I386/TIMESBI.TT_
.cab
I386/TIMESI.TT_
.cab
I386/TIMESRV.CH_
.cab
I386/TIMEZONE.HT_
.cab
I386/TIP.HT_
.cab
I386/TIPS.GI_
.cab
I386/TITLE.WM_
.cab
I386/TLNTADMN.EX_
.cab
I386/TLNTSESS.EX_
.cab
I386/TLNTSVR.EX_
.cab
I386/TLNTSVRP.DL_
.cab
I386/TLYP6RES.DL_
.cab
I386/TMPLPROV.DL_
.cab
I386/TMPLPROV.MF_
.cab
I386/TMPLPROV.MO_
.cab
I386/TOOBUSY.HT_
.cab
I386/TOOLHELP.DL_
.cab
I386/TOOLS.DL_
.cab
I386/TOOTHY.WM_
.cab
I386/TOSIDE.SY_
.cab
I386/TOUR.JS_
.cab
I386/TOURBG.GI_
.cab
I386/TOURSTRT.EX_
.cab
I386/TOURW.EX_
.cab
I386/TOWN.MI_
.cab
I386/TPAUSE.GI_
.cab
I386/TPAUSEH.GI_
.cab
I386/TPLAY.GI_
.cab
I386/TPLAYH.GI_
.cab
I386/TRACERPT.EX_
.cab
I386/TRACERT.EX_
.cab
I386/TRACERT6.EX_
.cab
I386/TRADBDO.TT_
.cab
I386/TRADO.TT_
.cab
I386/TRAFFIC.DL_
.cab
I386/TREBUC.TT_
.cab
I386/TREBUCBD.TT_
.cab
I386/TREBUCBI.TT_
.cab
I386/TREBUCIT.TT_
.cab
I386/TREE.CO_
.cab
I386/TRIALOC.DL_
.cab
I386/TRID3D.IN_
.cab
I386/TRIDKB.IN_
.cab
I386/TRIDXP.IN_
.cab
I386/TRIEDIT.DL_
.cab
I386/TRKWKS.DL_
.cab
I386/TRNSPROV.DL_
.cab
I386/TRNSPROV.MF_
.cab
I386/TRNSPROV.MO_
.cab
I386/TSAPPCMP.DL_
.cab
I386/TSBVCAP.IN_
.cab
I386/TSCDSBL.BA_
.cab
I386/TSCFGWMI.DL_
.cab
I386/TSCFGWMI.MF_
.cab
I386/TSCFGWMI.MO_
.cab
I386/TSCINST.VB_
.cab
I386/TSCON.EX_
.cab
I386/TSCUINST.VB_
.cab
I386/TSCUPDC.DLL
.dll windows:5 windows x86 arch:x86

30891113ab434e152d8ba7530168ae9c

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

tscupdc.pdb

Imports

msvcrt

_vsnwprintf
wcsstr
wcslen
_wcsicmp

user32

LoadStringW
GetMessageTime
GetCursorPos

kernel32

FindClose
FindNextFileW
DeleteFileW
FindFirstFileW
DisableThreadLibraryCalls
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetLocalTime
LoadLibraryW
FreeLibrary
GlobalMemoryStatus
OutputDebugStringW
GetDiskFreeSpaceA
GetComputerNameA
GetVersionExA
GetProcAddress
LocalFree

shell32

SHGetFolderPathW

ole32

CoUninitialize
CoCreateInstance
CoInitialize

shlwapi

SHDeleteKeyW

advapi32

RegQueryValueExA
RegSetValueExA
RegOpenKeyExW
RegQueryValueExW
RegSetValueExW
RegCreateKeyExW
RegCloseKey
RegOpenKeyExA
GetUserNameA
RegCreateKeyExA

Exports

Exports

ProcessShortcuts
SPForceInstallation
SuccessInstallation

Sections

.text
Size: 22KB - Virtual size: 22KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 532B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1024B - Virtual size: 728B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/TSCUPGRD.EX_
.cab
I386/TSD32.DL_
.cab
I386/TSDDD.DL_
.cab
I386/TSDISCON.EX_
.cab
I386/TSGQEC.DL_
.cab
I386/TSHOOT.CA_
.cab
I386/TSHOOT.CH_
.cab
I386/TSHOOT.DL_
.cab
I386/TSHOOT.IN_
.cab
I386/TSKILL.EX_
.cab
I386/TSLABELS.H_
.cab
I386/TSLABELS.IN_
.cab
I386/TSOC.DL_
.cab
I386/TSOC.IN_
.cab
I386/TSPKG.DL_
.cab
I386/TSPROF.EX_
.cab
I386/TSSHUTDN.EX_
.cab
I386/TSSOFT32.AC_
.cab
I386/TSWEB1.HT_
.cab
I386/TULIPS.JP_
.cab
I386/TUNES.BM_
.cab
I386/TUNGA.TT_
.cab
I386/TWAIN.DL_
.cab
I386/TWAIN_32.DL_
.cab
I386/TWCLIENT.CH_
.cab
I386/TWCLIENT.HL_
.cab
I386/TWEXT.DL_
.cab
I386/TWUNK_16.EX_
.cab
I386/TWUNK_32.EX_
.cab
I386/TXFLOG.DL_
.cab
I386/TXTSETUP.SIF
I386/TYPELIB.DL_
.cab
I386/TYPEPERF.EX_
.cab
I386/TYROL.JP_
.cab
I386/TYROLM.JP_
.cab
I386/TZCHANGE.EX_
.cab
I386/UDFS.SY_
.cab
I386/UDHISAPI.DL_
.cab
I386/UFAT.DL_
.cab
I386/UIHELPER.DL_
.cab
I386/ULIB.DL_
.cab
I386/ULTRA.SY_
.cab
I386/UMANDLG.DL_
.cab
I386/UMAX.IN_
.cab
I386/UMAXPP.IN_
.cab
I386/UMDMXFRM.DL_
.cab
I386/UMPNPMGR.DL_
.cab
I386/UNATTEND.TXT
I386/UNIANSI.DL_
.cab
I386/UNICODE.NL_
.cab
I386/UNIMDM.TS_
.cab
I386/UNIMDMAT.DL_
.cab
I386/UNIPLAT.DL_
.cab
I386/UNKNOWN.IN_
.cab
I386/UNLODCTR.EX_
.cab
I386/UNREGMP2.EX_
.cab
I386/UNSECAPP.EX_
.cab
I386/UNTFS.DL_
.cab
I386/UPCDB.TT_
.cab
I386/UPCDBI.TT_
.cab
I386/UPCDI.TT_
.cab
I386/UPCDL.TT_
.cab
I386/UPCEB.TT_
.cab
I386/UPCEBI.TT_
.cab
I386/UPCEI.TT_
.cab
I386/UPCEL.TT_
.cab
I386/UPCFB.TT_
.cab
I386/UPCFBI.TT_
.cab
I386/UPCFI.TT_
.cab
I386/UPCFL.TT_
.cab
I386/UPCIB.TT_
.cab
I386/UPCIBI.TT_
.cab
I386/UPCII.TT_
.cab
I386/UPCIL.TT_
.cab
I386/UPCJB.TT_
.cab
I386/UPCJBI.TT_
.cab
I386/UPCJI.TT_
.cab
I386/UPCJL.TT_
.cab
I386/UPCKB.TT_
.cab
I386/UPCKBI.TT_
.cab
I386/UPCKI.TT_
.cab
I386/UPCKL.TT_
.cab
I386/UPCLB.TT_
.cab
I386/UPCLBI.TT_
.cab
I386/UPCLI.TT_
.cab
I386/UPCLL.TT_
.cab
I386/UPDATE.CN_
.cab
I386/UPDATE.SY_
.cab
I386/UPDATE1W.CH_
.cab
I386/UPDPROV.DL_
.cab
I386/UPDPROV.MF_
.cab
I386/UPDPROV.MO_
.cab
I386/UPDSHELL.HT_
.cab
I386/UPLOADM.EX_
.cab
I386/UPNP.DL_
.cab
I386/UPNPCONT.EX_
.cab
I386/UPNPHOST.DL_
.cab
I386/UPNPUI.DL_
.cab
I386/UPS.EX_
.cab
I386/UP_I.CU_
.cab
I386/UP_IL.CU_
.cab
I386/UP_IM.CU_
.cab
I386/UP_L.CU_
.cab
I386/UP_M.CU_
.cab
I386/UP_R.CU_
.cab
I386/UP_RL.CU_
.cab
I386/UP_RM.CU_
.cab
I386/UREG.DL_
.cab
I386/URGENT.CO_
.cab
I386/URL.DL_
.cab
I386/URLMON.DL_
.cab
I386/USB.IN_
.cab
I386/USB8023.SY_
.cab
I386/USB8023X.SY_
.cab
I386/USBCCGP.SY_
.cab
I386/USBD.SY_
.cab
I386/USBEHCI.SY_
.cab
I386/USBHUB.SY_
.cab
I386/USBMON.DL_
.cab
I386/USBOHCI.SY_
.cab
I386/USBPORT.IN_
.cab
I386/USBPORT.SY_
.cab
I386/USBPRINT.IN_
.cab
I386/USBSTOR.IN_
.cab
I386/USBSTOR.SY_
.cab
I386/USBUHCI.SY_
.cab
I386/USBVIDEO.IN_
.cab
I386/USER.EX_
.cab
I386/USER32.DL_
.cab
I386/USERCPL.CH_
.cab
I386/USERENV.DL_
.cab
I386/USERINIT.EX_
.cab
I386/USERMIG.IN_
.cab
I386/USERNAME.HT_
.cab
I386/USERS.HL_
.cab
I386/USETUP.EXE
.sys windows:5 windows x86 arch:x86

871739a6665ecc97b4837cb569e1dc79

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_REMOVABLE_RUN_FROM_SWAP

Imports

ntdll

RtlSetOwnerSecurityDescriptor
RtlSetDaclSecurityDescriptor
RtlCreateSecurityDescriptor
RtlAddAccessAllowedAce
RtlCreateAcl
RtlFreeSid
RtlAllocateAndInitializeSid
NtClose
NtSetSecurityObject
NtOpenFile
RtlInitUnicodeString
LdrUnloadDll
LdrGetProcedureAddress
LdrLoadDll
NtQueryInformationProcess
NtResumeThread
NtWaitForSingleObject
NtTerminateProcess
RtlDestroyProcessParameters
RtlCreateUserProcess
RtlCreateProcessParameters
NtDeleteKey
NtOpenKey
NtQueryDirectoryObject
NtFlushVirtualMemory
NtShutdownSystem
NtFsControlFile
NtCreatePagingFile
RtlGetFullPathName_U
wcslen
NtSetEvent
NtDeviceIoControlFile
RtlPcToFileHeader
RtlCreateUserThread
NtCreateFile
NtCreateEvent
NtQuerySystemInformation
NtInitializeRegistry
RtlAdjustPrivilege
DbgBreakPoint
RtlAllocateHeap
RtlUnicodeStringToAnsiString
RtlNormalizeProcessParams

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 452KB - Virtual size: 451KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/USMTDEF.IN_
.cab
I386/USP10.DL_
.cab
I386/USRLOGON.CM_
.cab
I386/UTILDLL.DL_
.cab
I386/UTILMAN.EX_
.cab
I386/UTILMGR.CH_
.cab
I386/UTILMGR.HL_
.cab
I386/UTOPIAAS.WA_
.cab
I386/UTOPIACL.WA_
.cab
I386/UTOPIACR.WA_
.cab
I386/UTOPIADE.WA_
.cab
I386/UTOPIAER.WA_
.cab
I386/UTOPIAEX.WA_
.cab
I386/UTOPIAMA.WA_
.cab
I386/UTOPIAME.WA_
.cab
I386/UTOPIAMI.WA_
.cab
I386/UTOPIAOP.WA_
.cab
I386/UTOPIAQU.WA_
.cab
I386/UTOPIARE.WA_
.cab
I386/UTOPIAWI.WA_
.cab
I386/UTOPIA~1.WA_
.cab
I386/UTOPIA~2.WA_
.cab
I386/UTOPIA~3.WA_
.cab
I386/UTOPIA~4.WA_
.cab
I386/UXTHEME.DL_
.cab
I386/V7VGA.RO_
.cab
I386/VANISHER.AN_
.cab
I386/VBAJET32.DL_
.cab
I386/VBICODEC.AX_
.cab
I386/VBISURF.AX_
.cab
I386/VBSCRIPT.DL_
.cab
I386/VBSCRIPT.MU_
.cab
I386/VCDEX.DL_
.cab
I386/VCHNT5.DL_
.cab
I386/VDMDBG.DL_
.cab
I386/VDMREDIR.DL_
.cab
I386/VENICE.JP_
.cab
I386/VENICEM.JP_
.cab
I386/VER.DL_
.cab
I386/VERCLSID.EX_
.cab
I386/VERDANA.TT_
.cab
I386/VERDANAB.TT_
.cab
I386/VERDANAI.TT_
.cab
I386/VERDANAZ.TT_
.cab
I386/VERIFIER.DL_
.cab
I386/VERIFIER.EX_
.cab
I386/VERIFIER.HL_
.cab
I386/VERISIGN.BM_
.cab
I386/VERONA.JP_
.cab
I386/VERONAM.JP_
.cab
I386/VERSION.DL_
.cab
I386/VFPODBC.DL_
.cab
I386/VGA.DL_
.cab
I386/VGA.DR_
.cab
I386/VGA.SY_
.cab
I386/VGA256.DL_
.cab
I386/VGA64K.DL_
.cab
I386/VGA737.FO_
.cab
I386/VGA775.FO_
.cab
I386/VGA850.FO_
.cab
I386/VGA852.FO_
.cab
I386/VGA855.FO_
.cab
I386/VGA857.FO_
.cab
I386/VGA860.FO_
.cab
I386/VGA861.FO_
.cab
I386/VGA863.FO_
.cab
I386/VGA865.FO_
.cab
I386/VGA866.FO_
.cab
I386/VGA869.FO_
.cab
I386/VGAF1255.FO_
.cab
I386/VGAF1256.FO_
.cab
I386/VGAF1257.FO_
.cab
I386/VGAF874.FO_
.cab
I386/VGAFIX.FO_
.cab
I386/VGAFIXE.FO_
.cab
I386/VGAFIXG.FO_
.cab
I386/VGAFIXR.FO_
.cab
I386/VGAFIXT.FO_
.cab
I386/VGAOEM.FO_
.cab
I386/VGAS1255.FO_
.cab
I386/VGAS1256.FO_
.cab
I386/VGAS1257.FO_
.cab
I386/VGAS874.FO_
.cab
I386/VGASYS.FO_
.cab
I386/VGASYSE.FO_
.cab
I386/VGASYSG.FO_
.cab
I386/VGASYSR.FO_
.cab
I386/VGASYST.FO_
.cab
I386/VGX.DL_
.cab
I386/VGX.IN_
.cab
I386/VIAFIR2K.IN_
.cab
I386/VIAIDE.SY_
.cab
I386/VIDEOBG.GI_
.cab
I386/VIDEOPRT.SY_
.cab
I386/VIDSAMP.GI_
.cab
I386/VIEWPROV.DL_
.cab
I386/VIZ.WM_
.cab
I386/VJOY.DL_
.cab
I386/VMMREG32.DL_
.cab
I386/VOLSNAP.IN_
.cab
I386/VOLSNAP.SY_
.cab
I386/VOLUME.IN_
.cab
I386/VORTEC.JP_
.cab
I386/VRINDA.TT_
.cab
I386/VSSADMIN.EX_
.cab
I386/VSSAPI.DL_
.cab
I386/VSSVC.EX_
.cab
I386/VSS_PS.DL_
.cab
I386/VWIPXSPX.DL_
.cab
I386/VWIPXSPX.EX_
.cab
I386/W2K3RD.MS_
.cab
I386/W2K3S1RD.MS_
.cab
I386/W32.DL_
.cab
I386/W32TIME.DL_
.cab
I386/W32TM.EX_
.cab
I386/W32TOPL.DL_
.cab
I386/W3CTRS51.DL_
.cab
I386/W3CTRS51.H2_
.cab
I386/W3CTRS51.IN_
.cab
I386/W3EXT.DL_
.cab
I386/W3SCFG.DL_
.cab
I386/W3SSL.DL_
.cab
I386/W3SVAPI.DL_
.cab
I386/W3SVC.DL_
.cab
I386/W95UPGNT.DL_
.cab
I386/WAB.CH_
.cab
I386/WAB.EX_
.cab
I386/WAB.HL_
.cab
I386/WAB32.DL_
.cab
I386/WAB32RES.DL_
.cab
I386/WAB50.IN_
.cab
I386/WABFIND.DL_
.cab
I386/WABIMP.DL_
.cab
I386/WABMIG.EX_
.cab
I386/WACOMPEN.SY_
.cab
I386/WAGTAIL.AN_
.cab
I386/WAIT_I.CU_
.cab
I386/WAIT_IL.CU_
.cab
I386/WAIT_IM.CU_
.cab
I386/WAIT_L.CU_
.cab
I386/WAIT_M.CU_
.cab
I386/WAIT_R.CU_
.cab
I386/WAIT_RL.CU_
.cab
I386/WAIT_RM.CU_
.cab
I386/WAM51.DL_
.cab
I386/WAMPS51.DL_
.cab
I386/WAMREG51.DL_
.cab
I386/WAMREGPS.DL_
.cab
I386/WANARP.SY_
.cab
I386/WATCHDOG.SY_
.cab
I386/WATCHER.EX_
.cab
I386/WATERLIL.JP_
.cab
I386/WAVE.IN_
.cab
I386/WAVEMIX.INF
I386/WAVEMSP.DL_
.cab
I386/WB32.EX_
.cab
I386/WBCACHE.DE_
.cab
I386/WBCACHE.EN_
.cab
I386/WBCACHE.ES_
.cab
I386/WBCACHE.FR_
.cab
I386/WBCACHE.IT_
.cab
I386/WBCACHE.NL_
.cab
I386/WBCACHE.SV_
.cab
I386/WBDBASE.DE_
.cab
I386/WBDBASE.EN_
.cab
I386/WBDBASE.ES_
.cab
I386/WBDBASE.FR_
.cab
I386/WBDBASE.IT_
.cab
I386/WBDBASE.NL_
.cab
I386/WBDBASE.SV_
.cab
I386/WBEMADS.DL_
.cab
I386/WBEMADS.TL_
.cab
I386/WBEMCNTL.DL_
.cab
I386/WBEMCOMN.DL_
.cab
I386/WBEMCONS.DL_
.cab
I386/WBEMCONS.MF_
.cab
I386/WBEMCONS.MO_
.cab
I386/WBEMCORE.DL_
.cab
I386/WBEMDISP.DL_
.cab
I386/WBEMDISP.TL_
.cab
I386/WBEMESS.DL_
.cab
I386/WBEMOC.IN_
.cab
I386/WBEMPERF.DL_
.cab
I386/WBEMPROX.DL_
.cab
I386/WBEMSNMP.IN_
.cab
I386/WBEMSVC.DL_
.cab
I386/WBEMTEST.CH_
.cab
I386/WBEMTEST.EX_
.cab
I386/WBEMUPGD.DL_
.cab
I386/WBFIRDMA.IN_
.cab
I386/WCEUSBSH.IN_
.cab
I386/WCOM32.EX_
.cab
I386/WDIGEST.DL_
.cab
I386/WDL.TR_
.cab
I386/WDMA10K1.IN_
.cab
I386/WDMAUDIO.IN_
.cab
I386/WDMA_ALI.IN_
.cab
I386/WDMA_AUR.IN_
.cab
I386/WDMA_AVC.IN_
.cab
I386/WDMA_AZT.IN_
.cab
I386/WDMA_CSC.IN_
.cab
I386/WDMA_CSF.IN_
.cab
I386/WDMA_CTL.IN_
.cab
I386/WDMA_CWR.IN_
.cab
I386/WDMA_ENS.IN_
.cab
I386/WDMA_ES2.IN_
.cab
I386/WDMA_ES3.IN_
.cab
I386/WDMA_ESS.IN_
.cab
I386/WDMA_INT.IN_
.cab
I386/WDMA_M2E.IN_
.cab
I386/WDMA_NE2.IN_
.cab
I386/WDMA_NEO.IN_
.cab
I386/WDMA_RIP.IN_
.cab
I386/WDMA_SIS.IN_
.cab
I386/WDMA_USB.IN_
.cab
I386/WDMA_VIA.IN_
.cab
I386/WDMA_YM2.IN_
.cab
I386/WDMA_YMH.IN_
.cab
I386/WDMJOY.IN_
.cab
I386/WEBCHECK.DL_
.cab
I386/WEBCLNT.DL_
.cab
I386/WEBDINGS.TT_
.cab
I386/WEBFLDRS.MS_
.cab
I386/WEBHITS.DL_
.cab
I386/WEBPUB.CH_
.cab
I386/WEBVW.DL_
.cab
I386/WEITEKP9.DL_
.cab
I386/WEITEKP9.SY_
.cab
I386/WELCOME.HT_
.cab
I386/WELCOME.OS_
.cab
I386/WEXTRACT.EX_
.cab
I386/WFOSPF.MI_
.cab
I386/WFP0.IN_
.cab
I386/WFP1.IN_
.cab
I386/WFP2.IN_
.cab
I386/WFP3.IN_
.cab
I386/WFP4.IN_
.cab
I386/WFP5.IN_
.cab
I386/WFP6.IN_
.cab
I386/WFP7.IN_
.cab
I386/WFP8.IN_
.cab
I386/WFWNET.DR_
.cab
I386/WHATNEWW.CH_
.cab
I386/WHOWHERE.BM_
.cab
I386/WHQLPROV.MO_
.cab
I386/WIAACMGR.EX_
.cab
I386/WIADEFUI.DL_
.cab
I386/WIADSS.DL_
.cab
I386/WIASCR.DL_
.cab
I386/WIASERVC.DL_
.cab
I386/WIASF.AX_
.cab
I386/WIASHEXT.DL_
.cab
I386/WIATWAIN.DS_
.cab
I386/WIAVIDEO.DL_
.cab
I386/WIAVUSD.DL_
.cab
I386/WIC.DL_
.cab
I386/WICEXT.DL_
.cab
I386/WIFEMAN.DL_
.cab
I386/WIN.CAB
.cab
I386/WIN.CO_
.cab
I386/WIN.IN_
.cab
I386/WIN2000L.GI_
.cab
I386/WIN2000R.GI_
.cab
I386/WIN32K.SY_
.cab
I386/WIN32PRO.BM_
.cab
I386/WIN32SPL.DL_
.cab
I386/WIN87EM.DL_
.cab
I386/WIN9XMIG/ACROBAT/FILES/FILE1
.dll regsvr32 windows:4 windows x86 arch:x86

be621d3ac8bb2904e8fb884e62394c1c

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

msvcrt

??3@YAXPAX@Z
free
memmove
malloc
__CxxFrameHandler
strncmp
sprintf
_ftol
??2@YAPAXI@Z
fopen
tmpfile
fclose
strchr
_purecall
_access
_unlink
atoi
_adjust_fdiv
_initterm
??1type_info@@UAE@XZ
_onexit
__dllonexit
_EH_prolog
time
ctime
__p___mb_cur_max
_isctype
__p__pctype
strstr
fgetc
strncpy
_mktemp
atof
strncat
_mbscmp
isdigit
_stricmp
realloc
fprintf
strrchr
wcstombs
fseek
fread
fwrite
wcsncpy
wcslen

urlmon

CreateURLMoniker
HlinkNavigateString
IsAsyncMoniker
CreateAsyncBindCtx

wininet

HttpSendRequestA
HttpQueryInfoA
InternetCloseHandle
InternetReadFile
InternetOpenUrlA
InternetOpenA
InternetSetFilePointer
HttpOpenRequestA
InternetConnectA
InternetSetStatusCallback
InternetTimeFromSystemTime
InternetQueryDataAvailable

mfc42

ord2983
ord1979
ord1614
ord6370
ord4441
ord4356
ord1132
ord3002
ord1892
ord4252
ord6364
ord3326
ord6365
ord4472
ord5498
ord2982
ord3147
ord3259
ord4465
ord3136
ord3278
ord2985
ord3081
ord2976
ord3353
ord3830
ord3831
ord3825
ord3079
ord4080
ord4622
ord4424
ord3681
ord743
ord446
ord1212
ord1168
ord1226
ord4570
ord4672
ord4843
ord5011
ord5265
ord4376
ord4853
ord4998
ord4713
ord2514
ord6052
ord4078
ord1775
ord4407
ord5241
ord2385
ord5163
ord6371
ord4353
ord5286
ord3798
ord4837
ord4438
ord2648
ord2055
ord6376
ord3749
ord5065
ord1727
ord5261
ord2446
ord2124
ord5277
ord3279
ord4625
ord4425
ord746
ord800
ord860
ord540
ord449
ord2278
ord2370
ord2288
ord1877
ord4249
ord4006
ord2486
ord2687
ord599
ord1177
ord1243
ord1210
ord2439
ord1693
ord5618
ord994
ord4687
ord4639
ord5674
ord2156
ord4856
ord4920
ord6002
ord2137
ord1963
ord5213
ord2953
ord3868
ord5150
ord4705
ord4707
ord2876
ord2998
ord5649
ord4113
ord4661
ord4660
ord4768
ord4650
ord4903
ord4548
ord4521
ord4594
ord4988
ord4925
ord4930
ord4935
ord4659
ord4909
ord4908
ord4668
ord4667
ord4666
ord4689
ord5023
ord4654
ord4643
ord4354
ord4780
ord4649
ord4637
ord4636
ord5060
ord4584
ord4371
ord4361
ord861
ord4739
ord4741
ord4738
ord4409
ord4603
ord5008
ord4415
ord4992
ord2488
ord3404
ord4539
ord2954
ord6055
ord1776
ord2384
ord2724
ord537
ord3148
ord3260
ord4466
ord2986
ord3080
ord4081
ord4624
ord5825
ord5651
ord3130
ord3676
ord3946
ord350
ord1601
ord3663
ord3571
ord3626
ord2754
ord640
ord5785
ord1640
ord1641
ord1146
ord323
ord5199
ord2864
ord858
ord665
ord3346
ord3318
ord5186
ord354
ord2541
ord4949
ord3556
ord3230
ord4342
ord6030
ord4025
ord3126
ord3613
ord4502
ord5033
ord6197
ord4459
ord2379
ord703
ord403
ord268
ord2915
ord1567
ord815
ord5798
ord2859
ord3057
ord6354
ord5290
ord2414
ord1105
ord1131
ord3952
ord6375
ord4486
ord2554
ord2512
ord5731
ord3922
ord1089
ord4534
ord2396
ord3269
ord5300
ord5302
ord4079
ord4698
ord5307
ord5289
ord5714
ord3262
ord3401
ord3670
ord2956
ord561
ord600
ord1216
ord1227
ord535
ord3530
ord3133
ord4648
ord1255
ord1578
ord3376
ord3669
ord723
ord423
ord1197
ord1570
ord269
ord826
ord6412
ord1116
ord1182
ord1575
ord1253
ord1577
ord1176
ord342

kernel32

GlobalFree
UnmapViewOfFile
OpenFileMappingA
MapViewOfFile
CloseHandle
WinExec
GlobalAlloc
lstrlenA
GetVersion
Sleep
LocalAlloc
LocalFree
lstrcmpA
FindResourceA
lstrcpyA
GetPrivateProfileStringA
MulDiv
InitializeCriticalSection
ResetEvent
SetEvent
GetWindowsDirectoryA
OpenFile
GetExitCodeThread
WaitForSingleObject
TerminateThread
CreateEventA
EnterCriticalSection
LeaveCriticalSection
GetModuleFileNameA
lstrcatA
GetTempPathA
GetTempFileNameA
MultiByteToWideChar
SetLastError
lstrcmpiA

user32

GetWindow
GetDC
CharUpperA
WindowFromDC
DialogBoxParamA
GetWindowLongA
SetWindowPos
GetWindowRect
GetDesktopWindow
SetWindowTextA
GetWindowTextA
GetDlgItem
GetAsyncKeyState
LoadIconA
SendMessageA
ReleaseDC
DestroyIcon
EndDialog
ShowWindow
LoadStringA
CharToOemA
DefWindowProcA
CreateWindowExA
RegisterClassA
PeekMessageA
LoadBitmapA
TranslateMessage
FindWindowA
UnregisterClassA
DestroyWindow
SetPropA
GetPropA
IsWindowVisible
PostMessageA
MessageBoxA
OemToCharA
EnableWindow
wsprintfA
DispatchMessageA

gdi32

Escape
CreateFontA
LPtoDP
DeleteObject
GetEnhMetaFileA
PlayEnhMetaFile
DeleteEnhMetaFile
GetSystemPaletteEntries
GetDeviceCaps
CreateCompatibleDC
GetObjectA
BitBlt

advapi32

RegQueryValueExA
RegOpenKeyExA
RegCreateKeyA
RegCloseKey

ole32

CoCreateInstance
CoTaskMemAlloc

oleaut32

VariantInit
LoadRegTypeLi

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 54KB - Virtual size: 53KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/WIN9XMIG/ACROBAT/FILES/FILE10
.dll windows:4 windows x86 arch:x86

ac3dae0bbbb8ec777329a90d7fb06823

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

LockResource
LoadResource
FindResourceA
LoadLibraryA
GetProcAddress
GlobalLock
GlobalAlloc
GlobalFree
GlobalUnlock
GlobalHandle
OpenFile
FreeResource
FindNextFileA
FindFirstFileA
FindClose
GetPrivateProfileStringA
GetDiskFreeSpaceA
FreeLibrary
_lclose
_llseek
_lread
GetProfileIntA
GetACP
GetCPInfo
LCMapStringW
_lwrite
GetLocalTime
RtlUnwind
GetLastError
GetCommandLineA
GetModuleHandleA
HeapAlloc
HeapFree
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
ExitProcess
GetVersion
CloseHandle
WriteFile
GetTimeZoneInformation
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
HeapCreate
HeapDestroy
SetHandleCount
GetFileType
GetStdHandle
GetStartupInfoA
GetModuleFileNameA
LCMapStringA
GetStringTypeA
GetOEMCP
FreeEnvironmentStringsA
MultiByteToWideChar
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
WideCharToMultiByte
SetFilePointer
SetStdHandle
FlushFileBuffers
CreateFileA
SetUnhandledExceptionFilter
IsBadReadPtr
IsBadWritePtr
IsBadCodePtr
HeapReAlloc
GetStringTypeW
SetEndOfFile
ReadFile
CompareStringA
CompareStringW
SetEnvironmentVariableA
HeapSize
DeleteFileA

user32

GetKeyState
GetAsyncKeyState

advapi32

RegCreateKeyA
RegSetValueA
RegOpenKeyA
RegDeleteKeyA
RegQueryValueA
RegCloseKey

Exports

Exports

AdamClose
AdamConfigure
AdamInfo
AdamList
AdamOpen
AdamScan

Sections

.text
Size: 60KB - Virtual size: 60KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 9KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 936B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/WIN9XMIG/ACROBAT/FILES/FILE11
.exe windows:4 windows x86 arch:x86

e312aa5b326894f86f8511ebfa03dc06

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetTempPathA
GetTempFileNameA
SetCurrentDirectoryA
GetCurrentDirectoryA
GetModuleFileNameA
GetCurrentThread
GetProfileIntA
MultiByteToWideChar
GlobalLock
GlobalAlloc
GlobalFree
GlobalUnlock
GlobalHandle
WideCharToMultiByte
GetModuleHandleA
GetVersion
GetProfileStringA
GetStartupInfoA

user32

ShowWindow
EnableWindow
CharLowerA
PostMessageA
MessageBoxA
ReleaseDC
SetDlgItemTextA
GetWindowLongA
SetFocus
GetDlgItem
SendMessageA
EndDialog
GetParent
GetSystemMetrics
GetKeyState
GetAsyncKeyState
UpdateWindow
SetWindowTextA
CreateDialogParamA
DialogBoxParamA
SetWindowPos
PostQuitMessage
SetMessageQueue
GetMessageA
TranslateMessage
DispatchMessageA
LoadStringA
DestroyWindow
InvalidateRect
SetRect
InflateRect
FillRect
RegisterWindowMessageA
IsDlgButtonChecked
IsWindowEnabled
CheckDlgButton
GetDlgItemTextA
BringWindowToTop
SetForegroundWindow
SetActiveWindow
GetDC
GetWindowRect

gdi32

GetTextExtentPointA
GetStockObject

comdlg32

CommDlgExtendedError
GetOpenFileNameA

advapi32

RegCreateKeyA
RegCloseKey
RegSetValueA
RegOpenKeyA
RegDeleteKeyA
RegQueryValueA

ole32

CoRevokeClassObject
OleBuildVersion
CoCreateInstance
CoRegisterClassObject
OleInitialize
OleUninitialize
CLSIDFromProgID

oleaut32

VariantClear
SysAllocStringLen
VariantChangeType
CreateStdDispatch
SysAllocString
VariantInit
LoadRegTypeLi

adam32

AdamClose
AdamScan
AdamOpen
AdamInfo
AdamConfigure
AdamList

msvcrt40

srand
__p__commode
_adjust_fdiv
__setusermatherr
__getmainargs
_initterm
__p__acmdln
exit
_XcptFilter
_exit
atol
strncat
strtok
atoi
__CxxFrameHandler
strchr
memmove
time
__p__fmode
rand
fopen
_strdate
_strtime
strrchr
fwrite
_stricmp
fclose
??2@YAPAXI@Z
??3@YAXPAX@Z
sprintf
_ltoa
__set_app_type
_except_handler3
_controlfp

Exports

Exports

HookProc
NextDlgProc
ScanDlgProc
SelectDlgProc
StatusDlgProc

Sections

.text
Size: 28KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 6KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/WIN9XMIG/ACROBAT/FILES/FILE12
.dll windows:4 windows x86 arch:x86

f899e60cea84b0116726db1d9d78785c

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

FindNextFileA
FindFirstFileA
FindClose
LCMapStringW
LCMapStringA
GetCurrentDirectoryA
GetFullPathNameA
GetDriveTypeA
FileTimeToLocalFileTime
FileTimeToSystemTime
OpenFile
CompareStringW
CompareStringA
HeapSize
HeapReAlloc
ReadFile
SetEndOfFile
LoadLibraryA
IsBadCodePtr
IsBadWritePtr
IsBadReadPtr
SetUnhandledExceptionFilter
GetFileTime
GetFileAttributesA
_lclose
FileTimeToDosDateTime
GetWindowsDirectoryA
SetEnvironmentVariableA
CreateFileA
SetStdHandle
SetErrorMode
FlushFileBuffers
GetVersion
HeapCreate
GetStringTypeW
GetStringTypeA
SetFilePointer
GetEnvironmentStringsW
FreeEnvironmentStringsW
WideCharToMultiByte
MultiByteToWideChar
FreeEnvironmentStringsA
GetProfileIntA
GetEnvironmentStrings
HeapFree
HeapAlloc
GetLocalTime
RtlUnwind
ExitProcess
GetLastError
GetCommandLineA
GetProcAddress
GetModuleHandleA
GetFileType
SetHandleCount
HeapDestroy
CloseHandle
WriteFile
GetTimeZoneInformation
GetACP
GetOEMCP
GetStdHandle
GetStartupInfoA
GetModuleFileNameA
GetCPInfo

user32

DialogBoxParamA
GetParent
SetWindowPos
GetSystemMetrics
GetDC
ReleaseDC
OffsetRect
SetRect
GetWindowRect
ScreenToClient
MoveWindow
SendMessageA
SetDlgItemTextA
EnableWindow
GetDlgItem
SetFocus
GetWindowLongA
SetWindowLongA
LoadIconA
EndDialog
GetAsyncKeyState
MessageBoxA

gdi32

GetTextExtentPointA
DeleteObject

advapi32

RegQueryValueA
RegDeleteKeyA
RegOpenKeyA
RegCreateKeyA
RegSetValueA
RegCloseKey

pixlocn

ord27

pixdfltn

ord72
ord70
ord115
ord29
ord88
ord89
ord90
ord74
ord73
ord28
ord30

Exports

Exports

ConfigureDlgProc
ENTRYPOINT
ReleaseProcessor

Sections

.text
Size: 50KB - Virtual size: 49KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 670B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/WIN9XMIG/ACROBAT/FILES/FILE13
.dll windows:4 windows x86 arch:x86

4f5610ebc40f8cb70c87cc634b746ad9

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetProcAddress
LoadLibraryA
SetErrorMode
GlobalUnlock
GetWindowsDirectoryA
GetProfileIntA
FreeLibrary
GlobalUnfix
GlobalFree
GlobalAlloc
lstrlenA
OpenFile
GlobalLock
HeapAlloc
ExitProcess
LCMapStringA
LCMapStringW
ReadFile
SetEndOfFile
FlushFileBuffers
SetStdHandle
CreateFileA
GetStringTypeA
SetFilePointer
GetStringTypeW
GetEnvironmentStringsW
FreeEnvironmentStringsW
WideCharToMultiByte
MultiByteToWideChar
FreeEnvironmentStringsA
GlobalFix
GetEnvironmentStrings
GetLocalTime
GetCommandLineA
GetModuleHandleA
GetVersion
HeapFree
GetLastError
CloseHandle
WriteFile
GetStdHandle
GetFileType
HeapCreate
HeapDestroy
SetHandleCount
GetACP
GetOEMCP
GetStartupInfoA
GetModuleFileNameA
GetCPInfo

user32

SetWindowPos
GetWindowRect
DefWindowProcA
GetSystemMetrics
GetParent
CallNextHookEx
SetActiveWindow
DispatchMessageA
GetMessageA
TranslateMessage
GetClassNameA
UnhookWindowsHookEx
LoadStringA
RegisterClassA
DestroyWindow
UnregisterClassA
SetForegroundWindow
CreateWindowExA
BringWindowToTop

advapi32

RegQueryValueA
RegCloseKey
RegSetValueA
RegCreateKeyA
RegOpenKeyA
RegDeleteKeyA

Exports

Exports

DummyWndProc
ENTRYPOINT
TwainMessageHook

Sections

.text
Size: 33KB - Virtual size: 32KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 251B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 7KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/WIN9XMIG/ACROBAT/FILES/FILE2
I386/WIN9XMIG/ACROBAT/FILES/FILE3
.dll windows:4 windows x86 arch:x86

3c16e408d1c8ad25cc9ce591a25da78b

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Imports

win32k.sys

FLOATOBJ_Mul
EngCreateSemaphore
EngReleaseSemaphore
EngGetPrinterDataFileName
EngAcquireSemaphore
EngLoadModule
EngGetDriverName
EngAssociateSurface
EngCreateDeviceSurface
EngDeleteSurface
EngDeletePalette
EngFreeMem
EngFreeModule
EngCreatePalette
EngWritePrinter
XLATEOBJ_iXlate
BRUSHOBJ_pvAllocRbrush
EngStretchBlt
EngEraseSurface
EngBitBlt
BRUSHOBJ_pvGetRbrush
FLOATOBJ_EqualLong
FLOATOBJ_SubFloat
FLOATOBJ_SetFloat
FLOATOBJ_LessThanLong
XFORMOBJ_iGetXform
FLOATOBJ_GetLong
FLOATOBJ_MulFloat
FLOATOBJ_GetFloat
FLOATOBJ_SetLong
FLOATOBJ_Div
FLOATOBJ_MulLong
FLOATOBJ_Sub
EngSetLastError
FLOATOBJ_DivFloat
FLOATOBJ_Add
FLOATOBJ_DivLong
FLOATOBJ_AddLong
STROBJ_bEnum
STROBJ_vEnumStart
EngDeletePath
PATHOBJ_vGetBounds
CLIPOBJ_ppoGetPath
FONTOBJ_cGetGlyphs
EngUnicodeToMultiByteN
EngAllocMem
STROBJ_dwGetCodePage
FONTOBJ_pifi
EngFindResource
EngComputeGlyphSet
XFORMOBJ_bApplyXform
EngMulDiv
FONTOBJ_pxoGetXform
PATHOBJ_bEnum
PATHOBJ_vEnumStart
FONTOBJ_cGetAllGlyphHandles
EngQueryLocalTime
EngGetType1FontList
EngUnmapFontFile
EngMapFontFile
EngGetPrinterData
EngMultiByteToUnicodeN
EngEnumForms
EngGetLastError
EngMapModule
RtlUnwind

Sections

.text
Size: 61KB - Virtual size: 61KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

INIT
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 135KB - Virtual size: 135KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/WIN9XMIG/ACROBAT/FILES/FILE4
I386/WIN9XMIG/ACROBAT/FILES/FILE5
.dll windows:4 windows x86 arch:x86

071a7761dedf0256554e5d2fe0d98c4d

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Imports

ntdll

wcslen
_ltoa
_wcsnicmp
atol
_wcsicmp
wcscat
RtlUnicodeToMultiByteN
wcscpy
wcscmp
strncmp
_ftol
RtlMultiByteToUnicodeN

user32

GetDesktopWindow
DialogBoxParamW
GetDlgItem
wsprintfW
ShowWindow
EndDialog
SetDlgItemTextW
ReleaseDC
GetDC
LoadStringW

kernel32

InitializeCriticalSection
LoadLibraryW
DeleteCriticalSection
GetModuleFileNameW
lstrcpynW
WriteFile
SetLastError
HeapDestroy
CreateFileW
FreeLibrary
GetFileTime
EnterCriticalSection
GlobalFree
CreateFileMappingW
GetFileSize
LeaveCriticalSection
GetProcAddress
GetACP
lstrlenW
MapViewOfFile
GetLastError
HeapAlloc
HeapCreate
UnmapViewOfFile
GlobalAlloc
CloseHandle
LoadLibraryA
GetLocaleInfoW
CompareFileTime

winspool.drv

SetPrinterDataW
DeleteFormW
GetPrinterDataW
EnumFormsW
GetPrinterDriverW
GetPrinterW
AddFormW
ClosePrinter
GetPrinterDriverDirectoryW
GetFormW
OpenPrinterW

gdi32

EnumFontFamiliesW

Exports

Exports

DevQueryPrintEx
DllInitialize
DrvAdvancedDocumentProperties
DrvConvertDevMode
DrvDeviceCapabilities
DrvDevicePropertySheets
DrvDocumentProperties
DrvDocumentPropertySheets
DrvPrinterEvent
DrvUpgradePrinter
PrinterProperties

Sections

.text
Size: 37KB - Virtual size: 36KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 387B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 123KB - Virtual size: 123KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/WIN9XMIG/ACROBAT/FILES/FILE6
.exe windows:4 windows x86 arch:x86

069e8b6b30b23f4d995dbfd8efffd946

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FreeResource
CloseHandle
WaitForSingleObject
Sleep
CreateThread
WideCharToMultiByte
FreeLibrary
LockResource
LoadResource
FindResourceExA
GetModuleHandleA
LoadLibraryA
GetSystemDirectoryA
lstrlenA
GetVersion
MultiByteToWideChar
lstrcpyA
lstrcmpA
lstrcmpiA
lstrcatA
GetLastError
GetStartupInfoA
GetStdHandle
GetProcAddress
SetFilePointer
FlushFileBuffers
WriteFile
RtlUnwind
SetStdHandle
GetOEMCP
GetACP
GetCPInfo
GetEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsW
FreeEnvironmentStringsA
GetModuleFileNameA
HeapReAlloc
HeapAlloc
LCMapStringA
GetStringTypeW
LCMapStringW
SetHandleCount
GetStringTypeA
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetFileType
HeapFree
VirtualAlloc
HeapCreate
GetCommandLineA
ExitProcess
HeapDestroy
VirtualFree

user32

GetFocus
GetClassNameA
SendMessageA
FindWindowA
GetWindow
ShowWindow
PostMessageA
LoadStringA

winspool.drv

AddPortA
EnumPortsA
AddPrinterA
AddPrinterDriverA
EnumPrinterDriversA
EnumPrintersA
OpenPrinterA
ClosePrinter
DeletePrinterDriverA
GetPrinterDriverDirectoryA
DeletePrinter

advapi32

RegQueryValueExA
RegOpenKeyExA
RegSetValueExA
RegCloseKey
RegCreateKeyExA
RegDeleteValueA

version

GetFileVersionInfoSizeA
GetFileVersionInfoA
VerQueryValueA

Sections

.text
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 11KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
I386/WIN9XMIG/ACROBAT/FILES/FILE7
.dll windows:4 windows x86 arch:x86

3779c48e5d7eb1e3423c4f37f655cd56

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Imports

ntdll

strncmp
RtlUnwind
wcscpy
strncpy
floor
_ftol
_splitpath
_stricmp
sprintf
strchr
strstr
wcslen

kernel32

_lcreat
CompareStringA
HeapSize
SetEndOfFile
GetCPInfo
LCMapStringW
LCMapStringA
IsBadCodePtr
SetLastError
HeapDestroy
HeapAlloc
HeapCreate
FreeLibrary
GlobalFree
GlobalAlloc
WideCharToMultiByte
IsDBCSLeadByteEx
MultiByteToWideChar
OpenFile
GetTempFileNameA
GetTempPathA
_lclose
_lwrite
_llseek
SetEnvironmentVariableA
CompareStringW
GetLastError
GlobalUnlock
GlobalLock
GlobalSize
GlobalReAlloc
_lopen
MulDiv
GetVersionExW
IsDBCSLeadByte
DebugBreak
GlobalHandle
GetProfileIntA
RaiseException
GetProcAddress
LoadLibraryA
GetModuleHandleA
LocalFree
IsBadReadPtr
GetPrivateProfileStringA
WritePrivateProfileStringA
LoadLibraryW
GetModuleFileNameW
_lread
LocalAlloc
GetSystemTime
IsBadWritePtr
GetLocalTime
ExitProcess
FlushFileBuffers
SetStdHandle
SetUnhandledExceptionFilter
CreateFileA
SetFilePointer
GetFileType
GetStringTypeW
VirtualAlloc
ReadProcessMemory
GetCurrentProcess
GetThreadSelectorEntry
GetCurrentThread
GetVersionExA
HeapReAlloc
GetTimeZoneInformation
WriteFile
VirtualFree
GetStringTypeA
TerminateProcess
GetStdHandle
GetModuleFileNameA
ReadFile
HeapFree
CloseHandle

user32

MessageBoxA
SetRectEmpty
wsprintfA
GetDesktopWindow
LoadStringA
SetRect
wsprintfW
GetDC
ReleaseDC
IntersectRect
SendMessageW
wvsprintfA
PostMessageW
EqualRect
RegisterWindowMessageW
GetActiveWindow

gdi32

GetDeviceCaps

Exports

Exports

DrvDisableDriver
DrvEnableDriver

Sections

.text
Size: 373KB - Virtual size: 372KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 34KB - Virtual size: 104KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 103B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 22KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/WIN9XMIG/ACROBAT/FILES/FILE8
.dll windows:4 windows x86 arch:x86

0a612cb03774035a693e203bd6b37c1f

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Imports

ntdll

DbgBreakPoint
DbgPrint
RtlUnwind
strchr
wcscmp
wcscat
strstr
_splitpath
_itoa
atoi
_strcmpi
strncpy
sprintf
_ftol
wcslen
_wcsicmp
wcscpy

kernel32

LocalFree
_lopen
GetSystemDirectoryA
GetVersionExW
MultiByteToWideChar
FormatMessageA
GetLastError
RaiseException
GetLocaleInfoA
lstrcpyA
_lclose
LocalAlloc
GetPrivateProfileStringA
WritePrivateProfileStringA
GetTimeFormatA
GetDateFormatA
OpenFile
FreeLibrary
LoadLibraryW
FreeResource
LockResource
GetThreadLocale
lstrcatA
FindResourceW
ExitThread
ReleaseSemaphore
CloseHandle
WaitForSingleObject
CreateThread
CreateSemaphoreW
GetModuleFileNameA
lstrcmpiA
DisableThreadLibraryCalls
InitializeCriticalSection
DeleteCriticalSection
lstrlenW
lstrcpynW
HeapDestroy
SetLastError
GetModuleFileNameW
GetProcAddress
HeapAlloc
HeapCreate
HeapReAlloc
HeapSize
GetVersion
lstrcmpW
lstrlenA
MulDiv
WideCharToMultiByte
GlobalReAlloc
GlobalLock
GlobalUnlock
GlobalFree
GlobalAlloc
GetStdHandle
GetCPInfo
CompareStringA
CompareStringW
SetEnvironmentVariableA
SizeofResource
LoadResource
HeapFree
GetLocalTime
GetStringTypeW
GetStringTypeA
GetSystemTime
GetTimeZoneInformation
GetVersionExA
LoadLibraryA
GetModuleHandleA
GetCurrentThread
GetThreadSelectorEntry
GetCurrentProcess
ReadProcessMemory
SetUnhandledExceptionFilter
IsBadReadPtr
IsBadWritePtr
IsBadCodePtr
VirtualFree
WriteFile
TerminateProcess
LCMapStringA
LCMapStringW
ExitProcess
VirtualAlloc

advapi32

GetUserNameA

user32

GetCapture
SetCapture
PtInRect
IsWindowEnabled
GetCursor
GetWindowLongW
DestroyCursor
DrawFocusRect
GetSysColor
LoadBitmapW
FillRect
RemovePropA
SetPropA
EnableWindow
GetForegroundWindow
GetWindowTextA
DefWindowProcW
DispatchMessageW
TranslateMessage
GetMessageW
CreateWindowExW
RegisterClassW
IsWindow
wsprintfW
ReleaseCapture
LoadCursorW
ClientToScreen
WindowFromPoint
CallWindowProcW
IsDlgButtonChecked
GetClassWord
GetDlgItemTextW
SetFocus
WinHelpA
DialogBoxIndirectParamW
LoadStringA
SendDlgItemMessageA
wsprintfA
GetClientRect
ScreenToClient
SetRect
SendDlgItemMessageW
GetDlgItemTextA
MessageBoxA
BeginPaint
OffsetRect
LoadIconA
DrawIcon
DestroyIcon
EndPaint
GetDlgItem
GetWindowRect
InflateRect
MapWindowPoints
InvalidateRect
SetWindowLongW
DialogBoxParamW
LoadStringW
GetPropA
ReleaseDC
SetCursor
GetDesktopWindow
GetSystemMetrics
MoveWindow
SetDlgItemTextW
GetKeyState
ShowWindow
GetParent
CheckRadioButton
SetWindowTextA
SetDlgItemTextA
EndDialog
DialogBoxParamA
DialogBoxIndirectParamA
GetDlgItemInt
SetDlgItemInt
SendMessageW
GetFocus
GetActiveWindow
GetDC

winspool.drv

GetPrinterDriverW
ClosePrinter
SetPrinterDataW
GetPrinterA
OpenPrinterW

gdi32

DeleteObject
Rectangle
SelectObject
GetStockObject
SetBkMode
CreateFontA
LineTo
MoveToEx
CreatePen
TextOutA
GetTextExtentPoint32A
SetTextColor
GetTextColor
GetDeviceCaps
GetTextExtentPointA
BitBlt
CreateBrushIndirect
DeleteDC
CreateCompatibleDC
GetOutlineTextMetricsW
CreateFontIndirectA
EnumFontFamiliesA
GetTextMetricsW
CreateDCW
ExtEscape
GetCharacterPlacementA

shell32

ShellExecuteExA
ShellExecuteA

comdlg32

CommDlgExtendedError
GetSaveFileNameA

Exports

Exports

BRUSHOBJ_pvAllocRbrush
BRUSHOBJ_pvGetRbrush
CLIPOBJ_ppoGetPath
DevQueryPrintEx
DllInitialize
DrvAdvancedDocumentProperties
DrvConvertDevMode
DrvDeviceCapabilities
DrvDevicePropertySheets
DrvDocumentEvent
DrvDocumentProperties
DrvDocumentPropertySheets
DrvPrinterEvent
DrvSplAbort
DrvSplClose
DrvSplEndDoc
DrvSplEndPage
DrvSplStartDoc
DrvSplStartPage
DrvSplWritePrinter
DrvUpgradePrinter
EngAssociateSurface
EngCreateDeviceSurface
EngCreatePalette
EngDeletePalette
EngDeletePath
EngDeleteSurface
FONTOBJ_cGetAllGlyphHandles
FONTOBJ_cGetGlyphs
FONTOBJ_pifi
FONTOBJ_pvTrueTypeFontFile
FONTOBJ_pxoGetXform
FreeUserMem
GetPrinterDriverA
PATHOBJ_bEnum
PATHOBJ_vEnumStart
PrinterProperties
STROBJ_bEnum
STROBJ_vEnumStart
XFORMOBJ_iGetXform
XLATEOBJ_iXlate
XLATEOBJ_piVector

Sections

.text
Size: 97KB - Virtual size: 97KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 9KB - Virtual size: 70KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 21KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/WIN9XMIG/ACROBAT/FILES/FILE9
.dll windows:4 windows x86 arch:x86

3ad076d8495e8b564a6e2830161fe152

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Imports

win32k.sys

STROBJ_vEnumStart
EngSetLastError
EngProbeForRead
EngAllocMem
EngFreeMem
EngAllocUserMem
EngFreeUserMem
EngWritePrinter
BRUSHOBJ_pvGetRbrush
PATHOBJ_bEnum
PATHOBJ_vEnumStart
XFORMOBJ_iGetXform
FONTOBJ_pifi
FONTOBJ_pxoGetXform
STROBJ_bEnum
BRUSHOBJ_pvAllocRbrush
EngAssociateSurface
EngCreateDeviceSurface
EngDeletePath
EngDeleteSurface
CLIPOBJ_ppoGetPath
FONTOBJ_cGetGlyphs
FONTOBJ_pvTrueTypeFontFile
XLATEOBJ_iXlate
XLATEOBJ_piVector
EngGetLastError
EngCreatePalette
RtlUnwind

Sections

.text
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 448B - Virtual size: 432B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

INIT
Size: 736B - Virtual size: 716B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 896B - Virtual size: 888B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 608B - Virtual size: 592B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/WIN9XMIG/ACROBAT/MIGRATE.DLL
.dll windows:4 windows x86 arch:x86

c187716a0e4682688581c1ecb779de84

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetLastError
WideCharToMultiByte
SetLastError
HeapFree
CloseHandle
GetSystemDirectoryA
lstrcmpA
MoveFileExA
CreateFileA
lstrcatA
lstrlenA
lstrcmpiA
GetPrivateProfileStringA
lstrcpyA
DisableThreadLibraryCalls
HeapAlloc
GetOEMCP
SetUnhandledExceptionFilter
GetEnvironmentStrings
GetEnvironmentStringsW
GetVersion
LoadLibraryA
RtlUnwind
GetCommandLineA
HeapReAlloc
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
TlsGetValue
ExitProcess
TerminateProcess
GetCurrentProcess
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
DeleteCriticalSection
GetModuleFileNameA
GetCPInfo
GetACP
WritePrivateProfileStringA
FreeEnvironmentStringsA
MultiByteToWideChar
FreeEnvironmentStringsW
GetLocaleInfoW
HeapDestroy
HeapCreate
VirtualFree
WriteFile
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
VirtualAlloc
GetStringTypeA
GetStringTypeW
IsBadReadPtr
IsBadWritePtr
IsBadCodePtr
LCMapStringA
LCMapStringW
GetProcAddress
FlushFileBuffers
SetFilePointer
GetLocaleInfoA
SetStdHandle

user32

wsprintfA

advapi32

RegCreateKeyExA
RegQueryInfoKeyA
RegQueryValueExA
RegSetValueExA
RegOpenKeyExA
RegCloseKey

setupapi

SetupCloseLog
SetupOpenLog

winspool.drv

DeletePrinter
OpenPrinterA
EnumPrintersA
DeletePrinterDriverA
ClosePrinter
AddPrinterA
GetPrinterDriverDirectoryA
EnumPrinterDriversA
AddPrinterDriverA

version

GetFileVersionInfoSizeA
GetFileVersionInfoA
VerQueryValueA

Exports

Exports

Initialize9x
InitializeNT
MigrateSystem9x
MigrateSystemNT
MigrateUser9x
MigrateUserNT
QueryVersion

Sections

.text
Size: 35KB - Virtual size: 35KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 488B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/WIN9XMIG/CMMGR/MIGRATE.DLL
.dll windows:5 windows x86 arch:x86

57deb52707e085ddf2abfa331092497f

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

advapi32

RegQueryInfoKeyA
RegOpenKeyExA
RegSetValueExA
RegCreateKeyExA
RegEnumValueA
RegQueryValueExA
RegCloseKey

kernel32

LoadLibraryExA
FreeLibrary
GetProcAddress
TlsFree
DisableThreadLibraryCalls
TlsAlloc
FormatMessageA
WritePrivateProfileStringA
lstrcpyA
WideCharToMultiByte
lstrlenA
DeleteFileA
GetWindowsDirectoryA
CopyFileA
GetSystemDirectoryA
HeapFree
GetProcessHeap
GetPrivateProfileStringA
GetPrivateProfileIntA
GetTickCount
lstrcpynA
lstrcatA
HeapAlloc
GetVolumeInformationA
InterlockedIncrement
GetLastError
CloseHandle
CreateFileA

user32

CharPrevA
CharNextA
wsprintfA

version

GetFileVersionInfoA
GetFileVersionInfoSizeA
VerQueryValueA

Exports

Exports

Initialize9x
InitializeNT
MigrateSystem9x
MigrateSystemNT
MigrateUser9x
MigrateUserNT
QueryVersion

Sections

.text
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 14KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 920B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/WIN9XMIG/DEVUPGRD/MIGRATE.DLL
.dll windows:5 windows x86 arch:x86

c9a416b8ea17156e3d9e5bda2ee3ed5e

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_REMOVABLE_RUN_FROM_SWAP
IMAGE_FILE_NET_RUN_FROM_SWAP
IMAGE_FILE_DLL

Imports

msvcrt

towlower
_mbctolower
_mbsnextc
memmove
iswctype
_ismbcspace
_mbsdec
_mbslwr
_wcslwr
_mbsrchr
_wcsicmp
setlocale
_mbsnicmp
_mbscmp
wcscmp
wcscspn
_pctype
_snprintf
_snwprintf
fprintf
_iob
fwprintf
_vsnprintf
_vsnwprintf
_mbsncmp
_mbsnbcmp
_mbsnbicmp
_abnormal_termination
_mbsinc
_mbslen
wcslen
wcscpy
_mbsicmp
wcschr
strchr
_adjust_fdiv
malloc
_initterm
free
_local_unwind2
_except_handler3
_mbschr
_mbscpy
strrchr

kernel32

GetPrivateProfileStringW
FindClose
FindFirstFileA
GetFileAttributesA
lstrcpyA
HeapFree
LeaveCriticalSection
EnterCriticalSection
GetPrivateProfileIntA
GetPrivateProfileStringA
GetWindowsDirectoryA
GetSystemDirectoryA
IsDBCSLeadByte
GetLastError
SetLastError
LocalFree
LocalAlloc
FormatMessageA
FormatMessageW
CreateEventA
CloseHandle
SetEvent
ExitProcess
HeapAlloc
HeapReAlloc
DeleteCriticalSection
InitializeCriticalSection
GetVersionExA
SetErrorMode
FindFirstFileW
GetFileAttributesW
ReadFile
DisableThreadLibraryCalls
WritePrivateProfileStringA
CreateFileA
GetFileSize
FindNextFileA
FindNextFileW
Sleep
DeleteFileA
SetFileAttributesA
RemoveDirectoryW
SetCurrentDirectoryW
GetCurrentDirectoryW
DeleteFileW
SetFileAttributesW
GetCurrentThreadId
OutputDebugStringA
OutputDebugStringW
SetThreadLocale
GetThreadLocale
WideCharToMultiByte
MultiByteToWideChar
WriteFile
GetProcessHeap
GetModuleFileNameA
lstrlenA
RaiseException
CreateMutexA
lstrcpynA
ReleaseMutex
WaitForMultipleObjects
InterlockedIncrement
InterlockedExchange
SetFilePointer

user32

MessageBoxA
CharLowerA

advapi32

RegQueryValueExA
RegOpenKeyExA
RegCloseKey
RegEnumKeyA
RegEnumValueA

comctl32

ord17

setupapi

SetupLogErrorW
SetupOpenLog
SetupLogErrorA
SetupCloseLog
SetupOpenInfFileA
SetupOpenAppendInfFileA
SetupCloseInfFile

Exports

Exports

Initialize9x
InitializeNT
MigrateSystem9x
MigrateSystemNT
MigrateUser9x
MigrateUserNT
QueryVersion

Sections

.text
Size: 32KB - Virtual size: 31KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/WIN9XMIG/DMICALL/DMICALL.INF
I386/WIN9XMIG/DMICALL/DMICALL.SYS
.sys windows:5 windows x86 arch:x86

9c9805c399c9e7d6786621ccb509d148

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

ntoskrnl.exe

IofCompleteRequest
IoCreateSymbolicLink
IoCreateDevice
RtlInitUnicodeString
IoDeleteSymbolicLink
IoDeleteDevice
ExFreePool
ExAllocatePoolWithTag
MmUnmapIoSpace
MmMapIoSpace

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 160B - Virtual size: 132B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

INIT
Size: 320B - Virtual size: 300B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 960B - Virtual size: 944B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 96B - Virtual size: 76B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/WIN9XMIG/DMICALL/MIGRATE.DLL
.dll windows:5 windows x86 arch:x86

eb10d36550d5a1782bc0d2ff634a944e

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_REMOVABLE_RUN_FROM_SWAP
IMAGE_FILE_DLL

Imports

setupapi

SetupOpenInfFileW
SetupOpenFileQueue
SetupInstallFilesFromInfSectionW
SetupInitDefaultQueueCallback
SetupCloseInfFile
SetupDefaultQueueCallbackA
SetupCommitFileQueueA
SetupTermDefaultQueueCallback
SetupCloseFileQueue
SetupInstallServicesFromInfSectionW

kernel32

RtlUnwind
VirtualQuery
GetSystemInfo
VirtualProtect
SetLastError
lstrlenW
LocalFree
WritePrivateProfileStringA
lstrcatA
GetWindowsDirectoryA
GetLastError
lstrcpyW
LocalAlloc
lstrcatW
GetCommandLineA
GetVersionExA
ExitProcess
GetProcAddress
GetModuleHandleA
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
GetModuleFileNameA
HeapDestroy
HeapCreate
VirtualFree
HeapFree
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
HeapAlloc
GetACP
GetOEMCP
GetCPInfo
VirtualAlloc
HeapReAlloc
LCMapStringA
MultiByteToWideChar
LCMapStringW
GetStringTypeA
GetStringTypeW
GetLocaleInfoA

user32

wsprintfA

advapi32

RegCreateKeyExW
RegSetValueExW
RegOpenKeyExA
RegQueryValueExA
RegCloseKey

Exports

Exports

Initialize9x
InitializeNT
MigrateSystem9x
MigrateSystemNT
MigrateUser9x
MigrateUserNT
QueryVersion

Sections

.text
Size: 16KB - Virtual size: 14KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1024B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/WIN9XMIG/DVD/MIGRATE.DLL
.dll windows:5 windows x86 arch:x86

9128a3643bf8b8ed5ed5f52b1be1df5d

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

msvcrt

_initterm
_adjust_fdiv
malloc
??2@YAPAXI@Z
free
??3@YAXPAX@Z

setupapi

SetupGetLineTextA
SetupOpenLog
SetupCloseLog

kernel32

GetSystemDirectoryA
lstrcmpA
lstrcatA
GetUserDefaultLCID
lstrcmpiA
GetProcessHeap
DisableThreadLibraryCalls
lstrcpyA
WritePrivateProfileStringA
lstrlenA
GetLastError
WideCharToMultiByte
FindClose
FindFirstFileA
CloseHandle
ReadFile
CreateFileA
GetWindowsDirectoryA
GetPrivateProfileStringA

user32

CharUpperW
wsprintfA
LoadStringA

advapi32

RegOpenKeyA
RegQueryValueExA
RegOpenKeyExA
RegCloseKey
RegSetValueExA

version

GetFileVersionInfoSizeA
GetFileVersionInfoA
VerQueryValueA

ole32

CoCreateInstance
CLSIDFromString
CoInitialize
CoUninitialize

oleaut32

VariantClear
SysFreeString

Exports

Exports

Initialize9x
InitializeNT
MigrateSystem9x
MigrateSystemNT
MigrateUser9x
MigrateUserNT
QueryVersion

Sections

.text
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 544B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/WIN9XMIG/EASTMAN/MIGRATE.DLL
.dll windows:4 windows x86 arch:x86

24d239c7d409794600bae6853984217e

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

LoadLibraryA
GetProcAddress
FreeLibrary
SetCurrentDirectoryA
GetEnvironmentStringsW
HeapCreate
VirtualFree
GetCommandLineA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
GetLastError
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
DeleteCriticalSection
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
DisableThreadLibraryCalls
GetModuleHandleA
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapFree
WriteFile
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
HeapAlloc
GetCPInfo
GetACP
GetOEMCP
VirtualAlloc
HeapReAlloc
RtlUnwind
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
InterlockedDecrement
InterlockedIncrement

user32

LoadStringA

advapi32

RegOpenKeyExA
RegQueryValueExA
RegCloseKey

setupapi

SetupOpenLog
SetupLogErrorA
SetupCloseLog

Exports

Exports

Initialize9x
InitializeNT
MigrateSystem9x
MigrateSystemNT
MigrateUser9x
MigrateUserNT
QueryVersion

Sections

.text
Size: 20KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 24KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/WIN9XMIG/FAX/AWDVSTUB.EXE
.exe windows:5 windows x86 arch:x86

9c36b08215365d5182f524a8e98c853e

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetEnvironmentStringsW
SetHandleCount
GetFileType
HeapDestroy
HeapCreate
VirtualFree
HeapFree
LoadLibraryA
GetACP
GetOEMCP
GetCPInfo
HeapAlloc
VirtualAlloc
HeapReAlloc
LCMapStringA
MultiByteToWideChar
LCMapStringW
GetStringTypeA
GetStringTypeW
RtlUnwind
GetLastError
VirtualProtect
GetSystemInfo
VirtualQuery
WideCharToMultiByte
GetTempFileNameW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetUserDefaultUILanguage
CloseHandle
SetFilePointer
FlushFileBuffers
SetStdHandle
UnhandledExceptionFilter
GetModuleFileNameA
GetStdHandle
WriteFile
GetProcAddress
ExitProcess
GetVersionExA
GetCommandLineA
GetStartupInfoA
GetModuleHandleA
GetCommandLineW
WaitForSingleObject
DeleteFileW
GetTempPathW
GlobalHandle
GlobalFree
GlobalUnlock
GlobalLock
GlobalAlloc
GetLocaleInfoA

user32

MessageBoxW
LoadStringW

shell32

ShellExecuteExW
CommandLineToArgvW

ole32

StgOpenStorage

fxstiff

TiffCreate
TiffClose
TiffStartPage
TiffWriteRaw
TiffEndPage

gdi32

SelectObject
CreateDIBSection
DeleteDC
CreateCompatibleDC
CreateICA
DeleteObject
BitBlt
SetBitmapBits
CreateCompatibleBitmap
CreatePatternBrush
CreateBitmap
PatBlt
GdiSetBatchLimit

Sections

.text
Size: 63KB - Virtual size: 62KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 6KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
I386/WIN9XMIG/FAX/MIGRATE.DLL
.dll windows:5 windows x86 arch:x86

77524d6928b842d5bfd8369e9ebc2888

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

msvcrt

sprintf
atoi
swprintf
_stricmp
_except_handler3
_snprintf
_strtime
_strdate
_vsnprintf
_mbsnbcpy
_mbsnbcat
_mbschr
strncpy
_itoa
_mbsinc
_mbscmp
_mbsrchr
wcscpy

kernel32

GetLastError
DisableThreadLibraryCalls
GetPrivateProfileStringA
ExpandEnvironmentStringsA
WideCharToMultiByte
FreeLibrary
MultiByteToWideChar
GetProcAddress
LoadLibraryA
CopyFileW
GetWindowsDirectoryW
WritePrivateProfileStringA
GetWindowsDirectoryA
InterlockedExchange
CloseHandle
SetFilePointer
CreateFileA
GetTempPathA
InterlockedIncrement
WriteFile
OutputDebugStringA
SetLastError
GetCurrentThreadId
GetTickCount
lstrlenA
HeapAlloc
GetProcessHeap
HeapFree
GetComputerNameA
lstrcpyA

advapi32

RegSetValueExA
RegCreateKeyExA
RegQueryValueExA
RegCloseKey
RegOpenKeyA
RegEnumKeyA
RegOpenKeyExA

user32

LoadStringA

setupapi

SetupGetLineTextA

shell32

SHFileOperationA

Exports

Exports

Initialize9x
InitializeNT
MigrateSystem9x
MigrateSystemNT
MigrateUser9x
MigrateUserNT
QueryVersion

Sections

.text
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/WIN9XMIG/HPTOOLS/MIGRATE.DLL
.dll windows:4 windows x86 arch:x86

5c81c998bfb4337d91881a38cd5cc1bf

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetUserDefaultLangID
DeleteFileA
RemoveDirectoryA
GetLastError
SetLastError
HeapFree
HeapAlloc
WideCharToMultiByte
lstrlenA
LoadResource
FindResourceExA
FindClose
FindFirstFileA
FindNextFileA
SetFileAttributesA
GetFileAttributesA
GlobalAlloc
GlobalLock
lstrcpyA
GetWindowsDirectoryA
lstrcatA
DisableThreadLibraryCalls
GetSystemDirectoryA
GetProcessHeap
SizeofResource
HeapDestroy
TerminateProcess
LCMapStringA
CloseHandle
LCMapStringW
FlushFileBuffers
GetLocaleInfoW
GetLocaleInfoA
ReadFile
RtlUnwind
InterlockedDecrement
InterlockedIncrement
GetCommandLineA
GetProcAddress
GetModuleHandleA
GetVersion
WritePrivateProfileStringA
HeapCreate
VirtualFree
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
ExitProcess
VirtualAlloc
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
TlsGetValue
MultiByteToWideChar
GetEnvironmentStringsW
WriteFile
GetCurrentProcess
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
GetModuleFileNameA
GetCPInfo
GetACP
GetOEMCP
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetStringTypeW
GetStringTypeA
SetUnhandledExceptionFilter
IsBadReadPtr
IsBadWritePtr
IsBadCodePtr
SetStdHandle
SetFilePointer
LoadLibraryA

user32

LoadStringA

advapi32

RegQueryInfoKeyA
RegEnumKeyExA
RegDeleteKeyA
RegSetValueExA
RegDeleteValueA
RegOpenKeyExA
RegCloseKey
RegQueryValueExA
RegEnumValueA

shell32

SHGetPathFromIDListA
SHGetSpecialFolderLocation

setupapi

SetupOpenLog
SetupCloseLog

version

GetFileVersionInfoSizeA
GetFileVersionInfoA
VerQueryValueA

Exports

Exports

Initialize9x
InitializeNT
MigrateSystem9x
MigrateSystemNT
MigrateUser9x
MigrateUserNT
QueryVersion

Sections

.text
Size: 47KB - Virtual size: 47KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/WIN9XMIG/IBMAV/MIGRATE.DLL
.dll windows:4 windows x86 arch:x86

960611142c11fab2e6d01a10836fe6b4

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

WaitForSingleObject
CloseHandle
GetLastError
CreateProcessA
GetUserDefaultLangID
DeleteFileA
lstrlenA
ExpandEnvironmentStringsA
HeapFree
HeapAlloc
GetProcessHeap
SizeofResource
LoadResource
FindResourceExA
FindFirstFileA
lstrcatA
FindClose
GetSystemDirectoryA
GetPrivateProfileStringA
lstrcpyA
DisableThreadLibraryCalls
WideCharToMultiByte
SetLastError
TlsSetValue
GetEnvironmentStringsW
HeapDestroy
LCMapStringA
LCMapStringW
RtlUnwind
GetCommandLineA
GetVersion
GetCurrentThreadId
WritePrivateProfileStringA
TlsAlloc
TlsFree
TlsGetValue
ExitProcess
TerminateProcess
GetCurrentProcess
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
DeleteCriticalSection
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
SetUnhandledExceptionFilter
IsBadWritePtr
HeapCreate
VirtualFree
WriteFile
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
VirtualAlloc
HeapReAlloc
GetProcAddress
LoadLibraryA
IsBadReadPtr
IsBadCodePtr
MultiByteToWideChar
GetStringTypeA
GetStringTypeW
GetCPInfo
GetACP
GetOEMCP

advapi32

RegSetValueExA
RegQueryValueExA
RegCloseKey
RegQueryInfoKeyA
RegOpenKeyExA

user32

wsprintfA

setupapi

SetupOpenLog
SetupCloseLog

Exports

Exports

Initialize9x
InitializeNT
MigrateSystem9x
MigrateSystemNT
MigrateUser9x
MigrateUserNT
QueryVersion

Sections

.text
Size: 20KB - Virtual size: 18KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/WIN9XMIG/IBMAV/PIC15736.PCX
I386/WIN9XMIG/ICM/MIGRATE.DLL
.dll windows:5 windows x86 arch:x86

2e5129d94e4713be98ae4e88e0255de8

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

msvcrt

sprintf
malloc
free

kernel32

WritePrivateProfileStringA
LoadLibraryA
lstrlenA
GetProcAddress
FindClose
FindNextFileA
GetLastError
FreeLibrary
MoveFileExA
GetPrivateProfileStringA
lstrcpyA
lstrcatA
FormatMessageA
GetWindowsDirectoryA
FindFirstFileA

advapi32

RegOpenKeyExA
RegEnumValueA
RegDeleteValueA
RegDeleteKeyA
RegEnumKeyA
RegCloseKey
RegCreateKeyExA
RegQueryInfoKeyA

setupapi

SetupOpenLog
SetupLogErrorA

Exports

Exports

Initialize9x
InitializeNT
MigrateSystem9x
MigrateSystemNT
MigrateUser9x
MigrateUserNT
QueryVersion

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 416B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/WIN9XMIG/ICM/SYMBOLS.PRI/RETAIL/DLL/MIGRATE.PDB
I386/WIN9XMIG/ICM/SYMBOLS/RETAIL/DLL/MIGRATE.PDB
I386/WIN9XMIG/IEMIG/MIGRATE.DLL
.dll windows:5 windows x86 arch:x86

053c7adb78fb59d6415ea12eb2e8dbf4

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

user32

CharNextA
wsprintfA
CharPrevA
LoadStringA

advapi32

RegOpenKeyExA
RegEnumValueA
RegSetValueExA
RegCreateKeyExA
RegCloseKey
RegDeleteKeyA
RegEnumKeyA

kernel32

lstrcatA
LocalFree
lstrlenA
lstrcpyA
WritePrivateProfileStringA
GetLastError
LocalAlloc
GetFileAttributesA
WideCharToMultiByte
lstrcmpiA
GetPrivateProfileStringA

setupapi

SetupOpenInfFileA
SetupCloseLog
SetupOpenLog
SetupFindFirstLineA
SetupGetLineTextA
SetupFindNextLine
SetupLogErrorA
SetupCloseInfFile

Exports

Exports

DllMain
Initialize9x
InitializeNT
MigrateSystem9x
MigrateSystemNT
MigrateUser9x
MigrateUserNT
QueryVersion

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 398B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/WIN9XMIG/IEMIG/SYMBOLS.PRI/RETAIL/DLL/MIGRATE.PDB
I386/WIN9XMIG/IEMIG/SYMBOLS/RETAIL/DLL/MIGRATE.PDB
I386/WIN9XMIG/MAPI/80/80.CAB
.cab
I386/WIN9XMIG/MAPI/801/801.CAB
.cab
I386/WIN9XMIG/MAPI/802/802.CAB
.cab
I386/WIN9XMIG/MAPI/803/803.CAB
.cab
I386/WIN9XMIG/MAPI/98MAPI/98MAP.CAB
.cab
I386/WIN9XMIG/MAPI/98OMI/98OMI.CAB
.cab
I386/WIN9XMIG/MAPI/DLL/MIGRATE.DLL
.dll windows:4 windows x86 arch:x86

0f71536acd7045a5efccd20fd220c3f3

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

setupapi

SetupCloseInfFile
SetupIterateCabinetA
SetupFindNextLine
SetupGetLineTextA
SetupFindFirstLineA
SetupOpenInfFileA
SetupCloseLog
SetupOpenLog
SetupGetStringFieldA
SetupLogErrorA

version

VerQueryValueA
GetFileVersionInfoSizeA
GetFileVersionInfoA

kernel32

HeapReAlloc
DeleteCriticalSection
EnterCriticalSection
WritePrivateProfileStringA
HeapAlloc
HeapFree
GetProcessHeap
DisableThreadLibraryCalls
CreateDirectoryA
GetLastError
CloseHandle
CreateFileA
GetWindowsDirectoryA
DeleteFileA
CopyFileA
GetCurrentDirectoryA
FreeLibrary
GetProcAddress
LoadLibraryA
FindClose
FindNextFileA
MoveFileA
GetFileAttributesA
FindFirstFileA
GetEnvironmentVariableA
ExpandEnvironmentStringsA
GetStringTypeW
GetStringTypeA
FlushFileBuffers
GetLocaleInfoW
LCMapStringW
GetLocaleInfoA
SetFilePointer
WriteFile
GetEnvironmentStringsW
GetEnvironmentStrings
SetStdHandle
InterlockedDecrement
InterlockedIncrement
GetCommandLineA
GetModuleHandleA
GetVersion
InitializeCriticalSection
LeaveCriticalSection
ExitProcess
GetCPInfo
GetACP
GetOEMCP
MultiByteToWideChar
WideCharToMultiByte
LCMapStringA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
TlsAlloc
TlsSetValue
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
TerminateProcess
GetCurrentProcess
GetCurrentThreadId
GetStartupInfoA
GetModuleFileNameA
TlsFree
SetLastError
TlsGetValue
SetHandleCount
GetStdHandle
GetFileType

user32

LoadStringA
wsprintfA

advapi32

RegOpenKeyA
RegEnumValueA
RegDeleteKeyA
RegEnumKeyA
RegCloseKey
RegSetValueExA
RegQueryValueExA
RegCreateKeyA
RegOpenKeyExA

shell32

ShellExecuteA

Exports

Exports

Initialize9x
InitializeNT
MigrateSystem9x
MigrateSystemNT
MigrateUser9x
MigrateUserNT
QueryVersion

Sections

.text
Size: 43KB - Virtual size: 43KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 18KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 31KB - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/WIN9XMIG/MAPI/DLL/MKNTFRMCACHE.EXE
.exe windows:4 windows x86 arch:x86

b910f56018bc852704efe5a5859858c7

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

WideCharToMultiByte
DeleteFileA
ExitProcess
TerminateProcess
GetCurrentProcess
GetCommandLineA
GetVersion
HeapFree
GetLastError
CloseHandle
HeapAlloc
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
SetFilePointer
WriteFile
ReadFile
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
MoveFileA
GetEnvironmentStrings
GetEnvironmentStringsW
HeapDestroy
HeapCreate
VirtualFree
RtlUnwind
VirtualAlloc
HeapReAlloc
SetStdHandle
FlushFileBuffers
CreateFileA
GetCPInfo
GetACP
GetOEMCP
GetProcAddress
LoadLibraryA
SetEndOfFile
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW

Sections

.text
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1000B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
I386/WIN9XMIG/MAPI/DLL/MSPATCHA.DLL
.dll windows:4 windows x86 arch:x86

951ba716dcb6848e4ec46f38fd4f071b

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

DeleteFileA
SetLastError
GetLastError
CloseHandle
CreateFileA
MultiByteToWideChar
CreateFileW
UnmapViewOfFile
GetFileSize
GetFileTime
RtlUnwind
DeleteFileW
MapViewOfFile
CreateFileMappingA
SetFileTime
SetEndOfFile
SetFilePointer
FlushViewOfFile
VirtualAlloc
VirtualFree

Exports

Exports

ApplyPatchToFileA
ApplyPatchToFileByHandles
ApplyPatchToFileByHandlesEx
ApplyPatchToFileExA
ApplyPatchToFileExW
ApplyPatchToFileW
GetFilePatchSignatureA
GetFilePatchSignatureByHandle
GetFilePatchSignatureW
TestApplyPatchToFileA
TestApplyPatchToFileByHandles
TestApplyPatchToFileW

Sections

.text
Size: 21KB - Virtual size: 21KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 32B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 892B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 468B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/WIN9XMIG/MAPI/EX40/40.CAB
.cab
I386/WIN9XMIG/MAPI/EX40A/40A.CAB
.cab
I386/WIN9XMIG/MAPI/EX40SP3/40SP3.CAB
.cab
I386/WIN9XMIG/MAPI/EX40SP4/40SP4.CAB
.cab
I386/WIN9XMIG/MAPI/EX50SP1/50SP1.CAB
.cab
I386/WIN9XMIG/MAPI/EX50SP2/50SP2.CAB
.cab
I386/WIN9XMIG/MODEMS/MIGRATE.DLL
.dll windows:5 windows x86 arch:x86

5f9cc5ee31aff710d42a0f8c64643f6e

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

msvcrt

printf
_mbscmp
_mbsicmp
_except_handler3
_abnormal_termination
_mbsnbicmp
_mbsnbcmp
_mbslwr
_mbslen
wcscpy
setlocale
_vsnprintf
_iob
fprintf
_snprintf
_pctype
_mbsnextc
_ismbcspace
_mbsinc
strchr
_adjust_fdiv
malloc
_initterm
_mbscpy
free

advapi32

RegCreateKeyExA
RegCloseKey
RegQueryValueExA
RegSetValueExW
RegSetValueExA
RegDeleteValueA
RegOpenKeyExA
RegEnumKeyA
RegQueryInfoKeyA

kernel32

lstrcpyA
CreateFileW
lstrcatW
lstrcpyW
WriteFile
CopyFileA
GetLastError
CreateDirectoryA
GetWindowsDirectoryA
CloseHandle
CopyFileW
CreateDirectoryW
GetWindowsDirectoryW
lstrlenW
lstrlenA
MultiByteToWideChar
lstrcatA
lstrcmpA
FreeLibrary
GetProcAddress
LoadLibraryW
GetSystemDirectoryW
UnmapViewOfFile
MapViewOfFileEx
CreateFileMappingW
GetFileSize
FormatMessageA
GetModuleHandleA
lstrcmpiA
WritePrivateProfileStringA
FindClose
FindFirstFileA
CreateFileA
SetFilePointer
DisableThreadLibraryCalls
RaiseException
ReadFile
ReleaseMutex
WaitForMultipleObjects
EnterCriticalSection
Sleep
GetThreadLocale
SetThreadLocale
LocalAlloc
LocalFree
IsDBCSLeadByte
GetVersionExA
InitializeCriticalSection
DeleteCriticalSection
HeapReAlloc
HeapAlloc
ExitProcess
SetEvent
CreateEventA
SetFileAttributesA
DeleteFileA
OutputDebugStringA
GetCurrentThreadId
lstrcpynA
GetProcessHeap
SetLastError
HeapFree
InterlockedExchange
InterlockedIncrement
LeaveCriticalSection
CreateMutexA

cfgmgr32

CM_Get_Next_Res_Des
CM_Get_Res_Des_Data
CM_Free_Res_Des_Handle
CM_Get_DevNode_Status
CM_Get_First_Log_Conf

setupapi

SetupDiDeleteDeviceInfo
SetupDiGetDeviceRegistryPropertyA
SetupDiOpenDevRegKey
SetupDiCallClassInstaller
SetupDiSetClassInstallParamsW
SetupDiSetSelectedDriverW
SetupDiGetDriverInstallParamsW
SetupDiEnumDriverInfoW
SetupDiBuildDriverInfoList
SetupDiSetDeviceInstallParamsW
SetupDiGetDeviceInstallParamsW
SetupDiSetDeviceRegistryPropertyA
SetupDiCreateDeviceInfoW
SetupDiGetDeviceRegistryPropertyW
SetupDiEnumDeviceInfo
SetupDiDestroyDeviceInfoList
SetupDiGetClassDevsW
SetupDiGetClassDevsA
SetupCloseLog
SetupLogErrorA
SetupOpenLog
SetupCloseInfFile

user32

wvsprintfA
wsprintfA
MessageBoxA
CharLowerA

Exports

Exports

Initialize9x
InitializeNT
MigrateSystem9x
MigrateSystemNT
MigrateUser9x
MigrateUserNT
QueryVersion

Sections

.text
Size: 30KB - Virtual size: 29KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 42KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/WIN9XMIG/MSGQUEUE/MIGRATE.DLL
.dll windows:5 windows x86 arch:x86

b5ef5406effadd5938b38dca3a143bd3

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

msvcrt

malloc
free
_initterm
_adjust_fdiv
__CxxFrameHandler
strrchr
sprintf
_itoa

kernel32

lstrcmpA
GetSystemDirectoryA
GetWindowsDirectoryA
FindFirstFileA
GetLocalTime
FindClose
CloseHandle
WriteFile
lstrlenA
SetFilePointer
CreateFileA
lstrcatA
lstrcpyA
GetLastError
DeleteFileA
RemoveDirectoryA
CompareStringA
FindNextFileA
WritePrivateProfileStringA

advapi32

RegQueryValueExA
RegOpenKeyExA
RegEnumValueA
RegCloseKey

user32

CharNextA
LoadStringA

setupapi

SetupGetLineTextA
SetupOpenInfFileA
SetupCloseInfFile

Exports

Exports

Initialize9x
InitializeNT
MigrateSystem9x
MigrateSystemNT
MigrateUser9x
MigrateUserNT
QueryVersion

Sections

.text
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 504B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/WIN9XMIG/MSI/MIGRATE.DLL
.dll windows:5 windows x86 arch:x86

052f587a93a5765265ea931b56e92d47

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

msvcrt

_adjust_fdiv
malloc
_initterm
free
??2@YAPAXI@Z
??3@YAXPAX@Z

advapi32

RegQueryInfoKeyW
RegOpenKeyExA
RegCloseKey
RegEnumKeyExA
RegDeleteKeyA
RegOpenKeyA

kernel32

FreeLibrary
GetProcAddress
LoadLibraryA
lstrcpyW
DisableThreadLibraryCalls
lstrcmpA
lstrcpyA

Exports

Exports

Initialize9x
InitializeNT
MigrateSystem9x
MigrateSystemNT
MigrateUser9x
MigrateUserNT
QueryVersion

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 246B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/WIN9XMIG/MSI/MSI9XMIG.DLL
.dll windows:5 windows x86 arch:x86

5f13ff4d0fcbee3c805d98f6b9b2c08f

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

msvcrt

_adjust_fdiv
malloc
_initterm
free
??2@YAPAXI@Z
??3@YAXPAX@Z

user32

CharPrevExA
wsprintfA
CharNextExA

advapi32

RegSetKeySecurity
RegDeleteKeyA
InitializeAcl
AddAccessAllowedAce
GetAce
InitializeSecurityDescriptor
SetSecurityDescriptorDacl
SetSecurityDescriptorOwner
GetSecurityDescriptorLength
MakeSelfRelativeSD
LookupPrivilegeValueA
AdjustTokenPrivileges
RegCloseKey
RegQueryValueExA
RegOpenKeyExA
RegSetValueExA
RegEnumKeyExA
RegCreateKeyExA
RegEnumValueA
RegQueryInfoKeyA
RegDeleteValueA
AllocateAndInitializeSid
EqualSid
GetSecurityDescriptorOwner
RegGetKeySecurity
OpenProcessToken
OpenThreadToken
CopySid
GetLengthSid
IsValidSid
GetTokenInformation
FreeSid

kernel32

lstrlenA
lstrcmpiA
DisableThreadLibraryCalls
CompareStringA
ReadFile
WriteFile
GetTickCount
GetCurrentThread
GetCurrentProcess
GetVersionExA
FindNextFileA
WritePrivateProfileStringA
lstrcpyA
FindFirstFileA
GetWindowsDirectoryA
lstrcatA
CreateFileA
lstrcpynA
CloseHandle
GetLastError
lstrcmpA

shfolder

SHGetFolderPathA

msi

ord117
ord148
ord160
ord116
ord77
ord119
ord20
ord91
ord8
ord163
ord121
ord124
ord17
ord159
ord31

Exports

Exports

MigrateSystem9x
MigrateUser9x

Sections

.text
Size: 28KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/WIN9XMIG/MSI/MSINTMIG.DLL
.dll windows:5 windows x86 arch:x86

f5636dd8d09a529221b512df168a3447

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

msvcrt

_adjust_fdiv
malloc
_initterm
free
rand
??2@YAPAXI@Z
wcsncmp
wcsncpy
??3@YAXPAX@Z

user32

CharPrevW
wsprintfW
CharNextW

advapi32

RegLoadKeyW
RegUnLoadKeyW
ConvertSidToStringSidW
RegSetKeySecurity
RegDeleteKeyW
InitializeAcl
AddAccessAllowedAce
GetAce
InitializeSecurityDescriptor
SetSecurityDescriptorDacl
SetSecurityDescriptorOwner
GetSecurityDescriptorLength
MakeSelfRelativeSD
RegQueryInfoKeyW
RegEnumValueW
RegEnumKeyExW
RegCloseKey
RegSetValueExW
RegQueryValueExW
RegOpenKeyExW
LookupAccountNameW
AllocateAndInitializeSid
EqualSid
GetSecurityDescriptorOwner
RegGetKeySecurity
OpenProcessToken
OpenThreadToken
CopySid
GetLengthSid
IsValidSid
GetTokenInformation
FreeSid
AdjustTokenPrivileges
LookupPrivilegeValueW
RegDeleteValueW
RegCreateKeyExW

kernel32

CloseHandle
GetTickCount
CreateFileW
DisableThreadLibraryCalls
CopyFileExW
GetComputerNameW
LocalFree
DeleteFileW
RemoveDirectoryW
lstrcpynW
lstrcmpW
lstrcmpiW
CompareStringW
ReadFile
lstrcpyW
lstrlenW
lstrcatW
GetWindowsDirectoryW
MoveFileExW
GetLastError
GetSystemDirectoryW
GetCurrentProcess
GetCurrentThread
WriteFile

shlwapi

SHCopyKeyW
SHDeleteKeyW

userenv

GetDefaultUserProfileDirectoryW

netapi32

NetWkstaGetInfo
NetApiBufferFree

msi

ord116
ord125
ord92
ord119
ord20
ord121
ord17
ord158
ord163
ord8
ord118
ord160
ord159
ord32

Exports

Exports

InitializeNT
LogonNotify
MigrateSystemNT
MigrateUserNT
StartupNotify

Sections

.text
Size: 26KB - Virtual size: 25KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/WIN9XMIG/MSP/MIGRATE.DLL
.dll windows:5 windows x86 arch:x86

5b2679a8af50b1521c7687a2f4de4367

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Imports

kernel32

MoveFileW
GetPrivateProfileStringA
DeleteFileA
FreeLibrary
GetProcAddress
LoadLibraryA
GetWindowsDirectoryW
lstrcpynA
GetSystemDirectoryA
GetCommandLineA
GetVersion
HeapAlloc
GetFileAttributesW
HeapFree
GetFileAttributesA
ExitProcess
TerminateProcess
GetCurrentProcess
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
HeapDestroy
GetLastError
WritePrivateProfileStringA
GetModuleFileNameA
GetCPInfo
GetACP
GetOEMCP
FreeEnvironmentStringsA
MultiByteToWideChar
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
WideCharToMultiByte
WriteFile
CloseHandle
VirtualAlloc
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
SetStdHandle
FlushFileBuffers
SetFilePointer
LocalFree
GetWindowsDirectoryA
HeapCreate
FormatMessageA
VirtualFree

advapi32

RegCreateKeyA
RegSetValueExA
RegQueryValueExA
RegCloseKey
RegOpenKeyA

Exports

Exports

Initialize9x
InitializeNT
MigrateSystem9x
MigrateSystemNT
MigrateUser9x
MigrateUserNT
QueryVersion

Sections

.text
Size: 29KB - Virtual size: 29KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 10KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/WIN9XMIG/NECKBD/MIGRATE.DLL
.dll windows:4 windows x86 arch:x86

7c000861fe8f7d8f249df48a558553d6

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetProcessHeap
HeapAlloc
SetLastError
FindResourceExA
HeapFree
WideCharToMultiByte
GetLastError
GetUserDefaultLangID
lstrcatA
lstrcpyA
DisableThreadLibraryCalls
LoadResource
SizeofResource
GetCurrentProcess
GetEnvironmentStrings
FreeEnvironmentStringsW
SetFilePointer
RtlUnwind
GetCommandLineA
GetVersion
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
TlsGetValue
ExitProcess
TerminateProcess
WritePrivateProfileStringA
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
DeleteCriticalSection
GetModuleFileNameA
GetCPInfo
GetACP
GetOEMCP
FreeEnvironmentStringsA
MultiByteToWideChar
SetStdHandle
LeaveCriticalSection
GetEnvironmentStringsW
HeapDestroy
HeapCreate
VirtualFree
WriteFile
SetUnhandledExceptionFilter
IsBadCodePtr
InitializeCriticalSection
EnterCriticalSection
LCMapStringA
VirtualAlloc
GetStringTypeA
GetStringTypeW
LCMapStringW
GetProcAddress
LoadLibraryA
FlushFileBuffers
CloseHandle

advapi32

RegQueryValueExA
RegCloseKey
RegOpenKeyExA

setupapi

SetupOpenLog
SetupCloseLog

Exports

Exports

Initialize9x
InitializeNT
MigrateSystem9x
MigrateSystemNT
MigrateUser9x
MigrateUserNT
QueryVersion

Sections

.text
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 11KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/WIN9XMIG/NECPA/MIGRATE.DLL
.dll windows:4 windows x86 arch:x86

1ec60f585fce6cfe1c7d485b236b2d27

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

FindFirstFileA
GetUserDefaultLangID
GetLastError
WideCharToMultiByte
FindNextFileA
FindClose
GetSystemDirectoryA
HeapAlloc
GetProcessHeap
SizeofResource
LoadResource
FindResourceExA
RemoveDirectoryA
GetWindowsDirectoryA
lstrcmpA
DisableThreadLibraryCalls
lstrcpyA
GetPrivateProfileStringA
lstrcatA
DeleteFileA
SetLastError
HeapFree
TlsAlloc
HeapDestroy
HeapCreate
LCMapStringA
RtlUnwind
GetCommandLineA
GetVersion
GetCurrentThreadId
TlsSetValue
WritePrivateProfileStringA
TlsFree
TlsGetValue
ExitProcess
TerminateProcess
GetCurrentProcess
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
DeleteCriticalSection
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
LCMapStringW
VirtualFree
WriteFile
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
VirtualAlloc
HeapReAlloc
IsBadWritePtr
SetUnhandledExceptionFilter
IsBadReadPtr
IsBadCodePtr
MultiByteToWideChar
GetStringTypeA
GetStringTypeW
GetCPInfo
GetACP
GetOEMCP
GetProcAddress
LoadLibraryA

advapi32

RegEnumValueA
RegEnumKeyExA
RegDeleteValueA
RegDeleteKeyA
RegQueryInfoKeyA
RegQueryValueExA
RegOpenKeyExA
RegCloseKey

setupapi

SetupCloseLog
SetupOpenLog

Exports

Exports

Initialize9x
InitializeNT
MigrateSystem9x
MigrateSystemNT
MigrateUser9x
MigrateUserNT
QueryVersion

Sections

.text
Size: 32KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 120KB - Virtual size: 121KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/WIN9XMIG/NECWPS/MIGRATE.DLL
.dll windows:4 windows x86 arch:x86

b0f9397c2d7c2b3afc084fcfe98481c4

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetProcessHeap
FindResourceExA
DisableThreadLibraryCalls
FindClose
FindFirstFileA
lstrcmpA
lstrcatA
GetSystemDirectoryA
lstrcpyA
GetWindowsDirectoryA
SizeofResource
LoadResource
MoveFileA
SetFilePointer
ReadFile
WriteFile
CloseHandle
CreateFileA
FindNextFileA
SetFileAttributesA
GetPrivateProfileIntA
HeapAlloc
HeapFree
SetLastError
WideCharToMultiByte
GetLastError
GetUserDefaultLangID
GetPrivateProfileStringA
RemoveDirectoryA
DeleteFileA
TlsGetValue
GetEnvironmentStringsW
GetEnvironmentStrings
RtlUnwind
GetCommandLineA
GetVersion
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
WritePrivateProfileStringA
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
ExitProcess
TerminateProcess
GetCurrentProcess
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetCPInfo
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
HeapReAlloc
IsBadWritePtr
SetUnhandledExceptionFilter
IsBadReadPtr
IsBadCodePtr
MultiByteToWideChar
GetStringTypeA
GetStringTypeW
LCMapStringA
LCMapStringW
GetACP
GetOEMCP
GetProcAddress
LoadLibraryA

user32

wsprintfA

advapi32

RegDeleteKeyA
RegDeleteValueA
RegQueryValueExA
RegCloseKey
RegOpenKeyExA
RegEnumKeyExA

setupapi

SetupOpenLog
SetupCloseLog

Exports

Exports

Initialize9x
InitializeNT
MigrateSystem9x
MigrateSystemNT
MigrateUser9x
MigrateUserNT
QueryVersion

Sections

.text
Size: 32KB - Virtual size: 29KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 88KB - Virtual size: 89KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/WIN9XMIG/OCTOPUS/MIGRATE.DLL
.dll windows:4 windows x86 arch:x86

5de6978018ec787c0291b6fdfa12477a

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetCommandLineA
HeapAlloc
HeapFree
RaiseException
HeapSize
HeapReAlloc
ExitProcess
TerminateProcess
GetACP
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
RtlUnwind
GetEnvironmentStrings
GetProcessVersion
VirtualAlloc
IsBadWritePtr
SetUnhandledExceptionFilter
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
IsBadReadPtr
IsBadCodePtr
TlsAlloc
InitializeCriticalSection
LocalFree
LocalAlloc
GetModuleFileNameA
lstrcpynA
GetLastError
SetLastError
GetWindowsDirectoryA
WritePrivateProfileStringA
WriteFile
GetCurrentProcess
GetOEMCP
GetCPInfo
GlobalFlags
lstrcmpA
GetEnvironmentStringsW
FreeLibrary
LoadLibraryA
DeleteFileA
lstrcpyA
HeapDestroy
RemoveDirectoryA
GlobalAddAtomA
GlobalGetAtomNameA
lstrcmpiA
GetModuleHandleA
GlobalFindAtomA
GlobalDeleteAtom
GetProcAddress
GetCurrentThreadId
MultiByteToWideChar
WideCharToMultiByte
InterlockedDecrement
GetVersion
lstrlenA
TlsSetValue
TlsGetValue
LocalReAlloc
GlobalReAlloc
EnterCriticalSection
GlobalAlloc
TlsFree
GlobalLock
LeaveCriticalSection
GlobalFree
GlobalHandle
GlobalUnlock
HeapCreate
DeleteCriticalSection
VirtualFree
FreeEnvironmentStringsW
lstrcatA

user32

GetClientRect
AdjustWindowRectEx
SetFocus
GetSysColor
MapWindowPoints
PostMessageA
LoadIconA
SetWindowTextA
LoadCursorA
GetSysColorBrush
ReleaseDC
GetDC
GetClassNameA
PtInRect
ClientToScreen
PostQuitMessage
DestroyMenu
TabbedTextOutA
DrawTextA
GrayStringA
GetCapture
WinHelpA
CopyRect
RegisterClassA
GetMenu
GetMenuItemCount
GetSubMenu
GetMenuItemID
GetDlgItem
GetWindowTextA
GetDlgCtrlID
DefWindowProcA
DestroyWindow
CreateWindowExA
GetClassLongA
SetPropA
GetPropA
CallWindowProcA
RemovePropA
GetMessageTime
GetMessagePos
GetForegroundWindow
SetForegroundWindow
GetWindow
SetWindowLongA
RegisterWindowMessageA
IsIconic
GetWindowPlacement
GetWindowRect
GetSystemMetrics
GetMenuCheckMarkDimensions
LoadBitmapA
GetMenuState
ModifyMenuA
SetMenuItemBitmaps
CheckMenuItem
EnableMenuItem
GetFocus
GetNextDlgTabItem
DispatchMessageA
GetKeyState
CallNextHookEx
PeekMessageA
SetWindowsHookExA
LoadStringA
GetTopWindow
GetClassInfoA
UnhookWindowsHookEx
GetParent
GetLastActivePopup
IsWindowEnabled
GetWindowLongA
SendMessageA
EnableWindow
MessageBoxA
SystemParametersInfoA
SetWindowPos

gdi32

CreateBitmap
SetTextColor
SetBkColor
GetClipBox
GetDeviceCaps
DeleteObject
GetObjectA
SaveDC
DeleteDC
SelectObject
GetStockObject
RestoreDC
SetMapMode
OffsetViewportOrgEx
SetViewportExtEx
SetViewportOrgEx
ScaleViewportExtEx
ScaleWindowExtEx
SetWindowExtEx
PtVisible
RectVisible
ExtTextOutA
Escape
TextOutA

winspool.drv

OpenPrinterA
DocumentPropertiesA
ClosePrinter

advapi32

RegQueryValueExA
RegCloseKey
RegOpenKeyExA

comctl32

ord17

Exports

Exports

Initialize9x
InitializeNT
MigrateSystem9x
MigrateSystemNT
MigrateUser9x
MigrateUserNT
QueryVersion

Sections

.text
Size: 44KB - Virtual size: 42KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 16KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 12KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/WIN9XMIG/OEWAB/MIGRATE.DLL
.dll windows:5 windows x86 arch:x86

d2063aba52bfd0c710dfc7bea5582a25

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

SetFileAttributesA
GetFileAttributesA
GetWindowsDirectoryA
lstrcpyA
GetSystemDirectoryA
DisableThreadLibraryCalls
lstrlenA
WritePrivateProfileStructA
WritePrivateProfileStringA
GetLastError
WideCharToMultiByte
GetPrivateProfileStructA
GetPrivateProfileStringA
GetCommandLineA
GetVersionExA
ExitProcess
GetProcAddress
GetModuleHandleA
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
GetModuleFileNameA
HeapDestroy
HeapCreate
DeleteFileA
HeapFree
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
HeapAlloc
GetACP
GetOEMCP
GetCPInfo
VirtualAlloc
HeapReAlloc
LCMapStringA
MultiByteToWideChar
LCMapStringW
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
VirtualProtect
GetSystemInfo
VirtualQuery
RtlUnwind
GlobalAlloc
GlobalFree
ExpandEnvironmentStringsA
lstrcmpA
VirtualFree
lstrcpynA

user32

wsprintfA
CharPrevA
LoadStringA

version

GetFileVersionInfoSizeA
GetFileVersionInfoA
VerQueryValueA

advapi32

RegQueryValueExA
RegOpenKeyExA
RegCreateKeyExA
RegSetValueExA
RegCloseKey

Exports

Exports

Initialize9x
InitializeNT
MigrateSystem9x
MigrateSystemNT
MigrateUser9x
MigrateUserNT
QueryVersion

Sections

.text
Size: 32KB - Virtual size: 32KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/WIN9XMIG/PRINT/BLAINF/PRTUPG9X.INF
I386/WIN9XMIG/PRINT/DTCINF/PRTUPG9X.INF
I386/WIN9XMIG/PRINT/ENTINF/PRTUPG9X.INF
I386/WIN9XMIG/PRINT/MIGRATE.DLL
.dll windows:5 windows x86 arch:x86

2832918f4e072e7ae8d499d2411ec810

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

msvcrt

_adjust_fdiv
malloc
_initterm
free
_strnicmp
_itoa
atoi
vsprintf
wcslen
strncmp
isdigit
isspace
sprintf
_strcmpi
wcscmp
wcscpy

advapi32

RegDeleteKeyA
RegQueryInfoKeyA
RegEnumKeyA
RegQueryValueExA
RegDeleteValueA
RegCreateKeyExA
RegSetValueExA
RegOpenKeyExA
RegCloseKey
RegEnumKeyExA

kernel32

CopyFileA
FormatMessageA
OpenEventA
SetLastError
CreateThread
DebugBreak
Sleep
OutputDebugStringA
LocalAlloc
LocalFree
WriteFile
GetSystemDirectoryA
LoadLibraryA
WritePrivateProfileStringA
GetProfileSectionA
GetTempPathA
CreateEventA
MultiByteToWideChar
ReadFile
SetFilePointer
FreeLibrary
GetProcAddress
DeleteFileA
CloseHandle
CreateFileA
GetLastError
WaitForSingleObject
SetEvent
WideCharToMultiByte
lstrcmpiA

setupapi

SetupOpenFileQueue
SetupFindFirstLineA
SetupDiEnumDriverInfoA
SetupDiGetDriverInfoDetailA
SetupLogErrorA
SetupDiCreateDeviceInfoList
SetupOpenAppendInfFileA
SetupDiGetDeviceInstallParamsA
SetupDiSetDeviceInstallParamsA
SetupDiBuildDriverInfoList
SetupDiDestroyDeviceInfoList
SetupOpenLog
SetupCloseLog
SetupDiCallClassInstaller
SetupOpenInfFileA
SetupGetLineCountA
SetupGetLineByIndexA
SetupGetStringFieldA
SetupDefaultQueueCallbackW
SetupTermDefaultQueueCallback
SetupCloseFileQueue
SetupDiSetDeviceInstallParamsW
SetupCommitFileQueueW
SetupInitDefaultQueueCallbackEx
SetupDiGetDeviceInstallParamsW
SetupCloseInfFile

shell32

ShellExecuteExA

user32

wvsprintfA
GetDesktopWindow
wsprintfA
LoadStringA

winspool.drv

EnumPrintersA
AddPrinterA
EnumPrinterDriversA
ClosePrinter
AddPrinterDriverW
AddMonitorW
ord202
AddPrinterConnectionA
SetPrinterA
GetPrinterA
OpenPrinterA
EnumMonitorsA

Exports

Exports

CallVendorSetupDlls
Initialize9x
InitializeNT
MigrateSystem9x
MigrateSystemNT
MigrateUser9x
MigrateUserNT
ProcessWin9xNetworkPrinters
QueryVersion

Sections

.text
Size: 24KB - Virtual size: 23KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/WIN9XMIG/PRINT/PERINF/PRTUPG9X.INF
I386/WIN9XMIG/PRINT/PRTUPG9X.INF
I386/WIN9XMIG/PRINT/SBSINF/PRTUPG9X.INF
I386/WIN9XMIG/PRINT/SRVINF/PRTUPG9X.INF
I386/WIN9XMIG/PWS/MIGRATE.DLL
.dll windows:5 windows x86 arch:x86

a8054ac9a229dc4b33dd66c4ca343f27

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

msvcrt

_onexit
_mbsnicmp
_mbsupr
_mbslwr
_mbsrchr
__dllonexit
_adjust_fdiv
malloc
_initterm
free
strtok
printf
_stricmp
_splitpath
strrchr
vsprintf
sprintf
_mbsicmp
_mbscpy
_mbschr
_mbsnextc
_ismbcprint
_mbsinc
isleadbyte
_mbslen

setupapi

SetupLogErrorA
SetupOpenLog
SetupCloseLog
SetupOpenInfFileA
SetupCloseInfFile
SetupFindNextLine
SetupGetLineTextA
SetupFindFirstLineA

kernel32

LoadLibraryA
InitializeCriticalSection
GetModuleFileNameA
MoveFileA
EnterCriticalSection
LeaveCriticalSection
WritePrivateProfileStringA
GetPrivateProfileStringA
HeapAlloc
HeapFree
GetProcessHeap
DisableThreadLibraryCalls
FormatMessageA
GetLastError
FindClose
FindNextFileA
FindFirstFileA
GetWindowsDirectoryA
WideCharToMultiByte
GetFileAttributesA
lstrcmpiA
RemoveDirectoryA
DeleteFileA
SetFileAttributesA
GlobalAlloc
GlobalFree
MultiByteToWideChar
WriteFile
SetLastError
CloseHandle
SetEvent
CreateEventA
FreeLibrary
GetProcAddress
LoadLibraryExA
GetSystemDirectoryA
Sleep
CopyFileA
ExpandEnvironmentStringsA
CreateFileA
DeleteCriticalSection
GetLocalTime

advapi32

RegQueryValueExA
RegOpenKeyA
RegSetValueExA
RegCreateKeyExA
RegEnumKeyExA
RegQueryInfoKeyA
RegEnumValueA
RegCloseKey

shell32

SHGetPathFromIDListA
SHGetSpecialFolderLocation

user32

LoadStringA
wsprintfA

ole32

CoGetClassObject
CoInitialize
CoCreateInstance
CoUninitialize
CoTaskMemAlloc

Exports

Exports

Initialize9x
InitializeNT
MigrateSystem9x
MigrateSystemNT
MigrateUser9x
MigrateUserNT
QueryVersion

Sections

.text
Size: 26KB - Virtual size: 26KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/WIN9XMIG/PWS/SYMBOLS.PRI/RETAIL/DLL/MIGRATE.PDB
I386/WIN9XMIG/PWS/SYMBOLS/RETAIL/DLL/MIGRATE.PDB
I386/WIN9XMIG/PWS/SYMBOLS/RETAIL/DLL/MIGRATE.SYM
I386/WIN9XMIG/RUMBA/MIGRATE.DLL
.dll windows:4 windows x86 arch:x86

b9b67b3a96152f7b577670cca9b7b620

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

setupapi

SetupLogErrorA

mfc42

ord2725
ord800
ord4160
ord540
ord6467
ord3953
ord924
ord939
ord922
ord858
ord926
ord537
ord2818
ord561
ord2915
ord860
ord815
ord825
ord3738
ord532
ord823
ord268
ord535
ord5710
ord536
ord1089
ord3922
ord5731
ord2512
ord826
ord2554
ord4486
ord6375
ord4274
ord1116
ord1168
ord4424
ord1176
ord4622
ord4080
ord3079
ord3825
ord3831
ord3830
ord2976
ord3081
ord2985
ord3262
ord3136
ord4465
ord3259
ord3147
ord2982
ord5714
ord5289
ord5307
ord4698
ord4079
ord5302
ord5300
ord3346
ord2396
ord5199
ord941
ord1567
ord5572
ord600
ord269
ord1578
ord1255
ord1253
ord1570
ord1197
ord1243
ord342
ord1577
ord1575
ord1182

msvcrt

_findfirst
strchr
strstr
_onexit
__dllonexit
_EH_prolog
_mbscmp
sprintf
atol
wcslen
strncpy
__CxxFrameHandler
??1type_info@@UAE@XZ
free
_initterm
malloc
_adjust_fdiv
_chdir
strrchr
_findclose
_stricmp
_strcmpi

kernel32

GetModuleFileNameA
DeleteFileA
FindFirstFileA
FindNextFileA
FindClose
GetFullPathNameA
FindResourceA
LoadResource
LockResource
CreateFileA
SizeofResource
WriteFile
CloseHandle
WideCharToMultiByte
CopyFileA
GetSystemDefaultLCID
GetSystemDirectoryA
GetWindowsDirectoryA
OpenFile
WritePrivateProfileStringA
GetPrivateProfileStringA
GetLastError
RemoveDirectoryA
MultiByteToWideChar
CreateDirectoryA
LocalAlloc
LocalFree
GetEnvironmentVariableA

user32

GetFocus
wsprintfA

advapi32

RegOpenKeyExA
RegCloseKey
RegDeleteKeyA
RegDeleteValueA
RegQueryValueExA
RegEnumKeyExA
RegSetValueExA
RegEnumValueA

shell32

SHGetSpecialFolderLocation
SHGetPathFromIDListA

ole32

CoInitialize
CoUninitialize
CoCreateInstance

Exports

Exports

Initialize9x
InitializeNT
MigrateSystem9x
MigrateSystemNT
MigrateUser9x
MigrateUserNT
QueryVersion
TESTUP

Sections

.text
Size: 36KB - Virtual size: 35KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 112KB - Virtual size: 109KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/WIN9XMIG/SETUP/MIGRATE.DLL
.dll windows:5 windows x86 arch:x86

c7b24bfd377152eb24cd8f2528b4b88d

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_REMOVABLE_RUN_FROM_SWAP
IMAGE_FILE_NET_RUN_FROM_SWAP
IMAGE_FILE_DLL

PDB Paths

migrate.pdb

Imports

msvcrt

_mbschr
_mbslen
towlower
_mbctolower
memmove
iswctype
_ismbcspace
_mbsdec
_wcsicmp
_mbslwr
_wcslwr
wcschr
_snprintf
_snwprintf
fprintf
_iob
fwprintf
_vsnprintf
_vsnwprintf
setlocale
_mbscmp
wcscmp
wcscspn
_mbsncmp
wcsncmp
_wtoi
_mbsnbcmp
_mbsnbicmp
_abnormal_termination
strchr
wcslen
wcscpy
_pctype
_adjust_fdiv
malloc
_initterm
free
_mbsnextc
_mbscpy
_local_unwind2
_mbsicmp
_except_handler3
_mbsnicmp
_mbsinc
_mbsrchr

kernel32

GetProcessHeap
DisableThreadLibraryCalls
lstrcpynA
WritePrivateProfileStringA
GetWindowsDirectoryA
GetLastError
CopyFileA
GetPrivateProfileStringA
HeapFree
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
LeaveCriticalSection
EnterCriticalSection
GetPrivateProfileIntA
GetSystemDirectoryA
IsDBCSLeadByte
SetLastError
LocalFree
LocalAlloc
FormatMessageA
FormatMessageW
CloseHandle
SetFilePointer
CreateFileA
OutputDebugStringA
OutputDebugStringW
DeleteFileA
SetFileAttributesA
CreateEventA
SetEvent
ExitProcess
HeapAlloc
HeapReAlloc
GetModuleFileNameA
InitializeCriticalSection
GetVersionExA
FindClose
FindFirstFileA
SetErrorMode
GetFileAttributesA
ReadFile
WriteFile
GetFileSize
CreateFileW
RaiseException
DeleteFileW
FindNextFileA
SetThreadLocale
GetThreadLocale
WideCharToMultiByte
MultiByteToWideChar
Sleep
InterlockedExchange
InterlockedIncrement
CreateMutexA
lstrcpyA
lstrlenA
ReleaseMutex
DeleteCriticalSection
WaitForMultipleObjects

user32

CharLowerA
MessageBoxA
wsprintfA

advapi32

RegCloseKey
RegOpenKeyA
RegSetValueExA
RegCreateKeyA
RegQueryValueExA
RegOpenKeyExA

version

GetFileVersionInfoA
GetFileVersionInfoSizeA
VerQueryValueA

comctl32

ord17

setupapi

SetupCloseInfFile
SetupOpenLog
SetupLogErrorW
SetupGetStringFieldA
SetupFindFirstLineA
SetupLogErrorA
SetupFindNextMatchLineA
SetupOpenAppendInfFileA
SetupOpenInfFileA
SetupCloseLog

Exports

Exports

Initialize9x
InitializeNT
MigrateSystem9x
MigrateSystemNT
MigrateUser9x
MigrateUserNT
QueryVersion

Sections

.text
Size: 48KB - Virtual size: 47KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/WIN9XMIG/TRANSACT/MIGRATE.DLL
.dll windows:5 windows x86 arch:x86

5009995cf42f33acf71856349918faf5

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

user32

CharPrevExA
CharNextExA
wsprintfA
LoadStringA

kernel32

DeleteFileA
RemoveDirectoryA
lstrcmpiA
WritePrivateProfileStringA
GetWindowsDirectoryA
GetFileAttributesA
GetSystemDirectoryA
TerminateThread
ExpandEnvironmentStringsA
MoveFileExA
SetFileAttributesA
CreateThread
OpenEventA
GetLastError
GetExitCodeProcess
WaitForSingleObject
CreateProcessA
lstrcpyA
lstrlenA
GetLocalTime
Sleep
CreateFileA
WriteFile
FindClose
FindNextFileA
lstrcmpA
FindFirstFileA
SetEvent
CloseHandle
FormatMessageA
GetFileSize

ole32

CoInitialize
CoUninitialize
CoCreateInstance

oleaut32

SysAllocString
VariantClear
SysFreeString
VariantInit

advapi32

RegOpenKeyExA
RegQueryValueExA
RegDeleteValueA
RegCloseKey
RegEnumKeyA
RegOpenKeyA

mfc42

ord823
ord825

msvcrt

_wcsicmp
free
_initterm
malloc
_access
sprintf
strrchr
__CxxFrameHandler
_adjust_fdiv
_itoa

setupapi

SetupOpenLog
SetupCloseLog
SetupLogErrorA
SetupGetLineTextA

shell32

SHGetPathFromIDListA
SHGetSpecialFolderLocation
SHGetMalloc

Exports

Exports

Initialize9x
InitializeNT
MigrateSystem9x
MigrateSystemNT
MigrateUser9x
MigrateUserNT
QueryVersion

Sections

.text
Size: 66KB - Virtual size: 65KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/WIN9XMIG/WIA/MIGRATE.DLL
.dll windows:5 windows x86 arch:x86

7231963e8a1e41f03596abef1fc75443

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

msvcrt

wcslen
vsprintf
strstr
_snprintf

advapi32

RegCloseKey
RegQueryInfoKeyA
RegEnumValueA
RegEnumKeyA
RegOpenKeyA
RegQueryValueExA

kernel32

LocalAlloc
LocalFree
WideCharToMultiByte
WriteFile
FormatMessageA
ReadFile
lstrcmpiA
GetLastError
GetWindowsDirectoryA
FreeLibrary
GetProcAddress
LoadLibraryA
CloseHandle
CreateFileA

user32

wsprintfA
LoadStringA

setupapi

SetupOpenLog
SetupDiOpenDevRegKey
SetupDiEnumDeviceInfo
SetupDiGetClassDevsA
SetupCloseLog
SetupLogErrorA

version

GetFileVersionInfoA
VerQueryValueA
GetFileVersionInfoSizeA

Exports

Exports

Initialize9x
InitializeNT
MigrateSystem9x
MigrateSystemNT
MigrateUser9x
MigrateUserNT
QueryVersion

Sections

.text
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 44B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 596B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/WIN9XMIG/WMP/MIGRATE.DLL
.dll windows:5 windows x86 arch:x86

b0104df784bf69c6e20eea58e5bb92c9

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_REMOVABLE_RUN_FROM_SWAP
IMAGE_FILE_DLL

Imports

kernel32

WaitForMultipleObjects
CloseHandle
CreateProcessA
SetLastError
DisableThreadLibraryCalls
WritePrivateProfileStringA
GetPrivateProfileStringA
GetCommandLineA
GetVersionExA
ExitProcess
GetProcAddress
GetModuleHandleA
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
GetModuleFileNameA
HeapDestroy
HeapCreate
VirtualFree
HeapFree
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetLastError
GetEnvironmentStringsW
WriteFile
HeapAlloc
GetACP
GetOEMCP
GetCPInfo
VirtualAlloc
HeapReAlloc
LoadLibraryA
SetFilePointer
LCMapStringA
MultiByteToWideChar
LCMapStringW
GetStringTypeA
GetStringTypeW
SetStdHandle
GetLocaleInfoA
VirtualProtect
GetSystemInfo
VirtualQuery
FlushFileBuffers
RtlUnwind
GetShortPathNameA
GetWindowsDirectoryA
CreateDirectoryA
WideCharToMultiByte
GetFileAttributesA

user32

LoadStringA

advapi32

RegCreateKeyExA
RegCloseKey
RegSetValueExA
RegQueryValueExA

shell32

SHGetMalloc
SHGetPathFromIDListA
SHGetSpecialFolderLocation

Exports

Exports

Initialize9x
InitializeNT
MigrateSystem9x
MigrateSystemNT
MigrateUser9x
MigrateUserNT
QueryVersion

Sections

.text
Size: 24KB - Virtual size: 21KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/WIN9XUPG/CABINET.DLL
.dll windows:5 windows x86 arch:x86

ea4cbf3c305bfb43c7e36a485e58acb4

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Imports

kernel32

CreateDirectoryA
ReadFile
WriteFile
CloseHandle
SetFilePointer
SetFileTime
LocalFileTimeToFileTime
DosDateTimeToFileTime
lstrcatA
lstrcpyA
lstrlenA
CreateFileA
SetFileAttributesA
lstrcmpiA
GetLastError
LeaveCriticalSection
EnterCriticalSection
InitializeCriticalSection
DeleteFileA

ole32

CoTaskMemFree
CoTaskMemAlloc

Exports

Exports

DeleteExtractedFiles
DllGetVersion
Extract
FCIAddFile
FCICreate
FCIDestroy
FCIFlushCabinet
FCIFlushFolder
FDICopy
FDICreate
FDIDestroy
FDIIsCabinet
GetDllVersion

Sections

.text
Size: 49KB - Virtual size: 48KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 976B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 924B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/WIN9XUPG/CFGMGR32.DLL
.dll windows:4 windows x86 arch:x86

efc69d5a302db924083b83be9353c1c3

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetProcessHeap
lstrcatA
lstrcpyA
HeapFree
HeapAlloc
WideCharToMultiByte
RtlUnwind
GlobalAlloc
GetExitCodeThread
DeviceIoControl
CreateThread
CreateFileA
CloseHandle
GlobalFree
lstrlenA
RtlMoveMemory
MultiByteToWideChar

user32

CharUpperA
MsgWaitForMultipleObjects
PeekMessageA

advapi32

RegQueryInfoKeyA
RegDeleteKeyA
RegSetValueExA
RegQueryValueExA
RegCloseKey
RegOpenKeyExA
RegEnumKeyA
RegCreateKeyExA

ole32

StringFromGUID2
CLSIDFromString

Exports

Exports

CM_Add_Empty_Log_Conf
CM_Add_Empty_Log_Conf_Ex
CM_Add_IDA
CM_Add_IDW
CM_Add_ID_ExA
CM_Add_ID_ExW
CM_Add_Range
CM_Add_Res_Des
CM_Add_Res_Des_Ex
CM_Connect_MachineA
CM_Connect_MachineW
CM_Create_DevNodeA
CM_Create_DevNodeW
CM_Create_DevNode_ExA
CM_Create_DevNode_ExW
CM_Create_Range_List
CM_Delete_Class_Key
CM_Delete_Class_Key_Ex
CM_Delete_DevNode_Key
CM_Delete_DevNode_Key_Ex
CM_Delete_Range
CM_Detect_Resource_Conflict
CM_Detect_Resource_Conflict_Ex
CM_Disable_DevNode
CM_Disable_DevNode_Ex
CM_Disconnect_Machine
CM_Dup_Range_List
CM_Enable_DevNode
CM_Enable_DevNode_Ex
CM_Enumerate_Classes
CM_Enumerate_Classes_Ex
CM_Enumerate_EnumeratorsA
CM_Enumerate_EnumeratorsW
CM_Enumerate_Enumerators_ExA
CM_Enumerate_Enumerators_ExW
CM_Find_Range
CM_First_Range
CM_Free_Log_Conf
CM_Free_Log_Conf_Ex
CM_Free_Log_Conf_Handle
CM_Free_Range_List
CM_Free_Res_Des
CM_Free_Res_Des_Ex
CM_Free_Res_Des_Handle
CM_Get_Child
CM_Get_Child_Ex
CM_Get_Class_Key_NameA
CM_Get_Class_Key_NameW
CM_Get_Class_Key_Name_ExA
CM_Get_Class_Key_Name_ExW
CM_Get_Class_NameA
CM_Get_Class_NameW
CM_Get_Class_Name_ExA
CM_Get_Class_Name_ExW
CM_Get_Depth
CM_Get_Depth_Ex
CM_Get_DevNode_Registry_PropertyA
CM_Get_DevNode_Registry_PropertyW
CM_Get_DevNode_Registry_Property_ExA
CM_Get_DevNode_Registry_Property_ExW
CM_Get_DevNode_Status
CM_Get_DevNode_Status_Ex
CM_Get_Device_IDA
CM_Get_Device_IDW
CM_Get_Device_ID_ExA
CM_Get_Device_ID_ExW
CM_Get_Device_ID_ListA
CM_Get_Device_ID_ListW
CM_Get_Device_ID_List_ExA
CM_Get_Device_ID_List_ExW
CM_Get_Device_ID_List_SizeA
CM_Get_Device_ID_List_SizeW
CM_Get_Device_ID_List_Size_ExA
CM_Get_Device_ID_List_Size_ExW
CM_Get_Device_ID_Size
CM_Get_Device_ID_Size_Ex
CM_Get_First_Log_Conf
CM_Get_First_Log_Conf_Ex
CM_Get_Global_State
CM_Get_Global_State_Ex
CM_Get_HW_Prof_FlagsA
CM_Get_HW_Prof_FlagsW
CM_Get_HW_Prof_Flags_ExA
CM_Get_HW_Prof_Flags_ExW
CM_Get_Hardware_Profile_InfoA
CM_Get_Hardware_Profile_InfoW
CM_Get_Hardware_Profile_Info_ExA
CM_Get_Hardware_Profile_Info_ExW
CM_Get_Interface_Device_AliasA
CM_Get_Interface_Device_AliasW
CM_Get_Interface_Device_Alias_ExA
CM_Get_Interface_Device_Alias_ExW
CM_Get_Interface_Device_ListA
CM_Get_Interface_Device_ListW
CM_Get_Interface_Device_List_ExA
CM_Get_Interface_Device_List_ExW
CM_Get_Interface_Device_List_SizeA
CM_Get_Interface_Device_List_SizeW
CM_Get_Interface_Device_List_Size_ExA
CM_Get_Interface_Device_List_Size_ExW
CM_Get_Next_Log_Conf
CM_Get_Next_Log_Conf_Ex
CM_Get_Next_Res_Des
CM_Get_Next_Res_Des_Ex
CM_Get_Parent
CM_Get_Parent_Ex
CM_Get_Res_Des_Data
CM_Get_Res_Des_Data_Ex
CM_Get_Res_Des_Data_Size
CM_Get_Res_Des_Data_Size_Ex
CM_Get_Sibling
CM_Get_Sibling_Ex
CM_Get_Version
CM_Get_Version_Ex
CM_Intersect_Range_List
CM_Invert_Range_List
CM_Locate_DevNodeA
CM_Locate_DevNodeW
CM_Locate_DevNode_ExA
CM_Locate_DevNode_ExW
CM_Merge_Range_List
CM_Modify_Res_Des
CM_Modify_Res_Des_Ex
CM_Move_DevNode
CM_Move_DevNode_Ex
CM_Next_Range
CM_Open_Class_KeyA
CM_Open_Class_KeyW
CM_Open_Class_Key_ExA
CM_Open_Class_Key_ExW
CM_Open_DevNode_Key
CM_Open_DevNode_Key_Ex
CM_Query_Arbitrator_Free_Data
CM_Query_Arbitrator_Free_Data_Ex
CM_Query_Arbitrator_Free_Size
CM_Query_Arbitrator_Free_Size_Ex
CM_Query_Remove_SubTree
CM_Query_Remove_SubTree_Ex
CM_Reenumerate_DevNode
CM_Reenumerate_DevNode_Ex
CM_Register_Device_Driver
CM_Register_Device_Driver_Ex
CM_Register_Interface_DeviceA
CM_Register_Interface_DeviceW
CM_Register_Interface_Device_ExA
CM_Register_Interface_Device_ExW
CM_Remove_SubTree
CM_Remove_SubTree_Ex
CM_Remove_Unmarked_Children
CM_Remove_Unmarked_Children_Ex
CM_Reset_Children_Marks
CM_Reset_Children_Marks_Ex
CM_Run_Detection
CM_Run_Detection_Ex
CM_Set_DevNode_Registry_PropertyA
CM_Set_DevNode_Registry_PropertyW
CM_Set_DevNode_Registry_Property_ExA
CM_Set_DevNode_Registry_Property_ExW
CM_Set_HW_Prof
CM_Set_HW_Prof_Ex
CM_Set_HW_Prof_FlagsA
CM_Set_HW_Prof_FlagsW
CM_Set_HW_Prof_Flags_ExA
CM_Set_HW_Prof_Flags_ExW
CM_Setup_DevNode
CM_Setup_DevNode_Ex
CM_Test_Range_Available
CM_Uninstall_DevNode
CM_Uninstall_DevNode_Ex
CM_Unregister_Interface_DeviceA
CM_Unregister_Interface_DeviceW
CM_Unregister_Interface_Device_ExA
CM_Unregister_Interface_Device_ExW

Sections

.text
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 36B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 932B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 964B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 696B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/WIN9XUPG/E95ONLY.DAT
I386/WIN9XUPG/IMAGEHLP.DLL
.dll windows:4 windows x86 arch:x86

6e8082c68a95a864a8b1c0dcec090a34

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Imports

kernel32

GetFileAttributesA
MapViewOfFileEx
UnmapViewOfFile
FlushViewOfFile
CreateFileMappingA
GetFileSize
SetFileTime
SystemTimeToFileTime
GetSystemTime
GetLastError
WideCharToMultiByte
MapViewOfFile
CreateFileA
SetLastError
DeleteFileA
SetEndOfFile
SetFilePointer
WriteFile
SetFileAttributesA
CopyFileA
ReadFile
GetEnvironmentVariableA
GetFullPathNameA
FindClose
FindNextFileA
FindFirstFileA
CreateDirectoryA
CloseHandle
HeapDestroy
HeapCreate
DisableThreadLibraryCalls
HeapAlloc
HeapFree
SearchPathA
GetProcAddress
LoadLibraryA
GetModuleHandleA
GetCurrentProcessId
VirtualFree
VirtualProtect
VirtualAlloc
lstrlenA
ReadProcessMemory
RtlUnwind
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW

Exports

Exports

BindImage
BindImageEx
CheckSumMappedFile
EnumerateLoadedModules
FindDebugInfoFile
FindExecutableImage
GetImageConfigInformation
GetImageUnusedHeaderBytes
GetTimestampForLoadedLibrary
ImageAddCertificate
ImageDirectoryEntryToData
ImageEnumerateCertificates
ImageGetCertificateData
ImageGetCertificateHeader
ImageGetDigestStream
ImageLoad
ImageNtHeader
ImageRemoveCertificate
ImageRvaToSection
ImageRvaToVa
ImageUnload
ImagehlpApiVersion
ImagehlpApiVersionEx
MakeSureDirectoryPathExists
MapAndLoad
MapDebugInformation
MapFileAndCheckSumA
MapFileAndCheckSumW
MarkImageAsRunFromSwap
ReBaseImage
RemovePrivateCvSymbolic
RemoveRelocations
SearchTreeForFile
SetImageConfigInformation
SplitSymbols
StackWalk
SymCleanup
SymEnumerateModules
SymEnumerateSymbols
SymFunctionTableAccess
SymGetModuleBase
SymGetModuleInfo
SymGetOptions
SymGetSearchPath
SymGetSymFromAddr
SymGetSymFromName
SymGetSymNext
SymGetSymPrev
SymInitialize
SymLoadModule
SymRegisterCallback
SymSetOptions
SymSetSearchPath
SymUnDName
SymUnloadModule
TouchFileTimes
UnDecorateSymbolName
UnMapAndLoad
UnmapDebugInformation
UpdateDebugInfoFile
UpdateDebugInfoFileEx

Sections

.text
Size: 78KB - Virtual size: 77KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 940B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/WIN9XUPG/ISMIG.DLL
.dll windows:4 windows x86 arch:x86

f1db0b06c6c82bb65a803abfb2c43e18

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

MultiByteToWideChar
ReadFile
CreateFileA
GetLastError
UnmapViewOfFile
MapViewOfFile
CreateFileMappingA
GetFileSize
DeleteFileA
MoveFileA
WriteFile
SetFilePointer
FlushFileBuffers
GlobalUnlock
lstrlenA
lstrcpyA
GlobalFree
GlobalLock
GlobalAlloc
GetTempFileNameA
EnterCriticalSection
Sleep
InitializeCriticalSection
InterlockedExchange
DeleteCriticalSection
LeaveCriticalSection
RtlUnwind
InterlockedDecrement
InterlockedIncrement
GetCommandLineA
GetVersion
HeapFree
RaiseException
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
HeapAlloc
ExitProcess
WideCharToMultiByte
CloseHandle
LCMapStringA
LCMapStringW
TerminateProcess
GetCurrentProcess
HeapReAlloc
HeapSize
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
GetModuleHandleA
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
IsBadWritePtr
SetUnhandledExceptionFilter
IsBadReadPtr
IsBadCodePtr
GetCPInfo
GetStringTypeA
GetStringTypeW
GetACP
GetOEMCP
GetProcAddress
LoadLibraryA

Exports

Exports

ISUGetAllStrings
ISUMigrate

Sections

.text
Size: 68KB - Virtual size: 64KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/WIN9XUPG/MIGDB.INF
I386/WIN9XUPG/MSVCRT.DLL
.dll windows:4 windows x86 arch:x86

c739cf6d773d58ef72c55106bb92dcd2

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Imports

kernel32

RaiseException
SetLocalTime
SystemTimeToFileTime
LocalFileTimeToFileTime
SetFileTime
GetLocalTime
CreateFileW
ReadFile
CreatePipe
CreateFileA
UnlockFile
LockFile
GetNumberOfConsoleInputEvents
PeekConsoleInputA
ReadConsoleInputA
PeekNamedPipe
GetFileInformationByHandle
DuplicateHandle
WriteConsoleA
SetEndOfFile
GetConsoleMode
SetConsoleMode
ReadConsoleA
HeapWalk
HeapCompact
HeapValidate
CreateProcessW
CreateProcessA
FreeLibrary
WaitForSingleObject
GetExitCodeProcess
MoveFileA
GetDriveTypeW
RemoveDirectoryW
MoveFileW
DeleteFileW
CreateDirectoryW
GetFullPathNameW
SetFileAttributesW
SetCurrentDirectoryW
GetCurrentDirectoryW
GetFileAttributesW
DeleteFileA
RemoveDirectoryA
CreateDirectoryA
GetCurrentProcessId
GetDriveTypeA
GetFullPathNameA
SetFileAttributesA
SetCurrentDirectoryA
GetCurrentDirectoryA
GetFileAttributesA
SetErrorMode
GetLogicalDrives
GetDiskFreeSpaceA
FileTimeToLocalFileTime
FileTimeToSystemTime
Beep
SetEnvironmentVariableA
GetTimeZoneInformation
GetUserDefaultLCID
IsValidCodePage
IsValidLocale
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
GetLocaleInfoW
GetLocaleInfoA
CompareStringW
GetSystemTime
Sleep
SetStdHandle
SetFilePointer
FlushFileBuffers
HeapSize
HeapReAlloc
InterlockedIncrement
InterlockedDecrement
SetEnvironmentVariableW
SetConsoleCtrlHandler
UnhandledExceptionFilter
WideCharToMultiByte
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetCommandLineW
MultiByteToWideChar
LoadLibraryA
GetOEMCP
GetACP
GetCPInfo
GetStartupInfoA
GetFileType
SetHandleCount
VirtualAlloc
VirtualFree
HeapCreate
HeapDestroy
HeapAlloc
HeapFree
FindFirstFileW
FindNextFileW
FindFirstFileA
FindNextFileA
FindClose
GetCurrentThread
TlsGetValue
SetLastError
TlsFree
TlsAlloc
GetCurrentThreadId
CloseHandle
ExitThread
TlsSetValue
CreateThread
GetLastError
ResumeThread
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSection
GetVersion
GetModuleHandleA
GetProcAddress
GetCommandLineA
GetStdHandle
WriteFile
GetCurrentProcess
TerminateProcess
ExitProcess
GetModuleFileNameW
GetModuleFileNameA
IsBadCodePtr
IsBadWritePtr
IsBadReadPtr
SetUnhandledExceptionFilter
RtlUnwind
CompareStringA

Exports

Exports

$I10_OUTPUT
??0__non_rtti_object@@QAE@ABV0@@Z
??0__non_rtti_object@@QAE@PBD@Z
??0bad_cast@@QAE@ABQBD@Z
??0bad_cast@@QAE@ABV0@@Z
??0bad_typeid@@QAE@ABV0@@Z
??0bad_typeid@@QAE@PBD@Z
??0exception@@QAE@ABQBD@Z
??0exception@@QAE@ABV0@@Z
??0exception@@QAE@XZ
??1__non_rtti_object@@UAE@XZ
??1bad_cast@@UAE@XZ
??1bad_typeid@@UAE@XZ
??1exception@@UAE@XZ
??1type_info@@UAE@XZ
??2@YAPAXI@Z
??3@YAXPAX@Z
??4__non_rtti_object@@QAEAAV0@ABV0@@Z
??4bad_cast@@QAEAAV0@ABV0@@Z
??4bad_typeid@@QAEAAV0@ABV0@@Z
??4exception@@QAEAAV0@ABV0@@Z
??8type_info@@QBEHABV0@@Z
??9type_info@@QBEHABV0@@Z
??_7__non_rtti_object@@6B@
??_7bad_cast@@6B@
??_7bad_typeid@@6B@
??_7exception@@6B@
??_E__non_rtti_object@@UAEPAXI@Z
??_Ebad_cast@@UAEPAXI@Z
??_Ebad_typeid@@UAEPAXI@Z
??_Eexception@@UAEPAXI@Z
??_G__non_rtti_object@@UAEPAXI@Z
??_Gbad_cast@@UAEPAXI@Z
??_Gbad_typeid@@UAEPAXI@Z
??_Gexception@@UAEPAXI@Z
?_query_new_handler@@YAP6AHI@ZXZ
?_query_new_mode@@YAHXZ
?_set_new_handler@@YAP6AHI@ZP6AHI@Z@Z
?_set_new_mode@@YAHH@Z
?_set_se_translator@@YAP6AXIPAU_EXCEPTION_POINTERS@@@ZP6AXI0@Z@Z
?before@type_info@@QBEHABV1@@Z
?name@type_info@@QBEPBDXZ
?raw_name@type_info@@QBEPBDXZ
?set_new_handler@@YAP6AXXZP6AXXZ@Z
?set_terminate@@YAP6AXXZP6AXXZ@Z
?set_unexpected@@YAP6AXXZP6AXXZ@Z
?terminate@@YAXXZ
?unexpected@@YAXXZ
?what@exception@@UBEPBDXZ
_CIacos
_CIasin
_CIatan
_CIatan2
_CIcos
_CIcosh
_CIexp
_CIfmod
_CIlog
_CIlog10
_CIpow
_CIsin
_CIsinh
_CIsqrt
_CItan
_CItanh
_CxxThrowException
_EH_prolog
_Getdays
_Getmonths
_Gettnames
_HUGE
_Strftime
_XcptFilter
__CxxFrameHandler
__CxxLongjmpUnwind
__RTCastToVoid
__RTDynamicCast
__RTtypeid
__STRINGTOLD
__argc
__argv
__badioinfo
__crtCompareStringA
__crtGetLocaleInfoW
__crtLCMapStringA
__dllonexit
__doserrno
__fpecode
__getmainargs
__initenv
__isascii
__iscsym
__iscsymf
__lc_codepage
__lc_handle
__lconv_init
__mb_cur_max
__p___argc
__p___argv
__p___initenv
__p___mb_cur_max
__p___wargv
__p___winitenv
__p__acmdln
__p__amblksiz
__p__commode
__p__daylight
__p__dstbias
__p__environ
__p__fileinfo
__p__fmode
__p__iob
__p__mbctype
__p__osver
__p__pctype
__p__pgmptr
__p__pwctype
__p__timezone
__p__tzname
__p__wcmdln
__p__wenviron
__p__winmajor
__p__winminor
__p__winver
__p__wpgmptr
__pioinfo
__pxcptinfoptrs
__set_app_type
__setlc_active
__setusermatherr
__threadhandle
__threadid
__toascii
__unDName
__unguarded_readlc_active
__wargv
__wgetmainargs
__winitenv
_abnormal_termination
_access
_acmdln
_adj_fdiv_m16i
_adj_fdiv_m32
_adj_fdiv_m32i
_adj_fdiv_m64
_adj_fdiv_r
_adj_fdivr_m16i
_adj_fdivr_m32
_adj_fdivr_m32i
_adj_fdivr_m64
_adj_fpatan
_adj_fprem
_adj_fprem1
_adj_fptan
_adjust_fdiv
_aexit_rtn
_amsg_exit
_assert
_atodbl
_atoi64
_atoldbl
_beep
_beginthread
_beginthreadex
_c_exit
_cabs
_callnewh
_cexit
_cgets
_chdir
_chdrive
_chgsign
_chmod
_chsize
_clearfp
_close
_commit
_commode
_control87
_controlfp
_copysign
_cprintf
_cputs
_creat
_cscanf
_ctype
_cwait
_daylight
_dstbias
_dup
_dup2
_ecvt
_endthread
_endthreadex
_environ
_eof
_errno
_except_handler2
_except_handler3
_execl
_execle
_execlp
_execlpe
_execv
_execve
_execvp
_execvpe
_exit
_expand
_fcloseall
_fcvt
_fdopen
_fgetchar
_fgetwchar
_filbuf
_fileinfo
_filelength
_filelengthi64
_fileno
_findclose
_findfirst
_findfirsti64
_findnext
_findnexti64
_finite
_flsbuf
_flushall
_fmode
_fpclass
_fpieee_flt
_fpreset
_fputchar
_fputwchar
_fsopen
_fstat
_fstati64
_ftime
_ftol
_fullpath
_futime
_gcvt
_get_osfhandle
_get_sbh_threshold
_getch
_getche
_getcwd
_getdcwd
_getdiskfree
_getdllprocaddr
_getdrive
_getdrives
_getmaxstdio
_getmbcp
_getpid
_getsystime
_getw
_getws
_global_unwind2
_heapadd
_heapchk
_heapmin
_heapset
_heapused
_heapwalk
_hypot
_i64toa
_i64tow
_initterm
_inp
_inpd
_inpw
_iob
_isatty
_isctype
_ismbbalnum
_ismbbalpha
_ismbbgraph
_ismbbkalnum
_ismbbkana
_ismbbkprint
_ismbbkpunct
_ismbblead
_ismbbprint
_ismbbpunct
_ismbbtrail
_ismbcalnum
_ismbcalpha
_ismbcdigit
_ismbcgraph
_ismbchira
_ismbckata
_ismbcl0
_ismbcl1
_ismbcl2
_ismbclegal
_ismbclower
_ismbcprint
_ismbcpunct
_ismbcspace
_ismbcsymbol
_ismbcupper
_ismbslead
_ismbstrail
_isnan
_itoa
_itow
_j0
_j1
_jn
_kbhit
_lfind
_loaddll
_local_unwind2
_lock
_locking
_logb
_longjmpex
_lrotl
_lrotr
_lsearch
_lseek
_lseeki64
_ltoa
_ltow
_makepath
_mbbtombc
_mbbtype
_mbccpy
_mbcjistojms
_mbcjmstojis
_mbclen
_mbctohira
_mbctokata
_mbctolower
_mbctombb
_mbctoupper
_mbctype
_mbsbtype
_mbscat
_mbschr
_mbscmp
_mbscoll
_mbscpy
_mbscspn
_mbsdec
_mbsdup
_mbsicmp
_mbsicoll
_mbsinc
_mbslen
_mbslwr
_mbsnbcat
_mbsnbcmp
_mbsnbcnt
_mbsnbcoll
_mbsnbcpy
_mbsnbicmp
_mbsnbicoll
_mbsnbset
_mbsncat
_mbsnccnt
_mbsncmp
_mbsncoll
_mbsncpy
_mbsnextc
_mbsnicmp
_mbsnicoll
_mbsninc
_mbsnset
_mbspbrk
_mbsrchr
_mbsrev
_mbsset
_mbsspn
_mbsspnp
_mbsstr
_mbstok
_mbstrlen
_mbsupr
_memccpy
_memicmp
_mkdir
_mktemp
_msize
_nextafter
_onexit
_open
_open_osfhandle
_osver
_outp
_outpd
_outpw
_pclose
_pctype
_pgmptr
_pipe
_popen
_purecall
_putch
_putenv
_putw
_putws
_pwctype
_read
_rmdir
_rmtmp
_rotl
_rotr
_safe_fdiv
_safe_fdivr
_safe_fprem
_safe_fprem1
_scalb
_searchenv
_seh_longjmp_unwind
_set_error_mode
_set_sbh_threshold
_seterrormode
_setjmp
_setjmp3
_setmaxstdio
_setmbcp
_setmode
_setsystime
_sleep
_snprintf
_snwprintf
_sopen
_spawnl
_spawnle
_spawnlp
_spawnlpe
_spawnv
_spawnve
_spawnvp
_spawnvpe
_splitpath
_stat
_stati64
_statusfp
_strcmpi
_strdate
_strdup
_strerror
_stricmp
_stricoll
_strlwr
_strncoll
_strnicmp
_strnicoll
_strnset
_strrev
_strset
_strtime
_strupr
_swab
_sys_errlist
_sys_nerr
_tell
_telli64
_tempnam
_timezone
_tolower
_toupper
_tzname
_tzset
_ui64toa
_ui64tow
_ultoa
_ultow
_umask
_ungetch
_unlink
_unloaddll
_unlock
_utime
_vsnprintf
_vsnwprintf
_waccess
_wasctime
_wchdir
_wchmod
_wcmdln
_wcreat
_wcsdup
_wcsicmp
_wcsicoll
_wcslwr
_wcsncoll
_wcsnicmp
_wcsnicoll
_wcsnset
_wcsrev
_wcsset
_wcsupr
_wctime
_wenviron
_wexecl
_wexecle
_wexeclp

Sections

.text
Size: 207KB - Virtual size: 207KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 23KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 14KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 924B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/WIN9XUPG/SETUPAPI.DLL
.dll windows:5 windows x86 arch:x86

915b2ae67acb2c6daa4fced8f3ae4320

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_REMOVABLE_RUN_FROM_SWAP
IMAGE_FILE_NET_RUN_FROM_SWAP
IMAGE_FILE_DLL

PDB Paths

setupapi_ansi.pdb

Imports

lz32

LZOpenFileA
LZCopy
LZClose

kernel32

ExitThread
ResumeThread
CreateThread
RtlUnwind
ExitProcess
SetHandleCount
GetStdHandle
GetFileType
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
HeapDestroy
HeapCreate
VirtualFree
VirtualQuery
GetACP
GetOEMCP
GetCPInfo
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
GetUserDefaultLCID
EnumSystemLocalesA
IsValidLocale
IsValidCodePage
VirtualAlloc
VirtualProtect
GetSystemInfo
SetStdHandle
GetLocaleInfoW
GetExitCodeThread
QueryPerformanceCounter
GetStartupInfoA
CreateProcessA
GetEnvironmentVariableA
MultiByteToWideChar
OutputDebugStringA
GetPrivateProfileSectionA
WritePrivateProfileSectionA
MoveFileExA
WideCharToMultiByte
GetCurrentThreadId
GetCurrentProcess
GetCurrentThread
DuplicateHandle
GetLocaleInfoA
GetPrivateProfileStringA
WritePrivateProfileStringA
TlsFree
TlsAlloc
GetSystemDirectoryA
ExpandEnvironmentStringsA
TlsGetValue
LocalAlloc
TlsSetValue
GetTempPathA
RemoveDirectoryA
GetDiskFreeSpaceA
DosDateTimeToFileTime
LocalFileTimeToFileTime
ReadFile
GetDateFormatA
lstrcmpA
ResetEvent
LoadLibraryA
GetModuleFileNameA
CompareFileTime
FindFirstFileA
FindNextFileA
FindClose
CreateEventA
GetProcAddress
GetWindowsDirectoryA
GetDriveTypeA
DeviceIoControl
LocalReAlloc
GetSystemTime
CreateMutexW
GetModuleHandleA
lstrlenW
SystemTimeToFileTime
GetThreadLocale
GetStringTypeExA
GetCurrentDirectoryA
InterlockedExchange
CreateDirectoryA
CreateMutexA
RaiseException
SetThreadLocale
GetProcessHeap
HeapFree
HeapReAlloc
HeapAlloc
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
GetSystemTimeAsFileTime
GetShortPathNameA
GetTickCount
SetCurrentDirectoryA
SetLastError
lstrcpyA
InterlockedDecrement
lstrlenA
GetLastError
GetFullPathNameA
lstrcmpiA
GetTempFileNameA
CopyFileA
SetFileAttributesA
ReleaseMutex
DeleteFileA
lstrcpynA
SetErrorMode
Sleep
FlushFileBuffers
SetEndOfFile
CloseHandle
UnmapViewOfFile
LocalFree
WriteFile
FormatMessageA
GetVersionExA
MapViewOfFile
CreateFileMappingA
GetFileSize
CreateFileA
SetFilePointer
GetCurrentProcessId
GetLocalTime
InterlockedIncrement
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
GetFileAttributesA
InitializeCriticalSection
lstrcatA
GetCommandLineA
WaitForMultipleObjects
MoveFileA
GetFileTime
SetFileTime
WaitForSingleObject
SetEvent
FileTimeToSystemTime
FreeLibrary
GetExitCodeProcess

advapi32

RegQueryInfoKeyA
RegQueryValueExA
RegSetValueExA
RegCreateKeyExA
RegDeleteKeyA
RegOpenKeyExA
RegEnumKeyExA
RegDeleteValueA
UnlockServiceDatabase
CloseServiceHandle
DeleteService
QueryServiceStatus
ControlService
OpenServiceA
OpenSCManagerA
QueryServiceConfigA
ChangeServiceConfigA
CreateServiceA
QueryServiceLockStatusA
LockServiceDatabase
IsTextUnicode
GetFileSecurityA
SetFileSecurityA
SetSecurityDescriptorOwner
InitializeSecurityDescriptor
GetTokenInformation
OpenProcessToken
RevertToSelf
FreeSid
AccessCheck
OpenThreadToken
ImpersonateSelf
SetSecurityDescriptorGroup
SetSecurityDescriptorDacl
AddAccessAllowedAce
InitializeAcl
GetLengthSid
AllocateAndInitializeSid
LookupPrivilegeValueA
AdjustTokenPrivileges
RegCloseKey

comctl32

DestroyPropertySheetPage
ImageList_SetOverlayImage
ImageList_ReplaceIcon
ImageList_Add
ord17
CreatePropertySheetPageA
ImageList_Destroy
ImageList_Create
ImageList_SetBkColor

comdlg32

GetOpenFileNameA

gdi32

CreateFontIndirectA
GetDeviceCaps
PatBlt
CreateCompatibleBitmap
StretchBlt
CreateCompatibleDC
GetObjectA
CreateBitmap
SelectObject
SetBkColor
BitBlt
SetTextColor
DeleteDC
DeleteObject
GetTextExtentExPointA

mpr

WNetGetResourceInformationA
WNetCancelConnection2A
WNetAddConnection3A

ole32

OleUninitialize
OleInitialize

rpcrt4

UuidFromStringA

shell32

ExtractIconExA
SHChangeNotify
ord59
SHGetSpecialFolderLocation
SHGetPathFromIDListA
ShellExecuteA

user32

GetProcessWindowStation
CharLowerA
SetForegroundWindow
MessageBeep
DispatchMessageA
TranslateMessage
MsgWaitForMultipleObjects
PeekMessageA
GetWindowTextA
SetPropA
GetPropA
DestroyWindow
SystemParametersInfoA
ExitWindowsEx
GetKeyboardType
RemovePropA
GetWindowTextLengthA
MoveWindow
ClientToScreen
wvsprintfA
GetUserObjectInformationA
KillTimer
SetTimer
RegisterWindowMessageA
UpdateWindow
GetWindowRect
MapWindowPoints
DrawAnimatedRects
SetWindowLongA
SetFocus
PostMessageA
GetWindow
WinHelpA
IsDlgButtonChecked
DialogBoxParamA
GetParent
SendDlgItemMessageA
CheckDlgButton
SetDlgItemTextA
GetWindowLongA
ShowWindow
SendMessageA
MessageBoxA
GetDlgItem
EnableWindow
LoadCursorA
SetCursor
CharUpperA
IsWindow
GetSysColorBrush
LoadIconA
LoadImageA
GetSystemMetrics
DestroyIcon
GetIconInfo
GetSysColor
GetDC
ReleaseDC
LoadBitmapA
LoadStringA
wsprintfA
CharPrevA
CharNextA
IsWindowVisible
GetClientRect
SetWindowPos
EndDialog
GetDlgItemTextA
SetWindowTextA

version

GetFileVersionInfoA
VerQueryValueA
GetFileVersionInfoSizeA

winspool.drv

GetPrintProcessorDirectoryA
GetPrinterDriverDirectoryA

cabinet

ord23
ord22
ord21
ord20

cfgmgr32

CM_Set_DevNode_Registry_Property_ExA
CM_Get_DevNode_Registry_Property_ExA
CM_Open_Class_Key_ExA
CM_Locate_DevNode_ExA
CM_Connect_MachineA
CM_Get_Class_Name_ExA
CM_Disconnect_Machine
CM_Uninstall_DevNode
CM_Create_DevNode_ExA
CM_Get_Device_ID_List_Size_ExA
CM_Get_HW_Prof_Flags_ExA
CM_Get_Device_ID_List_ExA
CM_Free_Log_Conf_Handle
CM_Free_Res_Des_Handle
CM_Get_Res_Des_Data_Ex
CM_Get_Next_Res_Des_Ex
CM_Get_First_Log_Conf_Ex
CM_Get_Device_ID_ExA
CM_Get_Device_ID_Size_Ex
CM_Get_Parent_Ex
CM_Get_Res_Des_Data_Size_Ex
CM_Delete_Class_Key_Ex
CM_Get_Hardware_Profile_Info_ExA
CM_Set_DevNode_Registry_PropertyA
CM_Setup_DevNode_Ex
CM_Uninstall_DevNode_Ex
CM_Locate_DevNodeA
CM_Remove_SubTree
CM_Query_Remove_SubTree
CM_Set_HW_Prof_Flags_ExA
CM_Get_DevNode_Status_Ex
CM_Reenumerate_DevNode_Ex
CM_Enable_DevNode_Ex
CM_Disable_DevNode_Ex
CM_Get_DevNode_Status
CM_Reenumerate_DevNode
CM_Get_Parent
CM_Get_DevNode_Registry_PropertyA
CM_Free_Log_Conf
CM_Get_Device_IDA
CM_Delete_DevNode_Key
CM_Open_DevNode_Key_Ex
CM_Get_Class_Key_Name_ExA
CM_Get_Next_Log_Conf_Ex
CM_Add_Res_Des_Ex
CM_Add_Empty_Log_Conf_Ex
CM_Free_Log_Conf_Ex
CM_Enumerate_Classes_Ex

Exports

Exports

DoesUserHavePrivilege
ExtensionPropSheetPageProc
InstallHinfSection
InstallHinfSectionA
InstallHinfSectionW
IsUserAdmin
MyFree
MyMalloc
MyRealloc
SetupAddInstallSectionToDiskSpaceListA
SetupAddInstallSectionToDiskSpaceListW
SetupAddSectionToDiskSpaceListA
SetupAddSectionToDiskSpaceListW
SetupAddToDiskSpaceListA
SetupAddToDiskSpaceListW
SetupAddToSourceListA
SetupAddToSourceListW
SetupAdjustDiskSpaceListA
SetupAdjustDiskSpaceListW
SetupBackupErrorA
SetupBackupErrorW
SetupCancelTemporarySourceList
SetupCloseFileQueue
SetupCloseInfFile
SetupCloseLog
SetupCommitFileQueue
SetupCommitFileQueueA
SetupCommitFileQueueW
SetupCopyErrorA
SetupCopyErrorW
SetupCopyOEMInfA
SetupCopyOEMInfW
SetupCreateDiskSpaceListA
SetupCreateDiskSpaceListW
SetupDecompressOrCopyFileA
SetupDecompressOrCopyFileW
SetupDefaultQueueCallback
SetupDefaultQueueCallbackA
SetupDefaultQueueCallbackW
SetupDeleteErrorA
SetupDeleteErrorW
SetupDestroyDiskSpaceList
SetupDiAskForOEMDisk
SetupDiBuildClassInfoList
SetupDiBuildClassInfoListExA
SetupDiBuildClassInfoListExW
SetupDiBuildDriverInfoList
SetupDiCallClassInstaller
SetupDiCancelDriverInfoSearch
SetupDiChangeState
SetupDiClassGuidsFromNameA
SetupDiClassGuidsFromNameExA
SetupDiClassGuidsFromNameExW
SetupDiClassGuidsFromNameW
SetupDiClassNameFromGuidA
SetupDiClassNameFromGuidExA
SetupDiClassNameFromGuidExW
SetupDiClassNameFromGuidW
SetupDiCreateDevRegKeyA
SetupDiCreateDevRegKeyW
SetupDiCreateDeviceInfoA
SetupDiCreateDeviceInfoList
SetupDiCreateDeviceInfoListExA
SetupDiCreateDeviceInfoListExW
SetupDiCreateDeviceInfoW
SetupDiCreateDeviceInterfaceA
SetupDiCreateDeviceInterfaceRegKeyA
SetupDiCreateDeviceInterfaceRegKeyW
SetupDiCreateDeviceInterfaceW
SetupDiDeleteDevRegKey
SetupDiDeleteDeviceInfo
SetupDiDeleteDeviceInterfaceData
SetupDiDeleteDeviceInterfaceRegKey
SetupDiDestroyClassImageList
SetupDiDestroyDeviceInfoList
SetupDiDestroyDriverInfoList
SetupDiDrawMiniIcon
SetupDiEnumDeviceInfo
SetupDiEnumDeviceInterfaces
SetupDiEnumDriverInfoA
SetupDiEnumDriverInfoW
SetupDiGetActualSectionToInstallA
SetupDiGetActualSectionToInstallExA
SetupDiGetActualSectionToInstallExW
SetupDiGetActualSectionToInstallW
SetupDiGetClassBitmapIndex
SetupDiGetClassDescriptionA
SetupDiGetClassDescriptionExA
SetupDiGetClassDescriptionExW
SetupDiGetClassDescriptionW
SetupDiGetClassDevPropertySheetsA
SetupDiGetClassDevPropertySheetsW
SetupDiGetClassDevsA
SetupDiGetClassDevsExA
SetupDiGetClassDevsExW
SetupDiGetClassDevsW
SetupDiGetClassImageIndex
SetupDiGetClassImageList
SetupDiGetClassImageListExA
SetupDiGetClassImageListExW
SetupDiGetClassInstallParamsA
SetupDiGetClassInstallParamsW
SetupDiGetClassRegistryPropertyA
SetupDiGetClassRegistryPropertyW
SetupDiGetCustomDevicePropertyA
SetupDiGetCustomDevicePropertyW
SetupDiGetDeviceInfoListClass
SetupDiGetDeviceInfoListDetailA
SetupDiGetDeviceInfoListDetailW
SetupDiGetDeviceInstallParamsA
SetupDiGetDeviceInstallParamsW
SetupDiGetDeviceInstanceIdA
SetupDiGetDeviceInstanceIdW
SetupDiGetDeviceInterfaceAlias
SetupDiGetDeviceInterfaceDetailA
SetupDiGetDeviceInterfaceDetailW
SetupDiGetDeviceRegistryPropertyA
SetupDiGetDeviceRegistryPropertyW
SetupDiGetDriverInfoDetailA
SetupDiGetDriverInfoDetailW
SetupDiGetDriverInstallParamsA
SetupDiGetDriverInstallParamsW
SetupDiGetHwProfileFriendlyNameA
SetupDiGetHwProfileFriendlyNameExA
SetupDiGetHwProfileFriendlyNameExW
SetupDiGetHwProfileFriendlyNameW
SetupDiGetHwProfileList
SetupDiGetHwProfileListExA
SetupDiGetHwProfileListExW
SetupDiGetINFClassA
SetupDiGetINFClassW
SetupDiGetSelectedDevice
SetupDiGetSelectedDriverA
SetupDiGetSelectedDriverW
SetupDiGetWizardPage
SetupDiInstallClassA
SetupDiInstallClassExA
SetupDiInstallClassExW
SetupDiInstallClassW
SetupDiInstallDevice
SetupDiInstallDeviceInterfaces
SetupDiInstallDriverFiles
SetupDiLoadClassIcon
SetupDiMoveDuplicateDevice
SetupDiOpenClassRegKey
SetupDiOpenClassRegKeyExA
SetupDiOpenClassRegKeyExW
SetupDiOpenDevRegKey
SetupDiOpenDeviceInfoA
SetupDiOpenDeviceInfoW
SetupDiOpenDeviceInterfaceA
SetupDiOpenDeviceInterfaceRegKey
SetupDiOpenDeviceInterfaceW
SetupDiRegisterCoDeviceInstallers
SetupDiRegisterDeviceInfo
SetupDiRemoveDevice
SetupDiRemoveDeviceInterface
SetupDiSelectBestCompatDrv
SetupDiSelectDevice
SetupDiSelectOEMDrv
SetupDiSetClassInstallParamsA
SetupDiSetClassInstallParamsW
SetupDiSetClassRegistryPropertyA
SetupDiSetClassRegistryPropertyW
SetupDiSetDeviceInstallParamsA
SetupDiSetDeviceInstallParamsW
SetupDiSetDeviceInterfaceDefault
SetupDiSetDeviceRegistryPropertyA
SetupDiSetDeviceRegistryPropertyW
SetupDiSetDriverInstallParamsA
SetupDiSetDriverInstallParamsW
SetupDiSetSelectedDevice
SetupDiSetSelectedDriverA
SetupDiSetSelectedDriverW
SetupDiUnremoveDevice
SetupDuplicateDiskSpaceListA
SetupDuplicateDiskSpaceListW
SetupEnumInfSectionsA
SetupEnumInfSectionsW
SetupFindFirstLineA
SetupFindFirstLineW
SetupFindNextLine
SetupFindNextMatchLineA
SetupFindNextMatchLineW
SetupFreeSourceListA
SetupFreeSourceListW
SetupGetBackupInformationA
SetupGetBackupInformationW
SetupGetBinaryField
SetupGetFieldCount
SetupGetFileCompressionInfoA
SetupGetFileCompressionInfoExA
SetupGetFileCompressionInfoExW
SetupGetFileCompressionInfoW
SetupGetFileQueueCount
SetupGetFileQueueFlags
SetupGetInfFileListA
SetupGetInfFileListW
SetupGetInfInformationA
SetupGetInfInformationW
SetupGetInfSections
SetupGetIntField
SetupGetLineByIndexA
SetupGetLineByIndexW
SetupGetLineCountA
SetupGetLineCountW
SetupGetLineTextA
SetupGetLineTextW
SetupGetMultiSzFieldA
SetupGetMultiSzFieldW
SetupGetNonInteractiveMode
SetupGetSourceFileLocationA
SetupGetSourceFileLocationW
SetupGetSourceFileSizeA
SetupGetSourceFileSizeW
SetupGetSourceInfoA
SetupGetSourceInfoW
SetupGetStringFieldA
SetupGetStringFieldW
SetupGetTargetPathA
SetupGetTargetPathW
SetupInitDefaultQueueCallback
SetupInitDefaultQueueCallbackEx
SetupInitializeFileLogA
SetupInitializeFileLogW
SetupInstallFileA
SetupInstallFileExA
SetupInstallFileExW
SetupInstallFileW
SetupInstallFilesFromInfSectionA
SetupInstallFilesFromInfSectionW
SetupInstallFromInfSectionA
SetupInstallFromInfSectionW
SetupInstallServicesFromInfSectionA
SetupInstallServicesFromInfSectionExA
SetupInstallServicesFromInfSectionExW
SetupInstallServicesFromInfSectionW
SetupIterateCabinetA
SetupIterateCabinetW
SetupLogErrorA
SetupLogErrorW
SetupLogFileA
SetupLogFileW
SetupOpenAppendInfFileA
SetupOpenAppendInfFileW
SetupOpenFileQueue
SetupOpenInfFileA
SetupOpenInfFileW
SetupOpenLog
SetupOpenMasterInf
SetupPrepareQueueForRestoreA
SetupPrepareQueueForRestoreW
SetupPromptForDiskA
SetupPromptForDiskW
SetupPromptReboot
SetupQueryDrivesInDiskSpaceListA
SetupQueryDrivesInDiskSpaceListW
SetupQueryFileLogA
SetupQueryFileLogW
SetupQueryInfFileInformationA
SetupQueryInfFileInformationW
SetupQueryInfOriginalFileInformationA
SetupQueryInfOriginalFileInformationW
SetupQueryInfVersionInformationA
SetupQueryInfVersionInformationW
SetupQuerySourceListA
SetupQuerySourceListW
SetupQuerySpaceRequiredOnDriveA
SetupQuerySpaceRequiredOnDriveW
SetupQueueCopyA
SetupQueueCopyIndirectA
SetupQueueCopyIndirectW
SetupQueueCopySectionA
SetupQueueCopySectionW
SetupQueueCopyW
SetupQueueDefaultCopyA
SetupQueueDefaultCopyW
SetupQueueDeleteA
SetupQueueDeleteSectionA
SetupQueueDeleteSectionW
SetupQueueDeleteW
SetupQueueRenameA
SetupQueueRenameSectionA
SetupQueueRenameSectionW
SetupQueueRenameW
SetupRemoveFileLogEntryA
SetupRemoveFileLogEntryW
SetupRemoveFromDiskSpaceListA
SetupRemoveFromDiskSpaceListW
SetupRemoveFromSourceListA
SetupRemoveFromSourceListW
SetupRemoveInstallSectionFromDiskSpaceListA
SetupRemoveInstallSectionFromDiskSpaceListW
SetupRemoveSectionFromDiskSpaceListA
SetupRemoveSectionFromDiskSpaceListW
SetupRenameErrorA
SetupRenameErrorW
SetupScanFileQueue
SetupScanFileQueueA
SetupScanFileQueueW
SetupSetDirectoryIdA
SetupSetDirectoryIdExA
SetupSetDirectoryIdExW
SetupSetDirectoryIdW
SetupSetFileQueueAlternatePlatformA
SetupSetFileQueueAlternatePlatformW
SetupSetFileQueueFlags
SetupSetNonInteractiveMode
SetupSetPlatformPathOverrideA
SetupSetPlatformPathOverrideW
SetupSetSourceListA
SetupSetSourceListW
SetupTermDefaultQueueCallback
SetupTerminateFileLog
SetupUninstallNewlyCopiedInfs
SetupUninstallOEMInfA
SetupUninstallOEMInfW
SetupVerifyInfFileA
SetupVerifyInfFileW
pSetupGetField

Sections

.text
Size: 396KB - Virtual size: 392KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 440KB - Virtual size: 436KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 20KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/WIN9XUPG/TWID.EXE
I386/WIN9XUPG/VSCANDB.INF
I386/WIN9XUPG/W95UPG.DLL
.dll windows:5 windows x86 arch:x86

ec8ea81329dd18843554152267d8dbe7

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_REMOVABLE_RUN_FROM_SWAP
IMAGE_FILE_NET_RUN_FROM_SWAP
IMAGE_FILE_DLL

PDB Paths

w95upg.pdb

Imports

msvcrt

_mbslwr
_wcslwr
setlocale
_mbscmp
wcscmp
_ultoa
_mbsnicmp
_wcsnicmp
wcscspn
_mbsncmp
isalpha
sprintf
strtoul
_mbsnbcpy
_atoi64
sscanf
_itoa
_ismbcalpha
toupper
strncpy
atol
swprintf
_ismbcpunct
_mbspbrk
rand
srand
_mbsnbicmp
_abnormal_termination
_vsnwprintf
_vsnprintf
_mbsstr
fwprintf
_iob
fprintf
_snwprintf
_snprintf
_pctype
iswctype
_mbsnextc
wcschr
wcscpy
strchr
_ismbcspace
atoi
_ismbblead
_mbschr
_mbslen
_mbctoupper
_local_unwind2
_mbsinc
_splitpath
_wcsicmp
wcsrchr
_mbsncpy
printf
_mbsdec
_ismbcprint
_mbctolower
tolower
towlower
_except_handler3
free
_initterm
malloc
_adjust_fdiv
isspace
_mbscpy
_mbsicmp
_mbsnbcmp
memmove
wcslen
_mbsrchr

kernel32

GetDriveTypeA
GetDriveTypeW
SetErrorMode
FindFirstFileW
CreateDirectoryA
ReadFile
GetFileSize
GetFullPathNameA
SearchPathA
GetShortPathNameA
GetShortPathNameW
GetFullPathNameW
SearchPathW
MapViewOfFile
CreateFileMappingA
CreateFileW
UnmapViewOfFile
GetLogicalDrives
FreeLibrary
LoadLibraryA
GetDiskFreeSpaceA
DeleteFileW
FindNextFileA
FindNextFileW
SetCurrentDirectoryA
GetCurrentDirectoryA
GetPrivateProfileIntA
LeaveCriticalSection
EnterCriticalSection
FlushFileBuffers
SetEndOfFile
SetThreadLocale
GetThreadLocale
GetACP
WideCharToMultiByte
MultiByteToWideChar
MoveFileA
GetLogicalDriveStringsA
GetTempPathA
IsValidLocale
WritePrivateProfileStringA
SetEnvironmentVariableA
lstrlenW
lstrcpyA
GetVersionExA
lstrlenA
GetSystemTime
GlobalFree
GetSystemDefaultLCID
lstrcmpA
FreeEnvironmentStringsA
GetEnvironmentStrings
ExpandEnvironmentStringsA
GetVolumeInformationA
Sleep
CreateMailslotA
InterlockedIncrement
IsBadHugeWritePtr
IsBadStringPtrA
IsBadHugeReadPtr
_lclose
_lopen
_lcreat
LocalReAlloc
_lread
_lwrite
_llseek
lstrcmpiA
EnumSystemLocalesA
GetPrivateProfileSectionNamesA
DeviceIoControl
BeginUpdateResourceA
EnumResourceNamesA
EndUpdateResourceA
UpdateResourceA
UpdateResourceW
FindResourceW
LoadResource
LockResource
GetMailslotInfo
OpenEventA
OpenFileMappingA
GlobalMemoryStatus
GetSystemInfo
GetPriorityClass
SetPriorityClass
QueryPerformanceFrequency
MulDiv
CreateProcessA
GetProfileStringA
WriteProfileStringA
CreateMutexA
RaiseException
ReleaseMutex
WaitForMultipleObjects
InterlockedExchange
InitializeCriticalSection
DeleteCriticalSection
CreateThread
GetTempFileNameA
HeapReAlloc
SetLastError
CloseHandle
TerminateProcess
OpenProcess
Process32Next
FindClose
FindFirstFileA
Process32First
CreateToolhelp32Snapshot
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetPrivateProfileStringA
GetLastError
CopyFileA
SetFileAttributesA
GetFileAttributesA
RemoveDirectoryA
GetModuleFileNameA
DisableThreadLibraryCalls
GetProcessHeap
HeapCreate
GetProcAddress
LoadLibraryExA
GetSystemDirectoryA
GetWindowsDirectoryA
HeapAlloc
ExitProcess
SetEvent
WaitForSingleObject
CreateEventA
GetEnvironmentVariableA
LocalAlloc
LocalFree
IsDBCSLeadByte
FormatMessageW
FormatMessageA
DeleteFileA
HeapFree
OutputDebugStringW
OutputDebugStringA
SetFilePointer
GetComputerNameA
lstrcpynA
CreateFileA
WriteFile

user32

SetFocus
EnableWindow
GetParent
ScreenToClient
SetDlgItemTextA
UpdateWindow
CharLowerBuffA
ShowWindow
CharToOemA
wsprintfA
MessageBoxA
SetWindowTextA
GetWindowTextA
InvalidateRect
SetWindowPos
GetDlgItemTextA
CheckDlgButton
IsDlgButtonChecked
IsWindowVisible
GetFocus
ReleaseDC
GetClientRect
GetDC
GetDialogBaseUnits
ClientToScreen
LoadIconA
GetSysColor
MoveWindow
SendDlgItemMessageA
SetParent
SetForegroundWindow
SetWindowLongA
CreateWindowExA
GetWindowLongA
MapWindowPoints
CallWindowProcA
DrawTextA
GetScrollInfo
ScrollWindow
SetScrollInfo
DefWindowProcA
EndPaint
BeginPaint
GetWindowTextLengthA
RegisterClassA
CharUpperA
GetKeyboardLayoutNameA
EnumDisplaySettingsA
EnumWindows
GetSystemMetrics
GetWindowRect
SetCursor
LoadCursorA
OemToCharBuffA
CharLowerA
OemToCharA
LoadStringA
GetWindowThreadProcessId
SendMessageA
GetKeyboardType
PostMessageA
GetDlgItem
GetDesktopWindow
EndDialog
DialogBoxParamA

gdi32

GetDeviceCaps
CreateSolidBrush
CreatePen
SetBkColor
Rectangle
MoveToEx
LineTo
CreateDCA
GetTextFaceA
DeleteDC
StartDocA
EndDoc
AbortDoc
DPtoLP
EndPage
StartPage
SetMapMode
SetBkMode
SetTextColor
TextOutA
DeleteObject
GetTextMetricsA
GetStockObject
GetObjectA
CreateFontIndirectA
SelectObject
GetTextExtentPoint32A

advapi32

RegEnumValueW
InitializeSecurityDescriptor
SetSecurityDescriptorDacl
RegQueryValueExA
RegQueryValueExW
RegQueryInfoKeyA
RegCreateKeyExA
RegFlushKey
RegUnLoadKeyW
RegEnumKeyA
RegEnumKeyW
RegOpenKeyW
RegEnumKeyExA
RegEnumKeyExW
RegEnumValueA
RegQueryInfoKeyW
RegSetValueExA
RegQueryValueA
RegQueryValueW
RegLoadKeyW
RegLoadKeyA
GetUserNameA
RegUnLoadKeyA
RegOpenKeyA
RegDeleteKeyA
RegCloseKey
RegOpenKeyExW
RegOpenKeyExA

imagehlp

MapAndLoad
ImageRvaToVa
ImageDirectoryEntryToData
UnMapAndLoad

shell32

SHBrowseForFolderA
ShellExecuteA
SHGetSpecialFolderLocation
SHGetMalloc
SHGetPathFromIDListA

comdlg32

PrintDlgA
GetSaveFileNameA

comctl32

ImageList_ReplaceIcon
ImageList_Create
ImageList_Draw
ord17

winmm

mixerGetDevCapsA
waveInGetNumDevs
mixerClose
mixerGetControlDetailsA
mixerGetLineControlsA
mixerGetLineInfoA
mixerOpen
mixerGetNumDevs
waveOutGetDevCapsA
waveOutGetNumDevs
waveInGetDevCapsA

setupapi

SetupGetLineCountA
SetupDecompressOrCopyFileA
SetupGetInfInformationA
SetupOpenInfFileA
SetupOpenAppendInfFileA
SetupFindNextMatchLineA
SetupGetLineByIndexA
SetupGetIntField
SetupDiDestroyDeviceInfoList
SetupGetMultiSzFieldA
SetupGetLineTextA
SetupCloseInfFile
SetupLogErrorW
SetupOpenLog
SetupLogErrorA
SetupCloseLog
SetupFindFirstLineA
SetupFindNextLine
SetupGetFieldCount
SetupGetStringFieldA
SetupDiGetDeviceRegistryPropertyA
SetupDiEnumDeviceInfo
SetupDiGetClassDevsA

version

VerQueryValueA
GetFileVersionInfoA
GetFileVersionInfoSizeA

ole32

CoCreateInstance
CoInitialize
CoUninitialize

Exports

Exports

DllMain
Win9xAnyNetDevicePresent
Win9xGetIncompDrvs
Win9xReleaseIncompDrvs
Winnt32Cleanup
Winnt32GetOptionalDirectories
Winnt32PluginGetPages
Winnt32PluginInit
Winnt32SetAutoBoot
Winnt32VirusScannerCheck
Winnt32WriteParams

Sections

.text
Size: 440KB - Virtual size: 437KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 20KB - Virtual size: 78KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 356KB - Virtual size: 353KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 32KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/WIN9XUPG/WIN95UPG.INF
I386/WINBRAND.DL_
.cab
I386/WINCHAT.CH_
.cab
I386/WINCHAT.EX_
.cab
I386/WINCHAT.HL_
.cab
I386/WIND.JP_
.cab
I386/WINDOWS.CN_
.cab
I386/WINDOWS.HL_
.cab
I386/WINDW.CH_
.cab
I386/WIND_W.CH_
.cab
I386/WINFAX.DL_
.cab
I386/WINGDING.TT_
.cab
I386/WINHELP.EX_
.cab
I386/WINHELP.HL_
.cab
I386/WINHLP32.CN_
.cab
I386/WINHLP32.EX_
.cab
I386/WINHLP32.HL_
.cab
I386/WINHSTB.EX_
.cab
I386/WINHTTP.DL_
.cab
I386/WININET.DL_
.cab
I386/WININSTP.CH_
.cab
I386/WINIPSEC.DL_
.cab
I386/WINLOGON.EX_
.cab
I386/WINMGMT.EX_
.cab
I386/WINMGMTR.DL_
.cab
I386/WINMINE.CH_
.cab
I386/WINMINE.EX_
.cab
I386/WINMINE.HL_
.cab
I386/WINMM.DL_
.cab
I386/WINMSD.EX_
.cab
I386/WINNLS.DL_
.cab
I386/WINNT.EXE
I386/WINNT32.EXE
.exe windows:5 windows x86 arch:x86

f686522d7216c48d9698db254ed091cc

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_REMOVABLE_RUN_FROM_SWAP
IMAGE_FILE_NET_RUN_FROM_SWAP

PDB Paths

winnt32.pdb

Imports

advapi32

RegQueryValueExA
RegOpenKeyExA
RegCloseKey

kernel32

CopyFileA
FindNextFileA
CreateDirectoryA
GetFileAttributesA
CloseHandle
FindFirstFileA
lstrcpyA
DeleteFileA
RemoveDirectoryA
lstrcatA
HeapAlloc
GetProcessHeap
lstrlenA
LocalFree
LocalAlloc
HeapFree
GetLastError
CreateProcessA
SetLastError
WritePrivateProfileStringA
Sleep
GetTickCount
GetWindowsDirectoryA
GetModuleFileNameA
GetDriveTypeA
GetModuleHandleA
GetCommandLineA
SetFileAttributesA
FindClose
SystemTimeToFileTime
UnmapViewOfFile
MapViewOfFile
CreateFileMappingA
GetFileSize
GetSystemTime
ExitProcess
GetTempPathA
FreeLibrary
GetProcAddress
LoadLibraryA
GetSystemDirectoryA
lstrcpynA
GetPrivateProfileStringA
WaitForSingleObject
GetFullPathNameA
CreateEventA
GetVersion
QueryPerformanceCounter
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
RtlUnwind
InterlockedExchange
VirtualQuery
CreateFileA
SetFileTime
lstrcmpiA

gdi32

GetObjectA
DeleteObject

user32

CharNextA
MoveWindow
GetSystemMetrics
SystemParametersInfoA
GetClientRect
GetWindowRect
ClientToScreen
GetDesktopWindow
ScreenToClient
GetDlgItem
SendDlgItemMessageA
AdjustWindowRect
GetWindowLongA
SetWindowPos
LoadBitmapA
ShowCursor
SetCursor
LoadCursorA
CharUpperA
wsprintfA
DestroyWindow
CreateDialogParamA
MessageBoxA
LoadStringA

version

GetFileVersionInfoA
GetFileVersionInfoSizeA
VerQueryValueA

Sections

.text
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 180B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 32KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
I386/WINNT32.HLP
I386/WINNT32.MSI
.msi
I386/WINNT32A.DLL
.dll windows:5 windows x86 arch:x86

905544c00a0a222983f7114f39be35f8

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_REMOVABLE_RUN_FROM_SWAP
IMAGE_FILE_NET_RUN_FROM_SWAP
IMAGE_FILE_DLL

PDB Paths

winnt32a.pdb

Imports

kernel32

GetFileInformationByHandle
FindNextFileA
TlsSetValue
TlsGetValue
ReleaseMutex
SetEvent
InterlockedDecrement
LeaveCriticalSection
ResetEvent
EnterCriticalSection
CreateThread
CreateEventA
InitializeCriticalSection
WaitForSingleObject
GetExitCodeThread
RemoveDirectoryA
GetTempFileNameA
FileTimeToDosDateTime
TlsFree
TlsAlloc
HeapAlloc
GetProcessHeap
GetSystemTime
GetVersionExA
OpenEventA
GlobalFree
GetOEMCP
GetACP
GlobalMemoryStatus
GetFullPathNameA
GetWindowsDirectoryA
FlushFileBuffers
GetSystemDefaultLCID
WritePrivateProfileSectionA
GetPrivateProfileSectionA
GetSystemDirectoryA
WritePrivateProfileStringA
GlobalAlloc
GetVersion
LockResource
LoadResource
FindResourceA
SetErrorMode
MapViewOfFile
CreateFileMappingA
UnmapViewOfFile
GetNumberFormatA
SystemTimeToFileTime
VirtualFree
VirtualAlloc
SetUnhandledExceptionFilter
LocalFileTimeToFileTime
GetCurrentProcess
DeleteCriticalSection
HeapFree
CreateMutexA
FindResourceExA
SetFileTime
GetPrivateProfileIntA
FlushViewOfFile
OutputDebugStringA
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
TerminateProcess
UnhandledExceptionFilter
HeapReAlloc
RtlUnwind
GetFileType
ExitProcess
SetHandleCount
GetStdHandle
GetStartupInfoA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
HeapDestroy
HeapCreate
GetCPInfo
LCMapStringA
LCMapStringW
InterlockedExchange
SetEndOfFile
SetStdHandle
GetStringTypeA
GetStringTypeW
GetUserDefaultLCID
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale
IsValidCodePage
GetLocaleInfoW
lstrcmpiA
FormatMessageA
LocalFree
lstrcpynA
ExpandEnvironmentStringsA
lstrcmpA
GetCommandLineA
LocalAlloc
GetLogicalDrives
GetDriveTypeA
GetPrivateProfileStructA
InterlockedIncrement
RaiseException
GetThreadLocale
SetThreadLocale
GetFileTime
OpenProcess
WaitForMultipleObjects
GetSystemInfo
VirtualProtect
VirtualQuery
MultiByteToWideChar
WideCharToMultiByte
GetModuleHandleA
SetFilePointer
SetLastError
LoadLibraryA
GetCurrentThread
SetThreadPriority
GetCurrentThreadId
CreateToolhelp32Snapshot
Thread32First
SuspendThread
ResumeThread
Thread32Next
DeviceIoControl
GetTickCount
FindFirstFileA
FindClose
MoveFileA
CreateDirectoryA
GetModuleFileNameA
LoadLibraryExA
GetProcAddress
FreeLibrary
lstrcatA
lstrcpyA
Sleep
GetPrivateProfileStringA
CreateFileA
GetFileSize
GetLastError
CloseHandle
ReadFile
GetFileAttributesA
SetFileAttributesA
CopyFileA
DeleteFileA
lstrlenA
WriteFile
GetDiskFreeSpaceA
GetVolumeInformationA

user32

ExitWindowsEx
CharNextA
GetDesktopWindow
GetWindowRect
RegisterClassExA
CreateWindowExA
DefWindowProcA
GetKeyboardType
WinHelpA
CharPrevA
wsprintfA
CharToOemA
PostMessageA
SystemParametersInfoA
SetWindowPos
MapWindowPoints
DestroyWindow
IsChild
GetDC
ReleaseDC
IsWindow
SetForegroundWindow
IsWindowVisible
IsWindowEnabled
PeekMessageA
GetWindowTextA
LoadCursorA
SetCursor
OemToCharBuffA
SetWindowTextA
IsDlgButtonChecked
GetDlgCtrlID
LoadImageA
KillTimer
SetTimer
GetDlgItemTextA
UpdateWindow
SendDlgItemMessageA
CheckDlgButton
EnableWindow
ShowWindow
SetDlgItemTextA
SetFocus
GetParent
SendMessageA
CharUpperA
CallWindowProcA
DialogBoxIndirectParamA
MoveWindow
SetWindowLongA
GetWindowLongA
GetDlgItem
EndDialog
GetClientRect
GetSystemMetrics
ClientToScreen
SetActiveWindow
GetSystemMenu
EnableMenuItem
CheckRadioButton
ScreenToClient
LoadIconA
InvalidateRect
MessageBoxA
DialogBoxParamA
GetSysColor
GetSysColorBrush
LoadStringA

gdi32

CreateCompatibleDC
SelectObject
SetStretchBltMode
StretchDIBits
DeleteDC
CreateDIBSection
GetStockObject
SetBkMode
SetDIBitsToDevice
ExcludeClipRect
GetDeviceCaps
DeleteObject
CreatePalette
GetObjectA
CreateFontIndirectA
SetBkColor

ole32

CoInitialize
CoCreateInstance

oleaut32

SysAllocStringLen
SysFreeString

advapi32

CryptGenRandom
CryptAcquireContextA
CryptCreateHash
CryptHashData
CryptDeriveKey
CryptEncrypt
CryptDestroyKey
CryptDestroyHash
CryptReleaseContext
RegCreateKeyExA
IsTextUnicode
RegQueryValueExA
RegCloseKey
RegOpenKeyExA
RegEnumKeyExA
RegDeleteKeyA
RegDeleteValueA
RegSetValueExA
RegEnumValueA
RegCreateKeyA
RegOpenKeyA
CryptDecrypt

comctl32

PropertySheetA
ord17
ImageList_Create
ImageList_ReplaceIcon

comdlg32

GetSaveFileNameA
CommDlgExtendedError
GetOpenFileNameA

mpr

WNetGetConnectionA

version

GetFileVersionInfoSizeA
GetFileVersionInfoA
VerQueryValueA

imm32

ImmAssociateContext

pidgen

ord5

setupapi

SetupGetStringFieldA
SetupGetMultiSzFieldA
SetupOpenInfFileA
SetupCloseInfFile
SetupFindFirstLineA
SetupFindNextLine

Exports

Exports

UnsupportedArchitectureCheck
winnt32

Sections

.text
Size: 272KB - Virtual size: 270KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 43KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 832KB - Virtual size: 831KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 24KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/WINNT32U.DLL
.dll windows:5 windows x86 arch:x86

0da44c465c78678a6cef8f42030b3444

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_REMOVABLE_RUN_FROM_SWAP
IMAGE_FILE_NET_RUN_FROM_SWAP
IMAGE_FILE_DLL

PDB Paths

winnt32u.pdb

Imports

kernel32

RemoveDirectoryW
DeleteFileA
GetTempFileNameA
FileTimeToDosDateTime
FindFirstFileA
lstrcpyA
TlsFree
TlsAlloc
HeapAlloc
GetProcessHeap
GetSystemTime
GetModuleHandleW
GetVersionExW
OpenEventW
GetLocaleInfoW
GlobalFree
GlobalMemoryStatus
GetFullPathNameW
GetWindowsDirectoryW
FlushFileBuffers
GetSystemDefaultLCID
WritePrivateProfileSectionW
GetPrivateProfileSectionW
WritePrivateProfileStringW
GlobalAlloc
GetVersion
GetPrivateProfileSectionNamesW
LockResource
LoadResource
FindResourceW
GetCurrentProcess
SetErrorMode
MapViewOfFile
CreateFileMappingW
UnmapViewOfFile
GetSystemDirectoryW
GetNumberFormatW
LoadLibraryA
SystemTimeToFileTime
VirtualFree
VirtualAlloc
SetUnhandledExceptionFilter
LocalFileTimeToFileTime
HeapFree
FormatMessageA
CreateMutexW
FindResourceExW
OpenProcess
FlushViewOfFile
EnumResourceLanguagesW
OutputDebugStringW
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
TerminateProcess
UnhandledExceptionFilter
GetCommandLineA
GetVersionExA
HeapReAlloc
RtlUnwind
GetFileType
ExitProcess
GetModuleHandleA
SetHandleCount
GetStdHandle
CreateFileA
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetExitCodeThread
HeapCreate
LCMapStringA
LCMapStringW
InitializeCriticalSection
SetEndOfFile
SetStdHandle
GetACP
GetOEMCP
GetCPInfo
GetStringTypeA
GetStringTypeW
GetUserDefaultLCID
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale
IsValidCodePage
CompareStringW
LoadLibraryW
GetCurrentThreadId
FindFirstFileW
FindClose
GetTickCount
GetLogicalDriveStringsW
GetWindowsDirectoryA
SetFileAttributesA
IsDBCSLeadByte
lstrcmpiW
CreateEventA
SetCurrentDirectoryW
GetPrivateProfileStructA
OutputDebugStringA
InterlockedCompareExchange
InterlockedIncrement
GetThreadLocale
RaiseException
CreateFileMappingA
GetFileTime
lstrcpynA
LocalReAlloc
HeapDestroy
WaitForSingleObject
CreateEventW
CreateThread
EnterCriticalSection
ResetEvent
LeaveCriticalSection
InterlockedDecrement
SetEvent
ReleaseMutex
TlsGetValue
TlsSetValue
FindNextFileW
MoveFileW
DeviceIoControl
CreateDirectoryW
GetModuleFileNameW
LoadLibraryExW
GetProcAddress
FreeLibrary
lstrcatW
lstrcpyW
Sleep
GetPrivateProfileStringW
GetFileInformationByHandle
SetFileTime
WaitForMultipleObjects
DeleteCriticalSection
ExpandEnvironmentStringsW
FormatMessageW
LocalFree
GetCommandLineW
LocalAlloc
GetDriveTypeW
GetSystemInfo
VirtualProtect
VirtualQuery
lstrcmpW
QueryDosDeviceW
lstrcpynW
lstrlenW
InterlockedExchange
SetFilePointer
CreateFileW
GetLastError
GetFileSize
CloseHandle
ReadFile
MultiByteToWideChar
GetFileAttributesW
SetFileAttributesW
CopyFileW
WideCharToMultiByte
SetLastError
DeleteFileW
lstrlenA
WriteFile
GetDiskFreeSpaceW
GetVolumeInformationW
GetStartupInfoA

user32

MoveWindow
DialogBoxIndirectParamW
GetWindowTextW
MapWindowPoints
SetWindowPos
SystemParametersInfoW
CharNextW
GetDesktopWindow
GetWindowRect
RegisterClassExW
CreateWindowExW
ClientToScreen
GetKeyboardType
CharPrevW
CharToOemA
PostMessageW
GetParent
SendMessageW
LoadStringW
CharUpperW
CharUpperBuffW
CharLowerW
CallWindowProcW
WinHelpW
DestroyWindow
SetActiveWindow
ScreenToClient
EnableMenuItem
GetSystemMenu
wsprintfW
wsprintfA
LoadStringA
DefWindowProcW
MessageBoxA
SendMessageA
SetWindowLongW
GetWindowLongW
GetDlgItem
EndDialog
GetDlgItemTextW
GetSysColorBrush
GetSysColor
DialogBoxParamW
MessageBoxW
SetForegroundWindow
IsChild
GetDC
ReleaseDC
IsWindow
IsWindowVisible
IsWindowEnabled
PeekMessageW
CheckRadioButton
LoadCursorW
SetCursor
SetWindowTextW
IsDlgButtonChecked
GetDlgCtrlID
LoadImageW
KillTimer
SetTimer
SendDlgItemMessageW
UpdateWindow
CheckDlgButton
EnableWindow
ShowWindow
SetDlgItemTextW
SetFocus
GetClientRect
GetSystemMetrics
LoadIconW
InvalidateRect

gdi32

ExcludeClipRect
GetDeviceCaps
SetDIBitsToDevice
CreatePalette
GetObjectW
CreateFontIndirectW
SetBkColor
DeleteDC
StretchDIBits
SetStretchBltMode
SelectObject
CreateCompatibleDC
CreateDIBSection
GetStockObject
DeleteObject
SetBkMode

ole32

CoCreateInstance
CoInitialize

oleaut32

SysFreeString
SysAllocStringLen

advapi32

RegEnumValueW
IsTextUnicode
RegSetValueExW
RegDeleteValueW
RegDeleteKeyW
RegOpenKeyW
RegEnumKeyExW
RegOpenKeyExW
RegCloseKey
RegQueryValueExW
RegCreateKeyW
CloseServiceHandle
OpenServiceW
OpenSCManagerW
RegCreateKeyExW
FreeSid
EqualSid
AllocateAndInitializeSid
GetTokenInformation
OpenProcessToken
LookupPrivilegeValueW
AdjustTokenPrivileges
RegUnLoadKeyW
RegLoadKeyW
InitiateSystemShutdownW
RegQueryValueExA
CryptReleaseContext
CryptDestroyHash
CryptDestroyKey
CryptEncrypt
CryptDeriveKey
CryptHashData
CryptCreateHash
CryptAcquireContextA
CryptDecrypt
CryptGenRandom
RegQueryInfoKeyW

cfgmgr32

CM_Open_DevNode_Key
CM_Locate_DevNodeW
CM_Get_Device_ID_ListW
CM_Get_Device_ID_List_SizeW
CM_Get_DevNode_Registry_PropertyW

comctl32

ImageList_Create
ord17
ImageList_ReplaceIcon
PropertySheetW

comdlg32

GetOpenFileNameW
CommDlgExtendedError
GetSaveFileNameW

mpr

WNetGetConnectionW

version

GetFileVersionInfoSizeW
VerQueryValueW
GetFileVersionInfoW

winspool.drv

EnumPrinterDriversW

imm32

ImmAssociateContext

pidgen

ord6

setupapi

SetupFindNextLine
SetupGetStringFieldW
SetupFindFirstLineW
SetupOpenInfFileW
SetupGetMultiSzFieldW
SetupCloseInfFile

ntdll

NtOpenDirectoryObject
NtQueryDirectoryObject
RtlNtStatusToDosError
NtQuerySystemInformation
NtOpenSymbolicLinkObject
NtQuerySymbolicLinkObject
NtClose
NtQuerySystemEnvironmentValue
NtSetSystemEnvironmentValue
LdrAccessResource
LdrFindResource_U
NtDeviceIoControlFile
NtQueryVolumeInformationFile
NtOpenFile
NtQueryInformationProcess
RtlInitUnicodeString
RtlImageDirectoryEntryToData

Exports

Exports

CertificateServerUpgradeCompatibilityCheck
ProcessorUpgradeCompatibilityCheck
SystemKernelCheck
UnsupportedArchitectureCheck
winnt32

Sections

.text
Size: 373KB - Virtual size: 372KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 11KB - Virtual size: 318KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 855KB - Virtual size: 855KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 27KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/WINNTBBA.DLL
.dll windows:5 windows x86 arch:x86

b4662eb788d0d46315ba75509b87e92e

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_REMOVABLE_RUN_FROM_SWAP
IMAGE_FILE_NET_RUN_FROM_SWAP
IMAGE_FILE_DLL

PDB Paths

winntbba.pdb

Imports

user32

FillRect
SetRect
LoadBitmapA
GetDesktopWindow
LoadIconA
SetWindowLongA
DrawTextA
MoveWindow
SendMessageA
RedrawWindow
DestroyWindow
KillTimer
SetTimer
GetWindowDC
GetClassLongA
CallWindowProcA
GetParent
ClientToScreen
ScreenToClient
CharNextA
CharPrevA
GetDC
ReleaseDC
LoadCursorA
RegisterClassA
GetWindowRect
CreateWindowExA
UnregisterClassA
ShowWindow
InvalidateRect
UpdateWindow
BeginPaint
GetClientRect
EndPaint
DefWindowProcA
LoadImageA
EqualRect
CopyRect
GetSystemMetrics
LoadStringA

gdi32

SetTextAlign
ExtTextOutA
TextOutA
GetTextExtentPoint32A
EnumFontsA
CreateBitmap
SetBkColor
GetMapMode
Rectangle
SetStretchBltMode
StretchBlt
GetDeviceCaps
GetStockObject
CreateCompatibleDC
CreateCompatibleBitmap
BitBlt
DPtoLP
DeleteDC
SaveDC
SetMapMode
SetBkMode
GetObjectA
SetTextColor
SelectObject
GetTextMetricsA
RestoreDC
DeleteObject
CreateFontIndirectA
GetTextAlign

kernel32

VirtualFree
HeapCreate
HeapDestroy
WriteFile
WideCharToMultiByte
FreeEnvironmentStringsW
GetEnvironmentStrings
LeaveCriticalSection
EnterCriticalSection
GetACP
GetOEMCP
GetCPInfo
VirtualAlloc
HeapReAlloc
InitializeCriticalSection
LoadLibraryA
GetStringTypeA
MultiByteToWideChar
GetStringTypeW
GetLocaleInfoA
LCMapStringA
LCMapStringW
RtlUnwind
InterlockedExchange
VirtualQuery
VirtualProtect
GetSystemInfo
GetEnvironmentStringsW
MulDiv
lstrcpyA
OutputDebugStringA
lstrlenA
HeapFree
HeapAlloc
GetProcessHeap
IsDBCSLeadByte
lstrcmpA
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TlsSetValue
GetCommandLineA
GetVersionExA
ExitProcess
GetProcAddress
GetModuleHandleA
TlsFree
SetLastError
TlsGetValue
GetLastError
TlsAlloc
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
DeleteCriticalSection
GetModuleFileNameA
FreeEnvironmentStringsA

Exports

Exports

BB_Refresh
GetBBHwnd
GetBBMainHwnd
GetPanelCount
InitBillBoard
ProgressGaugeMsg
SetInfoText
SetProgress
SetProgressText
SetStep
SetTimeEstimate
ShowProgressGaugeWindow
StartBillBoard
StopBillBoard
TermBillBoard

Sections

.text
Size: 48KB - Virtual size: 48KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 675KB - Virtual size: 675KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/WINNTBBU.DLL
.dll windows:5 windows x86 arch:x86

c897bc118518acb5b76e94f56b8f878f

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_REMOVABLE_RUN_FROM_SWAP
IMAGE_FILE_NET_RUN_FROM_SWAP
IMAGE_FILE_DLL

PDB Paths

winntbbu.pdb

Imports

user32

FillRect
SetRect
LoadBitmapW
GetDesktopWindow
LoadIconW
SetWindowLongW
DrawTextW
MoveWindow
SendMessageW
RedrawWindow
DestroyWindow
KillTimer
SetTimer
GetWindowDC
GetClassLongW
CallWindowProcW
GetParent
ClientToScreen
ScreenToClient
CharNextW
CharPrevW
GetDC
ReleaseDC
LoadCursorW
RegisterClassW
GetWindowRect
CreateWindowExW
UnregisterClassW
ShowWindow
InvalidateRect
UpdateWindow
BeginPaint
GetClientRect
EndPaint
DefWindowProcW
LoadImageW
EqualRect
CopyRect
GetSystemMetrics
LoadStringW

gdi32

GetTextAlign
SetTextAlign
ExtTextOutW
TextOutW
GetTextExtentPoint32W
EnumFontsW
CreateBitmap
SetBkColor
GetMapMode
Rectangle
SetStretchBltMode
StretchBlt
GetDeviceCaps
GetStockObject
CreateCompatibleDC
CreateCompatibleBitmap
BitBlt
DPtoLP
DeleteDC
SaveDC
SetMapMode
SetBkMode
GetObjectW
SetTextColor
SelectObject
GetTextMetricsW
RestoreDC
DeleteObject
CreateFontIndirectW

kernel32

VirtualFree
WriteFile
HeapDestroy
GetEnvironmentStringsW
WideCharToMultiByte
LeaveCriticalSection
EnterCriticalSection
GetACP
GetOEMCP
GetCPInfo
VirtualAlloc
HeapReAlloc
InitializeCriticalSection
LoadLibraryA
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
MultiByteToWideChar
LCMapStringA
LCMapStringW
RtlUnwind
InterlockedExchange
VirtualQuery
VirtualProtect
GetSystemInfo
HeapCreate
MulDiv
lstrcpyW
OutputDebugStringW
lstrlenW
HeapFree
HeapAlloc
GetProcessHeap
lstrcmpW
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TlsSetValue
GetCommandLineA
GetVersionExA
ExitProcess
GetProcAddress
GetModuleHandleA
TlsFree
SetLastError
TlsGetValue
GetLastError
TlsAlloc
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
DeleteCriticalSection
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW

comctl32

InitCommonControlsEx

Exports

Exports

BB_Refresh
GetBBHwnd
GetBBMainHwnd
GetPanelCount
InitBillBoard
ProgressGaugeMsg
SetInfoText
SetProgress
SetProgressText
SetStep
SetTimeEstimate
ShowProgressGaugeWindow
StartBillBoard
StopBillBoard
TermBillBoard

Sections

.text
Size: 50KB - Virtual size: 49KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 675KB - Virtual size: 675KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/WINNTUPG/APMUPGRD.DLL
.dll windows:5 windows x86 arch:x86

ffb93203c84d643cfcdbefc5483ed8d2

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

msvcrt

wcscat
??2@YAPAXI@Z
wcsstr
??3@YAXPAX@Z

advapi32

RegQueryInfoKeyW
RegEnumKeyW
RegDeleteValueW
RegQueryValueExW
RegCloseKey
RegOpenKeyExW
RegDeleteKeyW
RegSetValueExW

kernel32

CreateProcessW
CloseHandle
LocalAlloc
LocalFree
DisableThreadLibraryCalls
lstrlenW
WaitForSingleObject

user32

MessageBoxW
LoadStringW

Exports

Exports

ApmUpgradeCompatibilityCheck
ApmUpgradeHandleHaveDisk

Sections

.text
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 100B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 360B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/WINNTUPG/BOSCOMP.DLL
.dll windows:5 windows x86 arch:x86

00a189bdd054caa1e363aedf247af4b7

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

msvcrt

_wcsicmp
??2@YAPAXI@Z
wcsstr
wcslen
??3@YAXPAX@Z

advapi32

RegCloseKey
RegOpenKeyW
RegQueryValueExW

kernel32

DisableThreadLibraryCalls

user32

LoadStringW

Exports

Exports

BosHardBlockCheck
BosSoftBlockCheck

Sections

.text
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 212B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 152B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/WINNTUPG/CFGMGR32.DLL
.dll windows:4 windows x86 arch:x86

4b67c96c7ff344e1264b20acd406a36a

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Imports

msvcrt

free
malloc
_except_handler3
_wcsicmp
wcslen
wcscpy
wcscat

kernel32

lstrlenW
SetLastError
DeleteCriticalSection
GetLastError
OutputDebugStringW
LeaveCriticalSection
EnterCriticalSection
WideCharToMultiByte
GetComputerNameW
InitializeCriticalSection
lstrcmpiW
CloseHandle
CreateFileW
LocalAlloc
Sleep
WaitForSingleObject
CreateProcessW
CreateEventW
lstrcatW
lstrcpyW
WaitForMultipleObjects
lstrlenA
ReleaseMutex
WaitNamedPipeW
CreateMutexW
SetEvent
LocalFree

advapi32

RegEnumKeyExW
RegQueryInfoKeyW
RegDeleteKeyW
RegSetValueExW
RegCreateKeyExW
RegOpenKeyExW
RegConnectRegistryW
RegCloseKey

user32

CharUpperW
wsprintfW
CharUpperBuffW

rpcrt4

UuidFromStringW
UuidToStringW
UuidCreateNil
RpcBindingFree
RpcBindingFromStringBindingW
RpcStringFreeW
RpcStringBindingComposeW
NdrClientCall

setupapi

StringTableStringFromId
StringTableDestroy
StringTableAddString
StringTableInitialize
CaptureAndConvertAnsiArg
IsUserAdmin
MyFree

Exports

Exports

CMP_Init_Detection
CMP_Report_LogOn
CM_Add_Empty_Log_Conf
CM_Add_Empty_Log_Conf_Ex
CM_Add_IDA
CM_Add_IDW
CM_Add_ID_ExA
CM_Add_ID_ExW
CM_Add_Range
CM_Add_Res_Des
CM_Add_Res_Des_Ex
CM_Connect_MachineA
CM_Connect_MachineW
CM_Create_DevNodeA
CM_Create_DevNodeW
CM_Create_DevNode_ExA
CM_Create_DevNode_ExW
CM_Create_Range_List
CM_Delete_Class_Key
CM_Delete_Class_Key_Ex
CM_Delete_DevNode_Key
CM_Delete_DevNode_Key_Ex
CM_Delete_Range
CM_Detect_Resource_Conflict
CM_Detect_Resource_Conflict_Ex
CM_Disable_DevNode
CM_Disable_DevNode_Ex
CM_Disconnect_Machine
CM_Dup_Range_List
CM_Enable_DevNode
CM_Enable_DevNode_Ex
CM_Enumerate_Classes
CM_Enumerate_Classes_Ex
CM_Enumerate_EnumeratorsA
CM_Enumerate_EnumeratorsW
CM_Enumerate_Enumerators_ExA
CM_Enumerate_Enumerators_ExW
CM_Find_Range
CM_First_Range
CM_Free_Log_Conf
CM_Free_Log_Conf_Ex
CM_Free_Log_Conf_Handle
CM_Free_Range_List
CM_Free_Res_Des
CM_Free_Res_Des_Ex
CM_Free_Res_Des_Handle
CM_Get_Child
CM_Get_Child_Ex
CM_Get_Class_Key_NameA
CM_Get_Class_Key_NameW
CM_Get_Class_Key_Name_ExA
CM_Get_Class_Key_Name_ExW
CM_Get_Class_NameA
CM_Get_Class_NameW
CM_Get_Class_Name_ExA
CM_Get_Class_Name_ExW
CM_Get_Depth
CM_Get_Depth_Ex
CM_Get_DevNode_Registry_PropertyA
CM_Get_DevNode_Registry_PropertyW
CM_Get_DevNode_Registry_Property_ExA
CM_Get_DevNode_Registry_Property_ExW
CM_Get_DevNode_Status
CM_Get_DevNode_Status_Ex
CM_Get_Device_IDA
CM_Get_Device_IDW
CM_Get_Device_ID_ExA
CM_Get_Device_ID_ExW
CM_Get_Device_ID_ListA
CM_Get_Device_ID_ListW
CM_Get_Device_ID_List_ExA
CM_Get_Device_ID_List_ExW
CM_Get_Device_ID_List_SizeA
CM_Get_Device_ID_List_SizeW
CM_Get_Device_ID_List_Size_ExA
CM_Get_Device_ID_List_Size_ExW
CM_Get_Device_ID_Size
CM_Get_Device_ID_Size_Ex
CM_Get_First_Log_Conf
CM_Get_First_Log_Conf_Ex
CM_Get_Global_State
CM_Get_Global_State_Ex
CM_Get_HW_Prof_FlagsA
CM_Get_HW_Prof_FlagsW
CM_Get_HW_Prof_Flags_ExA
CM_Get_HW_Prof_Flags_ExW
CM_Get_Hardware_Profile_InfoA
CM_Get_Hardware_Profile_InfoW
CM_Get_Hardware_Profile_Info_ExA
CM_Get_Hardware_Profile_Info_ExW
CM_Get_Next_Log_Conf
CM_Get_Next_Log_Conf_Ex
CM_Get_Next_Res_Des
CM_Get_Next_Res_Des_Ex
CM_Get_Parent
CM_Get_Parent_Ex
CM_Get_Res_Des_Data
CM_Get_Res_Des_Data_Ex
CM_Get_Res_Des_Data_Size
CM_Get_Res_Des_Data_Size_Ex
CM_Get_Sibling
CM_Get_Sibling_Ex
CM_Get_Version
CM_Get_Version_Ex
CM_Intersect_Range_List
CM_Invert_Range_List
CM_Locate_DevNodeA
CM_Locate_DevNodeW
CM_Locate_DevNode_ExA
CM_Locate_DevNode_ExW
CM_Merge_Range_List
CM_Modify_Res_Des
CM_Modify_Res_Des_Ex
CM_Move_DevNode
CM_Move_DevNode_Ex
CM_Next_Range
CM_Open_Class_KeyA
CM_Open_Class_KeyW
CM_Open_Class_Key_ExA
CM_Open_Class_Key_ExW
CM_Open_DevNode_Key
CM_Open_DevNode_Key_Ex
CM_Query_Arbitrator_Free_Data
CM_Query_Arbitrator_Free_Data_Ex
CM_Query_Arbitrator_Free_Size
CM_Query_Arbitrator_Free_Size_Ex
CM_Query_Remove_SubTree
CM_Query_Remove_SubTree_Ex
CM_Reenumerate_DevNode
CM_Reenumerate_DevNode_Ex
CM_Remove_SubTree
CM_Remove_SubTree_Ex
CM_Run_Detection
CM_Run_Detection_Ex
CM_Set_DevNode_Registry_PropertyA
CM_Set_DevNode_Registry_PropertyW
CM_Set_DevNode_Registry_Property_ExA
CM_Set_DevNode_Registry_Property_ExW
CM_Set_HW_Prof
CM_Set_HW_Prof_Ex
CM_Set_HW_Prof_FlagsA
CM_Set_HW_Prof_FlagsW
CM_Set_HW_Prof_Flags_ExA
CM_Set_HW_Prof_Flags_ExW
CM_Setup_DevNode
CM_Setup_DevNode_Ex
CM_Test_Range_Available
CM_Uninstall_DevNode
CM_Uninstall_DevNode_Ex

Sections

.text
Size: 33KB - Virtual size: 33KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 644B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/WINNTUPG/CLUSCOMP.DLL
.dll windows:5 windows x86 arch:x86

9bf7967399e3f2e5249fde63df5d27cb

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

ntdll

RtlUnwind

kernel32

CloseHandle
WriteFile
GetLocalTime
SetFilePointer
CreateFileW
ExpandEnvironmentStringsW
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSection
GetCurrentThreadId
TlsSetValue
GetCommandLineA
GetVersionExA
WideCharToMultiByte
MultiByteToWideChar
ExitProcess
GetProcAddress
GetModuleHandleA
TlsFree
SetLastError
TlsGetValue
TlsAlloc
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
HeapDestroy
LeaveCriticalSection
VirtualFree
GetOEMCP
GetCPInfo
VirtualAlloc
HeapReAlloc
LoadLibraryA
GetLocaleInfoA
GetStringTypeA
GetStringTypeW
LCMapStringA
LCMapStringW
SetStdHandle
VirtualProtect
GetSystemInfo
VirtualQuery
FlushFileBuffers
InterlockedCompareExchange
GetModuleFileNameW
DisableThreadLibraryCalls
HeapFree
GetProcessHeap
HeapAlloc
GetVersionExW
GetLastError
HeapCreate
GetACP
CreateDirectoryW
GetFileAttributesW

user32

wvsprintfW
LoadStringW

advapi32

RegSetValueExW
RegCloseKey
OpenServiceW
RegCreateKeyExW
CloseServiceHandle
OpenSCManagerW

clusapi

GetClusterInformation
CloseCluster
OpenCluster

Exports

Exports

ClusterUpgradeCompatibilityCheck

Sections

.text
Size: 31KB - Virtual size: 30KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/WINNTUPG/ENTINF/NETUPG.INF
I386/WINNTUPG/FSFILTER.DLL
.dll windows:5 windows x86 arch:x86

12e7368644fbfb9fd5bdfaca605920e5

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

msvcrt

_wcsicmp
wcslen
_strnicmp
wcsrchr
wcscpy
wcscat

imagehlp

ImageUnload
ImageRvaToVa
ImageRvaToSection
ImageDirectoryEntryToData
ImageNtHeader
ImageLoad

advapi32

RegCloseKey
RegOpenKeyExW
RegQueryInfoKeyW
RegQueryValueExW
RegEnumKeyExW

kernel32

GetPrivateProfileSectionW
GetModuleFileNameW
GetLastError
ExpandEnvironmentStringsW
LocalAlloc
WideCharToMultiByte
DisableThreadLibraryCalls
LocalFree

Exports

Exports

CheckForFsFilters

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 234B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/WINNTUPG/FSFILTER.HTM
.html
I386/WINNTUPG/FSFILTER.INF
I386/WINNTUPG/FSFILTER.TXT
I386/WINNTUPG/FTCOMP.DLL
.dll windows:5 windows x86 arch:x86

db781198eb04fccfa99266dcaa3e906b

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

msvcrt

swprintf
wcslen
wcscmp
tolower

ntdll

NtOpenFile
RtlCreateUnicodeString
NtDeviceIoControlFile
NtQuerySystemInformation
RtlFreeUnicodeString

kernel32

GetVersionExW
GetSystemDirectoryW
QueryDosDeviceW
LocalAlloc
LocalFree
Sleep
DisableThreadLibraryCalls
GetLastError
CloseHandle
DeviceIoControl
CreateFileW

user32

LoadStringW
wsprintfW

advapi32

RegOpenKeyExW
RegQueryValueExW
RegCloseKey

Exports

Exports

FtCompatibilityCheckError
FtCompatibilityCheckWarning

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 276B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 456B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 232B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/WINNTUPG/INPUPGRD.DLL
.dll windows:5 windows x86 arch:x86

3e0bb0cdda1338b1e2135a9895639edd

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

msvcrt

wcsrchr
wcschr

advapi32

OpenSCManagerW
CloseServiceHandle
RegOpenKeyExW
QueryServiceConfigW
OpenServiceW
RegEnumValueW
RegCloseKey

kernel32

lstrcpyW
lstrcatW
LocalAlloc
LocalFree
lstrcmpiW
lstrcpynW
lstrlenW

Exports

Exports

DllMain
InputUpgradeCheck

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 60B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 1008B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 186B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/WINNTUPG/MS/MODEMSHR/MDMSHRUP.DLL
.dll windows:5 windows x86 arch:x86

73a5102145ea3fa4f892117d9ff5d8d7

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

msvcrt

_wcsicmp
wcscat
wcscpy
swprintf

advapi32

RegRestoreKeyW
RegSaveKeyW
OpenThreadToken
OpenProcessToken
AdjustTokenPrivileges
LookupPrivilegeValueW

kernel32

DeleteFileW
LocalFree
GetCurrentThread
GetLastError
CloseHandle
GetCurrentProcess
FormatMessageW

user32

MessageBoxW

Exports

Exports

DoPostUpgradeProcessing
DoPreUpgradeProcessing
PostUpgradeInitialize
PreUpgradeInitialize

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 1008B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 184B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/WINNTUPG/MS/MODEMSHR/NETMAP.INF
I386/WINNTUPG/MS/MODEMSHR/NETMSHR.INF
I386/WINNTUPG/MS/MODEMSHR/NETSRDR.INF
I386/WINNTUPG/MS/SNA/IBMMGUG.DLL
.dll windows:5 windows x86 arch:x86

ede2fb3c06551ff884a03a5fe28bef9a

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

user32

wsprintfW
wsprintfA

kernel32

GetProcAddress
GetModuleHandleW
GetCommandLineA
WideCharToMultiByte
lstrlenW
GetVersion
TerminateProcess
GetCurrentProcess
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
HeapDestroy
ExitProcess
VirtualFree
HeapCreate
GetCPInfo
GetACP
GetOEMCP
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
DisableThreadLibraryCalls
WriteFile
HeapAlloc
HeapFree
VirtualAlloc
LoadLibraryA
GetModuleFileNameA

advapi32

RegOpenKeyExA
RegQueryValueExA
RegCloseKey

Exports

Exports

DoPostUpgradeProcessing
DoPreUpgradeProcessing
PostUpgradeInitialize
PreUpgradeInitialize

Sections

.text
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 14KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 183B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/WINNTUPG/MS/SNA/NETMAP.INF
I386/WINNTUPG/MS/SNA/NTSNAUPG.DLL
.dll windows:5 windows x86 arch:x86

b4855f501b6c03d362f8bbfe6cd3699b

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

user32

wsprintfW
wsprintfA
MessageBoxW
CharUpperA
LoadStringW
GetActiveWindow

kernel32

MultiByteToWideChar
HeapAlloc
lstrlenA
GetCommandLineA
GetModuleHandleW
WideCharToMultiByte
lstrcmpA
lstrcpyA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
SetHandleCount
GetStdHandle
GetFileType
GetProcessHeap
lstrlenW
HeapCreate
VirtualFree
GetModuleFileNameA
GetCPInfo
GetStartupInfoA
GetOEMCP
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
DisableThreadLibraryCalls
WriteFile
HeapFree
VirtualAlloc
GetProcAddress
LoadLibraryA
lstrcatA
CopyFileA
DeleteFileA
GetSystemDirectoryA
GetWindowsDirectoryA
GetPrivateProfileStringA
HeapDestroy
GetACP

advapi32

RegQueryValueExA
RegDeleteValueA
RegSetValueExA
RegCreateKeyExA
RegDeleteKeyA
RegEnumKeyA
RegOpenKeyExA
RegCloseKey

netapi32

NetShareDel
NetShareAdd

Exports

Exports

DoPostUpgradeProcessing
DoPreUpgradeProcessing
PostUpgradeInitialize
PreUpgradeInitialize

Sections

.text
Size: 18KB - Virtual size: 17KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 13KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 183B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 1024B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/WINNTUPG/MS/SNA/SNADLCUG.DLL
.dll windows:5 windows x86 arch:x86

7cf38b26f5a4c2fdec38cbd3360c61a9

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

user32

CharUpperA
wsprintfA

kernel32

lstrlenA
lstrcpyA
MultiByteToWideChar
lstrlenW
WideCharToMultiByte
WritePrivateProfileStringA
GetPrivateProfileStringA
GetCommandLineA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
SetHandleCount
GetStdHandle
GetProcAddress
LoadLibraryW
HeapDestroy
HeapCreate
GetFileType
GetModuleFileNameA
GetCPInfo
GetACP
GetOEMCP
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
DisableThreadLibraryCalls
WriteFile
HeapAlloc
HeapFree
VirtualAlloc
LoadLibraryA
GetStartupInfoA
VirtualFree

advapi32

RegOpenKeyExA
RegSetValueExA
RegQueryValueExA
RegCloseKey

rpcrt4

UuidToStringA
RpcStringFreeA

Exports

Exports

DoPostUpgradeProcessing
DoPreUpgradeProcessing
PostUpgradeInitialize
PreUpgradeInitialize

Sections

.text
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 183B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 852B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/WINNTUPG/MS/SNA/SNAUPG30.INI
I386/WINNTUPG/MS/SNA/SNAUPG40.INI
I386/WINNTUPG/MSMQCOMP.DLL
.dll windows:5 windows x86 arch:x86

24fb1ae58f7c622edb952d72f1db71f6

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

msvcrt

_adjust_fdiv
malloc
_initterm
free
swprintf
wcsrchr

kernel32

CompareStringW
lstrcpyW

advapi32

RegQueryValueExW
RegCloseKey
RegEnumValueW
RegOpenKeyExW

user32

LoadStringW
CharNextW

Exports

Exports

MsmqComp

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 158B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/WINNTUPG/NETMAP.INF
I386/WINNTUPG/NETUPG.INF
I386/WINNTUPG/NETUPGRD.DLL
.dll windows:5 windows x86 arch:x86

25a51083c35ad2538b40794e3f2ddb08

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_REMOVABLE_RUN_FROM_SWAP
IMAGE_FILE_NET_RUN_FROM_SWAP
IMAGE_FILE_DLL

PDB Paths

netupgrd.pdb

Imports

msvcrt

fgetws
fclose
_wtoi
memmove
_wcsnicmp
wcscpy
wcscat
swprintf
_wcsicmp
wcscspn
wcsstr
swscanf
_except_handler3
_wsplitpath
__CxxFrameHandler
wcstoul
wcschr
iswspace
free
_initterm
malloc
_adjust_fdiv
printf
towupper
wcstol
vswprintf
fwprintf
_wfopen
_purecall
_vsnwprintf
wcslen

ntdll

RtlInitUnicodeString
RtlNtStatusToDosError
DbgPrint
NtOpenFile

advapi32

RegSaveKeyW
RegQueryValueExA
RegConnectRegistryW
RegSetValueExW
UnlockServiceDatabase
OpenServiceW
OpenSCManagerW
LockServiceDatabase
QueryServiceStatus
ControlService
CloseServiceHandle
RegCloseKey
RegEnumKeyExW
AdjustTokenPrivileges
GetTokenInformation
OpenProcessToken
LsaClose
LsaQueryInformationPolicy
LsaOpenPolicy
RegQueryValueExW
RegOpenKeyExW
RegEnumValueW
RegQueryInfoKeyW
QueryServiceConfigW

comdlg32

CommDlgExtendedError
GetOpenFileNameW

kernel32

LocalAlloc
DeviceIoControl
GetProcAddress
LoadLibraryW
FormatMessageW
LockResource
LoadResource
FindResourceW
RemoveDirectoryW
DefineDosDeviceW
QueryDosDeviceW
GetCommandLineW
SetFilePointer
WideCharToMultiByte
ExpandEnvironmentStringsA
SetCurrentDirectoryA
MapViewOfFile
CreateFileMappingW
GetFileSize
CreateFileA
DeleteFileA
SetCurrentDirectoryW
GetCurrentDirectoryW
SetLastError
RaiseException
Sleep
HeapFree
lstrcmpiW
GetVersionExW
CloseHandle
GetLastError
GetCurrentProcess
FreeLibrary
DeleteFileW
DisableThreadLibraryCalls
lstrlenW
WriteFile
lstrcpyW
LoadLibraryExW
lstrcatW
GetWindowsDirectoryW
CreateFileW
GetTempFileNameW
GetTempPathW
GetFileInformationByHandle
GetModuleFileNameW
GetModuleHandleW
FindClose
FindNextFileW
CopyFileW
CreateDirectoryW
FindFirstFileW
IsBadReadPtr
GetEnvironmentVariableW
LocalFree
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
HeapAlloc
GetProcessHeap

setupapi

SetupGetStringFieldW
SetupGetMultiSzFieldW
SetupOpenInfFileW
SetupGetIntField
SetupCloseInfFile
SetupGetLineTextW
SetupFindFirstLineW
SetupFindNextLine

user32

wsprintfW
MessageBoxW
LoadStringW
CharUpperW

Exports

Exports

NetUpgradeAddLineToSection
NetUpgradeAddSection
NetUpgradeCompatibilityCheck
NetUpgradeHandleCompatibilityHaveDisk
Winnt32Cleanup
Winnt32PluginGetPages
Winnt32PluginInit
Winnt32WriteParams
WriteNetworkInfoToAnswerFile

Sections

.text
Size: 104KB - Virtual size: 104KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/WINNTUPG/NTDSUPG.DLL
.dll windows:5 windows x86 arch:x86

5f6ce0e3ce0e11bf84b4799c3ccf8c92

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

ntdll

RtlUnwind
RtlGetNtProductType

kernel32

GetDiskFreeSpaceExA
FindFirstFileA
FindClose
LocalFree
GetVersionExW
FormatMessageW
LoadLibraryW
FreeLibrary

user32

MessageBoxW

netapi32

NetApiBufferFree
NetGetDCName
NetServerGetInfo

advapi32

RegOpenKeyA
RegQueryValueExA
RegCloseKey

Exports

Exports

DsUpgradeCompatibilityCheck

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 162B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/WINNTUPG/NV4PREP.DLL
.dll windows:5 windows x86 arch:x86

0c5f44e0b4d0dcb4dfb1a6d1698f2cd0

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

nv4prep.pdb

Imports

msvcrt

strncmp

advapi32

RegEnumKeyA
RegCloseKey
RegDeleteValueA
RegQueryValueExA
RegOpenKeyExA

kernel32

SetUnhandledExceptionFilter
QueryPerformanceCounter
CompareStringA
GetVersionExA
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter

Exports

Exports

CompatibilityCheck
DllMain

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 152B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/WINNTUPG/OEM/DIGI/ASYNC/DGUPGRD.DLL
.dll windows:5 windows x86 arch:x86

df8a3a31a12d317b84812ea056321afe

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

msvcrt

swprintf
_wcsicmp
wcscpy
wcslen

kernel32

GetCurrentProcess
GetProcAddress
DisableThreadLibraryCalls
GetModuleHandleW
DeleteFileW

advapi32

RegSaveKeyW
OpenProcessToken
LookupPrivilegeValueW
AdjustTokenPrivileges

Exports

Exports

DoPreUpgradeProcessing
PreUpgradeInitialize

Sections

.text
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 968B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 232B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/WINNTUPG/OEM/DIGI/ASYNC/NETMAP.INF
I386/WINNTUPG/OEM/DIGI/ISDN/BRI/DIGIUPG.DLL
.dll windows:4 windows x86 arch:x86

a935b4a1f06a11eb5b8cfd0d3f2ab08c

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetLastError
GetProcessHeap
HeapFree
GetModuleHandleW
HeapAlloc
GetModuleFileNameA
MultiByteToWideChar
FreeEnvironmentStringsW
InterlockedDecrement
InterlockedIncrement
GetCommandLineA
GetVersion
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
ExitProcess
FatalAppExitA
Sleep
TerminateProcess
GetCurrentProcess
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
GetCurrentThread
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
GetProcAddress
GetCPInfo
GetACP
GetOEMCP
FreeEnvironmentStringsA
GetVersionExA
GetUserDefaultLCID
GetEnvironmentStrings
GetEnvironmentStringsW
WideCharToMultiByte
HeapDestroy
HeapCreate
VirtualFree
WriteFile
LCMapStringA
LCMapStringW
IsValidLocale
IsValidCodePage
GetLocaleInfoA
EnumSystemLocalesA
SetEnvironmentVariableA
HeapReAlloc
UnhandledExceptionFilter
GetStringTypeA
GetStringTypeW
VirtualAlloc
LoadLibraryA
FlushFileBuffers
GetTimeZoneInformation
GetLocaleInfoW
CloseHandle
SetStdHandle
SetFilePointer
CompareStringA
CompareStringW

user32

wsprintfW

advapi32

RegQueryValueExW
RegQueryInfoKeyW

Exports

Exports

DoPreUpgradeProcessing
PreUpgradeInitialize

Sections

.text
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 17KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 936B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/WINNTUPG/OEM/DIGI/ISDN/BRI/NETMAP.INF
I386/WINNTUPG/OEM/DIGI/ISDN/PRI/DIGPRIUP.DLL
.dll windows:4 windows x86 arch:x86

2678c734cbececdd6281baa82049983d

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

OutputDebugStringW
GetProcAddress
DisableThreadLibraryCalls
GetModuleHandleW

user32

wsprintfW

advapi32

RegOpenKeyExW
RegQueryValueExW
RegCloseKey

msvcrt

malloc
free
_initterm
_adjust_fdiv
__dllonexit
_onexit

Exports

Exports

DoPreUpgradeProcessing
PreUpgradeInitialize
TestUpgradeProcessing

Sections

.text
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 976B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 338B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/WINNTUPG/OEM/DIGI/ISDN/PRI/NETMAP.INF
I386/WINNTUPG/OEM/DIGI/REALPORT/DGRPUPG.DLL
.dll windows:5 windows x86 arch:x86

5c632511de635200ae505a2044309e24

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

msvcrt

swprintf
wcslen
_wcsicmp
wcscpy

kernel32

OutputDebugStringW
DeleteFileW
GetModuleHandleW
DisableThreadLibraryCalls
GetCurrentProcess
GetProcAddress

user32

wsprintfW

advapi32

LookupPrivilegeValueW
RegEnumKeyExW
RegOpenKeyW
RegSaveKeyW
OpenProcessToken
AdjustTokenPrivileges
RegCloseKey

Exports

Exports

DoPreUpgradeProcessing
PreUpgradeInitialize

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 116B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 968B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 328B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/WINNTUPG/OEM/DIGI/REALPORT/NETMAP.INF
I386/WINNTUPG/OEM/EICON/NETMAP.INF
I386/WINNTUPG/OEM/EQN/EQNUPGRD.DLL
.dll windows:4 windows x86 arch:x86

e9017c978428b53404b5ec5674e5e166

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetProcAddress
OutputDebugStringW
CloseHandle
DeviceIoControl
Sleep
CreateFileW
GlobalFree
GlobalUnlock
GetModuleHandleW
GetLocalTime
GetModuleFileNameW
DeleteFileW
CopyFileW
SetFileAttributesW
GetTempFileNameW
GetTempPathW
GetFileAttributesW
GetLastError
GlobalAlloc
GlobalLock
VirtualAlloc
GetStartupInfoA
GetModuleFileNameA
SetEnvironmentVariableA
CompareStringW
InterlockedDecrement
InterlockedIncrement
MultiByteToWideChar
HeapAlloc
GetCommandLineA
GetVersion
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
ExitProcess
FatalAppExitA
HeapFree
HeapDestroy
HeapCreate
VirtualFree
GetPrivateProfileIntW
TerminateProcess
GetCurrentProcess
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
GetCurrentThread
SetHandleCount
GetStdHandle
GetFileType
GetLocaleInfoA
HeapReAlloc
GetCPInfo
GetACP
GetOEMCP
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
WideCharToMultiByte
WriteFile
LCMapStringA
LCMapStringW
IsValidLocale
IsValidCodePage
GetStringTypeA
EnumSystemLocalesA
GetUserDefaultLCID
GetVersionExA
SetFilePointer
SetStdHandle
FlushFileBuffers
UnhandledExceptionFilter
GetStringTypeW
LoadLibraryA
SetEndOfFile
ReadFile
GetTimeZoneInformation
GetLocaleInfoW
CompareStringA

advapi32

RegOpenKeyExW
RegQueryValueExW
RegCloseKey

version

VerQueryValueW
GetFileVersionInfoSizeW
GetFileVersionInfoW

Exports

Exports

DoPreUpgradeProcessing
PreUpgradeInitialize

Sections

.text
Size: 64KB - Virtual size: 61KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 24KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/WINNTUPG/OEM/EQN/NETMAP.INF
I386/WINNTUPG/OEM/SPX/MPS/NETMAP.INF
I386/WINNTUPG/OEM/SPX/MPS/SPXUPGRD.DLL
.dll windows:4 windows x86 arch:x86

a143eeb4301c3c69a80729dfdb28bfbe

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

MultiByteToWideChar
GetModuleHandleA
GetCommandLineA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
GetLastError
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
DeleteCriticalSection
GetModuleFileNameA
GetCPInfo
GetACP
GetOEMCP
FreeEnvironmentStringsA
GetProcAddress
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
WideCharToMultiByte
HeapDestroy
HeapCreate
VirtualFree
WriteFile
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
HeapAlloc
HeapFree
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
VirtualAlloc
LoadLibraryA
FlushFileBuffers
CloseHandle
SetStdHandle
SetFilePointer

Exports

Exports

DoPreUpgradeProcessing
PreUpgradeInitialize

Sections

.text
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 992B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/WINNTUPG/OEM/TIGERJET/NETMAP.INF
I386/WINNTUPG/OEM/TIGERJET/TJUPG.DLL
.dll windows:4 windows x86 arch:x86

63482c1730b6fc935ab559423aff8955

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetModuleHandleW
GetProcAddress
GetFileType
MultiByteToWideChar
GetCommandLineA
GetModuleHandleA
GetVersion
GetStringTypeA
WideCharToMultiByte
GetStringTypeW
ExitProcess
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
GetLastError
HeapCreate
HeapDestroy
SetHandleCount
OutputDebugStringW
GetStdHandle
GetStartupInfoA
DeleteCriticalSection
GetModuleFileNameA
GetCPInfo
GetACP
GetOEMCP
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
WriteFile
SetFilePointer
HeapFree
HeapAlloc
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
LoadLibraryA
SetStdHandle
FlushFileBuffers
CloseHandle

advapi32

RegQueryValueExW
RegOpenKeyExW

Exports

Exports

DoPostUpgradeProcessing
DoPreUpgradeProcessing
PostUpgradeInitialize
PreUpgradeInitialize

Sections

.text
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 532B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 10KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 884B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/WINNTUPG/PERINF/NETUPG.INF
I386/WINNTUPG/SETUPAPI.DLL
.dll windows:4 windows x86 arch:x86

4631555542af39014093a9061769b077

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Imports

msvcrt

_abnormal_termination
wcslen
malloc
realloc
free
wcscpy
_except_handler3
_wcsicmp
_adjust_fdiv
_initterm
div
_endthread
_beginthread
wcsncmp
_mbsrchr
_strdup
wcstol
wcsspn
_snwprintf
wcsrchr
_wcsnicmp
wcstoul
wcschr
memmove
wcscmp

kernel32

lstrcmpW
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSection
FormatMessageW
GetModuleFileNameW
GetDriveTypeW
GetCurrentThreadId
LocalFree
GetTempFileNameW
GetCurrentThread
WaitForSingleObject
FreeLibrary
GetProcAddress
LoadLibraryW
GlobalFree
GlobalAlloc
GetVersion
_lclose
_lwrite
_lread
_lopen
TlsGetValue
_lcreat
DosDateTimeToFileTime
WinExec
WritePrivateProfileStringW
WritePrivateProfileSectionW
GetPrivateProfileStringW
GetPrivateProfileSectionW
lstrcpynA
SetFileAttributesW
CreateDirectoryW
lstrcpyA
GetFullPathNameW
WriteFile
DeleteFileW
CompareFileTime
GetStringTypeExW
RaiseException
WaitForMultipleObjects
ReleaseMutex
GetThreadLocale
CompareStringW
SetEvent
CreateEventW
CreateMutexW
lstrcmpiW
lstrcpynW
lstrlenA
WideCharToMultiByte
MoveFileExW
ExpandEnvironmentStringsW
lstrcpyW
lstrlenW
GetCurrentProcess
SetFileTime
GetFileTime
FindFirstFileW
FindClose
SetErrorMode
SetLastError
MultiByteToWideChar
UnmapViewOfFile
GetFileSize
CreateFileMappingW
MapViewOfFile
CreateFileW
GetLastError
CloseHandle
GetDiskFreeSpaceW
MoveFileW
CopyFileW
TlsSetValue
TlsAlloc
TlsFree
GetEnvironmentVariableW
_llseek
FindNextFileW
GetLocaleInfoW
DuplicateHandle
GetWindowsDirectoryW
GetVersionExW
GetSystemDirectoryW
lstrcatW

user32

DrawAnimatedRects
LoadCursorW
CharNextA
SetCursor
CheckRadioButton
MapWindowPoints
KillTimer
IsDlgButtonChecked
IsWindowVisible
InvalidateRect
GetMessageW
SetTimer
GetDC
ReleaseDC
LoadBitmapW
DestroyIcon
GetSysColor
ClientToScreen
GetWindowRect
SystemParametersInfoW
GetSystemMetrics
MoveWindow
DestroyWindow
SetWindowPos
CheckDlgButton
GetWindow
TranslateMessage
DispatchMessageW
GetIconInfo
IsWindowEnabled
IsWindow
GetWindowTextLengthW
GetWindowTextW
MessageBoxIndirectW
SetFocus
SetForegroundWindow
GetPropW
EndDialog
SetPropW
SetWindowTextW
ShowWindow
LoadIconW
SendDlgItemMessageW
GetDlgItemTextW
UpdateWindow
SetDlgItemTextW
GetParent
GetWindowLongW
SendMessageW
GetDlgItem
EnableWindow
PostMessageW
SetWindowLongW
MessageBeep
ExitWindowsEx
wsprintfW
CharUpperW
LoadStringW
MessageBoxW
WaitMessage
PeekMessageW
CharNextW
CharLowerW
GetClientRect
RemovePropW
DialogBoxParamW
PostThreadMessageW

gdi32

SetTextColor
StretchBlt
DeleteObject
BitBlt
GetObjectW
CreateCompatibleDC
CreateBitmap
CreateCompatibleBitmap
DeleteDC
SetBkColor
SelectObject

advapi32

FreeSid
QueryServiceConfigW
CreateServiceW
DeleteService
OpenSCManagerW
OpenServiceW
LockServiceDatabase
ChangeServiceConfigW
UnlockServiceDatabase
CloseServiceHandle
AdjustTokenPrivileges
LookupPrivilegeValueW
AllocateAndInitializeSid
EqualSid
RegCloseKey
RegEnumKeyExW
RegDeleteKeyW
RegCreateKeyExW
RegSetValueExW
RegDeleteValueW
RegQueryValueExW
OpenProcessToken
GetTokenInformation
InitializeSecurityDescriptor
SetSecurityDescriptorOwner
SetFileSecurityW
GetFileSecurityW
IsTextUnicode
RegOpenKeyExW

shell32

SHChangeNotify
ExtractIconExW
ord59

lz32

LZClose
LZOpenFileW
LZCopy

comdlg32

GetOpenFileNameW
GetFileTitleW

comctl32

ImageList_Destroy
DestroyPropertySheetPage
CreatePropertySheetPageW
ImageList_Add
ImageList_Create
ImageList_SetBkColor
ord17
ImageList_ReplaceIcon
ImageList_SetOverlayImage

version

GetFileVersionInfoW
GetFileVersionInfoSizeW
VerQueryValueW

winspool.drv

GetPrinterDriverDirectoryW

cfgmgr32

CM_Disable_DevNode
CM_Get_Class_NameW
CM_Get_DevNode_Status
CM_Enumerate_Classes
CM_Query_Remove_SubTree
CM_Remove_SubTree
CM_Setup_DevNode
CM_Get_Hardware_Profile_InfoW
CM_Delete_Class_Key
CM_Set_HW_Prof_FlagsW
CM_Reenumerate_DevNode
CM_Open_Class_KeyW
CM_Set_DevNode_Registry_PropertyA
CM_Get_DevNode_Registry_PropertyA
CM_Detect_Resource_Conflict
CM_Get_Next_Log_Conf
CM_Free_Res_Des_Handle
CM_Add_Res_Des
CM_Free_Log_Conf_Handle
CM_Free_Log_Conf
CM_Add_Empty_Log_Conf
CM_Set_DevNode_Registry_PropertyW
CM_Enable_DevNode
CM_Move_DevNode
CM_Get_DevNode_Registry_PropertyW
CM_Uninstall_DevNode
CM_Get_Parent
CM_Get_Device_IDW
CM_Delete_DevNode_Key
CM_Create_DevNodeW
CM_Locate_DevNodeW
CM_Get_HW_Prof_FlagsW
CM_Get_Device_ID_List_SizeW
CM_Get_Device_ID_ListW
CM_Get_Next_Res_Des
CM_Get_Res_Des_Data
CM_Get_Res_Des_Data_Size
CM_Open_DevNode_Key
CM_Get_First_Log_Conf
CM_Get_Device_ID_Size
CM_Get_Class_Key_NameW

mpr

WNetGetResourceInformationW
WNetAddConnection3W
WNetCancelConnection2W

rpcrt4

UuidFromStringW

Exports

Exports

AddMiniIconToList
AddTagToGroupOrderListEntry
AppendStringToMultiSz
AssertFail
CaptureAndConvertAnsiArg
CaptureStringArg
CenterWindowRelativeToParent
ConcatenatePaths
DelayedMove
DelimStringToMultiSz
DestroyTextFileReadBuffer
DoesUserHavePrivilege
DuplicateString
EnablePrivilege
ExtensionPropSheetPageProc
FileExists
FreeStringArray
GetNewInfName
GetSetFileTimestamp
GetVersionInfoFromImage
InfIsFromOemLocation
InstallHinfSection
InstallHinfSectionA
InstallHinfSectionW
InstallStop
IsUserAdmin
LookUpStringInTable
MemoryInitialize
MultiByteToUnicode
MultiSzFromSearchControl
MyFree
MyGetFileTitle
MyMalloc
MyRealloc
OpenAndMapFileForRead
OutOfMemory
QueryMultiSzValueToArray
QueryRegistryValue
ReadAsciiOrUnicodeTextFile
RegistryDelnode
RetreiveFileSecurity
RetrieveServiceConfig
SearchForInfFile
SetArrayToMultiSzValue
SetupAddInstallSectionToDiskSpaceListA
SetupAddInstallSectionToDiskSpaceListW
SetupAddSectionToDiskSpaceListA
SetupAddSectionToDiskSpaceListW
SetupAddToDiskSpaceListA
SetupAddToDiskSpaceListW
SetupAddToSourceListA
SetupAddToSourceListW
SetupAdjustDiskSpaceListA
SetupAdjustDiskSpaceListW
SetupCancelTemporarySourceList
SetupCloseFileQueue
SetupCloseInfFile
SetupCommitFileQueue
SetupCommitFileQueueA
SetupCommitFileQueueW
SetupCopyErrorA
SetupCopyErrorW
SetupCreateDiskSpaceListA
SetupCreateDiskSpaceListW
SetupDecompressOrCopyFileA
SetupDecompressOrCopyFileW
SetupDefaultQueueCallback
SetupDefaultQueueCallbackA
SetupDefaultQueueCallbackW
SetupDeleteErrorA
SetupDeleteErrorW
SetupDestroyDiskSpaceList
SetupDiAskForOEMDisk
SetupDiBuildClassInfoList
SetupDiBuildDriverInfoList
SetupDiCallClassInstaller
SetupDiCancelDriverInfoSearch
SetupDiChangeState
SetupDiClassGuidsFromNameA
SetupDiClassGuidsFromNameW
SetupDiClassNameFromGuidA
SetupDiClassNameFromGuidW
SetupDiCreateDevRegKeyA
SetupDiCreateDevRegKeyW
SetupDiCreateDeviceInfoA
SetupDiCreateDeviceInfoList
SetupDiCreateDeviceInfoW
SetupDiDeleteDevRegKey
SetupDiDeleteDeviceInfo
SetupDiDestroyClassImageList
SetupDiDestroyDeviceInfoList
SetupDiDestroyDriverInfoList
SetupDiDrawMiniIcon
SetupDiEnumDeviceInfo
SetupDiEnumDriverInfoA
SetupDiEnumDriverInfoW
SetupDiGetActualSectionToInstallA
SetupDiGetActualSectionToInstallW
SetupDiGetClassBitmapIndex
SetupDiGetClassDescriptionA
SetupDiGetClassDescriptionW
SetupDiGetClassDevPropertySheetsA
SetupDiGetClassDevPropertySheetsW
SetupDiGetClassDevsA
SetupDiGetClassDevsW
SetupDiGetClassImageIndex
SetupDiGetClassImageList
SetupDiGetClassInstallParamsA
SetupDiGetClassInstallParamsW
SetupDiGetDeviceInfoListClass
SetupDiGetDeviceInstallParamsA
SetupDiGetDeviceInstallParamsW
SetupDiGetDeviceInstanceIdA
SetupDiGetDeviceInstanceIdW
SetupDiGetDeviceRegistryPropertyA
SetupDiGetDeviceRegistryPropertyW
SetupDiGetDriverInfoDetailA
SetupDiGetDriverInfoDetailW
SetupDiGetDriverInstallParamsA
SetupDiGetDriverInstallParamsW
SetupDiGetHwProfileFriendlyNameA
SetupDiGetHwProfileFriendlyNameW
SetupDiGetHwProfileList
SetupDiGetINFClassA
SetupDiGetINFClassW
SetupDiGetSelectedDevice
SetupDiGetSelectedDriverA
SetupDiGetSelectedDriverW
SetupDiGetWizardPage
SetupDiInstallClassA
SetupDiInstallClassW
SetupDiInstallDevice
SetupDiInstallDriverFiles
SetupDiLoadClassIcon
SetupDiMoveDuplicateDevice
SetupDiOpenClassRegKey
SetupDiOpenDevRegKey
SetupDiOpenDeviceInfoA
SetupDiOpenDeviceInfoW
SetupDiRegisterDeviceInfo
SetupDiRemoveDevice
SetupDiSelectDevice
SetupDiSelectOEMDrv
SetupDiSetClassInstallParamsA
SetupDiSetClassInstallParamsW
SetupDiSetDeviceInstallParamsA
SetupDiSetDeviceInstallParamsW
SetupDiSetDeviceRegistryPropertyA
SetupDiSetDeviceRegistryPropertyW
SetupDiSetDriverInstallParamsA
SetupDiSetDriverInstallParamsW
SetupDiSetSelectedDevice
SetupDiSetSelectedDriverA
SetupDiSetSelectedDriverW
SetupDuplicateDiskSpaceListA
SetupDuplicateDiskSpaceListW
SetupFindFirstLineA
SetupFindFirstLineW
SetupFindNextLine
SetupFindNextMatchLineA
SetupFindNextMatchLineW
SetupFreeSourceListA
SetupFreeSourceListW
SetupGetBinaryField
SetupGetFieldCount
SetupGetFileCompressionInfoA
SetupGetFileCompressionInfoW
SetupGetInfFileListA
SetupGetInfFileListW
SetupGetInfInformationA
SetupGetInfInformationW
SetupGetIntField
SetupGetLineByIndexA
SetupGetLineByIndexW
SetupGetLineCountA
SetupGetLineCountW
SetupGetLineTextA
SetupGetLineTextW
SetupGetMultiSzFieldA
SetupGetMultiSzFieldW
SetupGetSourceFileLocationA
SetupGetSourceFileLocationW
SetupGetSourceFileSizeA
SetupGetSourceFileSizeW
SetupGetSourceInfoA
SetupGetSourceInfoW
SetupGetStringFieldA
SetupGetStringFieldW
SetupGetTargetPathA
SetupGetTargetPathW
SetupInitDefaultQueueCallback
SetupInitDefaultQueueCallbackEx
SetupInitializeFileLogA
SetupInitializeFileLogW
SetupInstallFileA
SetupInstallFileExA
SetupInstallFileExW
SetupInstallFileW
SetupInstallFilesFromInfSectionA
SetupInstallFilesFromInfSectionW
SetupInstallFromInfSectionA
SetupInstallFromInfSectionW
SetupInstallServicesFromInfSectionA
SetupInstallServicesFromInfSectionW
SetupIterateCabinetA
SetupIterateCabinetW
SetupLogFileA
SetupLogFileW
SetupOpenAppendInfFileA
SetupOpenAppendInfFileW
SetupOpenFileQueue
SetupOpenInfFileA
SetupOpenInfFileW
SetupOpenMasterInf
SetupPromptForDiskA
SetupPromptForDiskW
SetupPromptReboot
SetupQueryDrivesInDiskSpaceListA
SetupQueryDrivesInDiskSpaceListW
SetupQueryFileLogA
SetupQueryFileLogW
SetupQueryInfFileInformationA
SetupQueryInfFileInformationW
SetupQueryInfVersionInformationA
SetupQueryInfVersionInformationW
SetupQuerySourceListA
SetupQuerySourceListW
SetupQuerySpaceRequiredOnDriveA
SetupQuerySpaceRequiredOnDriveW
SetupQueueCopyA
SetupQueueCopySectionA
SetupQueueCopySectionW
SetupQueueCopyW
SetupQueueDefaultCopyA
SetupQueueDefaultCopyW
SetupQueueDeleteA
SetupQueueDeleteSectionA
SetupQueueDeleteSectionW
SetupQueueDeleteW
SetupQueueRenameA
SetupQueueRenameSectionA
SetupQueueRenameSectionW
SetupQueueRenameW
SetupRemoveFileLogEntryA
SetupRemoveFileLogEntryW
SetupRemoveFromDiskSpaceListA
SetupRemoveFromDiskSpaceListW
SetupRemoveFromSourceListA
SetupRemoveFromSourceListW
SetupRemoveInstallSectionFromDiskSpaceListA
SetupRemoveInstallSectionFromDiskSpaceListW
SetupRemoveSectionFromDiskSpaceListA
SetupRemoveSectionFromDiskSpaceListW
SetupRenameErrorA
SetupRenameErrorW
SetupScanFileQueue
SetupScanFileQueueA
SetupScanFileQueueW
SetupSetDirectoryIdA
SetupSetDirectoryIdExA
SetupSetDirectoryIdExW
SetupSetDirectoryIdW
SetupSetPlatformPathOverrideA
SetupSetPlatformPathOverrideW
SetupSetSourceListA
SetupSetSourceListW
SetupTermDefaultQueueCallback
SetupTerminateFileLog
ShouldDeviceBeExcluded
StampFileSecurity
StringTableAddString
StringTableAddStringEx
StringTableDestroy
StringTableDuplicate
StringTableEnum
StringTableGetExtraData
StringTableInitialize
StringTableInitializeEx
StringTableLookUpString
StringTableLookUpStringEx
StringTableSetExtraData
StringTableStringFromId
StringTableTrim
TakeOwnershipOfFile
UnicodeToMultiByte
UnmapAndCloseFile
pSetupDirectoryIdToPath
pSetupGetField
pSetupGetOsLoaderDriveAndPath
pSetupGetVersionDatum
pSetupGuidFromString
pSetupIsGuidNull
pSetupMakeSurePathExists
pSetupStringFromGuid

Sections

.text
Size: 197KB - Virtual size: 196KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 27KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 73KB - Virtual size: 72KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/WINNTUPG/SRVINF/NETUPG.INF
I386/WINNTUPG/TSCOMP.DLL
.dll windows:5 windows x86 arch:x86

8a54647dd46716319e2577e60b1b0c47

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

msvcrt

wcslen
wcscpy
??2@YAPAXI@Z
??3@YAXPAX@Z
wcscat
_wcsicmp

kernel32

DisableThreadLibraryCalls

user32

LoadStringW

advapi32

RegCloseKey
RegQueryValueExW
RegConnectRegistryW
RegOpenKeyExW

Exports

Exports

TSCompatibilityCheck

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 196B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 256B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 168B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/WINNTUPG/UNSUPMSG.HTM
.html
I386/WINNTUPG/UNSUPMSG.TXT
I386/WINNTUPG/VIDUPGRD.DLL
.dll windows:5 windows x86 arch:x86

9f0cdd59eea19e790813c66fc90fff55

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

msvcrt

swprintf
_wtoi
wcscpy
wcslen
_wcsicmp
_wcsnicmp

advapi32

RegEnumKeyExW
RegEnumKeyW
RegDeleteKeyW
RegCreateKeyExW
OpenSCManagerW
EnumServicesStatusW
RegSetValueExW
RegCloseKey
RegQueryValueExW
RegEnumValueW
RegOpenKeyExW
CloseServiceHandle
QueryServiceConfigW
OpenServiceW
RegOpenKeyW

user32

EnumDisplayDevicesW
EnumDisplaySettingsW
GetSystemMetrics
wsprintfW
CharUpperW

kernel32

LocalAlloc
FreeLibrary
lstrcpyW
GetLastError
lstrcatW
lstrcmpiW
GetVersionExW
LoadLibraryW
lstrlenW
LocalFree
GetProcAddress

gdi32

GetDeviceCaps
DeleteDC
CreateDCW

setupapi

SetupDiEnumDeviceInfo
SetupDiGetClassDevsW
SetupDiGetDeviceRegistryPropertyW
SetupDiDestroyDeviceInfoList

Exports

Exports

DllMain
VideoUpgradeCheck

Sections

.text
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1024B - Virtual size: 592B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/WINOLDAP.MO_
.cab
I386/WINRNR.DL_
.cab
I386/WINS.MI_
.cab
I386/WINSCARD.DL_
.cab
I386/WINSHFHC.DL_
.cab
I386/WINSOCK.DL_
.cab
I386/WINSPOOL.DR_
.cab
I386/WINSPOOL.EX_
.cab
I386/WINSRV.DL_
.cab
I386/WINSTA.DL_
.cab
I386/WINSTRM.DL_
.cab
I386/WINSYS.CAB
.cab
I386/WINSYS32.CAB
.cab
I386/WINTER.JP_
.cab
I386/WINTRUST.DL_
.cab
I386/WINVER.EX_
.cab
I386/WINWORD.DO_
.cab
I386/WINWORD2.DO_
.cab
I386/WINXP.JP_
.cab
I386/WIN_DOS.CH_
.cab
I386/WISC10.DL_
.cab
I386/WKSSVC.DL_
.cab
I386/WKSTAMIG.IN_
.cab
I386/WLANAPI.DL_
.cab
I386/WLAN_BEC.XS_
.cab
I386/WLAN_BEU.XS_
.cab
I386/WLAN_BMC.XS_
.cab
I386/WLAN_BMU.XS_
.cab
I386/WLAN_ECO.XS_
.cab
I386/WLAN_ECP.XS_
.cab
I386/WLAN_ECU.XS_
.cab
I386/WLAN_EHC.XS_
.cab
I386/WLAN_EHU.XS_
.cab
I386/WLAN_ETC.XS_
.cab
I386/WLAN_ETU.XS_
.cab
I386/WLAN_MCC.XS_
.cab
I386/WLAN_MCU.XS_
.cab
I386/WLAN_MPC.XS_
.cab
I386/WLAN_MPU.XS_
.cab
I386/WLAN_ONX.XS_
.cab
I386/WLAN_WLP.XS_
.cab
I386/WLDAP32.DL_
.cab
I386/WLNOTIFY.DL_
.cab
I386/WM1.GI_
.cab
I386/WM2.GI_
.cab
I386/WM3.GI_
.cab
I386/WM4.GI_
.cab
I386/WM5.GI_
.cab
I386/WM6.GI_
.cab
I386/WM7.GI_
.cab
I386/WM8.GI_
.cab
I386/WM9.GI_
.cab
I386/WMACCESS.IN_
.cab
I386/WMADMOD.DL_
.cab
I386/WMADMOE.DL_
.cab
I386/WMASF.DL_
.cab
I386/WMDM.IN_
.cab
I386/WMDMLOG.DL_
.cab
I386/WMDMPS.DL_
.cab
I386/WMERRENU.CA_
.cab
I386/WMERRENU.DL_
.cab
I386/WMERROR.DL_
.cab
I386/WMFSDK.IN_
.cab
I386/WMI.DL_
.cab
I386/WMI.MF_
.cab
I386/WMI.MO_
.cab
I386/WMI20.DT_
.cab
I386/WMI2XML.DL_
.cab
I386/WMIADAP.EX_
.cab
I386/WMIAPRES.DL_
.cab
I386/WMIAPRPL.DL_
.cab
I386/WMIAPSRV.EX_
.cab
I386/WMIC.CH_
.cab
I386/WMIC.EX_
.cab
I386/WMICMOFF.XS_
.cab
I386/WMICOOKR.DL_
.cab
I386/WMICTFMT.XS_
.cab
I386/WMICTFNS.XS_
.cab
I386/WMICVALU.XS_
.cab
I386/WMIDCPRV.DL_
.cab
I386/WMIDX.DL_
.cab
I386/WMIDX.OC_
.cab
I386/WMIFLTRW.CH_
.cab
I386/WMILIB.SY_
.cab
I386/WMIMGMT.MS_
.cab
I386/WMIMSG.DL_
.cab
I386/WMIPCIMA.DL_
.cab
I386/WMIPCIMA.MF_
.cab
I386/WMIPCIMA.MO_
.cab
I386/WMIPDSKQ.DL_
.cab
I386/WMIPDSKQ.MF_
.cab
I386/WMIPDSKQ.MO_
.cab
I386/WMIPICMP.DL_
.cab
I386/WMIPICMP.MF_
.cab
I386/WMIPICMP.MO_
.cab
I386/WMIPIPRT.DL_
.cab
I386/WMIPIPRT.MF_
.cab
I386/WMIPIPRT.MO_
.cab
I386/WMIPJOBJ.DL_
.cab
I386/WMIPJOBJ.MF_
.cab
I386/WMIPJOBJ.MO_
.cab
I386/WMIPROP.DL_
.cab
I386/WMIPROV.DL_
.cab
I386/WMIPRVSD.DL_
.cab
I386/WMIPRVSE.EX_
.cab
I386/WMIPSESS.DL_
.cab
I386/WMIPSESS.MF_
.cab
I386/WMIPSESS.MO_
.cab
I386/WMISCMGR.DL_
.cab
I386/WMISVC.DL_
.cab
I386/WMITIMEP.DL_
.cab
I386/WMITIMEP.MF_
.cab
I386/WMITIMEP.MO_
.cab
I386/WMIUTILS.DL_
.cab
I386/WMM2AE.DL_
.cab
I386/WMM2ERES.DL_
.cab
I386/WMM2EXT.DL_
.cab
I386/WMM2FILT.DL_
.cab
I386/WMM2FXA.DL_
.cab
I386/WMM2FXB.DL_
.cab
I386/WMM2RES.DL_
.cab
I386/WMM2RES2.DL_
.cab
I386/WMMFILT.DL_
.cab
I386/WMMRES.DL_
.cab
I386/WMMUTIL.DL_
.cab
I386/WMNETMGR.DL_
.cab
I386/WMP.DL_
.cab
I386/WMP.IN_
.cab
I386/WMP.OC_
.cab
I386/WMPASF.DL_
.cab
I386/WMPAUD1.WA_
.cab
I386/WMPAUD2.WA_
.cab
I386/WMPAUD3.WA_
.cab
I386/WMPAUD4.WA_
.cab
I386/WMPAUD5.WA_
.cab
I386/WMPAUD6.WA_
.cab
I386/WMPAUD7.WA_
.cab
I386/WMPAUD8.WA_
.cab
I386/WMPAUD9.WA_
.cab
I386/WMPBAND.DL_
.cab
I386/WMPCD.DL_
.cab
I386/WMPCORE.DL_
.cab
I386/WMPDXM.DL_
.cab
I386/WMPHOTO.DL_
.cab
I386/WMPLAY.CH_
.cab
I386/WMPLAYER.AD_
.cab
I386/WMPLAYER.CH_
.cab
I386/WMPLAYER.EX_
.cab
I386/WMPLOC.DL_
.cab
I386/WMPLOC.JS_
.cab
I386/WMPNS.DL_
.cab
I386/WMPOCM.IN_
.cab
I386/WMPSHELL.DL_
.cab
I386/WMPSTUB.EX_
.cab
I386/WMPTOUR.CS_
.cab
I386/WMPTOUR.HT_
.cab
I386/WMPUI.DL_
.cab
I386/WMPVIS.DL_
.cab
I386/WMSDMOD.DL_
.cab
I386/WMSDMOE.DL_
.cab
I386/WMSDMOE2.DL_
.cab
I386/WMSPDMOD.DL_
.cab
I386/WMSPDMOE.DL_
.cab
I386/WMSTREAM.DL_
.cab
I386/WMTOUR.IN_
.cab
I386/WMV8DMOD.DL_
.cab
I386/WMV8DS32.AX_
.cab
I386/WMVCORE.DL_
.cab
I386/WMVDMOD.DL_
.cab
I386/WMVDMOE2.DL_
.cab
I386/WMVDS32.AX_
.cab
I386/WORDPAD.CH_
.cab
I386/WORDPAD.EX_
.cab
I386/WORDPAD.HL_
.cab
I386/WORDPAD.IN_
.cab
I386/WORDPFCT.WPD
I386/WORDPFCT.WPG
I386/WOW32.DL_
.cab
I386/WOWDEB.EX_
.cab
I386/WOWEXEC.EX_
.cab
I386/WPA.DB_
.cab
I386/WPABACK.JP_
.cab
I386/WPABALN.EX_
.cab
I386/WPABTM.JP_
.cab
I386/WPAFLAG.JP_
.cab
I386/WPAKEY.JP_
.cab
I386/WPATOP.JP_
.cab
I386/WPAW.CH_
.cab
I386/WPNPINST.EX_
.cab
I386/WRITE.EX_
.cab
I386/WRITE.WP_
.cab
I386/WRITE32.WP_
.cab
I386/WS2HELP.DL_
.cab
I386/WS2IFSL.SY_
.cab
I386/WS2_32.DL_
.cab
I386/WSCENTER.MO_
.cab
I386/WSCHELP.CH_
.cab
I386/WSCNTFY.EX_
.cab
I386/WSCRIPT.CH_
.cab
I386/WSCRIPT.EX_
.cab
I386/WSCRIPT.HL_
.cab
I386/WSCRIPT.MU_
.cab
I386/WSCSVC.DL_
.cab
I386/WSCUI.CP_
.cab
I386/WSDU.DLL
.dll windows:5 windows x86 arch:x86

d2835986b7994d503f5870721a3b9839

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_REMOVABLE_RUN_FROM_SWAP
IMAGE_FILE_NET_RUN_FROM_SWAP
IMAGE_FILE_DLL

Imports

msvcrt

_lseek
_close
_write
_read
_open
free
strncpy
_iob
fopen
fclose
strrchr
_initterm
_adjust_fdiv
fseek
fprintf
fflush
??2@YAPAXI@Z
malloc
??3@YAXPAX@Z

kernel32

lstrlenW
DosDateTimeToFileTime
LocalFileTimeToFileTime
SetFileTime
SetFileAttributesA
ExpandEnvironmentStringsA
GetLocalTime
lstrcpynA
lstrcmpiA
GetSystemInfo
GetFileAttributesA
GetCurrentDirectoryA
SetCurrentDirectoryA
GetModuleFileNameA
DeleteFileA
GetPrivateProfileStringA
GetVersionExA
DisableThreadLibraryCalls
FreeLibrary
GetProcAddress
LoadLibraryA
SetLastError
GetLastError
CloseHandle
CompareFileTime
GetFileTime
GetFileSize
CreateFileA
lstrcatA
lstrlenA
lstrcpyA
WideCharToMultiByte
MultiByteToWideChar
FindClose
FindFirstFileA
GlobalFree
WriteFile
GetTickCount
GlobalAlloc
SystemTimeToFileTime

user32

wsprintfA
wvsprintfA

advapi32

RegOpenKeyA
RegQueryValueExA
RegCloseKey

version

VerQueryValueA
GetFileVersionInfoA
GetFileVersionInfoSizeA

Exports

Exports

DllMain
DuAbortDownload
DuBeginDownload
DuDoDetection
DuInitializeA
DuInitializeW
DuIsSupported
DuQueryUnsupportedDriversA
DuQueryUnsupportedDriversW
DuUninitialize

Sections

.text
Size: 36KB - Virtual size: 35KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1016B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/WSDUENG.DLL
.dll windows:5 windows x86 arch:x86

79a8f3dc8303b3e04654a71edb1709f1

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_REMOVABLE_RUN_FROM_SWAP
IMAGE_FILE_NET_RUN_FROM_SWAP
IMAGE_FILE_DLL

PDB Paths

wsdueng.pdb

Imports

msvcrt

_except_handler3
calloc
realloc
strchr
strstr
bsearch
??1type_info@@UAE@XZ
_adjust_fdiv
_initterm
_CxxThrowException
strrchr
strncpy
_lseek
_close
_write
_read
_open
free
malloc
?terminate@@YAXXZ
_iob
fopen
fclose
fseek
fprintf
fflush
??2@YAPAXI@Z
??3@YAXPAX@Z

kernel32

GetCurrentProcess
MultiByteToWideChar
LoadLibraryA
GetProcAddress
FreeLibrary
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
DisableThreadLibraryCalls
lstrcatA
lstrlenA
lstrcpyA
GetLastError
LeaveCriticalSection
EnterCriticalSection
GlobalFree
SetLastError
InitializeCriticalSection
CloseHandle
DeleteCriticalSection
GetPrivateProfileStringA
GetPrivateProfileIntA
GlobalAlloc
GetPrivateProfileSectionA
lstrcmpiA
lstrcpynA
GetTickCount
ExpandEnvironmentStringsA
CompareFileTime
GetFileTime
GetFileSize
CreateFileA
DeleteFileA
SetFileTime
WriteFile
SystemTimeToFileTime
ReadFile
FlushFileBuffers
SetThreadPriority
CreateThread
SetFileAttributesA
LocalFileTimeToFileTime
DosDateTimeToFileTime
GetVersionExA
QueryPerformanceCounter
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime

user32

FindWindowA
SendMessageA
CharUpperA
wvsprintfA
wsprintfA
PostMessageA
MsgWaitForMultipleObjects
TranslateMessage
DispatchMessageA
PeekMessageA

shlwapi

PathRemoveFileSpecA
StrToIntA
StrCmpNIA
PathCombineA
StrStrIA

setupapi

SetupDiDestroyDeviceInfoList
SetupDiGetDeviceRegistryPropertyA
SetupDiGetClassDevsA
SetupDiEnumDeviceInfo

wininet

InternetSetOptionA
InternetReadFile
InternetCloseHandle
HttpSendRequestA
HttpOpenRequestA
InternetConnectA
InternetCrackUrlA
InternetOpenA
HttpQueryInfoA

winspool.drv

EnumPrinterDriversA

Exports

Exports

DllMain
DuAbortDownload
DuBeginDownload
DuDoDetection
DuInitializeA
DuQueryUnsupportedDriversA
DuUninitialize
SetEstimatedDownloadSpeed

Sections

.text
Size: 60KB - Virtual size: 59KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/WSECEDIT.DL_
.cab
I386/WSECEDIT.HL_
.cab
I386/WSH.IN_
.cab
I386/WSHATM.DL_
.cab
I386/WSHBTH.DL_
.cab
I386/WSHCON.CH_
.cab
I386/WSHCON.DL_
.cab
I386/WSHEXT.DL_
.cab
I386/WSHEXT.MU_
.cab
I386/WSHIP6.DL_
.cab
I386/WSHISN.DL_
.cab
I386/WSHNETBS.DL_
.cab
I386/WSHOM.MU_
.cab
I386/WSHOM.OC_
.cab
I386/WSHRM.DL_
.cab
I386/WSHTCPIP.DL_
.cab
I386/WSNMP32.DL_
.cab
I386/WSOCK32.DL_
.cab
I386/WSTCODEC.IN_
.cab
I386/WSTDECOD.DL_
.cab
I386/WSTPAGER.AX_
.cab .ps1 polyglot
I386/WSTRENDR.AX_
.cab
I386/WST_CZEC.FO_
.cab
I386/WST_ENGL.FO_
.cab
I386/WST_FREN.FO_
.cab
I386/WST_GERM.FO_
.cab
I386/WST_ITAL.FO_
.cab
I386/WST_SPAN.FO_
.cab
I386/WST_SWED.FO_
.cab
I386/WTSAPI32.DL_
.cab
I386/WTV0.IN_
.cab
I386/WTV1.IN_
.cab
I386/WTV2.IN_
.cab
I386/WTV3.IN_
.cab
I386/WTV4.IN_
.cab
I386/WTV5.IN_
.cab
I386/WUAPI.DL_
.cab
I386/WUAU.AD_
.cab
I386/WUAU.CH_
.cab
I386/WUAUCLT.EX_
.cab
I386/WUAUCLT1.EX_
.cab
I386/WUAUCPL.CP_
.cab
I386/WUAUENG.DL_
.cab
I386/WUAUENG1.DL_
.cab
I386/WUAUHELP.CH_
.cab
I386/WUAUSERV.DL_
.cab
I386/WUCLTUI.DL_
.cab
I386/WUPDMGR.EX_
.cab
I386/WUPS.DL_
.cab
I386/WUWEB.DL_
.cab
I386/WXPRD.MS_
.cab
I386/WXPSP1RD.MS_
.cab
I386/WXPSP2RD.MS_
.cab
I386/WZCDLG.DL_
.cab
I386/XACTSRV.DL_
.cab
I386/XCCI20.DL_
.cab
I386/XCCIHELP.EX_
.cab
I386/XCOPY.EX_
.cab
I386/XENROLL.DL_
.cab
I386/XFP.XM_
.cab
I386/XJIS.NL_
.cab
I386/XML.XS_
.cab
I386/XMLLITE.DL_
.cab
I386/XMLPROV.DL_
.cab
I386/XMLPROVI.DL_
.cab
I386/XMLP_BDG.XD_
.cab
I386/XMLP_BEC.XD_
.cab
I386/XMLP_BEU.XD_
.cab
I386/XMLP_ECP.XD_
.cab
I386/XMLP_ECU.XD_
.cab
I386/XMLP_FCD.XD_
.cab
I386/XMLP_FCW.XD_
.cab
I386/XMLP_HLP.XD_
.cab
I386/XMLP_LOC.XD_
.cab
I386/XMLP_MAS.XD_
.cab
I386/XMLP_MCC.XD_
.cab
I386/XMLP_MCU.XD_
.cab
I386/XMLP_MPC.XD_
.cab
I386/XMLP_MPU.XD_
.cab
I386/XMLP_REG.XD_
.cab
I386/XMLP_SSD.XD_
.cab
I386/XMLP_WIZ.XD_
.cab
I386/XMLP_WP.XD_
.cab
I386/XOLEHLP.DL_
.cab
I386/XPBALLN.WA_
.cab
I386/XPBATCRT.WA_
.cab
I386/XPBATLOW.WA_
.cab
I386/XPBLKPOP.WA_
.cab
I386/XPCRTSTP.WA_
.cab
I386/XPDEF.WA_
.cab
I386/XPDING.WA_
.cab
I386/XPERROR.WA_
.cab
I386/XPEXCL.WA_
.cab
I386/XPHDFAIL.WA_
.cab
I386/XPHDINST.WA_
.cab
I386/XPHDREM.WA_
.cab
I386/XPINFBAR.WA_
.cab
I386/XPLOGOFF.WA_
.cab
I386/XPLOGON.WA_
.cab
I386/XPMENU.WA_
.cab
I386/XPMIN.WA_
.cab
I386/XPNETDG.EX_
.cab
I386/XPNETDG.XS_
.cab
I386/XPNOTIFY.WA_
.cab
I386/XPOB2RES.DL_
.cab
I386/XPPRINT.WA_
.cab
I386/XPRECYCL.WA_
.cab
I386/XPRESTOR.WA_
.cab
I386/XPRINGIN.WA_
.cab
I386/XPRNGOUT.WA_
.cab
I386/XPSHUTDN.WA_
.cab
I386/XPSP1RES.DL_
.cab
I386/XPSP2RES.DL_
.cab
I386/XPSP3RES.DL_
.cab
I386/XPSTART.WA_
.cab
I386/XPSTARTU.WA_
.cab
I386/XPTHT00D.GI_
.cab
I386/XPTHT00W.HT_
.cab
I386/XPTHT01D.GI_
.cab
I386/XPTHT01W.HT_
.cab
I386/XPTHT02D.JP_
.cab
I386/XPTHT02W.JP_
.cab
I386/XPTHT03D.JP_
.cab
I386/XPTHT03W.JP_
.cab
I386/XPTHT04D.JP_
.cab
I386/XPTHT04W.JP_
.cab
I386/XPTHT05D.JP_
.cab
I386/XPTHT05W.HT_
.cab
I386/XPTHT06D.JP_
.cab
I386/XPTHT06W.JP_
.cab
I386/XPTHT07D.JP_
.cab
I386/XPTHT07W.JP_
.cab
I386/XPTHT08D.JP_
.cab
I386/XPTHT08W.JP_
.cab
I386/XPTHT09D.JP_
.cab
I386/XPTHT09W.HT_
.cab
I386/XPTHT10D.JP_
.cab
I386/XPTHT10W.JP_
.cab
I386/XPTHT11D.JP_
.cab
I386/XPTHT11W.JP_
.cab
I386/XPTHT12D.JP_
.cab
I386/XPTHT12W.JP_
.cab
I386/XPTHT13D.JP_
.cab
I386/XPTHT13W.HT_
.cab
I386/XPTHT14D.JP_
.cab
I386/XPTHT14W.HT_
.cab
I386/XPTHT15D.JP_
.cab
I386/XPTHT15W.HT_
.cab
I386/XPTHT16D.JP_
.cab
I386/XPTHT16W.HT_
.cab
I386/XPTHT17D.JP_
.cab
I386/XPTHT17W.HT_
.cab
I386/XPTHT18D.JP_
.cab
I386/XPTHT18W.HT_
.cab
I386/XPTHT19D.JP_
.cab
I386/XPTHT19W.HT_
.cab
I386/XPTHT20D.JP_
.cab
I386/XPTHT20W.JP_
.cab
I386/XPTHT21D.JP_
.cab
I386/XPTHT21W.GI_
.cab
I386/XPTHT22D.JP_
.cab
I386/XPTHT22W.GI_
.cab
I386/XPTHT23D.JP_
.cab
I386/XPTHT23W.HT_
.cab
I386/XPTHT24D.JP_
.cab
I386/XPTHT24W.HT_
.cab
I386/XPTHT25D.JP_
.cab
I386/XPTHT25W.HT_
.cab
I386/XPTHT26D.JP_
.cab
I386/XPTHT26W.HT_
.cab
I386/XPTHT27D.JP_
.cab
I386/XPTHT27W.JS_
.cab
I386/XPTHT28D.JP_
.cab
I386/XPTHT28W.HT_
.cab
I386/XPTHT29D.JP_
.cab
I386/XPTHT29W.HT_
.cab
I386/XPTHT30D.JP_
.cab
I386/XPTHT30W.HT_
.cab
I386/XPTHT31D.JP_
.cab
I386/XPTHT31W.HT_
.cab
I386/XPTHT32D.JP_
.cab
I386/XPTHT32W.HT_
.cab
I386/XPTHT33D.JP_
.cab
I386/XPTHT33W.HT_
.cab
I386/XPTHT34D.JP_
.cab
I386/XPTHT34W.HT_
.cab
I386/XPTHT35D.JP_
.cab
I386/XPTHT35W.HT_
.cab
I386/XPTHT36D.JP_
.cab
I386/XPTHT36W.HT_
.cab
I386/XPTHT37D.JP_
.cab
I386/XPTHT37W.CS_
.cab
I386/XPTHT38D.JP_
.cab
I386/XPTHT38W.HT_
.cab
I386/XPTHT39D.JP_
.cab
I386/XPTHT39W.HT_
.cab
I386/XPTHT40D.JP_
.cab
I386/XPTHT40W.HT_
.cab
I386/XPTHT41D.JP_
.cab
I386/XPTHT41W.HT_
.cab
I386/XPTHT42D.JP_
.cab
I386/XPTHT43D.JP_
.cab
I386/XPTHT44D.GI_
.cab
I386/XPTHT45D.GI_
.cab
I386/XPTHT46D.GI_
.cab
I386/XPTHT47D.GI_
.cab
I386/XPTHT48D.GI_
.cab
I386/XPTHT49D.GI_
.cab
I386/XPTHT50D.GI_
.cab
I386/XPTHT51D.GI_
.cab
I386/XPTHT52D.GI_
.cab
I386/XPTHT53D.GI_
.cab
I386/XPTHT54D.GI_
.cab
I386/XPTHT55D.GI_
.cab
I386/XPTHT56D.JP_
.cab
I386/XPTHT57D.JP_
.cab
I386/XPTHT58D.JP_
.cab
I386/XPTHT59D.JP_
.cab
I386/XPTHT60D.JP_
.cab
I386/XPTHT61D.JP_
.cab
I386/XPTHT62D.JP_
.cab
I386/XPTHT63D.JP_
.cab
I386/XPTHT64D.JP_
.cab
I386/XPTHT65D.JP_
.cab
I386/XPTHT66D.JP_
.cab
I386/XPTHT67D.JP_
.cab
I386/XPTHT68D.GI_
.cab
I386/XPTHT69D.JP_
.cab
I386/XPTHT70D.JP_
.cab
I386/XPTHT71D.JP_
.cab
I386/XPTHT72D.JP_
.cab
I386/XPTHT73D.JP_
.cab
I386/XPTHT74D.JP_
.cab
I386/XPTHT75D.JP_
.cab
I386/XPTHT76D.JP_
.cab
I386/XPTHT77D.JP_
.cab
I386/XPTHT78D.JP_
.cab
I386/XPTHT79D.JP_
.cab
I386/XPTHT80D.JP_
.cab
I386/XPTHT81D.JP_
.cab
I386/XSCAN_XP.IN_
.cab
I386/XSLMAP.XM_
.cab
I386/YAHOO.BM_
.cab
I386/ZAPOTEC.BM_
.cab
I386/ZCLIENTM.EX_
.cab
I386/ZCOREM.DL_
.cab
I386/ZEEVERM.DL_
.cab
I386/ZIPFLDR.DL_
.cab
I386/ZNETM.DL_
.cab
I386/ZONECLIM.DL_
.cab
I386/ZONELIBM.DL_
.cab
I386/ZONEOC.DL_
.cab
I386/_DEFAULT.PI_
.cab
README.HTM
.html
SETUP.EXE
.exe windows:5 windows x86 arch:x86

8b73ee96ba579ee42683989b02b9a731

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

autorun.pdb

Imports

advapi32

RegQueryValueExA
RegOpenKeyExA
RegCloseKey

kernel32

GetFileAttributesA
SetErrorMode
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetStartupInfoA
GetCommandLineA
ExitProcess
WriteFile
GetStdHandle
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetFileType
HeapDestroy
HeapCreate
VirtualFree
HeapFree
HeapAlloc
LoadLibraryA
GetOEMCP
VirtualAlloc
HeapReAlloc
RtlUnwind
InterlockedExchange
VirtualQuery
GetStringTypeA
MultiByteToWideChar
GetStringTypeW
LCMapStringA
LCMapStringW
GetLocaleInfoA
VirtualProtect
LocalAlloc
WideCharToMultiByte
LocalFree
GetProcAddress
FindResourceExW
LoadResource
LockResource
GetCPInfo
IsDBCSLeadByte
GetACP
MulDiv
GetModuleHandleA
GetSystemInfo
GetVersionExA
CreateProcessA
ExpandEnvironmentStringsA
GetModuleFileNameA
lstrlenA
lstrcpyA
CreateMutexA
GetLastError
CloseHandle

gdi32

CreateHalftonePalette
SetBkMode
SetTextColor
UpdateColors
SelectPalette
UnrealizeObject
RealizePalette
BitBlt
SetMapMode
GetTextExtentPoint32A
CreateCompatibleDC
GetObjectA
SelectObject
TranslateCharsetInfo
GetDeviceCaps
EnumFontFamiliesExA
CreateFontIndirectA
CreatePatternBrush
CreateSolidBrush
DeleteObject
DeleteDC

user32

CharNextA
GetKeyboardType
PostMessageA
MessageBeep
SystemParametersInfoA
LoadImageA
GetSysColor
ReleaseDC
SetWindowPos
GetDlgItem
GetDC
InvalidateRect
UpdateWindow
ShowWindow
AdjustWindowRect
CreateWindowExA
DispatchMessageA
TranslateMessage
IsDialogMessageA
SendMessageA
GetDlgCtrlID
GetFocus
FindWindowA
EnableWindow
SetWindowTextA
PostQuitMessage
SetWindowLongA
EndPaint
BeginPaint
SetFocus
SetCursor
LoadCursorA
PtInRect
GetForegroundWindow
DrawFocusRect
DrawTextA
FillRect
CallWindowProcA
GetWindowLongA
GetParent
GetDesktopWindow
DefWindowProcA
RegisterClassA
LoadIconA
GetMessageA
SetForegroundWindow

shell32

ShellExecuteA

Sections

.text
Size: 32KB - Virtual size: 30KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1.2MB - Virtual size: 1.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
SETUPXP.HTM
.html
SUPPORT/TOOLS/ACT20.EXE
.exe windows:4 windows x86 arch:x86

4e86040d352b1a9efa37c2220e75d9d1

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

comctl32

ord17

kernel32

lstrcmpA
ReadFile
GetLastError
CreateFileA
IsValidCodePage
CloseHandle
WriteFile
SetFilePointer
FreeLibrary
GetProcAddress
GetSystemInfo
GetDiskFreeSpaceA
_lclose
OpenFile
GetDriveTypeA
CreateDirectoryA
GetFileAttributesA
RemoveDirectoryA
lstrcatA
GetVersionExA
GetCurrentProcess
GetCurrentThread
GetLocaleInfoA
GlobalUnlock
GlobalFree
GetUserDefaultLCID
GetTickCount
DeleteFileA
GetModuleFileNameA
lstrcmpiA
ExpandEnvironmentStringsA
GetPrivateProfileIntA
GetTempPathA
SetErrorMode
GetWindowsDirectoryA
GetTempFileNameA
WritePrivateProfileStringA
GetPrivateProfileStringA
lstrlenA
lstrcpyA
GlobalLock
VerLanguageNameA
GlobalAlloc
GetExitCodeProcess
GlobalHandle
CreateProcessA
LoadLibraryA
IsBadReadPtr
GetStringTypeW
GetStringTypeA
MultiByteToWideChar
FlushFileBuffers
SetUnhandledExceptionFilter
IsBadCodePtr
GetFileType
GetStdHandle
SetHandleCount
GetEnvironmentStringsW
GetEnvironmentStrings
WideCharToMultiByte
FreeEnvironmentStringsW
FreeEnvironmentStringsA
UnhandledExceptionFilter
IsBadWritePtr
HeapReAlloc
VirtualAlloc
VirtualFree
HeapCreate
HeapDestroy
GetEnvironmentVariableA
GetOEMCP
GetACP
GetCPInfo
GetVersion
GetCommandLineA
GetStartupInfoA
GetModuleHandleA
HeapAlloc
HeapFree
TerminateProcess
ExitProcess
RtlUnwind
LCMapStringA
LCMapStringW
SetStdHandle

user32

PostMessageA
SetTimer
LoadIconA
BeginPaint
KillTimer
PostQuitMessage
GetMessageA
TranslateMessage
DispatchMessageA
wsprintfA
DefWindowProcA
DialogBoxParamA
ShowWindow
GetDlgItem
EndDialog
CharNextA
CreateDialogParamA
DestroyWindow
IsWindow
IsDialogMessageA
PeekMessageA
SendMessageA
SendDlgItemMessageA
ExitWindowsEx
MsgWaitForMultipleObjects
CharPrevA
LoadStringA
GetDlgItemTextA
EnableWindow
SetCursor
GetParent
GetSystemMetrics
GetClientRect
GetWindowTextLengthA
GetWindowTextA
GetDC
SetWindowTextA
GetWindowRect
DrawIcon
CreateWindowExA
EndPaint
DestroyIcon
LoadCursorA
RegisterClassA
GetWindowPlacement
MoveWindow
ReleaseDC

gdi32

GetTextExtentPointA
TranslateCharsetInfo
DeleteObject
GetObjectA
CreateFontIndirectA
GetStockObject

advapi32

RegEnumValueA
RegCloseKey
RegOpenKeyExA
RegQueryValueExA
RegSetValueExA
FreeSid
AdjustTokenPrivileges
LookupPrivilegeValueA
OpenProcessToken
EqualSid
AllocateAndInitializeSid
GetTokenInformation
OpenThreadToken

version

GetFileVersionInfoSizeA
GetFileVersionInfoA
VerQueryValueA

Sections

.text
Size: 56KB - Virtual size: 52KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 20KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
SUPPORT/TOOLS/DEPLOY.CAB
.cab
SUPPORT/TOOLS/FASTWIZ.EXE
.exe windows:5 windows x86 arch:x86

1494de9b53e05fc1f40cb92afbdd6ce4

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

FreeSid
AllocateAndInitializeSid
EqualSid
GetTokenInformation
OpenProcessToken
AdjustTokenPrivileges
LookupPrivilegeValueA
RegCloseKey
RegDeleteValueA
RegOpenKeyExA
RegSetValueExA
RegQueryValueExA
RegCreateKeyExA
RegQueryInfoKeyA

kernel32

LocalFree
LocalAlloc
GetLastError
GetCurrentProcess
GetModuleFileNameA
lstrlenA
GetSystemDirectoryA
RemoveDirectoryA
FindClose
FindNextFileA
DeleteFileA
SetFileAttributesA
lstrcmpA
FindFirstFileA
lstrcatA
lstrcpyA
_lclose
_llseek
_lopen
WritePrivateProfileStringA
GetWindowsDirectoryA
CreateDirectoryA
GetFileAttributesA
ExpandEnvironmentStringsA
IsDBCSLeadByte
GetShortPathNameA
GetPrivateProfileStringA
GetPrivateProfileIntA
lstrcmpiA
GetProcAddress
GlobalUnlock
GlobalLock
GlobalAlloc
FreeResource
CloseHandle
LoadResource
SizeofResource
FindResourceA
ReadFile
WriteFile
SetFilePointer
SetFileTime
LocalFileTimeToFileTime
DosDateTimeToFileTime
SetCurrentDirectoryA
GetTempFileNameA
ExitProcess
CreateFileA
LoadLibraryExA
lstrcpynA
GetVolumeInformationA
FormatMessageA
GetCurrentDirectoryA
GetVersionExA
GetExitCodeProcess
WaitForSingleObject
CreateProcessA
GetTempPathA
GetSystemInfo
CreateMutexA
SetEvent
CreateEventA
CreateThread
ResetEvent
TerminateThread
GetDriveTypeA
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
LockResource
LoadLibraryA
GetDiskFreeSpaceA
MulDiv
EnumResourceLanguagesA
FreeLibrary
GlobalFree

gdi32

GetDeviceCaps

user32

ExitWindowsEx
wsprintfA
CharNextA
CharUpperA
CharPrevA
SetWindowLongA
GetWindowLongA
CallWindowProcA
DispatchMessageA
MsgWaitForMultipleObjects
PeekMessageA
SendMessageA
SetWindowPos
ReleaseDC
GetDC
GetWindowRect
SendDlgItemMessageA
GetDlgItem
SetForegroundWindow
SetWindowTextA
MessageBoxA
DialogBoxIndirectParamA
ShowWindow
EnableWindow
GetDlgItemTextA
EndDialog
GetDesktopWindow
MessageBeep
SetDlgItemTextA
LoadStringA
GetSystemMetrics

comctl32

ord17

version

GetFileVersionInfoA
VerQueryValueA
GetFileVersionInfoSizeA

Sections

.text
Size: 34KB - Virtual size: 33KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1.3MB - Virtual size: 1.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
SUPPORT/TOOLS/GBUNICNV.EXE
.exe windows:5 windows x86 arch:x86

b9b64f996a63f6638081ffe7bfe3982d

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

comdlg32

GetOpenFileNameA

mfc42

ord5199
ord2396
ord3346
ord5300
ord5302
ord2725
ord4079
ord4698
ord5307
ord5289
ord5714
ord2982
ord3147
ord3259
ord4465
ord3136
ord3262
ord2985
ord3081
ord2976
ord3830
ord3831
ord3825
ord3079
ord4080
ord4622
ord4424
ord3738
ord561
ord815
ord641
ord609
ord825
ord2514
ord2621
ord1134
ord1168
ord2863
ord2379
ord2575
ord6055
ord4078
ord1776
ord4396
ord5241
ord2385
ord5163
ord1089
ord4353
ord5290
ord3798
ord4837
ord4441
ord2648
ord2055
ord6376
ord3749
ord5065
ord1727
ord5261
ord2446
ord2124
ord5277
ord3402
ord4627
ord3574
ord567
ord1146
ord5265
ord4376
ord4853
ord4998
ord4710
ord3922
ord1775
ord4407
ord5280
ord4425
ord3597
ord324
ord4234
ord2358
ord2370
ord2302
ord4160
ord755
ord470
ord6334
ord2642
ord823
ord941
ord858
ord4129
ord1199
ord1200
ord1576
ord5731
ord2512
ord2554
ord4486
ord6375
ord4274
ord540
ord800
ord860
ord4673
ord6374
ord6052

msvcrt

__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
??1type_info@@UAE@XZ
__dllonexit
_onexit
_controlfp
_except_handler3
?terminate@@YAXXZ
_initterm
__getmainargs
_acmdln
exit
_cexit
_XcptFilter
_exit
_c_exit
wcsstr
wcschr
wcslen
memmove
atoi
isalpha
sprintf
isdigit
islower
atol
_strlwr
fopen
fclose
fwrite
_mbscmp
__CxxFrameHandler
__argc
__argv
_setmbcp

kernel32

WideCharToMultiByte
MultiByteToWideChar
GetStartupInfoA
GetModuleHandleA
lstrcpyA
GetFileSize
UnmapViewOfFile
CreateFileA
GetLastError
CreateFileMappingA
CloseHandle
MapViewOfFileEx
lstrlenA

user32

AppendMenuA
SendMessageA
GetSystemMenu
IsIconic
GetClientRect
EnableWindow
LoadIconA
GetSystemMetrics
wsprintfA
DrawIcon

Sections

.text
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 600B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
SUPPORT/TOOLS/MSRDPCLI.EXE
.exe windows:5 windows x86 arch:x86

1494de9b53e05fc1f40cb92afbdd6ce4

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

FreeSid
AllocateAndInitializeSid
EqualSid
GetTokenInformation
OpenProcessToken
AdjustTokenPrivileges
LookupPrivilegeValueA
RegCloseKey
RegDeleteValueA
RegOpenKeyExA
RegSetValueExA
RegQueryValueExA
RegCreateKeyExA
RegQueryInfoKeyA

kernel32

LocalFree
LocalAlloc
GetLastError
GetCurrentProcess
GetModuleFileNameA
lstrlenA
GetSystemDirectoryA
RemoveDirectoryA
FindClose
FindNextFileA
DeleteFileA
SetFileAttributesA
lstrcmpA
FindFirstFileA
lstrcatA
lstrcpyA
_lclose
_llseek
_lopen
WritePrivateProfileStringA
GetWindowsDirectoryA
CreateDirectoryA
GetFileAttributesA
ExpandEnvironmentStringsA
IsDBCSLeadByte
GetShortPathNameA
GetPrivateProfileStringA
GetPrivateProfileIntA
lstrcmpiA
GetProcAddress
GlobalUnlock
GlobalLock
GlobalAlloc
FreeResource
CloseHandle
LoadResource
SizeofResource
FindResourceA
ReadFile
WriteFile
SetFilePointer
SetFileTime
LocalFileTimeToFileTime
DosDateTimeToFileTime
SetCurrentDirectoryA
GetTempFileNameA
ExitProcess
CreateFileA
LoadLibraryExA
lstrcpynA
GetVolumeInformationA
FormatMessageA
GetCurrentDirectoryA
GetVersionExA
GetExitCodeProcess
WaitForSingleObject
CreateProcessA
GetTempPathA
GetSystemInfo
CreateMutexA
SetEvent
CreateEventA
CreateThread
ResetEvent
TerminateThread
GetDriveTypeA
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
LockResource
LoadLibraryA
GetDiskFreeSpaceA
MulDiv
EnumResourceLanguagesA
FreeLibrary
GlobalFree

gdi32

GetDeviceCaps

user32

ExitWindowsEx
wsprintfA
CharNextA
CharUpperA
CharPrevA
SetWindowLongA
GetWindowLongA
CallWindowProcA
DispatchMessageA
MsgWaitForMultipleObjects
PeekMessageA
SendMessageA
SetWindowPos
ReleaseDC
GetDC
GetWindowRect
SendDlgItemMessageA
GetDlgItem
SetForegroundWindow
SetWindowTextA
MessageBoxA
DialogBoxIndirectParamA
ShowWindow
EnableWindow
GetDlgItemTextA
EndDialog
GetDesktopWindow
MessageBeep
SetDlgItemTextA
LoadStringA
GetSystemMetrics

comctl32

ord17

version

GetFileVersionInfoA
VerQueryValueA
GetFileVersionInfoSizeA

Sections

.text
Size: 33KB - Virtual size: 33KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3.3MB - Virtual size: 3.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
SUPPORT/TOOLS/README.HTM
.html
SUPPORT/TOOLS/SETUP.EXE
.exe windows:5 windows x86 arch:x86

b8ec7e18090beb868ba675abfc6a35a6

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

setup.pdb

Imports

kernel32

GetLastError
CreateProcessW
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetVersionExA
ExitProcess
GetProcAddress
GetModuleHandleA
WriteFile
GetStdHandle
GetModuleFileNameA
GetModuleFileNameW
FreeEnvironmentStringsA
MultiByteToWideChar
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineA
GetCommandLineW
SetHandleCount
GetFileType
GetStartupInfoA
HeapDestroy
HeapCreate
VirtualFree
HeapFree
LoadLibraryA
HeapAlloc
VirtualAlloc
HeapReAlloc
RtlUnwind
InterlockedExchange
VirtualQuery
CompareStringA
WideCharToMultiByte
CompareStringW
SetEnvironmentVariableA
SetEnvironmentVariableW
VirtualProtect
GetSystemInfo
GetLocaleInfoA
GetCPInfo
GetStringTypeA
GetStringTypeW

user32

MessageBoxW

Sections

.text
Size: 18KB - Virtual size: 18KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
SUPPORT/TOOLS/SUPPORT.CAB
.cab
SUPPORT/TOOLS/SUPTOOLS.MSI
.msi
SUPPORT/TOOLS/SUP_PRO.CAB
.cab
SUPPORT/TOOLS/SUP_SRV.CAB
.cab
VALUEADD/3RDPARTY/MGMT/CITRIX/ICA32.EXE
.exe windows:4 windows x86 arch:x86

690c9e79bb34f8d71799aa65a51d3c5d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FormatMessageA
GetSystemDefaultLCID
GetProcAddress
GetTempFileNameA
MulDiv
CreateProcessA
WaitForSingleObject
GetStartupInfoA
IsDBCSLeadByte
Sleep
CompareStringA
SetFileTime
LocalFileTimeToFileTime
DosDateTimeToFileTime
FreeLibrary
RemoveDirectoryA
FindNextFileA
WritePrivateProfileSectionA
WritePrivateProfileStringA
lstrcpynA
GetPrivateProfileSectionA
WriteFile
DeleteFileA
LocalAlloc
LockResource
LoadResource
FindResourceA
SizeofResource
GetModuleHandleA
GlobalFree
GlobalUnlock
GlobalLock
GlobalAlloc
MultiByteToWideChar
lstrcmpiA
GetDiskFreeSpaceA
HeapAlloc
GetProcessHeap
HeapFree
GetModuleFileNameA
ExitProcess
CreateFileA
CreateFileMappingA
MapViewOfFile
UnmapViewOfFile
SetFileAttributesA
GetFileSize
ReadFile
SetFilePointer
FindFirstFileA
CreateDirectoryA
GetLastError
GetPrivateProfileStringA
FindClose
GetFileAttributesA
lstrcatA
lstrlenA
GetWindowsDirectoryA
lstrcpyA
GetSystemDirectoryA
GetTempPathA
MoveFileExA
LoadLibraryA
LocalFree
GetShortPathNameA
FlushFileBuffers
CloseHandle
SetStdHandle
IsBadCodePtr
IsBadReadPtr
SetUnhandledExceptionFilter
LCMapStringW
LCMapStringA
GetFileType
GetStdHandle
SetHandleCount
GetEnvironmentStringsW
GetEnvironmentStrings
WideCharToMultiByte
FreeEnvironmentStringsW
FreeEnvironmentStringsA
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetStringTypeW
GetStringTypeA
GetOEMCP
GetACP
GetCPInfo
IsBadWritePtr
HeapReAlloc
VirtualAlloc
VirtualFree
HeapCreate
HeapDestroy
GetVersion
GetCommandLineA
RtlUnwind

user32

GetParent
GetDlgItem
SendDlgItemMessageA
EnableWindow
CheckRadioButton
SetWindowTextA
GetWindowTextA
LoadStringA
LoadImageA
MessageBoxA
IsDlgButtonChecked
GetDlgItemTextA
SetDlgItemTextA
ReleaseDC
GetDC
GetWindowLongA
SetFocus
PostMessageA
GetWindow
wsprintfA
GetDesktopWindow
DestroyWindow
CreateDialogParamA
DispatchMessageA
TranslateMessage
GetSysColor
GetSysColorBrush
FillRect
BeginPaint
DrawTextA
EndPaint
GetClientRect
ScreenToClient
MoveWindow
SetParent
MapDialogRect
GetNextDlgTabItem
GetWindowRect
CreateDialogIndirectParamA
IsWindow
InvalidateRect
IsWindowEnabled
ShowWindow
UpdateWindow
IsDialogMessageA
SetWindowPos
GetActiveWindow
SetActiveWindow
CharNextA
LoadIconA
SendMessageA
PeekMessageA
SetWindowLongA

gdi32

DeleteObject
CreatePalette
RealizePalette
GetDeviceCaps
CreateDIBitmap
GetObjectA
SelectPalette
EnumFontFamiliesExA
GetTextExtentPointA
GetStockObject
TextOutA
DeleteDC
SelectObject
CreateCompatibleDC
SetBkMode
BitBlt
SetTextColor
CreateSolidBrush
SetBkColor
CreateFontIndirectA

advapi32

RegCloseKey
RegQueryValueExA
RegOpenKeyExA

shell32

ShellExecuteA
SHBrowseForFolderA
SHGetPathFromIDListA
SHGetMalloc

lz32

LZOpenFileA
LZCopy
LZClose

comctl32

ord17

Sections

.text
Size: 68KB - Virtual size: 65KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 72KB - Virtual size: 68KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
VALUEADD/3RDPARTY/MGMT/CITRIX/README.HTM
.html
VALUEADD/BANNER.GIF
.gif
VALUEADD/MSFT/FONTS/ARIALALS.TTF
VALUEADD/MSFT/FONTS/ARIALALT.TTF
VALUEADD/MSFT/MGMT/CIMV2R5/CIMV2R5.MOF
VALUEADD/MSFT/MGMT/CIMV2R5/README.TXT
VALUEADD/MSFT/MGMT/IAS/IASNT4.EXE
.exe windows:5 windows x86 arch:x86

c56a25fa4336eeb10723b3537ba4876d

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

advapi32

RegCloseKey
EqualSid
AllocateAndInitializeSid
GetTokenInformation
OpenProcessToken
AdjustTokenPrivileges
LookupPrivilegeValueA
FreeSid
RegDeleteValueA
RegOpenKeyExA
RegSetValueExA
RegQueryValueExA
RegCreateKeyExA
RegQueryInfoKeyA

kernel32

lstrcatA
GetFileAttributesA
GetShortPathNameA
LocalAlloc
GetLastError
GetCurrentProcess
GetPrivateProfileIntA
lstrcmpiA
lstrcpyA
GetModuleFileNameA
FreeLibrary
GetPrivateProfileStringA
lstrlenA
GetSystemDirectoryA
RemoveDirectoryA
GetProcAddress
FindNextFileA
DeleteFileA
SetFileAttributesA
lstrcmpA
FindFirstFileA
_lclose
_llseek
_lopen
WritePrivateProfileStringA
GetWindowsDirectoryA
LoadLibraryA
FindClose
GlobalFree
GlobalUnlock
GlobalLock
GlobalAlloc
IsDBCSLeadByte
ExitProcess
CloseHandle
GetStartupInfoA
GetCommandLineA
LoadResource
FindResourceA
CreateMutexA
SetEvent
CreateEventA
SetCurrentDirectoryA
CreateThread
ResetEvent
TerminateThread
LocalFree
FormatMessageA
GetExitCodeProcess
WaitForSingleObject
CreateProcessA
GetTempPathA
FreeResource
LockResource
SizeofResource
CreateFileA
ReadFile
WriteFile
SetFilePointer
SetFileTime
LocalFileTimeToFileTime
DosDateTimeToFileTime
GetTempFileNameA
GetSystemInfo
GetDriveTypeA
lstrcpynA
GetVolumeInformationA
GetCurrentDirectoryA
LoadLibraryExA
GetModuleHandleA
CreateDirectoryA
ExpandEnvironmentStringsA
GetVersionExA
GetDiskFreeSpaceA
MulDiv

gdi32

GetDeviceCaps

user32

wsprintfA
ExitWindowsEx
CharNextA
CharUpperA
EndDialog
GetDesktopWindow
CharPrevA
GetWindowLongA
CallWindowProcA
GetDlgItem
SetForegroundWindow
SetWindowTextA
SendDlgItemMessageA
SetWindowLongA
EnableWindow
SendMessageA
LoadStringA
MsgWaitForMultipleObjects
PeekMessageA
MessageBoxA
SetWindowPos
ReleaseDC
GetDC
GetWindowRect
ShowWindow
DialogBoxIndirectParamA
SetDlgItemTextA
MessageBeep
GetDlgItemTextA
DispatchMessageA

comctl32

ord17

version

GetFileVersionInfoA
VerQueryValueA
GetFileVersionInfoSizeA

Sections

.text
Size: 33KB - Virtual size: 32KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 457KB - Virtual size: 460KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
VALUEADD/MSFT/MGMT/IAS/README.HTM
.html
VALUEADD/MSFT/MGMT/PBA/PBAINST.EXE
.exe windows:5 windows x86 arch:x86

1494de9b53e05fc1f40cb92afbdd6ce4

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

FreeSid
AllocateAndInitializeSid
EqualSid
GetTokenInformation
OpenProcessToken
AdjustTokenPrivileges
LookupPrivilegeValueA
RegCloseKey
RegDeleteValueA
RegOpenKeyExA
RegSetValueExA
RegQueryValueExA
RegCreateKeyExA
RegQueryInfoKeyA

kernel32

LocalFree
LocalAlloc
GetLastError
GetCurrentProcess
GetModuleFileNameA
lstrlenA
GetSystemDirectoryA
RemoveDirectoryA
FindClose
FindNextFileA
DeleteFileA
SetFileAttributesA
lstrcmpA
FindFirstFileA
lstrcatA
lstrcpyA
_lclose
_llseek
_lopen
WritePrivateProfileStringA
GetWindowsDirectoryA
CreateDirectoryA
GetFileAttributesA
ExpandEnvironmentStringsA
IsDBCSLeadByte
GetShortPathNameA
GetPrivateProfileStringA
GetPrivateProfileIntA
lstrcmpiA
GetProcAddress
GlobalUnlock
GlobalLock
GlobalAlloc
FreeResource
CloseHandle
LoadResource
SizeofResource
FindResourceA
ReadFile
WriteFile
SetFilePointer
SetFileTime
LocalFileTimeToFileTime
DosDateTimeToFileTime
SetCurrentDirectoryA
GetTempFileNameA
ExitProcess
CreateFileA
LoadLibraryExA
lstrcpynA
GetVolumeInformationA
FormatMessageA
GetCurrentDirectoryA
GetVersionExA
GetExitCodeProcess
WaitForSingleObject
CreateProcessA
GetTempPathA
GetSystemInfo
CreateMutexA
SetEvent
CreateEventA
CreateThread
ResetEvent
TerminateThread
GetDriveTypeA
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
LockResource
LoadLibraryA
GetDiskFreeSpaceA
MulDiv
EnumResourceLanguagesA
FreeLibrary
GlobalFree

gdi32

GetDeviceCaps

user32

ExitWindowsEx
wsprintfA
CharNextA
CharUpperA
CharPrevA
SetWindowLongA
GetWindowLongA
CallWindowProcA
DispatchMessageA
MsgWaitForMultipleObjects
PeekMessageA
SendMessageA
SetWindowPos
ReleaseDC
GetDC
GetWindowRect
SendDlgItemMessageA
GetDlgItem
SetForegroundWindow
SetWindowTextA
MessageBoxA
DialogBoxIndirectParamA
ShowWindow
EnableWindow
GetDlgItemTextA
EndDialog
GetDesktopWindow
MessageBeep
SetDlgItemTextA
LoadStringA
GetSystemMetrics

comctl32

ord17

version

GetFileVersionInfoA
VerQueryValueA
GetFileVersionInfoSizeA

Sections

.text
Size: 33KB - Virtual size: 33KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 608KB - Virtual size: 612KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
VALUEADD/MSFT/MGMT/PBA/README.HTM
.html
VALUEADD/MSFT/MGMT/WBEMODBC/README.HTM
.html
VALUEADD/MSFT/MGMT/WBEMODBC/WBEMODBC.MSI
.msi
VALUEADD/MSFT/NET/NETBEUI/NBF.SYS
.sys windows:5 windows x86 arch:x86

2fd71c50f533704b943832f1504817e3

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

nbf.pdb

Imports

ntoskrnl.exe

KeCancelTimer
IoDeleteDevice
ExDeleteResourceLite
ExReleaseFastMutexUnsafe
ExAcquireFastMutexUnsafe
ExInitializeResourceLite
IoCreateDevice
KeInsertQueueDpc
RtlDelete
ZwOpenKey
ZwClose
RtlQueryRegistryValues
ZwQueryValueKey
ZwSetValueKey
RtlEqualUnicodeString
ExfInterlockedRemoveHeadList
IoWriteErrorLogEntry
IoAllocateErrorLogEntry
wcslen
KeQuerySystemTime
KeNumberProcessors
KeInitializeEvent
KeResetEvent
KeWaitForSingleObject
KeSetEvent
ExfInterlockedInsertHeadList
_allshr
KeQueryTimeIncrement
memmove
_except_handler3
IoFileObjectType
ObReferenceObjectByHandle
RtlInitUnicodeString
IoGetDeviceObjectPointer
ObfReferenceObject
ObfDereferenceObject
IoBuildDeviceIoControlRequest
IofCallDriver
IoSetShareAccess
SeAssignSecurity
ExfInterlockedInsertTailList
SeAccessCheck
IoCheckShareAccess
KeInitializeSpinLock
KeInitializeDpc
KeInitializeTimer
ExfInterlockedPushEntryList
KefAcquireSpinLockAtDpcLevel
KefReleaseSpinLockFromDpcLevel
KeTickCount
ExInterlockedAddLargeStatistic
KeEnterCriticalRegion
ExAcquireResourceExclusiveLite
IoRemoveShareAccess
ExReleaseResourceLite
KeLeaveCriticalRegion
ExfInterlockedAddUlong
DbgPrint
IofCompleteRequest
ExAllocatePoolWithTag
ExQueueWorkItem
SeDeassignSecurity
KeSetTimer
IoFreeMdl
ExFreePoolWithTag
ExfInterlockedPopEntryList
DbgBreakPoint
MmMapLockedPagesSpecifyCache
MmMapLockedPages
IoAcquireCancelSpinLock
ZwCreateKey
IoReleaseCancelSpinLock

hal

KfAcquireSpinLock
KfLowerIrql
KfRaiseIrql
KfReleaseSpinLock

ndis.sys

NdisFreePacketPool
NdisFreePacket
NdisUnchainBufferAtFront
NdisAllocateBuffer
NdisAllocatePacket
NdisSetPacketPoolProtocolId
NdisAllocatePacketPoolEx
NdisCopyFromPacketToPacket
NdisFreeBufferPool
NdisDeregisterProtocol
NdisRequest
NdisAllocateBufferPool
NdisOpenAdapter
NdisCopyBuffer
NdisCompletePnPEvent
NdisRegisterProtocol
NdisCloseAdapter

tdi.sys

TdiDefaultErrorHandler
TdiDefaultRcvExpeditedHandler
TdiDefaultRcvDatagramHandler
TdiDefaultReceiveHandler
TdiDefaultDisconnectHandler
TdiDefaultConnectHandler
TdiBuildNetbiosAddress
TdiCopyBufferToMdl
TdiRegisterNetAddress
TdiRegisterDeviceObject
TdiDeregisterProvider
TdiMapUserRequest
TdiRegisterProvider
TdiInitialize
TdiDeregisterDeviceObject
TdiDeregisterNetAddress
TdiProviderReady
TdiPnPPowerRequest

Sections

.text
Size: 79KB - Virtual size: 78KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 896B - Virtual size: 780B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 384B - Virtual size: 264B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

PAGE
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

INIT
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
VALUEADD/MSFT/NET/NETBEUI/NETBEUI.TXT
VALUEADD/MSFT/NET/NETBEUI/NETNBF.INF
VALUEADD/MSFT/NET/TOOLS/TTCP.EXE
.exe windows:5 windows x86 arch:x86

99657691b0e594d2a789996abb8500a0

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FreeLibrary
GetProcAddress
LoadLibraryA
GetSystemDirectoryA
QueryPerformanceCounter
QueryPerformanceFrequency
Sleep
ReadFile
GetOverlappedResult
WaitForMultipleObjects
WriteFile
CreateEventA
GetLastError
CreateFileA
GetModuleHandleA
GetCommandLineA
GetVersionExA
HeapAlloc
HeapFree
ExitProcess
GetStdHandle
GetModuleFileNameA
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetFileType
GetStartupInfoA
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
HeapReAlloc
SetFilePointer
GetACP
GetOEMCP
GetCPInfo
GetStringTypeA
MultiByteToWideChar
GetStringTypeW
SetStdHandle
LCMapStringA
LCMapStringW
RtlUnwind
GetLocaleInfoA
VirtualProtect
GetSystemInfo
VirtualQuery
FlushFileBuffers
CloseHandle
FormatMessageA
LocalFree

ws2_32

gethostbyaddr
ntohs
getservbyport
WSACleanup
recv
recvfrom
send
sendto
closesocket
accept
htons
select
listen
getsockname
getpeername
connect
bind
socket
setsockopt
WSAStartup
getservbyname
htonl
inet_addr
inet_ntoa
__WSAFDIsSet
WSAGetLastError
gethostbyname

ntdll

RtlIpv4StringToAddressA
RtlIpv6StringToAddressA

mswsock

TransmitFile
s_perror

user32

CharToOemBuffA

Sections

.text
Size: 37KB - Virtual size: 36KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
VALUEADD/MSFT/USMT/ANSI/ICONLIB.DLL
.dll windows:5 windows x86 arch:x86

96a8ec412858a637750b430c36c75b02

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_REMOVABLE_RUN_FROM_SWAP
IMAGE_FILE_NET_RUN_FROM_SWAP
IMAGE_FILE_DLL

Imports

msvcrt

_adjust_fdiv
malloc
_initterm
free

kernel32

DisableThreadLibraryCalls

Sections

.text
Size: 1024B - Virtual size: 724B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 20B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 1024B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 94B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
VALUEADD/MSFT/USMT/ANSI/LOG.DLL
.dll windows:5 windows x86 arch:x86

703e5fd1ee3556bbd04f99569c7a3305

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_REMOVABLE_RUN_FROM_SWAP
IMAGE_FILE_NET_RUN_FROM_SWAP
IMAGE_FILE_DLL

Imports

msvcrt

_except_handler3
_adjust_fdiv
malloc
_initterm
free
wcsstr
_mbsstr
_vsnprintf
fwprintf
_mbslen
_iob
fprintf
_snwprintf
_snprintf
_pctype
iswctype
_mbsnextc
_ismbcspace
wcslen
wcschr
strchr
_mbsicmp
setlocale
_vsnwprintf
__lconv_init
_mbsinc

kernel32

HeapFree
ExitProcess
DebugBreak
EnterCriticalSection
LeaveCriticalSection
WriteFile
HeapReAlloc
HeapAlloc
CloseHandle
SetFilePointer
CreateFileA
GetCurrentThreadId
OutputDebugStringA
OutputDebugStringW
FormatMessageA
GetLastError
FormatMessageW
DeleteFileA
SetFileAttributesA
GetWindowsDirectoryA
ReleaseMutex
SetLastError
WaitForSingleObject
CreateMutexA
MultiByteToWideChar
WideCharToMultiByte
IsDBCSLeadByte
CreateEventA
GetProcessHeap
GetModuleHandleA
GetVersionExA
InitializeCriticalSection

user32

MessageBoxA

setupapi

SetupCloseInfFile

Exports

Exports

DllMain
LogA
LogBegin
LogDeleteOnNextInit
LogDirectA
LogDirectW
LogEnd
LogIfA
LogIfW
LogLineA
LogLineW
LogReInitA
LogReInitW
LogSetErrorDest
LogSetVerboseBitmap
LogSetVerboseLevel
LogTitleA
LogTitleW
LogW
SuppressAllLogPopups

Sections

.text
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 1024B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
VALUEADD/MSFT/USMT/ANSI/MIGAPP.INF
VALUEADD/MSFT/USMT/ANSI/MIGISM.DLL
.dll windows:5 windows x86 arch:x86

d6047f68429cdb8b81e16f5f29bd28e3

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_REMOVABLE_RUN_FROM_SWAP
IMAGE_FILE_NET_RUN_FROM_SWAP
IMAGE_FILE_DLL

Imports

msvcrt

free
_initterm
malloc
_adjust_fdiv
__lconv_init
setlocale
wcsrchr
_wcsicmp
strtoul
wcslen
sscanf
_mbslen
wcschr
_except_handler3
isalpha
isalnum
_mbsnicmp
_mbsicmp
_mbsdec
_ismbblead
_mbsinc
strchr
_mbsrchr
towlower
_mbsnextc
memmove
iswctype
_ismbcspace
wcsncmp
wcscmp
_wtoi
atoi
_wcsnicmp
wcscspn
_mbsncmp
_mbctolower
_mbschr

kernel32

GetCurrentProcess
DeleteFileA
SetFileAttributesA
GetTempPathA
GetDiskFreeSpaceA
FlushFileBuffers
HeapFree
CloseHandle
CopyFileA
GetWindowsDirectoryA
GetLastError
WriteFile
GetVersionExA
CreateEventA
SetErrorMode
DeviceIoControl
CreateFileA
RemoveDirectoryA
CreateDirectoryA
SetFileTime
LoadLibraryA
GetProcAddress
LocalFree
FreeLibrary
SearchPathA
GetFullPathNameA
GetModuleFileNameA
GetFileSize
SetLastError
WaitForSingleObject
GetModuleHandleA
FindNextFileA
GetDriveTypeA
GetLogicalDriveStringsA
SetEvent
UnmapViewOfFile
GetPrivateProfileStringA
GetPrivateProfileIntA
GetCurrentDirectoryA
HeapReAlloc
ExitProcess
DebugBreak
MultiByteToWideChar
WideCharToMultiByte
EnterCriticalSection
LeaveCriticalSection
HeapAlloc
FormatMessageA
IsDBCSLeadByte
GetTempFileNameA
ReadFile
SetEndOfFile
InitializeCriticalSection
CreateFileW
GetProcessHeap
DeleteCriticalSection
FindClose
FindFirstFileA
GetFileAttributesA
MapViewOfFile
CreateFileMappingA
CreateFileMappingW
SetFilePointer

user32

MessageBoxA
wsprintfA
CharLowerW
CharLowerA

advapi32

OpenProcessToken
RegEnumKeyA
RegEnumValueA
RegDeleteKeyA
RegCloseKey
RegOpenKeyExA
RegCreateKeyExA
RegQueryInfoKeyA
RegQueryValueExA
GetTokenInformation
LookupAccountSidA
LookupAccountNameA
GetLengthSid
RegLoadKeyA
RegUnLoadKeyA
RegDeleteValueA
RegSetValueExA
LookupPrivilegeValueA
AdjustTokenPrivileges

log

LogReInitA
LogBegin
LogA
LogEnd

setupapi

SetupOpenInfFileA
SetupOpenAppendInfFileA
SetupCloseInfFile
SetupFindFirstLineA
SetupGetStringFieldA
SetupFindNextLine

Exports

Exports

DllMain
IsmAbandonObjectIdOnCollision
IsmAbandonObjectOnCollision
IsmAbortApplyObjectEnum
IsmAbortComponentEnum
IsmAbortObjectAttributeEnum
IsmAbortObjectEnum
IsmAbortObjectOperationEnum
IsmAbortObjectPropertyEnum
IsmAbortObjectWithAttributeEnum
IsmAbortObjectWithOperationEnum
IsmAbortObjectWithPropertyEnum
IsmAbortPersistentObjectEnum
IsmAbortTransportEnum
IsmAcquireObjectEx
IsmAddComponentAlias
IsmAddControlFile
IsmAddPropertyDataToObject
IsmAddPropertyDataToObjectId
IsmAddPropertyToObject
IsmAddPropertyToObjectId
IsmAddToPhysicalEnum
IsmAppendEnvironmentMultiSz
IsmAppendEnvironmentString
IsmCanWriteRollbackJournal
IsmClearAbandonObjectIdOnCollision
IsmClearAbandonObjectOnCollision
IsmClearApplyOnObject
IsmClearApplyOnObjectId
IsmClearAttributeOnObject
IsmClearAttributeOnObjectId
IsmClearNonCriticalFlagOnObject
IsmClearNonCriticalFlagOnObjectId
IsmClearOperationOnObject
IsmClearOperationOnObjectId
IsmClearPersistenceOnObject
IsmClearPersistenceOnObjectId
IsmConvertMultiSzToObject
IsmConvertObjectContentToAnsi
IsmConvertObjectContentToUnicode
IsmConvertObjectToMultiSz
IsmCreateParsedPattern
IsmCreateUser
IsmCurrentlyExecuting
IsmDeleteEnvironmentVariable
IsmDestroyObjectHandle
IsmDestroyObjectString
IsmDestroyParsedPattern
IsmDoesObjectExist
IsmDoesRollbackDataExist
IsmEnumFirstApplyObject
IsmEnumFirstComponent
IsmEnumFirstDestinationObjectEx
IsmEnumFirstObjectAttribute
IsmEnumFirstObjectAttributeById
IsmEnumFirstObjectOperation
IsmEnumFirstObjectOperationById
IsmEnumFirstObjectProperty
IsmEnumFirstObjectPropertyById
IsmEnumFirstObjectWithAttribute
IsmEnumFirstObjectWithOperation
IsmEnumFirstObjectWithProperty
IsmEnumFirstPersistentObject
IsmEnumFirstSourceObjectEx
IsmEnumFirstTransport
IsmEnumNextApplyObject
IsmEnumNextComponent
IsmEnumNextObject
IsmEnumNextObjectAttribute
IsmEnumNextObjectOperation
IsmEnumNextObjectProperty
IsmEnumNextObjectWithAttribute
IsmEnumNextObjectWithOperation
IsmEnumNextObjectWithProperty
IsmEnumNextPersistentObject
IsmEnumNextTransport
IsmExecute
IsmExecuteFunction
IsmExecuteHooks
IsmFilterObject
IsmFreeConvertedObjectContent
IsmGetAttributeGroup
IsmGetAttributeName
IsmGetControlFile
IsmGetCurrentSidString
IsmGetEnvironmentCallback
IsmGetEnvironmentData
IsmGetEnvironmentMultiSz
IsmGetEnvironmentString
IsmGetEnvironmentValue
IsmGetFirstObjectTypeId
IsmGetMappedUserData
IsmGetNextObjectTypeId
IsmGetObjectIdFromName
IsmGetObjectOperationData
IsmGetObjectOperationDataById
IsmGetObjectTypeId
IsmGetObjectTypeName
IsmGetObjectsStatistics
IsmGetOperationGroup
IsmGetOperationName
IsmGetOsVersionInfo
IsmGetPropertyData
IsmGetPropertyFromObject
IsmGetPropertyFromObjectId
IsmGetPropertyGroup
IsmGetPropertyName
IsmGetRealPlatform
IsmGetTempDirectory
IsmGetTempFile
IsmGetTempStorage
IsmGetTransportVariable
IsmHookEnumeration
IsmInitialize
IsmIsApplyObject
IsmIsApplyObjectId
IsmIsAttributeSetOnObject
IsmIsAttributeSetOnObjectId
IsmIsComponentSelected
IsmIsEnvironmentFlagSet
IsmIsNonCriticalObject
IsmIsNonCriticalObjectId
IsmIsObjectAbandonedOnCollision
IsmIsObjectHandleLeafOnly
IsmIsObjectHandleNodeOnly
IsmIsObjectIdAbandonedOnCollision
IsmIsOperationSetOnObject
IsmIsOperationSetOnObjectId
IsmIsPersistentObject
IsmIsPersistentObjectId
IsmIsPropertySetOnObject
IsmIsPropertySetOnObjectId
IsmLoad
IsmLockAttribute
IsmLockObject
IsmLockObjectId
IsmLockOperation
IsmLockProperty
IsmMakeApplyObject
IsmMakeApplyObjectId
IsmMakeNonCriticalObject
IsmMakeNonCriticalObjectId
IsmMakePersistentObject
IsmMakePersistentObjectId
IsmParsedPatternMatch
IsmParsedPatternMatchEx
IsmPreserveJournal
IsmProhibitPhysicalEnum
IsmQueueEnumeration
IsmRecordDelayedOperation
IsmRecordOperation
IsmRegisterAttribute
IsmRegisterDynamicExclusion
IsmRegisterGlobalApplyCallback
IsmRegisterGlobalFilterCallback
IsmRegisterObjectType
IsmRegisterOperation
IsmRegisterOperationApplyCallback
IsmRegisterOperationData
IsmRegisterOperationFilterCallback
IsmRegisterPhysicalAcquireHook
IsmRegisterPostEnumerationCallback
IsmRegisterPreEnumerationCallback
IsmRegisterProgressBarCallback
IsmRegisterProgressSlice
IsmRegisterProperty
IsmRegisterPropertyData
IsmRegisterRestoreCallback
IsmRegisterStaticExclusion
IsmRegisterTransport
IsmRegisterTypePostEnumerationCallback
IsmRegisterTypePreEnumerationCallback
IsmReleaseMemory
IsmReleaseObject
IsmRemoveAllUserSuppliedComponents
IsmRemovePhysicalObject
IsmRemovePropertyData
IsmRemovePropertyFromObject
IsmRemovePropertyFromObjectId
IsmReplacePhysicalObject
IsmResumeLoad
IsmResumeSave
IsmRollback
IsmSave
IsmSelectComponent
IsmSelectMasterGroup
IsmSelectPreferredAlias
IsmSelectTransport
IsmSendMessageToApp
IsmSetAttributeOnObject
IsmSetAttributeOnObjectId
IsmSetCancel
IsmSetDelayedOperationsCommand
IsmSetEnvironmentCallback
IsmSetEnvironmentData
IsmSetEnvironmentFlag
IsmSetEnvironmentMultiSz
IsmSetEnvironmentString
IsmSetEnvironmentValue
IsmSetOperationOnObject
IsmSetOperationOnObject2
IsmSetOperationOnObjectId
IsmSetOperationOnObjectId2
IsmSetPlatform
IsmSetRollbackJournalType
IsmSetTransportStorage
IsmSetTransportVariable
IsmStartEtmModules
IsmStartTransport
IsmTerminate
IsmTickProgressBar
TrackedIsmCreateObjectHandle
TrackedIsmCreateObjectPattern
TrackedIsmCreateObjectStringsFromHandleEx
TrackedIsmCreateSimpleObjectPattern
TrackedIsmDuplicateString
TrackedIsmExpandEnvironmentString
TrackedIsmGetLongName
TrackedIsmGetMemory
TrackedIsmGetNativeObjectName

Sections

.text
Size: 156KB - Virtual size: 156KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
VALUEADD/MSFT/USMT/ANSI/MIGISM.INF
VALUEADD/MSFT/USMT/ANSI/MIGSYS.INF
VALUEADD/MSFT/USMT/ANSI/MIGUSER.INF
VALUEADD/MSFT/USMT/ANSI/MIGWIZ.INF
VALUEADD/MSFT/USMT/ANSI/SCANSTATE.EXE
.exe windows:5 windows x86 arch:x86

c8a2514781a382e265b03d5663308e9a

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
__initenv
_cexit
__p__fmode
__set_app_type
memmove
_except_handler3
_mbsnextc
setlocale
_mbsdec
strchr
_XcptFilter
_exit
_c_exit
sprintf
atoi
_mbsinc
_mbsrchr
_mbsicmp
_mbschr
printf
__p__commode
_mbslen
_mbsnicmp
_mbsncmp
_ismbblead
sscanf
_mbctolower
_controlfp
__lconv_init
exit

advapi32

RegOpenKeyExA
RegCloseKey
LookupAccountNameW
GetUserNameA
RegQueryValueExA

kernel32

EnterCriticalSection
LeaveCriticalSection
HeapReAlloc
ExitProcess
DebugBreak
DeleteFileA
Sleep
HeapFree
HeapAlloc
GetProcessHeap
FreeLibrary
GetProcAddress
LoadLibraryA
SetLastError
SetConsoleCtrlHandler
GetModuleFileNameA
GetWindowsDirectoryA
GetModuleHandleA
FormatMessageA
LocalFree
GetFullPathNameA
IsDBCSLeadByte
FlushFileBuffers
CreateDirectoryA
ReadFile
SetFilePointer
CreateFileA
GetFileAttributesA
SetErrorMode
FindFirstFileA
GetLastError
FindClose
WriteFile
DeleteCriticalSection
GetVersionExA
InitializeCriticalSection
CloseHandle
CreateEventA
GetCurrentDirectoryA
GetEnvironmentStrings

setupapi

SetupOpenInfFileA
SetupOpenAppendInfFileA
SetupCloseInfFile
SetupFindNextLine
SetupGetStringFieldA
SetupFindFirstLineA

log

LogSetVerboseBitmap
LogDeleteOnNextInit
LogReInitA
LogIfA
LogDirectA
LogBegin
LogA
LogEnd
SuppressAllLogPopups

migism

IsmResumeSave
IsmSelectTransport
IsmRegisterTransport
IsmStartTransport
IsmTickProgressBar
IsmStartEtmModules
IsmSetEnvironmentFlag
IsmSetEnvironmentValue
IsmAddControlFile
IsmSetEnvironmentString
IsmSelectComponent
IsmSetEnvironmentData
IsmSetPlatform
IsmInitialize
IsmExecute
IsmSelectMasterGroup
IsmSave
IsmSetCancel
IsmCurrentlyExecuting
IsmSetTransportStorage
IsmTerminate

user32

MessageBoxA
CharLowerA

Sections

.text
Size: 17KB - Virtual size: 17KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
VALUEADD/MSFT/USMT/ANSI/SCRIPT.DLL
.dll windows:5 windows x86 arch:x86

6a578ccf4836a9a6461dc5cf54f4868d

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_REMOVABLE_RUN_FROM_SWAP
IMAGE_FILE_NET_RUN_FROM_SWAP
IMAGE_FILE_DLL

Imports

msvcrt

setlocale
wcschr
_mbsnextc
_wcsicmp
towlower
_ultoa
strtoul
_mbsnbicmp
_mbsstr
sprintf
_ismbcdigit
sscanf
_except_handler3
strchr
_ismbcalpha
atoi
_mbslen
_mbsnicmp
__lconv_init
_adjust_fdiv
malloc
_initterm
free
_mbsdec
_ismbblead
_mbsinc
_mbsrchr
_mbschr
memmove
iswctype
_ismbcspace
_mbsncmp
wcscspn
wcslen
_mbsicmp

kernel32

FindResourceA
LoadResource
CloseHandle
HeapFree
GetCurrentProcess
GetACP
GetVersion
GetFileAttributesA
LoadLibraryA
GetWindowsDirectoryA
GetEnvironmentVariableA
GetProcAddress
GetSystemDirectoryA
GetDriveTypeA
GetLogicalDriveStringsA
ReadFile
GetDiskFreeSpaceA
GetModuleHandleA
GetPrivateProfileStringA
GetLastError
FreeLibrary
DeleteFileA
GetExitCodeProcess
WaitForSingleObject
LockResource
SizeofResource
FreeResource
UpdateResourceA
EndUpdateResourceA
GetTempPathA
BeginUpdateResourceA
SetLastError
CreateFileA
LoadLibraryExA
EnumResourceNamesA
CopyFileA
SetFileAttributesA
SearchPathA
SetErrorMode
FindFirstFileA
FindClose
FormatMessageA
LocalFree
IsDBCSLeadByte
HeapReAlloc
HeapAlloc
ExitProcess
DebugBreak
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
GetProcessHeap
GetVersionExA
InitializeCriticalSection
CreateProcessA
CreateEventA
SetFilePointer
CreateDirectoryA
MultiByteToWideChar
GetPrivateProfileIntA
GetFileSize
FindNextFileA
RemoveDirectoryA

user32

CharLowerA
wsprintfA
CharLowerBuffA
CharLowerW
MessageBoxA

advapi32

RegQueryValueExA
GetUserNameA
OpenProcessToken
GetTokenInformation
LookupAccountSidA
RegCloseKey
RegOpenKeyExA
RegEnumKeyA

shell32

SHGetPathFromIDListA
SHGetSpecialFolderLocation
SHGetMalloc

ole32

CoInitialize
CoUninitialize

log

LogIfA
LogBegin
LogA
LogEnd
LogReInitA

migism

IsmEnumFirstDestinationObjectEx
IsmIsObjectAbandonedOnCollision
IsmSetOperationOnObjectId
IsmFilterObject
IsmIsApplyObjectId
IsmRegisterProgressSlice
IsmGetObjectsStatistics
IsmClearApplyOnObject
IsmIsComponentSelected
TrackedIsmGetMemory
IsmIsObjectHandleNodeOnly
IsmSetEnvironmentFlag
IsmGetPropertyData
IsmGetPropertyFromObject
IsmRegisterOperationApplyCallback
IsmRegisterOperationFilterCallback
IsmRegisterGlobalFilterCallback
IsmRegisterGlobalApplyCallback
IsmReplacePhysicalObject
IsmParsedPatternMatch
IsmRegisterRestoreCallback
IsmGetOsVersionInfo
TrackedIsmDuplicateString
IsmSelectPreferredAlias
IsmAddComponentAlias
IsmDoesObjectExist
IsmDeleteEnvironmentVariable
IsmRegisterPhysicalAcquireHook
IsmAddToPhysicalEnum
IsmProhibitPhysicalEnum
IsmClearOperationOnObject
IsmGetCurrentSidString
IsmGetTempDirectory
IsmAbortObjectEnum
TrackedIsmGetNativeObjectName
IsmExecuteFunction
IsmConvertMultiSzToObject
IsmGetEnvironmentMultiSz
IsmSendMessageToApp
IsmCreateUser
IsmGetMappedUserData
IsmGetEnvironmentString
IsmMakeApplyObjectId
IsmSetOperationOnObjectId2
IsmIsAttributeSetOnObjectId
IsmMakePersistentObjectId
IsmSetAttributeOnObjectId
IsmMakePersistentObject
IsmAddPropertyToObject
IsmSetOperationOnObject
IsmMakeApplyObject
TrackedIsmExpandEnvironmentString
IsmReleaseMemory
IsmGetObjectIdFromName
IsmClearPersistenceOnObject
IsmEnumFirstSourceObjectEx
IsmEnumNextObject
IsmSetAttributeOnObject
IsmClearAbandonObjectOnCollision
IsmAbandonObjectOnCollision
IsmRegisterOperationData
IsmAppendEnvironmentString
IsmRegisterTypePostEnumerationCallback
IsmRegisterOperation
IsmRegisterProperty
IsmGetEnvironmentValue
IsmEnumFirstComponent
IsmAbortComponentEnum
IsmEnumNextComponent
TrackedIsmCreateSimpleObjectPattern
TrackedIsmCreateObjectStringsFromHandleEx
IsmDestroyObjectString
IsmTickProgressBar
IsmHookEnumeration
IsmIsObjectHandleLeafOnly
TrackedIsmCreateObjectPattern
IsmQueueEnumeration
IsmGetTransportVariable
IsmIsEnvironmentFlagSet
IsmSetCancel
IsmSetEnvironmentString
IsmSetTransportVariable
TrackedIsmCreateObjectHandle
IsmAcquireObjectEx
IsmReleaseObject
IsmDestroyObjectHandle
IsmRegisterAttribute
IsmGetObjectTypeId
IsmGetRealPlatform
TrackedIsmGetLongName

rpcrt4

UuidFromStringA
UuidToStringA
RpcStringFreeA
UuidCreate

version

GetFileVersionInfoSizeA
GetFileVersionInfoA
VerQueryValueA

setupapi

SetupGetIntField
SetupGetMultiSzFieldA
SetupGetLineTextA
SetupFindFirstLineA
SetupGetStringFieldA
SetupFindNextLine
SetupCloseInfFile
SetupOpenInfFileA
SetupOpenAppendInfFileA

Exports

Exports

DestinationModule
DllMain
ModuleInitialize
ModuleTerminate
SourceModule
TypeModule
VirtualComputerModule

Sections

.text
Size: 140KB - Virtual size: 140KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
VALUEADD/MSFT/USMT/ANSI/SHFOLDER.DLL
.dll windows:5 windows x86 arch:x86

a8568b57714f17bea2cb443650a1c951

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetSystemDefaultLangID
EnumResourceNamesW
lstrcatA
lstrcpyA
CompareStringW
CreateDirectoryA
CreateDirectoryW
GetLastError
ExpandEnvironmentStringsA
EnumResourceLanguagesW
DisableThreadLibraryCalls
GlobalAlloc
GlobalFree
GetFileAttributesA
GetFileAttributesW
GetSystemDirectoryA
GetSystemDirectoryW
IsBadWritePtr
FindResourceExW
LoadResource
LockResource
GetWindowsDirectoryW
GetWindowsDirectoryA
ExpandEnvironmentStringsW
lstrlenA
lstrlenW
MultiByteToWideChar
GetVersionExA
LoadLibraryA
FreeLibrary
GetProcAddress
lstrcpynW
WideCharToMultiByte

advapi32

SetSecurityDescriptorDacl
SetFileSecurityW
InitializeAcl
GetAce
LookupAccountSidW
AddAccessAllowedAce
RegSetValueExA
RegSetValueExW
RegCreateKeyExA
RegOpenKeyA
RegQueryValueExW
RegQueryValueExA
RegCloseKey
InitializeSecurityDescriptor

Exports

Exports

SHGetFolderPathA
SHGetFolderPathW

Sections

.text
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 94B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 340B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
VALUEADD/MSFT/USMT/ANSI/SYSFILES.INF
VALUEADD/MSFT/USMT/ANSI/SYSMOD.DLL
.dll windows:5 windows x86 arch:x86

b0e2ae1a2befdddfe9bdc448a9025653

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_REMOVABLE_RUN_FROM_SWAP
IMAGE_FILE_NET_RUN_FROM_SWAP
IMAGE_FILE_DLL

Imports

msvcrt

memmove
__lconv_init
towlower
_wcsicmp
setlocale
wcsrchr
_adjust_fdiv
malloc
_initterm
free
_except_handler3
atoi
strncpy
_wcsnicmp
_mbsncmp
_mbsncpy
wcschr
sprintf
_mbsdec
_atoi64
sscanf
_mbslen
_mbsnicmp
_mbsrchr
_ismbcupper
strtoul
wcslen
strchr
_ismbblead
_mbsinc
_mbsnextc
_ismbcspace
_mbschr
_mbsicmp

kernel32

GetFileSize
GetLastError
FileTimeToSystemTime
GetLogicalDrives
GetVersionExA
GetProcAddress
LoadLibraryA
GetProfileStringA
DeleteFileA
SetLastError
CreateDirectoryA
HeapFree
SetFilePointer
CreateFileA
GetWindowsDirectoryA
UnmapViewOfFile
SetEndOfFile
ReadFile
CreateFileMappingA
MapViewOfFile
GetFileAttributesA
SetErrorMode
FindFirstFileA
FindClose
WriteFile
MultiByteToWideChar
FreeResource
LoadLibraryExA
EnumResourceNamesA
DebugBreak
ExitProcess
CloseHandle
HeapReAlloc
SearchPathA
BeginUpdateResourceA
EndUpdateResourceA
UpdateResourceA
FindResourceA
LoadResource
LockResource
SizeofResource
WideCharToMultiByte
FreeLibrary
HeapAlloc
FormatMessageA
LocalFree
IsDBCSLeadByte
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
GetProcessHeap
GetModuleHandleA
InitializeCriticalSection
CreateEventA
GetCurrentDirectoryA
FindNextFileA
GetDriveTypeA
GetLogicalDriveStringsA
SetFileAttributesA
RemoveDirectoryA

user32

CharLowerA
CharUpperA
wsprintfA
MessageBoxA

advapi32

RegEnumKeyA
RegCloseKey
RegQueryValueExA
RegEnumValueA
RegQueryInfoKeyA
RegOpenKeyExA

shell32

SHGetSpecialFolderLocation
SHGetPathFromIDListA
SHGetMalloc

mpr

WNetOpenEnumA
WNetCancelConnection2A
WNetAddConnection2A
WNetGetConnectionA
WNetEnumResourceA

setupapi

SetupGetStringFieldA
SetupGetIntField
SetupFindNextLine
SetupFindFirstLineA
SetupGetMultiSzFieldA

log

LogBegin
LogA
LogEnd
LogReInitA

winspool.drv

AddPrinterConnectionA
OpenPrinterA
GetPrinterA
EnumPrintersA
DocumentPropertiesA
SetPrinterA
DeletePrinterConnectionA
ord202
ClosePrinter

wininet

FindNextUrlCacheEntryA
InternetSetCookieA
FindCloseUrlCache
FindFirstUrlCacheEntryA

migism

IsmGetPropertyFromObject
IsmIsAttributeSetOnObject
IsmRegisterOperationApplyCallback
IsmRegisterRestoreCallback
IsmSetOperationOnObject
IsmMakeApplyObject
IsmEnumNextObject
IsmRegisterOperationFilterCallback
IsmGetEnvironmentValue
IsmSetAttributeOnObject
IsmClearAttributeOnObject
IsmParsedPatternMatch
IsmIsObjectHandleNodeOnly
TrackedIsmCreateObjectPattern
IsmAbandonObjectOnCollision
IsmGetOsVersionInfo
IsmIsApplyObject
IsmProhibitPhysicalEnum
IsmRegisterPhysicalAcquireHook
IsmAddToPhysicalEnum
IsmGetPropertyData
IsmFilterObject
TrackedIsmGetNativeObjectName
IsmSetEnvironmentFlag
IsmHookEnumeration
IsmSetCancel
IsmRegisterPreEnumerationCallback
IsmRegisterPostEnumerationCallback
IsmGetObjectIdFromName
IsmIsPersistentObjectId
IsmSetAttributeOnObjectId
IsmAcquireObjectEx
IsmExecuteHooks
IsmAddPropertyToObjectId
IsmIsPersistentObject
IsmMakePersistentObject
IsmMakeNonCriticalObject
IsmIsAttributeSetOnObjectId
IsmClearPersistenceOnObjectId
IsmReleaseObject
IsmGetRealPlatform
TrackedIsmExpandEnvironmentString
IsmEnumFirstSourceObjectEx
IsmAbortObjectEnum
IsmRegisterAttribute
IsmRegisterProperty
IsmRegisterOperation
IsmGetObjectTypeId
IsmRegisterStaticExclusion
IsmSetEnvironmentString
IsmGetEnvironmentString
IsmRegisterObjectType
IsmRecordDelayedOperation
IsmRecordOperation
TrackedIsmCreateObjectStringsFromHandleEx
TrackedIsmCreateObjectHandle
TrackedIsmGetMemory
IsmReleaseMemory
IsmIsComponentSelected
TrackedIsmCreateSimpleObjectPattern
IsmQueueEnumeration
IsmDestroyObjectHandle
IsmAddComponentAlias
IsmDestroyObjectString
IsmGetTempDirectory
IsmSetOperationOnObjectId

gdi32

CreateDCA
CreateFontIndirectA
SelectObject
GetTextMetricsA
DeleteDC
DeleteObject

version

GetFileVersionInfoA
GetFileVersionInfoSizeA
VerQueryValueA

imagehlp

MapAndLoad
UnMapAndLoad

ole32

CoCreateInstance
CoUninitialize
CoInitialize

Exports

Exports

DestinationModule
DllMain
ModuleInitialize
ModuleTerminate
SourceModule
TypeModule
VirtualComputerModule

Sections

.text
Size: 109KB - Virtual size: 109KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 34KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
VALUEADD/MSFT/USMT/ANSI/UNCTRN.DLL
.dll windows:5 windows x86 arch:x86

2bb7d3e69f730b77f35434353c6c2026

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_REMOVABLE_RUN_FROM_SWAP
IMAGE_FILE_NET_RUN_FROM_SWAP
IMAGE_FILE_DLL

Imports

msvcrt

_adjust_fdiv
_except_handler3
_initterm
free
_mbsnextc
towlower
wcslen
_mbsdec
_wcsicmp
_mbsrchr
_mbsinc
strchr
wcschr
_mbschr
malloc
memmove
_ismbcprint
iswctype
_ismbcspace
wcsncmp
wcscmp
_mbslen
setlocale
_wtoi
atoi
_wcsnicmp
_mbsnicmp
wcscspn
__lconv_init
_mbsicmp

kernel32

FlushFileBuffers
GetLastError
CloseHandle
DeleteFileA
CopyFileA
SetLastError
HeapFree
GetTickCount
GetPrivateProfileIntA
FindClose
FindFirstFileA
SetErrorMode
GetFileAttributesA
GetLogicalDriveStringsA
GetDriveTypeA
FindNextFileA
RemoveDirectoryA
GetPrivateProfileStringA
GetCurrentDirectoryA
EnterCriticalSection
LeaveCriticalSection
MultiByteToWideChar
WideCharToMultiByte
HeapReAlloc
ExitProcess
DebugBreak
DeleteCriticalSection
GetProcessHeap
GetModuleHandleA
GetVersionExA
InitializeCriticalSection
CreateEventA
HeapAlloc
GetWindowsDirectoryA
GetFileSize
FileTimeToDosDateTime
FileTimeToLocalFileTime
SetFileTime
LocalFileTimeToFileTime
DosDateTimeToFileTime
SetFileAttributesA
FormatMessageA
LocalFree
IsDBCSLeadByte
GetTempPathA
GetTempFileNameA
CreateDirectoryA
ReadFile
SetEndOfFile
SetFilePointer
UnmapViewOfFile
CreateFileW
CreateFileMappingW
CreateFileA
CreateFileMappingA
MapViewOfFile
WriteFile

user32

MessageBoxA
wsprintfA
CharLowerW
CharLowerA

log

LogBegin
LogA
LogEnd
LogReInitA

migism

IsmEnumNextObject
IsmIsNonCriticalObject
IsmIsPersistentObject
IsmTickProgressBar
IsmEnumFirstSourceObjectEx
IsmGetObjectTypeName
IsmGetFirstObjectTypeId
IsmReleaseObject
IsmAcquireObjectEx
TrackedIsmCreateObjectHandle
IsmGetTempDirectory
IsmSendMessageToApp
IsmConvertMultiSzToObject
IsmGetTempFile
TrackedIsmCreateObjectPattern
IsmRegisterProgressSlice
IsmGetObjectsStatistics
IsmEnumNextPersistentObject
IsmAbortPersistentObjectEnum
IsmRegisterTransport
IsmDestroyObjectHandle
IsmRegisterStaticExclusion
IsmGetObjectTypeId
TrackedIsmCreateSimpleObjectPattern
IsmDestroyObjectString
TrackedIsmCreateObjectStringsFromHandleEx
IsmReleaseMemory
TrackedIsmGetNativeObjectName
IsmGetNextObjectTypeId
IsmFreeConvertedObjectContent
IsmAbortObjectEnum
IsmSetCancel
IsmEnumFirstPersistentObject
IsmConvertObjectContentToUnicode
IsmConvertObjectToMultiSz

cabinet

ord22
ord20
ord21
ord13
ord14
ord11
ord10
ord23

setupapi

SetupFindNextLine
SetupGetStringFieldA
SetupFindFirstLineA
SetupCloseInfFile
SetupOpenAppendInfFileA
SetupOpenInfFileA

Exports

Exports

DllMain
ModuleInitialize
ModuleTerminate
TransportModule

Sections

.text
Size: 54KB - Virtual size: 53KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
VALUEADD/MSFT/USMT/ANSI/USMTDEF.INF
VALUEADD/MSFT/USMT/ICONLIB.DLL
.dll windows:5 windows x86 arch:x86

96a8ec412858a637750b430c36c75b02

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_REMOVABLE_RUN_FROM_SWAP
IMAGE_FILE_NET_RUN_FROM_SWAP
IMAGE_FILE_DLL

Imports

msvcrt

_adjust_fdiv
malloc
_initterm
free

kernel32

DisableThreadLibraryCalls

Sections

.text
Size: 1024B - Virtual size: 724B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 20B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 1024B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 94B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
VALUEADD/MSFT/USMT/LOADSTATE.EXE
.exe windows:5 windows x86 arch:x86

1ab8b8a8d052cfbaab507dcbbc1858b5

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

wcscmp
wcsncmp
_wcsnicmp
memmove
towlower
wcslen
setlocale
swscanf
__lconv_init
_controlfp
_except_handler3
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__wgetmainargs
__winitenv
_cexit
_XcptFilter
_exit
_c_exit
wcsrchr
wprintf
wcschr
_wcsicmp
_mbsicmp
printf
exit

advapi32

RegOpenKeyExW
RegCloseKey
OpenProcessToken
GetTokenInformation
AllocateAndInitializeSid
EqualSid
FreeSid
RegQueryValueExW
RegSetValueExW

kernel32

DeleteFileW
Sleep
HeapFree
CloseHandle
GetLastError
LocalFree
LocalAlloc
FindClose
FindNextFileW
FindFirstFileW
SetLastError
CopyFileW
CreateDirectoryW
SetConsoleCtrlHandler
GetModuleFileNameW
GetWindowsDirectoryW
GetModuleHandleA
GetCurrentProcess
ReadFile
SetFilePointer
IsDBCSLeadByte
HeapReAlloc
HeapAlloc
ExitProcess
WriteFile
SetErrorMode
DebugBreak
DeleteCriticalSection
GetProcessHeap
GetVersionExA
InitializeCriticalSection
CreateEventA
FormatMessageA
FormatMessageW
LeaveCriticalSection
EnterCriticalSection
GetFullPathNameW
GetCurrentDirectoryW
FlushFileBuffers
GetSystemDirectoryW
GetEnvironmentStringsW
GetFileAttributesW
CreateFileW

gdi32

AddFontResourceW

shell32

SHGetSpecialFolderLocation
SHGetPathFromIDListW
SHGetMalloc

setupapi

SetupGetStringFieldW
SetupFindFirstLineW
SetupCloseInfFile
SetupOpenInfFileW
SetupOpenAppendInfFileW
SetupFindNextLine

log

LogDeleteOnNextInit
SuppressAllLogPopups
LogReInitW
LogDirectW
LogBegin
LogW
LogEnd
LogSetVerboseBitmap

migism

IsmInitialize
IsmTerminate
IsmSelectComponent
IsmSetEnvironmentString
IsmCurrentlyExecuting
IsmSetCancel
IsmSetDelayedOperationsCommand
IsmSetEnvironmentValue
IsmSetEnvironmentFlag
IsmSetPlatform
IsmStartEtmModules
IsmTickProgressBar
IsmExecute
IsmSetRollbackJournalType
IsmRollback
IsmStartTransport
IsmRegisterTransport
IsmSelectTransport
IsmSetTransportStorage
IsmResumeLoad
TrackedIsmCreateSimpleObjectPattern
IsmGetObjectTypeId
IsmEnumFirstSourceObjectEx
IsmGetControlFile
IsmAppendEnvironmentMultiSz
IsmEnumNextObject
IsmDestroyObjectHandle
IsmSelectMasterGroup
IsmLoad

user32

CharLowerW
MessageBoxA

Sections

.text
Size: 18KB - Virtual size: 18KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
VALUEADD/MSFT/USMT/LOG.DLL
.dll windows:5 windows x86 arch:x86

703e5fd1ee3556bbd04f99569c7a3305

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_REMOVABLE_RUN_FROM_SWAP
IMAGE_FILE_NET_RUN_FROM_SWAP
IMAGE_FILE_DLL

Imports

msvcrt

_except_handler3
_adjust_fdiv
malloc
_initterm
free
wcsstr
_mbsstr
_vsnprintf
fwprintf
_mbslen
_iob
fprintf
_snwprintf
_snprintf
_pctype
iswctype
_mbsnextc
_ismbcspace
wcslen
wcschr
strchr
_mbsicmp
setlocale
_vsnwprintf
__lconv_init
_mbsinc

kernel32

HeapFree
ExitProcess
DebugBreak
EnterCriticalSection
LeaveCriticalSection
WriteFile
HeapReAlloc
HeapAlloc
CloseHandle
SetFilePointer
CreateFileA
GetCurrentThreadId
OutputDebugStringA
OutputDebugStringW
FormatMessageA
GetLastError
FormatMessageW
DeleteFileA
SetFileAttributesA
GetWindowsDirectoryA
ReleaseMutex
SetLastError
WaitForSingleObject
CreateMutexA
MultiByteToWideChar
WideCharToMultiByte
IsDBCSLeadByte
CreateEventA
GetProcessHeap
GetModuleHandleA
GetVersionExA
InitializeCriticalSection

user32

MessageBoxA

setupapi

SetupCloseInfFile

Exports

Exports

DllMain
LogA
LogBegin
LogDeleteOnNextInit
LogDirectA
LogDirectW
LogEnd
LogIfA
LogIfW
LogLineA
LogLineW
LogReInitA
LogReInitW
LogSetErrorDest
LogSetVerboseBitmap
LogSetVerboseLevel
LogTitleA
LogTitleW
LogW
SuppressAllLogPopups

Sections

.text
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 1024B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
VALUEADD/MSFT/USMT/MIGAPP.INF
VALUEADD/MSFT/USMT/MIGISM.DLL
.dll windows:5 windows x86 arch:x86

7e49b7becb302aeba59bb7da331327a3

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_REMOVABLE_RUN_FROM_SWAP
IMAGE_FILE_NET_RUN_FROM_SWAP
IMAGE_FILE_DLL

Imports

msvcrt

setlocale
_mbschr
__lconv_init
_mbsicmp
_mbsinc
_mbsrchr
_mbsdec
_adjust_fdiv
malloc
_initterm
free
towlower
wcstoul
strchr
wcsrchr
swscanf
_except_handler3
isalpha
isalnum
_wcsnicmp
_wcsicmp
wcslen
_mbsnextc
memmove
iswctype
_ismbcspace
wcsncmp
wcscmp
_mbslen
_wtoi
atoi
wcscspn
_mbsnicmp
wcschr

kernel32

FlushFileBuffers
HeapFree
SetEvent
CopyFileW
GetWindowsDirectoryW
GetDiskFreeSpaceW
WriteFile
GetVersionExW
CreateEventW
SetErrorMode
DeviceIoControl
CreateFileW
RemoveDirectoryW
CreateDirectoryW
SetFileTime
LoadLibraryW
GetProcAddress
LocalFree
SearchPathW
GetFullPathNameW
GetModuleFileNameW
FreeLibrary
GetDriveTypeA
FindNextFileW
GetTempPathW
SetFileAttributesW
DeleteFileW
GetCurrentProcess
CloseHandle
SetLastError
WaitForSingleObject
GetDriveTypeW
GetLogicalDriveStringsA
GetProcessHeap
GetLogicalDriveStringsW
GetLastError
DeleteFileA
ReadFile
FindNextFileA
RemoveDirectoryA
SetFileAttributesA
GetFileSize
GetWindowsDirectoryA
GetPrivateProfileStringA
GetPrivateProfileIntA
GetCurrentDirectoryA
MultiByteToWideChar
WideCharToMultiByte
HeapReAlloc
ExitProcess
DebugBreak
EnterCriticalSection
LeaveCriticalSection
HeapAlloc
FormatMessageA
CreateEventA
InitializeCriticalSection
GetVersionExA
GetModuleHandleA
SetEndOfFile
DeleteCriticalSection
FindClose
FindFirstFileA
GetFileAttributesA
FindFirstFileW
GetFileAttributesW
MapViewOfFile
CreateFileMappingA
CreateFileA
CreateFileMappingW
UnmapViewOfFile
GetTempFileNameW
SetFilePointer
IsDBCSLeadByte

user32

MessageBoxA
wsprintfW
CharLowerW
wsprintfA
CharLowerA

advapi32

LookupAccountSidW
RegEnumKeyW
RegEnumValueW
RegQueryInfoKeyW
RegCloseKey
RegDeleteKeyW
RegOpenKeyExW
RegCreateKeyExW
RegQueryInfoKeyA
RegQueryValueExW
GetTokenInformation
LookupAccountNameW
GetLengthSid
RegLoadKeyW
RegUnLoadKeyW
RegDeleteValueW
RegSetValueExW
OpenProcessToken
LookupPrivilegeValueW
AdjustTokenPrivileges

log

LogReInitW
LogBegin
LogW
LogEnd
LogA

setupapi

SetupOpenInfFileA
SetupOpenAppendInfFileA
SetupCloseInfFile
SetupFindFirstLineW
SetupGetStringFieldW
SetupFindNextLine

Exports

Exports

DllMain
IsmAbandonObjectIdOnCollision
IsmAbandonObjectOnCollision
IsmAbortApplyObjectEnum
IsmAbortComponentEnum
IsmAbortObjectAttributeEnum
IsmAbortObjectEnum
IsmAbortObjectOperationEnum
IsmAbortObjectPropertyEnum
IsmAbortObjectWithAttributeEnum
IsmAbortObjectWithOperationEnum
IsmAbortObjectWithPropertyEnum
IsmAbortPersistentObjectEnum
IsmAbortTransportEnum
IsmAcquireObjectEx
IsmAddComponentAlias
IsmAddControlFile
IsmAddPropertyDataToObject
IsmAddPropertyDataToObjectId
IsmAddPropertyToObject
IsmAddPropertyToObjectId
IsmAddToPhysicalEnum
IsmAppendEnvironmentMultiSz
IsmAppendEnvironmentString
IsmCanWriteRollbackJournal
IsmClearAbandonObjectIdOnCollision
IsmClearAbandonObjectOnCollision
IsmClearApplyOnObject
IsmClearApplyOnObjectId
IsmClearAttributeOnObject
IsmClearAttributeOnObjectId
IsmClearNonCriticalFlagOnObject
IsmClearNonCriticalFlagOnObjectId
IsmClearOperationOnObject
IsmClearOperationOnObjectId
IsmClearPersistenceOnObject
IsmClearPersistenceOnObjectId
IsmConvertMultiSzToObject
IsmConvertObjectContentToAnsi
IsmConvertObjectContentToUnicode
IsmConvertObjectToMultiSz
IsmCreateParsedPattern
IsmCreateUser
IsmCurrentlyExecuting
IsmDeleteEnvironmentVariable
IsmDestroyObjectHandle
IsmDestroyObjectString
IsmDestroyParsedPattern
IsmDoesObjectExist
IsmDoesRollbackDataExist
IsmEnumFirstApplyObject
IsmEnumFirstComponent
IsmEnumFirstDestinationObjectEx
IsmEnumFirstObjectAttribute
IsmEnumFirstObjectAttributeById
IsmEnumFirstObjectOperation
IsmEnumFirstObjectOperationById
IsmEnumFirstObjectProperty
IsmEnumFirstObjectPropertyById
IsmEnumFirstObjectWithAttribute
IsmEnumFirstObjectWithOperation
IsmEnumFirstObjectWithProperty
IsmEnumFirstPersistentObject
IsmEnumFirstSourceObjectEx
IsmEnumFirstTransport
IsmEnumNextApplyObject
IsmEnumNextComponent
IsmEnumNextObject
IsmEnumNextObjectAttribute
IsmEnumNextObjectOperation
IsmEnumNextObjectProperty
IsmEnumNextObjectWithAttribute
IsmEnumNextObjectWithOperation
IsmEnumNextObjectWithProperty
IsmEnumNextPersistentObject
IsmEnumNextTransport
IsmExecute
IsmExecuteFunction
IsmExecuteHooks
IsmFilterObject
IsmFreeConvertedObjectContent
IsmGetAttributeGroup
IsmGetAttributeName
IsmGetControlFile
IsmGetCurrentSidString
IsmGetEnvironmentCallback
IsmGetEnvironmentData
IsmGetEnvironmentMultiSz
IsmGetEnvironmentString
IsmGetEnvironmentValue
IsmGetFirstObjectTypeId
IsmGetMappedUserData
IsmGetNextObjectTypeId
IsmGetObjectIdFromName
IsmGetObjectOperationData
IsmGetObjectOperationDataById
IsmGetObjectTypeId
IsmGetObjectTypeName
IsmGetObjectsStatistics
IsmGetOperationGroup
IsmGetOperationName
IsmGetOsVersionInfo
IsmGetPropertyData
IsmGetPropertyFromObject
IsmGetPropertyFromObjectId
IsmGetPropertyGroup
IsmGetPropertyName
IsmGetRealPlatform
IsmGetTempDirectory
IsmGetTempFile
IsmGetTempStorage
IsmGetTransportVariable
IsmHookEnumeration
IsmInitialize
IsmIsApplyObject
IsmIsApplyObjectId
IsmIsAttributeSetOnObject
IsmIsAttributeSetOnObjectId
IsmIsComponentSelected
IsmIsEnvironmentFlagSet
IsmIsNonCriticalObject
IsmIsNonCriticalObjectId
IsmIsObjectAbandonedOnCollision
IsmIsObjectHandleLeafOnly
IsmIsObjectHandleNodeOnly
IsmIsObjectIdAbandonedOnCollision
IsmIsOperationSetOnObject
IsmIsOperationSetOnObjectId
IsmIsPersistentObject
IsmIsPersistentObjectId
IsmIsPropertySetOnObject
IsmIsPropertySetOnObjectId
IsmLoad
IsmLockAttribute
IsmLockObject
IsmLockObjectId
IsmLockOperation
IsmLockProperty
IsmMakeApplyObject
IsmMakeApplyObjectId
IsmMakeNonCriticalObject
IsmMakeNonCriticalObjectId
IsmMakePersistentObject
IsmMakePersistentObjectId
IsmParsedPatternMatch
IsmParsedPatternMatchEx
IsmPreserveJournal
IsmProhibitPhysicalEnum
IsmQueueEnumeration
IsmRecordDelayedOperation
IsmRecordOperation
IsmRegisterAttribute
IsmRegisterDynamicExclusion
IsmRegisterGlobalApplyCallback
IsmRegisterGlobalFilterCallback
IsmRegisterObjectType
IsmRegisterOperation
IsmRegisterOperationApplyCallback
IsmRegisterOperationData
IsmRegisterOperationFilterCallback
IsmRegisterPhysicalAcquireHook
IsmRegisterPostEnumerationCallback
IsmRegisterPreEnumerationCallback
IsmRegisterProgressBarCallback
IsmRegisterProgressSlice
IsmRegisterProperty
IsmRegisterPropertyData
IsmRegisterRestoreCallback
IsmRegisterStaticExclusion
IsmRegisterTransport
IsmRegisterTypePostEnumerationCallback
IsmRegisterTypePreEnumerationCallback
IsmReleaseMemory
IsmReleaseObject
IsmRemoveAllUserSuppliedComponents
IsmRemovePhysicalObject
IsmRemovePropertyData
IsmRemovePropertyFromObject
IsmRemovePropertyFromObjectId
IsmReplacePhysicalObject
IsmResumeLoad
IsmResumeSave
IsmRollback
IsmSave
IsmSelectComponent
IsmSelectMasterGroup
IsmSelectPreferredAlias
IsmSelectTransport
IsmSendMessageToApp
IsmSetAttributeOnObject
IsmSetAttributeOnObjectId
IsmSetCancel
IsmSetDelayedOperationsCommand
IsmSetEnvironmentCallback
IsmSetEnvironmentData
IsmSetEnvironmentFlag
IsmSetEnvironmentMultiSz
IsmSetEnvironmentString
IsmSetEnvironmentValue
IsmSetOperationOnObject
IsmSetOperationOnObject2
IsmSetOperationOnObjectId
IsmSetOperationOnObjectId2
IsmSetPlatform
IsmSetRollbackJournalType
IsmSetTransportStorage
IsmSetTransportVariable
IsmStartEtmModules
IsmStartTransport
IsmTerminate
IsmTickProgressBar
TrackedIsmCreateObjectHandle
TrackedIsmCreateObjectPattern
TrackedIsmCreateObjectStringsFromHandleEx
TrackedIsmCreateSimpleObjectPattern
TrackedIsmDuplicateString
TrackedIsmExpandEnvironmentString
TrackedIsmGetLongName
TrackedIsmGetMemory
TrackedIsmGetNativeObjectName

Sections

.text
Size: 162KB - Virtual size: 162KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
VALUEADD/MSFT/USMT/MIGISM.INF
VALUEADD/MSFT/USMT/MIGISM_A.DLL
.dll windows:5 windows x86 arch:x86

d6047f68429cdb8b81e16f5f29bd28e3

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_REMOVABLE_RUN_FROM_SWAP
IMAGE_FILE_NET_RUN_FROM_SWAP
IMAGE_FILE_DLL

Imports

msvcrt

free
_initterm
malloc
_adjust_fdiv
__lconv_init
setlocale
wcsrchr
_wcsicmp
strtoul
wcslen
sscanf
_mbslen
wcschr
_except_handler3
isalpha
isalnum
_mbsnicmp
_mbsicmp
_mbsdec
_ismbblead
_mbsinc
strchr
_mbsrchr
towlower
_mbsnextc
memmove
iswctype
_ismbcspace
wcsncmp
wcscmp
_wtoi
atoi
_wcsnicmp
wcscspn
_mbsncmp
_mbctolower
_mbschr

kernel32

GetCurrentProcess
DeleteFileA
SetFileAttributesA
GetTempPathA
GetDiskFreeSpaceA
FlushFileBuffers
HeapFree
CloseHandle
CopyFileA
GetWindowsDirectoryA
GetLastError
WriteFile
GetVersionExA
CreateEventA
SetErrorMode
DeviceIoControl
CreateFileA
RemoveDirectoryA
CreateDirectoryA
SetFileTime
LoadLibraryA
GetProcAddress
LocalFree
FreeLibrary
SearchPathA
GetFullPathNameA
GetModuleFileNameA
GetFileSize
SetLastError
WaitForSingleObject
GetModuleHandleA
FindNextFileA
GetDriveTypeA
GetLogicalDriveStringsA
SetEvent
UnmapViewOfFile
GetPrivateProfileStringA
GetPrivateProfileIntA
GetCurrentDirectoryA
HeapReAlloc
ExitProcess
DebugBreak
MultiByteToWideChar
WideCharToMultiByte
EnterCriticalSection
LeaveCriticalSection
HeapAlloc
FormatMessageA
IsDBCSLeadByte
GetTempFileNameA
ReadFile
SetEndOfFile
InitializeCriticalSection
CreateFileW
GetProcessHeap
DeleteCriticalSection
FindClose
FindFirstFileA
GetFileAttributesA
MapViewOfFile
CreateFileMappingA
CreateFileMappingW
SetFilePointer

user32

MessageBoxA
wsprintfA
CharLowerW
CharLowerA

advapi32

OpenProcessToken
RegEnumKeyA
RegEnumValueA
RegDeleteKeyA
RegCloseKey
RegOpenKeyExA
RegCreateKeyExA
RegQueryInfoKeyA
RegQueryValueExA
GetTokenInformation
LookupAccountSidA
LookupAccountNameA
GetLengthSid
RegLoadKeyA
RegUnLoadKeyA
RegDeleteValueA
RegSetValueExA
LookupPrivilegeValueA
AdjustTokenPrivileges

log

LogReInitA
LogBegin
LogA
LogEnd

setupapi

SetupOpenInfFileA
SetupOpenAppendInfFileA
SetupCloseInfFile
SetupFindFirstLineA
SetupGetStringFieldA
SetupFindNextLine

Exports

Exports

DllMain
IsmAbandonObjectIdOnCollision
IsmAbandonObjectOnCollision
IsmAbortApplyObjectEnum
IsmAbortComponentEnum
IsmAbortObjectAttributeEnum
IsmAbortObjectEnum
IsmAbortObjectOperationEnum
IsmAbortObjectPropertyEnum
IsmAbortObjectWithAttributeEnum
IsmAbortObjectWithOperationEnum
IsmAbortObjectWithPropertyEnum
IsmAbortPersistentObjectEnum
IsmAbortTransportEnum
IsmAcquireObjectEx
IsmAddComponentAlias
IsmAddControlFile
IsmAddPropertyDataToObject
IsmAddPropertyDataToObjectId
IsmAddPropertyToObject
IsmAddPropertyToObjectId
IsmAddToPhysicalEnum
IsmAppendEnvironmentMultiSz
IsmAppendEnvironmentString
IsmCanWriteRollbackJournal
IsmClearAbandonObjectIdOnCollision
IsmClearAbandonObjectOnCollision
IsmClearApplyOnObject
IsmClearApplyOnObjectId
IsmClearAttributeOnObject
IsmClearAttributeOnObjectId
IsmClearNonCriticalFlagOnObject
IsmClearNonCriticalFlagOnObjectId
IsmClearOperationOnObject
IsmClearOperationOnObjectId
IsmClearPersistenceOnObject
IsmClearPersistenceOnObjectId
IsmConvertMultiSzToObject
IsmConvertObjectContentToAnsi
IsmConvertObjectContentToUnicode
IsmConvertObjectToMultiSz
IsmCreateParsedPattern
IsmCreateUser
IsmCurrentlyExecuting
IsmDeleteEnvironmentVariable
IsmDestroyObjectHandle
IsmDestroyObjectString
IsmDestroyParsedPattern
IsmDoesObjectExist
IsmDoesRollbackDataExist
IsmEnumFirstApplyObject
IsmEnumFirstComponent
IsmEnumFirstDestinationObjectEx
IsmEnumFirstObjectAttribute
IsmEnumFirstObjectAttributeById
IsmEnumFirstObjectOperation
IsmEnumFirstObjectOperationById
IsmEnumFirstObjectProperty
IsmEnumFirstObjectPropertyById
IsmEnumFirstObjectWithAttribute
IsmEnumFirstObjectWithOperation
IsmEnumFirstObjectWithProperty
IsmEnumFirstPersistentObject
IsmEnumFirstSourceObjectEx
IsmEnumFirstTransport
IsmEnumNextApplyObject
IsmEnumNextComponent
IsmEnumNextObject
IsmEnumNextObjectAttribute
IsmEnumNextObjectOperation
IsmEnumNextObjectProperty
IsmEnumNextObjectWithAttribute
IsmEnumNextObjectWithOperation
IsmEnumNextObjectWithProperty
IsmEnumNextPersistentObject
IsmEnumNextTransport
IsmExecute
IsmExecuteFunction
IsmExecuteHooks
IsmFilterObject
IsmFreeConvertedObjectContent
IsmGetAttributeGroup
IsmGetAttributeName
IsmGetControlFile
IsmGetCurrentSidString
IsmGetEnvironmentCallback
IsmGetEnvironmentData
IsmGetEnvironmentMultiSz
IsmGetEnvironmentString
IsmGetEnvironmentValue
IsmGetFirstObjectTypeId
IsmGetMappedUserData
IsmGetNextObjectTypeId
IsmGetObjectIdFromName
IsmGetObjectOperationData
IsmGetObjectOperationDataById
IsmGetObjectTypeId
IsmGetObjectTypeName
IsmGetObjectsStatistics
IsmGetOperationGroup
IsmGetOperationName
IsmGetOsVersionInfo
IsmGetPropertyData
IsmGetPropertyFromObject
IsmGetPropertyFromObjectId
IsmGetPropertyGroup
IsmGetPropertyName
IsmGetRealPlatform
IsmGetTempDirectory
IsmGetTempFile
IsmGetTempStorage
IsmGetTransportVariable
IsmHookEnumeration
IsmInitialize
IsmIsApplyObject
IsmIsApplyObjectId
IsmIsAttributeSetOnObject
IsmIsAttributeSetOnObjectId
IsmIsComponentSelected
IsmIsEnvironmentFlagSet
IsmIsNonCriticalObject
IsmIsNonCriticalObjectId
IsmIsObjectAbandonedOnCollision
IsmIsObjectHandleLeafOnly
IsmIsObjectHandleNodeOnly
IsmIsObjectIdAbandonedOnCollision
IsmIsOperationSetOnObject
IsmIsOperationSetOnObjectId
IsmIsPersistentObject
IsmIsPersistentObjectId
IsmIsPropertySetOnObject
IsmIsPropertySetOnObjectId
IsmLoad
IsmLockAttribute
IsmLockObject
IsmLockObjectId
IsmLockOperation
IsmLockProperty
IsmMakeApplyObject
IsmMakeApplyObjectId
IsmMakeNonCriticalObject
IsmMakeNonCriticalObjectId
IsmMakePersistentObject
IsmMakePersistentObjectId
IsmParsedPatternMatch
IsmParsedPatternMatchEx
IsmPreserveJournal
IsmProhibitPhysicalEnum
IsmQueueEnumeration
IsmRecordDelayedOperation
IsmRecordOperation
IsmRegisterAttribute
IsmRegisterDynamicExclusion
IsmRegisterGlobalApplyCallback
IsmRegisterGlobalFilterCallback
IsmRegisterObjectType
IsmRegisterOperation
IsmRegisterOperationApplyCallback
IsmRegisterOperationData
IsmRegisterOperationFilterCallback
IsmRegisterPhysicalAcquireHook
IsmRegisterPostEnumerationCallback
IsmRegisterPreEnumerationCallback
IsmRegisterProgressBarCallback
IsmRegisterProgressSlice
IsmRegisterProperty
IsmRegisterPropertyData
IsmRegisterRestoreCallback
IsmRegisterStaticExclusion
IsmRegisterTransport
IsmRegisterTypePostEnumerationCallback
IsmRegisterTypePreEnumerationCallback
IsmReleaseMemory
IsmReleaseObject
IsmRemoveAllUserSuppliedComponents
IsmRemovePhysicalObject
IsmRemovePropertyData
IsmRemovePropertyFromObject
IsmRemovePropertyFromObjectId
IsmReplacePhysicalObject
IsmResumeLoad
IsmResumeSave
IsmRollback
IsmSave
IsmSelectComponent
IsmSelectMasterGroup
IsmSelectPreferredAlias
IsmSelectTransport
IsmSendMessageToApp
IsmSetAttributeOnObject
IsmSetAttributeOnObjectId
IsmSetCancel
IsmSetDelayedOperationsCommand
IsmSetEnvironmentCallback
IsmSetEnvironmentData
IsmSetEnvironmentFlag
IsmSetEnvironmentMultiSz
IsmSetEnvironmentString
IsmSetEnvironmentValue
IsmSetOperationOnObject
IsmSetOperationOnObject2
IsmSetOperationOnObjectId
IsmSetOperationOnObjectId2
IsmSetPlatform
IsmSetRollbackJournalType
IsmSetTransportStorage
IsmSetTransportVariable
IsmStartEtmModules
IsmStartTransport
IsmTerminate
IsmTickProgressBar
TrackedIsmCreateObjectHandle
TrackedIsmCreateObjectPattern
TrackedIsmCreateObjectStringsFromHandleEx
TrackedIsmCreateSimpleObjectPattern
TrackedIsmDuplicateString
TrackedIsmExpandEnvironmentString
TrackedIsmGetLongName
TrackedIsmGetMemory
TrackedIsmGetNativeObjectName

Sections

.text
Size: 156KB - Virtual size: 156KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
VALUEADD/MSFT/USMT/MIGSYS.INF
VALUEADD/MSFT/USMT/MIGUSER.INF
VALUEADD/MSFT/USMT/MIGWIZ.INF
VALUEADD/MSFT/USMT/SCANSTATE.EXE
.exe windows:5 windows x86 arch:x86

abaa8e003ebc29a40d549ef7d87bfab2

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

towlower
memmove
wcsncmp
wcscmp
_wcsnicmp
__lconv_init
swscanf
wcslen
setlocale
_except_handler3
_controlfp
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__wgetmainargs
__winitenv
_cexit
_XcptFilter
_exit
_c_exit
wcsrchr
wprintf
swprintf
wcschr
_wtoi
_mbsicmp
_wcsicmp
printf
exit

advapi32

RegOpenKeyExW
RegCloseKey
LookupAccountNameW
GetUserNameW
RegQueryValueExW

kernel32

CreateFileW
DeleteFileW
Sleep
HeapFree
HeapAlloc
GetProcessHeap
FreeLibrary
GetProcAddress
LoadLibraryW
SetConsoleCtrlHandler
GetModuleFileNameW
GetWindowsDirectoryW
GetModuleHandleA
GetFileAttributesW
FindFirstFileW
SetErrorMode
GetLastError
FindClose
WriteFile
DeleteCriticalSection
GetVersionExA
InitializeCriticalSection
CloseHandle
CreateEventA
CreateDirectoryW
SetFilePointer
ReadFile
FlushFileBuffers
SetLastError
IsDBCSLeadByte
LocalFree
FormatMessageA
GetEnvironmentStringsW
GetCurrentDirectoryW
GetFullPathNameW
EnterCriticalSection
LeaveCriticalSection
HeapReAlloc
ExitProcess
DebugBreak
FormatMessageW

setupapi

SetupOpenInfFileW
SetupOpenAppendInfFileW
SetupCloseInfFile
SetupFindFirstLineW
SetupGetStringFieldW
SetupFindNextLine

log

SuppressAllLogPopups
LogW
LogBegin
LogSetVerboseBitmap
LogDirectW
LogIfW
LogReInitW
LogDeleteOnNextInit
LogEnd

migism

IsmTickProgressBar
IsmStartEtmModules
IsmStartTransport
IsmRegisterTransport
IsmSelectTransport
IsmSetEnvironmentFlag
IsmResumeSave
IsmExecute
IsmSelectMasterGroup
IsmSave
IsmSetCancel
IsmCurrentlyExecuting
IsmTerminate
IsmSetEnvironmentValue
IsmAddControlFile
IsmInitialize
IsmSetEnvironmentData
IsmSetPlatform
IsmSelectComponent
IsmSetEnvironmentString
IsmSetTransportStorage

user32

MessageBoxA
CharLowerW

Sections

.text
Size: 17KB - Virtual size: 17KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
VALUEADD/MSFT/USMT/SCANSTATE_A.EXE
.exe windows:5 windows x86 arch:x86

c8a2514781a382e265b03d5663308e9a

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
__initenv
_cexit
__p__fmode
__set_app_type
memmove
_except_handler3
_mbsnextc
setlocale
_mbsdec
strchr
_XcptFilter
_exit
_c_exit
sprintf
atoi
_mbsinc
_mbsrchr
_mbsicmp
_mbschr
printf
__p__commode
_mbslen
_mbsnicmp
_mbsncmp
_ismbblead
sscanf
_mbctolower
_controlfp
__lconv_init
exit

advapi32

RegOpenKeyExA
RegCloseKey
LookupAccountNameW
GetUserNameA
RegQueryValueExA

kernel32

EnterCriticalSection
LeaveCriticalSection
HeapReAlloc
ExitProcess
DebugBreak
DeleteFileA
Sleep
HeapFree
HeapAlloc
GetProcessHeap
FreeLibrary
GetProcAddress
LoadLibraryA
SetLastError
SetConsoleCtrlHandler
GetModuleFileNameA
GetWindowsDirectoryA
GetModuleHandleA
FormatMessageA
LocalFree
GetFullPathNameA
IsDBCSLeadByte
FlushFileBuffers
CreateDirectoryA
ReadFile
SetFilePointer
CreateFileA
GetFileAttributesA
SetErrorMode
FindFirstFileA
GetLastError
FindClose
WriteFile
DeleteCriticalSection
GetVersionExA
InitializeCriticalSection
CloseHandle
CreateEventA
GetCurrentDirectoryA
GetEnvironmentStrings

setupapi

SetupOpenInfFileA
SetupOpenAppendInfFileA
SetupCloseInfFile
SetupFindNextLine
SetupGetStringFieldA
SetupFindFirstLineA

log

LogSetVerboseBitmap
LogDeleteOnNextInit
LogReInitA
LogIfA
LogDirectA
LogBegin
LogA
LogEnd
SuppressAllLogPopups

migism

IsmResumeSave
IsmSelectTransport
IsmRegisterTransport
IsmStartTransport
IsmTickProgressBar
IsmStartEtmModules
IsmSetEnvironmentFlag
IsmSetEnvironmentValue
IsmAddControlFile
IsmSetEnvironmentString
IsmSelectComponent
IsmSetEnvironmentData
IsmSetPlatform
IsmInitialize
IsmExecute
IsmSelectMasterGroup
IsmSave
IsmSetCancel
IsmCurrentlyExecuting
IsmSetTransportStorage
IsmTerminate

user32

MessageBoxA
CharLowerA

Sections

.text
Size: 17KB - Virtual size: 17KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
VALUEADD/MSFT/USMT/SCRIPT.DLL
.dll windows:5 windows x86 arch:x86

9c88d5dba11820d3953fcd676fef2001

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_REMOVABLE_RUN_FROM_SWAP
IMAGE_FILE_NET_RUN_FROM_SWAP
IMAGE_FILE_DLL

Imports

msvcrt

__lconv_init
_mbsdec
towlower
memmove
free
wcsstr
wcscmp
strchr
_mbsinc
_ultow
_mbslen
wcscat
wcstoul
swprintf
swscanf
_except_handler3
iswctype
_mbsnextc
setlocale
_adjust_fdiv
malloc
_wtoi
wcsrchr
wcslen
wcschr
_wcsnicmp
_mbschr
_ismbcspace
wcsncmp
_mbsrchr
_mbsicmp
_mbsnicmp
wcscspn
atoi
_initterm
_wcsicmp

kernel32

CloseHandle
HeapFree
GetCurrentProcess
SetLastError
BeginUpdateResourceW
GetVersion
GetFileAttributesW
LoadLibraryW
GetWindowsDirectoryW
GetEnvironmentVariableW
GetProcAddress
GetSystemDirectoryW
GetTempPathW
FindResourceW
GetDriveTypeW
GetModuleHandleW
GetLogicalDriveStringsW
ReadFile
GetPrivateProfileStringW
GetLastError
FreeLibrary
DeleteFileW
GetExitCodeProcess
WaitForSingleObject
LoadResource
LockResource
UpdateResourceW
EndUpdateResourceA
GetDiskFreeSpaceW
GetACP
SizeofResource
LoadLibraryExW
EnumResourceNamesW
CopyFileW
RemoveDirectoryW
SetFileAttributesW
SearchPathW
SetFilePointer
CreateDirectoryW
CreateFileW
CreateFileA
FindFirstFileW
GetFileAttributesA
SetErrorMode
FindFirstFileA
FindClose
FormatMessageW
FormatMessageA
LocalFree
IsDBCSLeadByte
HeapReAlloc
HeapAlloc
ExitProcess
DebugBreak
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
GetProcessHeap
GetModuleHandleA
GetVersionExA
InitializeCriticalSection
CreateProcessW
CreateEventA
WideCharToMultiByte
MultiByteToWideChar
GetPrivateProfileIntA
GetPrivateProfileStringA
GetWindowsDirectoryA
GetFileSize
FindNextFileA
FindNextFileW
GetDriveTypeA
GetLogicalDriveStringsA

user32

wsprintfA
CharLowerW
wsprintfW
MessageBoxA
CharLowerA
CharLowerBuffW

advapi32

RegQueryValueExW
GetUserNameW
OpenProcessToken
GetTokenInformation
LookupAccountSidW
RegCloseKey
RegOpenKeyExW
RegEnumKeyW

shell32

SHGetPathFromIDListW
SHGetMalloc
SHGetSpecialFolderLocation

ole32

CoInitialize
CoUninitialize

log

LogIfW
LogBegin
LogW
LogReInitW
LogEnd
LogA

migism

IsmGetObjectsStatistics
IsmClearApplyOnObject
IsmIsComponentSelected
TrackedIsmGetMemory
IsmIsObjectHandleNodeOnly
IsmSetEnvironmentFlag
IsmGetPropertyData
IsmGetPropertyFromObject
IsmRegisterOperationApplyCallback
IsmRegisterOperationFilterCallback
IsmRegisterGlobalFilterCallback
IsmRegisterGlobalApplyCallback
IsmReplacePhysicalObject
IsmParsedPatternMatch
IsmRegisterRestoreCallback
IsmGetOsVersionInfo
TrackedIsmDuplicateString
IsmSelectPreferredAlias
IsmAddComponentAlias
IsmDoesObjectExist
IsmDeleteEnvironmentVariable
IsmRegisterPhysicalAcquireHook
IsmAddToPhysicalEnum
IsmProhibitPhysicalEnum
IsmClearOperationOnObject
IsmGetCurrentSidString
IsmGetTempDirectory
IsmGetRealPlatform
IsmGetObjectTypeId
IsmRegisterAttribute
IsmDestroyObjectHandle
IsmReleaseObject
IsmRegisterProgressSlice
IsmIsApplyObjectId
IsmFilterObject
IsmSetOperationOnObjectId
IsmIsObjectAbandonedOnCollision
IsmEnumFirstDestinationObjectEx
IsmAbortObjectEnum
TrackedIsmGetNativeObjectName
IsmExecuteFunction
IsmConvertMultiSzToObject
IsmGetEnvironmentMultiSz
IsmSendMessageToApp
IsmCreateUser
IsmGetMappedUserData
IsmGetEnvironmentString
IsmMakeApplyObjectId
IsmSetOperationOnObjectId2
IsmIsAttributeSetOnObjectId
IsmMakePersistentObjectId
IsmMakePersistentObject
IsmAddPropertyToObject
IsmSetOperationOnObject
IsmMakeApplyObject
TrackedIsmGetLongName
IsmClearPersistenceOnObject
IsmEnumFirstSourceObjectEx
IsmEnumNextObject
IsmSetAttributeOnObject
IsmClearAbandonObjectOnCollision
IsmAbandonObjectOnCollision
IsmRegisterOperationData
TrackedIsmExpandEnvironmentString
IsmReleaseMemory
IsmGetObjectIdFromName
IsmAppendEnvironmentString
IsmRegisterOperation
IsmRegisterProperty
IsmGetEnvironmentValue
IsmEnumFirstComponent
IsmAbortComponentEnum
IsmEnumNextComponent
TrackedIsmCreateSimpleObjectPattern
TrackedIsmCreateObjectStringsFromHandleEx
IsmDestroyObjectString
IsmRegisterTypePostEnumerationCallback
IsmTickProgressBar
IsmHookEnumeration
IsmIsObjectHandleLeafOnly
TrackedIsmCreateObjectPattern
IsmQueueEnumeration
IsmGetTransportVariable
IsmIsEnvironmentFlagSet
IsmSetCancel
IsmSetEnvironmentString
IsmSetTransportVariable
TrackedIsmCreateObjectHandle
IsmAcquireObjectEx
IsmSetAttributeOnObjectId

rpcrt4

UuidFromStringW
UuidToStringW
RpcStringFreeW
UuidCreate

version

GetFileVersionInfoSizeW
GetFileVersionInfoW
VerQueryValueW

setupapi

SetupOpenAppendInfFileA
SetupGetIntField
SetupGetMultiSzFieldW
SetupGetLineTextA
SetupCloseInfFile
SetupFindFirstLineW
SetupGetStringFieldW
SetupGetStringFieldA
SetupFindNextLine
SetupOpenInfFileA

Exports

Exports

DestinationModule
DllMain
ModuleInitialize
ModuleTerminate
SourceModule
TypeModule
VirtualComputerModule

Sections

.text
Size: 159KB - Virtual size: 158KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
VALUEADD/MSFT/USMT/SCRIPT_A.DLL
.dll windows:5 windows x86 arch:x86

6a578ccf4836a9a6461dc5cf54f4868d

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_REMOVABLE_RUN_FROM_SWAP
IMAGE_FILE_NET_RUN_FROM_SWAP
IMAGE_FILE_DLL

Imports

msvcrt

setlocale
wcschr
_mbsnextc
_wcsicmp
towlower
_ultoa
strtoul
_mbsnbicmp
_mbsstr
sprintf
_ismbcdigit
sscanf
_except_handler3
strchr
_ismbcalpha
atoi
_mbslen
_mbsnicmp
__lconv_init
_adjust_fdiv
malloc
_initterm
free
_mbsdec
_ismbblead
_mbsinc
_mbsrchr
_mbschr
memmove
iswctype
_ismbcspace
_mbsncmp
wcscspn
wcslen
_mbsicmp

kernel32

FindResourceA
LoadResource
CloseHandle
HeapFree
GetCurrentProcess
GetACP
GetVersion
GetFileAttributesA
LoadLibraryA
GetWindowsDirectoryA
GetEnvironmentVariableA
GetProcAddress
GetSystemDirectoryA
GetDriveTypeA
GetLogicalDriveStringsA
ReadFile
GetDiskFreeSpaceA
GetModuleHandleA
GetPrivateProfileStringA
GetLastError
FreeLibrary
DeleteFileA
GetExitCodeProcess
WaitForSingleObject
LockResource
SizeofResource
FreeResource
UpdateResourceA
EndUpdateResourceA
GetTempPathA
BeginUpdateResourceA
SetLastError
CreateFileA
LoadLibraryExA
EnumResourceNamesA
CopyFileA
SetFileAttributesA
SearchPathA
SetErrorMode
FindFirstFileA
FindClose
FormatMessageA
LocalFree
IsDBCSLeadByte
HeapReAlloc
HeapAlloc
ExitProcess
DebugBreak
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
GetProcessHeap
GetVersionExA
InitializeCriticalSection
CreateProcessA
CreateEventA
SetFilePointer
CreateDirectoryA
MultiByteToWideChar
GetPrivateProfileIntA
GetFileSize
FindNextFileA
RemoveDirectoryA

user32

CharLowerA
wsprintfA
CharLowerBuffA
CharLowerW
MessageBoxA

advapi32

RegQueryValueExA
GetUserNameA
OpenProcessToken
GetTokenInformation
LookupAccountSidA
RegCloseKey
RegOpenKeyExA
RegEnumKeyA

shell32

SHGetPathFromIDListA
SHGetSpecialFolderLocation
SHGetMalloc

ole32

CoInitialize
CoUninitialize

log

LogIfA
LogBegin
LogA
LogEnd
LogReInitA

migism

IsmEnumFirstDestinationObjectEx
IsmIsObjectAbandonedOnCollision
IsmSetOperationOnObjectId
IsmFilterObject
IsmIsApplyObjectId
IsmRegisterProgressSlice
IsmGetObjectsStatistics
IsmClearApplyOnObject
IsmIsComponentSelected
TrackedIsmGetMemory
IsmIsObjectHandleNodeOnly
IsmSetEnvironmentFlag
IsmGetPropertyData
IsmGetPropertyFromObject
IsmRegisterOperationApplyCallback
IsmRegisterOperationFilterCallback
IsmRegisterGlobalFilterCallback
IsmRegisterGlobalApplyCallback
IsmReplacePhysicalObject
IsmParsedPatternMatch
IsmRegisterRestoreCallback
IsmGetOsVersionInfo
TrackedIsmDuplicateString
IsmSelectPreferredAlias
IsmAddComponentAlias
IsmDoesObjectExist
IsmDeleteEnvironmentVariable
IsmRegisterPhysicalAcquireHook
IsmAddToPhysicalEnum
IsmProhibitPhysicalEnum
IsmClearOperationOnObject
IsmGetCurrentSidString
IsmGetTempDirectory
IsmAbortObjectEnum
TrackedIsmGetNativeObjectName
IsmExecuteFunction
IsmConvertMultiSzToObject
IsmGetEnvironmentMultiSz
IsmSendMessageToApp
IsmCreateUser
IsmGetMappedUserData
IsmGetEnvironmentString
IsmMakeApplyObjectId
IsmSetOperationOnObjectId2
IsmIsAttributeSetOnObjectId
IsmMakePersistentObjectId
IsmSetAttributeOnObjectId
IsmMakePersistentObject
IsmAddPropertyToObject
IsmSetOperationOnObject
IsmMakeApplyObject
TrackedIsmExpandEnvironmentString
IsmReleaseMemory
IsmGetObjectIdFromName
IsmClearPersistenceOnObject
IsmEnumFirstSourceObjectEx
IsmEnumNextObject
IsmSetAttributeOnObject
IsmClearAbandonObjectOnCollision
IsmAbandonObjectOnCollision
IsmRegisterOperationData
IsmAppendEnvironmentString
IsmRegisterTypePostEnumerationCallback
IsmRegisterOperation
IsmRegisterProperty
IsmGetEnvironmentValue
IsmEnumFirstComponent
IsmAbortComponentEnum
IsmEnumNextComponent
TrackedIsmCreateSimpleObjectPattern
TrackedIsmCreateObjectStringsFromHandleEx
IsmDestroyObjectString
IsmTickProgressBar
IsmHookEnumeration
IsmIsObjectHandleLeafOnly
TrackedIsmCreateObjectPattern
IsmQueueEnumeration
IsmGetTransportVariable
IsmIsEnvironmentFlagSet
IsmSetCancel
IsmSetEnvironmentString
IsmSetTransportVariable
TrackedIsmCreateObjectHandle
IsmAcquireObjectEx
IsmReleaseObject
IsmDestroyObjectHandle
IsmRegisterAttribute
IsmGetObjectTypeId
IsmGetRealPlatform
TrackedIsmGetLongName

rpcrt4

UuidFromStringA
UuidToStringA
RpcStringFreeA
UuidCreate

version

GetFileVersionInfoSizeA
GetFileVersionInfoA
VerQueryValueA

setupapi

SetupGetIntField
SetupGetMultiSzFieldA
SetupGetLineTextA
SetupFindFirstLineA
SetupGetStringFieldA
SetupFindNextLine
SetupCloseInfFile
SetupOpenInfFileA
SetupOpenAppendInfFileA

Exports

Exports

DestinationModule
DllMain
ModuleInitialize
ModuleTerminate
SourceModule
TypeModule
VirtualComputerModule

Sections

.text
Size: 140KB - Virtual size: 140KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
VALUEADD/MSFT/USMT/SHFOLDER.DLL
.dll windows:5 windows x86 arch:x86

a8568b57714f17bea2cb443650a1c951

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetSystemDefaultLangID
EnumResourceNamesW
lstrcatA
lstrcpyA
CompareStringW
CreateDirectoryA
CreateDirectoryW
GetLastError
ExpandEnvironmentStringsA
EnumResourceLanguagesW
DisableThreadLibraryCalls
GlobalAlloc
GlobalFree
GetFileAttributesA
GetFileAttributesW
GetSystemDirectoryA
GetSystemDirectoryW
IsBadWritePtr
FindResourceExW
LoadResource
LockResource
GetWindowsDirectoryW
GetWindowsDirectoryA
ExpandEnvironmentStringsW
lstrlenA
lstrlenW
MultiByteToWideChar
GetVersionExA
LoadLibraryA
FreeLibrary
GetProcAddress
lstrcpynW
WideCharToMultiByte

advapi32

SetSecurityDescriptorDacl
SetFileSecurityW
InitializeAcl
GetAce
LookupAccountSidW
AddAccessAllowedAce
RegSetValueExA
RegSetValueExW
RegCreateKeyExA
RegOpenKeyA
RegQueryValueExW
RegQueryValueExA
RegCloseKey
InitializeSecurityDescriptor

Exports

Exports

SHGetFolderPathA
SHGetFolderPathW

Sections

.text
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 94B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 340B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
VALUEADD/MSFT/USMT/SYSFILES.INF
VALUEADD/MSFT/USMT/SYSMOD.DLL
.dll windows:5 windows x86 arch:x86

ff6a501d50f0048e8b8b2dbea50de783

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_REMOVABLE_RUN_FROM_SWAP
IMAGE_FILE_NET_RUN_FROM_SWAP
IMAGE_FILE_DLL

Imports

msvcrt

towlower
__lconv_init
_mbsdec
_mbschr
setlocale
wcsncmp
_mbsrchr
_adjust_fdiv
malloc
_initterm
free
_except_handler3
_wtoi
wcscmp
strncpy
atoi
_mbsnicmp
_mbsncpy
_mbsicmp
strchr
swprintf
_wtoi64
_mbslen
wcscpy
wcscat
swscanf
_wcsnicmp
wcsrchr
wcstoul
wcschr
wcslen
iswctype
_mbsinc
_mbsnextc
_ismbcspace
memmove
_wcsicmp

kernel32

FileTimeToSystemTime
GetFileSize
GetLastError
SetLastError
GetLogicalDrives
GetVersionExW
GetProcAddress
LoadLibraryA
LoadLibraryW
DeleteFileW
CreateDirectoryW
CloseHandle
HeapFree
SetFilePointer
CreateFileW
GetWindowsDirectoryW
SetEndOfFile
ReadFile
DeleteFileA
DebugBreak
ExitProcess
UnmapViewOfFile
CreateFileMappingW
CreateFileA
CreateFileMappingA
MapViewOfFile
GetFileAttributesW
FindFirstFileW
GetFileAttributesA
SetErrorMode
FindFirstFileA
FindClose
WriteFile
EnumResourceNamesW
HeapReAlloc
GetProfileStringW
GetCurrentDirectoryA
SearchPathA
BeginUpdateResourceW
EndUpdateResourceA
UpdateResourceW
FindResourceW
LoadResource
LockResource
SizeofResource
HeapAlloc
FormatMessageW
FormatMessageA
LocalFree
IsDBCSLeadByte
MultiByteToWideChar
WideCharToMultiByte
FreeLibrary
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
GetProcessHeap
GetModuleHandleA
GetVersionExA
InitializeCriticalSection
CreateEventA
FindNextFileA
GetDriveTypeA
GetLogicalDriveStringsA
SetFileAttributesA
RemoveDirectoryA
LoadLibraryExW

user32

CharLowerA
CharUpperW
wsprintfW
CharLowerW
wsprintfA
MessageBoxA

advapi32

RegQueryInfoKeyW
RegEnumKeyW
RegCloseKey
RegEnumValueW
RegQueryValueExW
RegQueryInfoKeyA
RegOpenKeyExW

shell32

SHGetSpecialFolderLocation
SHGetPathFromIDListW
SHGetMalloc

mpr

WNetOpenEnumW
WNetCancelConnection2W
WNetAddConnection2W
WNetGetConnectionW
WNetEnumResourceW

setupapi

SetupGetStringFieldW
SetupGetIntField
SetupFindNextLine
SetupFindFirstLineW
SetupGetMultiSzFieldW

log

LogBegin
LogW
LogEnd
LogReInitW

winspool.drv

GetPrinterW
DocumentPropertiesW
SetPrinterW
AddPrinterConnectionW
OpenPrinterW
ClosePrinter
ord204
EnumPrintersW
DeletePrinterConnectionW

wininet

FindNextUrlCacheEntryW
InternetSetCookieW
FindCloseUrlCache
FindFirstUrlCacheEntryW

migism

IsmIsAttributeSetOnObject
IsmRegisterOperationApplyCallback
IsmRegisterRestoreCallback
IsmSetOperationOnObject
IsmMakeApplyObject
IsmEnumNextObject
IsmRegisterOperationFilterCallback
IsmGetEnvironmentValue
IsmSetAttributeOnObject
IsmClearAttributeOnObject
IsmParsedPatternMatch
IsmIsObjectHandleNodeOnly
TrackedIsmCreateObjectPattern
IsmAbandonObjectOnCollision
IsmGetOsVersionInfo
IsmIsApplyObject
IsmProhibitPhysicalEnum
IsmRegisterPhysicalAcquireHook
IsmAddToPhysicalEnum
IsmGetPropertyFromObject
IsmGetPropertyData
IsmFilterObject
TrackedIsmGetNativeObjectName
IsmSetCancel
IsmSetEnvironmentFlag
IsmHookEnumeration
IsmRegisterPreEnumerationCallback
IsmRegisterPostEnumerationCallback
IsmGetObjectIdFromName
IsmIsPersistentObjectId
IsmSetAttributeOnObjectId
IsmAcquireObjectEx
IsmExecuteHooks
IsmAddPropertyToObjectId
IsmIsPersistentObject
IsmMakePersistentObject
IsmMakeNonCriticalObject
IsmIsAttributeSetOnObjectId
IsmClearPersistenceOnObjectId
IsmReleaseObject
IsmSetOperationOnObjectId
TrackedIsmExpandEnvironmentString
IsmEnumFirstSourceObjectEx
IsmAbortObjectEnum
IsmRegisterAttribute
IsmRegisterProperty
IsmRegisterOperation
IsmGetObjectTypeId
IsmRegisterStaticExclusion
IsmSetEnvironmentString
IsmGetEnvironmentString
IsmRegisterObjectType
TrackedIsmGetMemory
IsmRecordDelayedOperation
IsmRecordOperation
IsmReleaseMemory
IsmIsComponentSelected
TrackedIsmCreateSimpleObjectPattern
IsmQueueEnumeration
IsmDestroyObjectHandle
IsmAddComponentAlias
TrackedIsmCreateObjectStringsFromHandleEx
IsmDestroyObjectString
TrackedIsmCreateObjectHandle
IsmGetTempDirectory
IsmGetRealPlatform

gdi32

CreateDCA
CreateFontIndirectA
SelectObject
GetTextMetricsA
DeleteDC
DeleteObject

version

VerQueryValueW
GetFileVersionInfoW
GetFileVersionInfoSizeW

imagehlp

UnMapAndLoad
MapAndLoad

ole32

CoCreateInstance
CoUninitialize
CoInitialize

Exports

Exports

DestinationModule
DllMain
ModuleInitialize
ModuleTerminate
SourceModule
TypeModule
VirtualComputerModule

Sections

.text
Size: 120KB - Virtual size: 119KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 38KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
VALUEADD/MSFT/USMT/SYSMOD_A.DLL
.dll windows:5 windows x86 arch:x86

b0e2ae1a2befdddfe9bdc448a9025653

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_REMOVABLE_RUN_FROM_SWAP
IMAGE_FILE_NET_RUN_FROM_SWAP
IMAGE_FILE_DLL

Imports

msvcrt

memmove
__lconv_init
towlower
_wcsicmp
setlocale
wcsrchr
_adjust_fdiv
malloc
_initterm
free
_except_handler3
atoi
strncpy
_wcsnicmp
_mbsncmp
_mbsncpy
wcschr
sprintf
_mbsdec
_atoi64
sscanf
_mbslen
_mbsnicmp
_mbsrchr
_ismbcupper
strtoul
wcslen
strchr
_ismbblead
_mbsinc
_mbsnextc
_ismbcspace
_mbschr
_mbsicmp

kernel32

GetFileSize
GetLastError
FileTimeToSystemTime
GetLogicalDrives
GetVersionExA
GetProcAddress
LoadLibraryA
GetProfileStringA
DeleteFileA
SetLastError
CreateDirectoryA
HeapFree
SetFilePointer
CreateFileA
GetWindowsDirectoryA
UnmapViewOfFile
SetEndOfFile
ReadFile
CreateFileMappingA
MapViewOfFile
GetFileAttributesA
SetErrorMode
FindFirstFileA
FindClose
WriteFile
MultiByteToWideChar
FreeResource
LoadLibraryExA
EnumResourceNamesA
DebugBreak
ExitProcess
CloseHandle
HeapReAlloc
SearchPathA
BeginUpdateResourceA
EndUpdateResourceA
UpdateResourceA
FindResourceA
LoadResource
LockResource
SizeofResource
WideCharToMultiByte
FreeLibrary
HeapAlloc
FormatMessageA
LocalFree
IsDBCSLeadByte
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
GetProcessHeap
GetModuleHandleA
InitializeCriticalSection
CreateEventA
GetCurrentDirectoryA
FindNextFileA
GetDriveTypeA
GetLogicalDriveStringsA
SetFileAttributesA
RemoveDirectoryA

user32

CharLowerA
CharUpperA
wsprintfA
MessageBoxA

advapi32

RegEnumKeyA
RegCloseKey
RegQueryValueExA
RegEnumValueA
RegQueryInfoKeyA
RegOpenKeyExA

shell32

SHGetSpecialFolderLocation
SHGetPathFromIDListA
SHGetMalloc

mpr

WNetOpenEnumA
WNetCancelConnection2A
WNetAddConnection2A
WNetGetConnectionA
WNetEnumResourceA

setupapi

SetupGetStringFieldA
SetupGetIntField
SetupFindNextLine
SetupFindFirstLineA
SetupGetMultiSzFieldA

log

LogBegin
LogA
LogEnd
LogReInitA

winspool.drv

AddPrinterConnectionA
OpenPrinterA
GetPrinterA
EnumPrintersA
DocumentPropertiesA
SetPrinterA
DeletePrinterConnectionA
ord202
ClosePrinter

wininet

FindNextUrlCacheEntryA
InternetSetCookieA
FindCloseUrlCache
FindFirstUrlCacheEntryA

migism

IsmGetPropertyFromObject
IsmIsAttributeSetOnObject
IsmRegisterOperationApplyCallback
IsmRegisterRestoreCallback
IsmSetOperationOnObject
IsmMakeApplyObject
IsmEnumNextObject
IsmRegisterOperationFilterCallback
IsmGetEnvironmentValue
IsmSetAttributeOnObject
IsmClearAttributeOnObject
IsmParsedPatternMatch
IsmIsObjectHandleNodeOnly
TrackedIsmCreateObjectPattern
IsmAbandonObjectOnCollision
IsmGetOsVersionInfo
IsmIsApplyObject
IsmProhibitPhysicalEnum
IsmRegisterPhysicalAcquireHook
IsmAddToPhysicalEnum
IsmGetPropertyData
IsmFilterObject
TrackedIsmGetNativeObjectName
IsmSetEnvironmentFlag
IsmHookEnumeration
IsmSetCancel
IsmRegisterPreEnumerationCallback
IsmRegisterPostEnumerationCallback
IsmGetObjectIdFromName
IsmIsPersistentObjectId
IsmSetAttributeOnObjectId
IsmAcquireObjectEx
IsmExecuteHooks
IsmAddPropertyToObjectId
IsmIsPersistentObject
IsmMakePersistentObject
IsmMakeNonCriticalObject
IsmIsAttributeSetOnObjectId
IsmClearPersistenceOnObjectId
IsmReleaseObject
IsmGetRealPlatform
TrackedIsmExpandEnvironmentString
IsmEnumFirstSourceObjectEx
IsmAbortObjectEnum
IsmRegisterAttribute
IsmRegisterProperty
IsmRegisterOperation
IsmGetObjectTypeId
IsmRegisterStaticExclusion
IsmSetEnvironmentString
IsmGetEnvironmentString
IsmRegisterObjectType
IsmRecordDelayedOperation
IsmRecordOperation
TrackedIsmCreateObjectStringsFromHandleEx
TrackedIsmCreateObjectHandle
TrackedIsmGetMemory
IsmReleaseMemory
IsmIsComponentSelected
TrackedIsmCreateSimpleObjectPattern
IsmQueueEnumeration
IsmDestroyObjectHandle
IsmAddComponentAlias
IsmDestroyObjectString
IsmGetTempDirectory
IsmSetOperationOnObjectId

gdi32

CreateDCA
CreateFontIndirectA
SelectObject
GetTextMetricsA
DeleteDC
DeleteObject

version

GetFileVersionInfoA
GetFileVersionInfoSizeA
VerQueryValueA

imagehlp

MapAndLoad
UnMapAndLoad

ole32

CoCreateInstance
CoUninitialize
CoInitialize

Exports

Exports

DestinationModule
DllMain
ModuleInitialize
ModuleTerminate
SourceModule
TypeModule
VirtualComputerModule

Sections

.text
Size: 109KB - Virtual size: 109KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 34KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
VALUEADD/MSFT/USMT/UNCTRN.DLL
.dll windows:5 windows x86 arch:x86

82e4d609ac2a37379223d06899fe172e

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_REMOVABLE_RUN_FROM_SWAP
IMAGE_FILE_NET_RUN_FROM_SWAP
IMAGE_FILE_DLL

Imports

msvcrt

malloc
_adjust_fdiv
free
wcslen
_except_handler3
_mbsnextc
towlower
wcsrchr
_mbsdec
_mbsrchr
_mbsinc
strchr
_mbsicmp
wcschr
_mbschr
_initterm
memmove
iswctype
_ismbcspace
wcsncmp
wcscmp
_mbslen
setlocale
_wtoi
atoi
_wcsnicmp
_mbsnicmp
wcscspn
__lconv_init
_wcsicmp

kernel32

GetPrivateProfileIntA
FlushFileBuffers
GetLastError
CloseHandle
DeleteFileW
CopyFileW
SetLastError
HeapFree
GetTickCount
GetLogicalDriveStringsW
GetLogicalDriveStringsA
FindClose
FindFirstFileA
SetErrorMode
GetFileAttributesA
FindFirstFileW
GetDriveTypeW
GetDriveTypeA
FindNextFileW
FindNextFileA
RemoveDirectoryW
RemoveDirectoryA
SetFileAttributesW
GetPrivateProfileStringA
GetCurrentDirectoryA
EnterCriticalSection
LeaveCriticalSection
MultiByteToWideChar
WideCharToMultiByte
HeapReAlloc
ExitProcess
DebugBreak
DeleteCriticalSection
GetProcessHeap
GetModuleHandleA
GetVersionExA
InitializeCriticalSection
CreateEventA
GetWindowsDirectoryA
GetFileSize
FileTimeToDosDateTime
FileTimeToLocalFileTime
SetFileTime
LocalFileTimeToFileTime
DosDateTimeToFileTime
SetFileAttributesA
GetFileAttributesW
HeapAlloc
FormatMessageA
LocalFree
IsDBCSLeadByte
DeleteFileA
GetTempPathA
GetTempFileNameA
CreateDirectoryA
ReadFile
SetEndOfFile
SetFilePointer
CreateDirectoryW
UnmapViewOfFile
CreateFileW
CreateFileMappingW
CreateFileA
CreateFileMappingA
MapViewOfFile
WriteFile

user32

MessageBoxA
wsprintfW
CharLowerW
wsprintfA
CharLowerA

log

LogBegin
LogW
LogEnd
LogReInitW
LogA

migism

TrackedIsmGetNativeObjectName
IsmConvertObjectToMultiSz
IsmIsNonCriticalObject
IsmIsPersistentObject
IsmTickProgressBar
IsmEnumFirstSourceObjectEx
IsmGetObjectTypeName
IsmGetFirstObjectTypeId
IsmReleaseObject
IsmAcquireObjectEx
TrackedIsmCreateObjectHandle
IsmGetTempDirectory
IsmSendMessageToApp
IsmConvertMultiSzToObject
IsmGetTempFile
TrackedIsmCreateObjectPattern
IsmRegisterProgressSlice
IsmGetObjectsStatistics
IsmEnumNextPersistentObject
IsmRegisterTransport
IsmDestroyObjectHandle
IsmRegisterStaticExclusion
IsmGetObjectTypeId
TrackedIsmCreateSimpleObjectPattern
IsmDestroyObjectString
TrackedIsmCreateObjectStringsFromHandleEx
IsmReleaseMemory
IsmAbortPersistentObjectEnum
IsmGetNextObjectTypeId
IsmEnumNextObject
IsmSetCancel
IsmEnumFirstPersistentObject
IsmAbortObjectEnum

cabinet

ord22
ord20
ord21
ord13
ord14
ord11
ord10
ord23

setupapi

SetupFindNextLine
SetupGetStringFieldW
SetupFindFirstLineW
SetupCloseInfFile
SetupOpenAppendInfFileA
SetupOpenInfFileA

Exports

Exports

DllMain
ModuleInitialize
ModuleTerminate
TransportModule

Sections

.text
Size: 66KB - Virtual size: 65KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
VALUEADD/MSFT/USMT/UNCTRN_A.DLL
.dll windows:5 windows x86 arch:x86

2bb7d3e69f730b77f35434353c6c2026

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_REMOVABLE_RUN_FROM_SWAP
IMAGE_FILE_NET_RUN_FROM_SWAP
IMAGE_FILE_DLL

Imports

msvcrt

_adjust_fdiv
_except_handler3
_initterm
free
_mbsnextc
towlower
wcslen
_mbsdec
_wcsicmp
_mbsrchr
_mbsinc
strchr
wcschr
_mbschr
malloc
memmove
_ismbcprint
iswctype
_ismbcspace
wcsncmp
wcscmp
_mbslen
setlocale
_wtoi
atoi
_wcsnicmp
_mbsnicmp
wcscspn
__lconv_init
_mbsicmp

kernel32

FlushFileBuffers
GetLastError
CloseHandle
DeleteFileA
CopyFileA
SetLastError
HeapFree
GetTickCount
GetPrivateProfileIntA
FindClose
FindFirstFileA
SetErrorMode
GetFileAttributesA
GetLogicalDriveStringsA
GetDriveTypeA
FindNextFileA
RemoveDirectoryA
GetPrivateProfileStringA
GetCurrentDirectoryA
EnterCriticalSection
LeaveCriticalSection
MultiByteToWideChar
WideCharToMultiByte
HeapReAlloc
ExitProcess
DebugBreak
DeleteCriticalSection
GetProcessHeap
GetModuleHandleA
GetVersionExA
InitializeCriticalSection
CreateEventA
HeapAlloc
GetWindowsDirectoryA
GetFileSize
FileTimeToDosDateTime
FileTimeToLocalFileTime
SetFileTime
LocalFileTimeToFileTime
DosDateTimeToFileTime
SetFileAttributesA
FormatMessageA
LocalFree
IsDBCSLeadByte
GetTempPathA
GetTempFileNameA
CreateDirectoryA
ReadFile
SetEndOfFile
SetFilePointer
UnmapViewOfFile
CreateFileW
CreateFileMappingW
CreateFileA
CreateFileMappingA
MapViewOfFile
WriteFile

user32

MessageBoxA
wsprintfA
CharLowerW
CharLowerA

log

LogBegin
LogA
LogEnd
LogReInitA

migism

IsmEnumNextObject
IsmIsNonCriticalObject
IsmIsPersistentObject
IsmTickProgressBar
IsmEnumFirstSourceObjectEx
IsmGetObjectTypeName
IsmGetFirstObjectTypeId
IsmReleaseObject
IsmAcquireObjectEx
TrackedIsmCreateObjectHandle
IsmGetTempDirectory
IsmSendMessageToApp
IsmConvertMultiSzToObject
IsmGetTempFile
TrackedIsmCreateObjectPattern
IsmRegisterProgressSlice
IsmGetObjectsStatistics
IsmEnumNextPersistentObject
IsmAbortPersistentObjectEnum
IsmRegisterTransport
IsmDestroyObjectHandle
IsmRegisterStaticExclusion
IsmGetObjectTypeId
TrackedIsmCreateSimpleObjectPattern
IsmDestroyObjectString
TrackedIsmCreateObjectStringsFromHandleEx
IsmReleaseMemory
TrackedIsmGetNativeObjectName
IsmGetNextObjectTypeId
IsmFreeConvertedObjectContent
IsmAbortObjectEnum
IsmSetCancel
IsmEnumFirstPersistentObject
IsmConvertObjectContentToUnicode
IsmConvertObjectToMultiSz

cabinet

ord22
ord20
ord21
ord13
ord14
ord11
ord10
ord23

setupapi

SetupFindNextLine
SetupGetStringFieldA
SetupFindFirstLineA
SetupCloseInfFile
SetupOpenAppendInfFileA
SetupOpenInfFileA

Exports

Exports

DllMain
ModuleInitialize
ModuleTerminate
TransportModule

Sections

.text
Size: 54KB - Virtual size: 53KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
VALUEADD/MSFT/USMT/USMTDEF.INF
VALUEADD/VALUEADD.HTM
.html
WIN51
WIN51IP
WIN51IP.SP3
[BOOT]/Boot-NoEmul.img

Sharing

General

Malware Config

Signatures

Files

db4aa5da2f65f369c15faa7963f07a30

Headers

File Characteristics

PDB Paths

Imports

kernel32

user32

oleaut32

advapi32

ole32

version

Exports

Exports

Sections

.text Size: 108KB - Virtual size: 107KB

.data Size: 8KB - Virtual size: 15KB

.rsrc Size: 8KB - Virtual size: 5KB

.reloc Size: 12KB - Virtual size: 10KB

a89b915fa513f5259e87cc23d16ed4c9

Headers

File Characteristics

PDB Paths

Imports

kernel32

user32

oleaut32

advapi32

ole32

Exports

Exports

Sections

.text Size: 108KB - Virtual size: 105KB

.data Size: 12KB - Virtual size: 17KB

.rsrc Size: 8KB - Virtual size: 6KB

.reloc Size: 12KB - Virtual size: 10KB

919b6f3405c36f1a9c0ab39dee1803da

Headers

File Characteristics

PDB Paths

Imports

kernel32

Sections

.text Size: 24KB - Virtual size: 23KB

.data Size: 4KB - Virtual size: 4KB

.rsrc Size: 4KB - Virtual size: 3KB

.reloc Size: 4KB - Virtual size: 3KB

2b337d006adbf5230635c3ae54830cb9

Headers

File Characteristics

PDB Paths

Imports

kernel32

user32

oleaut32

advapi32

ole32

shell32

Exports

Exports

Sections

.text Size: 92KB - Virtual size: 91KB

.data Size: 8KB - Virtual size: 14KB

.rsrc Size: 4KB - Virtual size: 1KB

.reloc Size: 12KB - Virtual size: 9KB

450c3d7ac3c6d0610a09167108d198ff

Headers

File Characteristics

PDB Paths

Imports

kernel32

user32

advapi32

Sections

.text Size: 28KB - Virtual size: 27KB

.data Size: 4KB - Virtual size: 4KB

.text
Size: 108KB - Virtual size: 107KB

.data
Size: 8KB - Virtual size: 15KB

.rsrc
Size: 8KB - Virtual size: 5KB

.reloc
Size: 12KB - Virtual size: 10KB

.text
Size: 108KB - Virtual size: 105KB

.data
Size: 12KB - Virtual size: 17KB

.rsrc
Size: 8KB - Virtual size: 6KB

.reloc
Size: 12KB - Virtual size: 10KB

.text
Size: 24KB - Virtual size: 23KB

.data
Size: 4KB - Virtual size: 4KB

.rsrc
Size: 4KB - Virtual size: 3KB

.reloc
Size: 4KB - Virtual size: 3KB

.text
Size: 92KB - Virtual size: 91KB

.data
Size: 8KB - Virtual size: 14KB

.rsrc
Size: 4KB - Virtual size: 1KB

.reloc
Size: 12KB - Virtual size: 9KB

.text
Size: 28KB - Virtual size: 27KB

.data
Size: 4KB - Virtual size: 4KB

.text
Size: 152KB - Virtual size: 148KB

.data
Size: 12KB - Virtual size: 16KB

.rsrc
Size: 8KB - Virtual size: 6KB

.reloc
Size: 12KB - Virtual size: 11KB

.text
Size: 124KB - Virtual size: 120KB

.data
Size: 8KB - Virtual size: 16KB

.rsrc
Size: 12KB - Virtual size: 9KB

.reloc
Size: 12KB - Virtual size: 10KB

.text
Size: 188KB - Virtual size: 184KB

.data
Size: 12KB - Virtual size: 17KB

.rsrc
Size: 8KB - Virtual size: 6KB

.reloc
Size: 16KB - Virtual size: 14KB

.text
Size: 100KB - Virtual size: 96KB

.data
Size: 8KB - Virtual size: 14KB