f116d60691c66a8ff3d2482a22164e8b_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

f116d60691c66a8ff3d2482a22164e8b_JaffaCakes118
Size

12.2MB
MD5

f116d60691c66a8ff3d2482a22164e8b
SHA1

1f9b2357a4cb408a78ef60c4e24e131942dc9ad0
SHA256

ec9b65f6034865498f21e16dad9cf810eb3530bbc3eee2568c49bb3391bddd0b
SHA512

e092fbb93b90852fa785397fc711d5b93af7bed332bf75cc83bcb430b8c47dd2b65df8f011bd132da4fc9d679235b16ed6ce804bffd31be553a15d70a2f5c3a2
SSDEEP

393216:J3Liq5mgYLJz6yFYjad/TlUN2IdFzz2aWHd:J32IYLJOdjad/Bi2IdFziZ

Score

3^/10

Malware Config

Signatures

Unsigned PE 12 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Disk_Revival/Qt5Core.dll
unpack001/Disk_Revival/diskRevival.exe
unpack001/Disk_Revival/disk_revival_crash_control.exe
unpack001/Disk_Revival/ext/php_Phar.dll
unpack001/Disk_Revival/ext/php_curl.dll
unpack001/Disk_Revival/ext/php_osinfo.dll
unpack001/Disk_Revival/libeay32.dll
unpack001/Disk_Revival/libgcc_s_dw2-1.dll
unpack001/Disk_Revival/libstdc++-6.dll
unpack001/Disk_Revival/libwinpthread-1.dll
unpack001/Disk_Revival/php5ts.dll
unpack001/Disk_Revival/ssleay32.dll

Files

f116d60691c66a8ff3d2482a22164e8b_JaffaCakes118
.zip
Disk_Revival/Microsoft Visual C++ 2008 Redistributable Package (x86).exe
.exe windows:5 windows x86 arch:x86

092eb6daba2f17cbda102fd1a32acd00

Code Sign

c1:00:8b:3c:3c:88:11:d1:3e:f6:63:ec:df:40
Certificate

Issuer

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

Not Before

10/01/1997, 07:00

Not After

31/12/2020, 07:00

Subject

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

c1:00:8b:3c:3c:88:11:d1:3e:f6:63:ec:df:40
Certificate

Issuer

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

Not Before

10/01/1997, 07:00

Not After

31/12/2020, 07:00

Subject

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

2e:ab:11:dc:50:ff:5c:9d:cb:c0
Certificate

Issuer

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

Not Before

22/08/2007, 22:31

Not After

25/08/2012, 07:00

Subject

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:0f:78:4d:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

23/08/2007, 00:23

Not After

23/02/2009, 00:33

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

61:14:2c:a7:00:00:00:00:00:06
Certificate

Issuer

CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

12/06/2007, 23:54

Not After

13/06/2012, 00:04

Subject

CN=Microsoft Timestamping Service,OU=nCipher DSE ESN:27F4-D440-54F3,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

61:14:2c:a7:00:00:00:00:00:06
Certificate

Issuer

CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

12/06/2007, 23:54

Not After

13/06/2012, 00:04

Subject

CN=Microsoft Timestamping Service,OU=nCipher DSE ESN:27F4-D440-54F3,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

6a:0b:99:4f:c0:00:25:ab:11:db:45:1f:58:7a:67:a2
Certificate

Issuer

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

Not Before

16/09/2006, 01:04

Not After

15/09/2019, 07:00

Subject

CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

3e:b8:2d:0b:41:de:b8:14:82:b2:6d:80:ac:85:6a:a4:1c:9b:ef:50
Signer

Actual PE Digest

3e:b8:2d:0b:41:de:b8:14:82:b2:6d:80:ac:85:6a:a4:1c:9b:ef:50

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_REMOVABLE_RUN_FROM_SWAP
IMAGE_FILE_NET_RUN_FROM_SWAP

Imports

kernel32

GetDriveTypeA
HeapFree
FormatMessageA
LeaveCriticalSection
DeleteFileA
EnterCriticalSection
TerminateProcess
WaitForMultipleObjects
CreateEventW
SetEvent
Sleep
SetEnvironmentVariableA
GetEnvironmentVariableA
WideCharToMultiByte
HeapAlloc
SetLastError
WriteFile
MoveFileA
ExitProcess
DeleteCriticalSection
FlushFileBuffers
GetVersionExA
WaitForSingleObject
OpenEventA
GetCurrentProcess
GetFileAttributesA
GetCommandLineA
GetModuleFileNameA
CreateFileA
FindNextFileA
FindFirstFileA
CopyFileA
SetFileAttributesA
SystemTimeToFileTime
GetSystemTime
GetDiskFreeSpaceA
QueryDosDeviceA
GetCurrentDirectoryA
SetEndOfFile
SetFileTime
LocalFileTimeToFileTime
DosDateTimeToFileTime
GetExitCodeProcess
CreateProcessA
ExpandEnvironmentStringsA
GetFileSize
CreateThread
CreateEventA
GetProcessHeap
InitializeCriticalSectionAndSpinCount
GetModuleHandleA
QueryPerformanceCounter
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
SetUnhandledExceptionFilter
CloseHandle
DeviceIoControl
GetSystemDirectoryA
LoadLibraryA
GetProcAddress
FreeLibrary
SetErrorMode
GetTickCount
CreateDirectoryA
GetLastError
RemoveDirectoryA
MoveFileExA
SetFilePointer
FindClose
ReadFile

msvcrt

strchr
_strnicmp
_stricmp
strrchr
_strlwr
strncpy
strstr
_snprintf
sprintf

advapi32

AllocateAndInitializeSid
GetTokenInformation
GetLengthSid
InitiateSystemShutdownA
CryptReleaseContext
CryptGenRandom
CryptAcquireContextA
SetSecurityDescriptorDacl
AddAccessAllowedAce
InitializeAcl
InitializeSecurityDescriptor
OpenProcessToken

user32

ShowWindow
SendDlgItemMessageA
SendMessageA
DialogBoxParamA
LoadStringA
EndDialog
SetParent
MessageBoxA

ntdll

NtShutdownSystem
NtAdjustPrivilegesToken
NtClose
NtOpenProcessToken

comctl32

ord17

shell32

SHBrowseForFolderA
SHGetPathFromIDListA

Sections

.text
Size: 30KB - Virtual size: 30KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 68KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1.7MB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Disk_Revival/Qt5Core.dll
.dll windows:4 windows x86 arch:x86

41deac0699e60df57c4ed84e7981e658

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Imports

advapi32

CopySid
FreeSid
GetLengthSid
GetTokenInformation
OpenProcessToken
RegCloseKey
RegCreateKeyExW
RegDeleteKeyW
RegDeleteValueW
RegEnumKeyExW
RegEnumValueW
RegFlushKey
RegOpenKeyExW
RegQueryInfoKeyW
RegQueryValueExW
RegSetValueExW

libgcc_s_dw2-1

_Unwind_Resume
__ctzdi2
__deregister_frame_info
__divdi3
__emutls_get_address
__moddi3
__popcountdi2
__popcountsi2
__register_frame_info
__udivdi3
__umoddi3

kernel32

CancelIo
CloseHandle
CompareStringW
ConnectNamedPipe
CopyFileW
CreateDirectoryW
CreateEventW
CreateFileMappingW
CreateFileW
CreateIoCompletionPort
CreateMutexW
CreateNamedPipeW
CreateProcessW
CreateSemaphoreW
CreateThread
DeleteCriticalSection
DeleteFileW
DeviceIoControl
DuplicateHandle
EnterCriticalSection
FileTimeToSystemTime
FindClose
FindCloseChangeNotification
FindFirstChangeNotificationW
FindFirstFileExW
FindFirstFileW
FindNextChangeNotification
FindNextFileW
FlushFileBuffers
FormatMessageW
FreeEnvironmentStringsW
FreeLibrary
GetCommandLineW
GetConsoleWindow
GetCurrencyFormatW
GetCurrentDirectoryW
GetCurrentProcess
GetCurrentProcessId
GetCurrentThread
GetCurrentThreadId
GetDateFormatW
GetDiskFreeSpaceExW
GetDriveTypeW
GetEnvironmentStringsW
GetExitCodeProcess
GetFileAttributesExW
GetFileAttributesW
GetFileInformationByHandle
GetFileType
GetFullPathNameW
GetGeoInfoW
GetLastError
GetLocalTime
GetLocaleInfoW
GetLogicalDrives
GetLongPathNameW
GetModuleFileNameW
GetModuleHandleA
GetModuleHandleExW
GetModuleHandleW
GetNativeSystemInfo
GetProcAddress
GetProcessId
GetQueuedCompletionStatus
GetStartupInfoW
GetStdHandle
GetSystemDirectoryW
GetSystemInfo
GetSystemTime
GetSystemTimeAsFileTime
GetTempPathW
GetThreadPriority
GetTickCount
GetTimeFormatW
GetTimeZoneInformation
GetUserDefaultLCID
GetUserDefaultUILanguage
GetUserGeoID
GetVolumeInformationW
GetVolumeNameForVolumeMountPointW
GetVolumePathNameW
InitializeCriticalSection
IsDBCSLeadByteEx
LCMapStringW
LeaveCriticalSection
LoadLibraryA
LoadLibraryW
LocalFree
MapViewOfFile
MoveFileExW
MoveFileW
MultiByteToWideChar
OpenFileMappingW
OpenProcess
OutputDebugStringW
PeekNamedPipe
PostQueuedCompletionStatus
QueryPerformanceCounter
QueryPerformanceFrequency
ReadFile
ReadFileEx
ReleaseMutex
ReleaseSemaphore
RemoveDirectoryW
ResetEvent
ResumeThread
SetCurrentDirectoryW
SetEndOfFile
SetErrorMode
SetEvent
SetFilePointer
SetFilePointerEx
SetThreadPriority
SetUnhandledExceptionFilter
Sleep
SleepEx
SwitchToThread
SystemTimeToTzSpecificLocalTime
TerminateProcess
TerminateThread
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
UnhandledExceptionFilter
UnmapViewOfFile
VirtualAlloc
VirtualFree
VirtualProtect
VirtualQuery
WaitForMultipleObjects
WaitForSingleObject
WaitForSingleObjectEx
WideCharToMultiByte
WriteFile
WriteFileEx

mpr

WNetGetUniversalNameW

msvcrt

__argc
__argv
__dllonexit
__doserrno
__mb_cur_max
__pioinfo
__setusermatherr
_amsg_exit
_beginthreadex
_close
_endthreadex
_environ
_errno
_exit
_filelengthi64
_fileno
_get_osfhandle
_getdrive
_initterm
_iob
_lock
_lseeki64
_onexit
_open_osfhandle
_putenv
_read
_snwprintf
_strdup
_timezone
_tzset
_unlock
_tzname
_vsnprintf
_waccess
_wchmod
_wgetdcwd
_write
acos
abort
asin
atoi
calloc
exit
fclose
feof
fflush
fgetpos
fgets
fprintf
fputc
fputs
fread
free
fsetpos
fwprintf
fwrite
getenv
localeconv
localtime
malloc
memchr
memcmp
memmove
memset
mktime
memcpy
puts
raise
rand
realloc
setlocale
srand
strchr
strcmp
strcpy
strerror
strlen
strncmp
strncpy
strrchr
vfprintf
wcschr
wcscmp
wcscpy
wcslen

ole32

CoCreateGuid
CoCreateInstance
CoInitialize
CoTaskMemFree
CoUninitialize

shell32

CommandLineToArgvW
SHGetSpecialFolderPathW

user32

CallNextHookEx
CharNextExA
CreateWindowExW
DefWindowProcW
DestroyWindow
DispatchMessageW
EnumWindows
GetQueueStatus
GetWindowLongW
GetWindowThreadProcessId
KillTimer
MessageBoxW
MsgWaitForMultipleObjectsEx
PeekMessageW
PostMessageW
PostThreadMessageW
RegisterClassW
SetTimer
SetWindowLongW
SetWindowsHookExW
TranslateMessage
UnhookWindowsHookEx
UnregisterClassW

ws2_32

WSAAsyncSelect
WSACleanup
WSAStartup
gethostname

libstdc++-6

_ZNKSt9exception4whatEv
_ZNSt9bad_allocD1Ev
_ZNSt9exceptionD2Ev
_ZSt7nothrow
_ZSt9terminatev
_ZTVN10__cxxabiv117__class_type_infoE
_ZTVN10__cxxabiv120__si_class_type_infoE
_ZTVN10__cxxabiv121__vmi_class_type_infoE
_ZTVSt9bad_alloc
_ZdaPv
_ZdaPvj
_ZdlPv
_ZdlPvRKSt9nothrow_t
_ZdlPvj
_Znaj
_Znwj
_ZnwjRKSt9nothrow_t
__cxa_allocate_exception
__cxa_begin_catch
__cxa_end_catch
__cxa_guard_abort
__cxa_guard_acquire
__cxa_guard_release
__cxa_pure_virtual
__cxa_rethrow
__cxa_throw
__cxa_throw_bad_array_new_length
__gxx_personality_v0

Exports

Exports

_Z10forcepointR11QTextStream
_Z10noshowbaseR11QTextStream
_Z10qAllocMoreii
_Z10qHBNewFacePvPF8HB_ErrorS_jPhPjE
_Z10qShapeItemP14HB_ShaperItem_
_Z10qTerminatev
_Z10qvsnprintfPcjPKcS_
_Z10scientificR11QTextStream
_Z11noforcesignR11QTextStream
_Z11qHBFreeFaceP11HB_FaceRec_
_Z11qHBLoadFaceP11HB_FaceRec_
_Z11qUncompressPKhi
_Z11qWinAppInstv
_Z11qt_assert_xPKcS0_S0_i
_Z11qt_int_sqrtj
_Z12noforcepointR11QTextStream
_Z12qAppFileNamev
_Z12qFreeAlignedPv
_Z12qSharedBuildv
_Z13lowercasebaseR11QTextStream
_Z13qErrnoWarningPKcz
_Z13qErrnoWarningiPKcz
_Z13qFlagLocationPKc
_Z13uppercasebaseR11QTextStream
_Z14qAddPreRoutinePFvvE
_Z14qDecodeDataUrlRK4QUrlR7QStringR10QByteArray
_Z14qFloatDistancedd
_Z14qFloatDistanceff
_Z14qMallocAlignedjj
_Z14qWinAppCmdShowv
_Z15lowercasedigitsR11QTextStream
_Z15qAddPostRoutinePFvvE
_Z15qIsEffectiveTLDRK10QStringRef
_Z15qReallocAlignedPvjjj
_Z15qTopLevelDomainRK7QString
_Z15qWinAppPrevInstv
_Z15qt_error_stringi
_Z15uppercasedigitsR11QTextStream
_Z16qGlobalQHashSeedv
_Z16qt_check_pointerPKci
_Z17qFormatLogMessage9QtMsgTypeRK18QMessageLogContextRK7QString
_Z17qt_localeFromLCIDm
_Z17qt_message_output9QtMsgTypeRK18QMessageLogContextRK7QString
_Z18qDetectCpuFeaturesv
_Z18qInstallMsgHandlerPFv9QtMsgTypePKcE
_Z18qRemovePostRoutinePFvvE
_Z18qSetMessagePatternRK7QString
_Z19qSetGlobalQHashSeedi
_Z19qcoreVariantHandlerv
_Z20qt_qFindChild_helperPK7QObjectRK7QStringRK11QMetaObject6QFlagsIN2Qt15FindChildOptionEE
_Z21qDeleteInEventHandlerP7QObject
_Z21qRegisterResourceDataiPKhS0_S0_
_Z21qt_call_post_routinesv
_Z21qt_logging_to_consolev
_Z21qt_regexp_toCanonicalRK7QStringN7QRegExp13PatternSyntaxE
_Z22qInstallMessageHandlerPFv9QtMsgTypeRK18QMessageLogContextRK7QStringE
_Z23qUnregisterResourceDataiPKhS0_S0_
_Z23qt_qFindChildren_helperPK7QObjectRK18QRegularExpressionRK11QMetaObjectP5QListIPvE6QFlagsIN2Qt15FindChildOptionEE
_Z23qt_qFindChildren_helperPK7QObjectRK7QRegExpRK11QMetaObjectP5QListIPvE6QFlagsIN2Qt15FindChildOptionEE
_Z23qt_qFindChildren_helperPK7QObjectRK7QStringRK11QMetaObjectP5QListIPvE6QFlagsIN2Qt15FindChildOptionEE
_Z24qGlobalPostedEventsCountv
_Z24qcoreStateMachineHandlerv
_Z24qt_subtract_from_timeoutii
_Z25qEnvironmentVariableIsSetPKc
_Z26qt_QMetaEnum_debugOperatorR6QDebugiPK11QMetaObjectPKc
_Z27qEnvironmentVariableIsEmptyPKc
_Z28qEnvironmentVariableIntValuePKcPb
_Z29qRegisterStaticPluginFunction13QStaticPlugin
_Z29qt_applicationName_noFallbackv
_Z2wsR11QTextStream
_Z30qt_QMetaEnum_flagDebugOperatorR6QDebugji
_Z30qt_QMetaEnum_flagDebugOperatorR6QDebugyPK11QMetaObjectPKc
_Z32qt_register_signal_spy_callbacksRK21QSignalSpyCallbackSet
_Z3binR11QTextStream
_Z3bomR11QTextStream
_Z3decR11QTextStream
_Z3hexR11QTextStream
_Z3octR11QTextStream
_Z4endlR11QTextStream
_Z4leftR11QTextStream
_Z4qInfv
_Z5fixedR11QTextStream
_Z5flushR11QTextStream
_Z5qFreePv
_Z5qHash13QLatin1Stringj
_Z5qHashRK10QByteArrayj
_Z5qHashRK10QStringRefj
_Z5qHashRK14QVersionNumberj
_Z5qHashRK18QRegularExpressionj
_Z5qHashRK4QUrlj
_Z5qHashRK5QDatej
_Z5qHashRK5QTimej
_Z5qHashRK5QUuidj
_Z5qHashRK7QLocalej
_Z5qHashRK7QRegExpj
_Z5qHashRK7QStringj
_Z5qHashRK9QBitArrayj
_Z5qHashRK9QDateTimej
_Z5qHashRK9QMimeTypej
_Z5qHashRK9QUrlQueryj
_Z5qHashdj
_Z5qHashej
_Z5qHashfj
_Z5qQNaNv
_Z5qSNaNv
_Z5qdtoadPiS_
_Z5qrandv
_Z5resetR11QTextStream
_Z5rightR11QTextStream
_Z6centerR11QTextStream
_Z6qIsInfd
_Z6qIsInff
_Z6qIsNaNd
_Z6qIsNaNf
_Z6qsrandj
_Z6qtTrIdPKci
_Z7qMallocj
_Z7qMemSetPvij
_Z7qgetenvPKc
_Z7qputenvPKcRK10QByteArray
_Z7qstrcmpPKcS0_
_Z7qstrcmpRK10QByteArrayPKc
_Z7qstrcmpRK10QByteArrayS1_
_Z7qstrcpyPcPKc
_Z7qstrdupPKc
_Z7qstrtodPKcPS0_Pb
_Z7qt_hashRK10QStringRef
_Z7qt_hashRK7QString
_Z8qAppNamev
_Z8qMemCopyPvPKvj
_Z8qReallocPvj
_Z8qWinMainP11HINSTANCE__S0_PciRiR7QVectorIS1_E
_Z8qstricmpPKcS0_
_Z8qstrncpyPcPKcj
_Z8qstrntodPKciPS0_Pb
_Z8showbaseR11QTextStream
_Z9decodeMSGRK6tagMSG
_Z9forcesignR11QTextStream
_Z9qBadAllocv
_Z9qChecksumPKcj
_Z9qCompressPKhii
_Z9qHashBitsPKvjj
_Z9qIsFinited
_Z9qIsFinitef
_Z9qsnprintfPcjPKcz
_Z9qstrnicmpPKcS0_j
_Z9qt_assertPKcS0_i
_Z9qunsetenvPKc
_ZN10QArrayData10deallocateEPS_jj
_ZN10QArrayData11shared_nullE
_ZN10QArrayData8allocateEjjj6QFlagsINS_16AllocationOptionEE
_ZN10QByteArray10fromBase64ERKS_
_ZN10QByteArray10fromBase64ERKS_6QFlagsINS_12Base64OptionEE
_ZN10QByteArray10setRawDataEPKcj
_ZN10QByteArray11fromRawDataEPKci
_ZN10QByteArray11reallocDataEj6QFlagsIN10QArrayData16AllocationOptionEE
_ZN10QByteArray14toLower_helperERKS_
_ZN10QByteArray14toLower_helperERS_
_ZN10QByteArray14toUpper_helperERKS_
_ZN10QByteArray14toUpper_helperERS_
_ZN10QByteArray14trimmed_helperERKS_
_ZN10QByteArray14trimmed_helperERS_
_ZN10QByteArray17simplified_helperERKS_
_ZN10QByteArray17simplified_helperERS_
_ZN10QByteArray19fromPercentEncodingERKS_c
_ZN10QByteArray4chopEi
_ZN10QByteArray4fillEci
_ZN10QByteArray5clearEv
_ZN10QByteArray6appendEPKc
_ZN10QByteArray6appendEPKci
_ZN10QByteArray6appendERKS_
_ZN10QByteArray6appendEc
_ZN10QByteArray6expandEi
_ZN10QByteArray6insertEiPKc
_ZN10QByteArray6insertEiPKci
_ZN10QByteArray6insertEiRKS_
_ZN10QByteArray6insertEic
_ZN10QByteArray6insertEiic
_ZN10QByteArray6numberEdci
_ZN10QByteArray6numberEii
_ZN10QByteArray6numberEji
_ZN10QByteArray6numberExi
_ZN10QByteArray6numberEyi
_ZN10QByteArray6removeEii
_ZN10QByteArray6resizeEi
_ZN10QByteArray6setNumEdci
_ZN10QByteArray6setNumExi
_ZN10QByteArray6setNumEyi
_ZN10QByteArray7fromHexERKS_
_ZN10QByteArray7prependEPKc
_ZN10QByteArray7prependEPKci
_ZN10QByteArray7prependERKS_
_ZN10QByteArray7prependEc
_ZN10QByteArray7replaceEPKcRKS_
_ZN10QByteArray7replaceEPKciS1_i
_ZN10QByteArray7replaceERKS_S1_
_ZN10QByteArray7replaceEcRKS_
_ZN10QByteArray7replaceEcc
_ZN10QByteArray7replaceEiiPKc
_ZN10QByteArray7replaceEiiPKci
_ZN10QByteArray7replaceEiiRKS_
_ZN10QByteArray8truncateEi
_ZN10QByteArrayC1EPKci
_ZN10QByteArrayC1EiN2Qt14InitializationE
_ZN10QByteArrayC1Eic
_ZN10QByteArrayC2EPKci
_ZN10QByteArrayC2EiN2Qt14InitializationE
_ZN10QByteArrayC2Eic
_ZN10QByteArrayaSEPKc
_ZN10QByteArrayaSERKS_
_ZN10QEventLoop11qt_metacallEN11QMetaObject4CallEiPPv
_ZN10QEventLoop11qt_metacastEPKc
_ZN10QEventLoop13processEventsE6QFlagsINS_17ProcessEventsFlagEE
_ZN10QEventLoop13processEventsE6QFlagsINS_17ProcessEventsFlagEEi
_ZN10QEventLoop16staticMetaObjectE
_ZN10QEventLoop18qt_static_metacallEP7QObjectN11QMetaObject4CallEiPPv
_ZN10QEventLoop4execE6QFlagsINS_17ProcessEventsFlagEE
_ZN10QEventLoop4exitEi
_ZN10QEventLoop4quitEv
_ZN10QEventLoop5eventEP6QEvent
_ZN10QEventLoop6wakeUpEv
_ZN10QEventLoopC1EP7QObject
_ZN10QEventLoopC2EP7QObject
_ZN10QEventLoopD0Ev
_ZN10QEventLoopD1Ev
_ZN10QEventLoopD2Ev
_ZN10QExceptionD0Ev
_ZN10QExceptionD1Ev
_ZN10QExceptionD2Ev
_ZN10QJsonArray10initializeEv
_ZN10QJsonArray14fromStringListERK11QStringList
_ZN10QJsonArray15fromVariantListERK5QListI8QVariantE
_ZN10QJsonArray6appendERK10QJsonValue
_ZN10QJsonArray6detachEj
_ZN10QJsonArray6insertEiRK10QJsonValue
_ZN10QJsonArray6takeAtEi
_ZN10QJsonArray7compactEv
_ZN10QJsonArray7detach2Ej
_ZN10QJsonArray7prependERK10QJsonValue
_ZN10QJsonArray7replaceEiRK10QJsonValue
_ZN10QJsonArray8removeAtEi
_ZN10QJsonArrayC1EPN12QJsonPrivate4DataEPNS0_5ArrayE
_ZN10QJsonArrayC1ERKS_
_ZN10QJsonArrayC1Ev
_ZN10QJsonArrayC2EPN12QJsonPrivate4DataEPNS0_5ArrayE
_ZN10QJsonArrayC2ERKS_
_ZN10QJsonArrayC2Ev
_ZN10QJsonArrayD1Ev
_ZN10QJsonArrayD2Ev
_ZN10QJsonArrayaSERKS_
_ZN10QJsonArrayixEi
_ZN10QJsonValue11fromVariantERK8QVariant
_ZN10QJsonValue27stringDataFromQStringHelperERK7QString
_ZN10QJsonValue6detachEv
_ZN10QJsonValueC1E13QLatin1String
_ZN10QJsonValueC1ENS_4TypeE
_ZN10QJsonValueC1EPN12QJsonPrivate4DataEPNS0_4BaseERKNS0_5ValueE
_ZN10QJsonValueC1ERK10QJsonArray
_ZN10QJsonValueC1ERK11QJsonObject
_ZN10QJsonValueC1ERK7QString
_ZN10QJsonValueC1ERKS_
_ZN10QJsonValueC1Eb
_ZN10QJsonValueC1Ed
_ZN10QJsonValueC1Ei
_ZN10QJsonValueC1Ex
_ZN10QJsonValueC2E13QLatin1String
_ZN10QJsonValueC2ENS_4TypeE
_ZN10QJsonValueC2EPN12QJsonPrivate4DataEPNS0_4BaseERKNS0_5ValueE
_ZN10QJsonValueC2ERK10QJsonArray
_ZN10QJsonValueC2ERK11QJsonObject
_ZN10QJsonValueC2ERK7QString
_ZN10QJsonValueC2ERKS_
_ZN10QJsonValueC2Eb
_ZN10QJsonValueC2Ed
_ZN10QJsonValueC2Ei
_ZN10QJsonValueC2Ex
_ZN10QJsonValueD1Ev
_ZN10QJsonValueD2Ev
_ZN10QJsonValueaSERKS_
_ZN10QMutexPool11createMutexEi
_ZN10QMutexPool17globalInstanceGetEPKv
_ZN10QMutexPool8instanceEv
_ZN10QMutexPoolC1EN6QMutex13RecursionModeEi
_ZN10QMutexPoolC2EN6QMutex13RecursionModeEi
_ZN10QMutexPoolD1Ev
_ZN10QMutexPoolD2Ev
_ZN10QSemaphore10tryAcquireEi
_ZN10QSemaphore10tryAcquireEii
_ZN10QSemaphore7acquireEi
_ZN10QSemaphore7releaseEi
_ZN10QSemaphoreC1Ei
_ZN10QSemaphoreC2Ei
_ZN10QSemaphoreD1Ev
_ZN10QSemaphoreD2Ev
_ZN10QTextCodec11codecForMibEi
_ZN10QTextCodec12codecForHtmlERK10QByteArray
_ZN10QTextCodec12codecForHtmlERK10QByteArrayPS_
_ZN10QTextCodec12codecForNameERK10QByteArray
_ZN10QTextCodec13availableMibsEv
_ZN10QTextCodec14ConverterStateD1Ev
_ZN10QTextCodec14ConverterStateD2Ev
_ZN10QTextCodec14codecForLocaleEv
_ZN10QTextCodec15availableCodecsEv
_ZN10QTextCodec15codecForUtfTextERK10QByteArray
_ZN10QTextCodec15codecForUtfTextERK10QByteArrayPS_
_ZN10QTextCodec17setCodecForLocaleEPS_
_ZN10QTextCodecC1Ev
_ZN10QTextCodecC2Ev
_ZN10QTextCodecD0Ev
_ZN10QTextCodecD1Ev
_ZN10QTextCodecD2Ev
_ZN11QBasicMutex11isRecursiveEv
_ZN11QBasicMutex12lockInternalEi
_ZN11QBasicMutex12lockInternalEv
_ZN11QBasicMutex14unlockInternalEv
_ZN11QBasicTimer4stopEv
_ZN11QBasicTimer5startEiN2Qt9TimerTypeEP7QObject
_ZN11QBasicTimer5startEiP7QObject
_ZN11QChildEventC1EN6QEvent4TypeEP7QObject
_ZN11QChildEventC2EN6QEvent4TypeEP7QObject
_ZN11QChildEventD0Ev
_ZN11QChildEventD1Ev
_ZN11QChildEventD2Ev
_ZN11QDataStream10writeBytesEPKcj
_ZN11QDataStream11readRawDataEPci
_ZN11QDataStream11resetStatusEv
_ZN11QDataStream11skipRawDataEi
_ZN11QDataStream11unsetDeviceEv
_ZN11QDataStream12setByteOrderENS_9ByteOrderE
_ZN11QDataStream12writeRawDataEPKci
_ZN11QDataStream16abortTransactionEv
_ZN11QDataStream16startTransactionEv
_ZN11QDataStream17commitTransactionEv
_ZN11QDataStream19rollbackTransactionEv
_ZN11QDataStream25setFloatingPointPrecisionENS_22FloatingPointPrecisionE
_ZN11QDataStream9readBlockEPci
_ZN11QDataStream9readBytesERPcRj
_ZN11QDataStream9setDeviceEP9QIODevice
_ZN11QDataStream9setStatusENS_6StatusE
_ZN11QDataStreamC1EP10QByteArray6QFlagsIN9QIODevice12OpenModeFlagEE
_ZN11QDataStreamC1EP9QIODevice
_ZN11QDataStreamC1ERK10QByteArray
_ZN11QDataStreamC1Ev
_ZN11QDataStreamC2EP10QByteArray6QFlagsIN9QIODevice12OpenModeFlagEE
_ZN11QDataStreamC2EP9QIODevice
_ZN11QDataStreamC2ERK10QByteArray
_ZN11QDataStreamC2Ev
_ZN11QDataStreamD1Ev
_ZN11QDataStreamD2Ev
_ZN11QDataStreamlsEPKc
_ZN11QDataStreamlsEa
_ZN11QDataStreamlsEb
_ZN11QDataStreamlsEd
_ZN11QDataStreamlsEf
_ZN11QDataStreamlsEi
_ZN11QDataStreamlsEs
_ZN11QDataStreamlsEx
_ZN11QDataStreamrsERPc
_ZN11QDataStreamrsERa
_ZN11QDataStreamrsERb
_ZN11QDataStreamrsERd
_ZN11QDataStreamrsERf
_ZN11QDataStreamrsERi
_ZN11QDataStreamrsERs
_ZN11QDataStreamrsERx
_ZN11QFileDevice10unsetErrorEv
_ZN11QFileDevice11qt_metacallEN11QMetaObject4CallEiPPv
_ZN11QFileDevice11qt_metacastEPKc
_ZN11QFileDevice12readLineDataEPcx
_ZN11QFileDevice14setPermissionsE6QFlagsINS_10PermissionEE
_ZN11QFileDevice16staticMetaObjectE
_ZN11QFileDevice18qt_static_metacallEP7QObjectN11QMetaObject4CallEiPPv
_ZN11QFileDevice3mapExxNS_14MemoryMapFlagsE
_ZN11QFileDevice4seekEx
_ZN11QFileDevice5closeEv
_ZN11QFileDevice5flushEv
_ZN11QFileDevice5unmapEPh
_ZN11QFileDevice6resizeEx
_ZN11QFileDevice8readDataEPcx
_ZN11QFileDevice9writeDataEPKcx
_ZN11QFileDeviceC1EP7QObject
_ZN11QFileDeviceC1ER18QFileDevicePrivateP7QObject
_ZN11QFileDeviceC1Ev
_ZN11QFileDeviceC2EP7QObject
_ZN11QFileDeviceC2ER18QFileDevicePrivateP7QObject
_ZN11QFileDeviceC2Ev
_ZN11QFileDeviceD0Ev
_ZN11QFileDeviceD1Ev
_ZN11QFileDeviceD2Ev
_ZN11QFinalState11qt_metacallEN11QMetaObject4CallEiPPv
_ZN11QFinalState11qt_metacastEPKc
_ZN11QFinalState16staticMetaObjectE
_ZN11QFinalState18qt_static_metacallEP7QObjectN11QMetaObject4CallEiPPv
_ZN11QFinalState5eventEP6QEvent
_ZN11QFinalState6onExitEP6QEvent
_ZN11QFinalState7onEntryEP6QEvent
_ZN11QFinalStateC1EP6QState
_ZN11QFinalStateC1ER18QFinalStatePrivateP6QState
_ZN11QFinalStateC2EP6QState
_ZN11QFinalStateC2ER18QFinalStatePrivateP6QState
_ZN11QFinalStateD0Ev
_ZN11QFinalStateD1Ev
_ZN11QFinalStateD2Ev
_ZN11QJsonObject10initializeEv
_ZN11QJsonObject10setValueAtEiRK10QJsonValue
_ZN11QJsonObject14fromVariantMapERK4QMapI7QString8QVariantE
_ZN11QJsonObject15fromVariantHashERK5QHashI7QString8QVariantE
_ZN11QJsonObject4findE13QLatin1String
_ZN11QJsonObject4findERK7QString
_ZN11QJsonObject4takeERK7QString
_ZN11QJsonObject5eraseENS_8iteratorE
_ZN11QJsonObject6detachEj
_ZN11QJsonObject6insertERK7QStringRK10QJsonValue
_ZN11QJsonObject6removeERK7QString
_ZN11QJsonObject7compactEv
_ZN11QJsonObject7detach2Ej
_ZN11QJsonObjectC1EPN12QJsonPrivate4DataEPNS0_6ObjectE
_ZN11QJsonObjectC1ERKS_
_ZN11QJsonObjectC1Ev
_ZN11QJsonObjectC2EPN12QJsonPrivate4DataEPNS0_6ObjectE
_ZN11QJsonObjectC2ERKS_
_ZN11QJsonObjectC2Ev
_ZN11QJsonObjectD1Ev
_ZN11QJsonObjectD2Ev
_ZN11QJsonObjectaSERKS_
_ZN11QJsonObjectixE13QLatin1String
_ZN11QJsonObjectixERK7QString
_ZN11QLocaleData17bytearrayToDoubleEPKcPbS2_
_ZN11QLocaleData19bytearrayToLongLongEPKciPbS2_
_ZN11QLocaleData22bytearrayToUnsLongLongEPKciPb
_ZN11QMetaMethod14fromSignalImplEPK11QMetaObjectPPv
_ZN11QMetaObject10ConnectionC1ERKS0_
_ZN11QMetaObject10ConnectionC1Ev
_ZN11QMetaObject10ConnectionC2ERKS0_
_ZN11QMetaObject10ConnectionC2Ev
_ZN11QMetaObject10ConnectionD1Ev
_ZN11QMetaObject10ConnectionD2Ev
_ZN11QMetaObject10ConnectionaSERKS0_
_ZN11QMetaObject10disconnectEPK7QObjectiS2_i
_ZN11QMetaObject12invokeMethodEP7QObjectPKcN2Qt14ConnectionTypeE22QGenericReturnArgument16QGenericArgumentS7_S7_S7_S7_S7_S7_S7_S7_S7_
_ZN11QMetaObject13disconnectOneEPK7QObjectiS2_i
_ZN11QMetaObject14normalizedTypeEPKc
_ZN11QMetaObject16checkConnectArgsEPKcS1_
_ZN11QMetaObject16checkConnectArgsERK11QMetaMethodS2_
_ZN11QMetaObject18connectSlotsByNameEP7QObject
_ZN11QMetaObject19normalizedSignatureEPKc
_ZN11QMetaObject7connectEPK7QObjectiS2_iiPi
_ZN11QMetaObject8activateEP7QObjectPKS_iPPv
_ZN11QMetaObject8activateEP7QObjectiPPv
_ZN11QMetaObject8activateEP7QObjectiiPPv
_ZN11QMetaObject8metacallEP7QObjectNS_4CallEiPPv
_ZN11QObjectDataD0Ev
_ZN11QObjectDataD1Ev
_ZN11QObjectDataD2Ev
_ZN11QRingBuffer12reserveFrontEx
_ZN11QRingBuffer4chopEx
_ZN11QRingBuffer4freeEx
_ZN11QRingBuffer4readEPcx
_ZN11QRingBuffer4readEv
_ZN11QRingBuffer5clearEv
_ZN11QRingBuffer6appendEPKcx
_ZN11QRingBuffer6appendERK10QByteArray
_ZN11QRingBuffer7reserveEx
_ZN11QRingBuffer8readLineEPcx
_ZN11QTextStream10setPadCharE5QChar
_ZN11QTextStream11resetStatusEv
_ZN11QTextStream12readLineIntoEP7QStringx
_ZN11QTextStream13setFieldWidthEi
_ZN11QTextStream14setIntegerBaseEi
_ZN11QTextStream14setNumberFlagsE6QFlagsINS_10NumberFlagEE
_ZN11QTextStream14skipWhiteSpaceEv
_ZN11QTextStream17setFieldAlignmentENS_14FieldAlignmentE
_ZN11QTextStream20setAutoDetectUnicodeEb
_ZN11QTextStream21setRealNumberNotationENS_18RealNumberNotationE
_ZN11QTextStream22setRealNumberPrecisionEi
_ZN11QTextStream24setGenerateByteOrderMarkEb
_ZN11QTextStream4readEx
_ZN11QTextStream4seekEx
_ZN11QTextStream5flushEv
_ZN11QTextStream5resetEv
_ZN11QTextStream7readAllEv
_ZN11QTextStream8readLineEx
_ZN11QTextStream8setCodecEP10QTextCodec
_ZN11QTextStream8setCodecEPKc
_ZN11QTextStream9setDeviceEP9QIODevice
_ZN11QTextStream9setLocaleERK7QLocale
_ZN11QTextStream9setStatusENS_6StatusE
_ZN11QTextStream9setStringEP7QString6QFlagsIN9QIODevice12OpenModeFlagEE
_ZN11QTextStreamC1EP10QByteArray6QFlagsIN9QIODevice12OpenModeFlagEE
_ZN11QTextStreamC1EP6_iobuf6QFlagsIN9QIODevice12OpenModeFlagEE
_ZN11QTextStreamC1EP7QString6QFlagsIN9QIODevice12OpenModeFlagEE
_ZN11QTextStreamC1EP9QIODevice
_ZN11QTextStreamC1ERK10QByteArray6QFlagsIN9QIODevice12OpenModeFlagEE
_ZN11QTextStreamC1Ev
_ZN11QTextStreamC2EP10QByteArray6QFlagsIN9QIODevice12OpenModeFlagEE
_ZN11QTextStreamC2EP6_iobuf6QFlagsIN9QIODevice12OpenModeFlagEE
_ZN11QTextStreamC2EP7QString6QFlagsIN9QIODevice12OpenModeFlagEE
_ZN11QTextStreamC2EP9QIODevice
_ZN11QTextStreamC2ERK10QByteArray6QFlagsIN9QIODevice12OpenModeFlagEE
_ZN11QTextStreamC2Ev

Sections

.text
Size: 2.6MB - Virtual size: 2.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1.7MB - Virtual size: 1.7MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.eh_fram
Size: 483KB - Virtual size: 482KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 15KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 261KB - Virtual size: 261KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 44B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 32B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 824B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 76KB - Virtual size: 75KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Disk_Revival/class/GOP.php
Disk_Revival/class/common/Disc_info.php
.js
Disk_Revival/class/common/Disc_unid.php
Disk_Revival/class/common/Enabled_component.php
.ps1
Disk_Revival/class/common/ErrorSupervisor.php
Disk_Revival/class/common/File.php
Disk_Revival/class/common/File_system.php
Disk_Revival/class/common/Folder.php
Disk_Revival/class/common/Gen_str.php
Disk_Revival/class/common/Label_no_blink.php
Disk_Revival/class/common/Log.php
.ps1
Disk_Revival/class/common/Measure_convert.php
Disk_Revival/class/common/Speedfan.php
Disk_Revival/class/common/Win_cache.php
Disk_Revival/class/common/advance_file.php
Disk_Revival/class/common/draw_func.php
Disk_Revival/class/common/for_files.php
Disk_Revival/class/common/over_func.php
.js
Disk_Revival/class/common/resizer.php
Disk_Revival/class/const.php
Disk_Revival/class/graph/Gr_axis.php
Disk_Revival/class/graph/Gr_bars_axis.php
Disk_Revival/class/graph/Gr_bars_col.php
Disk_Revival/class/graph/Gr_col.php
Disk_Revival/class/graph/Gr_legend.php
Disk_Revival/class/graph/Gr_select_bar.php
.ps1
Disk_Revival/class/graph/Gr_singlebar_axis.php
Disk_Revival/class/graph/Gr_singlebar_col.php
Disk_Revival/class/graph/Gr_size.php
Disk_Revival/class/graph/Graph.php
.ps1
Disk_Revival/class/graph/Graph_bars.php
.ps1
Disk_Revival/class/graph/Graph_singlebar.php
Disk_Revival/class/testing/Different_func_test.php
Disk_Revival/class/testing/Different_func_wrap.php
Disk_Revival/class/testing/File_func_test.php
Disk_Revival/class/testing/File_func_wrap.php
Disk_Revival/class/testing/over_test_func.php
Disk_Revival/class/ui/Analize_autochoice.php
Disk_Revival/class/ui/Bt_different.php
Disk_Revival/class/ui/Info_files.php
Disk_Revival/class/ui/MSelect_disc.php
Disk_Revival/class/ui/Send_report.php
Disk_Revival/class/ui/Stat.php
Disk_Revival/class/ui/Tempr_control.php
Disk_Revival/class/ui/Ui_events.php
Disk_Revival/class/ui/Ui_field.php
Disk_Revival/class/ui/Ui_field_extends.php
Disk_Revival/class/ui/Ui_field_type.php
Disk_Revival/class/ui/Ui_thread.php
.ps1
Disk_Revival/class/ui/Ui_timer_fast.php
Disk_Revival/class/ui/Ui_timer_single_launch.php
Disk_Revival/class/ui/components/Bt_img.php
Disk_Revival/class/ui/components/Event_detect.php
Disk_Revival/class/ui/components/Hint.php
Disk_Revival/class/ui/components/Lang_dictionary.php
.ps1
Disk_Revival/class/ui/components/NOT_USE_Ui_splitter.php
Disk_Revival/class/ui/components/Progress_bar.php
Disk_Revival/class/ui/components/Scrollbox.php
Disk_Revival/class/ui/components/Ui_adapt_size.php
Disk_Revival/class/ui/components/Ui_group.php
.ps1
Disk_Revival/class/ui/components/Ui_mouse_event.php
Disk_Revival/class/ui/components/Ui_scroll.php
Disk_Revival/class/ui/components/Ui_timeout.php
Disk_Revival/class/ui/forms/Form_children.php
Disk_Revival/class/ui/forms/fmHelp.php
Disk_Revival/class/ui/forms/fmLog.php
Disk_Revival/class/ui/forms/fmSend_report.php
Disk_Revival/class/ui/forms/fmSkip_write_blocks.php
Disk_Revival/class/ui/forms/fmWaitDiskReady.php
Disk_Revival/class/ui/forms/fmWait_disk_stop.php
Disk_Revival/class/ui/steps/Bt_repeat.php
Disk_Revival/class/ui/steps/Bt_steps.php
Disk_Revival/class/ui/steps/Left_panel.php
Disk_Revival/class/ui/steps/Step_activator.php
Disk_Revival/class/ui/steps/Ui_analize_blocks.php
.ps1
Disk_Revival/class/ui/steps/Ui_create_blocks.php
Disk_Revival/class/ui/steps/Ui_final.php
Disk_Revival/class/ui/steps/Ui_final_operations.php
Disk_Revival/class/ui/steps/Ui_read_blocks.php
Disk_Revival/class/ui/steps/Ui_step.php
Disk_Revival/class/ui/steps/Ui_steps_story.php
.ps1
Disk_Revival/class/ui/ui_over.php
Disk_Revival/class/win_libs/Kernel32.php
Disk_Revival/class/win_libs/PsApi.php
Disk_Revival/class/win_libs/TWinAPI.php
Disk_Revival/class/win_libs/User32.php
Disk_Revival/class/win_libs/WinFunc.php
Disk_Revival/class/win_libs/Winapi.php
Disk_Revival/class/win_libs/Windows_control.php
Disk_Revival/class/win_libs/Wmi_func.php
.ps1
Disk_Revival/disc_info/_setting.txt
Disk_Revival/disc_info/global_options.txt
Disk_Revival/disc_info/opwmgaatc_setting.txt
Disk_Revival/diskRevival.exe
.exe windows:5 windows x86 arch:x86

94e8ce7c3985688d5463afba3187da59

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

oleaut32

SysFreeString
SysReAllocStringLen
SysAllocStringLen
SafeArrayPtrOfIndex
SafeArrayPutElement
SafeArrayGetElement
SafeArrayUnaccessData
SafeArrayAccessData
SafeArrayGetUBound
SafeArrayGetLBound
SafeArrayCreate
VariantChangeType
VariantCopyInd
VariantCopy
VariantClear
VariantInit
GetErrorInfo
SysFreeString

advapi32

RegQueryValueExW
RegOpenKeyExW
RegCloseKey
RegUnLoadKeyW
RegSetValueExW
RegSaveKeyW
RegRestoreKeyW
RegReplaceKeyW
RegQueryValueExW
RegQueryInfoKeyW
RegOpenKeyExW
RegLoadKeyW
RegFlushKey
RegEnumValueW
RegEnumKeyExW
RegDeleteValueW
RegDeleteKeyW
RegCreateKeyExW
RegConnectRegistryW
RegCloseKey
OpenProcessToken
LookupPrivilegeValueW
AdjustTokenPrivileges

user32

CharNextW
LoadStringW
SetClassLongW
GetClassLongW
SetWindowLongW
GetWindowLongW
CreateWindowExW
mouse_event
keybd_event
WindowFromPoint
WaitMessage
VkKeyScanW
ValidateRect
UpdateWindow
UnregisterHotKey
UnregisterClassW
UnhookWindowsHookEx
TranslateMessage
TranslateMDISysAccel
TrackPopupMenu
TrackMouseEvent
SystemParametersInfoW
ShowWindow
ShowScrollBar
ShowOwnedPopups
ShowCaret
SetWindowRgn
SetWindowsHookExW
SetWindowTextW
SetWindowPos
SetWindowPlacement
SetTimer
SetScrollRange
SetScrollPos
SetScrollInfo
SetRectEmpty
SetRect
SetPropW
SetParent
SetMenuItemInfoW
SetMenu
SetKeyboardState
SetForegroundWindow
SetFocus
SetCursorPos
SetCursor
SetClipboardData
SetCaretPos
SetCapture
SetActiveWindow
SendMessageA
SendMessageW
SendDlgItemMessageW
ScrollWindowEx
ScrollWindow
ScreenToClient
RemovePropW
RemoveMenu
ReleaseDC
ReleaseCapture
RegisterWindowMessageW
RegisterHotKey
RegisterClipboardFormatW
RegisterClassW
RedrawWindow
PtInRect
PostQuitMessage
PostMessageW
PeekMessageA
PeekMessageW
OpenClipboard
OffsetRect
MsgWaitForMultipleObjectsEx
MsgWaitForMultipleObjects
MoveWindow
MessageBoxA
MessageBoxW
MessageBeep
MapWindowPoints
MapVirtualKeyW
LockWindowUpdate
LoadStringW
LoadKeyboardLayoutW
LoadIconW
LoadCursorW
LoadBitmapW
KillTimer
IsZoomed
IsWindowVisible
IsWindowUnicode
IsWindowEnabled
IsWindow
IsIconic
IsDialogMessageA
IsDialogMessageW
IsClipboardFormatAvailable
IsChild
IsCharAlphaNumericW
IsCharAlphaW
InvalidateRect
InsertMenuItemW
InsertMenuW
InflateRect
HideCaret
GetWindowThreadProcessId
GetWindowTextW
GetWindowRect
GetWindowPlacement
GetWindowDC
GetUpdateRect
GetTopWindow
GetSystemMetrics
GetSystemMenu
GetSysColorBrush
GetSysColor
GetSubMenu
GetScrollRange
GetScrollPos
GetScrollInfo
GetScrollBarInfo
GetPropW
GetParent
GetWindow
GetMessageTime
GetMessagePos
GetMessageExtraInfo
GetMenuStringW
GetMenuState
GetMenuItemInfoW
GetMenuItemID
GetMenuItemCount
GetMenu
GetLastActivePopup
GetKeyboardState
GetKeyboardLayoutNameW
GetKeyboardLayoutList
GetKeyboardLayout
GetKeyState
GetKeyNameTextW
GetIconInfo
GetForegroundWindow
GetFocus
GetDoubleClickTime
GetDlgItem
GetDlgCtrlID
GetDesktopWindow
GetDCEx
GetDC
GetCursorPos
GetCursor
GetClipboardData
GetClientRect
GetClassNameW
GetClassInfoExW
GetClassInfoW
GetCaretPos
GetCapture
GetAsyncKeyState
GetActiveWindow
FrameRect
FindWindowExW
FindWindowW
FillRect
ExitWindowsEx
EnumWindows
EnumThreadWindows
EnumClipboardFormats
EnumChildWindows
EndPaint
EndMenu
EndDeferWindowPos
EnableWindow
EnableScrollBar
EnableMenuItem
EmptyClipboard
DrawTextExW
DrawTextW
DrawStateW
DrawMenuBar
DrawIconEx
DrawIcon
DrawFrameControl
DrawFocusRect
DrawEdge
DispatchMessageA
DispatchMessageW
DestroyWindow
DestroyMenu
DestroyIcon
DestroyCursor
DestroyCaret
DeleteMenu
DeferWindowPos
DefWindowProcW
DefMDIChildProcW
DefFrameProcW
CreatePopupMenu
CreateMenu
CreateIcon
CreateCaret
CreateAcceleratorTableW
CountClipboardFormats
CopyImage
CopyIcon
CloseClipboard
ClipCursor
ClientToScreen
ChildWindowFromPoint
CheckMenuItem
CharUpperBuffW
CharUpperW
CharNextW
CharLowerBuffW
CharLowerW
CallWindowProcW
CallNextHookEx
BringWindowToTop
BeginPaint
BeginDeferWindowPos
CharLowerA
CharUpperA
AdjustWindowRectEx
ActivateKeyboardLayout
EnumDisplayMonitors
GetMonitorInfoW
MonitorFromPoint
MonitorFromRect
MonitorFromWindow
wvsprintfA

kernel32

Sleep
VirtualFree
VirtualAlloc
lstrlenW
VirtualQuery
QueryPerformanceCounter
GetTickCount
GetSystemInfo
GetVersion
CompareStringW
IsValidLocale
SetThreadLocale
GetSystemDefaultUILanguage
GetUserDefaultUILanguage
GetLocaleInfoW
WideCharToMultiByte
MultiByteToWideChar
GetACP
LoadLibraryExW
GetStartupInfoW
GetProcAddress
GetModuleHandleW
GetModuleFileNameW
GetCommandLineW
FreeLibrary
GetLastError
UnhandledExceptionFilter
RtlUnwind
RaiseException
ExitProcess
ExitThread
SwitchToThread
GetCurrentThreadId
CreateThread
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
InitializeCriticalSection
FindFirstFileW
FindClose
WriteFile
GetStdHandle
CloseHandle
GetProcAddress
RaiseException
LoadLibraryA
GetLastError
TlsSetValue
TlsGetValue
LocalFree
LocalAlloc
GetModuleHandleW
FreeLibrary
lstrlenW
lstrcmpW
WritePrivateProfileStringW
WriteFile
WideCharToMultiByte
WaitForSingleObject
WaitForMultipleObjectsEx
VirtualQueryEx
VirtualQuery
VirtualProtect
VirtualFree
VirtualAlloc
VerSetConditionMask
VerifyVersionInfoW
TryEnterCriticalSection
TerminateProcess
SwitchToThread
SuspendThread
Sleep
SizeofResource
SetThreadPriority
SetThreadLocale
SetSystemPowerState
SetLastError
SetFilePointer
SetEvent
SetErrorMode
SetEndOfFile
SetCurrentDirectoryW
ResumeThread
ResetEvent
ReadFile
RaiseException
QueryPerformanceFrequency
QueryPerformanceCounter
IsDebuggerPresent
OpenProcess
MultiByteToWideChar
MulDiv
LockResource
LocalFree
LoadResource
LoadLibraryA
LoadLibraryW
LeaveCriticalSection
LCMapStringW
IsValidLocale
InitializeCriticalSection
HeapSize
HeapFree
HeapDestroy
HeapCreate
HeapAlloc
GlobalUnlock
GlobalSize
GlobalHandle
GlobalLock
GlobalFree
GlobalFindAtomW
GlobalDeleteAtom
GlobalAlloc
GlobalAddAtomW
GetVersionExW
GetVersion
GetTickCount
GetThreadPriority
GetThreadLocale
GetTempPathW
GetSystemInfo
GetStdHandle
GetProcAddress
GetPrivateProfileStringW
GetModuleHandleW
GetModuleFileNameW
GetLocaleInfoW
GetLocalTime
GetLastError
GetFullPathNameW
GetFileAttributesW
GetExitCodeThread
GetExitCodeProcess
GetDiskFreeSpaceW
GetDateFormatW
GetCurrentThreadId
GetCurrentThread
GetCurrentProcessId
GetCurrentProcess
GetCPInfoExW
GetCPInfo
GetACP
FreeResource
InterlockedIncrement
InterlockedExchange
InterlockedDecrement
InterlockedCompareExchange
FreeLibrary
FormatMessageW
FindResourceW
FindFirstFileW
FindClose
ExitProcess
EnumSystemLocalesW
EnumResourceNamesW
EnumCalendarInfoW
EnterCriticalSection
DeleteCriticalSection
CreateThread
CreateProcessW
CreateFileW
CreateEventW
CompareStringW
CloseHandle
Sleep
SystemTimeToTzSpecificLocalTime
TzSpecificLocalTimeToSystemTime
MulDiv

gdi32

UnrealizeObject
StretchDIBits
StretchBlt
StartPage
StartDocW
SetWindowOrgEx
SetWindowExtEx
SetWinMetaFileBits
SetViewportOrgEx
SetViewportExtEx
SetTextCharacterExtra
SetTextColor
SetStretchBltMode
SetRectRgn
SetROP2
SetPixel
SetMapMode
SetEnhMetaFileBits
SetDIBits
SetDIBColorTable
SetBrushOrgEx
SetBkMode
SetBkColor
SetAbortProc
SelectPalette
SelectObject
SelectClipRgn
SelectClipPath
SaveDC
RoundRect
RestoreDC
ResizePalette
RemoveFontResourceA
Rectangle
RectVisible
RealizePalette
Polyline
Polygon
PolyPolyline
PolyBezierTo
PolyBezier
PlayEnhMetaFile
Pie
PatBlt
MoveToEx
MaskBlt
LineTo
IntersectClipRect
GetWindowOrgEx
GetWinMetaFileBits
GetTextMetricsA
GetTextMetricsW
GetTextExtentPointW
GetTextExtentPoint32W
GetSystemPaletteEntries
GetStretchBltMode
GetStockObject
GetRgnBox
GetPixel
GetPaletteEntries
GetObjectA
GetObjectW
GetNearestPaletteIndex
GetEnhMetaFilePaletteEntries
GetEnhMetaFileHeader
GetEnhMetaFileDescriptionW
GetEnhMetaFileBits
GetDeviceCaps
GetDIBits
GetDIBColorTable
GetCurrentPositionEx
GetClipBox
GetCharABCWidthsA
GetCharABCWidthsW
GetBrushOrgEx
GetBitmapBits
GdiFlush
FrameRgn
ExtTextOutW
ExtFloodFill
ExtCreatePen
ExcludeClipRect
EnumFontsW
EnumFontFamiliesExW
EndPath
EndPage
EndDoc
Ellipse
DeleteObject
DeleteEnhMetaFile
DeleteDC
CreateSolidBrush
CreateRectRgnIndirect
CreateRectRgn
CreatePolygonRgn
CreatePenIndirect
CreatePen
CreatePalette
CreateICW
CreateHalftonePalette
CreateFontIndirectA
CreateFontIndirectW
CreateEnhMetaFileW
CreateEllipticRgn
CreateDIBitmap
CreateDIBSection
CreateDCW
CreateCompatibleDC
CreateCompatibleBitmap
CreateBrushIndirect
CreateBitmap
CopyEnhMetaFileW
CombineRgn
CloseEnhMetaFile
Chord
BitBlt
BeginPath
ArcTo
Arc
AngleArc
AddFontResourceA
AbortDoc

version

VerQueryValueW
GetFileVersionInfoSizeW
GetFileVersionInfoW

netapi32

NetWkstaGetInfo

ole32

OleUninitialize
OleInitialize
CoTaskMemFree
CoTaskMemAlloc
CoCreateInstance
CoUninitialize
CoInitialize
IsEqualGUID

comctl32

InitializeFlatSB
FlatSB_SetScrollProp
FlatSB_SetScrollPos
FlatSB_SetScrollInfo
FlatSB_GetScrollPos
FlatSB_GetScrollInfo
_TrackMouseEvent
ImageList_GetImageInfo
ImageList_SetIconSize
ImageList_GetIconSize
ImageList_Write
ImageList_Read
ImageList_GetDragImage
ImageList_DragShowNolock
ImageList_DragMove
ImageList_DragLeave
ImageList_DragEnter
ImageList_EndDrag
ImageList_BeginDrag
ImageList_Copy
ImageList_LoadImageW
ImageList_GetIcon
ImageList_Remove
ImageList_DrawEx
ImageList_Replace
ImageList_Draw
ImageList_SetOverlayImage
ImageList_GetBkColor
ImageList_SetBkColor
ImageList_ReplaceIcon
ImageList_Add
ImageList_SetImageCount
ImageList_GetImageCount
ImageList_Destroy
ImageList_Create
InitCommonControls

msvcrt

memset
memcpy

shell32

ShellExecuteA
Shell_NotifyIconW
DragQueryPoint
DragQueryFileW
DragFinish
DragAcceptFiles
SHGetSpecialFolderLocation
SHGetPathFromIDListW
SHGetMalloc
SHGetDesktopFolder
SHBrowseForFolderW

comdlg32

PageSetupDlgW
PrintDlgW
ChooseFontW
ReplaceTextW
FindTextW
ChooseColorW
GetSaveFileNameW
GetOpenFileNameW

winspool.drv

OpenPrinterW
EnumPrintersW
DocumentPropertiesW
ClosePrinter
GetDefaultPrinterW

wsock32

WSACleanup
WSAStartup
gethostname
gethostbyname
inet_ntoa

winmm

timeGetTime

Exports

Exports

TMethodImplementationIntercept
__dbk_fcall_wrapper
dbkFCallWrapperAddr

Sections

.text
Size: 4.0MB - Virtual size: 4.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.itext
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 81KB - Virtual size: 81KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 31KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 17KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.didata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 156B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tls
Size: - Virtual size: 76B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 93B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 338KB - Virtual size: 337KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rsrc
Size: 321KB - Virtual size: 320KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Disk_Revival/disk_revival_crash_control.exe
.exe windows:4 windows x86 arch:x86

39f007568503c9f6b956684a71e9235f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

qt5core

_ZN10QArrayData10deallocateEPS_jj
_ZN11QTextStreamC1EP6_iobuf6QFlagsIN9QIODevice12OpenModeFlagEE
_ZN11QTextStreamD1Ev
_ZN11QTextStreamlsEc
_ZN13QSharedMemory6attachENS_10AccessModeE
_ZN13QSharedMemory6createEiNS_10AccessModeE
_ZN13QSharedMemoryC1ERK7QStringP7QObject
_ZN13QSharedMemoryD1Ev
_ZN16QCoreApplicationC1ERiPPci
_ZN16QCoreApplicationD1Ev
_ZN16QSystemSemaphore7acquireEv
_ZN16QSystemSemaphore7releaseEi
_ZN16QSystemSemaphoreC1ERK7QStringiNS_10AccessModeE
_ZN16QSystemSemaphoreD1Ev
_ZN6QDebug9putStringEPK5QCharj
_ZN6QDebugD1Ev
_ZN7QString14compare_helperEPK5QChariPKciN2Qt15CaseSensitivityE
_ZN7QString16fromAscii_helperEPKci
_ZN7QStringaSERKS_
_ZN8QProcess13startDetachedERK7QStringRK11QStringList
_ZN8QProcess7executeERK7QString
_ZN9QDateTimeD1Ev
_ZN9QFileInfoC1ERK7QString
_ZN9QFileInfoD1Ev
_ZN9QListData11detach_growEPii
_ZN9QListData11shared_nullE
_ZN9QListData6appendEv
_ZN9QListData7disposeEPNS_4DataE
_ZNK14QMessageLogger4infoEv
_ZNK9QDateTime8toStringERK7QString
_ZNK9QFileInfo12lastModifiedEv
_ZeqRK7QStringS1_

libgcc_s_dw2-1

_Unwind_Resume
__deregister_frame_info
__register_frame_info

kernel32

DeleteCriticalSection
EnterCriticalSection
FreeLibrary
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetLastError
GetModuleHandleA
GetProcAddress
GetStartupInfoA
GetSystemTimeAsFileTime
GetTickCount
InitializeCriticalSection
LeaveCriticalSection
LoadLibraryA
QueryPerformanceCounter
SetUnhandledExceptionFilter
Sleep
TerminateProcess
TlsGetValue
UnhandledExceptionFilter
VirtualProtect
VirtualQuery

msvcrt

__dllonexit
__getmainargs
__initenv
__lconv_init
__set_app_type
__setusermatherr
_acmdln
_amsg_exit
_cexit
_fmode
_initterm
_iob
_lock
_onexit
_unlock
abort
calloc
exit
fprintf
free
fwrite
malloc
memcpy
setlocale
signal
strlen
strncmp
vfprintf

libstdc++-6

_ZNSt8ios_base4InitC1Ev
_ZNSt8ios_base4InitD1Ev
_ZSt16__ostream_insertIcSt11char_traitsIcEERSt13basic_ostreamIT_T0_ES6_PKS3_i
_ZSt4cout
_ZStlsISt11char_traitsIcEERSt13basic_ostreamIcT_ES5_PKc
__cxa_begin_catch
__cxa_end_catch
__cxa_guard_abort
__cxa_guard_acquire
__cxa_guard_release
__cxa_rethrow
__gxx_personality_v0

Sections

.text
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 56B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.eh_fram
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 52B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 32B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Disk_Revival/error.txt
Disk_Revival/ext/php_Phar.dll
.dll windows:5 windows x86 arch:x86

d9acaf0cdca077e22342601cfc7d7be0

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

D:\php-sdk\snap_5_3\vc9\x86\obj\Release_TS\php_openssl.pdb

Imports

php5ts

file_globals_id
php_network_accept_incoming
_php_stream_alloc
_zend_list_addref
php_stream_xport_crypto_setup
php_stream_xport_crypto_enable
_php_stream_free
php_set_sock_blocking
gettimeofday
php_stream_context_set_option
add_next_index_zval
php_stream_notification_notify
php_stream_socket_ops
zend_strndup
php_poll2
zend_hash_num_elements
_safe_emalloc
_erealloc
zend_hash_index_find
zend_register_resource
php_base64_decode
php_base64_encode
_ecalloc
make_digest_ex
add_next_index_string
virtual_realpath
php_stream_context_get_option
php_url_free
php_url_parse_ex
zend_is_true
php_socket_strerror
zval_is_true
convert_to_long
zval_used_for_init
zend_hash_get_current_key_ex
_zend_list_delete
zend_hash_internal_pointer_reset_ex
zend_hash_get_current_data_ex
virtual_stat
zend_hash_move_forward_ex
add_assoc_string_ex
add_assoc_long_ex
add_index_bool
add_index_string
add_index_zval
_estrndup
zend_parse_parameters
zend_fetch_resource
_convert_to_string
zend_list_insert
php_unregister_url_stream_wrapper
php_stream_xport_unregister
php_stream_generic_socket_factory
php_info_print_table_start
php_info_print_table_row
php_info_print_table_end
zend_register_list_destructors_ex
zend_register_string_constant
zend_register_long_constant
ap_php_snprintf
php_strlcpy
php_stream_xport_register
php_stream_http_wrapper
php_register_url_stream_wrapper
php_stream_ftp_wrapper
ts_resource_ex
zend_hash_find
php_error_docref0
_estrdup
_emalloc
_array_init
add_assoc_zval_ex
add_next_index_stringl
gc_remove_zval_from_buffer
_efree
add_assoc_stringl_ex
_zend_hash_add_or_update
core_globals_id
php_checkuid
php_check_open_basedir
_zval_copy_ctor_func
_zval_dtor_func

ssleay32

ord76
ord45
ord86
ord82
ord43
ord35
ord61
ord60
ord110
ord113
ord116
ord172
ord112
ord118
ord115
ord171
ord12
ord6
ord87
ord44
ord96
ord8
ord78
ord77
ord108
ord58
ord162
ord21
ord141
ord225
ord235
ord17
ord15
ord222
ord24
ord75
ord49
ord126
ord48
ord5
ord158
ord157
ord175
ord151
ord183
ord169

libeay32

ord286
ord1010
ord2117
ord1915
ord151
ord120
ord486
ord118
ord484
ord213
ord205
ord283
ord204
ord1892
ord1884
ord200
ord203
ord279
ord202
ord211
ord1941
ord1949
ord210
ord209
ord485
ord601
ord603
ord423
ord403
ord607
ord366
ord1914
ord579
ord1912
ord2207
ord2217
ord248
ord2291
ord602
ord1896
ord608
ord610
ord664
ord673
ord8
ord672
ord667
ord658
ord670
ord674
ord1305
ord1306
ord636
ord278
ord277
ord329
ord3879
ord288
ord287
ord290
ord289
ord2821
ord492
ord493
ord490
ord285
ord491
ord2151
ord2155
ord1995
ord399
ord2206
ord206
ord201
ord129
ord265
ord3067
ord266
ord264
ord315
ord3873
ord3836
ord3816
ord275
ord2399
ord2894
ord276
ord274
ord256
ord3844
ord268
ord269
ord267
ord2743
ord222
ord654
ord280
ord680
ord581
ord1015
ord1016
ord1017
ord1018
ord1022
ord227
ord223
ord2146
ord86
ord2142
ord909
ord2143
ord2145
ord2150
ord626
ord281
ord641
ord600
ord2023
ord2075
ord2442
ord1951
ord566
ord580
ord361
ord363
ord364
ord567
ord578
ord576
ord1174
ord1483
ord1508
ord357
ord1653
ord1654
ord173
ord174
ord1960
ord323
ord316
ord172
ord66
ord997
ord82
ord175
ord171
ord2254
ord2253
ord467
ord466
ord470
ord313
ord2438
ord333
ord304
ord299
ord325
ord1103
ord959
ord642
ord240
ord246
ord239
ord3212
ord510
ord509
ord2
ord298
ord368
ord754
ord1882
ord401
ord421
ord665
ord52
ord78
ord95
ord543
ord1180
ord1870
ord544
ord648
ord652
ord2011
ord2105
ord2051
ord1997
ord605
ord2067
ord2074
ord1237
ord656
ord7
ord653
ord676
ord657
ord549
ord910
ord912
ord378
ord905
ord2411
ord1969
ord679
ord2064
ord623
ord2033
ord558
ord555
ord625
ord556
ord629
ord908
ord640
ord1291
ord419
ord1304
ord1308
ord109
ord444

ws2_32

shutdown
closesocket
WSAGetLastError
recv

msvcr90

_mktime32
atoi
getenv
memcpy
memset
strstr
strchr
exit
fprintf
__iob_func
malloc
_errno
free
strncmp
_encode_pointer
_malloc_crt
_encoded_null
_decode_pointer
_initterm
_initterm_e
_amsg_exit
_adjust_fdiv
__CppXcptFilter
_crt_debugger_hook
__clean_type_info_names_internal
_unlock
__dllonexit
_lock
_onexit
_except_handler4_common
_timezone
_strnicmp
_stricmp
_fdopen
_strdup

kernel32

QueryPerformanceCounter
Sleep
InterlockedCompareExchange
TerminateProcess
GetCurrentProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
InterlockedExchange
DisableThreadLibraryCalls
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter

Exports

Exports

get_module

Sections

.text
Size: 48KB - Virtual size: 48KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 19KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Disk_Revival/ext/php_curl.dll
.dll windows:5 windows x86 arch:x86

7dbf071f21a51b2bc93879cdf6b428c2

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

D:\php-sdk\snap_5_3\vc9\x86\obj\Release_TS\php_curl.pdb

Imports

php5ts

_php_stream_alloc
php_stream_context_set
_php_stream_fopen_tmpfile
_php_stream_temp_create
file_globals_id
php_stream_context_get_option
php_trim
php_strtok_r
_php_stream_free
_php_stream_read
_zend_hash_index_update_or_next_insert
php_stream_notification_notify
zend_rebuild_symbol_table
zend_hash_find
_zend_hash_add_or_update
_php_stream_seek
_php_stream_write
_php_stream_tell
zend_strtod
zend_hex_strtod
zend_error
zend_llist_get_first_ex
zend_llist_get_next_ex
add_assoc_resource_ex
zend_llist_del_element
_zval_dtor_func
zend_ini_string_ex
zend_register_list_destructors_ex
zend_register_ini_entries
zend_register_long_constant
tsrm_mutex_alloc
zend_llist_clean
gc_remove_zval_from_buffer
_zend_list_delete
add_assoc_double_ex
_convert_to_string
php_check_open_basedir
php_checkuid
zend_llist_add_element
php_file_le_pstream
php_file_le_stream
_php_stream_cast
zend_hash_internal_pointer_reset_ex
zend_hash_get_current_data_ex
zend_hash_get_current_key_ex
zend_hash_move_forward_ex
empty_fcall_info_cache
zend_fetch_resource
zval_add_ref
zend_llist_copy
zend_register_resource
add_next_index_zval
_estrdup
_ecalloc
zend_llist_init
zend_parse_parameters
_array_init
add_assoc_long_ex
add_assoc_string_ex
add_next_index_string
add_assoc_zval_ex
_efree
php_body_write
_erealloc
_emalloc
_zend_list_addref
_estrndup
executor_globals_id
zend_call_function
_zval_ptr_dtor
php_error_docref0
convert_to_long
tsrm_mutex_free
zend_unregister_ini_entries
php_info_print_table_start
php_info_print_table_row
php_sprintf
php_info_print_table_end
ts_resource_ex
core_globals_id
tsrm_thread_id
tsrm_mutex_lock
tsrm_mutex_unlock
_zval_copy_ctor_func

libeay32

ord1
ord275
ord2644
ord2862
ord2720
ord391
ord2454
ord276
ord680
ord3889
ord653
ord7
ord656
ord151
ord120
ord421
ord544
ord542
ord1180
ord18
ord979
ord82
ord400
ord396
ord495
ord497
ord1334
ord3019
ord498
ord248
ord123
ord1336
ord110
ord140
ord556
ord625
ord958
ord2596
ord156
ord111
ord161
ord323
ord1958
ord1654
ord1653
ord2075
ord2023
ord1216
ord579
ord578
ord197
ord196
ord1804
ord183
ord566
ord1951
ord188
ord2442
ord181
ord254
ord3819
ord3874
ord961
ord258
ord213
ord486
ord150
ord118
ord464
ord209
ord484
ord316
ord268
ord269
ord2254
ord466
ord467
ord267
ord333
ord281
ord280
ord963
ord654
ord964
ord965
ord2784
ord341
ord340
ord1335
ord641
ord66
ord52
ord2431
ord78
ord95
ord657
ord1015
ord2291
ord3212
ord256
ord2927
ord2604
ord298
ord224
ord3155
ord2996
ord294
ord329
ord223
ord227
ord983
ord304
ord222
ord1252
ord342

ws2_32

recvfrom
sendto
accept
listen
__WSAFDIsSet
gethostname
ioctlsocket
getaddrinfo
freeaddrinfo
WSASetLastError
connect
setsockopt
getpeername
getsockopt
htons
bind
ntohs
getsockname
send
recv
socket
closesocket
WSAGetLastError
WSAStartup
WSACleanup
select

ssleay32

ord110
ord48
ord126
ord49
ord75
ord24
ord30
ord222
ord17
ord235
ord183
ord74
ord76
ord8
ord86
ord96
ord58
ord78
ord31
ord87
ord90
ord45
ord21
ord108
ord77
ord242
ord61
ord157
ord60
ord43
ord127
ord130
ord5
ord116
ord113
ord172
ord12
ord243
ord6
ord15
ord141

wldap32

ord30
ord211
ord46
ord41
ord27
ord301
ord33
ord200
ord79
ord35
ord32
ord143
ord26
ord50
ord60
ord22

kernel32

SetLastError
GetLastError
GetProcAddress
LoadLibraryA
GetVersionExA
FreeLibrary
DeleteCriticalSection
GetCurrentProcessId
GetCurrentThreadId
QueryPerformanceCounter
DisableThreadLibraryCalls
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
InterlockedCompareExchange
InterlockedExchange
InitializeCriticalSection
LeaveCriticalSection
EnterCriticalSection
SleepEx
GetTickCount
CloseHandle
WaitForSingleObject
ReadFile
PeekNamedPipe
WaitForMultipleObjects
GetFileType
GetStdHandle
Sleep
ExpandEnvironmentStringsA
GetSystemTimeAsFileTime
FormatMessageA

msvcr90

free
fwrite
memcpy
fread
memset
strstr
strncpy
fflush
__iob_func
malloc
strtol
atoi
calloc
realloc
_stat64
strrchr
fclose
fopen
strerror
__sys_nerr
_time64
_errno
strchr
strtoul
memmove
sscanf
tolower
isxdigit
fseek
_strtoi64
strncmp
fgets
qsort
fputs
isdigit
sprintf
fputc
isspace
_beginthreadex
isalnum
strpbrk
strspn
_fstat64
_lseeki64
getenv
_gmtime64
isalpha
_snprintf
rewind
fgetc
_read
feof
islower
isupper
isprint
isgraph
_encode_pointer
_malloc_crt
_encoded_null
_decode_pointer
_initterm
_initterm_e
_amsg_exit
_adjust_fdiv
__CppXcptFilter
_crt_debugger_hook
__clean_type_info_names_internal
_unlock
__dllonexit
_lock
_onexit
_except_handler4_common
_strnicmp
_stricmp
_strdup
_close
_fileno
_open
memchr

Exports

Exports

get_module
libssh2_banner_set
libssh2_base64_decode
libssh2_channel_close
libssh2_channel_direct_tcpip_ex
libssh2_channel_eof
libssh2_channel_flush_ex
libssh2_channel_forward_accept
libssh2_channel_forward_cancel
libssh2_channel_forward_listen_ex
libssh2_channel_free
libssh2_channel_get_exit_status
libssh2_channel_handle_extended_data
libssh2_channel_handle_extended_data2
libssh2_channel_open_ex
libssh2_channel_process_startup
libssh2_channel_read_ex
libssh2_channel_receive_window_adjust
libssh2_channel_receive_window_adjust2
libssh2_channel_request_pty_ex
libssh2_channel_request_pty_size_ex
libssh2_channel_send_eof
libssh2_channel_set_blocking
libssh2_channel_setenv_ex
libssh2_channel_wait_closed
libssh2_channel_wait_eof
libssh2_channel_window_read_ex
libssh2_channel_window_write_ex
libssh2_channel_write_ex
libssh2_channel_x11_req_ex
libssh2_exit
libssh2_hostkey_hash
libssh2_init
libssh2_keepalive_config
libssh2_keepalive_send
libssh2_knownhost_add
libssh2_knownhost_addc
libssh2_knownhost_check
libssh2_knownhost_checkp
libssh2_knownhost_del
libssh2_knownhost_free
libssh2_knownhost_get
libssh2_knownhost_init
libssh2_knownhost_readfile
libssh2_knownhost_readline
libssh2_knownhost_writefile
libssh2_knownhost_writeline
libssh2_poll
libssh2_poll_channel_read
libssh2_scp_recv
libssh2_scp_send64
libssh2_scp_send_ex
libssh2_session_abstract
libssh2_session_block_directions
libssh2_session_callback_set
libssh2_session_disconnect_ex
libssh2_session_flag
libssh2_session_free
libssh2_session_get_blocking
libssh2_session_hostkey
libssh2_session_init_ex
libssh2_session_last_errno
libssh2_session_last_error
libssh2_session_method_pref
libssh2_session_methods
libssh2_session_set_blocking
libssh2_session_startup
libssh2_sftp_close_handle
libssh2_sftp_fstat_ex
libssh2_sftp_fstatvfs
libssh2_sftp_init
libssh2_sftp_last_error
libssh2_sftp_mkdir_ex
libssh2_sftp_open_ex
libssh2_sftp_read
libssh2_sftp_readdir_ex
libssh2_sftp_rename_ex
libssh2_sftp_rmdir_ex
libssh2_sftp_seek
libssh2_sftp_seek64
libssh2_sftp_shutdown
libssh2_sftp_stat_ex
libssh2_sftp_statvfs
libssh2_sftp_symlink_ex
libssh2_sftp_tell
libssh2_sftp_tell64
libssh2_sftp_unlink_ex
libssh2_sftp_write
libssh2_trace
libssh2_trace_sethandler
libssh2_userauth_authenticated
libssh2_userauth_hostbased_fromfile_ex
libssh2_userauth_keyboard_interactive_ex
libssh2_userauth_list
libssh2_userauth_password_ex
libssh2_userauth_publickey
libssh2_userauth_publickey_fromfile_ex

Sections

.text
Size: 332KB - Virtual size: 332KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 82KB - Virtual size: 81KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 15KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Disk_Revival/ext/php_osinfo.dll
.dll windows:4 windows x86 arch:x86

51dc25d5b718a44b4d681c7bacc1d904

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Imports

oleaut32

SysFreeString
SysReAllocStringLen
SysAllocStringLen
SafeArrayPtrOfIndex
SafeArrayGetUBound
SafeArrayGetLBound
SafeArrayCreate
VariantChangeType
VariantCopy
VariantClear
VariantInit

advapi32

RegQueryValueExA
RegOpenKeyExA
RegCloseKey
RegQueryInfoKeyA
RegOpenKeyExA
RegFlushKey
RegEnumValueA
RegEnumKeyExA
RegCloseKey
OpenThreadToken
OpenProcessToken
GetUserNameA
GetTokenInformation
FreeSid
EqualSid
AllocateAndInitializeSid

user32

GetKeyboardType
DestroyWindow
LoadStringA
MessageBoxA
CharNextA
MessageBoxA
LoadStringA
GetSystemMetrics
EnumDisplayDevicesA
CharNextA
CharToOemA

kernel32

GetACP
Sleep
VirtualFree
VirtualAlloc
GetCurrentThreadId
InterlockedDecrement
InterlockedIncrement
VirtualQuery
WideCharToMultiByte
SetCurrentDirectoryA
MultiByteToWideChar
lstrlenA
lstrcpynA
LoadLibraryExA
GetThreadLocale
GetStartupInfoA
GetProcAddress
GetModuleHandleA
GetModuleFileNameA
GetLocaleInfoA
GetCurrentDirectoryA
GetCommandLineA
FreeLibrary
FindFirstFileA
FindClose
ExitProcess
WriteFile
UnhandledExceptionFilter
RtlUnwind
RaiseException
GetStdHandle
TlsSetValue
TlsGetValue
TlsFree
TlsAlloc
LocalFree
LocalAlloc
WriteFile
WaitForSingleObject
VirtualQuery
SetFilePointer
SetEvent
SetEndOfFile
SetCurrentDirectoryA
ResetEvent
ReadFile
LoadLibraryA
LeaveCriticalSection
InitializeCriticalSection
GlobalMemoryStatus
GetVolumeInformationA
GetVersionExA
GetVersion
GetThreadLocale
GetSystemInfo
GetStdHandle
GetProcAddress
GetModuleHandleA
GetModuleFileNameA
GetLocaleInfoA
GetLocalTime
GetLastError
GetFullPathNameA
GetDriveTypeA
GetDiskFreeSpaceExA
GetDiskFreeSpaceA
GetDateFormatA
GetCurrentThreadId
GetCurrentThread
GetCurrentProcess
GetComputerNameA
GetCPInfo
FreeLibrary
FormatMessageA
EnumCalendarInfoA
EnterCriticalSection
DeleteCriticalSection
CreateFileA
CreateEventA
CompareStringA
CloseHandle
Sleep

netapi32

Netbios

Exports

Exports

get_module

Sections

.text
Size: 120KB - Virtual size: 120KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.itext
Size: 1024B - Virtual size: 708B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 20KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 76B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rsrc
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Disk_Revival/graph_disk.png
.png
Disk_Revival/graph_frags.png
.png
Disk_Revival/graph_speed.png
.png
Disk_Revival/help/buttons_cancel_repeat.png
.png
Disk_Revival/help/content_style.css
Disk_Revival/help/cutting_disk.png
.png
Disk_Revival/help/cutting_disk/1.png
.png
Disk_Revival/help/cutting_disk/2.png
.png
Disk_Revival/help/cutting_disk/5.png
.png
Disk_Revival/help/cutting_disk/index.htm
Disk_Revival/help/defrag_off/index.htm
Disk_Revival/help/defrag_off/win7.png
.png
Disk_Revival/help/defrag_off/win8.png
.png
Disk_Revival/help/head.htm
Disk_Revival/help/index.htm
.js
Disk_Revival/help/jquery-2.1.4.min.js
.js
Disk_Revival/help/left_menu.htm
.html
Disk_Revival/help/logo.png
.png
Disk_Revival/help/main.htm
Disk_Revival/help/pogreshnost_grafika.png
.png
Disk_Revival/help/space.gif
.gif
Disk_Revival/img/bg_grad_right_panel.bmp
Disk_Revival/img/bg_grad_right_panel_2.jpg
.jpg
Disk_Revival/img/bg_hint.jpg
.jpg
Disk_Revival/img/bg_hint_line.bmp
Disk_Revival/img/graph_arrow_x.gif
.gif
Disk_Revival/img/graph_arrow_y.gif
.gif
Disk_Revival/img/graph_frags_x_title.gif
.gif
Disk_Revival/img/graph_frags_y_title.gif
.gif
Disk_Revival/img/graph_speed_x_title.gif
.gif
Disk_Revival/img/graph_speed_y_title.gif
.gif
Disk_Revival/img/green_line.gif
.gif
Disk_Revival/img/ico/buy_and_support.ico
Disk_Revival/img/ico/buy_and_unlock.ico
Disk_Revival/img/ico/close_20.ico
Disk_Revival/img/ico/help.ico
Disk_Revival/img/ico/help_16.ico
Disk_Revival/img/ico/help_48.ico
Disk_Revival/img/ico/icon.ico
Disk_Revival/img/ico/information_32.ico
Disk_Revival/img/ico/png/arrow_bottom.png
.png
Disk_Revival/img/ico/png/close_32.png
.png
Disk_Revival/img/ico/png/help_16.png
.png
Disk_Revival/img/ico/png/help_48.png
.png
Disk_Revival/img/ico/png/information.png
.png
Disk_Revival/img/ico/png/play_48.png
.png
Disk_Revival/img/ico/png/repeat_20.png
.png
Disk_Revival/img/ico/png/setting_128.png
.png
Disk_Revival/img/ico/repeat_20.ico
Disk_Revival/img/ico/warning.ico
Disk_Revival/img/ico/zoom.ico
Disk_Revival/img/ico/zoom_16.ico
Disk_Revival/img/load_shirma_bg.jpg
.jpg
Disk_Revival/img/marker_cur.ico
Disk_Revival/img/marker_def.ico
Disk_Revival/img/marker_done.ico
Disk_Revival/img/new_logo.jpg
.jpg
Disk_Revival/img/png/bg_grad_right_panel.png
.png
Disk_Revival/img/png/bg_hint.png
.png
Disk_Revival/img/png/bg_hint_line.png
.png
Disk_Revival/img/png/graph_select_box.png
.png
Disk_Revival/img/png/green_line.png
.png
Disk_Revival/img/png/marker_cur.png
.png
Disk_Revival/img/png/marker_def.png
.png
Disk_Revival/img/png/marker_done.png
.png
Disk_Revival/img/social_primer.jpg
.jpg
Disk_Revival/img/step_stat_shirma.ico
Disk_Revival/is_run.txt
Disk_Revival/lang/ru.xml
.xml
Disk_Revival/libeay32.dll
.dll windows:5 windows x86 arch:x86

73e7b4eafaf30559b752534f53103bd4

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

wsock32

sendto
recvfrom
bind
listen
accept
ntohl
inet_ntoa
WSACancelBlockingCall
WSACleanup
WSAStartup
gethostbyname
getsockopt
getservbyname
ntohs
htons
htonl
socket
setsockopt
connect
send
WSASetLastError
recv
WSAGetLastError
shutdown
closesocket

gdi32

CreateCompatibleDC
GetDeviceCaps
CreateCompatibleBitmap
SelectObject
GetObjectA
BitBlt
GetBitmapBits
DeleteObject
DeleteDC
CreateDCA

advapi32

ReportEventA
DeregisterEventSource
RegisterEventSourceA

user32

MessageBoxA
GetDesktopWindow
GetProcessWindowStation
GetUserObjectInformationW

msvcr90

getenv
wcsstr
_vsnprintf
vfprintf
__iob_func
abort
free
realloc
malloc
memcpy
memchr
_localtime64
_time64
memset
_gmtime64
strtoul
strncpy
_errno
memmove
_read
_write
isxdigit
isdigit
fprintf
strstr
fputs
fclose
ferror
fread
fwrite
fflush
fopen
_setmode
_fileno
ftell
feof
fseek
fgets
atoi
perror
_ftime64
qsort
strcmp
_stat64i32
_chmod
strchr
strerror
isalnum
isspace
strncmp
tolower
isupper
strrchr
sscanf
exit
strtol
signal
_getch
printf
_getpid
_except_handler4_common
_encode_pointer
_malloc_crt
_encoded_null
_decode_pointer
_initterm
_initterm_e
_amsg_exit
_adjust_fdiv
__CppXcptFilter
_crt_debugger_hook
__clean_type_info_names_internal
_unlock
__dllonexit
_lock
_onexit
sprintf

kernel32

QueryPerformanceCounter
GetTickCount
SetLastError
LoadLibraryA
FreeLibrary
GetCurrentProcessId
FindFirstFileA
FindNextFileA
GetThreadTimes
GetCurrentThread
GetStdHandle
GlobalMemoryStatus
CloseHandle
GetVersionExA
FlushConsoleInputBuffer
InterlockedExchange
Sleep
InterlockedCompareExchange
TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
IsDebuggerPresent
GetSystemTimeAsFileTime
FindClose
GetFileType
GetVersion
GetLastError
GetCurrentThreadId
GetModuleHandleA
ExitProcess
GetProcAddress

Exports

Exports

ACCESS_DESCRIPTION_free
ACCESS_DESCRIPTION_it
ACCESS_DESCRIPTION_new
AES_bi_ige_encrypt
AES_cbc_encrypt
AES_cfb128_encrypt
AES_cfb1_encrypt
AES_cfb8_encrypt
AES_cfbr_encrypt_block
AES_ctr128_encrypt
AES_decrypt
AES_ecb_encrypt
AES_encrypt
AES_ige_encrypt
AES_ofb128_encrypt
AES_options
AES_set_decrypt_key
AES_set_encrypt_key
AES_unwrap_key
AES_wrap_key
ASN1_ANY_it
ASN1_BIT_STRING_asn1_meth
ASN1_BIT_STRING_free
ASN1_BIT_STRING_get_bit
ASN1_BIT_STRING_it
ASN1_BIT_STRING_name_print
ASN1_BIT_STRING_new
ASN1_BIT_STRING_num_asc
ASN1_BIT_STRING_set
ASN1_BIT_STRING_set_asc
ASN1_BIT_STRING_set_bit
ASN1_BMPSTRING_free
ASN1_BMPSTRING_it
ASN1_BMPSTRING_new
ASN1_BOOLEAN_it
ASN1_ENUMERATED_free
ASN1_ENUMERATED_get
ASN1_ENUMERATED_it
ASN1_ENUMERATED_new
ASN1_ENUMERATED_set
ASN1_ENUMERATED_to_BN
ASN1_FBOOLEAN_it
ASN1_GENERALIZEDTIME_check
ASN1_GENERALIZEDTIME_free
ASN1_GENERALIZEDTIME_it
ASN1_GENERALIZEDTIME_new
ASN1_GENERALIZEDTIME_print
ASN1_GENERALIZEDTIME_set
ASN1_GENERALIZEDTIME_set_string
ASN1_GENERALSTRING_free
ASN1_GENERALSTRING_it
ASN1_GENERALSTRING_new
ASN1_HEADER_free
ASN1_HEADER_new
ASN1_IA5STRING_asn1_meth
ASN1_IA5STRING_free
ASN1_IA5STRING_it
ASN1_IA5STRING_new
ASN1_INTEGER_cmp
ASN1_INTEGER_dup
ASN1_INTEGER_free
ASN1_INTEGER_get
ASN1_INTEGER_it
ASN1_INTEGER_new
ASN1_INTEGER_set
ASN1_INTEGER_to_BN
ASN1_NULL_free
ASN1_NULL_it
ASN1_NULL_new
ASN1_OBJECT_create
ASN1_OBJECT_free
ASN1_OBJECT_it
ASN1_OBJECT_new
ASN1_OCTET_STRING_NDEF_it
ASN1_OCTET_STRING_cmp
ASN1_OCTET_STRING_dup
ASN1_OCTET_STRING_free
ASN1_OCTET_STRING_it
ASN1_OCTET_STRING_new
ASN1_OCTET_STRING_set
ASN1_PRINTABLESTRING_free
ASN1_PRINTABLESTRING_it
ASN1_PRINTABLESTRING_new
ASN1_PRINTABLE_free
ASN1_PRINTABLE_it
ASN1_PRINTABLE_new
ASN1_PRINTABLE_type
ASN1_SEQUENCE_it
ASN1_STRING_TABLE_add
ASN1_STRING_TABLE_cleanup
ASN1_STRING_TABLE_get
ASN1_STRING_cmp
ASN1_STRING_data
ASN1_STRING_dup
ASN1_STRING_encode
ASN1_STRING_free
ASN1_STRING_get_default_mask
ASN1_STRING_length
ASN1_STRING_length_set
ASN1_STRING_new
ASN1_STRING_print
ASN1_STRING_print_ex
ASN1_STRING_print_ex_fp
ASN1_STRING_set
ASN1_STRING_set0
ASN1_STRING_set_by_NID
ASN1_STRING_set_default_mask
ASN1_STRING_set_default_mask_asc
ASN1_STRING_to_UTF8
ASN1_STRING_type
ASN1_STRING_type_new
ASN1_T61STRING_free
ASN1_T61STRING_it
ASN1_T61STRING_new
ASN1_TBOOLEAN_it
ASN1_TIME_check
ASN1_TIME_free
ASN1_TIME_it
ASN1_TIME_new
ASN1_TIME_print
ASN1_TIME_set
ASN1_TIME_to_generalizedtime
ASN1_TYPE_free
ASN1_TYPE_get
ASN1_TYPE_get_int_octetstring
ASN1_TYPE_get_octetstring
ASN1_TYPE_new
ASN1_TYPE_set
ASN1_TYPE_set1
ASN1_TYPE_set_int_octetstring
ASN1_TYPE_set_octetstring
ASN1_UNIVERSALSTRING_free
ASN1_UNIVERSALSTRING_it
ASN1_UNIVERSALSTRING_new
ASN1_UNIVERSALSTRING_to_string
ASN1_UTCTIME_check
ASN1_UTCTIME_cmp_time_t
ASN1_UTCTIME_free
ASN1_UTCTIME_it
ASN1_UTCTIME_new
ASN1_UTCTIME_print
ASN1_UTCTIME_set
ASN1_UTCTIME_set_string
ASN1_UTF8STRING_free
ASN1_UTF8STRING_it
ASN1_UTF8STRING_new
ASN1_VISIBLESTRING_free
ASN1_VISIBLESTRING_it
ASN1_VISIBLESTRING_new
ASN1_add_oid_module
ASN1_check_infinite_end
ASN1_const_check_infinite_end
ASN1_d2i_bio
ASN1_d2i_fp
ASN1_digest
ASN1_dup
ASN1_generate_nconf
ASN1_generate_v3
ASN1_get_object
ASN1_i2d_bio
ASN1_i2d_fp
ASN1_item_d2i
ASN1_item_d2i_bio
ASN1_item_d2i_fp
ASN1_item_digest
ASN1_item_dup
ASN1_item_ex_d2i
ASN1_item_ex_free
ASN1_item_ex_i2d
ASN1_item_ex_new
ASN1_item_free
ASN1_item_i2d
ASN1_item_i2d_bio
ASN1_item_i2d_fp
ASN1_item_ndef_i2d
ASN1_item_new
ASN1_item_pack
ASN1_item_sign
ASN1_item_unpack
ASN1_item_verify
ASN1_mbstring_copy
ASN1_mbstring_ncopy
ASN1_object_size
ASN1_pack_string
ASN1_parse
ASN1_parse_dump
ASN1_primitive_free
ASN1_primitive_new
ASN1_put_eoc
ASN1_put_object
ASN1_seq_pack
ASN1_seq_unpack
ASN1_sign
ASN1_tag2bit
ASN1_tag2str
ASN1_template_d2i
ASN1_template_free
ASN1_template_i2d
ASN1_template_new
ASN1_unpack_string
ASN1_verify
AUTHORITY_INFO_ACCESS_free
AUTHORITY_INFO_ACCESS_it
AUTHORITY_INFO_ACCESS_new
AUTHORITY_KEYID_free
AUTHORITY_KEYID_it
AUTHORITY_KEYID_new
BASIC_CONSTRAINTS_free
BASIC_CONSTRAINTS_it
BASIC_CONSTRAINTS_new
BF_cbc_encrypt
BF_cfb64_encrypt
BF_decrypt
BF_ecb_encrypt
BF_encrypt
BF_ofb64_encrypt
BF_options
BF_set_key
BIGNUM_it
BIO_accept
BIO_callback_ctrl
BIO_clear_flags
BIO_copy_next_retry
BIO_ctrl
BIO_ctrl_get_read_request
BIO_ctrl_get_write_guarantee
BIO_ctrl_pending
BIO_ctrl_reset_read_request
BIO_ctrl_wpending
BIO_debug_callback
BIO_dgram_non_fatal_error
BIO_dump
BIO_dump_cb
BIO_dump_fp
BIO_dump_indent
BIO_dump_indent_cb
BIO_dump_indent_fp
BIO_dup_chain
BIO_f_base64
BIO_f_buffer
BIO_f_cipher
BIO_f_md
BIO_f_nbio_test
BIO_f_null
BIO_f_reliable
BIO_fd_non_fatal_error
BIO_fd_should_retry
BIO_find_type
BIO_free
BIO_free_all
BIO_get_accept_socket
BIO_get_callback
BIO_get_callback_arg
BIO_get_ex_data
BIO_get_ex_new_index
BIO_get_host_ip
BIO_get_port
BIO_get_retry_BIO
BIO_get_retry_reason
BIO_gethostbyname
BIO_gets
BIO_indent
BIO_int_ctrl
BIO_method_name
BIO_method_type
BIO_new
BIO_new_accept
BIO_new_bio_pair
BIO_new_connect
BIO_new_dgram
BIO_new_fd
BIO_new_file
BIO_new_fp
BIO_new_mem_buf
BIO_new_socket
BIO_next
BIO_nread
BIO_nread0
BIO_number_read
BIO_number_written
BIO_nwrite
BIO_nwrite0
BIO_pop
BIO_printf
BIO_ptr_ctrl
BIO_push
BIO_puts
BIO_read
BIO_s_accept
BIO_s_bio
BIO_s_connect
BIO_s_datagram
BIO_s_fd
BIO_s_file
BIO_s_mem
BIO_s_null
BIO_s_socket
BIO_set
BIO_set_callback
BIO_set_callback_arg
BIO_set_cipher
BIO_set_ex_data
BIO_set_flags
BIO_set_tcp_ndelay
BIO_snprintf
BIO_sock_cleanup
BIO_sock_error
BIO_sock_init
BIO_sock_non_fatal_error
BIO_sock_should_retry
BIO_socket_ioctl
BIO_socket_nbio
BIO_test_flags
BIO_vfree
BIO_vprintf
BIO_vsnprintf
BIO_write
BN_BLINDING_convert
BN_BLINDING_convert_ex
BN_BLINDING_create_param
BN_BLINDING_free
BN_BLINDING_get_flags
BN_BLINDING_get_thread_id
BN_BLINDING_invert
BN_BLINDING_invert_ex
BN_BLINDING_new
BN_BLINDING_set_flags
BN_BLINDING_set_thread_id
BN_BLINDING_update
BN_CTX_end
BN_CTX_free
BN_CTX_get
BN_CTX_init
BN_CTX_new
BN_CTX_start
BN_GENCB_call
BN_GF2m_add
BN_GF2m_arr2poly
BN_GF2m_mod
BN_GF2m_mod_arr
BN_GF2m_mod_div
BN_GF2m_mod_div_arr
BN_GF2m_mod_exp
BN_GF2m_mod_exp_arr
BN_GF2m_mod_inv
BN_GF2m_mod_inv_arr
BN_GF2m_mod_mul
BN_GF2m_mod_mul_arr
BN_GF2m_mod_solve_quad
BN_GF2m_mod_solve_quad_arr
BN_GF2m_mod_sqr
BN_GF2m_mod_sqr_arr
BN_GF2m_mod_sqrt
BN_GF2m_mod_sqrt_arr
BN_GF2m_poly2arr
BN_MONT_CTX_copy
BN_MONT_CTX_free
BN_MONT_CTX_init
BN_MONT_CTX_new
BN_MONT_CTX_set
BN_MONT_CTX_set_locked
BN_RECP_CTX_free
BN_RECP_CTX_init
BN_RECP_CTX_new
BN_RECP_CTX_set
BN_X931_derive_prime_ex
BN_X931_generate_Xpq
BN_X931_generate_prime_ex
BN_add
BN_add_word
BN_bin2bn
BN_bn2bin
BN_bn2dec
BN_bn2hex
BN_bn2mpi
BN_bntest_rand
BN_clear
BN_clear_bit
BN_clear_free
BN_cmp
BN_copy
BN_dec2bn
BN_div
BN_div_recp
BN_div_word
BN_dup
BN_exp
BN_free
BN_from_montgomery
BN_gcd
BN_generate_prime
BN_generate_prime_ex
BN_get0_nist_prime_192
BN_get0_nist_prime_224
BN_get0_nist_prime_256
BN_get0_nist_prime_384
BN_get0_nist_prime_521
BN_get_params
BN_get_word
BN_hex2bn
BN_init
BN_is_bit_set
BN_is_prime
BN_is_prime_ex
BN_is_prime_fasttest
BN_is_prime_fasttest_ex
BN_kronecker
BN_lshift
BN_lshift1
BN_mask_bits
BN_mod_add
BN_mod_add_quick
BN_mod_exp
BN_mod_exp2_mont
BN_mod_exp_mont
BN_mod_exp_mont_consttime
BN_mod_exp_mont_word
BN_mod_exp_recp
BN_mod_exp_simple
BN_mod_inverse
BN_mod_lshift
BN_mod_lshift1
BN_mod_lshift1_quick
BN_mod_lshift_quick
BN_mod_mul
BN_mod_mul_montgomery
BN_mod_mul_reciprocal
BN_mod_sqr
BN_mod_sqrt
BN_mod_sub
BN_mod_sub_quick
BN_mod_word
BN_mpi2bn
BN_mul
BN_mul_word
BN_new
BN_nist_mod_192
BN_nist_mod_224
BN_nist_mod_256
BN_nist_mod_384
BN_nist_mod_521
BN_nnmod
BN_num_bits
BN_num_bits_word
BN_options
BN_print
BN_print_fp
BN_pseudo_rand
BN_pseudo_rand_range
BN_rand
BN_rand_range
BN_reciprocal
BN_rshift
BN_rshift1
BN_set_bit
BN_set_negative
BN_set_params
BN_set_word
BN_sqr
BN_sub
BN_sub_word
BN_swap
BN_to_ASN1_ENUMERATED
BN_to_ASN1_INTEGER
BN_uadd
BN_ucmp
BN_usub
BN_value_one
BUF_MEM_free
BUF_MEM_grow
BUF_MEM_grow_clean
BUF_MEM_new
BUF_memdup
BUF_strdup
BUF_strlcat
BUF_strlcpy
BUF_strndup
CAST_cbc_encrypt
CAST_cfb64_encrypt
CAST_decrypt
CAST_ecb_encrypt
CAST_encrypt
CAST_ofb64_encrypt
CAST_set_key
CBIGNUM_it
CERTIFICATEPOLICIES_free
CERTIFICATEPOLICIES_it
CERTIFICATEPOLICIES_new
COMP_CTX_free
COMP_CTX_new
COMP_compress_block
COMP_expand_block
COMP_rle
COMP_zlib
COMP_zlib_cleanup
CONF_dump_bio
CONF_dump_fp
CONF_free
CONF_get1_default_config_file
CONF_get_number

Sections

.text
Size: 642KB - Virtual size: 642KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 249KB - Virtual size: 248KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 59KB - Virtual size: 71KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Disk_Revival/libgcc_s_dw2-1.dll
.dll windows:4 windows x86 arch:x86

5a18b12e92e997d2ca370de96393cb7f

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Imports

kernel32

DeleteCriticalSection
EnterCriticalSection
FreeLibrary
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetLastError
GetModuleHandleA
GetProcAddress
GetSystemTimeAsFileTime
GetTickCount
InitializeCriticalSection
LeaveCriticalSection
LoadLibraryA
QueryPerformanceCounter
SetUnhandledExceptionFilter
Sleep
TerminateProcess
TlsGetValue
UnhandledExceptionFilter
VirtualProtect
VirtualQuery

msvcrt

__dllonexit
_amsg_exit
_initterm
_iob
_lock
_onexit
_unlock
abort
calloc
free
fwrite
malloc
memset
memcpy
realloc
strlen
strncmp
vfprintf

libwinpthread-1

pthread_getspecific
pthread_key_create
pthread_mutex_init
pthread_mutex_lock
pthread_mutex_unlock
pthread_once
pthread_setspecific

Exports

Exports

_Unwind_Backtrace
_Unwind_DeleteException
_Unwind_FindEnclosingFunction
_Unwind_Find_FDE
_Unwind_ForcedUnwind
_Unwind_GetCFA
_Unwind_GetDataRelBase
_Unwind_GetGR
_Unwind_GetIP
_Unwind_GetIPInfo
_Unwind_GetLanguageSpecificData
_Unwind_GetRegionStart
_Unwind_GetTextRelBase
_Unwind_RaiseException
_Unwind_Resume
_Unwind_Resume_or_Rethrow
_Unwind_SetGR
_Unwind_SetIP
__absvdi2
__absvsi2
__addtf3
__addvdi3
__addvsi3
__ashldi3
__ashrdi3
__bswapdi2
__bswapsi2
__clear_cache
__clrsbdi2
__clrsbsi2
__clzdi2
__clzsi2
__cmpdi2
__ctzdi2
__ctzsi2
__deregister_frame
__deregister_frame_info
__deregister_frame_info_bases
__divdc3
__divdi3
__divsc3
__divtc3
__divtf3
__divxc3
__emutls_get_address
__emutls_register_common
__enable_execute_stack
__eqtf2
__extenddftf2
__extendsftf2
__extendxftf2
__ffsdi2
__ffssi2
__fixdfdi
__fixsfdi
__fixtfdi
__fixtfsi
__fixunsdfdi
__fixunsdfsi
__fixunssfdi
__fixunssfsi
__fixunstfdi
__fixunstfsi
__fixunsxfdi
__fixunsxfsi
__fixxfdi
__floatdidf
__floatdisf
__floatditf
__floatdixf
__floatsitf
__floatundidf
__floatundisf
__floatunditf
__floatundixf
__floatunsitf
__gcc_personality_v0
__getf2
__gttf2
__letf2
__lshrdi3
__lttf2
__moddi3
__muldc3
__muldi3
__mulsc3
__multc3
__multf3
__mulvdi3
__mulvsi3
__mulxc3
__negdi2
__negtf2
__negvdi2
__negvsi2
__netf2
__paritydi2
__paritysi2
__popcountdi2
__popcountsi2
__powidf2
__powisf2
__powitf2
__powixf2
__register_frame
__register_frame_info
__register_frame_info_bases
__register_frame_info_table
__register_frame_info_table_bases
__register_frame_table
__subtf3
__subvdi3
__subvsi3
__trunctfdf2
__trunctfsf2
__trunctfxf2
__ucmpdi2
__udivdi3
__udivmoddi4
__umoddi3
__unordtf2

Sections

.text
Size: 86KB - Virtual size: 85KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 32B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

/4
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 44B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 32B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Disk_Revival/libstdc++-6.dll
.dll windows:4 windows x86 arch:x86

a510f8d03e357874fce2349915374c7a

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Imports

libgcc_s_dw2-1

_Unwind_DeleteException
_Unwind_GetDataRelBase
_Unwind_GetIPInfo
_Unwind_GetLanguageSpecificData
_Unwind_GetRegionStart
_Unwind_GetTextRelBase
_Unwind_RaiseException
_Unwind_Resume
_Unwind_Resume_or_Rethrow
_Unwind_SetGR
_Unwind_SetIP
__deregister_frame_info
__emutls_get_address
__register_frame_info
__udivdi3
__umoddi3

kernel32

DeleteCriticalSection
EnterCriticalSection
FreeLibrary
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetLastError
GetModuleFileNameW
GetModuleHandleA
GetModuleHandleExW
GetModuleHandleW
GetProcAddress
GetSystemTimeAsFileTime
GetTickCount
GetTimeZoneInformation
InitializeCriticalSection
IsDBCSLeadByteEx
LeaveCriticalSection
LoadLibraryA
MultiByteToWideChar
QueryPerformanceCounter
SetUnhandledExceptionFilter
Sleep
TerminateProcess
TlsGetValue
UnhandledExceptionFilter
VirtualProtect
VirtualQuery
WideCharToMultiByte

msvcrt

__dllonexit
__doserrno
__mb_cur_max
__pioinfo
_amsg_exit
_errno
_exit
_fdopen
_filelengthi64
_fileno
_fileno
_fstat64
_initterm
_iob
_lock
_lseeki64
_onexit
_read
_snwprintf
_strnicmp
_unlock
_write
_write
abort
atoi
calloc
fclose
fflush
fgetpos
fopen
fputc
fputs
fread
free
fsetpos
fwprintf
fwrite
getc
getenv
getwc
isalnum
isspace
iswctype
localeconv
malloc
memchr
memcmp
memmove
memset
memcpy
putc
putwc
raise
realloc
setlocale
setvbuf
sprintf
strchr
strcmp
strcoll
strerror
strftime
strlen
strncmp
strtoul
strxfrm
towlower
towupper
ungetc
ungetwc
vfprintf
wcscoll
wcscpy
wcsftime
wcslen
wcsxfrm

libwinpthread-1

clock_gettime
nanosleep
pthread_cond_broadcast
pthread_cond_destroy
pthread_cond_signal
pthread_cond_wait
pthread_create
pthread_detach
pthread_equal
pthread_getspecific
pthread_join
pthread_key_create
pthread_key_delete
pthread_mutex_destroy
pthread_mutex_init
pthread_mutex_lock
pthread_mutex_unlock
pthread_num_processors_np
pthread_once
pthread_setspecific

user32

MessageBoxW

Exports

Exports

_ZGVN9__gnu_cxx16bitmap_allocatorIcE13_S_mem_blocksE
_ZGVN9__gnu_cxx16bitmap_allocatorIcE15_S_last_requestE
_ZGVN9__gnu_cxx16bitmap_allocatorIcE6_S_mutE
_ZGVN9__gnu_cxx16bitmap_allocatorIwE13_S_mem_blocksE
_ZGVN9__gnu_cxx16bitmap_allocatorIwE15_S_last_requestE
_ZGVN9__gnu_cxx16bitmap_allocatorIwE6_S_mutE
_ZGVNSt10moneypunctIcLb0EE2idE
_ZGVNSt10moneypunctIcLb1EE2idE
_ZGVNSt10moneypunctIwLb0EE2idE
_ZGVNSt10moneypunctIwLb1EE2idE
_ZGVNSt11__timepunctIcE2idE
_ZGVNSt11__timepunctIwE2idE
_ZGVNSt7__cxx1110moneypunctIcLb0EE2idE
_ZGVNSt7__cxx1110moneypunctIcLb1EE2idE
_ZGVNSt7__cxx1110moneypunctIwLb0EE2idE
_ZGVNSt7__cxx1110moneypunctIwLb1EE2idE
_ZGVNSt7__cxx117collateIcE2idE
_ZGVNSt7__cxx117collateIwE2idE
_ZGVNSt7__cxx118messagesIcE2idE
_ZGVNSt7__cxx118messagesIwE2idE
_ZGVNSt7__cxx118numpunctIcE2idE
_ZGVNSt7__cxx118numpunctIwE2idE
_ZGVNSt7__cxx118time_getIcSt19istreambuf_iteratorIcSt11char_traitsIcEEE2idE
_ZGVNSt7__cxx118time_getIwSt19istreambuf_iteratorIwSt11char_traitsIwEEE2idE
_ZGVNSt7__cxx119money_getIcSt19istreambuf_iteratorIcSt11char_traitsIcEEE2idE
_ZGVNSt7__cxx119money_getIwSt19istreambuf_iteratorIwSt11char_traitsIwEEE2idE
_ZGVNSt7__cxx119money_putIcSt19ostreambuf_iteratorIcSt11char_traitsIcEEE2idE
_ZGVNSt7__cxx119money_putIwSt19ostreambuf_iteratorIwSt11char_traitsIwEEE2idE
_ZGVNSt7collateIcE2idE
_ZGVNSt7collateIwE2idE
_ZGVNSt7num_getIcSt19istreambuf_iteratorIcSt11char_traitsIcEEE2idE
_ZGVNSt7num_getIwSt19istreambuf_iteratorIwSt11char_traitsIwEEE2idE
_ZGVNSt7num_putIcSt19ostreambuf_iteratorIcSt11char_traitsIcEEE2idE
_ZGVNSt7num_putIwSt19ostreambuf_iteratorIwSt11char_traitsIwEEE2idE
_ZGVNSt8messagesIcE2idE
_ZGVNSt8messagesIwE2idE
_ZGVNSt8numpunctIcE2idE
_ZGVNSt8numpunctIwE2idE
_ZGVNSt8time_getIcSt19istreambuf_iteratorIcSt11char_traitsIcEEE2idE
_ZGVNSt8time_getIwSt19istreambuf_iteratorIwSt11char_traitsIwEEE2idE
_ZGVNSt8time_putIcSt19ostreambuf_iteratorIcSt11char_traitsIcEEE2idE
_ZGVNSt8time_putIwSt19ostreambuf_iteratorIwSt11char_traitsIwEEE2idE
_ZGVNSt9money_getIcSt19istreambuf_iteratorIcSt11char_traitsIcEEE2idE
_ZGVNSt9money_getIwSt19istreambuf_iteratorIwSt11char_traitsIwEEE2idE
_ZGVNSt9money_putIcSt19ostreambuf_iteratorIcSt11char_traitsIcEEE2idE
_ZGVNSt9money_putIwSt19ostreambuf_iteratorIwSt11char_traitsIwEEE2idE
_ZGVZN9__gnu_cxx13__common_poolINS_6__poolELb1EE11_S_get_poolEvE7_S_pool
_ZGVZN9__gnu_cxx9free_list12_M_get_mutexEvE8_S_mutex
_ZGVZN9__gnu_cxx9free_list16_M_get_free_listEvE12_S_free_list
_ZN10__cxxabiv111__terminateEPFvvE
_ZN10__cxxabiv112__unexpectedEPFvvE
_ZN10__cxxabiv115__forced_unwindD0Ev
_ZN10__cxxabiv115__forced_unwindD1Ev
_ZN10__cxxabiv115__forced_unwindD2Ev
_ZN10__cxxabiv116__enum_type_infoD0Ev
_ZN10__cxxabiv116__enum_type_infoD1Ev
_ZN10__cxxabiv116__enum_type_infoD2Ev
_ZN10__cxxabiv117__array_type_infoD0Ev
_ZN10__cxxabiv117__array_type_infoD1Ev
_ZN10__cxxabiv117__array_type_infoD2Ev
_ZN10__cxxabiv117__class_type_infoD0Ev
_ZN10__cxxabiv117__class_type_infoD1Ev
_ZN10__cxxabiv117__class_type_infoD2Ev
_ZN10__cxxabiv117__pbase_type_infoD0Ev
_ZN10__cxxabiv117__pbase_type_infoD1Ev
_ZN10__cxxabiv117__pbase_type_infoD2Ev
_ZN10__cxxabiv119__foreign_exceptionD0Ev
_ZN10__cxxabiv119__foreign_exceptionD1Ev
_ZN10__cxxabiv119__foreign_exceptionD2Ev
_ZN10__cxxabiv119__pointer_type_infoD0Ev
_ZN10__cxxabiv119__pointer_type_infoD1Ev
_ZN10__cxxabiv119__pointer_type_infoD2Ev
_ZN10__cxxabiv119__terminate_handlerE
_ZN10__cxxabiv120__function_type_infoD0Ev
_ZN10__cxxabiv120__function_type_infoD1Ev
_ZN10__cxxabiv120__function_type_infoD2Ev
_ZN10__cxxabiv120__si_class_type_infoD0Ev
_ZN10__cxxabiv120__si_class_type_infoD1Ev
_ZN10__cxxabiv120__si_class_type_infoD2Ev
_ZN10__cxxabiv120__unexpected_handlerE
_ZN10__cxxabiv121__vmi_class_type_infoD0Ev
_ZN10__cxxabiv121__vmi_class_type_infoD1Ev
_ZN10__cxxabiv121__vmi_class_type_infoD2Ev
_ZN10__cxxabiv123__fundamental_type_infoD0Ev
_ZN10__cxxabiv123__fundamental_type_infoD1Ev
_ZN10__cxxabiv123__fundamental_type_infoD2Ev
_ZN10__cxxabiv129__pointer_to_member_type_infoD0Ev
_ZN10__cxxabiv129__pointer_to_member_type_infoD1Ev
_ZN10__cxxabiv129__pointer_to_member_type_infoD2Ev
_ZN11__gnu_debug17_S_debug_messagesE
_ZN11__gnu_debug19_Safe_iterator_base12_M_get_mutexEv
_ZN11__gnu_debug19_Safe_iterator_base16_M_attach_singleEPNS_19_Safe_sequence_baseEb
_ZN11__gnu_debug19_Safe_iterator_base16_M_detach_singleEv
_ZN11__gnu_debug19_Safe_iterator_base8_M_resetEv
_ZN11__gnu_debug19_Safe_iterator_base9_M_attachEPNS_19_Safe_sequence_baseEb
_ZN11__gnu_debug19_Safe_iterator_base9_M_detachEv
_ZN11__gnu_debug19_Safe_sequence_base12_M_get_mutexEv
_ZN11__gnu_debug19_Safe_sequence_base13_M_detach_allEv
_ZN11__gnu_debug19_Safe_sequence_base16_M_attach_singleEPNS_19_Safe_iterator_baseEb
_ZN11__gnu_debug19_Safe_sequence_base16_M_detach_singleEPNS_19_Safe_iterator_baseE
_ZN11__gnu_debug19_Safe_sequence_base18_M_detach_singularEv
_ZN11__gnu_debug19_Safe_sequence_base22_M_revalidate_singularEv
_ZN11__gnu_debug19_Safe_sequence_base7_M_swapERS0_
_ZN11__gnu_debug19_Safe_sequence_base9_M_attachEPNS_19_Safe_iterator_baseEb
_ZN11__gnu_debug19_Safe_sequence_base9_M_detachEPNS_19_Safe_iterator_baseE
_ZN11__gnu_debug25_Safe_local_iterator_base16_M_attach_singleEPNS_19_Safe_sequence_baseEb
_ZN11__gnu_debug25_Safe_local_iterator_base16_M_detach_singleEv
_ZN11__gnu_debug25_Safe_local_iterator_base9_M_attachEPNS_19_Safe_sequence_baseEb
_ZN11__gnu_debug25_Safe_local_iterator_base9_M_detachEv
_ZN11__gnu_debug30_Safe_unordered_container_base13_M_detach_allEv
_ZN11__gnu_debug30_Safe_unordered_container_base15_M_attach_localEPNS_19_Safe_iterator_baseEb
_ZN11__gnu_debug30_Safe_unordered_container_base15_M_detach_localEPNS_19_Safe_iterator_baseE
_ZN11__gnu_debug30_Safe_unordered_container_base22_M_attach_local_singleEPNS_19_Safe_iterator_baseEb
_ZN11__gnu_debug30_Safe_unordered_container_base22_M_detach_local_singleEPNS_19_Safe_iterator_baseE
_ZN11__gnu_debug30_Safe_unordered_container_base7_M_swapERS0_
_ZN14__gnu_internal12buf_cin_syncE
_ZN14__gnu_internal13buf_cerr_syncE
_ZN14__gnu_internal13buf_cout_syncE
_ZN14__gnu_internal13buf_wcin_syncE
_ZN14__gnu_internal14buf_wcerr_syncE
_ZN14__gnu_internal14buf_wcout_syncE
_ZN14__gnu_internal7buf_cinE
_ZN14__gnu_internal8buf_cerrE
_ZN14__gnu_internal8buf_coutE
_ZN14__gnu_internal8buf_wcinE
_ZN14__gnu_internal9buf_wcerrE
_ZN14__gnu_internal9buf_wcoutE
_ZN14__gnu_parallel9_Settings3getEv
_ZN14__gnu_parallel9_Settings3setERS0_
_ZN9__gnu_cxx10__mt_allocIcNS_20__common_pool_policyINS_6__poolELb1EEEE10deallocateEPcj
_ZN9__gnu_cxx10__mt_allocIcNS_20__common_pool_policyINS_6__poolELb1EEEE14_M_get_optionsEv
_ZN9__gnu_cxx10__mt_allocIcNS_20__common_pool_policyINS_6__poolELb1EEEE14_M_set_optionsENS_11__pool_base5_TuneE
_ZN9__gnu_cxx10__mt_allocIcNS_20__common_pool_policyINS_6__poolELb1EEEE8allocateEjPKv
_ZN9__gnu_cxx10__mt_allocIcNS_20__common_pool_policyINS_6__poolELb1EEEEC1ERKS4_
_ZN9__gnu_cxx10__mt_allocIcNS_20__common_pool_policyINS_6__poolELb1EEEEC1Ev
_ZN9__gnu_cxx10__mt_allocIcNS_20__common_pool_policyINS_6__poolELb1EEEEC2ERKS4_
_ZN9__gnu_cxx10__mt_allocIcNS_20__common_pool_policyINS_6__poolELb1EEEEC2Ev
_ZN9__gnu_cxx10__mt_allocIcNS_20__common_pool_policyINS_6__poolELb1EEEED1Ev
_ZN9__gnu_cxx10__mt_allocIcNS_20__common_pool_policyINS_6__poolELb1EEEED2Ev
_ZN9__gnu_cxx10__mt_allocIwNS_20__common_pool_policyINS_6__poolELb1EEEE10deallocateEPwj
_ZN9__gnu_cxx10__mt_allocIwNS_20__common_pool_policyINS_6__poolELb1EEEE14_M_get_optionsEv
_ZN9__gnu_cxx10__mt_allocIwNS_20__common_pool_policyINS_6__poolELb1EEEE14_M_set_optionsENS_11__pool_base5_TuneE
_ZN9__gnu_cxx10__mt_allocIwNS_20__common_pool_policyINS_6__poolELb1EEEE8allocateEjPKv
_ZN9__gnu_cxx10__mt_allocIwNS_20__common_pool_policyINS_6__poolELb1EEEEC1ERKS4_
_ZN9__gnu_cxx10__mt_allocIwNS_20__common_pool_policyINS_6__poolELb1EEEEC1Ev
_ZN9__gnu_cxx10__mt_allocIwNS_20__common_pool_policyINS_6__poolELb1EEEEC2ERKS4_
_ZN9__gnu_cxx10__mt_allocIwNS_20__common_pool_policyINS_6__poolELb1EEEEC2Ev
_ZN9__gnu_cxx10__mt_allocIwNS_20__common_pool_policyINS_6__poolELb1EEEED1Ev
_ZN9__gnu_cxx10__mt_allocIwNS_20__common_pool_policyINS_6__poolELb1EEEED2Ev
_ZN9__gnu_cxx12__atomic_addEPVii
_ZN9__gnu_cxx12__pool_allocIcE10deallocateEPcj
_ZN9__gnu_cxx12__pool_allocIcE12_S_force_newE
_ZN9__gnu_cxx12__pool_allocIcE7destroyEPc
_ZN9__gnu_cxx12__pool_allocIcE8allocateEjPKv
_ZN9__gnu_cxx12__pool_allocIcE9constructEPcRKc
_ZN9__gnu_cxx12__pool_allocIcEC1ERKS1_
_ZN9__gnu_cxx12__pool_allocIcEC1Ev
_ZN9__gnu_cxx12__pool_allocIcEC2ERKS1_
_ZN9__gnu_cxx12__pool_allocIcEC2Ev
_ZN9__gnu_cxx12__pool_allocIcED1Ev
_ZN9__gnu_cxx12__pool_allocIcED2Ev
_ZN9__gnu_cxx12__pool_allocIwE10deallocateEPwj
_ZN9__gnu_cxx12__pool_allocIwE12_S_force_newE
_ZN9__gnu_cxx12__pool_allocIwE7destroyEPw
_ZN9__gnu_cxx12__pool_allocIwE8allocateEjPKv
_ZN9__gnu_cxx12__pool_allocIwE9constructEPwRKw
_ZN9__gnu_cxx12__pool_allocIwEC1ERKS1_
_ZN9__gnu_cxx12__pool_allocIwEC1Ev
_ZN9__gnu_cxx12__pool_allocIwEC2ERKS1_
_ZN9__gnu_cxx12__pool_allocIwEC2Ev
_ZN9__gnu_cxx12__pool_allocIwED1Ev
_ZN9__gnu_cxx12__pool_allocIwED2Ev
_ZN9__gnu_cxx13__scoped_lockD1Ev
_ZN9__gnu_cxx13stdio_filebufIcSt11char_traitsIcEE2fdEv
_ZN9__gnu_cxx13stdio_filebufIcSt11char_traitsIcEE4fileEv
_ZN9__gnu_cxx13stdio_filebufIcSt11char_traitsIcEE4swapERS3_
_ZN9__gnu_cxx13stdio_filebufIcSt11char_traitsIcEEC1EP6_iobufSt13_Ios_Openmodej
_ZN9__gnu_cxx13stdio_filebufIcSt11char_traitsIcEEC1EiSt13_Ios_Openmodej
_ZN9__gnu_cxx13stdio_filebufIcSt11char_traitsIcEEC1Ev
_ZN9__gnu_cxx13stdio_filebufIcSt11char_traitsIcEEC2EP6_iobufSt13_Ios_Openmodej
_ZN9__gnu_cxx13stdio_filebufIcSt11char_traitsIcEEC2EiSt13_Ios_Openmodej
_ZN9__gnu_cxx13stdio_filebufIcSt11char_traitsIcEEC2Ev
_ZN9__gnu_cxx13stdio_filebufIcSt11char_traitsIcEED0Ev
_ZN9__gnu_cxx13stdio_filebufIcSt11char_traitsIcEED1Ev
_ZN9__gnu_cxx13stdio_filebufIcSt11char_traitsIcEED2Ev
_ZN9__gnu_cxx13stdio_filebufIwSt11char_traitsIwEE2fdEv
_ZN9__gnu_cxx13stdio_filebufIwSt11char_traitsIwEE4fileEv
_ZN9__gnu_cxx13stdio_filebufIwSt11char_traitsIwEE4swapERS3_
_ZN9__gnu_cxx13stdio_filebufIwSt11char_traitsIwEEC1EP6_iobufSt13_Ios_Openmodej
_ZN9__gnu_cxx13stdio_filebufIwSt11char_traitsIwEEC1EiSt13_Ios_Openmodej
_ZN9__gnu_cxx13stdio_filebufIwSt11char_traitsIwEEC1Ev
_ZN9__gnu_cxx13stdio_filebufIwSt11char_traitsIwEEC2EP6_iobufSt13_Ios_Openmodej
_ZN9__gnu_cxx13stdio_filebufIwSt11char_traitsIwEEC2EiSt13_Ios_Openmodej
_ZN9__gnu_cxx13stdio_filebufIwSt11char_traitsIwEEC2Ev
_ZN9__gnu_cxx13stdio_filebufIwSt11char_traitsIwEED0Ev
_ZN9__gnu_cxx13stdio_filebufIwSt11char_traitsIwEED1Ev
_ZN9__gnu_cxx13stdio_filebufIwSt11char_traitsIwEED2Ev
_ZN9__gnu_cxx15__concat_size_tEPcjj
_ZN9__gnu_cxx15__snprintf_liteEPcjPKcS0_
_ZN9__gnu_cxx16bitmap_allocatorIcE10deallocateEPcj
_ZN9__gnu_cxx16bitmap_allocatorIcE13_S_block_sizeE
_ZN9__gnu_cxx16bitmap_allocatorIcE13_S_mem_blocksE
_ZN9__gnu_cxx16bitmap_allocatorIcE14_S_refill_poolEv
_ZN9__gnu_cxx16bitmap_allocatorIcE15_S_last_requestE
_ZN9__gnu_cxx16bitmap_allocatorIcE21_S_last_dealloc_indexE
_ZN9__gnu_cxx16bitmap_allocatorIcE25_M_allocate_single_objectEv
_ZN9__gnu_cxx16bitmap_allocatorIcE27_M_deallocate_single_objectEPc
_ZN9__gnu_cxx16bitmap_allocatorIcE6_S_mutE
_ZN9__gnu_cxx16bitmap_allocatorIcE7destroyEPc
_ZN9__gnu_cxx16bitmap_allocatorIcE8allocateEj
_ZN9__gnu_cxx16bitmap_allocatorIcE8allocateEjPKv
_ZN9__gnu_cxx16bitmap_allocatorIcE9constructEPcRKc
_ZN9__gnu_cxx16bitmap_allocatorIcEC1ERKS1_
_ZN9__gnu_cxx16bitmap_allocatorIcEC1Ev
_ZN9__gnu_cxx16bitmap_allocatorIcEC2ERKS1_
_ZN9__gnu_cxx16bitmap_allocatorIcEC2Ev
_ZN9__gnu_cxx16bitmap_allocatorIcED1Ev
_ZN9__gnu_cxx16bitmap_allocatorIcED2Ev
_ZN9__gnu_cxx16bitmap_allocatorIwE10deallocateEPwj
_ZN9__gnu_cxx16bitmap_allocatorIwE13_S_block_sizeE
_ZN9__gnu_cxx16bitmap_allocatorIwE13_S_mem_blocksE
_ZN9__gnu_cxx16bitmap_allocatorIwE14_S_refill_poolEv
_ZN9__gnu_cxx16bitmap_allocatorIwE15_S_last_requestE
_ZN9__gnu_cxx16bitmap_allocatorIwE21_S_last_dealloc_indexE
_ZN9__gnu_cxx16bitmap_allocatorIwE25_M_allocate_single_objectEv
_ZN9__gnu_cxx16bitmap_allocatorIwE27_M_deallocate_single_objectEPw
_ZN9__gnu_cxx16bitmap_allocatorIwE6_S_mutE
_ZN9__gnu_cxx16bitmap_allocatorIwE7destroyEPw
_ZN9__gnu_cxx16bitmap_allocatorIwE8allocateEj
_ZN9__gnu_cxx16bitmap_allocatorIwE8allocateEjPKv
_ZN9__gnu_cxx16bitmap_allocatorIwE9constructEPwRKw
_ZN9__gnu_cxx16bitmap_allocatorIwEC1ERKS1_
_ZN9__gnu_cxx16bitmap_allocatorIwEC1Ev
_ZN9__gnu_cxx16bitmap_allocatorIwEC2ERKS1_
_ZN9__gnu_cxx16bitmap_allocatorIwEC2Ev
_ZN9__gnu_cxx16bitmap_allocatorIwED1Ev
_ZN9__gnu_cxx16bitmap_allocatorIwED2Ev
_ZN9__gnu_cxx17__pool_alloc_base11_S_end_freeE
_ZN9__gnu_cxx17__pool_alloc_base12_M_get_mutexEv
_ZN9__gnu_cxx17__pool_alloc_base12_S_free_listE
_ZN9__gnu_cxx17__pool_alloc_base12_S_heap_sizeE
_ZN9__gnu_cxx17__pool_alloc_base13_S_start_freeE
_ZN9__gnu_cxx17__pool_alloc_base16_M_get_free_listEj
_ZN9__gnu_cxx17__pool_alloc_base17_M_allocate_chunkEjRi
_ZN9__gnu_cxx17__pool_alloc_base9_M_refillEj
_ZN9__gnu_cxx18__common_pool_baseINS_6__poolELb1EE13_S_initializeEv
_ZN9__gnu_cxx18__exchange_and_addEPVii
_ZN9__gnu_cxx18stdio_sync_filebufIcSt11char_traitsIcEE4fileEv
_ZN9__gnu_cxx18stdio_sync_filebufIcSt11char_traitsIcEE4swapERS3_
_ZN9__gnu_cxx18stdio_sync_filebufIcSt11char_traitsIcEE4syncEv
_ZN9__gnu_cxx18stdio_sync_filebufIcSt11char_traitsIcEE5uflowEv
_ZN9__gnu_cxx18stdio_sync_filebufIcSt11char_traitsIcEE6xsgetnEPci
_ZN9__gnu_cxx18stdio_sync_filebufIcSt11char_traitsIcEE6xsputnEPKci
_ZN9__gnu_cxx18stdio_sync_filebufIcSt11char_traitsIcEE7seekoffExSt12_Ios_SeekdirSt13_Ios_Openmode
_ZN9__gnu_cxx18stdio_sync_filebufIcSt11char_traitsIcEE7seekposESt4fposIiESt13_Ios_Openmode
_ZN9__gnu_cxx18stdio_sync_filebufIcSt11char_traitsIcEE8overflowEi
_ZN9__gnu_cxx18stdio_sync_filebufIcSt11char_traitsIcEE9pbackfailEi
_ZN9__gnu_cxx18stdio_sync_filebufIcSt11char_traitsIcEE9underflowEv
_ZN9__gnu_cxx18stdio_sync_filebufIcSt11char_traitsIcEEC1EOS3_
_ZN9__gnu_cxx18stdio_sync_filebufIcSt11char_traitsIcEEC1EP6_iobuf
_ZN9__gnu_cxx18stdio_sync_filebufIcSt11char_traitsIcEEC2EOS3_
_ZN9__gnu_cxx18stdio_sync_filebufIcSt11char_traitsIcEEC2EP6_iobuf
_ZN9__gnu_cxx18stdio_sync_filebufIcSt11char_traitsIcEED0Ev
_ZN9__gnu_cxx18stdio_sync_filebufIcSt11char_traitsIcEED1Ev
_ZN9__gnu_cxx18stdio_sync_filebufIcSt11char_traitsIcEEaSEOS3_
_ZN9__gnu_cxx18stdio_sync_filebufIwSt11char_traitsIwEE4fileEv
_ZN9__gnu_cxx18stdio_sync_filebufIwSt11char_traitsIwEE4swapERS3_
_ZN9__gnu_cxx18stdio_sync_filebufIwSt11char_traitsIwEE4syncEv
_ZN9__gnu_cxx18stdio_sync_filebufIwSt11char_traitsIwEE5uflowEv
_ZN9__gnu_cxx18stdio_sync_filebufIwSt11char_traitsIwEE6xsgetnEPwi
_ZN9__gnu_cxx18stdio_sync_filebufIwSt11char_traitsIwEE6xsputnEPKwi
_ZN9__gnu_cxx18stdio_sync_filebufIwSt11char_traitsIwEE7seekoffExSt12_Ios_SeekdirSt13_Ios_Openmode
_ZN9__gnu_cxx18stdio_sync_filebufIwSt11char_traitsIwEE7seekposESt4fposIiESt13_Ios_Openmode
_ZN9__gnu_cxx18stdio_sync_filebufIwSt11char_traitsIwEE8overflowEt
_ZN9__gnu_cxx18stdio_sync_filebufIwSt11char_traitsIwEE9pbackfailEt
_ZN9__gnu_cxx18stdio_sync_filebufIwSt11char_traitsIwEE9underflowEv
_ZN9__gnu_cxx18stdio_sync_filebufIwSt11char_traitsIwEEC1EOS3_
_ZN9__gnu_cxx18stdio_sync_filebufIwSt11char_traitsIwEEC1EP6_iobuf
_ZN9__gnu_cxx18stdio_sync_filebufIwSt11char_traitsIwEEC2EOS3_
_ZN9__gnu_cxx18stdio_sync_filebufIwSt11char_traitsIwEEC2EP6_iobuf
_ZN9__gnu_cxx18stdio_sync_filebufIwSt11char_traitsIwEED0Ev
_ZN9__gnu_cxx18stdio_sync_filebufIwSt11char_traitsIwEED1Ev
_ZN9__gnu_cxx18stdio_sync_filebufIwSt11char_traitsIwEEaSEOS3_
_ZN9__gnu_cxx19__function_requiresINS_19_ConvertibleConceptIjjEEEEvv
_ZN9__gnu_cxx19__function_requiresINS_21_InputIteratorConceptIPKcEEEEvv
_ZN9__gnu_cxx19__function_requiresINS_21_InputIteratorConceptIPKwEEEEvv
_ZN9__gnu_cxx19__function_requiresINS_21_InputIteratorConceptIPcEEEEvv
_ZN9__gnu_cxx19__function_requiresINS_21_InputIteratorConceptIPwEEEEvv
_ZN9__gnu_cxx19__function_requiresINS_22_OutputIteratorConceptISt19ostreambuf_iteratorIcSt11char_traitsIcEEcEEEEvv
_ZN9__gnu_cxx19__function_requiresINS_22_OutputIteratorConceptISt19ostreambuf_iteratorIwSt11char_traitsIwEEwEEEEvv
_ZN9__gnu_cxx19__function_requiresINS_26_LessThanComparableConceptIPcEEEEvv
_ZN9__gnu_cxx19__function_requiresINS_26_LessThanComparableConceptIPwEEEEvv
_ZN9__gnu_cxx19__function_requiresINS_26_LessThanComparableConceptIiEEEEvv
_ZN9__gnu_cxx19__function_requiresINS_26_LessThanComparableConceptIjEEEEvv
_ZN9__gnu_cxx19__function_requiresINS_26_LessThanComparableConceptIlEEEEvv
_ZN9__gnu_cxx19__function_requiresINS_26_LessThanComparableConceptIxEEEEvv
_ZN9__gnu_cxx19__function_requiresINS_28_RandomAccessIteratorConceptINS_17__normal_iteratorIPKcSsEEEEEEvv
_ZN9__gnu_cxx19__function_requiresINS_28_RandomAccessIteratorConceptINS_17__normal_iteratorIPKwSbIwSt11char_traitsIwESaIwEEEEEEEEvv
_ZN9__gnu_cxx19__function_requiresINS_28_RandomAccessIteratorConceptINS_17__normal_iteratorIPcSsEEEEEEvv
_ZN9__gnu_cxx19__function_requiresINS_28_RandomAccessIteratorConceptINS_17__normal_iteratorIPwSbIwSt11char_traitsIwESaIwEEEEEEEEvv
_ZN9__gnu_cxx19__function_requiresINS_28_RandomAccessIteratorConceptIPKcEEEEvv
_ZN9__gnu_cxx19__function_requiresINS_28_RandomAccessIteratorConceptIPKwEEEEvv
_ZN9__gnu_cxx19__function_requiresINS_28_RandomAccessIteratorConceptIPcEEEEvv
_ZN9__gnu_cxx19__function_requiresINS_28_RandomAccessIteratorConceptIPwEEEEvv
_ZN9__gnu_cxx20recursive_init_errorD0Ev
_ZN9__gnu_cxx20recursive_init_errorD1Ev
_ZN9__gnu_cxx20recursive_init_errorD2Ev
_ZN9__gnu_cxx24__concurrence_lock_errorD0Ev
_ZN9__gnu_cxx24__concurrence_lock_errorD1Ev
_ZN9__gnu_cxx24__concurrence_wait_errorD0Ev
_ZN9__gnu_cxx24__concurrence_wait_errorD1Ev
_ZN9__gnu_cxx26__aux_require_boolean_exprIbEEvRKT_
_ZN9__gnu_cxx26__concurrence_unlock_errorD0Ev
_ZN9__gnu_cxx26__concurrence_unlock_errorD1Ev
_ZN9__gnu_cxx26__throw_insufficient_spaceEPKcS1_
_ZN9__gnu_cxx27__verbose_terminate_handlerEv
_ZN9__gnu_cxx29__concurrence_broadcast_errorD0Ev
_ZN9__gnu_cxx29__concurrence_broadcast_errorD1Ev
_ZN9__gnu_cxx30__throw_concurrence_lock_errorEv
_ZN9__gnu_cxx32__throw_concurrence_unlock_errorEv
_ZN9__gnu_cxx35__throw_concurrence_broadcast_errorEv
_ZN9__gnu_cxx4ropeIcSaIcEE10_S_min_lenE
_ZN9__gnu_cxx4ropeIcSaIcEE8_S_fetchEPNS_13_Rope_RopeRepIcS1_EEj
_ZN9__gnu_cxx4ropeIwSaIwEE10_S_min_lenE
_ZN9__gnu_cxx4ropeIwSaIwEE8_S_fetchEPNS_13_Rope_RopeRepIwS1_EEj
_ZN9__gnu_cxx6__poolILb0EE10_M_destroyEv
_ZN9__gnu_cxx6__poolILb0EE13_M_initializeEv
_ZN9__gnu_cxx6__poolILb0EE16_M_reclaim_blockEPcj
_ZN9__gnu_cxx6__poolILb0EE16_M_reserve_blockEjj
_ZN9__gnu_cxx6__poolILb1EE10_M_destroyEv
_ZN9__gnu_cxx6__poolILb1EE13_M_initializeEPFvPvE
_ZN9__gnu_cxx6__poolILb1EE13_M_initializeEv
_ZN9__gnu_cxx6__poolILb1EE16_M_get_thread_idEv
_ZN9__gnu_cxx6__poolILb1EE16_M_reclaim_blockEPcj
_ZN9__gnu_cxx6__poolILb1EE16_M_reserve_blockEjj
_ZN9__gnu_cxx6__poolILb1EE21_M_destroy_thread_keyEPv
_ZN9__gnu_cxx8__detail13__lower_boundIPPjjNS_9free_list19_LT_pointer_compareEEET_S6_S6_RKT0_T1_
_ZN9__gnu_cxx8__detail13__mini_vectorIPjE10deallocateEPS2_j
_ZN9__gnu_cxx8__detail13__mini_vectorIPjE5clearEv
_ZN9__gnu_cxx8__detail13__mini_vectorIPjE5eraseEPS2_
_ZN9__gnu_cxx8__detail13__mini_vectorIPjE6insertEPS2_RKS2_
_ZN9__gnu_cxx8__detail13__mini_vectorIPjE8allocateEj
_ZN9__gnu_cxx8__detail13__mini_vectorIPjE8pop_backEv
_ZN9__gnu_cxx8__detail13__mini_vectorIPjE9push_backERKS2_
_ZN9__gnu_cxx8__detail13__mini_vectorIPjEC1Ev
_ZN9__gnu_cxx8__detail13__mini_vectorIPjEC2Ev
_ZN9__gnu_cxx8__detail13__mini_vectorISt4pairIPNS_16bitmap_allocatorIcE12_Alloc_blockES6_EE10deallocateEPS7_j
_ZN9__gnu_cxx8__detail13__mini_vectorISt4pairIPNS_16bitmap_allocatorIcE12_Alloc_blockES6_EE5clearEv
_ZN9__gnu_cxx8__detail13__mini_vectorISt4pairIPNS_16bitmap_allocatorIcE12_Alloc_blockES6_EE5eraseEPS7_
_ZN9__gnu_cxx8__detail13__mini_vectorISt4pairIPNS_16bitmap_allocatorIcE12_Alloc_blockES6_EE6insertEPS7_RKS7_
_ZN9__gnu_cxx8__detail13__mini_vectorISt4pairIPNS_16bitmap_allocatorIcE12_Alloc_blockES6_EE8allocateEj
_ZN9__gnu_cxx8__detail13__mini_vectorISt4pairIPNS_16bitmap_allocatorIcE12_Alloc_blockES6_EE8pop_backEv
_ZN9__gnu_cxx8__detail13__mini_vectorISt4pairIPNS_16bitmap_allocatorIcE12_Alloc_blockES6_EE9push_backERKS7_
_ZN9__gnu_cxx8__detail13__mini_vectorISt4pairIPNS_16bitmap_allocatorIcE12_Alloc_blockES6_EEC1Ev
_ZN9__gnu_cxx8__detail13__mini_vectorISt4pairIPNS_16bitmap_allocatorIcE12_Alloc_blockES6_EEC2Ev
_ZN9__gnu_cxx8__detail13__mini_vectorISt4pairIPNS_16bitmap_allocatorIwE12_Alloc_blockES6_EE10deallocateEPS7_j
_ZN9__gnu_cxx8__detail13__mini_vectorISt4pairIPNS_16bitmap_allocatorIwE12_Alloc_blockES6_EE5clearEv
_ZN9__gnu_cxx8__detail13__mini_vectorISt4pairIPNS_16bitmap_allocatorIwE12_Alloc_blockES6_EE5eraseEPS7_
_ZN9__gnu_cxx8__detail13__mini_vectorISt4pairIPNS_16bitmap_allocatorIwE12_Alloc_blockES6_EE6insertEPS7_RKS7_
_ZN9__gnu_cxx8__detail13__mini_vectorISt4pairIPNS_16bitmap_allocatorIwE12_Alloc_blockES6_EE8allocateEj
_ZN9__gnu_cxx8__detail13__mini_vectorISt4pairIPNS_16bitmap_allocatorIwE12_Alloc_blockES6_EE8pop_backEv
_ZN9__gnu_cxx8__detail13__mini_vectorISt4pairIPNS_16bitmap_allocatorIwE12_Alloc_blockES6_EE9push_backERKS7_
_ZN9__gnu_cxx8__detail13__mini_vectorISt4pairIPNS_16bitmap_allocatorIwE12_Alloc_blockES6_EEC1Ev
_ZN9__gnu_cxx8__detail13__mini_vectorISt4pairIPNS_16bitmap_allocatorIwE12_Alloc_blockES6_EEC2Ev
_ZN9__gnu_cxx9free_list6_M_getEj
_ZN9__gnu_cxx9free_list8_M_clearEv
_ZN9__gnu_cxxeqIPKcNSt7__cxx1112basic_stringIcSt11char_traitsIcESaIcEEEEEbRKNS_17__normal_iteratorIT_T0_EESE_
_ZN9__gnu_cxxeqIPKcSsEEbRKNS_17__normal_iteratorIT_T0_EES8_
_ZN9__gnu_cxxeqIPKwNSt7__cxx1112basic_stringIwSt11char_traitsIwESaIwEEEEEbRKNS_17__normal_iteratorIT_T0_EESE_
_ZN9__gnu_cxxeqIPKwSbIwSt11char_traitsIwESaIwEEEEbRKNS_17__normal_iteratorIT_T0_EESC_
_ZN9__gnu_cxxeqIPcNSt7__cxx1112basic_stringIcSt11char_traitsIcESaIcEEEEEbRKNS_17__normal_iteratorIT_T0_EESD_
_ZN9__gnu_cxxeqIPcSsEEbRKNS_17__normal_iteratorIT_T0_EES7_
_ZN9__gnu_cxxeqIPwNSt7__cxx1112basic_stringIwSt11char_traitsIwESaIwEEEEEbRKNS_17__normal_iteratorIT_T0_EESD_
_ZN9__gnu_cxxeqIPwSbIwSt11char_traitsIwESaIwEEEEbRKNS_17__normal_iteratorIT_T0_EESB_
_ZNK10__cxxabiv117__class_type_info10__do_catchEPKSt9type_infoPPvj
_ZNK10__cxxabiv117__class_type_info11__do_upcastEPKS0_PKvRNS0_15__upcast_resultE
_ZNK10__cxxabiv117__class_type_info11__do_upcastEPKS0_PPv
_ZNK10__cxxabiv117__class_type_info12__do_dyncastEiNS0_10__sub_kindEPKS0_PKvS3_S5_RNS0_16__dyncast_resultE
_ZNK10__cxxabiv117__class_type_info20__do_find_public_srcEiPKvPKS0_S2_
_ZNK10__cxxabiv117__pbase_type_info10__do_catchEPKSt9type_infoPPvj
_ZNK10__cxxabiv117__pbase_type_info15__pointer_catchEPKS0_PPvj
_ZNK10__cxxabiv119__pointer_type_info14__is_pointer_pEv
_ZNK10__cxxabiv119__pointer_type_info15__pointer_catchEPKNS_17__pbase_type_infoEPPvj
_ZNK10__cxxabiv120__function_type_info15__is_function_pEv
_ZNK10__cxxabiv120__si_class_type_info11__do_upcastEPKNS_17__class_type_infoEPKvRNS1_15__upcast_resultE
_ZNK10__cxxabiv120__si_class_type_info12__do_dyncastEiNS_17__class_type_info10__sub_kindEPKS1_PKvS4_S6_RNS1_16__dyncast_resultE
_ZNK10__cxxabiv120__si_class_type_info20__do_find_public_srcEiPKvPKNS_17__class_type_infoES2_
_ZNK10__cxxabiv121__vmi_class_type_info11__do_upcastEPKNS_17__class_type_infoEPKvRNS1_15__upcast_resultE
_ZNK10__cxxabiv121__vmi_class_type_info12__do_dyncastEiNS_17__class_type_info10__sub_kindEPKS1_PKvS4_S6_RNS1_16__dyncast_resultE
_ZNK10__cxxabiv121__vmi_class_type_info20__do_find_public_srcEiPKvPKNS_17__class_type_infoES2_
_ZNK10__cxxabiv129__pointer_to_member_type_info15__pointer_catchEPKNS_17__pbase_type_infoEPPvj
_ZNK11__gnu_debug16_Error_formatter10_M_messageENS_13_Debug_msg_idE
_ZNK11__gnu_debug16_Error_formatter10_Parameter14_M_print_fieldEPKS0_PKc
_ZNK11__gnu_debug16_Error_formatter10_Parameter20_M_print_descriptionEPKS0_
_ZNK11__gnu_debug16_Error_formatter13_M_print_wordEPKc
_ZNK11__gnu_debug16_Error_formatter14_M_format_wordIPKcEEvPciS3_T_
_ZNK11__gnu_debug16_Error_formatter14_M_format_wordIPKvEEvPciPKcT_
_ZNK11__gnu_debug16_Error_formatter14_M_format_wordIjEEvPciPKcT_
_ZNK11__gnu_debug16_Error_formatter14_M_format_wordIlEEvPciPKcT_
_ZNK11__gnu_debug16_Error_formatter15_M_print_stringEPKc
_ZNK11__gnu_debug16_Error_formatter17_M_get_max_lengthEv
_ZNK11__gnu_debug16_Error_formatter8_M_errorEv
_ZNK11__gnu_debug19_Safe_iterator_base11_M_singularEv
_ZNK11__gnu_debug19_Safe_iterator_base14_M_can_compareERKS0_
_ZNK11__gnu_debug25_Safe_local_iterator_base16_M_get_containerEv
_ZNK9__gnu_cxx12__pool_allocIcE7addressERKc
_ZNK9__gnu_cxx12__pool_allocIcE7addressERc
_ZNK9__gnu_cxx12__pool_allocIcE8max_sizeEv
_ZNK9__gnu_cxx12__pool_allocIwE7addressERKw
_ZNK9__gnu_cxx12__pool_allocIwE7addressERw
_ZNK9__gnu_cxx12__pool_allocIwE8max_sizeEv
_ZNK9__gnu_cxx16bitmap_allocatorIcE7addressERKc
_ZNK9__gnu_cxx16bitmap_allocatorIcE7addressERc
_ZNK9__gnu_cxx16bitmap_allocatorIcE8max_sizeEv
_ZNK9__gnu_cxx16bitmap_allocatorIwE7addressERKw
_ZNK9__gnu_cxx16bitmap_allocatorIwE7addressERw
_ZNK9__gnu_cxx16bitmap_allocatorIwE8max_sizeEv
_ZNK9__gnu_cxx24__concurrence_lock_error4whatEv
_ZNK9__gnu_cxx24__concurrence_wait_error4whatEv
_ZNK9__gnu_cxx26__concurrence_unlock_error4whatEv
_ZNK9__gnu_cxx29__concurrence_broadcast_error4whatEv
_ZNK9__gnu_cxx8__detail13__mini_vectorIPjE13_M_space_leftEv
_ZNK9__gnu_cxx8__detail13__mini_vectorIPjE3endEv
_ZNK9__gnu_cxx8__detail13__mini_vectorIPjE4backEv
_ZNK9__gnu_cxx8__detail13__mini_vectorIPjE4sizeEv
_ZNK9__gnu_cxx8__detail13__mini_vectorIPjE5beginEv
_ZNK9__gnu_cxx8__detail13__mini_vectorIPjEixEj
_ZNK9__gnu_cxx8__detail13__mini_vectorISt4pairIPNS_16bitmap_allocatorIcE12_Alloc_blockES6_EE13_M_space_leftEv
_ZNK9__gnu_cxx8__detail13__mini_vectorISt4pairIPNS_16bitmap_allocatorIcE12_Alloc_blockES6_EE3endEv
_ZNK9__gnu_cxx8__detail13__mini_vectorISt4pairIPNS_16bitmap_allocatorIcE12_Alloc_blockES6_EE4backEv
_ZNK9__gnu_cxx8__detail13__mini_vectorISt4pairIPNS_16bitmap_allocatorIcE12_Alloc_blockES6_EE4sizeEv
_ZNK9__gnu_cxx8__detail13__mini_vectorISt4pairIPNS_16bitmap_allocatorIcE12_Alloc_blockES6_EE5beginEv
_ZNK9__gnu_cxx8__detail13__mini_vectorISt4pairIPNS_16bitmap_allocatorIcE12_Alloc_blockES6_EEixEj
_ZNK9__gnu_cxx8__detail13__mini_vectorISt4pairIPNS_16bitmap_allocatorIwE12_Alloc_blockES6_EE13_M_space_leftEv
_ZNK9__gnu_cxx8__detail13__mini_vectorISt4pairIPNS_16bitmap_allocatorIwE12_Alloc_blockES6_EE3endEv
_ZNK9__gnu_cxx8__detail13__mini_vectorISt4pairIPNS_16bitmap_allocatorIwE12_Alloc_blockES6_EE4backEv
_ZNK9__gnu_cxx8__detail13__mini_vectorISt4pairIPNS_16bitmap_allocatorIwE12_Alloc_blockES6_EE4sizeEv
_ZNK9__gnu_cxx8__detail13__mini_vectorISt4pairIPNS_16bitmap_allocatorIwE12_Alloc_blockES6_EE5beginEv
_ZNK9__gnu_cxx8__detail13__mini_vectorISt4pairIPNS_16bitmap_allocatorIwE12_Alloc_blockES6_EEixEj
_ZNKSbIwSt11char_traitsIwESaIwEE11_M_disjunctEPKw
_ZNKSbIwSt11char_traitsIwESaIwEE12find_last_ofEPKwj
_ZNKSbIwSt11char_traitsIwESaIwEE12find_last_ofEPKwjj
_ZNKSbIwSt11char_traitsIwESaIwEE12find_last_ofERKS2_j
_ZNKSbIwSt11char_traitsIwESaIwEE12find_last_ofEwj
_ZNKSbIwSt11char_traitsIwESaIwEE13find_first_ofEPKwj
_ZNKSbIwSt11char_traitsIwESaIwEE13find_first_ofEPKwjj
_ZNKSbIwSt11char_traitsIwESaIwEE13find_first_ofERKS2_j
_ZNKSbIwSt11char_traitsIwESaIwEE13find_first_ofEwj
_ZNKSbIwSt11char_traitsIwESaIwEE13get_allocatorEv
_ZNKSbIwSt11char_traitsIwESaIwEE15_M_check_lengthEjjPKc
_ZNKSbIwSt11char_traitsIwESaIwEE16find_last_not_ofEPKwj
_ZNKSbIwSt11char_traitsIwESaIwEE16find_last_not_ofEPKwjj
_ZNKSbIwSt11char_traitsIwESaIwEE16find_last_not_ofERKS2_j
_ZNKSbIwSt11char_traitsIwESaIwEE16find_last_not_ofEwj
_ZNKSbIwSt11char_traitsIwESaIwEE17find_first_not_ofEPKwj
_ZNKSbIwSt11char_traitsIwESaIwEE17find_first_not_ofEPKwjj
_ZNKSbIwSt11char_traitsIwESaIwEE17find_first_not_ofERKS2_j
_ZNKSbIwSt11char_traitsIwESaIwEE17find_first_not_ofEwj
_ZNKSbIwSt11char_traitsIwESaIwEE2atEj
_ZNKSbIwSt11char_traitsIwESaIwEE3endEv
_ZNKSbIwSt11char_traitsIwESaIwEE4_Rep12_M_is_leakedEv
_ZNKSbIwSt11char_traitsIwESaIwEE4_Rep12_M_is_sharedEv
_ZNKSbIwSt11char_traitsIwESaIwEE4backEv
_ZNKSbIwSt11char_traitsIwESaIwEE4cendEv
_ZNKSbIwSt11char_traitsIwESaIwEE4copyEPwjj
_ZNKSbIwSt11char_traitsIwESaIwEE4dataEv
_ZNKSbIwSt11char_traitsIwESaIwEE4findEPKwj
_ZNKSbIwSt11char_traitsIwESaIwEE4findEPKwjj
_ZNKSbIwSt11char_traitsIwESaIwEE4findERKS2_j
_ZNKSbIwSt11char_traitsIwESaIwEE4findEwj
_ZNKSbIwSt11char_traitsIwESaIwEE4rendEv
_ZNKSbIwSt11char_traitsIwESaIwEE4sizeEv
_ZNKSbIwSt11char_traitsIwESaIwEE5beginEv
_ZNKSbIwSt11char_traitsIwESaIwEE5c_strEv
_ZNKSbIwSt11char_traitsIwESaIwEE5crendEv
_ZNKSbIwSt11char_traitsIwESaIwEE5emptyEv
_ZNKSbIwSt11char_traitsIwESaIwEE5frontEv
_ZNKSbIwSt11char_traitsIwESaIwEE5rfindEPKwj
_ZNKSbIwSt11char_traitsIwESaIwEE5rfindEPKwjj
_ZNKSbIwSt11char_traitsIwESaIwEE5rfindERKS2_j
_ZNKSbIwSt11char_traitsIwESaIwEE5rfindEwj
_ZNKSbIwSt11char_traitsIwESaIwEE6_M_repEv
_ZNKSbIwSt11char_traitsIwESaIwEE6cbeginEv
_ZNKSbIwSt11char_traitsIwESaIwEE6lengthEv
_ZNKSbIwSt11char_traitsIwESaIwEE6rbeginEv
_ZNKSbIwSt11char_traitsIwESaIwEE6substrEjj
_ZNKSbIwSt11char_traitsIwESaIwEE7_M_dataEv
_ZNKSbIwSt11char_traitsIwESaIwEE7_M_iendEv
_ZNKSbIwSt11char_traitsIwESaIwEE7compareEPKw
_ZNKSbIwSt11char_traitsIwESaIwEE7compareERKS2_
_ZNKSbIwSt11char_traitsIwESaIwEE7compareEjjPKw
_ZNKSbIwSt11char_traitsIwESaIwEE7compareEjjPKwj
_ZNKSbIwSt11char_traitsIwESaIwEE7compareEjjRKS2_
_ZNKSbIwSt11char_traitsIwESaIwEE7compareEjjRKS2_jj
_ZNKSbIwSt11char_traitsIwESaIwEE7crbeginEv
_ZNKSbIwSt11char_traitsIwESaIwEE8_M_checkEjPKc
_ZNKSbIwSt11char_traitsIwESaIwEE8_M_limitEjj
_ZNKSbIwSt11char_traitsIwESaIwEE8capacityEv
_ZNKSbIwSt11char_traitsIwESaIwEE8max_sizeEv
_ZNKSbIwSt11char_traitsIwESaIwEE9_M_ibeginEv

Sections

.text
Size: 775KB - Virtual size: 774KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 67KB - Virtual size: 67KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

/4
Size: 274KB - Virtual size: 274KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 3KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 344KB - Virtual size: 343KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 44B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 32B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 29KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Disk_Revival/libwinpthread-1.dll
.dll windows:4 windows x86 arch:x86

2a44931aaa0f249729076816ea33fffb

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Imports

kernel32

AddVectoredExceptionHandler
CloseHandle
CreateEventA
CreateSemaphoreA
DeleteCriticalSection
DuplicateHandle
EnterCriticalSection
FileTimeToSystemTime
GetCurrentProcess
GetCurrentProcessId
GetCurrentThread
GetCurrentThreadId
GetHandleInformation
GetLastError
GetModuleHandleA
GetProcAddress
GetProcessAffinityMask
GetProcessTimes
GetSystemTimeAdjustment
GetSystemTimeAsFileTime
GetThreadContext
GetThreadPriority
GetThreadTimes
GetTickCount
InitializeCriticalSection
IsDebuggerPresent
LeaveCriticalSection
OpenProcess
OutputDebugStringA
QueryPerformanceCounter
QueryPerformanceFrequency
RaiseException
ReleaseSemaphore
RemoveVectoredExceptionHandler
ResetEvent
ResumeThread
SetEvent
SetLastError
SetProcessAffinityMask
SetSystemTime
SetThreadContext
SetThreadPriority
SetUnhandledExceptionFilter
Sleep
SuspendThread
TerminateProcess
TlsAlloc
TlsGetValue
TlsSetValue
TryEnterCriticalSection
UnhandledExceptionFilter
VirtualProtect
VirtualQuery
WaitForMultipleObjects
WaitForSingleObject

msvcrt

__dllonexit
_amsg_exit
_beginthreadex
_endthreadex
_errno
_initterm
_iob
_lock
_onexit
_setjmp3
_strdup
_ultoa
_unlock
_vsnprintf
_vsnwprintf
abort
calloc
exit
fprintf
free
fwrite
longjmp
malloc
memmove
memset
printf
realloc
strlen
strncmp
vfprintf

Exports

Exports

__pth_gpointer_locked
__pthread_clock_nanosleep
_pthread_cleanup_dest
_pthread_get_state
_pthread_invoke_cancel
_pthread_key_dest
_pthread_rel_time_in_ms
_pthread_set_state
_pthread_time_in_ms
_pthread_time_in_ms_from_timespec
_pthread_tryjoin
clock_getres
clock_gettime
clock_nanosleep
clock_settime
nanosleep
pthread_attr_destroy
pthread_attr_getdetachstate
pthread_attr_getinheritsched
pthread_attr_getschedparam
pthread_attr_getschedpolicy
pthread_attr_getscope
pthread_attr_getstackaddr
pthread_attr_getstacksize
pthread_attr_init
pthread_attr_setdetachstate
pthread_attr_setinheritsched
pthread_attr_setschedparam
pthread_attr_setschedpolicy
pthread_attr_setscope
pthread_attr_setstackaddr
pthread_attr_setstacksize
pthread_barrier_destroy
pthread_barrier_init
pthread_barrier_wait
pthread_barrierattr_destroy
pthread_barrierattr_getpshared
pthread_barrierattr_init
pthread_barrierattr_setpshared
pthread_cancel
pthread_cond_broadcast
pthread_cond_destroy
pthread_cond_init
pthread_cond_signal
pthread_cond_timedwait
pthread_cond_timedwait_relative_np
pthread_cond_wait
pthread_condattr_destroy
pthread_condattr_getclock
pthread_condattr_getpshared
pthread_condattr_init
pthread_condattr_setclock
pthread_condattr_setpshared
pthread_create
pthread_create_wrapper
pthread_delay_np
pthread_detach
pthread_equal
pthread_exit
pthread_get_concurrency
pthread_getclean
pthread_getconcurrency
pthread_getevent
pthread_gethandle
pthread_getname_np
pthread_getschedparam
pthread_getspecific
pthread_join
pthread_key_create
pthread_key_delete
pthread_kill
pthread_mutex_destroy
pthread_mutex_init
pthread_mutex_lock
pthread_mutex_timedlock
pthread_mutex_trylock
pthread_mutex_unlock
pthread_mutexattr_destroy
pthread_mutexattr_getprioceiling
pthread_mutexattr_getprotocol
pthread_mutexattr_getpshared
pthread_mutexattr_gettype
pthread_mutexattr_init
pthread_mutexattr_setprioceiling
pthread_mutexattr_setprotocol
pthread_mutexattr_setpshared
pthread_mutexattr_settype
pthread_num_processors_np
pthread_once
pthread_rwlock_destroy
pthread_rwlock_init
pthread_rwlock_rdlock
pthread_rwlock_timedrdlock
pthread_rwlock_timedwrlock
pthread_rwlock_tryrdlock
pthread_rwlock_trywrlock
pthread_rwlock_unlock
pthread_rwlock_wrlock
pthread_rwlockattr_destroy
pthread_rwlockattr_getpshared
pthread_rwlockattr_init
pthread_rwlockattr_setpshared
pthread_self
pthread_set_concurrency
pthread_set_num_processors_np
pthread_setcancelstate
pthread_setcanceltype
pthread_setconcurrency
pthread_setname_np
pthread_setschedparam
pthread_setspecific
pthread_spin_destroy
pthread_spin_init
pthread_spin_lock
pthread_spin_trylock
pthread_spin_unlock
pthread_testcancel
pthread_timechange_handler_np
pthread_tls_init
sched_get_priority_max
sched_get_priority_min
sched_getscheduler
sched_setscheduler
sched_yield
sem_close
sem_destroy
sem_getvalue
sem_init
sem_open
sem_post
sem_post_multiple
sem_timedwait
sem_trywait
sem_unlink
sem_wait

Sections

.text
Size: 61KB - Virtual size: 60KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 64B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 48B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 32B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Disk_Revival/log.txt
Disk_Revival/log_thread.txt
Disk_Revival/php.ini
Disk_Revival/php5ts.dll
.dll windows:5 windows x86 arch:x86

aaf1492926158df000e59c70092d88e8

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

oleaut32

GetActiveObject
SysFreeString
VariantClear
VariantInit
SysAllocString
SafeArrayGetDim
SafeArrayPutElement
VariantChangeType
SafeArrayGetVartype
LHashValOfNameSys
VarCmp
VariantCopy
SafeArrayGetUBound
SafeArrayGetLBound
VariantCopyInd
SafeArrayGetElement
LoadTypeLi
LoadRegTypeLi
SafeArrayUnaccessData
SafeArrayAccessData
SafeArrayCreate
SysAllocStringByteLen
VarXor
VarPow
VarOr
VarMod
VarImp
VarIdiv
VarEqv
VarDiv
VarAnd
VarMul
VarSu
VarCat
VarAdd
VarNot
VarNeg
VarInt
VarFix
VarAbs
VarRound
VariantTimeToSystemTime
SystemTimeToVariantTime

user32

DefWindowProcA
SetTimer
PostQuitMessage
KillTimer
UnregisterClassA
DestroyWindow
SendMessageA
GetMessageA
CreateWindowExA
RegisterClassA
PostThreadMessageA
GetSystemMetrics
GetDesktopWindow
IsWindow
GetDC
GetClientRect
GetWindowRect
ReleaseDC
PeekMessageA
DispatchMessageA
TranslateMessage
MsgWaitForMultipleObjects
MessageBoxA

gdi32

CreateCompatibleDC
BitBlt
CreateCompatibleBitmap
SelectObject
GetPixel
DeleteObject
DeleteDC

advapi32

RegCloseKey
RegOpenKeyExA
CryptCreateHash
CryptHashData
CryptGetHashParam
CryptDestroyHash
RegEnumKeyA
RegQueryValueA
DuplicateTokenEx
CreateProcessAsUserA
OpenThreadToken
OpenProcessToken
EqualSid
DuplicateToken
GetFileSecurityA
MapGenericMask
AccessCheck
GetTokenInformation
CopySid
GetLengthSid
ConvertSidToStringSidA
ReportEventA
RegisterEventSourceA
DeregisterEventSource
CryptAcquireContextA
CryptGenRandom
CryptReleaseContext
RegQueryValueExA
RegNotifyChangeKeyValue
RegQueryInfoKeyA
RegEnumValueA
RegEnumKeyExA
GetUserNameA

ws2_32

WSACleanup
WSAGetLastError
WSAStartup
freeaddrinfo
getaddrinfo
closesocket
socket
htons
ntohs
inet_ntoa
getpeername
getsockname
htonl
ioctlsocket
__WSAFDIsSet
select
WSASetLastError
getsockopt
connect
bind
setsockopt
accept
WSAStringToAddressA
WSAAddressToStringA
inet_addr
listen
send
recv
shutdown
sendto
recvfrom
gethostbyname
gethostname
getprotobyname
ntohl
getservbyname
getservbyport
getprotobynumber
gethostbyaddr

kernel32

WideCharToMultiByte
GetProcessHeap
GetFileAttributesExA
GetCurrentDirectoryA
DeviceIoControl
CreateFileA
FileTimeToSystemTime
TlsFree
TlsAlloc
LeaveCriticalSection
CreateProcessA
SetFileTime
InitializeCriticalSection
TlsGetValue
TlsSetValue
CreateWaitableTimerA
SetWaitableTimer
QueryPerformanceFrequency
QueryPerformanceCounter
GetSystemTimeAsFileTime
GetTickCount
FindClose
FindNextFileA
SystemTimeToFileTime
GetSystemTime
MoveFileExA
GetCurrentProcess
GetCurrentThread
DuplicateHandle
GetBinaryTypeA
DeleteCriticalSection
GetStdHandle
CreatePipe
GetExitCodeProcess
MapViewOfFileEx
OpenFileMappingA
GetFullPathNameA
MultiByteToWideChar
InterlockedDecrement
GetLocalTime
GetCurrentProcessId
SetEnvironmentVariableA
SleepEx
GetDiskFreeSpaceA
LockFileEx
UnlockFileEx
GetModuleHandleA
InterlockedExchange
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetComputerNameA
GetFileAttributesA
CreateHardLinkA
TerminateProcess
SetErrorMode
SetFilePointer
GetACP
CreateMutexA
ReleaseMutex
InterlockedCompareExchange
Sleep
GetSystemDirectoryA
EnterCriticalSection
FindFirstFileA
CreateFileMappingA
GetFileSize
GetSystemInfo
MapViewOfFile
UnmapViewOfFile
GetFileType
GetTempPathA
GetTempFileNameA
SetLastError
GetEnvironmentVariableA
GetModuleFileNameA
GetWindowsDirectoryA
GetSystemWindowsDirectoryA
LocalFree
GetVersion
GetVersionExA
GetLastError
OutputDebugStringA
FormatMessageA
LoadLibraryA
GetProcAddress
GetTimeZoneInformation
InterlockedIncrement
GetCurrentThreadId
CloseHandle
CreateEventA
WaitForSingleObject
SetEvent
IsDBCSLeadByte
HeapReAlloc
HeapFree
HeapAlloc
HeapCreate
HeapDestroy
FreeLibrary

ole32

CoUninitialize
CoInitialize
CoCreateInstance
CoCreateInstanceEx
MkParseDisplayName
CreateBindCtx
CLSIDFromString
CoTaskMemFree
StringFromCLSID
CoCreateGuid
CoDisconnectObject
CoTaskMemAlloc
OleLoadFromStream
CLSIDFromProgID

dnsapi

DnsQuery_A
DnsRecordListFree

msvcr90

sscanf
putchar
_open_osfhandle
_fdopen
_mktime32
fgets
floor
strftime
_CIatan2
_CIsqrt
_CIsin
_CIcos
_CIacos
_atoi64
strtod
isupper
abort
strtoul
putc
getc
_CItan
_access
atof
iscntrl
ispunct
isprint
isgraph
isxdigit
strcspn
mblen
_CIlog10
ceil
_CIlog
_CIexp
_CIasin
_CIatan
_CIsinh
_CIcosh
_CItanh
_hypot
_CIfmod
strcat_s
strncpy_s
_close
strspn
_setmode
_fileno
remove
_creat
_mktemp
ferror
strcmp
clearerr
ungetc
fgetc
memcmp
strlen
strcat
fabs
pow
_vsnprintf
_wfopen
_stat64i32
_wstat64i32
vfprintf
strcpy_s
sprintf_s
_encode_pointer
_malloc_crt
_encoded_null
_decode_pointer
_initterm
_initterm_e
_amsg_exit
_adjust_fdiv
__CppXcptFilter
_dup
_crt_debugger_hook
__clean_type_info_names_internal
_unlock
__dllonexit
_lock
_onexit
_except_handler4_common
_stricmp
_strnicmp
_isatty
_write
_unlink
_lseek
_read
_chsize
_open
_chmod
_mkdir
_rmdir
_getcwd
_strdup
_set_errno
_memicmp
_stat32
_getpid
_tzset
__timezone
__daylight
strtok
setvbuf
fseek
feof
_get_osfhandle
rewind
strnlen
_putenv
_umask
strpbrk
atoi
_snprintf
fopen
memset
calloc
malloc
free
strncat
realloc
_setjmp3
sprintf
longjmp
exit
strtol
memcpy
fprintf
__iob_func
fflush
getenv
memchr
strchr
memmove
isalpha
strrchr
_beginthreadex
_controlfp_s
ftell
_errno
printf
toupper
_CIpow
strcoll
tolower
_finite
_fstat32
fread
fclose
_HUGE
isspace
_time32
_configthreadlocale
strstr
strncmp
strncpy
isalnum
strerror
_set_invalid_parameter_handler
setlocale
fwrite
qsort
vsprintf
_environ
_ctime32
_gmtime32
_localtime32
asctime
atol
localeconv
_fpclass
_isnan
isdigit
islower

Exports

Exports

GetSMErrorText
OnUpdateBaseDir
OnUpdateBool
OnUpdateLong
OnUpdateLongGEZero
OnUpdateReal
OnUpdateString
OnUpdateStringUnempty
PHP_3HAVAL128Init
PHP_3HAVAL160Init
PHP_3HAVAL192Init
PHP_3HAVAL224Init
PHP_3HAVAL256Init
PHP_3TIGERInit
PHP_4HAVAL128Init
PHP_4HAVAL160Init
PHP_4HAVAL192Init
PHP_4HAVAL224Init
PHP_4HAVAL256Init
PHP_4TIGERInit
PHP_5HAVAL128Init
PHP_5HAVAL160Init
PHP_5HAVAL192Init
PHP_5HAVAL224Init
PHP_5HAVAL256Init
PHP_ADLER32Copy
PHP_ADLER32Final
PHP_ADLER32Init
PHP_ADLER32Update
PHP_CRC32BFinal
PHP_CRC32BUpdate
PHP_CRC32Copy
PHP_CRC32Final
PHP_CRC32Init
PHP_CRC32Update
PHP_GOSTFinal
PHP_GOSTInit
PHP_GOSTUpdate
PHP_HAVAL128Final
PHP_HAVAL160Final
PHP_HAVAL192Final
PHP_HAVAL224Final
PHP_HAVAL256Final
PHP_HAVALUpdate
PHP_MD2Final
PHP_MD2Init
PHP_MD2Update
PHP_MD4Final
PHP_MD4Init
PHP_MD4Update
PHP_MD5Final
PHP_MD5Init
PHP_MD5Update
PHP_RIPEMD128Final
PHP_RIPEMD128Init
PHP_RIPEMD128Update
PHP_RIPEMD160Final
PHP_RIPEMD160Init
PHP_RIPEMD160Update
PHP_RIPEMD256Final
PHP_RIPEMD256Init
PHP_RIPEMD256Update
PHP_RIPEMD320Final
PHP_RIPEMD320Init
PHP_RIPEMD320Update
PHP_SALSA10Init
PHP_SALSA20Init
PHP_SALSAFinal
PHP_SALSAUpdate
PHP_SHA1Final
PHP_SHA1Init
PHP_SHA1Update
PHP_SHA224Final
PHP_SHA224Init
PHP_SHA224Update
PHP_SHA256Final
PHP_SHA256Init
PHP_SHA256Update
PHP_SHA384Final
PHP_SHA384Init
PHP_SHA384Update
PHP_SHA512Final
PHP_SHA512Init
PHP_SHA512Update
PHP_SNEFRUFinal
PHP_SNEFRUInit
PHP_SNEFRUUpdate
PHP_TIGER128Final
PHP_TIGER160Final
PHP_TIGER192Final
PHP_TIGERUpdate
PHP_WHIRLPOOLFinal
PHP_WHIRLPOOLInit
PHP_WHIRLPOOLUpdate
TSMClose
TSendMail
ValidateFormat
XML_GetUserData
_DllMain@12
_array_init
_convert_to_string
_ecalloc
_efree
_emalloc
_erealloc
_estrdup
_estrndup
_mysqlnd_calloc
_mysqlnd_debug
_mysqlnd_ecalloc
_mysqlnd_efree
_mysqlnd_emalloc
_mysqlnd_erealloc
_mysqlnd_fetch_lengths
_mysqlnd_free
_mysqlnd_get_client_stats
_mysqlnd_init
_mysqlnd_malloc
_mysqlnd_pecalloc
_mysqlnd_pefree
_mysqlnd_pemalloc
_mysqlnd_perealloc
_mysqlnd_pestrdup
_mysqlnd_pestrndup
_mysqlnd_plugin_get_plugin_connection_data
_mysqlnd_plugin_get_plugin_net_data
_mysqlnd_plugin_get_plugin_protocol_data
_mysqlnd_plugin_get_plugin_result_data
_mysqlnd_plugin_get_plugin_result_metadata_data
_mysqlnd_plugin_get_plugin_stmt_data
_mysqlnd_poll
_mysqlnd_realloc
_object_and_properties_init
_object_init
_object_init_ex
_php_emit_fd_setsize_warning
_php_error_log
_php_error_log_ex
_php_find_ps_module
_php_find_ps_serializer
_php_get_stream_filters_hash
_php_glob_stream_get_count
_php_glob_stream_get_path
_php_glob_stream_get_pattern
_php_math_basetolong
_php_math_basetozval
_php_math_longtobase
_php_math_number_format
_php_math_round
_php_math_zvaltobase
_php_regcomp@12
_php_regerror@16
_php_regexec@20
_php_regfree@4
_php_stream_alloc
_php_stream_cast
_php_stream_copy_to_mem
_php_stream_copy_to_stream
_php_stream_copy_to_stream_ex
_php_stream_eof
_php_stream_filter_alloc
_php_stream_filter_append
_php_stream_filter_flush
_php_stream_filter_prepend
_php_stream_flush
_php_stream_fopen
_php_stream_fopen_from_fd
_php_stream_fopen_from_file
_php_stream_fopen_from_pipe
_php_stream_fopen_temporary_file
_php_stream_fopen_tmpfile
_php_stream_fopen_with_path
_php_stream_free
_php_stream_get_line
_php_stream_get_url_stream_wrappers_hash
_php_stream_getc
_php_stream_make_seekable
_php_stream_memory_create
_php_stream_memory_get_buffer
_php_stream_memory_open
_php_stream_mkdir
_php_stream_mmap_range
_php_stream_mmap_unmap
_php_stream_mmap_unmap_ex
_php_stream_open_wrapper_as_file
_php_stream_open_wrapper_ex
_php_stream_opendir
_php_stream_passthru
_php_stream_printf
_php_stream_putc
_php_stream_puts
_php_stream_read
_php_stream_readdir
_php_stream_rmdir
_php_stream_scandir
_php_stream_seek
_php_stream_set_option
_php_stream_sock_open_from_socket
_php_stream_sock_open_host
_php_stream_stat
_php_stream_stat_path
_php_stream_tell
_php_stream_temp_create
_php_stream_temp_open
_php_stream_truncate_set_size
_php_stream_write
_php_stream_xport_create
_safe_emalloc
_safe_erealloc
_safe_malloc
_safe_realloc
_xml_zval_strdup
_zend_bailout
_zend_get_parameters_array
_zend_get_parameters_array_ex
_zend_hash_add_or_update
_zend_hash_index_update_or_next_insert
_zend_hash_init
_zend_hash_init_ex
_zend_hash_merge
_zend_hash_quick_add_or_update
_zend_list_addref
_zend_list_delete
_zend_list_find
_zend_mem_block_size
_zend_mm_alloc
_zend_mm_block_size
_zend_mm_free
_zend_mm_realloc
_zend_ts_hash_add_or_update
_zend_ts_hash_index_update_or_next_insert
_zend_ts_hash_init
_zend_ts_hash_init_ex
_zend_ts_hash_quick_add_or_update
_zval_copy_ctor_func
_zval_dtor_func
_zval_dtor_wrapper
_zval_internal_dtor
_zval_internal_ptr_dtor
_zval_ptr_dtor
add_assoc_bool_ex
add_assoc_double_ex
add_assoc_function
add_assoc_long_ex
add_assoc_null_ex
add_assoc_resource_ex
add_assoc_string_ex
add_assoc_stringl_ex
add_assoc_zval_ex
add_char_to_string
add_function
add_get_assoc_string_ex
add_get_assoc_stringl_ex
add_get_index_double
add_get_index_long
add_get_index_string
add_get_index_stringl
add_index_bool
add_index_double
add_index_long
add_index_null
add_index_resource
add_index_string
add_index_stringl
add_index_zval
add_next_index_bool
add_next_index_double
add_next_index_long
add_next_index_null
add_next_index_resource
add_next_index_string
add_next_index_stringl
add_next_index_zval
add_property_bool_ex
add_property_double_ex
add_property_long_ex
add_property_null_ex
add_property_resource_ex
add_property_string_ex
add_property_stringl_ex
add_property_zval_ex
add_string_to_string
ap_php_asprintf
ap_php_slprintf
ap_php_snprintf
ap_php_vasprintf
ap_php_vslprintf
ap_php_vsnprintf
arcfour_LTX__is_block_algorithm
arcfour_LTX__mcrypt_algorithm_version
arcfour_LTX__mcrypt_decrypt
arcfour_LTX__mcrypt_encrypt
arcfour_LTX__mcrypt_get_algo_iv_size
arcfour_LTX__mcrypt_get_algorithms_name
arcfour_LTX__mcrypt_get_block_size
arcfour_LTX__mcrypt_get_key_size
arcfour_LTX__mcrypt_get_size
arcfour_LTX__mcrypt_get_supported_key_sizes
arcfour_LTX__mcrypt_self_test
arcfour_LTX__mcrypt_set_key
basic_globals_id
bcompiler_zend_shutdown
bcompiler_zend_startup
bitwise_and_function
bitwise_not_function
bitwise_or_function
bitwise_xor_function
blowfish_LTX__is_block_algorithm
blowfish_LTX__mcrypt_algorithm_version
blowfish_LTX__mcrypt_decrypt
blowfish_LTX__mcrypt_encrypt
blowfish_LTX__mcrypt_get_algorithms_name
blowfish_LTX__mcrypt_get_block_size
blowfish_LTX__mcrypt_get_key_size
blowfish_LTX__mcrypt_get_size
blowfish_LTX__mcrypt_get_supported_key_sizes
blowfish_LTX__mcrypt_self_test
blowfish_LTX__mcrypt_set_key
blowfish_compat_LTX__is_block_algorithm
blowfish_compat_LTX__mcrypt_algorithm_version
blowfish_compat_LTX__mcrypt_decrypt
blowfish_compat_LTX__mcrypt_encrypt
blowfish_compat_LTX__mcrypt_get_algorithms_name
blowfish_compat_LTX__mcrypt_get_block_size
blowfish_compat_LTX__mcrypt_get_key_size
blowfish_compat_LTX__mcrypt_get_size
blowfish_compat_LTX__mcrypt_get_supported_key_sizes
blowfish_compat_LTX__mcrypt_self_test
blowfish_compat_LTX__mcrypt_set_key
boolean_not_function
boolean_xor_function
call_user_function
call_user_function_ex
cast_128_LTX__is_block_algorithm
cast_128_LTX__mcrypt_algorithm_version
cast_128_LTX__mcrypt_decrypt
cast_128_LTX__mcrypt_encrypt
cast_128_LTX__mcrypt_get_algorithms_name
cast_128_LTX__mcrypt_get_block_size
cast_128_LTX__mcrypt_get_key_size
cast_128_LTX__mcrypt_get_size
cast_128_LTX__mcrypt_get_supported_key_sizes
cast_128_LTX__mcrypt_self_test
cast_128_LTX__mcrypt_set_key
cast_256_LTX__is_block_algorithm
cast_256_LTX__mcrypt_algorithm_version
cast_256_LTX__mcrypt_decrypt
cast_256_LTX__mcrypt_encrypt
cast_256_LTX__mcrypt_get_algorithms_name
cast_256_LTX__mcrypt_get_block_size
cast_256_LTX__mcrypt_get_key_size
cast_256_LTX__mcrypt_get_size
cast_256_LTX__mcrypt_get_supported_key_sizes
cast_256_LTX__mcrypt_self_test
cast_256_LTX__mcrypt_set_key
cfg_get_double
cfg_get_entry
cfg_get_long
cfg_get_string
compare_function
compile_file
compile_filename
compile_string
compiler_globals_id
concat_function
config_zval_dtor
convert_scalar_to_number
convert_to_array
convert_to_boolean
convert_to_double
convert_to_long
convert_to_long_base
convert_to_null
convert_to_object
core_globals_id
decrement_function
des_LTX__is_block_algorithm
des_LTX__mcrypt_algorithm_version
des_LTX__mcrypt_decrypt
des_LTX__mcrypt_encrypt
des_LTX__mcrypt_get_algorithms_name
des_LTX__mcrypt_get_block_size
des_LTX__mcrypt_get_key_size
des_LTX__mcrypt_get_size
des_LTX__mcrypt_get_supported_key_sizes
des_LTX__mcrypt_self_test
des_LTX__mcrypt_set_key
destroy_op_array
destroy_zend_class
destroy_zend_function
display_ini_entries
display_link_numbers
div_function
do_bind_class
do_bind_function
do_bind_inherited_class
dom_node_class_entry
dom_object_get_node
dummy_indent
empty_fcall_info
empty_fcall_info_cache
end_mcrypt
enigma_LTX__is_block_algorithm
enigma_LTX__mcrypt_algorithm_version
enigma_LTX__mcrypt_decrypt
enigma_LTX__mcrypt_encrypt
enigma_LTX__mcrypt_get_algo_iv_size
enigma_LTX__mcrypt_get_algorithms_name
enigma_LTX__mcrypt_get_block_size
enigma_LTX__mcrypt_get_key_size
enigma_LTX__mcrypt_get_size
enigma_LTX__mcrypt_get_supported_key_sizes
enigma_LTX__mcrypt_self_test
enigma_LTX__mcrypt_set_key
execute
execute_internal
executor_globals_id
expand_filepath
expand_filepath_ex
extension_version_info
file_globals_id
file_handle_dtor
flock
fnmatch
free_estring
function_add_ref
gc_collect_cycles
gc_globals_ctor
gc_globals_dtor
gc_globals_id
gc_init
gc_remove_zval_from_buffer
gc_reset
gc_zobj_possible_root
gc_zval_possible_root
get_active_class_name
get_active_function_name
get_binary_op
get_timezone_info
get_unary_op
get_zend_version
gettimeofday
glob
globfree
gost_LTX__is_block_algorithm
gost_LTX__mcrypt_algorithm_version
gost_LTX__mcrypt_decrypt
gost_LTX__mcrypt_encrypt
gost_LTX__mcrypt_get_algorithms_name
gost_LTX__mcrypt_get_block_size
gost_LTX__mcrypt_get_key_size
gost_LTX__mcrypt_get_size
gost_LTX__mcrypt_get_supported_key_sizes
gost_LTX__mcrypt_self_test
gost_LTX__mcrypt_set_key
highlight_file
highlight_string
igbinary_serialize
igbinary_unserialize
increment_function
inet_aton
inet_ntop
inet_pton
ini_scanner_globals_id
init_mcrypt
init_op_array
instanceof_function
instanceof_function_ex
is_equal_function
is_identical_function
is_not_equal_function
is_not_identical_function
is_smaller_function
is_smaller_or_equal_function
is_zend_mm
language_scanner_globals_id
le_index_ptr
lex_scan
localeconv_r
loki97_LTX__is_block_algorithm
loki97_LTX__mcrypt_algorithm_version
loki97_LTX__mcrypt_decrypt
loki97_LTX__mcrypt_encrypt
loki97_LTX__mcrypt_get_algorithms_name
loki97_LTX__mcrypt_get_block_size
loki97_LTX__mcrypt_get_key_size
loki97_LTX__mcrypt_get_size
loki97_LTX__mcrypt_get_supported_key_sizes
loki97_LTX__mcrypt_self_test
loki97_LTX__mcrypt_set_key
make_digest
make_digest_ex
make_sha1_digest
mcrypt
mcrypt_algorithm_module_ok
mcrypt_dlopen
mcrypt_enc_get_algorithms_name
mcrypt_enc_get_block_size
mcrypt_enc_get_iv_size
mcrypt_enc_get_key_size

Sections

.text
Size: 4.2MB - Virtual size: 4.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2.1MB - Virtual size: 2.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 52KB - Virtual size: 170KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 207KB - Virtual size: 206KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Disk_Revival/ssleay32.dll
.dll windows:5 windows x86 arch:x86

c2c9cc6b7a76b9a5d6d07137fd36586d

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

libeay32

ord269
ord3109
ord2630
ord910
ord2411
ord754
ord490
ord222
ord3873
ord168
ord169
ord85
ord52
ord167
ord2201
ord289
ord493
ord911
ord464
ord3836
ord3245
ord354
ord2936
ord3244
ord3844
ord323
ord3067
ord2894
ord961
ord3874
ord3841
ord89
ord109
ord3879
ord202
ord3239
ord866
ord110
ord3422
ord2929
ord3644
ord3570
ord2578
ord111
ord3010
ord3480
ord2924
ord3459
ord3512
ord3608
ord3575
ord3663
ord123
ord201
ord118
ord3666
ord219
ord498
ord285
ord635
ord912
ord909
ord2784
ord965
ord964
ord256
ord274
ord276
ord3899
ord2572
ord3315
ord2927
ord2747
ord3724
ord313
ord495
ord3883
ord120
ord151
ord3178
ord3695
ord3550
ord3418
ord203
ord128
ord31
ord830
ord727
ord2760
ord282
ord572
ord3165
ord3489
ord3719
ord216
ord206
ord497
ord4046
ord3682
ord2877
ord3711
ord205
ord486
ord484
ord763
ord577
ord907
ord87
ord170
ord481
ord3729
ord333
ord2915
ord1096
ord1097
ord3816
ord3888
ord3896
ord2589
ord1145
ord1144
ord1081
ord2292
ord3823
ord3846
ord622
ord679
ord623
ord3922
ord2898
ord188
ord3925
ord2702
ord264
ord266
ord3288
ord3704
ord3758
ord3767
ord3647
ord3766
ord3365
ord4114
ord3857
ord3460
ord3454
ord3754
ord3394
ord187
ord897
ord3414
ord3495
ord67
ord65
ord53
ord78
ord98
ord3826
ord3559
ord3399
ord636
ord914
ord2478
ord626
ord890
ord1004
ord3527
ord364
ord1010
ord2051
ord58
ord66
ord630
ord628
ord1041
ord1007
ord1005
ord1027
ord3378
ord3437
ord541
ord316
ord629
ord892
ord74
ord3866
ord248
ord1655
ord575
ord1025
ord246
ord1100
ord2524
ord3610
ord3505
ord3595
ord1023
ord657
ord401
ord93
ord3396
ord3657
ord4045
ord2475
ord887
ord889
ord891
ord315
ord1147
ord189
ord314
ord1671
ord956
ord280
ord2181
ord399
ord748
ord279
ord283
ord400
ord751
ord750
ord774
ord3205
ord1959
ord37
ord35
ord824
ord822
ord8
ord1091
ord3700
ord3513
ord3623
ord32
ord718
ord7
ord716
ord703
ord680
ord2426
ord86
ord88
ord3313
ord3312
ord3314
ord1101
ord293
ord2996
ord3155
ord325
ord329
ord318
ord304
ord292
ord299
ord955
ord2252
ord91
ord247
ord225
ord181
ord654
ord290
ord281
ord2821
ord641
ord176
ord857
ord2206
ord252
ord903
ord1654
ord1653
ord904
ord901
ord3124
ord905

msvcr90

_adjust_fdiv
__CppXcptFilter
_crt_debugger_hook
__clean_type_info_names_internal
_unlock
__dllonexit
_lock
_onexit
_except_handler4_common
_initterm_e
_initterm
_decode_pointer
_encoded_null
free
_malloc_crt
_encode_pointer
_errno
__iob_func
fprintf
_ftime64
strncmp
memmove
memset
memcpy
_time64
_amsg_exit

kernel32

GetLastError
InterlockedExchange
Sleep
InterlockedCompareExchange
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
DisableThreadLibraryCalls
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
SetLastError

Exports

Exports

BIO_f_ssl
BIO_new_buffer_ssl_connect
BIO_new_ssl
BIO_new_ssl_connect
BIO_ssl_copy_session_id
BIO_ssl_shutdown
DTLSv1_client_method
DTLSv1_method
DTLSv1_server_method
ERR_load_SSL_strings
SSL_CIPHER_description
SSL_CIPHER_get_bits
SSL_CIPHER_get_name
SSL_CIPHER_get_version
SSL_COMP_add_compression_method
SSL_COMP_get_compression_methods
SSL_COMP_get_name
SSL_CTX_add_client_CA
SSL_CTX_add_session
SSL_CTX_callback_ctrl
SSL_CTX_check_private_key
SSL_CTX_ctrl
SSL_CTX_flush_sessions
SSL_CTX_free
SSL_CTX_get_cert_store
SSL_CTX_get_client_CA_list
SSL_CTX_get_client_cert_cb
SSL_CTX_get_ex_data
SSL_CTX_get_ex_new_index
SSL_CTX_get_info_callback
SSL_CTX_get_quiet_shutdown
SSL_CTX_get_timeout
SSL_CTX_get_verify_callback
SSL_CTX_get_verify_depth
SSL_CTX_get_verify_mode
SSL_CTX_load_verify_locations
SSL_CTX_new
SSL_CTX_remove_session
SSL_CTX_sess_get_get_cb
SSL_CTX_sess_get_new_cb
SSL_CTX_sess_get_remove_cb
SSL_CTX_sess_set_get_cb
SSL_CTX_sess_set_new_cb
SSL_CTX_sess_set_remove_cb
SSL_CTX_sessions
SSL_CTX_set_cert_store
SSL_CTX_set_cert_verify_callback
SSL_CTX_set_cipher_list
SSL_CTX_set_client_CA_list
SSL_CTX_set_client_cert_cb
SSL_CTX_set_client_cert_engine
SSL_CTX_set_cookie_generate_cb
SSL_CTX_set_cookie_verify_cb
SSL_CTX_set_default_passwd_cb
SSL_CTX_set_default_passwd_cb_userdata
SSL_CTX_set_default_verify_paths
SSL_CTX_set_ex_data
SSL_CTX_set_generate_session_id
SSL_CTX_set_info_callback
SSL_CTX_set_msg_callback
SSL_CTX_set_purpose
SSL_CTX_set_quiet_shutdown
SSL_CTX_set_session_id_context
SSL_CTX_set_ssl_version
SSL_CTX_set_timeout
SSL_CTX_set_tmp_dh_callback
SSL_CTX_set_tmp_ecdh_callback
SSL_CTX_set_tmp_rsa_callback
SSL_CTX_set_trust
SSL_CTX_set_verify
SSL_CTX_set_verify_depth
SSL_CTX_use_PrivateKey
SSL_CTX_use_PrivateKey_ASN1
SSL_CTX_use_PrivateKey_file
SSL_CTX_use_RSAPrivateKey
SSL_CTX_use_RSAPrivateKey_ASN1
SSL_CTX_use_RSAPrivateKey_file
SSL_CTX_use_certificate
SSL_CTX_use_certificate_ASN1
SSL_CTX_use_certificate_chain_file
SSL_CTX_use_certificate_file
SSL_SESSION_cmp
SSL_SESSION_free
SSL_SESSION_get_ex_data
SSL_SESSION_get_ex_new_index
SSL_SESSION_get_id
SSL_SESSION_get_time
SSL_SESSION_get_timeout
SSL_SESSION_hash
SSL_SESSION_new
SSL_SESSION_print
SSL_SESSION_print_fp
SSL_SESSION_set_ex_data
SSL_SESSION_set_time
SSL_SESSION_set_timeout
SSL_accept
SSL_add_client_CA
SSL_add_dir_cert_subjects_to_stack
SSL_add_file_cert_subjects_to_stack
SSL_alert_desc_string
SSL_alert_desc_string_long
SSL_alert_type_string
SSL_alert_type_string_long
SSL_callback_ctrl
SSL_check_private_key
SSL_clear
SSL_connect
SSL_copy_session_id
SSL_ctrl
SSL_do_handshake
SSL_dup
SSL_dup_CA_list
SSL_free
SSL_get1_session
SSL_get_SSL_CTX
SSL_get_certificate
SSL_get_cipher_list
SSL_get_ciphers
SSL_get_client_CA_list
SSL_get_current_cipher
SSL_get_current_compression
SSL_get_current_expansion
SSL_get_default_timeout
SSL_get_error
SSL_get_ex_data
SSL_get_ex_data_X509_STORE_CTX_idx
SSL_get_ex_new_index
SSL_get_fd
SSL_get_finished
SSL_get_info_callback
SSL_get_peer_cert_chain
SSL_get_peer_certificate
SSL_get_peer_finished
SSL_get_privatekey
SSL_get_quiet_shutdown
SSL_get_rbio
SSL_get_read_ahead
SSL_get_rfd
SSL_get_servername
SSL_get_servername_type
SSL_get_session
SSL_get_shared_ciphers
SSL_get_shutdown
SSL_get_ssl_method
SSL_get_verify_callback
SSL_get_verify_depth
SSL_get_verify_mode
SSL_get_verify_result
SSL_get_version
SSL_get_wbio
SSL_get_wfd
SSL_has_matching_session_id
SSL_library_init
SSL_load_client_CA_file
SSL_load_error_strings
SSL_new
SSL_peek
SSL_pending
SSL_read
SSL_renegotiate
SSL_renegotiate_pending
SSL_rstate_string
SSL_rstate_string_long
SSL_set_SSL_CTX
SSL_set_accept_state
SSL_set_bio
SSL_set_cipher_list
SSL_set_client_CA_list
SSL_set_connect_state
SSL_set_ex_data
SSL_set_fd
SSL_set_generate_session_id
SSL_set_info_callback
SSL_set_msg_callback
SSL_set_purpose
SSL_set_quiet_shutdown
SSL_set_read_ahead
SSL_set_rfd
SSL_set_session
SSL_set_session_id_context
SSL_set_shutdown
SSL_set_ssl_method
SSL_set_tmp_dh_callback
SSL_set_tmp_ecdh_callback
SSL_set_tmp_rsa_callback
SSL_set_trust
SSL_set_verify
SSL_set_verify_depth
SSL_set_verify_result
SSL_set_wfd
SSL_shutdown
SSL_state
SSL_state_string
SSL_state_string_long
SSL_use_PrivateKey
SSL_use_PrivateKey_ASN1
SSL_use_PrivateKey_file
SSL_use_RSAPrivateKey
SSL_use_RSAPrivateKey_ASN1
SSL_use_RSAPrivateKey_file
SSL_use_certificate
SSL_use_certificate_ASN1
SSL_use_certificate_file
SSL_version
SSL_want
SSL_write
SSLv23_client_method
SSLv23_method
SSLv23_server_method
SSLv2_client_method
SSLv2_method
SSLv2_server_method
SSLv3_client_method
SSLv3_method
SSLv3_server_method
TLSv1_client_method
TLSv1_method
TLSv1_server_method
d2i_SSL_SESSION
i2d_SSL_SESSION
ssl2_ciphers
ssl3_ciphers

Sections

.text
Size: 151KB - Virtual size: 151KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 33KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 9KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Disk_Revival/temp.bmp
Disk_Revival/ . .txt
Disk_Revival/᫨  ᪠.txt
Disk_Revival/ diskfast.ru.url
.url
Disk_Revival/ࠢ.htm
.html

Sharing

General

Malware Config

Signatures

Files

092eb6daba2f17cbda102fd1a32acd00

Code Sign

c1:00:8b:3c:3c:88:11:d1:3e:f6:63:ec:df:40Certificate

c1:00:8b:3c:3c:88:11:d1:3e:f6:63:ec:df:40Certificate

2e:ab:11:dc:50:ff:5c:9d:cb:c0Certificate

Extended Key Usages

Key Usages

61:0f:78:4d:00:00:00:00:00:03Certificate

Extended Key Usages

Key Usages

61:14:2c:a7:00:00:00:00:00:06Certificate

Extended Key Usages

Key Usages

61:14:2c:a7:00:00:00:00:00:06Certificate

Extended Key Usages

Key Usages

6a:0b:99:4f:c0:00:25:ab:11:db:45:1f:58:7a:67:a2Certificate

Extended Key Usages

Key Usages

3e:b8:2d:0b:41:de:b8:14:82:b2:6d:80:ac:85:6a:a4:1c:9b:ef:50Signer

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

msvcrt

advapi32

user32

ntdll

comctl32

shell32

Sections

.text Size: 30KB - Virtual size: 30KB

.data Size: 512B - Virtual size: 68KB

.rsrc Size: 1.7MB - Virtual size: 5KB

41deac0699e60df57c4ed84e7981e658

Headers

File Characteristics

Imports

advapi32

libgcc_s_dw2-1

kernel32

mpr

msvcrt

ole32

shell32

user32

ws2_32

libstdc++-6

Exports

Exports

Sections

.text Size: 2.6MB - Virtual size: 2.6MB

.data Size: 4KB - Virtual size: 3KB

.rdata Size: 1.7MB - Virtual size: 1.7MB

.eh_fram Size: 483KB - Virtual size: 482KB

.bss Size: - Virtual size: 15KB

.edata Size: 261KB - Virtual size: 261KB

.idata Size: 9KB - Virtual size: 9KB

.CRT Size: 512B - Virtual size: 44B

.tls Size: 512B - Virtual size: 32B

.rsrc Size: 1024B - Virtual size: 824B

.reloc Size: 76KB - Virtual size: 75KB

94e8ce7c3985688d5463afba3187da59

Headers

File Characteristics

Imports

oleaut32

advapi32

user32

kernel32

gdi32

version

netapi32

ole32

c1:00:8b:3c:3c:88:11:d1:3e:f6:63:ec:df:40
Certificate

c1:00:8b:3c:3c:88:11:d1:3e:f6:63:ec:df:40
Certificate

2e:ab:11:dc:50:ff:5c:9d:cb:c0
Certificate

61:0f:78:4d:00:00:00:00:00:03
Certificate

61:14:2c:a7:00:00:00:00:00:06
Certificate

61:14:2c:a7:00:00:00:00:00:06
Certificate

6a:0b:99:4f:c0:00:25:ab:11:db:45:1f:58:7a:67:a2
Certificate

3e:b8:2d:0b:41:de:b8:14:82:b2:6d:80:ac:85:6a:a4:1c:9b:ef:50
Signer

.text
Size: 30KB - Virtual size: 30KB

.data
Size: 512B - Virtual size: 68KB

.rsrc
Size: 1.7MB - Virtual size: 5KB

.text
Size: 2.6MB - Virtual size: 2.6MB

.data
Size: 4KB - Virtual size: 3KB

.rdata
Size: 1.7MB - Virtual size: 1.7MB

.eh_fram
Size: 483KB - Virtual size: 482KB

.bss
Size: - Virtual size: 15KB

.edata
Size: 261KB - Virtual size: 261KB

.idata
Size: 9KB - Virtual size: 9KB

.CRT
Size: 512B - Virtual size: 44B

.tls
Size: 512B - Virtual size: 32B

.rsrc
Size: 1024B - Virtual size: 824B

.reloc
Size: 76KB - Virtual size: 75KB

.text
Size: 4.0MB - Virtual size: 4.0MB

.itext
Size: 10KB - Virtual size: 9KB

.data
Size: 81KB - Virtual size: 81KB

.bss
Size: - Virtual size: 31KB

.idata
Size: 17KB - Virtual size: 17KB

.didata
Size: 3KB - Virtual size: 2KB

.edata
Size: 512B - Virtual size: 156B

.tls
Size: - Virtual size: 76B

.rdata
Size: 512B - Virtual size: 93B

.reloc
Size: 338KB - Virtual size: 337KB

.rsrc
Size: 321KB - Virtual size: 320KB

.text
Size: 9KB - Virtual size: 8KB

.data
Size: 512B - Virtual size: 56B

.rdata
Size: 3KB - Virtual size: 2KB

.eh_fram
Size: 3KB - Virtual size: 2KB

.bss
Size: - Virtual size: 1KB

.idata
Size: 4KB - Virtual size: 3KB

.CRT
Size: 512B - Virtual size: 52B

.tls
Size: 512B - Virtual size: 32B

.text
Size: 48KB - Virtual size: 48KB

.rdata
Size: 19KB - Virtual size: 18KB

.data
Size: 512B - Virtual size: 1KB

.rsrc
Size: 2KB - Virtual size: 1KB

.reloc
Size: 4KB - Virtual size: 4KB