f4cabc8a1afa32ea7740db263f11726e_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

f4cabc8a1afa32ea7740db263f11726e_JaffaCakes118
Size

8.2MB
MD5

f4cabc8a1afa32ea7740db263f11726e
SHA1

678ff5d3c231e2a782ffbc4416bcc10ad56194a5
SHA256

bee9851460352c671052facee90ee2bec0a18d1e7625fa4beccddc3f5bc654de
SHA512

802327a758b13430538becaf64049ab27721fb5e9d75c4ae98b5a9ae28776aad5bfcef418c65c8e8469e77e1e7586d1b539d2754b1c6f1b12f2f539950072821
SSDEEP

196608:wQNYZA70Wz2+lD1tRVmCJDuzDjFzmOH6QCM2BIJLHQYBaGYJI77x:tY657friDFmy6WgIJbQdGC87x

Score

3^/10

Malware Config

Signatures

Unsigned PE 37 IoCs

Checks for missing Authenticode signature.

resource
unpack001/HA_KylixRM-21_CZ.EXE
unpack002/$PLUGINSDIR/installoptions.dll
unpack002/$PLUGINSDIR/killprocdll.dll
unpack002/$PLUGINSDIR/nsWeb.dll
unpack002/$PLUGINSDIR/nsweb.dll
unpack002/$PLUGINSDIR/startmenu.dll
unpack002/$PLUGINSDIR/system.dll
unpack002/$PLUGINSDIR/textreplace.dll
unpack002/$PLUGINSDIR/time.dll
unpack002/$PROGRAM_FILES/Baidu/bar/TempData.KGB
unpack002/$PROGRAM_FILES/Baidu/bar/baidubar.dll
unpack002/$PROGRAM_FILES_COMMON/NSISLog/Lang2052.DAT
unpack002/$SYSDIR/comfocus.exe
unpack002/$SYSDIR/drmclien.dll
unpack002/$SYSDIR/hasfocus.exe
unpack002/$SYSDIR/lame_enc.dll
unpack002/$SYSDIR/mp4lib.dll
unpack002/$SYSDIR/msdmo.dll
unpack002/$SYSDIR/msdxm.ocx
unpack002/$SYSDIR/multimedia.dll
unpack002/$SYSDIR/setfocus.exe
unpack002/$SYSDIR/skinplusplusdll.dll
unpack002/$SYSDIR/sysfocus.exe
unpack002/$SYSDIR/wavdest.ax
unpack002/$SYSDIR/winfocus.exe
unpack002/$SYSDIR/wmasf.dll
unpack002/$SYSDIR/wmidx.dll
unpack002/$SYSDIR/wmvcore.dll
unpack002/$TEMP/Kylix Ringtone Maker Setup Part2/krmpart2.exe
unpack002/Lang2052.DAT
unpack002/drmclien.dll
unpack002/file,diz.thx
unpack002/ringtonemaker.exe
unpack002/uninst.exe
unpack004/$PLUGINSDIR/killprocdll.dll
unpack004/$PROGRAM_FILES/Baidu/bar/TempData.KGB
unpack002/winfocus.exe

Files

f4cabc8a1afa32ea7740db263f11726e_JaffaCakes118
.rar
HA_KylixRM-21_CZ.EXE
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.uNSIS
Size: 342B - Virtual size: 4.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

HelloFAR
Size: 111KB - Virtual size: 140KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
$PLUGINSDIR/installoptions.dll
.dll windows:4 windows x86 arch:x86

57354bdeea3dfae6e948101add87501a

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

SetCurrentDirectoryA
GetCurrentDirectoryA
GetPrivateProfileIntA
GetModuleHandleA
lstrcmpiA
GetPrivateProfileStringA
lstrcatA
lstrcpynA
WritePrivateProfileStringA
lstrlenA
lstrcpyA
GlobalFree
MultiByteToWideChar
GlobalAlloc

user32

GetDlgCtrlID
GetClientRect
SetWindowRgn
MapWindowPoints
LoadImageA
SetWindowLongA
CreateWindowExA
MapDialogRect
SetWindowPos
GetWindowRect
CreateDialogParamA
ShowWindow
EnableWindow
GetDlgItem
DestroyIcon
DestroyWindow
DispatchMessageA
TranslateMessage
GetMessageA
IsDialogMessageA
PtInRect
LoadCursorA
SetCursor
DrawTextA
GetWindowLongA
DrawFocusRect
CallWindowProcA
PostMessageA
MessageBoxA
CharNextA
wsprintfA
GetWindowTextA
SetWindowTextA
SendMessageA
LoadIconA

gdi32

SetTextColor
GetObjectA
SelectObject
GetDIBits
CreateRectRgn
CombineRgn
DeleteObject
CreateCompatibleDC

shell32

SHGetPathFromIDListA
SHBrowseForFolderA
SHGetDesktopFolder
SHGetMalloc
ShellExecuteA

comdlg32

GetOpenFileNameA
GetSaveFileNameA
CommDlgExtendedError

Exports

Exports

dialog
initDialog
show

Sections

.text
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 152B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 954B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$PLUGINSDIR/ioSpecial.ini
$PLUGINSDIR/killprocdll.dll
.dll windows:4 windows x86 arch:x86

815c88741b87a0210c457b00b57bf9c6

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

TerminateProcess
CloseHandle
OpenProcess
FreeLibrary
LoadLibraryA
GetProcAddress
GetVersionExA
GlobalFree
lstrcpyA
InterlockedDecrement
InterlockedIncrement
GetCommandLineA
GetVersion
HeapFree
HeapAlloc
WideCharToMultiByte
MultiByteToWideChar
LCMapStringA
LCMapStringW
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
ExitProcess
GetCurrentProcess
HeapReAlloc
HeapSize
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
TlsGetValue
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
HeapDestroy
HeapCreate
VirtualFree
WriteFile
VirtualAlloc
RtlUnwind
GetCPInfo
GetStringTypeA
GetStringTypeW
GetACP
GetOEMCP

Exports

Exports

KillProc

Sections

.text
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$PLUGINSDIR/modern-header.bmp
$PLUGINSDIR/modern-wizard.bmp
$PLUGINSDIR/nsWeb.dll
.dll windows:4 windows x86 arch:x86

d12ed83df3a4aa87887f14a225ff95d4

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

HeapFree
HeapAlloc
GetProcessHeap
FreeLibrary
GetProcAddress
LoadLibraryA
MultiByteToWideChar
GlobalFree
lstrcpyA
GlobalAlloc

user32

MapWindowPoints
GetWindowRect
SendMessageA
PostMessageA
MoveWindow
GetDlgItem
GetWindowLongA
GetClientRect
SetWindowLongA
ShowWindow
UpdateWindow
IsDialogMessageA
GetMessageA
TranslateMessage
DispatchMessageA
DestroyWindow
CreateDialogParamA
CallWindowProcA

ole32

OleInitialize
OleUninitialize
OleSetContainedObject
OleCreate

oleaut32

SafeArrayCreate
SafeArrayDestroy
SysFreeString
SysAllocStringLen
VariantClear
SysAllocString
VariantInit
SafeArrayAccessData

urlmon

CreateURLMoniker

wininet

InternetAttemptConnect

Exports

Exports

IsInet
ShowHTMLInPage
ShowWebInPage
ShowWebInPopUp

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 456B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 152B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 644B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$PLUGINSDIR/nsweb.dll
.dll windows:4 windows x86 arch:x86

d12ed83df3a4aa87887f14a225ff95d4

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

HeapFree
HeapAlloc
GetProcessHeap
FreeLibrary
GetProcAddress
LoadLibraryA
MultiByteToWideChar
GlobalFree
lstrcpyA
GlobalAlloc

user32

MapWindowPoints
GetWindowRect
SendMessageA
PostMessageA
MoveWindow
GetDlgItem
GetWindowLongA
GetClientRect
SetWindowLongA
ShowWindow
UpdateWindow
IsDialogMessageA
GetMessageA
TranslateMessage
DispatchMessageA
DestroyWindow
CreateDialogParamA
CallWindowProcA

ole32

OleInitialize
OleUninitialize
OleSetContainedObject
OleCreate

oleaut32

SafeArrayCreate
SafeArrayDestroy
SysFreeString
SysAllocStringLen
VariantClear
SysAllocString
VariantInit
SafeArrayAccessData

urlmon

CreateURLMoniker

wininet

InternetAttemptConnect

Exports

Exports

IsInet
ShowHTMLInPage
ShowWebInPage
ShowWebInPopUp

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 456B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 152B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 644B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$PLUGINSDIR/startmenu.dll
.dll windows:4 windows x86 arch:x86

7d85f9c30f9e87a65fff848de2c96ac1

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

lstrcpynA
GlobalAlloc
MulDiv
GetModuleHandleA
GlobalFree
FindClose
FindNextFileA
FindFirstFileA
lstrcmpiA
lstrcatA
lstrcpyA

user32

GetMessageA
IsDialogMessageA
PostMessageA
CallWindowProcA
TranslateMessage
CheckDlgButton
ShowWindow
LoadIconA
GetClientRect
MoveWindow
ScreenToClient
GetWindowRect
ReleaseDC
GetDC
EnableWindow
SetWindowTextA
SendMessageA
GetWindowTextA
IsDlgButtonChecked
DispatchMessageA
DestroyWindow
GetDlgItem
CreateDialogParamA
SetWindowLongA
wsprintfA
GetWindowLongA

gdi32

GetTextMetricsA
SelectObject

shell32

SHGetMalloc
SHGetSpecialFolderLocation
SHGetPathFromIDListA

Exports

Exports

Init
Select
Show

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 296B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 460B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$PLUGINSDIR/system.dll
.dll windows:4 windows x86 arch:x86

4ec328f99bdd944fc98d8a5cf11f7a62

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GlobalAlloc
GlobalFree
GlobalSize
lstrcpyA
lstrcpynA
FreeLibrary
lstrcatA
GetProcAddress
LoadLibraryA
GetModuleHandleA
MultiByteToWideChar
lstrlenA
WideCharToMultiByte
GetLastError
VirtualAlloc
VirtualProtect

user32

wsprintfA

ole32

StringFromGUID2
CLSIDFromString

Exports

Exports

Alloc
Call
Copy
Free
Get
Int64Op
Store

Sections

.text
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 784B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 92B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 494B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$PLUGINSDIR/textreplace.dll
.dll windows:4 windows x86 arch:x86

68af796cbe4fdd2d5baf33b0af9aa583

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

lstrcpyA
lstrcmpiA
lstrcatA
lstrcpynA
lstrcmpA
lstrlenA
GlobalFree
CloseHandle
ReadFile
GlobalAlloc
GetFileSize
CreateFileA
WriteFile
SetFileAttributesA
GetFileAttributesA
CopyFileA

user32

CharUpperA

Exports

Exports

FILLREADBUFFER
FREEREADBUFFER
FindInFile
ReplaceInFile

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 791B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 322B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$PLUGINSDIR/time.dll
.dll windows:4 windows x86 arch:x86

5c9a5d5468ec62f250171c012eda3c26

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

lstrcmpiA
lstrcpynA
GlobalFree
lstrcpyA
lstrcmpA
GetSystemTime
GetLocalTime
SetSystemTime
SetLocalTime
FileTimeToSystemTime
FileTimeToLocalFileTime
FindClose
FindFirstFileA
CloseHandle
LocalFileTimeToFileTime
SystemTimeToFileTime
SetFileTime
CreateFileA
lstrcatA

user32

SendMessageA
wsprintfA

Exports

Exports

GETFILETIME
GETFILETIMEUTC
GETLOCALTIME
GETLOCALTIMEUTC
MATHTIME
SETFILETIME
SETFILETIMEUTC
SETLOCALTIME
SETLOCALTIMEUTC
TIMESTRING

Sections

.text
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 414B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$PROGRAM_FILES/Baidu/bar/TempData.KGB
.dll regsvr32 windows:4 windows x86 arch:x86

6ccb2c8e98669e1c49478ccdae8356ae

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

MoveFileExA
WritePrivateProfileStringA
WritePrivateProfileSectionA
ReleaseMutex
WaitForSingleObject
CreateMutexA
GetVersionExA
DeviceIoControl
GetTickCount
Sleep
GetFileAttributesA
SetFilePointer
FindClose
FindNextFileA
SetFileAttributesA
FindFirstFileA
CopyFileA
GetPrivateProfileSectionNamesA
GetEnvironmentVariableA
ReadProcessMemory
VirtualProtect
GetVolumeInformationA
GlobalUnlock
GlobalLock
LocalFree
FormatMessageA
HeapFree
TlsAlloc
TlsFree
TlsSetValue
TlsGetValue
GlobalFree
GlobalAlloc
ResumeThread
CreateFileA
RemoveDirectoryA
CreateDirectoryA
GetTempFileNameA
DeleteFileA
GetTempPathA
LoadLibraryA
lstrcatA
lstrcpyA
lstrcpynA
HeapDestroy
IsDBCSLeadByte
FindResourceA
lstrcmpiA
LoadLibraryExA
FreeLibrary
LoadResource
SizeofResource
GetPrivateProfileSectionA
SetErrorMode
GetModuleFileNameW
SetLastError
DebugBreak
OutputDebugStringA
lstrlenA
InterlockedIncrement
lstrcpyW
MultiByteToWideChar
WriteFile
CloseHandle
ReadFile
HeapAlloc
GetProcessHeap
GetFileSize
GetLastError
WideCharToMultiByte
CreateThread
WriteProcessMemory
GetCurrentProcess
lstrlenW
InterlockedDecrement
GetModuleHandleA
GetModuleHandleW
GetProcAddress
GetFileAttributesW
GetVersion
LoadLibraryW
GetModuleFileNameA
LeaveCriticalSection
EnterCriticalSection
GetCurrentThreadId
FlushInstructionCache
DisableThreadLibraryCalls
GetShortPathNameA
GetPrivateProfileStringA
GetPrivateProfileIntA
GetSystemDirectoryA
GetWindowsDirectoryA
InitializeCriticalSection
DeleteCriticalSection

user32

GetSubMenu
DialogBoxParamA
GetClientRect
DestroyWindow
GetFocus
SetFocus
UnhookWindowsHookEx
SetWindowsHookExA
CreateWindowExA
wsprintfA
LoadCursorA
UpdateWindow
GetClassInfoExA
BeginPaint
MessageBoxA
CharUpperA
EnableWindow
SendMessageA
CharNextA
IsWindowVisible
SetRectEmpty
DefWindowProcA
DestroyIcon
GetWindow
GetParent
GetWindowTextA
MoveWindow
ScreenToClient
GetWindowRect
DrawIconEx
CopyRect
SetCursor
LoadIconA
CallWindowProcA
PtInRect
IsRectEmpty
DispatchMessageA
TranslateMessage
GetKeyState
SetWindowPos
GetSysColor
OffsetRect
InflateRect
DrawTextA
FillRect
EndDialog
ShowWindow
SetWindowTextA
IsWindow
GetDlgItem
RegisterClassExA
InvalidateRect
SetWindowLongA
GetWindowLongA
EndPaint
wvsprintfA
SetRect
LoadStringA
CharLowerA
CheckMenuItem
EnableMenuItem
GetAsyncKeyState
CallNextHookEx
GetActiveWindow
PostMessageA
FindWindowExA
ReleaseDC
SetCapture
SystemParametersInfoA
GetDesktopWindow
FindWindowA
AdjustWindowRect
GetCursorPos
MapWindowPoints
CharNextW
LoadImageA
GetMenuStringA
LoadMenuA
GetClassInfoA
ReleaseCapture
SetForegroundWindow
RedrawWindow
SetTimer
GetDC
CreatePopupMenu
InsertMenuA
TrackPopupMenu
DestroyMenu
CheckMenuRadioItem
LoadBitmapA
KillTimer

gdi32

DeleteDC
LineTo
MoveToEx
DeleteObject
CreatePen
GetStockObject
SelectObject
SetBkMode
CreateSolidBrush
SetBkColor
GetObjectA
IntersectClipRect
CreateFontIndirectA
Rectangle
SetPixelV
SetTextColor
CreateCompatibleDC
BitBlt
CreateCompatibleBitmap
TextOutA
CreateBitmap

advapi32

EnumDependentServicesA
GetUserNameA
RegSetKeySecurity
RegEnumKeyA
AllocateAndInitializeSid
InitializeAcl
AddAce
InitializeSecurityDescriptor
SetSecurityDescriptorDacl
FreeSid
RegGetKeySecurity
GetSidIdentifierAuthority
GetSidSubAuthorityCount
GetSidSubAuthority
OpenProcessToken
GetTokenInformation
GetLengthSid
CopySid
RegCloseKey
ControlService
OpenSCManagerA
OpenServiceA
StartServiceA
QueryServiceStatus
ChangeServiceConfigA
CloseServiceHandle
RegCreateKeyA
RegEnumValueA
RegQueryInfoKeyA
RegSetValueExA
RegEnumKeyExA
RegOpenKeyExA
RegDeleteValueA
RegDeleteKeyA
RegCreateKeyExA
RegOpenKeyA
RegQueryValueExA

shell32

SHBrowseForFolderA
ShellExecuteA
SHGetPathFromIDListA
SHGetMalloc
SHGetSpecialFolderPathA

ole32

CoTaskMemRealloc
CoInitialize
OleUninitialize
OleInitialize
CoTaskMemFree
RevokeDragDrop
ReleaseStgMedium
CoGetClassObject
CoTaskMemAlloc
CoCreateInstance
RegisterDragDrop
CoUninitialize

oleaut32

VariantChangeType
VarUI4FromStr
SysStringByteLen
VariantInit
SysAllocStringByteLen
SysStringLen
LoadRegTypeLi
RegisterTypeLi
LoadTypeLi
CreateErrorInfo
SysAllocString
VariantClear
SysAllocStringLen
SysFreeString
VariantCopy
GetErrorInfo
SetErrorInfo

shlwapi

SHDeleteValueA
SHSetValueA
SHGetValueA
SHDeleteKeyA
StrStrIA

urlmon

CoInternetGetSession

msvcrt

_stricmp
_purecall
_adjust_fdiv
_initterm
??1type_info@@UAE@XZ
_onexit
__dllonexit
?terminate@@YAXXZ
_fullpath
_endthreadex
_mbsnbcmp
_memicmp
_beginthread
_endthread
_local_unwind2
printf
tolower
strncat
fgets
_vsnprintf
_CxxThrowException
atol
fwrite
wcsstr
strcmp
fseek
ftell
toupper
isxdigit
isalnum
abs
_mbsnbcpy
_beginthreadex
localtime
_mbsicmp
fread
_mbsrchr
_mbstok
malloc
_wcsicmp
fopen
fputs
fclose
_except_handler3
_strnicmp
strncpy
_strlwr
strstr
wcscmp
memset
strrchr
strcat
_stat
_snprintf
time
srand
rand
sprintf
strcpy
strchr
strlen
_mbschr
_ismbcspace
_mbsnbicmp
memcmp
free
memmove
_mbscmp
realloc
??2@YAPAXI@Z
memcpy
atoi
_ismbcdigit
wcslen
??3@YAXPAX@Z
__CxxFrameHandler
_mbsstr
_wcsnicmp
_strcmpi

wininet

HttpSendRequestA
InternetCrackUrlA
InternetCanonicalizeUrlA
InternetReadFile
InternetCloseHandle
InternetOpenUrlA
InternetSetOptionA
InternetOpenA
InternetSetFilePointer
HttpQueryInfoA
FindNextUrlCacheEntryA
HttpOpenRequestA
InternetConnectA
GetUrlCacheEntryInfoA
DeleteUrlCacheEntry
FindFirstUrlCacheEntryA
FindCloseUrlCache
FindNextUrlCacheGroup
DeleteUrlCacheGroup
FindFirstUrlCacheGroup

setupapi

SetupIterateCabinetA

version

GetFileVersionInfoSizeA
VerQueryValueA
GetFileVersionInfoA

iphlpapi

GetNetworkParams

ws2_32

gethostname
gethostbyname

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
Install
Uninstall

Sections

.text
Size: 292KB - Virtual size: 289KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 52KB - Virtual size: 51KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 24KB - Virtual size: 60KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 16KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 176KB - Virtual size: 173KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$PROGRAM_FILES/Baidu/bar/baidubar.dat
$PROGRAM_FILES/Baidu/bar/baidubar.dll
.dll regsvr32 windows:4 windows x86 arch:x86

6ccb2c8e98669e1c49478ccdae8356ae

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

MoveFileExA
WritePrivateProfileStringA
WritePrivateProfileSectionA
ReleaseMutex
WaitForSingleObject
CreateMutexA
GetVersionExA
DeviceIoControl
GetTickCount
Sleep
GetFileAttributesA
SetFilePointer
FindClose
FindNextFileA
SetFileAttributesA
FindFirstFileA
CopyFileA
GetPrivateProfileSectionNamesA
GetEnvironmentVariableA
ReadProcessMemory
VirtualProtect
GetVolumeInformationA
GlobalUnlock
GlobalLock
LocalFree
FormatMessageA
HeapFree
TlsAlloc
TlsFree
TlsSetValue
TlsGetValue
GlobalFree
GlobalAlloc
ResumeThread
CreateFileA
RemoveDirectoryA
CreateDirectoryA
GetTempFileNameA
DeleteFileA
GetTempPathA
LoadLibraryA
lstrcatA
lstrcpyA
lstrcpynA
HeapDestroy
IsDBCSLeadByte
FindResourceA
lstrcmpiA
LoadLibraryExA
FreeLibrary
LoadResource
SizeofResource
GetPrivateProfileSectionA
SetErrorMode
GetModuleFileNameW
SetLastError
DebugBreak
OutputDebugStringA
lstrlenA
InterlockedIncrement
lstrcpyW
MultiByteToWideChar
WriteFile
CloseHandle
ReadFile
HeapAlloc
GetProcessHeap
GetFileSize
GetLastError
WideCharToMultiByte
CreateThread
WriteProcessMemory
GetCurrentProcess
lstrlenW
InterlockedDecrement
GetModuleHandleA
GetModuleHandleW
GetProcAddress
GetFileAttributesW
GetVersion
LoadLibraryW
GetModuleFileNameA
LeaveCriticalSection
EnterCriticalSection
GetCurrentThreadId
FlushInstructionCache
DisableThreadLibraryCalls
GetShortPathNameA
GetPrivateProfileStringA
GetPrivateProfileIntA
GetSystemDirectoryA
GetWindowsDirectoryA
InitializeCriticalSection
DeleteCriticalSection

user32

GetSubMenu
DialogBoxParamA
GetClientRect
DestroyWindow
GetFocus
SetFocus
UnhookWindowsHookEx
SetWindowsHookExA
CreateWindowExA
wsprintfA
LoadCursorA
UpdateWindow
GetClassInfoExA
BeginPaint
MessageBoxA
CharUpperA
EnableWindow
SendMessageA
CharNextA
IsWindowVisible
SetRectEmpty
DefWindowProcA
DestroyIcon
GetWindow
GetParent
GetWindowTextA
MoveWindow
ScreenToClient
GetWindowRect
DrawIconEx
CopyRect
SetCursor
LoadIconA
CallWindowProcA
PtInRect
IsRectEmpty
DispatchMessageA
TranslateMessage
GetKeyState
SetWindowPos
GetSysColor
OffsetRect
InflateRect
DrawTextA
FillRect
EndDialog
ShowWindow
SetWindowTextA
IsWindow
GetDlgItem
RegisterClassExA
InvalidateRect
SetWindowLongA
GetWindowLongA
EndPaint
wvsprintfA
SetRect
LoadStringA
CharLowerA
CheckMenuItem
EnableMenuItem
GetAsyncKeyState
CallNextHookEx
GetActiveWindow
PostMessageA
FindWindowExA
ReleaseDC
SetCapture
SystemParametersInfoA
GetDesktopWindow
FindWindowA
AdjustWindowRect
GetCursorPos
MapWindowPoints
CharNextW
LoadImageA
GetMenuStringA
LoadMenuA
GetClassInfoA
ReleaseCapture
SetForegroundWindow
RedrawWindow
SetTimer
GetDC
CreatePopupMenu
InsertMenuA
TrackPopupMenu
DestroyMenu
CheckMenuRadioItem
LoadBitmapA
KillTimer

gdi32

DeleteDC
LineTo
MoveToEx
DeleteObject
CreatePen
GetStockObject
SelectObject
SetBkMode
CreateSolidBrush
SetBkColor
GetObjectA
IntersectClipRect
CreateFontIndirectA
Rectangle
SetPixelV
SetTextColor
CreateCompatibleDC
BitBlt
CreateCompatibleBitmap
TextOutA
CreateBitmap

advapi32

EnumDependentServicesA
GetUserNameA
RegSetKeySecurity
RegEnumKeyA
AllocateAndInitializeSid
InitializeAcl
AddAce
InitializeSecurityDescriptor
SetSecurityDescriptorDacl
FreeSid
RegGetKeySecurity
GetSidIdentifierAuthority
GetSidSubAuthorityCount
GetSidSubAuthority
OpenProcessToken
GetTokenInformation
GetLengthSid
CopySid
RegCloseKey
ControlService
OpenSCManagerA
OpenServiceA
StartServiceA
QueryServiceStatus
ChangeServiceConfigA
CloseServiceHandle
RegCreateKeyA
RegEnumValueA
RegQueryInfoKeyA
RegSetValueExA
RegEnumKeyExA
RegOpenKeyExA
RegDeleteValueA
RegDeleteKeyA
RegCreateKeyExA
RegOpenKeyA
RegQueryValueExA

shell32

SHBrowseForFolderA
ShellExecuteA
SHGetPathFromIDListA
SHGetMalloc
SHGetSpecialFolderPathA

ole32

CoTaskMemRealloc
CoInitialize
OleUninitialize
OleInitialize
CoTaskMemFree
RevokeDragDrop
ReleaseStgMedium
CoGetClassObject
CoTaskMemAlloc
CoCreateInstance
RegisterDragDrop
CoUninitialize

oleaut32

VariantChangeType
VarUI4FromStr
SysStringByteLen
VariantInit
SysAllocStringByteLen
SysStringLen
LoadRegTypeLi
RegisterTypeLi
LoadTypeLi
CreateErrorInfo
SysAllocString
VariantClear
SysAllocStringLen
SysFreeString
VariantCopy
GetErrorInfo
SetErrorInfo

shlwapi

SHDeleteValueA
SHSetValueA
SHGetValueA
SHDeleteKeyA
StrStrIA

urlmon

CoInternetGetSession

msvcrt

_stricmp
_purecall
_adjust_fdiv
_initterm
??1type_info@@UAE@XZ
_onexit
__dllonexit
?terminate@@YAXXZ
_fullpath
_endthreadex
_mbsnbcmp
_memicmp
_beginthread
_endthread
_local_unwind2
printf
tolower
strncat
fgets
_vsnprintf
_CxxThrowException
atol
fwrite
wcsstr
strcmp
fseek
ftell
toupper
isxdigit
isalnum
abs
_mbsnbcpy
_beginthreadex
localtime
_mbsicmp
fread
_mbsrchr
_mbstok
malloc
_wcsicmp
fopen
fputs
fclose
_except_handler3
_strnicmp
strncpy
_strlwr
strstr
wcscmp
memset
strrchr
strcat
_stat
_snprintf
time
srand
rand
sprintf
strcpy
strchr
strlen
_mbschr
_ismbcspace
_mbsnbicmp
memcmp
free
memmove
_mbscmp
realloc
??2@YAPAXI@Z
memcpy
atoi
_ismbcdigit
wcslen
??3@YAXPAX@Z
__CxxFrameHandler
_mbsstr
_wcsnicmp
_strcmpi

wininet

HttpSendRequestA
InternetCrackUrlA
InternetCanonicalizeUrlA
InternetReadFile
InternetCloseHandle
InternetOpenUrlA
InternetSetOptionA
InternetOpenA
InternetSetFilePointer
HttpQueryInfoA
FindNextUrlCacheEntryA
HttpOpenRequestA
InternetConnectA
GetUrlCacheEntryInfoA
DeleteUrlCacheEntry
FindFirstUrlCacheEntryA
FindCloseUrlCache
FindNextUrlCacheGroup
DeleteUrlCacheGroup
FindFirstUrlCacheGroup

setupapi

SetupIterateCabinetA

version

GetFileVersionInfoSizeA
VerQueryValueA
GetFileVersionInfoA

iphlpapi

GetNetworkParams

ws2_32

gethostname
gethostbyname

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
Install
Uninstall

Sections

.text
Size: 292KB - Virtual size: 289KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 52KB - Virtual size: 51KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 24KB - Virtual size: 60KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 16KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 176KB - Virtual size: 173KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$PROGRAM_FILES/Baidu/bar/img/imglist.bmp
$PROGRAM_FILES/Baidu/bar/img/logo.bmp
$PROGRAM_FILES_COMMON/NSISLog/Lang2052.DAT
.exe windows:4 windows x86 arch:x86

d31173ca8ec2d5e26170e3b96a28428f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

OpenProcess
lstrcatA
GetLastError
lstrcpynA
lstrcmpiA
WinExec
GetModuleFileNameA
TerminateProcess
lstrlenA
LoadLibraryA
WritePrivateProfileStringA
GetModuleHandleA
GetVersion
WriteFile
MoveFileExA
GetSystemDirectoryA
CreateFileA
DeviceIoControl
DeleteFileA
GetVersionExA
GetCurrentProcess
CloseHandle
GetTempPathA
GetProcAddress
GlobalAlloc
FreeLibrary
LoadLibraryExA
GetSystemDefaultLangID
GlobalFree
WideCharToMultiByte
MultiByteToWideChar
GetOEMCP
GetStringTypeW
GetStringTypeA
GetFileType
GetStdHandle
SetHandleCount
IsBadCodePtr
IsBadReadPtr
SetUnhandledExceptionFilter
LCMapStringA
GetEnvironmentStrings
RtlUnwind
HeapFree
HeapAlloc
GetStartupInfoA
GetCommandLineA
ExitProcess
GetCPInfo
GetACP
GetEnvironmentStringsW
FreeEnvironmentStringsA
FreeEnvironmentStringsW
VirtualFree
LCMapStringW
HeapDestroy
HeapCreate
VirtualAlloc
HeapReAlloc
IsBadWritePtr
UnhandledExceptionFilter

user32

ExitWindowsEx
wsprintfA
MessageBoxA

advapi32

CloseServiceHandle
RegOpenKeyExA
RegCloseKey
OpenSCManagerA
CreateServiceA
StartServiceA
ControlService
OpenServiceA
OpenProcessToken
LookupPrivilegeValueA
DeleteService
RegDeleteKeyA
RegEnumKeyExA
AdjustTokenPrivileges
RegEnumValueA
RegSetValueExA
RegDeleteValueA
RegCreateKeyExA

version

GetFileVersionInfoSizeA
GetFileVersionInfoA
VerQueryValueA

shlwapi

SHDeleteKeyA

Sections

.text
Size: 28KB - Virtual size: 25KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 352KB - Virtual size: 353KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 928B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
$SYSDIR/comfocus.exe
.exe windows:4 windows x86 arch:x86

696b5dc1e295cfd42711a127361e7d24

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GlobalGetAtomNameA
WritePrivateProfileStringA
GetCurrentDirectoryA
GlobalFlags
GetCPInfo
GetOEMCP
HeapAlloc
HeapFree
VirtualProtect
VirtualAlloc
GetSystemInfo
VirtualQuery
RtlUnwind
ReadConsoleInputA
SetConsoleMode
GetConsoleMode
SetEnvironmentVariableA
SetCurrentDirectoryA
GetDriveTypeA
ExitProcess
HeapReAlloc
TerminateProcess
HeapSize
GlobalAddAtomA
HeapCreate
VirtualFree
IsBadWritePtr
GetStringTypeA
GetStringTypeW
LCMapStringA
LCMapStringW
SetUnhandledExceptionFilter
GetStdHandle
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetFileType
GetStartupInfoA
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
GetTimeZoneInformation
IsBadReadPtr
IsBadCodePtr
GetUserDefaultLCID
EnumSystemLocalesA
IsValidLocale
IsValidCodePage
SetStdHandle
GetLocaleInfoW
GlobalFindAtomA
lstrcmpW
GetFileTime
GetFileAttributesA
FileTimeToLocalFileTime
FileTimeToSystemTime
TlsFree
LocalReAlloc
TlsSetValue
TlsAlloc
TlsGetValue
EnterCriticalSection
GlobalHandle
GlobalReAlloc
LeaveCriticalSection
LocalAlloc
InterlockedIncrement
InterlockedDecrement
GetCurrentThread
GetCurrentThreadId
FreeLibrary
GlobalDeleteAtom
lstrcmpA
ConvertDefaultLocale
EnumResourceLanguagesA
SetErrorMode
lstrcatA
LoadLibraryA
GetProcAddress
GetModuleFileNameA
CreateFileA
GetFullPathNameA
GetVolumeInformationA
FindFirstFileA
FindClose
lstrcpyA
GetCurrentProcess
DuplicateHandle
GetFileSize
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
WriteFile
ReadFile
SetLastError
GlobalFree
GlobalAlloc
GlobalLock
GlobalUnlock
lstrcpynA
GetCommandLineA
GetModuleHandleA
CreateEventA
WaitForSingleObject
CopyFileA
DeleteFileA
CloseHandle
FormatMessageA
LocalFree
CompareStringW
CompareStringA
lstrlenA
lstrcmpiA
GetVersion
FindResourceA
LoadResource
LockResource
SizeofResource
DeleteCriticalSection
InitializeCriticalSection
GetLastError
RaiseException
WideCharToMultiByte
MultiByteToWideChar
GetVersionExA
GetThreadLocale
GetLocaleInfoA
GetACP
HeapDestroy
InterlockedExchange

user32

GetFocus
GetForegroundWindow
DispatchMessageA
GetDlgItem
GetTopWindow
DestroyWindow
GetMessageTime
GetMessagePos
LoadIconA
PeekMessageA
MapWindowPoints
GetKeyState
SetForegroundWindow
IsWindowVisible
GetClientRect
GetMenu
AdjustWindowRectEx
GetClassInfoA
RegisterClassA
GetDlgCtrlID
DefWindowProcA
CallWindowProcA
SetWindowLongA
SetWindowPos
SystemParametersInfoA
GetWindowPlacement
GetWindowRect
CopyRect
RemovePropA
GetWindow
ClientToScreen
GrayStringA
DrawTextExA
DrawTextA
TabbedTextOutA
GetWindowTextA
SendMessageA
MessageBoxA
GetParent
GetWindowLongA
GetLastActivePopup
IsWindowEnabled
EnableWindow
UnhookWindowsHookEx
LoadCursorA
GetDC
ReleaseDC
GetSysColor
GetSysColorBrush
PostMessageA
PostQuitMessage
ShowWindow
wsprintfA
GetSystemMetrics
GetMenuState
GetMenuItemID
GetMenuItemCount
GetSubMenu
UnregisterClassA
CharUpperA
DestroyMenu
PtInRect
SetWindowTextA
SetMenuItemBitmaps
ModifyMenuA
EnableMenuItem
CheckMenuItem
GetMenuCheckMarkDimensions
LoadBitmapA
SetCursor
GetMessageA
TranslateMessage
GetActiveWindow
GetCursorPos
ValidateRect
RegisterWindowMessageA
WinHelpA
GetCapture
CreateWindowExA
SetWindowsHookExA
CallNextHookEx
GetClassLongA
GetClassInfoExA
GetClassNameA
SetPropA
IsIconic
GetPropA

gdi32

DeleteObject
PtVisible
RectVisible
TextOutA
ExtTextOutA
Escape
SelectObject
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowExtEx
DeleteDC
CreateBitmap
GetStockObject
GetClipBox
SetMapMode
SetTextColor
SetBkColor
RestoreDC
SaveDC
ScaleWindowExtEx
GetDeviceCaps

comdlg32

GetFileTitleA

winspool.drv

OpenPrinterA
DocumentPropertiesA
ClosePrinter

advapi32

RegSetValueExA
RegQueryValueA
RegEnumKeyA
RegDeleteKeyA
RegCloseKey
RegCreateKeyExA
RegOpenKeyExA
RegQueryValueExA
RegOpenKeyA

comctl32

ord17

shlwapi

PathStripToRootA
PathIsUNCA
PathFindFileNameA
PathFindExtensionA

ole32

CoInitializeEx
CoCreateInstance
CoUninitialize
CoTaskMemFree

oleaut32

SysAllocString
SysFreeString
VariantClear
VariantChangeType
VariantInit

Sections

.text
Size: 140KB - Virtual size: 136KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 36KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
$SYSDIR/drmclien.dll
.dll regsvr32 windows:5 windows x86 arch:x86

b6197c892b89fe5446bbc8173b22dadb

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

DRMClien.pdb

Imports

msvcrt

wcscmp
_wunlink
_unlink
_wrename
rename
fseek
toupper
wcsrchr
strrchr
wcscpy
_wmktemp
_mktemp
sprintf
_open
time
_read
_close
wcslen
wcscat
_wfopen
strcat
memmove
printf
_except_handler3
free
_initterm
_adjust_fdiv
__dllonexit
fopen
fread
fclose
fwrite
??2@YAPAXI@Z
strncpy
strcpy
strcmp
strlen
_onexit
_strnicmp
_stricmp
_strupr
_filelength
_wcsicmp
__CxxFrameHandler
_CxxThrowException
strstr
atoi
_purecall
isdigit
strncmp
_memccpy
sscanf
??1type_info@@UAE@XZ
?terminate@@YAXXZ
malloc
memcmp
memcpy
??3@YAXPAX@Z
memset
_ultoa

kernel32

GetTickCount
lstrlenW
GetSystemTime
DeviceIoControl
GetVersion
HeapFree
GetProcessHeap
GetModuleHandleA
FlushFileBuffers
lstrcpynA
ReadFile
WriteFile
SetFilePointer
HeapAlloc
VirtualFree
VirtualAlloc
GetModuleFileNameA
DuplicateHandle
GetCurrentThread
CreateEventA
ExitThread
OutputDebugStringA
FlushInstructionCache
VirtualProtect
DeleteCriticalSection
InitializeCriticalSection
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
GetProcessAffinityMask
CreateThread
SetThreadAffinityMask
SetThreadPriority
ResumeThread
SetEvent
GetSystemInfo
GetCurrentThreadId
LocalFree
LocalAlloc
EnterCriticalSection
LeaveCriticalSection
ReleaseMutex
WaitForSingleObject
GetLocalTime
GetSystemDirectoryW
SetFileAttributesW
GetSystemDirectoryA
lstrcmpA
RemoveDirectoryW
GetWindowsDirectoryW
CreateDirectoryW
LoadLibraryExA
SetFileAttributesA
GetFileAttributesW
GetWindowsDirectoryA
CreateDirectoryA
MultiByteToWideChar
WideCharToMultiByte
GetCurrentDirectoryW
SetCurrentDirectoryW
GetCurrentDirectoryA
SetCurrentDirectoryA
LoadLibraryA
GetProcAddress
FreeLibrary
GetVersionExA
CreateMutexA
OpenMutexA
GetLogicalDriveStringsA
GetFileAttributesA
CreateFileW
CreateFileA
GetFileSize
CloseHandle
FindFirstFileW
FindNextFileW
FindFirstFileA
FindNextFileA
FindClose
lstrcatA
DeleteFileW
DeleteFileA
MoveFileW
GetLastError
MoveFileA
CopyFileW
CopyFileA
lstrcpyA
GetDriveTypeA
SetErrorMode
CompareStringA
GetModuleHandleW
lstrcpynW
GetVolumeInformationA
IsBadWritePtr
lstrlenA
GetVersionExW
GetDiskFreeSpaceA
CompareStringW
QueryDosDeviceA
InterlockedExchange
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
GlobalMemoryStatus
Sleep
WaitNamedPipeW
ResetEvent

user32

LoadIconA
LoadImageA
RegisterWindowMessageA
CharUpperA
CharLowerA
SendMessageA
wsprintfW
CharNextW
CharNextA
wsprintfA

advapi32

RegQueryValueExA
RegOpenKeyExA
RegSetValueExA
RegQueryInfoKeyW
RegQueryInfoKeyA
RegOpenKeyExW
RegOpenKeyA
RegEnumKeyA
RegQueryValueExW
RegCreateKeyExA
RegEnumKeyExA
CloseServiceHandle
OpenSCManagerA
ControlService
StartServiceA
QueryServiceStatus
OpenServiceA
SetNamedSecurityInfoW
GetSecurityDescriptorDacl
RegSetKeySecurity
RegDeleteValueA
RegOpenKeyW
RegSetValueExW
RegCloseKey

ole32

CLSIDFromString
StringFromCLSID
CoTaskMemAlloc
CoCreateGuid
CoTaskMemFree

oleaut32

SysFreeString
SysStringLen
SysAllocStringLen

Exports

Exports

??0CDRMLiteCrypto@@QAE@XZ
??1CDRMLiteCrypto@@QAE@XZ
?BackupLicenses@CDRMLiteCrypto@@QAEJKPAGPAUIUnknown@@PAHPAX@Z
?EncryptFast@CDRMLiteCrypto@@QAEJPBDKPAE1@Z
?EncryptIndirectFast@CDRMLiteCrypto@@QAEJPBDKPAE1@Z
?GenerateNewLicenseEx@CDRMLiteCrypto@@QAEJKPAE00PAPAD10@Z
?GetLicenses@CDRMLiteCrypto@@QAEJPBDPAUPMLICENSE@@PAKKPAX2PAE@Z
?GetPublicKey@CDRMLiteCrypto@@QAEJPAUPKCERT@@@Z
?QueryXferToPMEx@CDRMLiteCrypto@@QAEJPBDKPAKPAEK2K12@Z
?RestoreLicenses@CDRMLiteCrypto@@QAEJKPAEPAGPAUIUnknown@@PAHPAX@Z
Bind
BindEx
CanDecrypt
CanDecryptEx
CreatePMLicense
Decrypt
DllMain
DllRegisterServer
DllUnregisterServer
Encrypt
GenerateNewLicense
GetPMLicenseFileName
GetPMLicenseSize
GetVersion
InitAppCerts
KeyExchange
ProcessResponse
QueryXferToPM
RequestLicense
SetAppSec
SetLicenseStore

Sections

.text
Size: 269KB - Virtual size: 269KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 952B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 17KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
$SYSDIR/hasfocus.exe
.exe windows:4 windows x86 arch:x86

4cfe5195ed61033833b40b1419cd3af9

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetConsoleTitleA
GetTickCount

msvcrt

ftell
fseek
malloc
perror
fopen
fgetc
memset
memcmp
fread
_iob
strcmp
fprintf
memcpy
free
fclose
fwrite
sprintf
fflush
strcpy
strrchr
_stricmp
clearerr
strlen
atoi
sscanf
strncmp
getenv
_ftol
_CIpow
_CIasin
exit
??3@YAXPAX@Z
??2@YAPAXI@Z
__CxxFrameHandler
rewind
_errno
_CxxThrowException
realloc
memmove
printf
_snprintf
_vsnprintf
strerror
strchr
tolower
strncpy
isalnum
_purecall
fgetpos
fsetpos
_ftime
vprintf
_exit
_XcptFilter
__p___initenv
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
??1type_info@@UAE@XZ
_controlfp
_fileno
_setmode
_fstat

Sections

.text
Size: 176KB - Virtual size: 174KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 24KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 32KB - Virtual size: 33KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
$SYSDIR/lame_enc.dll
.dll windows:4 windows x86 arch:x86

565a637bdfa41f757eca29de1ab5be3f

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

OutputDebugStringA
GetModuleFileNameA
GetPrivateProfileIntA
GetCommandLineA
GetVersion
HeapAlloc
HeapFree
ExitProcess
TerminateProcess
GetCurrentProcess
GetProcAddress
GetModuleHandleA
GetLastError
CloseHandle
HeapDestroy
HeapCreate
VirtualFree
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
WriteFile
VirtualAlloc
HeapReAlloc
SetFilePointer
RaiseException
FlushFileBuffers
ReadFile
MultiByteToWideChar
LCMapStringA
LCMapStringW
SetStdHandle
CreateFileA
GetStringTypeA
GetStringTypeW
GetCPInfo
GetACP
GetOEMCP
LoadLibraryA
RtlUnwind
SetEndOfFile

Exports

Exports

beCloseStream
beDeinitStream
beEncodeChunk
beEncodeChunkFloatS16NI
beFlushNoGap
beInitStream
beVersion
beWriteInfoTag
beWriteVBRHeader
lame_close
lame_encode_buffer_interleaved
lame_encode_flush
lame_get_in_samplerate
lame_get_num_channels
lame_get_num_samples
lame_get_out_samplerate
lame_get_scale
lame_get_scale_left
lame_get_scale_right
lame_init
lame_init_params
lame_mp3_tags_fid
lame_set_in_samplerate
lame_set_num_channels
lame_set_num_samples
lame_set_out_samplerate
lame_set_scale
lame_set_scale_left
lame_set_scale_right

Sections

.text
Size: 184KB - Virtual size: 183KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 44KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 352KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 12KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$SYSDIR/mp4lib.dll
.dll windows:4 windows x86 arch:x86

225cc0ff4ea2f8d78e17065da1056b24

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

TlsGetValue
GetSystemTime
GetLocalTime
GetLastError
DeleteFileA
HeapAlloc
HeapReAlloc
HeapFree
GetCommandLineA
GetVersion
GetProcAddress
GetModuleHandleA
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSection
CloseHandle
ReadFile
SetFilePointer
WriteFile
GetModuleFileNameA
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
DeleteCriticalSection
ExitProcess
RtlUnwind
TerminateProcess
GetCurrentProcess
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
GetTimeZoneInformation
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
InterlockedDecrement
InterlockedIncrement
CreateFileA
SetStdHandle
FlushFileBuffers
GetCPInfo
GetACP
GetOEMCP
LoadLibraryA
MultiByteToWideChar
GetStringTypeA
GetStringTypeW
LCMapStringA
LCMapStringW
SetEndOfFile
CompareStringA
CompareStringW
SetEnvironmentVariableA

Exports

Exports

MP4ComposeAddAudioDescription
MP4ComposeAddVideoDescription
MP4ComposeClose
MP4ComposeOpen
MP4ComposeWriteAudioDecoderSpecificInfo
MP4ComposeWriteAudioFrames
MP4ComposeWriteVideoDecoderSpecificInfo
MP4ComposeWriteVideoFrame
MP4ParseClose
MP4ParseGetBufferedBytes
MP4ParseGetLastPosition
MP4ParseGetNextVideoTimestamp
MP4ParseIsFrameAvailable
MP4ParseIsStreamable
MP4ParseNextFrameSize
MP4ParseNextFrameType
MP4ParseOpen
MP4ParseReadAudioDecoderSpecificInfo
MP4ParseReadAudioFrames
MP4ParseReadVideoDecoderSpecificInfo
MP4ParseReadVideoFrame
MP4ParseRequestAudioDescription
MP4ParseRequestStreamDescription
MP4ParseRequestVideoDescription
MP4ParseSeek
MP4ParseWriteData

Sections

.text
Size: 84KB - Virtual size: 81KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 960B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$SYSDIR/msdmo.dll
.dll windows:5 windows x86 arch:x86

80729d97f70b0cfc03ed1d805d44a9ad

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

msdmo.pdb

Imports

msvcrt

swprintf
??3@YAXPAX@Z
??2@YAPAXI@Z
malloc
_adjust_fdiv
_initterm
sscanf
wcscat
sprintf
wcslen
wcscpy
realloc
free

ole32

CoTaskMemFree
CoTaskMemRealloc
CoTaskMemAlloc

advapi32

RegOpenKeyW
RegQueryValueExW
RegOpenKeyExW
RegCreateKeyExW
RegQueryInfoKeyW
RegEnumKeyW
RegCloseKey
RegDeleteKeyW
RegSetValueW
RegQueryValueW
RegSetValueExW

kernel32

QueryPerformanceCounter
WideCharToMultiByte
GetTickCount
InterlockedIncrement
lstrlenW
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
DisableThreadLibraryCalls
InterlockedDecrement

user32

wsprintfW

Exports

Exports

DMOEnum
DMOGetName
DMOGetTypes
DMOGuidToStrA
DMOGuidToStrW
DMORegister
DMOStrToGuidA
DMOStrToGuidW
DMOUnregister
MoCopyMediaType
MoCreateMediaType
MoDeleteMediaType
MoDuplicateMediaType
MoFreeMediaType
MoInitMediaType

Sections

.text
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 48B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 912B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 546B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$SYSDIR/msdxm.ocx
.dll regsvr32 windows:5 windows x86 arch:x86

679896098842047b8c2d59c2fff2c5ee

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

msvcrt

_onexit
__dllonexit
_adjust_fdiv
_initterm
wcstok
strncpy
_pctype
strrchr
tolower
wcspbrk
_wcsdup
memmove
wcsncat
wcsncmp
_ui64tow
_wcslwr
wprintf
iswctype
swprintf
swscanf
_wtoi
_itow
_ltow
wcsstr
malloc
_HUGE
_ftol
_wcsicmp
wcslen
wcsncpy
??2@YAPAXI@Z
wcscmp
??3@YAXPAX@Z
_wtol
_purecall
realloc
rand
srand
_snwprintf
_wcsnicmp
wcsrchr
free
atoi
wcscpy
wcschr
wcstol
wcscat

kernel32

HeapDestroy
InitializeCriticalSection
WaitForSingleObject
DeleteCriticalSection
GlobalAlloc
GlobalUnlock
FindClose
GlobalLock
FindFirstFileW
FindNextFileW
ReadFile
GetNumberFormatW
GetTimeFormatW
GetDateFormatW
FileTimeToSystemTime
FileTimeToLocalFileTime
GetFileTime
ReleaseMutex
lstrcmpW
GetShortPathNameW
CreateDirectoryW
CreateProcessW
GetSystemDirectoryW
GetPrivateProfileStringW
GetProfileStringW
ExpandEnvironmentStringsW
WriteProfileStringW
DisableThreadLibraryCalls
WriteFile
DeleteFileW
GetCommandLineW
LockResource
MulDiv
CreateMutexW
CreateEventW
SetEvent
TerminateProcess
ResumeThread
FreeResource
WritePrivateProfileStringW
WinExec
LocalFree
LocalAlloc
Sleep
GetSystemDefaultLCID
GetTempPathW
OpenFileMappingW
OpenEventW
WaitForSingleObjectEx
GetModuleHandleW
GetSystemTimeAsFileTime
lstrcpyA
GetCurrentProcessId
GetSystemTime
SystemTimeToFileTime
GetSystemInfo
EnterCriticalSection
LeaveCriticalSection
MultiByteToWideChar
CreateFileW
GetFileSize
CreateFileMappingW
MapViewOfFile
UnmapViewOfFile
LoadLibraryExW
FindResourceW
LoadResource
SizeofResource
lstrlenA
lstrcpynW
GetCurrentDirectoryW
GetProcAddress
WideCharToMultiByte
GetWindowsDirectoryW
_lopen
_llseek
_lclose
GetFileAttributesW
GetVersionExW
GetModuleFileNameW
LoadLibraryW
CloseHandle
CreateThread
FreeLibrary
FreeLibraryAndExitThread
SearchPathW
GetLastError
InterlockedDecrement
InterlockedIncrement
GetThreadLocale
GetTickCount
GetComputerNameW
GetVolumeInformationW
FormatMessageW
lstrlenW
lstrcpyW
lstrcatW
lstrcmpiW
GetUserDefaultLCID
LoadLibraryA
RaiseException
InterlockedExchange
GetCurrentProcess
OpenMutexW
GetCurrentThreadId
GetLocaleInfoW
IsBadStringPtrW

advapi32

RegQueryInfoKeyW
RegOpenKeyExW
RegCloseKey
RegEnumKeyExW
RegEnumValueW
RegCreateKeyExW
RegSetValueExW
RegOpenKeyW
RegQueryValueExW
RegDeleteValueW
RegDeleteKeyW
RegCreateKeyW
RegQueryValueW

ole32

OleLoadFromStream
OleSaveToStream
WriteClassStm
CoTaskMemRealloc
CoTaskMemAlloc
CoCreateInstance
CoInitialize
CoUninitialize
CoCreateGuid
StringFromCLSID
CoRevokeClassObject
CoRegisterClassObject
CreateItemMoniker
GetRunningObjectTable
OleRegEnumVerbs
OleRegGetUserType
OleRegGetMiscStatus
CreateDataAdviseHolder
CreateBindCtx
OleLockRunning
DoDragDrop
CoDisconnectObject
ProgIDFromCLSID
OleUninitialize
CreateOleAdviseHolder
OleInitialize
CLSIDFromString
StringFromGUID2
CoTaskMemFree

oleaut32

SafeArrayAccessData
OleCreatePropertyFrame
SafeArrayCreate
SafeArrayUnaccessData
CreateErrorInfo
LoadTypeLi
RegisterTypeLi
SysStringByteLen
SetErrorInfo
LoadRegTypeLi
SysAllocStringLen
VarI4FromStr
VariantChangeType
SysStringLen
VariantInit
VariantClear
SysFreeString
SysAllocString
SysAllocStringByteLen

user32

GetWindowRect
EnableWindow
EndDialog
DialogBoxParamW
IsWindowVisible
SetWindowTextW
SetWindowPos
CreateWindowExW
RegisterClassW
GetClassInfoW
CreateDialogParamW
CloseDesktop
OpenDesktopW
SystemParametersInfoA
SetForegroundWindow
IsIconic
FindWindowExW
PostMessageW
GetMessageW
IsWindow
SetWindowRgn
IntersectRect
EndPaint
GetClientRect
BeginPaint
ReleaseDC
GetDC
GetWindow
GetDlgItem
MapWindowPoints
SystemParametersInfoW
GetWindowLongW
SetWindowLongW
MsgWaitForMultipleObjects
SetDlgItemTextW
RegisterClassExW
GetClassInfoExW
CallWindowProcW
SendDlgItemMessageW
GetDlgItemInt
IsDlgButtonChecked
SetDlgItemInt
CheckDlgButton
MoveWindow
SetTimer
KillTimer
LoadIconW
DestroyIcon
GetDlgItemTextW
CharUpperW
CallNextHookEx
SetWindowsHookExW
UnhookWindowsHookEx
FillRect
PostQuitMessage
WinHelpW
IsDialogMessageW
GetDialogBaseUnits
PtInRect
UnionRect
DestroyCursor
GetKeyState
ClientToScreen
ScreenToClient
GetUpdateRect
GetAsyncKeyState
TranslateAcceleratorW
SendNotifyMessageW
SetClassLongW
GetWindowTextW
PeekMessageW
AdjustWindowRectEx
ReleaseCapture
SetCapture
GetCapture
InvalidateRgn
ValidateRect
GetDlgCtrlID
ChildWindowFromPoint
LoadBitmapW
DrawIconEx
GetDesktopWindow
WindowFromPoint
GetCursor
wsprintfA
SetParent
SetWindowPlacement
GetWindowPlacement
InsertMenuItemW
RemoveMenu
TrackPopupMenuEx
RemovePropW
SetPropW
GetPropW
GetClassNameW
EnumChildWindows
CheckRadioButton
DeleteMenu
CreateMenu
DrawTextW
GetMenu
GetMenuItemRect
GetMenuItemCount
DrawEdge
LoadStringA
CharPrevW
SendMessageTimeoutW
GetMenuStringW
EnumWindows
EnumDesktopWindows
GetThreadDesktop
GetMenuState
MenuItemFromPoint
GetMenuItemInfoW
AppendMenuW
DrawMenuBar
CheckMenuRadioItem
EnableMenuItem
CheckMenuItem
EqualRect
MessageBoxW
LoadImageW
GetIconInfo
LoadStringW
UpdateWindow
CharNextW
GetActiveWindow
GetLastActivePopup
ShowWindow
SetFocus
IsWindowEnabled
SendMessageW
GetSysColor
LoadAcceleratorsW
LoadCursorW
DestroyWindow
DestroyMenu
DefWindowProcW
SetRect
TrackPopupMenu
GetSubMenu
InsertMenuW
wsprintfW
TranslateMessage
DispatchMessageW
InvalidateRect
GetParent
GetSystemMetrics
LoadMenuW
GetCursorPos
SetCursor
GetNextDlgTabItem
GetClassLongW
SetRectEmpty
CreatePopupMenu

gdi32

CreateRectRgn
Polyline
GetTextAlign
Polygon
CreateCompatibleBitmap
BitBlt
CreateCompatibleDC
CreateHalftonePalette
SelectClipRgn
GetDIBColorTable
RealizePalette
GetClipBox
SelectPalette
OffsetWindowOrgEx
StretchDIBits
CreatePalette
GetTextMetricsW
SetTextAlign
CreateFontIndirectW
Rectangle
GetTextExtentPointW
SelectObject
SetBkMode
MoveToEx
LineTo
TextOutW
SetBkColor
SetTextColor
LPtoDP
CreateDCW
GetDeviceCaps
DeleteDC
SetMapMode
SetViewportOrgEx
SetWindowOrgEx
CreateMetaFileW
SaveDC
CloseMetaFile
SetWindowExtEx
RestoreDC
GetStockObject
DeleteMetaFile
CreateRectRgnIndirect
CreatePen
GetObjectW
CreateSolidBrush
GetTextExtentPoint32W
GetBkMode
ExtTextOutW
PatBlt
CreateDIBitmap
DeleteObject
GetOutlineTextMetricsW

shell32

SHChangeNotify
ExtractIconExW
SHFileOperationW
DragAcceptFiles
SHLoadInProc
DragFinish
DragQueryFileW
SHGetFileInfoW
SHGetMalloc
SHGetDesktopFolder
ShellExecuteW

quartz

AmpFactorToDB
DBToAmpFactor

version

GetFileVersionInfoSizeW
GetFileVersionInfoW
VerQueryValueW

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
RunDll
RunDllW

Sections

.text
Size: 493KB - Virtual size: 492KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 271KB - Virtual size: 271KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 36KB - Virtual size: 35KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$SYSDIR/multimedia.dll
.dll regsvr32 windows:4 windows x86 arch:x86

5275809795a48e23ba8ba0d13f9e4505

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

lstrcatA
GetCurrentProcessId
CreateMutexA
ReleaseMutex
GetSystemDirectoryA
lstrcpyA
IsDBCSLeadByte
LoadLibraryExA
lstrcmpiA
GetShortPathNameA
lstrlenW
Sleep
GetCurrentThread
SetThreadPriority
SetEvent
CreateEventA
WaitForSingleObject
MultiByteToWideChar
InterlockedDecrement
lstrlenA
FindResourceA
SetEnvironmentVariableA
GetLastError
CompareStringW
CompareStringA
SetEndOfFile
IsBadCodePtr
IsBadReadPtr
GetStringTypeW
GetStringTypeA
HeapSize
FlushFileBuffers
SetStdHandle
SetUnhandledExceptionFilter
GetEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsW
LoadResource
GetStartupInfoA
LoadLibraryA
InterlockedIncrement
SizeofResource
lstrcpynA
GetModuleHandleA
WideCharToMultiByte
SetLastError
TlsFree
TlsAlloc
LCMapStringW
LCMapStringA
GetOEMCP
GetCPInfo
ExitProcess
IsBadWritePtr
VirtualAlloc
VirtualFree
HeapCreate
GetVersionExA
GetEnvironmentVariableA
GetCurrentProcess
DuplicateHandle
RaiseException
GetLocalTime
GetSystemTime
GetTimeZoneInformation
RtlUnwind
GetVersion
GetCommandLineA
HeapReAlloc
HeapAlloc
ExitThread
TlsSetValue
GetCurrentThreadId
CreateThread
HeapFree
LocalFree
QueryPerformanceFrequency
QueryPerformanceCounter
UnmapViewOfFile
CreateFileMappingA
GetSystemInfo
MapViewOfFile
GetFileSize
TerminateThread
ResetEvent
WaitForMultipleObjects
DeleteFileA
FindFirstFileA
FindNextFileA
FindClose
GetTempPathA
lstrcmpiW
WriteFile
CreateFileA
ReadFile
EnterCriticalSection
GetProcAddress
FreeLibrary
GetFileType
DisableThreadLibraryCalls
CloseHandle
LeaveCriticalSection
InitializeCriticalSection
GetModuleFileNameA
DeleteCriticalSection
HeapDestroy
GetStdHandle
SetHandleCount
UnhandledExceptionFilter
SetFilePointer
GetACP
TerminateProcess
FreeEnvironmentStringsA
TlsGetValue

user32

CharNextA
GetWindowRect
OffsetRect
PostThreadMessageA
PeekMessageA
GetMessageA
PostMessageA
ReleaseDC
GetDesktopWindow
wsprintfA
InvalidateRect
GetDC
RedrawWindow

advapi32

RegEnumKeyExA
RegEnumValueA
RegQueryInfoKeyA
RegOpenKeyExA
RegCloseKey
RegDeleteKeyA
RegDeleteValueA
RegCreateKeyExA
RegSetValueExA
RegQueryValueExA

ole32

HWND_UserUnmarshal
CoUninitialize
CoTaskMemAlloc
CoTaskMemFree
HWND_UserFree
CoInitialize
HWND_UserMarshal
HWND_UserSize
CoCreateInstance
CoTaskMemRealloc

oleaut32

VariantClear
SysStringLen
SysFreeString
SysAllocStringByteLen
SysStringByteLen
SysAllocString
BSTR_UserFree
BSTR_UserUnmarshal
BSTR_UserMarshal
BSTR_UserSize
RegisterTypeLi
VarUI4FromStr
LoadTypeLi

mp4lib

MP4ParseReadVideoFrame
MP4ParseReadVideoDecoderSpecificInfo
MP4ParseRequestVideoDescription
MP4ParseOpen
MP4ComposeClose
MP4ParseClose
MP4ComposeAddVideoDescription
MP4ComposeWriteVideoFrame
MP4ComposeWriteVideoDecoderSpecificInfo
MP4ParseSeek
MP4ParseReadAudioDecoderSpecificInfo
MP4ComposeOpen
MP4ParseRequestAudioDescription
MP4ParseReadAudioFrames
MP4ComposeWriteAudioFrames
MP4ComposeAddAudioDescription

rpcrt4

CStdStubBuffer_DebugServerRelease
CStdStubBuffer_AddRef
CStdStubBuffer_DebugServerQueryInterface
CStdStubBuffer_CountRefs
CStdStubBuffer_IsIIDSupported
CStdStubBuffer_Invoke
CStdStubBuffer_Disconnect
CStdStubBuffer_Connect
NdrDllUnregisterProxy
NdrDllRegisterProxy
NdrCStdStubBuffer_Release
NdrDllCanUnloadNow
NdrDllGetClassObject
NdrOleAllocate
NdrOleFree
IUnknown_QueryInterface_Proxy
IUnknown_AddRef_Proxy
IUnknown_Release_Proxy
CStdStubBuffer_QueryInterface

winmm

waveOutGetPosition
mmioOpenA
mmioAscend
mmioDescend
mmioSeek
mmioClose
mmioRead
mmioWrite
mmioCreateChunk
timeBeginPeriod
waveOutGetDevCapsA
timeEndPeriod
timeSetEvent
timeKillEvent
timeGetTime
waveOutPause
waveOutPrepareHeader
waveOutOpen
waveOutClose
waveOutSetVolume
waveOutGetVolume
timeGetDevCaps
waveOutRestart
waveOutReset
waveOutUnprepareHeader
waveOutWrite

msacm32

acmStreamUnprepareHeader
acmStreamSize
acmMetrics
acmFormatEnumA
acmStreamConvert
acmDriverClose
acmStreamClose
acmStreamOpen
acmDriverEnum
acmDriverOpen
acmDriverDetailsA
acmFormatTagDetailsA
acmStreamPrepareHeader

msvfw32

ICOpen
ICGetInfo
ICClose
ICSendMessage

avifil32

AVIFileInit
AVIFileRelease
AVIStreamRelease
AVIFileExit
AVIStreamInfoA
AVIFileGetStream
AVIStreamReadFormat
AVIStreamSetFormat
AVIFileCreateStreamA
AVIStreamRead
AVIStreamTimeToSample
AVIStreamSampleToTime
AVIStreamWrite
AVIFileInfoA
AVIFileOpenA
AVIStreamFindSample

gdi32

GetDeviceCaps
StretchDIBits
SetDIBitsToDevice
SetStretchBltMode

Exports

Exports

DbgOut
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
RedirectStdOut
RestoreStdOut
h263dClose
h263dDecodeFrame
h263dFree
h263dGetNumberOfTemporalScalabilityLevels
h263dGetSnapshotStatus
h263dIsIntra
h263dIsPB
h263dLoad
h263dLoadAndLinkRenderer
h263dOpen
h263dReportSyncInEveryGOB
h263dReturnImageBuffer
h263dSetBackChannelUsage
h263dSetErrorResilience
h263dSetFastUpdateGOBCallback
h263dSetFastUpdateMBsCallback
h263dSetFastUpdatePictureCallback
h263dSetIndNotDecodedMBsCallback
h263dSetLogFile
h263dSetMaxDisplayingDelay
h263dSetOutputFile
h263dSetPostFilter
h263dSetReferenceSegmentBuffering
h263dSetRenderer
h263dSetReportPictureSizeCallback
h263dSetStartOrEndCallback
h263dSetStartOrEndSnapshotCallback
h263dSetTemporalScalabilityLevel
mdcClose
mdcCorrectLuminance
mdcCreateGammaLookupTable
mdcDecodeFrame
mdcDestroyGammaLookupTable
mdcFree
mdcIsPB
mdcLoad
mdcOpen
mdcSet16BitRGBMask
mdcSetPostFilter

Sections

.text
Size: 668KB - Virtual size: 667KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.orpc
Size: 4KB - Virtual size: 128B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 288KB - Virtual size: 286KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 176KB - Virtual size: 317KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

data
Size: 4KB - Virtual size: 360B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 36KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$SYSDIR/setfocus.exe
.exe windows:4 windows x86 arch:x86

339a5b2cae78490bea1f63a72ac513c4

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetStdHandle
SetConsoleCursorPosition
GetConsoleScreenBufferInfo
GetFileType
GetCurrentProcess
GetSystemInfo
GetProcAddress
GetModuleHandleA
SetPriorityClass
OpenProcess
GetCurrentProcessId
FindClose
FindFirstFileA
SetConsoleTitleA
ExitProcess
TerminateProcess
GetSystemTimeAsFileTime
HeapFree
HeapAlloc
GetCommandLineA
GetVersion
SetHandleCount
GetStartupInfoA
GetLastError
FlushFileBuffers
WriteFile
CloseHandle
ReadFile
SetFilePointer
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
HeapReAlloc
WideCharToMultiByte
GetModuleFileNameA
MultiByteToWideChar
LCMapStringA
LCMapStringW
RaiseException
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
RtlUnwind
SetStdHandle
CreateFileA
GetCPInfo
CompareStringA
CompareStringW
GetACP
GetOEMCP
SetEnvironmentVariableA
LoadLibraryA
GetStringTypeA
GetStringTypeW
SetEndOfFile
GetTimeZoneInformation
FileTimeToSystemTime
FileTimeToLocalFileTime
GetDriveTypeA
GetFullPathNameA
GetCurrentDirectoryA

Sections

.text
Size: 228KB - Virtual size: 227KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 40KB - Virtual size: 37KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 20KB - Virtual size: 364KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
$SYSDIR/skinplusplusdll.dll
.dll windows:4 windows x86 arch:x86

b157ea70776fe0e927eda95383c735fa

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

mfc42

ord6142
ord5606
ord3986
ord5860
ord4274
ord6375
ord4486
ord2554
ord2512
ord5731
ord3922
ord1089
ord5199
ord2396
ord3346
ord5300
ord5302
ord2725
ord4079
ord4698
ord5307
ord5289
ord5714
ord3953
ord2982
ord3147
ord3259
ord4465
ord3136
ord3262
ord2985
ord3081
ord2976
ord3830
ord3831
ord3825
ord3079
ord4080
ord4622
ord4424
ord3738
ord561
ord815
ord6734
ord772
ord1083
ord773
ord501
ord2776
ord1200
ord5442
ord353
ord5600
ord2867
ord3138
ord3805
ord4083
ord1803
ord5628
ord909
ord4185
ord394
ord696
ord3643
ord1817
ord1928
ord1842
ord1865
ord1864
ord1858
ord1859
ord1945
ord3903
ord1116
ord1575
ord1168
ord1577
ord1182
ord342
ord1243
ord1197
ord1570
ord1253
ord1255
ord1578
ord600
ord826
ord269
ord2243
ord3693
ord3573
ord3619
ord2107
ord2841
ord6467
ord283
ord5787
ord6696
ord5736
ord5678
ord2862
ord4297
ord4133
ord5781
ord3706
ord6270
ord4284
ord500
ord2567
ord472
ord5788
ord562
ord816
ord6880
ord2713
ord3920
ord2714
ord3874
ord2860
ord5789
ord5875
ord470
ord755
ord2919
ord384
ord6615
ord6654
ord686
ord825
ord2380
ord1154
ord941
ord3797
ord1176
ord2763
ord2614
ord2915
ord5572
ord1644
ord2863
ord2455
ord2438
ord3654
ord2584
ord4220
ord5873
ord6172
ord6157
ord2754
ord6383
ord5440
ord6394
ord5450
ord5834
ord2448
ord2044
ord2818
ord860
ord6928
ord4129
ord5710
ord4202
ord535
ord858
ord540
ord2405
ord289
ord613
ord6021
ord6192
ord6186
ord6189
ord6194
ord537
ord4204
ord2764
ord800
ord323
ord2864
ord2859
ord1640
ord5785
ord2753
ord2452
ord640
ord354
ord5186
ord6385
ord1979
ord665
ord1641
ord2414
ord3626
ord3663
ord3571
ord823

msvcrt

fopen
fprintf
fclose
_mbscmp
strcmp
_except_handler3
strcpy
strcat
__CxxFrameHandler
memset
strlen
atoi
_ftol
strchr
free
malloc
_mbsicmp
__RTDynamicCast
floor
ceil
_mbsnbcpy
calloc
_purecall
fread
fwrite
fseek
ftell
fflush
fputc
getc
strncpy
_CxxThrowException
gmtime
_mbsstr
??1type_info@@UAE@XZ
__dllonexit
_onexit
_initterm
_adjust_fdiv
memcpy

kernel32

MulDiv
GlobalAlloc
GlobalLock
DeleteFileA
VirtualQuery
LoadLibraryA
GetCurrentProcess
VirtualProtect
SetLastError
FlushInstructionCache
GetModuleHandleA
GetProcAddress
CloseHandle
WriteFile
SetFilePointer
lstrcmpiA
GetVersionExA
GetVersion
lstrcpyA
GetCurrentThreadId
lstrlenA
FindClose
FindFirstFileA
HeapAlloc
GetProcessHeap
HeapFree
GetFileType
DuplicateHandle
CreateFileA
ReadFile
SystemTimeToFileTime
GetCurrentDirectoryA
DosDateTimeToFileTime
CreateDirectoryA
SetFileTime
LocalFree
LocalAlloc
GlobalUnlock

user32

SetPropA
RemovePropA
GetWindowDC
CallWindowProcA
SetCapture
GetPropA
ReleaseCapture
GetMessagePos
IsWindowVisible
IntersectRect
GetFocus
ClientToScreen
keybd_event
GetClassLongA
GetSysColorBrush
GetSysColor
ShowScrollBar
SetScrollRange
SetScrollPos
SetScrollInfo
GetScrollRange
GetScrollPos
GetScrollInfo
EnableScrollBar
GetDesktopWindow
GetDC
ReleaseDC
GetActiveWindow
GetMenuState
UnionRect
GetMenuItemRect
DrawStateA
RemoveMenu
LoadBitmapA
UnhookWindowsHookEx
SetWindowsHookExA
GetCapture
GetCursorPos
ScreenToClient
FillRect
EqualRect
FindWindowExA
GetDlgItem
WindowFromPoint
DrawIconEx
SetWindowLongA
SystemParametersInfoA
SetWindowRgn
ShowWindow
GetMenu
KillTimer
SetTimer
GetAsyncKeyState
PtInRect
GetSystemMetrics
GetWindowRect
MapWindowPoints
GetParent
DrawIcon
DrawFocusRect
GetClientRect
IsWindowEnabled
GetClassNameA
UpdateWindow
SetWindowPos
InvalidateRect
IsWindow
DestroyIcon
DrawTextA
GetMenuStringA
CopyRect
InflateRect
OffsetRect
SendMessageA
GetClassInfoA
IsIconic
IsZoomed
EnableMenuItem
SetMenuDefaultItem
GetSystemMenu
SetRectEmpty
TrackPopupMenuEx
DestroyMenu
PostMessageA
GetWindow
IsMenu
CreatePopupMenu
GetMenuItemCount
GetMenuItemID
GetSubMenu
AppendMenuA
GetMenuItemInfoA
SetMenuItemInfoA
SetRect
IsRectEmpty
GetWindowLongA
CallNextHookEx

gdi32

ExtCreateRegion
DeleteDC
GetDIBits
GetObjectA
CreateSolidBrush
StretchBlt
CreateBitmap
SelectObject
GetPixel
SetPixel
CreateCompatibleDC
GetDeviceCaps
CreateICA
SetDIBitsToDevice
CreateDIBSection
SetTextColor
GetCharWidthA
CreatePatternBrush
CreateFontA
CreateFontIndirectA
CreatePen
Ellipse
PatBlt
CreateRectRgn
OffsetRgn
CombineRgn
Rectangle
DeleteObject
SetBkColor
CreateBitmapIndirect
GetTextExtentPoint32A
BitBlt
CreateCompatibleBitmap

comctl32

ImageList_GetImageInfo
ImageList_Copy
ImageList_GetIcon
ImageList_Draw
ImageList_GetBkColor
ImageList_AddMasked

ole32

CreateStreamOnHGlobal

olepro32

ord251

msvcirt

?getline@istream@@QAEAAV1@PADHD@Z
??1ios@@UAE@XZ
??1ifstream@@UAE@XZ
?close@ifstream@@QAEXXZ
?open@ifstream@@QAEXPBDHH@Z
?openprot@filebuf@@2HB
??0ifstream@@QAE@XZ
??_Difstream@@QAEXXZ

Exports

Exports

?DrawSkinBitmap@@YGXPAUHDC__@@UtagRECT@@PAUHBITMAP__@@HHHHKH@Z
?DrawSkinObject@@YGXPAUHDC__@@UtagRECT@@W4DRAWTYPE@@H@Z
?ExitSkin@@YGHXZ
?GetDefaultSysColor@@YGKH@Z
?GetMainFrameMenu@@YGPAUHMENU__@@XZ
?GetSkinSysColor@@YGKH@Z
?GetSplitterInfo@@YGXP6GHAAUSplitInfo@@@Z@Z
?LoadSkin@@YGHPAD@Z
?RemoveSkin@@YGHXZ
?RemoveSkinHwnd@@YGXPAUHWND__@@@Z
?SetMenuItemImage@@YGHIPAU_IMAGELIST@@H@Z
?SetNoSkinHwnd@@YGXPAUHWND__@@@Z
?SetSkinHwnd@@YGXPAUHWND__@@@Z
InitializeSkin

Sections

.text
Size: 184KB - Virtual size: 182KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 60KB - Virtual size: 57KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.HookSec
Size: 4KB - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 904B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 24KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$SYSDIR/sysfocus.exe
.exe windows:4 windows x86 arch:x86

5034136ac95e18de0f680cec48568ac4

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetErrorMode
FileTimeToSystemTime
FileTimeToLocalFileTime
RtlUnwind
Sleep
GetTimeZoneInformation
GetSystemTime
GetLocalTime
RaiseException
GetStartupInfoA
GetCommandLineA
ExitProcess
HeapAlloc
HeapFree
TerminateProcess
HeapSize
HeapReAlloc
GetACP
IsValidLocale
IsValidCodePage
GetLocaleInfoA
EnumSystemLocalesA
GetUserDefaultLCID
GetVersionExA
LCMapStringW
SetUnhandledExceptionFilter
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
GetEnvironmentVariableA
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
IsBadWritePtr
GetStringTypeA
GetStringTypeW
IsBadReadPtr
IsBadCodePtr
GetLocaleInfoW
SetStdHandle
CompareStringA
CompareStringW
SetEnvironmentVariableA
GetFileTime
GetProfileStringA
GetFileSize
GetFileAttributesA
SizeofResource
WritePrivateProfileStringA
GetOEMCP
GetCPInfo
GetProcessVersion
GlobalFlags
TlsGetValue
LocalReAlloc
TlsSetValue
EnterCriticalSection
GlobalReAlloc
LeaveCriticalSection
TlsFree
GlobalHandle
DeleteCriticalSection
TlsAlloc
InitializeCriticalSection
LocalAlloc
GetFullPathNameA
lstrcpynA
GetVolumeInformationA
FindFirstFileA
FindClose
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
WriteFile
ReadFile
CreateFileA
GetCurrentProcess
DuplicateHandle
LocalFree
GlobalFree
GetLastError
CloseHandle
GetModuleFileNameA
GlobalAlloc
lstrcmpA
GetCurrentThread
MultiByteToWideChar
WideCharToMultiByte
lstrlenA
InterlockedDecrement
InterlockedIncrement
GlobalLock
GlobalUnlock
MulDiv
SetLastError
LoadLibraryA
FreeLibrary
FindResourceA
LoadResource
LockResource
GetVersion
lstrcatA
GetCurrentThreadId
GlobalGetAtomNameA
lstrcmpiA
GlobalAddAtomA
GlobalFindAtomA
GlobalDeleteAtom
lstrcpyA
GetModuleHandleA
GetProcAddress
GetDiskFreeSpaceA
CreateMutexA
LCMapStringA

user32

IsDialogMessageA
SetWindowTextA
MoveWindow
ShowWindow
IsWindowEnabled
GetNextDlgTabItem
EnableMenuItem
CheckMenuItem
SetMenuItemBitmaps
ModifyMenuA
GetMenuState
GetMenuCheckMarkDimensions
ClientToScreen
GetDC
ReleaseDC
GetWindowDC
BeginPaint
EndPaint
TabbedTextOutA
DrawTextA
GrayStringA
PostQuitMessage
ValidateRect
GetActiveWindow
TranslateMessage
GetMessageA
CreateDialogIndirectParamA
EndDialog
DestroyMenu
LoadStringA
CharUpperA
GetClassNameA
GetSysColorBrush
PeekMessageA
DispatchMessageA
GetFocus
SetActiveWindow
IsWindow
SetFocus
AdjustWindowRectEx
ScreenToClient
IsWindowVisible
GetTopWindow
MessageBoxA
GetCapture
WinHelpA
wsprintfA
GetClassInfoA
RegisterClassA
GetMenu
GetMenuItemCount
GetSubMenu
GetMenuItemID
GetDlgItem
GetWindowTextLengthA
GetWindowTextA
GetDlgCtrlID
GetKeyState
DefWindowProcA
DestroyWindow
CreateWindowExA
SetWindowsHookExA
CallNextHookEx
GetClassLongA
UnhookWindowsHookEx
GetPropA
CallWindowProcA
RemovePropA
GetMessageTime
GetMessagePos
GetLastActivePopup
GetForegroundWindow
GetWindow
GetWindowLongA
SetWindowLongA
SetWindowPos
RegisterWindowMessageA
OffsetRect
IntersectRect
SystemParametersInfoA
GetWindowPlacement
LoadCursorA
GetParent
GetCursorPos
ReleaseCapture
PtInRect
SetCapture
GetWindowRect
RedrawWindow
IsIconic
GetSystemMetrics
GetClientRect
DrawIcon
GetSysColor
SetCursor
UnregisterClassA
HideCaret
ShowCaret
ExcludeUpdateRgn
GetSystemMenu
RemoveMenu
SetForegroundWindow
LoadIconA
SetPropA
SetWindowRgn
CopyRect
LoadBitmapA
GetWindowRgn
PostMessageA
UpdateWindow
SendDlgItemMessageA
MapWindowPoints
EnableWindow
SendMessageA
InvalidateRect
IsWindowUnicode
CharNextA
InflateRect
DefDlgProcA
DrawFocusRect

gdi32

SetTextColor
SetBkColor
CreateBitmap
DeleteDC
SaveDC
RestoreDC
SelectObject
SetBkMode
SetMapMode
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowExtEx
ScaleWindowExtEx
SelectClipRgn
IntersectClipRect
GetClipBox
DeleteObject
GetDeviceCaps
PtVisible
RectVisible
TextOutA
ExtTextOutA
Escape
GetStockObject
GetPixel
CombineRgn
CreateCompatibleDC
CreateRectRgn
BitBlt
GetObjectA
CreateFontIndirectA
CreateDIBitmap
PatBlt
GetTextExtentPointA
CreateSolidBrush

comdlg32

GetFileTitleA

winspool.drv

DocumentPropertiesA
ClosePrinter
OpenPrinterA

advapi32

RegOpenKeyExA
RegSetValueExA
RegCreateKeyExA
RegCloseKey

shell32

DragAcceptFiles
DragQueryFileA
ShellExecuteA

comctl32

ord17

Sections

.text
Size: 172KB - Virtual size: 170KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 32KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 20KB - Virtual size: 33KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 280KB - Virtual size: 276KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
$SYSDIR/wavdest.ax
.dll regsvr32 windows:4 windows x86 arch:x86

ebc67b3b029519cab5f4a4924dad9fae

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Imports

msvcrt

??2@YAPAXI@Z
??3@YAXPAX@Z

kernel32

EnterCriticalSection
InterlockedDecrement
LeaveCriticalSection
InitializeCriticalSection
DisableThreadLibraryCalls
InterlockedIncrement
DeleteCriticalSection
FreeLibrary
MultiByteToWideChar
GetVersionExA
lstrlenA
GetModuleFileNameA
GetLastError

advapi32

RegEnumKeyExA
RegCreateKeyA
RegSetValueA
RegSetValueExA
RegOpenKeyExA
RegDeleteKeyA
RegCloseKey

user32

wsprintfA

ole32

CoUninitialize
CoCreateInstance
CoFreeUnusedLibraries
CoInitialize
CoTaskMemAlloc
CoTaskMemFree
StringFromGUID2

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 15KB - Virtual size: 14KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 200B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$SYSDIR/winfocus.exe
.exe windows:4 windows x86 arch:x86

450e40d3e3846c8a5f5b8ba2fd1bad78

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GlobalDeleteAtom
GlobalFindAtomW
GlobalAddAtomW
ExitProcess
RtlUnwind
HeapAlloc
HeapFree
HeapReAlloc
VirtualProtect
VirtualAlloc
GetSystemInfo
VirtualQuery
HeapSize
TerminateProcess
QueryPerformanceCounter
GetSystemTimeAsFileTime
GetModuleFileNameA
LCMapStringA
LCMapStringW
SetUnhandledExceptionFilter
GetOEMCP
GetCPInfo
FreeLibrary
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineA
SetHandleCount
GetFileType
GetStartupInfoA
HeapDestroy
HeapCreate
VirtualFree
IsBadWritePtr
GetTimeZoneInformation
GetStringTypeA
GetStringTypeW
IsBadReadPtr
IsBadCodePtr
SetStdHandle
CompareStringA
CompareStringW
SetEnvironmentVariableA
GetVersionExA
GetCurrentThreadId
GlobalFlags
lstrcmpW
GetFileTime
GetFileAttributesW
FileTimeToLocalFileTime
SetErrorMode
lstrcatW
FileTimeToSystemTime
TlsFree
LocalReAlloc
TlsSetValue
TlsAlloc
TlsGetValue
EnterCriticalSection
GlobalHandle
GlobalReAlloc
LeaveCriticalSection
GetVersion
InterlockedIncrement
GetModuleHandleA
GetProcAddress
GetFullPathNameW
GetVolumeInformationW
FindFirstFileW
FindClose
DuplicateHandle
GetFileSize
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
WriteFile
ReadFile
InterlockedDecrement
DeleteCriticalSection
InitializeCriticalSection
ReadConsoleInputA
SetConsoleMode
GetConsoleMode
PeekConsoleInputA
GetNumberOfConsoleInputEvents
CreateFileA
RaiseException
SetLastError
GlobalFree
lstrcpyW
GlobalAlloc
GlobalLock
GlobalUnlock
lstrcpynW
FormatMessageW
LocalAlloc
LocalFree
GetStdHandle
GetCommandLineW
GetCurrentDirectoryW
GetModuleHandleW
GetModuleFileNameW
GetCurrentProcess
GetCurrentProcessId
CreateFileW
lstrlenW
GetLastError
CloseHandle
GetTickCount
GetUserDefaultLCID
WideCharToMultiByte
DeleteFileW
MultiByteToWideChar
FindResourceW
LoadResource
LockResource
SizeofResource
GetVersionExW
GetThreadLocale
GetLocaleInfoA
GetACP
UnhandledExceptionFilter
InterlockedExchange

user32

EnableMenuItem
CheckMenuItem
GetMenuCheckMarkDimensions
LoadBitmapW
RegisterWindowMessageW
WinHelpW
GetCapture
CreateWindowExW
GetClassInfoExW
GetClassLongW
SetPropW
GetPropW
RemovePropW
GetForegroundWindow
GetTopWindow
DestroyWindow
GetMessageTime
GetMessagePos
LoadIconW
MapWindowPoints
SetForegroundWindow
GetClientRect
GetMenu
PostMessageW
AdjustWindowRectEx
GetClassInfoW
RegisterClassW
DefWindowProcW
ModifyMenuW
SystemParametersInfoA
IsIconic
GetWindowPlacement
SetWindowsHookExW
CallNextHookEx
ValidateRect
CopyRect
GetWindow
GetWindowRect
PtInRect
GetClassNameW
GetFocus
SetWindowPos
SetWindowLongW
GetDlgCtrlID
SetWindowTextW
GetDlgItem
GetWindowTextW
SendMessageW
MessageBoxW
GetParent
SetMenuItemBitmaps
DestroyMenu
GetWindowLongW
GetLastActivePopup
PostQuitMessage
CallWindowProcW
IsWindowEnabled
EnableWindow
LoadCursorW
GetSysColorBrush
GetSysColor
ReleaseDC
GetDC
GrayStringW
DrawTextExW
DrawTextW
TabbedTextOutW
CharUpperW
GetSystemMetrics
UnhookWindowsHookEx
UnregisterClassW
GetMenuState
GetMenuItemID
GetMenuItemCount
GetSubMenu
ClientToScreen
PeekMessageW
DispatchMessageW
TranslateMessage
ExitWindowsEx
wsprintfW
MsgWaitForMultipleObjectsEx
GetKeyState

gdi32

GetStockObject
SetViewportOrgEx
SelectObject
Escape
ExtTextOutW
CreateBitmap
DeleteDC
ScaleWindowExtEx
SetWindowExtEx
ScaleViewportExtEx
SetViewportExtEx
GetDeviceCaps
TextOutW
RectVisible
PtVisible
DeleteObject
GetClipBox
SetMapMode
SetTextColor
SetBkColor
RestoreDC
SaveDC
OffsetViewportOrgEx

comdlg32

GetFileTitleW

winspool.drv

OpenPrinterW
DocumentPropertiesW
ClosePrinter

advapi32

AdjustTokenPrivileges
OpenProcessToken
LookupPrivilegeValueW

comctl32

ord17

shlwapi

PathFindExtensionW
PathRemoveExtensionW
PathIsRelativeW
PathStripToRootW
PathAddBackslashW
PathRemoveFileSpecW
PathFileExistsW
PathIsUNCW
PathCanonicalizeW
PathFindFileNameW

ole32

CoInitialize
GetRunningObjectTable
CreateItemMoniker
CreateBindCtx
MkParseDisplayName
CoTaskMemFree
CoCreateInstance
CoUninitialize

oleaut32

VariantInit
SysFreeString
VariantClear
VariantChangeType

wmvcore

WMCreateProfileManager

Sections

.text
Size: 232KB - Virtual size: 229KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 44KB - Virtual size: 43KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 40KB - Virtual size: 39KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
$SYSDIR/wmasf.dll
.dll windows:5 windows x86 arch:x86

0b8061d79ca8b50cd8e040cb2c38aa0e

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

wmasf.pdb

Imports

msvcrt

_adjust_fdiv
malloc
_initterm
free
??3@YAXPAX@Z
??2@YAPAXI@Z
_wcsicmp
wcscmp
_ftol
wcscpy
wcslen
memmove
_purecall

kernel32

InitializeCriticalSection
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
CloseHandle
GetLastError
WriteFile
FlushFileBuffers
WideCharToMultiByte
CreateFileA
DisableThreadLibraryCalls
InterlockedIncrement
InterlockedDecrement
HeapAlloc
GetProcessHeap
HeapFree
MultiByteToWideChar
MulDiv
SetUnhandledExceptionFilter
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
ReadFile
SetFilePointer

ole32

CoCreateGuid

Exports

Exports

ASFAddPresDelta
ASFAddSendDelta
ASFCalculatePresDelta
ASFCreateBitrateTracker
ASFCreateIOMonitor
ASFCreateIndexMaker
ASFCreateIndexMakerFileSink
ASFCreateLibrary
ASFCreateMediaObjectIndexMaker
ASFCreateStreamSelector
ASFFindHeaderObject
ASFFindRootObject
ASFFindStreamPropertiesObject
ASFGUIDFromCodecID
ASFGUIDToCodecID
ASFGetDataUnitInfo
ASFGetHeaderObject
ASFGetRootObject
ASFGetStreamPropertiesObject
ASFGetTimeBase
ASFPresDeltaTimeToTime
ASFPresDeltaToFull
ASFPresFullToDelta
ASFPresTimeToSendTime
ASFPresTimeToTime
ASFReadHeaderFromFile
ASFReadHeaderFromFileHandle
ASFSendTimeToPresTime
ASFSendTimeToTime
ASFSetDataUnitInfo
ASFTimeToPresDeltaTime
ASFTimeToPresTime
ASFTimeToSendTime
ASFWriteHeaderToFile
CreateAsfCellPoolAllocator

Sections

.text
Size: 213KB - Virtual size: 212KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 840B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 992B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$SYSDIR/wmidx.dll
.dll windows:5 windows x86 arch:x86

216bf23e2d69715e4caf584a31a46fe1

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

wmidx.pdb

Imports

rpcrt4

UuidCreate

user32

RegisterWindowMessageA
CharNextA
LoadStringA
SendMessageA

wmasf

ASFCreateMediaObjectIndexMaker
ord14
ord13
ASFReadHeaderFromFileHandle

kernel32

MultiByteToWideChar
InitializeCriticalSection
DeleteCriticalSection
SetLastError
GetTempPathA
GetTempPathW
LeaveCriticalSection
EnterCriticalSection
CloseHandle
SetThreadPriority
GetThreadPriority
GetCurrentThread
CreateThread
lstrlenA
lstrcpyA
GetVersionExA
GetVersion
HeapAlloc
GetProcessHeap
HeapFree
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
LoadLibraryA
FormatMessageA
GetModuleFileNameA
GetShortPathNameA
LoadLibraryExA
FindResourceA
LoadResource
SizeofResource
FreeLibrary
DisableThreadLibraryCalls
HeapDestroy
lstrcpynA
IsDBCSLeadByte
lstrcmpiA
SetEndOfFile
DeleteFileW
DeleteFileA
ReadFile
InterlockedIncrement
lstrlenW
GetSystemTime
SystemTimeToFileTime
WriteFile
GetFileSize
CreateFileW
WideCharToMultiByte
CreateFileA
GetFileType
SetFilePointer
GetLastError
InterlockedDecrement

ole32

CoTaskMemFree
ProgIDFromCLSID
CoTaskMemAlloc
CoTaskMemRealloc

oleaut32

SysFreeString
SysAllocString
SetErrorInfo
VariantClear
VariantInit
VarUI4FromStr
LoadRegTypeLi
SysStringLen
CreateErrorInfo

advapi32

CryptGenRandom
CryptAcquireContextA
CryptReleaseContext
RegEnumKeyExA
RegEnumValueA
RegQueryInfoKeyA
RegSetValueExA
RegOpenKeyExA
RegCreateKeyExA
RegCloseKey
RegDeleteValueA
RegDeleteKeyA

msvcrt

wcsncmp
??3@YAXPAX@Z
wcscpy
wcslen
??2@YAPAXI@Z
free
realloc
malloc
wcscmp
memmove
_wcsicmp
_ftol
_initterm
_adjust_fdiv
__dllonexit
_onexit
_purecall

Exports

Exports

WMCreateASFChopper

Sections

.text
Size: 132KB - Virtual size: 132KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$SYSDIR/wmvcore.dll
.dll regsvr32 windows:5 windows x86 arch:x86

f3b2594c4c3ce0782785e95fce6c17a4

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

wmvcore.pdb

Imports

kernel32

GetSystemDirectoryW
GetSystemDirectoryA
GetComputerNameW
GetComputerNameA
CreateMutexW
CreateMutexA
GetLocaleInfoW
GetLocaleInfoA
SetFileAttributesW
SetFileAttributesA
OutputDebugStringA
IsBadStringPtrW
IsBadStringPtrA
GetVolumeInformationW
GetVolumeInformationA
GetTempPathW
GetTempPathA
GetModuleFileNameW
GetModuleFileNameA
FindResourceW
FindResourceA
DeleteFileW
DeleteFileA
CreateSemaphoreW
CreateFileW
CreateFileA
CreateEventW
CreateEventA
DuplicateHandle
FlushInstructionCache
HeapSize
GetVersion
GetExitCodeProcess
OpenProcess
SleepEx
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
LoadResource
LockResource
SizeofResource
WriteFile
CloseHandle
FreeResource
DisableThreadLibraryCalls
InterlockedCompareExchange
InterlockedIncrement
HeapAlloc
GetProcessHeap
HeapFree
GetLastError
InterlockedDecrement
ReadFile
GetFileType
InitializeCriticalSection
SetEvent
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
SystemTimeToFileTime
GetSystemTime
WaitForSingleObject
GetFileSize
ReleaseSemaphore
MultiByteToWideChar
IsBadReadPtr
SetFilePointer
WideCharToMultiByte
lstrlenA
CompareFileTime
Sleep
FreeLibrary
InterlockedExchange
WaitForMultipleObjects
ResetEvent
MulDiv
VirtualFree
VirtualAlloc
GlobalMemoryStatus
ReleaseMutex
WaitForSingleObjectEx
GetProcAddress
GlobalLock
GlobalAlloc
GetSystemDefaultLangID
GetUserDefaultLCID
FindAtomW
IsBadWritePtr
FileTimeToSystemTime
GetFileTime
SetEndOfFile
CreateSemaphoreA
SetThreadPriority
GetThreadPriority
GetCurrentThread
GetExitCodeThread
CreateThread
LoadLibraryA
GetModuleHandleW
GetVersionExA
DeviceIoControl
FreeEnvironmentStringsA
FreeEnvironmentStringsW
lstrlenW
GetEnvironmentStrings
GetEnvironmentStringsW
GetDiskFreeSpaceA
GetLocalTime
GetSystemInfo
LocalAlloc
LocalFree
SetLastError
GetVersionExW
LoadLibraryW
HeapReAlloc
GetModuleHandleA

wmidx

WMCreateASFChopper

wmasf

ord8
ord6
ord10
ASFTimeToPresTime
ord9
ASFSendTimeToTime
ASFPresTimeToTime
ord18
ASFCreateStreamSelector
ASFGetTimeBase
ASFSetDataUnitInfo
ord24
ord11
ord5
ord7
ASFTimeToSendTime
ord17

msdmo

MoDuplicateMediaType
MoInitMediaType
MoCreateMediaType
MoDeleteMediaType
MoFreeMediaType
MoCopyMediaType
DMOEnum

wininet

SetUrlCacheEntryInfoW
SetUrlCacheEntryInfoA
GetUrlCacheEntryInfoExW
GetUrlCacheEntryInfoExA
UnlockUrlCacheEntryStream
ReadUrlCacheEntryStream
CommitUrlCacheEntryA
CreateUrlCacheEntryW
CreateUrlCacheEntryA
HttpQueryInfoW
HttpQueryInfoA
HttpOpenRequestW
HttpOpenRequestA
InternetQueryOptionW
InternetConnectW
InternetConnectA
InternetOpenW
InternetOpenA
GetUrlCacheEntryInfoA
InternetCrackUrlW
InternetCrackUrlA
FindNextUrlCacheEntryExW
FindNextUrlCacheEntryExA
FindFirstUrlCacheEntryExW
FindFirstUrlCacheEntryExA
InternetSetCookieW
InternetSetCookieA
InternetReadFile
HttpEndRequestA
HttpSendRequestExA
InternetSetStatusCallbackA
InternetErrorDlg
InternetWriteFile
InternetCloseHandle
InternetQueryOptionA
InternetSetOptionA
FindFirstUrlCacheGroup
FindNextUrlCacheGroup
FindCloseUrlCache
CreateUrlCacheGroup
CommitUrlCacheEntryW
RetrieveUrlCacheEntryStreamA
RetrieveUrlCacheEntryStreamW
GetUrlCacheEntryInfoW

urlmon

CreateAsyncBindCtx
URLDownloadToCacheFileW
CoInternetQueryInfo
CreateURLMoniker

msvcrt

towupper
_itoa
wcscat
_wcsnicmp
??3@YAXPAX@Z
??2@YAPAXI@Z
wcslen
wcscpy
wcscmp
_purecall
_set_error_mode
_wcsicmp
wcsncmp
wcspbrk
wcschr
wcsrchr
_strnicmp
_snprintf
wcsncpy
wcsstr
wcstol
swprintf
_ftol
_snwprintf
_wtoi
setlocale
wcstoul
swscanf
_vsnprintf
_vsnwprintf
iswprint
wcsncat
iswdigit
memset
memcmp
memcpy
rand
strlen
srand
_beginthreadex
memmove
_wcslwr
longjmp
_setjmp3
sprintf
strncpy
strpbrk
memchr
wcstombs
_itow
_ultow
_wtol
__CxxFrameHandler
_ultoa
strncmp
sscanf
isspace
strstr
_stricmp
isalnum
_except_handler3
_errno
strtoul
isdigit
strchr
time
_strcmpi
_CIpow
vswprintf
_initterm
malloc
_adjust_fdiv
__dllonexit
_onexit
??1type_info@@UAE@XZ
?terminate@@YAXXZ
iswspace
free
strcpy
printf
strcspn
strspn
abort
exit
fprintf
_iob
getenv
ceil
toupper
isxdigit
iswcntrl
iswascii
wcsspn
wcscspn
calloc
_ltoa
isalpha
wcsftime
gmtime
wcstok
strcmp
realloc
abs
_waccess
_wcsupr
_ui64toa

advapi32

RegSetValueExW
RegQueryInfoKeyW
RegQueryInfoKeyA
RegOpenKeyExA
RegDeleteValueW
RegDeleteValueA
RegDeleteKeyW
RegDeleteKeyA
RegOpenKeyA
RegEnumValueW
RegEnumValueA
RegEnumKeyW
RegEnumKeyA
RegCreateKeyExW
GetUserNameW
CryptGenRandom
CryptAcquireContextA
CryptReleaseContext
GetUserNameA
RegOpenKeyExW
RegQueryValueExW
RegSetValueExA
RegQueryValueExA
RegCreateKeyExA
RegCloseKey

user32

wvsprintfW
wsprintfA
RegisterWindowMessageA
PostThreadMessageW
PostThreadMessageA
MsgWaitForMultipleObjects
ReleaseDC
GetDC
GetDesktopWindow
DispatchMessageA
DispatchMessageW
PeekMessageA
PeekMessageW

ole32

CoTaskMemFree
CoCreateInstance
CLSIDFromString
CoGetTreatAsClass
StringFromCLSID
CoTaskMemAlloc
CoCreateGuid
CoInitializeEx
CoUninitialize

oleaut32

SysStringLen
SysAllocString
SysFreeString
VariantInit
VariantCopy
VariantClear
SysStringByteLen
VariantTimeToSystemTime
SysAllocStringLen
SafeArrayDestroy
SafeArrayUnaccessData
SafeArrayAccessData
SafeArrayCreate
VariantChangeType

msacm32

acmDriverEnum
acmDriverDetailsW
acmDriverOpen
acmFormatTagEnumW
acmDriverClose
acmDriverAddW
acmStreamPrepareHeader
acmStreamUnprepareHeader
acmStreamClose
acmFormatEnumW
acmStreamConvert
acmFormatSuggest
acmStreamOpen
acmStreamSize
acmMetrics

winmm

OpenDriver
GetDriverModuleHandle
CloseDriver
timeKillEvent
timeSetEvent
timeGetTime

msvfw32

ICOpen
ICSeqCompressFrameEnd
ICSendMessage
ICSeqCompressFrameStart
ICInfo
ICInstall
ICSeqCompressFrame
ICDecompress
ICCompressorFree
ICLocate
ICClose

rpcrt4

UuidCreate

gdi32

GetSystemPaletteEntries

wsock32

htonl
inet_addr
gethostbyname
ntohs
ioctlsocket
ntohl
WSAGetLastError
getservbyname
htons
gethostbyaddr
getservbyport
WSASetLastError

version

GetFileVersionInfoW
GetFileVersionInfoSizeA
GetFileVersionInfoSizeW
VerQueryValueA
VerQueryValueW
GetFileVersionInfoA

drmclien

ord20
??1CDRMLiteCrypto@@QAE@XZ
ord7
??0CDRMLiteCrypto@@QAE@XZ
ord9
ord3
ord6
ord19
ord4
ord5
ord18

Exports

Exports

DllRegisterServer
WMCheckURLExtension
WMCheckURLScheme
WMCreateBackupRestorer
WMCreateBackupRestorerPrivate
WMCreateEditor
WMCreateIndexer
WMCreateProfileManager
WMCreateReader
WMCreateReaderPriv
WMCreateSyncReader
WMCreateSyncReaderPriv
WMCreateWriter
WMCreateWriterFileSink
WMCreateWriterNetworkSink
WMCreateWriterPriv
WMCreateWriterPushSink
WMIsAvailableOffline
WMIsContentProtected
WMValidateData

Sections

.text
Size: 1.6MB - Virtual size: 1.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 24KB - Virtual size: 53KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 312KB - Virtual size: 310KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 48KB - Virtual size: 46KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
$TEMP/Kylix Ringtone Maker Setup Part2/krmpart2.exe
.exe windows:1 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 36KB - Virtual size: 35KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 1024B - Virtual size: 584B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Lang2052.DAT
.exe windows:4 windows x86 arch:x86

d31173ca8ec2d5e26170e3b96a28428f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

OpenProcess
lstrcatA
GetLastError
lstrcpynA
lstrcmpiA
WinExec
GetModuleFileNameA
TerminateProcess
lstrlenA
LoadLibraryA
WritePrivateProfileStringA
GetModuleHandleA
GetVersion
WriteFile
MoveFileExA
GetSystemDirectoryA
CreateFileA
DeviceIoControl
DeleteFileA
GetVersionExA
GetCurrentProcess
CloseHandle
GetTempPathA
GetProcAddress
GlobalAlloc
FreeLibrary
LoadLibraryExA
GetSystemDefaultLangID
GlobalFree
WideCharToMultiByte
MultiByteToWideChar
GetOEMCP
GetStringTypeW
GetStringTypeA
GetFileType
GetStdHandle
SetHandleCount
IsBadCodePtr
IsBadReadPtr
SetUnhandledExceptionFilter
LCMapStringA
GetEnvironmentStrings
RtlUnwind
HeapFree
HeapAlloc
GetStartupInfoA
GetCommandLineA
ExitProcess
GetCPInfo
GetACP
GetEnvironmentStringsW
FreeEnvironmentStringsA
FreeEnvironmentStringsW
VirtualFree
LCMapStringW
HeapDestroy
HeapCreate
VirtualAlloc
HeapReAlloc
IsBadWritePtr
UnhandledExceptionFilter

user32

ExitWindowsEx
wsprintfA
MessageBoxA

advapi32

CloseServiceHandle
RegOpenKeyExA
RegCloseKey
OpenSCManagerA
CreateServiceA
StartServiceA
ControlService
OpenServiceA
OpenProcessToken
LookupPrivilegeValueA
DeleteService
RegDeleteKeyA
RegEnumKeyExA
AdjustTokenPrivileges
RegEnumValueA
RegSetValueExA
RegDeleteValueA
RegCreateKeyExA

version

GetFileVersionInfoSizeA
GetFileVersionInfoA
VerQueryValueA

shlwapi

SHDeleteKeyA

Sections

.text
Size: 28KB - Virtual size: 25KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 352KB - Virtual size: 353KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 928B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
blanco.ssk
buy now.url
chinese.lag
coolskye.ssk
dada - final.ssk
drmclien.dll
.dll regsvr32 windows:5 windows x86 arch:x86

b6197c892b89fe5446bbc8173b22dadb

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

DRMClien.pdb

Imports

msvcrt

wcscmp
_wunlink
_unlink
_wrename
rename
fseek
toupper
wcsrchr
strrchr
wcscpy
_wmktemp
_mktemp
sprintf
_open
time
_read
_close
wcslen
wcscat
_wfopen
strcat
memmove
printf
_except_handler3
free
_initterm
_adjust_fdiv
__dllonexit
fopen
fread
fclose
fwrite
??2@YAPAXI@Z
strncpy
strcpy
strcmp
strlen
_onexit
_strnicmp
_stricmp
_strupr
_filelength
_wcsicmp
__CxxFrameHandler
_CxxThrowException
strstr
atoi
_purecall
isdigit
strncmp
_memccpy
sscanf
??1type_info@@UAE@XZ
?terminate@@YAXXZ
malloc
memcmp
memcpy
??3@YAXPAX@Z
memset
_ultoa

kernel32

GetTickCount
lstrlenW
GetSystemTime
DeviceIoControl
GetVersion
HeapFree
GetProcessHeap
GetModuleHandleA
FlushFileBuffers
lstrcpynA
ReadFile
WriteFile
SetFilePointer
HeapAlloc
VirtualFree
VirtualAlloc
GetModuleFileNameA
DuplicateHandle
GetCurrentThread
CreateEventA
ExitThread
OutputDebugStringA
FlushInstructionCache
VirtualProtect
DeleteCriticalSection
InitializeCriticalSection
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
GetProcessAffinityMask
CreateThread
SetThreadAffinityMask
SetThreadPriority
ResumeThread
SetEvent
GetSystemInfo
GetCurrentThreadId
LocalFree
LocalAlloc
EnterCriticalSection
LeaveCriticalSection
ReleaseMutex
WaitForSingleObject
GetLocalTime
GetSystemDirectoryW
SetFileAttributesW
GetSystemDirectoryA
lstrcmpA
RemoveDirectoryW
GetWindowsDirectoryW
CreateDirectoryW
LoadLibraryExA
SetFileAttributesA
GetFileAttributesW
GetWindowsDirectoryA
CreateDirectoryA
MultiByteToWideChar
WideCharToMultiByte
GetCurrentDirectoryW
SetCurrentDirectoryW
GetCurrentDirectoryA
SetCurrentDirectoryA
LoadLibraryA
GetProcAddress
FreeLibrary
GetVersionExA
CreateMutexA
OpenMutexA
GetLogicalDriveStringsA
GetFileAttributesA
CreateFileW
CreateFileA
GetFileSize
CloseHandle
FindFirstFileW
FindNextFileW
FindFirstFileA
FindNextFileA
FindClose
lstrcatA
DeleteFileW
DeleteFileA
MoveFileW
GetLastError
MoveFileA
CopyFileW
CopyFileA
lstrcpyA
GetDriveTypeA
SetErrorMode
CompareStringA
GetModuleHandleW
lstrcpynW
GetVolumeInformationA
IsBadWritePtr
lstrlenA
GetVersionExW
GetDiskFreeSpaceA
CompareStringW
QueryDosDeviceA
InterlockedExchange
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
GlobalMemoryStatus
Sleep
WaitNamedPipeW
ResetEvent

user32

LoadIconA
LoadImageA
RegisterWindowMessageA
CharUpperA
CharLowerA
SendMessageA
wsprintfW
CharNextW
CharNextA
wsprintfA

advapi32

RegQueryValueExA
RegOpenKeyExA
RegSetValueExA
RegQueryInfoKeyW
RegQueryInfoKeyA
RegOpenKeyExW
RegOpenKeyA
RegEnumKeyA
RegQueryValueExW
RegCreateKeyExA
RegEnumKeyExA
CloseServiceHandle
OpenSCManagerA
ControlService
StartServiceA
QueryServiceStatus
OpenServiceA
SetNamedSecurityInfoW
GetSecurityDescriptorDacl
RegSetKeySecurity
RegDeleteValueA
RegOpenKeyW
RegSetValueExW
RegCloseKey

ole32

CLSIDFromString
StringFromCLSID
CoTaskMemAlloc
CoCreateGuid
CoTaskMemFree

oleaut32

SysFreeString
SysStringLen
SysAllocStringLen

Exports

Exports

??0CDRMLiteCrypto@@QAE@XZ
??1CDRMLiteCrypto@@QAE@XZ
?BackupLicenses@CDRMLiteCrypto@@QAEJKPAGPAUIUnknown@@PAHPAX@Z
?EncryptFast@CDRMLiteCrypto@@QAEJPBDKPAE1@Z
?EncryptIndirectFast@CDRMLiteCrypto@@QAEJPBDKPAE1@Z
?GenerateNewLicenseEx@CDRMLiteCrypto@@QAEJKPAE00PAPAD10@Z
?GetLicenses@CDRMLiteCrypto@@QAEJPBDPAUPMLICENSE@@PAKKPAX2PAE@Z
?GetPublicKey@CDRMLiteCrypto@@QAEJPAUPKCERT@@@Z
?QueryXferToPMEx@CDRMLiteCrypto@@QAEJPBDKPAKPAEK2K12@Z
?RestoreLicenses@CDRMLiteCrypto@@QAEJKPAEPAGPAUIUnknown@@PAHPAX@Z
Bind
BindEx
CanDecrypt
CanDecryptEx
CreatePMLicense
Decrypt
DllMain
DllRegisterServer
DllUnregisterServer
Encrypt
GenerateNewLicense
GetPMLicenseFileName
GetPMLicenseSize
GetVersion
InitAppCerts
KeyExchange
ProcessResponse
QueryXferToPM
RequestLicense
SetAppSec
SetLicenseStore

Sections

.text
Size: 269KB - Virtual size: 269KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 952B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 17KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
english.lag
file,diz.thx
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

Size: 15KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 1KB - Virtual size: 264KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: - Virtual size: 240KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.KAV
Size: 132KB - Virtual size: 132KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
helpeng/contacts.htm
.html
helpeng/faqs.htm
.html
helpeng/get_started.htm
.html
helpeng/getting_started.htm
.html
helpeng/images/btn_back_large.gif
helpeng/images/btn_back_small.gif
helpeng/images/btn_convert.gif
helpeng/images/btn_cur.gif
helpeng/images/btn_end.gif
helpeng/images/btn_for_large.gif
helpeng/images/btn_for_small.gif
helpeng/images/btn_help.gif
helpeng/images/btn_mic.gif
helpeng/images/btn_open.gif
helpeng/images/btn_opt.gif
helpeng/images/btn_play.gif
helpeng/images/btn_reg.gif
helpeng/images/btn_save.gif
helpeng/images/btn_start.gif
helpeng/images/btn_stop.gif
helpeng/images/btn_stop_rec.gif
helpeng/images/btn_wave.gif
helpeng/images/btns_end.gif
helpeng/images/btns_start.gif
helpeng/images/main1.gif
helpeng/images/main1_small.gif
helpeng/images/main2.gif
helpeng/images/main2_small.gif
helpeng/images/main3.gif
helpeng/images/main3_small.gif
helpeng/images/main4.gif
helpeng/images/main4_small.gif
helpeng/images/main5.gif
helpeng/images/main5_small.gif
helpeng/images/main_wizard_ringtone.jpg
.jpg
helpeng/images/options.gif
helpeng/images/registration.gif
helpeng/images/ringtone_converter.gif
helpeng/images/screenshots.rar
.rar
main1.gif
main2.gif
main3.gif
main4.gif
main5.gif
helpeng/images/vol_play.gif
helpeng/images/vol_record.gif
helpeng/images/waveform.gif
helpeng/index.htm
.html
helpeng/installation.htm
.html
helpeng/introduction.htm
.html
helpeng/menu.htm
.html
helpeng/options.htm
.html
helpeng/produce_ringtone.htm
.html
helpeng/registration.htm
.html
helpeng/requirements.htm
.html
kylixsoft.url
license.txt
minimized.ssk
order.url
readme.txt
ringtonemaker.exe
.exe windows:4 windows x86 arch:x86

d06a52ba9fa883bce196f477ebd140c4

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

skinplusplusdll

?LoadSkin@@YGHPAD@Z
?ExitSkin@@YGHXZ
ord1
?GetSkinSysColor@@YGKH@Z

kernel32

ExitThread
GetTimeZoneInformation
GetSystemTime
GetLocalTime
GetACP
HeapSize
HeapReAlloc
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
IsBadWritePtr
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
SetUnhandledExceptionFilter
GetStringTypeA
GetStringTypeW
LCMapStringA
LCMapStringW
IsBadReadPtr
IsBadCodePtr
SetStdHandle
CompareStringA
CompareStringW
SetEnvironmentVariableA
CreateThread
GetProfileStringA
InterlockedExchange
RaiseException
CloseHandle
VirtualFreeEx
WriteProcessMemory
VirtualAllocEx
OpenProcess
WaitForSingleObject
CreateProcessA
DeleteFileA
MoveFileA
Sleep
GetTickCount
CopyFileA
DeviceIoControl
CreateFileA
GetDriveTypeA
FreeLibrary
LoadLibraryExA
WinExec
lstrlenA
lstrcatA
lstrcpyA
MulDiv
LoadLibraryA
GetWindowsDirectoryA
lstrcmpiA
GetPrivateProfileStringA
GetSystemDefaultLangID
GetCommandLineA
GetModuleFileNameA
GetTempPathA
GetTempFileNameA
SetPriorityClass
TerminateProcess
GetVersionExA
GetProcAddress
GetModuleHandleA
GlobalDeleteAtom
ExitProcess
GetStartupInfoA
HeapAlloc
HeapFree
RtlUnwind
GetCurrentDirectoryA
WritePrivateProfileStringA
SetErrorMode
GlobalFindAtomA
GlobalAddAtomA
GlobalGetAtomNameA
GetCurrentThreadId
GetVersion
LockResource
LoadResource
GetFileTime
GetFileSize
GetFileAttributesA
SizeofResource
GetOEMCP
GetCPInfo
GetProcessVersion
GlobalFlags
TlsGetValue
LocalReAlloc
TlsSetValue
EnterCriticalSection
GlobalReAlloc
LeaveCriticalSection
TlsFree
GlobalHandle
DeleteCriticalSection
TlsAlloc
InitializeCriticalSection
LocalAlloc
FileTimeToLocalFileTime
FileTimeToSystemTime
FindNextFileA
GlobalAlloc
lstrcmpA
GetCurrentThread
SetLastError
GetFullPathNameA
lstrcpynA
GetVolumeInformationA
FindFirstFileA
FindClose
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
WriteFile
ReadFile
GetCurrentProcess
DuplicateHandle
GetLastError
CreateEventA
SuspendThread
SetThreadPriority
ResumeThread
SetEvent
FormatMessageA
LocalFree
GlobalLock
GlobalUnlock
GlobalFree
WideCharToMultiByte
InterlockedDecrement
InterlockedIncrement
MultiByteToWideChar
GetThreadLocale
FindResourceA

user32

GetNextDlgGroupItem
MessageBeep
RegisterClipboardFormatA
PostThreadMessageA
CopyAcceleratorTableA
GetSysColorBrush
GetDesktopWindow
DestroyMenu
MapDialogRect
SetWindowContextHelpId
PostQuitMessage
InflateRect
GrayStringA
DrawTextA
TabbedTextOutA
EndPaint
BeginPaint
GetWindowDC
CharUpperA
GetMessageA
ValidateRect
wvsprintfA
EndDialog
GetActiveWindow
CreateDialogIndirectParamA
CharNextA
GetMenuCheckMarkDimensions
LoadBitmapA
ModifyMenuA
SetMenuItemBitmaps
CheckMenuItem
EnableMenuItem
GetNextDlgTabItem
MoveWindow
SetWindowTextA
IsDialogMessageA
SendDlgItemMessageA
MapWindowPoints
GetFocus
SetActiveWindow
SetFocus
AdjustWindowRectEx
GetScrollPos
GetTopWindow
MessageBoxA
IsChild
GetCapture
WinHelpA
wsprintfA
RegisterClassA
GetMenu
GetSubMenu
GetDlgItem
GetWindowTextLengthA
GetDlgCtrlID
GetKeyState
SetWindowsHookExA
CallNextHookEx
GetClassLongA
SetPropA
UnhookWindowsHookEx
GetPropA
CallWindowProcA
RemovePropA
GetMessageTime
GetMessagePos
GetLastActivePopup
EnableWindow
UnregisterClassA
HideCaret
ShowCaret
ExcludeUpdateRgn
DrawFocusRect
DefDlgProcA
IsWindowUnicode
GetForegroundWindow
SetForegroundWindow
GetWindow
SetWindowLongA
RegisterWindowMessageA
IntersectRect
GetWindowPlacement
RegisterClassExA
CreateWindowExA
ShowWindow
DestroyWindow
PostMessageA
IsIconic
DrawIcon
GetSystemMenu
AppendMenuA
GetMenuItemCount
GetMenuItemID
GetMenuState
IsRectEmpty
GetWindowLongA
ClientToScreen
ChildWindowFromPoint
IsWindowEnabled
WindowFromPoint
SetWindowRgn
EqualRect
GetClassInfoA
DefWindowProcA
SetTimer
KillTimer
FrameRect
PtInRect
SetRect
GetParent
GetWindowTextA
GetClassNameA
SendMessageA
GetWindowThreadProcessId
EnumChildWindows
FindWindowA
DispatchMessageA
TranslateMessage
PeekMessageA
SetWindowPos
LoadIconA
IsWindowVisible
GetSysColor
LoadImageA
InvalidateRect
OffsetRect
GetClientRect
CopyRect
GetDC
GetIconInfo
ReleaseDC
CreateIconIndirect
DrawStateA
GetWindowRect
FillRect
DestroyIcon
CopyIcon
DestroyCursor
LoadStringA
SystemParametersInfoA
SetCursor
GetSystemMetrics
LoadCursorA
SetRectEmpty
ScreenToClient
IsWindow
RedrawWindow
UpdateWindow
GetCursorPos

gdi32

FillRgn
OffsetRgn
CombineRgn
CreateRectRgn
CreatePolygonRgn
GetClipBox
GetTextColor
GetBkColor
SaveDC
RestoreDC
SetMapMode
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowExtEx
ScaleWindowExtEx
IntersectClipRect
SelectClipRgn
GetViewportExtEx
GetWindowExtEx
PtVisible
RectVisible
ExtTextOutA
Escape
GetMapMode
PatBlt
DPtoLP
LPtoDP
FrameRgn
CreateRoundRectRgn
GetStockObject
GetDeviceCaps
SetTextJustification
GetTextExtentPoint32A
TextOutA
CreateFontIndirectA
SetBkMode
GetTextMetricsA
CreatePen
MoveToEx
LineTo
CreateCompatibleBitmap
CreateSolidBrush
StretchBlt
CreateDIBSection
GetPixel
SetPixel
CreateBitmap
CreateCompatibleDC
SelectObject
SetBkColor
BitBlt
SetTextColor
DeleteDC
DeleteObject
CreateDIBitmap
GetObjectA
GetTextExtentPointA

comdlg32

GetOpenFileNameA
GetSaveFileNameA
GetFileTitleA

winspool.drv

ClosePrinter
DocumentPropertiesA
OpenPrinterA

advapi32

RegQueryValueA
RegOpenKeyExA
RegCreateKeyExA
RegSetValueExA
RegCloseKey

shell32

ShellExecuteA

comctl32

ImageList_GetIcon
ImageList_GetImageCount
ord17
_TrackMouseEvent

oledlg

ord8

ole32

StgCreateDocfileOnILockBytes
CreateILockBytesOnHGlobal
CoTaskMemFree
CoTaskMemAlloc
StgOpenStorageOnILockBytes
OleInitialize
OleUninitialize
CoFreeUnusedLibraries
CoRegisterMessageFilter
CoRevokeClassObject
OleFlushClipboard
OleIsCurrentClipboard
CoGetClassObject
CLSIDFromString
CLSIDFromProgID
CoInitialize

olepro32

ord253

oleaut32

SysFreeString
SysAllocStringLen
VariantChangeType
VariantClear
SysAllocString
VariantTimeToSystemTime
VariantCopy
SysStringLen
SysAllocStringByteLen

winmm

waveInStop
waveInReset
waveInUnprepareHeader
waveInStart
waveInPrepareHeader
waveInAddBuffer
waveOutReset
waveOutUnprepareHeader
waveOutRestart
waveOutPrepareHeader
waveOutWrite
waveOutPause
mmioDescend
mmioAscend
waveOutOpen
waveOutClose
mixerGetDevCapsA
mixerGetControlDetailsA
mixerSetControlDetails
mixerGetLineInfoA
mixerGetLineControlsA
mixerClose
mixerGetNumDevs
waveInOpen
mixerGetID
waveInClose
mixerOpen
mmioCreateChunk
mmioRead
mmioSeek
mmioWrite
mmioClose
mmioOpenA

Sections

.text
Size: 296KB - Virtual size: 295KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 64KB - Virtual size: 60KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 20KB - Virtual size: 35KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 472KB - Virtual size: 470KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
ringtonemaker.exe.manifest
.xml
ringtonemaker.ini
ringtonemaker.rmf
softcrystal.ssk
software website.url
stealthos.ssk
topax.ssk
uninst.exe
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.uNSIS
Size: 342B - Virtual size: 4.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

HelloFAR
Size: 111KB - Virtual size: 140KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
$PLUGINSDIR/killprocdll.dll
.dll windows:4 windows x86 arch:x86

815c88741b87a0210c457b00b57bf9c6

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

TerminateProcess
CloseHandle
OpenProcess
FreeLibrary
LoadLibraryA
GetProcAddress
GetVersionExA
GlobalFree
lstrcpyA
InterlockedDecrement
InterlockedIncrement
GetCommandLineA
GetVersion
HeapFree
HeapAlloc
WideCharToMultiByte
MultiByteToWideChar
LCMapStringA
LCMapStringW
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
ExitProcess
GetCurrentProcess
HeapReAlloc
HeapSize
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
TlsGetValue
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
HeapDestroy
HeapCreate
VirtualFree
WriteFile
VirtualAlloc
RtlUnwind
GetCPInfo
GetStringTypeA
GetStringTypeW
GetACP
GetOEMCP

Exports

Exports

KillProc

Sections

.text
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$PLUGINSDIR/modern-header.bmp
$PROGRAM_FILES/Baidu/bar/TempData.KGB
.dll regsvr32 windows:4 windows x86 arch:x86

6ccb2c8e98669e1c49478ccdae8356ae

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

MoveFileExA
WritePrivateProfileStringA
WritePrivateProfileSectionA
ReleaseMutex
WaitForSingleObject
CreateMutexA
GetVersionExA
DeviceIoControl
GetTickCount
Sleep
GetFileAttributesA
SetFilePointer
FindClose
FindNextFileA
SetFileAttributesA
FindFirstFileA
CopyFileA
GetPrivateProfileSectionNamesA
GetEnvironmentVariableA
ReadProcessMemory
VirtualProtect
GetVolumeInformationA
GlobalUnlock
GlobalLock
LocalFree
FormatMessageA
HeapFree
TlsAlloc
TlsFree
TlsSetValue
TlsGetValue
GlobalFree
GlobalAlloc
ResumeThread
CreateFileA
RemoveDirectoryA
CreateDirectoryA
GetTempFileNameA
DeleteFileA
GetTempPathA
LoadLibraryA
lstrcatA
lstrcpyA
lstrcpynA
HeapDestroy
IsDBCSLeadByte
FindResourceA
lstrcmpiA
LoadLibraryExA
FreeLibrary
LoadResource
SizeofResource
GetPrivateProfileSectionA
SetErrorMode
GetModuleFileNameW
SetLastError
DebugBreak
OutputDebugStringA
lstrlenA
InterlockedIncrement
lstrcpyW
MultiByteToWideChar
WriteFile
CloseHandle
ReadFile
HeapAlloc
GetProcessHeap
GetFileSize
GetLastError
WideCharToMultiByte
CreateThread
WriteProcessMemory
GetCurrentProcess
lstrlenW
InterlockedDecrement
GetModuleHandleA
GetModuleHandleW
GetProcAddress
GetFileAttributesW
GetVersion
LoadLibraryW
GetModuleFileNameA
LeaveCriticalSection
EnterCriticalSection
GetCurrentThreadId
FlushInstructionCache
DisableThreadLibraryCalls
GetShortPathNameA
GetPrivateProfileStringA
GetPrivateProfileIntA
GetSystemDirectoryA
GetWindowsDirectoryA
InitializeCriticalSection
DeleteCriticalSection

user32

GetSubMenu
DialogBoxParamA
GetClientRect
DestroyWindow
GetFocus
SetFocus
UnhookWindowsHookEx
SetWindowsHookExA
CreateWindowExA
wsprintfA
LoadCursorA
UpdateWindow
GetClassInfoExA
BeginPaint
MessageBoxA
CharUpperA
EnableWindow
SendMessageA
CharNextA
IsWindowVisible
SetRectEmpty
DefWindowProcA
DestroyIcon
GetWindow
GetParent
GetWindowTextA
MoveWindow
ScreenToClient
GetWindowRect
DrawIconEx
CopyRect
SetCursor
LoadIconA
CallWindowProcA
PtInRect
IsRectEmpty
DispatchMessageA
TranslateMessage
GetKeyState
SetWindowPos
GetSysColor
OffsetRect
InflateRect
DrawTextA
FillRect
EndDialog
ShowWindow
SetWindowTextA
IsWindow
GetDlgItem
RegisterClassExA
InvalidateRect
SetWindowLongA
GetWindowLongA
EndPaint
wvsprintfA
SetRect
LoadStringA
CharLowerA
CheckMenuItem
EnableMenuItem
GetAsyncKeyState
CallNextHookEx
GetActiveWindow
PostMessageA
FindWindowExA
ReleaseDC
SetCapture
SystemParametersInfoA
GetDesktopWindow
FindWindowA
AdjustWindowRect
GetCursorPos
MapWindowPoints
CharNextW
LoadImageA
GetMenuStringA
LoadMenuA
GetClassInfoA
ReleaseCapture
SetForegroundWindow
RedrawWindow
SetTimer
GetDC
CreatePopupMenu
InsertMenuA
TrackPopupMenu
DestroyMenu
CheckMenuRadioItem
LoadBitmapA
KillTimer

gdi32

DeleteDC
LineTo
MoveToEx
DeleteObject
CreatePen
GetStockObject
SelectObject
SetBkMode
CreateSolidBrush
SetBkColor
GetObjectA
IntersectClipRect
CreateFontIndirectA
Rectangle
SetPixelV
SetTextColor
CreateCompatibleDC
BitBlt
CreateCompatibleBitmap
TextOutA
CreateBitmap

advapi32

EnumDependentServicesA
GetUserNameA
RegSetKeySecurity
RegEnumKeyA
AllocateAndInitializeSid
InitializeAcl
AddAce
InitializeSecurityDescriptor
SetSecurityDescriptorDacl
FreeSid
RegGetKeySecurity
GetSidIdentifierAuthority
GetSidSubAuthorityCount
GetSidSubAuthority
OpenProcessToken
GetTokenInformation
GetLengthSid
CopySid
RegCloseKey
ControlService
OpenSCManagerA
OpenServiceA
StartServiceA
QueryServiceStatus
ChangeServiceConfigA
CloseServiceHandle
RegCreateKeyA
RegEnumValueA
RegQueryInfoKeyA
RegSetValueExA
RegEnumKeyExA
RegOpenKeyExA
RegDeleteValueA
RegDeleteKeyA
RegCreateKeyExA
RegOpenKeyA
RegQueryValueExA

shell32

SHBrowseForFolderA
ShellExecuteA
SHGetPathFromIDListA
SHGetMalloc
SHGetSpecialFolderPathA

ole32

CoTaskMemRealloc
CoInitialize
OleUninitialize
OleInitialize
CoTaskMemFree
RevokeDragDrop
ReleaseStgMedium
CoGetClassObject
CoTaskMemAlloc
CoCreateInstance
RegisterDragDrop
CoUninitialize

oleaut32

VariantChangeType
VarUI4FromStr
SysStringByteLen
VariantInit
SysAllocStringByteLen
SysStringLen
LoadRegTypeLi
RegisterTypeLi
LoadTypeLi
CreateErrorInfo
SysAllocString
VariantClear
SysAllocStringLen
SysFreeString
VariantCopy
GetErrorInfo
SetErrorInfo

shlwapi

SHDeleteValueA
SHSetValueA
SHGetValueA
SHDeleteKeyA
StrStrIA

urlmon

CoInternetGetSession

msvcrt

_stricmp
_purecall
_adjust_fdiv
_initterm
??1type_info@@UAE@XZ
_onexit
__dllonexit
?terminate@@YAXXZ
_fullpath
_endthreadex
_mbsnbcmp
_memicmp
_beginthread
_endthread
_local_unwind2
printf
tolower
strncat
fgets
_vsnprintf
_CxxThrowException
atol
fwrite
wcsstr
strcmp
fseek
ftell
toupper
isxdigit
isalnum
abs
_mbsnbcpy
_beginthreadex
localtime
_mbsicmp
fread
_mbsrchr
_mbstok
malloc
_wcsicmp
fopen
fputs
fclose
_except_handler3
_strnicmp
strncpy
_strlwr
strstr
wcscmp
memset
strrchr
strcat
_stat
_snprintf
time
srand
rand
sprintf
strcpy
strchr
strlen
_mbschr
_ismbcspace
_mbsnbicmp
memcmp
free
memmove
_mbscmp
realloc
??2@YAPAXI@Z
memcpy
atoi
_ismbcdigit
wcslen
??3@YAXPAX@Z
__CxxFrameHandler
_mbsstr
_wcsnicmp
_strcmpi

wininet

HttpSendRequestA
InternetCrackUrlA
InternetCanonicalizeUrlA
InternetReadFile
InternetCloseHandle
InternetOpenUrlA
InternetSetOptionA
InternetOpenA
InternetSetFilePointer
HttpQueryInfoA
FindNextUrlCacheEntryA
HttpOpenRequestA
InternetConnectA
GetUrlCacheEntryInfoA
DeleteUrlCacheEntry
FindFirstUrlCacheEntryA
FindCloseUrlCache
FindNextUrlCacheGroup
DeleteUrlCacheGroup
FindFirstUrlCacheGroup

setupapi

SetupIterateCabinetA

version

GetFileVersionInfoSizeA
VerQueryValueA
GetFileVersionInfoA

iphlpapi

GetNetworkParams

ws2_32

gethostname
gethostbyname

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
Install
Uninstall

Sections

.text
Size: 292KB - Virtual size: 289KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 52KB - Virtual size: 51KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 24KB - Virtual size: 60KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 16KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 176KB - Virtual size: 173KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$PROGRAM_FILES/Baidu/bar/baidubar.dat
$PROGRAM_FILES/Baidu/bar/img/imglist.bmp
$PROGRAM_FILES/Baidu/bar/img/logo.bmp
vladstudio.ssk
winfocus.exe
.exe windows:4 windows x86 arch:x86

450e40d3e3846c8a5f5b8ba2fd1bad78

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GlobalDeleteAtom
GlobalFindAtomW
GlobalAddAtomW
ExitProcess
RtlUnwind
HeapAlloc
HeapFree
HeapReAlloc
VirtualProtect
VirtualAlloc
GetSystemInfo
VirtualQuery
HeapSize
TerminateProcess
QueryPerformanceCounter
GetSystemTimeAsFileTime
GetModuleFileNameA
LCMapStringA
LCMapStringW
SetUnhandledExceptionFilter
GetOEMCP
GetCPInfo
FreeLibrary
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineA
SetHandleCount
GetFileType
GetStartupInfoA
HeapDestroy
HeapCreate
VirtualFree
IsBadWritePtr
GetTimeZoneInformation
GetStringTypeA
GetStringTypeW
IsBadReadPtr
IsBadCodePtr
SetStdHandle
CompareStringA
CompareStringW
SetEnvironmentVariableA
GetVersionExA
GetCurrentThreadId
GlobalFlags
lstrcmpW
GetFileTime
GetFileAttributesW
FileTimeToLocalFileTime
SetErrorMode
lstrcatW
FileTimeToSystemTime
TlsFree
LocalReAlloc
TlsSetValue
TlsAlloc
TlsGetValue
EnterCriticalSection
GlobalHandle
GlobalReAlloc
LeaveCriticalSection
GetVersion
InterlockedIncrement
GetModuleHandleA
GetProcAddress
GetFullPathNameW
GetVolumeInformationW
FindFirstFileW
FindClose
DuplicateHandle
GetFileSize
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
WriteFile
ReadFile
InterlockedDecrement
DeleteCriticalSection
InitializeCriticalSection
ReadConsoleInputA
SetConsoleMode
GetConsoleMode
PeekConsoleInputA
GetNumberOfConsoleInputEvents
CreateFileA
RaiseException
SetLastError
GlobalFree
lstrcpyW
GlobalAlloc
GlobalLock
GlobalUnlock
lstrcpynW
FormatMessageW
LocalAlloc
LocalFree
GetStdHandle
GetCommandLineW
GetCurrentDirectoryW
GetModuleHandleW
GetModuleFileNameW
GetCurrentProcess
GetCurrentProcessId
CreateFileW
lstrlenW
GetLastError
CloseHandle
GetTickCount
GetUserDefaultLCID
WideCharToMultiByte
DeleteFileW
MultiByteToWideChar
FindResourceW
LoadResource
LockResource
SizeofResource
GetVersionExW
GetThreadLocale
GetLocaleInfoA
GetACP
UnhandledExceptionFilter
InterlockedExchange

user32

EnableMenuItem
CheckMenuItem
GetMenuCheckMarkDimensions
LoadBitmapW
RegisterWindowMessageW
WinHelpW
GetCapture
CreateWindowExW
GetClassInfoExW
GetClassLongW
SetPropW
GetPropW
RemovePropW
GetForegroundWindow
GetTopWindow
DestroyWindow
GetMessageTime
GetMessagePos
LoadIconW
MapWindowPoints
SetForegroundWindow
GetClientRect
GetMenu
PostMessageW
AdjustWindowRectEx
GetClassInfoW
RegisterClassW
DefWindowProcW
ModifyMenuW
SystemParametersInfoA
IsIconic
GetWindowPlacement
SetWindowsHookExW
CallNextHookEx
ValidateRect
CopyRect
GetWindow
GetWindowRect
PtInRect
GetClassNameW
GetFocus
SetWindowPos
SetWindowLongW
GetDlgCtrlID
SetWindowTextW
GetDlgItem
GetWindowTextW
SendMessageW
MessageBoxW
GetParent
SetMenuItemBitmaps
DestroyMenu
GetWindowLongW
GetLastActivePopup
PostQuitMessage
CallWindowProcW
IsWindowEnabled
EnableWindow
LoadCursorW
GetSysColorBrush
GetSysColor
ReleaseDC
GetDC
GrayStringW
DrawTextExW
DrawTextW
TabbedTextOutW
CharUpperW
GetSystemMetrics
UnhookWindowsHookEx
UnregisterClassW
GetMenuState
GetMenuItemID
GetMenuItemCount
GetSubMenu
ClientToScreen
PeekMessageW
DispatchMessageW
TranslateMessage
ExitWindowsEx
wsprintfW
MsgWaitForMultipleObjectsEx
GetKeyState

gdi32

GetStockObject
SetViewportOrgEx
SelectObject
Escape
ExtTextOutW
CreateBitmap
DeleteDC
ScaleWindowExtEx
SetWindowExtEx
ScaleViewportExtEx
SetViewportExtEx
GetDeviceCaps
TextOutW
RectVisible
PtVisible
DeleteObject
GetClipBox
SetMapMode
SetTextColor
SetBkColor
RestoreDC
SaveDC
OffsetViewportOrgEx

comdlg32

GetFileTitleW

winspool.drv

OpenPrinterW
DocumentPropertiesW
ClosePrinter

advapi32

AdjustTokenPrivileges
OpenProcessToken
LookupPrivilegeValueW

comctl32

ord17

shlwapi

PathFindExtensionW
PathRemoveExtensionW
PathIsRelativeW
PathStripToRootW
PathAddBackslashW
PathRemoveFileSpecW
PathFileExistsW
PathIsUNCW
PathCanonicalizeW
PathFindFileNameW

ole32

CoInitialize
GetRunningObjectTable
CreateItemMoniker
CreateBindCtx
MkParseDisplayName
CoTaskMemFree
CoCreateInstance
CoUninitialize

oleaut32

VariantInit
SysFreeString
VariantClear
VariantChangeType

wmvcore

WMCreateProfileManager

Sections

.text
Size: 232KB - Virtual size: 229KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 44KB - Virtual size: 43KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 40KB - Virtual size: 39KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
xpcorona.ssk
˵.txt
ⷴ.url
下载说明.htm
.html .js polyglot
安装说明.txt
非常世纪资源网.url
.url

Sharing

General

Malware Config

Signatures

Files

Headers

File Characteristics

Sections

.uNSIS Size: 342B - Virtual size: 4.2MB

HelloFAR Size: 111KB - Virtual size: 140KB

57354bdeea3dfae6e948101add87501a

Headers

File Characteristics

Imports

kernel32

user32

gdi32

shell32

comdlg32

Exports

Exports

Sections

.text Size: 6KB - Virtual size: 6KB

.rdata Size: 2KB - Virtual size: 1KB

.data Size: 1KB - Virtual size: 9KB

.rsrc Size: 512B - Virtual size: 152B

.reloc Size: 1024B - Virtual size: 954B

815c88741b87a0210c457b00b57bf9c6

Headers

File Characteristics

Imports

kernel32

Exports

Exports

Sections

.text Size: 16KB - Virtual size: 15KB

.rdata Size: 4KB - Virtual size: 2KB

.data Size: 4KB - Virtual size: 4KB

.reloc Size: 4KB - Virtual size: 2KB

d12ed83df3a4aa87887f14a225ff95d4

Headers

File Characteristics

Imports

kernel32

user32

ole32

oleaut32

urlmon

wininet

Exports

Exports

Sections

.text Size: 4KB - Virtual size: 3KB

.rdata Size: 1KB - Virtual size: 1KB

.data Size: 512B - Virtual size: 456B

.rsrc Size: 512B - Virtual size: 152B

.reloc Size: 1024B - Virtual size: 644B

d12ed83df3a4aa87887f14a225ff95d4

Headers

File Characteristics

Imports

kernel32

user32

ole32

oleaut32

urlmon

wininet

Exports

Exports

Sections

.text Size: 4KB - Virtual size: 3KB

.rdata Size: 1KB - Virtual size: 1KB

.data Size: 512B - Virtual size: 456B

.rsrc Size: 512B - Virtual size: 152B

.reloc Size: 1024B - Virtual size: 644B

7d85f9c30f9e87a65fff848de2c96ac1

Headers

File Characteristics

Imports

kernel32

.uNSIS
Size: 342B - Virtual size: 4.2MB

HelloFAR
Size: 111KB - Virtual size: 140KB

.text
Size: 6KB - Virtual size: 6KB

.rdata
Size: 2KB - Virtual size: 1KB

.data
Size: 1KB - Virtual size: 9KB

.rsrc
Size: 512B - Virtual size: 152B

.reloc
Size: 1024B - Virtual size: 954B

.text
Size: 16KB - Virtual size: 15KB

.rdata
Size: 4KB - Virtual size: 2KB

.data
Size: 4KB - Virtual size: 4KB

.reloc
Size: 4KB - Virtual size: 2KB

.text
Size: 4KB - Virtual size: 3KB

.rdata
Size: 1KB - Virtual size: 1KB

.data
Size: 512B - Virtual size: 456B

.rsrc
Size: 512B - Virtual size: 152B

.reloc
Size: 1024B - Virtual size: 644B

.text
Size: 4KB - Virtual size: 3KB

.rdata
Size: 1KB - Virtual size: 1KB

.data
Size: 512B - Virtual size: 456B

.rsrc
Size: 512B - Virtual size: 152B

.reloc
Size: 1024B - Virtual size: 644B

.text
Size: 2KB - Virtual size: 2KB

.rdata
Size: 1KB - Virtual size: 1KB

.data
Size: 512B - Virtual size: 5KB

.rsrc
Size: 512B - Virtual size: 296B

.reloc
Size: 512B - Virtual size: 460B

.text
Size: 7KB - Virtual size: 6KB

.rdata
Size: 1024B - Virtual size: 784B

.data
Size: 512B - Virtual size: 92B

.reloc
Size: 512B - Virtual size: 494B

.text
Size: 4KB - Virtual size: 3KB

.rdata
Size: 1024B - Virtual size: 791B

.data
Size: - Virtual size: 6KB

.reloc
Size: 512B - Virtual size: 322B

.text
Size: 8KB - Virtual size: 7KB

.rdata
Size: 1KB - Virtual size: 1KB

.data
Size: - Virtual size: 1KB

.reloc
Size: 512B - Virtual size: 414B