Microsoft Windows NT 4[.]0 (''Cairo'' 4[.]00[.]1175[.]1 Server)[.]7z

Sharing

Copy URL Twitter E-mail

General

Target

Microsoft Windows NT 4.0 (''Cairo'' 4.00.1175.1 Server).7z
Size

37.9MB
MD5

27eae7c64fc24e08d12009c7d2aaffda
SHA1

f7716da604250225ae2a9140288691042d65be98
SHA256

bcfd3525428229a374da1d26d56745506a848fe15facb8471e1a86b0c89ec8f1
SHA512

7f437f2a7dcb49f507268c6a43504e445c0f533fa6e5538646ec5bdd9d6e803613af2f1c3ffc020bc5ab079517d13c38af9f64d2b11f56c87710af1bc0502bcc
SSDEEP

786432:R5lS8l0pPAVLRM41IMmOrn7F3e7G02R0pZuFkaE5kzj/wIyWS587N:VlArEIQQ7G1YMjeq

Score

3^/10

Malware Config

Signatures

Unsigned PE 109 IoCs

Checks for missing Authenticode signature.

resource
unpack002/I386/ABIOSDSK.SYS
unpack002/I386/AHA154X.SYS
unpack002/I386/AHA174X.SYS
unpack002/I386/AIC78XX.SYS
unpack002/I386/ALWAYS.SYS
unpack002/I386/AMI0NT.SYS
unpack002/I386/AMSINT.SYS
unpack002/I386/ARROW.SYS
unpack002/I386/ATAPI.SYS
unpack002/I386/ATDISK.SYS
unpack002/I386/AUTOCHK.EXE
unpack002/I386/BUSLOGIC.SYS
unpack002/I386/CDFS.SYS
unpack002/I386/CDROM.SYS
unpack002/I386/CIRRUS.SYS
unpack002/I386/CLASS2.SYS
unpack002/I386/CPQARRAY.SYS
unpack002/I386/DAC960NT.SYS
unpack002/I386/DELLDSA.SYS
unpack002/I386/DISK.SYS
unpack002/I386/DPTSCSI.SYS
unpack002/I386/DTC329X.SYS
unpack002/I386/EXPAND.EXE
unpack002/I386/FASTFAT.SYS
unpack002/I386/FD16_700.SYS
unpack002/I386/FD7000EX.SYS
unpack002/I386/FD8XX.SYS
unpack002/I386/FLOPPY.SYS
unpack002/I386/HAL486C.DLL
unpack002/I386/HALAPIC.DLL
unpack002/I386/HALMCA.DLL
unpack002/I386/HALMPS.DLL
unpack002/I386/HALNCR.DLL
unpack002/I386/I8042PRT.SYS
unpack002/I386/KBDBE.DLL
unpack002/I386/KBDBR.DLL
unpack002/I386/KBDBU.DLL
unpack002/I386/KBDCA.DLL
unpack002/I386/KBDCLASS.SYS
unpack002/I386/KBDCR.DLL
unpack002/I386/KBDCZ.DLL
unpack002/I386/KBDDA.DLL
unpack002/I386/KBDDV.DLL
unpack002/I386/KBDES.DLL
unpack002/I386/KBDFC.DLL
unpack002/I386/KBDFI.DLL
unpack002/I386/KBDFR.DLL
unpack002/I386/KBDGR.DLL
unpack002/I386/KBDHE.DLL
unpack002/I386/KBDHE220.DLL
unpack002/I386/KBDHE319.DLL
unpack002/I386/KBDHELA2.DLL
unpack002/I386/KBDHELA3.DLL
unpack002/I386/KBDHU.DLL
unpack002/I386/KBDHU1.DLL
unpack002/I386/KBDIC.DLL
unpack002/I386/KBDIT.DLL
unpack002/I386/KBDIT142.DLL
unpack002/I386/KBDLA.DLL
unpack002/I386/KBDNE.DLL
unpack002/I386/KBDNO.DLL
unpack002/I386/KBDPL.DLL
unpack002/I386/KBDPL1.DLL
unpack002/I386/KBDPO.DLL
unpack002/I386/KBDRO.DLL
unpack002/I386/KBDRU.DLL
unpack002/I386/KBDSF.DLL
unpack002/I386/KBDSG.DLL
unpack002/I386/KBDSL.DLL
unpack002/I386/KBDSP.DLL
unpack002/I386/KBDSW.DLL
unpack002/I386/KBDTUF.DLL
unpack002/I386/KBDTUQ.DLL
unpack002/I386/KBDUK.DLL
unpack002/I386/KBDUS.DLL
unpack002/I386/KBDUSL.DLL
unpack002/I386/KBDUSR.DLL
unpack002/I386/KBDUSX.DLL
unpack002/I386/MITSUMI.SYS
unpack002/I386/MKECR5XX.SYS
unpack002/I386/NCR53C9X.SYS
unpack002/I386/NCRC700.SYS
unpack002/I386/NCRC710.SYS
unpack002/I386/NCRC810.SYS
unpack002/I386/NTDLL.DLL
unpack002/I386/NTFS.SYS
unpack002/I386/NTKRNLMP.EXE
unpack002/I386/OLISCSI.SYS
unpack002/I386/PCMCIA.SYS
unpack002/I386/QL10WNT.SYS
unpack002/I386/SCSIPORT.SYS
unpack002/I386/SETUPDD.SYS
unpack002/I386/SFLOPPY.SYS
unpack002/I386/SLCD32.SYS
unpack002/I386/SPARROW.SYS
unpack002/I386/SPDDLANG.SYS
unpack002/I386/SPOCK.SYS
unpack002/I386/T128.SYS
unpack002/I386/T13B.SYS
unpack002/I386/TGA.SYS
unpack002/I386/TMV1.SYS
unpack002/I386/ULTRA124.SYS
unpack002/I386/ULTRA14F.SYS
unpack002/I386/ULTRA24F.SYS
unpack002/I386/USETUP.EXE
unpack002/I386/VGA.SYS
unpack002/I386/VIDEOPRT.SYS
unpack002/I386/WD33C93.SYS
unpack002/I386/WINNT32.EXE

Files

Microsoft Windows NT 4.0 (''Cairo'' 4.00.1175.1 Server).7z
.7z
Microsoft Windows NT 4.0 (''Cairo'' 4.00.1175.1 Server)/4.00.1175.1_x86fre_Server_en-us-NTSRV40.iso
.iso
I386/256COLOR.BM_
.cab
256color.bmp
I386/31USERS.HL_
.cab
31USERS.HLP
I386/3DGARRO.CU_
.cab
3dgarro.cur
I386/3DGMOVE.CU_
.cab
3dgmove.cur
I386/3DGNESW.CU_
.cab
3dgnesw.cur
I386/3DGNO.CU_
.cab
3dgno.cur
I386/3DGNS.CU_
.cab
3dgns.cur
I386/3DGNWSE.CU_
.cab
I386/3DGWE.CU_
.cab
I386/3DSMOVE.CU_
.cab
I386/3DSNS.CU_
.cab
I386/3DSNWSE.CU_
.cab
I386/3DWARRO.CU_
.cab
I386/3DWMOVE.CU_
.cab
I386/3DWNESW.CU_
.cab
I386/3DWNO.CU_
.cab
I386/3DWNS.CU_
.cab
I386/3DWNWSE.CU_
.cab
I386/3DWWE.CU_
.cab
I386/40291730.PP_
.cab
I386/40293930.PP_
.cab
I386/4MMDAT.SY_
.cab
I386/8514A.DL_
.cab
I386/8514A.SY_
.cab
I386/8514FIX.FO_
.cab
I386/8514FIXE.FO_
.cab
I386/8514FIXG.FO_
.cab
I386/8514FIXR.FO_
.cab
I386/8514FIXT.FO_
.cab
I386/8514OEM.FO_
.cab
I386/8514OEME.FO_
.cab
I386/8514OEMG.FO_
.cab
I386/8514OEMR.FO_
.cab
I386/8514OEMT.FO_
.cab
I386/8514SYS.FO_
.cab
I386/8514SYSE.FO_
.cab
I386/8514SYSG.FO_
.cab
I386/8514SYSR.FO_
.cab
I386/8514SYST.FO_
.cab
I386/AB32.DL_
.cab
I386/ABIOSDSK.SYS
.sys windows:4 windows x86 arch:x86

ce5f8b3b518d409d9305146d0a430d6a

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

ntoskrnl.exe

KeI386AbiosCall
KeI386FlatToGdtSelector
ExAllocatePoolWithTag
IoCreateController
RtlFreeUnicodeString
KeInitializeTimer
IoCreateDevice
RtlAnsiStringToUnicodeString
RtlInitString
sprintf
ZwClose
ZwMakeTemporaryObject
ZwCreateDirectoryObject
KeI386ReleaseLid
KeInitializeDpc
IoAllocateController
IoAllocateAdapterChannel
KeSynchronizeExecution
KeSetTimer
MmMapLockedPages
memmove
IoStartNextPacket
IoFreeController
IoSetHardErrorOrVerifyDevice
KeCancelTimer
KeInsertQueueDpc
IoWriteErrorLogEntry
IoAllocateErrorLogEntry
IoConnectInterrupt
IoDeleteController
IoDisconnectInterrupt
ExFreePool
KeI386GetLid
IoGetConfigurationInformation
KeI386AllocateGdtSelectors
IofCompleteRequest
KeI386ReleaseGdtSelectors
IoStartPacket

hal

IoSetPartitionInformation
IoWritePartitionTable
IoFlushAdapterBuffers
IoFreeMapRegisters
KeStallExecutionProcessor
IoReadPartitionTable
HalGetInterruptVector
IoMapTransfer
HalGetAdapter

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 352B - Virtual size: 348B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 32B - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

INIT
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 960B - Virtual size: 936B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 352B - Virtual size: 338B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/AC500503.PP_
.cab
I386/ACCESS.CP_
.cab
I386/ACCESS.HL_
.cab
I386/ACLEDIT.DL_
.cab
I386/ADP.BI_
.cab
I386/ADVAPI32.DL_
.cab
I386/AFD.SY_
.cab
I386/AGFAP400.PP_
.cab
I386/AHA154X.SYS
.sys windows:4 windows x86 arch:x86

3ff663ac4f6c3e2f00f298fd26187c7e

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

scsiport.sys

ScsiPortGetDeviceBase
ScsiPortGetPhysicalAddress
ScsiPortLogError
ScsiPortGetUncachedExtension
ScsiPortWritePortUchar
ScsiPortGetBusData
ScsiPortFreeDeviceBase
ScsiPortConvertUlongToPhysicalAddress
ScsiPortReadPortUchar
ScsiPortInitialize
ScsiPortReadRegisterUchar
ScsiPortStallExecution
ScsiPortNotification
ScsiPortGetLogicalUnit
ScsiPortGetVirtualAddress
ScsiPortMoveMemory
ScsiPortCompleteRequest

Sections

.text
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 224B - Virtual size: 220B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

INIT
Size: 576B - Virtual size: 572B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 960B - Virtual size: 940B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 288B - Virtual size: 270B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/AHA174X.SYS
.sys windows:4 windows x86 arch:x86

1a3bffcadaf0f5ccfe6763e567bad75c

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

scsiport.sys

ScsiPortCompleteRequest
ScsiPortConvertUlongToPhysicalAddress
ScsiPortReadPortUchar
ScsiPortFreeDeviceBase
ScsiPortGetDeviceBase
ScsiPortNotification
ScsiPortGetPhysicalAddress
ScsiPortGetSrb
ScsiPortInitialize
ScsiPortLogError
ScsiPortGetVirtualAddress
ScsiPortWritePortUchar
ScsiPortReadPortUlong
ScsiPortMoveMemory
ScsiPortWritePortUlong
ScsiPortStallExecution

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 224B - Virtual size: 220B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

INIT
Size: 544B - Virtual size: 528B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 960B - Virtual size: 944B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 256B - Virtual size: 230B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/AIC78XX.SYS
.sys windows:4 windows x86 arch:x86

14d2768ad5c4d317e45cc1719b8f51e9

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

scsiport.sys

ScsiPortLogError
ScsiPortWritePortUchar
ScsiPortInitialize
ScsiPortSetBusDataByOffset
ScsiPortGetBusData
ScsiPortGetPhysicalAddress
ScsiPortReadPortUchar
ScsiPortGetUncachedExtension
ScsiPortGetDeviceBase
ScsiPortNotification
ScsiPortCompleteRequest
ScsiPortGetSrb
ScsiPortMoveMemory

Sections

.text
Size: 25KB - Virtual size: 25KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 224B - Virtual size: 204B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

INIT
Size: 448B - Virtual size: 430B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 960B - Virtual size: 948B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/ALJII523.PP_
.cab
I386/ALRSVC.DL_
.cab
I386/ALWAYS.SYS
.sys windows:4 windows x86 arch:x86

a224f8be03b30536ef3076d71466bb66

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

scsiport.sys

ScsiPortReadPortBufferUshort
ScsiPortWritePortUchar
ScsiPortLogError
ScsiPortFreeDeviceBase
ScsiPortGetDeviceBase
ScsiPortConvertUlongToPhysicalAddress
ScsiPortWritePortUshort
ScsiPortWritePortBufferUshort
ScsiPortReadPortUchar
ScsiPortGetPhysicalAddress
ScsiPortNotification
ScsiPortCompleteRequest
ScsiPortStallExecution
ScsiPortGetLogicalUnit
ScsiPortGetUncachedExtension
ScsiPortInitialize

Sections

.text
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 256B - Virtual size: 256B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

INIT
Size: 576B - Virtual size: 558B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 960B - Virtual size: 960B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 448B - Virtual size: 436B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/AM1500T.SY_
.cab
I386/AMCHR518.PP_
.cab
I386/AMDDLG.DL_
.cab
I386/AMDNCDET.DL_
.cab
I386/AMDPCN.SY_
.cab
I386/AMI0NT.SYS
.sys windows:4 windows x86 arch:x86

17b828ca06bfbd3d0fdbaccd6b90cc06

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

scsiport.sys

ScsiPortFreeDeviceBase
ScsiPortGetPhysicalAddress
ScsiPortLogError
ScsiPortGetUncachedExtension
ScsiPortConvertUlongToPhysicalAddress
ScsiPortGetDeviceBase
ScsiPortReadPortUchar
ScsiPortInitialize
ScsiPortStallExecution
ScsiPortWritePortUchar
ScsiPortNotification
ScsiPortGetVirtualAddress
ScsiPortMoveMemory
ScsiPortCompleteRequest

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 288B - Virtual size: 264B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 256B - Virtual size: 234B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

INIT
Size: 512B - Virtual size: 484B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 960B - Virtual size: 956B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 352B - Virtual size: 344B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/AMSINT.SYS
.sys windows:4 windows x86 arch:x86

68d9b5924d991e94be385f61a3d368fb

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

scsiport.sys

ScsiPortGetSrb
ScsiPortWritePortUchar
ScsiPortReadPortUchar
ScsiPortReadRegisterBufferUchar
ScsiPortReadPortBufferUchar
ScsiPortGetVirtualAddress
ScsiPortReadPortUlong
ScsiPortWritePortUlong
ScsiPortNotification
ScsiPortGetLogicalUnit
ScsiPortLogError
ScsiPortInitialize
ScsiPortStallExecution
ScsiPortCompleteRequest
ScsiPortGetPhysicalAddress
ScsiPortGetUncachedExtension
ScsiPortConvertUlongToPhysicalAddress
ScsiPortGetDeviceBase
ScsiPortFreeDeviceBase
ScsiPortSetBusDataByOffset
ScsiPortGetBusData

Sections

.text
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 256B - Virtual size: 242B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

INIT
Size: 704B - Virtual size: 700B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 928B - Virtual size: 924B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 448B - Virtual size: 436B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/ANSI.SY_
.cab
I386/ANSI.TR_
.cab
I386/APLW8101.PP_
.cab
I386/APLWGRI.PP_
.cab
I386/APLWIIF1.PP_
.cab
I386/APLWIIG1.PP_
.cab
I386/APLWNTR1.PP_
.cab
I386/APLWSEL.PP_
.cab
I386/APP850.FO_
.cab
I386/APP852.FO_
.cab
I386/APP857.FO_
.cab
I386/APP866.FO_
.cab
I386/APPEND.EX_
.cab
I386/APPLE230.PP_
.cab
I386/APPLE380.PP_
.cab
I386/APPLE422.PP_
.cab
I386/APPSTAR2.AN_
.cab
I386/APPSTAR3.AN_
.cab
I386/APPSTART.AN_
.cab
I386/APPWIZ.CP_
.cab
I386/APS08522.PP_
.cab
I386/APS12522.PP_
.cab
I386/APS26522.PP_
.cab
I386/APS80522.PP_
.cab
I386/APTOLLD1.PP_
.cab
I386/APTOLLW1.PP_
.cab
I386/AP_NTXJ1.PP_
.cab
I386/ARCADE.BM_
.cab
I386/ARCHES.BM_
.cab
I386/ARCHQIC.SY_
.cab
I386/ARGYLE.BM_
.cab
I386/ARIAL.TT_
.cab
I386/ARIALBD.TT_
.cab
I386/ARIALBI.TT_
.cab
I386/ARIALI.TT_
.cab
I386/ARP.EX_
.cab
I386/ARPA-127.RE_
.cab
I386/ARPA-192.RE_
.cab
I386/ARROW.SYS
.sys windows:4 windows x86 arch:x86

f6107862ccdc0303765508f3bf4f1e1a

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

scsiport.sys

ScsiPortConvertUlongToPhysicalAddress
ScsiPortReadPortUchar
ScsiPortStallExecution
ScsiPortInitialize
ScsiPortGetPhysicalAddress
ScsiPortGetUncachedExtension
ScsiPortWritePortUchar
ScsiPortFreeDeviceBase
ScsiPortGetDeviceBase
ScsiPortNotification
ScsiPortGetSrb
ScsiPortCompleteRequest

Sections

.text
Size: 26KB - Virtual size: 26KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

Init
Size: 288B - Virtual size: 273B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 320B - Virtual size: 300B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

INIT
Size: 448B - Virtual size: 424B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 960B - Virtual size: 932B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/AST__470.PP_
.cab
I386/ASYNCMAC.SY_
.cab
I386/AT.EX_
.cab
I386/ATAPI.SYS
.sys windows:4 windows x86 arch:x86

9dadf04e8054fbf3458fd7bfc2b5e30a

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

ntoskrnl.exe

_strnicmp
sprintf

scsiport.sys

ScsiPortNotification
ScsiPortCompleteRequest
ScsiPortInitialize
ScsiPortReadPortUshort
ScsiPortReadPortUchar
ScsiPortMoveMemory
ScsiPortReadPortBufferUshort
ScsiPortStallExecution
ScsiPortWritePortUchar
ScsiPortLogError
ScsiPortGetDeviceBase
ScsiPortConvertUlongToPhysicalAddress
ScsiPortFreeDeviceBase
ScsiPortGetBusData
ScsiPortWritePortBufferUshort

Sections

.text
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 288B - Virtual size: 288B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 32B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

INIT
Size: 608B - Virtual size: 578B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 928B - Virtual size: 920B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 640B - Virtual size: 614B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/ATDISK.SYS
.sys windows:4 windows x86 arch:x86

5c2e66818843cb6dab468715774c36b3

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

ntoskrnl.exe

RtlAnsiStringToUnicodeString
RtlInitString
IoCreateDevice
sprintf
HalDispatchTable
KeInitializeDpc
IoStartTimer
IoInitializeTimer
ZwMakeTemporaryObject
ZwCreateDirectoryObject
IofCompleteRequest
IoStartPacket
IoAllocateController
MmMapLockedPages
KeSynchronizeExecution
IoFreeController
KeInsertQueueDpc
IoStartNextPacketByKey
IoStopTimer
RtlFreeUnicodeString
MmMapIoSpace
IoReportResourceUsage
ZwSetValueKey
memchr
ZwCreateKey
RtlInitUnicodeString
RtlAppendUnicodeStringToString
RtlIntegerToUnicodeString
RtlCopyUnicodeString
RtlAppendUnicodeToString
ZwQueryValueKey
ZwOpenKey
strncmp
MmUnmapIoSpace
RtlEqualUnicodeString
IoQueryDeviceDescription
IoGetConfigurationInformation
IoDeleteDevice
ZwClose
IoCreateController
IoConnectInterrupt
IoDisconnectInterrupt
IoDeleteController
memmove
RtlQueryRegistryValues
DbgBreakPoint
ExAllocatePoolWithTag
ExFreePool
IoWriteErrorLogEntry
IoAllocateErrorLogEntry

hal

HalSetBusData
HalGetBusData
HalGetInterruptVector
HalTranslateBusAddress
READ_PORT_BUFFER_USHORT
KeStallExecutionProcessor
READ_PORT_UCHAR
WRITE_PORT_BUFFER_USHORT
IoSetPartitionInformation
IoWritePartitionTable
IoReadPartitionTable
WRITE_PORT_UCHAR

Sections

.text
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 416B - Virtual size: 396B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 64B - Virtual size: 42B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

INIT
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 928B - Virtual size: 908B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 928B - Virtual size: 910B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/ATI.DL_
.cab
I386/ATI.SY_
.cab
I386/ATKCTRS.DL_
.cab
I386/ATSVC.EX_
.cab
I386/ATTRIB.EX_
.cab
I386/AUDIOCDC.HL_
.cab
I386/AUTOCHK.EXE
.sys windows:4 windows x86 arch:x86

9a436a08cead61dac34eeaed454a9b0c

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

ntdll

RtlLargeIntegerDivide
wcsstr
NtClose
NtQueryValueKey
RtlInitUnicodeString
NtOpenKey
NtQueryInformationFile
NtOpenFile
NtDeviceIoControlFile
NtReadFile
NtWriteFile
NtFsControlFile
memmove
RtlAllocateHeap
RtlFreeHeap
wcscmp
_wcsicmp
RtlOemToUnicodeN
RtlMultiByteToUnicodeN
sprintf
RtlUnicodeToOemN
RtlUnicodeToMultiByteN
_wcsupr
_wcslwr
RtlDosPathNameToNtPathName_U
NtShutdownSystem
NtAdjustPrivilegesToken
RtlConvertUlongToLargeInteger
NtOpenProcessToken
NtQuerySystemTime
RtlSystemTimeToLocalTime
NtQuerySystemInformation
NtQuerySymbolicLinkObject
NtOpenSymbolicLinkObject
RtlExpandEnvironmentStrings_U
NtSetInformationFile
RtlConvertLongToLargeInteger
NtCreateFile
RtlLengthSid
RtlSizeHeap
NtDisplayString
RtlExtendedIntegerMultiply
wcslen
RtlQueryRegistryValues
RtlWriteRegistryValue
RtlSubAuthoritySid
RtlInitializeSid
RtlLengthRequiredSid
RtlAddAce
RtlCopySid
RtlCreateAcl
RtlQueryInformationAcl
RtlLengthSecurityDescriptor
RtlValidSecurityDescriptor
RtlNewSecurityObject
RtlSetDaclSecurityDescriptor
RtlSetGroupSecurityDescriptor
RtlSetOwnerSecurityDescriptor
RtlCreateSecurityDescriptor
RtlAddAccessAllowedAce
RtlTimeToTimeFields
RtlFreeUnicodeString
RtlFormatMessage
RtlAnsiStringToUnicodeString
RtlInitAnsiString
RtlFindMessage
wcscpy
swprintf
RtlUpcaseUnicodeString
DbgPrint
RtlRaiseStatus
RtlDecompressBuffer
RtlSetBits
RtlInitializeBitMap
RtlInsertElementGenericTable
RtlInitializeGenericTable
RtlDeleteElementGenericTable
RtlFindSetBits
RtlClearBits
RtlLookupElementGenericTable
RtlEnumerateGenericTableWithoutSplaying
RtlNumberOfSetBits
_chkstk
RtlUnwind
NtTerminateProcess
DbgBreakPoint
RtlUnicodeStringToAnsiString
RtlNormalizeProcessParams

Sections

.text
Size: 250KB - Virtual size: 249KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 44KB - Virtual size: 127KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 68KB - Virtual size: 67KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/AUTOCONV.EX_
.cab
I386/AUTOEXEC.NT_
.cab
I386/AUTOSETP.EX_
.cab
I386/AVICAP.DL_
.cab
I386/AVICAP32.DL_
.cab
I386/AVIFIL32.DL_
.cab
I386/AVIFILE.DL_
.cab
I386/AWPRT.CN_
.cab
I386/AWPRT.HL_
.cab
I386/A_PNT518.PP_
.cab
I386/BACKUP.CN_
.cab
I386/BACKUP.EX_
.cab
I386/BACKUP.FT_
.cab
I386/BACKUP.HL_
.cab
I386/BALL.BM_
.cab
I386/BANANA.AN_
.cab
I386/BARBER.AN_
.cab
I386/BASESRV.DL_
.cab
I386/BEEP.SY_
.cab
I386/BHCTRL.CP_
.cab
I386/BHMON.DL_
.cab
I386/BHNETB.DL_
.cab
I386/BHNT.SY_
.cab
I386/BHSUPP.DL_
.cab
I386/BIOS1.RO_
.cab
I386/BIOS4.RO_
.cab
I386/BLACK16.SC_
.cab
I386/BOOT._
.cab
I386/BOOTOK.EX_
.cab
I386/BOOTVRFY.EX_
.cab
I386/BRHJ770.DL_
.cab
I386/BROTHER9.DL_
.cab
I386/BROTHR24.DL_
.cab
I386/BROWSER.DL_
.cab
I386/BUSLOGIC.SYS
.sys windows:4 windows x86 arch:x86

add80609ca4ae3cbfeae76b434d170a1

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

scsiport.sys

ScsiPortGetDeviceBase
ScsiPortReadPortUchar
ScsiPortGetPhysicalAddress
ScsiPortLogError
ScsiPortGetUncachedExtension
ScsiPortWritePortUchar
ScsiPortConvertUlongToPhysicalAddress
ScsiPortValidateRange
ScsiPortInitialize
ScsiPortFreeDeviceBase
ScsiPortNotification
ScsiPortGetLogicalUnit
ScsiPortCompleteRequest
ScsiPortStallExecution
ScsiPortGetVirtualAddress
ScsiPortMoveMemory

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 224B - Virtual size: 220B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 64B - Virtual size: 52B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

INIT
Size: 544B - Virtual size: 542B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 960B - Virtual size: 948B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 288B - Virtual size: 280B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/BUSMOUSE.SY_
.cab
I386/CACHE._
.cab
I386/CACLS.EX_
.cab
I386/CALC.CN_
.cab
I386/CALC.EX_
.cab
I386/CALC.HL_
.cab
I386/CANON330.DL_
.cab
I386/CANON800.DL_
.cab
I386/CANONLBP.DL_
.cab
I386/CANYON.MI_
.cab
I386/CARDS.DL_
.cab
I386/CARS.BM_
.cab
I386/CASTLE.BM_
.cab
I386/CDAUDIO.SY_
.cab
I386/CDFS.SYS
.sys windows:4 windows x86 arch:x86

725096719542844bef8b0ca345fe0e03

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

ntoskrnl.exe

KeGetCurrentThread
CcPurgeCacheSection
ExLocalTimeToSystemTime
RtlTimeFieldsToTime
CcSetFileSizes
CcInitializeCacheMap
IoCreateStreamFileObject
CcUninitializeCacheMap
CcMdlReadComplete
InterlockedDecrement
InterlockedIncrement
MmFlushImageSection
KeLeaveCriticalRegion
IoIsOperationSynchronous
KeEnterCriticalRegion
KeBugCheckEx
FsRtlIsNtstatusExpected
IoSetDeviceToVerify
IoRaiseHardError
IoGetDeviceToVerify
IofCompleteRequest
IoSetTopLevelIrp
IoGetInitialStack
IoGetTopLevelIrp
FsRtlFastCheckLockForRead
IoGetCurrentProcess
IoRegisterFileSystem
IoCreateDevice
RtlInitUnicodeString
MmQuerySystemSize
KeInitializeEvent
ExInitializeResourceLite
FsRtlCopyRead
IoRemoveShareAccess
FsRtlOplockIsFastIoPossible
FsRtlFastUnlockAll
IoGetRequestorProcess
FsRtlCheckOplock
FsRtlNotifyCleanup
ExAcquireResourceExclusiveLite
ExQueueWorkItem
FsRtlDoesNameContainWildCards
memmove
IoUpdateShareAccess
IoCheckShareAccess
IoSetShareAccess
FsRtlCurrentBatchOplock
IofCallDriver
MmMapLockedPages
FsRtlNormalizeNtstatus
KeWaitForSingleObject
IoBuildSynchronousFsdRequest
IoFreeMdl
ExAllocatePoolWithTag
ObfDereferenceObject
IoBuildDeviceIoControlRequest
IoFreeIrp
IoBuildPartialMdl
IoMakeAssociatedIrp
KeResetEvent
KeSetEvent
InterlockedExchange
ExReleaseResourceForThreadLite
FsRtlNotifyFullChangeDirectory
RtlUpcaseUnicodeString
CcMapData
RtlOemToUnicodeN
ExAcquireResourceSharedLite
IoDeleteDevice
KeInitializeSpinLock
RtlOemStringToCountedUnicodeString
FsRtlOplockFsctrl
IoReleaseVpbSpinLock
IoAcquireVpbSpinLock
ObReferenceObjectByHandle
IoFileObjectType
SeSinglePrivilegeCheck
FsRtlProcessFileLock
FsRtlPrivateLock
FsRtlFastUnlockSingle
FsRtlFastUnlockAllByKey
FsRtlIsFatDbcsLegal
RtlUnicodeStringToCountedOemString
RtlGenerate8dot3Name
FsRtlIsNameInExpression
RtlCompareMemory
RtlDelete
RtlSplay
CcMdlRead
CcCopyRead
CcSetReadAheadGranularity
FsRtlCheckLockForReadAccess
ExIsResourceAcquiredSharedLite
RtlInitializeGenericTable
FsRtlNotifyInitializeSync
FsRtlNotifyUninitializeSync
ExDeleteResourceLite
RtlInsertElementGenericTable
FsRtlInitializeFileLock
RtlDeleteElementGenericTable
RtlLookupElementGenericTable
RtlEnumerateGenericTableWithoutSplaying
FsRtlUninitializeOplock
FsRtlUninitializeFileLock
IoSetHardErrorOrVerifyDevice
IoVerifyVolume
RtlUnwind
ExRaiseStatus
ExReleaseResourceLite
CcUnpinData
ExFreePool
MmProbeAndLockPages
IoAllocateMdl

hal

KfAcquireSpinLock
KfReleaseSpinLock
KeGetCurrentIrql
ExAcquireFastMutex
ExReleaseFastMutex

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 544B - Virtual size: 544B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

PAGE
Size: 43KB - Virtual size: 43KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

INIT
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 928B - Virtual size: 920B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/CDPLAYER.CN_
.cab
I386/CDPLAYER.EX_
.cab
I386/CDPLAYER.FT_
.cab
I386/CDPLAYER.HL_
.cab
I386/CDROM.SYS
.sys windows:4 windows x86 arch:x86

49148f0a51eed9dba0f689d7a16372d1

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

ntoskrnl.exe

IofCompleteRequest
RtlCompareMemory
strncmp
IoBuildAsynchronousFsdRequest
KeWaitForSingleObject
IoBuildDeviceIoControlRequest
KeInitializeEvent
KeSetEvent
IoAllocateMdl
memmove
RtlQueryRegistryValues
IoFreeMdl
ExfInterlockedInsertHeadList
IoSetHardErrorOrVerifyDevice
MmBuildMdlForNonPagedPool
IofCallDriver
KeInitializeSpinLock
sprintf
RtlFreeUnicodeString
IoInitializeTimer
IoAllocateIrp
IoFreeIrp
IoDeleteDevice
IoStartTimer
ExAllocatePoolWithTag
IoGetConfigurationInformation
RtlInitUnicodeString
IoCreateNotificationEvent
ExfInterlockedInsertTailList
ExFreePool
ExfInterlockedRemoveHeadList

hal

KfAcquireSpinLock
KfReleaseSpinLock

class2.sys

ScsiClassAsynchronousCompletion
ScsiClassDeviceControl
ScsiClassBuildRequest
ScsiClassSplitRequest
ScsiClassFindModePage
ScsiClassInterpretSenseInfo
ScsiClassCreateDeviceObject
ScsiClassReleaseQueue
ScsiClassClaimDevice
ScsiClassSendSrbSynchronous
ScsiClassReadDriveCapacity
ScsiClassGetInquiryData
ScsiClassInitialize
ScsiClassGetCapabilities

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 352B - Virtual size: 348B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

PAGE
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

INIT
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 928B - Virtual size: 924B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 480B - Virtual size: 456B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/CFGMGR32.DL_
.cab
I386/CFM30.DL_
.cab
I386/CFM30U.DL_
.cab
I386/CFMO30.DL_
.cab
I386/CFMO30U.DL_
.cab
I386/CG94_493.PP_
.cab
I386/CGA40737.FO_
.cab
I386/CGA40850.FO_
.cab
I386/CGA40852.FO_
.cab
I386/CGA40857.FO_
.cab
I386/CGA40866.FO_
.cab
I386/CGA40869.FO_
.cab
I386/CGA40WOA.FO_
.cab
I386/CGA80737.FO_
.cab
I386/CGA80850.FO_
.cab
I386/CGA80852.FO_
.cab
I386/CGA80857.FO_
.cab
I386/CGA80866.FO_
.cab
I386/CGA80869.FO_
.cab
I386/CGA80WOA.FO_
.cab
I386/CHANGER.SY_
.cab
I386/CHARMAP.CN_
.cab
I386/CHARMAP.EX_
.cab
I386/CHARMAP.HL_
.cab
I386/CHCP.CO_
.cab
I386/CHIMES.WA_
.cab
I386/CHITZ.BM_
.cab
I386/CHKDSK.EX_
.cab
I386/CHORD.WA_
.cab
I386/CIRRUS.DL_
.cab
I386/CIRRUS.SYS
.sys windows:4 windows x86 arch:x86

8e88fc265b17f0648e123db63dd50935

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

videoprt.sys

VideoPortMoveMemory
VideoPortZeroMemory
VideoPortGetDeviceBase
VideoPortVerifyAccessRanges
VideoPortGetDeviceData
VideoPortInt10
VideoPortUnmapMemory
VideoPortMapBankedMemory
VideoPortMapMemory
VideoPortSetTrappedEmulatorPorts
VideoPortWritePortUchar
VideoPortWriteRegisterBufferUchar
VideoPortReadPortUchar
VideoPortWritePortUshort
VideoPortInitialize
VideoPortReadRegisterUchar
VideoPortWriteRegisterUchar
VideoPortSynchronizeExecution
VideoPortReadPortUshort
VideoPortReadPortUlong
VideoPortWritePortUlong
VideoPortFreeDeviceBase
VideoPortScanRom
VideoPortGetAccessRanges
VideoPortSetRegistryParameters
VideoPortCompareMemory
VideoPortWritePortBufferUshort
VideoPortZeroDeviceMemory

Sections

.text
Size: 416B - Virtual size: 397B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 288B - Virtual size: 268B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 32B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

PAGE
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

PAGE
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

INIT
Size: 928B - Virtual size: 928B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 960B - Virtual size: 936B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/CIT24US.DL_
.cab
I386/CIT9US.DL_
.cab
I386/CITOH.DL_
.cab
I386/CLASS2.SYS
.sys windows:4 windows x86 arch:x86

4adffc3e2baaedfde84240b2a320f28e

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

ntoskrnl.exe

MmUnlockPages
RtlAnsiStringToUnicodeString
RtlInitString
sprintf
IofCompleteRequest
IofCallDriver
IoSetHardErrorOrVerifyDevice
KeWaitForSingleObject
IoBuildDeviceIoControlRequest
KeInitializeEvent
ExFreePool
ExAllocatePoolWithTag
IoAllocateIrp
IoFreeIrp
IoFreeMdl
IoGetDeviceObjectPointer
ExfInterlockedPushEntryList
InterlockedDecrement
KeDelayExecutionThread
IoWriteErrorLogEntry
RtlExtendedIntegerMultiply
IoAllocateErrorLogEntry
ExfInterlockedPopEntryList
MmBuildMdlForNonPagedPool
IoAllocateMdl
InterlockedIncrement
RtlFreeUnicodeString
IoCreateDevice
ObReferenceObjectByPointer
ObfDereferenceObject

Exports

Exports

ScsiClassAsynchronousCompletion
ScsiClassBuildRequest
ScsiClassClaimDevice
ScsiClassCreateDeviceObject
ScsiClassDeviceControl
ScsiClassFindModePage
ScsiClassFindUnclaimedDevices
ScsiClassGetCapabilities
ScsiClassGetInquiryData
ScsiClassInitialize
ScsiClassInternalIoControl
ScsiClassInterpretSenseInfo
ScsiClassIoComplete
ScsiClassIoCompleteAssociated
ScsiClassModeSense
ScsiClassReadDriveCapacity
ScsiClassReleaseQueue
ScsiClassRemoveDevice
ScsiClassSendSrbAsynchronous
ScsiClassSendSrbSynchronous
ScsiClassSplitRequest

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 288B - Virtual size: 283B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

PAGE
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.edata
Size: 800B - Virtual size: 782B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

INIT
Size: 864B - Virtual size: 858B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 928B - Virtual size: 912B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 384B - Virtual size: 364B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/CLB.DL_
.cab
I386/CLIP01.SE_
.cab
I386/CLIP02.SE_
.cab
I386/CLIP03.SE_
.cab
I386/CLIPBRD.CN_
.cab
I386/CLIPBRD.EX_
.cab
I386/CLIPBRD.FT_
.cab
I386/CLIPBRD.HL_
.cab
I386/CLIPSRV.EX_
.cab
I386/CLOCK.AV_
.cab
I386/CLOCK.EX_
.cab
I386/CMC.DL_
.cab
I386/CMD.EX_
.cab
I386/CMOS.RA_
.cab
I386/CNLBP4_1.PP_
.cab
I386/CNLBP8R1.PP_
.cab
I386/CNLBP8T1.PP_
.cab
I386/CNLBP8_1.PP_
.cab
I386/CNVFAT.DL_
.cab
I386/CN_500J1.PP_
.cab
I386/CN_500_1.PP_
.cab
I386/COIN.AN_
.cab
I386/COLORQ.PP_
.cab
I386/COMCTL32.DL_
.cab
I386/COMDLG32.DL_
.cab
I386/COMM.DR_
.cab
I386/COMM01.SE_
.cab
I386/COMM02.SE_
.cab
I386/COMMAND.CO_
.cab
I386/COMMDLG.DL_
.cab
I386/COMMON.HL_
.cab
I386/COMP.EX_
.cab
I386/COMPACT.EX_
.cab
I386/COMPOBJ.DL_
.cab
I386/COMPSTUI.DL_
.cab
I386/CONFIG.NT_
.cab
I386/CONN01.SE_
.cab
I386/CONN02.SE_
.cab
I386/CONSOLE.CP_
.cab
I386/CONTROL.CN_
.cab
I386/CONTROL.EX_
.cab
I386/CONTROL.HL_
.cab
I386/CONVERT.EX_
.cab
I386/COUNTER.AN_
.cab
I386/COUNTRY.SY_
.cab
I386/COUR.TT_
.cab
I386/COURBD.TT_
.cab
I386/COURBI.TT_
.cab
I386/COURE.FO_
.cab
I386/COUREE.FO_
.cab
I386/COUREG.FO_
.cab
I386/COURER.FO_
.cab
I386/COURET.FO_
.cab
I386/COURF.FO_
.cab
I386/COURFE.FO_
.cab
I386/COURFG.FO_
.cab
I386/COURFR.FO_
.cab
I386/COURFT.FO_
.cab
I386/COURI.TT_
.cab
I386/CPPMQ151.PP_
.cab
I386/CPPMQ201.PP_
.cab
I386/CPQARRAY.SYS
.sys windows:4 windows x86 arch:x86

20914e685eb252bd419444ecb2cab11e

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

scsiport.sys

ScsiPortGetVirtualAddress
ScsiPortWritePortUlong
ScsiPortReadPortUlong
ScsiPortWritePortUchar
ScsiPortNotification
ScsiPortGetPhysicalAddress
ScsiPortWritePortUshort
ScsiPortStallExecution
ScsiPortReadPortUchar
ScsiPortLogError
ScsiPortGetBusData
ScsiPortConvertUlongToPhysicalAddress
ScsiPortGetLogicalUnit
ScsiPortMoveMemory
ScsiPortGetUncachedExtension
ScsiPortGetDeviceBase
ScsiPortSetBusDataByOffset
ScsiPortFreeDeviceBase
ScsiPortInitialize

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 224B - Virtual size: 220B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 32B - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

INIT
Size: 640B - Virtual size: 632B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 960B - Virtual size: 936B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 256B - Virtual size: 230B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/CREAT01.SE_
.cab
I386/CREAT02.SE_
.cab
I386/CROSS.CU_
.cab
I386/CRTDLL.DL_
.cab
I386/CSRSRV.DL_
.cab
I386/CSRSS.EX_
.cab
I386/CTYPE.NL_
.cab
I386/CXBIOS.BI_
.cab
I386/CXFEP.BI_
.cab
I386/C_037.NLS
I386/C_10000.NLS
I386/C_10001.NLS
I386/C_10006.NLS
I386/C_10007.NLS
I386/C_10029.NLS
I386/C_10079.NLS
I386/C_10081.NLS
I386/C_1026.NLS
I386/C_1250.NLS
I386/C_1251.NLS
I386/C_1252.NLS
I386/C_1253.NLS
I386/C_1254.NLS
I386/C_1255.NLS
I386/C_1256.NLS
I386/C_1257.NLS
I386/C_1258.NLS
I386/C_20866.NLS
I386/C_28592.NLS
I386/C_437.NLS
I386/C_500.NLS
I386/C_737.NLS
I386/C_850.NLS
I386/C_852.NLS
I386/C_855.NLS
I386/C_857.NLS
I386/C_860.NLS
I386/C_861.NLS
I386/C_863.NLS
I386/C_865.NLS
I386/C_866.NLS
I386/C_869.NLS
I386/C_875.NLS
I386/DAC960NT.SYS
.sys windows:4 windows x86 arch:x86

8d64022e76ba489b3b745a14827d923c

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

scsiport.sys

ScsiPortFreeDeviceBase
ScsiPortReadPortUchar
ScsiPortStallExecution
ScsiPortWritePortUlong
ScsiPortReadPortUshort
ScsiPortGetPhysicalAddress
ScsiPortGetUncachedExtension
ScsiPortConvertUlongToPhysicalAddress
ScsiPortWritePortUchar
ScsiPortReadPortUlong
ScsiPortGetDeviceBase
ScsiPortLogError
ScsiPortWritePortUshort
ScsiPortCompleteRequest
ScsiPortNotification
ScsiPortInitialize

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 224B - Virtual size: 220B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

INIT
Size: 544B - Virtual size: 544B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 960B - Virtual size: 944B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 320B - Virtual size: 318B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/DATAP462.PP_
.cab
I386/DC1152F1.PP_
.cab
I386/DC1152_1.PP_
.cab
I386/DC2150P1.PP_
.cab
I386/DC21X4.HL_
.cab
I386/DC21X4.SY_
.cab
I386/DC2250P1.PP_
.cab
I386/DC3500_1.PP_
.cab
I386/DC5100N1.PP_
.cab
I386/DCD11501.PP_
.cab
I386/DCD21501.PP_
.cab
I386/DCD22501.PP_
.cab
I386/DCIMAN32.DL_
.cab
I386/DCKPS201.PP_
.cab
I386/DCKPS321.PP_
.cab
I386/DCKPS401.PP_
.cab
I386/DCLF02F1.PP_
.cab
I386/DCLF02_1.PP_
.cab
I386/DCLN03R1.PP_
.cab
I386/DCLPS171.PP_
.cab
I386/DCLPS201.PP_
.cab
I386/DCLPS321.PP_
.cab
I386/DCLPS401.PP_
.cab
I386/DCPS1721.PP_
.cab
I386/DCPS1761.PP_
.cab
I386/DCTPS201.PP_
.cab
I386/DDEML.DL_
.cab
I386/DDESHARE.CN_
.cab
I386/DDESHARE.EX_
.cab
I386/DDESHARE.HL_
.cab
I386/DEBMP.DL_
.cab
I386/DEBUG.EX_
.cab
I386/DEC24PIN.DL_
.cab
I386/DEC3200.DL_
.cab
I386/DEC3250.PP_
.cab
I386/DEC9PIN.DL_
.cab
I386/DECCOLOR.PP_
.cab
I386/DECPSMON.DL_
.cab
I386/DECPSMON.HL_
.cab
I386/DEFAULT._
.cab
I386/DEFDDI.HL_
.cab
I386/DEFEA.DL_
.cab
I386/DEFEA.SY_
.cab
I386/DEFPA.DL_
.cab
I386/DEFPA.SY_
.cab
I386/DEHEX.DL_
.cab
I386/DELLDSA.SYS
.sys windows:4 windows x86 arch:x86

0823b21493e85237fe59153d43458300

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

scsiport.sys

ScsiPortReadPortUshort
ScsiPortReadPortUchar
ScsiPortWritePortUchar
ScsiPortGetPhysicalAddress
ScsiPortWritePortUlong
ScsiPortNotification
ScsiPortCompleteRequest
ScsiPortStallExecution
ScsiPortGetBusData
ScsiPortGetUncachedExtension
ScsiPortLogError
ScsiPortGetDeviceBase
ScsiPortInitialize

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 224B - Virtual size: 204B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

INIT
Size: 448B - Virtual size: 438B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 928B - Virtual size: 924B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 192B - Virtual size: 186B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/DELL_DGX.SY_
.cab
I386/DEMET.DL_
.cab
I386/DEMIL32.DL_
.cab
I386/DESK.CP_
.cab
I386/DESKTOP.IN_
.cab
I386/DESS.DL_
.cab
I386/DEVAPPS.CP_
.cab
I386/DEWP.DL_
.cab
I386/DGCONFIG.CN_
.cab
I386/DGCONFIG.DL_
.cab
I386/DGCONFIG.HL_
.cab
I386/DHCPADMN.CN_
.cab
I386/DHCPADMN.EX_
.cab
I386/DHCPADMN.HL_
.cab
I386/DHCPCSVC.DL_
.cab
I386/DHCPMIB.DL_
.cab
I386/DHCPSAPI.DL_
.cab
I386/DHCPSSVC.DL_
.cab
I386/DIALER.CN_
.cab
I386/DIALER.HL_
.cab
I386/DICONIX.DL_
.cab
I386/DIGIFEP5.SY_
.cab
I386/DIGIINST.DL_
.cab
I386/DING.WA_
.cab
I386/DINOSAU2.AN_
.cab
I386/DINOSAUR.AN_
.cab
I386/DISK.SYS
.sys windows:4 windows x86 arch:x86

1389f307d852c3918c860f80a3482f3e

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

ntoskrnl.exe

KeInitializeEvent
IoWriteErrorLogEntry
IoAllocateErrorLogEntry
strncmp
IoBuildSynchronousFsdRequest
memmove
IoBuildDeviceIoControlRequest
IofCallDriver
RtlUnicodeStringToAnsiString
ZwQueryValueKey
RtlInitUnicodeString
ZwOpenKey
IoAllocateIrp
IoCreateDevice
KeWaitForSingleObject
RtlInitString
IofCompleteRequest
IoSetHardErrorOrVerifyDevice
RtlFreeUnicodeString
RtlAnsiStringToUnicodeString
ZwCreateDirectoryObject
ZwClose
IoDeleteDevice
ZwMakeTemporaryObject
ExAllocatePoolWithTag
HalDispatchTable
sprintf
IoGetConfigurationInformation
KeInitializeSpinLock
ExInitializeZone
RtlFreeAnsiString
ExFreePool
RtlCompareString

hal

IoSetPartitionInformation
IoWritePartitionTable
IoReadPartitionTable

class2.sys

ScsiClassAsynchronousCompletion
ScsiClassFindModePage
ScsiClassDeviceControl
ScsiClassSendSrbAsynchronous
ScsiClassIoComplete
ScsiClassSendSrbSynchronous
ScsiClassClaimDevice
ScsiClassModeSense
ScsiClassCreateDeviceObject
ScsiClassGetCapabilities
ScsiClassReadDriveCapacity
ScsiClassFindUnclaimedDevices
ScsiClassInitialize
ScsiClassGetInquiryData

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 672B - Virtual size: 672B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

PAGE
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

INIT
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 928B - Virtual size: 920B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 484B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/DISK1
I386/DISKCOMP.CO_
.cab
I386/DISKCOPY.CO_
.cab
I386/DISKCOPY.DL_
.cab
I386/DISKDUMP.SY_
.cab
I386/DISKPERF.EX_
.cab
I386/DISKPERF.SY_
.cab
I386/DLC.SY_
.cab
I386/DLCAPI.DL_
.cab
I386/DLTTAPE.SY_
.cab
I386/DNSREAD.TX_
.cab
I386/DNSSVC.DL_
.cab
I386/DOCPROP.DL_
.cab
I386/DOS737.FO_
.cab
I386/DOS869.FO_
.cab
I386/DOSAPP.FO_
.cab
I386/DOSCALLS.DL_
.cab
I386/DOSHELP.HL_
.cab
I386/DOSKEY.EX_
.cab
I386/DOSNET.INF
I386/DOSX.EX_
.cab
I386/DP4TY161.PP_
.cab
I386/DP4TY201.PP_
.cab
I386/DP4TYP81.PP_
.cab
I386/DPL15601.PP_
.cab
I386/DPL15804.PP_
.cab
I386/DPL20804.PP_
.cab
I386/DPLZ9601.PP_
.cab
I386/DPTSCSI.SYS
.sys windows:4 windows x86 arch:x86

9d24a8b212190e1eed03d4e550bf519d

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

scsiport.sys

ScsiPortLogError
ScsiPortConvertUlongToPhysicalAddress
ScsiPortGetDeviceBase
ScsiPortFreeDeviceBase
ScsiPortGetBusData
ScsiPortSetBusDataByOffset
ScsiPortReadPortUshort
ScsiPortStallExecution
ScsiPortNotification
ScsiPortGetSrb
ScsiPortInitialize
ScsiPortGetLogicalUnit
ScsiPortReadPortUchar
ScsiPortMoveMemory
ScsiPortWritePortUchar
ScsiPortWritePortUshort
ScsiPortReadPortUlong
ScsiPortGetPhysicalAddress
ScsiPortGetUncachedExtension

Sections

.text
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 224B - Virtual size: 220B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

INIT
Size: 640B - Virtual size: 622B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 960B - Virtual size: 952B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 576B - Virtual size: 574B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/DP_US470.PP_
.cab
I386/DRIVERS.DL_
.cab
I386/DRUM.AN_
.cab
I386/DRWATSON.EX_
.cab
I386/DRWTSN32.CN_
.cab
I386/DRWTSN32.EX_
.cab
I386/DRWTSN32.HL_
.cab
I386/DTC329X.SYS
.sys windows:4 windows x86 arch:x86

d73357cc77dded6c850ea0794a540c86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

scsiport.sys

ScsiPortReadPortUchar
ScsiPortGetPhysicalAddress
ScsiPortLogError
ScsiPortGetUncachedExtension
ScsiPortFreeDeviceBase
ScsiPortConvertUlongToPhysicalAddress
ScsiPortStallExecution
ScsiPortWritePortUchar
ScsiPortInitialize
ScsiPortGetDeviceBase
ScsiPortNotification
ScsiPortGetLogicalUnit
ScsiPortGetVirtualAddress
ScsiPortMoveMemory
ScsiPortCompleteRequest

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 320B - Virtual size: 308B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

INIT
Size: 544B - Virtual size: 514B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 960B - Virtual size: 940B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 288B - Virtual size: 260B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/EDIT.CO_
.cab
I386/EDIT.HL_
.cab
I386/EDLIN.EX_
.cab
I386/EE16.SY_
.cab
I386/EGA.CP_
.cab
I386/EGA40737.FO_
.cab
I386/EGA40850.FO_
.cab
I386/EGA40852.FO_
.cab
I386/EGA40857.FO_
.cab
I386/EGA40866.FO_
.cab
I386/EGA40869.FO_
.cab
I386/EGA40WOA.FO_
.cab
I386/EGA80737.FO_
.cab
I386/EGA80850.FO_
.cab
I386/EGA80852.FO_
.cab
I386/EGA80857.FO_
.cab
I386/EGA80866.FO_
.cab
I386/EGA80869.FO_
.cab
I386/EGA80WOA.FO_
.cab
I386/EGYPT.BM_
.cab
I386/ELNK16.SY_
.cab
I386/ELNK3.SY_
.cab
I386/ELNKII.SY_
.cab
I386/ELNKMC.SY_
.cab
I386/EP826051.PP_
.cab
I386/EPL3KF21.PP_
.cab
I386/EPL3KF51.PP_
.cab
I386/EPL75523.PP_
.cab
I386/EPSON24.DL_
.cab
I386/EPSON9.DL_
.cab
I386/ESCP2E.DL_
.cab
I386/ESCP2MS.DL_
.cab
I386/ET4000.SY_
.cab
I386/EVENTLOG.DL_
.cab
I386/EVENTVWR.CN_
.cab
I386/EVENTVWR.EX_
.cab
I386/EVENTVWR.FT_
.cab
I386/EVENTVWR.HL_
.cab
I386/EXABYTE1.SY_
.cab
I386/EXABYTE2.SY_
.cab
I386/EXCHNG.CN_
.cab
I386/EXCHNG.HL_
.cab
I386/EXCHNG32.EX_
.cab
I386/EXE2BIN.EX_
.cab
I386/EXPAND.EXE
.exe windows:4 windows x86 arch:x86

4beccff51c74f1f0e58e826632aa3ac2

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

user32

CharNextA
IsCharLowerA
IsCharUpperA
CharToOemA
LoadStringA

kernel32

FindFirstFileA
WideCharToMultiByte
lstrcpyA
GetFullPathNameA
GlobalFree
GlobalAlloc
LocalAlloc
LocalFree
_lclose
_llseek
_lopen
_lcreat
_lwrite
_lread
lstrcatA
lstrlenA
SetFileTime
GetFileTime
lstrcmpA
GetLastError
DeleteFileA
GetFileSize
GetVersion
GetEnvironmentStrings
GetCommandLineA
GetModuleFileNameA
FindClose
FindNextFileA
LCMapStringW
MultiByteToWideChar
ExitProcess
RtlUnwind
UnhandledExceptionFilter
GetFileType
GetStdHandle
GetStartupInfoA
GetProcessHeap
WriteFile
HeapAlloc
HeapFree
GetStringTypeW
FlushFileBuffers
SetFilePointer
SetStdHandle
CloseHandle
GetFileAttributesA

Sections

.text
Size: 23KB - Virtual size: 23KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/EXPLORER.EX_
.cab
I386/F71RX503.PP_
.cab
I386/FASTFAT.SYS
.sys windows:4 windows x86 arch:x86

46b4a87d70d74ad5b6a5a0ab97046bf2

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

ntoskrnl.exe

RtlFreeOemString
FsRtlDoesNameContainWildCards
ExAllocatePoolWithTag
CcInitializeCacheMap
FsRtlRemoveMcbEntry
RtlOemToUnicodeN
IoBuildDeviceIoControlRequest
ExFreePool
CcUnpinData
RtlSetBits
RtlClearBits
RtlUnwind
CcDeferWrite
FsRtlCheckLockForWriteAccess
ObfReferenceObject
CcPrepareMdlWrite
IoVerifyVolume
RtlEqualString
FsRtlBalanceReads
IoBuildAsynchronousFsdRequest
RtlTimeToTimeFields
RtlTimeFieldsToTime
RtlSplay
RtlDelete
ExInterlockedPushEntrySList
ExInterlockedPopEntrySList
RtlFreeUnicodeString
FsRtlInitializeFileLock
FsRtlInitializeOplock
FsRtlUninitializeOplock
FsRtlUninitializeFileLock
FsRtlAllocateResource
FsRtlNotifyUninitializeSync
FsRtlDeleteTunnelCache
FsRtlInitializeTunnelCache
FsRtlNotifyInitializeSync
KeInitializeTimer
KeInitializeDpc
ExDeleteResourceLite
ExAcquireSharedWaitForExclusive
ExGetSharedWaiterCount
ExGetExclusiveWaiterCount
MmIsRecursiveIoFault
ExIsResourceAcquiredSharedLite
FsRtlCheckLockForReadAccess
CcSetReadAheadGranularity
CcCopyRead
CcMdlRead
FsRtlPostStackOverflow
FsRtlPostPagingFileStackOverflow
IoGetInitialStack
RtlGenerate8dot3Name
FsRtlIsDbcsInExpression
FsRtlProcessFileLock
FsRtlFastUnlockAllByKey
FsRtlFastUnlockSingle
FsRtlPrivateLock
CcCanIWrite
MmSetAddressRangeModified
KeNumberProcessors
IoBuildSynchronousFsdRequest
IoFileObjectType
ObReferenceObjectByHandle
RtlUnicodeStringToCountedOemString
CcIsThereDirtyData
FsRtlOplockFsctrl
RtlCompareMemory
ZwOpenKey
ZwQueryValueKey
ZwClose
RtlInitUnicodeString
IoCreateDevice
FsRtlCopyRead
FsRtlCopyWrite
ExInitializeResourceLite
KeInitializeSpinLock
MmQuerySystemSize
ExInitializeRegion
IoRegisterFileSystem
IoIsSystemThread
IoRaiseInformationalHardError
ExAcquireResourceSharedLite
FsRtlFastCheckLockForRead
FsRtlFastCheckLockForWrite
IoGetTopLevelIrp
IoGetDeviceToVerify
IoRaiseHardError
IoSetDeviceToVerify
CcCopyWrite
NlsOemLeadByteInfo
RtlCompareString
RtlUpperString
IoCheckEaBufferValidity
FsRtlIsNameInExpression
FsRtlAreNamesEqual
FsRtlDeleteKeyFromTunnelCache
RtlOemStringToCountedUnicodeString
FsRtlAddToTunnelCache
FsRtlAddMcbEntry
IoGetRequestorProcess
ExConvertExclusiveToSharedLite
NlsMbOemCodePageTag
RtlxOemStringToUnicodeSize
CcSetFileSizes
RtlInitializeBitMap
MmMapLockedPages
FsRtlIsTotalDeviceFailure
ExfInterlockedAddUlong
ExReleaseResourceForThreadLite
InterlockedDecrement
KeSetEvent
KeResetEvent
MmProbeAndLockPages
MmUnlockPages
IoFreeMdl
IoMakeAssociatedIrp
IoAllocateMdl
IoBuildPartialMdl
KeGetCurrentThread
IoFreeIrp
KeDelayExecutionThread
IofCallDriver
IoIsOperationSynchronous
MmCanFileBeTruncated
FsRtlFindInTunnelCache
FsRtlCurrentBatchOplock
MmFlushImageSection
IoUpdateShareAccess
IoCheckShareAccess
IoSetShareAccess
memmove
RtlDowncaseUnicodeString
FsRtlDissectName
RtlUpcaseUnicodeStringToCountedOemString
FsRtlIsFatDbcsLegal
FsRtlLegalAnsiCharacterArray
RtlUpcaseUnicodeString
SeSinglePrivilegeCheck
ObfDereferenceObject
IoDeleteDevice
ExQueueWorkItem
IoGetCurrentProcess
IoAcquireVpbSpinLock
IoReleaseVpbSpinLock
FsRtlNotifyFullChangeDirectory
FsRtlNotifyCleanup
CcUnpinRepinnedBcb
FsRtlFastUnlockAll
ExSystemTimeToLocalTime
ExLocalTimeToSystemTime
CcFlushCache
ExAcquireResourceExclusiveLite
FsRtlNotifyFullReportChange
FsRtlIsNtstatusExpected
IoRemoveShareAccess
FsRtlCheckOplock
FsRtlOplockIsFastIoPossible
ExReleaseResourceLite
IofCompleteRequest
KeEnterCriticalRegion
IoSetTopLevelIrp
KeLeaveCriticalRegion
CcPinMappedData
KeInitializeEvent
CcUninitializeCacheMap
KeWaitForSingleObject
CcMdlReadComplete
CcMdlWriteComplete
CcZeroData
CcGetFileObjectFromBcb
CcSetDirtyPinnedData
CcPurgeCacheSection
IoSetHardErrorOrVerifyDevice
FsRtlNormalizeNtstatus
CcRepinBcb
KeCancelTimer
KeRemoveQueueDpc
KeQuerySystemTime
KeSetTimer
CcSetAdditionalCacheAttributes
IoCreateStreamFileObject
CcPinRead
FsRtlUninitializeMcb
CcMapData
FsRtlGetNextMcbEntry
RtlFindLongestRunClear
RtlFindClearBits
FsRtlInitializeMcb
FsRtlLookupMcbEntry
FsRtlLookupLastMcbEntry
FsRtlNumberOfRunsInMcb
KeBugCheckEx
ExRaiseStatus

hal

KeGetCurrentIrql
KfAcquireSpinLock
KfReleaseSpinLock
ExAcquireFastMutex
ExReleaseFastMutex

Sections

.text
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 576B - Virtual size: 564B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

PAGE
Size: 107KB - Virtual size: 107KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

INIT
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 960B - Virtual size: 932B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/FASTOPEN.EX_
.cab
I386/FC.EX_
.cab
I386/FD16_700.SYS
.sys windows:4 windows x86 arch:x86

c3e2c32d3989e641c090464664f7fa21

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

scsiport.sys

ScsiPortWritePortBufferUlong
ScsiPortLogError
ScsiPortStallExecution
ScsiPortReadPortUchar
ScsiPortReadPortUshort
ScsiPortReadPortBufferUchar
ScsiPortReadPortBufferUshort
ScsiPortReadPortBufferUlong
ScsiPortWritePortBufferUchar
ScsiPortWritePortBufferUshort
ScsiPortWritePortUchar
ScsiPortNotification
ScsiPortGetLogicalUnit
ScsiPortCompleteRequest
ScsiPortReadRegisterUchar
ScsiPortFreeDeviceBase
ScsiPortGetDeviceBase
ScsiPortConvertUlongToPhysicalAddress
ScsiPortInitialize

Sections

.text
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 224B - Virtual size: 220B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

INIT
Size: 672B - Virtual size: 660B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 992B - Virtual size: 972B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 544B - Virtual size: 528B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/FD7000EX.SYS
.sys windows:4 windows x86 arch:x86

df579e9c3323d5e0b4fd9aae751d1890

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

scsiport.sys

ScsiPortGetPhysicalAddress
ScsiPortReadPortUchar
ScsiPortInitialize
ScsiPortFreeDeviceBase
ScsiPortGetDeviceBase
ScsiPortConvertUlongToPhysicalAddress
ScsiPortStallExecution
ScsiPortLogError
ScsiPortWritePortUchar
ScsiPortGetUncachedExtension
ScsiPortNotification
ScsiPortGetVirtualAddress
ScsiPortReadPortUlong
ScsiPortMoveMemory
ScsiPortCompleteRequest
ScsiPortWritePortUlong

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 224B - Virtual size: 220B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

INIT
Size: 544B - Virtual size: 542B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 992B - Virtual size: 972B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 224B - Virtual size: 214B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/FD8XX.SYS
.sys windows:4 windows x86 arch:x86

902901e9ebc96a8cbd0df6ac99a9bfd8

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

scsiport.sys

ScsiPortGetLogicalUnit
ScsiPortLogError
ScsiPortStallExecution
ScsiPortReadRegisterUchar
ScsiPortWriteRegisterBufferUchar
ScsiPortReadRegisterBufferUchar
ScsiPortNotification
ScsiPortWriteRegisterUchar
ScsiPortCompleteRequest
ScsiPortConvertUlongToPhysicalAddress
ScsiPortFreeDeviceBase
ScsiPortGetDeviceBase
ScsiPortInitialize

Sections

.text
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 224B - Virtual size: 204B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

INIT
Size: 480B - Virtual size: 472B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 928B - Virtual size: 928B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 384B - Virtual size: 376B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/FILLITUP.AN_
.cab
I386/FIND.EX_
.cab
I386/FINDSTR.EX_
.cab
I386/FINGER.EX_
.cab
I386/FLOPPY.SYS
.sys windows:4 windows x86 arch:x86

22ad1274fc5b27fb00ac55768b1fee5f

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

ntoskrnl.exe

IoDeleteDevice
IoConnectInterrupt
KeInitializeDpc
RtlFreeUnicodeString
IoCreateSynchronizationEvent
RtlAnsiStringToUnicodeString
RtlInitString
sprintf
KeWaitForSingleObject
KeInitializeSpinLock
KeInitializeSemaphore
IoCreateSymbolicLink
IoCreateDevice
KeReleaseSemaphore
ExfInterlockedInsertTailList
ZwClose
PsCreateSystemThread
MmResetDriverPaging
IofCompleteRequest
IoSetHardErrorOrVerifyDevice
KeResetEvent
IoQueryDeviceDescription
KeDelayExecutionThread
ExfInterlockedInsertHeadList
KeSynchronizeExecution
IoAllocateAdapterChannel
MmProbeAndLockPages
MmFreeContiguousMemory
IoAllocateMdl
MmAllocateContiguousMemory
IoFreeMdl
MmUnlockPages
ExfInterlockedRemoveHeadList
PsTerminateSystemThread
KeSetPriorityThread
KeGetCurrentThread
IoFreeIrp
IoBuildAsynchronousFsdRequest
MmMapLockedPages
MmMapIoSpace
IoWriteErrorLogEntry
IoAllocateErrorLogEntry
IoDisconnectInterrupt
IoReportResourceUsage
RtlCompareMemory
IoGetConfigurationInformation
RtlInitUnicodeString
DbgBreakPoint
memmove
RtlQueryRegistryValues
KeInitializeEvent
ExFreePool
ExAllocatePoolWithTag
KeInsertQueueDpc
MmPageEntireDriver
KeSetEvent

hal

HalTranslateBusAddress
IoMapTransfer
IoFreeAdapterChannel
KfRaiseIrql
IoFlushAdapterBuffers
READ_PORT_UCHAR
ExAcquireFastMutex
KfLowerIrql
WRITE_PORT_UCHAR
KeStallExecutionProcessor
ExReleaseFastMutex
HalGetInterruptVector
HalGetAdapter

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 448B - Virtual size: 428B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 672B - Virtual size: 644B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

PAGE
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

INIT
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 928B - Virtual size: 904B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 736B - Virtual size: 728B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/FMIFS.DL_
.cab
I386/FONT.IN_
.cab
I386/FONTEXT.DL_
.cab
I386/FONTVIEW.EX_
.cab
I386/FORCEDOS.EX_
.cab
I386/FORMAT.CO_
.cab
I386/FRAME32.DL_
.cab
I386/FRAMEBUF.DL_
.cab
I386/FREECELL.CN_
.cab
I386/FREECELL.EX_
.cab
I386/FREECELL.HL_
.cab
I386/FS_REC.SY_
.cab
I386/FTDISK.SY_
.cab
I386/FTP.EX_
.cab
I386/FTPCTRS.DL_
.cab
I386/FTPMGR.CP_
.cab
I386/FTPSMX.CN_
.cab
I386/FTPSMX.DL_
.cab
I386/FTPSMX.HL_
.cab
I386/FTPSVAPI.DL_
.cab
I386/FTPSVC.DL_
.cab
I386/FTSRCH.DL_
.cab
I386/FUJI24.DL_
.cab
I386/FUJI9.DL_
.cab
I386/FXBIOS.BI_
.cab
I386/FXFEP.BI_
.cab
I386/GCBL4921.PP_
.cab
I386/GCBL5141.PP_
.cab
I386/GCBLP2S1.PP_
.cab
I386/GCBLP2_1.PP_
.cab
I386/GCBLPEL1.PP_
.cab
I386/GCCTONE2.PP_
.cab
I386/GCELT6_2.PP_
.cab
I386/GCSP12_3.PP_
.cab
I386/GCSP6_3.PP_
.cab
I386/GDGL8001.PP_
.cab
I386/GDI.EX_
.cab
I386/GDI32.DL_
.cab
I386/GERMAN.TR_
.cab
I386/GLOSSARY.CN_
.cab
I386/GLOSSARY.FT_
.cab
I386/GLOSSARY.HL_
.cab
I386/GLS32.DL_
.cab
I386/GLU32.DL_
.cab
I386/GORILLA.BA_
.cab
I386/GRAFTABL.CO_
.cab
I386/GRAPHICS.CO_
.cab
I386/GRAPHICS.PR_
.cab
I386/GRPCONV.EX_
.cab
I386/HAL.DL_
.cab
I386/HAL486C.DLL
.dll windows:4 windows x86 arch:x86

7f0b03b07b7c1f3f72934319a8325db9

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Imports

ntoskrnl.exe

strncpy
Kei386EoiHelper
KeSetTimeIncrement
DbgBreakPoint
KiCoprocessorError
KeSetEventBoostPriority
KeWaitForSingleObject
KiUnexpectedInterrupt
KeProfileInterrupt
KiDeliverApc
KiDispatchInterrupt
DbgPrint
RtlZeroMemory
ExAllocatePool
ExFreePool
RtlMoveMemory
ZwClose
ZwQueryValueKey
RtlInitUnicodeString
ZwOpenKey
RtlAnsiStringToUnicodeString
RtlInitAnsiString
KeInitializeSpinLock
RtlIntegerToUnicodeString
RtlInitializeBitMap
RtlFillMemory
KiAcquireSpinLock
KiReleaseSpinLock
IoAssignResources
ZwSetValueKey
swprintf
KeUpdateSystemTime
_stricmp
MmMapLockedPages
MmFreeContiguousMemory
MmGetPhysicalAddress
MmAllocateContiguousMemory
RtlFindClearBitsAndSet
KeRemoveDeviceQueue
RtlClearBits
KeInsertDeviceQueue
RtlSetBits
ObfDereferenceObject
KeSetEvent
KeEnterKernelDebugger
MmUnlockPagableImageSection
MmLockPagableDataSection
MmMapIoSpace
RtlSetAllBits
KeInitializeDeviceQueue
ObInsertObject
ObReferenceObjectByPointer
IoAdapterObjectType
ObCreateObject
RtlFreeUnicodeString
IoReportHalResourceUsage
HalDispatchTable
KeBugCheckEx
sprintf
KeFindConfigurationEntry
HalPrivateDispatchTable
KeInitializeEvent
ExAllocatePoolWithTag

Exports

Exports

ExAcquireFastMutex
ExReleaseFastMutex
ExTryToAcquireFastMutex
HalAcquireDisplayOwnership
HalAdjustResourceList
HalAllProcessorsStarted
HalAllocateAdapterChannel
HalAllocateCommonBuffer
HalAllocateCrashDumpRegisters
HalAssignSlotResources
HalBeginSystemInterrupt
HalCalibratePerformanceCounter
HalClearSoftwareInterrupt
HalDisableSystemInterrupt
HalDisplayString
HalEnableSystemInterrupt
HalEndSystemInterrupt
HalFlushCommonBuffer
HalFreeCommonBuffer
HalGetAdapter
HalGetBusData
HalGetBusDataByOffset
HalGetEnvironmentVariable
HalGetInterruptVector
HalHandleNMI
HalInitSystem
HalInitializeProcessor
HalMakeBeep
HalProcessorIdle
HalQueryDisplayParameters
HalQueryRealTimeClock
HalReadDmaCounter
HalReportResourceUsage
HalRequestIpi
HalRequestSoftwareInterrupt
HalReturnToFirmware
HalSetBusData
HalSetBusDataByOffset
HalSetDisplayParameters
HalSetEnvironmentVariable
HalSetProfileInterval
HalSetRealTimeClock
HalSetTimeIncrement
HalStartNextProcessor
HalStartProfileInterrupt
HalStopProfileInterrupt
HalTranslateBusAddress
IoAssignDriveLetters
IoFlushAdapterBuffers
IoFreeAdapterChannel
IoFreeMapRegisters
IoMapTransfer
IoReadPartitionTable
IoSetPartitionInformation
IoWritePartitionTable
KdComPortInUse
KdPortGetByte
KdPortInitialize
KdPortPollByte
KdPortPutByte
KdPortRestore
KdPortSave
KeAcquireSpinLock
KeFlushWriteBuffer
KeGetCurrentIrql
KeLowerIrql
KeQueryPerformanceCounter
KeRaiseIrql
KeReleaseSpinLock
KeStallExecutionProcessor
KfAcquireSpinLock
KfLowerIrql
KfRaiseIrql
KfReleaseSpinLock
READ_PORT_BUFFER_UCHAR
READ_PORT_BUFFER_ULONG
READ_PORT_BUFFER_USHORT
READ_PORT_UCHAR
READ_PORT_ULONG
READ_PORT_USHORT
WRITE_PORT_BUFFER_UCHAR
WRITE_PORT_BUFFER_ULONG
WRITE_PORT_BUFFER_USHORT
WRITE_PORT_UCHAR
WRITE_PORT_ULONG
WRITE_PORT_USHORT

Sections

.text
Size: 18KB - Virtual size: 18KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 704B - Virtual size: 704B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

PAGE
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

PAGELK
Size: 928B - Virtual size: 910B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.edata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

INIT
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 928B - Virtual size: 924B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/HALAPIC.DLL
.dll windows:4 windows x86 arch:x86

666fde2b897c57f59a0ba0da3045da0a

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Imports

ntoskrnl.exe

ObfDereferenceObject
DbgPrint
Kei386EoiHelper
KeUpdateSystemTime
KeUpdateRunTime
KiIpiServiceRoutine
KiDeliverApc
KiDispatchInterrupt
KeProfileInterrupt
KeSetEventBoostPriority
KeWaitForSingleObject
RtlZeroMemory
ExAllocatePool
strncpy
_stricmp
RtlMoveMemory
MmMapLockedPages
MmFreeContiguousMemory
MmGetPhysicalAddress
MmAllocateContiguousMemory
RtlFindClearBitsAndSet
KeRemoveDeviceQueue
RtlClearBits
ExFreePool
ZwClose
ZwQueryValueKey
RtlInitUnicodeString
ZwOpenKey
RtlAnsiStringToUnicodeString
RtlInitAnsiString
KeInsertDeviceQueue
RtlSetBits
DbgBreakPoint
KeSetEvent
KeInitializeSpinLock
RtlIntegerToUnicodeString
RtlInitializeBitMap
RtlFillMemory
KiAcquireSpinLock
KiReleaseSpinLock
IoAssignResources
ZwSetValueKey
swprintf
MmUnlockPagableImageSection
MmLockPagableDataSection
MmMapIoSpace
RtlSetAllBits
KeInitializeDeviceQueue
ObInsertObject
ObReferenceObjectByPointer
IoAdapterObjectType
ObCreateObject
IoReportHalResourceUsage
sprintf
KeFindConfigurationEntry
HalPrivateDispatchTable
RtlFreeUnicodeString
strstr
HalDispatchTable
KeBugCheckEx
KeSetTimeIncrement
KeEnterKernelDebugger
KeInitializeEvent
ExAllocatePoolWithTag

Exports

Exports

ExAcquireFastMutex
ExReleaseFastMutex
ExTryToAcquireFastMutex
HalAcquireDisplayOwnership
HalAdjustResourceList
HalAllProcessorsStarted
HalAllocateAdapterChannel
HalAllocateCommonBuffer
HalAllocateCrashDumpRegisters
HalAssignSlotResources
HalBeginSystemInterrupt
HalCalibratePerformanceCounter
HalClearSoftwareInterrupt
HalDisableSystemInterrupt
HalDisplayString
HalEnableSystemInterrupt
HalEndSystemInterrupt
HalFlushCommonBuffer
HalFreeCommonBuffer
HalGetAdapter
HalGetBusData
HalGetBusDataByOffset
HalGetEnvironmentVariable
HalGetInterruptVector
HalHandleNMI
HalInitSystem
HalInitializeProcessor
HalMakeBeep
HalProcessorIdle
HalQueryDisplayParameters
HalQueryRealTimeClock
HalReadDmaCounter
HalReportResourceUsage
HalRequestIpi
HalRequestSoftwareInterrupt
HalReturnToFirmware
HalSetBusData
HalSetBusDataByOffset
HalSetDisplayParameters
HalSetEnvironmentVariable
HalSetProfileInterval
HalSetRealTimeClock
HalSetTimeIncrement
HalStartNextProcessor
HalStartProfileInterrupt
HalStopProfileInterrupt
HalTranslateBusAddress
IoAssignDriveLetters
IoFlushAdapterBuffers
IoFreeAdapterChannel
IoFreeMapRegisters
IoMapTransfer
IoReadPartitionTable
IoSetPartitionInformation
IoWritePartitionTable
KdComPortInUse
KdPortGetByte
KdPortInitialize
KdPortPollByte
KdPortPutByte
KdPortRestore
KdPortSave
KeAcquireSpinLock
KeFlushWriteBuffer
KeGetCurrentIrql
KeLowerIrql
KeQueryPerformanceCounter
KeRaiseIrql
KeReleaseSpinLock
KeStallExecutionProcessor
KfAcquireSpinLock
KfLowerIrql
KfRaiseIrql
KfReleaseSpinLock
READ_PORT_BUFFER_UCHAR
READ_PORT_BUFFER_ULONG
READ_PORT_BUFFER_USHORT
READ_PORT_UCHAR
READ_PORT_ULONG
READ_PORT_USHORT
WRITE_PORT_BUFFER_UCHAR
WRITE_PORT_BUFFER_ULONG
WRITE_PORT_BUFFER_USHORT
WRITE_PORT_UCHAR
WRITE_PORT_ULONG
WRITE_PORT_USHORT

Sections

.text
Size: 22KB - Virtual size: 22KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 736B - Virtual size: 720B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

PAGE
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

PAGELK
Size: 928B - Virtual size: 910B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.edata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

INIT
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 928B - Virtual size: 924B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/HALAST.DL_
.cab
I386/HALCBUS.DL_
.cab
I386/HALFTONE.CN_
.cab
I386/HALFTONE.HL_
.cab
I386/HALMCA.DLL
.dll windows:4 windows x86 arch:x86

7f0b03b07b7c1f3f72934319a8325db9

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Imports

ntoskrnl.exe

strncpy
Kei386EoiHelper
KeSetTimeIncrement
DbgBreakPoint
KiCoprocessorError
KeSetEventBoostPriority
KeWaitForSingleObject
KiUnexpectedInterrupt
KeProfileInterrupt
KiDeliverApc
KiDispatchInterrupt
DbgPrint
RtlZeroMemory
ExAllocatePool
ExFreePool
RtlMoveMemory
ZwClose
ZwQueryValueKey
RtlInitUnicodeString
ZwOpenKey
RtlAnsiStringToUnicodeString
RtlInitAnsiString
KeInitializeSpinLock
RtlIntegerToUnicodeString
RtlInitializeBitMap
RtlFillMemory
KiAcquireSpinLock
KiReleaseSpinLock
IoAssignResources
ZwSetValueKey
swprintf
KeUpdateSystemTime
_stricmp
MmMapLockedPages
MmFreeContiguousMemory
MmGetPhysicalAddress
MmAllocateContiguousMemory
RtlFindClearBitsAndSet
KeRemoveDeviceQueue
RtlClearBits
KeInsertDeviceQueue
RtlSetBits
ObfDereferenceObject
KeSetEvent
KeEnterKernelDebugger
MmUnlockPagableImageSection
MmLockPagableDataSection
MmMapIoSpace
RtlSetAllBits
KeInitializeDeviceQueue
ObInsertObject
ObReferenceObjectByPointer
IoAdapterObjectType
ObCreateObject
RtlFreeUnicodeString
IoReportHalResourceUsage
HalDispatchTable
KeBugCheckEx
sprintf
KeFindConfigurationEntry
HalPrivateDispatchTable
KeInitializeEvent
ExAllocatePoolWithTag

Exports

Exports

ExAcquireFastMutex
ExReleaseFastMutex
ExTryToAcquireFastMutex
HalAcquireDisplayOwnership
HalAdjustResourceList
HalAllProcessorsStarted
HalAllocateAdapterChannel
HalAllocateCommonBuffer
HalAllocateCrashDumpRegisters
HalAssignSlotResources
HalBeginSystemInterrupt
HalCalibratePerformanceCounter
HalClearSoftwareInterrupt
HalDisableSystemInterrupt
HalDisplayString
HalEnableSystemInterrupt
HalEndSystemInterrupt
HalFlushCommonBuffer
HalFreeCommonBuffer
HalGetAdapter
HalGetBusData
HalGetBusDataByOffset
HalGetEnvironmentVariable
HalGetInterruptVector
HalHandleNMI
HalInitSystem
HalInitializeProcessor
HalMakeBeep
HalProcessorIdle
HalQueryDisplayParameters
HalQueryRealTimeClock
HalReadDmaCounter
HalReportResourceUsage
HalRequestIpi
HalRequestSoftwareInterrupt
HalReturnToFirmware
HalSetBusData
HalSetBusDataByOffset
HalSetDisplayParameters
HalSetEnvironmentVariable
HalSetProfileInterval
HalSetRealTimeClock
HalSetTimeIncrement
HalStartNextProcessor
HalStartProfileInterrupt
HalStopProfileInterrupt
HalTranslateBusAddress
IoAssignDriveLetters
IoFlushAdapterBuffers
IoFreeAdapterChannel
IoFreeMapRegisters
IoMapTransfer
IoReadPartitionTable
IoSetPartitionInformation
IoWritePartitionTable
KdComPortInUse
KdPortGetByte
KdPortInitialize
KdPortPollByte
KdPortPutByte
KdPortRestore
KdPortSave
KeAcquireSpinLock
KeFlushWriteBuffer
KeGetCurrentIrql
KeLowerIrql
KeQueryPerformanceCounter
KeRaiseIrql
KeReleaseSpinLock
KeStallExecutionProcessor
KfAcquireSpinLock
KfLowerIrql
KfRaiseIrql
KfReleaseSpinLock
READ_PORT_BUFFER_UCHAR
READ_PORT_BUFFER_ULONG
READ_PORT_BUFFER_USHORT
READ_PORT_UCHAR
READ_PORT_ULONG
READ_PORT_USHORT
WRITE_PORT_BUFFER_UCHAR
WRITE_PORT_BUFFER_ULONG
WRITE_PORT_BUFFER_USHORT
WRITE_PORT_UCHAR
WRITE_PORT_ULONG
WRITE_PORT_USHORT

Sections

.text
Size: 17KB - Virtual size: 17KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 704B - Virtual size: 704B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

PAGE
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

PAGELK
Size: 928B - Virtual size: 914B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.edata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

INIT
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 928B - Virtual size: 924B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/HALMPS.DLL
.dll windows:4 windows x86 arch:x86

c316a44ef0134769d8ab570531595ffe

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Imports

ntoskrnl.exe

ObfDereferenceObject
DbgPrint
Kei386EoiHelper
KeUpdateSystemTime
KeUpdateRunTime
KiIpiServiceRoutine
KiDeliverApc
KiDispatchInterrupt
KeProfileInterrupt
KeSetEventBoostPriority
KeWaitForSingleObject
RtlZeroMemory
ExAllocatePool
strncpy
_stricmp
RtlMoveMemory
MmMapLockedPages
MmFreeContiguousMemory
MmGetPhysicalAddress
MmAllocateContiguousMemory
RtlFindClearBitsAndSet
KeRemoveDeviceQueue
RtlClearBits
ExFreePool
ZwClose
ZwQueryValueKey
RtlInitUnicodeString
ZwOpenKey
RtlAnsiStringToUnicodeString
RtlInitAnsiString
KeInsertDeviceQueue
RtlSetBits
DbgBreakPoint
KeSetEvent
KeInitializeSpinLock
RtlIntegerToUnicodeString
RtlInitializeBitMap
RtlFillMemory
KiAcquireSpinLock
KiReleaseSpinLock
IoAssignResources
ZwSetValueKey
swprintf
MmUnlockPagableImageSection
MmLockPagableDataSection
MmMapIoSpace
RtlSetAllBits
KeInitializeDeviceQueue
ObInsertObject
ObReferenceObjectByPointer
IoAdapterObjectType
ObCreateObject
IoReportHalResourceUsage
sprintf
KeFindConfigurationEntry
HalPrivateDispatchTable
RtlFreeUnicodeString
MmUnmapIoSpace
strstr
HalDispatchTable
KeBugCheckEx
KeSetTimeIncrement
KeEnterKernelDebugger
KeInitializeEvent
ExAllocatePoolWithTag

Exports

Exports

ExAcquireFastMutex
ExReleaseFastMutex
ExTryToAcquireFastMutex
HalAcquireDisplayOwnership
HalAdjustResourceList
HalAllProcessorsStarted
HalAllocateAdapterChannel
HalAllocateCommonBuffer
HalAllocateCrashDumpRegisters
HalAssignSlotResources
HalBeginSystemInterrupt
HalCalibratePerformanceCounter
HalClearSoftwareInterrupt
HalDisableSystemInterrupt
HalDisplayString
HalEnableSystemInterrupt
HalEndSystemInterrupt
HalFlushCommonBuffer
HalFreeCommonBuffer
HalGetAdapter
HalGetBusData
HalGetBusDataByOffset
HalGetEnvironmentVariable
HalGetInterruptVector
HalHandleNMI
HalInitSystem
HalInitializeProcessor
HalMakeBeep
HalProcessorIdle
HalQueryDisplayParameters
HalQueryRealTimeClock
HalReadDmaCounter
HalReportResourceUsage
HalRequestIpi
HalRequestSoftwareInterrupt
HalReturnToFirmware
HalSetBusData
HalSetBusDataByOffset
HalSetDisplayParameters
HalSetEnvironmentVariable
HalSetProfileInterval
HalSetRealTimeClock
HalSetTimeIncrement
HalStartNextProcessor
HalStartProfileInterrupt
HalStopProfileInterrupt
HalTranslateBusAddress
IoAssignDriveLetters
IoFlushAdapterBuffers
IoFreeAdapterChannel
IoFreeMapRegisters
IoMapTransfer
IoReadPartitionTable
IoSetPartitionInformation
IoWritePartitionTable
KdComPortInUse
KdPortGetByte
KdPortInitialize
KdPortPollByte
KdPortPutByte
KdPortRestore
KdPortSave
KeAcquireSpinLock
KeFlushWriteBuffer
KeGetCurrentIrql
KeLowerIrql
KeQueryPerformanceCounter
KeRaiseIrql
KeReleaseSpinLock
KeStallExecutionProcessor
KfAcquireSpinLock
KfLowerIrql
KfRaiseIrql
KfReleaseSpinLock
READ_PORT_BUFFER_UCHAR
READ_PORT_BUFFER_ULONG
READ_PORT_BUFFER_USHORT
READ_PORT_UCHAR
READ_PORT_ULONG
READ_PORT_USHORT
WRITE_PORT_BUFFER_UCHAR
WRITE_PORT_BUFFER_ULONG
WRITE_PORT_BUFFER_USHORT
WRITE_PORT_UCHAR
WRITE_PORT_ULONG
WRITE_PORT_USHORT

Sections

.text
Size: 23KB - Virtual size: 23KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

_INIT16
Size: 64B - Virtual size: 57B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 736B - Virtual size: 720B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

PAGE
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

PAGELK
Size: 928B - Virtual size: 910B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.edata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

INIT
Size: 18KB - Virtual size: 18KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 928B - Virtual size: 924B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/HALNCR.DLL
.dll windows:4 windows x86 arch:x86

840ef3c0adff6d8b13b6e2f856a17c0c

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Imports

ntoskrnl.exe

MmFreeContiguousMemory
KeProfileInterrupt
Kei386EoiHelper
KiDeliverApc
KiDispatchInterrupt
DbgPrint
KeUpdateSystemTime
KeUpdateRunTime
KeSetTimeIncrement
KiCoprocessorError
KiIpiServiceRoutine
KeSetEventBoostPriority
KeWaitForSingleObject
KiUnexpectedInterrupt
RtlZeroMemory
ExAllocatePool
ExFreePool
RtlMoveMemory
ZwClose
ZwQueryValueKey
RtlInitUnicodeString
ZwOpenKey
RtlAnsiStringToUnicodeString
RtlInitAnsiString
KeInitializeSpinLock
RtlIntegerToUnicodeString
RtlInitializeBitMap
RtlFillMemory
KiAcquireSpinLock
KiReleaseSpinLock
IoAssignResources
ZwSetValueKey
swprintf
strncpy
_stricmp
MmMapLockedPages
DbgBreakPoint
MmGetPhysicalAddress
MmAllocateContiguousMemory
RtlFindClearBitsAndSet
KeRemoveDeviceQueue
RtlClearBits
MmUnlockPagableImageSection
MmLockPagableDataSection
MmMapIoSpace
ObfDereferenceObject
RtlSetAllBits
KeInitializeDeviceQueue
ObInsertObject
ObReferenceObjectByPointer
IoAdapterObjectType
ObCreateObject
KeInsertDeviceQueue
RtlSetBits
KeSetEvent
IoReportHalResourceUsage
HalDispatchTable
KeBugCheckEx
sprintf
KeFindConfigurationEntry
KeEnterKernelDebugger
RtlFreeUnicodeString
MmUnmapIoSpace
ZwCreateKey
RtlAppendUnicodeToString
RtlAppendUnicodeStringToString
RtlCopyUnicodeString
strncmp
KeLoaderBlock
HalPrivateDispatchTable
KeInitializeEvent
ExAllocatePoolWithTag

Exports

Exports

ExAcquireFastMutex
ExReleaseFastMutex
ExTryToAcquireFastMutex
HalAcquireDisplayOwnership
HalAdjustResourceList
HalAllProcessorsStarted
HalAllocateAdapterChannel
HalAllocateCommonBuffer
HalAllocateCrashDumpRegisters
HalAssignSlotResources
HalBeginSystemInterrupt
HalBumpWatchDogCount
HalCalibratePerformanceCounter
HalCatBusAvailable
HalCatBusIo
HalCatBusReset
HalClearSoftwareInterrupt
HalDisableSystemInterrupt
HalDisplayString
HalEnableSystemInterrupt
HalEndSystemInterrupt
HalFlushCommonBuffer
HalFreeCommonBuffer
HalGetAdapter
HalGetBusData
HalGetBusDataByOffset
HalGetEnvironmentVariable
HalGetInterruptVector
HalGetSUSErrorLogEntry
HalHandleNMI
HalInitSystem
HalInitializeProcessor
HalMakeBeep
HalPowerOffSystem
HalProcessorIdle
HalQueryDisplayParameters
HalQueryRealTimeClock
HalReadDmaCounter
HalReportResourceUsage
HalRequestIpi
HalRequestSoftwareInterrupt
HalReturnToFirmware
HalSetBusData
HalSetBusDataByOffset
HalSetDisplayParameters
HalSetEnvironmentVariable
HalSetProfileInterval
HalSetRealTimeClock
HalSetStatusChangeInterruptState
HalSetTimeIncrement
HalSetWatchDogPeriod
HalStartNextProcessor
HalStartProfileInterrupt
HalStopProfileInterrupt
HalTranslateBusAddress
IoAssignDriveLetters
IoFlushAdapterBuffers
IoFreeAdapterChannel
IoFreeMapRegisters
IoMapTransfer
IoReadPartitionTable
IoSetPartitionInformation
IoWritePartitionTable
KdComPortInUse
KdPortGetByte
KdPortInitialize
KdPortPollByte
KdPortPutByte
KdPortRestore
KdPortSave
KeAcquireSpinLock
KeFlushWriteBuffer
KeGetCurrentIrql
KeLowerIrql
KeQueryPerformanceCounter
KeRaiseIrql
KeReleaseSpinLock
KeStallExecutionProcessor
KfAcquireSpinLock
KfLowerIrql
KfRaiseIrql
KfReleaseSpinLock
READ_PORT_BUFFER_UCHAR
READ_PORT_BUFFER_ULONG
READ_PORT_BUFFER_USHORT
READ_PORT_UCHAR
READ_PORT_ULONG
READ_PORT_USHORT
WRITE_PORT_BUFFER_UCHAR
WRITE_PORT_BUFFER_ULONG
WRITE_PORT_BUFFER_USHORT
WRITE_PORT_UCHAR
WRITE_PORT_ULONG
WRITE_PORT_USHORT

Sections

.text
Size: 41KB - Virtual size: 41KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

_TEXT16
Size: 64B - Virtual size: 57B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

PAGE
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

PAGELK
Size: 928B - Virtual size: 914B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.edata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

INIT
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 928B - Virtual size: 924B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/HALOLI.DL_
.cab
I386/HALSP.DL_
.cab
I386/HALWYSE7.DL_
.cab
I386/HAND.AN_
.cab
I386/HANDAPST.AN_
.cab
I386/HANDNESW.AN_
.cab
I386/HANDNO.AN_
.cab
I386/HANDNS.AN_
.cab
I386/HANDNWSE.AN_
.cab
I386/HANDWAIT.AN_
.cab
I386/HANDWE.AN_
.cab
I386/HARDWARE.IN_
.cab
I386/HARROW.CU_
.cab
I386/HCROSS.CU_
.cab
I386/HELP.EX_
.cab
I386/HERMES_1.PP_
.cab
I386/HERMES_2.PP_
.cab
I386/HIBEAM.CU_
.cab
I386/HIMEM.SY_
.cab
I386/HMOVE.CU_
.cab
I386/HNESW.CU_
.cab
I386/HNODROP.CU_
.cab
I386/HNS.CU_
.cab
I386/HNWSE.CU_
.cab
I386/HONEY.BM_
.cab
I386/HORSE.AN_
.cab
I386/HOSTNAME.EX_
.cab
I386/HOSTS
I386/HOURGLA2.AN_
.cab
I386/HOURGLA3.AN_
.cab
I386/HOURGLAS.AN_
.cab
I386/HP1200C1.PP_
.cab
I386/HP20022.PC_
.cab
I386/HP20036.PC_
.cab
I386/HP3SI523.PP_
.cab
I386/HP4M3_V1.PP_
.cab
I386/HP4M6_V1.PP_
.cab
I386/HP4ML_V1.PP_
.cab
I386/HP4MP3_1.PP_
.cab
I386/HP4MP6_1.PP_
.cab
I386/HP4PLUS3.PP_
.cab
I386/HP4PLUS6.PP_
.cab
I386/HP4SI3_1.PP_
.cab
I386/HP4SI6_1.PP_
.cab
I386/HP60022.PC_
.cab
I386/HP60036.PC_
.cab
I386/HP650C22.PC_
.cab
I386/HP650C36.PC_
.cab
I386/HP7550PL.PC_
.cab
I386/HPDESIGN.PC_
.cab
I386/HPDMRXMX.PC_
.cab
I386/HPDMSX.PC_
.cab
I386/HPDPP22.PC_
.cab
I386/HPDPP36.PC_
.cab
I386/HPDSKJET.DL_
.cab
I386/HPELI522.PP_
.cab
I386/HPGL2PEN.PC_
.cab
I386/HPIID522.PP_
.cab
I386/HPIII522.PP_
.cab
I386/HPIIP522.PP_
.cab
I386/HPLJ4MV1.PP_
.cab
I386/HPLJ5P_1.PP_
.cab
I386/HPLJ_31.PP_
.cab
I386/HPLJ_3D1.PP_
.cab
I386/HPLJ_3P1.PP_
.cab
I386/HPMON.DL_
.cab
I386/HPMON.HL_
.cab
I386/HPPCL.DL_
.cab
I386/HPPCL5MS.DL_
.cab
I386/HPPJXL31.PP_
.cab
I386/HPSCAN16.SY_
.cab
I386/HPSCAN32.DL_
.cab
I386/HP_3D522.PP_
.cab
I386/HP_3P522.PP_
.cab
I386/HP_650C1.PP_
.cab
I386/HP__CLJ1.PP_
.cab
I386/HTICONS.DL_
.cab
I386/HTUI.DL_
.cab
I386/HWE.CU_
.cab
I386/HYPERTRM.CN_
.cab
I386/HYPERTRM.DL_
.cab
I386/HYPERTRM.EX_
.cab
I386/HYPERTRM.HL_
.cab
I386/I8042PRT.SYS
.sys windows:4 windows x86 arch:x86

8bd58f6d7e49455a3258d92829b6b645

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

ntoskrnl.exe

IoStartPacket
memmove
InterlockedDecrement
InterlockedIncrement
KeSetTimer
IoReleaseCancelSpinLock
IoAcquireCancelSpinLock
ExFreePool
IoDeleteDevice
IoDeleteSymbolicLink
MmUnmapIoSpace
IoDisconnectInterrupt
IoReportResourceUsage
RtlWriteRegistryValue
IoConnectInterrupt
KeInitializeTimer
KeInitializeDpc
ExAllocatePoolWithTag
IoAllocateErrorLogEntry
KeSynchronizeExecution
RtlIntegerToUnicodeString
RtlAppendUnicodeToString
RtlInitUnicodeString
KeInitializeSpinLock
MmMapIoSpace
IoCreateDevice
KeQueryTimeIncrement
RtlCopyUnicodeString
RtlQueryRegistryValues
KeInsertQueueDpc
DbgBreakPoint
KdDebuggerNotPresent
KeTickCount
IoQueryDeviceDescription
RtlFreeAnsiString
strstr
RtlUnicodeStringToAnsiString
RtlUnwind
IoStartNextPacket
IoWriteErrorLogEntry
KeCancelTimer
IoCreateSymbolicLink
IofCompleteRequest
RtlAppendUnicodeStringToString

hal

WRITE_PORT_UCHAR
READ_PORT_UCHAR
HalTranslateBusAddress
HalGetInterruptVector
KeStallExecutionProcessor

Sections

.text
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 640B - Virtual size: 612B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 32B - Virtual size: 28B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

INIT
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 640B - Virtual size: 638B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/IBM17523.PP_
.cab
I386/IBM20470.PP_
.cab
I386/IBM238X.DL_
.cab
I386/IBM239X.DL_
.cab
I386/IBM30505.PP_
.cab
I386/IBM31514.PP_
.cab
I386/IBM39523.PP_
.cab
I386/IBM4039.PP_
.cab
I386/IBM4039P.PP_
.cab
I386/IBM4079.PP_
.cab
I386/IBM5204.DL_
.cab
I386/IBMPORT.DL_
.cab
I386/IBMPPDSL.DL_
.cab
I386/IBMTOK.SY_
.cab
I386/IBMTOK2I.SY_
.cab
I386/ICCVID.DL_
.cab
I386/ICMP.DL_
.cab
I386/IDP_XFS.BI_
.cab
I386/IEEPRO.SY_
.cab
I386/IFSUTIL.DL_
.cab
I386/IMAADP32.AC_
.cab
I386/IMAGEHLP.DL_
.cab
I386/IMPEXP32.DL_
.cab
I386/INDICDLL.DL_
.cab
I386/INETAB32.DL_
.cab
I386/INETMIB1.DL_
.cab
I386/INPORT.SY_
.cab
I386/INT-MAIL.CN_
.cab
I386/INT-MAIL.HL_
.cab
I386/INTERNAT.EX_
.cab
I386/INTL.CP_
.cab
I386/INTL.IN_
.cab
I386/INTRO.EX_
.cab
I386/INTRO.IC_
.cab
I386/INTRO1.SE_
.cab
I386/INTRO2.SE_
.cab
I386/IOLOGMSG.DL_
.cab
I386/IPADRDLL.DL_
.cab
I386/IPCONFIG.EX_
.cab
I386/IPINFO.INF
.vbs
I386/IPRIP.DL_
.cab
I386/IPXCFG.DL_
.cab
I386/IPXROUTE.EX_
.cab
I386/IR32_32.DL_
.cab
I386/ISDNHELP.CN_
.cab
I386/ISDNHELP.HL_
.cab
I386/ISO88591.TR_
.cab
I386/JET.DL_
.cab
I386/JET500.DL_
.cab
I386/JETPACK.EX_
.cab
I386/JP350.DL_
.cab
I386/JX9460PS.PP_
.cab
I386/JX9500PS.PP_
.cab
I386/JX9600PS.PP_
.cab
I386/JX9660PS.PP_
.cab
I386/JX9700PS.PP_
.cab
I386/KB16.CO_
.cab
I386/KBD.IN_
.cab
I386/KBDBE.DLL
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Exports

Exports

KbdLayerDescriptor

Sections

.data
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 908B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 184B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/KBDBR.DLL
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Exports

Exports

KbdLayerDescriptor

Sections

.data
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 912B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 208B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/KBDBU.DLL
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Exports

Exports

KbdLayerDescriptor

Sections

.data
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 912B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 188B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/KBDCA.DLL
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Exports

Exports

KbdLayerDescriptor

Sections

.data
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 936B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 182B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/KBDCLASS.SYS
.sys windows:4 windows x86 arch:x86

3ce95734bef6e06f70aef4b681c3f303

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

ntoskrnl.exe

IoWriteErrorLogEntry
RtlWriteRegistryValue
RtlAppendUnicodeStringToString
RtlIntegerToUnicodeString
ExAllocatePoolWithTag
RtlAppendUnicodeToString
RtlInitUnicodeString
RtlCopyUnicodeString
memmove
IofCompleteRequest
IoReleaseCancelSpinLock
KeRemoveEntryDeviceQueue
IoAcquireCancelSpinLock
ExFreePool
IoAllocateErrorLogEntry
IofCallDriver
SeSinglePrivilegeCheck
IoStartPacket
KefReleaseSpinLockFromDpcLevel
KefAcquireSpinLockAtDpcLevel
RtlQueryRegistryValues
ObfDereferenceObject
IoGetDeviceObjectPointer
KeInitializeSpinLock
IoCreateDevice
KeWaitForSingleObject
IoBuildDeviceIoControlRequest
KeInitializeEvent
IoStartNextPacket
IoDeleteDevice
KeRemoveDeviceQueue

hal

KfAcquireSpinLock
KfReleaseSpinLock

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 288B - Virtual size: 284B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

INIT
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 352B - Virtual size: 350B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/KBDCR.DLL
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Exports

Exports

KbdLayerDescriptor

Sections

.data
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 932B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 216B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/KBDCZ.DLL
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Exports

Exports

KbdLayerDescriptor

Sections

.data
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 904B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 218B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/KBDDA.DLL
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Exports

Exports

KbdLayerDescriptor

Sections

.data
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 908B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 182B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/KBDDLL.DL_
.cab
I386/KBDDV.DLL
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Exports

Exports

KbdLayerDescriptor

Sections

.data
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 928B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 166B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/KBDES.DLL
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Exports

Exports

KbdLayerDescriptor

Sections

.data
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 928B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 180B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/KBDFC.DLL
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Exports

Exports

KbdLayerDescriptor

Sections

.data
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 924B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 186B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/KBDFI.DLL
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Exports

Exports

KbdLayerDescriptor

Sections

.data
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 908B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 182B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/KBDFR.DLL
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Exports

Exports

KbdLayerDescriptor

Sections

.data
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 908B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 176B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/KBDGR.DLL
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Exports

Exports

KbdLayerDescriptor

Sections

.data
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 908B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 178B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/KBDHE.DLL
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Exports

Exports

KbdLayerDescriptor

Sections

.data
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 904B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 204B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/KBDHE220.DLL
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Exports

Exports

KbdLayerDescriptor

Sections

.data
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 936B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 204B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/KBDHE319.DLL
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Exports

Exports

KbdLayerDescriptor

Sections

.data
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 936B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 206B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/KBDHELA2.DLL
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Exports

Exports

KbdLayerDescriptor

Sections

.data
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 948B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 204B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/KBDHELA3.DLL
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Exports

Exports

KbdLayerDescriptor

Sections

.data
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 948B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 206B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/KBDHU.DLL
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Exports

Exports

KbdLayerDescriptor

Sections

.data
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 912B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 218B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/KBDHU1.DLL
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Exports

Exports

KbdLayerDescriptor

Sections

.data
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 936B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 190B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/KBDIC.DLL
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Exports

Exports

KbdLayerDescriptor

Sections

.data
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 912B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 182B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/KBDIT.DLL
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Exports

Exports

KbdLayerDescriptor

Sections

.data
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 908B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 170B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/KBDIT142.DLL
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Exports

Exports

KbdLayerDescriptor

Sections

.data
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 932B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 168B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/KBDLA.DLL
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Exports

Exports

KbdLayerDescriptor

Sections

.data
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 940B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 180B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/KBDNE.DLL
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Exports

Exports

KbdLayerDescriptor

Sections

.data
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 904B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 184B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/KBDNO.DLL
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Exports

Exports

KbdLayerDescriptor

Sections

.data
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 912B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 182B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/KBDPL.DLL
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Exports

Exports

KbdLayerDescriptor

Sections

.data
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 908B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 218B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/KBDPL1.DLL
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Exports

Exports

KbdLayerDescriptor

Sections

.data
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 940B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 202B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/KBDPO.DLL
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Exports

Exports

KbdLayerDescriptor

Sections

.data
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 916B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 182B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/KBDRO.DLL
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Exports

Exports

KbdLayerDescriptor

Sections

.data
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 912B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 190B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/KBDRU.DLL
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Exports

Exports

KbdLayerDescriptor

Sections

.data
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 908B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 192B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/KBDSEL.EX_
.cab
I386/KBDSF.DLL
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Exports

Exports

KbdLayerDescriptor

Sections

.data
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 920B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 182B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/KBDSG.DLL
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Exports

Exports

KbdLayerDescriptor

Sections

.data
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 920B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 182B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/KBDSL.DLL
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Exports

Exports

KbdLayerDescriptor

Sections

.data
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 908B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 216B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/KBDSP.DLL
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Exports

Exports

KbdLayerDescriptor

Sections

.data
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 908B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 180B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/KBDSW.DLL
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Exports

Exports

KbdLayerDescriptor

Sections

.data
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 908B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 208B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/KBDTUF.DLL
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Exports

Exports

KbdLayerDescriptor

Sections

.data
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 920B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 212B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/KBDTUQ.DLL
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Exports

Exports

KbdLayerDescriptor

Sections

.data
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 920B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 210B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/KBDUK.DLL
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Exports

Exports

KbdLayerDescriptor

Sections

.data
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 924B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 170B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/KBDUS.DLL
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Exports

Exports

KbdLayerDescriptor

Sections

.data
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 920B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 192B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/KBDUSL.DLL
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Exports

Exports

KbdLayerDescriptor

Sections

.data
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 956B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 192B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/KBDUSR.DLL
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Exports

Exports

KbdLayerDescriptor

Sections

.data
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 960B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 192B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/KBDUSX.DLL
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Exports

Exports

KbdLayerDescriptor

Sections

.data
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 936B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 184B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/KD8600P1.PP_
.cab
I386/KDCOLOR1.PP_
.cab
I386/KERNEL32.DL_
.cab
I386/KEYB.CO_
.cab
I386/KEYBOARD.DR_
.cab
I386/KEYBOARD.IN_
.cab
I386/KEYBOARD.SY_
.cab
I386/KMDDSP.TS_
.cab
I386/KRNL386.EX_
.cab
I386/KSECDD.SY_
.cab
I386/KYOCERA.DL_
.cab
I386/L100_425.PP_
.cab
I386/L200230.PP_
.cab
I386/L200_471.PP_
.cab
I386/L200_493.PP_
.cab
I386/L300_471.PP_
.cab
I386/L300_493.PP_
.cab
I386/L330_523.PP_
.cab
I386/L3330523.PP_
.cab
I386/L500_493.PP_
.cab
I386/L530_523.PP_
.cab
I386/L5330523.PP_
.cab
I386/LABEL.EX_
.cab
I386/LANCE.SY_
.cab
I386/LANMA256.BM_
.cab
I386/LANMAN.DR_
.cab
I386/LANMANNT.BM_
.cab
I386/LAPPSTRT.CU_
.cab
I386/LARROW.CU_
.cab
I386/LCROSS.CU_
.cab
I386/LEAVES.BM_
.cab
I386/LEGACY.IN_
.cab
I386/LEX4039P.PP_
.cab
I386/LEXOPTRA.PP_
.cab
I386/LH830__1.PP_
.cab
I386/LH930__1.PP_
.cab
I386/LHPR60_1.PP_
.cab
I386/LH_630_1.PP_
.cab
I386/LIBEAM.CU_
.cab
I386/LICCPA.CN_
.cab
I386/LICCPA.CP_
.cab
I386/LICCPA.FT_
.cab
I386/LICCPA.HL_
.cab
I386/LINKINFO.DL_
.cab
I386/LLSMGR.CN_
.cab
I386/LLSMGR.EX_
.cab
I386/LLSMGR.HL_
.cab
I386/LLSRPC.DL_
.cab
I386/LLSSRV.EX_
.cab
I386/LMHOSTS.SA_
.cab
I386/LMHSVC.DL_
.cab
I386/LMMIB2.DL_
.cab
I386/LMOVE.CU_
.cab
I386/LMREPL.EX_
.cab
I386/LNESW.CU_
.cab
I386/LNODROP.CU_
.cab
I386/LNS.CU_
.cab
I386/LNWSE.CU_
.cab
I386/LOADFIX.CO_
.cab
I386/LOADPERF.DL_
.cab
I386/LOCALE.NL_
.cab
I386/LOCALMON.DL_
.cab
I386/LOCALSPL.DL_
.cab
I386/LOCATOR.EX_
.cab
I386/LODCTR.EX_
.cab
I386/LOG01.SE_
.cab
I386/LOGON.SC_
.cab
I386/LOGVIEW.CN_
.cab
I386/LOGVIEW.EX_
.cab
I386/LOGVIEW.HL_
.cab
I386/LOOP.SY_
.cab
I386/LPDSVC.DL_
.cab
I386/LPQ.EX_
.cab
I386/LPR.EX_
.cab
I386/LPRHELP.DL_
.cab
I386/LPRMON.DL_
.cab
I386/LSASRV.DL_
.cab
I386/LSASS.EX_
.cab
I386/LT200.SY_
.cab
I386/LUCON.TT_
.cab
I386/LWAIT.CU_
.cab
I386/LWE.CU_
.cab
I386/LWNTX470.PP_
.cab
I386/LWNTX518.PP_
.cab
I386/LWNT_470.PP_
.cab
I386/LZ32.DL_
.cab
I386/LZEXPAND.DL_
.cab
I386/L_10646.TT_
.cab
I386/L_EXCEPT.NLS
I386/L_INTL.NLS
I386/MACFILE.EX_
.cab
I386/MAILM32.DL_
.cab
I386/MAILSP32.EX_
.cab
I386/MAIN.CP_
.cab
I386/MAIN2.CP_
.cab
I386/MANTAL24.DL_
.cab
I386/MANTAL90.DL_
.cab
I386/MAPI.DL_
.cab
I386/MAPI32.DL_
.cab
I386/MAPIF0.CF_
.cab
I386/MAPIF0L.IC_
.cab
I386/MAPIF0S.IC_
.cab
I386/MAPIF1.CF_
.cab
I386/MAPIF1L.IC_
.cab
I386/MAPIF1S.IC_
.cab
I386/MAPIF2.CF_
.cab
I386/MAPIF2L.IC_
.cab
I386/MAPIF2S.IC_
.cab
I386/MAPIF3.CF_
.cab
I386/MAPIF3L.IC_
.cab
I386/MAPIF3S.IC_
.cab
I386/MAPIF4.CF_
.cab
I386/MAPIF4L.IC_
.cab
I386/MAPIF4S.IC_
.cab
I386/MAPIF5.CF_
.cab
I386/MAPIF5L.IC_
.cab
I386/MAPIF5S.IC_
.cab
I386/MAPIRPC.RE_
.cab
I386/MAPISP32.EX_
.cab
I386/MAPISRV.EX_
.cab
I386/MAPISRVR.EX_
.cab
I386/MAPIU.DL_
.cab
I386/MAPIU32.DL_
.cab
I386/MAPIWM.TP_
.cab
I386/MAPIX.DL_
.cab
I386/MAPIX32.DL_
.cab
I386/MAPIXX.DL_
.cab
I386/MARBLE.BM_
.cab
I386/MARLETT.TT_
.cab
I386/MCIAVI.DR_
.cab
I386/MCIAVI32.DL_
.cab
I386/MCICDA.DL_
.cab
I386/MCIOLE16.DL_
.cab
I386/MCIOLE32.DL_
.cab
I386/MCISEQ.DL_
.cab
I386/MCISEQ.DR_
.cab
I386/MCIWAVE.DL_
.cab
I386/MCIWAVE.DR_
.cab
I386/MDMATI.IN_
.cab
I386/MDMATT.IN_
.cab
I386/MDMAUS.IN_
.cab
I386/MDMBOCA.IN_
.cab
I386/MDMCOMMU.IN_
.cab
I386/MDMCPI.IN_
.cab
I386/MDMCPQ.IN_
.cab
I386/MDMDGITN.IN_
.cab
I386/MDMDSI.IN_
.cab
I386/MDMEURO.IN_
.cab
I386/MDMEXP.IN_
.cab
I386/MDMGATEW.IN_
.cab
I386/MDMGEN.IN_
.cab
I386/MDMGVC.IN_
.cab
I386/MDMHAYES.IN_
.cab
I386/MDMINFOT.IN_
.cab
I386/MDMINTEL.IN_
.cab
I386/MDMINTPC.IN_
.cab
I386/MDMMCOM.IN_
.cab
I386/MDMMETRI.IN_
.cab
I386/MDMMHRTZ.IN_
.cab
I386/MDMMOTO.IN_
.cab
I386/MDMMTS.IN_
.cab
I386/MDMNOKIA.IN_
.cab
I386/MDMNOVA.IN_
.cab
I386/MDMOSI.IN_
.cab
I386/MDMPACE.IN_
.cab
I386/MDMPNB.IN_
.cab
I386/MDMPP.IN_
.cab
I386/MDMRACAL.IN_
.cab
I386/MDMROCK.IN_
.cab
I386/MDMROCK2.IN_
.cab
I386/MDMSIER.IN_
.cab
I386/MDMSNITN.IN_
.cab
I386/MDMSONIX.IN_
.cab
I386/MDMSPEC.IN_
.cab
I386/MDMSUPRA.IN_
.cab
I386/MDMTDK.IN_
.cab
I386/MDMTELBT.IN_
.cab
I386/MDMTI.IN_
.cab
I386/MDMTOSH.IN_
.cab
I386/MDMUSRCR.IN_
.cab
I386/MDMUSRSP.IN_
.cab
I386/MDMUSRWP.IN_
.cab
I386/MDMVV.IN_
.cab
I386/MDMZOOM.IN_
.cab
I386/MDMZYP.IN_
.cab
I386/MDMZYXEL.IN_
.cab
I386/MEM.EX_
.cab
I386/METRONOM.AN_
.cab
I386/MF3216.DL_
.cab
I386/MFCUIX.HL_
.cab
I386/MGA.DL_
.cab
I386/MGA.SY_
.cab
I386/MGMTAPI.DL_
.cab
I386/MIB.BI_
.cab
I386/MIDIMAP.CF_
.cab
I386/MIDIMAP.DL_
.cab
I386/MINET32.DL_
.cab
I386/MINIQIC.SY_
.cab
I386/MITSUMI.SYS
.sys windows:4 windows x86 arch:x86

ae0940cea3b1db08f2cf9dc3d0c59d1e

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

scsiport.sys

ScsiPortReadPortUchar
ScsiPortConvertUlongToPhysicalAddress
ScsiPortFreeDeviceBase
ScsiPortGetDeviceBase
ScsiPortWritePortUchar
ScsiPortInitialize
ScsiPortStallExecution
ScsiPortNotification
ScsiPortReadPortBufferUchar
ScsiPortCompleteRequest

Sections

.text
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 192B - Virtual size: 188B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

INIT
Size: 384B - Virtual size: 366B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 992B - Virtual size: 964B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 448B - Virtual size: 446B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/MKECR5XX.SYS
.sys windows:4 windows x86 arch:x86

9c942a8c271b9d5297266a0aaede874b

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

scsiport.sys

ScsiPortWritePortUchar
ScsiPortConvertUlongToPhysicalAddress
ScsiPortFreeDeviceBase
ScsiPortGetDeviceBase
ScsiPortReadPortUchar
ScsiPortStallExecution
ScsiPortInitialize
ScsiPortNotification
ScsiPortReadPortBufferUchar
ScsiPortCompleteRequest
ScsiPortMoveMemory

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 192B - Virtual size: 188B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 64B - Virtual size: 46B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

INIT
Size: 416B - Virtual size: 392B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 960B - Virtual size: 944B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 640B - Virtual size: 624B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/ML3XEC16.EX_
.cab
I386/MLCFG32.CP_
.cab
I386/MLSET32.EX_
.cab
I386/MLSHEXT.DL_
.cab
I386/MMDRIVER.IN_
.cab
I386/MMDRV.DL_
.cab
I386/MMDRV.HL_
.cab
I386/MMFMIG32.DL_
.cab
I386/MMSYS.CP_
.cab
I386/MMSYSTEM.DL_
.cab
I386/MMTASK.TS_
.cab
I386/MODE.CO_
.cab
I386/MODEM.CP_
.cab
I386/MODEM.IN_
.cab
I386/MODEM.SY_
.cab .ps1 polyglot
I386/MODEMUI.DL_
.cab
I386/MODERN.FO_
.cab
I386/MOIM1201.PP_
.cab
I386/MONEY.BA_
.cab
I386/MONITOR.IN_
.cab
I386/MONO_522.PP_
.cab
I386/MORE.CO_
.cab
I386/MORICONS.DL_
.cab
I386/MOUCLASS.SY_
.cab
I386/MOUSE.CN_
.cab
I386/MOUSE.DR_
.cab
I386/MOUSE.HL_
.cab
I386/MPLAY32.EX_
.cab
I386/MPLAYER.CN_
.cab
I386/MPLAYER.FT_
.cab
I386/MPLAYER.HL_
.cab
I386/MPNOTIFY.EX_
.cab
I386/MPR.DL_
.cab
I386/MPRUI.DL_
.cab
I386/MSACM.DL_
.cab
I386/MSACM32.DL_
.cab
I386/MSACM32.DR_
.cab
I386/MSADP32.AC_
.cab
I386/MSAFD.DL_
.cab
I386/MSAUDITE.DL_
.cab
I386/MSCDEXNT.EX_
.cab
I386/MSFS.CN_
.cab
I386/MSFS.HL_
.cab
I386/MSFS.SY_
.cab
I386/MSFS32.DL_
.cab
I386/MSGINA.DL_
.cab
I386/MSGSM32.AC_
.cab
I386/MSGSVC.DL_
.cab
I386/MSMAIL.IN_
.cab
I386/MSMAIL32.CN_
.cab
I386/MSMAIL32.EX_
.cab
I386/MSMAIL32.FT_
.cab
I386/MSMAIL32.HL_
.cab
I386/MSNCDET.DL_
.cab
I386/MSOBJS.DL_
.cab
I386/MSP32_AM.LE_
.cab
I386/MSPAINT.CN_
.cab
I386/MSPAINT.EX_
.cab
I386/MSPAINT.HL_
.cab
I386/MSPELL32.DL_
.cab
I386/MSPRINT.IN_
.cab
I386/MSPRIVS.DL_
.cab
I386/MSPST32.DL_
.cab
I386/MSRLE32.DL_
.cab
I386/MSRMND32.EX_
.cab
I386/MSSCHD32.DL_
.cab
I386/MSSFS32.DL_
.cab
I386/MSV1_0.DL_
.cab
I386/MSVFW32.DL_
.cab
I386/MSVIDC32.DL_
.cab
I386/MSVIDEO.DL_
.cab
I386/MSVIEWUT.DL_
.cab
I386/MSWSOCK.DL_
.cab
I386/MT735.DL_
.cab
I386/MT_TI101.PP_
.cab
I386/MULTIMED.CP_
.cab
I386/MUP.SY_
.cab
I386/MVAUDIO.DL_
.cab
I386/MVAUDIO.SY_
.cab
I386/N2090522.PP_
.cab
I386/N2290520.PP_
.cab
I386/N890X505.PP_
.cab
I386/N890_470.PP_
.cab
I386/NAL.DL_
.cab
I386/NBF.SY_
.cab
I386/NBINFO.IN_
.cab
I386/NBTSTAT.EX_
.cab
I386/NC95FAX1.PP_
.cab
I386/NC97FAX1.PP_
.cab
I386/NCADMIN.CN_
.cab
I386/NCADMIN.EX_
.cab
I386/NCADMIN.HL_
.cab
I386/NCCPS401.PP_
.cab
I386/NCCPS801.PP_
.cab
I386/NCOL_519.PP_
.cab
I386/NCPA.CP_
.cab
I386/NCPARAM.IN_
.cab
I386/NCPASHEL.IN_
.cab
I386/NCR53C9X.SYS
.sys windows:4 windows x86 arch:x86

6e01e11efacc89e3b4ac9dc6a1607ffe

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

scsiport.sys

ScsiPortIoMapTransfer
ScsiPortNotification
ScsiPortCompleteRequest
ScsiPortGetLogicalUnit
ScsiPortFlushDma
ScsiPortGetSrb
ScsiPortReadPortUchar
ScsiPortStallExecution
ScsiPortWritePortUchar
ScsiPortLogError
ScsiPortInitialize
ScsiDebugPrint
ScsiPortConvertUlongToPhysicalAddress
ScsiPortGetBusData
ScsiPortFreeDeviceBase
ScsiPortGetDeviceBase

Sections

.text
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 320B - Virtual size: 292B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

INIT
Size: 512B - Virtual size: 508B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 928B - Virtual size: 920B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 480B - Virtual size: 450B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/NCR77C22.SY_
.cab
I386/NCRC700.SYS
.sys windows:4 windows x86 arch:x86

1ca5a7beaef57855a15727cd478390ba

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

scsiport.sys

ScsiPortGetBusData
ScsiPortWritePortUchar
ScsiPortStallExecution
ScsiPortNotification
ScsiPortCompleteRequest
ScsiPortGetLogicalUnit
ScsiPortInitialize
ScsiPortGetUncachedExtension
ScsiPortConvertUlongToPhysicalAddress
ScsiPortReadPortUchar
ScsiPortGetDeviceBase
ScsiPortLogError
ScsiPortGetPhysicalAddress
ScsiPortMoveMemory
ScsiPortReadPortUlong
ScsiPortGetSrb
ScsiPortWritePortUlong

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 384B - Virtual size: 359B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

INIT
Size: 576B - Virtual size: 558B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 928B - Virtual size: 912B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 416B - Virtual size: 400B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/NCRC710.SYS
.sys windows:4 windows x86 arch:x86

001a74f8dbb446bf6e7a7f1f1a29c977

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

scsiport.sys

ScsiPortInitialize
ScsiPortReadPortUchar
ScsiPortWritePortUchar
ScsiPortStallExecution
ScsiPortNotification
ScsiPortCompleteRequest
ScsiPortGetLogicalUnit
ScsiPortGetPhysicalAddress
ScsiPortMoveMemory
ScsiPortWritePortUlong
ScsiPortGetUncachedExtension
ScsiPortConvertUlongToPhysicalAddress
ScsiPortLogError
ScsiPortGetDeviceBase
ScsiPortGetBusData
ScsiPortFreeDeviceBase
ScsiPortReadPortUlong
ScsiPortGetSrb

Sections

.text
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 224B - Virtual size: 224B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

INIT
Size: 608B - Virtual size: 588B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 928B - Virtual size: 912B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 416B - Virtual size: 412B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/NCRC810.SYS
.sys windows:4 windows x86 arch:x86

5bbbe2986eb65092b22e57bb3397e680

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

scsiport.sys

ScsiPortFreeDeviceBase
ScsiPortReadRegisterUchar
ScsiPortWriteRegisterUchar
ScsiPortStallExecution
ScsiPortNotification
ScsiPortCompleteRequest
ScsiPortGetPhysicalAddress
ScsiPortMoveMemory
ScsiPortInitialize
ScsiPortWriteRegisterUlong
ScsiPortReadRegisterBufferUchar
ScsiPortGetDeviceBase
ScsiPortConvertUlongToPhysicalAddress
ScsiPortGetUncachedExtension
ScsiPortLogError
ScsiPortGetLogicalUnit
ScsiPortReadRegisterUlong
ScsiPortGetSrb

Sections

.text
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 224B - Virtual size: 220B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

INIT
Size: 640B - Virtual size: 616B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 992B - Virtual size: 992B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 608B - Virtual size: 596B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/NCS29901.PP_
.cab
I386/NCSW_951.PP_
.cab
I386/NDDEAGNT.EX_
.cab
I386/NDDEAPI.DL_
.cab
I386/NDDEAPIR.EX_
.cab
I386/NDDENB32.DL_
.cab
I386/NDIS.SY_
.cab
I386/NDIS30.DL_
.cab
I386/NDISTAPI.SY_
.cab
I386/NDISWAN.SY_
.cab
I386/NE1000.SY_
.cab
I386/NE2000.SY_
.cab
I386/NE3200.BI_
.cab
I386/NE3200.SY_
.cab
I386/NEC24PIN.DL_
.cab
I386/NET.EX_
.cab
I386/NET.HL_
.cab
I386/NET1.EX_
.cab
I386/NETAPI.DL_
.cab
I386/NETAPI.OS_
.cab
I386/NETAPI32.DL_
.cab
I386/NETBIOS.SY_
.cab
I386/NETBOND.IN_
.cab
I386/NETBT.SY_
.cab
I386/NETCFG.DL_
.cab
I386/NETDDE.EX_
.cab
I386/NETDTECT.DL_
.cab
I386/NETDTECT.IN_
.cab
I386/NETDTECT.SY_
.cab
I386/NETEVENT.DL_
.cab
I386/NETFLX.BI_
.cab
I386/NETFLX.DL_
.cab
I386/NETFLX.SY_
.cab
I386/NETH.DL_
.cab
I386/NETLOGON.DL_
.cab
I386/NETMSG.DL_
.cab
I386/NETRAP.DL_
.cab
I386/NETSETUP.DL_
.cab
I386/NETSTAT.EX_
.cab
I386/NETUI0.DL_
.cab
I386/NETUI1.DL_
.cab
I386/NETUI2.DL_
.cab
I386/NETWARE.DR_
.cab
I386/NETWORK.CN_
.cab
I386/NETWORK.HL_
.cab
I386/NETWORKS.WR_
.cab
I386/NETWORKS._
.cab
I386/NIBBLES.BA_
.cab
I386/NLSFUNC.EX_
.cab
I386/NMAGENT.EX_
.cab
I386/NORWEG.TR_
.cab
I386/NOTEPAD.CN_
.cab
I386/NOTEPAD.EX_
.cab
I386/NOTEPAD.HL_
.cab
I386/NPEISA.SY_
.cab
I386/NPFS.SY_
.cab
I386/NPMCA.SY_
.cab
I386/NT.DO_
.cab
I386/NT.FN_
.cab
I386/NT2.FN_
.cab
I386/NTBACKUP.EX_
.cab
I386/NTBOOKS.EX_
.cab
I386/NTCMDS.CN_
.cab
I386/NTCMDS.FT_
.cab
I386/NTCMDS.HL_
.cab
I386/NTCTL3D.DL_
.cab
I386/NTCX.SY_
.cab
I386/NTDETECT.COM
I386/NTDLL.DLL
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Exports

Exports

CsrAllocateCaptureBuffer
CsrAllocateCapturePointer
CsrAllocateMessagePointer
CsrCaptureMessageBuffer
CsrCaptureMessageString
CsrCaptureTimeout
CsrClientCallServer
CsrClientConnectToServer
CsrFreeCaptureBuffer
CsrIdentifyAlertableThread
CsrNewThread
CsrProbeForRead
CsrProbeForWrite
CsrSetPriorityClass
DbgBreakPoint
DbgPrint
DbgPrompt
DbgSsHandleKmApiMsg
DbgSsInitialize
DbgUiConnectToDbg
DbgUiContinue
DbgUiWaitStateChange
DbgUserBreakPoint
KiRaiseUserExceptionDispatcher
KiUserApcDispatcher
KiUserCallbackDispatcher
KiUserExceptionDispatcher
LdrAccessResource
LdrDisableThreadCalloutsForDll
LdrEnumResources
LdrFindEntryForAddress
LdrFindResourceDirectory_U
LdrFindResource_U
LdrGetDllHandle
LdrGetProcedureAddress
LdrInitializeThunk
LdrLoadDll
LdrProcessRelocationBlock
LdrQueryImageFileExecutionOptions
LdrQueryProcessModuleInformation
LdrShutdownProcess
LdrShutdownThread
LdrUnloadDll
LdrVerifyImageMatchesChecksum
NPXEMULATORTABLE
NlsMbCodePageTag
NlsMbOemCodePageTag
NtAcceptConnectPort
NtAccessCheck
NtAccessCheckAndAuditAlarm
NtAdjustGroupsToken
NtAdjustPrivilegesToken
NtAlertResumeThread
NtAlertThread
NtAllocateLocallyUniqueId
NtAllocateUuids
NtAllocateVirtualMemory
NtCallbackReturn
NtCancelIoFile
NtCancelTimer
NtClearEvent
NtClose
NtCloseObjectAuditAlarm
NtClosePropertySet
NtCompareVariants
NtCompleteConnectPort
NtConnectPort
NtContinue
NtCreateChannel
NtCreateDirectoryObject
NtCreateEvent
NtCreateEventPair
NtCreateFile
NtCreateIoCompletion
NtCreateKey
NtCreateMailslotFile
NtCreateMutant
NtCreateNamedPipeFile
NtCreatePagingFile
NtCreatePort
NtCreateProcess
NtCreateProfile
NtCreatePropertySet
NtCreateSection
NtCreateSemaphore
NtCreateSymbolicLinkObject
NtCreateThread
NtCreateTimer
NtCreateToken
NtCurrentTeb
NtDelayExecution
NtDeleteFile
NtDeleteKey
NtDeleteValueKey
NtDeviceIoControlFile
NtDisplayString
NtDuplicateObject
NtDuplicateToken
NtEnumerateKey
NtEnumerateProperties
NtEnumerateValueKey
NtExtendSection
NtFlushBuffersFile
NtFlushInstructionCache
NtFlushKey
NtFlushPropertySet
NtFlushVirtualMemory
NtFlushWriteBuffer
NtFreeVirtualMemory
NtFsControlFile
NtGetContextThread
NtGetPlugPlayEvent
NtGetTickCount
NtGuidToPropertySetName
NtImpersonateClientOfPort
NtImpersonateThread
NtInitializeRegistry
NtListenChannel
NtListenPort
NtLoadDriver
NtLoadKey
NtLockFile
NtLockVirtualMemory
NtMakeTemporaryObject
NtMapViewOfSection
NtNotifyChangeDirectoryFile
NtNotifyChangeKey
NtOpenChannel
NtOpenDirectoryObject
NtOpenEvent
NtOpenEventPair
NtOpenFile
NtOpenIoCompletion
NtOpenKey
NtOpenMutant
NtOpenObjectAuditAlarm
NtOpenProcess
NtOpenProcessToken
NtOpenSection
NtOpenSemaphore
NtOpenSymbolicLinkObject
NtOpenThread
NtOpenThreadToken
NtOpenTimer
NtPlugPlayControl
NtPrivilegeCheck
NtPrivilegeObjectAuditAlarm
NtPrivilegedServiceAuditAlarm
NtPropertySetNameToGuid
NtProtectVirtualMemory
NtPulseEvent
NtQueryAttributesFile
NtQueryDefaultLocale
NtQueryDirectoryFile
NtQueryDirectoryObject
NtQueryEaFile
NtQueryEvent
NtQueryInformationFile
NtQueryInformationPort
NtQueryInformationProcess
NtQueryInformationThread
NtQueryInformationToken
NtQueryIntervalProfile
NtQueryIoCompletion
NtQueryKey
NtQueryMultipleValueKey
NtQueryMutant
NtQueryObject
NtQueryOleDirectoryFile
NtQueryPerformanceCounter
NtQueryProperties
NtQueryPropertyNames
NtQueryPropertySet
NtQuerySection
NtQuerySecurityObject
NtQuerySemaphore
NtQuerySymbolicLinkObject
NtQuerySystemEnvironmentValue
NtQuerySystemInformation
NtQuerySystemTime
NtQueryTimer
NtQueryTimerResolution
NtQueryValueKey
NtQueryVirtualMemory
NtQueryVolumeInformationFile
NtQueueApcThread
NtRaiseException
NtRaiseHardError
NtReadFile
NtReadRequestData
NtReadVirtualMemory
NtRegisterThreadTerminatePort
NtReleaseMutant
NtReleaseProcessMutant
NtReleaseSemaphore
NtRemoveIoCompletion
NtReplaceKey
NtReplyPort
NtReplyWaitReceivePort
NtReplyWaitReplyPort
NtReplyWaitSendChannel
NtRequestPort
NtRequestWaitReplyPort
NtResetEvent
NtRestoreKey
NtResumeThread
NtSaveKey
NtSendWaitReplyChannel
NtSetContextChannel
NtSetContextThread
NtSetDefaultHardErrorPort
NtSetDefaultLocale
NtSetEaFile
NtSetEvent
NtSetHighEventPair
NtSetHighWaitLowEventPair
NtSetHighWaitLowThread
NtSetInformationFile
NtSetInformationKey
NtSetInformationObject
NtSetInformationProcess
NtSetInformationThread
NtSetInformationToken
NtSetIntervalProfile
NtSetIoCompletion
NtSetLdtEntries
NtSetLowEventPair
NtSetLowWaitHighEventPair
NtSetLowWaitHighThread
NtSetProperties
NtSetPropertyNames
NtSetPropertySetClassId
NtSetSecurityObject
NtSetSystemEnvironmentValue
NtSetSystemInformation
NtSetSystemPowerState
NtSetSystemTime
NtSetTimer
NtSetTimerResolution
NtSetValueKey
NtSetVolumeInformationFile
NtShutdownSystem
NtSignalAndWaitForSingleObject
NtStartProfile
NtStopProfile
NtSuspendThread
NtSystemDebugControl
NtTerminateProcess
NtTerminateThread
NtTestAlert
NtUnloadDriver
NtUnloadKey
NtUnlockFile
NtUnlockVirtualMemory
NtUnmapViewOfSection
NtVdmControl
NtW32Call
NtWaitForMultipleObjects
NtWaitForProcessMutant
NtWaitForSingleObject
NtWaitHighEventPair
NtWaitLowEventPair
NtWriteFile
NtWriteRequestData
NtWriteVirtualMemory
PfxFindPrefix
PfxInitialize
PfxInsertPrefix
PfxRemovePrefix
RestoreEm87Context
RtlAbortRXact
RtlAbsoluteToSelfRelativeSD
RtlAcquirePebLock
RtlAcquireResourceExclusive
RtlAcquireResourceShared
RtlAddAccessAllowedAce
RtlAddAccessDeniedAce
RtlAddAce
RtlAddActionToRXact
RtlAddAttributeActionToRXact
RtlAddAuditAccessAce
RtlAddCompoundAce
RtlAdjustPrivilege
RtlAllocateAndInitializeSid
RtlAllocateHeap
RtlAnsiCharToUnicodeChar
RtlAnsiStringToUnicodeSize
RtlAnsiStringToUnicodeString
RtlAppendAsciizToString
RtlAppendStringToString
RtlAppendUnicodeStringToString
RtlAppendUnicodeToString
RtlApplyRXact
RtlApplyRXactNoFlush
RtlAreAllAccessesGranted
RtlAreAnyAccessesGranted
RtlAreBitsClear
RtlAreBitsSet
RtlAssert
RtlCaptureStackBackTrace
RtlCharToInteger
RtlCheckRegistryKey
RtlClearAllBits
RtlClearBits
RtlCompactHeap
RtlCompareMemory
RtlCompareMemoryUlong
RtlCompareString
RtlCompareUnicodeString
RtlCompressBuffer
RtlConsoleMultiByteToUnicodeN
RtlConvertExclusiveToShared
RtlConvertLongToLargeInteger
RtlConvertSharedToExclusive
RtlConvertSidToUnicodeString
RtlConvertUiListToApiList
RtlConvertUlongToLargeInteger
RtlCopyLuid
RtlCopyLuidAndAttributesArray
RtlCopySecurityDescriptor
RtlCopySid
RtlCopySidAndAttributesArray
RtlCopyString
RtlCopyUnicodeString
RtlCreateAcl
RtlCreateAndSetSD
RtlCreateEnvironment
RtlCreateHeap
RtlCreateProcessParameters
RtlCreateQueryDebugBuffer
RtlCreateRegistryKey
RtlCreateSecurityDescriptor
RtlCreateTagHeap
RtlCreateUnicodeString
RtlCreateUnicodeStringFromAsciiz
RtlCreateUserProcess
RtlCreateUserSecurityObject
RtlCreateUserThread
RtlCustomCPToUnicodeN
RtlCutoverTimeToSystemTime
RtlDeNormalizeProcessParams
RtlDecompressBuffer
RtlDecompressFragment
RtlDelete
RtlDeleteAce
RtlDeleteCriticalSection
RtlDeleteElementGenericTable
RtlDeleteNoSplay
RtlDeleteRegistryValue
RtlDeleteResource
RtlDeleteSecurityObject
RtlDestroyEnvironment
RtlDestroyHeap
RtlDestroyProcessParameters
RtlDestroyQueryDebugBuffer
RtlDetermineDosPathNameType_U
RtlDoesFileExists_U
RtlDosPathNameToNtPathName_U
RtlDosSearchPath_U
RtlDumpResource
RtlEnlargedIntegerMultiply
RtlEnlargedUnsignedDivide
RtlEnlargedUnsignedMultiply
RtlEnterCriticalSection
RtlEnumProcessHeaps
RtlEnumerateGenericTable
RtlEnumerateGenericTableWithoutSplaying
RtlEqualComputerName
RtlEqualDomainName
RtlEqualLuid
RtlEqualPrefixSid
RtlEqualSid
RtlEqualString
RtlEqualUnicodeString
RtlEraseUnicodeString
RtlExpandEnvironmentStrings_U
RtlExtendHeap
RtlExtendedIntegerMultiply
RtlExtendedLargeIntegerDivide
RtlExtendedMagicDivide
RtlFillMemory
RtlFillMemoryUlong
RtlFindClearBits
RtlFindClearBitsAndSet
RtlFindLongestRunClear
RtlFindLongestRunSet
RtlFindMessage
RtlFindSetBits
RtlFindSetBitsAndClear
RtlFirstFreeAce
RtlFormatCurrentUserKeyPath
RtlFormatMessage
RtlFreeAnsiString
RtlFreeHeap
RtlFreeOemString
RtlFreeSid
RtlFreeUnicodeString
RtlGenerate8dot3Name
RtlGetAce
RtlGetCallersAddress
RtlGetCompressionWorkSpaceSize
RtlGetControlSecurityDescriptor
RtlGetCurrentDirectory_U
RtlGetDaclSecurityDescriptor
RtlGetElementGenericTable
RtlGetFullPathName_U
RtlGetGroupSecurityDescriptor
RtlGetLongestNtPathLength
RtlGetNtGlobalFlags
RtlGetNtProductType
RtlGetOwnerSecurityDescriptor
RtlGetProcessHeaps
RtlGetSaclSecurityDescriptor
RtlGetUserInfoHeap
RtlIdentifierAuthoritySid
RtlImageDirectoryEntryToData
RtlImageNtHeader
RtlImpersonateSelf
RtlInitAnsiString
RtlInitCodePageTable
RtlInitNlsTables
RtlInitString
RtlInitUnicodeString
RtlInitializeBitMap
RtlInitializeContext
RtlInitializeCriticalSection
RtlInitializeGenericTable
RtlInitializeRXact
RtlInitializeResource
RtlInitializeSid
RtlInsertElementGenericTable
RtlIntegerToChar
RtlIntegerToUnicodeString
RtlIsDosDeviceName_U
RtlIsGenericTableEmpty
RtlIsNameLegalDOS8Dot3
RtlIsTextUnicode
RtlLargeIntegerAdd
RtlLargeIntegerArithmeticShift
RtlLargeIntegerDivide
RtlLargeIntegerNegate
RtlLargeIntegerShiftLeft
RtlLargeIntegerShiftRight
RtlLargeIntegerSubtract
RtlLargeIntegerToChar
RtlLeaveCriticalSection
RtlLengthRequiredSid
RtlLengthSecurityDescriptor
RtlLengthSid
RtlLocalTimeToSystemTime
RtlLockHeap
RtlLookupElementGenericTable
RtlMakeSelfRelativeSD
RtlMapGenericMask
RtlMoveMemory
RtlMultiByteToUnicodeN
RtlMultiByteToUnicodeSize
RtlNewInstanceSecurityObject
RtlNewSecurityGrantedAccess
RtlNewSecurityObject
RtlNormalizeProcessParams
RtlNtStatusToDosError
RtlNumberGenericTableElements
RtlNumberOfClearBits
RtlNumberOfSetBits
RtlOemStringToUnicodeSize
RtlOemStringToUnicodeString
RtlOemToUnicodeN
RtlOpenCurrentUser
RtlPcToFileHeader
RtlPrefixString
RtlPrefixUnicodeString
RtlProtectHeap
RtlQueryEnvironmentVariable_U
RtlQueryInformationAcl
RtlQueryProcessBackTraceInformation
RtlQueryProcessDebugInformation
RtlQueryProcessHeapInformation
RtlQueryProcessLockInformation
RtlQueryRegistryValues
RtlQuerySecurityObject
RtlQueryTagHeap
RtlQueryTimeZoneInformation
RtlRaiseException
RtlRaiseStatus
RtlRandom
RtlReAllocateHeap
RtlRealPredecessor
RtlRealSuccessor
RtlReleasePebLock
RtlReleaseResource
RtlRemoteCall
RtlResetRtlTranslations
RtlRunDecodeUnicodeString
RtlRunEncodeUnicodeString
RtlSecondsSince1970ToTime
RtlSecondsSince1980ToTime
RtlSelfRelativeToAbsoluteSD
RtlSetAllBits
RtlSetAttributesSecurityDescriptor

Sections

.text
Size: 182KB - Virtual size: 182KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

ECODE
Size: 17KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 30KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

EDATA
Size: 512B - Virtual size: 364B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 64KB - Virtual size: 64KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/NTDOS.SY_
.cab
I386/NTEPC.SY_
.cab
I386/NTFS.SYS
.sys windows:4 windows x86 arch:x86

45e97979ea6605cfc551310dc9b3fad1

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

ntoskrnl.exe

SeCaptureSubjectContext
RtlUpperString
ExAllocatePool
RtlInitUnicodeString
ExIsResourceAcquiredExclusiveLite
RtlFillMemoryUlong
CcUnpinDataForThread
FsRtlIsNameInExpression
FsRtlAreNamesEqual
RtlLookupElementGenericTable
CcSetFileSizes
ExFreePool
ExAcquireResourceSharedLite
RtlUnwind
CcDeferWrite
ExAcquireSharedStarveExclusive
FsRtlCheckLockForWriteAccess
CcPrepareMdlWrite
ExQueryPoolBlockSize
ExReinitializeResourceLite
SeReleaseSubjectContext
FsRtlInitializeFileLock
FsRtlUninitializeFileLock
FsRtlInitializeOplock
FsRtlUninitializeOplock
RtlEnumerateGenericTableWithoutSplaying
RtlInsertElementGenericTable
FsRtlNotifyUninitializeSync
FsRtlDeleteTunnelCache
IoDeleteDevice
RtlInitializeGenericTable
FsRtlNotifyInitializeSync
FsRtlInitializeTunnelCache
MmIsThisAnNtAsSystem
IoBuildSynchronousFsdRequest
SeValidSecurityDescriptor
SeLockSubjectContext
SeAccessCheck
SeAppendPrivileges
SeFreePrivileges
SeAuditingFileEvents
RtlCopyUnicodeString
RtlAppendUnicodeStringToString
SeOpenObjectAuditAlarm
SeUnlockSubjectContext
SeQuerySecurityDescriptorInfo
SeSetSecurityDescriptorInfo
IoGetFileObjectGenericMapping
SeAssignSecurity
RtlLengthSecurityDescriptor
SeDeassignSecurity
IoAcquireVpbSpinLock
IoReleaseVpbSpinLock
ExIsResourceAcquiredSharedLite
FsRtlCheckLockForReadAccess
CcMdlRead
IoGetRelatedDeviceObject
FsRtlPostPagingFileStackOverflow
FsRtlPostStackOverflow
RtlSplay
RtlDelete
ZwOpenKey
ZwQueryValueKey
ZwClose
FsRtlCopyReadA
FsRtlCopyWriteA
FsRtlMdlReadA
FsRtlMdlReadCompleteDev
FsRtlPrepareMdlWriteA
FsRtlMdlWriteCompleteDev
MmQuerySystemSize
KeBugCheck
IoRegisterFileSystem
KeInitializeTimer
KeInitializeDpc
IoIsSystemThread
IoRaiseInformationalHardError
FsRtlFastCheckLockForRead
FsRtlFastCheckLockForWrite
FsRtlIsFatDbcsLegal
RtlUnicodeStringToCountedOemString
RtlFreeOemString
FsRtlDissectName
FsRtlSplitLargeMcb
FsRtlNumberOfRunsInLargeMcb
FsRtlLookupLastLargeMcbEntry
ExDeleteResourceLite
KeInitializeSpinLock
ExInitializeResourceLite
CcGetDirtyPages
KeSetPriorityThread
FsRtlProcessFileLock
FsRtlFastUnlockAllByKey
FsRtlFastUnlockSingle
FsRtlPrivateLock
ExfInterlockedAddUlong
KeNumberProcessors
IoBuildDeviceIoControlRequest
IoCreateDevice
CcSetAdditionalCacheAttributes
CcCopyRead
ObQueryNameString
FsRtlBalanceReads
FsRtlNormalizeNtstatus
RtlDeleteElementGenericTable
NlsMbOemCodePageTag
NlsOemLeadByteInfo
FsRtlLegalAnsiCharacterArray
RtlInitString
RtlCompareString
FsRtlOplockIsFastIoPossible
FsRtlIsNtstatusExpected
FsRtlNotifyFullChangeDirectory
FsRtlDoesNameContainWildCards
ExReleaseResourceLite
ExAcquireResourceExclusiveLite
RtlInitializeBitMap
FsRtlIsTotalDeviceFailure
KeSetEvent
ExReleaseResourceForThreadLite
KeWaitForSingleObject
KeResetEvent
IoBuildAsynchronousFsdRequest
KeDelayExecutionThread
ExGetExclusiveWaiterCount
MmBuildMdlForNonPagedPool
KeInitializeEvent
RtlDecompressFragment
RtlGetCompressionWorkSpaceSize
RtlCompressBuffer
IoMakeAssociatedIrp
IoBuildPartialMdl
IoFreeIrp
MmMapLockedPages
IofCallDriver
IoSetInformation
FsRtlCurrentBatchOplock
IoUpdateShareAccess
IoSetShareAccess
FsRtlOplockFsctrl
IoCheckEaBufferValidity
IoCheckShareAccess
MmFlushImageSection
SeSinglePrivilegeCheck
FsRtlFindInTunnelCache
MmUnlockPages
IoFreeMdl
IoAllocateMdl
MmProbeAndLockPages
RtlReserveChunk
RtlDecompressBuffer
CcCanIWrite
CcPurgeCacheSection
RtlDescribeChunk
FsRtlWaitForIoAtEof
FsRtlFinishIoAtEof
ExQueueWorkItem
ExConvertExclusiveToSharedLite
FsRtlCheckOplock
IoGetRequestorProcess
FsRtlFastUnlockAll
FsRtlAddToTunnelCache
FsRtlNotifyCleanup
FsRtlDeleteKeyFromTunnelCache
RtlFindClearBits
FsRtlNotifyFullReportChange
IoRemoveShareAccess
IofCompleteRequest
KeEnterCriticalRegion
IoIsOperationSynchronous
IoSetTopLevelIrp
KeLeaveCriticalRegion
CcZeroData
CcMdlReadComplete
CcMdlWriteComplete
CcSetDirtyPinnedData
KeSetTimer
CcPreparePinWrite
CcPinRead
CcPinMappedData
CcMapData
IoCreateStreamFileObject
CcInitializeCacheMap
CcSetReadAheadGranularity
CcSetLogHandleForFile
CcUninitializeCacheMap
ObfDereferenceObject
IoGetInitialStack
FsRtlRemoveLargeMcbEntry
FsRtlLookupLargeMcbEntry
FsRtlGetNextLargeMcbEntry
IoGetTopLevelIrp
RtlClearBits
RtlAreBitsSet
RtlSetBits
RtlAreBitsClear
CcFlushCache
FsRtlUninitializeLargeMcb
FsRtlTruncateLargeMcb
RtlNumberOfClearBits
RtlFindLongestRunClear
FsRtlAddLargeMcbEntry
FsRtlInitializeLargeMcb
KeQuerySystemTime
CcCopyWrite
ExAcquireFastMutexUnsafe
ExReleaseFastMutexUnsafe
ExRaiseStatus
MmCanFileBeTruncated
RtlCompareMemory
ExAllocatePoolWithTag
MmSetAddressRangeModified
KeBugCheckEx
RtlGenerate8dot3Name
RtlUpcaseUnicodeString
memmove
CcUnpinData

hal

ExTryToAcquireFastMutex
KfAcquireSpinLock
ExAcquireFastMutex
ExReleaseFastMutex
KfReleaseSpinLock

Sections

.text
Size: 69KB - Virtual size: 69KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

PAGE
Size: 235KB - Virtual size: 235KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

INIT
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/NTIO.SY_
.cab
I386/NTKRNLMP.EXE
.sys windows:4 windows x86 arch:x86

7a3da433b321bf7eb325cad790a3bb98

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

hal

KdPortPutByte
KfAcquireSpinLock
ExAcquireFastMutex
ExReleaseFastMutex
ExTryToAcquireFastMutex
HalRequestSoftwareInterrupt
HalQueryRealTimeClock
HalSetRealTimeClock
HalSetTimeIncrement
KeGetCurrentIrql
HalDisplayString
HalReturnToFirmware
KeQueryPerformanceCounter
HalGetEnvironmentVariable
HalSetEnvironmentVariable
KfLowerIrql
KfRaiseIrql
HalInitSystem
HalReportResourceUsage
HalAllProcessorsStarted
HalAllocateAdapterChannel
HalGetInterruptVector
HalTranslateBusAddress
HalAdjustResourceList
IoAssignDriveLetters
IoReadPartitionTable
HalAllocateCommonBuffer
KdPortInitialize
KdPortGetByte
KfReleaseSpinLock
KdPortPollByte
KdPortSave
KdPortRestore
READ_PORT_ULONG
READ_PORT_USHORT
READ_PORT_UCHAR
WRITE_PORT_ULONG
WRITE_PORT_USHORT
WRITE_PORT_UCHAR
HalInitializeProcessor
HalProcessorIdle
HalClearSoftwareInterrupt
HalRequestIpi
HalHandleNMI
HalBeginSystemInterrupt
HalEndSystemInterrupt
KeStallExecutionProcessor
HalEnableSystemInterrupt
HalDisableSystemInterrupt
KeRaiseIrql
KeLowerIrql
HalSetProfileInterval
HalStartProfileInterrupt
HalStopProfileInterrupt
HalCalibratePerformanceCounter
HalStartNextProcessor
HalQueryDisplayParameters
KeFlushWriteBuffer

Exports

Exports

CcCanIWrite
CcCopyRead
CcCopyWrite
CcDeferWrite
CcFlushCache
CcGetDirtyPages
CcGetFileObjectFromBcb
CcGetFileObjectFromSectionPtrs
CcGetLsnForFileObject
CcInitializeCacheMap
CcIsThereDirtyData
CcMapData
CcMdlRead
CcMdlReadComplete
CcMdlWriteComplete
CcPinMappedData
CcPinRead
CcPrepareMdlWrite
CcPreparePinWrite
CcPurgeCacheSection
CcRepinBcb
CcScheduleReadAhead
CcSetAdditionalCacheAttributes
CcSetDirtyPageThreshold
CcSetDirtyPinnedData
CcSetFileSizes
CcSetLogHandleForFile
CcSetReadAheadGranularity
CcUninitializeCacheMap
CcUnpinData
CcUnpinDataForThread
CcUnpinRepinnedBcb
CcZeroData
DbgBreakPoint
DbgLoadImageSymbols
DbgPrint
DbgPrompt
ExAcquireFastMutexUnsafe
ExAcquireResourceExclusive
ExAcquireResourceExclusiveLite
ExAcquireResourceSharedLite
ExAcquireSharedStarveExclusive
ExAcquireSharedWaitForExclusive
ExAllocatePool
ExAllocatePoolWithQuota
ExAllocatePoolWithQuotaTag
ExAllocatePoolWithTag
ExConvertExclusiveToSharedLite
ExCreateCallback
ExDeleteResource
ExDeleteResourceLite
ExDesktopObjectType
ExDisableResourceBoostLite
ExEnumHandleTable
ExEventObjectType
ExExtendZone
ExFreePool
ExGetExclusiveWaiterCount
ExGetSharedWaiterCount
ExInitializeRegion
ExInitializeResource
ExInitializeResourceLite
ExInitializeZone
ExInterlockedAddLargeInteger
ExInterlockedAddLargeStatistic
ExInterlockedAddUlong
ExInterlockedDecrementLong
ExInterlockedExchangeUlong
ExInterlockedExtendRegion
ExInterlockedExtendZone
ExInterlockedIncrementLong
ExInterlockedInsertHeadList
ExInterlockedInsertTailList
ExInterlockedPopEntryList
ExInterlockedPopEntrySList
ExInterlockedPushEntryList
ExInterlockedPushEntrySList
ExInterlockedRemoveHeadList
ExIsResourceAcquiredExclusiveLite
ExIsResourceAcquiredSharedLite
ExLocalTimeToSystemTime
ExNotifyCallback
ExPostSystemEvent
ExQueryPoolBlockSize
ExQueueWorkItem
ExRaiseAccessViolation
ExRaiseDatatypeMisalignment
ExRaiseException
ExRaiseHardError
ExRaiseStatus
ExRegisterCallback
ExReinitializeResourceLite
ExReleaseFastMutexUnsafe
ExReleaseResourceForThread
ExReleaseResourceForThreadLite
ExReleaseResourceLite
ExSystemExceptionFilter
ExSystemTimeToLocalTime
ExUnregisterCallback
ExWindowStationObjectType
ExfInterlockedAddUlong
ExfInterlockedInsertHeadList
ExfInterlockedInsertTailList
ExfInterlockedPopEntryList
ExfInterlockedPushEntryList
ExfInterlockedRemoveHeadList
Exfi386InterlockedDecrementLong
Exfi386InterlockedExchangeUlong
Exfi386InterlockedIncrementLong
Exi386InterlockedDecrementLong
Exi386InterlockedExchangeUlong
Exi386InterlockedIncrementLong
FsRtlAddLargeMcbEntry
FsRtlAddMcbEntry
FsRtlAddToTunnelCache
FsRtlAllocatePool
FsRtlAllocatePoolWithQuota
FsRtlAllocatePoolWithQuotaTag
FsRtlAllocatePoolWithTag
FsRtlAllocateResource
FsRtlAreNamesEqual
FsRtlBalanceReads
FsRtlCheckLockForReadAccess
FsRtlCheckLockForWriteAccess
FsRtlCheckOplock
FsRtlCopyRead
FsRtlCopyReadA
FsRtlCopyWrite
FsRtlCopyWriteA
FsRtlCurrentBatchOplock
FsRtlDeleteKeyFromTunnelCache
FsRtlDeleteTunnelCache
FsRtlDeregisterUncProvider
FsRtlDissectDbcs
FsRtlDissectName
FsRtlDoesDbcsContainWildCards
FsRtlDoesNameContainWildCards
FsRtlFastCheckLockForRead
FsRtlFastCheckLockForWrite
FsRtlFastUnlockAll
FsRtlFastUnlockAllByKey
FsRtlFastUnlockSingle
FsRtlFindInTunnelCache
FsRtlFinishIoAtEof
FsRtlGetNextFileLock
FsRtlGetNextLargeMcbEntry
FsRtlGetNextMcbEntry
FsRtlInitializeFileLock
FsRtlInitializeLargeMcb
FsRtlInitializeMcb
FsRtlInitializeOplock
FsRtlInitializeTunnelCache
FsRtlIsDbcsInExpression
FsRtlIsFatDbcsLegal
FsRtlIsHpfsDbcsLegal
FsRtlIsNameInExpression
FsRtlIsNtstatusExpected
FsRtlIsTotalDeviceFailure
FsRtlLegalAnsiCharacterArray
FsRtlLookupLargeMcbEntry
FsRtlLookupLastLargeMcbEntry
FsRtlLookupLastMcbEntry
FsRtlLookupMcbEntry
FsRtlMdlRead
FsRtlMdlReadA
FsRtlMdlReadCompleteDev
FsRtlMdlReadDev
FsRtlMdlWriteCompleteDev
FsRtlNormalizeNtstatus
FsRtlNotifyChangeDirectory
FsRtlNotifyCleanup
FsRtlNotifyFullChangeDirectory
FsRtlNotifyFullReportChange
FsRtlNotifyInitializeSync
FsRtlNotifyReportChange
FsRtlNotifyUninitializeSync
FsRtlNumberOfRunsInLargeMcb
FsRtlNumberOfRunsInMcb
FsRtlOplockFsctrl
FsRtlOplockIsFastIoPossible
FsRtlPostPagingFileStackOverflow
FsRtlPostStackOverflow
FsRtlPrepareMdlWrite
FsRtlPrepareMdlWriteA
FsRtlPrepareMdlWriteDev
FsRtlPrivateLock
FsRtlProcessFileLock
FsRtlRegisterUncProvider
FsRtlRemoveLargeMcbEntry
FsRtlRemoveMcbEntry
FsRtlSplitLargeMcb
FsRtlSyncVolumes
FsRtlTruncateLargeMcb
FsRtlTruncateMcb
FsRtlUninitializeFileLock
FsRtlUninitializeLargeMcb
FsRtlUninitializeMcb
FsRtlUninitializeOplock
FsRtlWaitForIoAtEof
HalDispatchTable
HalPrivateDispatchTable
InterlockedCompareExchange
InterlockedDecrement
InterlockedExchange
InterlockedExchangeAdd
InterlockedIncrement
IoAcquireCancelSpinLock
IoAcquireVpbSpinLock
IoAdapterObjectType
IoAllocateAdapterChannel
IoAllocateController
IoAllocateErrorLogEntry
IoAllocateIrp
IoAllocateMdl
IoAssignResources
IoAttachDevice
IoAttachDeviceByPointer
IoBuildAsynchronousFsdRequest
IoBuildDeviceIoControlRequest
IoBuildPartialMdl
IoBuildSynchronousFsdRequest
IoCallDriver
IoCancelIrp
IoCheckDesiredAccess
IoCheckEaBufferValidity
IoCheckFunctionAccess
IoCheckShareAccess
IoCompleteRequest
IoConnectInterrupt
IoCreateController
IoCreateDevice
IoCreateFile
IoCreateNotificationEvent
IoCreateStreamFileObject
IoCreateSymbolicLink
IoCreateSynchronizationEvent
IoCreateUnprotectedSymbolicLink
IoDeleteController
IoDeleteDevice
IoDeleteSymbolicLink
IoDetachDevice
IoDeviceHandlerObjectSize
IoDeviceHandlerObjectType
IoDeviceObjectType
IoDisconnectInterrupt
IoDriverObjectType
IoEnqueueIrp
IoFileObjectType
IoFreeController
IoFreeIrp
IoFreeMdl
IoGetAttachedDevice
IoGetConfigurationInformation
IoGetCurrentProcess
IoGetDeviceObjectPointer
IoGetDeviceToVerify
IoGetFileObjectGenericMapping
IoGetInitialStack
IoGetRelatedDeviceObject
IoGetRequestorProcess
IoGetTopLevelIrp
IoInitializeIrp
IoInitializeTimer
IoIsOperationSynchronous
IoIsSystemThread
IoMakeAssociatedIrp
IoOpenDeviceInstanceKey
IoPageRead
IoQueryDeviceDescription
IoQueryDeviceEnumInfo
IoQueryFileInformation
IoQueryVolumeInformation
IoQueueThreadIrp
IoRaiseHardError
IoRaiseInformationalHardError
IoReadOperationCount
IoReadTransferCount
IoRegisterDriverReinitialization
IoRegisterFileSystem
IoRegisterFsRegistrationChange
IoRegisterShutdownNotification
IoReleaseCancelSpinLock
IoReleaseVpbSpinLock
IoRemoveShareAccess
IoReportHalResourceUsage
IoReportResourceUsage
IoSetDeviceToVerify
IoSetHardErrorOrVerifyDevice
IoSetInformation
IoSetShareAccess
IoSetThreadHardErrorMode
IoSetTopLevelIrp
IoStartNextPacket
IoStartNextPacketByKey
IoStartPacket
IoStartTimer
IoStatisticsLock
IoStopTimer
IoSynchronousPageWrite
IoThreadToProcess
IoUnregisterFileSystem
IoUnregisterFsRegistrationChange
IoUnregisterShutdownNotification
IoUpdateShareAccess
IoVerifyVolume
IoWriteErrorLogEntry
IoWriteOperationCount
IoWriteTransferCount
IofCallDriver
IofCompleteRequest
KdDebuggerEnabled
KdDebuggerNotPresent
KdPollBreakIn
Ke386CallBios
Ke386IoSetAccessProcess
Ke386QueryIoAccessMap
Ke386SetIoAccessMap
KeAcquireSpinLockAtDpcLevel
KeAddSystemServiceTable
KeAttachProcess
KeBoostCurrentThread
KeBugCheck
KeBugCheckEx
KeCancelTimer
KeClearEvent
KeConnectInterrupt
KeDcacheFlushCount
KeDelayExecutionThread
KeDeregisterBugCheckCallback
KeDetachProcess
KeDisconnectInterrupt
KeEnterCriticalRegion
KeEnterKernelDebugger
KeFindConfigurationEntry
KeFindConfigurationNextEntry
KeFlushEntireTb
KeGetCurrentThread
KeGetPreviousMode
KeI386AbiosCall
KeI386AllocateGdtSelectors
KeI386Call16BitCStyleFunction
KeI386Call16BitFunction
KeI386FlatToGdtSelector
KeI386GetLid
KeI386MachineType
KeI386ReleaseGdtSelectors
KeI386ReleaseLid
KeI386SetGdtSelector
KeIcacheFlushCount
KeInitializeApc
KeInitializeDeviceQueue
KeInitializeDpc
KeInitializeEvent
KeInitializeInterrupt
KeInitializeMutant
KeInitializeMutex
KeInitializeQueue
KeInitializeSemaphore
KeInitializeSpinLock
KeInitializeTimer
KeInitializeTimerEx
KeInsertByKeyDeviceQueue
KeInsertDeviceQueue
KeInsertHeadQueue
KeInsertQueue
KeInsertQueueApc
KeInsertQueueDpc
KeIsExecutingDpc
KeLeaveCriticalRegion
KeLoaderBlock
KeNumberProcessors
KeProfileInterrupt
KeProfileInterruptWithSource
KePulseEvent
KeQuerySystemTime
KeQueryTickCount
KeQueryTimeIncrement
KeRaiseUserException
KeReadStateEvent
KeReadStateMutant
KeReadStateMutex
KeReadStateQueue
KeReadStateSemaphore
KeReadStateTimer
KeRegisterBugCheckCallback
KeReleaseMutant
KeReleaseMutex
KeReleaseSemaphore
KeReleaseSpinLockFromDpcLevel
KeRemoveByKeyDeviceQueue
KeRemoveDeviceQueue
KeRemoveEntryDeviceQueue
KeRemoveQueue
KeRemoveQueueDpc
KeResetEvent
KeRestoreFloatingPointState
KeRundownQueue
KeSaveFloatingPointState
KeServiceDescriptorTable
KeSetBasePriorityThread
KeSetDmaIoCoherency
KeSetEvent
KeSetEventBoostPriority
KeSetIdealProcessorThread
KeSetImportanceDpc
KeSetKernelStackSwapEnable
KeSetPriorityThread
KeSetTargetProcessorDpc
KeSetTimeIncrement
KeSetTimer
KeSetTimerEx
KeSynchronizeExecution
KeTerminateThread
KeTickCount
KeUpdateRunTime
KeUpdateSystemTime
KeUserModeCallback
KeWaitForMultipleObjects
KeWaitForMutexObject
KeWaitForSingleObject
KefAcquireSpinLockAtDpcLevel
KefReleaseSpinLockFromDpcLevel
Kei386EoiHelper
KiAcquireSpinLock
KiCoprocessorError
KiDeliverApc
KiDispatchInterrupt
KiIpiSend
KiIpiServiceRoutine
KiReleaseSpinLock
KiUnexpectedInterrupt
Kii386SpinOnSpinLock
LdrAccessResource
LdrEnumResources
LdrFindResourceDirectory_U
LdrFindResource_U
LpcRequestPort
LsaCallAuthenticationPackage
LsaDeregisterLogonProcess
LsaFreeReturnBuffer
LsaLogonUser
LsaLookupAuthenticationPackage
LsaRegisterLogonProcess
MmAdjustWorkingSetSize
MmAllocateContiguousMemory
MmAllocateNonCachedMemory
MmBuildMdlForNonPagedPool
MmCanFileBeTruncated
MmCreateMdl
MmCreateSection
MmDbgTranslatePhysicalAddress
MmDisableModifiedWriteOfSection
MmFlushImageSection
MmForceSectionClosed
MmFreeContiguousMemory
MmFreeNonCachedMemory
MmGetPhysicalAddress
MmGrowKernelStack
MmIsAddressValid
MmIsNonPagedSystemAddressValid
MmIsRecursiveIoFault
MmIsThisAnNtAsSystem
MmLockPagableDataSection
MmLockPagableImageSection
MmLockPagableSectionByHandle
MmMapIoSpace
MmMapLockedPages
MmMapMemoryDumpMdl
MmMapVideoDisplay
MmMapViewInSystemSpace
MmMapViewOfSection
MmPageEntireDriver
MmProbeAndLockPages
MmQuerySystemSize
MmResetDriverPaging
MmSectionObjectType
MmSecureVirtualMemory
MmSetAddressRangeModified
MmSetBankedSection
MmSizeOfMdl
MmUnlockPagableImageSection
MmUnlockPages
MmUnmapIoSpace
MmUnmapLockedPages
MmUnmapVideoDisplay
MmUnmapViewInSystemSpace
MmUnmapViewOfSection
MmUnsecureVirtualMemory
NlsLeadByteInfo
NlsMbCodePageTag
NlsMbOemCodePageTag
NlsOemLeadByteInfo
NtAdjustPrivilegesToken
NtAllocateLocallyUniqueId
NtAllocateUuids
NtAllocateVirtualMemory
NtBuildNumber
NtClose
NtConnectPort
NtCreateEvent

Sections

.text
Size: 257KB - Virtual size: 257KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 39KB - Virtual size: 39KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

PAGELK
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

PAGE
Size: 372KB - Virtual size: 372KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

PAGEKD
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

PAGEPO
Size: 64B - Virtual size: 8B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.edata
Size: 27KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

PAGE
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

PAGEKD
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

INIT
Size: 69KB - Virtual size: 69KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/NTLANMAN.DL_
.cab
I386/NTLANMAN.IN_
.cab
I386/NTLANUI.DL_
.cab
I386/NTLANUI2.DL_
.cab
I386/NTLDR
I386/NTLMINST.IN_
.cab
I386/NTLMSSPS.DL_
.cab
I386/NTLSAPI.DL_
.cab
I386/NTMENU.SE_
.cab
I386/NTOSKRNL.EX_
.cab
I386/NTPRINT.IN_
.cab
I386/NTSHRUI.DL_
.cab
I386/NTVDM.EX_
.cab
I386/NTXALL.SY_
.cab
I386/NTXEM.SY_
.cab
I386/NULL.SY_
.cab
I386/NW16.EX_
.cab
I386/NWAPI16.DL_
.cab
I386/NWAPI32.DL_
.cab
I386/NWC.CP_
.cab
I386/NWCFG.DL_
.cab
I386/NWCONV.CN_
.cab
I386/NWCONV.EX_
.cab
I386/NWCONV.HL_
.cab
I386/NWDOCGW.CN_
.cab
I386/NWDOCGW.HL_
.cab
I386/NWEVENT.DL_
.cab
I386/NWLNKIPX.SY_
.cab
I386/NWLNKNB.SY_
.cab
I386/NWLNKRIP.SY_
.cab
I386/NWLNKSPX.SY_
.cab
I386/NWPROVAU.DL_
.cab
I386/NWRDR.SY_
.cab
I386/NWSAP.DL_
.cab
I386/NWSCRIPT.EX_
.cab
I386/NWWKS.DL_
.cab
I386/O5241503.PP_
.cab
I386/O5242503.PP_
.cab
I386/OEMNADAM.IN_
.cab
I386/OEMNADAP.IN_
.cab
I386/OEMNADAR.IN_
.cab
I386/OEMNADD1.IN_
.cab
I386/OEMNADD2.IN_
.cab
I386/OEMNADD3.IN_
.cab
I386/OEMNADD4.IN_
.cab
I386/OEMNADDE.IN_
.cab
I386/OEMNADDF.IN_
.cab
I386/OEMNADDI.IN_
.cab
I386/OEMNADDS.IN_
.cab
I386/OEMNADDT.IN_
.cab
I386/OEMNADE1.IN_
.cab
I386/OEMNADE2.IN_
.cab
I386/OEMNADE3.IN_
.cab
I386/OEMNADEE.IN_
.cab
I386/OEMNADEM.IN_
.cab
I386/OEMNADEN.IN_
.cab
I386/OEMNADEP.IN_
.cab
I386/OEMNADFD.IN_
.cab
I386/OEMNADIM.IN_
.cab
I386/OEMNADIN.IN_
.cab
I386/OEMNADLB.IN_
.cab
I386/OEMNADLM.IN_
.cab
I386/OEMNADLT.IN_
.cab
I386/OEMNADN1.IN_
.cab
I386/OEMNADN2.IN_
.cab
I386/OEMNADNE.IN_
.cab
I386/OEMNADNF.IN_
.cab
I386/OEMNADNI.IN_
.cab
I386/OEMNADNM.IN_
.cab
I386/OEMNADNP.IN_
.cab
I386/OEMNADP3.IN_
.cab
I386/OEMNADP9.IN_
.cab
I386/OEMNADPM.IN_
.cab
I386/OEMNADT2.IN_
.cab
I386/OEMNADTK.IN_
.cab
I386/OEMNADTM.IN_
.cab
I386/OEMNADUB.IN_
.cab
I386/OEMNADUM.IN_
.cab
I386/OEMNADWD.IN_
.cab
I386/OEMNADWM.IN_
.cab
I386/OEMNADZZ.IN_
.cab
I386/OEMNSVBH.IN_
.cab
I386/OEMNSVBR.IN_
.cab
I386/OEMNSVCU.IN_
.cab
I386/OEMNSVDH.IN_
.cab
I386/OEMNSVDN.IN_
.cab
I386/OEMNSVFT.IN_
.cab
I386/OEMNSVIR.IN_
.cab
I386/OEMNSVNB.IN_
.cab
I386/OEMNSVNW.IN_
.cab
I386/OEMNSVRA.IN_
.cab
I386/OEMNSVRI.IN_
.cab
I386/OEMNSVRP.IN_
.cab
I386/OEMNSVRR.IN_
.cab
I386/OEMNSVSA.IN_
.cab
I386/OEMNSVSM.IN_
.cab
I386/OEMNSVSN.IN_
.cab
I386/OEMNSVSP.IN_
.cab
I386/OEMNSVSV.IN_
.cab
I386/OEMNSVTP.IN_
.cab
I386/OEMNSVWI.IN_
.cab
I386/OEMNSVWK.IN_
.cab
I386/OEMNXPDL.IN_
.cab
I386/OEMNXPIP.IN_
.cab
I386/OEMNXPNB.IN_
.cab
I386/OEMNXPSM.IN_
.cab
I386/OEMNXPSN.IN_
.cab
I386/OEMNXPST.IN_
.cab
I386/OEMNXPTC.IN_
.cab
I386/OK801PF1.PP_
.cab
I386/OKI24.DL_
.cab
I386/OKI9.DL_
.cab
I386/OKI9IBM.DL_
.cab
I386/OKOL8501.PP_
.cab
I386/OKOL8701.PP_
.cab
I386/OK_410E1.PP_
.cab
I386/OL830525.PP_
.cab
I386/OL840518.PP_
.cab
I386/OLE2.DL_
.cab
I386/OLE2DISP.DL_
.cab
I386/OLE2NLS.DL_
.cab
I386/OLE32.DL_
.cab
I386/OLEAUT32.DL_
.cab
I386/OLECLI.DL_
.cab
I386/OLECLI32.DL_
.cab
I386/OLECNV32.DL_
.cab
I386/OLEDLG.DL_
.cab
I386/OLESVR.DL_
.cab
I386/OLESVR32.DL_
.cab
I386/OLETHK32.DL_
.cab
I386/OLIDM24.DL_
.cab
I386/OLIDM9.DL_
.cab
I386/OLISCSI.SYS
.sys windows:4 windows x86 arch:x86

261050b8e3536ff46425dc537827d9db

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

scsiport.sys

ScsiPortFreeDeviceBase
ScsiPortMoveMemory
ScsiPortWritePortUchar
ScsiPortReadPortUlong
ScsiPortReadPortUshort
ScsiPortReadPortUchar
ScsiPortStallExecution
ScsiPortInitialize
ScsiPortLogError
ScsiPortConvertUlongToPhysicalAddress
ScsiPortGetPhysicalAddress
ScsiPortGetDeviceBase
ScsiPortGetLogicalUnit
ScsiPortCompleteRequest
ScsiPortNotification
ScsiPortGetVirtualAddress
ScsiPortWritePortUlong
ScsiPortWritePortUshort
ScsiPortGetUncachedExtension
ScsiPortGetSrb

Sections

.text
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 256B - Virtual size: 236B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

INIT
Size: 672B - Virtual size: 654B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 960B - Virtual size: 944B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 640B - Virtual size: 626B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/OLIV5000.PP_
.cab
I386/OLIVETI1.PP_
.cab
I386/OLIVETI2.PP_
.cab
I386/OPENGL32.DL_
.cab
I386/OS2.EX_
.cab
I386/OS2SRV.EX_
.cab
I386/OS2SS.EX_
.cab
I386/OSO001.007
I386/OSO001.009
.vbs
I386/OSO001.010
I386/OSO001.012
I386/OSO001.016
I386/OSO001.029
.vbs
I386/OTHER.IN_
.cab
I386/P4455514.PP_
.cab
I386/PABNSP32.DL_
.cab
I386/PACKAGER.CN_
.cab
I386/PACKAGER.EX_
.cab
I386/PACKAGER.HL_
.cab
I386/PAD.IN_
.cab
I386/PAINTJET.DL_
.cab
I386/PANEL.SE_
.cab
I386/PANMAP.DL_
.cab
I386/PANSON24.DL_
.cab
I386/PANSON9.DL_
.cab
I386/PAP54001.PP_
.cab
I386/PAP54101.PP_
.cab
I386/PARALLEL.SY_
.cab
I386/PARPORT.SY_
.cab
I386/PASSPORT.MI_
.cab
I386/PAUSE.SE_
.cab
I386/PAX.EX_
.cab
I386/PBRUSH.CN_
.cab
I386/PBRUSH.EX_
.cab
I386/PBRUSH.HL_
.cab
I386/PCIMAC.SY_
.cab
I386/PCL.SE_
.cab
I386/PCL1200.DL_
.cab
I386/PCMCIA.SYS
.sys windows:4 windows x86 arch:x86

b463c4c68e25d46b1b1b4cb22d6a47c7

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

ntoskrnl.exe

RtlAppendUnicodeStringToString
IoCreateSymbolicLink
RtlAppendUnicodeToString
IoCreateDevice
RtlFreeUnicodeString
RtlAnsiStringToUnicodeString
sprintf
RtlCompareUnicodeString
RtlInitAnsiString
IofCompleteRequest
memmove
KeInsertQueueDpc
RtlQueryRegistryValues
ZwOpenKey
IoQueryDeviceDescription
ZwSetValueKey
ZwCreateKey
RtlIntegerToUnicodeString
ZwEnumerateKey
READ_REGISTER_UCHAR
WRITE_REGISTER_UCHAR
MmUnmapIoSpace
MmMapIoSpace
ZwQueryValueKey
strstr
IoStartTimer
IoInitializeTimer
READ_REGISTER_USHORT
RtlLargeIntegerDivide
ExAllocatePoolWithTag
IoConnectInterrupt
ExFreePool
ZwClose
RtlInitUnicodeString
KeInitializeSpinLock
KeSynchronizeExecution
KeInitializeDpc
IoDeleteSymbolicLink
IoDeleteDevice
IoWriteErrorLogEntry
IoRegisterShutdownNotification
IoAllocateErrorLogEntry

hal

KeQueryPerformanceCounter
WRITE_PORT_USHORT
HalTranslateBusAddress
HalGetBusData
READ_PORT_USHORT
WRITE_PORT_UCHAR
READ_PORT_UCHAR
HalAssignSlotResources
KeStallExecutionProcessor
HalGetInterruptVector

Sections

.text
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 416B - Virtual size: 401B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 672B - Virtual size: 660B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

INIT
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/PCNET.HL_
.cab
I386/PENTNT.EX_
.cab
I386/PERFC009.DA_
.cab
I386/PERFCTRS.DL_
.cab
I386/PERFH009.DA_
.cab
I386/PERFMON.CN_
.cab
I386/PERFMON.EX_
.cab
I386/PERFMON.FT_
.cab
I386/PERFMON.HL_
.cab
I386/PERFNW.DL_
.cab
I386/PHIIPX.PP_
.cab
I386/PIANO.AN_
.cab
I386/PIFMGR.DL_
.cab
I386/PING.EX_
.cab
I386/PLACE.DO_
.cab
I386/PLOTTER.DL_
.cab
I386/PLOTUI.CN_
.cab
I386/PLOTUI.DL_
.cab
I386/PLOTUI.HL_
.cab
I386/PLUSTAB.DL_
.cab
I386/PMSPL.DL_
.cab
I386/POINTER.IN_
.cab
I386/PORTS.CP_
.cab
I386/PORTUAS.EX_
.cab
I386/POSIX.EX_
.cab
I386/PRFLBMSG.DL_
.cab
I386/PRINT.EX_
.cab
I386/PRINT01.SE_
.cab
I386/PRINTER.INF
I386/PRINTER.WR_
.cab
I386/PRINTMAN.CN_
.cab
I386/PRINTMAN.EX_
.cab
I386/PRINTMAN.FT_
.cab
I386/PRINTMAN.HL_
.cab
I386/PRINTUI.DL_
.cab
I386/PRNSETUP.IN_
.cab
I386/PROBREP.TXT
I386/PROGMAN.CN_
.cab
I386/PROGMAN.EX_
.cab
I386/PROGMAN.FT_
.cab
I386/PROGMAN.HL_
.cab
I386/PRONET16.SY_
.cab
I386/PROPRINT.DL_
.cab
I386/PROPRN24.DL_
.cab
I386/PRORAPM.DW_
.cab
I386/PROTOCOL._
.cab
I386/PS1.DL_
.cab
I386/PSCRIPT.CN_
.cab
I386/PSCRIPT.DL_
.cab
I386/PSCRIPT.HL_
.cab
I386/PSCRIPT.SE_
.cab
I386/PSCRPTUI.DL_
.cab
I386/PSXDLL.DL_
.cab
I386/PSXSS.EX_
.cab
I386/PX.PP_
.cab
I386/Q2200523.PP_
.cab
I386/Q2210523.PP_
.cab
I386/Q2220523.PP_
.cab
I386/Q30SI503.PP_
.cab
I386/Q810T517.PP_
.cab
I386/Q820T517.PP_
.cab
I386/Q820_517.PP_
.cab
I386/Q860PLS2.PP_
.cab
I386/QBASIC.EX_
.cab
I386/QBASIC.HL_
.cab
I386/QCS10001.PP_
.cab
I386/QCS10002.PP_
.cab
I386/QCS10503.PP_
.cab
I386/QCS20503.PP_
.cab
I386/QCS30503.PP_
.cab
I386/QIC117.SY_
.cab
I386/QL10WNT.SYS
.sys windows:4 windows x86 arch:x86

0b8b51a72944bca78501fae09ed0c805

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

scsiport.sys

ScsiPortWritePortUshort
ScsiPortGetPhysicalAddress
ScsiPortFreeDeviceBase
ScsiPortGetUncachedExtension
ScsiPortGetDeviceBase
ScsiPortSetBusDataByOffset
ScsiPortGetBusData
ScsiPortInitialize
ScsiPortReadPortUshort
ScsiPortStallExecution
ScsiPortNotification
ScsiPortGetLogicalUnit
ScsiPortMoveMemory
ScsiPortLogError

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 224B - Virtual size: 204B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 19KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

INIT
Size: 480B - Virtual size: 470B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 960B - Virtual size: 932B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 288B - Virtual size: 276B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/QM1700_1.PP_
.cab
I386/QM2000_1.PP_
.cab
I386/QM815MR1.PP_
.cab
I386/QM825MR1.PP_
.cab
I386/QMPS4104.PP_
.cab
I386/QMPS8151.PP_
.cab
I386/QMPS8251.PP_
.cab
I386/QMS10602.PP_
.cab
I386/QMS16602.PP_
.cab
I386/QMS1725.PP_
.cab
I386/QMS2025.PP_
.cab
I386/QMS3225.PP_
.cab
I386/QMS420.PP_
.cab
I386/QMS4525.PP_
.cab
I386/QMS45252.PP_
.cab
I386/QMS81470.PP_
.cab
I386/QMS860.PP_
.cab
I386/QMS8P461.PP_
.cab
I386/QMS8_461.PP_
.cab
I386/QMSCS210.PP_
.cab
I386/QMSCS230.PP_
.cab
I386/QMSCS494.PP_
.cab
I386/QMSJP461.PP_
.cab
I386/QMSJ_461.PP_
.cab
I386/QUIETJET.DL_
.cab
I386/QUIKVIEW.EX_
.cab
I386/QUME_470.PP_
.cab
I386/QUOTES._
.cab
I386/QV.DL_
.cab
I386/QV.SY_
.cab
I386/QWIII.DL_
.cab
I386/R6000505.PP_
.cab
I386/RAINBOW.AN_
.cab
I386/RAINDROP.AN_
.cab
I386/RAS.IC_
.cab
I386/RASACD.SY_
.cab
I386/RASADMIN.CN_
.cab
I386/RASADMIN.DL_
.cab
I386/RASADMIN.EX_
.cab
I386/RASADMIN.HL_
.cab
I386/RASAPI16.DL_
.cab
I386/RASAPI32.DL_
.cab
I386/RASARP.SY_
.cab
I386/RASAUTO.DL_
.cab
I386/RASCAUTH.DL_
.cab
I386/RASCBCP.DL_
.cab
I386/RASCCP.DL_
.cab
I386/RASCFG.DL_
.cab
I386/RASCHAP.DL_
.cab
I386/RASCTRS.DL_
.cab
I386/RASDD.DL_
.cab
I386/RASDDUI.CN_
.cab
I386/RASDDUI.DL_
.cab
I386/RASDDUI.HL_
.cab
I386/RASDIAL.EX_
.cab
I386/RASFIL32.DL_
.cab
I386/RASGLOSS.CN_
.cab
I386/RASGLOSS.HL_
.cab
I386/RASGPRXY.DL_
.cab
I386/RASGTWY.DL_
.cab
I386/RASIPCP.DL_
.cab
I386/RASIPHLP.DL_
.cab
I386/RASIPXCP.DL_
.cab
I386/RASMAN.DL_
.cab
I386/RASMAN.EX_
.cab
I386/RASMON.EX_
.cab
I386/RASMSG.DL_
.cab
I386/RASMXS.DL_
.cab
I386/RASNBFCP.DL_
.cab
I386/RASNBIPC.DL_
.cab
I386/RASPAP.DL_
.cab
I386/RASPHONE.CN_
.cab
I386/RASPHONE.EX_
.cab
I386/RASPHONE.HL_
.cab
I386/RASPPP.DL_
.cab
I386/RASPPPEN.DL_
.cab
I386/RASREAD.TX_
.cab
I386/RASRES.DL_
.cab
I386/RASSAUTH.DL_
.cab
I386/RASSER.DL_
.cab
I386/RASSETUP.CN_
.cab
I386/RASSETUP.HL_
.cab
I386/RASSPAP.DL_
.cab
I386/RASSPRXY.EX_
.cab
I386/RASSRV.EX_
.cab
I386/RASTAPI.DL_
.cab
I386/RCP.EX_
.cab
I386/RDISK.CN_
.cab
I386/RDISK.EX_
.cab
I386/RDISK.HL_
.cab
I386/RDR.SY_
.cab
I386/README.WR_
.cab
I386/RECOVER.EX_
.cab
I386/REDBRICK.BM_
.cab
I386/REDIR.EX_
.cab
I386/REGEDIT.CN_
.cab
I386/REGEDIT.EX_
.cab
I386/REGEDIT.HL_
.cab
I386/REGEDITV.CN_
.cab
I386/REGEDITV.HL_
.cab
I386/REGEDT32.CN_
.cab
I386/REGEDT32.EX_
.cab
I386/REGEDT32.HL_
.cab
I386/REGISTRY.IN_
.cab
I386/RELAY.DL_
.cab
I386/REMLINE.BA_
.cab
I386/REPLACE.EX_
.cab
I386/RESTORE.EX_
.cab
I386/REVIEW.SE_
.cab
I386/REXEC.EX_
.cab
I386/RICHED32.DL_
.cab
I386/RINGIN.WA_
.cab
I386/RINGOUT.WA_
.cab
I386/RIVETS.BM_
.cab
I386/RNAL.DL_
.cab
I386/ROMAN.FO_
.cab
I386/ROUTE.EX_
.cab
I386/ROUTER.EX_
.cab
I386/ROUTETAB.DL_
.cab
I386/RPCDCE4.DL_
.cab
I386/RPCLTC1.DL_
.cab
I386/RPCLTC8.DL_
.cab
I386/RPCLTCCM.DL_
.cab
I386/RPCLTS1.DL_
.cab
I386/RPCLTS8.DL_
.cab
I386/RPCLTSCM.DL_
.cab
I386/RPCNS4.DL_
.cab
I386/RPCRT4.DL_
.cab
I386/RPCSS.EX_
.cab
I386/RPLCMD.EX_
.cab
I386/RPLCNV.EX_
.cab
I386/RPLMGR.CN_
.cab
I386/RPLMGR.EX_
.cab
I386/RPLMGR.HL_
.cab
I386/RPLSVC.EX_
.cab
I386/RSH.EX_
.cab
I386/RSHX32.DL_
.cab
I386/RUNDLL32.EX_
.cab
I386/RUNONCE.EX_
.cab
I386/S3.DL_
.cab
I386/S3.SY_
.cab
I386/S5232503.PP_
.cab
I386/S746J522.PP_
.cab
I386/SAMLIB.DL_
.cab
I386/SAMSRV.DL_
.cab
I386/SAVEDUMP.EX_
.cab
I386/SCANPST.EX_
.cab
I386/SCANPST.HL_
.cab
I386/SCCVIEW.DL_
.cab
I386/SCG20522.PP_
.cab
I386/SCHDPL32.CN_
.cab
I386/SCHDPL32.EX_
.cab
I386/SCHDPL32.FT_
.cab
I386/SCHDPL32.HL_
.cab
I386/SCHMSG32.DL_
.cab
I386/SCM.EX_
.cab
I386/SCRIPT.FO_
.cab
I386/SCRNSAVE.SC_
.cab
I386/SCSI.IN_
.cab
I386/SCSIPORT.SYS
.sys windows:4 windows x86 arch:x86

330fdf0374d240cd32ce238b6d1c1911

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

ntoskrnl.exe

IoDeleteDevice
IoInitializeTimer
IoCreateDevice
ZwOpenKey
IoGetConfigurationInformation
KeWaitForSingleObject
IofCallDriver
IoBuildDeviceIoControlRequest
KeInitializeEvent
KeInitializeDeviceQueue
MmMapIoSpace
KeInitializeDpc
KeInitializeTimer
IoDisconnectInterrupt
IoStopTimer
IoQueryDeviceDescription
RtlInitAnsiString
_wcsnicmp
RtlUnicodeStringToAnsiString
DbgBreakPoint
ZwEnumerateValueKey
ZwSetValueKey
wcslen
ZwCreateKey
MmUnmapIoSpace
KeSynchronizeExecution
RtlCopyUnicodeString
_strnicmp
ZwQueryValueKey
IoStartPacket
KeInsertByKeyDeviceQueue
IofCompleteRequest
KeRemoveDeviceQueue
KefReleaseSpinLockFromDpcLevel
KefAcquireSpinLockAtDpcLevel
IoAllocateAdapterChannel
InterlockedIncrement
KeInsertQueueDpc
MmMapLockedPages
IoStartNextPacket
InterlockedDecrement
KeSetTimer
KeCancelTimer
IoBuildAsynchronousFsdRequest
IoFreeIrp
IoFreeMdl
MmUnlockPages
KeRemoveByKeyDeviceQueue
IoBuildSynchronousFsdRequest
RtlUnwind
RtlInitUnicodeString
IoReportResourceUsage
IoStartTimer
KeInitializeSpinLock
IoConnectInterrupt
RtlInitString
ExAllocatePoolWithTag
sprintf
RtlFreeUnicodeString
RtlAnsiStringToUnicodeString
IoCreateSymbolicLink
ZwClose
IoAllocateErrorLogEntry
IoWriteErrorLogEntry
RtlAppendUnicodeStringToString
ExFreePool
RtlIntegerToUnicodeString

hal

IoFreeMapRegisters
IoFlushAdapterBuffers
IoFreeAdapterChannel
KfReleaseSpinLock
IoMapTransfer
HalAssignSlotResources
HalFreeCommonBuffer
HalSetBusDataByOffset
HalAllocateCommonBuffer
HalTranslateBusAddress
HalGetBusData
HalGetAdapter
HalGetInterruptVector
KfAcquireSpinLock
KfRaiseIrql
KfLowerIrql

Exports

Exports

ScsiDebugPrint
ScsiPortCompleteRequest
ScsiPortConvertPhysicalAddressToUlong
ScsiPortConvertUlongToPhysicalAddress
ScsiPortFlushDma
ScsiPortFreeDeviceBase
ScsiPortGetBusData
ScsiPortGetDeviceBase
ScsiPortGetLogicalUnit
ScsiPortGetPhysicalAddress
ScsiPortGetSrb
ScsiPortGetUncachedExtension
ScsiPortGetVirtualAddress
ScsiPortInitialize
ScsiPortIoMapTransfer
ScsiPortLogError
ScsiPortMoveMemory
ScsiPortNotification
ScsiPortReadPortBufferUchar
ScsiPortReadPortBufferUlong
ScsiPortReadPortBufferUshort
ScsiPortReadPortUchar
ScsiPortReadPortUlong
ScsiPortReadPortUshort
ScsiPortReadRegisterBufferUchar
ScsiPortReadRegisterBufferUlong
ScsiPortReadRegisterBufferUshort
ScsiPortReadRegisterUchar
ScsiPortReadRegisterUlong
ScsiPortReadRegisterUshort
ScsiPortSetBusDataByOffset
ScsiPortStallExecution
ScsiPortValidateRange
ScsiPortWritePortBufferUchar
ScsiPortWritePortBufferUlong
ScsiPortWritePortBufferUshort
ScsiPortWritePortUchar
ScsiPortWritePortUlong
ScsiPortWritePortUshort
ScsiPortWriteRegisterBufferUchar
ScsiPortWriteRegisterBufferUlong
ScsiPortWriteRegisterBufferUshort
ScsiPortWriteRegisterUchar
ScsiPortWriteRegisterUlong
ScsiPortWriteRegisterUshort

Sections

.text
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 544B - Virtual size: 524B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 32B - Virtual size: 1B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

PAGE
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.edata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

INIT
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 928B - Virtual size: 920B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/SCSIPRNT.SY_
.cab
I386/SCSISCAN.SY_
.cab
I386/SECURITY.DL_
.cab
I386/SEIKO.DL_
.cab
I386/SEIKO24E.DL_
.cab
I386/SEIKOSH9.DL_
.cab
I386/SEIKO_04.PP_
.cab
I386/SEIKO_14.PP_
.cab
I386/SENDFL32.DL_
.cab
I386/SERIAL.SY_
.cab
I386/SERIFE.FO_
.cab
I386/SERIFEE.FO_
.cab
I386/SERIFEG.FO_
.cab
I386/SERIFER.FO_
.cab
I386/SERIFET.FO_
.cab
I386/SERIFF.FO_
.cab
I386/SERIFFE.FO_
.cab
I386/SERIFFG.FO_
.cab
I386/SERIFFR.FO_
.cab
I386/SERIFFT.FO_
.cab
I386/SERMOUSE.SY_
.cab
I386/SERVICES.EX_
.cab
I386/SERVICES._
.cab
I386/SETACL.EX_
.cab
I386/SETT01.SE_
.cab
I386/SETT02.SE_
.cab
I386/SETT03.SE_
.cab
I386/SETT04.SE_
.cab
I386/SETUP.EX_
.cab
I386/SETUP.IN_
.cab
I386/SETUP.TXT
I386/SETUP16.IN_
.cab
I386/SETUPAPI.DL_
.cab
I386/SETUPDD.SYS
.sys windows:4 windows x86 arch:x86

3051ba4192338e3e75b356a4c9b4c972

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

ntoskrnl.exe

ZwOpenDirectoryObject
RtlExtendedLargeIntegerDivide
RtlUpcaseUnicodeChar
ExAllocatePoolWithTag
ExFreePool
_wcsnicmp
ZwQuerySymbolicLinkObject
RtlImageNtHeader
_wcsicmp
swprintf
ZwDeviceIoControlFile
IoGetConfigurationInformation
wcscat
wcschr
strncpy
isspace
ZwOpenSymbolicLinkObject
wcsncpy
ZwFlushKey
ZwOpenKey
ZwCreateKey
ZwSetValueKey
ZwQueryValueKey
ZwDeleteValueKey
ZwSetInformationFile
ZwFsControlFile
ZwQueryInformationFile
wcsrchr
ZwOpenFile
ZwMapViewOfSection
ZwCreateSection
ZwUnmapViewOfSection
RtlExtendedIntegerMultiply
wcsstr
ZwClose
strncmp
_snprintf
ObReferenceObjectByHandle
IoFileObjectType
IoCreateDevice
IoDeleteDevice
IofCompleteRequest
KeWaitForSingleObject
KeSetEvent
RtlUnicodeToOemN
IoSetInformation
KeI386MachineType
wcscmp
ZwEnumerateKey
RtlOemToUnicodeN
ExAllocatePool
RtlOemStringToUnicodeString
RtlxOemStringToUnicodeSize
NlsMbOemCodePageTag
ZwDeleteKey
NtClose
ZwLoadDriver
IoRegisterDriverReinitialization
KeLoaderBlock
isdigit
RtlUnicodeStringToOemString
ZwEnumerateValueKey
ZwQuerySecurityObject
ZwQueryDirectoryFile
KeDelayExecutionThread
WRITE_REGISTER_UCHAR
WRITE_REGISTER_USHORT
RtlUnwind
RtlInitUnicodeString
ZwCreateFile
sprintf
ZwWriteFile
memmove
ZwReadFile
atol
_stricmp
_strnicmp
strchr
wcslen
wcscpy
ObfDereferenceObject
ObQueryNameString
ZwQueryVolumeInformationFile
_snwprintf

hal

HalReturnToFirmware
HalQueryRealTimeClock
HalDisplayString

spddlang.sys

SplangInitializeFontSupport
SplangReinitializeKeyboard
SplangPadString
SplangQueryMinimizeExtraSpacing
SplangSelectKeyboard
SplangGetCursorChar
SplangGetLineDrawChar
SplangGetColumnCount
SplangSetRegistryData
SplangGetVideoFunctionVector

Exports

Exports

SpConfirmExit
SpDisplayRawMessage
SpDisplayStatusOptions
SpDisplayStatusText
SpDupStringW
SpFatalSifError
SpFileExists
SpFreeHwComponent
SpGetKeyName
SpGetSectionKeyIndex
SpGetSectionLineIndex
SpLoadKbdLayoutDll
SpMemAlloc
SpMemFree
SpMnAddItem
SpMnCreate
SpMnDestroy
SpMnDisplay
SpMultiByteStringToUnsigned
SpOpenAndMapFile
SpOpenSetValueAndClose
SpStartScreen
SpUnmapFile
SpWaitValidKey
SpvidClearScreenRegion
pFrameBufferDetermineModeToUse
pSpvidMapVideoMemory

Sections

.text
Size: 129KB - Virtual size: 129KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 44KB - Virtual size: 43KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 800B - Virtual size: 786B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

INIT
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 1004B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/SETUPDLL.DL_
.cab
I386/SETUPLDR.BIN
I386/SETUPNT.CN_
.cab
I386/SETUPNT.HL_
.cab
I386/SETUPP.INI
I386/SETUPREG.HIV
I386/SETVER.EX_
.cab
I386/SFLOPPY.SYS
.sys windows:4 windows x86 arch:x86

65fc6f921c9e8d11820aa753ad01ba45

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

ntoskrnl.exe

IofCallDriver
IoSetHardErrorOrVerifyDevice
KeWaitForSingleObject
IoBuildAsynchronousFsdRequest
memmove
sprintf
IofCompleteRequest
ExAllocatePoolWithTag
IoCreateSymbolicLink
RtlInitString
RtlAnsiStringToUnicodeString
IoGetConfigurationInformation
RtlFreeUnicodeString
IoDeleteDevice
IoBuildSynchronousFsdRequest
ExFreePool
KeInitializeEvent

hal

KfRaiseIrql
KfLowerIrql

class2.sys

ScsiClassAsynchronousCompletion
ScsiClassSendSrbSynchronous
ScsiClassFindModePage
ScsiClassDeviceControl
ScsiClassReadDriveCapacity
ScsiClassCreateDeviceObject
ScsiClassClaimDevice
ScsiClassModeSense
ScsiClassGetInquiryData
ScsiClassInitialize
ScsiClassGetCapabilities

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 288B - Virtual size: 284B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 288B - Virtual size: 288B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

INIT
Size: 960B - Virtual size: 952B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 928B - Virtual size: 924B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 288B - Virtual size: 288B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/SFMAPI.DL_
.cab
I386/SFMATALK.SY_
.cab
I386/SFMATCFG.DL_
.cab
I386/SFMATMSG.DL_
.cab
I386/SFMCTRS.DL_
.cab
I386/SFMICON.VO_
.cab
I386/SFMICONS.IN_
.cab
I386/SFMMAP.IN_
.cab
I386/SFMMGR.CP_
.cab
I386/SFMMGR.HL_
.cab
I386/SFMMON.DL_
.cab
I386/SFMMSG.DL_
.cab
I386/SFMPRINT.EX_
.cab
I386/SFMPSDIB.DL_
.cab
I386/SFMPSEXE.EX_
.cab
I386/SFMPSFNT.DL_
.cab
I386/SFMPSPRT.DL_
.cab
I386/SFMRES.DL_
.cab
I386/SFMSRV.SY_
.cab
I386/SFMSVC.EX_
.cab
I386/SFMUAM.IF_
.cab
I386/SFMUAM.RS_
.cab
I386/SFMUAM.TX_
.cab
I386/SFMUTIL.DL_
.cab
I386/SFMWSHAT.DL_
.cab
I386/SHARE.EX_
.cab
I386/SHARE01.SE_
.cab
I386/SHARE02.SE_
.cab
I386/SHCOMPUI.DL_
.cab
I386/SHELL.DL_
.cab
I386/SHELL32.DL_
.cab
I386/SHSCRAP.DL_
.cab
I386/SIMPTCP.DL_
.cab
I386/SIZENESW.AN_
.cab
I386/SIZENS.AN_
.cab
I386/SIZENWSE.AN_
.cab
I386/SIZEWE.AN_
.cab
I386/SKPSFCD1.PP_
.cab
I386/SLCD32.SYS
.sys windows:4 windows x86 arch:x86

8754123c6568bc80cbd932f212449ced

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

scsiport.sys

ScsiPortLogError
ScsiPortFreeDeviceBase
ScsiPortGetDeviceBase
ScsiPortConvertUlongToPhysicalAddress
ScsiPortNotification
ScsiPortWritePortUchar
ScsiPortGetLogicalUnit
ScsiPortCompleteRequest
ScsiPortInitialize
ScsiPortReadPortUchar
ScsiPortStallExecution
ScsiPortWritePortBufferUchar
ScsiPortReadPortBufferUchar
ScsiPortWritePortUshort
ScsiPortReadPortUshort

Sections

.text
Size: 21KB - Virtual size: 21KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 800B - Virtual size: 784B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 864B - Virtual size: 860B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

INIT
Size: 544B - Virtual size: 516B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 960B - Virtual size: 936B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 928B - Virtual size: 920B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/SMALLE.FO_
.cab
I386/SMALLEE.FO_
.cab
I386/SMALLEG.FO_
.cab
I386/SMALLER.FO_
.cab
I386/SMALLET.FO_
.cab
I386/SMALLF.FO_
.cab
I386/SMALLFE.FO_
.cab
I386/SMALLFG.FO_
.cab
I386/SMALLFR.FO_
.cab
I386/SMALLFT.FO_
.cab
I386/SMCISA.SY_
.cab
I386/SMSS.EX_
.cab
I386/SNDBLST.DL_
.cab
I386/SNDBLST.SY_
.cab
I386/SNDREC32.EX_
.cab
I386/SNDSYS.SY_
.cab
I386/SNDSYS32.DL_
.cab
I386/SNDVOL32.CN_
.cab
I386/SNDVOL32.EX_
.cab
I386/SNDVOL32.FT_
.cab
I386/SNDVOL32.HL_
.cab
I386/SNMP.EX_
.cab
I386/SNMPTRAP.EX_
.cab
I386/SOFTWARE._
.cab
I386/SOL.CN_
.cab
I386/SOL.EX_
.cab
I386/SOL.HL_
.cab
I386/SORT.EX_
.cab
I386/SORTKEY.NL_
.cab
I386/SORTTBLS.NL_
.cab
I386/SOUND.DL_
.cab
I386/SOUND.DR_
.cab
I386/SOUNDREC.CN_
.cab
I386/SOUNDREC.FT_
.cab
I386/SOUNDREC.HL_
.cab
I386/SPARROW.SYS
.sys windows:4 windows x86 arch:x86

1f2755b0d6ebac595435a453673432e7

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

scsiport.sys

ScsiPortWritePortBufferUchar
ScsiPortConvertUlongToPhysicalAddress
ScsiPortFreeDeviceBase
ScsiPortReadRegisterBufferUchar
ScsiPortGetDeviceBase
ScsiPortNotification
ScsiPortLogError
ScsiPortReadPortBufferUchar
ScsiPortReadPortUchar
ScsiPortWritePortUchar
ScsiPortInitialize
ScsiPortStallExecution
ScsiPortGetLogicalUnit
ScsiPortFlushDma
ScsiPortWritePortBufferUshort
ScsiPortWritePortBufferUlong
ScsiPortReadPortBufferUshort
ScsiPortReadPortBufferUlong
ScsiPortIoMapTransfer

Sections

Init
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.text
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 352B - Virtual size: 344B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 96B - Virtual size: 69B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

INIT
Size: 672B - Virtual size: 658B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 960B - Virtual size: 936B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 608B - Virtual size: 588B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/SPDDLANG.SYS
.sys windows:4 windows x86 arch:x86

6b9424e7bb2011fa83974aaf40dc8513

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

ntoskrnl.exe

wcslen

Exports

Exports

SplangGetColumnCount
SplangGetCursorChar
SplangGetLineDrawChar
SplangGetVideoFunctionVector
SplangInitializeFontSupport
SplangPadString
SplangQueryMinimizeExtraSpacing
SplangReinitializeKeyboard
SplangSelectKeyboard
SplangSetRegistryData
SplangTerminateFontSupport

Sections

.text
Size: 96B - Virtual size: 94B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 224B - Virtual size: 193B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 32B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 448B - Virtual size: 428B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

INIT
Size: 96B - Virtual size: 72B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 1024B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 32B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/SPOCK.SYS
.sys windows:4 windows x86 arch:x86

c38979a7e34cf5962cd918d0a58be06d

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

scsiport.sys

ScsiPortGetLogicalUnit
ScsiPortLogError
ScsiPortWritePortUchar
ScsiPortStallExecution
ScsiPortReadPortUchar
ScsiPortGetPhysicalAddress
ScsiPortGetUncachedExtension
ScsiPortNotification
ScsiPortInitialize
ScsiPortGetVirtualAddress
ScsiPortConvertUlongToPhysicalAddress
ScsiPortCompleteRequest
ScsiPortWritePortUlong
ScsiPortMoveMemory
ScsiPortFreeDeviceBase
ScsiPortGetDeviceBase

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 288B - Virtual size: 260B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

INIT
Size: 544B - Virtual size: 544B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 960B - Virtual size: 932B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 256B - Virtual size: 228B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/SPOOLSS.DL_
.cab
I386/SPOOLSS.EX_
.cab
I386/SQUARES.BM_
.cab
I386/SRV.SY_
.cab
I386/SRVMGR.CN_
.cab
I386/SRVMGR.CP_
.cab
I386/SRVMGR.EX_
.cab
I386/SRVMGR.FT_
.cab
I386/SRVMGR.HL_
.cab
I386/SRVSVC.DL_
.cab
I386/SS3DFO.SC_
.cab
I386/SSBEZIER.SC_
.cab
I386/SSERIFE.FO_
.cab
I386/SSERIFEE.FO_
.cab
I386/SSERIFEG.FO_
.cab
I386/SSERIFER.FO_
.cab
I386/SSERIFET.FO_
.cab
I386/SSERIFF.FO_
.cab
I386/SSERIFFE.FO_
.cab
I386/SSERIFFG.FO_
.cab
I386/SSERIFFR.FO_
.cab
I386/SSERIFFT.FO_
.cab
I386/SSFLWBOX.SC_
.cab
I386/SSMARQUE.SC_
.cab
I386/SSMYST.SC_
.cab
I386/SSPIPES.SC_
.cab
I386/SSSTARS.SC_
.cab
I386/SSTEXT3D.SC_
.cab
I386/STAR24E.DL_
.cab
I386/STAR9E.DL_
.cab
I386/STARJET.DL_
.cab
I386/STDOLE.TL_
.cab
I386/STDOLE32.TL_
.cab
I386/STOPWTCH.AN_
.cab
I386/STORAGE.DL_
.cab
I386/STORE32.DL_
.cab
I386/STREAMS.SY_
.cab
I386/SUBROUTN.IN_
.cab
I386/SUBST.EX_
.cab
I386/SWEDISH.TR_
.cab
I386/SWITCH.IN_
.cab
I386/SXBIOS.BI_
.cab
I386/SXFEP.BI_
.cab
I386/SYMBOL.TT_
.cab
I386/SYMBOLE.FO_
.cab
I386/SYMBOLF.FO_
.cab
I386/SYNCAPP.EX_
.cab
I386/SYNCENG.DL_
.cab
I386/SYNCUI.DL_
.cab
I386/SYNTH.DL_
.cab
I386/SYNTH.PA_
.cab
I386/SYNTH.SY_
.cab
I386/SYSCPL.CP_
.cab
I386/SYSEDIT.EX_
.cab
I386/SYSPRINT.SE_
.cab
I386/SYSSETUP.DL_
.cab
I386/SYSSETUP.IN_
.cab
I386/SYSTEM.DR_
.cab
I386/SYSTEM.IN_
.cab
I386/SYSTEM.MD_
.cab
I386/SYSTEM._
.cab
I386/SYSTRAY.EX_
.cab
I386/SYSWRAP.IN_
.cab
I386/T128.SYS
.sys windows:4 windows x86 arch:x86

16cfac920ab92584dfe426a63f89fc4b

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

scsiport.sys

ScsiPortGetLogicalUnit
ScsiPortInitialize
ScsiPortFreeDeviceBase
ScsiPortConvertUlongToPhysicalAddress
ScsiPortGetDeviceBase
ScsiPortNotification
ScsiPortLogError
ScsiPortCompleteRequest
ScsiPortReadRegisterUchar
ScsiPortStallExecution
ScsiPortWriteRegisterUchar

Sections

.text
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 256B - Virtual size: 248B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 64B - Virtual size: 48B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

INIT
Size: 416B - Virtual size: 394B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 960B - Virtual size: 940B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 352B - Virtual size: 328B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/T13B.SYS
.sys windows:4 windows x86 arch:x86

d219062d74aac59c84a1abebf5cfc5ef

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

scsiport.sys

ScsiPortReadPortUchar
ScsiPortInitialize
ScsiPortFreeDeviceBase
ScsiPortConvertUlongToPhysicalAddress
ScsiPortGetDeviceBase
ScsiPortNotification
ScsiPortGetLogicalUnit
ScsiPortCompleteRequest
ScsiPortLogError
ScsiPortStallExecution
ScsiPortWritePortUchar
ScsiPortWritePortBufferUshort
ScsiPortReadPortBufferUshort

Sections

.text
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 256B - Virtual size: 256B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 64B - Virtual size: 48B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

INIT
Size: 480B - Virtual size: 458B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 960B - Virtual size: 940B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 384B - Virtual size: 362B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/T1513470.PP_
.cab
I386/T1535470.PP_
.cab
I386/T1INSTAL.DL_
.cab
I386/TADA.WA_
.cab
I386/TANDQIC.SY_
.cab
I386/TAPE.IN_
.cab
I386/TAPE.SY_
.cab
I386/TAPI32.DL_
.cab
I386/TAPISRV.EX_
.cab
I386/TARTAN.BM_
.cab
I386/TASKMAN.EX_
.cab
I386/TCARC.SY_
.cab
I386/TCPCFG.DL_
.cab
I386/TCPIP.CN_
.cab
I386/TCPIP.HL_
.cab
I386/TCPIP.SY_
.cab
I386/TCPSVCS.EX_
.cab
I386/TDI.SY_
.cab
I386/TELEPHON.CP_
.cab
I386/TELEPHON.HL_
.cab
I386/TELNET.CN_
.cab
I386/TELNET.EX_
.cab
I386/TELNET.HL_
.cab
I386/TERMINAL.CN_
.cab
I386/TERMINAL.EX_
.cab
I386/TERMINAL.HL_
.cab
I386/TFTP.EX_
.cab
I386/TGA.DL_
.cab
I386/TGA.SYS
.sys windows:4 windows x86 arch:x86

31b919c166272548ed6ecedfa0a0d27b

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

videoprt.sys

VideoPortGetBusData
VideoPortReadRegisterUlong
VideoPortSetBusData
VideoPortMapMemory
VideoPortFreeDeviceBase
VideoPortGetDeviceBase
VideoPortZeroMemory
VideoPortGetAccessRanges
VideoPortSetRegistryParameters
VideoPortWriteRegisterUlong
VideoPortUnmapMemory
VideoPortInitialize

ntoskrnl.exe

RtlQueryRegistryValues
MmUnlockPages
KeSetEvent
KeWaitForSingleObject
IoAllocateAdapterChannel
KeResetEvent
KeInitializeEvent
MmGetPhysicalAddress
RtlUnwind
IoAllocateMdl
IoFreeMdl
ExAllocatePoolWithTag
RtlMoveMemory
swprintf
MmProbeAndLockPages

hal

IoFlushAdapterBuffers
IoMapTransfer
KfRaiseIrql
HalGetAdapter
KfLowerIrql

Sections

.text
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 320B - Virtual size: 300B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

INIT
Size: 960B - Virtual size: 930B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 960B - Virtual size: 940B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 608B - Virtual size: 600B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/THATCH.BM_
.cab
I386/THINKJET.DL_
.cab
I386/TI08_450.PP_
.cab
I386/TI15_470.PP_
.cab
I386/TI850.DL_
.cab
I386/TIM17521.PP_
.cab
I386/TIM35521.PP_
.cab
I386/TIMEDATE.CP_
.cab
I386/TIMER.DR_
.cab
I386/TIMES.TT_
.cab
I386/TIMESBD.TT_
.cab
I386/TIMESBI.TT_
.cab
I386/TIMESI.TT_
.cab
I386/TIML6231.PP_
.cab
I386/TIMLP231.PP_
.cab
I386/TIMLP232.PP_
.cab
I386/TIMLP233.PP_
.cab
I386/TIMLP651.PP_
.cab
I386/TIMLP652.PP_
.cab
I386/TIMLP671.PP_
.cab
I386/TIMLP672.PP_
.cab
I386/TIMP3231.PP_
.cab
I386/TIMPE231.PP_
.cab
I386/TITRB161.PP_
.cab
I386/TITRBO61.PP_
.cab
I386/TITRBO91.PP_
.cab
I386/TIX17521.PP_
.cab
I386/TIX35521.PP_
.cab
I386/TK200172.PP_
.cab
I386/TK200392.PP_
.cab
I386/TK220171.PP_
.cab
I386/TK220391.PP_
.cab
I386/TK340171.PP_
.cab
I386/TK340691.PP_
.cab
I386/TKP200I2.PP_
.cab
I386/TKP200J1.PP_
.cab
I386/TKP220I1.PP_
.cab
I386/TKP220J1.PP_
.cab
I386/TKP2SDJ1.PP_
.cab
I386/TKP2SDX1.PP_
.cab
I386/TKP300I1.PP_
.cab
I386/TKP300J1.PP_
.cab
I386/TKP480J1.PP_
.cab
I386/TKPH1401.PP_
.cab
I386/TKPH2SD1.PP_
.cab
I386/TKPH4401.PP_
.cab
I386/TKPH4801.PP_
.cab
I386/TKPH5401.PP_
.cab
I386/TKPHPXI1.PP_
.cab
I386/TKPHZ2J1.PP_
.cab
I386/TKPHZ3J1.PP_
.cab
I386/TKPHZR21.PP_
.cab
I386/TKPHZR22.PP_
.cab
I386/TKPHZR31.PP_
.cab
I386/TKPHZR32.PP_
.cab
I386/TKPXE171.PP_
.cab
I386/TKPXE391.PP_
.cab
I386/TMV1.SYS
.sys windows:4 windows x86 arch:x86

abee5e70ef9eba4cbc9bbe2e60e518e1

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

scsiport.sys

ScsiPortCompleteRequest
ScsiPortInitialize
ScsiPortFreeDeviceBase
ScsiPortConvertUlongToPhysicalAddress
ScsiPortGetDeviceBase
ScsiPortNotification
ScsiPortGetLogicalUnit
ScsiPortLogError
ScsiPortStallExecution
ScsiPortReadPortUchar
ScsiPortWritePortUchar

Sections

.text
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 320B - Virtual size: 320B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 64B - Virtual size: 48B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

INIT
Size: 416B - Virtual size: 386B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 992B - Virtual size: 968B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 320B - Virtual size: 312B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/TOOLHELP.DL_
.cab
I386/TRACE.DL_
.cab
I386/TRACERT.EX_
.cab
I386/TREE.CO_
.cab
I386/TRIDENT.SY_
.cab
I386/TRIUMPH1.PP_
.cab
I386/TRIUMPH2.PP_
.cab
I386/TRNSCH32.DL_
.cab
I386/TSD32.DL_
.cab
I386/TSSOFT32.AC_
.cab
I386/TTY.HL_
.cab
I386/TXTONLY.DL_
.cab
I386/TXTSETUP.SIF
I386/TYPELIB.DL_
.cab
I386/U1200XL4.PP_
.cab
I386/U1800PMR.PP_
.cab
I386/U1800XL.PP_
.cab
I386/U1800XLO.PP_
.cab
I386/U9415470.PP_
.cab
I386/UBNEI.BI_
.cab
I386/UBNEI.SY_
.cab
I386/UFAT.DL_
.cab
I386/ULIB.DL_
.cab
I386/ULTRA124.SYS
.sys windows:4 windows x86 arch:x86

5ae9398a33f615acd8ef03e0a108b405

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

scsiport.sys

ScsiPortGetSrb
ScsiPortConvertUlongToPhysicalAddress
ScsiPortReadPortUchar
ScsiPortFreeDeviceBase
ScsiPortReadPortUlong
ScsiPortGetDeviceBase
ScsiPortWritePortUchar
ScsiPortNotification
ScsiPortInitialize
ScsiPortWritePortUlong
ScsiPortStallExecution
ScsiPortGetPhysicalAddress
ScsiPortGetVirtualAddress
ScsiPortLogError
ScsiPortCompleteRequest

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 224B - Virtual size: 204B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

INIT
Size: 512B - Virtual size: 502B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 960B - Virtual size: 956B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 192B - Virtual size: 176B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/ULTRA14F.SYS
.sys windows:4 windows x86 arch:x86

7293a85e1d731a21308122160c4fb292

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

scsiport.sys

ScsiPortGetLogicalUnit
ScsiPortConvertUlongToPhysicalAddress
ScsiPortReadPortUchar
ScsiPortFreeDeviceBase
ScsiPortGetDeviceBase
ScsiPortStallExecution
ScsiPortWritePortUchar
ScsiPortNotification
ScsiPortWritePortUlong
ScsiPortInitialize
ScsiPortGetPhysicalAddress
ScsiPortGetSrb
ScsiPortGetVirtualAddress
ScsiPortReadPortUlong
ScsiPortMoveMemory
ScsiPortLogError
ScsiPortCompleteRequest

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 256B - Virtual size: 256B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

INIT
Size: 576B - Virtual size: 558B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 960B - Virtual size: 952B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 192B - Virtual size: 180B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/ULTRA24F.SYS
.sys windows:4 windows x86 arch:x86

2f29db187effb950080b53f2928570f3

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

scsiport.sys

ScsiPortStallExecution
ScsiPortConvertUlongToPhysicalAddress
ScsiPortReadPortUchar
ScsiPortFreeDeviceBase
ScsiPortReadPortUlong
ScsiPortGetDeviceBase
ScsiPortWritePortUchar
ScsiPortNotification
ScsiPortInitialize
ScsiPortGetPhysicalAddress
ScsiPortGetSrb
ScsiPortGetVirtualAddress
ScsiPortLogError
ScsiPortMoveMemory
ScsiPortCompleteRequest

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 224B - Virtual size: 204B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

INIT
Size: 512B - Virtual size: 498B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 960B - Virtual size: 948B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 160B - Virtual size: 154B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/UMPNPMGR.DL_
.cab
I386/UNATTEND.TXT
I386/UNI17521.PP_
.cab
I386/UNI39521.PP_
.cab
I386/UNICODE.NL_
.cab
I386/UNIMDM.TS_
.cab
I386/UNLODCTR.EX_
.cab
I386/UNTFS.DL_
.cab
I386/UPEDIT.CN_
.cab
I386/UPEDIT.EX_
.cab
I386/UPEDIT.FT_
.cab
I386/UPEDIT.HL_
.cab
I386/UPG351DB.EX_
.cab
I386/UPS.CP_
.cab
I386/UPS.EX_
.cab
I386/UREG.DL_
.cab
I386/USASCII.TR_
.cab
I386/USER.EX_
.cab
I386/USER32.DL_
.cab
I386/USERDIFF._
.cab
I386/USERENV.DL_
.cab
I386/USERINIT.EX_
.cab
I386/USETUP.EXE
.sys windows:4 windows x86 arch:x86

5a4647e12c71d2714144f3d59b7dafe2

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

ntdll

NtUnloadKey
RtlSetOwnerSecurityDescriptor
RtlSetDaclSecurityDescriptor
RtlCreateSecurityDescriptor
RtlAddAccessAllowedAce
RtlCreateAcl
RtlAllocateAndInitializeSid
NtClose
NtSetSecurityObject
NtOpenFile
RtlInitUnicodeString
RtlAdjustPrivilege
LdrUnloadDll
LdrGetProcedureAddress
LdrLoadDll
NtQueryInformationProcess
NtWaitForSingleObject
NtResumeThread
NtTerminateProcess
RtlDestroyProcessParameters
RtlCreateUserProcess
RtlCreateProcessParameters
RtlFreeSid
NtLoadKey
NtDeleteKey
NtOpenKey
NtSaveKey
NtQueryDirectoryObject
NtFlushVirtualMemory
NtShutdownSystem
NtFsControlFile
NtSetEvent
NtDeviceIoControlFile
RtlPcToFileHeader
RtlCreateUserThread
NtCreateFile
NtCreateEvent
NtQuerySystemInformation
NtInitializeRegistry
DbgBreakPoint
RtlAllocateHeap
RtlUnicodeStringToAnsiString
RtlNormalizeProcessParams

Sections

.text
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 82KB - Virtual size: 82KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 652B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/USRMGR.CN_
.cab
I386/USRMGR.EX_
.cab
I386/USRMGR.FT_
.cab
I386/USRMGR.HL_
.cab
I386/UTILITY.IN_
.cab
I386/V5334522.PP_
.cab
I386/V7VGA.RO_
.cab
I386/V7VRAM.SY_
.cab
I386/VANISHER.AN_
.cab
I386/VCDEX.DL_
.cab
I386/VDMDBG.DL_
.cab
I386/VDMREDIR.DL_
.cab
I386/VER.DL_
.cab
I386/VERSION.DL_
.cab
I386/VFORM32.DL_
.cab
I386/VGA.DL_
.cab
I386/VGA.DR_
.cab
I386/VGA.SYS
.sys windows:4 windows x86 arch:x86

812a550a3bfff92f6f6e08a308e5f3bd

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

ntoskrnl.exe

RtlUpcaseUnicodeString
ExAllocatePool
RtlQueryRegistryValues
wcsstr
ExFreePool

videoprt.sys

VideoPortInitialize
VideoPortGetDeviceBase
VideoPortWritePortUlong
VideoPortReadPortUlong
VideoPortWriteRegisterUchar
VideoPortWritePortUchar
VideoPortReadPortUchar
VideoPortWritePortUshort
VideoPortReadPortUshort
VideoPortWritePortBufferUshort
VideoPortInt10
VideoPortZeroMemory
VideoPortZeroDeviceMemory
VideoPortReadRegisterUchar
VideoPortSynchronizeExecution
VideoPortVerifyAccessRanges
VideoPortGetRegistryParameters
VideoPortUnmapMemory
VideoPortMapMemory
VideoPortSetTrappedEmulatorPorts
VideoPortWriteRegisterBufferUchar
VideoPortMoveMemory

Sections

.text
Size: 256B - Virtual size: 232B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 288B - Virtual size: 268B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 32B - Virtual size: 8B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

PAGE
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

PAGE
Size: 864B - Virtual size: 858B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

INIT
Size: 928B - Virtual size: 902B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 928B - Virtual size: 916B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 288B - Virtual size: 284B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/VGA256.DL_
.cab
I386/VGA64K.DL_
.cab
I386/VGA737.FO_
.cab
I386/VGA850.FON
I386/VGA852.FO_
.cab
I386/VGA857.FO_
.cab
I386/VGA860.FON
I386/VGA861.FON
I386/VGA863.FON
I386/VGA865.FON
I386/VGA866.FO_
.cab
I386/VGA869.FO_
.cab
I386/VGAFIX.FO_
.cab
I386/VGAFIXE.FO_
.cab
I386/VGAFIXG.FO_
.cab
I386/VGAFIXR.FO_
.cab
I386/VGAFIXT.FO_
.cab
I386/VGAOEM.FON
I386/VGASYS.FO_
.cab
I386/VGASYSE.FO_
.cab
I386/VGASYSG.FO_
.cab
I386/VGASYSR.FO_
.cab
I386/VGASYST.FO_
.cab
I386/VIDEO.IN_
.cab
I386/VIDEOPRT.SYS
.sys windows:4 windows x86 arch:x86

968b806f3278619c684fc61d33a6c672

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

ntoskrnl.exe

MmUnmapIoSpace
MmUnmapVideoDisplay
ExAllocatePoolWithTag
MmMapIoSpace
KeWaitForSingleObject
MmMapVideoDisplay
IoQueryDeviceDescription
ZwReadFile
ZwQueryInformationFile
ZwOpenFile
RtlQueryRegistryValues
IoDeleteDevice
IoDeleteSymbolicLink
IoDisconnectInterrupt
RtlWriteRegistryValue
IoCreateSymbolicLink
RtlAppendUnicodeStringToString
RtlAppendUnicodeToString
RtlIntegerToUnicodeString
ZwOpenSection
IoInitializeTimer
IoConnectInterrupt
IoReportResourceUsage
KeSetEvent
KeInsertQueueDpc
IoWriteErrorLogEntry
IoAllocateErrorLogEntry
ZwMapViewOfSection
ObOpenObjectByPointer
MmSetBankedSection
READ_REGISTER_UCHAR
READ_REGISTER_USHORT
READ_REGISTER_ULONG
READ_REGISTER_BUFFER_UCHAR
READ_REGISTER_BUFFER_USHORT
READ_REGISTER_BUFFER_ULONG
IoStartTimer
IoStopTimer
KeSynchronizeExecution
DbgBreakPoint
WRITE_REGISTER_UCHAR
WRITE_REGISTER_USHORT
WRITE_REGISTER_ULONG
WRITE_REGISTER_BUFFER_UCHAR
WRITE_REGISTER_BUFFER_USHORT
WRITE_REGISTER_BUFFER_ULONG
IofCompleteRequest
RtlInitUnicodeString
memmove
IoAssignResources
ZwClose
RtlCompareUnicodeString
ZwOpenKey
Ke386SetIoAccessMap
ExAllocatePool
Ke386QueryIoAccessMap
ZwFreeVirtualMemory
ExFreePool
ZwAllocateVirtualMemory
KeDetachProcess
KeAttachProcess
Ke386CallBios
PsProcessType
SeSinglePrivilegeCheck
ZwSetInformationProcess
ObfDereferenceObject
ObReferenceObjectByHandle
Ke386IoSetAccessProcess
KeInitializeDpc
ZwUnmapViewOfSection
IoCreateDevice

hal

WRITE_PORT_BUFFER_ULONG
WRITE_PORT_BUFFER_USHORT
WRITE_PORT_ULONG
WRITE_PORT_USHORT
WRITE_PORT_BUFFER_UCHAR
KeGetCurrentIrql
KfRaiseIrql
WRITE_PORT_UCHAR
HalSetBusDataByOffset
READ_PORT_BUFFER_ULONG
KfLowerIrql
READ_PORT_BUFFER_UCHAR
READ_PORT_ULONG
READ_PORT_BUFFER_USHORT
READ_PORT_UCHAR
HalGetInterruptVector
READ_PORT_USHORT
HalGetBusDataByOffset
HalEnableSystemInterrupt
HalTranslateBusAddress
HalDisableSystemInterrupt
HalGetBusData
HalAcquireDisplayOwnership
HalAssignSlotResources

Exports

Exports

VideoPortCompareMemory
VideoPortDisableInterrupt
VideoPortEnableInterrupt
VideoPortFreeDeviceBase
VideoPortGetAccessRanges
VideoPortGetBusData
VideoPortGetDeviceBase
VideoPortGetDeviceData
VideoPortGetRegistryParameters
VideoPortInitialize
VideoPortInt10
VideoPortLogError
VideoPortMapBankedMemory
VideoPortMapMemory
VideoPortMoveMemory
VideoPortReadPortBufferUchar
VideoPortReadPortBufferUlong
VideoPortReadPortBufferUshort
VideoPortReadPortUchar
VideoPortReadPortUlong
VideoPortReadPortUshort
VideoPortReadRegisterBufferUchar
VideoPortReadRegisterBufferUlong
VideoPortReadRegisterBufferUshort
VideoPortReadRegisterUchar
VideoPortReadRegisterUlong
VideoPortReadRegisterUshort
VideoPortScanRom
VideoPortSetBusData
VideoPortSetRegistryParameters
VideoPortSetTrappedEmulatorPorts
VideoPortStallExecution
VideoPortStartTimer
VideoPortStopTimer
VideoPortSynchronizeExecution
VideoPortUnmapMemory
VideoPortVerifyAccessRanges
VideoPortWritePortBufferUchar
VideoPortWritePortBufferUlong
VideoPortWritePortBufferUshort
VideoPortWritePortUchar
VideoPortWritePortUlong
VideoPortWritePortUshort
VideoPortWriteRegisterBufferUchar
VideoPortWriteRegisterBufferUlong
VideoPortWriteRegisterBufferUshort
VideoPortWriteRegisterUchar
VideoPortWriteRegisterUlong
VideoPortWriteRegisterUshort
VideoPortZeroDeviceMemory
VideoPortZeroMemory

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 608B - Virtual size: 584B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 128B - Virtual size: 112B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

PAGE
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.edata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

INIT
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 928B - Virtual size: 920B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 480B - Virtual size: 476B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/VIDEOSIM.SY_
.cab
I386/VMMREG32.DL_
.cab
I386/VSASC8.DL_
.cab
I386/VSBMP.DL_
.cab
I386/VSDRW.DL_
.cab
I386/VSEXE.DL_
.cab
I386/VSEXE2.DL_
.cab
I386/VSMP.DL_
.cab
I386/VSMSW.DL_
.cab
I386/VSPP.DL_
.cab
I386/VSRTF.DL_
.cab
I386/VSTIFF.DL_
.cab
I386/VSW6.DL_
.cab
I386/VSWKS.DL_
.cab
I386/VSWMF.DL_
.cab
I386/VSWORD.DL_
.cab
I386/VSWORK.DL_
.cab
I386/VSWP5.DL_
.cab
I386/VSWP6.DL_
.cab
I386/VSWPF.DL_
.cab
I386/VSXL5.DL_
.cab
I386/VT42P522.PP_
.cab
I386/VT43P522.PP_
.cab
I386/VT4510A1.PP_
.cab
I386/VT4530A1.PP_
.cab
I386/VT4530B1.PP_
.cab
I386/VT4530C1.PP_
.cab
I386/VT4533B1.PP_
.cab
I386/VT4533C1.PP_
.cab
I386/VT453EA1.PP_
.cab
I386/VT453EB1.PP_
.cab
I386/VT4550A1.PP_
.cab
I386/VT4550B1.PP_
.cab
I386/VT4550C1.PP_
.cab
I386/VT4551A1.PP_
.cab
I386/VT4563A1.PP_
.cab
I386/VT4563B1.PP_
.cab
I386/VT49901.PP_
.cab
I386/VT4L3001.PP_
.cab
I386/VT4L3301.PP_
.cab
I386/VT4L5001.PP_
.cab
I386/VT4L5301.PP_
.cab
I386/VT530522.PP_
.cab
I386/VT550522.PP_
.cab
I386/VT600P1.PP_
.cab
I386/VT600W1.PP_
.cab
I386/VT60P480.PP_
.cab
I386/VWIPXSPX.DL_
.cab
I386/VWIPXSPX.EX_
.cab
I386/W32.DL_
.cab
I386/WAGTAIL.AN_
.cab
I386/WANG15.PP_
.cab
I386/WANG15FP.PP_
.cab
I386/WANGQIC.SY_
.cab
I386/WD33C93.SYS
.sys windows:4 windows x86 arch:x86

9ce03b5e114435da643fa8f441c4feef

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

scsiport.sys

ScsiPortIoMapTransfer
ScsiPortNotification
ScsiPortGetLogicalUnit
ScsiPortFlushDma
ScsiPortReadPortUchar
ScsiPortStallExecution
ScsiPortWritePortUchar
ScsiPortLogError
ScsiPortInitialize
ScsiPortFreeDeviceBase
ScsiPortGetDeviceBase
ScsiPortConvertUlongToPhysicalAddress

Sections

.text
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 224B - Virtual size: 204B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

INIT
Size: 416B - Virtual size: 408B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 960B - Virtual size: 956B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 416B - Virtual size: 412B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/WDL.TR_
.cab
I386/WDT32.DL_
.cab
I386/WDVGA.SY_
.cab
I386/WEITEKP9.DL_
.cab
I386/WEITEKP9.SY_
.cab
I386/WFWNET.DR_
.cab
I386/WGPOADMN.DL_
.cab
I386/WGPOCPL.CP_
.cab
I386/WGPOMG32.DL_
.cab
I386/WIN.CO_
.cab
I386/WIN.IN_
.cab
I386/WIN32K.SY_
.cab
I386/WIN32SPL.DL_
.cab
I386/WIN87EM.DL_
.cab
I386/WINCHAT.CN_
.cab
I386/WINCHAT.EX_
.cab
I386/WINCHAT.HL_
.cab
I386/WINDISK.EX_
.cab
I386/WINDISKA.CN_
.cab
I386/WINDISKA.FT_
.cab
I386/WINDISKA.HL_
.cab
I386/WINDOWS.CN_
.cab
I386/WINDOWS.HL_
.cab
I386/WINFILE.CN_
.cab
I386/WINFILE.EX_
.cab
I386/WINFILE.FT_
.cab
I386/WINFILE.HL_
.cab
I386/WINFILE.IN_
.cab
I386/WINGDING.TT_
.cab
I386/WINHELP.EX_
.cab
I386/WINHELP.HL_
.cab
I386/WINHLP32.CN_
.cab
I386/WINHLP32.EX_
.cab
I386/WINHLP32.HL_
.cab
I386/WINLOGO.BM_
.cab
I386/WINLOGON.EX_
.cab
I386/WINMINE.CN_
.cab
I386/WINMINE.EX_
.cab
I386/WINMINE.HL_
.cab
I386/WINMM.DL_
.cab
I386/WINMSD.EX_
.cab
I386/WINNT.CN_
.cab
I386/WINNT.EXE
I386/WINNT.FT_
.cab
I386/WINNT.HL_
.cab
I386/WINNT32.EXE
.exe windows:4 windows x86 arch:x86

28917daf759aa72690fa5fa9e270b28e

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

ntdll

NtClose
RtlInitUnicodeString
NtQuerySymbolicLinkObject
NtOpenSymbolicLinkObject
RtlImageNtHeader
RtlUnwind

advapi32

FreeSid
EqualSid
OpenSCManagerW
OpenServiceW
QueryServiceStatus
ControlService
RegCloseKey
RegSetValueExW
RegCreateKeyExW
InitiateSystemShutdownW
AdjustTokenPrivileges
CloseServiceHandle
AllocateAndInitializeSid
GetTokenInformation
OpenProcessToken
LookupPrivilegeValueW

kernel32

GetWindowsDirectoryW
lstrlenW
GetPrivateProfileStringW
WritePrivateProfileSectionW
lstrcmpiW
lstrcatW
lstrcpyW
FindClose
FindFirstFileW
GetModuleFileNameW
CloseHandle
CreateThread
GetTickCount
ExitProcess
GetSystemInfo
GetProcAddress
GetModuleHandleW
VirtualLock
LocalAlloc
LocalFree
LocalReAlloc
WaitForSingleObject
CreateMutexW
ExitThread
Sleep
DeleteFileW
CopyFileW
SetErrorMode
GetCurrentDirectoryW
ReleaseMutex
WriteFile
lstrlenA
CreateFileW
MultiByteToWideChar
DeviceIoControl
GetDriveTypeW
GetDiskFreeSpaceW
GetVolumeInformationW
CreateDirectoryW
SetFileAttributesW
WritePrivateProfileStringW
GetCurrentProcess
GetVersion
SetFileAttributesA
lstrcpyA
GetWindowsDirectoryA
LeaveCriticalSection
EnterCriticalSection
WaitForMultipleObjects
ResetEvent
CreateEventW
InitializeCriticalSection
GetCurrentThreadId
FindNextFileW
GetExitCodeThread
RemoveDirectoryW
lstrcmpW
QueryDosDeviceW
WideCharToMultiByte
CreateFileMappingW
GetFileSize
UnmapViewOfFile
GetFileAttributesW
GetEnvironmentStrings
GetCommandLineA
UnhandledExceptionFilter
GetModuleFileNameA
GetFileType
GetStdHandle
GetStartupInfoA
GetProcessHeap
HeapAlloc
HeapFree
SetFilePointer
LCMapStringW
GetStringTypeW
GetLocalTime
SetStdHandle
FlushFileBuffers
CreateFileA
GetTimeZoneInformation
SetEndOfFile
GetLastError
ReadFile
SetEvent
FormatMessageW
MapViewOfFile

gdi32

ExtTextOutW
SetTextColor
SetBkColor
GetTextExtentPoint32W
GetStockObject
BitBlt
DeleteObject
DeleteDC
SelectObject
GetDeviceCaps
CreateCompatibleDC

user32

GetDC
GetDesktopWindow
LoadStringA
CharLowerW
SetForegroundWindow
CheckDlgButton
MessageBeep
WinHelpW
EndDialog
SetDlgItemTextW
SetWindowTextW
LoadStringW
DialogBoxParamW
SetFocus
GetDlgItem
SendDlgItemMessageW
EnableWindow
PostMessageW
SendMessageW
GetDlgItemTextW
EndPaint
LoadBitmapW
BeginPaint
CharUpperA
LoadIconW
MessageBoxW
ReleaseDC
GetClientRect
PostThreadMessageW
RegisterClassW
LoadCursorW
wsprintfW
UpdateWindow
InvalidateRect
SetWindowLongW
GetWindowLongW
InflateRect
FrameRect
CharNextW
DefWindowProcW
ShowWindow
MoveWindow
GetWindowRect
GetSystemMetrics
wsprintfA
MsgWaitForMultipleObjects
PeekMessageW
IsDlgButtonChecked
GetWindowTextLengthW

Sections

.text
Size: 50KB - Virtual size: 49KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 7KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 22KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/WINNT32.HLP
I386/WINOLDAP.MO_
.cab
I386/WINPERMS.TX_
.cab
I386/WINPRINT.DL_
.cab
I386/WINS.EX_
.cab
I386/WINSADMN.CN_
.cab
I386/WINSADMN.EX_
.cab
I386/WINSADMN.HL_
.cab
I386/WINSCTRS.DL_
.cab
I386/WINSEVNT.DL_
.cab
I386/WINSMIB.DL_
.cab
I386/WINSOCK.DL_
.cab
I386/WINSPOOL.DR_
.cab
I386/WINSPOOL.EX_
.cab
I386/WINSRPC.DL_
.cab
I386/WINSRV.DL_
.cab
I386/WINSTRM.DL_
.cab
I386/WINVER.EX_
.cab
I386/WKSSVC.DL_
.cab
I386/WMSFR32.DL_
.cab
I386/WMSUI32.DL_
.cab
I386/WOW32.DL_
.cab
I386/WOWDEB.EX_
.cab
I386/WOWEXEC.EX_
.cab
I386/WOWFAX.DL_
.cab
I386/WOWFAXUI.DL_
.cab
I386/WRITE.CN_
.cab
I386/WRITE.EX_
.cab
I386/WRITE.HL_
.cab
I386/WS2-32.DL_
.cab
I386/WS2HELP.DL_
.cab
I386/WSHISN.DL_
.cab
I386/WSHNETBS.DL_
.cab
I386/WSHTCPIP.DL_
.cab
I386/WSOCK32.DL_
.cab
I386/XABIOS.BI_
.cab
I386/XACOOK.BI_
.cab
I386/XACTSRV.DL_
.cab
I386/XCOPY.EX_
.cab
I386/XGA.DL_
.cab
I386/XGA.SY_
.cab
I386/XPORTS.IN_
.cab
I386/XRDT0851.PP_
.cab
I386/XRDT0901.PP_
.cab
I386/XRDT1351.PP_
.cab
I386/XR_45051.PP_
.cab
I386/XR_45201.PP_
.cab
I386/XR_49001.PP_
.cab
I386/XT_82001.PP_
.cab
I386/ZIGZAG.BM_
.cab
I386/_DEFAULT.PI_
.cab
I386/_LAYOUT.INF
I386/_PRINTER.IN_
.cab
Microsoft Windows NT 4.0 (''Cairo'' 4.00.1175.1 Server)/bootdisks/Disk01.img
Microsoft Windows NT 4.0 (''Cairo'' 4.00.1175.1 Server)/bootdisks/Disk02.img
Microsoft Windows NT 4.0 (''Cairo'' 4.00.1175.1 Server)/bootdisks/Disk03.img

Sharing

General

Malware Config

Signatures

Files

ce5f8b3b518d409d9305146d0a430d6a

Headers

File Characteristics

Imports

ntoskrnl.exe

hal

Sections

.text Size: 3KB - Virtual size: 3KB

.rdata Size: 352B - Virtual size: 348B

.data Size: 32B - Virtual size: 4B

INIT Size: 3KB - Virtual size: 3KB

.rsrc Size: 960B - Virtual size: 936B

.reloc Size: 352B - Virtual size: 338B

3ff663ac4f6c3e2f00f298fd26187c7e

Headers

File Characteristics

Imports

scsiport.sys

Sections

.text Size: 6KB - Virtual size: 6KB

.rdata Size: 224B - Virtual size: 220B

INIT Size: 576B - Virtual size: 572B

.rsrc Size: 960B - Virtual size: 940B

.reloc Size: 288B - Virtual size: 270B

1a3bffcadaf0f5ccfe6763e567bad75c

Headers

File Characteristics

Imports

scsiport.sys

Sections

.text Size: 2KB - Virtual size: 2KB

.rdata Size: 224B - Virtual size: 220B

INIT Size: 544B - Virtual size: 528B

.rsrc Size: 960B - Virtual size: 944B

.reloc Size: 256B - Virtual size: 230B

14d2768ad5c4d317e45cc1719b8f51e9

Headers

File Characteristics

Imports

scsiport.sys

Sections

.text Size: 25KB - Virtual size: 25KB

.rdata Size: 224B - Virtual size: 204B

.data Size: 2KB - Virtual size: 2KB

INIT Size: 448B - Virtual size: 430B

.rsrc Size: 960B - Virtual size: 948B

.reloc Size: 1KB - Virtual size: 1KB

a224f8be03b30536ef3076d71466bb66

Headers

File Characteristics

Imports

scsiport.sys

Sections

.text Size: 10KB - Virtual size: 10KB

.rdata Size: 256B - Virtual size: 256B

.data Size: 8KB - Virtual size: 8KB

INIT Size: 576B - Virtual size: 558B

.rsrc Size: 960B - Virtual size: 960B

.reloc Size: 448B - Virtual size: 436B

17b828ca06bfbd3d0fdbaccd6b90cc06

Headers

File Characteristics

Imports

scsiport.sys

Sections

.text Size: 5KB - Virtual size: 5KB

.rdata Size: 288B - Virtual size: 264B

.data Size: 256B - Virtual size: 234B

INIT Size: 512B - Virtual size: 484B

.rsrc Size: 960B - Virtual size: 956B

.reloc Size: 352B - Virtual size: 344B

68d9b5924d991e94be385f61a3d368fb

Headers

File Characteristics

Imports

.text
Size: 3KB - Virtual size: 3KB

.rdata
Size: 352B - Virtual size: 348B

.data
Size: 32B - Virtual size: 4B

INIT
Size: 3KB - Virtual size: 3KB

.rsrc
Size: 960B - Virtual size: 936B

.reloc
Size: 352B - Virtual size: 338B

.text
Size: 6KB - Virtual size: 6KB

.rdata
Size: 224B - Virtual size: 220B

INIT
Size: 576B - Virtual size: 572B

.rsrc
Size: 960B - Virtual size: 940B

.reloc
Size: 288B - Virtual size: 270B

.text
Size: 2KB - Virtual size: 2KB

.rdata
Size: 224B - Virtual size: 220B

INIT
Size: 544B - Virtual size: 528B

.rsrc
Size: 960B - Virtual size: 944B

.reloc
Size: 256B - Virtual size: 230B

.text
Size: 25KB - Virtual size: 25KB

.rdata
Size: 224B - Virtual size: 204B

.data
Size: 2KB - Virtual size: 2KB

INIT
Size: 448B - Virtual size: 430B

.rsrc
Size: 960B - Virtual size: 948B

.reloc
Size: 1KB - Virtual size: 1KB

.text
Size: 10KB - Virtual size: 10KB

.rdata
Size: 256B - Virtual size: 256B

.data
Size: 8KB - Virtual size: 8KB

INIT
Size: 576B - Virtual size: 558B

.rsrc
Size: 960B - Virtual size: 960B

.reloc
Size: 448B - Virtual size: 436B

.text
Size: 5KB - Virtual size: 5KB

.rdata
Size: 288B - Virtual size: 264B

.data
Size: 256B - Virtual size: 234B

INIT
Size: 512B - Virtual size: 484B

.rsrc
Size: 960B - Virtual size: 956B

.reloc
Size: 352B - Virtual size: 344B

.text
Size: 9KB - Virtual size: 9KB

.rdata
Size: 256B - Virtual size: 242B

INIT
Size: 704B - Virtual size: 700B

.rsrc
Size: 928B - Virtual size: 924B

.reloc
Size: 448B - Virtual size: 436B

.text
Size: 26KB - Virtual size: 26KB

Init
Size: 288B - Virtual size: 273B

.rdata
Size: 320B - Virtual size: 300B

.data
Size: 5KB - Virtual size: 5KB

INIT
Size: 448B - Virtual size: 424B

.rsrc
Size: 960B - Virtual size: 932B

.reloc
Size: 1KB - Virtual size: 1KB

.text
Size: 9KB - Virtual size: 9KB

.rdata
Size: 288B - Virtual size: 288B

.data
Size: 32B - Virtual size: 12B

INIT
Size: 608B - Virtual size: 578B

.rsrc
Size: 928B - Virtual size: 920B

.reloc
Size: 640B - Virtual size: 614B

.text
Size: 11KB - Virtual size: 11KB

.rdata
Size: 416B - Virtual size: 396B

.data
Size: 64B - Virtual size: 42B

INIT
Size: 10KB - Virtual size: 10KB

.rsrc
Size: 928B - Virtual size: 908B

.reloc
Size: 928B - Virtual size: 910B

.text
Size: 250KB - Virtual size: 249KB

.rdata
Size: 11KB - Virtual size: 10KB

.data
Size: 44KB - Virtual size: 127KB

.rsrc
Size: 68KB - Virtual size: 67KB

.reloc
Size: 7KB - Virtual size: 6KB

.text
Size: 5KB - Virtual size: 5KB

.rdata
Size: 224B - Virtual size: 220B

.data
Size: 64B - Virtual size: 52B

INIT
Size: 544B - Virtual size: 542B

.rsrc
Size: 960B - Virtual size: 948B

.reloc
Size: 288B - Virtual size: 280B