Peggle[.]iso | Triage

Sharing

Copy URL

Twitter E-mail

General

Target

Peggle.iso
Size

291.9MB
MD5

10b068ba4000a8cb2975708a86e9092c
SHA1

83d80a408821fca8d28d101d64832e98b496eda1
SHA256

4993e0cd90551a99bfed10fc77dbb060b484ebf6f98266e1a55ccc08bfb14227
SHA512

fbd01dbf726728ea1825d904acb62f2820b00f089f566ee9c2d605c90b8706373a174f221c2e8c25dbe09806cd7645d5a5d9e7e44a356c2e7d0942b9435a7d67
SSDEEP

6291456:gPIjfyKhZJJdv60WPuh8EA83Vpjc8vAr71fAJmUxsXgnbtVNi:gPIjfyKhRdvE2h8EvV9vA3VAJmUxagbI

Score

3^/10

Malware Config

Signatures

Unsigned PE 251 IoCs

Checks for missing Authenticode signature.

resource
unpack003/MSDvbNP.ax
unpack003/MSVidCtl.dll
unpack003/Mpeg2Data.ax
unpack003/bdaplgin.ax
unpack003/bdasup.sys
unpack003/ccdecode.sys
unpack003/ipsink.ax
unpack003/kstvtune.ax
unpack003/kswdmcap.ax
unpack003/ksxbar.ax
unpack003/mpe.sys
unpack003/msdv.sys
unpack003/msdv98se.sys
unpack003/msyuv.dll
unpack003/nabtsfec.sys
unpack003/ndisip.sys
unpack003/psisdecd.dll
unpack003/psisrndr.ax
unpack003/slip.sys
unpack003/streamip.sys
unpack003/vbisurf.ax
unpack003/wstcodec.sys
unpack003/wstdecod.dll
unpack004/MSDvbNP.ax
unpack004/MSVidCtl.dll
unpack004/MSVidCtl.w2k
unpack004/Mpeg2Data.ax
unpack004/bdaplgin.ax
unpack004/bdasup.sys
unpack004/ccdecode.sys
unpack004/ipsink.ax
unpack004/kstvtune.ax
unpack004/kswdmcap.ax
unpack004/ksxbar.ax
unpack004/mpe.sys
unpack004/msdv.sys
unpack004/msyuv.dll
unpack004/nabtsfec.sys
unpack004/ndisip.sys
unpack004/psisdecd.dll
unpack004/psisrndr.ax
unpack004/slip.sys
unpack004/streamip.sys
unpack004/vbisurf.ax
unpack004/wstcodec.sys
unpack004/wstdecod.dll
unpack005/BdaSup.sys
unpack005/MSDvbNP.ax
unpack005/MSVidCtl.dll
unpack005/Mpeg2Data.ax
unpack005/bdaplgin.ax
unpack005/ccdecode.sys
unpack005/ipsink.ax
unpack005/kstvtune.ax
unpack005/kswdmcap.ax
unpack005/ksxbar.ax
unpack005/mpe.sys
unpack005/msdv.sys
unpack005/msyuv.dll
unpack005/nabtsfec.sys
unpack005/ndisip.sys
unpack005/psisdecd.dll
unpack005/psisrndr.ax
unpack005/slip.sys
unpack005/streamip.sys
unpack005/vbisurf.ax
unpack005/wstcodec.sys
unpack005/wstdecod.dll
unpack002/DirectX/DirectX9/DSETUP.dll
unpack006/amstream.dll
unpack006/d3d8.dll
unpack006/d3d9.dll
unpack006/d3dim.dll
unpack006/d3dim700.dll
unpack006/d3dpmesh.dll
unpack006/d3dramp.dll
unpack006/d3drm.dll
unpack006/d3dxof.dll
unpack006/ddhelp.exe
unpack006/ddraw.dll
unpack006/ddrawex.dll
unpack006/devenum.dll
unpack006/diactfrm.dll
unpack006/dimap.dll
unpack006/dinput.dll
unpack006/dinput8.dll
unpack006/dmband.dll
unpack006/dmcompos.dll
unpack006/dmime.dll
unpack006/dmloader.dll
unpack006/dmscript.dll
unpack006/dmstyle.dll
unpack006/dmsynth.dll
unpack006/dmusic.dll
unpack006/dmusic32.dll
unpack006/dplaysvr.exe
unpack006/dplayx.dll
unpack006/dpmodemx.dll
unpack006/dpnaddr.dll
unpack006/dpnet.dll
unpack006/dpnhpast.dll
unpack006/dpnhupnp.dll
unpack006/dpnlobby.dll
unpack006/dpnsvr.exe
unpack006/dpvacm.dll
unpack006/dpvoice.dll
unpack006/dpvsetup.exe
unpack006/dpvvox.dll
unpack006/dpwsockx.dll
unpack006/dsdmo.dll
unpack006/dsdmoprp.dll
unpack006/dsound.dll
unpack006/dsound3d.dll
unpack006/dswave.dll
unpack006/dx7vb.dll
unpack006/dx8vb.dll
unpack006/dxapi.sys
unpack006/dxdiag.exe
unpack006/dxdiagn.dll
unpack006/dxdllreg.exe
unpack006/dxtmsft.dll
unpack006/dxtrans.dll
unpack006/encapi.dll
unpack006/gameenum.sys
unpack006/gcdef.dll
unpack006/gchand.dll
unpack006/hidgame.sys
unpack006/joy.cpl
unpack006/ks.sys
unpack006/ks98.sys
unpack006/ksolay.ax
unpack006/ksproxy.ax
unpack006/ksse.sys
unpack006/ksuser.dll
unpack006/l3codecx.ax
unpack006/mciqtz32.dll
unpack006/migrate.dll
unpack006/mpg2splt.ax
unpack006/msdmo.dll
unpack006/mskssrv.sys
unpack006/mspclock.98
unpack006/mspclock.se
unpack006/mspclock.sys
unpack006/mstee.sys
unpack006/mswebdvd.dll
unpack006/pid.dll
unpack006/qasf.dll
unpack006/qcap.dll
unpack006/qdv.dll
unpack006/qdvd.dll
unpack006/qedit.dll
unpack006/qedwipes.dll
unpack006/quartz.dll
unpack006/stream.sys
unpack006/stream98.sys
unpack006/swenum.sys
unpack006/swenum98.sys
unpack006/swenumse.sys
unpack002/DirectX/DirectX9/dsetup32.dll
unpack008/amstream.dll
unpack008/d3d8.dll
unpack008/d3d8thk.dll
unpack008/d3d8thk.w2k
unpack008/d3d9.dll
unpack008/d3dim.dll
unpack008/d3dim.xpg
unpack008/d3dim700.dll
unpack008/d3dpmesh.dll
unpack008/d3dpmesh.xpg
unpack008/d3dramp.dll
unpack008/d3dramp.xpg
unpack008/d3drm.dll
unpack008/d3drm.xpg
unpack008/d3dxof.dll
unpack008/d3dxof.xpg
unpack008/ddraw.dll
unpack008/ddrawex.dll
unpack008/devenum.dll
unpack008/diactfrm.dll
unpack008/diactfrm.xpg
unpack008/dimap.dll
unpack008/dimap.xpg
unpack008/dinput.dll
unpack008/dinput.xpg
unpack008/dinput8.dll
unpack008/dinput8.xpg
unpack008/dmband.dll
unpack008/dmcompos.dll
unpack008/dmime.dll
unpack008/dmloader.dll
unpack008/dmscript.dll
unpack008/dmstyle.dll
unpack008/dmsynth.dll
unpack008/dmusic.dll
unpack008/dplaysvr.exe
unpack008/dplayx.dll
unpack008/dpmodemx.dll
unpack008/dpnaddr.dll
unpack008/dpnet.dll
unpack008/dpnhpast.dll
unpack008/dpnhupnp.dll
unpack008/dpnlobby.dll
unpack008/dpnsvr.exe
unpack008/dpvacm.dll
unpack008/dpvoice.dll
unpack008/dpvsetup.exe
unpack008/dpvvox.dll
unpack008/dpwsockx.dll
unpack008/dsdmo.dll
unpack008/dsdmoprp.dll
unpack008/dsound.dll
unpack008/dsound3d.dll
unpack008/dswave.dll
unpack008/dx7vb.dll
unpack008/dx8vb.dll
unpack008/dxapi.sys
unpack008/dxapi.xpg
unpack008/dxdiag.exe
unpack008/dxdiagn.dll
unpack008/dxdllreg.exe
unpack008/encapi.dll
unpack008/gcdef.dll
unpack008/gcdef.xpg
unpack008/joy.w2k
unpack008/joy.xpg
unpack008/ks.sys
unpack008/ksolay.ax
unpack008/ksproxy.ax
unpack008/ksuser.dll
unpack008/l3codecx.ax
unpack008/mciqtz32.dll
unpack008/mpg2splt.ax
unpack008/msdmo.dll
unpack008/mskssrv.sys
unpack008/mspclock.sys
unpack008/mspqm.sys
unpack008/mstee.sys
unpack008/mswebdvd.dll
unpack008/pid.dll
unpack008/pid.xpg
unpack008/qasf.dll
unpack008/qcap.dll
unpack008/qdv.dll
unpack008/qdvd.dll
unpack008/qedit.dll
unpack008/qedwipes.dll
unpack008/quartz.dll
unpack008/quartz.w2k
unpack008/stream.sys
unpack008/swenum.sys
unpack002/DirectX/DirectX9/dxsetup.exe

Files

Peggle.iso
.iso
out.iso
.iso
AUTOPLAY.BAT
AUTORUN.INF
DirectX/DirectX EULA.txt
DirectX/DirectX9/BDA.cab
.cab
MSDvbNP.ax
.dll regsvr32 windows:5 windows x86 arch:x86

bd61e5a03c0af93c60b30cf39184a4a7

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

SetEvent
CloseHandle
CreateThread
CreateEventA
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
DisableThreadLibraryCalls
GetProcAddress
GetModuleHandleA
IsBadWritePtr
GetCurrentProcess
IsBadReadPtr
GetLastError
ResetEvent
WaitForSingleObject
SleepEx
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
TerminateProcess
InitializeCriticalSection
GetModuleFileNameA
MultiByteToWideChar
lstrlenA
InterlockedDecrement
FreeLibrary
InterlockedIncrement
GetVersionExA

msvcrt

wcscmp
??2@YAPAXI@Z
swscanf
memmove
??3@YAXPAX@Z

advapi32

RegSetValueA
RegSetValueExA
RegOpenKeyExA
RegEnumKeyExA
RegDeleteKeyA
RegQueryValueExA
RegCloseKey
RegCreateKeyExA
RegCreateKeyA

user32

wsprintfA
PeekMessageA
MsgWaitForMultipleObjectsEx
TranslateMessage
DispatchMessageA

ole32

CoFreeUnusedLibraries
StringFromCLSID
CoCreateInstance
CoGetMalloc
CoUninitialize
CoInitialize
StringFromGUID2
CoTaskMemAlloc
CoTaskMemFree

oleaut32

SysFreeString
SysAllocString
VariantClear

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 43KB - Virtual size: 43KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
MSVidCtl.dll
.dll regsvr32 windows:5 windows x86 arch:x86

4cab68af3a9d463423ff5188da351b39

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

WideCharToMultiByte
DisableThreadLibraryCalls
lstrcpyA
lstrcatA
GetModuleFileNameA
FreeLibrary
GetProcAddress
LoadLibraryA
InterlockedIncrement
InterlockedDecrement
IsDBCSLeadByte
lstrcmpiA
lstrcpynA
GetShortPathNameA
GetModuleHandleA
FormatMessageA
CreateEventA
WaitForSingleObject
ReleaseMutex
CloseHandle
GetLastError
LockResource
LoadResource
FindResourceA
CreateMutexA
SetEvent
ResetEvent
WaitForMultipleObjects
CreateThread
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
TerminateProcess
GetCurrentProcess
VirtualQuery
lstrlenA
VirtualProtect
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
IsBadCodePtr
IsBadReadPtr
HeapSize
IsBadWritePtr
VirtualAlloc
GetCPInfo
GetOEMCP
SetUnhandledExceptionFilter
WriteFile
VirtualFree
HeapCreate
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetStartupInfoA
GetFileType
GetStdHandle
SetHandleCount
TlsAlloc
TlsGetValue
SetLastError
TlsFree
ExitProcess
HeapReAlloc
HeapFree
MultiByteToWideChar
DeleteCriticalSection
HeapDestroy
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSection
lstrlenW
GetVersionExA
GetThreadLocale
GetLocaleInfoA
GetACP
GetSystemInfo
InterlockedExchange
HeapAlloc
RaiseException
GetCommandLineA
TlsSetValue
Sleep

ntdll

RtlUnwind

ole32

StringFromCLSID
CoCreateFreeThreadedMarshaler
ProgIDFromCLSID
CoTaskMemRealloc
CoTaskMemFree
CoTaskMemAlloc
CoCreateInstance
CLSIDFromString
CoUninitialize
StringFromGUID2

oleaut32

LoadRegTypeLi
VARIANT_UserMarshal
VARIANT_UserSize
SysAllocString
LoadTypeLi
RegisterTypeLi
VariantClear
VariantCopy
SysAllocStringByteLen
VarUI4FromStr
SafeArrayUnaccessData
SafeArrayAccessData
SafeArrayCreate
VariantChangeType
SysStringByteLen
SysStringLen
SysAllocStringLen
SetErrorInfo
CreateErrorInfo
VariantInit
VARIANT_UserFree
BSTR_UserSize
SysFreeString
BSTR_UserFree
BSTR_UserUnmarshal
BSTR_UserMarshal
VARIANT_UserUnmarshal

user32

CharNextA
LoadStringA
TranslateMessage
PeekMessageA
MsgWaitForMultipleObjectsEx
DispatchMessageA

advapi32

RegQueryValueA
RegSetValueA
RegEnumKeyExA
RegEnumValueA
RegQueryInfoKeyA
RegSetValueExA
RegOpenKeyExA
RegCreateKeyExA
RegCloseKey
RegDeleteValueA
RegDeleteKeyA
RegQueryValueExA

rpcrt4

NdrOleAllocate
CStdStubBuffer_DebugServerRelease
CStdStubBuffer_DebugServerQueryInterface
CStdStubBuffer_CountRefs
NdrDllUnregisterProxy
NdrDllRegisterProxy
CStdStubBuffer_IsIIDSupported
NdrCStdStubBuffer2_Release
NdrCStdStubBuffer_Release
NdrDllCanUnloadNow
NdrDllGetClassObject
IUnknown_QueryInterface_Proxy
IUnknown_AddRef_Proxy
IUnknown_Release_Proxy
NdrStubForwardingFunction
NdrStubCall2
CStdStubBuffer_QueryInterface
CStdStubBuffer_AddRef
CStdStubBuffer_Connect
CStdStubBuffer_Disconnect
CStdStubBuffer_Invoke
NdrOleFree

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
GetProxyDllInfo

Sections

.text
Size: 241KB - Virtual size: 240KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.orpc
Size: 512B - Virtual size: 297B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 18KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 183KB - Virtual size: 182KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 27KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Mpeg2Data.ax
.dll regsvr32 windows:5 windows x86 arch:x86

244f9b8f61fbb054334418ba678d871c

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

ResetEvent
WaitForMultipleObjects
LocalAlloc
LocalFree
CreateThread
LocalReAlloc
Sleep
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
DisableThreadLibraryCalls
GetProcAddress
GetModuleHandleA
TerminateProcess
CreateEventA
GetThreadPriority
SetThreadPriority
GetModuleFileNameA
GetLastError
MultiByteToWideChar
SetEvent
CloseHandle
LeaveCriticalSection
EnterCriticalSection
InitializeCriticalSection
WaitForSingleObject
DeleteCriticalSection
GetCurrentProcess
lstrlenA
LoadLibraryA
InterlockedDecrement
FreeLibrary
InterlockedIncrement
GetVersionExA
GetCurrentThread

msvcrt

_purecall
??3@YAXPAX@Z
??2@YAPAXI@Z
__CxxFrameHandler
malloc
free

winmm

timeKillEvent
timeBeginPeriod
timeEndPeriod
timeSetEvent

advapi32

RegSetValueExA
RegCreateKeyA
RegSetValueA
RegOpenKeyExA
RegEnumKeyExA
RegCloseKey
RegDeleteKeyA

user32

GetQueueStatus
wsprintfA
MsgWaitForMultipleObjects
DispatchMessageA
PeekMessageA
PostThreadMessageA
RegisterWindowMessageA

ole32

CoTaskMemAlloc
CoInitialize
CoFreeUnusedLibraries
CoUninitialize
StringFromGUID2
CoCreateInstance
CoTaskMemFree

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 49KB - Virtual size: 48KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 308B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
bda.inf
bdaplgin.ax
.dll regsvr32 windows:5 windows x86 arch:x86

1dbce2677ed0e9df3b7a82b88863a3d4

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetProcAddress
GetModuleHandleA
TerminateProcess
GetCurrentProcess
DisableThreadLibraryCalls
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
DeleteCriticalSection
InitializeCriticalSection
GetModuleFileNameA
GetLastError
MultiByteToWideChar
lstrlenA
InterlockedDecrement
FreeLibrary
InterlockedIncrement
GetVersionExA

msvcrt

??3@YAXPAX@Z
_vsnwprintf
??2@YAPAXI@Z

advapi32

RegSetValueA
RegSetValueExA
RegOpenKeyExA
RegEnumKeyExA
RegCloseKey
RegDeleteKeyA
RegCreateKeyA

user32

wsprintfA

ole32

CoInitialize
CoCreateInstance
CoUninitialize
StringFromGUID2
CoFreeUnusedLibraries

ksproxy.ax

KsSynchronousDeviceControl

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 248B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
bdasetup.inf
bdasup.sys
.dll windows:5 windows x86 arch:x86

6b2b65bafa0dd0cf733b55e44cdea375

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_WDM_DRIVER

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

BdaSup.pdb

Imports

hal

KfReleaseSpinLock
KfAcquireSpinLock

ntoskrnl.exe

ExFreePool
KeInitializeSpinLock
KeTickCount
ExAllocatePoolWithTag
memmove

ks.sys

KsGetParent
KsAddItemToObjectBag
KsRemoveItemFromObjectBag
KsFreeObjectCreateItemsByContext
_KsEdit
KsCreateFilterFactory
KsMergeAutomationTables
KsFilterFactoryUpdateCacheData
KsGetFilterFromIrp
KsPinGetParentFilter
KsFilterAddTopologyConnections
KsGetPinFromIrp
KsFilterCreatePinFactory

Exports

Exports

BdaCheckChanges
BdaCommitChanges
BdaCreateFilterFactory
BdaCreateFilterFactoryEx
BdaCreatePin
BdaCreateTopology
BdaDeletePin
BdaFilterFactoryUpdateCacheData
BdaGetChangeState
BdaInitFilter
BdaMethodCreatePin
BdaMethodCreateTopology
BdaMethodDeletePin
BdaPropertyGetControllingPinId
BdaPropertyGetPinControl
BdaPropertyNodeDescriptors
BdaPropertyNodeEvents
BdaPropertyNodeMethods
BdaPropertyNodeProperties
BdaPropertyNodeTypes
BdaPropertyPinTypes
BdaPropertyTemplateConnections
BdaStartChanges
BdaUninitFilter
BdaValidateNodeProperty

Sections

.text
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 256B - Virtual size: 211B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 128B - Virtual size: 52B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 896B - Virtual size: 834B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

PAGECONS
Size: 768B - Virtual size: 652B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

INIT
Size: 768B - Virtual size: 674B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 384B - Virtual size: 278B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
ccdecode.inf
ccdecode.sys
.sys windows:5 windows x86 arch:x86

d5977c633dbdac9c68f7e446e09a0a9d

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_WDM_DRIVER

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

ccdecode.pdb

Imports

ntoskrnl.exe

KefReleaseSpinLockFromDpcLevel
KeInitializeSpinLock
ExFreePool
KeInitializeEvent
ExAllocatePoolWithTag
KeTickCount
KefAcquireSpinLockAtDpcLevel

hal

ExAcquireFastMutex
KeQueryPerformanceCounter
ExReleaseFastMutex
KfReleaseSpinLock
KfAcquireSpinLock

stream.sys

StreamClassDeviceNotification
StreamClassRegisterAdapter
StreamClassStreamNotification

Sections

.text
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 768B - Virtual size: 761B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 980B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

PAGECONS
Size: 256B - Virtual size: 144B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

INIT
Size: 640B - Virtual size: 554B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 1024B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 436B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dx9bda.cat
ipsink.ax
.dll regsvr32 windows:5 windows x86 arch:x86

9c828b85bafb7d0f5f2d6ab092d5473d

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

CloseHandle
ReleaseMutex
WaitForSingleObject
GetVersionExA
ResetEvent
WaitForMultipleObjects
CreateThread
CreateMutexA
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
DisableThreadLibraryCalls
SetEvent
GetModuleHandleA
TerminateProcess
GetCurrentProcess
WaitForSingleObjectEx
CreateEventA
GetLastError
Sleep
IsBadReadPtr
IsBadWritePtr
GetProcAddress
MultiByteToWideChar
GetModuleFileNameA
lstrlenA
InterlockedDecrement
FreeLibrary
InterlockedIncrement

msvcrt

rand
??3@YAXPAX@Z
??2@YAPAXI@Z
free
malloc
_snprintf

advapi32

RegSetValueA
RegSetValueExA
RegOpenKeyExA
RegEnumKeyExA
RegCloseKey
RegDeleteKeyA
RegCreateKeyA

user32

wsprintfA

ole32

CoCreateInstance
CoInitialize
StringFromGUID2
CoTaskMemAlloc
CoFreeUnusedLibraries
CoUninitialize

oleaut32

SysStringLen
SysFreeString
SysAllocStringLen

ksproxy.ax

KsSynchronousDeviceControl

iphlpapi

GetUniDirectionalAdapterInfo
GetIpAddrTable

wsock32

htons
WSAStartup
ioctlsocket
setsockopt
bind
closesocket

ws2_32

WSASocketA

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 232B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
kstvtune.ax
.dll windows:5 windows x86 arch:x86

373218214f1164b605815211c9b37c65

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

LoadResource
FindResourceA
GetLastError
SizeofResource
InterlockedCompareExchange
Sleep
CreateFileA
InterlockedExchange
GetProfileIntA
WideCharToMultiByte
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
DisableThreadLibraryCalls
GetProcAddress
GetModuleHandleA
TerminateProcess
GetCurrentProcess
LockResource
GetACP
MultiByteToWideChar
CreateMutexA
WaitForSingleObject
ReleaseMutex
CloseHandle
IsBadWritePtr
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
InterlockedDecrement
FreeLibrary
InterlockedIncrement
GetVersionExA
InitializeCriticalSection

msvcrt

_purecall
??2@YAPAXI@Z
strtol
??3@YAXPAX@Z

advapi32

RegCreateKeyExA
RegOpenKeyExA
RegEnumValueA
RegCloseKey
RegQueryValueExA
RegDeleteValueA
RegSetValueExA

user32

DestroyWindow
DefWindowProcA
wvsprintfA
LoadStringW
GetWindowRect
ShowWindow
GetWindowLongA
GetDlgItemInt
wsprintfA
KillTimer
MessageBoxA
LoadStringA
CheckRadioButton
SetDlgItemTextA
SetDlgItemInt
InvalidateRect
SetWindowLongA
MoveWindow
CreateDialogParamA
GetDesktopWindow
SendMessageA
GetDlgItem
GetAsyncKeyState
PostMessageA
SetTimer
EnableWindow
SetWindowTextA
UpdateWindow

comctl32

ord17

ole32

CoTaskMemAlloc
CoInitialize
CoTaskMemFree
CoCreateInstance
CoUninitialize
CoFreeUnusedLibraries

oleaut32

VariantInit
VariantClear

ksproxy.ax

KsSynchronousDeviceControl

Exports

Exports

DllCanUnloadNow
DllGetClassObject

Sections

.text
Size: 36KB - Virtual size: 35KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 256B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 227KB - Virtual size: 226KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
kswdmcap.ax
.dll regsvr32 windows:5 windows x86 arch:x86

95d6690a876714b701968430fd31ed5a

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

SetEvent
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
ResetEvent
WaitForMultipleObjects
VirtualFree
VirtualAlloc
SetLastError
CreateThread
InitializeCriticalSection
ExitThread
WideCharToMultiByte
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
DisableThreadLibraryCalls
GetProcAddress
GetModuleHandleA
WaitForSingleObjectEx
GetCurrentProcess
InterlockedDecrement
FreeLibrary
InterlockedIncrement
GetModuleFileNameA
Sleep
lstrcmpA
lstrcpyA
lstrcpynA
CreateEventA
GetLastError
DeviceIoControl
GetOverlappedResult
MultiByteToWideChar
lstrlenA
GetVersionExA
TerminateProcess
CloseHandle

mfc42

ord823
ord825

msvcrt

sprintf
_purecall
_ftol
__CxxFrameHandler
_except_handler3
?terminate@@YAXXZ
??1type_info@@UAE@XZ
atoi
strtod

advapi32

RegSetValueExA
RegCreateKeyA
RegSetValueA
RegDeleteKeyA
RegOpenKeyExA
RegEnumKeyExA
RegCloseKey

user32

SetTimer
KillTimer
wsprintfA
LoadImageA
ShowWindow
SetDlgItemTextA
GetWindowLongA
SetWindowLongA
CreateDialogParamA
MoveWindow
InvalidateRect
DestroyWindow
LoadStringA
LoadStringW
GetWindowRect
GetDesktopWindow
EnableWindow
SetDlgItemInt
MessageBoxA
IsWindowEnabled
GetDlgItemInt
SetRect
IsRectEmpty
SendMessageA
GetWindowTextA
SetWindowTextA
GetDlgItem

comctl32

InitCommonControlsEx

ole32

CoUninitialize
CoFreeUnusedLibraries
CoInitialize
CoCreateInstance
CoTaskMemAlloc
CoTaskMemFree
StringFromGUID2

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
FilterHandleFromPin
PerformDataIntersection
PinFactoryIDFromPin
RedundantKsGetMultiplePinFactoryItems

Sections

.text
Size: 57KB - Virtual size: 56KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 156KB - Virtual size: 155KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
ksxbar.ax
.dll windows:5 windows x86 arch:x86

5116cc2556341d796c2a80b165186825

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
CloseHandle
WaitForSingleObject
GetLastError
DeviceIoControl
CreateEventA
IsBadWritePtr
CreateFileA
WideCharToMultiByte
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
DisableThreadLibraryCalls
GetProcAddress
GetModuleHandleA
TerminateProcess
GetCurrentProcess
GetACP
MultiByteToWideChar
InterlockedDecrement
FreeLibrary
InterlockedIncrement
GetVersionExA

msvcrt

_purecall
swprintf
wcstombs
??2@YAPAXI@Z
wcslen
??3@YAXPAX@Z

user32

LoadStringA
LoadStringW
GetWindowRect
wvsprintfA
MessageBoxA
SetRect
SetDlgItemTextA
SendMessageA
GetDlgItem
CheckRadioButton
EnableWindow
ShowWindow
DestroyWindow
GetDesktopWindow
InvalidateRect
MoveWindow
CreateDialogParamA
SetWindowLongA
GetWindowLongA

ole32

CoFreeUnusedLibraries
CoUninitialize
CoTaskMemAlloc
CoTaskMemFree
CoCreateInstance
CoInitialize

oleaut32

VariantInit
VariantClear

Exports

Exports

DllCanUnloadNow
DllGetClassObject

Sections

.text
Size: 32KB - Virtual size: 31KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 296B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
mpe.inf
mpe.sys
.sys windows:5 windows x86 arch:x86

b709125e5196d69f577afdd8423729ff

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

mpe.pdb

Imports

ntoskrnl.exe

KeTickCount
KeQuerySystemTime
KeInitializeSpinLock
ExAllocatePoolWithTag
ExFreePool
KeBugCheckEx
DbgPrint

hal

KfAcquireSpinLock
KfReleaseSpinLock

stream.sys

StreamClassStreamNotification
StreamClassDeviceNotification
StreamClassRegisterAdapter

Sections

.text
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 384B - Virtual size: 276B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 640B - Virtual size: 544B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

PAGECONS
Size: 128B - Virtual size: 32B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

INIT
Size: 512B - Virtual size: 456B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 640B - Virtual size: 630B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
msdv.sys
.sys windows:5 windows x86 arch:x86

86f2d51aaa296b59194197c28572822e

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_WDM_DRIVER

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

MSDV.pdb

Imports

ntoskrnl.exe

IofCallDriver
ExAllocatePoolWithTag
IoFreeIrp
IoAllocateIrp
KeWaitForSingleObject
KeSetEvent
ExFreePool
KeInitializeEvent
KeReleaseMutex
KeInitializeSpinLock
KeInitializeMutex
ZwClose
ObReferenceObjectByHandle
PsCreateSystemThread
KeResetEvent
InterlockedExchange
ExQueueWorkItem
KeClearEvent
ObfDereferenceObject
MmMapLockedPages
PsTerminateSystemThread
KeSetPriorityThread
KeGetCurrentThread
IoCancelIrp
wcscpy
KeTickCount
KeBugCheckEx
KeDelayExecutionThread

hal

KfReleaseSpinLock
KeQueryPerformanceCounter
KeGetCurrentIrql
KfAcquireSpinLock

stream.sys

StreamClassStreamNotification
StreamClassRegisterAdapter
StreamClassGetNextEvent
StreamClassQueryMasterClockSync
StreamClassDeviceNotification

Sections

.text
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 23KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

PAGECONS
Size: 256B - Virtual size: 144B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

INIT
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 902B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
msdv98se.sys
.sys windows:5 windows x86 arch:x86

c44f46939591a6629aae6b9d01b9dae7

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_WDM_DRIVER

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

msdv98se.pdb

Imports

ntoskrnl.exe

IoFreeIrp
KeWaitForSingleObject
IofCallDriver
KeInitializeEvent
ExAllocatePoolWithTag
IoAllocateIrp
KeInitializeMutex
IoAllocateMdl
MmBuildMdlForNonPagedPool
IoFreeMdl
KeReleaseMutex
ExFreePool
KeSetEvent
KeClearEvent
KeInitializeSpinLock
ExfInterlockedInsertTailList
ExfInterlockedRemoveHeadList
MmMapLockedPages
InterlockedDecrement
InterlockedIncrement
KeResetEvent
wcscpy
KeTickCount
KeBugCheckEx
KeDelayExecutionThread

hal

KfAcquireSpinLock
KfReleaseSpinLock
KeQueryPerformanceCounter
KeGetCurrentIrql

stream.sys

StreamClassStreamNotification
StreamClassDeviceNotification
StreamClassGetNextEvent
StreamClassQueryMasterClockSync
StreamClassRegisterAdapter

Sections

.text
Size: 27KB - Virtual size: 27KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 22KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

PAGECONS
Size: 256B - Virtual size: 144B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

INIT
Size: 1024B - Virtual size: 1016B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
msyuv.dll
.dll windows:5 windows x86 arch:x86

317bb2a83416a509406d650a33ce001a

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

VirtualAlloc
VirtualFree
DisableThreadLibraryCalls
GetProcAddress
GetModuleHandleA
LocalFree
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
LocalAlloc

msvcrt

_ftol
wcscpy

gdi32

GetSystemPaletteEntries

user32

GetDesktopWindow
MessageBoxW
ReleaseDC
GetDC

winmm

DefDriverProc
GetDriverModuleHandle

Exports

Exports

DriverProc

Sections

.text
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 1016B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 328B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
nabtsfec.inf
nabtsfec.sys
.sys windows:5 windows x86 arch:x86

49970d1ef884a17567a446f9fea4d52c

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_WDM_DRIVER

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

nabtsfec.pdb

Imports

ntoskrnl.exe

KefReleaseSpinLockFromDpcLevel
KeInitializeSpinLock
KefAcquireSpinLockAtDpcLevel
ExFreePool
ObfDereferenceObject
IofCallDriver
IoBuildDeviceIoControlRequest
IoGetDeviceObjectPointer
RtlInitUnicodeString
ExAllocatePoolWithTag
KeRestoreFloatingPointState
KeSaveFloatingPointState
KeTickCount
KeBugCheckEx
KeInitializeEvent

hal

KfReleaseSpinLock
KfAcquireSpinLock
ExReleaseFastMutex
KeQueryPerformanceCounter
ExAcquireFastMutex

stream.sys

StreamClassDeviceNotification
StreamClassRegisterAdapter
StreamClassStreamNotification

Sections

.text
Size: 35KB - Virtual size: 35KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 1007B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 41KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

PAGECONS
Size: 256B - Virtual size: 160B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

INIT
Size: 896B - Virtual size: 784B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 1016B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
ndisip.inf
ndisip.sys
.sys windows:5 windows x86 arch:x86

0a8485ddb79fcd7268b3706841e511d5

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

ndisip.pdb

Imports

ntoskrnl.exe

KeBugCheckEx
KeTickCount
IoCreateDevice
IoCreateSymbolicLink
RtlInitUnicodeString
IofCompleteRequest

ndis.sys

NdisFreePacketPool
NdisMSetAttributesEx
NdisAllocateMemory
NdisFreeMemory
NdisAllocatePacket
NdisAdjustBufferLength
NdisAllocateSpinLock
NdisReleaseSpinLock
NdisAcquireSpinLock
NdisFreePacket
NdisMRegisterMiniport
NdisInitializeWrapper
NdisFreeBufferPool
NdisAllocateBuffer
NdisFreeBuffer
NdisAllocatePacketPool
NdisAllocateBufferPool

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 384B - Virtual size: 300B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 384B - Virtual size: 280B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

INIT
Size: 768B - Virtual size: 708B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 384B - Virtual size: 300B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
psisdecd.dll
.dll regsvr32 windows:5 windows x86 arch:x86

a63eb4bfb67dc3602cfc27e862114741

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

lstrlenA
lstrcmpiA
IsDBCSLeadByte
lstrcpynA
HeapDestroy
lstrcpyA
lstrcatA
GetModuleFileNameA
DisableThreadLibraryCalls
FreeLibrary
GetProcAddress
LoadLibraryA
SizeofResource
LoadResource
FindResourceA
GetLastError
LoadLibraryExA
lstrlenW
LockResource
GetModuleHandleA
CloseHandle
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
TerminateProcess
GetCurrentProcess
FlushFileBuffers
WideCharToMultiByte
MultiByteToWideChar
Sleep
InitializeCriticalSection
InterlockedDecrement
InterlockedIncrement
DeleteCriticalSection
LeaveCriticalSection
GetShortPathNameA
EnterCriticalSection
SetStdHandle
VirtualQuery
GetSystemInfo
VirtualProtect
LCMapStringW
LCMapStringA
SetFilePointer
GetLocaleInfoA
GetStringTypeW
GetStringTypeA
IsBadCodePtr
IsBadReadPtr
GetCPInfo
GetOEMCP
GetACP
LocalFree
InterlockedExchange
TlsSetValue
GetCommandLineA
GetVersionExA
HeapFree
HeapReAlloc
HeapAlloc
RaiseException
ExitProcess
TlsFree
SetLastError
TlsGetValue
TlsAlloc
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
HeapCreate
VirtualFree
WriteFile
VirtualAlloc
IsBadWritePtr
HeapSize
SetUnhandledExceptionFilter

ntdll

RtlUnwind

winmm

timeGetTime

advapi32

RegEnumValueA
RegQueryInfoKeyA
RegSetValueExA
RegCreateKeyExA
RegDeleteValueA
RegDeleteKeyA
RegOpenKeyExA
RegCloseKey
RegQueryValueExA
RegEnumKeyExA

user32

CharNextA

ole32

CoTaskMemFree
CoTaskMemAlloc
CoTaskMemRealloc
CoCreateInstance
CoCreateFreeThreadedMarshaler

oleaut32

SysStringByteLen
SysAllocStringByteLen
RegisterTypeLi
LoadTypeLi
VarUI4FromStr
VariantClear
VariantCopy
VariantInit
SysAllocString
SysFreeString
VariantChangeType

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 300KB - Virtual size: 299KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 25KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 15KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
psisrndr.ax
.dll regsvr32 windows:5 windows x86 arch:x86

89452c43805800f5fc649a24f8bcf44d

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetCurrentProcessId
GetSystemTimeAsFileTime
DisableThreadLibraryCalls
GetProcAddress
GetModuleHandleA
TerminateProcess
GetCurrentProcess
GetCurrentThreadId
GetACP
WideCharToMultiByte
GetModuleFileNameA
GetLastError
GetTickCount
QueryPerformanceCounter
InterlockedDecrement
InterlockedIncrement
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSection
MultiByteToWideChar
lstrlenA
LoadLibraryA
FreeLibrary
GetVersionExA

msvcrt

??3@YAXPAX@Z
_purecall
??2@YAPAXI@Z

advapi32

RegSetValueA
RegSetValueExA
RegEnumKeyExA
RegDeleteKeyA
RegOpenKeyExA
RegQueryValueExA
RegCloseKey
RegCreateKeyA

user32

wsprintfA
wvsprintfA

ole32

CoUninitialize
StringFromGUID2
CoTaskMemFree
CoFreeUnusedLibraries
CoInitialize
CoTaskMemAlloc
CoCreateInstance

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 24KB - Virtual size: 23KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 248B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
slip.inf
slip.sys
.sys windows:5 windows x86 arch:x86

3f9db7809b38aa51c5daad51c58fe7a9

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

slip.pdb

Imports

ntoskrnl.exe

KeTickCount
ExFreePool
ExAllocatePoolWithTag
DbgBreakPoint
KeQuerySystemTime
KeInitializeSpinLock

hal

KfAcquireSpinLock
KfReleaseSpinLock

stream.sys

StreamClassStreamNotification
StreamClassDeviceNotification
StreamClassRegisterAdapter

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 384B - Virtual size: 263B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

PAGECONS
Size: 128B - Virtual size: 48B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

INIT
Size: 512B - Virtual size: 440B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 256B - Virtual size: 206B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
streamip.inf
streamip.sys
.sys windows:5 windows x86 arch:x86

024e69c1aa1ed511e6751546ba958390

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

streamip.pdb

Imports

ntoskrnl.exe

IofCallDriver
IoBuildDeviceIoControlRequest
IoGetDeviceObjectPointer
ObfReferenceObject
ObfDereferenceObject
KeInitializeSpinLock
RtlInitUnicodeString
DbgPrint
ExFreePool
KeTickCount
ExAllocatePoolWithTag

hal

KfAcquireSpinLock
KfReleaseSpinLock

stream.sys

StreamClassDeviceNotification
StreamClassGetNextEvent
StreamClassStreamNotification
StreamClassRegisterAdapter

Sections

.text
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 640B - Virtual size: 616B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 640B - Virtual size: 540B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

PAGECONS
Size: 128B - Virtual size: 48B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

INIT
Size: 640B - Virtual size: 612B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 1008B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 640B - Virtual size: 594B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
vbisurf.ax
.dll regsvr32 windows:5 windows x86 arch:x86

ae48a05a15c768aaec63afcf3810c760

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetCurrentProcessId
GetSystemTimeAsFileTime
DisableThreadLibraryCalls
GetProcAddress
GetModuleHandleA
TerminateProcess
GetCurrentProcess
GetCurrentThreadId
FreeLibrary
GetTickCount
InterlockedExchange
QueryPerformanceCounter
WaitForSingleObject
CloseHandle
SetErrorMode
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSection
CreateThread
ResetEvent
SetEvent
CreateEventA
InterlockedDecrement
InterlockedIncrement
GetModuleFileNameA
GetLastError
MultiByteToWideChar
lstrlenA
GetVersionExA

msvcrt

??2@YAPAXI@Z
??3@YAXPAX@Z

ddraw

DirectDrawCreateEx
DirectDrawEnumerateExA

advapi32

RegSetValueA
RegSetValueExA
RegOpenKeyExA
RegEnumKeyExA
RegCloseKey
RegDeleteKeyA
RegCreateKeyA

user32

wsprintfA

ole32

CoTaskMemAlloc
CoInitialize
CoFreeUnusedLibraries
CoTaskMemFree
StringFromGUID2
CoUninitialize
CoCreateInstance

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 22KB - Virtual size: 22KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 344B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 1016B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
wst_czec.fon
wst_engl.fon
wst_fren.fon
wst_germ.fon
wst_ital.fon
wst_span.fon
wst_swed.fon
wstcodec.inf
wstcodec.sys
.sys windows:5 windows x86 arch:x86

5e94d6115bae4fe6e2b87706af1a8293

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_WDM_DRIVER

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

wstcodec.pdb

Imports

hal

KfReleaseSpinLock
KfAcquireSpinLock
KeQueryPerformanceCounter

ntoskrnl.exe

IoCreateSymbolicLink
ExFreePool
KeInitializeSpinLock
KeTickCount
ExAllocatePoolWithTag
RtlInitUnicodeString

stream.sys

StreamClassDeviceNotification
StreamClassRegisterAdapter
StreamClassStreamNotification

Sections

.text
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

INIT
Size: 512B - Virtual size: 484B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 1016B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 384B - Virtual size: 284B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
wstdecod.dll
.dll regsvr32 windows:5 windows x86 arch:x86

af4f8f6981ea7fd495566925fe5b0cf2

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetCurrentProcess
TerminateProcess
GetProcAddress
DisableThreadLibraryCalls
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
GetLastError
FreeLibrary
InterlockedDecrement
InterlockedIncrement
GetModuleFileNameA
MultiByteToWideChar
lstrlenA
GetVersionExA
GetModuleHandleA
MulDiv
IsBadReadPtr
IsBadWritePtr
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSection

msvcrt

free
malloc
??2@YAPAXI@Z
sprintf
sscanf
??3@YAXPAX@Z

gdi32

CreateCompatibleDC
DeleteDC
CreateFontIndirectA
SetBkMode
DeleteObject
CreateDIBSection
SelectObject
SetTextColor
ExtTextOutA
SetBkColor
GetTextMetricsA
GetSystemPaletteEntries
GetDeviceCaps
GetTextColor

user32

LoadStringA
LoadStringW
GetWindowRect
GetDesktopWindow
DestroyWindow
InvalidateRect
CreateDialogParamA
SetWindowLongA
wsprintfA
SetRect
SetTimer
KillTimer
IsRectEmpty
ReleaseDC
GetDC
UnregisterClassA
SendMessageTimeoutA
DefWindowProcA
ShowWindow
CreateWindowExA
GetWindowLongA
GetWindowTextA
MessageBeep
IsDlgButtonChecked
GetDlgItem
SendMessageA
SetWindowTextA
CheckDlgButton
RegisterClassA
MoveWindow

advapi32

RegCloseKey
RegEnumKeyExA
RegOpenKeyExA
RegSetValueExA
RegSetValueA
RegCreateKeyA
RegDeleteKeyA

ole32

CoTaskMemFree
StringFromGUID2
CoUninitialize
CoFreeUnusedLibraries
CoCreateInstance
CoInitialize
CoTaskMemAlloc

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 39KB - Virtual size: 39KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 384B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
DirectX/DirectX9/BDANT.cab
.cab
MSDvbNP.ax
.dll regsvr32 windows:5 windows x86 arch:x86

8d46331ee3af79cade97e0eb594f6089

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

SetEvent
CloseHandle
CreateThread
CreateEventW
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
DisableThreadLibraryCalls
GetProcAddress
GetModuleHandleA
IsBadWritePtr
GetCurrentProcess
lstrcmpW
IsBadReadPtr
GetLastError
ResetEvent
WaitForSingleObject
SleepEx
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
TerminateProcess
InitializeCriticalSection
lstrcpynW
GetModuleFileNameA
lstrlenA
MultiByteToWideChar
lstrlenW
InterlockedDecrement
FreeLibrary
InterlockedIncrement
GetVersionExW

msvcrt

wcscmp
??2@YAPAXI@Z
swscanf
memmove
??3@YAXPAX@Z

advapi32

RegSetValueW
RegSetValueExW
RegOpenKeyExW
RegEnumKeyExW
RegDeleteKeyW
RegQueryValueExW
RegCloseKey
RegCreateKeyExW
RegCreateKeyW

user32

DispatchMessageW
MsgWaitForMultipleObjectsEx
wsprintfW
PeekMessageW
TranslateMessage

ole32

StringFromCLSID
CoInitialize
CoTaskMemAlloc
StringFromGUID2
CoFreeUnusedLibraries
CoTaskMemFree
CoCreateInstance
CoGetMalloc
CoUninitialize

oleaut32

SysFreeString
SysAllocString
VariantClear

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 43KB - Virtual size: 43KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
MSVidCtl.dll
.dll regsvr32 windows:5 windows x86 arch:x86

0467516a475941daa18bfa5b1573ef90

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetLocaleInfoW
WideCharToMultiByte
GetTickCount
GetDriveTypeW
GetSystemDirectoryW
Sleep
IsValidLocale
FlushInstructionCache
GetCurrentProcess
HeapFree
GetProcessHeap
HeapAlloc
GetCurrentThreadId
GlobalUnlock
GlobalLock
GlobalAlloc
GetCurrentProcessId
InterlockedCompareExchange
LoadLibraryA
QueryPerformanceCounter
GetSystemTimeAsFileTime
GetModuleHandleA
TerminateProcess
GetLocalTime
GlobalMemoryStatus
GetDiskFreeSpaceA
GetComputerNameA
LocalFree
LocalAlloc
CreateMutexA
VirtualQuery
GetSystemInfo
VirtualProtect
ReadFile
SetStdHandle
LCMapStringW
SetThreadExecutionState
FormatMessageW
IsBadReadPtr
GetOEMCP
GetStringTypeW
GetStringTypeA
GetCPInfo
FlushFileBuffers
SetFilePointer
HeapSize
IsBadWritePtr
VirtualAlloc
SetUnhandledExceptionFilter
WriteFile
VirtualFree
HeapCreate
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetModuleFileNameA
GetStartupInfoA
GetFileType
GetStdHandle
SetHandleCount
TlsAlloc
TlsGetValue
SetLastError
TlsFree
ExitProcess
HeapReAlloc
RaiseException
GetVersionExA
GetCommandLineA
TlsSetValue
DelayLoadFailureHook
CreateThread
WaitForMultipleObjects
ResetEvent
SetEvent
CreateMutexW
FindResourceW
LoadResource
LockResource
GetLastError
lstrlenA
MultiByteToWideChar
CloseHandle
ReleaseMutex
WaitForSingleObject
LCMapStringA
CreateEventW
GetModuleHandleW
GetShortPathNameW
lstrcpynW
lstrcmpiW
InterlockedDecrement
InterlockedIncrement
lstrlenW
LoadLibraryW
GetProcAddress
DeviceIoControl
FreeLibrary
DisableThreadLibraryCalls
GetModuleFileNameW
lstrcatW
DeleteCriticalSection
HeapDestroy
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSection
lstrcpyW
GetVersionExW
GetThreadLocale
GetLocaleInfoA
GetACP
IsBadCodePtr
InterlockedExchange

ntdll

RtlUnwind

ole32

OleSaveToStream
WriteClassStm
OleLoadFromStream
CreateDataAdviseHolder
OleRegGetMiscStatus
CreateOleAdviseHolder
OleRegGetUserType
OleRegEnumVerbs
CoGetMalloc
CoUninitialize
ProgIDFromCLSID
StringFromCLSID
StringFromGUID2
GetRunningObjectTable
CLSIDFromString
CoTaskMemRealloc
CoTaskMemFree
CoTaskMemAlloc
CoCreateInstance
HDC_UserSize
HDC_UserMarshal
HDC_UserUnmarshal
HDC_UserFree
HWND_UserSize
HWND_UserMarshal
HWND_UserUnmarshal
HWND_UserFree
CreateItemMoniker
CoCreateFreeThreadedMarshaler

oleaut32

SysFreeString
VARIANT_UserFree
VARIANT_UserUnmarshal
VARIANT_UserMarshal
VARIANT_UserSize
BSTR_UserFree
BSTR_UserUnmarshal
BSTR_UserMarshal
BSTR_UserSize
SysAllocString
LoadTypeLi
RegisterTypeLi
VariantClear
VariantCopy
SysAllocStringByteLen
VarUI4FromStr
SafeArrayUnaccessData
SafeArrayAccessData
SafeArrayCreate
VariantChangeType
SysStringByteLen
LoadRegTypeLi
SysStringLen
SysAllocStringLen
SetErrorInfo
CreateErrorInfo
VariantInit
OleCreatePictureIndirect
OleCreatePropertyFrame

user32

LoadStringW
DispatchMessageW
TranslateMessage
PeekMessageW
MsgWaitForMultipleObjectsEx
MapWindowPoints
EqualRect
ReleaseDC
GetDC
IsWindow
CopyRect
SystemParametersInfoW
FillRect
SendMessageW
PostMessageW
GetWindowLongW
GetClientRect
SetTimer
KillTimer
GetKeyState
SetCursor
LoadImageW
RegisterClassExW
wsprintfW
LoadCursorW
PtInRect
IntersectRect
GetWindowRect
ReleaseCapture
SetCapture
GetDesktopWindow
DestroyWindow
SetFocus
IsChild
GetFocus
GetParent
ShowWindow
InvalidateRect
DefWindowProcW
SetWindowLongW
CreateWindowExW
BeginPaint
EndPaint
OffsetRect
SetWindowRgn
SetWindowPos
UnionRect
CallWindowProcW
CharNextW
GetClassInfoExW

advapi32

RegDeleteKeyW
RegCloseKey
RegCreateKeyExW
RegOpenKeyExW
RegSetValueExW
RegQueryInfoKeyW
RegEnumValueW
RegEnumKeyExW
RegSetValueW
RegQueryValueW
RegQueryValueExW
RegCreateKeyW
CryptGetHashParam
CryptHashData
CryptDestroyHash
CryptCreateHash
CryptReleaseContext
CryptGenRandom
CryptAcquireContextW
GetUserNameA
RegQueryValueExA
RegSetValueExA
RegCreateKeyExA
RegDeleteValueW

gdi32

CreateDIBitmap
SelectObject
CreateCompatibleDC
GetDeviceCaps
CreateSolidBrush
DeleteObject
DeleteMetaFile
CloseMetaFile
RestoreDC
SetWindowExtEx
SetWindowOrgEx
SaveDC
CreateMetaFileW
CreateRectRgnIndirect
DeleteDC

rpcrt4

NdrDllUnregisterProxy
NdrDllRegisterProxy
NdrCStdStubBuffer2_Release
NdrDllCanUnloadNow
NdrDllGetClassObject
CStdStubBuffer_QueryInterface
CStdStubBuffer_AddRef
CStdStubBuffer_Connect
CStdStubBuffer_Disconnect
CStdStubBuffer_Invoke
CStdStubBuffer_IsIIDSupported
CStdStubBuffer_CountRefs
CStdStubBuffer_DebugServerQueryInterface
CStdStubBuffer_DebugServerRelease
NdrOleAllocate
NdrOleFree
IUnknown_QueryInterface_Proxy
IUnknown_AddRef_Proxy
IUnknown_Release_Proxy
NdrStubCall2
NdrStubForwardingFunction
NdrCStdStubBuffer_Release

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
GetProxyDllInfo

Sections

.text
Size: 903KB - Virtual size: 902KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.orpc
Size: 1024B - Virtual size: 693B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 34KB - Virtual size: 42KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 183KB - Virtual size: 182KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 79KB - Virtual size: 79KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
MSVidCtl.w2k
.dll regsvr32 windows:5 windows x86 arch:x86

aa2c799825b6370b37645be920a8c847

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

FreeLibrary
GetProcAddress
LoadLibraryW
DisableThreadLibraryCalls
lstrlenW
InterlockedIncrement
InterlockedDecrement
lstrcmpiW
lstrcpynW
GetShortPathNameW
GetModuleHandleW
FormatMessageW
CreateEventW
WaitForSingleObject
ReleaseMutex
CloseHandle
MultiByteToWideChar
lstrlenA
GetLastError
LockResource
LoadResource
FindResourceW
CreateMutexW
SetEvent
ResetEvent
WaitForMultipleObjects
CreateThread
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
GetModuleHandleA
TerminateProcess
GetCurrentProcess
VirtualQuery
GetModuleFileNameW
VirtualProtect
LCMapStringW
LCMapStringA
GetStringTypeW
GetStringTypeA
IsBadCodePtr
IsBadReadPtr
LoadLibraryA
GetCPInfo
GetOEMCP
HeapSize
IsBadWritePtr
VirtualAlloc
SetUnhandledExceptionFilter
WriteFile
VirtualFree
HeapCreate
GetEnvironmentStringsW
WideCharToMultiByte
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetModuleFileNameA
GetStartupInfoA
GetFileType
GetStdHandle
SetHandleCount
TlsAlloc
TlsGetValue
SetLastError
TlsFree
lstrcatW
DeleteCriticalSection
HeapDestroy
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSection
lstrcpyW
GetVersionExW
GetThreadLocale
GetLocaleInfoA
GetACP
GetSystemInfo
InterlockedExchange
ExitProcess
HeapReAlloc
HeapFree
HeapAlloc
RaiseException
GetVersionExA
GetCommandLineA
TlsSetValue
Sleep

ntdll

RtlUnwind

ole32

StringFromCLSID
CoCreateFreeThreadedMarshaler
ProgIDFromCLSID
CoTaskMemRealloc
CoTaskMemFree
CoTaskMemAlloc
CoCreateInstance
CLSIDFromString
CoUninitialize
StringFromGUID2

oleaut32

LoadRegTypeLi
VARIANT_UserMarshal
VARIANT_UserSize
SysAllocString
LoadTypeLi
RegisterTypeLi
VariantClear
VariantCopy
SysAllocStringByteLen
VarUI4FromStr
SafeArrayUnaccessData
SafeArrayAccessData
SafeArrayCreate
VariantChangeType
SysStringByteLen
SysStringLen
SysAllocStringLen
SetErrorInfo
CreateErrorInfo
VariantInit
VARIANT_UserFree
BSTR_UserSize
SysFreeString
BSTR_UserFree
BSTR_UserUnmarshal
BSTR_UserMarshal
VARIANT_UserUnmarshal

user32

CharNextW
LoadStringW
DispatchMessageW
TranslateMessage
PeekMessageW
MsgWaitForMultipleObjectsEx

advapi32

RegQueryValueW
RegSetValueW
RegEnumKeyExW
RegEnumValueW
RegQueryInfoKeyW
RegSetValueExW
RegOpenKeyExW
RegCreateKeyExW
RegCloseKey
RegDeleteValueW
RegDeleteKeyW
RegQueryValueExW

rpcrt4

NdrOleAllocate
CStdStubBuffer_DebugServerRelease
CStdStubBuffer_DebugServerQueryInterface
CStdStubBuffer_CountRefs
CStdStubBuffer_IsIIDSupported
CStdStubBuffer_Invoke
CStdStubBuffer_Disconnect
CStdStubBuffer_AddRef
CStdStubBuffer_Connect
NdrDllUnregisterProxy
NdrDllRegisterProxy
NdrCStdStubBuffer2_Release
NdrCStdStubBuffer_Release
NdrDllCanUnloadNow
NdrDllGetClassObject
IUnknown_QueryInterface_Proxy
IUnknown_AddRef_Proxy
IUnknown_Release_Proxy
NdrStubForwardingFunction
NdrStubCall2
CStdStubBuffer_QueryInterface
NdrOleFree

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
GetProxyDllInfo

Sections

.text
Size: 239KB - Virtual size: 239KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.orpc
Size: 512B - Virtual size: 297B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 18KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 183KB - Virtual size: 182KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 27KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Mpeg2Data.ax
.dll regsvr32 windows:5 windows x86 arch:x86

fcd4181f9417f53d1b10aa6fcfd706a8

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

ResetEvent
WaitForMultipleObjects
LocalAlloc
LocalFree
CreateThread
LocalReAlloc
Sleep
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
DisableThreadLibraryCalls
GetProcAddress
GetModuleHandleA
TerminateProcess
CreateEventW
GetThreadPriority
SetThreadPriority
lstrcpynW
lstrcpyW
lstrcmpW
SetEvent
CloseHandle
LeaveCriticalSection
EnterCriticalSection
WaitForSingleObject
DeleteCriticalSection
InitializeCriticalSection
GetCurrentProcess
GetModuleFileNameA
GetLastError
lstrlenA
MultiByteToWideChar
lstrlenW
LoadLibraryW
InterlockedDecrement
FreeLibrary
InterlockedIncrement
GetVersionExW
GetCurrentThread

msvcrt

malloc
__CxxFrameHandler
??2@YAPAXI@Z
??3@YAXPAX@Z
free
_purecall

winmm

timeBeginPeriod
timeEndPeriod
timeSetEvent
timeKillEvent

advapi32

RegCreateKeyW
RegSetValueW
RegSetValueExW
RegOpenKeyExW
RegEnumKeyExW
RegCloseKey
RegDeleteKeyW

user32

GetQueueStatus
PostThreadMessageW
wsprintfW
MsgWaitForMultipleObjects
PeekMessageW
RegisterWindowMessageW
DispatchMessageW

ole32

CoFreeUnusedLibraries
CoInitialize
CoTaskMemAlloc
CoTaskMemFree
CoCreateInstance
CoUninitialize
StringFromGUID2

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 49KB - Virtual size: 49KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 440B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
bda.inf
bdaplgin.ax
.dll regsvr32 windows:5 windows x86 arch:x86

2d0c35dab4bdadc34717c640b941494f

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetProcAddress
GetModuleHandleA
TerminateProcess
GetCurrentProcess
DisableThreadLibraryCalls
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
DeleteCriticalSection
InitializeCriticalSection
GetModuleFileNameA
GetLastError
lstrlenA
MultiByteToWideChar
lstrlenW
GetVersionExW
InterlockedIncrement
FreeLibrary
InterlockedDecrement

msvcrt

??3@YAXPAX@Z
_vsnwprintf
??2@YAPAXI@Z

advapi32

RegSetValueW
RegSetValueExW
RegOpenKeyExW
RegEnumKeyExW
RegCloseKey
RegDeleteKeyW
RegCreateKeyW

user32

wsprintfW

ole32

CoCreateInstance
CoFreeUnusedLibraries
CoUninitialize
StringFromGUID2
CoInitialize

ksproxy.ax

KsSynchronousDeviceControl

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 376B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
bdasup.sys
.dll windows:5 windows x86 arch:x86

6b2b65bafa0dd0cf733b55e44cdea375

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_WDM_DRIVER

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

BdaSup.pdb

Imports

hal

KfReleaseSpinLock
KfAcquireSpinLock

ntoskrnl.exe

ExFreePool
KeInitializeSpinLock
KeTickCount
ExAllocatePoolWithTag
memmove

ks.sys

KsGetParent
KsAddItemToObjectBag
KsRemoveItemFromObjectBag
KsFreeObjectCreateItemsByContext
_KsEdit
KsCreateFilterFactory
KsMergeAutomationTables
KsFilterFactoryUpdateCacheData
KsGetFilterFromIrp
KsPinGetParentFilter
KsFilterAddTopologyConnections
KsGetPinFromIrp
KsFilterCreatePinFactory

Exports

Exports

BdaCheckChanges
BdaCommitChanges
BdaCreateFilterFactory
BdaCreateFilterFactoryEx
BdaCreatePin
BdaCreateTopology
BdaDeletePin
BdaFilterFactoryUpdateCacheData
BdaGetChangeState
BdaInitFilter
BdaMethodCreatePin
BdaMethodCreateTopology
BdaMethodDeletePin
BdaPropertyGetControllingPinId
BdaPropertyGetPinControl
BdaPropertyNodeDescriptors
BdaPropertyNodeEvents
BdaPropertyNodeMethods
BdaPropertyNodeProperties
BdaPropertyNodeTypes
BdaPropertyPinTypes
BdaPropertyTemplateConnections
BdaStartChanges
BdaUninitFilter
BdaValidateNodeProperty

Sections

.text
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 256B - Virtual size: 210B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 128B - Virtual size: 52B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 896B - Virtual size: 834B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

PAGECONS
Size: 768B - Virtual size: 652B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

INIT
Size: 768B - Virtual size: 674B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 384B - Virtual size: 278B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
ccdecode.inf
ccdecode.sys
.sys windows:5 windows x86 arch:x86

d5977c633dbdac9c68f7e446e09a0a9d

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_WDM_DRIVER

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

ccdecode.pdb

Imports

ntoskrnl.exe

KefReleaseSpinLockFromDpcLevel
KeInitializeSpinLock
ExFreePool
KeInitializeEvent
ExAllocatePoolWithTag
KeTickCount
KefAcquireSpinLockAtDpcLevel

hal

ExAcquireFastMutex
KeQueryPerformanceCounter
ExReleaseFastMutex
KfReleaseSpinLock
KfAcquireSpinLock

stream.sys

StreamClassDeviceNotification
StreamClassRegisterAdapter
StreamClassStreamNotification

Sections

.text
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 768B - Virtual size: 760B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 980B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

PAGECONS
Size: 256B - Virtual size: 144B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

INIT
Size: 640B - Virtual size: 554B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 1024B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 436B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dx9bda.cat
dxbda.inf
ipsink.ax
.dll regsvr32 windows:5 windows x86 arch:x86

628f6874f78df4a7257166f9144f8a03

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

CloseHandle
ReleaseMutex
WaitForSingleObject
GetVersionExA
ResetEvent
WaitForMultipleObjects
CreateThread
CreateMutexA
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
DisableThreadLibraryCalls
SetEvent
GetModuleHandleA
TerminateProcess
GetCurrentProcess
WaitForSingleObjectEx
CreateEventA
GetLastError
Sleep
IsBadReadPtr
IsBadWritePtr
GetProcAddress
MultiByteToWideChar
GetModuleFileNameA
lstrlenA
lstrlenW
InterlockedDecrement
FreeLibrary
InterlockedIncrement
GetVersionExW

msvcrt

free
_snprintf
malloc
??3@YAXPAX@Z
??2@YAPAXI@Z
rand

advapi32

RegSetValueW
RegSetValueExW
RegOpenKeyExW
RegEnumKeyExW
RegCloseKey
RegDeleteKeyW
RegCreateKeyW

user32

wsprintfW

ole32

CoUninitialize
CoCreateInstance
CoInitialize
CoFreeUnusedLibraries
StringFromGUID2
CoTaskMemAlloc

oleaut32

SysFreeString
SysStringLen
SysAllocStringLen

ksproxy.ax

KsSynchronousDeviceControl

iphlpapi

GetUniDirectionalAdapterInfo
GetIpAddrTable

wsock32

closesocket
bind
setsockopt
htons
WSAStartup
ioctlsocket

ws2_32

WSASocketA

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 360B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
kstvtune.ax
.dll windows:5 windows x86 arch:x86

339742cd268348bf0f492e75bf25f820

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

kstvtune.pdb

Imports

kernel32

LoadResource
FindResourceW
GetLastError
SizeofResource
InterlockedCompareExchange
Sleep
CreateFileW
InterlockedExchange
GetProfileIntW
lstrcpyW
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
LockResource
CreateMutexW
WaitForSingleObject
ReleaseMutex
CloseHandle
IsBadWritePtr
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
lstrcmpW
lstrlenW
lstrcpynW
InterlockedDecrement
FreeLibrary
InterlockedIncrement
DisableThreadLibraryCalls
GetVersionExW
InitializeCriticalSection

msvcrt

??3@YAXPAX@Z
??2@YAPAXI@Z
wcstol
_purecall

advapi32

RegCreateKeyExW
RegOpenKeyExW
RegEnumValueW
RegCloseKey
RegQueryValueExW
RegDeleteValueW
RegSetValueExW

user32

GetWindowRect
GetDesktopWindow
InvalidateRect
wsprintfW
KillTimer
MessageBoxW
LoadStringW
CheckRadioButton
SetDlgItemTextW
SetDlgItemInt
DefWindowProcW
ShowWindow
DestroyWindow
SendMessageW
GetWindowLongW
MoveWindow
CreateDialogParamW
SetWindowLongW
GetDlgItemInt
GetAsyncKeyState
UpdateWindow
PostMessageW
SetTimer
EnableWindow
SetWindowTextW
GetDlgItem

comctl32

ord17

ole32

CoFreeUnusedLibraries
CoTaskMemFree
CoCreateInstance
CoTaskMemAlloc
CoInitialize
CoUninitialize

oleaut32

VariantInit
VariantClear

ksproxy.ax

KsSynchronousDeviceControl

Exports

Exports

DllCanUnloadNow
DllGetClassObject

Sections

.text
Size: 40KB - Virtual size: 39KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 388B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 234KB - Virtual size: 233KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
kswdmcap.ax
.dll regsvr32 windows:5 windows x86 arch:x86

a4d2e6643818292a0d8fef1ab511db26

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

WaitForSingleObjectEx
SetEvent
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
ResetEvent
WaitForMultipleObjects
VirtualFree
VirtualAlloc
SetLastError
CreateThread
InitializeCriticalSection
ExitThread
WideCharToMultiByte
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
DisableThreadLibraryCalls
GetProcAddress
GetModuleHandleA
lstrlenW
GetCurrentProcess
InterlockedDecrement
FreeLibrary
InterlockedIncrement
GetModuleFileNameA
Sleep
lstrcmpW
lstrcpyW
lstrcpynW
CreateEventW
GetLastError
DeviceIoControl
GetOverlappedResult
lstrlenA
MultiByteToWideChar
GetVersionExW
TerminateProcess
CloseHandle

mfc42

ord823
ord825

msvcrt

swprintf
_purecall
_ftol
__CxxFrameHandler
_except_handler3
?terminate@@YAXXZ
??1type_info@@UAE@XZ
sprintf
_wtoi
wcstod

advapi32

RegSetValueExW
RegCreateKeyW
RegSetValueW
RegDeleteKeyW
RegOpenKeyExW
RegEnumKeyExW
RegCloseKey

user32

SetTimer
KillTimer
wsprintfW
LoadImageW
ShowWindow
SetDlgItemTextW
SetWindowTextA
GetWindowTextA
GetWindowLongW
SetWindowLongW
CreateDialogParamW
MoveWindow
InvalidateRect
DestroyWindow
LoadStringW
GetWindowRect
GetDesktopWindow
EnableWindow
SetDlgItemInt
MessageBoxW
IsWindowEnabled
GetDlgItemInt
SetRect
IsRectEmpty
SendMessageW
GetWindowTextW
GetDlgItem
SetWindowTextW

comctl32

InitCommonControlsEx

ole32

CoUninitialize
CoFreeUnusedLibraries
CoInitialize
CoCreateInstance
CoTaskMemAlloc
CoTaskMemFree
StringFromGUID2

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
FilterHandleFromPin
PerformDataIntersection
PinFactoryIDFromPin
RedundantKsGetMultiplePinFactoryItems

Sections

.text
Size: 57KB - Virtual size: 56KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 156KB - Virtual size: 155KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
ksxbar.ax
.dll windows:5 windows x86 arch:x86

86f7b1489e2283642a94ef3ffa08593e

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
lstrcpynW
CloseHandle
WaitForSingleObject
GetLastError
DeviceIoControl
CreateEventW
IsBadWritePtr
CreateFileW
lstrcpyW
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
DisableThreadLibraryCalls
GetProcAddress
GetModuleHandleA
TerminateProcess
GetCurrentProcess
lstrcmpW
lstrlenW
InterlockedDecrement
FreeLibrary
InterlockedIncrement
GetVersionExW

msvcrt

swprintf
??2@YAPAXI@Z
wcslen
_purecall
??3@YAXPAX@Z

user32

LoadStringW
GetWindowRect
GetDesktopWindow
MessageBoxW
SetRect
SetDlgItemTextW
SendMessageW
GetDlgItem
CheckRadioButton
EnableWindow
DestroyWindow
ShowWindow
InvalidateRect
MoveWindow
CreateDialogParamW
SetWindowLongW
GetWindowLongW
wsprintfW

ole32

CoFreeUnusedLibraries
CoUninitialize
CoTaskMemAlloc
CoTaskMemFree
CoCreateInstance
CoInitialize

oleaut32

VariantInit
VariantClear

Exports

Exports

DllCanUnloadNow
DllGetClassObject

Sections

.text
Size: 31KB - Virtual size: 31KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 424B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
mpe.inf
mpe.sys
.sys windows:5 windows x86 arch:x86

b709125e5196d69f577afdd8423729ff

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

mpe.pdb

Imports

ntoskrnl.exe

KeTickCount
KeQuerySystemTime
KeInitializeSpinLock
ExAllocatePoolWithTag
ExFreePool
KeBugCheckEx
DbgPrint

hal

KfAcquireSpinLock
KfReleaseSpinLock

stream.sys

StreamClassStreamNotification
StreamClassDeviceNotification
StreamClassRegisterAdapter

Sections

.text
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 384B - Virtual size: 276B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 640B - Virtual size: 544B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

PAGECONS
Size: 128B - Virtual size: 32B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

INIT
Size: 512B - Virtual size: 456B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 640B - Virtual size: 630B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
msdv.sys
.sys windows:5 windows x86 arch:x86

e105f7c92aa2bef9bddfa3b3765e6022

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_WDM_DRIVER

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

msdv.pdb

Imports

ntoskrnl.exe

IoFreeIrp
KeWaitForSingleObject
IofCallDriver
KeInitializeEvent
ExAllocatePoolWithTag
IoAllocateIrp
KeInitializeMutex
IoAllocateMdl
MmBuildMdlForNonPagedPool
IoFreeMdl
KeReleaseMutex
ExFreePool
KeSetEvent
KeClearEvent
KeInitializeSpinLock
ExfInterlockedInsertTailList
ExfInterlockedRemoveHeadList
MmMapLockedPagesSpecifyCache
InterlockedDecrement
InterlockedIncrement
KeResetEvent
wcscpy
KeTickCount
KeBugCheckEx
KeDelayExecutionThread

hal

KfAcquireSpinLock
KfReleaseSpinLock
KeQueryPerformanceCounter
KeGetCurrentIrql

stream.sys

StreamClassStreamNotification
StreamClassDeviceNotification
StreamClassGetNextEvent
StreamClassQueryMasterClockSync
StreamClassRegisterAdapter

Sections

.text
Size: 27KB - Virtual size: 27KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 22KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

PAGECONS
Size: 256B - Virtual size: 144B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

INIT
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 1024B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
msyuv.dll
.dll windows:5 windows x86 arch:x86

317bb2a83416a509406d650a33ce001a

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

VirtualAlloc
VirtualFree
DisableThreadLibraryCalls
GetProcAddress
GetModuleHandleA
LocalFree
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
LocalAlloc

msvcrt

_ftol
wcscpy

gdi32

GetSystemPaletteEntries

user32

GetDesktopWindow
MessageBoxW
ReleaseDC
GetDC

winmm

DefDriverProc
GetDriverModuleHandle

Exports

Exports

DriverProc

Sections

.text
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 1016B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 328B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
nabtsfec.inf
nabtsfec.sys
.sys windows:5 windows x86 arch:x86

49970d1ef884a17567a446f9fea4d52c

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_WDM_DRIVER

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

nabtsfec.pdb

Imports

ntoskrnl.exe

KefReleaseSpinLockFromDpcLevel
KeInitializeSpinLock
KefAcquireSpinLockAtDpcLevel
ExFreePool
ObfDereferenceObject
IofCallDriver
IoBuildDeviceIoControlRequest
IoGetDeviceObjectPointer
RtlInitUnicodeString
ExAllocatePoolWithTag
KeRestoreFloatingPointState
KeSaveFloatingPointState
KeTickCount
KeBugCheckEx
KeInitializeEvent

hal

KfReleaseSpinLock
KfAcquireSpinLock
ExReleaseFastMutex
KeQueryPerformanceCounter
ExAcquireFastMutex

stream.sys

StreamClassDeviceNotification
StreamClassRegisterAdapter
StreamClassStreamNotification

Sections

.text
Size: 35KB - Virtual size: 35KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 1006B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 41KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

PAGECONS
Size: 256B - Virtual size: 160B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

INIT
Size: 896B - Virtual size: 784B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 1016B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
ndisip.inf
ndisip.sys
.sys windows:5 windows x86 arch:x86

85b9203fdd9c0bd977642878e7918927

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

ndisip.pdb

Imports

ntoskrnl.exe

KeBugCheckEx
KeTickCount
KeInitializeSpinLock
IoFreeMdl
ZwOpenKey
ZwCreateKey
ZwQueryValueKey
DbgPrint
ZwSetValueKey
ZwClose
RtlInitUnicodeString
IofCompleteRequest

hal

KfReleaseSpinLock
KfAcquireSpinLock

ndis.sys

NdisAllocateMemory
NdisFreeMemory
NdisAllocatePacket
NdisAllocateBufferPool
NdisMSetAttributesEx
NdisAllocateBuffer
NdisFreeBufferPool
NdisFreePacketPool
NdisInitializeWrapper
NdisMRegisterMiniport
NdisAllocateSpinLock
NdisAllocatePacketPool
NdisReleaseSpinLock
NdisMDeregisterDevice
NdisAcquireSpinLock
NdisFreePacket
NdisMRegisterDevice

Sections

.text
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 384B - Virtual size: 331B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 384B - Virtual size: 284B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

INIT
Size: 896B - Virtual size: 890B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 384B - Virtual size: 358B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
psisdecd.dll
.dll regsvr32 windows:5 windows x86 arch:x86

030f2fd88c6befc4cc612bcee23289da

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

lstrcmpiW
lstrcpynW
HeapDestroy
lstrcatW
GetModuleFileNameW
DisableThreadLibraryCalls
FreeLibrary
GetProcAddress
LoadLibraryW
lstrlenA
SizeofResource
LoadResource
FindResourceW
GetLastError
LoadLibraryExW
GetShortPathNameW
LockResource
lstrcpyW
CloseHandle
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
GetModuleHandleA
TerminateProcess
GetCurrentProcess
FlushFileBuffers
lstrlenW
MultiByteToWideChar
Sleep
InitializeCriticalSection
InterlockedDecrement
InterlockedIncrement
DeleteCriticalSection
LeaveCriticalSection
GetModuleHandleW
EnterCriticalSection
SetStdHandle
VirtualQuery
GetSystemInfo
VirtualProtect
LCMapStringW
LCMapStringA
SetFilePointer
GetLocaleInfoA
GetStringTypeW
GetStringTypeA
IsBadCodePtr
IsBadReadPtr
LoadLibraryA
GetCPInfo
GetOEMCP
WideCharToMultiByte
LocalFree
InterlockedExchange
TlsSetValue
GetCommandLineA
GetVersionExA
HeapFree
HeapReAlloc
HeapAlloc
RaiseException
ExitProcess
TlsFree
SetLastError
TlsGetValue
TlsAlloc
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
HeapCreate
VirtualFree
WriteFile
VirtualAlloc
IsBadWritePtr
HeapSize
SetUnhandledExceptionFilter
GetACP

ntdll

RtlUnwind

winmm

timeGetTime

advapi32

RegEnumValueW
RegQueryInfoKeyW
RegSetValueExW
RegCreateKeyExW
RegDeleteValueW
RegDeleteKeyW
RegOpenKeyExW
RegCloseKey
RegQueryValueExW
RegEnumKeyExW

user32

CharNextW

ole32

CoTaskMemFree
CoTaskMemAlloc
CoTaskMemRealloc
CoCreateInstance
CoCreateFreeThreadedMarshaler

oleaut32

SysStringByteLen
SysAllocStringByteLen
RegisterTypeLi
LoadTypeLi
VariantClear
VariantChangeType
VariantCopy
VariantInit
SysAllocString
SysFreeString
VarUI4FromStr

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 300KB - Virtual size: 299KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 25KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 15KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
psisrndr.ax
.dll regsvr32 windows:5 windows x86 arch:x86

b3fabccc88441525f3d8a97e7abf70a5

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetCurrentProcessId
GetSystemTimeAsFileTime
DisableThreadLibraryCalls
GetProcAddress
GetModuleHandleA
TerminateProcess
GetCurrentProcess
GetCurrentThreadId
GetModuleFileNameA
GetTickCount
QueryPerformanceCounter
InterlockedDecrement
InterlockedIncrement
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSection
GetLastError
lstrlenA
MultiByteToWideChar
LoadLibraryW
FreeLibrary
lstrcmpW
lstrlenW
GetVersionExW
lstrcpynW

msvcrt

??3@YAXPAX@Z
_purecall
??2@YAPAXI@Z

advapi32

RegSetValueW
RegSetValueExW
RegEnumKeyExW
RegDeleteKeyW
RegOpenKeyExW
RegQueryValueExW
RegCloseKey
RegCreateKeyW

user32

wsprintfW

ole32

CoUninitialize
StringFromGUID2
CoTaskMemFree
CoFreeUnusedLibraries
CoInitialize
CoTaskMemAlloc
CoCreateInstance

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 24KB - Virtual size: 23KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 376B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
slip.inf
slip.sys
.sys windows:5 windows x86 arch:x86

3f9db7809b38aa51c5daad51c58fe7a9

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

slip.pdb

Imports

ntoskrnl.exe

KeTickCount
ExFreePool
ExAllocatePoolWithTag
DbgBreakPoint
KeQuerySystemTime
KeInitializeSpinLock

hal

KfAcquireSpinLock
KfReleaseSpinLock

stream.sys

StreamClassStreamNotification
StreamClassDeviceNotification
StreamClassRegisterAdapter

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 384B - Virtual size: 262B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

PAGECONS
Size: 128B - Virtual size: 48B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

INIT
Size: 512B - Virtual size: 440B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 256B - Virtual size: 206B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
streamip.inf
streamip.sys
.sys windows:5 windows x86 arch:x86

937c5c9480c457813996610d24c3ca2e

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

streamip.pdb

Imports

ntoskrnl.exe

IoGetDeviceObjectPointer
ZwCreateFile
IoGetDeviceInterfaces
ObfReferenceObject
IoBuildDeviceIoControlRequest
KeTickCount
ZwClose
ObfDereferenceObject
KeInitializeSpinLock
RtlInitUnicodeString
DbgPrint
ExFreePool
IofCallDriver
ExAllocatePoolWithTag

hal

KfAcquireSpinLock
KfReleaseSpinLock

stream.sys

StreamClassDeviceNotification
StreamClassGetNextEvent
StreamClassStreamNotification
StreamClassRegisterAdapter

Sections

.text
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 768B - Virtual size: 647B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 640B - Virtual size: 540B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

PAGECONS
Size: 128B - Virtual size: 48B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

INIT
Size: 768B - Virtual size: 674B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 1008B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 640B - Virtual size: 612B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
vbisurf.ax
.dll regsvr32 windows:5 windows x86 arch:x86

4ea881e9bc4888403a5e8628308bf315

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetCurrentProcessId
GetSystemTimeAsFileTime
DisableThreadLibraryCalls
GetProcAddress
GetModuleHandleA
TerminateProcess
GetCurrentProcess
GetCurrentThreadId
GetModuleHandleW
GetTickCount
InterlockedExchange
QueryPerformanceCounter
WaitForSingleObject
CloseHandle
SetErrorMode
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSection
FreeLibrary
lstrcmpW
CreateThread
ResetEvent
SetEvent
CreateEventW
InterlockedDecrement
InterlockedIncrement
lstrcpynW
GetModuleFileNameA
GetLastError
lstrlenA
MultiByteToWideChar
GetVersionExW
lstrlenW

msvcrt

??2@YAPAXI@Z
??3@YAXPAX@Z

ddraw

DirectDrawCreateEx
DirectDrawEnumerateExA

advapi32

RegSetValueW
RegSetValueExW
RegOpenKeyExW
RegEnumKeyExW
RegCloseKey
RegDeleteKeyW
RegCreateKeyW

user32

wsprintfW

ole32

CoTaskMemAlloc
CoInitialize
CoFreeUnusedLibraries
CoTaskMemFree
StringFromGUID2
CoUninitialize
CoCreateInstance

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 22KB - Virtual size: 22KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 472B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 1016B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
wst_czec.fon
wst_engl.fon
wst_fren.fon
wst_germ.fon
wst_ital.fon
wst_span.fon
wst_swed.fon
wstcodec.inf
wstcodec.sys
.sys windows:5 windows x86 arch:x86

5e94d6115bae4fe6e2b87706af1a8293

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_WDM_DRIVER

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

wstcodec.pdb

Imports

hal

KfReleaseSpinLock
KfAcquireSpinLock
KeQueryPerformanceCounter

ntoskrnl.exe

IoCreateSymbolicLink
ExFreePool
KeInitializeSpinLock
KeTickCount
ExAllocatePoolWithTag
RtlInitUnicodeString

stream.sys

StreamClassDeviceNotification
StreamClassRegisterAdapter
StreamClassStreamNotification

Sections

.text
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

INIT
Size: 512B - Virtual size: 484B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 1016B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 384B - Virtual size: 284B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
wstdecod.dll
.dll regsvr32 windows:5 windows x86 arch:x86

b773ed61e5f2f5b7c57feede58a7f58c

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetCurrentProcess
TerminateProcess
GetProcAddress
DisableThreadLibraryCalls
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
GetLastError
FreeLibrary
lstrcmpW
InterlockedDecrement
InterlockedIncrement
lstrcpynW
GetModuleFileNameA
lstrlenA
MultiByteToWideChar
lstrlenW
GetVersionExW
GetModuleHandleA
MulDiv
IsBadReadPtr
IsBadWritePtr
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSection

msvcrt

free
malloc
??2@YAPAXI@Z
sprintf
sscanf
??3@YAXPAX@Z

gdi32

CreateCompatibleDC
DeleteDC
CreateFontIndirectA
SetBkMode
DeleteObject
CreateDIBSection
SelectObject
SetTextColor
ExtTextOutA
SetBkColor
GetTextMetricsA
GetSystemPaletteEntries
GetDeviceCaps
GetTextColor

user32

GetWindowRect
GetDesktopWindow
DefWindowProcW
InvalidateRect
LoadStringW
SetRect
SetTimer
KillTimer
IsRectEmpty
ReleaseDC
GetDC
UnregisterClassA
SendMessageTimeoutA
DefWindowProcA
ShowWindow
CreateWindowExA
MoveWindow
CreateDialogParamW
SetWindowLongW
GetWindowLongW
wsprintfW
GetWindowTextA
MessageBeep
IsDlgButtonChecked
GetDlgItem
SendMessageA
SetWindowTextA
CheckDlgButton
RegisterClassA
DestroyWindow

advapi32

RegCloseKey
RegEnumKeyExW
RegOpenKeyExW
RegSetValueExW
RegSetValueW
RegCreateKeyW
RegDeleteKeyW

ole32

CoTaskMemFree
StringFromGUID2
CoUninitialize
CoFreeUnusedLibraries
CoCreateInstance
CoInitialize
CoTaskMemAlloc

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 39KB - Virtual size: 39KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
DirectX/DirectX9/BDAXP.cab
.cab
BdaSup.sys
.dll windows:5 windows x86 arch:x86

6b2b65bafa0dd0cf733b55e44cdea375

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_WDM_DRIVER

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

BdaSup.pdb

Imports

hal

KfReleaseSpinLock
KfAcquireSpinLock

ntoskrnl.exe

ExFreePool
KeInitializeSpinLock
KeTickCount
ExAllocatePoolWithTag
memmove

ks.sys

KsGetParent
KsAddItemToObjectBag
KsRemoveItemFromObjectBag
KsFreeObjectCreateItemsByContext
_KsEdit
KsCreateFilterFactory
KsMergeAutomationTables
KsFilterFactoryUpdateCacheData
KsGetFilterFromIrp
KsPinGetParentFilter
KsFilterAddTopologyConnections
KsGetPinFromIrp
KsFilterCreatePinFactory

Exports

Exports

BdaCheckChanges
BdaCommitChanges
BdaCreateFilterFactory
BdaCreateFilterFactoryEx
BdaCreatePin
BdaCreateTopology
BdaDeletePin
BdaFilterFactoryUpdateCacheData
BdaGetChangeState
BdaInitFilter
BdaMethodCreatePin
BdaMethodCreateTopology
BdaMethodDeletePin
BdaPropertyGetControllingPinId
BdaPropertyGetPinControl
BdaPropertyNodeDescriptors
BdaPropertyNodeEvents
BdaPropertyNodeMethods
BdaPropertyNodeProperties
BdaPropertyNodeTypes
BdaPropertyPinTypes
BdaPropertyTemplateConnections
BdaStartChanges
BdaUninitFilter
BdaValidateNodeProperty

Sections

.text
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 256B - Virtual size: 210B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 128B - Virtual size: 52B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 896B - Virtual size: 834B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

PAGECONS
Size: 768B - Virtual size: 652B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

INIT
Size: 768B - Virtual size: 674B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 384B - Virtual size: 278B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
MSDvbNP.ax
.dll regsvr32 windows:5 windows x86 arch:x86

8d46331ee3af79cade97e0eb594f6089

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

SetEvent
CloseHandle
CreateThread
CreateEventW
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
DisableThreadLibraryCalls
GetProcAddress
GetModuleHandleA
IsBadWritePtr
GetCurrentProcess
lstrcmpW
IsBadReadPtr
GetLastError
ResetEvent
WaitForSingleObject
SleepEx
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
TerminateProcess
InitializeCriticalSection
lstrcpynW
GetModuleFileNameA
lstrlenA
MultiByteToWideChar
lstrlenW
InterlockedDecrement
FreeLibrary
InterlockedIncrement
GetVersionExW

msvcrt

wcscmp
??2@YAPAXI@Z
swscanf
memmove
??3@YAXPAX@Z

advapi32

RegSetValueW
RegSetValueExW
RegOpenKeyExW
RegEnumKeyExW
RegDeleteKeyW
RegQueryValueExW
RegCloseKey
RegCreateKeyExW
RegCreateKeyW

user32

DispatchMessageW
MsgWaitForMultipleObjectsEx
wsprintfW
PeekMessageW
TranslateMessage

ole32

StringFromCLSID
CoInitialize
CoTaskMemAlloc
StringFromGUID2
CoFreeUnusedLibraries
CoTaskMemFree
CoCreateInstance
CoGetMalloc
CoUninitialize

oleaut32

SysFreeString
SysAllocString
VariantClear

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 43KB - Virtual size: 43KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
MSVidCtl.dll
.dll regsvr32 windows:5 windows x86 arch:x86

0467516a475941daa18bfa5b1573ef90

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetLocaleInfoW
WideCharToMultiByte
GetTickCount
GetDriveTypeW
GetSystemDirectoryW
Sleep
IsValidLocale
FlushInstructionCache
GetCurrentProcess
HeapFree
GetProcessHeap
HeapAlloc
GetCurrentThreadId
GlobalUnlock
GlobalLock
GlobalAlloc
GetCurrentProcessId
InterlockedCompareExchange
LoadLibraryA
QueryPerformanceCounter
GetSystemTimeAsFileTime
GetModuleHandleA
TerminateProcess
GetLocalTime
GlobalMemoryStatus
GetDiskFreeSpaceA
GetComputerNameA
LocalFree
LocalAlloc
CreateMutexA
VirtualQuery
GetSystemInfo
VirtualProtect
ReadFile
SetStdHandle
LCMapStringW
SetThreadExecutionState
FormatMessageW
IsBadReadPtr
GetOEMCP
GetStringTypeW
GetStringTypeA
GetCPInfo
FlushFileBuffers
SetFilePointer
HeapSize
IsBadWritePtr
VirtualAlloc
SetUnhandledExceptionFilter
WriteFile
VirtualFree
HeapCreate
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetModuleFileNameA
GetStartupInfoA
GetFileType
GetStdHandle
SetHandleCount
TlsAlloc
TlsGetValue
SetLastError
TlsFree
ExitProcess
HeapReAlloc
RaiseException
GetVersionExA
GetCommandLineA
TlsSetValue
DelayLoadFailureHook
CreateThread
WaitForMultipleObjects
ResetEvent
SetEvent
CreateMutexW
FindResourceW
LoadResource
LockResource
GetLastError
lstrlenA
MultiByteToWideChar
CloseHandle
ReleaseMutex
WaitForSingleObject
LCMapStringA
CreateEventW
GetModuleHandleW
GetShortPathNameW
lstrcpynW
lstrcmpiW
InterlockedDecrement
InterlockedIncrement
lstrlenW
LoadLibraryW
GetProcAddress
DeviceIoControl
FreeLibrary
DisableThreadLibraryCalls
GetModuleFileNameW
lstrcatW
DeleteCriticalSection
HeapDestroy
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSection
lstrcpyW
GetVersionExW
GetThreadLocale
GetLocaleInfoA
GetACP
IsBadCodePtr
InterlockedExchange

ntdll

RtlUnwind

ole32

OleSaveToStream
WriteClassStm
OleLoadFromStream
CreateDataAdviseHolder
OleRegGetMiscStatus
CreateOleAdviseHolder
OleRegGetUserType
OleRegEnumVerbs
CoGetMalloc
CoUninitialize
ProgIDFromCLSID
StringFromCLSID
StringFromGUID2
GetRunningObjectTable
CLSIDFromString
CoTaskMemRealloc
CoTaskMemFree
CoTaskMemAlloc
CoCreateInstance
HDC_UserSize
HDC_UserMarshal
HDC_UserUnmarshal
HDC_UserFree
HWND_UserSize
HWND_UserMarshal
HWND_UserUnmarshal
HWND_UserFree
CreateItemMoniker
CoCreateFreeThreadedMarshaler

oleaut32

SysFreeString
VARIANT_UserFree
VARIANT_UserUnmarshal
VARIANT_UserMarshal
VARIANT_UserSize
BSTR_UserFree
BSTR_UserUnmarshal
BSTR_UserMarshal
BSTR_UserSize
SysAllocString
LoadTypeLi
RegisterTypeLi
VariantClear
VariantCopy
SysAllocStringByteLen
VarUI4FromStr
SafeArrayUnaccessData
SafeArrayAccessData
SafeArrayCreate
VariantChangeType
SysStringByteLen
LoadRegTypeLi
SysStringLen
SysAllocStringLen
SetErrorInfo
CreateErrorInfo
VariantInit
OleCreatePictureIndirect
OleCreatePropertyFrame

user32

LoadStringW
DispatchMessageW
TranslateMessage
PeekMessageW
MsgWaitForMultipleObjectsEx
MapWindowPoints
EqualRect
ReleaseDC
GetDC
IsWindow
CopyRect
SystemParametersInfoW
FillRect
SendMessageW
PostMessageW
GetWindowLongW
GetClientRect
SetTimer
KillTimer
GetKeyState
SetCursor
LoadImageW
RegisterClassExW
wsprintfW
LoadCursorW
PtInRect
IntersectRect
GetWindowRect
ReleaseCapture
SetCapture
GetDesktopWindow
DestroyWindow
SetFocus
IsChild
GetFocus
GetParent
ShowWindow
InvalidateRect
DefWindowProcW
SetWindowLongW
CreateWindowExW
BeginPaint
EndPaint
OffsetRect
SetWindowRgn
SetWindowPos
UnionRect
CallWindowProcW
CharNextW
GetClassInfoExW

advapi32

RegDeleteKeyW
RegCloseKey
RegCreateKeyExW
RegOpenKeyExW
RegSetValueExW
RegQueryInfoKeyW
RegEnumValueW
RegEnumKeyExW
RegSetValueW
RegQueryValueW
RegQueryValueExW
RegCreateKeyW
CryptGetHashParam
CryptHashData
CryptDestroyHash
CryptCreateHash
CryptReleaseContext
CryptGenRandom
CryptAcquireContextW
GetUserNameA
RegQueryValueExA
RegSetValueExA
RegCreateKeyExA
RegDeleteValueW

gdi32

CreateDIBitmap
SelectObject
CreateCompatibleDC
GetDeviceCaps
CreateSolidBrush
DeleteObject
DeleteMetaFile
CloseMetaFile
RestoreDC
SetWindowExtEx
SetWindowOrgEx
SaveDC
CreateMetaFileW
CreateRectRgnIndirect
DeleteDC

rpcrt4

NdrDllUnregisterProxy
NdrDllRegisterProxy
NdrCStdStubBuffer2_Release
NdrDllCanUnloadNow
NdrDllGetClassObject
CStdStubBuffer_QueryInterface
CStdStubBuffer_AddRef
CStdStubBuffer_Connect
CStdStubBuffer_Disconnect
CStdStubBuffer_Invoke
CStdStubBuffer_IsIIDSupported
CStdStubBuffer_CountRefs
CStdStubBuffer_DebugServerQueryInterface
CStdStubBuffer_DebugServerRelease
NdrOleAllocate
NdrOleFree
IUnknown_QueryInterface_Proxy
IUnknown_AddRef_Proxy
IUnknown_Release_Proxy
NdrStubCall2
NdrStubForwardingFunction
NdrCStdStubBuffer_Release

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
GetProxyDllInfo

Sections

.text
Size: 903KB - Virtual size: 902KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.orpc
Size: 1024B - Virtual size: 693B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 34KB - Virtual size: 42KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 183KB - Virtual size: 182KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 79KB - Virtual size: 79KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Mpeg2Data.ax
.dll regsvr32 windows:5 windows x86 arch:x86

fcd4181f9417f53d1b10aa6fcfd706a8

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

ResetEvent
WaitForMultipleObjects
LocalAlloc
LocalFree
CreateThread
LocalReAlloc
Sleep
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
DisableThreadLibraryCalls
GetProcAddress
GetModuleHandleA
TerminateProcess
CreateEventW
GetThreadPriority
SetThreadPriority
lstrcpynW
lstrcpyW
lstrcmpW
SetEvent
CloseHandle
LeaveCriticalSection
EnterCriticalSection
WaitForSingleObject
DeleteCriticalSection
InitializeCriticalSection
GetCurrentProcess
GetModuleFileNameA
GetLastError
lstrlenA
MultiByteToWideChar
lstrlenW
LoadLibraryW
InterlockedDecrement
FreeLibrary
InterlockedIncrement
GetVersionExW
GetCurrentThread

msvcrt

malloc
__CxxFrameHandler
??2@YAPAXI@Z
??3@YAXPAX@Z
free
_purecall

winmm

timeBeginPeriod
timeEndPeriod
timeSetEvent
timeKillEvent

advapi32

RegCreateKeyW
RegSetValueW
RegSetValueExW
RegOpenKeyExW
RegEnumKeyExW
RegCloseKey
RegDeleteKeyW

user32

GetQueueStatus
PostThreadMessageW
wsprintfW
MsgWaitForMultipleObjects
PeekMessageW
RegisterWindowMessageW
DispatchMessageW

ole32

CoFreeUnusedLibraries
CoInitialize
CoTaskMemAlloc
CoTaskMemFree
CoCreateInstance
CoUninitialize
StringFromGUID2

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 49KB - Virtual size: 49KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 440B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
bda.inf
bdaplgin.ax
.dll regsvr32 windows:5 windows x86 arch:x86

2d0c35dab4bdadc34717c640b941494f

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetProcAddress
GetModuleHandleA
TerminateProcess
GetCurrentProcess
DisableThreadLibraryCalls
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
DeleteCriticalSection
InitializeCriticalSection
GetModuleFileNameA
GetLastError
lstrlenA
MultiByteToWideChar
lstrlenW
GetVersionExW
InterlockedIncrement
FreeLibrary
InterlockedDecrement

msvcrt

??3@YAXPAX@Z
_vsnwprintf
??2@YAPAXI@Z

advapi32

RegSetValueW
RegSetValueExW
RegOpenKeyExW
RegEnumKeyExW
RegCloseKey
RegDeleteKeyW
RegCreateKeyW

user32

wsprintfW

ole32

CoCreateInstance
CoFreeUnusedLibraries
CoUninitialize
StringFromGUID2
CoInitialize

ksproxy.ax

KsSynchronousDeviceControl

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 376B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
ccdecode.inf
ccdecode.sys
.sys windows:5 windows x86 arch:x86

d5977c633dbdac9c68f7e446e09a0a9d

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_WDM_DRIVER

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

ccdecode.pdb

Imports

ntoskrnl.exe

KefReleaseSpinLockFromDpcLevel
KeInitializeSpinLock
ExFreePool
KeInitializeEvent
ExAllocatePoolWithTag
KeTickCount
KefAcquireSpinLockAtDpcLevel

hal

ExAcquireFastMutex
KeQueryPerformanceCounter
ExReleaseFastMutex
KfReleaseSpinLock
KfAcquireSpinLock

stream.sys

StreamClassDeviceNotification
StreamClassRegisterAdapter
StreamClassStreamNotification

Sections

.text
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 768B - Virtual size: 760B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 980B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

PAGECONS
Size: 256B - Virtual size: 144B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

INIT
Size: 640B - Virtual size: 554B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 1024B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 436B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dx9bdaxp.cat
dxbda.inf
ipsink.ax
.dll regsvr32 windows:5 windows x86 arch:x86

628f6874f78df4a7257166f9144f8a03

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

CloseHandle
ReleaseMutex
WaitForSingleObject
GetVersionExA
ResetEvent
WaitForMultipleObjects
CreateThread
CreateMutexA
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
DisableThreadLibraryCalls
SetEvent
GetModuleHandleA
TerminateProcess
GetCurrentProcess
WaitForSingleObjectEx
CreateEventA
GetLastError
Sleep
IsBadReadPtr
IsBadWritePtr
GetProcAddress
MultiByteToWideChar
GetModuleFileNameA
lstrlenA
lstrlenW
InterlockedDecrement
FreeLibrary
InterlockedIncrement
GetVersionExW

msvcrt

free
_snprintf
malloc
??3@YAXPAX@Z
??2@YAPAXI@Z
rand

advapi32

RegSetValueW
RegSetValueExW
RegOpenKeyExW
RegEnumKeyExW
RegCloseKey
RegDeleteKeyW
RegCreateKeyW

user32

wsprintfW

ole32

CoUninitialize
CoCreateInstance
CoInitialize
CoFreeUnusedLibraries
StringFromGUID2
CoTaskMemAlloc

oleaut32

SysFreeString
SysStringLen
SysAllocStringLen

ksproxy.ax

KsSynchronousDeviceControl

iphlpapi

GetUniDirectionalAdapterInfo
GetIpAddrTable

wsock32

closesocket
bind
setsockopt
htons
WSAStartup
ioctlsocket

ws2_32

WSASocketA

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 360B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
kstvtune.ax
.dll windows:5 windows x86 arch:x86

339742cd268348bf0f492e75bf25f820

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

kstvtune.pdb

Imports

kernel32

LoadResource
FindResourceW
GetLastError
SizeofResource
InterlockedCompareExchange
Sleep
CreateFileW
InterlockedExchange
GetProfileIntW
lstrcpyW
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
LockResource
CreateMutexW
WaitForSingleObject
ReleaseMutex
CloseHandle
IsBadWritePtr
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
lstrcmpW
lstrlenW
lstrcpynW
InterlockedDecrement
FreeLibrary
InterlockedIncrement
DisableThreadLibraryCalls
GetVersionExW
InitializeCriticalSection

msvcrt

??3@YAXPAX@Z
??2@YAPAXI@Z
wcstol
_purecall

advapi32

RegCreateKeyExW
RegOpenKeyExW
RegEnumValueW
RegCloseKey
RegQueryValueExW
RegDeleteValueW
RegSetValueExW

user32

GetWindowRect
GetDesktopWindow
InvalidateRect
wsprintfW
KillTimer
MessageBoxW
LoadStringW
CheckRadioButton
SetDlgItemTextW
SetDlgItemInt
DefWindowProcW
ShowWindow
DestroyWindow
SendMessageW
GetWindowLongW
MoveWindow
CreateDialogParamW
SetWindowLongW
GetDlgItemInt
GetAsyncKeyState
UpdateWindow
PostMessageW
SetTimer
EnableWindow
SetWindowTextW
GetDlgItem

comctl32

ord17

ole32

CoFreeUnusedLibraries
CoTaskMemFree
CoCreateInstance
CoTaskMemAlloc
CoInitialize
CoUninitialize

oleaut32

VariantInit
VariantClear

ksproxy.ax

KsSynchronousDeviceControl

Exports

Exports

DllCanUnloadNow
DllGetClassObject

Sections

.text
Size: 40KB - Virtual size: 39KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 388B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 234KB - Virtual size: 233KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
kswdmcap.ax
.dll regsvr32 windows:5 windows x86 arch:x86

a4d2e6643818292a0d8fef1ab511db26

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

WaitForSingleObjectEx
SetEvent
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
ResetEvent
WaitForMultipleObjects
VirtualFree
VirtualAlloc
SetLastError
CreateThread
InitializeCriticalSection
ExitThread
WideCharToMultiByte
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
DisableThreadLibraryCalls
GetProcAddress
GetModuleHandleA
lstrlenW
GetCurrentProcess
InterlockedDecrement
FreeLibrary
InterlockedIncrement
GetModuleFileNameA
Sleep
lstrcmpW
lstrcpyW
lstrcpynW
CreateEventW
GetLastError
DeviceIoControl
GetOverlappedResult
lstrlenA
MultiByteToWideChar
GetVersionExW
TerminateProcess
CloseHandle

mfc42

ord823
ord825

msvcrt

swprintf
_purecall
_ftol
__CxxFrameHandler
_except_handler3
?terminate@@YAXXZ
??1type_info@@UAE@XZ
sprintf
_wtoi
wcstod

advapi32

RegSetValueExW
RegCreateKeyW
RegSetValueW
RegDeleteKeyW
RegOpenKeyExW
RegEnumKeyExW
RegCloseKey

user32

SetTimer
KillTimer
wsprintfW
LoadImageW
ShowWindow
SetDlgItemTextW
SetWindowTextA
GetWindowTextA
GetWindowLongW
SetWindowLongW
CreateDialogParamW
MoveWindow
InvalidateRect
DestroyWindow
LoadStringW
GetWindowRect
GetDesktopWindow
EnableWindow
SetDlgItemInt
MessageBoxW
IsWindowEnabled
GetDlgItemInt
SetRect
IsRectEmpty
SendMessageW
GetWindowTextW
GetDlgItem
SetWindowTextW

comctl32

InitCommonControlsEx

ole32

CoUninitialize
CoFreeUnusedLibraries
CoInitialize
CoCreateInstance
CoTaskMemAlloc
CoTaskMemFree
StringFromGUID2

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
FilterHandleFromPin
PerformDataIntersection
PinFactoryIDFromPin
RedundantKsGetMultiplePinFactoryItems

Sections

.text
Size: 57KB - Virtual size: 56KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 156KB - Virtual size: 155KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
ksxbar.ax
.dll windows:5 windows x86 arch:x86

86f7b1489e2283642a94ef3ffa08593e

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
lstrcpynW
CloseHandle
WaitForSingleObject
GetLastError
DeviceIoControl
CreateEventW
IsBadWritePtr
CreateFileW
lstrcpyW
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
DisableThreadLibraryCalls
GetProcAddress
GetModuleHandleA
TerminateProcess
GetCurrentProcess
lstrcmpW
lstrlenW
InterlockedDecrement
FreeLibrary
InterlockedIncrement
GetVersionExW

msvcrt

swprintf
??2@YAPAXI@Z
wcslen
_purecall
??3@YAXPAX@Z

user32

LoadStringW
GetWindowRect
GetDesktopWindow
MessageBoxW
SetRect
SetDlgItemTextW
SendMessageW
GetDlgItem
CheckRadioButton
EnableWindow
DestroyWindow
ShowWindow
InvalidateRect
MoveWindow
CreateDialogParamW
SetWindowLongW
GetWindowLongW
wsprintfW

ole32

CoFreeUnusedLibraries
CoUninitialize
CoTaskMemAlloc
CoTaskMemFree
CoCreateInstance
CoInitialize

oleaut32

VariantInit
VariantClear

Exports

Exports

DllCanUnloadNow
DllGetClassObject

Sections

.text
Size: 31KB - Virtual size: 31KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 424B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
mpe.inf
mpe.sys
.sys windows:5 windows x86 arch:x86

b709125e5196d69f577afdd8423729ff

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

mpe.pdb

Imports

ntoskrnl.exe

KeTickCount
KeQuerySystemTime
KeInitializeSpinLock
ExAllocatePoolWithTag
ExFreePool
KeBugCheckEx
DbgPrint

hal

KfAcquireSpinLock
KfReleaseSpinLock

stream.sys

StreamClassStreamNotification
StreamClassDeviceNotification
StreamClassRegisterAdapter

Sections

.text
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 384B - Virtual size: 276B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 640B - Virtual size: 544B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

PAGECONS
Size: 128B - Virtual size: 32B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

INIT
Size: 512B - Virtual size: 456B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 640B - Virtual size: 630B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
msdv.sys
.sys windows:5 windows x86 arch:x86

9c8ab33b01f025da51e11dfc59464123

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_WDM_DRIVER

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

msdv.pdb

Imports

ntoskrnl.exe

KeInitializeEvent
IoFreeIrp
IoAllocateIrp
IofCallDriver
ExFreePool
KeWaitForSingleObject
KeSetEvent
ZwClose
ObReferenceObjectByHandle
PsCreateSystemThread
ExAllocatePoolWithTag
KeReleaseMutex
KeInitializeSpinLock
KeInitializeMutex
InterlockedExchange
KeInitializeTimer
KeInitializeDpc
InterlockedIncrement
KeClearEvent
IoFreeWorkItem
IoQueueWorkItem
IoAllocateWorkItem
KeCancelTimer
KeSetTimerEx
ObfDereferenceObject
MmMapLockedPagesSpecifyCache
PsTerminateSystemThread
InterlockedDecrement
KeSetPriorityThread
KeGetCurrentThread
IoCancelIrp
wcscpy
KeDelayExecutionThread

hal

KfAcquireSpinLock
KfReleaseSpinLock
KeGetCurrentIrql
KeQueryPerformanceCounter

stream.sys

StreamClassStreamNotification
StreamClassRegisterAdapter
StreamClassGetNextEvent
StreamClassQueryMasterClockSync
StreamClassDeviceNotification

Sections

.text
Size: 21KB - Virtual size: 21KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 24KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

PAGECONS
Size: 128B - Virtual size: 128B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

INIT
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 1016B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
msyuv.dll
.dll windows:5 windows x86 arch:x86

317bb2a83416a509406d650a33ce001a

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

VirtualAlloc
VirtualFree
DisableThreadLibraryCalls
GetProcAddress
GetModuleHandleA
LocalFree
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
LocalAlloc

msvcrt

_ftol
wcscpy

gdi32

GetSystemPaletteEntries

user32

GetDesktopWindow
MessageBoxW
ReleaseDC
GetDC

winmm

DefDriverProc
GetDriverModuleHandle

Exports

Exports

DriverProc

Sections

.text
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 1016B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 328B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
nabtsfec.inf
nabtsfec.sys
.sys windows:5 windows x86 arch:x86

49970d1ef884a17567a446f9fea4d52c

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_WDM_DRIVER

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

nabtsfec.pdb

Imports

ntoskrnl.exe

KefReleaseSpinLockFromDpcLevel
KeInitializeSpinLock
KefAcquireSpinLockAtDpcLevel
ExFreePool
ObfDereferenceObject
IofCallDriver
IoBuildDeviceIoControlRequest
IoGetDeviceObjectPointer
RtlInitUnicodeString
ExAllocatePoolWithTag
KeRestoreFloatingPointState
KeSaveFloatingPointState
KeTickCount
KeBugCheckEx
KeInitializeEvent

hal

KfReleaseSpinLock
KfAcquireSpinLock
ExReleaseFastMutex
KeQueryPerformanceCounter
ExAcquireFastMutex

stream.sys

StreamClassDeviceNotification
StreamClassRegisterAdapter
StreamClassStreamNotification

Sections

.text
Size: 35KB - Virtual size: 35KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 1006B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 41KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

PAGECONS
Size: 256B - Virtual size: 160B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

INIT
Size: 896B - Virtual size: 784B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 1016B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
ndisip.inf
ndisip.sys
.sys windows:5 windows x86 arch:x86

85b9203fdd9c0bd977642878e7918927

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

ndisip.pdb

Imports

ntoskrnl.exe

KeBugCheckEx
KeTickCount
KeInitializeSpinLock
IoFreeMdl
ZwOpenKey
ZwCreateKey
ZwQueryValueKey
DbgPrint
ZwSetValueKey
ZwClose
RtlInitUnicodeString
IofCompleteRequest

hal

KfReleaseSpinLock
KfAcquireSpinLock

ndis.sys

NdisAllocateMemory
NdisFreeMemory
NdisAllocatePacket
NdisAllocateBufferPool
NdisMSetAttributesEx
NdisAllocateBuffer
NdisFreeBufferPool
NdisFreePacketPool
NdisInitializeWrapper
NdisMRegisterMiniport
NdisAllocateSpinLock
NdisAllocatePacketPool
NdisReleaseSpinLock
NdisMDeregisterDevice
NdisAcquireSpinLock
NdisFreePacket
NdisMRegisterDevice

Sections

.text
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 384B - Virtual size: 331B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 384B - Virtual size: 284B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

INIT
Size: 896B - Virtual size: 890B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 384B - Virtual size: 358B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
psisdecd.dll
.dll regsvr32 windows:5 windows x86 arch:x86

030f2fd88c6befc4cc612bcee23289da

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

lstrcmpiW
lstrcpynW
HeapDestroy
lstrcatW
GetModuleFileNameW
DisableThreadLibraryCalls
FreeLibrary
GetProcAddress
LoadLibraryW
lstrlenA
SizeofResource
LoadResource
FindResourceW
GetLastError
LoadLibraryExW
GetShortPathNameW
LockResource
lstrcpyW
CloseHandle
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
GetModuleHandleA
TerminateProcess
GetCurrentProcess
FlushFileBuffers
lstrlenW
MultiByteToWideChar
Sleep
InitializeCriticalSection
InterlockedDecrement
InterlockedIncrement
DeleteCriticalSection
LeaveCriticalSection
GetModuleHandleW
EnterCriticalSection
SetStdHandle
VirtualQuery
GetSystemInfo
VirtualProtect
LCMapStringW
LCMapStringA
SetFilePointer
GetLocaleInfoA
GetStringTypeW
GetStringTypeA
IsBadCodePtr
IsBadReadPtr
LoadLibraryA
GetCPInfo
GetOEMCP
WideCharToMultiByte
LocalFree
InterlockedExchange
TlsSetValue
GetCommandLineA
GetVersionExA
HeapFree
HeapReAlloc
HeapAlloc
RaiseException
ExitProcess
TlsFree
SetLastError
TlsGetValue
TlsAlloc
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
HeapCreate
VirtualFree
WriteFile
VirtualAlloc
IsBadWritePtr
HeapSize
SetUnhandledExceptionFilter
GetACP

ntdll

RtlUnwind

winmm

timeGetTime

advapi32

RegEnumValueW
RegQueryInfoKeyW
RegSetValueExW
RegCreateKeyExW
RegDeleteValueW
RegDeleteKeyW
RegOpenKeyExW
RegCloseKey
RegQueryValueExW
RegEnumKeyExW

user32

CharNextW

ole32

CoTaskMemFree
CoTaskMemAlloc
CoTaskMemRealloc
CoCreateInstance
CoCreateFreeThreadedMarshaler

oleaut32

SysStringByteLen
SysAllocStringByteLen
RegisterTypeLi
LoadTypeLi
VariantClear
VariantChangeType
VariantCopy
VariantInit
SysAllocString
SysFreeString
VarUI4FromStr

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 300KB - Virtual size: 299KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 25KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 15KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
psisrndr.ax
.dll regsvr32 windows:5 windows x86 arch:x86

b3fabccc88441525f3d8a97e7abf70a5

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetCurrentProcessId
GetSystemTimeAsFileTime
DisableThreadLibraryCalls
GetProcAddress
GetModuleHandleA
TerminateProcess
GetCurrentProcess
GetCurrentThreadId
GetModuleFileNameA
GetTickCount
QueryPerformanceCounter
InterlockedDecrement
InterlockedIncrement
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSection
GetLastError
lstrlenA
MultiByteToWideChar
LoadLibraryW
FreeLibrary
lstrcmpW
lstrlenW
GetVersionExW
lstrcpynW

msvcrt

??3@YAXPAX@Z
_purecall
??2@YAPAXI@Z

advapi32

RegSetValueW
RegSetValueExW
RegEnumKeyExW
RegDeleteKeyW
RegOpenKeyExW
RegQueryValueExW
RegCloseKey
RegCreateKeyW

user32

wsprintfW

ole32

CoUninitialize
StringFromGUID2
CoTaskMemFree
CoFreeUnusedLibraries
CoInitialize
CoTaskMemAlloc
CoCreateInstance

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 24KB - Virtual size: 23KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 376B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
slip.inf
slip.sys
.sys windows:5 windows x86 arch:x86

3f9db7809b38aa51c5daad51c58fe7a9

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

slip.pdb

Imports

ntoskrnl.exe

KeTickCount
ExFreePool
ExAllocatePoolWithTag
DbgBreakPoint
KeQuerySystemTime
KeInitializeSpinLock

hal

KfAcquireSpinLock
KfReleaseSpinLock

stream.sys

StreamClassStreamNotification
StreamClassDeviceNotification
StreamClassRegisterAdapter

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 384B - Virtual size: 262B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

PAGECONS
Size: 128B - Virtual size: 48B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

INIT
Size: 512B - Virtual size: 440B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 256B - Virtual size: 206B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
streamip.inf
streamip.sys
.sys windows:5 windows x86 arch:x86

937c5c9480c457813996610d24c3ca2e

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

streamip.pdb

Imports

ntoskrnl.exe

IoGetDeviceObjectPointer
ZwCreateFile
IoGetDeviceInterfaces
ObfReferenceObject
IoBuildDeviceIoControlRequest
KeTickCount
ZwClose
ObfDereferenceObject
KeInitializeSpinLock
RtlInitUnicodeString
DbgPrint
ExFreePool
IofCallDriver
ExAllocatePoolWithTag

hal

KfAcquireSpinLock
KfReleaseSpinLock

stream.sys

StreamClassDeviceNotification
StreamClassGetNextEvent
StreamClassStreamNotification
StreamClassRegisterAdapter

Sections

.text
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 768B - Virtual size: 647B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 640B - Virtual size: 540B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

PAGECONS
Size: 128B - Virtual size: 48B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

INIT
Size: 768B - Virtual size: 674B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 1008B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 640B - Virtual size: 612B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
vbisurf.ax
.dll regsvr32 windows:5 windows x86 arch:x86

4ea881e9bc4888403a5e8628308bf315

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetCurrentProcessId
GetSystemTimeAsFileTime
DisableThreadLibraryCalls
GetProcAddress
GetModuleHandleA
TerminateProcess
GetCurrentProcess
GetCurrentThreadId
GetModuleHandleW
GetTickCount
InterlockedExchange
QueryPerformanceCounter
WaitForSingleObject
CloseHandle
SetErrorMode
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSection
FreeLibrary
lstrcmpW
CreateThread
ResetEvent
SetEvent
CreateEventW
InterlockedDecrement
InterlockedIncrement
lstrcpynW
GetModuleFileNameA
GetLastError
lstrlenA
MultiByteToWideChar
GetVersionExW
lstrlenW

msvcrt

??2@YAPAXI@Z
??3@YAXPAX@Z

ddraw

DirectDrawCreateEx
DirectDrawEnumerateExA

advapi32

RegSetValueW
RegSetValueExW
RegOpenKeyExW
RegEnumKeyExW
RegCloseKey
RegDeleteKeyW
RegCreateKeyW

user32

wsprintfW

ole32

CoTaskMemAlloc
CoInitialize
CoFreeUnusedLibraries
CoTaskMemFree
StringFromGUID2
CoUninitialize
CoCreateInstance

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 22KB - Virtual size: 22KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 472B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 1016B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
wstcodec.inf
wstcodec.sys
.sys windows:5 windows x86 arch:x86

5e94d6115bae4fe6e2b87706af1a8293

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_WDM_DRIVER

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

wstcodec.pdb

Imports

hal

KfReleaseSpinLock
KfAcquireSpinLock
KeQueryPerformanceCounter

ntoskrnl.exe

IoCreateSymbolicLink
ExFreePool
KeInitializeSpinLock
KeTickCount
ExAllocatePoolWithTag
RtlInitUnicodeString

stream.sys

StreamClassDeviceNotification
StreamClassRegisterAdapter
StreamClassStreamNotification

Sections

.text
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

INIT
Size: 512B - Virtual size: 484B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 1016B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 384B - Virtual size: 284B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
wstdecod.dll
.dll regsvr32 windows:5 windows x86 arch:x86

b773ed61e5f2f5b7c57feede58a7f58c

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetCurrentProcess
TerminateProcess
GetProcAddress
DisableThreadLibraryCalls
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
GetLastError
FreeLibrary
lstrcmpW
InterlockedDecrement
InterlockedIncrement
lstrcpynW
GetModuleFileNameA
lstrlenA
MultiByteToWideChar
lstrlenW
GetVersionExW
GetModuleHandleA
MulDiv
IsBadReadPtr
IsBadWritePtr
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSection

msvcrt

free
malloc
??2@YAPAXI@Z
sprintf
sscanf
??3@YAXPAX@Z

gdi32

CreateCompatibleDC
DeleteDC
CreateFontIndirectA
SetBkMode
DeleteObject
CreateDIBSection
SelectObject
SetTextColor
ExtTextOutA
SetBkColor
GetTextMetricsA
GetSystemPaletteEntries
GetDeviceCaps
GetTextColor

user32

GetWindowRect
GetDesktopWindow
DefWindowProcW
InvalidateRect
LoadStringW
SetRect
SetTimer
KillTimer
IsRectEmpty
ReleaseDC
GetDC
UnregisterClassA
SendMessageTimeoutA
DefWindowProcA
ShowWindow
CreateWindowExA
MoveWindow
CreateDialogParamW
SetWindowLongW
GetWindowLongW
wsprintfW
GetWindowTextA
MessageBeep
IsDlgButtonChecked
GetDlgItem
SendMessageA
SetWindowTextA
CheckDlgButton
RegisterClassA
DestroyWindow

advapi32

RegCloseKey
RegEnumKeyExW
RegOpenKeyExW
RegSetValueExW
RegSetValueW
RegCreateKeyW
RegDeleteKeyW

ole32

CoTaskMemFree
StringFromGUID2
CoUninitialize
CoFreeUnusedLibraries
CoCreateInstance
CoInitialize
CoTaskMemAlloc

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 39KB - Virtual size: 39KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
DirectX/DirectX9/DSETUP.dll
.dll windows:5 windows x86 arch:x86

bf78a72e9482796575907cf30b9c2864

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

DSETUP.pdb

Imports

kernel32

lstrcatA
lstrcpyA
IsBadWritePtr
lstrlenA
GetModuleFileNameA
SetLastError
MultiByteToWideChar
LocalFree
LocalAlloc
lstrcmpiA
WideCharToMultiByte
lstrcmpA
GetSystemDefaultLCID
IsBadStringPtrA
IsBadReadPtr
IsBadStringPtrW
lstrlenW
lstrcpynA
GetWindowsDirectoryA
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TlsSetValue
GetCommandLineA
HeapFree
HeapAlloc
HeapReAlloc
GetLocalTime
ExitProcess
GetModuleHandleA
TlsFree
TlsGetValue
TlsAlloc
SetHandleCount
GetStdHandle
GetCurrentDirectoryA
GetStartupInfoA
DeleteCriticalSection
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
HeapDestroy
HeapCreate
VirtualFree
WriteFile
LeaveCriticalSection
EnterCriticalSection
VirtualAlloc
GetACP
GetOEMCP
GetCPInfo
InitializeCriticalSection
RtlUnwind
InterlockedExchange
VirtualQuery
SetFilePointer
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
SetStdHandle
FlushFileBuffers
CreateFileA
LCMapStringA
LCMapStringW
VirtualProtect
GetSystemInfo
SetEndOfFile
GetProcessHeap
ReadFile
GetSystemDirectoryA
SetCurrentDirectoryA
GetVersionExA
LoadLibraryA
GetProcAddress
OutputDebugStringA
CreateMutexA
GetLastError
CloseHandle
GetFileType
FreeLibrary

user32

wsprintfW
CharNextA
wsprintfA
GetKeyboardType
DestroyWindow
SetFocus
CreateDialogParamA
SetDlgItemTextA
MessageBoxA
PeekMessageA
GetMessageA
TranslateMessage
DispatchMessageA

advapi32

RegCloseKey
RegOpenKeyExA
RegDeleteKeyA
RegEnumKeyExA
RegQueryInfoKeyA
RegSetValueExA
RegCreateKeyExA
RegSetValueExW
RegCreateKeyExW
RegQueryValueExA

winmm

mmioRead
mmioDescend
mmioOpenA
mmioClose

version

GetFileVersionInfoA
VerQueryValueA
GetFileVersionInfoSizeA

ole32

StringFromGUID2

Exports

Exports

DirectXDeviceDriverSetupA
DirectXDeviceDriverSetupW
DirectXLoadString
DirectXRegisterApplicationA
DirectXRegisterApplicationW
DirectXSetupA
DirectXSetupCallback
DirectXSetupGetEULAA
DirectXSetupGetEULAW
DirectXSetupGetFileVersion
DirectXSetupGetVersion
DirectXSetupIsEng
DirectXSetupIsJapan
DirectXSetupIsJapanNec
DirectXSetupSetCallback
DirectXSetupShowEULA
DirectXSetupW
DirectXUnRegisterApplication

Sections

.text
Size: 52KB - Virtual size: 51KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 976B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
DirectX/DirectX9/DirectX.cab
.cab
ACTC094.ini
ACT_RS.ini
ACT_RS.png
.png
GR3001.ini
GR3001.png
.png
GR3001_G.ini
GR4001.ini
GR4001.png
.png
GR4001_G.ini
GR4001_G.png
.png
GR4003.ini
GR4003.png
.png
GR4005.ini
GR4005.png
.png
GlmDA.ini
GlmDA.png
.png
GlmDA_G.ini
GlmDGP_G.ini
GlmDigGP.ini
GlmDigGP.png
.png
Hammer.ini
IA3002.ini
IA3002_1.png
.png
IA3002_2.png
.png
IA3002_G.ini
LGC202.ini
LGC202.png
.png
LGC207.ini
LGC207.png
.png
LGC209.ini
LGC209.png
.png
LGC20A.ini
LGC20A.png
.png
LGC291.ini
LGC291.png
.png
MS1B.ini
MS1B.png
.png
MS1B_01.png
.png
MS1B_02.png
.png
MS1B_03.png
.png
MS1B_04.png
.png
MS1B_05.png
.png
MS1B_06.png
.png
MS1B_07.png
.png
MS1B_08.png
.png
MS1B_09.png
.png
MS1B_10.png
.png
MS26.ini
MS26.png
.png
MS26_01.png
.png
MS26_02.png
.png
MS26_03.png
.png
MS26_04.png
.png
MS26_05.png
.png
MS26_06.png
.png
MS26_07.png
.png
MS26_08.png
.png
MS27.ini
MS27.png
.png
MS27_1.png
.png
MS27_2.png
.png
MS27_3.png
.png
MS27_4.png
.png
MS27_5.png
.png
MS28.ini
MS28.png
.png
MS28_1.png
.png
MS28_2.png
.png
MS28_3.png
.png
MS28_4.png
.png
MS28_5.png
.png
MS28_6.png
.png
MS28_7.png
.png
MS28_8.png
.png
MS34.ini
MS34.png
.png
MS34_01.png
.png
MS34_02.png
.png
MS34_03.png
.png
MS34_04.png
.png
MS34_05.png
.png
MS34_06.png
.png
MS34_07.png
.png
MS34_08.png
.png
MS34_G.ini
MS3B.ini
MS3B.png
.png
MS3B_1.png
.png
MS3B_2.png
.png
MS3B_3.png
.png
MS3B_4.png
.png
MS3B_a.png
.png
MS3B_c.png
.png
MS3B_m.png
.png
MS3B_t.png
.png
MS56.ini
MS56.png
.png
MS56_1.png
.png
MS56_10.png
.png
MS56_2.png
.png
MS56_3.png
.png
MS56_4.png
.png
MS56_5.png
.png
MS56_6.png
.png
MS56_7.png
.png
MS56_8.png
.png
MS56_9.png
.png
MS6.ini
MS6.png
.png
MS6_1.png
.png
MS6_10.png
.png
MS6_2.png
.png
MS6_3.png
.png
MS6_4.png
.png
MS6_5.png
.png
MS6_6.png
.png
MS6_7.png
.png
MS6_8.png
.png
MS6_9.png
.png
MS6_G.ini
MS7.ini
MS7.png
.png
MS7_1.png
.png
MS7_2.png
.png
MS7_3.png
.png
MS7_4.png
.png
MS7_5.png
.png
MS7_6.png
.png
MS7_7.png
.png
MS7_8.png
.png
MS7_9.png
.png
MS7_G.ini
MS8.ini
MS8.png
.png
MS8_1.png
.png
MS8_10.png
.png
MS8_2.png
.png
MS8_3.png
.png
MS8_4.png
.png
MS8_5.png
.png
MS8_6.png
.png
MS8_7.png
.png
MS8_8.png
.png
MS8_9.png
.png
MS8_G.ini
MSE.ini
MSE.png
.png
MSE_1.png
.png
MSE_10.png
.png
MSE_2.png
.png
MSE_3.png
.png
MSE_4.png
.png
MSE_5.png
.png
MSE_6.png
.png
MSE_7.png
.png
MSE_8.png
.png
MSE_9.png
.png
MSE_G.ini
MSF1F.ini
MSF1F.png
.png
MSF1F_1.png
.png
MSF1F_10.png
.png
MSF1F_2.png
.png
MSF1F_3.png
.png
MSF1F_4.png
.png
MSF1F_5.png
.png
MSF1F_6.png
.png
MSF1F_7.png
.png
MSF1F_8.png
.png
MSF1F_9.png
.png
MSPRW.ini
MSPRW.png
.png
MSPRW_1.png
.png
MSPRW_2.png
.png
MSPRW_3.png
.png
MSPRW_4.png
.png
MSPRW_5.png
.png
MSPRW_6.png
.png
MSPRW_7.png
.png
MSPRW_8.png
.png
RaiderPD.ini
SV-262E1.png
.png
SV-262E3.png
.png
SV-262E4.png
.png
SV2511.png
.png
SV2512.png
.png
amstream.dll
.dll regsvr32 windows:5 windows x86 arch:x86

daa0a1e803cad6b878538c4dbd14c8e3

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
GetProcAddress
TerminateProcess
QueryPerformanceCounter
DuplicateHandle
CreateThread
MulDiv
ReleaseSemaphore
CreateSemaphoreA
ResetEvent
SetEvent
lstrcmpW
CreateEventA
DisableThreadLibraryCalls
GetModuleHandleA
LoadLibraryExA
FindResourceA
LoadResource
SizeofResource
FreeLibrary
lstrcpynA
GetCurrentThread
GetModuleFileNameA
lstrlenW
lstrcatA
lstrcpyA
HeapDestroy
WaitForSingleObject
GetCurrentProcess
CloseHandle
GetLastError
GetCurrentThreadId
lstrlenA
WideCharToMultiByte
MultiByteToWideChar
lstrcmpiA
InterlockedDecrement
InterlockedIncrement
DeleteCriticalSection
InitializeCriticalSection
LeaveCriticalSection
EnterCriticalSection
QueueUserAPC

user32

IsRectEmpty
CharNextA
wsprintfA

advapi32

RegEnumKeyExA
RegSetValueExA
RegOpenKeyExA
RegCreateKeyExA
RegCloseKey
RegQueryValueExA
RegQueryInfoKeyA
RegDeleteKeyA
RegDeleteValueA

ole32

CoTaskMemFree
CoTaskMemAlloc
CoTaskMemRealloc
CoCreateInstance

oleaut32

VarI4FromStr
LoadTypeLi
RegisterTypeLi
SetErrorInfo
LoadRegTypeLi
VariantChangeType
SysAllocString
VariantClear
VariantInit
SysAllocStringLen
SysStringLen
SysFreeString

ddraw

DirectDrawCreate

msvcrt

??3@YAXPAX@Z
_purecall
free
??2@YAPAXI@Z
realloc
malloc

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 52KB - Virtual size: 51KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 460B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
d3d.inf
d3d8.dll
.dll windows:5 windows x86 arch:x86

ef7832f231192aada82d2edfae2a30ff

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

d3d8.pdb

Imports

user32

GetCursor
CreateIconIndirect
GetWindowDC
GetDesktopWindow
GetSystemMetrics
GetIconInfo
SetCursorPos
GetCursorPos
SetCursor
DestroyIcon
SystemParametersInfoA
GetClientRect
SetForegroundWindow
IsWindow
IntersectRect
wsprintfA
GetDC
ReleaseDC
LoadStringA

advapi32

RegSetValueExA
RegCreateKeyA
RegOpenKeyExA
RegOpenKeyA
RegEnumKeyA
RegQueryValueExA
RegCloseKey

version

GetFileVersionInfoA
GetFileVersionInfoSizeA
VerQueryValueA

gdi32

GetNearestColor
GetDeviceCaps
CreateDCA
GetObjectA
DeleteObject
DeleteDC
CreateCompatibleDC
CreateDIBitmap
GetSystemPaletteEntries

ddraw

LockCB
UnlockCB
DdEntry21
DdEntry19
DdEntry17
DdEntry7
DdEntry11
DdEntry12
DdEntry1
DdEntry18
DdEntry9
DdEntry10
DdEntry6
DdEntry2
DdEntry3
DdEntry20
DdEntry8
DdEntry13
DdEntry16

kernel32

EnterCriticalSection
LeaveCriticalSection
GetLastError
InterlockedIncrement
lstrcatA
GetSystemDirectoryA
GetProcAddress
GetModuleHandleA
FreeLibrary
LoadLibraryA
lstrcpynA
OutputDebugStringA
InterlockedDecrement
CloseHandle
CreateMutexA
DisableThreadLibraryCalls
GetCurrentProcessId
LocalAlloc
LocalFree
lstrcpyA
CreateFileA
SetFilePointer
ReadFile
MoveFileA
DebugBreak
WriteFile
GetFileSize
SetErrorMode
InitializeCriticalSection
OpenFile
WideCharToMultiByte
MultiByteToWideChar
lstrlenA
lstrcmpiA
HeapAlloc
GetProcessHeap
ConnectNamedPipe
SetNamedPipeHandleState
DisconnectNamedPipe
SetEndOfFile
PeekNamedPipe
GetCommandLineA
GetVersionExA
RtlUnwind
HeapFree
RaiseException
HeapReAlloc
ExitProcess
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
GetModuleFileNameA
HeapDestroy
HeapCreate
VirtualFree
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
VirtualProtect
GetSystemInfo
VirtualQuery
LCMapStringA
LCMapStringW
VirtualAlloc
IsBadWritePtr
SetUnhandledExceptionFilter
HeapSize
GetACP
GetOEMCP
GetCPInfo
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
InterlockedExchange
IsBadReadPtr
IsBadCodePtr
UnhandledExceptionFilter
SetStdHandle
TerminateProcess
GetCurrentProcess
DeleteCriticalSection
GetCurrentThreadId
GetTickCount
_lclose
DeleteFileA
FlushFileBuffers

Exports

Exports

D3D8GetSWInfo
DebugSetMute
Direct3DCreate8
ValidatePixelShader
ValidateVertexShader

Sections

.text
Size: 1.1MB - Virtual size: 1.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 14KB - Virtual size: 37KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data1
Size: 21KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 21KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 31KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
d3d9.dll
.dll windows:5 windows x86 arch:x86

8325c2626ec073a9be32cbd71afd0348

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

d3d9.pdb

Imports

user32

IsWindow
GetCursorPos
SetCursorPos
GetCursor
SetCursor
DestroyIcon
SystemParametersInfoA
GetSystemMetrics
GetDesktopWindow
GetWindowDC
CreateIconIndirect
GetClientRect
SetForegroundWindow
IntersectRect
wsprintfA
ReleaseDC
LoadStringA
GetDC

advapi32

RegSetValueExA
RegOpenKeyA
RegEnumKeyExA
RegOpenKeyExA
RegQueryValueExA
RegCloseKey
RegCreateKeyExA

version

GetFileVersionInfoA
GetFileVersionInfoSizeA
VerQueryValueA

gdi32

GetNearestColor
GetSystemPaletteEntries
CreateCompatibleDC
CreateDIBSection
DeleteObject
SelectObject
DeleteDC
CreateDCA
CreateDIBitmap
GetDeviceCaps

ddraw

DdEntry18
DdEntry9
DdEntry21
UnlockCB
LockCB
DdEntry17
DdEntry12
DdEntry10
DdEntry5
DdEntry4
DdEntry7
DdEntry11
DdEntry19
DdEntry20
DdEntry13
DdEntry16
DdEntry24
DdEntry8
DdEntry3
DdEntry22
DdEntry6
DdEntry23

kernel32

GetProcAddress
LoadLibraryA
InterlockedDecrement
GetSystemDirectoryA
GetModuleHandleA
lstrcpynA
OutputDebugStringA
CloseHandle
CreateMutexA
DisableThreadLibraryCalls
GetCurrentProcessId
LocalAlloc
LocalFree
SetErrorMode
_lclose
ReadFile
OpenFile
WideCharToMultiByte
GetVersionExA
CreateFileA
MultiByteToWideChar
SetFilePointer
MoveFileA
DeleteFileA
WriteFile
GetFileSize
lstrcmpiA
GetCommandLineA
FreeLibrary
RtlUnwind
ExitProcess
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
GetModuleFileNameA
HeapDestroy
HeapCreate
VirtualFree
HeapFree
FreeEnvironmentStringsA
LeaveCriticalSection
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetProcessHeap
HeapAlloc
VirtualProtect
GetSystemInfo
VirtualQuery
LCMapStringA
LCMapStringW
GetACP
GetOEMCP
GetCPInfo
VirtualAlloc
HeapReAlloc
IsBadWritePtr
IsBadReadPtr
IsBadCodePtr
InterlockedExchange
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
UnhandledExceptionFilter
SetStdHandle
FlushFileBuffers
TerminateProcess
GetCurrentProcess
TlsAlloc
CreateEventA
CreateThread
Sleep
WaitForSingleObject
ExitThread
SetEvent
WaitForMultipleObjects
GetTickCount
DebugBreak
EnterCriticalSection
InitializeCriticalSection
GetEnvironmentVariableA
TlsSetValue
TlsGetValue
GetTempPathA
GetProcessAffinityMask
SetThreadAffinityMask
DeleteCriticalSection
GetCurrentThreadId
InterlockedIncrement
GetLastError
GetEnvironmentStrings
ResumeThread
SetThreadPriority
GetCurrentThread
SetEndOfFile
RaiseException
SetUnhandledExceptionFilter

winmm

timeBeginPeriod
timeEndPeriod

Exports

Exports

D3DPERF_BeginEvent
D3DPERF_EndEvent
D3DPERF_GetStatus
D3DPERF_QueryRepeatFrame
D3DPERF_SetMarker
D3DPERF_SetOptions
D3DPERF_SetRegion
DebugSetLevel
DebugSetMute
Direct3DCreate9
Direct3DShaderValidatorCreate9
PSGPError
PSGPSampleTexture

Sections

.text
Size: 1.5MB - Virtual size: 1.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 20KB - Virtual size: 39KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 21KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 50KB - Virtual size: 49KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
d3dim.dll
.dll windows:5 windows x86 arch:x86

a8d3a8f00f292ed95b4bdd305d1511e7

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

ntdll

RtlUnwind

user32

SetRect
IntersectRect

advapi32

RegOpenKeyA
RegQueryValueExA
RegOpenKeyExA
RegCloseKey
RegCreateKeyA
RegQueryInfoKeyA
RegEnumKeyExA
RegSetValueExA

ddraw

DDInternalUnlock
D3DParseUnknownCommand
DDInternalLock
GetAliasedVidMem

kernel32

GetCurrentProcess
VirtualFree
GetCPInfo
HeapCreate
OutputDebugStringA
FreeLibrary
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
InitializeCriticalSection
IsBadCodePtr
IsBadReadPtr
ord98
ord97
GetCurrentProcessId
GetVersionExA
GetSystemInfo
ord93
DisableThreadLibraryCalls
GetModuleFileNameA
GetModuleHandleA
GetProcAddress
LoadLibraryA
GetCommandLineA
GetVersion
RaiseException
ExitProcess
TerminateProcess
DebugBreak
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
HeapDestroy
HeapSize
HeapReAlloc
FlushFileBuffers
GetACP
GetOEMCP
FreeEnvironmentStringsA
MultiByteToWideChar
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
WideCharToMultiByte
WriteFile
HeapFree
HeapAlloc
SetUnhandledExceptionFilter
GetLastError
SetFilePointer
CloseHandle
VirtualAlloc
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
SetStdHandle
CreateFileA
ReadFile
SetEndOfFile

Exports

Exports

D3DFree
D3DMalloc
D3DRealloc
Direct3DCreate
Direct3DCreateDevice
Direct3DCreateTexture
Direct3DGetSWRastZPixFmts
Direct3D_HALCleanUp
FlushD3DDevices
FlushD3DDevices2
PaletteAssociateNotify
PaletteUpdateNotify
SurfaceFlipNotify

Sections

.text
Size: 533KB - Virtual size: 532KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 51KB - Virtual size: 72KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data1
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 944B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 19KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
d3dim700.dll
.dll windows:5 windows x86 arch:x86

e3f2a1829330babefd2af5f7f12637dd

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

user32

IntersectRect
IsRectEmpty

advapi32

RegSetValueExA
RegCreateKeyA
RegOpenKeyExA
RegCloseKey
RegQueryValueExA
RegOpenKeyA

ddraw

DDInternalLock
DDInternalUnlock
GetAliasedVidMem
D3DParseUnknownCommand

kernel32

LocalReAlloc
GetEnvironmentStrings
LocalFree
EnterCriticalSection
LeaveCriticalSection
IsBadCodePtr
FreeLibrary
IsBadReadPtr
ord98
ord97
GetCurrentProcessId
GetVersionExA
GetSystemInfo
GetModuleFileNameA
GetModuleHandleA
ord93
DisableThreadLibraryCalls
GetProcAddress
LoadLibraryA
GetCommandLineA
RtlUnwind
RaiseException
ExitProcess
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
HeapDestroy
HeapCreate
VirtualFree
HeapFree
FreeEnvironmentStringsA
HeapSize
FreeEnvironmentStringsW
WideCharToMultiByte
GetLastError
GetEnvironmentStringsW
WriteFile
SetUnhandledExceptionFilter
HeapAlloc
SetFilePointer
FlushFileBuffers
CloseHandle
Sleep
GetACP
GetOEMCP
GetCPInfo
VirtualAlloc
HeapReAlloc
IsBadWritePtr
SetStdHandle
CreateFileA
LCMapStringA
MultiByteToWideChar
LCMapStringW
GetStringTypeA
GetStringTypeW
SetEndOfFile
GetProcessHeap
ReadFile
GetLocaleInfoA
VirtualProtect
VirtualQuery
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetSystemTimeAsFileTime
TerminateProcess
GetCurrentProcess
LocalAlloc

Exports

Exports

CreateTexture
D3DBreakVBLock
D3DFree
D3DMalloc
D3DRealloc
D3DTextureUpdate
DestroyTexture
Direct3DCreate
Direct3DCreateDevice
Direct3D_HALCleanUp
FlushD3DDevices
GetLOD
GetPriority
PaletteAssociateNotify
PaletteUpdateNotify
SetLOD
SetPriority
SurfaceFlipNotify

Sections

.text
Size: 768KB - Virtual size: 767KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 41KB - Virtual size: 55KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data1
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 936B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
d3dpmesh.dll
.dll windows:5 windows x86 arch:x86

b3086d42fa0bf235e36f93dd418c52d2

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

FreeEnvironmentStringsW
SetEvent
EnterCriticalSection
lstrlenA
lstrcmpA
lstrcpyA
HeapAlloc
HeapFree
HeapCreate
HeapDestroy
GetCommandLineA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
GetLastError
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
DeleteCriticalSection
GetModuleFileNameA
GetCPInfo
GetACP
GetOEMCP
FreeEnvironmentStringsA
MultiByteToWideChar
LeaveCriticalSection
GetEnvironmentStrings
GetEnvironmentStringsW
WideCharToMultiByte
VirtualFree
WriteFile
GetProcAddress
GetModuleHandleA
InitializeCriticalSection
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
VirtualAlloc
LoadLibraryA
InterlockedDecrement
InterlockedIncrement
GetLocaleInfoA
FlushFileBuffers
CloseHandle
SetStdHandle
SetFilePointer
GetLocaleInfoW

Exports

Exports

CreateD3DRMPMeshVisual

Sections

.text
Size: 64KB - Virtual size: 64KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 14KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 992B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
d3dramp.dll
.dll windows:5 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Exports

Exports

RampOldTri
g_RampOld_BeadTbl

Sections

CSEG
Size: 419KB - Virtual size: 419KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.text
Size: 512B - Virtual size: 453B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

DSEG
Size: 50KB - Virtual size: 49KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 952B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 94KB - Virtual size: 94KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
d3drm.dll
.dll windows:5 windows x86 arch:x86

7d187e631558c60627782494fbf69e5c

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

ntdll

RtlUnwind

kernel32

DeleteCriticalSection
GetSystemInfo
IsBadReadPtr
IsBadWritePtr
CloseHandle
GetProcAddress
LoadLibraryA
LocalFree
lstrcpyA
lstrlenA
lstrcpynA
lstrcatA
CreateFileA
UnmapViewOfFile
GetFileSize
MapViewOfFile
CreateFileMappingA
FreeLibrary
GetLastError
GlobalFree
GlobalLock
SetFilePointer
ReadFile
GetCurrentProcessId
DeleteFileA
SizeofResource
FreeResource
LockResource
LoadResource
GetTempFileNameA
GetTempPathA
FindResourceA
lstrcmpA
Sleep
GetProfileIntA
GlobalReAlloc
GlobalUnlock
GlobalAlloc
InterlockedIncrement
InterlockedDecrement
MultiByteToWideChar
HeapAlloc
HeapFree
HeapReAlloc
HeapCreate
HeapDestroy
GetCommandLineA
GetVersion
GetLocalTime
InterlockedExchange
CreateEventA
ResumeThread
CreateThread
TlsSetValue
ExitThread
ExitProcess
TerminateProcess
GetCurrentProcess
InitializeCriticalSection
TlsAlloc
TlsFree
SetLastError
TlsGetValue
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
GetModuleFileNameA
GetCPInfo
GetACP
GetOEMCP
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
WideCharToMultiByte
VirtualFree
WriteFile
GetModuleHandleA
VirtualAlloc
GetStringTypeA
GetStringTypeW
RaiseException
UnhandledExceptionFilter
LCMapStringA
LCMapStringW
CompareStringA
CompareStringW
SetEnvironmentVariableA
SetStdHandle
FlushFileBuffers
GetLocaleInfoA
GetLocaleInfoW
EnterCriticalSection
SetEvent
WaitForSingleObject
LeaveCriticalSection
GetTimeZoneInformation
GetSystemTime
GetCurrentThreadId

user32

GetDC
SetRect
ClientToScreen
ReleaseDC
wsprintfA
GetSystemMetrics

advapi32

RegQueryValueExA
RegOpenKeyExA
RegCloseKey

gdi32

GetSystemPaletteEntries
GetDeviceCaps

ddraw

DirectDrawCreate

msvfw32

ICImageDecompress

ole32

CoUninitialize
CoInitialize
CoCreateInstance

oleaut32

SysFreeString
SysAllocString

Exports

Exports

D3DRMColorGetAlpha
D3DRMColorGetBlue
D3DRMColorGetGreen
D3DRMColorGetRed
D3DRMCreateColorRGB
D3DRMCreateColorRGBA
D3DRMMatrixFromQuaternion
D3DRMQuaternionFromRotation
D3DRMQuaternionMultiply
D3DRMQuaternionSlerp
D3DRMVectorAdd
D3DRMVectorCrossProduct
D3DRMVectorDotProduct
D3DRMVectorModulus
D3DRMVectorNormalize
D3DRMVectorRandom
D3DRMVectorReflect
D3DRMVectorRotate
D3DRMVectorScale
D3DRMVectorSubtract
Direct3DRMCreate
DllCanUnloadNow
DllGetClassObject

Sections

.text
Size: 375KB - Virtual size: 375KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 27KB - Virtual size: 39KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 976B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 21KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
d3drm.inf
d3dxof.dll
.dll windows:5 windows x86 arch:x86

16b7e072dd7adabb232ed23a07e8cada

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetCurrentThreadId
WaitForSingleObject
SetEvent
EnterCriticalSection
InitializeCriticalSection
InterlockedExchange
CreateEventA
CloseHandle
DeleteCriticalSection
InterlockedIncrement
InterlockedDecrement
lstrcmpiA
lstrcmpA
IsBadReadPtr
lstrlenA
IsBadWritePtr
FreeResource
SizeofResource
LockResource
LoadResource
FindResourceA
UnmapViewOfFile
MapViewOfFile
CreateFileMappingA
GetFileSize
CreateFileA
WaitForMultipleObjects
CreateThread
GetProcAddress
LoadLibraryA
DeleteFileA
WriteFile
GetTempFileNameA
ReadFile
SetFilePointer
MoveFileA
HeapAlloc
HeapFree
HeapReAlloc
HeapCreate
HeapDestroy
GetCommandLineA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
LeaveCriticalSection
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
GetLastError
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
GetModuleFileNameA
GetCPInfo
GetACP
GetOEMCP
FreeEnvironmentStringsA
MultiByteToWideChar
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
WideCharToMultiByte
VirtualFree
GetModuleHandleA
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
VirtualAlloc
SetStdHandle
GetLocaleInfoA
FlushFileBuffers
GetLocaleInfoW

Exports

Exports

DirectXFileCreate
DllCanUnloadNow
DllGetClassObject

Sections

.text
Size: 78KB - Virtual size: 78KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 17KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 960B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
ddhelp.exe
.exe windows:5 windows x86 arch:x86

b1c26122ccb7b48ddd747c1bca82f205

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LeaveCriticalSection
EnterCriticalSection
CloseHandle
WaitForSingleObject
OpenProcess
SetThreadPriority
GetCurrentThread
ResetEvent
SetEvent
CreateThread
GetPriorityClass
UnmapViewOfFile
GetCurrentProcessId
MapViewOfFile
InitializeCriticalSection
CreateMutexA
ExitThread
CreateEventA
SetPriorityClass
SetCurrentDirectoryA
GetSystemDirectoryA
HeapAlloc
HeapFree
HeapReAlloc
HeapCreate
HeapDestroy
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetSystemTimeAsFileTime
GetModuleHandleA
GetCurrentProcess
TerminateProcess
FreeLibrary
CreateFileA
LoadLibraryA
GetProcAddress
lstrcmpiA
SetErrorMode
lstrlenA
CreateFileMappingA
lstrcpyA
GetSystemInfo
VirtualProtect
GetLocaleInfoA
VirtualQuery
GetStringTypeW
GetStringTypeA
RtlUnwind
LCMapStringW
MultiByteToWideChar
LCMapStringA
VirtualAlloc
Sleep
GetCPInfo
GetOEMCP
GetACP
VirtualFree
GetFileType
SetHandleCount
GetEnvironmentStringsW
GetLastError
WideCharToMultiByte
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
UnhandledExceptionFilter
GetModuleFileNameA
GetStdHandle
WriteFile
RegisterServiceProcess
GetCommandLineA
GetVersionExA
GetStartupInfoA
ExitProcess

gdi32

CreateFontA
SetTextColor
SetBkColor
ExtTextOutA
SelectObject
GetTextExtentPoint32A
GetStockObject
CreateDCA
DeleteDC
DeleteObject

user32

ReleaseDC
DefWindowProcA
DispatchMessageA
TranslateMessage
CreateWindowExA
RegisterClassA
RegisterWindowMessageA
GetSystemMetrics
ShowWindow
UpdateWindow
GetDC
GetClientRect
ScrollWindowEx
GetMessageA
BeginPaint
EndPaint
FillRect
KillTimer
PostQuitMessage
SetTimer
wsprintfA

winmm

timeSetEvent
waveOutClose
waveOutSetVolume
waveOutGetVolume
waveOutOpen
timeKillEvent

Sections

.text
Size: 29KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 936B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
ddraw.dll
.dll windows:5 windows x86 arch:x86

c197a263f5c835c2c59c904c934a2004

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

ddraw.pdb

Imports

ntdll

RtlUnwind

user32

GetForegroundWindow
GetDC
EqualRect
IntersectRect
ChangeDisplaySettingsA
RedrawWindow
UnionRect
GetClassInfoA
wsprintfA
GetDCEx
ClientToScreen
GetClientRect
GetWindowThreadProcessId
SetCursor
KillTimer
SetWindowLongA
SendMessageA
IsIconic
PostMessageA
CallWindowProcA
GetKeyState
SetFocus
OpenClipboard
EmptyClipboard
SetClipboardData
CloseClipboard
GetLastActivePopup
GetAsyncKeyState
keybd_event
SystemParametersInfoA
SetForegroundWindow
SetWindowPos
OffsetRect
ShowWindow
IsZoomed
SetTimer
ClipCursor
GetDesktopWindow
GetWindow
GetWindowLongA
IsWindowVisible
IsWindowEnabled
GetParent
DefWindowProcA
RegisterClassA
CreateWindowExA
DestroyWindow
UnregisterClassA
GetKeyboardType
MessageBoxIndirectA
LoadStringA
GetSystemMetrics
EnumDisplaySettingsA
IsRectEmpty
CopyRect
SetRect
mouse_event
IsWindow
ReleaseDC

advapi32

RegCreateKeyA
RegQueryValueExA
RegOpenKeyA
RegEnumKeyA
RegOpenKeyExA
RegSetValueExA
RegCreateKeyExA
RegCloseKey

version

GetFileVersionInfoA
GetFileVersionInfoSizeA
VerQueryValueA

kernel32

GetStdHandle
WriteFile
UnhandledExceptionFilter
GetCPInfo
GetLocaleInfoA
GetStringTypeW
GetStringTypeA
RaiseException
ExitProcess
LCMapStringW
LCMapStringA
VirtualProtect
VirtualQuery
VirtualFree
VirtualAlloc
GetACP
GetOEMCP
TerminateProcess
GetCurrentThreadId
GetModuleFileNameA
SetFilePointer
lstrcmpiA
GetPriorityClass
LocalAlloc
LocalFree
GetCurrentProcessId
GetLastError
GetSystemInfo
FreeLibrary
GetProcAddress
LoadLibraryA
LeaveCriticalSection
EnterCriticalSection
MakeCriticalSectionGlobal
ReinitializeCriticalSection
InterlockedExchange
ord93
DisableThreadLibraryCalls
ord98
ord97
GetModuleHandleA
lstrcpyA
IsBadCodePtr
GlobalMemoryStatus
SetErrorMode
lstrcpynA
CloseHandle
GetExitCodeThread
WaitForSingleObject
CreateThread
IsBadWritePtr
GetSystemDefaultLCID
MapSLFix
OpenVxDHandle
UnMapLS
MapLS
IsBadReadPtr
GetProfileIntA
GetTickCount
GlobalFree
GlobalUnlock
GlobalLock
GlobalAlloc
SetUnhandledExceptionFilter
QueryPerformanceCounter
QueryPerformanceFrequency
Sleep
GetPrivateProfileIntA
DeviceIoControl
OutputDebugStringA
ThunkConnect32
FT_Thunk
FT_Exit4
FT_Exit20
SMapLS
SUnMapLS
SMapLS_IP_EBP_8
SUnMapLS_IP_EBP_8
SMapLS_IP_EBP_12
SUnMapLS_IP_EBP_12
SMapLS_IP_EBP_16
SUnMapLS_IP_EBP_16
SMapLS_IP_EBP_20
SUnMapLS_IP_EBP_20
MapSL
HeapFree
HeapAlloc
HeapSize
HeapReAlloc
HeapCreate
GetVersionExA
CreateFileA
ReleaseMutex
SetEvent
UnmapViewOfFile
OpenMutexA
MapViewOfFile
CreateFileMappingA
CreateEventA
CreateProcessA
OpenEventA
GetCurrentProcess
lstrcatA
_lclose
ReadFile
OpenFile
WideCharToMultiByte
MultiByteToWideChar
GetSystemDirectoryA
lstrlenA
SetPriorityClass

gdi32

CreateDCA
SetStretchBltMode
StretchBlt
SetBkColor
ExtTextOutA
PatBlt
StretchDIBits
SetObjectOwner
GetObjectType
SaveDC
SetPaletteEntries
SelectPalette
RealizePalette
GetNearestColor
DeleteDC
CreateCompatibleBitmap
GetDIBits
CreateDIBSection
CreateCompatibleDC
SelectObject
GetSystemPaletteEntries
SetDIBColorTable
BitBlt
RestoreDC
GetDeviceCaps
CreatePalette
ResizePalette
DeleteObject
ExtEscape
GetStockObject
GetRegionData
GetDeviceGammaRamp
SetDeviceGammaRamp
SetSystemPaletteUse

Exports

Exports

AcquireDDThreadLock
D3DParseUnknownCommand
DDGetAttachedSurfaceLcl
DDHAL32_VidMemAlloc
DDHAL32_VidMemFree
DDInternalLock
DDInternalUnlock
DSoundHelp
DdEntry1
DdEntry10
DdEntry11
DdEntry12
DdEntry13
DdEntry16
DdEntry17
DdEntry18
DdEntry19
DdEntry2
DdEntry20
DdEntry21
DdEntry22
DdEntry23
DdEntry24
DdEntry3
DdEntry4
DdEntry5
DdEntry6
DdEntry7
DdEntry8
DdEntry9
DirectDrawCreate
DirectDrawCreateClipper
DirectDrawCreateEx
DirectDrawEnumerateA
DirectDrawEnumerateExA
DirectDrawEnumerateExW
DirectDrawEnumerateW
DllCanUnloadNow
DllGetClassObject
GetAliasedVidMem
GetDDSurfaceLocal
GetNextMipMap
GetOLEThunkData
GetSurfaceFromDC
HeapVidMemAllocAligned
InternalLock
InternalUnlock
LateAllocateSurfaceMem
LockCB
RegisterSpecialCase
ReleaseDDThreadLock
UnlockCB
VidMemAlloc
VidMemAmountFree
VidMemFini
VidMemFree
VidMemInit
VidMemLargestFree
thk1632_ThunkData32
thk3216_ThunkData32

Sections

.text
Size: 338KB - Virtual size: 338KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 27KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 15KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
ddraw.inf
ddraw.vxd
ddraw16.dll
ddrawex.dll
.dll regsvr32 windows:5 windows x86 arch:x86

84cac4e75ecba882b130d19c35d1f7bb

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

user32

ReleaseDC
GetDC
MessageBoxA
wsprintfA

kernel32

lstrlenA
LoadLibraryA
GetModuleFileNameA
InterlockedDecrement
InterlockedIncrement
LocalFree
GetProfileStringA
FreeLibrary
GetVersionExA
GetProcAddress
LocalAlloc
SetErrorMode
DisableThreadLibraryCalls

advapi32

RegEnumKeyExA
RegDeleteKeyA
RegQueryValueExA
RegCreateKeyA
RegSetValueExA
RegOpenKeyA
RegOpenKeyExA
RegCloseKey

gdi32

DeleteObject
CreateDIBSection
DeleteDC
CreateCompatibleDC
GetSystemPaletteEntries
SetDIBColorTable
SelectObject

version

GetFileVersionInfoSizeA
GetFileVersionInfoA
VerQueryValueA

ddraw

ReleaseDDThreadLock
AcquireDDThreadLock

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 17KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 960B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
devenum.dll
.dll regsvr32 windows:5 windows x86 arch:x86

6b6b7f1fca7e48432d882e6d001c1d9b

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

lstrcatW
CreateMutexA
lstrcmpA
TerminateProcess
LoadLibraryA
GetProcAddress
DisableThreadLibraryCalls
GetVersionExA
ReleaseMutex
GetModuleHandleA
LoadLibraryExA
FindResourceA
LoadResource
SizeofResource
FreeLibrary
lstrcpynA
GetModuleFileNameA
lstrcatA
lstrcpyA
HeapDestroy
WaitForSingleObject
GetCurrentProcess
CloseHandle
GetLastError
lstrcmpiA
lstrlenA
WideCharToMultiByte
MultiByteToWideChar
InterlockedDecrement
InterlockedIncrement
DeleteCriticalSection
InitializeCriticalSection
LeaveCriticalSection
EnterCriticalSection
lstrlenW

msvcrt

_purecall
free
??2@YAPAXI@Z
realloc
??3@YAXPAX@Z
_except_handler3
malloc

user32

LoadStringA
CharNextA
wsprintfA

advapi32

RegSetValueExA
RegQueryValueExA
RegOpenKeyExA
RegCreateKeyExA
RegCloseKey
RegDeleteKeyA
RegQueryInfoKeyA
RegEnumKeyExA
RegDeleteValueA
RegEnumKeyA

ole32

CoCreateInstance
CreateBindCtx
StringFromGUID2
CLSIDFromString
CreateAntiMoniker
CoTaskMemFree
CoTaskMemAlloc
CoTaskMemRealloc

oleaut32

SafeArrayCreate
SafeArrayAccessData
SafeArrayUnaccessData
VarI4FromStr
LoadTypeLi
RegisterTypeLi
SysAllocString
VariantClear
SysFreeString

winmm

midiOutGetDevCapsA
waveInGetDevCapsA
waveOutGetDevCapsA
waveInMessage
waveOutMessage
waveInGetNumDevs
midiOutGetNumDevs

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 43KB - Virtual size: 43KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 792B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 83KB - Virtual size: 82KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
diactfrm.dll
.dll regsvr32 windows:5 windows x86 arch:x86

4858d3a4a4c5fc3b1e759ad75d7ca259

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

HeapReAlloc
GetACP
GetOEMCP
GetCPInfo
RaiseException
HeapSize
InitializeCriticalSection
LCMapStringA
LCMapStringW
GetLocaleInfoA
GetStringTypeA
GetStringTypeW
SetFilePointer
SetUnhandledExceptionFilter
VirtualProtect
GetSystemInfo
VirtualAlloc
SetStdHandle
IsBadCodePtr
FlushFileBuffers
CloseHandle
EnterCriticalSection
LeaveCriticalSection
WriteFile
VirtualFree
HeapCreate
HeapDestroy
GetEnvironmentStringsW
FreeEnvironmentStringsW
IsProcessorFeaturePresent
UnmapViewOfFile
CreateFileW
CreateFileA
CreateFileMappingA
MapViewOfFile
GetFileSize
GetEnvironmentStrings
lstrlenA
FreeEnvironmentStringsA
DeleteCriticalSection
GetStartupInfoA
GetFileType
GetStdHandle
SetHandleCount
TlsAlloc
TlsGetValue
SetLastError
TlsFree
ExitProcess
MultiByteToWideChar
GetLastError
RtlUnwind
HeapFree
HeapAlloc
GetVersionExA
GetCommandLineA
TlsSetValue
GetCurrentThreadId
GetModuleFileNameA
Sleep
WideCharToMultiByte
IsBadReadPtr
IsBadWritePtr
lstrcmpA
GetTickCount
MulDiv
lstrcpyA
GetModuleHandleA
InterlockedDecrement
InterlockedIncrement
lstrcmpiA
LoadLibraryA
GetProcAddress
FreeLibrary
VirtualQuery

advapi32

RegOpenKeyA
RegCloseKey
RegQueryValueA
RegOpenKeyExA
RegDeleteKeyA
RegEnumKeyExA
RegSetValueExA
RegCreateKeyExA
RegQueryValueExA

ole32

CoTaskMemFree
StringFromCLSID

user32

WindowFromPoint
EndPaint
BeginPaint
IsWindowVisible
SetPropA
GetPropA
RegisterClassExA
EnumChildWindows
DispatchMessageA
TranslateMessage
GetMessageA
DefWindowProcA
ReleaseCapture
SetCapture
GetWindow
UnregisterClassA
GetClientRect
InvalidateRect
CreateWindowExA
DestroyWindow
LoadImageA
GetDesktopWindow
GetWindowDC
SetCursor
ValidateRect
LoadCursorA
GetIconInfo
DrawIcon
PostQuitMessage
ClipCursor
GetSystemMetrics
GetWindowRect
FillRect
GetUpdateRect
GetDoubleClickTime
SetFocus
SetParent
LoadStringA
IsWindow
MoveWindow
OffsetRect
GetDC
ReleaseDC
GetCursorPos
ScreenToClient
ClientToScreen
KillTimer
SetTimer
PtInRect
DrawTextA
InflateRect
ShowWindow
SendMessageA
SetWindowPos
GetParent
wsprintfA
PostMessageA

gdi32

SetBkColor
GetBkMode
GetBkColor
GetTextColor
CreateFontIndirectA
GetDeviceCaps
SetViewportOrgEx
OffsetViewportOrgEx
RestoreDC
SaveDC
CreateDIBSection
Polyline
DPtoLP
GetStockObject
GetObjectA
GetCurrentObject
LPtoDP
CreateCompatibleBitmap
StretchBlt
SetBrushOrgEx
SetStretchBltMode
GetBrushOrgEx
GetStretchBltMode
Polygon
ExcludeClipRect
IntersectClipRect
DeleteDC
CreateCompatibleDC
CreatePen
SelectObject
CreateSolidBrush
Rectangle
MoveToEx
LineTo
SetTextColor
SetBkMode
BitBlt
DeleteObject

dinput8

DirectInput8Create

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 332KB - Virtual size: 331KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 20KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data1
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 80KB - Virtual size: 80KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 16KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
diactfrm.inf
dijoy.hlp
dijoybrz.hlp
dijoychs.hlp
dijoycht.hlp
dijoycze.hlp
dijoydut.hlp
dijoyfrn.hlp
dijoyger.hlp
dijoyitn.hlp
dijoyjpn.hlp
dijoykor.hlp
dijoypol.hlp
dijoyrus.hlp
dijoyspa.hlp
dijoyswe.hlp
dimap.dll
.dll windows:5 windows x86 arch:x86

4e9166a531644c5def658b728c82a383

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

MultiByteToWideChar
WideCharToMultiByte
GetPrivateProfileIntA
CreateDirectoryA
GetPrivateProfileStringA
GetVersion
GetSystemTimeAsFileTime
GetModuleHandleA
GetCurrentThreadId
TlsSetValue
GetCommandLineA
GetVersionExA
RaiseException
RtlUnwind
ExitProcess
GetProcAddress
TlsFree
SetLastError
TlsGetValue
TlsAlloc
HeapFree
HeapAlloc
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
HeapDestroy
HeapCreate
VirtualFree
WriteFile
LeaveCriticalSection
WritePrivateProfileStringA
SetUnhandledExceptionFilter
GetACP
GetOEMCP
GetCPInfo
HeapReAlloc
HeapSize
VirtualAlloc
IsBadWritePtr
LoadLibraryA
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
IsBadReadPtr
IsBadCodePtr
VirtualProtect
GetSystemInfo
VirtualQuery
LCMapStringA
LCMapStringW
SetFilePointer
ReadFile
SetStdHandle
FlushFileBuffers
CloseHandle
GetLastError
DeleteCriticalSection
DisableThreadLibraryCalls
InitializeCriticalSection
InterlockedDecrement
EnterCriticalSection
InterlockedIncrement

shell32

SHGetSpecialFolderLocation
SHGetPathFromIDListA
SHGetMalloc

advapi32

GetUserNameA
RegQueryValueExA
RegOpenKeyExA
RegCloseKey

user32

wsprintfA
CharUpperBuffA

ole32

StringFromGUID2

dinput8

DirectInput8Create

Exports

Exports

DllCanUnloadNow
DllGetClassObject

Sections

.text
Size: 72KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 944B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dimaps.inf
dinput.dll
.dll regsvr32 windows:5 windows x86 arch:x86

046ef65faa60d37c1d924c46c847304f

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetCurrentThreadId
EnterCriticalSection
LeaveCriticalSection
SetEvent
DeleteCriticalSection
ResetEvent
GetCurrentProcessId
IsBadReadPtr
IsBadWritePtr
WideCharToMultiByte
FreeLibraryAndExitThread
FreeLibrary
GetLastError
WaitForMultipleObjects
SetThreadPriority
CreateThread
CreateEventA
LoadLibraryA
GetTickCount
lstrcmpiA
ReadFileEx
DuplicateHandle
GetCurrentProcess
MultiByteToWideChar
lstrlenW
GetVersion
Sleep
ReleaseMutex
WaitForSingleObject
MulDiv
DeviceIoControl
LocalAlloc
LocalReAlloc
SleepEx
ResumeThread
GetProcAddress
DisableThreadLibraryCalls
UnmapViewOfFile
lstrcmpA
lstrcpyW
GetSystemTimeAsFileTime
SystemTimeToFileTime
GetLocalTime
MapViewOfFile
CreateFileMappingA
CreateMutexA
LoadResource
FindResourceA
CreateProcessA
InitializeCriticalSection
GetVersionExA
IsBadCodePtr
GetCommandLineA
ExitProcess
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
HeapDestroy
HeapCreate
VirtualFree
HeapFree
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
HeapAlloc
GetACP
GetOEMCP
GetCPInfo
VirtualAlloc
HeapReAlloc
RtlUnwind
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
VirtualProtect
GetSystemInfo
VirtualQuery
lstrlenA
CreateFileA
ReadFile
SetFilePointer
GetFileSize
lstrcpyA
CloseHandle
GetModuleHandleA
GetModuleFileNameA
GetFullPathNameA
InterlockedExchange
LocalFree
InterlockedDecrement
WriteFileEx
InterlockedIncrement

advapi32

RegCreateKeyExA
RegEnumKeyExA
RegQueryValueA
RegCreateKeyA
RegOpenKeyA
RegDeleteKeyA
RegQueryValueExA
RegDeleteValueA
RegQueryInfoKeyA
RegEnumKeyA
RegOpenKeyExA
RegSetValueExA
RegCloseKey

user32

wsprintfA
CharUpperA
UnhookWindowsHookEx
GetWindowThreadProcessId
IsIconic
GetForegroundWindow
GetWindowLongA
CallNextHookEx
SetWindowsHookExA
PostThreadMessageA
MsgWaitForMultipleObjects
DispatchMessageA
TranslateMessage
PeekMessageA
GetInputState
SystemParametersInfoA
IntersectRect
GetWindowRect
GetDesktopWindow
MapWindowPoints
GetClientRect
ReleaseCapture
SetCursorPos
mouse_event
GetAsyncKeyState
SetCapture
ClipCursor
ShowCursor
GetMessageTime
SendNotifyMessageA
GetCursorPos
GetSystemMetrics
MapVirtualKeyA
LoadStringA
keybd_event
GetKeyboardType
IsRectEmpty
SubtractRect
SendMessageA
RegisterWindowMessageA
FindWindowA
SetWindowLongA
DefWindowProcA
GetPropA
SetPropA
RemovePropA
CallWindowProcA
IsWindow

winmm

mmioDescend
mmioCreateChunk
mmioRead
mmioWrite
mmioClose
mmioOpenA
mmioAscend

Exports

Exports

DirectInputCreateA
DirectInputCreateEx
DirectInputCreateW
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 120KB - Virtual size: 116KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 516KB - Virtual size: 513KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dinput.inf
dinput.vxd
dinput8.dll
.dll regsvr32 windows:5 windows x86 arch:x86

a54f5f32094867d71f38152da5912e90

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

LeaveCriticalSection
SetEvent
DeleteCriticalSection
ResetEvent
WideCharToMultiByte
GetCurrentProcessId
IsBadReadPtr
IsBadWritePtr
lstrlenW
FreeLibraryAndExitThread
FreeLibrary
GetLastError
WaitForMultipleObjects
SetThreadPriority
CreateThread
CreateEventA
LoadLibraryA
GetTickCount
lstrcmpiA
ReadFileEx
DuplicateHandle
GetCurrentProcess
MultiByteToWideChar
GetVersion
Sleep
ReleaseMutex
WaitForSingleObject
MulDiv
DeviceIoControl
LocalAlloc
LocalReAlloc
SleepEx
ResumeThread
GetProcAddress
DisableThreadLibraryCalls
UnmapViewOfFile
IsBadCodePtr
CompareFileTime
lstrcpyA
lstrcmpA
lstrcpyW
EnterCriticalSection
SystemTimeToFileTime
GetLocalTime
lstrcmpW
MapViewOfFile
CreateFileMappingA
CreateMutexA
LoadResource
FindResourceA
CreateProcessA
InitializeCriticalSection
GetVersionExA
GetCommandLineA
ExitProcess
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
HeapDestroy
HeapCreate
VirtualFree
HeapFree
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
HeapAlloc
GetACP
GetOEMCP
GetCPInfo
VirtualAlloc
HeapReAlloc
RtlUnwind
VirtualProtect
GetSystemInfo
VirtualQuery
GetLocaleInfoA
GetCurrentThreadId
lstrlenA
GetSystemTimeAsFileTime
CreateFileA
ReadFile
SetFilePointer
GetFileSize
CloseHandle
GetModuleHandleA
GetModuleFileNameA
GetFullPathNameA
InterlockedExchange
LocalFree
InterlockedDecrement
WriteFileEx
InterlockedIncrement

advapi32

RegCreateKeyExA
RegEnumKeyExA
GetUserNameA
RegCreateKeyA
RegOpenKeyA
RegDeleteKeyA
RegQueryValueA
RegDeleteValueA
RegQueryInfoKeyA
RegEnumKeyA
RegQueryValueExA
RegOpenKeyExA
RegSetValueExA
RegCloseKey

user32

PostMessageA
wsprintfA
CharUpperA
UnhookWindowsHookEx
GetWindowThreadProcessId
IsIconic
GetForegroundWindow
GetWindowLongA
CallNextHookEx
SetWindowsHookExA
PostThreadMessageA
MsgWaitForMultipleObjects
DispatchMessageA
TranslateMessage
PeekMessageA
GetInputState
SystemParametersInfoA
IntersectRect
GetWindowRect
GetDesktopWindow
MapWindowPoints
GetClientRect
ReleaseCapture
SetCursorPos
mouse_event
GetAsyncKeyState
SetCapture
ClipCursor
ShowCursor
GetMessageTime
SendNotifyMessageA
GetCursorPos
GetSystemMetrics
MapVirtualKeyA
LoadStringA
keybd_event
GetKeyboardType
IsRectEmpty
SubtractRect
SendMessageA
RegisterWindowMessageA
FindWindowA
SetWindowLongA
DefWindowProcA
GetPropA
SetPropA
RemovePropA
CallWindowProcA
IsWindow
ToAsciiEx
MapVirtualKeyExA
GetKeyboardLayout
GetActiveWindow
GetKeyNameTextA
GetKeyNameTextW

Exports

Exports

DirectInput8Create
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 140KB - Virtual size: 139KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 39KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 520KB - Virtual size: 516KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
directx.inf
dmband.dll
.dll regsvr32 windows:5 windows x86 arch:x86

2dd98eee91901e42aced29ca5eefb08b

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

DeleteCriticalSection
MultiByteToWideChar
lstrcpynA
DisableThreadLibraryCalls
lstrlenA
lstrcatA
lstrcpyA
GetModuleFileNameA
QueryPerformanceCounter
InterlockedDecrement
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
GetProcAddress
GetModuleHandleA
TerminateProcess
GetCurrentProcess
InitializeCriticalSection
Sleep
IsBadCodePtr
EnterCriticalSection
LeaveCriticalSection
InterlockedIncrement
IsBadWritePtr
GetTickCount
IsBadReadPtr

msvcrt

_adjust_fdiv
_initterm
free
malloc
wcstombs
__CxxFrameHandler
wcsncpy
_purecall

advapi32

RegCloseKey
RegCreateKeyExA
RegDeleteKeyA
RegEnumKeyA
RegOpenKeyExA
RegSetValueExA

ole32

StringFromCLSID
CoTaskMemFree
CoCreateInstance

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 22KB - Virtual size: 21KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 288B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 944B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dmcompos.dll
.dll regsvr32 windows:5 windows x86 arch:x86

968421b7ed4e42ca13de160c864b4ae6

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

DeleteCriticalSection
IsBadCodePtr
lstrlenA
lstrcatA
lstrcpyA
GetModuleFileNameA
EnterCriticalSection
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
GetProcAddress
GetModuleHandleA
TerminateProcess
GetCurrentProcess
LeaveCriticalSection
InitializeCriticalSection
Sleep
DisableThreadLibraryCalls
InterlockedDecrement
InterlockedIncrement
IsBadWritePtr
MultiByteToWideChar
IsBadReadPtr

msvcrt

wcslen
malloc
free
_initterm
_adjust_fdiv
wcstombs
wcscpy
time
srand
wcsncpy
_purecall
__CxxFrameHandler
rand

advapi32

RegCloseKey
RegCreateKeyExA
RegDeleteKeyA
RegEnumKeyA
RegOpenKeyExA
RegSetValueExA

ole32

CoTaskMemFree
StringFromCLSID
CoCreateInstance
CreateStreamOnHGlobal

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 51KB - Virtual size: 50KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 736B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 960B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dmime.dll
.dll regsvr32 windows:5 windows x86 arch:x86

78a383d71e6608d446c8c82b2ebbecc0

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

dmime.pdb

Imports

kernel32

WaitForSingleObject
SetEvent
GetCurrentThreadId
Sleep
SetThreadPriority
CreateEventA
CreateThread
DisableThreadLibraryCalls
lstrlenA
lstrcatA
lstrcpyA
CloseHandle
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
DeleteCriticalSection
InterlockedDecrement
InitializeCriticalSection
IsBadCodePtr
EnterCriticalSection
LeaveCriticalSection
InterlockedIncrement
IsBadReadPtr
IsBadWritePtr
GetModuleFileNameA

msvcrt

__dllonexit
_onexit
_adjust_fdiv
_initterm
rand
_CIpow
malloc
wcscpy
__CxxFrameHandler
wcscmp
time
srand
_ftol
_purecall
wcslen
free
wcstombs

winmm

timeBeginPeriod
timeEndPeriod
timeGetTime

advapi32

RegQueryValueExA
RegOpenKeyExA
RegSetValueExA
RegCreateKeyExA
RegDeleteKeyA
RegEnumKeyA
RegCloseKey

ole32

CoTaskMemFree
CreateStreamOnHGlobal
CoInitialize
CoUninitialize
CoCreateInstance
StringFromCLSID

user32

GetForegroundWindow
IsWindow
GetDesktopWindow

dsound

ord11

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 163KB - Virtual size: 163KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dmloader.dll
.dll regsvr32 windows:5 windows x86 arch:x86

8332206d5778356b1110b44f2e3cfdef

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

IsBadCodePtr
GetFileAttributesA
GetFileAttributesW
DeleteCriticalSection
InitializeCriticalSection
FindClose
FindNextFileA
FindNextFileW
FindFirstFileA
FindFirstFileW
lstrlenA
lstrcatA
IsBadWritePtr
GetModuleFileNameA
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
GetProcAddress
GetModuleHandleA
TerminateProcess
GetCurrentProcess
IsBadReadPtr
ExpandEnvironmentStringsA
ExpandEnvironmentStringsW
LeaveCriticalSection
EnterCriticalSection
Sleep
DisableThreadLibraryCalls
GetVersionExA
InterlockedIncrement
lstrcpyA
InterlockedDecrement

msvcrt

fclose
fread
fwrite
ftell
fseek
_strerror
_fsopen
_wfsopen
malloc
free
_initterm
_adjust_fdiv
wcsncat
wcsrchr
_wcsicmp
mbstowcs
wcslen
wcstombs
wcsncpy
_purecall
wcscpy
__CxxFrameHandler
wcscat

advapi32

RegCloseKey
RegOpenKeyExW
RegQueryValueExA
RegOpenKeyExA
RegSetValueExA
RegCreateKeyExA
RegDeleteKeyA
RegEnumKeyA
RegQueryValueExW

ole32

StringFromCLSID
CoTaskMemFree
CoCreateInstance

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 260B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 952B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dmscript.dll
.dll regsvr32 windows:5 windows x86 arch:x86

903e24e172a63cf62c8720d3d4074255

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSection
DeleteCriticalSection
GetProcAddress
LoadLibraryA
GetModuleFileNameA
WideCharToMultiByte
MultiByteToWideChar
DisableThreadLibraryCalls
WaitForSingleObject
SetEvent
CreateEventA
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
GetModuleHandleA
TerminateProcess
GetCurrentProcess
GetTickCount
InterlockedDecrement
GetCurrentThreadId
IsBadCodePtr
InterlockedIncrement
IsBadWritePtr
CloseHandle
IsBadReadPtr
Sleep

msvcrt

_CIpow
_ftol
wcsncpy
tolower
_stricmp
wcstombs
wcsstr
_ultow
wcstoul
_endthreadex
_beginthreadex
free
_initterm
_adjust_fdiv
__dllonexit
_onexit
_except_handler3
malloc
wcslen
wcscpy
wcscat
_wcsicmp
wcscmp
_purecall
??3@YAXPAX@Z
??2@YAPAXI@Z
__CxxFrameHandler

advapi32

RegCloseKey
RegOpenKeyExA
RegSetValueExA
RegDeleteKeyA
RegEnumKeyA
RegCreateKeyExA

ole32

CLSIDFromProgID
CoTaskMemFree
StringFromCLSID
CoUninitialize
CoInitialize
CoCreateInstance

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 67KB - Virtual size: 66KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 960B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dmstyle.dll
.dll regsvr32 windows:5 windows x86 arch:x86

9b9b56669a52debf1b2dccbc03819e5c

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

DeleteCriticalSection
DisableThreadLibraryCalls
lstrlenA
lstrcatA
lstrcpyA
GetModuleFileNameA
InterlockedDecrement
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
GetProcAddress
GetModuleHandleA
TerminateProcess
GetCurrentProcess
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
Sleep
IsBadCodePtr
InterlockedIncrement
IsBadReadPtr
MultiByteToWideChar
IsBadWritePtr

msvcrt

wcstombs
wcscat
malloc
free
_initterm
_adjust_fdiv
time
srand
rand
wcslen
wcsncpy
wcscpy
_purecall
__CxxFrameHandler
_wcsicmp

advapi32

RegCloseKey
RegCreateKeyExA
RegDeleteKeyA
RegEnumKeyA
RegOpenKeyExA
RegSetValueExA

ole32

CoTaskMemFree
StringFromCLSID
CoCreateInstance
CreateStreamOnHGlobal

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 88KB - Virtual size: 88KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 960B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dmsynth.dll
.dll regsvr32 windows:5 windows x86 arch:x86

7bc002e7c5147c1079569ca2d742d33d

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

lstrlenA
lstrcatA
lstrcpyA
DisableThreadLibraryCalls
IsBadCodePtr
SetEvent
WaitForSingleObject
SetThreadPriority
CreateThread
CreateEventA
CloseHandle
InterlockedIncrement
GetModuleFileNameA
QueryPerformanceCounter
QueryPerformanceFrequency
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
GetProcAddress
GetModuleHandleA
TerminateProcess
GetCurrentProcess
InterlockedDecrement
IsBadWritePtr
IsBadReadPtr
MulDiv
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
Sleep
InitializeCriticalSection

msvcrt

_adjust_fdiv
_initterm
wcscpy
wcstombs
free
malloc
__CxxFrameHandler
_CIpow
_ftol

winmm

timeGetTime

advapi32

RegCloseKey
RegCreateKeyA
RegCreateKeyExA
RegDeleteKeyA
RegEnumKeyA
RegOpenKeyExA
RegQueryValueExA
RegSetValueExA

ole32

StringFromCLSID
CoTaskMemFree

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 74KB - Virtual size: 73KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 19KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 976B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dmusic.dll
.dll regsvr32 windows:5 windows x86 arch:x86

cf533db11ac2eb024189fe65469a16dd

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

dmusic.pdb

Imports

kernel32

LeaveCriticalSection
EnterCriticalSection
InitializeCriticalSection
DeleteCriticalSection
LoadLibraryA
GetVersionExA
DisableThreadLibraryCalls
IsBadCodePtr
InterlockedExchange
FreeLibrary
GetProcAddress
lstrlenA
lstrcatA
lstrcpyA
GetModuleFileNameA
ResetEvent
SetEvent
PulseEvent
WaitForMultipleObjects
MultiByteToWideChar
CreateEventA
DeviceIoControl
CreateFileA
LocalFree
LocalAlloc
GetOverlappedResult
SetLastError
GetCurrentProcessId
DuplicateHandle
GetCurrentProcess
OpenProcess
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetSystemTimeAsFileTime
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
CreateFileMappingA
GetLastError
MapViewOfFile
CreateMutexA
IsBadWritePtr
WaitForSingleObject
ReleaseMutex
CloseHandle
UnmapViewOfFile
InterlockedDecrement
InterlockedIncrement
IsBadReadPtr
CreateThread

msvcrt

mbstowcs
_wcsicmp
wcstombs
wcslen
_purecall
__CxxFrameHandler
wcscmp
_stricmp
memmove
free
_strnicmp
_adjust_fdiv
malloc
_initterm
wcscpy

winmm

waveOutMessage
timeGetTime
timeBeginPeriod
timeEndPeriod
waveOutGetNumDevs
waveOutGetDevCapsA

user32

wsprintfA
LoadStringA
IsWindow
GetDesktopWindow
GetForegroundWindow
wsprintfW

advapi32

RegCloseKey
RegQueryValueExA
RegOpenKeyA
RegOpenKeyExA
RegSetValueExA
RegCreateKeyW
RegCreateKeyA
RegEnumKeyA
RegCreateKeyExA
RegDeleteKeyA

rpcrt4

UuidCreate

ole32

StringFromCLSID
CoTaskMemFree
CoCreateInstance
CLSIDFromString

msacm32

acmStreamPrepareHeader
acmStreamUnprepareHeader
acmStreamClose
acmStreamOpen
acmStreamSize
acmFormatSuggest
acmStreamConvert

dsound

ord11

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 88KB - Virtual size: 84KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 732B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 20KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dmusic.inf
dmusic16.dll
dmusic32.dll
.dll windows:5 windows x86 arch:x86

1ccfadb4dbe74682899ff87a8270931e

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetVersionExA
DisableThreadLibraryCalls
InterlockedIncrement
IsBadWritePtr
IsBadReadPtr
IsBadCodePtr
LeaveCriticalSection
EnterCriticalSection
InterlockedExchange
DeleteCriticalSection
WaitForSingleObject
SetEvent
InterlockedDecrement
GetLastError
DeviceIoControl
CreateThread
InitializeCriticalSection
CreateEventA
MultiByteToWideChar
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
GetProcAddress
GetModuleHandleA
TerminateProcess
GetCurrentProcess
CloseHandle
WaitForMultipleObjects
Sleep
OpenVxDHandle
ThunkConnect32
SUnMapLS_IP_EBP_20
SMapLS_IP_EBP_20
SUnMapLS_IP_EBP_16
SMapLS_IP_EBP_16
CreateFileA

msvcrt

_initterm
_adjust_fdiv
malloc
_except_handler3
free
__CxxFrameHandler
_purecall

winmm

midiOutGetNumDevs
midiInGetNumDevs
midiOutGetDevCapsA
midiInGetDevCapsA
timeGetTime

advapi32

RegCreateKeyA
RegCloseKey

Exports

Exports

CreateCDirectMusicEmulatePort
EnumLegacyDevices

Sections

.text
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 216B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 960B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 666B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dplay.inf
dplaysvr.exe
.exe windows:5 windows x86 arch:x86

0e2d56d5ee03e5e670b2f35982dccb42

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

HeapFree
DeleteCriticalSection
UnmapViewOfFile
GetCurrentProcessId
MapViewOfFile
SetEvent
InitializeCriticalSection
CreateMutexA
CreateFileMappingA
CreateEventA
GetLastError
GetCurrentProcess
SetCurrentDirectoryA
GetSystemDirectoryA
HeapReAlloc
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetSystemTimeAsFileTime
GetModuleHandleA
TerminateProcess
GetProcessHeap
HeapAlloc
LoadLibraryA
GetProcAddress
FreeLibrary
CreateThread
OpenProcess
WaitForSingleObject
ExitThread
EnterCriticalSection
LeaveCriticalSection
CloseHandle
GetVersionExA
GetSystemInfo
VirtualProtect
GetLocaleInfoA
RtlUnwind
GetStringTypeW
GetStringTypeA
LCMapStringW
MultiByteToWideChar
LCMapStringA
GetCommandLineA
GetStartupInfoA
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameA
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetFileType
HeapDestroy
HeapCreate
VirtualFree
GetACP
GetOEMCP
GetCPInfo
Sleep
VirtualAlloc
VirtualQuery

advapi32

RegEnumKeyExA
FreeSid
RegOpenKeyExA
RegQueryValueExA
RegCloseKey
InitializeSecurityDescriptor
AllocateAndInitializeSid
GetLengthSid
InitializeAcl
AddAccessAllowedAce
SetSecurityDescriptorDacl

gdi32

GetStockObject

user32

DefWindowProcA
RegisterClassA
CreateWindowExA
GetMessageA
TranslateMessage
DispatchMessageA

winmm

timeGetTime

Sections

.text
Size: 28KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 952B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
dplayx.dll
.dll regsvr32 windows:5 windows x86 arch:x86

14a9f951dfbe7fa48f97ee3b87fbac6c

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

dplayx.pdb

Imports

kernel32

ReleaseMutex
SetEvent
WaitForSingleObject
GetTickCount
CreateThread
ResetEvent
lstrlenA
Sleep
FreeLibrary
GetVersionExA
DuplicateHandle
GetCurrentProcess
LoadLibraryW
LoadLibraryA
GetProcAddress
CreateEventW
CreateMutexW
CreateFileMappingW
OpenFileMappingW
OpenFileMappingA
CreateProcessW
CreateProcessA
GetCurrentDirectoryW
CreateFileMappingA
CompareStringW
CompareStringA
GetProfileIntA
InterlockedIncrement
InterlockedExchange
DisableThreadLibraryCalls
LocalFree
DebugBreak
WaitForMultipleObjects
HeapAlloc
HeapFree
HeapReAlloc
GetProcessHeap
WideCharToMultiByte
MultiByteToWideChar
QueryPerformanceCounter
GetCurrentThreadId
GetSystemTimeAsFileTime
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetStringTypeA
GetSystemInfo
VirtualProtect
GetCPInfo
GetLocaleInfoA
GetLastError
MapViewOfFile
CreateEventA
CreateMutexA
GetCurrentProcessId
UnmapViewOfFile
IsBadCodePtr
IsBadReadPtr
GetModuleHandleA
GetModuleFileNameA
CreateFileA
CloseHandle
SetFilePointer
ReadFile
InterlockedDecrement
IsBadWritePtr
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
GetCurrentDirectoryA
LeaveCriticalSection
LCMapStringW
LCMapStringA
VirtualAlloc
VirtualFree
GetCommandLineW
GetCommandLineA
ExitThread
OpenProcess
ResumeThread
GlobalFree
GlobalAlloc
ReleaseSemaphore
CreateSemaphoreA
RtlUnwind
VirtualQuery
GetStringTypeW

rpcrt4

UuidCreate

user32

wsprintfW
wsprintfA

advapi32

RegDeleteKeyA
RegDeleteKeyW
RegCreateKeyExA
RegCreateKeyExW
RegDeleteValueA
RegDeleteValueW
RegEnumValueA
RegEnumValueW
RegSetValueExA
RegSetValueExW
RegEnumKeyExA
RegEnumKeyExW
RegQueryValueExW
RegOpenKeyExW
RegOpenKeyExA
RegEnumKeyA
RegQueryValueExA
RegOpenKeyA
RegCloseKey
RegQueryInfoKeyW

winmm

timeSetEvent
timeKillEvent
timeGetDevCaps
timeGetTime

Exports

Exports

DirectPlayCreate
DirectPlayEnumerate
DirectPlayEnumerateA
DirectPlayEnumerateW
DirectPlayLobbyCreateA
DirectPlayLobbyCreateW
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
gdwDPlaySPRefCount

Sections

.text
Size: 212KB - Virtual size: 208KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 968B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dpmodemx.dll
.dll windows:5 windows x86 arch:x86

11047f92afa1f1e11ff8e095545a3dd4

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

DisableThreadLibraryCalls
LeaveCriticalSection
EnterCriticalSection
PurgeComm
EscapeCommFunction
WaitForSingleObject
SetCommMask
SetEvent
CloseHandle
GetOverlappedResult
GetLastError
ReadFile
ClearCommError
WriteFile
GetCommState
ExitThread
WaitForMultipleObjects
WaitCommEvent
CreateEventA
ResumeThread
SetThreadPriority
CreateThread
InitializeCriticalSection
SetupComm
SetCommState
CreateFileA
lstrlenA
Sleep
GetTickCount
HeapAlloc
HeapFree
HeapReAlloc
GetProcessHeap
WideCharToMultiByte
MultiByteToWideChar
QueryPerformanceCounter
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
GetProcAddress
GetModuleHandleA
TerminateProcess
GetCurrentProcess
SetCommTimeouts
DeleteCriticalSection

user32

DispatchMessageA
KillTimer
PeekMessageA
SetDlgItemTextA
GetParent
wsprintfA
SetTimer
GetWindowRect
GetDesktopWindow
SetWindowPos
GetDlgItemTextA
EnableWindow
GetForegroundWindow
DialogBoxParamA
GetWindowLongA
EndDialog
SetWindowLongA
GetDlgItem
SetFocus
TranslateMessage
SendDlgItemMessageA
LoadStringA

tapi32

lineInitialize
lineShutdown
lineDeallocateCall
lineOpen
lineNegotiateAPIVersion
lineGetID
lineGetCallInfo
lineGetDevCaps
lineAnswer
lineDrop
lineMakeCall
lineClose
lineConfigDialog

dplayx

gdwDPlaySPRefCount

Exports

Exports

SPInit

Sections

.text
Size: 16KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 60KB - Virtual size: 57KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dpnaddr.dll
.dll windows:5 windows x86 arch:x86

641a2dc94ce0a0b96209bc3eec8d3983

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

dpnet

ord1

Exports

Exports

DirectPlay8AddressCreate

Sections

.text
Size: 4KB - Virtual size: 383B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 952B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dpnet.dll
.dll regsvr32 windows:5 windows x86 arch:x86

e360be635b983f3aa711f451096754da

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

CloseHandle
CreateEventA
DisableThreadLibraryCalls
QueryPerformanceCounter
GetTickCount
IsBadReadPtr
GetSystemTimeAsFileTime
GetProcAddress
GetModuleHandleA
TerminateProcess
GetCurrentProcess
IsBadWritePtr
Sleep
GetCurrentThreadId
ResetEvent
InterlockedDecrement
SetEvent
InterlockedIncrement
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
HeapFree
GetProcessHeap
GetCurrentProcessId
HeapAlloc
CreatePipe
InitializeCriticalSection
IsBadStringPtrA
GetLastError
GetVersionExA
FreeLibrary
LoadLibraryA
lstrlenA
WideCharToMultiByte
MultiByteToWideChar
TlsFree
CreateSemaphoreA
TlsAlloc
TlsSetValue
WaitForSingleObject
TlsGetValue
WaitForMultipleObjects
ReleaseSemaphore
InterlockedExchange
WaitForSingleObjectEx
SetThreadPriority
GetCurrentThread
CreateThread
CancelIo
SetWaitableTimer
CreateWaitableTimerA
InterlockedExchangeAdd
InterlockedCompareExchange
GetModuleFileNameA
SetLastError
OpenEventA
CreateProcessA
GetSystemDirectoryA
ReleaseMutex
UnmapViewOfFile
MapViewOfFile
CreateFileMappingA
CreateMutexA
GetCommandLineA
OpenProcess
GetExitCodeProcess
Process32Next
Process32First
CreateToolhelp32Snapshot
CreateFileA
SleepEx
GetOverlappedResult
WaitForMultipleObjectsEx
SetCommMask
PurgeComm
SetCommTimeouts
SetCommState
ReadFile
FlushFileBuffers
WriteFile
lstrcpynA
FormatMessageA
GetStdHandle
DuplicateHandle

winmm

timeBeginPeriod
timeEndPeriod
timeGetTime

ole32

CoCreateInstance
CoUninitialize
CoInitializeEx
CoCreateGuid
StringFromGUID2
CLSIDFromString

msvcrt

malloc
_adjust_fdiv
_initterm
free
wcscpy
wcslen
_stricmp
wcsncpy
wcsrchr
_wcsnicmp
sprintf
strstr
strncpy
swprintf
srand
_ftol
wcscat
_wcsicmp
wcscmp
wcstoul
wcsncmp
_splitpath
memmove
strtol
_except_handler3

wsock32

WSASetLastError
sendto
setsockopt
shutdown
recvfrom
inet_ntoa
gethostbyaddr
inet_addr
bind
getsockname
select
WSAGetLastError
__WSAFDIsSet
socket
getsockopt
closesocket
ioctlsocket
gethostbyname
htons
ntohs
WSAStartup
WSACleanup
gethostname

user32

CharNextA
wsprintfA
PostMessageA
DialogBoxParamA
GetWindowLongA
EndDialog
SetWindowLongA
GetWindowTextA
GetDlgItem
SendMessageA
SetWindowTextA
LoadStringA

advapi32

CryptReleaseContext
RegCloseKey
RegEnumKeyExA
RegEnumValueA
RegSetValueExA
RegQueryValueExA
RegQueryInfoKeyA
RegDeleteKeyA
RegDeleteValueA
RegOpenKeyExA
RegCreateKeyExA
CryptGenRandom
CryptAcquireContextA

Exports

Exports

DirectPlay8Create
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 312KB - Virtual size: 308KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 360KB - Virtual size: 358KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 16KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dpnhpast.dll
.dll regsvr32 windows:5 windows x86 arch:x86

e688c48d8f962e056917b777bb5f3f5c

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

DuplicateHandle
GetCurrentProcess
CreateIoCompletionPort
InterlockedDecrement
PostQueuedCompletionStatus
SetEvent
FreeLibrary
Sleep
CloseHandle
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
GetModuleHandleA
TerminateProcess
IsBadWritePtr
GetCurrentThreadId
IsBadReadPtr
InterlockedIncrement
HeapAlloc
DisableThreadLibraryCalls
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
LoadLibraryA
GetProcAddress
HeapFree
GetProcessHeap
GetVersionExA
MultiByteToWideChar
lstrlenA
InitializeCriticalSection
GetLastError
WideCharToMultiByte

winmm

timeGetTime

advapi32

CryptAcquireContextA
RegSetValueExA
RegQueryValueExA
RegDeleteKeyA
RegDeleteValueA
CryptGenRandom
CryptReleaseContext
RegOpenKeyExA
RegCreateKeyExA
RegCloseKey

msvcrt

malloc
_adjust_fdiv
_initterm
free
wcslen
srand
swprintf
_except_handler3

ole32

StringFromGUID2

Exports

Exports

DirectPlayNATHelpCreate
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 332B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 968B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dpnhupnp.dll
.dll regsvr32 windows:5 windows x86 arch:x86

60ed152f260b1eac811f86cb69dc678d

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetCurrentThreadId
ReleaseSemaphore
OpenEventA
IsBadWritePtr
DuplicateHandle
GetCurrentProcess
CreateIoCompletionPort
GetModuleFileNameA
Sleep
InterlockedDecrement
PostQueuedCompletionStatus
SetEvent
CreateEventA
FreeLibrary
GetVersionExA
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
GetModuleHandleA
TerminateProcess
GetProcessHeap
HeapFree
GetProcAddress
LoadLibraryA
WaitForSingleObject
CloseHandle
CreateSemaphoreA
IsBadReadPtr
LeaveCriticalSection
EnterCriticalSection
MultiByteToWideChar
InterlockedIncrement
DisableThreadLibraryCalls
DeleteCriticalSection
WideCharToMultiByte
GetLastError
InitializeCriticalSection
lstrlenA
HeapAlloc

user32

wsprintfA

winmm

timeGetTime

advapi32

CryptReleaseContext
RegQueryValueExA
RegSetValueExA
RegEnumValueA
RegCloseKey
RegDeleteValueA
RegOpenKeyExA
RegCreateKeyExA
CryptAcquireContextA
CryptGenRandom
RegDeleteKeyA

ole32

CoInitializeEx
CoUninitialize
StringFromGUID2
CoTaskMemFree
CoCreateInstance
CoSetProxyBlanket

msvcrt

_initterm
_adjust_fdiv
malloc
free
wcslen
_stricmp
_strnicmp
atoi
strncpy
swprintf
srand
_except_handler3
strstr
strtok
strchr
_splitpath

Exports

Exports

DirectPlayNATHelpCreate
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 56KB - Virtual size: 55KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 604B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 968B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dpnlobby.dll
.dll windows:5 windows x86 arch:x86

641a2dc94ce0a0b96209bc3eec8d3983

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

dpnet

ord1

Exports

Exports

DirectPlay8LobbyCreate

Sections

.text
Size: 4KB - Virtual size: 382B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 952B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dpnsvr.exe
.exe windows:5 windows x86 arch:x86

baae137c778bcc5dcc0dd2e891a5e245

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

DeleteCriticalSection
CreateMutexA
CreateEventA
ReleaseMutex
WaitForSingleObject
UnmapViewOfFile
MapViewOfFile
CreateFileMappingA
InterlockedDecrement
QueryPerformanceCounter
GetCurrentThreadId
SetEvent
GetSystemTimeAsFileTime
GetProcAddress
GetModuleHandleA
TerminateProcess
GetCurrentProcess
GetTickCount
LeaveCriticalSection
EnterCriticalSection
OpenProcess
GetLastError
CloseHandle
InterlockedIncrement
OpenEventA
lstrlenA
CompareStringA
HeapFree
GetProcessHeap
GetCurrentProcessId
HeapAlloc
CreateSemaphoreA
ReleaseSemaphore
GetStartupInfoA
InitializeCriticalSection
GetVersionExA
FreeLibrary
LoadLibraryA
WideCharToMultiByte
MultiByteToWideChar

ole32

CoCreateInstance
StringFromGUID2
CoCreateGuid
CoUninitialize
CoInitializeEx

msvcrt

_except_handler3
_controlfp
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
_initterm
__getmainargs
_acmdln
exit
_cexit
_XcptFilter
_exit
_c_exit
srand
__setusermatherr
wcslen

advapi32

CryptReleaseContext
RegCloseKey
RegQueryValueExA
RegOpenKeyExA
RegCreateKeyExA
CryptAcquireContextA

user32

wsprintfA

winmm

timeGetTime

Sections

.text
Size: 16KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 420B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 944B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
dpvacm.dll
.dll regsvr32 windows:5 windows x86 arch:x86

f981406e3d1ad54dccf4fecf9e46a444

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
GetProcAddress
GetModuleHandleA
TerminateProcess
GetCurrentProcess
QueryPerformanceCounter
lstrlenA
GetVersionExA
InitializeCriticalSection
MultiByteToWideChar
WideCharToMultiByte
LoadLibraryA
FreeLibrary
DeleteCriticalSection
GetLastError
IsBadWritePtr
EnterCriticalSection
LeaveCriticalSection
InterlockedDecrement
InterlockedIncrement
HeapFree
GetProcessHeap
HeapAlloc
Sleep

user32

LoadStringA

winmm

timeGetTime

msacm32

acmStreamPrepareHeader
acmStreamConvert
acmStreamUnprepareHeader
acmDriverDetailsA
acmStreamClose
acmDriverID
acmStreamOpen

advapi32

RegQueryValueExA
RegSetValueExA
RegCloseKey
RegOpenKeyExA
RegCreateKeyExA
RegDeleteKeyA

ole32

CoCreateInstance
StringFromGUID2

msvcrt

srand
_purecall
free
swprintf
__dllonexit
_onexit
_except_handler3
malloc
wcslen
_adjust_fdiv
_initterm

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 932B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dpvoice.dll
.dll regsvr32 windows:5 windows x86 arch:x86

5aee207477294953954c51dc722e6c2a

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
GetProcAddress
GetModuleHandleA
TerminateProcess
GetCurrentProcess
QueryPerformanceCounter
InterlockedCompareExchange
InterlockedExchange
SetThreadPriority
ResetEvent
IsBadReadPtr
Sleep
IsBadWritePtr
GetSystemInfo
CreateSemaphoreA
CreateEventA
GetProfileIntA
SetLastError
GetSystemDirectoryA
ReleaseMutex
CreateFileMappingA
MapViewOfFile
UnmapViewOfFile
lstrcpyA
DeleteCriticalSection
GetTickCount
WaitForMultipleObjects
LeaveCriticalSection
EnterCriticalSection
InterlockedDecrement
InterlockedIncrement
ReleaseSemaphore
CloseHandle
SetEvent
WaitForSingleObject
CreateMutexA
TerminateThread
GetExitCodeThread
GetWindowsDirectoryA
GetExitCodeProcess
CreateProcessA
HeapFree
GetProcessHeap
CreateThread
InitializeCriticalSection
GetLastError
GetVersionExA
lstrlenA
FreeLibrary
LoadLibraryA
WideCharToMultiByte
MultiByteToWideChar
HeapAlloc

msvcrt

swprintf
__dllonexit
_onexit
malloc
wcslen
_strnicmp
strncat
strncpy
_ftol
wcscat
_CIpow
_except_handler3
?terminate@@YAXXZ
_adjust_fdiv
_initterm
free
_beginthreadex
_endthreadex
sprintf
_purecall
wcscpy
__CxxFrameHandler
fclose
fflush
_vsnprintf
fputs
vfprintf
fopen
srand

user32

LoadStringA
MessageBoxA
LoadCursorA
GetSysColorBrush
RegisterClassA
InvalidateRgn
DefWindowProcA
IsWindow
GetClientRect
BeginPaint
EndPaint
UnregisterClassA
GetWindowLongA
EnableWindow
DialogBoxParamA
GetParent
GetDlgItem
EndDialog
LoadIconA
SendDlgItemMessageA
PostMessageA
SetWindowLongA
SystemParametersInfoA
GetDC
ReleaseDC
SendMessageA
EnumWindows
GetWindowRect
GetSystemMetrics
SetForegroundWindow
SetWindowPos
GetClassNameA
GetWindowThreadProcessId

winmm

mixerSetControlDetails
waveInGetDevCapsA
PlaySoundA
waveOutGetDevCapsA
waveOutSetVolume
waveOutGetVolume
mixerGetID
waveInGetDevCapsW
mixerGetControlDetailsA
mixerGetLineControlsA
mixerGetLineInfoA
timeGetTime
waveOutGetDevCapsW

advapi32

RegFlushKey
RegEnumKeyExA
RegCreateKeyExA
RegOpenKeyExA
RegDeleteKeyA
RegQueryValueExA
RegSetValueExA
RegCloseKey

ole32

CoUninitialize
CLSIDFromString
StringFromGUID2
CoInitializeEx
CoCreateInstance

comctl32

CreatePropertySheetPageA
PropertySheetA

gdi32

DeleteObject
LineTo
CreateFontIndirectA
GetDeviceCaps
CreatePen
CreateSolidBrush
GetStockObject
Rectangle
MoveToEx
SelectObject

Exports

Exports

DirectPlayVoiceCreate
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 124KB - Virtual size: 123KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 232KB - Virtual size: 231KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dpvoice.inf
dpvsetup.exe
.exe windows:5 windows x86 arch:x86

10089713ee9a30e6ce6391ce7f2f267f

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
GetModuleHandleA
TerminateProcess
GetCurrentProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
GetCommandLineA
FreeLibrary
LoadLibraryA
HeapFree
GetProcessHeap
HeapAlloc
SetLastError
GetStartupInfoA
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
InitializeCriticalSection
GetLastError
GetVersionExA
WideCharToMultiByte
MultiByteToWideChar
Sleep
CreateProcessA
CloseHandle
GetExitCodeProcess
GetWindowsDirectoryA
GetExitCodeThread
TerminateThread
WaitForSingleObject
SetEvent
CreateMutexA
lstrcpyA
WaitForMultipleObjects
CreateThread
CreateEventA
UnmapViewOfFile
MapViewOfFile
CreateFileMappingA
ReleaseMutex
GetSystemDirectoryA
OpenFileMappingA
OpenEventA

msvcrt

__set_app_type
_except_handler3
_controlfp
__dllonexit
_onexit
__p__fmode
__p__commode
_XcptFilter
_exit
_c_exit
fopen
vfprintf
fputs
_vsnprintf
fflush
fclose
strncpy
strncat
sprintf
_strnicmp
wcslen
srand
_stricmp
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_cexit
exit
strtok
_acmdln

user32

GetSystemMetrics
LoadStringA
LoadCursorA
GetSysColorBrush
RegisterClassA
InvalidateRgn
DefWindowProcA
GetClientRect
BeginPaint
EndPaint
UnregisterClassA
GetDesktopWindow
GetWindowLongA
EnableWindow
DialogBoxParamA
IsWindow
GetParent
GetDlgItem
EndDialog
LoadIconA
SendDlgItemMessageA
MessageBoxA
PostMessageA
SetWindowLongA
SystemParametersInfoA
GetDC
ReleaseDC
SendMessageA
EnumWindows
GetWindowRect
SetForegroundWindow
GetWindowThreadProcessId
GetClassNameA
SetWindowPos

winmm

waveInGetDevCapsW
waveInGetDevCapsA
PlaySoundA
waveOutGetDevCapsA
waveOutSetVolume
waveOutGetVolume
mixerGetID
waveOutGetDevCapsW
timeGetTime

ole32

CoInitializeEx
CoUninitialize
CoCreateInstance
StringFromGUID2

advapi32

RegCloseKey
RegSetValueExA
RegQueryValueExA
RegOpenKeyExA
RegCreateKeyExA
RegFlushKey

gdi32

CreateFontIndirectA
DeleteObject
GetDeviceCaps
CreatePen
SelectObject
MoveToEx
LineTo
Rectangle
GetStockObject
CreateSolidBrush

dsound

ord1

comctl32

PropertySheetA
CreatePropertySheetPageA
ord17

Sections

.text
Size: 48KB - Virtual size: 46KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 28KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
dpvvox.dll
.dll regsvr32 windows:5 windows x86 arch:x86

9ca221c3a877565ad9bffec04d44c52e

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
GetProcAddress
GetModuleHandleA
TerminateProcess
GetCurrentProcess
QueryPerformanceCounter
lstrlenA
GetVersionExA
InitializeCriticalSection
MultiByteToWideChar
WideCharToMultiByte
LoadLibraryA
FreeLibrary
DeleteCriticalSection
GetLastError
IsBadWritePtr
EnterCriticalSection
LeaveCriticalSection
InterlockedDecrement
InterlockedIncrement
HeapFree
GetProcessHeap
HeapAlloc
Sleep

user32

LoadStringA

winmm

timeGetTime

msacm32

acmStreamClose
acmStreamOpen
acmStreamUnprepareHeader
acmStreamConvert
acmStreamPrepareHeader

advapi32

RegCreateKeyExA
RegDeleteKeyA
RegQueryValueExA
RegSetValueExA
RegCloseKey
RegOpenKeyExA

ole32

CoCreateInstance
StringFromGUID2

msvcrt

_purecall
floor
_ftol
free
calloc
ceil
_except_handler3
malloc
_CIpow
srand
_CIexp
_CIasin
_initterm
_adjust_fdiv
__dllonexit
_onexit
swprintf
wcslen
_CIacos

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 104KB - Virtual size: 103KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 840B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dpwsockx.dll
.dll windows:5 windows x86 arch:x86

e8b63a3790a711c4fc7893e7e8963b5a

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

dpwsockx.pdb

Imports

kernel32

InterlockedExchange
Sleep
ResetEvent
SetEvent
SetThreadPriority
CreateThread
WaitForSingleObject
GetVersionExA
DisableThreadLibraryCalls
HeapAlloc
GetProcessHeap
ReleaseMutex
UnmapViewOfFile
OpenMutexA
MapViewOfFile
CreateFileMappingA
HeapFree
CreateProcessA
GetSystemDirectoryA
OpenEventA
GetCurrentProcessId
HeapReAlloc
WideCharToMultiByte
MultiByteToWideChar
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetSystemTimeAsFileTime
TerminateProcess
GetCurrentProcess
LoadLibraryA
SetUnhandledExceptionFilter
VirtualProtect
GetLocaleInfoA
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
VirtualAlloc
GetCPInfo
GetOEMCP
GetACP
VirtualQuery
RtlUnwind
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
GetSystemInfo
FreeEnvironmentStringsA
VirtualFree
HeapCreate
HeapDestroy
GetModuleFileNameA
GetStartupInfoA
GetFileType
GetStdHandle
SetHandleCount
GetModuleHandleA
ExitProcess
GetCommandLineA
FreeLibrary
GetProcAddress
ExitThread
WaitForMultipleObjectsEx
InterlockedDecrement
GetLastError
InterlockedIncrement
InitializeCriticalSection
CreateEventA
CloseHandle
DeleteCriticalSection
EnterCriticalSection
UnhandledExceptionFilter
LeaveCriticalSection

user32

SetWindowLongA
GetForegroundWindow
SendMessageA
SetFocus
GetDlgItem
GetWindowLongA
GetDlgItemTextA
EndDialog
DialogBoxParamA

wsock32

select
__WSAFDIsSet
getpeername
recvfrom
gethostname
gethostbyname
send
sendto
listen
accept
getsockname
connect
setsockopt
inet_ntoa
WSAGetLastError
closesocket
inet_addr
getsockopt
WSACleanup
WSAStartup
ntohs
bind
socket
ioctlsocket
htons
recv

winmm

timeGetTime

advapi32

SetSecurityDescriptorDacl
RegEnumKeyExA
RegQueryValueExA
RegCloseKey
FreeSid
AddAccessAllowedAce
InitializeAcl
GetLengthSid
AllocateAndInitializeSid
InitializeSecurityDescriptor
RegOpenKeyExA

dplayx

gdwDPlaySPRefCount

Exports

Exports

DPWS_BuildIPMessageHeader
DPWS_GetEnumPort
SPInit

Sections

.text
Size: 52KB - Virtual size: 49KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 24KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dsdmo.dll
.dll regsvr32 windows:5 windows x86 arch:x86

320f45a32628b35d761b69e505a2c544

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetVersionExA
DisableThreadLibraryCalls
CloseHandle
WaitForSingleObject
GetLastError
DeviceIoControl
CreateEventA
IsBadWritePtr
IsBadReadPtr
InterlockedDecrement
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
GetProcAddress
GetModuleHandleA
TerminateProcess
GetCurrentProcess
InterlockedIncrement
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
GetModuleFileNameA
Sleep
QueryPerformanceCounter
lstrlenA

msvcrt

_initterm
_adjust_fdiv
malloc
free
wcslen
_vsnwprintf
_vsnprintf
_CIsinh
ceil
modf
__CxxFrameHandler
??2@YAPAXI@Z
_purecall
??3@YAXPAX@Z
wcstombs
_CIpow
floor
_ftol

advapi32

RegDeleteKeyA
RegCreateKeyExA
RegSetValueExA
RegOpenKeyExA
RegEnumKeyA
RegCloseKey

ole32

StringFromCLSID
CoTaskMemFree
CoTaskMemAlloc

msdmo

DMORegister
DMOUnregister
MoInitMediaType
MoFreeMediaType
MoCopyMediaType

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 160KB - Virtual size: 160KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 920B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dsdmoprp.dll
.dll regsvr32 windows:5 windows x86 arch:x86

44c532b5aea3995196546902607fa520

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

lstrcatA
GetModuleFileNameA
FreeLibrary
GetProcAddress
LoadLibraryA
DisableThreadLibraryCalls
SizeofResource
LoadResource
FindResourceA
GetLastError
LoadLibraryExA
GetShortPathNameA
lstrcpyA
MulDiv
GetCurrentThreadId
HeapAlloc
FlushInstructionCache
GetCurrentProcess
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
GetModuleHandleA
TerminateProcess
HeapDestroy
EnterCriticalSection
LeaveCriticalSection
lstrcpynA
IsDBCSLeadByte
lstrcmpiA
lstrlenA
InterlockedDecrement
InterlockedIncrement
DeleteCriticalSection
InitializeCriticalSection
Sleep
GetProcessHeap
HeapFree
lstrlenW
WideCharToMultiByte
LockResource
MultiByteToWideChar

msvcrt

_initterm
malloc
free
??3@YAXPAX@Z
realloc
??2@YAPAXI@Z
atoi
atof
_ftol
_vsnprintf
_purecall
_adjust_fdiv

gdi32

GetDeviceCaps
CreateFontIndirectA
SelectObject
GetTextMetricsA
GetTextExtentPointA
DeleteObject

oleaut32

SysFreeString
SysStringLen
SysAllocStringLen
RegisterTypeLi
LoadTypeLi
SysAllocString
VarUI4FromStr

user32

CheckDlgButton
IsDlgButtonChecked
GetDlgItem
GetDC
SendMessageA
CharNextA
ShowWindow
MoveWindow
IsDialogMessageA
SetWindowLongA
DestroyWindow
IsWindow
LoadStringA
GetDialogBaseUnits
ReleaseDC
CreateDialogParamA
WinHelpA

ole32

CoTaskMemRealloc
CoTaskMemAlloc
CoTaskMemFree
CoCreateInstance

advapi32

RegCloseKey
RegEnumKeyExA
RegEnumValueA
RegQueryInfoKeyA
RegSetValueExA
RegOpenKeyExA
RegDeleteKeyA
RegDeleteValueA
RegCreateKeyExA

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 34KB - Virtual size: 34KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 438KB - Virtual size: 437KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dsetup.inf
dsound.dll
.dll windows:5 windows x86 arch:x86

bc76e8fe5d7fb75c8ade297b2e2871ea

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

dsound.pdb

Imports

kernel32

HeapCreate
HeapDestroy
HeapAlloc
HeapFree
DuplicateHandle
GetCurrentProcess
FreeLibrary
GetProcAddress
LoadLibraryA
GetLastError
MultiByteToWideChar
WideCharToMultiByte
GetVersionExA
SetThreadPriority
SetPriorityClass
GetThreadPriority
GetPriorityClass
GetCurrentProcessId
GetCurrentThread
DeviceIoControl
ReleaseMutex
SetEvent
WaitForSingleObject
UnmapViewOfFile
OpenMutexA
MapViewOfFile
CreateFileMappingA
CreateEventA
lstrcpyA
CreateProcessA
OpenEventA
SetLastError
GetWindowsDirectoryA
FindResourceA
CreateMutexA
DisableThreadLibraryCalls
GetCurrentThreadId
Sleep
InterlockedExchange
InitializeCriticalSection
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
InterlockedIncrement
InterlockedDecrement
CreateThread
GetExitCodeThread
ReadFile
GetSystemDirectoryA
GetOverlappedResult
ResetEvent
GetTickCount
WaitForMultipleObjects
OpenFileMappingA
GetPrivateProfileStringA
MulDiv
QueryPerformanceCounter
GetSystemTimeAsFileTime
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
OpenVxDHandle
ConvertToGlobalHandle
RtlUnwind
HeapReAlloc
ExitProcess
HeapSize
RaiseException
LCMapStringA
LCMapStringW
VirtualFree
VirtualAlloc
IsBadWritePtr
IsBadReadPtr
IsBadCodePtr
GetLocaleInfoA
GetCPInfo
VirtualProtect
GetSystemInfo
VirtualQuery
GetStringTypeA
GetStringTypeW
SetConsoleCtrlHandler
WriteFile
GetStdHandle
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetFileType
GetStartupInfoA
GetACP
GetOEMCP
SetFilePointer
GetFileSize
GetCommandLineA
GetFullPathNameA
CreateFileA
GetModuleHandleA
GetModuleFileNameA
OpenProcess
CloseHandle

user32

LoadStringA
EnumWindows
GetWindowThreadProcessId
IsWindow
GetForegroundWindow
GetParent
wsprintfA
CharUpperA
GetWindowPlacement
CharLowerBuffA

advapi32

RegCreateKeyA
RegCreateKeyW
RegOpenKeyExW
RegQueryValueExA
RegSetValueExA
RegSetValueExW
RegCloseKey
RegOpenKeyExA

ole32

CoCreateInstance

winmm

waveOutGetDevCapsA
waveInGetDevCapsA
waveOutGetVolume
waveOutSetVolume
waveOutMessage
waveInMessage
waveOutGetNumDevs
waveInGetNumDevs
waveOutOpen
waveOutClose
waveInOpen
waveInClose
mmioOpenA
timeGetTime
waveInUnprepareHeader
waveInReset
waveInGetPosition
waveInAddBuffer
waveInPrepareHeader
waveInStart
waveOutUnprepareHeader
waveOutReset
waveOutRestart
waveOutPause
waveOutWrite
waveOutPrepareHeader
waveOutGetPosition
mixerClose
mixerGetControlDetailsA
mixerGetLineControlsA
mixerGetLineInfoA
mixerOpen
mixerSetControlDetails
timeEndPeriod
timeBeginPeriod
waveInStop

version

GetFileVersionInfoSizeA
GetFileVersionInfoA
VerQueryValueA

rpcrt4

UuidFromStringA

Exports

Exports

DirectSoundCaptureCreate
DirectSoundCaptureCreate8
DirectSoundCaptureEnumerateA
DirectSoundCaptureEnumerateW
DirectSoundCreate
DirectSoundCreate8
DirectSoundEnumerateA
DirectSoundEnumerateW
DirectSoundFullDuplexCreate
DllCanUnloadNow
DllGetClassObject
GetDeviceID

Sections

.text
Size: 451KB - Virtual size: 451KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 435B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.xdata
Size: 1024B - Virtual size: 880B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 19KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 15KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dsound.inf
dsound.vxd
dsound3d.dll
.dll windows:5 windows x86 arch:x86

03deea28c2baec368335052cd61db3aa

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

DisableThreadLibraryCalls
GetCommandLineA
GetVersionExA
ExitProcess
GetProcAddress
GetModuleHandleA
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
GetModuleFileNameA
HeapDestroy
HeapCreate
VirtualFree
HeapFree
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetLastError
GetEnvironmentStringsW
WriteFile
Sleep
GetACP
GetOEMCP
GetCPInfo
HeapAlloc
VirtualAlloc
HeapReAlloc
IsBadWritePtr
LoadLibraryA
LCMapStringA
MultiByteToWideChar
LCMapStringW
GetStringTypeA
GetStringTypeW
RtlUnwind
GetLocaleInfoA
VirtualProtect
GetSystemInfo
VirtualQuery

Exports

Exports

CafBiquadCoeffs

Sections

.text
Size: 1.2MB - Virtual size: 1.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 928B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dswave.dll
.dll regsvr32 windows:5 windows x86 arch:x86

53dde5acafd181deae6d47482f150b5b

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GlobalUnlock
IsBadWritePtr
IsBadReadPtr
GlobalLock
GlobalAlloc
MultiByteToWideChar
LeaveCriticalSection
EnterCriticalSection
InitializeCriticalSection
GlobalFree
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
GetProcAddress
GetModuleHandleA
TerminateProcess
GetCurrentProcess
GlobalHandle
DeleteCriticalSection
GetModuleFileNameA
DisableThreadLibraryCalls
GetVersionExA
Sleep
InterlockedIncrement
QueryPerformanceCounter
InterlockedDecrement

msvcrt

free
memmove
_initterm
__CxxFrameHandler
??2@YAPAXI@Z
??3@YAXPAX@Z
malloc
wcstombs
_adjust_fdiv
_purecall

advapi32

RegCloseKey
RegCreateKeyExA
RegDeleteKeyA
RegEnumKeyA
RegOpenKeyExA
RegSetValueExA

msacm32

acmStreamPrepareHeader
acmStreamConvert
acmStreamSize
acmStreamUnprepareHeader
acmStreamClose
acmFormatSuggest
acmStreamOpen

ole32

StringFromCLSID
CoTaskMemFree

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 180B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 944B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 748B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dx7vb.dll
.dll regsvr32 windows:5 windows x86 arch:x86

1075cfd402ecf012fa24c5ee66bf0f31

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
QueryPerformanceCounter
LockResource
_lopen
_lread
_lclose
WriteFile
FindResourceW
OutputDebugStringA
GetModuleHandleA
CreateFileA
GetFileSize
CreateFileMappingA
MapViewOfFile
UnmapViewOfFile
FindResourceA
LoadResource
SizeofResource
GetModuleFileNameA
lstrcatA
lstrcpyA
HeapDestroy
GetCurrentProcess
GetLastError
lstrlenA
GetCurrentThreadId
WideCharToMultiByte
MultiByteToWideChar
LocalReAlloc
lstrcmpiA
LeaveCriticalSection
EnterCriticalSection
CreateEventA
CreateThread
ResumeThread
GetSystemDefaultLCID
WaitForSingleObject
CloseHandle
SetEvent
GetTickCount
GetProcAddress
lstrlenW
GetVersionExA
DisableThreadLibraryCalls
FreeLibrary
GetSystemDirectoryA
LoadLibraryA
LocalFree
LocalAlloc
InterlockedDecrement
InterlockedIncrement
DeleteCriticalSection
InitializeCriticalSection

msvcrt

_except_handler3
wcslen
_wcsicmp
wcsncmp
_wcsupr
wcscpy

advapi32

RegCloseKey
RegQueryValueExA
RegOpenKeyA
RegDeleteKeyA
RegCreateKeyExA
RegOpenKeyExA
RegEnumKeyExA
RegSetValueExA

ole32

CoCreateGuid
OleInitialize
CoGetInterfaceAndReleaseStream
OleUninitialize
CoCreateInstance
CoMarshalInterThreadInterfaceInStream
CoTaskMemFree
StringFromCLSID

gdi32

SetBkMode
SetBkColor
Polyline
CreateBrushIndirect
CreateSolidBrush
CreateHatchBrush
CreatePen
GetObjectA
CreateCompatibleDC
SelectObject
StretchBlt
DeleteObject
GetSystemPaletteEntries
CreateHalftonePalette
GetPaletteEntries
CreateICA
GetDeviceCaps
Rectangle
RoundRect
Ellipse
ExtTextOutW
SetTextColor
GetTextAlign
SetTextAlign
DeleteDC

msacm32

acmStreamSize
acmStreamUnprepareHeader
acmStreamConvert
acmStreamPrepareHeader
acmStreamOpen
acmStreamClose

user32

LoadStringA
CharNextA
GetWindowRect
GetDC
ReleaseDC
LoadImageA
wsprintfA

oleaut32

VariantChangeType
SysStringByteLen
VariantInit
VariantClear
SysFreeString
SysAllocString
RegisterTypeLi
LoadTypeLi
SysStringLen

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 196KB - Virtual size: 195KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 366KB - Virtual size: 366KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 21KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dx8vb.dll
.dll regsvr32 windows:5 windows x86 arch:x86

d7478ded6c8775462f2d7c0c8f58d1d9

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetSystemTimeAsFileTime
GetCurrentProcessId
QueryPerformanceCounter
SetFilePointer
ReadFile
SetThreadPriority
GetTickCount
Sleep
lstrcmpA
WriteFile
FindResourceW
OutputDebugStringA
GetModuleHandleA
HeapValidate
LockResource
CreateFileA
GetFileSize
CreateFileMappingA
MapViewOfFile
UnmapViewOfFile
FindResourceA
LoadResource
lstrlenA
SizeofResource
GetCurrentThread
GetModuleFileNameA
lstrcatA
lstrcpyA
HeapDestroy
GetCurrentProcess
GetLastError
GetCurrentThreadId
WideCharToMultiByte
MultiByteToWideChar
lstrcmpiA
CreateEventA
CreateThread
ResumeThread
GetSystemDefaultLCID
WaitForSingleObject
CloseHandle
SetEvent
GetProcAddress
EnterCriticalSection
LeaveCriticalSection
lstrlenW
DisableThreadLibraryCalls
FreeLibrary
LoadLibraryA
InterlockedDecrement
InterlockedIncrement
DeleteCriticalSection
GetProcessHeap
HeapFree
CreateFileW
IsProcessorFeaturePresent
GetVersionExA
IsDBCSLeadByte
GetTempPathA
GetTempFileNameA
DeleteFileA
InitializeCriticalSection
TerminateProcess

msvcrt

malloc
??3@YAXPAX@Z
??2@YAPAXI@Z
_purecall
realloc
free
_CIacos
_finite
_ftol
wcslen
sprintf
wcscpy
ceil
?terminate@@YAXXZ
exit
floor
_CIpow
_setjmp3
longjmp
sscanf
isspace
isalnum
_except_handler3
_snprintf
__CxxFrameHandler
qsort
_controlfp
_wcsicmp
_strdup
setlocale
calloc
_vsnprintf
atoi
isdigit
isalpha

advapi32

RegQueryValueExA
RegOpenKeyA
RegEnumKeyExA
RegOpenKeyExA
RegCreateKeyExA
RegDeleteKeyA
RegSetValueExA
RegCloseKey

ole32

CoGetInterfaceAndReleaseStream
OleInitialize
CoCreateGuid
CoCreateInstance
CoMarshalInterThreadInterfaceInStream
CoTaskMemFree
CoReleaseMarshalData
CoMarshalInterface
CreateStreamOnHGlobal
CoUnmarshalInterface
StringFromCLSID
CoUninitialize
CoInitializeEx
CoInitialize
OleUninitialize

gdi32

GetDeviceCaps
CreateICA
GetObjectA
SelectObject
CreateFontIndirectA
GetCurrentObject
GetOutlineTextMetricsA
DeleteObject
GetGlyphOutlineA
GetGlyphOutlineW
SetTextColor
SetBkColor
SetBkMode
CreateDIBSection
CreateCompatibleDC
DeleteDC

msacm32

acmStreamPrepareHeader
acmStreamOpen
acmStreamSize
acmStreamConvert
acmStreamUnprepareHeader
acmStreamClose

user32

DispatchMessageA
TranslateMessage
LoadStringA
CharNextA
wsprintfA
DrawTextA
DrawTextW
PeekMessageA

oleaut32

SafeArrayCreate
RegisterTypeLi
LoadTypeLi
SafeArrayDestroy
SysFreeString
SysAllocString

d3dxof

DirectXFileCreate

Exports

Exports

D3DIndexBuffer8GetData
D3DIndexBuffer8SetData
D3DVertexBuffer8GetData
D3DVertexBuffer8SetData
D3DXMeshIndexBuffer8GetData
D3DXMeshIndexBuffer8SetData
D3DXMeshVertexBuffer8GetData
D3DXMeshVertexBuffer8SetData
DXCopyMemory
DXLockArray8
DXUnlockArray8
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
VB_AddDataToBuffer
VB_AddStringToBuffer
VB_D3DColorARGB
VB_D3DColorMake
VB_D3DColorRGBA
VB_D3DColorXRGB
VB_D3DXColorAdd
VB_D3DXColorAdjustContrast
VB_D3DXColorAdjustSaturation
VB_D3DXColorLerp
VB_D3DXColorModulate
VB_D3DXColorNegative
VB_D3DXColorScale
VB_D3DXColorSubtract
VB_D3DXMatrixAffineTransformation
VB_D3DXMatrixIdentity
VB_D3DXMatrixInverse
VB_D3DXMatrixIsIdentity
VB_D3DXMatrixLookAtLH
VB_D3DXMatrixLookAtRH
VB_D3DXMatrixMultiply
VB_D3DXMatrixOrthoLH
VB_D3DXMatrixOrthoOffCenterLH
VB_D3DXMatrixOrthoOffCenterRH
VB_D3DXMatrixOrthoRH
VB_D3DXMatrixPerspectiveFovLH
VB_D3DXMatrixPerspectiveFovRH
VB_D3DXMatrixPerspectiveLH
VB_D3DXMatrixPerspectiveOffCenterLH
VB_D3DXMatrixPerspectiveOffCenterRH
VB_D3DXMatrixPerspectiveRH
VB_D3DXMatrixReflect
VB_D3DXMatrixRotationAxis
VB_D3DXMatrixRotationQuaternion
VB_D3DXMatrixRotationX
VB_D3DXMatrixRotationY
VB_D3DXMatrixRotationYawPitchRoll
VB_D3DXMatrixRotationZ
VB_D3DXMatrixScaling
VB_D3DXMatrixShadow
VB_D3DXMatrixTransformation
VB_D3DXMatrixTranslation
VB_D3DXMatrixTranspose
VB_D3DXMatrixfDeterminant
VB_D3DXPlaneDot
VB_D3DXPlaneDotCoord
VB_D3DXPlaneDotNormal
VB_D3DXPlaneFromPointNormal
VB_D3DXPlaneFromPoints
VB_D3DXPlaneIntersectLine
VB_D3DXPlaneNormalize
VB_D3DXPlaneTransform
VB_D3DXQuaternionBaryCentric
VB_D3DXQuaternionConjugate
VB_D3DXQuaternionDot
VB_D3DXQuaternionExp
VB_D3DXQuaternionIdentity
VB_D3DXQuaternionInverse
VB_D3DXQuaternionIsIdentity
VB_D3DXQuaternionLength
VB_D3DXQuaternionLengthSq
VB_D3DXQuaternionLn
VB_D3DXQuaternionMultiply
VB_D3DXQuaternionNormalize
VB_D3DXQuaternionRotationAxis
VB_D3DXQuaternionRotationMatrix
VB_D3DXQuaternionRotationYawPitchRoll
VB_D3DXQuaternionSlerp
VB_D3DXQuaternionSquad
VB_D3DXQuaternionToAxisAngle
VB_D3DXVec2Add
VB_D3DXVec2BaryCentric
VB_D3DXVec2CCW
VB_D3DXVec2CatmullRom
VB_D3DXVec2Dot
VB_D3DXVec2Hermite
VB_D3DXVec2Length
VB_D3DXVec2LengthSq
VB_D3DXVec2Lerp
VB_D3DXVec2Maximize
VB_D3DXVec2Minimize
VB_D3DXVec2Normalize
VB_D3DXVec2Scale
VB_D3DXVec2Subtract
VB_D3DXVec2Transform
VB_D3DXVec2TransformCoord
VB_D3DXVec2TransformNormal
VB_D3DXVec3Add
VB_D3DXVec3BaryCentric
VB_D3DXVec3CatmullRom
VB_D3DXVec3Cross
VB_D3DXVec3Dot
VB_D3DXVec3Hermite
VB_D3DXVec3Length
VB_D3DXVec3LengthSq
VB_D3DXVec3Lerp
VB_D3DXVec3Maximize
VB_D3DXVec3Minimize
VB_D3DXVec3Normalize
VB_D3DXVec3Project
VB_D3DXVec3Scale
VB_D3DXVec3Subtract
VB_D3DXVec3Transform
VB_D3DXVec3TransformCoord
VB_D3DXVec3TransformNormal
VB_D3DXVec3Unproject
VB_D3DXVec4Add
VB_D3DXVec4BaryCentric
VB_D3DXVec4CatmullRom
VB_D3DXVec4Cross
VB_D3DXVec4Dot
VB_D3DXVec4Hermite
VB_D3DXVec4Length
VB_D3DXVec4LengthSq
VB_D3DXVec4Lerp
VB_D3DXVec4Maximize
VB_D3DXVec4Minimize
VB_D3DXVec4Normalize
VB_D3DXVec4Scale
VB_D3DXVec4Subtract
VB_D3DXVec4Transform
VB_GetDataFromBuffer
VB_GetStringFromBuffer
VB_NewBuffer

Sections

.text
Size: 605KB - Virtual size: 605KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 63KB - Virtual size: 66KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data1
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 462KB - Virtual size: 461KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 27KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dx9w9x.cat
dxapi.sys
.dll windows:5 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Exports

Exports

_DxApi@20
_DxApiGetVersion@0

Sections

.text
Size: 256B - Virtual size: 242B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 32B - Virtual size: 1B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

PAGE
Size: 32B - Virtual size: 5B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.edata
Size: 128B - Virtual size: 99B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 960B - Virtual size: 960B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 32B - Virtual size: 14B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dxdiabrz.chm
.chm
dxdiachs.chm
.chm
dxdiacht.chm
.chm
dxdiacze.chm
.chm
dxdiadut.chm
.chm
dxdiafrn.chm
.chm
dxdiag.chm
.chm
dxdiag.exe
.exe windows:5 windows x86 arch:x86

c8444b9db152f4c5d20c544b84a070de

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

dxdiag.pdb

Imports

kernel32

GetVersionExA
WaitForMultipleObjects
WaitForSingleObject
SetEvent
GetCommandLineA
GetCurrentThreadId
FreeLibrary
LoadLibraryA
Sleep
CreateEventA
GetProcAddress
GetSystemInfo
MultiByteToWideChar
GetFullPathNameA
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
CompareFileTime
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
lstrcmpA
lstrcpyA
GetProcessHeap
HeapAlloc
HeapFree
CloseHandle
DeleteCriticalSection
GetModuleFileNameA
GetFileAttributesA
InitializeCriticalSection
WideCharToMultiByte
GetCurrentDirectoryA
GetSystemDirectoryA
lstrlenW
TerminateProcess
GetWindowsDirectoryA
SetEndOfFile
ReadFile
CreateFileA
FlushFileBuffers
SetStdHandle
LCMapStringW
LCMapStringA
GetLocaleInfoA
SetFilePointer
IsBadCodePtr
IsBadReadPtr
VirtualProtect
GetStringTypeW
GetStringTypeA
VirtualQuery
InterlockedExchange
GetCPInfo
GetOEMCP
GetACP
HeapSize
IsBadWritePtr
VirtualAlloc
VirtualFree
HeapCreate
HeapDestroy
TlsAlloc
SetLastError
TlsFree
GetFileType
SetHandleCount
GetEnvironmentStringsW
FreeEnvironmentStringsW
InterlockedDecrement
LeaveCriticalSection
InterlockedIncrement
EnterCriticalSection
lstrlenA
GetEnvironmentStrings
FreeEnvironmentStringsA
GetStdHandle
WriteFile
GetModuleHandleA
ExitProcess
CreateThread
GetLastError
TlsGetValue
TlsSetValue
ExitThread
RtlUnwind
HeapReAlloc
GetStartupInfoA

advapi32

RegDeleteValueA
RegSetValueExA
RegCreateKeyExA
RegEnumValueA
RegQueryInfoKeyA
RegNotifyChangeKeyValue
RegOpenKeyExA
RegFlushKey
RegDeleteKeyA
RegEnumKeyExA
RegEnumKeyA
RegQueryValueExA
RegCloseKey

gdi32

GetTextExtentPointA

user32

MessageBoxA
LoadStringA
EnableWindow
SendMessageA
GetDlgItem
wsprintfA
EndDialog
GetDesktopWindow
MsgWaitForMultipleObjects
PeekMessageA
IsDialogMessageA
TranslateMessage
DispatchMessageA
SetWindowsHookExA
UnhookWindowsHookEx
PostQuitMessage
UpdateWindow
GetClientRect
CreateDialogParamA
AdjustWindowRectEx
SetWindowPos
GetFocus
SetFocus
SetTimer
KillTimer
SetForegroundWindow
LoadIconA
CheckRadioButton
GetDlgItemTextA
GetDlgItemInt
SetDlgItemInt
GetDC
ReleaseDC
SetWindowTextA
CheckDlgButton
ShowWindow
SetDlgItemTextA
DestroyWindow
GetKeyState
IsWindowEnabled
PostMessageA
CallNextHookEx
GetWindowLongA
DialogBoxParamA
GetWindowRect

comctl32

ImageList_ReplaceIcon
ImageList_Create
ord17
ImageList_Destroy

comdlg32

GetSaveFileNameA

shell32

ShellExecuteA

ole32

CoCreateInstance
CoUninitialize
CoInitialize
CoInitializeSecurity

oleaut32

SysAllocString
SysFreeString
VariantInit
VariantClear

Sections

.text
Size: 200KB - Virtual size: 197KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 728KB - Virtual size: 726KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
dxdiager.chm
.chm
dxdiagn.dll
.dll regsvr32 windows:5 windows x86 arch:x86

85607ebfb61c149821ac5a5700a70682

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

dxdiagn.pdb

Imports

kernel32

FindFirstFileA
CloseHandle
CreateFileA
GetFullPathNameA
ExpandEnvironmentStringsA
lstrcmpiA
HeapFree
HeapAlloc
GetProcessHeap
GetPrivateProfileStringA
CompareStringA
GetSystemInfo
Sleep
SetPriorityClass
GetPriorityClass
GetCurrentProcess
GetProfileIntA
GlobalMemoryStatus
GetSystemDefaultLCID
GetLocalTime
WriteFile
LockResource
LoadResource
SizeofResource
FindResourceA
GetTempPathA
DeleteFileA
LeaveCriticalSection
EnterCriticalSection
SetEvent
ResetEvent
WaitForSingleObject
DeleteCriticalSection
CreateEventA
InitializeCriticalSection
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
TerminateProcess
FindClose
SetUnhandledExceptionFilter
FileTimeToLocalFileTime
FileTimeToSystemTime
GetDateFormatA
SystemTimeToFileTime
GetLocaleInfoA
GetCurrentDirectoryA
GetWindowsDirectoryA
OutputDebugStringA
GetModuleFileNameA
GetFileAttributesA
InterlockedIncrement
InterlockedDecrement
MultiByteToWideChar
WideCharToMultiByte
lstrlenW
FindResourceW
IsProcessorFeaturePresent
FlushFileBuffers
GetLocaleInfoW
ReadFile
SetStdHandle
RaiseException
SetFilePointer
IsBadCodePtr
IsBadReadPtr
IsValidCodePage
IsValidLocale
EnumSystemLocalesA
GetUserDefaultLCID
GetStringTypeW
GetStringTypeA
VirtualProtect
GetCPInfo
GetOEMCP
SetEndOfFile
GetACP
VirtualQuery
InterlockedExchange
HeapSize
IsBadWritePtr
VirtualAlloc
LCMapStringW
LCMapStringA
VirtualFree
HeapCreate
HeapDestroy
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetStartupInfoA
GetFileType
GetStdHandle
SetHandleCount
GetSystemDirectoryA
lstrcpyA
GetModuleHandleA
GetVersionExA
lstrcmpA
CompareStringW
GetLastError
lstrlenA
FreeLibrary
LoadLibraryA
UnhandledExceptionFilter
GetProcAddress
TlsAlloc
TlsGetValue
SetLastError
TlsFree
ExitProcess
RtlUnwind
HeapReAlloc
GetCommandLineA
TlsSetValue

advapi32

OpenSCManagerA
RegOpenKeyExA
RegQueryValueExA
RegSetValueExA
RegDeleteValueA
RegEnumKeyA
RegQueryValueExW
RegCreateKeyExA
RegDeleteKeyA
CloseServiceHandle
QueryServiceConfigA
RegOpenKeyA
RegCloseKey
OpenServiceA

user32

SystemParametersInfoA
GetWindowRect
GetSystemMetrics
CharNextA
GetDlgItemTextA
IntersectRect
OffsetRect
EnumDisplaySettingsA
ReleaseDC
GetDC
CharLowerBuffA
LoadStringA
FindWindowA
GetKeyboardType
LoadImageA
ShowWindow
DialogBoxParamA
SetForegroundWindow
PostMessageA
KillTimer
SetTimer
EndDialog
IsDlgButtonChecked
GetWindowTextA
MessageBoxA
SetWindowTextA
CheckRadioButton
EnableWindow
GetDlgItem
InflateRect
InvalidateRect
SetWindowPos
GetCursorPos
SetCursorPos
ShowCursor
SendMessageA
SetRect
PeekMessageA
GetWindowLongA
DefWindowProcA
RegisterClassA
CreateWindowExA

gdi32

GetDCOrgEx
GetClipBox
DeleteDC
CreateDCA
GetDeviceCaps
DeleteObject
BitBlt
SelectObject
CreateCompatibleDC
GetObjectA
GetStockObject

winmm

waveOutGetDevCapsA
waveOutMessage
timeGetTime
mmioOpenA
mmioDescend
mmioRead
mmioClose

version

GetFileVersionInfoA
GetFileVersionInfoSizeA
VerQueryValueA

ole32

CoInitialize
CoCreateInstance
CoUninitialize
CLSIDFromString
CoTaskMemFree

oleaut32

VariantCopy
SafeArrayAccessData
SysFreeString
SafeArrayUnaccessData
SysAllocString
VariantClear
VariantInit

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 704KB - Virtual size: 703KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 48KB - Virtual size: 65KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 884KB - Virtual size: 882KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 40KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dxdiaitn.chm
.chm
dxdiajpn.chm
.chm
dxdiakor.chm
.chm
dxdiapol.chm
.chm
dxdiarus.chm
.chm
dxdiaspa.chm
.chm
dxdiaswe.chm
.chm
dxdllreg.exe
.exe windows:5 windows x86 arch:x86

0c44b544bf09f2c523b928d57df20251

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

dxdllreg.pdb

Imports

kernel32

GetLastError
FindClose
FindFirstFileA
lstrcpyA
lstrlenA
GetPrivateProfileSectionA
FreeLibrary
GetProcAddress
LoadLibraryExA
GetPrivateProfileStringA
GetSystemDirectoryA
lstrcmpiA
CreateMutexA
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetVersionExA
GetWindowsDirectoryA
OutputDebugStringA
lstrcmpA
lstrcpynA
GetSystemInfo
VirtualProtect
ReadFile
GetProcessHeap
SetEndOfFile
GetStartupInfoA
GetCommandLineA
GetLocalTime
HeapFree
HeapReAlloc
HeapAlloc
ExitProcess
GetModuleHandleA
WriteFile
GetStdHandle
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetFileType
DeleteCriticalSection
TlsFree
SetLastError
TlsSetValue
TlsGetValue
TlsAlloc
HeapDestroy
HeapCreate
VirtualFree
CloseHandle
EnterCriticalSection
LeaveCriticalSection
VirtualAlloc
LoadLibraryA
GetACP
GetOEMCP
GetCPInfo
InitializeCriticalSection
RtlUnwind
InterlockedExchange
VirtualQuery
SetStdHandle
FlushFileBuffers
CreateFileA
SetFilePointer
LCMapStringA
MultiByteToWideChar
LCMapStringW
GetStringTypeA
GetStringTypeW
GetLocaleInfoA

advapi32

RegQueryValueExA
RegDeleteValueA
RegCloseKey
RegOpenKeyExA

setupapi

SetupCloseInfFile
SetupFindNextLine
SetupGetLineTextA
SetupFindFirstLineA
SetupOpenInfFileA

version

GetFileVersionInfoSizeA
VerQueryValueA
GetFileVersionInfoA

ole32

CoInitialize

Sections

.text
Size: 39KB - Virtual size: 39KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
dxdllreg.inf
dxmigr.dll
dxtmsft.dll
.dll regsvr32 windows:5 windows x86 arch:x86

c9cd26ae7abe9c1c280dbbd1211522a6

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

msvcrt

_purecall
_onexit
__dllonexit
_adjust_fdiv
_initterm
labs
sqrt
_wcsicmp
wcslen
strcmp
_controlfp
malloc
pow
_ftol
sin
cos
free
??2@YAPAXI@Z
realloc
??3@YAXPAX@Z
memcpy
memcmp
_clearfp
_CIasin
_CIpow
_CIacos
wcscmp
memmove

kernel32

LoadResource
FindResourceA
SizeofResource
FreeLibrary
LoadLibraryExA
GetLastError
CloseHandle
GetVersion
GetSystemInfo
GetProcessHeap
GlobalFree
GlobalHandle
GlobalSize
GlobalAlloc
IsBadWritePtr
IsBadCodePtr
lstrcatA
IsBadReadPtr
GetModuleFileNameA
lstrcpyA
HeapDestroy
lstrlenA
DisableThreadLibraryCalls
WideCharToMultiByte
MultiByteToWideChar
InterlockedDecrement
InterlockedIncrement
DeleteCriticalSection
InitializeCriticalSection
LeaveCriticalSection
EnterCriticalSection
lstrlenW
lstrcmpiA
CreateEventA
lstrcpynA

user32

CharNextA
GetSystemMetrics
GetAsyncKeyState
GetSysColor
GetDC
ReleaseDC
IntersectRect

ole32

CoCreateInstance
CoTaskMemFree
CoCreateFreeThreadedMarshaler
CoTaskMemAlloc
CoTaskMemRealloc

oleaut32

VariantChangeType
LoadRegTypeLi
SetErrorInfo
RegisterTypeLi
LoadTypeLi
VarI4FromStr
SysStringByteLen
SysAllocString
SafeArrayAccessData
SafeArrayCreate
UnRegisterTypeLi
VariantCopyInd
VariantClear
VariantInit
SafeArrayUnaccessData

advapi32

RegCloseKey
RegCreateKeyExA
RegOpenKeyExA
RegQueryValueExA
RegSetValueExA
RegQueryInfoKeyA
RegEnumKeyExA
RegDeleteValueA
RegDeleteKeyA

gdi32

GetDeviceCaps

dxtrans

?DXDitherArray@@YGXPBUDXDITHERDESC@@@Z
?DXOverArrayMMX@@YGXPAVDXPMSAMPLE@@PBV1@K@Z
?DXOverArray@@YGXPAVDXPMSAMPLE@@PBV1@K@Z

shell32

ShellExecuteA

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 213KB - Virtual size: 213KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 18KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 94KB - Virtual size: 94KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 23KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dxtrans.dll
.dll regsvr32 windows:5 windows x86 arch:x86

d82b48d8792288ce391cff15677c8590

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

SetLastError
TlsGetValue
TlsFree
TlsAlloc
SetHandleCount
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetStdHandle
GetEnvironmentStrings
GetEnvironmentVariableA
HeapCreate
VirtualFree
WriteFile
VirtualAlloc
HeapSize
ExitProcess
TerminateProcess
CreateThread
GetEnvironmentStringsW
ExitThread
GetStringTypeA
GetStringTypeW
LCMapStringA
LCMapStringW
TlsSetValue
RtlUnwind
RaiseException
HeapAlloc
GetProcAddress
lstrcmpiA
UnhandledExceptionFilter
HeapFree
InterlockedIncrement
DisableThreadLibraryCalls
HeapReAlloc
GetCurrentDirectoryA
GetVersion
GetCommandLineA
ResetEvent
GetSystemInfo
CreateIoCompletionPort
QueueUserAPC
GetQueuedCompletionStatus
SetEvent
GetCPInfo
GetVersionExA
PostQueuedCompletionStatus
CreateSemaphoreA
WaitForMultipleObjects
GetACP
GetOEMCP
LoadLibraryA
InterlockedDecrement
MultiByteToWideChar
WideCharToMultiByte
lstrlenA
GetCurrentThreadId
GetLastError
CloseHandle
GetCurrentProcess
WaitForSingleObject
HeapDestroy
lstrcpyA
lstrcatA
GetModuleFileNameA
IsBadReadPtr
lstrlenW
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSection
DeleteCriticalSection
GetModuleHandleA
IsBadWritePtr
FreeLibrary
LoadLibraryExA
FindResourceA
LoadResource
SizeofResource
lstrcpynA
ReleaseSemaphore
CreateEventA
GetCurrentThread
IsBadCodePtr

ole32

CreateBindCtx
CreateFileMoniker
CoCreateFreeThreadedMarshaler
CoInitialize
CoUninitialize
CoCreateInstance
CoTaskMemAlloc
CoTaskMemFree
CoTaskMemRealloc

oleaut32

SysFreeString
SysAllocString
UnRegisterTypeLi
VarI4FromStr
LoadTypeLi
RegisterTypeLi

user32

GetDesktopWindow
GetDC
ReleaseDC
IntersectRect
LoadStringA
CharNextA

advapi32

RegDeleteValueA
RegEnumKeyExA
RegQueryInfoKeyA
RegDeleteKeyA
RegSetValueExA
RegQueryValueExA
RegOpenKeyExA
RegCreateKeyExA
RegCloseKey

gdi32

DeleteDC
GetGlyphOutlineA
PolyBezierTo
LineTo
MoveToEx
DeleteObject
BeginPath
GetPaletteEntries
StrokePath
StrokeAndFillPath
FillPath
CreateBrushIndirect
SelectObject
SetPolyFillMode
CreateFontIndirectA
GetObjectA
ExtCreatePen
GetKerningPairsA
GetTextMetricsA
SetMapMode
CreateCompatibleDC
BitBlt
EndPath

ddraw

DirectDrawCreate

Exports

Exports

?DXConstOverArray@@YGXPAVDXPMSAMPLE@@ABV1@K@Z
?DXConstUnderArray@@YGXPAVDXPMSAMPLE@@ABV1@K@Z
?DXDitherArray@@YGXPBUDXDITHERDESC@@@Z
?DXLinearInterpolateArray@@YGXPBVDXBASESAMPLE@@PAUDXLIMAPINFO@@PAV1@K@Z
?DXOverArray@@YGXPAVDXPMSAMPLE@@PBV1@K@Z
?DXOverArrayMMX@@YGXPAVDXPMSAMPLE@@PBV1@K@Z
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 166KB - Virtual size: 166KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dxver.inf
dxw9xbrz.cat
dxw9xchs.cat
dxw9xcht.cat
dxw9xcze.cat
dxw9xdut.cat
dxw9xfrn.cat
dxw9xger.cat
dxw9xitn.cat
dxw9xjpn.cat
dxw9xkor.cat
dxw9xmig.inf
dxw9xpol.cat
dxw9xrus.cat
dxw9xspa.cat
dxw9xswe.cat
encapi.dll
.dll regsvr32 windows:5 windows x86 arch:x86

7b51e9d3677f401a528065d95fdb10ee

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetLastError
CreateEventA
WaitForSingleObject
WaitForMultipleObjects
ResetEvent
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
DisableThreadLibraryCalls
DeviceIoControl
GetModuleHandleA
TerminateProcess
GetCurrentProcess
GetModuleFileNameA
lstrlenA
GetOverlappedResult
CloseHandle
SetEvent
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
GetProcAddress
InitializeCriticalSection
CreateThread
InterlockedExchange
MultiByteToWideChar
InterlockedDecrement
FreeLibrary
InterlockedIncrement
GetVersionExA

msvcrt

_purecall
??2@YAPAXI@Z
??3@YAXPAX@Z

advapi32

RegSetValueA
RegSetValueExA
RegOpenKeyExA
RegEnumKeyExA
RegCloseKey
RegDeleteKeyA
RegCreateKeyA

user32

wsprintfA

ole32

StringFromGUID2
CoUninitialize
CoTaskMemAlloc
CoTaskMemFree
IIDFromString
CoFreeUnusedLibraries
CoCreateInstance
CoInitialize

oleaut32

SysFreeString
SysStringByteLen
SysStringLen
SysAllocString

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 264B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 984B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
gameenum.sys
.sys windows:5 windows x86 arch:x86

6ec049c91ee0bab4ea8f0a7d19b52943

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_WDM_DRIVER

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

ntoskrnl.exe

InterlockedDecrement
InterlockedIncrement
InterlockedCompareExchange
InterlockedExchange
IoDeleteDevice
KeSetEvent
IoBuildDeviceIoControlRequest
KeInitializeEvent
IoCreateDevice
ExFreePool
ObfReferenceObject
ExAllocatePoolWithTag
MmUnmapIoSpace
IoSetDeviceInterfaceState
IofCallDriver
KeWaitForSingleObject
IoAttachDeviceToDeviceStack
IoRegisterDeviceInterface
IofCompleteRequest
READ_REGISTER_UCHAR
WRITE_REGISTER_UCHAR
MmMapIoSpace
ObfDereferenceObject
swprintf
wcslen
RtlInitUnicodeString
RtlWriteRegistryValue
ZwQueryValueKey
ZwClose
ZwCreateKey
IoOpenDeviceInterfaceRegistryKey
IoInvalidateDeviceRelations
PoCallDriver
PoStartNextPowerIrp
PoSetPowerState
PoRequestPowerIrp
IoDetachDevice

hal

WRITE_PORT_UCHAR
READ_PORT_UCHAR
ExAcquireFastMutex
ExReleaseFastMutex

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

PAGE
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

INIT
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 960B - Virtual size: 960B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 416B - Virtual size: 414B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
gcdef.dll
.dll windows:5 windows x86 arch:x86

658a2c8d831730c6656a96194ef0fa1d

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

user32

BringWindowToTop
IsIconic
UnpackDDElParam
ReuseDDElParam
SetMenu
LoadMenuA
ReleaseCapture
TranslateAcceleratorA
LoadAcceleratorsA
SetRectEmpty
FindWindowA
DestroyMenu
GetSysColorBrush
PostQuitMessage
GrayStringA
DrawTextA
TabbedTextOutA
SetCursor
ShowOwnedPopups
GetDesktopWindow
ClientToScreen
PtInRect
GetClassNameA
GetMenuCheckMarkDimensions
GetMenuState
ModifyMenuA
SetMenuItemBitmaps
CheckMenuItem
EnableMenuItem
SystemParametersInfoA
MapWindowPoints
PeekMessageA
DispatchMessageA
GetFocus
AdjustWindowRectEx
EqualRect
DeferWindowPos
BeginDeferWindowPos
CopyRect
EndDeferWindowPos
IsWindowVisible
ScreenToClient
ScrollWindow
SetScrollInfo
ShowScrollBar
SetScrollRange
GetScrollPos
SetScrollPos
GetTopWindow
IsChild
GetCapture
GetClassInfoA
RegisterClassA
GetMenuItemCount
GetSubMenu
GetMenuItemID
GetMenu
GetWindowTextA
GetDlgCtrlID
GetKeyState
CreateWindowExA
SetWindowsHookExA
CallNextHookEx
SetPropA
GetLastActivePopup
GetForegroundWindow
SetForegroundWindow
GetPropA
CallWindowProcA
RemovePropA
GetMessageTime
GetMessagePos
GetWindow
GetWindowRect
SetWindowPos
RegisterWindowMessageA
GetNextDlgTabItem
GetActiveWindow
SetActiveWindow
IsWindow
GetSystemMetrics
DestroyWindow
IsWindowEnabled
UnhookWindowsHookEx
SendDlgItemMessageA
IsDlgButtonChecked
CheckDlgButton
LoadCursorA
RegisterClassExA
DefWindowProcA
BeginPaint
EndPaint
LoadBitmapA
GetSysColor
GetDC
GetClientRect
FillRect
ReleaseDC
LoadIconA
DestroyIcon
MessageBoxA
DialogBoxParamA
GetParent
GetWindowLongA
PostMessageA
KillTimer
EndDialog
WinHelpA
SetWindowLongA
SetTimer
LoadStringA
wsprintfA
ShowWindow
EnableWindow
SetFocus
SetWindowTextA
GetDlgItem
UpdateWindow
InvalidateRect
SendMessageA

gdi32

Escape
ExtTextOutA
TextOutA
RectVisible
PtVisible
GetClipBox
ScaleWindowExtEx
ScaleViewportExtEx
OffsetViewportOrgEx
RestoreDC
SaveDC
GetDeviceCaps
CreateBitmap
SetBkColor
SetTextColor
SetWindowExtEx
SetViewportExtEx
SetViewportOrgEx
Ellipse
CreateSolidBrush
PaintRgn
GetRgnBox
CreatePolygonRgn
CreateCompatibleDC
GetMapMode
SetMapMode
GetObjectA
DPtoLP
BitBlt
DeleteDC
CreatePen
GetStockObject
SelectObject
MoveToEx
LineTo
DeleteObject

kernel32

WriteFile
GetVersionExA
GetProcessVersion
LoadLibraryA
GetProcAddress
FreeLibrary
GlobalFlags
MulDiv
TlsGetValue
LocalReAlloc
TlsSetValue
EnterCriticalSection
GlobalAlloc
GlobalReAlloc
LeaveCriticalSection
TlsFree
GlobalHandle
DeleteCriticalSection
TlsAlloc
InitializeCriticalSection
lstrcpynA
GetLastError
GetModuleFileNameA
GlobalAddAtomA
GlobalGetAtomNameA
GetCommandLineA
RtlUnwind
HeapAlloc
HeapFree
RaiseException
HeapSize
HeapReAlloc
ExitProcess
GetModuleHandleA
GetACP
GetOEMCP
GetCPInfo
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
IsBadWritePtr
LCMapStringA
LCMapStringW
SetUnhandledExceptionFilter
GlobalUnlock
GetStringTypeA
GetStringTypeW
VirtualProtect
GetSystemInfo
VirtualQuery
IsBadReadPtr
IsBadCodePtr
GetLocaleInfoA
GlobalLock
GetCurrentThreadId
lstrcatA
GetVersion
lstrlenA
lstrcpyA
FormatMessageA
OutputDebugStringA
InterlockedDecrement
InterlockedIncrement
LocalAlloc
LocalFree
lstrcmpiA
lstrcmpA
WideCharToMultiByte
MultiByteToWideChar
GlobalFree
SetLastError

advapi32

RegCloseKey
RegQueryValueExA
RegOpenKeyA
RegSetValueExA
RegCreateKeyA
RegEnumKeyA
RegQueryInfoKeyA
RegOpenKeyExA
RegDeleteValueA

comctl32

ord17
ImageList_Destroy

winmm

joyGetPosEx
joyGetDevCapsA
joyGetNumDevs
joyConfigChanged

winspool.drv

OpenPrinterA
DocumentPropertiesA
ClosePrinter

shell32

DragFinish
DragQueryFileA

Exports

Exports

DllCanUnloadNow
DllGetClassObject

Sections

.text
Size: 104KB - Virtual size: 103KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 348KB - Virtual size: 348KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
gchand.dll
.dll windows:5 windows x86 arch:x86

b94d3cce6eac29903c18cbe135eaf1e2

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

mfc42

ord823
ord1574
ord825

msvcrt

?terminate@@YAXXZ
??1type_info@@UAE@XZ
malloc
wcslen
free
_except_handler3

ole32

CoGetClassObject

kernel32

InterlockedDecrement
lstrlenW
InterlockedIncrement

user32

ExitWindowsEx

comctl32

PropertySheetA

Exports

Exports

DllCanUnloadNow
DllGetClassObject

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 172B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 1016B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 212B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
gm16.dls
gmreadme.txt
hidgame.sys
.sys windows:5 windows x86 arch:x86

94c56b96139675e3e5ea28d6ec4d6e0e

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_WDM_DRIVER

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

hal

KeQueryPerformanceCounter
KfAcquireSpinLock
ExReleaseFastMutex
ExAcquireFastMutex
KfReleaseSpinLock

ntoskrnl.exe

KeWaitForSingleObject
KeInitializeSpinLock
PoCallDriver
PoStartNextPowerIrp
InterlockedIncrement
InterlockedDecrement
KeTickCount
KeSetEvent
IofCompleteRequest
KeInitializeEvent
KeQueryTimeIncrement
IofCallDriver

hidclass.sys

HidRegisterMinidriver

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 96B - Virtual size: 84B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

PAGE
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

INIT
Size: 832B - Virtual size: 832B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 960B - Virtual size: 944B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 256B - Virtual size: 248B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
joy.cpl
.dll windows:5 windows x86 arch:x86

c9a6a8528ed9c23f72acaa44d74df204

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

ole32

CoCreateInstance
CoInitialize
CoGetClassObject
CoFreeUnusedLibraries
CoUninitialize

advapi32

RegEnumKeyExA
RegCreateKeyExW
RegOpenKeyExW
RegCloseKey
RegQueryValueExA
RegOpenKeyA
RegSetValueExA
RegEnumKeyExW
RegSetValueExW
RegQueryValueExW
RegOpenKeyExA
RegCreateKeyExA

dinput

DirectInputCreateA

kernel32

GetCommandLineA
HeapFree
RtlUnwind
HeapAlloc
RaiseException
HeapSize
HeapReAlloc
ExitProcess
GetModuleHandleA
GlobalGetAtomNameA
GetOEMCP
GetCPInfo
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
IsBadWritePtr
LCMapStringA
LCMapStringW
SetUnhandledExceptionFilter
GetStringTypeA
GetStringTypeW
VirtualProtect
GetSystemInfo
VirtualQuery
GetLocaleInfoA
IsBadReadPtr
IsBadCodePtr
SetStdHandle
GlobalAddAtomA
GetModuleFileNameA
FlushFileBuffers
SetFilePointer
WriteFile
lstrcpyA
GetProcessVersion
TlsGetValue
LocalReAlloc
TlsSetValue
EnterCriticalSection
Sleep
GlobalAlloc
GlobalReAlloc
LeaveCriticalSection
TlsFree
GlobalHandle
DeleteCriticalSection
TlsAlloc
InitializeCriticalSection
LocalFree
LocalAlloc
GlobalFlags
lstrcmpA
lstrcmpiA
lstrcpynA
SetLastError
GlobalFree
GlobalLock
GlobalUnlock
MulDiv
lstrcatA
GetCurrentThreadId
InterlockedDecrement
InterlockedIncrement
lstrcpyW
MultiByteToWideChar
WideCharToMultiByte
GetVersionExA
LoadLibraryA
GetProcAddress
FreeLibrary
CreateMutexA
GetLastError
GetVersion
ReleaseMutex
DisableThreadLibraryCalls
CreateProcessA
CloseHandle
lstrlenA
lstrlenW
GetACP

user32

GetTopWindow
SetScrollPos
GetScrollPos
SetScrollRange
ShowScrollBar
SetScrollInfo
ScrollWindow
EndDeferWindowPos
CopyRect
BeginDeferWindowPos
DeferWindowPos
EqualRect
AdjustWindowRectEx
SetActiveWindow
DispatchMessageA
PeekMessageA
GetSysColor
SystemParametersInfoA
BeginPaint
EndPaint
TabbedTextOutA
DrawTextA
GrayStringA
GetActiveWindow
GetNextDlgTabItem
EnableMenuItem
CheckMenuItem
SetMenuItemBitmaps
ModifyMenuA
GetMenuState
LoadBitmapA
GetMenuCheckMarkDimensions
GetClassNameA
PtInRect
GetDesktopWindow
PostQuitMessage
GetSysColorBrush
ShowOwnedPopups
FindWindowA
SetRectEmpty
LoadAcceleratorsA
TranslateAcceleratorA
ReleaseCapture
LoadMenuA
SetMenu
ReuseDDElParam
UnpackDDElParam
IsIconic
BringWindowToTop
IsChild
GetCapture
GetClassInfoA
RegisterClassA
GetMenuItemCount
GetSubMenu
GetMenuItemID
GetMenu
DefWindowProcA
CreateWindowExA
SetWindowsHookExA
CallNextHookEx
SetPropA
UnhookWindowsHookEx
GetLastActivePopup
GetForegroundWindow
GetPropA
RemovePropA
GetMessageTime
GetMessagePos
GetWindow
ShowWindow
MoveWindow
GetDlgCtrlID
SetWindowTextA
SetDlgItemTextA
LoadIconA
GetWindowTextA
EnableWindow
GetDC
ScreenToClient
SetForegroundWindow
GetKeyState
MessageBeep
UpdateWindow
RegisterWindowMessageA
KillTimer
SetTimer
IsWindowEnabled
ExitWindowsEx
MapWindowPoints
IsDlgButtonChecked
GetSystemMetrics
GetWindowRect
CreatePopupMenu
AppendMenuA
GetClientRect
ClientToScreen
TrackPopupMenu
DestroyMenu
WinHelpA
GetParent
DialogBoxParamA
IsWindowVisible
DestroyWindow
InvalidateRect
CheckRadioButton
SetWindowPos
GetDlgItemTextA
SetFocus
LoadImageA
EndDialog
DestroyIcon
GetWindowDC
ReleaseDC
GetWindowLongA
SetWindowLongA
RedrawWindow
IsWindow
PostMessageA
SendDlgItemMessageA
GetDlgItem
SendMessageA
LoadCursorA
SetCursor
LoadStringA
wsprintfA
MessageBoxA
CallWindowProcA
GetFocus

gdi32

GetStockObject
SetMapMode
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowExtEx
ScaleWindowExtEx
GetClipBox
SaveDC
SelectObject
GetDeviceCaps
PtVisible
RectVisible
TextOutA
ExtTextOutA
Escape
CreateBitmap
DeleteDC
GetObjectA
SetBkColor
DeleteObject
RestoreDC
SetTextColor
GetTextMetricsA
GetTextExtentPointA
GetTextExtentPoint32A

comctl32

ord17
ImageList_Create
ImageList_ReplaceIcon
ImageList_Destroy
CreatePropertySheetPageA
PropertySheetA

shell32

DragFinish
DragQueryFileA
ExtractIconExA

winspool.drv

DocumentPropertiesA
OpenPrinterA
ClosePrinter

Exports

Exports

CPlApplet
ShowJoyCPL

Sections

.text
Size: 124KB - Virtual size: 122KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 276KB - Virtual size: 276KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 20KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
joyhid.vxd
joystick.inf
jystkbrz.inf
jystkchs.inf
jystkcht.inf
jystkcze.inf
jystkdut.inf
jystkfrn.inf
jystkger.inf
jystkitn.inf
jystkjpn.inf
jystkkor.inf
jystkpol.inf
jystkrus.inf
jystkspa.inf
jystkswe.inf
ks.inf
ks.sys
.dll windows:5 windows x86 arch:x86

21a59e474a5dc891708dc0b0ea65fe46

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

ks.pdb

Imports

ntoskrnl.exe

KeInitializeEvent
ExDeleteNPagedLookasideList
ExInitializeNPagedLookasideList
ExDeletePagedLookasideList
ExFreeToPagedLookasideList
ExAllocateFromPagedLookasideList
ExInitializePagedLookasideList
KeInitializeSpinLock
ProbeForRead
IofCallDriver
IoBuildSynchronousFsdRequest
ZwClose
ZwQueryValueKey
ZwOpenKey
RtlInitUnicodeString
RtlFreeUnicodeString
wcscat
wcscpy
RtlStringFromGUID
IoGetRelatedDeviceObject
ObfReferenceObject
IoBuildDeviceIoControlRequest
ExGetPreviousMode
ZwEnumerateValueKey
ZwSetValueKey
RtlCompareMemory
RtlIntegerToUnicodeString
RtlAppendUnicodeStringToString
ZwCreateKey
RtlAppendUnicodeToString
RtlCopyUnicodeString
ExQueueWorkItem
swprintf
wcslen
ExReleaseFastMutexUnsafe
ExAcquireFastMutexUnsafe
IoSetDeviceInterfaceState
InterlockedExchange
KeSetTimer
IoInvalidateDeviceRelations
ExAllocatePoolWithQuotaTag
ProbeForWrite
IoGetDeviceProperty
DbgBreakPoint
DbgPrint
ZwEnumerateKey
ZwQueryKey
IoRegisterDeviceInterface
RtlGUIDFromString
_wcsicmp
IoDeleteDevice
IoCreateDevice
ZwDeleteKey
IoDetachDevice
IoAttachDeviceToDeviceStack
KeInitializeDpc
KeSetEvent
_wcsnicmp
KeCancelTimer
KeSetTimerEx
ExInterlockedCompareExchange64
KefReleaseSpinLockFromDpcLevel
KefAcquireSpinLockAtDpcLevel
KeQueryTimeIncrement
KeInitializeTimerEx
KeReleaseMutex
KeSynchronizeExecution
ObfDereferenceObject
KeRemoveQueueDpc
InterlockedCompareExchange
KeReleaseSemaphore
KeInsertQueueDpc
ExEventObjectType
ObReferenceObjectByHandle
ExSemaphoreObjectType
KeBugCheckEx
PoCallDriver
PoStartNextPowerIrp
KeGetCurrentThread
RtlCompareUnicodeString
IoCreateFile
MmMapLockedPages
KeClearEvent
ExRaiseStatus
IoFreeMdl
MmUnlockPages
MmProbeAndLockPages
IoAllocateMdl
IoReleaseCancelSpinLock
IoAcquireCancelSpinLock
ExfInterlockedRemoveHeadList
ExfInterlockedInsertTailList
KeInitializeMutex
IoFileObjectType
IoGetDeviceInterfaces
IoAllocateDriverObjectExtension
IoGetDriverObjectExtension
IoOpenDeviceRegistryKey
IoFreeIrp
IoAllocateIrp
_snwprintf
PoUnregisterSystemState
PoRegisterSystemState
IoIsWdmVersionAvailable
PoRequestPowerIrp
PoSetPowerState
IoOpenDeviceInterfaceRegistryKey
memmove
KeResetEvent
KeQuerySystemTime
_except_handler3
KeTickCount
KeWaitForSingleObject
IofCompleteRequest
InterlockedIncrement
InterlockedDecrement
ExFreePool
ExAllocatePoolWithTag
ExInterlockedPushEntrySList
KeInitializeTimer
ExInterlockedPopEntrySList

hal

KfLowerIrql
KeGetCurrentIrql
ExAcquireFastMutex
ExReleaseFastMutex
KfAcquireSpinLock
KfReleaseSpinLock
KeQueryPerformanceCounter
KfRaiseIrql

Exports

Exports

??0CBaseUnknown@@QAE@ABU_GUID@@PAUIUnknown@@@Z
??0CBaseUnknown@@QAE@PAUIUnknown@@@Z
??1CBaseUnknown@@UAE@XZ
??_FCBaseUnknown@@QAEXXZ
?IndirectedAddRef@CBaseUnknown@@UAGKXZ
?IndirectedQueryInterface@CBaseUnknown@@UAGJABU_GUID@@PAPAX@Z
?IndirectedRelease@CBaseUnknown@@UAGKXZ
?NonDelegatedAddRef@CBaseUnknown@@UAGKXZ
?NonDelegatedQueryInterface@CBaseUnknown@@UAGJABU_GUID@@PAPAX@Z
?NonDelegatedRelease@CBaseUnknown@@UAGKXZ
DllInitialize
KoCreateInstance
KoDeviceInitialize
KoDriverInitialize
KoRelease
KsAcquireControl
KsAcquireDevice
KsAcquireDeviceSecurityLock
KsAcquireResetValue
KsAddDevice
KsAddEvent
KsAddIrpToCancelableQueue
KsAddItemToObjectBag
KsAddObjectCreateItemToDeviceHeader
KsAddObjectCreateItemToObjectHeader
KsAllocateDefaultClock
KsAllocateDefaultClockEx
KsAllocateDeviceHeader
KsAllocateExtraData
KsAllocateObjectBag
KsAllocateObjectCreateItem
KsAllocateObjectHeader
KsCacheMedium
KsCancelIo
KsCancelRoutine
KsCompletePendingRequest
KsCopyObjectBagItems
KsCreateAllocator
KsCreateBusEnumObject
KsCreateClock
KsCreateDefaultAllocator
KsCreateDefaultAllocatorEx
KsCreateDefaultClock
KsCreateDefaultSecurity
KsCreateDevice
KsCreateFilterFactory
KsCreatePin
KsCreateTopologyNode
KsDecrementCountedWorker
KsDefaultAddEventHandler
KsDefaultDeviceIoCompletion
KsDefaultDispatchPnp
KsDefaultDispatchPower
KsDefaultForwardIrp
KsDereferenceBusObject
KsDereferenceSoftwareBusObject
KsDeviceGetBusData
KsDeviceRegisterAdapterObject
KsDeviceSetBusData
KsDisableEvent
KsDiscardEvent
KsDispatchFastIoDeviceControlFailure
KsDispatchFastReadFailure
KsDispatchInvalidDeviceRequest
KsDispatchIrp
KsDispatchQuerySecurity
KsDispatchSetSecurity
KsDispatchSpecificMethod
KsDispatchSpecificProperty
KsEnableEvent
KsEnableEventWithAllocator
KsFastMethodHandler
KsFastPropertyHandler
KsFilterAcquireProcessingMutex
KsFilterAddTopologyConnections
KsFilterAttemptProcessing
KsFilterCreateNode
KsFilterCreatePinFactory
KsFilterFactoryAddCreateItem
KsFilterFactoryGetSymbolicLink
KsFilterFactorySetDeviceClassesState
KsFilterFactoryUpdateCacheData
KsFilterGetAndGate
KsFilterGetChildPinCount
KsFilterGetFirstChildPin
KsFilterRegisterPowerCallbacks
KsFilterReleaseProcessingMutex
KsForwardAndCatchIrp
KsForwardIrp
KsFreeDefaultClock
KsFreeDeviceHeader
KsFreeEventList
KsFreeObjectBag
KsFreeObjectCreateItem
KsFreeObjectCreateItemsByContext
KsFreeObjectHeader
KsGenerateDataEvent
KsGenerateEvent
KsGenerateEventList
KsGenerateEvents
KsGetBusEnumIdentifier
KsGetBusEnumParentFDOFromChildPDO
KsGetBusEnumPnpDeviceObject
KsGetDefaultClockState
KsGetDefaultClockTime
KsGetDevice
KsGetDeviceForDeviceObject
KsGetFilterFromIrp
KsGetFirstChild
KsGetNextSibling
KsGetNodeIdFromIrp
KsGetObjectFromFileObject
KsGetObjectTypeFromFileObject
KsGetObjectTypeFromIrp
KsGetOuterUnknown
KsGetParent
KsGetPinFromIrp
KsHandleSizedListQuery
KsIncrementCountedWorker
KsInitializeDevice
KsInitializeDriver
KsInstallBusEnumInterface
KsIsBusEnumChildDevice
KsMergeAutomationTables
KsMethodHandler
KsMethodHandlerWithAllocator
KsMoveIrpsOnCancelableQueue
KsNullDriverUnload
KsPinAcquireProcessingMutex
KsPinAttachAndGate
KsPinAttachOrGate
KsPinAttemptProcessing
KsPinDataIntersection
KsPinGetAndGate
KsPinGetAvailableByteCount
KsPinGetConnectedFilterInterface
KsPinGetConnectedPinDeviceObject
KsPinGetConnectedPinFileObject
KsPinGetConnectedPinInterface
KsPinGetCopyRelationships
KsPinGetFirstCloneStreamPointer
KsPinGetLeadingEdgeStreamPointer
KsPinGetNextSiblingPin
KsPinGetParentFilter
KsPinGetReferenceClockInterface
KsPinGetTrailingEdgeStreamPointer
KsPinPropertyHandler
KsPinRegisterFrameReturnCallback
KsPinRegisterHandshakeCallback
KsPinRegisterIrpCompletionCallback
KsPinRegisterPowerCallbacks
KsPinReleaseProcessingMutex
KsPinSetPinClockTime
KsPinSubmitFrame
KsPinSubmitFrameMdl
KsProbeStreamIrp
KsProcessPinUpdate
KsPropertyHandler
KsPropertyHandlerWithAllocator
KsQueryDevicePnpObject
KsQueryInformationFile
KsQueryObjectAccessMask
KsQueryObjectCreateItem
KsQueueWorkItem
KsReadFile
KsRecalculateStackDepth
KsReferenceBusObject
KsReferenceSoftwareBusObject
KsRegisterAggregatedClientUnknown
KsRegisterCountedWorker
KsRegisterFilterWithNoKSPins
KsRegisterWorker
KsReleaseControl
KsReleaseDevice
KsReleaseDeviceSecurityLock
KsReleaseIrpOnCancelableQueue
KsRemoveBusEnumInterface
KsRemoveIrpFromCancelableQueue
KsRemoveItemFromObjectBag
KsRemoveSpecificIrpFromCancelableQueue
KsServiceBusEnumCreateRequest
KsServiceBusEnumPnpRequest
KsSetDefaultClockState
KsSetDefaultClockTime
KsSetDevicePnpAndBaseObject
KsSetInformationFile
KsSetMajorFunctionHandler
KsSetPowerDispatch
KsSetTargetDeviceObject
KsSetTargetState
KsStreamIo
KsStreamPointerAdvance
KsStreamPointerAdvanceOffsets
KsStreamPointerAdvanceOffsetsAndUnlock
KsStreamPointerCancelTimeout
KsStreamPointerClone
KsStreamPointerDelete
KsStreamPointerGetIrp
KsStreamPointerGetMdl
KsStreamPointerGetNextClone
KsStreamPointerLock
KsStreamPointerScheduleTimeout
KsStreamPointerSetStatusCode
KsStreamPointerUnlock
KsSynchronousIoControlDevice
KsTerminateDevice
KsTopologyPropertyHandler
KsUnregisterWorker
KsUnserializeObjectPropertiesFromRegistry
KsValidateAllocatorCreateRequest
KsValidateAllocatorFramingEx
KsValidateClockCreateRequest
KsValidateConnectRequest
KsValidateTopologyNodeCreateRequest
KsWriteFile
KsiDefaultClockAddMarkEvent
KsiPropertyDefaultClockGetCorrelatedPhysicalTime
KsiPropertyDefaultClockGetCorrelatedTime
KsiPropertyDefaultClockGetFunctionTable
KsiPropertyDefaultClockGetPhysicalTime
KsiPropertyDefaultClockGetResolution
KsiPropertyDefaultClockGetState
KsiPropertyDefaultClockGetTime
KsiQueryObjectCreateItemsPresent
_KsEdit

Sections

.text
Size: 27KB - Virtual size: 27KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 128B - Virtual size: 64B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

PAGE
Size: 76KB - Virtual size: 76KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.edata
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

INIT
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
ks98.inf
ks98.sys
.dll windows:5 windows x86 arch:x86

35f91fb82ef1dedbe8e11940592e982b

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

ks.pdb

Imports

ntoskrnl.exe

KeInitializeEvent
ExDeleteNPagedLookasideList
ExInitializeNPagedLookasideList
ExDeletePagedLookasideList
ExFreeToPagedLookasideList
ExAllocateFromPagedLookasideList
ExInitializePagedLookasideList
KeInitializeSpinLock
ProbeForRead
IofCallDriver
IoBuildSynchronousFsdRequest
ZwClose
ZwQueryValueKey
ZwOpenKey
RtlInitUnicodeString
RtlFreeUnicodeString
wcscat
wcscpy
RtlStringFromGUID
IoGetRelatedDeviceObject
ObfReferenceObject
IoBuildDeviceIoControlRequest
ExGetPreviousMode
ZwEnumerateValueKey
ZwSetValueKey
RtlCompareMemory
RtlIntegerToUnicodeString
RtlAppendUnicodeStringToString
ZwCreateKey
RtlAppendUnicodeToString
RtlCopyUnicodeString
ExQueueWorkItem
swprintf
wcslen
ExReleaseFastMutexUnsafe
ExAcquireFastMutexUnsafe
IoSetDeviceInterfaceState
InterlockedExchange
KeSetTimer
IoInvalidateDeviceRelations
ExAllocatePoolWithQuotaTag
ProbeForWrite
IoGetDeviceProperty
DbgPrint
ZwEnumerateKey
ZwQueryKey
IoRegisterDeviceInterface
RtlGUIDFromString
_wcsicmp
IoDeleteDevice
IoCreateDevice
ZwDeleteKey
IoDetachDevice
IoAttachDeviceToDeviceStack
KeSetEvent
KeInitializeTimer
_wcsnicmp
KeCancelTimer
KeSetTimerEx
ExInterlockedCompareExchange64
KefReleaseSpinLockFromDpcLevel
KefAcquireSpinLockAtDpcLevel
KeQueryTimeIncrement
KeInitializeTimerEx
KeReleaseMutex
KeSynchronizeExecution
ObfDereferenceObject
KeRemoveQueueDpc
InterlockedCompareExchange
KeReleaseSemaphore
KeInsertQueueDpc
ExEventObjectType
ObReferenceObjectByHandle
ExSemaphoreObjectType
KeBugCheckEx
PoCallDriver
PoStartNextPowerIrp
KeGetCurrentThread
RtlCompareUnicodeString
IoCreateFile
MmMapLockedPages
KeClearEvent
ExRaiseStatus
IoFreeMdl
MmUnlockPages
MmProbeAndLockPages
IoAllocateMdl
IoReleaseCancelSpinLock
IoAcquireCancelSpinLock
ExfInterlockedRemoveHeadList
ExfInterlockedInsertTailList
KeInitializeMutex
IoFileObjectType
IoGetDeviceInterfaces
IoAllocateDriverObjectExtension
IoGetDriverObjectExtension
IoOpenDeviceRegistryKey
IoFreeIrp
IoAllocateIrp
_snwprintf
IoIsWdmVersionAvailable
PoRequestPowerIrp
PoSetPowerState
IoOpenDeviceInterfaceRegistryKey
memmove
KeResetEvent
KeQuerySystemTime
_except_handler3
KeTickCount
KeWaitForSingleObject
IofCompleteRequest
InterlockedIncrement
InterlockedDecrement
ExFreePool
ExAllocatePoolWithTag
ExInterlockedPushEntrySList
KeInitializeDpc
ExInterlockedPopEntrySList

hal

KfLowerIrql
KeGetCurrentIrql
ExAcquireFastMutex
ExReleaseFastMutex
KfAcquireSpinLock
KfReleaseSpinLock
KeQueryPerformanceCounter
KfRaiseIrql

Exports

Exports

??0CBaseUnknown@@QAE@ABU_GUID@@PAUIUnknown@@@Z
??0CBaseUnknown@@QAE@PAUIUnknown@@@Z
??1CBaseUnknown@@UAE@XZ
??_FCBaseUnknown@@QAEXXZ
?IndirectedAddRef@CBaseUnknown@@UAGKXZ
?IndirectedQueryInterface@CBaseUnknown@@UAGJABU_GUID@@PAPAX@Z
?IndirectedRelease@CBaseUnknown@@UAGKXZ
?NonDelegatedAddRef@CBaseUnknown@@UAGKXZ
?NonDelegatedQueryInterface@CBaseUnknown@@UAGJABU_GUID@@PAPAX@Z
?NonDelegatedRelease@CBaseUnknown@@UAGKXZ
DllInitialize
KoCreateInstance
KoDeviceInitialize
KoDriverInitialize
KoRelease
KsAcquireControl
KsAcquireDevice
KsAcquireDeviceSecurityLock
KsAcquireResetValue
KsAddDevice
KsAddEvent
KsAddIrpToCancelableQueue
KsAddItemToObjectBag
KsAddObjectCreateItemToDeviceHeader
KsAddObjectCreateItemToObjectHeader
KsAllocateDefaultClock
KsAllocateDefaultClockEx
KsAllocateDeviceHeader
KsAllocateExtraData
KsAllocateObjectBag
KsAllocateObjectCreateItem
KsAllocateObjectHeader
KsCacheMedium
KsCancelIo
KsCancelRoutine
KsCompletePendingRequest
KsCopyObjectBagItems
KsCreateAllocator
KsCreateBusEnumObject
KsCreateClock
KsCreateDefaultAllocator
KsCreateDefaultAllocatorEx
KsCreateDefaultClock
KsCreateDefaultSecurity
KsCreateDevice
KsCreateFilterFactory
KsCreatePin
KsCreateTopologyNode
KsDecrementCountedWorker
KsDefaultAddEventHandler
KsDefaultDeviceIoCompletion
KsDefaultDispatchPnp
KsDefaultDispatchPower
KsDefaultForwardIrp
KsDereferenceBusObject
KsDereferenceSoftwareBusObject
KsDeviceGetBusData
KsDeviceRegisterAdapterObject
KsDeviceSetBusData
KsDisableEvent
KsDiscardEvent
KsDispatchFastIoDeviceControlFailure
KsDispatchFastReadFailure
KsDispatchInvalidDeviceRequest
KsDispatchIrp
KsDispatchQuerySecurity
KsDispatchSetSecurity
KsDispatchSpecificMethod
KsDispatchSpecificProperty
KsEnableEvent
KsEnableEventWithAllocator
KsFastMethodHandler
KsFastPropertyHandler
KsFilterAcquireProcessingMutex
KsFilterAddTopologyConnections
KsFilterAttemptProcessing
KsFilterCreateNode
KsFilterCreatePinFactory
KsFilterFactoryAddCreateItem
KsFilterFactoryGetSymbolicLink
KsFilterFactorySetDeviceClassesState
KsFilterFactoryUpdateCacheData
KsFilterGetAndGate
KsFilterGetChildPinCount
KsFilterGetFirstChildPin
KsFilterRegisterPowerCallbacks
KsFilterReleaseProcessingMutex
KsForwardAndCatchIrp
KsForwardIrp
KsFreeDefaultClock
KsFreeDeviceHeader
KsFreeEventList
KsFreeObjectBag
KsFreeObjectCreateItem
KsFreeObjectCreateItemsByContext
KsFreeObjectHeader
KsGenerateDataEvent
KsGenerateEvent
KsGenerateEventList
KsGenerateEvents
KsGetBusEnumIdentifier
KsGetBusEnumParentFDOFromChildPDO
KsGetBusEnumPnpDeviceObject
KsGetDefaultClockState
KsGetDefaultClockTime
KsGetDevice
KsGetDeviceForDeviceObject
KsGetFilterFromIrp
KsGetFirstChild
KsGetNextSibling
KsGetNodeIdFromIrp
KsGetObjectFromFileObject
KsGetObjectTypeFromFileObject
KsGetObjectTypeFromIrp
KsGetOuterUnknown
KsGetParent
KsGetPinFromIrp
KsHandleSizedListQuery
KsIncrementCountedWorker
KsInitializeDevice
KsInitializeDriver
KsInstallBusEnumInterface
KsIsBusEnumChildDevice
KsMergeAutomationTables
KsMethodHandler
KsMethodHandlerWithAllocator
KsMoveIrpsOnCancelableQueue
KsNullDriverUnload
KsPinAcquireProcessingMutex
KsPinAttachAndGate
KsPinAttachOrGate
KsPinAttemptProcessing
KsPinDataIntersection
KsPinGetAndGate
KsPinGetAvailableByteCount
KsPinGetConnectedFilterInterface
KsPinGetConnectedPinDeviceObject
KsPinGetConnectedPinFileObject
KsPinGetConnectedPinInterface
KsPinGetCopyRelationships
KsPinGetFirstCloneStreamPointer
KsPinGetLeadingEdgeStreamPointer
KsPinGetNextSiblingPin
KsPinGetParentFilter
KsPinGetReferenceClockInterface
KsPinGetTrailingEdgeStreamPointer
KsPinPropertyHandler
KsPinRegisterFrameReturnCallback
KsPinRegisterHandshakeCallback
KsPinRegisterIrpCompletionCallback
KsPinRegisterPowerCallbacks
KsPinReleaseProcessingMutex
KsPinSetPinClockTime
KsPinSubmitFrame
KsPinSubmitFrameMdl
KsProbeStreamIrp
KsProcessPinUpdate
KsPropertyHandler
KsPropertyHandlerWithAllocator
KsQueryDevicePnpObject
KsQueryInformationFile
KsQueryObjectAccessMask
KsQueryObjectCreateItem
KsQueueWorkItem
KsReadFile
KsRecalculateStackDepth
KsReferenceBusObject
KsReferenceSoftwareBusObject
KsRegisterAggregatedClientUnknown
KsRegisterCountedWorker
KsRegisterFilterWithNoKSPins
KsRegisterWorker
KsReleaseControl
KsReleaseDevice
KsReleaseDeviceSecurityLock
KsReleaseIrpOnCancelableQueue
KsRemoveBusEnumInterface
KsRemoveIrpFromCancelableQueue
KsRemoveItemFromObjectBag
KsRemoveSpecificIrpFromCancelableQueue
KsServiceBusEnumCreateRequest
KsServiceBusEnumPnpRequest
KsSetDefaultClockState
KsSetDefaultClockTime
KsSetDevicePnpAndBaseObject
KsSetInformationFile
KsSetMajorFunctionHandler
KsSetPowerDispatch
KsSetTargetDeviceObject
KsSetTargetState
KsStreamIo
KsStreamPointerAdvance
KsStreamPointerAdvanceOffsets
KsStreamPointerAdvanceOffsetsAndUnlock
KsStreamPointerCancelTimeout
KsStreamPointerClone
KsStreamPointerDelete
KsStreamPointerGetIrp
KsStreamPointerGetMdl
KsStreamPointerGetNextClone
KsStreamPointerLock
KsStreamPointerScheduleTimeout
KsStreamPointerSetStatusCode
KsStreamPointerUnlock
KsSynchronousIoControlDevice
KsTerminateDevice
KsTopologyPropertyHandler
KsUnregisterWorker
KsUnserializeObjectPropertiesFromRegistry
KsValidateAllocatorCreateRequest
KsValidateAllocatorFramingEx
KsValidateClockCreateRequest
KsValidateConnectRequest
KsValidateTopologyNodeCreateRequest
KsWriteFile
KsiDefaultClockAddMarkEvent
KsiPropertyDefaultClockGetCorrelatedPhysicalTime
KsiPropertyDefaultClockGetCorrelatedTime
KsiPropertyDefaultClockGetFunctionTable
KsiPropertyDefaultClockGetPhysicalTime
KsiPropertyDefaultClockGetResolution
KsiPropertyDefaultClockGetState
KsiPropertyDefaultClockGetTime
KsiQueryObjectCreateItemsPresent
_KsEdit

Sections

.text
Size: 27KB - Virtual size: 27KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 128B - Virtual size: 64B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

PAGE
Size: 75KB - Virtual size: 75KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.edata
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

INIT
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
kscaptur.inf
ksfilt98.inf
ksfilter.inf
ksolay.ax
.dll regsvr32 windows:5 windows x86 arch:x86

96a838db2ca9c5febf5b77f383b5f7ab

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetCurrentProcess
TerminateProcess
GetModuleHandleA
GetProcAddress
DisableThreadLibraryCalls
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
GetModuleFileNameA
lstrlenA
InterlockedDecrement
FreeLibrary
InterlockedIncrement
GetVersionExA
QueryPerformanceCounter
GetLastError
MultiByteToWideChar

ksproxy.ax

KsSynchronousDeviceControl

msvcrt

??3@YAXPAX@Z
??2@YAPAXI@Z

advapi32

RegSetValueA
RegCloseKey
RegEnumKeyExA
RegCreateKeyA
RegDeleteKeyA
RegSetValueExA
RegOpenKeyExA

user32

DefWindowProcA
ShowCursor
EndPaint
ReleaseDC
GetDC
GetClientRect
UnregisterClassA
BeginPaint
wsprintfA
GetMonitorInfoA
EnumDisplaySettingsA
EnumDisplayDevicesA
SendMessageA
DestroyWindow
RegisterClassExA
CreateWindowExA

gdi32

SetBkColor
ExtTextOutA

ole32

CoCreateInstance
CoInitialize
StringFromGUID2
CoUninitialize
CoFreeUnusedLibraries

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 232B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
ksproxy.ax
.dll regsvr32 windows:5 windows x86 arch:x86

8a9244974f0e29124f9a788299082510

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

msvcrt

??3@YAXPAX@Z
wcslen
_CIpow
swscanf
swprintf
_ftol
sprintf
_purecall
_except_handler3
??2@YAPAXI@Z
memmove
wcscpy

kernel32

GetACP
InterlockedCompareExchange
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
SetEvent
GetLastError
CreateEventA
CloseHandle
WaitForMultipleObjectsEx
WaitForSingleObjectEx
CreateThread
CreateFileA
WideCharToMultiByte
ReleaseSemaphore
InterlockedExchange
CreateSemaphoreA
InterlockedDecrement
DeviceIoControl
InterlockedIncrement
ResetEvent
GetOverlappedResult
MultiByteToWideChar
CreateMutexA
ReleaseMutex
GetHandleInformation
GetVersionExA
DisableThreadLibraryCalls
FreeLibrary
LoadLibraryA
lstrlenA
GetModuleFileNameA
WaitForMultipleObjects
WaitForSingleObject
GetSystemInfo
VirtualFree
VirtualAlloc
GetProcAddress
ResumeThread
SetThreadPriority

advapi32

RegEnumKeyExA
RegQueryValueExA
RegCreateKeyA
RegSetValueA
RegSetValueExA
RegCloseKey
RegDeleteKeyA
RegOpenKeyExA
RegEnumKeyA

user32

wsprintfA
wvsprintfA

ole32

CoUninitialize
IIDFromString
CoCreateInstance
CoTaskMemAlloc
CoFreeUnusedLibraries
CoInitialize
CoTaskMemFree
StringFromGUID2

oleaut32

SysFreeString

setupapi

SetupDiOpenDeviceInterfaceA
SetupDiGetDeviceInterfaceDetailA
SetupDiGetDeviceInterfaceAlias
SetupDiDestroyDeviceInfoList
SetupDiEnumDeviceInterfaces
SetupDiOpenDeviceInterfaceRegKey
SetupDiCreateDeviceInfoListExA
SetupDiGetClassDevsA

ksuser

KsCreatePin
KsCreateTopologyNode
KsCreateAllocator
KsCreateClock

ntdll

RtlNtStatusToDosError

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
KsGetMediaType
KsGetMediaTypeCount
KsGetMultiplePinFactoryItems
KsOpenDefaultDevice
KsResolveRequiredAttributes
KsSynchronousDeviceControl

Sections

.text
Size: 106KB - Virtual size: 106KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 364B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
ksse.sys
.dll windows:5 windows x86 arch:x86

21a59e474a5dc891708dc0b0ea65fe46

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

ks.pdb

Imports

ntoskrnl.exe

KeInitializeEvent
ExDeleteNPagedLookasideList
ExInitializeNPagedLookasideList
ExDeletePagedLookasideList
ExFreeToPagedLookasideList
ExAllocateFromPagedLookasideList
ExInitializePagedLookasideList
KeInitializeSpinLock
ProbeForRead
IofCallDriver
IoBuildSynchronousFsdRequest
ZwClose
ZwQueryValueKey
ZwOpenKey
RtlInitUnicodeString
RtlFreeUnicodeString
wcscat
wcscpy
RtlStringFromGUID
IoGetRelatedDeviceObject
ObfReferenceObject
IoBuildDeviceIoControlRequest
ExGetPreviousMode
ZwEnumerateValueKey
ZwSetValueKey
RtlCompareMemory
RtlIntegerToUnicodeString
RtlAppendUnicodeStringToString
ZwCreateKey
RtlAppendUnicodeToString
RtlCopyUnicodeString
ExQueueWorkItem
swprintf
wcslen
ExReleaseFastMutexUnsafe
ExAcquireFastMutexUnsafe
IoSetDeviceInterfaceState
InterlockedExchange
KeSetTimer
IoInvalidateDeviceRelations
ExAllocatePoolWithQuotaTag
ProbeForWrite
IoGetDeviceProperty
DbgBreakPoint
DbgPrint
ZwEnumerateKey
ZwQueryKey
IoRegisterDeviceInterface
RtlGUIDFromString
_wcsicmp
IoDeleteDevice
IoCreateDevice
ZwDeleteKey
IoDetachDevice
IoAttachDeviceToDeviceStack
KeInitializeDpc
KeSetEvent
_wcsnicmp
KeCancelTimer
KeSetTimerEx
ExInterlockedCompareExchange64
KefReleaseSpinLockFromDpcLevel
KefAcquireSpinLockAtDpcLevel
KeQueryTimeIncrement
KeInitializeTimerEx
KeReleaseMutex
KeSynchronizeExecution
ObfDereferenceObject
KeRemoveQueueDpc
InterlockedCompareExchange
KeReleaseSemaphore
KeInsertQueueDpc
ExEventObjectType
ObReferenceObjectByHandle
ExSemaphoreObjectType
KeBugCheckEx
PoCallDriver
PoStartNextPowerIrp
KeGetCurrentThread
RtlCompareUnicodeString
IoCreateFile
MmMapLockedPages
KeClearEvent
ExRaiseStatus
IoFreeMdl
MmUnlockPages
MmProbeAndLockPages
IoAllocateMdl
IoReleaseCancelSpinLock
IoAcquireCancelSpinLock
ExfInterlockedRemoveHeadList
ExfInterlockedInsertTailList
KeInitializeMutex
IoFileObjectType
IoGetDeviceInterfaces
IoAllocateDriverObjectExtension
IoGetDriverObjectExtension
IoOpenDeviceRegistryKey
IoFreeIrp
IoAllocateIrp
_snwprintf
PoUnregisterSystemState
PoRegisterSystemState
IoIsWdmVersionAvailable
PoRequestPowerIrp
PoSetPowerState
IoOpenDeviceInterfaceRegistryKey
memmove
KeResetEvent
KeQuerySystemTime
_except_handler3
KeTickCount
KeWaitForSingleObject
IofCompleteRequest
InterlockedIncrement
InterlockedDecrement
ExFreePool
ExAllocatePoolWithTag
ExInterlockedPushEntrySList
KeInitializeTimer
ExInterlockedPopEntrySList

hal

KfLowerIrql
KeGetCurrentIrql
ExAcquireFastMutex
ExReleaseFastMutex
KfAcquireSpinLock
KfReleaseSpinLock
KeQueryPerformanceCounter
KfRaiseIrql

Exports

Exports

??0CBaseUnknown@@QAE@ABU_GUID@@PAUIUnknown@@@Z
??0CBaseUnknown@@QAE@PAUIUnknown@@@Z
??1CBaseUnknown@@UAE@XZ
??_FCBaseUnknown@@QAEXXZ
?IndirectedAddRef@CBaseUnknown@@UAGKXZ
?IndirectedQueryInterface@CBaseUnknown@@UAGJABU_GUID@@PAPAX@Z
?IndirectedRelease@CBaseUnknown@@UAGKXZ
?NonDelegatedAddRef@CBaseUnknown@@UAGKXZ
?NonDelegatedQueryInterface@CBaseUnknown@@UAGJABU_GUID@@PAPAX@Z
?NonDelegatedRelease@CBaseUnknown@@UAGKXZ
DllInitialize
KoCreateInstance
KoDeviceInitialize
KoDriverInitialize
KoRelease
KsAcquireControl
KsAcquireDevice
KsAcquireDeviceSecurityLock
KsAcquireResetValue
KsAddDevice
KsAddEvent
KsAddIrpToCancelableQueue
KsAddItemToObjectBag
KsAddObjectCreateItemToDeviceHeader
KsAddObjectCreateItemToObjectHeader
KsAllocateDefaultClock
KsAllocateDefaultClockEx
KsAllocateDeviceHeader
KsAllocateExtraData
KsAllocateObjectBag
KsAllocateObjectCreateItem
KsAllocateObjectHeader
KsCacheMedium
KsCancelIo
KsCancelRoutine
KsCompletePendingRequest
KsCopyObjectBagItems
KsCreateAllocator
KsCreateBusEnumObject
KsCreateClock
KsCreateDefaultAllocator
KsCreateDefaultAllocatorEx
KsCreateDefaultClock
KsCreateDefaultSecurity
KsCreateDevice
KsCreateFilterFactory
KsCreatePin
KsCreateTopologyNode
KsDecrementCountedWorker
KsDefaultAddEventHandler
KsDefaultDeviceIoCompletion
KsDefaultDispatchPnp
KsDefaultDispatchPower
KsDefaultForwardIrp
KsDereferenceBusObject
KsDereferenceSoftwareBusObject
KsDeviceGetBusData
KsDeviceRegisterAdapterObject
KsDeviceSetBusData
KsDisableEvent
KsDiscardEvent
KsDispatchFastIoDeviceControlFailure
KsDispatchFastReadFailure
KsDispatchInvalidDeviceRequest
KsDispatchIrp
KsDispatchQuerySecurity
KsDispatchSetSecurity
KsDispatchSpecificMethod
KsDispatchSpecificProperty
KsEnableEvent
KsEnableEventWithAllocator
KsFastMethodHandler
KsFastPropertyHandler
KsFilterAcquireProcessingMutex
KsFilterAddTopologyConnections
KsFilterAttemptProcessing
KsFilterCreateNode
KsFilterCreatePinFactory
KsFilterFactoryAddCreateItem
KsFilterFactoryGetSymbolicLink
KsFilterFactorySetDeviceClassesState
KsFilterFactoryUpdateCacheData
KsFilterGetAndGate
KsFilterGetChildPinCount
KsFilterGetFirstChildPin
KsFilterRegisterPowerCallbacks
KsFilterReleaseProcessingMutex
KsForwardAndCatchIrp
KsForwardIrp
KsFreeDefaultClock
KsFreeDeviceHeader
KsFreeEventList
KsFreeObjectBag
KsFreeObjectCreateItem
KsFreeObjectCreateItemsByContext
KsFreeObjectHeader
KsGenerateDataEvent
KsGenerateEvent
KsGenerateEventList
KsGenerateEvents
KsGetBusEnumIdentifier
KsGetBusEnumParentFDOFromChildPDO
KsGetBusEnumPnpDeviceObject
KsGetDefaultClockState
KsGetDefaultClockTime
KsGetDevice
KsGetDeviceForDeviceObject
KsGetFilterFromIrp
KsGetFirstChild
KsGetNextSibling
KsGetNodeIdFromIrp
KsGetObjectFromFileObject
KsGetObjectTypeFromFileObject
KsGetObjectTypeFromIrp
KsGetOuterUnknown
KsGetParent
KsGetPinFromIrp
KsHandleSizedListQuery
KsIncrementCountedWorker
KsInitializeDevice
KsInitializeDriver
KsInstallBusEnumInterface
KsIsBusEnumChildDevice
KsMergeAutomationTables
KsMethodHandler
KsMethodHandlerWithAllocator
KsMoveIrpsOnCancelableQueue
KsNullDriverUnload
KsPinAcquireProcessingMutex
KsPinAttachAndGate
KsPinAttachOrGate
KsPinAttemptProcessing
KsPinDataIntersection
KsPinGetAndGate
KsPinGetAvailableByteCount
KsPinGetConnectedFilterInterface
KsPinGetConnectedPinDeviceObject
KsPinGetConnectedPinFileObject
KsPinGetConnectedPinInterface
KsPinGetCopyRelationships
KsPinGetFirstCloneStreamPointer
KsPinGetLeadingEdgeStreamPointer
KsPinGetNextSiblingPin
KsPinGetParentFilter
KsPinGetReferenceClockInterface
KsPinGetTrailingEdgeStreamPointer
KsPinPropertyHandler
KsPinRegisterFrameReturnCallback
KsPinRegisterHandshakeCallback
KsPinRegisterIrpCompletionCallback
KsPinRegisterPowerCallbacks
KsPinReleaseProcessingMutex
KsPinSetPinClockTime
KsPinSubmitFrame
KsPinSubmitFrameMdl
KsProbeStreamIrp
KsProcessPinUpdate
KsPropertyHandler
KsPropertyHandlerWithAllocator
KsQueryDevicePnpObject
KsQueryInformationFile
KsQueryObjectAccessMask
KsQueryObjectCreateItem
KsQueueWorkItem
KsReadFile
KsRecalculateStackDepth
KsReferenceBusObject
KsReferenceSoftwareBusObject
KsRegisterAggregatedClientUnknown
KsRegisterCountedWorker
KsRegisterFilterWithNoKSPins
KsRegisterWorker
KsReleaseControl
KsReleaseDevice
KsReleaseDeviceSecurityLock
KsReleaseIrpOnCancelableQueue
KsRemoveBusEnumInterface
KsRemoveIrpFromCancelableQueue
KsRemoveItemFromObjectBag
KsRemoveSpecificIrpFromCancelableQueue
KsServiceBusEnumCreateRequest
KsServiceBusEnumPnpRequest
KsSetDefaultClockState
KsSetDefaultClockTime
KsSetDevicePnpAndBaseObject
KsSetInformationFile
KsSetMajorFunctionHandler
KsSetPowerDispatch
KsSetTargetDeviceObject
KsSetTargetState
KsStreamIo
KsStreamPointerAdvance
KsStreamPointerAdvanceOffsets
KsStreamPointerAdvanceOffsetsAndUnlock
KsStreamPointerCancelTimeout
KsStreamPointerClone
KsStreamPointerDelete
KsStreamPointerGetIrp
KsStreamPointerGetMdl
KsStreamPointerGetNextClone
KsStreamPointerLock
KsStreamPointerScheduleTimeout
KsStreamPointerSetStatusCode
KsStreamPointerUnlock
KsSynchronousIoControlDevice
KsTerminateDevice
KsTopologyPropertyHandler
KsUnregisterWorker
KsUnserializeObjectPropertiesFromRegistry
KsValidateAllocatorCreateRequest
KsValidateAllocatorFramingEx
KsValidateClockCreateRequest
KsValidateConnectRequest
KsValidateTopologyNodeCreateRequest
KsWriteFile
KsiDefaultClockAddMarkEvent
KsiPropertyDefaultClockGetCorrelatedPhysicalTime
KsiPropertyDefaultClockGetCorrelatedTime
KsiPropertyDefaultClockGetFunctionTable
KsiPropertyDefaultClockGetPhysicalTime
KsiPropertyDefaultClockGetResolution
KsiPropertyDefaultClockGetState
KsiPropertyDefaultClockGetTime
KsiQueryObjectCreateItemsPresent
_KsEdit

Sections

.text
Size: 27KB - Virtual size: 27KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 128B - Virtual size: 64B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

PAGE
Size: 75KB - Virtual size: 75KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.edata
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

INIT
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
kssetup.inf
ksuser.dll
.dll windows:5 windows x86 arch:x86

407f14f3ab3229ce994109fc31901c00

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

HeapAlloc
GetProcessHeap
HeapFree

ntdll

NtCreateFile
RtlNtStatusToDosError

Exports

Exports

KsCreateAllocator
KsCreateClock
KsCreatePin
KsCreateTopologyNode

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 1008B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 50B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
l3codecx.ax
.dll regsvr32 windows:4 windows x86 arch:x86

d7e8a0cc68dc418d56e7942bed824e2d

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

msvcrt

_CIpow
??2@YAPAXI@Z
??3@YAXPAX@Z
_purecall

kernel32

InitializeCriticalSection
DeleteCriticalSection
DisableThreadLibraryCalls
GetVersionExA
FreeLibrary
InterlockedDecrement
GetLastError
MulDiv
EnterCriticalSection
LeaveCriticalSection
InterlockedIncrement
MultiByteToWideChar
lstrlenA
GetModuleFileNameA

advapi32

RegEnumKeyExA
RegSetValueA
RegSetValueExA
RegDeleteKeyA
RegCloseKey
RegCreateKeyA
RegOpenKeyExA

user32

SetDlgItemTextA
wsprintfA
GetSysColor
KillTimer
SetTimer
SetDlgItemInt
GetWindowLongA
SetWindowLongA
CreateDialogParamA
MoveWindow
InvalidateRect
DestroyWindow
DefWindowProcA
CheckRadioButton
LoadStringA
LoadStringW
GetWindowRect
GetDesktopWindow
GetDlgItem
ShowWindow
EnableWindow

gdi32

DeleteObject
SetTextColor
CreateSolidBrush
SetBkColor

ole32

CoCreateInstance
CoUninitialize
CoTaskMemAlloc
CoFreeUnusedLibraries
CoInitialize
CoTaskMemFree
StringFromGUID2

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 46KB - Virtual size: 45KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 24KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
license.txt
mciqtz.drv
mciqtz32.dll
.dll windows:5 windows x86 arch:x86

6f7fd37396bca471f8c746fbbf6b8d0b

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

LocalAlloc
GetProcAddress
MulDiv
MultiByteToWideChar
lstrlenA
GetModuleHandleA
LocalFree
TerminateProcess
GetCurrentProcess
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
CreateEventA
CreateThread
WaitForMultipleObjects
CloseHandle
SetEvent
WideCharToMultiByte
ResetEvent
DisableThreadLibraryCalls
WaitForSingleObject

user32

GetWindowLongA
GetSystemMetrics
SetWindowTextA
SetForegroundWindow
UnregisterClassA
DestroyWindow
WindowFromDC
EndPaint
BeginPaint
DefWindowProcA
SetWindowLongA
RegisterClassA
LoadCursorA
SetRectEmpty
PostMessageA
LoadStringW
InSendMessage
GetWindowTextA
PostQuitMessage
DispatchMessageA
TranslateMessage
GetMessageA
GetClientRect
CreateWindowExA
GetWindowRect
AdjustWindowRect
IsWindow
IsIconic
IsZoomed
ShowWindow
IsWindowVisible
SetWindowPos
SendMessageA
ScreenToClient

winmm

mciFreeCommandResource
GetDriverModuleHandle
DefDriverProc
mciGetDriverData
mciLoadCommandResource
mciSetDriverData
mciDriverYield

ole32

CoInitialize
CoUninitialize
CoTaskMemFree
CoCreateInstance

gdi32

CreatePalette
GetObjectType
SetStretchBltMode
SelectPalette
RealizePalette
StretchDIBits
GetStockObject
DeleteObject

quartz

DBToAmpFactor
AmpFactorToDB

Exports

Exports

DriverProc
MCIEntry32

Sections

.text
Size: 18KB - Virtual size: 18KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 68B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 908B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
migrate.dll
.dll windows:5 windows x86 arch:x86

19a2836e5f2b2687a96991b9a3eb7c59

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_REMOVABLE_RUN_FROM_SWAP
IMAGE_FILE_DLL

PDB Paths

migrate.pdb

Imports

kernel32

lstrcpynA
GetWindowsDirectoryA
lstrcmpiA
DeleteFileA
lstrlenA
GetLastError
GetFileAttributesA
HeapFree
GetPrivateProfileSectionA
HeapReAlloc
HeapAlloc
HeapCreate
FindClose
FindNextFileA
WritePrivateProfileStringA
FindFirstFileA
GetSystemDirectoryA
MoveFileA
lstrcatA
lstrcpyA
HeapDestroy
DisableThreadLibraryCalls
GetModuleFileNameA
WideCharToMultiByte
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
RtlUnwind
VirtualQuery
GetSystemInfo
VirtualProtect
GetLocaleInfoA
InterlockedExchange
GetCommandLineA
GetVersionExA
ExitProcess
GetProcAddress
GetModuleHandleA
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
VirtualFree
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
WriteFile
CloseHandle
GetACP
GetOEMCP
GetCPInfo
VirtualAlloc
LoadLibraryA
SetStdHandle
FlushFileBuffers
SetFilePointer
LCMapStringA
MultiByteToWideChar
LCMapStringW
GetStringTypeA
GetStringTypeW

user32

LoadStringA

version

GetFileVersionInfoA
GetFileVersionInfoSizeA
VerQueryValueA

shell32

SHFileOperationA

Exports

Exports

Initialize9x
InitializeNT
MigrateSystem9x
MigrateSystemNT
MigrateUser9x
MigrateUserNT
QueryVersion

Sections

.text
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 32KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
mpg2splt.ax
.dll regsvr32 windows:5 windows x86 arch:x86

7506cadb3101234ca71464cd166661ff

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

HeapAlloc
HeapReAlloc
HeapFree
GetProcessHeap
CreateFileMappingA
MapViewOfFile
UnmapViewOfFile
MulDiv
CreateThread
SetThreadPriority
InterlockedExchange
GetACP
WideCharToMultiByte
VirtualAlloc
CreateSemaphoreA
VirtualFree
GetSystemInfo
ReleaseSemaphore
WaitForSingleObject
WaitForMultipleObjects
GetCurrentProcess
TerminateProcess
GetModuleHandleA
GetProcAddress
DisableThreadLibraryCalls
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
ResetEvent
SetEvent
CreateEventA
CloseHandle
LeaveCriticalSection
EnterCriticalSection
QueryPerformanceFrequency
DeleteCriticalSection
InitializeCriticalSection
InterlockedDecrement
FreeLibrary
InterlockedIncrement
GetModuleFileNameA
GetLastError
MultiByteToWideChar
GetVersionExA
lstrlenA

msvcrt

free
??2@YAPAXI@Z
_purecall
wcscpy
wcslen
_wcsicmp
_except_handler3
_itow
malloc
??3@YAXPAX@Z
_ftol
qsort
memmove

user32

wvsprintfA
wsprintfA

advapi32

RegCreateKeyExA
RegQueryValueExA
RegCreateKeyA
RegSetValueA
RegSetValueExA
RegOpenKeyExA
RegEnumKeyExA
RegCloseKey
RegDeleteKeyA

ole32

CoTaskMemAlloc
CoInitialize
CoCreateInstance
CoFreeUnusedLibraries
CoUninitialize
StringFromGUID2
CoTaskMemFree

winmm

timeBeginPeriod
timeGetDevCaps
timeGetTime

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 122KB - Virtual size: 121KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
msanalog.vxd
msdmo.dll
.dll windows:5 windows x86 arch:x86

9dc9c166118bb224232425dd36ebb31e

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetModuleHandleA
TerminateProcess
GetProcAddress
DisableThreadLibraryCalls
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
InterlockedDecrement
InterlockedIncrement
MultiByteToWideChar
Sleep
lstrlenA
GetCurrentProcess
WideCharToMultiByte

msvcrt

??3@YAXPAX@Z
??2@YAPAXI@Z
_adjust_fdiv
_initterm
swprintf
sprintf
wcslen
wcscpy
realloc
free
malloc
sscanf

ole32

CoTaskMemFree
CoTaskMemAlloc
CoTaskMemRealloc

advapi32

RegDeleteKeyA
RegEnumKeyA
RegQueryInfoKeyA
RegOpenKeyA
RegCreateKeyExA
RegOpenKeyExA
RegQueryValueExA
RegSetValueExA
RegSetValueA
RegQueryValueA
RegCloseKey

user32

wsprintfA

Exports

Exports

DMOEnum
DMOGetName
DMOGetTypes
DMOGuidToStrA
DMOGuidToStrW
DMORegister
DMOStrToGuidA
DMOStrToGuidW
DMOUnregister
MoCopyMediaType
MoCreateMediaType
MoDeleteMediaType
MoDuplicateMediaType
MoFreeMediaType
MoInitMediaType

Sections

.text
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 52B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 904B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 568B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
msjstick.drv
mskssrv.sys
.sys windows:5 windows x86 arch:x86

ae7af65c91def368b78cf6daaa295831

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_WDM_DRIVER

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

mskssrv.pdb

Imports

ntoskrnl.exe

IoDeleteDevice
IoAttachDeviceToDeviceStack
IoCreateDevice
ExFreePool
ExAllocatePoolWithTag
memmove
RtlCompareMemory
ObfDereferenceObject
ZwSetValueKey
ZwClose
ObReferenceObjectByHandle
IoFileObjectType
IoCreateFile
ZwQueryValueKey
IoOpenDeviceInterfaceRegistryKey
RtlInitUnicodeString
IofCompleteRequest
KeTickCount
KeBugCheckEx

ks.sys

KsQueryDevicePnpObject
KsSetDevicePnpAndBaseObject
KsAllocateDeviceHeader
KsSynchronousIoControlDevice
KsCacheMedium
KsDereferenceSoftwareBusObject
KsAllocateObjectHeader
KsReferenceSoftwareBusObject
KsFreeObjectHeader
KsPropertyHandler
KsNullDriverUnload
KsSetMajorFunctionHandler
KsDefaultForwardIrp
KsDefaultDispatchPower
KsDefaultDispatchPnp

Sections

.text
Size: 384B - Virtual size: 316B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 128B - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

PAGE
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

INIT
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 384B - Virtual size: 272B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
mspclock.98
.sys windows:5 windows x86 arch:x86

a38e3fcf8a1b447f8cb1c7fe185f87bf

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_WDM_DRIVER

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

mspclock.pdb

Imports

ntoskrnl.exe

IoDeleteDevice
IoAttachDeviceToDeviceStack
IoCreateDevice
ExReleaseFastMutexUnsafe
ExAcquireFastMutexUnsafe
IofCompleteRequest
ExFreePool
KeInitializeEvent
ExAllocatePoolWithTag
KeTickCount

ks.sys

KsiDefaultClockAddMarkEvent
KsiPropertyDefaultClockGetFunctionTable
KsiPropertyDefaultClockGetState
KsiPropertyDefaultClockGetResolution
KsiPropertyDefaultClockGetCorrelatedPhysicalTime
KsiPropertyDefaultClockGetCorrelatedTime
KsiPropertyDefaultClockGetPhysicalTime
KsiPropertyDefaultClockGetTime
KsSetDevicePnpAndBaseObject
KsAllocateDeviceHeader
KsSetDefaultClockTime
KsSetDefaultClockState
KsDereferenceSoftwareBusObject
KsAllocateObjectHeader
KsAllocateDefaultClock
KsReferenceSoftwareBusObject
KsFreeObjectHeader
KsFreeDefaultClock
KsFreeEventList
KsPropertyHandler
KsEnableEvent
KsDisableEvent
KsNullDriverUnload
KsSetMajorFunctionHandler
KsDefaultForwardIrp
KsDefaultDispatchPower
KsDefaultDispatchPnp

Sections

.text
Size: 128B - Virtual size: 48B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 128B - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

PAGE
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

INIT
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 1016B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 256B - Virtual size: 220B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
mspclock.se
.sys windows:5 windows x86 arch:x86

80ceafa87487c2a1e5e0a913df0055d1

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_WDM_DRIVER

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

mspclock.pdb

Imports

ntoskrnl.exe

IoDeleteDevice
IoAttachDeviceToDeviceStack
IoCreateDevice
KeLeaveCriticalRegion
ExReleaseFastMutexUnsafe
ExAcquireFastMutexUnsafe
KeEnterCriticalRegion
IofCompleteRequest
ExFreePool
KeInitializeEvent
ExAllocatePoolWithTag
KeTickCount

ks.sys

KsiDefaultClockAddMarkEvent
KsiPropertyDefaultClockGetFunctionTable
KsiPropertyDefaultClockGetState
KsiPropertyDefaultClockGetResolution
KsiPropertyDefaultClockGetCorrelatedPhysicalTime
KsiPropertyDefaultClockGetCorrelatedTime
KsiPropertyDefaultClockGetPhysicalTime
KsiPropertyDefaultClockGetTime
KsSetDevicePnpAndBaseObject
KsAllocateDeviceHeader
KsSetDefaultClockTime
KsSetDefaultClockState
KsDereferenceSoftwareBusObject
KsAllocateObjectHeader
KsAllocateDefaultClock
KsReferenceSoftwareBusObject
KsFreeObjectHeader
KsFreeDefaultClock
KsFreeEventList
KsPropertyHandler
KsEnableEvent
KsDisableEvent
KsNullDriverUnload
KsSetMajorFunctionHandler
KsDefaultForwardIrp
KsDefaultDispatchPower
KsDefaultDispatchPnp

Sections

.text
Size: 128B - Virtual size: 48B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 128B - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

PAGE
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

INIT
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 1016B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 256B - Virtual size: 232B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
mspclock.sys
.sys windows:5 windows x86 arch:x86

80ceafa87487c2a1e5e0a913df0055d1

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_WDM_DRIVER

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

mspclock.pdb

Imports

ntoskrnl.exe

IoDeleteDevice
IoAttachDeviceToDeviceStack
IoCreateDevice
KeLeaveCriticalRegion
ExReleaseFastMutexUnsafe
ExAcquireFastMutexUnsafe
KeEnterCriticalRegion
IofCompleteRequest
ExFreePool
KeInitializeEvent
ExAllocatePoolWithTag
KeTickCount

ks.sys

KsiDefaultClockAddMarkEvent
KsiPropertyDefaultClockGetFunctionTable
KsiPropertyDefaultClockGetState
KsiPropertyDefaultClockGetResolution
KsiPropertyDefaultClockGetCorrelatedPhysicalTime
KsiPropertyDefaultClockGetCorrelatedTime
KsiPropertyDefaultClockGetPhysicalTime
KsiPropertyDefaultClockGetTime
KsSetDevicePnpAndBaseObject
KsAllocateDeviceHeader
KsSetDefaultClockTime
KsSetDefaultClockState
KsDereferenceSoftwareBusObject
KsAllocateObjectHeader
KsAllocateDefaultClock
KsReferenceSoftwareBusObject
KsFreeObjectHeader
KsFreeDefaultClock
KsFreeEventList
KsPropertyHandler
KsEnableEvent
KsDisableEvent
KsNullDriverUnload
KsSetMajorFunctionHandler
KsDefaultForwardIrp
KsDefaultDispatchPower
KsDefaultDispatchPnp

Sections

.text
Size: 128B - Virtual size: 48B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 128B - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

PAGE
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

INIT
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 1016B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 256B - Virtual size: 232B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
mstee.sys
.sys windows:5 windows x86 arch:x86

ba17250f7c9c0536bc777562ff599d7c

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_WDM_DRIVER

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

mstee.pdb

Imports

ntoskrnl.exe

ExAllocatePoolWithTag
RtlCompareMemory
KeTickCount
ExFreePool

ks.sys

KsInitializeDriver
KsFilterGetFirstChildPin
_KsEdit
KsPinGetConnectedPinInterface
KsPinGetNextSiblingPin
KsPinGetParentFilter
KsFilterGetChildPinCount

Sections

.rdata
Size: 256B - Virtual size: 184B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 128B - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

PAGE
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

INIT
Size: 512B - Virtual size: 420B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 256B - Virtual size: 190B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
mswebdvd.dll
.dll regsvr32 windows:5 windows x86 arch:x86

4d11507e5097e6d710ceb3f05f186072

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

QueryPerformanceCounter
GetCurrentProcessId
WaitForSingleObject
TerminateProcess
lstrcpynA
GetModuleHandleA
GetUserDefaultLangID
IsValidLocale
GetCurrentThreadId
GetShortPathNameA
CloseHandle
lstrcpyA
MultiByteToWideChar
lstrlenA
InterlockedDecrement
GetLocaleInfoA
LoadLibraryA
GetProcAddress
FreeLibrary
InterlockedIncrement
HeapAlloc
GetProcessHeap
HeapFree
GetCurrentProcess
LoadLibraryExA
GetLastError
FindResourceA
LoadResource
SizeofResource
DisableThreadLibraryCalls
GlobalAlloc
GlobalLock
GlobalUnlock
GetModuleFileNameA
lstrcatA
HeapDestroy
IsDBCSLeadByte
lstrcmpiA
DeleteCriticalSection
InitializeCriticalSection
CreateEventA
lstrlenW
EnterCriticalSection
LeaveCriticalSection
Sleep
GetVersionExA
GetSystemDirectoryA
SetEvent
ResetEvent
GetDriveTypeA
GetTickCount
FlushInstructionCache
WideCharToMultiByte
GetSystemTimeAsFileTime

msvcrt

_except_handler3
??1type_info@@UAE@XZ
?terminate@@YAXXZ
_vsnprintf
fwrite
fclose
_ui64tow
malloc
realloc
??3@YAXPAX@Z
??2@YAPAXI@Z
_CxxThrowException
wcslen
_ftol
__CxxFrameHandler
free
fopen
_purecall

gdi32

GetClipBox
GetDCOrgEx
CreateMetaFileA
SetWindowExtEx
CloseMetaFile
DeleteMetaFile
CreateDCA
LPtoDP
SaveDC
SetMapMode
SetWindowOrgEx
SetTextColor
DeleteDC
RestoreDC
CreateSolidBrush
SelectObject
Rectangle
DeleteObject
GetNearestColor
GetDeviceCaps
GetSystemPaletteEntries
CreateRectRgnIndirect
SetBkColor
SetViewportOrgEx

user32

SetTimer
CharNextA
GetDC
PtInRect
UnionRect
GetKeyState
DestroyAcceleratorTable
SetWindowLongA
CallWindowProcA
EndPaint
BeginPaint
IsChild
GetFocus
RegisterClassExA
wsprintfA
GetClassInfoExA
SetFocus
ShowWindow
GetParent
SystemParametersInfoA
SetRect
GetSystemMetrics
IsIconic
GetWindowRect
InvalidateRgn
RegisterClassA
GetClassInfoA
PostMessageA
IsWindowVisible
GetWindowDC
ReleaseDC
KillTimer
DestroyCursor
DestroyWindow
LoadStringA
InvalidateRect
ShowCursor
GetWindow
CreateWindowExA
GetClientRect
IsWindow
GetDesktopWindow
MapWindowPoints
ClipCursor
LoadCursorA
IntersectRect
EqualRect
DrawTextA
SetCursor
DefWindowProcA
GetWindowLongA
SendMessageA
SetWindowPos
SetWindowRgn
OffsetRect

advapi32

RegDeleteKeyA
CryptAcquireContextA
CryptGenRandom
CryptReleaseContext
CryptCreateHash
CryptDestroyHash
CryptHashData
CryptGetHashParam
RegCreateKeyA
RegQueryValueExA
RegEnumKeyExA
RegEnumValueA
RegQueryInfoKeyA
RegSetValueExA
RegOpenKeyExA
RegCreateKeyExA
RegCloseKey
RegDeleteValueA

ole32

CoTaskMemFree
CoCreateInstance
CoTaskMemAlloc
CoTaskMemRealloc
OleRegEnumVerbs
OleRegGetUserType
CreateOleAdviseHolder
OleSaveToStream
WriteClassStm
OleLoadFromStream
CreateDataAdviseHolder
OleRegGetMiscStatus
ProgIDFromCLSID

oleaut32

SysAllocString
SysFreeString
SysAllocStringLen
SysStringLen
VariantClear
VariantCopy
VariantInit
SetErrorInfo
CreateErrorInfo
OleTranslateColor
VariantChangeTypeEx
LoadRegTypeLi
VarUI4FromStr
LoadTypeLi
RegisterTypeLi
VariantChangeType
SysStringByteLen
OleCreatePropertyFrame
SysAllocStringByteLen

comctl32

ord17

comdlg32

GetSaveFileNameA

shell32

SHGetSpecialFolderPathA

winmm

mixerSetControlDetails
mixerGetLineControlsA
mixerGetLineInfoA
mciSendCommandA
mixerGetControlDetailsA
mixerGetNumDevs
mixerOpen
mixerClose

ddraw

DirectDrawCreate

quartz

AMGetErrorTextA

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 135KB - Virtual size: 134KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 167KB - Virtual size: 167KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
pid.dll
.dll windows:5 windows x86 arch:x86

c187922ee464a7248fc84c24ac38332b

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

SetEvent
ResetEvent
WaitForMultipleObjects
MulDiv
ReleaseMutex
WaitForSingleObject
FreeLibrary
LoadLibraryA
CreateThread
CreateEventA
WriteFile
CreateFileA
Sleep
GetVersionExA
GetVersion
IsBadReadPtr
WriteFileEx
ReadFileEx
FreeLibraryAndExitThread
RtlUnwind
GetLastError
UnmapViewOfFile
DeleteCriticalSection
GetModuleHandleA
GetProcAddress
DisableThreadLibraryCalls
InitializeCriticalSection
CreateMutexA
CreateFileMappingA
CloseHandle
MapViewOfFile
LeaveCriticalSection
EnterCriticalSection
WideCharToMultiByte
InterlockedDecrement
InterlockedIncrement
lstrlenA
lstrcpyA
LocalReAlloc
LocalAlloc
GetModuleFileNameA
LocalFree

advapi32

RegCreateKeyExA
RegCloseKey
RegSetValueExA
RegQueryValueExA
RegOpenKeyExA

user32

PeekMessageA
TranslateMessage
DispatchMessageA
PostThreadMessageA
wsprintfA
MsgWaitForMultipleObjectsEx

hid

HidP_GetSpecificValueCaps
HidP_GetSpecificButtonCaps
HidP_SetUsageValueArray
HidP_GetUsages
HidP_SetUsageValue
HidP_GetCaps
HidD_GetPreparsedData
HidD_GetAttributes
HidD_FreePreparsedData
HidP_SetScaledUsageValue
HidD_SetFeature
HidP_GetScaledUsageValue
HidD_GetFeature
HidP_GetLinkCollectionNodes
HidP_SetUsages

Exports

Exports

DllCanUnloadNow
DllGetClassObject

Sections

.text
Size: 24KB - Virtual size: 23KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 220B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 960B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 950B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
qasf.dll
.dll regsvr32 windows:5 windows x86 arch:x86

8f4c83c3afc22965cc8f4de6d7a2646e

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetDiskFreeSpaceA
TerminateProcess
GetSystemTimeAsFileTime
GlobalMemoryStatus
QueryPerformanceCounter
CreateThread
GetTickCount
GetLocalTime
GetComputerNameA
DeviceIoControl
GetModuleHandleW
LocalAlloc
LocalFree
GetCurrentProcessId
DisableThreadLibraryCalls
SetThreadPriority
InterlockedExchange
GetACP
WideCharToMultiByte
GetModuleHandleA
GetProcAddress
VirtualAlloc
CreateSemaphoreA
GetCurrentThreadId
GetCurrentProcess
VirtualFree
GetSystemInfo
ReleaseSemaphore
WaitForSingleObject
ResetEvent
SetEvent
CreateEventA
CloseHandle
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSection
LoadLibraryA
InterlockedDecrement
FreeLibrary
InterlockedIncrement
GetModuleFileNameA
GetLastError
MultiByteToWideChar
lstrlenA
GetVersionExA
RaiseException

msvcrt

wcslen
wcscpy
wcscat
_purecall
swprintf
_ftol
_except_handler3
??2@YAPAXI@Z
_wtoi
??3@YAXPAX@Z

gdi32

GetTextExtentPointA

user32

wsprintfA
wvsprintfA
GetDesktopWindow
GetWindowRect
LoadStringW
DefWindowProcA
DestroyWindow
ShowWindow
InvalidateRect
MoveWindow
CreateDialogParamA
SetWindowLongA
GetWindowLongA
GetDlgItem
GetDC
ReleaseDC
SendMessageA
LoadStringA

advapi32

RegCreateKeyExA
RegCreateKeyA
RegSetValueA
RegSetValueExA
RegOpenKeyExA
RegEnumKeyExA
RegCloseKey
RegDeleteKeyA
RegQueryValueExA
GetUserNameA

ole32

CoTaskMemFree
CoTaskMemAlloc
CoInitialize
CoCreateInstance
CoFreeUnusedLibraries
CoUninitialize
StringFromGUID2

oleaut32

SysAllocStringLen

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 135KB - Virtual size: 135KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
qcap.dll
.dll regsvr32 windows:5 windows x86 arch:x86

3337a976f7a833f6793dfd25785c3a1b

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

TerminateProcess
GetCurrentProcess
GetProcAddress
GetDiskFreeSpaceA
ReadFile
GetFileSize
DisableThreadLibraryCalls
GetSystemTimeAsFileTime
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
CreateIoCompletionPort
DeleteFileA
GetFullPathNameA
PostQueuedCompletionStatus
GetQueuedCompletionStatus
CreateFileA
GetModuleHandleA
WriteFile
SetEndOfFile
lstrcmpA
IsBadCodePtr
IsBadHugeReadPtr
lstrcpynW
GetFileAttributesW
IsBadWritePtr
HeapFree
GetProcessHeap
HeapAlloc
lstrcmpiW
lstrcpyW
GetPrivateProfileStringW
IsBadReadPtr
GlobalMemoryStatus
GetProfileIntA
GlobalAlloc
GlobalLock
GlobalHandle
GlobalFree
GlobalUnlock
MulDiv
GetModuleFileNameA
lstrcpyA
DeleteCriticalSection
InitializeCriticalSection
WaitForSingleObject
GetCurrentThreadId
EnterCriticalSection
LeaveCriticalSection
lstrlenA
WideCharToMultiByte
SetFilePointer
MultiByteToWideChar
VirtualAlloc
VirtualFree
GetSystemInfo
ReleaseSemaphore
InterlockedDecrement
FreeLibrary
InterlockedIncrement
CreateSemaphoreA
CreateThread
GetLastError
WaitForMultipleObjects
GetCurrentThread
GetThreadPriority
SetThreadPriority
InterlockedExchange
ResetEvent
SetEvent
GetACP
CloseHandle
CreateEventA
GetVersionExA

msvcrt

_ftol
??3@YAXPAX@Z
??2@YAPAXI@Z
_purecall
_except_handler3

gdi32

GetObjectA
GetPaletteEntries
GetStockObject
SelectObject
PatBlt
GetTextExtentPoint32A

user32

GetDlgItemInt
GetDesktopWindow
IsRectEmpty
SetDlgItemTextA
EnableWindow
GetDlgItem
SetDlgItemInt
ReleaseDC
ClientToScreen
GetClientRect
GetDC
IsWindowVisible
IsWindow
wsprintfW
SetCursor
LoadCursorA
GetAsyncKeyState
CheckRadioButton
CheckDlgButton
SendMessageA
wsprintfA
wvsprintfA
GetWindowRect
LoadStringW
DefWindowProcA
DestroyWindow
ShowWindow
InvalidateRect
MoveWindow
CreateDialogParamA
SetWindowLongA
GetWindowLongA
PeekMessageA
DispatchMessageA
TranslateMessage
LoadStringA

advapi32

RegEnumKeyW
RegOpenKeyW
RegCreateKeyW
RegCreateKeyA
RegSetValueA
RegEnumKeyExA
RegSetValueExA
RegQueryValueExA
RegOpenKeyExA
RegCloseKey
RegDeleteKeyA
RegQueryValueExW

ole32

CoCreateInstance
CoTaskMemAlloc
CoUninitialize
CoInitialize
StringFromGUID2
CoFreeUnusedLibraries
CoTaskMemFree

oleaut32

SafeArrayAccessData
VariantClear
SysAllocString
SafeArrayUnaccessData
SysFreeString
SysStringLen

msvfw32

ICCompress
ICDecompress
ICGetInfo
ICOpen
ICClose
ICSendMessage
ICLocate

version

GetFileVersionInfoW
GetFileVersionInfoSizeW
VerQueryValueW

winmm

mixerOpen
mixerClose
waveInStop
waveInStart
waveInAddBuffer
waveInPrepareHeader
waveInUnprepareHeader
mixerSetControlDetails
mixerGetID
mixerGetLineInfoA
mixerGetLineControlsA
waveInGetDevCapsA
waveInReset
waveInClose
waveInOpen
CloseDriver
OpenDriver
SendDriverMessage
mixerGetControlDetailsA

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 155KB - Virtual size: 154KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 83KB - Virtual size: 83KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
qdv.dll
.dll regsvr32 windows:5 windows x86 arch:x86

97b9a2e3ba597b131681d3171e64a371

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

msvcrt

??2@YAPAXI@Z
_purecall
_ftol
_except_handler3
??3@YAXPAX@Z

user32

LoadStringW
GetDesktopWindow
GetWindowLongA
LoadStringA
IsRectEmpty
IsDlgButtonChecked
SendDlgItemMessageA
CheckRadioButton
wvsprintfA
wsprintfA
SetWindowLongA
CreateDialogParamA
MoveWindow
InvalidateRect
ShowWindow
DestroyWindow
DefWindowProcA
GetWindowRect

advapi32

RegEnumKeyExA
RegQueryValueExA
RegCreateKeyExA
RegCreateKeyA
RegSetValueA
RegSetValueExA
RegOpenKeyExA
RegCloseKey
RegDeleteKeyA

ole32

CoInitialize
CoFreeUnusedLibraries
CoUninitialize
StringFromGUID2
CoCreateInstance
CoTaskMemFree
CoTaskMemAlloc

msvfw32

StretchDIB

winmm

timeGetTime

kernel32

GetACP
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
QueryPerformanceCounter
GetVersionExA
DisableThreadLibraryCalls
lstrlenA
MultiByteToWideChar
GetLastError
GetModuleFileNameA
InterlockedIncrement
FreeLibrary
InterlockedDecrement
LoadLibraryA
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
CloseHandle
CreateEventA
SetEvent
ResetEvent
WaitForSingleObject
ReleaseSemaphore
GetCurrentProcess
GetCurrentThreadId
CreateSemaphoreA
GetProcAddress
GetModuleHandleA
WideCharToMultiByte
InterlockedExchange
SetThreadPriority
GetTickCount
CreateThread
MulDiv
lstrcpyA

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 226KB - Virtual size: 225KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 22KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 45KB - Virtual size: 44KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
qdvd.dll
.dll regsvr32 windows:5 windows x86 arch:x86

a260af3493591a91b9363a8954d4c9a7

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetVolumeInformationA
SetWaitableTimer
CreateWaitableTimerA
SetFilePointer
ReadFile
FindCloseChangeNotification
GetLocaleInfoA
IsValidLocale
FindNextFileA
DeviceIoControl
GetOverlappedResult
TerminateProcess
GetProcAddress
DisableThreadLibraryCalls
GetSystemTimeAsFileTime
FindFirstFileA
FindClose
GetDriveTypeA
GetFileAttributesA
GetUserDefaultLCID
GetComputerNameA
VirtualAlloc
VirtualFree
GetSystemInfo
ReleaseSemaphore
CreateSemaphoreA
CreateThread
GetThreadPriority
SetThreadPriority
InterlockedExchange
GetACP
IsBadReadPtr
IsBadWritePtr
HeapFree
SetLastError
GetVersionExA
WaitForMultipleObjects
ResetEvent
CreateEventA
lstrcmpA
SetEvent
Sleep
GetFullPathNameA
SetErrorMode
LoadLibraryA
MulDiv
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
GetModuleHandleA
CreateFileA
GetFileSize
CreateFileMappingA
LoadLibraryExA
FindResourceA
LoadResource
SizeofResource
FreeLibrary
lstrcpynA
GlobalAlloc
GlobalLock
GlobalUnlock
GetCurrentThread
GetModuleFileNameA
lstrcatA
lstrcpyA
GlobalFree
HeapDestroy
WaitForSingleObject
CloseHandle
GetLastError
GetCurrentThreadId
lstrlenA
WideCharToMultiByte
MultiByteToWideChar
lstrcmpiA
GetProcessHeap
HeapAlloc
GetCurrentProcess
FlushInstructionCache
InterlockedDecrement
InterlockedIncrement
DeleteCriticalSection
InitializeCriticalSection
LeaveCriticalSection
EnterCriticalSection

msvcrt

??3@YAXPAX@Z
realloc
??2@YAPAXI@Z
free
_purecall
_ftol
qsort
_except_handler3
malloc

gdi32

CreateCompatibleBitmap
GetDIBits
SetBkMode
ExtTextOutW
CreateFontIndirectA
GetTextMetricsA
EnumFontFamiliesExA
GetSystemPaletteEntries
SetBkColor
CreateRectRgnIndirect
CreateDCA
GetDeviceCaps
DeleteMetaFile
CloseMetaFile
RestoreDC
SetWindowExtEx
SetWindowOrgEx
SaveDC
CreateMetaFileA
DeleteDC
SetViewportOrgEx
SetMapMode
LPtoDP
SetPixel
GetPixel
GetStockObject
GetObjectA
CreateDIBSection
DeleteObject
StretchBlt
BitBlt
SelectObject
StretchDIBits
SetDIBitsToDevice
GetRegionData
FillRgn
OffsetRgn
CreateSolidBrush
CombineRgn
GdiFlush
SetStretchBltMode
CreateCompatibleDC
CreateRectRgn
GetDCOrgEx
GetClipBox
SetTextColor

user32

SetDlgItemInt
SetDlgItemTextA
CheckRadioButton
EnableWindow
DrawTextA
IsIconic
GetWindowPlacement
GetQueueStatus
PostThreadMessageA
SetRectEmpty
RegisterWindowMessageA
PostMessageA
ScreenToClient
FillRect
SetRect
ClientToScreen
IsWindowVisible
IsRectEmpty
InvalidateRect
IsWindow
DestroyWindow
ShowWindow
SetFocus
LoadStringA
UnionRect
PtInRect
CheckDlgButton
CreateWindowExA
GetWindowLongA
CallWindowProcA
CharNextA
PeekMessageA
DispatchMessageA
TranslateMessage
MsgWaitForMultipleObjects
SetWindowPos
SetWindowRgn
OffsetRect
EqualRect
IntersectRect
EndPaint
GetClientRect
BeginPaint
ReleaseDC
GetDC
GetDlgItem
SendMessageA
MapWindowPoints
SystemParametersInfoA
GetWindowRect
GetParent
GetSystemMetrics
GetDlgItemInt
IsDlgButtonChecked
KillTimer
SetTimer
GetWindowThreadProcessId
UnregisterClassA
SendMessageTimeoutA
RegisterClassA
GetClassInfoA
wvsprintfA
GetDesktopWindow
LoadStringW
MoveWindow
DefWindowProcA
CreateDialogParamA
SetWindowLongA
RegisterClassExA
wsprintfA
LoadCursorA
GetClassInfoExA

advapi32

RegDeleteKeyA
RegQueryInfoKeyA
RegQueryValueExA
RegCloseKey
RegCreateKeyExA
RegOpenKeyExA
RegSetValueExA
RegEnumKeyExA
RegDeleteValueA
RegCreateKeyA
RegSetValueA
GetUserNameA
RegOpenKeyA

ole32

CoCreateInstance
CreateOleAdviseHolder
WriteClassStm
OleLoadFromStream
CoTaskMemRealloc
CoTaskMemAlloc
CoTaskMemFree
OleRegEnumVerbs
OleRegGetUserType
OleRegGetMiscStatus
CreateDataAdviseHolder
StringFromCLSID
IIDFromString
CoUninitialize
CoInitialize
StringFromGUID2
CoFreeUnusedLibraries
OleSaveToStream

oleaut32

VarI4FromStr
SetErrorInfo
LoadRegTypeLi
VariantChangeType
SysStringByteLen
SysAllocStringByteLen
SysAllocString
VariantClear
VariantInit
SysFreeString
GetActiveObject

version

VerQueryValueA
GetFileVersionInfoSizeA
GetFileVersionInfoA

winmm

timeKillEvent
timeSetEvent
timeGetTime
timeEndPeriod
timeBeginPeriod

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 321KB - Virtual size: 320KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 97KB - Virtual size: 96KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 15KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
qedit.dll
.dll regsvr32 windows:5 windows x86 arch:x86

51e14b0e14b99f0d308a0f89a9c28b0f

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

DeleteFileA
GetSystemDirectoryA
GetFileTime
GetFileType
GetCurrentDirectoryA
TerminateProcess
GetProcAddress
GetSystemTimeAsFileTime
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
MulDiv
LockResource
GetModuleHandleA
CreateFileA
GetFileSize
GetFullPathNameA
WriteFile
GlobalFree
CompareStringA
SetFilePointer
ReadFile
Sleep
lstrcatW
VirtualAlloc
VirtualFree
GetSystemInfo
ReleaseSemaphore
LoadLibraryA
CreateSemaphoreA
CreateThread
GetVersionExA
WaitForMultipleObjects
GetThreadPriority
SetThreadPriority
InterlockedExchange
ResetEvent
SetEvent
GetACP
LoadLibraryExA
FindResourceA
LoadResource
SizeofResource
FreeLibrary
lstrcpynA
CreateMutexA
DisableThreadLibraryCalls
CreateEventA
GlobalAlloc
GlobalLock
GlobalUnlock
GetCurrentThread
ReleaseMutex
GetModuleFileNameA
lstrcatA
lstrcpyA
HeapDestroy
WaitForSingleObject
CloseHandle
GetLastError
GetCurrentThreadId
lstrlenA
WideCharToMultiByte
MultiByteToWideChar
lstrcmpiA
HeapAlloc
GetProcessHeap
HeapFree
GetCurrentProcess
FlushInstructionCache
IsBadCodePtr
IsBadWritePtr
IsBadReadPtr
InterlockedDecrement
InterlockedIncrement
InitializeCriticalSection
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection

msvcrt

??2@YAPAXI@Z
malloc
wcspbrk
wcstoul
wcsncmp
wcscat
srand
rand
_vsnwprintf
_splitpath
_wsplitpath
wcscmp
sprintf
_iob
fprintf
exit
fread
_setjmp3
fopen
fclose
longjmp
_purecall
free
_wtoi
realloc
??3@YAXPAX@Z
atof
_ftol
wcscpy
wcslen

gdi32

DeleteObject
CreateCompatibleDC
SetStretchBltMode
StretchBlt
CreateDIBSection
GetObjectA
CreateFontIndirectA
SelectObject
GetTextMetricsA
GetTextExtentPointA
DeleteDC
GetDeviceCaps

user32

LoadStringA
EndDialog
DefWindowProcA
wsprintfA
GetWindowTextLengthA
GetWindowTextA
SetWindowLongA
GetWindowRect
GetDesktopWindow
LoadStringW
GetWindowLongA
CharNextA
ShowWindow
DispatchMessageA
MsgWaitForMultipleObjects
SetWindowPos
ReleaseDC
GetDC
GetDlgItem
DestroyWindow
IsWindow
InvalidateRect
MoveWindow
WinHelpA
IsDialogMessageA
CreateDialogParamA
GetDialogBaseUnits
wvsprintfA
PostThreadMessageA
RegisterWindowMessageA
GetQueueStatus
MessageBoxA
GetDlgItemTextA
SetDlgItemTextA
SetDlgItemInt
GetDlgItemInt
CheckRadioButton
IsDlgButtonChecked
IsRectEmpty
CharPrevA
PeekMessageA

advapi32

RegCreateKeyExA
RegCloseKey
RegQueryValueExA
RegQueryInfoKeyA
RegDeleteKeyA
RegSetValueExA
RegEnumKeyExA
RegDeleteValueA
RegSetValueA
RegCreateKeyA
RegQueryValueA
RegOpenKeyA
RegEnumValueA
RegOpenKeyExA

ole32

CoCreateInstance
CoTaskMemFree
CoTaskMemAlloc
CoTaskMemRealloc
OleLoadFromStream
CreateStreamOnHGlobal
CreateBindCtx
StringFromGUID2
StringFromCLSID
CoUninitialize
CoInitialize
CoFreeUnusedLibraries
CLSIDFromString
StgCreateDocfile
CoCreateFreeThreadedMarshaler
StgOpenStorage

oleaut32

VariantChangeTypeEx
VarI4FromStr
LoadTypeLi
SetErrorInfo
LoadRegTypeLi
SysAllocString
VariantCopy
VariantClear
VariantInit
SysAllocStringLen
SysFreeString
RegisterTypeLi

msvfw32

DrawDibOpen
DrawDibDraw
DrawDibClose

winmm

timeGetTime
timeSetEvent
timeEndPeriod
timeBeginPeriod
timeKillEvent

comdlg32

GetOpenFileNameA

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 405KB - Virtual size: 404KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1.3MB - Virtual size: 1.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 23KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
qedwipes.dll
.dll windows:5 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.rsrc
Size: 715KB - Virtual size: 714KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 8B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
quartz.dll
.dll regsvr32 windows:5 windows x86 arch:x86

362d13b1fcdff8b6b203ca20e4836ecd

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

CreateFileMappingA
MapViewOfFile
UnmapViewOfFile
GetShortPathNameA
GetExitCodeProcess
GetFullPathNameA
WriteFile
QueryPerformanceFrequency
ReleaseMutex
CreateMutexA
HeapDestroy
FreeLibraryAndExitThread
Sleep
CreateFileA
lstrcpyA
lstrcatA
MulDiv
ReadFile
FormatMessageA
FormatMessageW
CreateThread
GetCurrentThread
GetThreadPriority
SetThreadPriority
InterlockedExchange
GetACP
WideCharToMultiByte
LoadLibraryA
FreeLibrary
GetLastError
lstrlenA
GetVersionExA
VirtualAlloc
CreateSemaphoreA
VirtualFree
GetSystemInfo
ReleaseSemaphore
WaitForSingleObject
WaitForMultipleObjects
ResetEvent
SetEvent
CreateEventA
CloseHandle
InterlockedDecrement
InterlockedIncrement
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSection
MapViewOfFileEx
GetProfileIntA
GetProfileStringA
GetPrivateProfileStringA
GlobalFree
GlobalUnlock
GlobalHandle
GlobalLock
GlobalAlloc
LocalAlloc
LocalFree
RaiseException
HeapAlloc
GetProcessHeap
HeapFree
WriteProfileStringA
GetDiskFreeSpaceA
CompareStringA
lstrcmpA
lstrcpynA
IsBadWritePtr
IsBadReadPtr
GetDriveTypeA
GetFileSize
SetErrorMode
LocalUnlock
LocalLock
LocalReAlloc
SetFilePointer
DeviceIoControl
GetCurrentProcess
TerminateProcess
GetModuleHandleA
GetProcAddress
DisableThreadLibraryCalls
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
GetModuleFileNameA
MultiByteToWideChar
OpenProcess
lstrcmpiA

msvcrt

??3@YAXPAX@Z
_ftol
free
_initterm
??2@YAPAXI@Z
_adjust_fdiv
__dllonexit
_ltow
wcslen
towupper
memmove
atoi
getenv
sscanf
_except_handler3
sprintf
wcscpy
malloc
_onexit
_wtoi
_strdup

gdi32

GdiFlush
SetPixel
GetPixel
ExtTextOutA
SetBkColor
SelectPalette
FillRgn
CombineRgn
CreateRectRgnIndirect
CreatePalette
GetStockObject
GetTextExtentPoint32A
SetTextColor
SetBkMode
BitBlt
CreateDIBSection
EnumFontFamiliesExA
ExtTextOutW
SetTextCharacterExtra
StretchBlt
RealizePalette
GetObjectA
StretchDIBits
SetDIBColorTable
SetStretchBltMode
GetDeviceCaps
DeleteObject
GetDCOrgEx
EqualRgn
ExtCreateRegion
CreateRectRgn
CreateFontIndirectA
GetSystemPaletteEntries
GetDIBits
PatBlt
CreateSolidBrush
SelectObject
DeleteDC
CreateCompatibleBitmap
CreateCompatibleDC
CreateDCA
SetDIBitsToDevice
GetClipBox

user32

SendMessageA
GetWindowThreadProcessId
LoadStringA
SetTimer
KillTimer
IsWindow
InSendMessage
SetRect
GetDC
GetSystemMetrics
IsWindowVisible
IsRectEmpty
SendDlgItemMessageA
EndDialog
DialogBoxParamA
GetDlgItem
MessageBoxA
SystemParametersInfoA
GetDlgItemInt
EnableWindow
GetWindowRect
UnhookWindowsHookEx
InvalidateRect
SetWindowsHookExA
GetWindowPlacement
IsIconic
IntersectRect
OffsetRect
ClientToScreen
GetClientRect
SetRectEmpty
MapWindowPoints
ScreenToClient
GetParent
GetWindowLongA
GetDesktopWindow
EndPaint
BeginPaint
SetCursor
DestroyCursor
ReleaseDC
GetMessageA
TranslateMessage
DestroyWindow
PostMessageA
ReplyMessage
CharNextA
DispatchMessageA
GetQueueStatus
RegisterWindowMessageA
PostThreadMessageA
wvsprintfA
MsgWaitForMultipleObjects
PeekMessageA
wsprintfA
AdjustWindowRectEx
DefWindowProcA
CreateWindowExA
RegisterClassA
LoadCursorA
GetClassInfoA
LoadStringW
EqualRect
CreateDialogParamA
SetDlgItemTextA
SetParent
IsZoomed
SetWindowLongA
FillRect
ChangeDisplaySettingsExA
GetWindowTextA
SetWindowTextA
MoveWindow
SetForegroundWindow
ShowWindow
GetForegroundWindow
SetWindowPos
UpdateWindow
GetKeyboardState
SetKeyboardState
LoadImageA

advapi32

RegFlushKey
RegCreateKeyExA
RegQueryInfoKeyA
RegCreateKeyA
RegSetValueA
RegSetValueExA
RegOpenKeyExA
RegDeleteValueA
RegEnumValueA
RegEnumKeyExA
RegDeleteKeyA
RegOpenKeyA
RegQueryValueExA
RegCloseKey
RegQueryValueA

ole32

CLSIDFromString
CreateBindCtx
CoCreateFreeThreadedMarshaler
MkParseDisplayName
CreateStreamOnHGlobal
StgOpenStorage
StgIsStorageFile
CoTaskMemRealloc
CoTaskMemFree
StringFromGUID2
CoTaskMemAlloc
CoInitialize
CoFreeUnusedLibraries
CoUninitialize
CoCreateInstance

oleaut32

LoadRegTypeLi
VariantChangeType
VariantCopy
VariantInit
SysAllocStringLen
SysStringLen
SafeArrayCreate
SafeArrayDestroy
SafeArrayAccessData
SafeArrayUnaccessData
VariantClear
VARIANT_UserSize
VARIANT_UserMarshal
VARIANT_UserUnmarshal
VARIANT_UserFree
SysFreeString
SysAllocString
LoadTypeLi
RegisterTypeLi
SysReAllocString
SetErrorInfo

winmm

waveOutGetVolume
waveOutSetVolume
waveOutWrite
waveOutUnprepareHeader
waveOutRestart
waveOutReset
waveOutPrepareHeader
waveOutPause
waveOutOpen
waveOutGetPosition
waveOutGetErrorTextA
waveOutGetDevCapsA
waveOutClose
waveOutGetNumDevs
midiOutReset
midiStreamOpen
midiStreamProperty
midiOutGetNumDevs
mixerGetNumDevs
mixerGetLineInfoA
mixerGetDevCapsA
mixerGetLineControlsA
mixerSetControlDetails
mixerGetControlDetailsA
midiStreamOut
midiOutUnprepareHeader
midiStreamRestart
midiOutPrepareHeader
midiStreamPause
midiStreamPosition
midiOutGetErrorTextA
midiStreamClose
timeKillEvent
timeGetDevCaps
timeBeginPeriod
timeEndPeriod
timeSetEvent
timeGetTime

rpcrt4

NdrDllGetClassObject
NdrDllCanUnloadNow
NdrCStdStubBuffer_Release
NdrCStdStubBuffer2_Release
NdrDllRegisterProxy
NdrDllUnregisterProxy
NdrStubCall2
NdrStubForwardingFunction
CStdStubBuffer_DebugServerRelease
CStdStubBuffer_DebugServerQueryInterface
CStdStubBuffer_CountRefs
CStdStubBuffer_IsIIDSupported
CStdStubBuffer_Invoke
CStdStubBuffer_Disconnect
CStdStubBuffer_Connect
CStdStubBuffer_AddRef
CStdStubBuffer_QueryInterface
IUnknown_Release_Proxy
IUnknown_AddRef_Proxy
IUnknown_QueryInterface_Proxy
NdrOleAllocate
NdrClientCall2
NdrOleFree

Exports

Exports

AMGetErrorTextA
AMGetErrorTextW
AmpFactorToDB
DBToAmpFactor
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
GetProxyDllInfo

Sections

.text
Size: 902KB - Virtual size: 902KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.orpc
Size: 512B - Virtual size: 503B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 73KB - Virtual size: 220KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 772KB - Virtual size: 772KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 52KB - Virtual size: 51KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
quartz.vxd
stream.sys
.dll windows:5 windows x86 arch:x86

c1134fdb9e503ad5d0b7e607ebcafde9

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_WDM_DRIVER

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

stream.pdb

Imports

ntoskrnl.exe

MmMapLockedPages
KefAcquireSpinLockAtDpcLevel
IoFreeMdl
ExAllocatePoolWithTag
IoAllocateMdl
IoWriteErrorLogEntry
IoAllocateErrorLogEntry
KeSetEvent
InterlockedDecrement
IoFreeIrp
IofCompleteRequest
IoCancelIrp
ZwQueryValueKey
RtlInitUnicodeString
KeWaitForSingleObject
ExFreePool
IoBuildSynchronousFsdRequest
KeInitializeEvent
MmResetDriverPaging
KeSetTimer
KeCancelTimer
ExQueueWorkItem
PoRequestPowerIrp
InterlockedIncrement
PoCallDriver
MmMapIoSpace
ZwClose
RtlFreeUnicodeString
RtlAnsiStringToUnicodeString
RtlInitAnsiString
sprintf
IoOpenDeviceRegistryKey
IoAllocateIrp
MmBuildMdlForNonPagedPool
InterlockedExchange
IofCallDriver
MmPageEntireDriver
IoGetDriverObjectExtension
IoBuildDeviceIoControlRequest
KeResetEvent
PoStartNextPowerIrp
ZwSetValueKey
IoOpenDeviceInterfaceRegistryKey
IoSetDeviceInterfaceState
IoRegisterDeviceInterface
IoStopTimer
MmUnmapIoSpace
IoDisconnectInterrupt
wcscpy
wcslen
IoCreateDevice
ObfReferenceObject
ZwEnumerateKey
ZwOpenKey
_snwprintf
swprintf
IoGetDeviceProperty
RtlIntegerToUnicodeString
IoStartTimer
IoConnectInterrupt
KeSynchronizeExecution
IoGetDmaAdapter
KeInitializeTimer
KeInitializeDpc
KeInitializeSpinLock
IoDetachDevice
IoDeleteDevice
IoInitializeTimer
IoAttachDeviceToDeviceStack
IoAllocateDriverObjectExtension
DbgBreakPoint
IoGetDeviceInterfaces
KeDelayExecutionThread
ObfDereferenceObject
ProbeForRead
KeInsertQueueDpc
IoReleaseCancelSpinLock
memmove
ObReferenceObjectByHandle
IoFileObjectType
ExGetPreviousMode
IoGetRelatedDeviceObject
KeTickCount
KeBugCheckEx
KefReleaseSpinLockFromDpcLevel
RtlUnwind

hal

KfLowerIrql
KeQueryPerformanceCounter
KfRaiseIrql
KfAcquireSpinLock
KfReleaseSpinLock

ks.sys

KsUnserializeObjectPropertiesFromRegistry
KsDiscardEvent
KsAllocateExtraData
KsProbeStreamIrp
KsFreeObjectHeader
KsAllocateObjectHeader
KsUnregisterWorker
KsRegisterWorker
KsDispatchIrp
KsAddIrpToCancelableQueue
KsRemoveIrpFromCancelableQueue
KsFreeDeviceHeader
KsAllocateDeviceHeader
KsNullDriverUnload
KsGenerateEventList
KsGenerateEvent
KsCacheMedium
KsDispatchFastReadFailure
KsDispatchFastIoDeviceControlFailure
KsDispatchInvalidDeviceRequest
KsPropertyHandler
KsEnableEvent
KsDisableEvent
KsMethodHandler
KsPinPropertyHandler
KsCreateDefaultAllocator
KsSynchronousIoControlDevice
KsTopologyPropertyHandler
KsStreamIo
KsQueueWorkItem
KsSetTargetDeviceObject
KsFreeEventList
KsValidateClockCreateRequest
KsValidateConnectRequest
KsPinDataIntersection

Exports

Exports

DllInitialize
DllUnload
StreamClassAbortOutstandingRequests
StreamClassCallAtNewPriority
StreamClassCompleteRequestAndMarkQueueReady
StreamClassDebugAssert
StreamClassDebugPrint
StreamClassDeviceNotification
StreamClassFilterReenumerateStreams
StreamClassGetDmaBuffer
StreamClassGetNextEvent
StreamClassGetPhysicalAddress
StreamClassLogError
StreamClassPnPAddDeviceWorker
StreamClassQueryMasterClock
StreamClassQueryMasterClockSync
StreamClassReadWriteConfig
StreamClassReenumerateStreams
StreamClassRegisterAdapter
StreamClassRegisterFilterWithNoKSPins
StreamClassScheduleTimer
StreamClassStreamNotification

Sections

.text
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 768B - Virtual size: 680B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 128B - Virtual size: 20B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

PAGE
Size: 19KB - Virtual size: 19KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.edata
Size: 896B - Virtual size: 880B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

INIT
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
stream98.sys
.dll windows:5 windows x86 arch:x86

c1134fdb9e503ad5d0b7e607ebcafde9

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_WDM_DRIVER

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

stream.pdb

Imports

ntoskrnl.exe

MmMapLockedPages
KefAcquireSpinLockAtDpcLevel
IoFreeMdl
ExAllocatePoolWithTag
IoAllocateMdl
IoWriteErrorLogEntry
IoAllocateErrorLogEntry
KeSetEvent
InterlockedDecrement
IoFreeIrp
IofCompleteRequest
IoCancelIrp
ZwQueryValueKey
RtlInitUnicodeString
KeWaitForSingleObject
ExFreePool
IoBuildSynchronousFsdRequest
KeInitializeEvent
MmResetDriverPaging
KeSetTimer
KeCancelTimer
ExQueueWorkItem
PoRequestPowerIrp
InterlockedIncrement
PoCallDriver
MmMapIoSpace
ZwClose
RtlFreeUnicodeString
RtlAnsiStringToUnicodeString
RtlInitAnsiString
sprintf
IoOpenDeviceRegistryKey
IoAllocateIrp
MmBuildMdlForNonPagedPool
InterlockedExchange
IofCallDriver
MmPageEntireDriver
IoGetDriverObjectExtension
IoBuildDeviceIoControlRequest
KeResetEvent
PoStartNextPowerIrp
ZwSetValueKey
IoOpenDeviceInterfaceRegistryKey
IoSetDeviceInterfaceState
IoRegisterDeviceInterface
IoStopTimer
MmUnmapIoSpace
IoDisconnectInterrupt
wcscpy
wcslen
IoCreateDevice
ObfReferenceObject
ZwEnumerateKey
ZwOpenKey
_snwprintf
swprintf
IoGetDeviceProperty
RtlIntegerToUnicodeString
IoStartTimer
IoConnectInterrupt
KeSynchronizeExecution
IoGetDmaAdapter
KeInitializeTimer
KeInitializeDpc
KeInitializeSpinLock
IoDetachDevice
IoDeleteDevice
IoInitializeTimer
IoAttachDeviceToDeviceStack
IoAllocateDriverObjectExtension
DbgBreakPoint
IoGetDeviceInterfaces
KeDelayExecutionThread
ObfDereferenceObject
ProbeForRead
KeInsertQueueDpc
IoReleaseCancelSpinLock
memmove
ObReferenceObjectByHandle
IoFileObjectType
ExGetPreviousMode
IoGetRelatedDeviceObject
KeTickCount
KeBugCheckEx
KefReleaseSpinLockFromDpcLevel
RtlUnwind

hal

KfLowerIrql
KeQueryPerformanceCounter
KfRaiseIrql
KfAcquireSpinLock
KfReleaseSpinLock

ks.sys

KsUnserializeObjectPropertiesFromRegistry
KsDiscardEvent
KsAllocateExtraData
KsProbeStreamIrp
KsFreeObjectHeader
KsAllocateObjectHeader
KsUnregisterWorker
KsRegisterWorker
KsDispatchIrp
KsAddIrpToCancelableQueue
KsRemoveIrpFromCancelableQueue
KsFreeDeviceHeader
KsAllocateDeviceHeader
KsNullDriverUnload
KsGenerateEventList
KsGenerateEvent
KsCacheMedium
KsDispatchFastReadFailure
KsDispatchFastIoDeviceControlFailure
KsDispatchInvalidDeviceRequest
KsPropertyHandler
KsEnableEvent
KsDisableEvent
KsMethodHandler
KsPinPropertyHandler
KsCreateDefaultAllocator
KsSynchronousIoControlDevice
KsTopologyPropertyHandler
KsStreamIo
KsQueueWorkItem
KsSetTargetDeviceObject
KsFreeEventList
KsValidateClockCreateRequest
KsValidateConnectRequest
KsPinDataIntersection

Exports

Exports

DllInitialize
DllUnload
StreamClassAbortOutstandingRequests
StreamClassCallAtNewPriority
StreamClassCompleteRequestAndMarkQueueReady
StreamClassDebugAssert
StreamClassDebugPrint
StreamClassDeviceNotification
StreamClassFilterReenumerateStreams
StreamClassGetDmaBuffer
StreamClassGetNextEvent
StreamClassGetPhysicalAddress
StreamClassLogError
StreamClassPnPAddDeviceWorker
StreamClassQueryMasterClock
StreamClassQueryMasterClockSync
StreamClassReadWriteConfig
StreamClassReenumerateStreams
StreamClassRegisterAdapter
StreamClassRegisterFilterWithNoKSPins
StreamClassScheduleTimer
StreamClassStreamNotification

Sections

.text
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 768B - Virtual size: 681B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 128B - Virtual size: 20B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

PAGE
Size: 19KB - Virtual size: 19KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.edata
Size: 896B - Virtual size: 880B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

INIT
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
swenum.sys
.sys windows:5 windows x86 arch:x86

2b29cc5a8e62f78b659fb1c44e574507

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_WDM_DRIVER

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

swenum.pdb

Imports

ntoskrnl.exe

IofCompleteRequest
IoDeleteDevice
IoCreateDevice
IofCallDriver
PoCallDriver
PoStartNextPowerIrp
KeTickCount

ks.sys

KsCreateBusEnumObject
KsGetBusEnumPnpDeviceObject
KsServiceBusEnumPnpRequest
KsIsBusEnumChildDevice
KsServiceBusEnumCreateRequest
KsInstallBusEnumInterface
KsRemoveBusEnumInterface
KsGetBusEnumIdentifier

Sections

.text
Size: 384B - Virtual size: 298B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 256B - Virtual size: 202B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 128B - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

PAGE
Size: 640B - Virtual size: 556B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

INIT
Size: 640B - Virtual size: 600B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 128B - Virtual size: 124B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
swenum98.sys
.sys windows:5 windows x86 arch:x86

09fe4b4792d84920852bac7bb5c7981f

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_WDM_DRIVER

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

swenum.pdb

Imports

ntoskrnl.exe

IofCompleteRequest
IoDeleteDevice
IoCreateDevice
IofCallDriver
PoCallDriver
PoStartNextPowerIrp
ExAllocatePoolWithTag
KeTickCount

ks.sys

KsCreateBusEnumObject
KsGetBusEnumPnpDeviceObject
KsServiceBusEnumPnpRequest
KsIsBusEnumChildDevice
KsServiceBusEnumCreateRequest
KsInstallBusEnumInterface
KsRemoveBusEnumInterface
KsGetBusEnumIdentifier

Sections

.text
Size: 384B - Virtual size: 298B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 256B - Virtual size: 203B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 128B - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

PAGE
Size: 640B - Virtual size: 556B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

INIT
Size: 768B - Virtual size: 736B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 128B - Virtual size: 128B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
swenumse.sys
.sys windows:5 windows x86 arch:x86

2b29cc5a8e62f78b659fb1c44e574507

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_WDM_DRIVER

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

swenum.pdb

Imports

ntoskrnl.exe

IofCompleteRequest
IoDeleteDevice
IoCreateDevice
IofCallDriver
PoCallDriver
PoStartNextPowerIrp
KeTickCount

ks.sys

KsCreateBusEnumObject
KsGetBusEnumPnpDeviceObject
KsServiceBusEnumPnpRequest
KsIsBusEnumChildDevice
KsServiceBusEnumCreateRequest
KsInstallBusEnumInterface
KsRemoveBusEnumInterface
KsGetBusEnumIdentifier

Sections

.text
Size: 384B - Virtual size: 298B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 256B - Virtual size: 202B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 128B - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

PAGE
Size: 640B - Virtual size: 556B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

INIT
Size: 640B - Virtual size: 600B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 128B - Virtual size: 124B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
vidx16.dll
vjoyd.vxd
DirectX/DirectX9/ManagedDX.CAB
.cab
mdxredist.msi
.msi
DirectX/DirectX9/dsetup32.dll
.dll windows:5 windows x86 arch:x86

baef0ec21a3430d89e98a197f991db2b

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

dsetup32.pdb

Imports

kernel32

GetFileAttributesA
FindClose
FindFirstFileA
lstrcpyA
GetPrivateProfileSectionA
CloseHandle
CreateFileA
SetFileAttributesA
FindNextFileA
lstrcmpA
GetSystemDirectoryA
CreateDirectoryA
lstrcatA
GetSystemDefaultLCID
GetCurrentProcess
GetShortPathNameA
GetModuleFileNameA
GetPrivateProfileSectionNamesA
GetSystemInfo
WideCharToMultiByte
GetDiskFreeSpaceA
GetModuleHandleA
CopyFileA
ReadFile
GetFileSize
SystemTimeToTzSpecificLocalTime
FileTimeToSystemTime
LocalFileTimeToFileTime
SystemTimeToFileTime
GetPrivateProfileStringA
GetExitCodeProcess
WaitForSingleObject
CreateProcessA
LoadLibraryExA
GetTempFileNameA
GetDriveTypeA
GetCurrentDirectoryA
ExpandEnvironmentStringsA
GetTempPathA
MultiByteToWideChar
MoveFileExA
CompareStringA
SetFileTime
GetFileTime
Sleep
CreateMutexA
LoadResource
FindResourceA
IsBadWritePtr
LockResource
SizeofResource
SetLastError
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
TerminateProcess
GetLastError
SetUnhandledExceptionFilter
TlsSetValue
GetCommandLineA
GetLocalTime
HeapFree
HeapReAlloc
HeapAlloc
ExitProcess
TlsFree
TlsGetValue
TlsAlloc
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
DeleteCriticalSection
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
HeapDestroy
HeapCreate
VirtualFree
WriteFile
EnterCriticalSection
LeaveCriticalSection
VirtualAlloc
VirtualProtect
VirtualQuery
LCMapStringA
LCMapStringW
GetACP
GetOEMCP
GetCPInfo
InitializeCriticalSection
SetStdHandle
FlushFileBuffers
RtlUnwind
InterlockedExchange
SetFilePointer
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
SetEndOfFile
GetProcessHeap
DeleteFileA
lstrlenA
lstrcmpiA
GetVersionExA
LoadLibraryA
GetProcAddress
FreeLibrary
GetWindowsDirectoryA
OutputDebugStringA
UnhandledExceptionFilter
lstrcpynA

gdi32

GetDeviceCaps

user32

MessageBoxA
CreateDialogParamA
SetFocus
DestroyWindow
DialogBoxParamA
SetWindowPos
ReleaseDC
GetDC
GetWindowRect
GetDesktopWindow
wsprintfA
EndDialog
SetDlgItemTextA
PeekMessageA
GetMessageA
TranslateMessage
DispatchMessageA
LoadStringA
GetKeyboardType
CharLowerA
CharNextA
SendMessageA
GetDlgItem
SendDlgItemMessageA
ShowWindow

advapi32

RegCloseKey
RegOpenKeyExA
RegQueryValueExA
RegCreateKeyExA
RegQueryInfoKeyA
RegEnumKeyExA
RegDeleteKeyA
RegSetValueExA

shlwapi

SHDeleteKeyA

winmm

mmioOpenA
mmioRead
mmioClose
mmioDescend

version

GetFileVersionInfoSizeA
GetFileVersionInfoA
VerQueryValueA

shell32

SHFileOperationA

ole32

StringFromGUID2

Exports

Exports

DirectXLoadString
DirectXSetupCallback
DirectXSetupSetCallback
DirectXSetupShowEULA
iDirectXSetup
iDirectXSetupGetEULA

Sections

.text
Size: 137KB - Virtual size: 136KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2.0MB - Virtual size: 2.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
DirectX/DirectX9/dxnt.cab
.cab
ACTC094.ini
ACT_RS.ini
ACT_RS.png
.png
GR3001.ini
GR3001.png
.png
GR3001_G.ini
GR4001.ini
GR4001.png
.png
GR4001_G.ini
GR4001_G.png
.png
GR4003.ini
GR4003.png
.png
GR4005.ini
GR4005.png
.png
GlmDA.ini
GlmDA.png
.png
GlmDA_G.ini
GlmDGP_G.ini
GlmDigGP.ini
GlmDigGP.png
.png
Hammer.ini
IA3002.ini
IA3002_1.png
.png
IA3002_2.png
.png
IA3002_G.ini
LGC202.ini
LGC202.png
.png
LGC207.ini
LGC207.png
.png
LGC209.ini
LGC209.png
.png
LGC20A.ini
LGC20A.png
.png
LGC291.ini
LGC291.png
.png
MS1B.ini
MS1B.png
.png
MS1B_01.png
.png
MS1B_02.png
.png
MS1B_03.png
.png
MS1B_04.png
.png
MS1B_05.png
.png
MS1B_06.png
.png
MS1B_07.png
.png
MS1B_08.png
.png
MS1B_09.png
.png
MS1B_10.png
.png
MS26.ini
MS26.png
.png
MS26_01.png
.png
MS26_02.png
.png
MS26_03.png
.png
MS26_04.png
.png
MS26_05.png
.png
MS26_06.png
.png
MS26_07.png
.png
MS26_08.png
.png
MS27.ini
MS27.png
.png
MS27_1.png
.png
MS27_2.png
.png
MS27_3.png
.png
MS27_4.png
.png
MS27_5.png
.png
MS28.ini
MS28.png
.png
MS28_1.png
.png
MS28_2.png
.png
MS28_3.png
.png
MS28_4.png
.png
MS28_5.png
.png
MS28_6.png
.png
MS28_7.png
.png
MS28_8.png
.png
MS34.ini
MS34.png
.png
MS34_01.png
.png
MS34_02.png
.png
MS34_03.png
.png
MS34_04.png
.png
MS34_05.png
.png
MS34_06.png
.png
MS34_07.png
.png
MS34_08.png
.png
MS34_G.ini
MS3B.ini
MS3B.png
.png
MS3B_1.png
.png
MS3B_2.png
.png
MS3B_3.png
.png
MS3B_4.png
.png
MS3B_a.png
.png
MS3B_c.png
.png
MS3B_m.png
.png
MS3B_t.png
.png
MS56.ini
MS56.png
.png
MS56_1.png
.png
MS56_10.png
.png
MS56_2.png
.png
MS56_3.png
.png
MS56_4.png
.png
MS56_5.png
.png
MS56_6.png
.png
MS56_7.png
.png
MS56_8.png
.png
MS56_9.png
.png
MS6.ini
MS6.png
.png
MS6_1.png
.png
MS6_10.png
.png
MS6_2.png
.png
MS6_3.png
.png
MS6_4.png
.png
MS6_5.png
.png
MS6_6.png
.png
MS6_7.png
.png
MS6_8.png
.png
MS6_9.png
.png
MS6_G.ini
MS7.ini
MS7.png
.png
MS7_1.png
.png
MS7_2.png
.png
MS7_3.png
.png
MS7_4.png
.png
MS7_5.png
.png
MS7_6.png
.png
MS7_7.png
.png
MS7_8.png
.png
MS7_9.png
.png
MS7_G.ini
MS8.ini
MS8.png
.png
MS8_1.png
.png
MS8_10.png
.png
MS8_2.png
.png
MS8_3.png
.png
MS8_4.png
.png
MS8_5.png
.png
MS8_6.png
.png
MS8_7.png
.png
MS8_8.png
.png
MS8_9.png
.png
MS8_G.ini
MSE.ini
MSE.png
.png
MSE_1.png
.png
MSE_10.png
.png
MSE_2.png
.png
MSE_3.png
.png
MSE_4.png
.png
MSE_5.png
.png
MSE_6.png
.png
MSE_7.png
.png
MSE_8.png
.png
MSE_9.png
.png
MSE_G.ini
MSF1F.ini
MSF1F.png
.png
MSF1F_1.png
.png
MSF1F_10.png
.png
MSF1F_2.png
.png
MSF1F_3.png
.png
MSF1F_4.png
.png
MSF1F_5.png
.png
MSF1F_6.png
.png
MSF1F_7.png
.png
MSF1F_8.png
.png
MSF1F_9.png
.png
MSPRW.ini
MSPRW.png
.png
MSPRW_1.png
.png
MSPRW_2.png
.png
MSPRW_3.png
.png
MSPRW_4.png
.png
MSPRW_5.png
.png
MSPRW_6.png
.png
MSPRW_7.png
.png
MSPRW_8.png
.png
RaiderPD.ini
SV-262E1.png
.png
SV-262E3.png
.png
SV-262E4.png
.png
SV2511.png
.png
SV2512.png
.png
amstream.dll
.dll regsvr32 windows:5 windows x86 arch:x86

e81416c998ec81e16a6187579974e55b

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
GetProcAddress
GetModuleHandleA
QueryPerformanceCounter
ResetEvent
DuplicateHandle
CreateThread
MulDiv
ReleaseSemaphore
CreateSemaphoreW
TerminateProcess
SetEvent
lstrcmpW
CreateEventW
DisableThreadLibraryCalls
LoadLibraryExW
FindResourceW
LoadResource
SizeofResource
FreeLibrary
GetCurrentThread
lstrcpynW
GetModuleFileNameW
lstrlenW
lstrcatW
HeapDestroy
WaitForSingleObject
GetCurrentProcess
CloseHandle
GetLastError
GetCurrentThreadId
lstrlenA
MultiByteToWideChar
lstrcmpiW
InterlockedDecrement
InterlockedIncrement
DeleteCriticalSection
InitializeCriticalSection
LeaveCriticalSection
EnterCriticalSection
lstrcpyW
QueueUserAPC

user32

IsRectEmpty
CharNextW
wsprintfW

advapi32

RegEnumKeyExW
RegSetValueExW
RegOpenKeyExW
RegCreateKeyExW
RegCloseKey
RegQueryValueExW
RegQueryInfoKeyW
RegDeleteKeyW
RegDeleteValueW

ole32

CoTaskMemFree
CoTaskMemAlloc
CoTaskMemRealloc
CoCreateInstance

oleaut32

VarI4FromStr
LoadTypeLi
RegisterTypeLi
SetErrorInfo
LoadRegTypeLi
VariantChangeType
SysAllocString
VariantClear
VariantInit
SysAllocStringLen
SysStringLen
SysFreeString

ddraw

DirectDrawCreate

msvcrt

??3@YAXPAX@Z
_purecall
free
??2@YAPAXI@Z
realloc
malloc

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 51KB - Virtual size: 51KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 460B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
d3d8.dll
.dll windows:5 windows x86 arch:x86

af72df6d7e1200ad3a9be28e45a44d97

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

d3d8.pdb

Imports

d3d8thk

OsThunkDdQueryDirectDrawObject
OsThunkDdBlt
OsThunkDdReenableDirectDrawObject
OsThunkDdReleaseDC
OsThunkDdGetDC
OsThunkDdDeleteDirectDrawObject
OsThunkDdGetDriverInfo
OsThunkDdGetAvailDriverMemory
OsThunkDdFlipToGDISurface
OsThunkDdSetExclusiveMode
OsThunkDdGetScanLine
OsThunkDdWaitForVerticalBlank
OsThunkDdGetFlipStatus
OsThunkDdGetBltStatus
OsThunkDdUnlock
OsThunkDdDestroyD3DBuffer
OsThunkDdLock
OsThunkDdLockD3D
OsThunkDdResetVisrgn
OsThunkDdFlip
OsThunkD3dDrawPrimitives2
OsThunkD3dValidateTextureStageState
OsThunkDdGetDriverState
OsThunkD3dContextDestroyAll
OsThunkD3dContextDestroy
OsThunkD3dContextCreate
OsThunkDdCreateSurfaceEx
OsThunkDdCanCreateD3DBuffer
OsThunkDdCanCreateSurface
OsThunkDdCreateSurfaceObject
OsThunkDdAttachSurface
OsThunkDdCreateD3DBuffer
OsThunkDdCreateSurface
OsThunkDdSetGammaRamp
OsThunkDdDeleteSurfaceObject
OsThunkDdDestroySurface
OsThunkDdUnlockD3D

msvcrt

_onexit
__dllonexit
??1type_info@@UAE@XZ
?terminate@@YAXXZ
_except_handler3
_adjust_fdiv
_initterm
realloc
_CIpow
_CxxThrowException
free
malloc
_ftol
sscanf
sprintf
_vsnprintf
__CxxFrameHandler
_purecall
_stricmp
_strlwr
wcsrchr
atoi
_snprintf
pow
memmove
fflush
fwrite
fprintf
fclose
fopen
_errno
exp
floor

user32

IntersectRect
wsprintfA
GetUserObjectInformationA
CloseDesktop
GetThreadDesktop
IsWindow
GetWindowThreadProcessId
SetWindowLongA
CallWindowProcA
GetCursorPos
SetCursorPos
GetIconInfo
GetDesktopWindow
GetWindowDC
SendMessageA
IsIconic
PostMessageA
GetWindowLongA
GetKeyState
SetWindowPos
GetForegroundWindow
IsWindowVisible
ShowWindow
IsZoomed
SystemParametersInfoA
SetRect
GetClientRect
ClientToScreen
OffsetRect
EnumDisplaySettingsA
GetSystemMetrics
GetMonitorInfoA
GetDC
ReleaseDC
LoadStringA
DefWindowProcA
SetForegroundWindow
DestroyIcon
SetCursor
GetCursor
CreateIconIndirect
OpenInputDesktop

advapi32

RegQueryValueExA
RegCloseKey
RegOpenKeyA
SetSecurityDescriptorDacl
InitializeSecurityDescriptor
AddAccessAllowedAce
InitializeAcl
GetLengthSid
GetSidSubAuthority
InitializeSid
GetSidLengthRequired
RegOpenKeyExA
RegSetValueExA
RegCreateKeyA
RegEnumKeyA

version

GetFileVersionInfoSizeA
GetFileVersionInfoA
VerQueryValueA

gdi32

GetDeviceCaps
GetNearestColor
CreateDCA
GdiEntry13
GetRegionData
DeleteObject
GetRandomRgn
CreateRectRgn
GetDIBits
CreateCompatibleBitmap
GdiEntry1
GetDeviceGammaRamp
StretchBlt
SetStretchBltMode
BitBlt
DeleteDC
GetSystemPaletteEntries
CreateCompatibleDC
CreateDIBitmap
GetObjectA

kernel32

OpenMutexA
DebugBreak
VirtualFree
VirtualProtect
VirtualAlloc
GetModuleFileNameA
GetVersionExA
GetSystemInfo
IsProcessorFeaturePresent
CreateMutexA
DisableThreadLibraryCalls
GetCurrentProcessId
LocalAlloc
Sleep
GetTickCount
LocalFree
InterlockedDecrement
OutputDebugStringA
lstrcpynA
WaitForSingleObject
LoadLibraryA
FreeLibrary
GetModuleHandleA
GetProcAddress
GetSystemDirectoryA
lstrcatA
InterlockedIncrement
ReleaseMutex
GetLastError
LeaveCriticalSection
EnterCriticalSection
InitializeCriticalSection
DeleteCriticalSection
GetCurrentThreadId
lstrcpyA
CreateFileA
SetFilePointer
ReadFile
MoveFileA
DeleteFileA
WriteFile
GetFileSize
SetErrorMode
WideCharToMultiByte
MultiByteToWideChar
lstrlenA
InterlockedCompareExchange
VerifyVersionInfoA
CloseHandle
InterlockedExchange
lstrcmpA
HeapAlloc
GetProcessHeap
ConnectNamedPipe
SetNamedPipeHandleState
DisconnectNamedPipe
SetUnhandledExceptionFilter
FlushFileBuffers
PeekNamedPipe
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
VerSetConditionMask

Exports

Exports

DebugSetMute
Direct3DCreate8
ValidatePixelShader
ValidateVertexShader

Sections

.text
Size: 1.1MB - Virtual size: 1.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 11KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data1
Size: 21KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 22KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 30KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
d3d8thk.dll
.dll windows:5 windows x86 arch:x86

65917657454922a46020cb10d9070c23

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

gdi32

DdEntry1
DdEntry2
DdEntry3
DdEntry5
DdEntry4
DdEntry7
DdEntry8
DdEntry9
DdEntry10
DdEntry11
DdEntry13
DdEntry12
DdEntry14
DdEntry17
DdEntry15
DdEntry18
DdEntry16
DdEntry50
DdEntry19
DdEntry20
DdEntry21
DdEntry24
DdEntry22
DdEntry23
DdEntry25
DdEntry26
DdEntry27
DdEntry28
DdEntry29
DdEntry30
DdEntry31
DdEntry6
DdEntry32
DdEntry33
DdEntry34
DdEntry35
DdEntry37
DdEntry36
DdEntry38
DdEntry39
DdEntry40
DdEntry41
DdEntry42
DdEntry43
DdEntry44
DdEntry45
DdEntry46
DdEntry47
DdEntry48
DdEntry49
DdEntry51
DdEntry52
DdEntry53
DdEntry54
DdEntry55
DdEntry56

msvcrt

_adjust_fdiv
_initterm
malloc
free

kernel32

Sleep
DisableThreadLibraryCalls

Exports

Exports

OsThunkD3dContextCreate
OsThunkD3dContextDestroy
OsThunkD3dContextDestroyAll
OsThunkD3dDrawPrimitives2
OsThunkD3dValidateTextureStageState
OsThunkDdAddAttachedSurface
OsThunkDdAlphaBlt
OsThunkDdAttachSurface
OsThunkDdBeginMoCompFrame
OsThunkDdBlt
OsThunkDdCanCreateD3DBuffer
OsThunkDdCanCreateSurface
OsThunkDdColorControl
OsThunkDdCreateD3DBuffer
OsThunkDdCreateDirectDrawObject
OsThunkDdCreateMoComp
OsThunkDdCreateSurface
OsThunkDdCreateSurfaceEx
OsThunkDdCreateSurfaceObject
OsThunkDdDeleteDirectDrawObject
OsThunkDdDeleteSurfaceObject
OsThunkDdDestroyD3DBuffer
OsThunkDdDestroyMoComp
OsThunkDdDestroySurface
OsThunkDdEndMoCompFrame
OsThunkDdFlip
OsThunkDdFlipToGDISurface
OsThunkDdGetAvailDriverMemory
OsThunkDdGetBltStatus
OsThunkDdGetDC
OsThunkDdGetDriverInfo
OsThunkDdGetDriverState
OsThunkDdGetDxHandle
OsThunkDdGetFlipStatus
OsThunkDdGetInternalMoCompInfo
OsThunkDdGetMoCompBuffInfo
OsThunkDdGetMoCompFormats
OsThunkDdGetMoCompGuids
OsThunkDdGetScanLine
OsThunkDdLock
OsThunkDdLockD3D
OsThunkDdQueryDirectDrawObject
OsThunkDdQueryMoCompStatus
OsThunkDdReenableDirectDrawObject
OsThunkDdReleaseDC
OsThunkDdRenderMoComp
OsThunkDdResetVisrgn
OsThunkDdSetColorKey
OsThunkDdSetExclusiveMode
OsThunkDdSetGammaRamp
OsThunkDdSetOverlayPosition
OsThunkDdUnattachSurface
OsThunkDdUnlock
OsThunkDdUnlockD3D
OsThunkDdUpdateOverlay
OsThunkDdWaitForVerticalBlank

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 20B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 228B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
d3d8thk.w2k
.dll windows:5 windows x86 arch:x86

423fd2aec57d2beb55ba046748fc0345

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

msvcrt

_adjust_fdiv
_initterm
malloc
free

kernel32

Sleep
DisableThreadLibraryCalls

Exports

Exports

OsThunkD3dContextCreate
OsThunkD3dContextDestroy
OsThunkD3dContextDestroyAll
OsThunkD3dDrawPrimitives2
OsThunkD3dValidateTextureStageState
OsThunkDdAddAttachedSurface
OsThunkDdAlphaBlt
OsThunkDdAttachSurface
OsThunkDdBeginMoCompFrame
OsThunkDdBlt
OsThunkDdCanCreateD3DBuffer
OsThunkDdCanCreateSurface
OsThunkDdColorControl
OsThunkDdCreateD3DBuffer
OsThunkDdCreateDirectDrawObject
OsThunkDdCreateMoComp
OsThunkDdCreateSurface
OsThunkDdCreateSurfaceEx
OsThunkDdCreateSurfaceObject
OsThunkDdDeleteDirectDrawObject
OsThunkDdDeleteSurfaceObject
OsThunkDdDestroyD3DBuffer
OsThunkDdDestroyMoComp
OsThunkDdDestroySurface
OsThunkDdEndMoCompFrame
OsThunkDdFlip
OsThunkDdFlipToGDISurface
OsThunkDdGetAvailDriverMemory
OsThunkDdGetBltStatus
OsThunkDdGetDC
OsThunkDdGetDriverInfo
OsThunkDdGetDriverState
OsThunkDdGetDxHandle
OsThunkDdGetFlipStatus
OsThunkDdGetInternalMoCompInfo
OsThunkDdGetMoCompBuffInfo
OsThunkDdGetMoCompFormats
OsThunkDdGetMoCompGuids
OsThunkDdGetScanLine
OsThunkDdLock
OsThunkDdLockD3D
OsThunkDdQueryDirectDrawObject
OsThunkDdQueryMoCompStatus
OsThunkDdReenableDirectDrawObject
OsThunkDdReleaseDC
OsThunkDdRenderMoComp
OsThunkDdResetVisrgn
OsThunkDdSetColorKey
OsThunkDdSetExclusiveMode
OsThunkDdSetGammaRamp
OsThunkDdSetOverlayPosition
OsThunkDdUnattachSurface
OsThunkDdUnlock
OsThunkDdUnlockD3D
OsThunkDdUpdateOverlay
OsThunkDdWaitForVerticalBlank

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 20B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 106B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
d3d9.dll
.dll windows:5 windows x86 arch:x86

48df0bb48ed1cdc965a7b7b21aad1c7b

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

d3d9.pdb

Imports

d3d8thk

OsThunkDdSetGammaRamp
OsThunkDdCreateSurfaceEx
OsThunkDdCreateSurface
OsThunkDdCreateD3DBuffer
OsThunkDdAttachSurface
OsThunkDdCreateSurfaceObject
OsThunkDdCanCreateSurface
OsThunkDdCanCreateD3DBuffer
OsThunkD3dContextCreate
OsThunkD3dContextDestroy
OsThunkD3dContextDestroyAll
OsThunkDdGetDriverState
OsThunkD3dValidateTextureStageState
OsThunkD3dDrawPrimitives2
OsThunkDdGetScanLine
OsThunkDdDeleteSurfaceObject
OsThunkDdDestroySurface
OsThunkDdQueryDirectDrawObject
OsThunkDdBlt
OsThunkDdFlip
OsThunkDdReleaseDC
OsThunkDdGetDC
OsThunkDdDeleteDirectDrawObject
OsThunkDdGetDriverInfo
OsThunkDdQueryMoCompStatus
OsThunkDdRenderMoComp
OsThunkDdEndMoCompFrame
OsThunkDdBeginMoCompFrame
OsThunkDdDestroyMoComp
OsThunkDdCreateMoComp
OsThunkDdGetMoCompBuffInfo
OsThunkDdGetInternalMoCompInfo
OsThunkDdGetMoCompFormats
OsThunkDdGetMoCompGuids
OsThunkDdGetAvailDriverMemory
OsThunkDdFlipToGDISurface
OsThunkDdSetExclusiveMode
OsThunkDdWaitForVerticalBlank
OsThunkDdGetFlipStatus
OsThunkDdGetBltStatus
OsThunkDdUnlock
OsThunkDdUnlockD3D
OsThunkDdLock
OsThunkDdLockD3D
OsThunkDdResetVisrgn
OsThunkDdReenableDirectDrawObject
OsThunkDdDestroyD3DBuffer

msvcrt

_onexit
__dllonexit
_except_handler3
?terminate@@YAXXZ
??1type_info@@UAE@XZ
_adjust_fdiv
_initterm
memmove
realloc
free
malloc
strstr
isalnum
sscanf
_purecall
_strlwr
wcsrchr
atoi
ceil
_stricmp
_vsnprintf
floor
_CIpow
__CxxFrameHandler
_ftol
_snprintf
qsort
?what@exception@@UBEPBDXZ
??0exception@@QAE@ABQBD@Z
??1exception@@UAE@XZ
fflush
fwrite
??0exception@@QAE@ABV0@@Z
fopen
sprintf
strchr
??0exception@@QAE@XZ
fclose
calloc
_CxxThrowException

user32

PtInRect
GetCursorPos
SetCursorPos
GetCursor
SetCursor
DestroyIcon
GetDesktopWindow
GetWindowDC
CreateIconIndirect
mouse_event
SetForegroundWindow
OpenInputDesktop
GetUserObjectInformationA
CloseDesktop
GetThreadDesktop
IsWindow
GetWindowThreadProcessId
KillTimer
SetWindowLongA
CallWindowProcA
SendMessageA
IsIconic
PostMessageA
GetWindowLongA
GetKeyState
GetForegroundWindow
IsWindowVisible
ShowWindow
SetTimer
SetRect
GetClientRect
ClientToScreen
EnumDisplaySettingsA
OffsetRect
IntersectRect
GetSystemMetrics
LoadStringA
GetMonitorInfoA
GetDC
ReleaseDC
SetWindowPos
SystemParametersInfoA
DefWindowProcA
wsprintfA
IsZoomed

advapi32

GetSidLengthRequired
RegCreateKeyExA
RegSetValueExA
RegQueryInfoKeyA
RegEnumValueA
RegDeleteValueA
RegOpenKeyA
InitializeSid
GetSidSubAuthority
GetLengthSid
InitializeAcl
AddAccessAllowedAce
InitializeSecurityDescriptor
SetSecurityDescriptorDacl
RegOpenKeyExA
RegQueryValueExA
RegCloseKey

version

GetFileVersionInfoA
GetFileVersionInfoSizeA
VerQueryValueA

winmm

timeEndPeriod
timeBeginPeriod

gdi32

DeleteDC
GetNearestColor
CreateDCA
GdiEntry13
GetRegionData
DeleteObject
GetRandomRgn
CreateRectRgn
GetDIBits
CreateCompatibleBitmap
GetDeviceGammaRamp
SelectObject
CreateDIBSection
CreateCompatibleDC
StretchBlt
SetStretchBltMode
BitBlt
GdiEntry1
GetSystemPaletteEntries
CreateDIBitmap
GetDeviceCaps

kernel32

lstrcmpA
Sleep
QueryPerformanceFrequency
QueryPerformanceCounter
GetTickCount
VerSetConditionMask
VerifyVersionInfoA
InterlockedCompareExchange
InterlockedIncrement
GetCurrentThread
SetThreadPriority
ResumeThread
SetThreadAffinityMask
GetProcessAffinityMask
GetTempPathA
TlsGetValue
TlsSetValue
GetEnvironmentVariableA
WideCharToMultiByte
GetSystemInfo
CreateEventA
CreateThread
ExitThread
SetEvent
WaitForMultipleObjects
VirtualProtect
VirtualAlloc
VirtualFree
IsProcessorFeaturePresent
DebugBreak
SetUnhandledExceptionFilter
UnhandledExceptionFilter
ReleaseMutex
GetLastError
GetVersionExA
CreateFileA
MultiByteToWideChar
SetFilePointer
ReadFile
MoveFileA
DeleteFileA
WriteFile
GetFileSize
GetModuleFileNameA
GetPrivateProfileStringA
ConnectNamedPipe
SetNamedPipeHandleState
DisconnectNamedPipe
FlushFileBuffers
PeekNamedPipe
TransactNamedPipe
GetCurrentThreadId
WaitNamedPipeA
CreateNamedPipeA
TerminateProcess
TlsAlloc
GetCurrentProcess
DeleteCriticalSection
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
FreeLibrary
GetProcAddress
LoadLibraryA
InterlockedExchange
SetErrorMode
WaitForSingleObject
InterlockedDecrement
GetSystemDirectoryA
GetModuleHandleA
lstrcpynA
OutputDebugStringA
CloseHandle
OpenMutexA
CreateMutexA
DisableThreadLibraryCalls
GetCurrentProcessId
LocalAlloc
LocalFree

Exports

Exports

D3DPERF_BeginEvent
D3DPERF_EndEvent
D3DPERF_GetStatus
D3DPERF_QueryRepeatFrame
D3DPERF_SetMarker
D3DPERF_SetOptions
D3DPERF_SetRegion
DebugSetLevel
DebugSetMute
Direct3DCreate9
Direct3DShaderValidatorCreate9
PSGPError
PSGPSampleTexture

Sections

.text
Size: 1.5MB - Virtual size: 1.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 17KB - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 15KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 52KB - Virtual size: 52KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
d3dim.dll
.dll windows:5 windows x86 arch:x86

aaf084b5ca64e225bdea4fd61bc7dfac

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Imports

msvcrt

_initterm
free
??3@YAXPAX@Z
_except_handler3
_purecall
??2@YAPAXI@Z
sscanf
_ftol
_CxxThrowException
fwrite
ftell
_onexit
__dllonexit
_CIpow
_CIexp
sprintf
??1type_info@@UAE@XZ
_adjust_fdiv
malloc
fflush
fopen
fclose
fseek

user32

IntersectRect
SetRect

advapi32

RegOpenKeyExA
RegCreateKeyA
RegSetValueExA
RegCloseKey
RegQueryInfoKeyA
RegEnumKeyExA
RegOpenKeyA
RegQueryValueExA

ddraw

ReleaseDDThreadLock
DDInternalUnlock
DDInternalLock
D3DParseUnknownCommand
AcquireDDThreadLock

kernel32

DebugBreak
HeapDestroy
HeapReAlloc
HeapFree
HeapCreate
VirtualFree
VirtualAlloc
OutputDebugStringA
HeapAlloc
LoadLibraryA
GetProcAddress
LeaveCriticalSection
EnterCriticalSection
GetModuleHandleA
GetModuleFileNameA
DisableThreadLibraryCalls
GetSystemInfo
GetCurrentProcessId
InitializeCriticalSection
DeleteCriticalSection
IsBadReadPtr
FreeLibrary
IsBadCodePtr

Exports

Exports

D3DFree
D3DMalloc
D3DRealloc
Direct3DCreate
Direct3DCreateDevice
Direct3DCreateTexture
Direct3DGetSWRastZPixFmts
Direct3D_HALCleanUp
FlushD3DDevices
FlushD3DDevices2
PaletteAssociateNotify
PaletteUpdateNotify
SurfaceFlipNotify

Sections

.text
Size: 379KB - Virtual size: 379KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 39KB - Virtual size: 54KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
d3dim.xpg
.dll windows:5 windows x86 arch:x86

0a250d2a7f2aabed9156e96aafc6c5f9

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

msvcrt

?terminate@@YAXXZ
_onexit
__dllonexit
??1type_info@@UAE@XZ
_adjust_fdiv
malloc
_initterm
free
fopen
fclose
fflush
fseek
ftell
fwrite
_except_handler3
_CxxThrowException
_CIpow
_CIexp
sprintf
_ftol
??2@YAPAXI@Z
_purecall
??3@YAXPAX@Z
sscanf

user32

IntersectRect
SetRect

advapi32

RegSetValueExA
RegCreateKeyA
RegOpenKeyExA
RegCloseKey
RegOpenKeyA
RegQueryInfoKeyA
RegEnumKeyExA
RegQueryValueExA

ddraw

ReleaseDDThreadLock
D3DParseUnknownCommand
DDInternalUnlock
DDInternalLock
AcquireDDThreadLock

kernel32

GetCurrentProcessId
IsBadReadPtr
InitializeCriticalSection
GetSystemInfo
FreeLibrary
IsBadCodePtr
GetModuleFileNameA
GetModuleHandleA
DisableThreadLibraryCalls
EnterCriticalSection
LeaveCriticalSection
GetProcAddress
LoadLibraryA
LocalAlloc
LocalFree
LocalReAlloc
VirtualFree
OutputDebugStringA
VirtualAlloc
DeleteCriticalSection

Exports

Exports

D3DFree
D3DMalloc
D3DRealloc
Direct3DCreate
Direct3DCreateDevice
Direct3DCreateTexture
Direct3DGetSWRastZPixFmts
Direct3D_HALCleanUp
FlushD3DDevices
FlushD3DDevices2
PaletteAssociateNotify
PaletteUpdateNotify
SurfaceFlipNotify

Sections

.text
Size: 370KB - Virtual size: 370KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 39KB - Virtual size: 54KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
d3dim700.dll
.dll windows:5 windows x86 arch:x86

44012ae2f104a644e715dfc96a041b0a

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

msvcrt

malloc
_onexit
__dllonexit
?terminate@@YAXXZ
??1type_info@@UAE@XZ
_adjust_fdiv
_initterm
free
_ftol
fopen
fclose
fflush
fseek
ftell
fwrite
_except_handler3
_purecall
pow
sprintf
exp
_CIexp
_CIpow
??2@YAPAXI@Z
_CxxThrowException
__CxxFrameHandler
??3@YAXPAX@Z

user32

IntersectRect
IsRectEmpty

advapi32

RegSetValueExA
RegQueryValueExA
RegOpenKeyA
RegCreateKeyA
RegCloseKey
RegOpenKeyExA

ddraw

CompleteCreateSysmemSurface
ReleaseDDThreadLock
AcquireDDThreadLock
DDInternalUnlock
DDInternalLock
D3DParseUnknownCommand

kernel32

LoadLibraryA
GetProcAddress
DisableThreadLibraryCalls
GetModuleHandleA
GetModuleFileNameA
Sleep
GetVersionExA
GetCurrentProcessId
IsBadReadPtr
FreeLibrary
IsBadCodePtr
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetSystemTimeAsFileTime
TerminateProcess
GetCurrentProcess
LocalAlloc
LocalFree
LocalReAlloc
VirtualFree
VirtualAlloc
GetSystemInfo

Exports

Exports

CreateTexture
D3DBreakVBLock
D3DFree
D3DMalloc
D3DRealloc
D3DTextureUpdate
DestroyTexture
Direct3DCreate
Direct3DCreateDevice
Direct3D_HALCleanUp
FlushD3DDevices
GetLOD
GetPriority
PaletteAssociateNotify
PaletteUpdateNotify
SetLOD
SetPriority
SurfaceFlipNotify

Sections

.text
Size: 694KB - Virtual size: 694KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 24KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data1
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
d3dpmesh.dll
.dll windows:5 windows x86 arch:x86

11fe7b7a647f9d7f932a13447062b9ec

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Imports

msvcrt

malloc
_adjust_fdiv
_ftol
_initterm
free

kernel32

EnterCriticalSection
lstrlenA
HeapDestroy
HeapCreate
HeapFree
LeaveCriticalSection
SetEvent
lstrcpyA
lstrcmpA
HeapAlloc

Exports

Exports

CreateD3DRMPMeshVisual

Sections

.text
Size: 31KB - Virtual size: 31KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 48B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 520B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
d3dpmesh.xpg
.dll windows:5 windows x86 arch:x86

bf37aaa95d3ffb6ec33700abef7bde7f

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

msvcrt

_adjust_fdiv
malloc
_initterm
free
_ftol

kernel32

LeaveCriticalSection
HeapDestroy
HeapCreate
HeapFree
HeapAlloc
lstrlenA
lstrcmpA
lstrcpyA
SetEvent
EnterCriticalSection

Exports

Exports

CreateD3DRMPMeshVisual

Sections

.text
Size: 30KB - Virtual size: 30KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 32B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 510B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
d3dramp.dll
.dll windows:5 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Exports

Exports

RampOldTri
g_RampOld_BeadTbl

Sections

CSEG
Size: 419KB - Virtual size: 419KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.text
Size: 512B - Virtual size: 453B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

DSEG
Size: 50KB - Virtual size: 49KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 94KB - Virtual size: 94KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
d3dramp.xpg
.dll windows:5 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Exports

Exports

RampOldTri
g_RampOld_BeadTbl

Sections

CSEG
Size: 419KB - Virtual size: 419KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.text
Size: 512B - Virtual size: 389B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

DSEG
Size: 50KB - Virtual size: 49KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 94KB - Virtual size: 94KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
d3drm.dll
.dll windows:5 windows x86 arch:x86

2e99249d0177976ed8ca94ec21bdcca3

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Imports

msvcrt

_except_handler3
getc
_initterm
_adjust_fdiv
??2@YAPAXI@Z
_beginthread
_endthread
_CIfmod
??3@YAXPAX@Z
floor
fread
time
srand
isdigit
fseek
isspace
qsort
_CIacos
_strdup
wcscmp
getenv
realloc
rand
memmove
malloc
free
_ftol

kernel32

GetLastError
GetCurrentProcessId
DeleteFileA
lstrcatA
CreateFileA
HeapCreate
HeapReAlloc
HeapDestroy
HeapAlloc
HeapFree
InterlockedDecrement
InterlockedIncrement
MultiByteToWideChar
GlobalUnlock
GlobalReAlloc
GlobalAlloc
Sleep
lstrcmpA
GetProfileIntA
LeaveCriticalSection
WaitForSingleObject
SetEvent
EnterCriticalSection
InitializeCriticalSection
InterlockedExchange
CreateEventA
CloseHandle
DeleteCriticalSection
GetSystemInfo
IsBadReadPtr
IsBadWritePtr
GetProcAddress
LoadLibraryA
LocalFree
lstrcpyA
lstrlenA
lstrcpynA
SetFilePointer
ReadFile
UnmapViewOfFile
GetFileSize
MapViewOfFile
CreateFileMappingA
FreeLibrary
SizeofResource
GlobalFree
GlobalLock
FreeResource
LockResource
GetTempPathA
GetTempFileNameA
LoadResource
FindResourceA

user32

wsprintfA
ReleaseDC
GetDC
ClientToScreen
SetRect
GetSystemMetrics

advapi32

RegCloseKey
RegOpenKeyExA
RegQueryValueExA

gdi32

GetSystemPaletteEntries
GetDeviceCaps

ddraw

DirectDrawCreate

msvfw32

ICImageDecompress

ole32

CoInitialize
CoCreateInstance
CoUninitialize

oleaut32

SysFreeString
SysAllocString

Exports

Exports

D3DRMColorGetAlpha
D3DRMColorGetBlue
D3DRMColorGetGreen
D3DRMColorGetRed
D3DRMCreateColorRGB
D3DRMCreateColorRGBA
D3DRMMatrixFromQuaternion
D3DRMQuaternionFromRotation
D3DRMQuaternionMultiply
D3DRMQuaternionSlerp
D3DRMVectorAdd
D3DRMVectorCrossProduct
D3DRMVectorDotProduct
D3DRMVectorModulus
D3DRMVectorNormalize
D3DRMVectorRandom
D3DRMVectorReflect
D3DRMVectorRotate
D3DRMVectorScale
D3DRMVectorSubtract
Direct3DRMCreate
DllCanUnloadNow
DllGetClassObject

Sections

.text
Size: 322KB - Virtual size: 322KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 18KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
d3drm.xpg
.dll windows:5 windows x86 arch:x86

036abd03779827a82c766078826c93be

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

msvcrt

_endthread
??2@YAPAXI@Z
??3@YAXPAX@Z
floor
_beginthread
time
srand
fread
fseek
_initterm
_adjust_fdiv
_except_handler3
_CIfmod
isspace
isdigit
getc
qsort
memmove
malloc
realloc
free
_strdup
getenv
_CIacos
rand
wcscmp
_ftol

kernel32

GetTempFileNameA
GetTempPathA
GetCurrentProcessId
FreeLibrary
LoadResource
HeapDestroy
HeapCreate
HeapReAlloc
HeapFree
HeapAlloc
MultiByteToWideChar
InterlockedDecrement
InterlockedIncrement
GlobalReAlloc
GlobalAlloc
GlobalUnlock
GetProfileIntA
Sleep
FindResourceA
LeaveCriticalSection
WaitForSingleObject
SetEvent
EnterCriticalSection
InitializeCriticalSection
InterlockedExchange
CreateEventA
CloseHandle
DeleteCriticalSection
GetSystemInfo
IsBadReadPtr
IsBadWritePtr
GetProcAddress
LoadLibraryA
LocalFree
lstrcpyA
lstrlenA
lstrcpynA
UnmapViewOfFile
GetFileSize
MapViewOfFile
CreateFileMappingA
lstrcatA
CreateFileA
lstrcmpA
LockResource
GetLastError
GlobalFree
GlobalLock
SetFilePointer
ReadFile
SizeofResource
FreeResource
DeleteFileA

user32

wsprintfA
ClientToScreen
SetRect
GetDC
ReleaseDC
GetSystemMetrics

advapi32

RegQueryValueExA
RegOpenKeyExA
RegCloseKey

gdi32

GetSystemPaletteEntries
GetDeviceCaps

ddraw

DirectDrawCreate

msvfw32

ICImageDecompress

ole32

CoCreateInstance
CoUninitialize
CoInitialize

oleaut32

SysAllocString
SysFreeString

Exports

Exports

D3DRMColorGetAlpha
D3DRMColorGetBlue
D3DRMColorGetGreen
D3DRMColorGetRed
D3DRMCreateColorRGB
D3DRMCreateColorRGBA
D3DRMMatrixFromQuaternion
D3DRMQuaternionFromRotation
D3DRMQuaternionMultiply
D3DRMQuaternionSlerp
D3DRMVectorAdd
D3DRMVectorCrossProduct
D3DRMVectorDotProduct
D3DRMVectorModulus
D3DRMVectorNormalize
D3DRMVectorRandom
D3DRMVectorReflect
D3DRMVectorRotate
D3DRMVectorScale
D3DRMVectorSubtract
Direct3DRMCreate
DllCanUnloadNow
DllGetClassObject

Sections

.text
Size: 309KB - Virtual size: 309KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 17KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
d3dxof.dll
.dll windows:5 windows x86 arch:x86

2a5a73044e09ce5262a6a38d104ae40e

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Imports

msvcrt

_adjust_fdiv
malloc
_initterm
free
vsprintf
isalpha
atof
atol
isalnum
isspace
isdigit
isxdigit
sscanf
_purecall

kernel32

IsBadReadPtr
lstrcmpA
HeapDestroy
HeapCreate
HeapReAlloc
HeapFree
HeapAlloc
MoveFileA
SetFilePointer
ReadFile
GetTempFileNameA
WriteFile
DeleteFileA
LoadLibraryA
GetProcAddress
LeaveCriticalSection
WaitForSingleObject
SetEvent
EnterCriticalSection
InitializeCriticalSection
InterlockedExchange
CreateEventA
CloseHandle
DeleteCriticalSection
InterlockedIncrement
InterlockedDecrement
lstrcmpiA
CreateThread
FindResourceA
lstrlenA
IsBadWritePtr
FreeResource
SizeofResource
LockResource
LoadResource
UnmapViewOfFile
MapViewOfFile
CreateFileMappingA
GetFileSize
CreateFileA
WaitForMultipleObjects

Exports

Exports

DirectXFileCreate
DllCanUnloadNow
DllGetClassObject

Sections

.text
Size: 38KB - Virtual size: 38KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
d3dxof.xpg
.dll windows:5 windows x86 arch:x86

9e292ef8a851106689587dd3bcf4e9b3

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

msvcrt

_adjust_fdiv
malloc
_initterm
free
vsprintf
setlocale
_strdup
isalpha
atof
atol
isalnum
isspace
isdigit
isxdigit
sscanf
_purecall

kernel32

lstrcmpA
HeapDestroy
HeapCreate
HeapReAlloc
HeapFree
HeapAlloc
MoveFileA
SetFilePointer
ReadFile
GetTempFileNameA
DeleteFileA
WriteFile
LoadLibraryA
GetProcAddress
CreateThread
WaitForMultipleObjects
CreateFileA
GetFileSize
LeaveCriticalSection
WaitForSingleObject
SetEvent
EnterCriticalSection
InitializeCriticalSection
InterlockedExchange
CreateEventA
CloseHandle
DeleteCriticalSection
InterlockedIncrement
InterlockedDecrement
lstrcmpiA
IsBadReadPtr
lstrlenA
IsBadWritePtr
FreeResource
UnmapViewOfFile
SizeofResource
LockResource
LoadResource
FindResourceA
MapViewOfFile
CreateFileMappingA

Exports

Exports

DirectXFileCreate
DllCanUnloadNow
DllGetClassObject

Sections

.text
Size: 37KB - Virtual size: 37KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
ddraw.dll
.dll windows:5 windows x86 arch:x86

19f62e23490831632f5778d0cb39067b

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

ddraw.pdb

Imports

msvcrt

qsort
_ftol
_adjust_fdiv
malloc
_initterm
free
memmove
bsearch
_strlwr
wcsrchr
atoi
_except_handler3
_stricmp
floor

ntdll

VerSetConditionMask

user32

RedrawWindow
ChangeDisplaySettingsExA
EnumDisplayDevicesA
wsprintfA
DestroyWindow
GetClassInfoA
RegisterClassA
CreateWindowExA
GetClientRect
ClientToScreen
GetWindowThreadProcessId
SetCursor
KillTimer
SetWindowLongA
SendMessageA
IsIconic
PostMessageA
CallWindowProcA
GetAsyncKeyState
GetKeyState
SetFocus
DefWindowProcA
OpenClipboard
EmptyClipboard
SetClipboardData
CloseClipboard
OpenInputDesktop
GetUserObjectInformationA
CloseDesktop
GetThreadDesktop
GetLastActivePopup
SystemParametersInfoA
mouse_event
SetForegroundWindow
SetWindowPos
GetForegroundWindow
ShowWindow
IsZoomed
SetTimer
ClipCursor
GetWindowLongA
IsWindowVisible
GetSystemMetrics
IsRectEmpty
GetMonitorInfoA
ChangeDisplaySettingsA
LoadStringA
CopyRect
EnumDisplaySettingsA
IsWindow
ScreenToClient
OffsetRect
SetRect
GetDC
ReleaseDC
IntersectRect
EqualRect

dciman32

DCICreatePrimary
DCIDestroy
DCICloseProvider
DCIEndAccess
DCIOpenProvider
DCIBeginAccess

advapi32

RegSetValueExA
RegOpenKeyExA
GetSidLengthRequired
InitializeSid
GetSidSubAuthority
GetLengthSid
RegQueryValueExA
RegEnumKeyA
RegCloseKey
RegOpenKeyA
SetSecurityDescriptorDacl
InitializeSecurityDescriptor
AddAccessAllowedAce
InitializeAcl
RegCreateKeyA

gdi32

ResizePalette
CreatePalette
GetDeviceCaps
GdiEntry5
RealizePalette
SelectPalette
SaveDC
DeleteDC
RestoreDC
GdiEntry8
StretchBlt
GdiEntry7
BitBlt
SetDIBColorTable
GetSystemPaletteEntries
SelectObject
CreateCompatibleDC
CreateDIBSection
GetDIBits
CreateCompatibleBitmap
SetSystemPaletteUse
DeleteObject
AnimatePalette
GetObjectType
GdiEntry4
GdiEntry2
GdiEntry10
PatBlt
ExtTextOutA
SetBkColor
StretchDIBits
GdiEntry13
GdiEntry6
GdiEntry14
GetDeviceGammaRamp
GdiEntry15
GetStockObject
GetRgnBox
CreateRectRgn
GetRandomRgn
GetRegionData
GdiEntry12
GdiEntry1
GdiEntry3
CreateDCA
GetNearestColor
GdiEntry11
SetPaletteEntries

kernel32

LocalFree
GetCurrentProcessId
GetLastError
GetSystemInfo
IsBadWritePtr
LeaveCriticalSection
EnterCriticalSection
IsBadReadPtr
GetProcAddress
GetModuleHandleA
IsBadCodePtr
FreeLibrary
LoadLibraryA
ReleaseMutex
WaitForSingleObject
lstrcpyA
lstrcpynA
CloseHandle
SetErrorMode
GetProfileIntA
lstrcmpA
GetCurrentThreadId
GlobalFree
GlobalUnlock
GlobalLock
GlobalAlloc
InterlockedExchange
lstrcmpiA
GetTickCount
OutputDebugStringA
LocalReAlloc
DeleteCriticalSection
OpenMutexA
InitializeCriticalSection
CreateMutexA
DisableThreadLibraryCalls
GetCurrentProcess
lstrcatA
WideCharToMultiByte
CreateFileA
MultiByteToWideChar
GetSystemDirectoryA
lstrlenA
ReadFile
SetFilePointer
GetModuleFileNameA
VerifyVersionInfoA
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
LocalAlloc

Exports

Exports

AcquireDDThreadLock
CompleteCreateSysmemSurface
D3DParseUnknownCommand
DDGetAttachedSurfaceLcl
DDInternalLock
DDInternalUnlock
DSoundHelp
DirectDrawCreate
DirectDrawCreateClipper
DirectDrawCreateEx
DirectDrawEnumerateA
DirectDrawEnumerateExA
DirectDrawEnumerateExW
DirectDrawEnumerateW
DllCanUnloadNow
DllGetClassObject
GetDDSurfaceLocal
GetOLEThunkData
GetSurfaceFromDC
RegisterSpecialCase
ReleaseDDThreadLock

Sections

.text
Size: 237KB - Virtual size: 236KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 6KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 28KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
ddrawex.dll
.dll regsvr32 windows:5 windows x86 arch:x86

40193c37e36853f13b55eb16686bbe8d

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

TerminateProcess
GetModuleHandleA
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
InterlockedIncrement
GetTickCount
QueryPerformanceCounter
GetProfileStringA
LoadLibraryA
GetVersionExA
GetProcAddress
FreeLibrary
SetErrorMode
LocalFree
LocalAlloc
GetModuleFileNameA
lstrlenA
DisableThreadLibraryCalls
InterlockedDecrement
GetCurrentProcess

user32

GetDC
wsprintfA
ReleaseDC
MessageBoxA

advapi32

RegSetValueExA
RegCreateKeyA
RegDeleteKeyA
RegCloseKey
RegEnumKeyExA
RegOpenKeyExA
RegQueryValueExA
RegOpenKeyA

gdi32

DeleteDC
CreateDIBSection
SetDIBColorTable
CreateCompatibleDC
SelectObject
GetSystemPaletteEntries
DeleteObject

version

GetFileVersionInfoA
VerQueryValueA
GetFileVersionInfoSizeA

ddraw

ReleaseDDThreadLock
AcquireDDThreadLock

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 17KB - Virtual size: 17KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 976B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
devenum.dll
.dll regsvr32 windows:5 windows x86 arch:x86

f773868e6cb462194b004b94abddb0dc

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

LoadLibraryW
CreateMutexW
TerminateProcess
GetProcAddress
lstrcmpW
DisableThreadLibraryCalls
GetVersionExW
ReleaseMutex
GetModuleHandleW
LoadLibraryExW
FindResourceW
LoadResource
SizeofResource
FreeLibrary
lstrcpynW
GetModuleFileNameW
lstrcatW
HeapDestroy
WaitForSingleObject
GetCurrentProcess
CloseHandle
GetLastError
lstrlenA
WideCharToMultiByte
lstrcmpiW
MultiByteToWideChar
InterlockedDecrement
InterlockedIncrement
DeleteCriticalSection
InitializeCriticalSection
LeaveCriticalSection
EnterCriticalSection
lstrcpyW
lstrlenW

msvcrt

_except_handler3
_purecall
free
??2@YAPAXI@Z
realloc
malloc
??3@YAXPAX@Z

user32

wsprintfW
LoadStringW
CharNextW

advapi32

RegSetValueExW
RegQueryValueExW
RegOpenKeyExW
RegCreateKeyExW
RegCloseKey
RegDeleteKeyW
RegQueryInfoKeyW
RegEnumKeyExW
RegDeleteValueW
RegEnumKeyW

ole32

CoCreateInstance
StringFromGUID2
CreateBindCtx
CLSIDFromString
CreateAntiMoniker
CoTaskMemFree
CoTaskMemAlloc
CoTaskMemRealloc

oleaut32

SafeArrayCreate
SafeArrayAccessData
SafeArrayUnaccessData
VarI4FromStr
LoadTypeLi
RegisterTypeLi
SysAllocString
VariantClear
SysFreeString

winmm

midiOutGetNumDevs
waveInGetDevCapsW
waveOutGetDevCapsW
waveInMessage
waveOutMessage
waveInGetNumDevs
midiOutGetDevCapsW

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 41KB - Virtual size: 41KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 83KB - Virtual size: 82KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
diactfrm.dll
.dll regsvr32 windows:5 windows x86 arch:x86

7ccc752422fb8b9373bf78f44fa203ed

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

ntdll

RtlUnwind

kernel32

EnterCriticalSection
VirtualAlloc
HeapReAlloc
RaiseException
HeapSize
GetACP
GetOEMCP
GetCPInfo
InitializeCriticalSection
LoadLibraryA
LCMapStringA
LCMapStringW
GetLocaleInfoA
GetStringTypeA
GetStringTypeW
SetFilePointer
SetUnhandledExceptionFilter
GetSystemInfo
VirtualQuery
SetStdHandle
IsBadCodePtr
FlushFileBuffers
CloseHandle
LeaveCriticalSection
WriteFile
VirtualFree
HeapCreate
HeapDestroy
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
IsProcessorFeaturePresent
UnmapViewOfFile
CreateFileW
CreateFileA
CreateFileMappingA
MapViewOfFile
GetFileSize
GetModuleFileNameA
DeleteCriticalSection
GetStartupInfoA
GetFileType
GetStdHandle
SetHandleCount
TlsAlloc
TlsGetValue
SetLastError
TlsFree
GetModuleHandleA
ExitProcess
MultiByteToWideChar
GetLastError
HeapFree
HeapAlloc
GetVersionExA
GetCommandLineA
TlsSetValue
GetCurrentThreadId
GetModuleFileNameW
Sleep
WideCharToMultiByte
IsBadReadPtr
IsBadWritePtr
lstrcmpW
GetTickCount
MulDiv
lstrcpyW
InterlockedDecrement
InterlockedIncrement
lstrcmpiW
LoadLibraryW
GetProcAddress
FreeLibrary
lstrlenW
VirtualProtect

advapi32

RegOpenKeyA
RegQueryValueExA
RegCloseKey
RegQueryValueW
RegOpenKeyExW
RegDeleteKeyW
RegEnumKeyExW
RegSetValueExW
RegCreateKeyExW
RegQueryValueExW

ole32

CoTaskMemFree
StringFromCLSID

user32

DefWindowProcW
WindowFromPoint
EndPaint
BeginPaint
IsWindowVisible
SetPropW
GetPropW
RegisterClassExW
EnumChildWindows
DispatchMessageW
TranslateMessage
GetMessageW
ReleaseCapture
SetCapture
GetWindow
UnregisterClassW
GetClientRect
InvalidateRect
CreateWindowExW
DestroyWindow
LoadImageW
GetDesktopWindow
GetWindowDC
SetCursor
ValidateRect
LoadCursorW
GetIconInfo
DrawIcon
PostQuitMessage
ClipCursor
GetSystemMetrics
GetWindowRect
FillRect
GetUpdateRect
GetDoubleClickTime
SetFocus
SetParent
LoadStringW
IsWindow
MoveWindow
OffsetRect
GetDC
ReleaseDC
GetCursorPos
ScreenToClient
ClientToScreen
PostMessageW
KillTimer
SetTimer
PtInRect
InflateRect
ShowWindow
SendMessageW
SetWindowPos
GetParent
wsprintfW
DrawTextW

gdi32

SetBkColor
GetBkMode
GetBkColor
GetTextColor
CreateFontIndirectW
GetDeviceCaps
SetViewportOrgEx
OffsetViewportOrgEx
RestoreDC
SaveDC
CreateDIBSection
Polyline
DeleteDC
GetStockObject
GetObjectW
GetCurrentObject
LPtoDP
CreateCompatibleBitmap
StretchBlt
SetBrushOrgEx
SetStretchBltMode
GetBrushOrgEx
GetStretchBltMode
Polygon
ExcludeClipRect
IntersectClipRect
BitBlt
CreateCompatibleDC
CreatePen
SelectObject
CreateSolidBrush
Rectangle
MoveToEx
LineTo
SetTextColor
SetBkMode
DPtoLP
DeleteObject

dinput8

DirectInput8Create

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 331KB - Virtual size: 331KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 18KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data1
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 80KB - Virtual size: 84KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
diactfrm.inf
diactfrm.xpg
.dll regsvr32 windows:5 windows x86 arch:x86

7ccc752422fb8b9373bf78f44fa203ed

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

ntdll

RtlUnwind

kernel32

EnterCriticalSection
VirtualAlloc
HeapReAlloc
RaiseException
HeapSize
GetACP
GetOEMCP
GetCPInfo
InitializeCriticalSection
LoadLibraryA
LCMapStringA
LCMapStringW
GetLocaleInfoA
GetStringTypeA
GetStringTypeW
SetFilePointer
SetUnhandledExceptionFilter
GetSystemInfo
VirtualQuery
SetStdHandle
IsBadCodePtr
FlushFileBuffers
CloseHandle
LeaveCriticalSection
WriteFile
VirtualFree
HeapCreate
HeapDestroy
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
IsProcessorFeaturePresent
UnmapViewOfFile
CreateFileW
CreateFileA
CreateFileMappingA
MapViewOfFile
GetFileSize
GetModuleFileNameA
DeleteCriticalSection
GetStartupInfoA
GetFileType
GetStdHandle
SetHandleCount
TlsAlloc
TlsGetValue
SetLastError
TlsFree
GetModuleHandleA
ExitProcess
MultiByteToWideChar
GetLastError
HeapFree
HeapAlloc
GetVersionExA
GetCommandLineA
TlsSetValue
GetCurrentThreadId
GetModuleFileNameW
Sleep
WideCharToMultiByte
IsBadReadPtr
IsBadWritePtr
lstrcmpW
GetTickCount
MulDiv
lstrcpyW
InterlockedDecrement
InterlockedIncrement
lstrcmpiW
LoadLibraryW
GetProcAddress
FreeLibrary
lstrlenW
VirtualProtect

advapi32

RegOpenKeyA
RegQueryValueExA
RegCloseKey
RegQueryValueW
RegOpenKeyExW
RegDeleteKeyW
RegEnumKeyExW
RegSetValueExW
RegCreateKeyExW
RegQueryValueExW

ole32

CoTaskMemFree
StringFromCLSID

user32

DefWindowProcW
WindowFromPoint
EndPaint
BeginPaint
IsWindowVisible
SetPropW
GetPropW
RegisterClassExW
EnumChildWindows
DispatchMessageW
TranslateMessage
GetMessageW
ReleaseCapture
SetCapture
GetWindow
UnregisterClassW
GetClientRect
InvalidateRect
CreateWindowExW
DestroyWindow
LoadImageW
GetDesktopWindow
GetWindowDC
SetCursor
ValidateRect
LoadCursorW
GetIconInfo
DrawIcon
PostQuitMessage
ClipCursor
GetSystemMetrics
GetWindowRect
FillRect
GetUpdateRect
GetDoubleClickTime
SetFocus
SetParent
LoadStringW
IsWindow
MoveWindow
OffsetRect
GetDC
ReleaseDC
GetCursorPos
ScreenToClient
ClientToScreen
PostMessageW
KillTimer
SetTimer
PtInRect
InflateRect
ShowWindow
SendMessageW
SetWindowPos
GetParent
wsprintfW
DrawTextW

gdi32

SetBkColor
GetBkMode
GetBkColor
GetTextColor
CreateFontIndirectW
GetDeviceCaps
SetViewportOrgEx
OffsetViewportOrgEx
RestoreDC
SaveDC
CreateDIBSection
Polyline
DeleteDC
GetStockObject
GetObjectW
GetCurrentObject
LPtoDP
CreateCompatibleBitmap
StretchBlt
SetBrushOrgEx
SetStretchBltMode
GetBrushOrgEx
GetStretchBltMode
Polygon
ExcludeClipRect
IntersectClipRect
BitBlt
CreateCompatibleDC
CreatePen
SelectObject
CreateSolidBrush
Rectangle
MoveToEx
LineTo
SetTextColor
SetBkMode
DPtoLP
DeleteObject

dinput8

DirectInput8Create

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 333KB - Virtual size: 332KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 18KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data1
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 80KB - Virtual size: 80KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dijoy.hlp
dijoybrz.hlp
dijoychs.hlp
dijoycht.hlp
dijoycze.hlp
dijoydut.hlp
dijoyfrn.hlp
dijoyger.hlp
dijoyitn.hlp
dijoyjpn.hlp
dijoykor.hlp
dijoypol.hlp
dijoyrus.hlp
dijoyspa.hlp
dijoyswe.hlp
dimap.dll
.dll windows:5 windows x86 arch:x86

469e31fbcb0cceedc5dbfe00ddb0c612

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

msvcrt

?terminate@@YAXXZ
free
?_set_new_mode@@YAHH@Z
memmove
?_set_new_handler@@YAP6AHI@ZP6AHI@Z@Z
wcscpy
wcscat
_snwprintf
wcschr
_wsplitpath
swscanf
_purecall
??2@YAPAXI@Z
??3@YAXPAX@Z
__CxxFrameHandler
_CxxThrowException
_onexit
__dllonexit
??1type_info@@UAE@XZ
_except_handler3
??0exception@@QAE@ABV0@@Z
iswspace
??1exception@@UAE@XZ
??0exception@@QAE@XZ
?what@exception@@UBEPBDXZ
_adjust_fdiv
malloc
isdigit
??0exception@@QAE@ABQBD@Z
strlen
wcslen
_initterm
memcpy

kernel32

GetModuleHandleW
GetSystemTimeAsFileTime
GetVersion
GetPrivateProfileStringW
CreateDirectoryW
GetPrivateProfileIntW
WideCharToMultiByte
MultiByteToWideChar
WritePrivateProfileStringW
GetLastError
DeleteCriticalSection
DisableThreadLibraryCalls
InterlockedDecrement
InterlockedIncrement
InitializeCriticalSection

shell32

SHGetPathFromIDListW
SHGetSpecialFolderLocation
SHGetMalloc

advapi32

RegCloseKey
RegOpenKeyExW
RegQueryValueExW
GetUserNameW

user32

wsprintfW
CharUpperBuffW

ole32

StringFromGUID2

dinput8

DirectInput8Create

Exports

Exports

DllCanUnloadNow
DllGetClassObject

Sections

.text
Size: 37KB - Virtual size: 37KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 266B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 1024B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dimap.xpg
.dll windows:5 windows x86 arch:x86

469e31fbcb0cceedc5dbfe00ddb0c612

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

msvcrt

?terminate@@YAXXZ
free
?_set_new_mode@@YAHH@Z
memmove
?_set_new_handler@@YAP6AHI@ZP6AHI@Z@Z
wcscpy
wcscat
_snwprintf
wcschr
_wsplitpath
swscanf
_purecall
??2@YAPAXI@Z
??3@YAXPAX@Z
__CxxFrameHandler
_CxxThrowException
_onexit
__dllonexit
??1type_info@@UAE@XZ
_except_handler3
??0exception@@QAE@ABV0@@Z
iswspace
??1exception@@UAE@XZ
??0exception@@QAE@XZ
?what@exception@@UBEPBDXZ
_adjust_fdiv
malloc
isdigit
??0exception@@QAE@ABQBD@Z
strlen
wcslen
_initterm
memcpy

kernel32

GetModuleHandleW
GetSystemTimeAsFileTime
GetVersion
GetPrivateProfileStringW
CreateDirectoryW
GetPrivateProfileIntW
WideCharToMultiByte
MultiByteToWideChar
WritePrivateProfileStringW
GetLastError
DeleteCriticalSection
DisableThreadLibraryCalls
InterlockedDecrement
InterlockedIncrement
InitializeCriticalSection

shell32

SHGetPathFromIDListW
SHGetSpecialFolderLocation
SHGetMalloc

advapi32

RegCloseKey
RegOpenKeyExW
RegQueryValueExW
GetUserNameW

user32

wsprintfW
CharUpperBuffW

ole32

StringFromGUID2

dinput8

DirectInput8Create

Exports

Exports

DllCanUnloadNow
DllGetClassObject

Sections

.text
Size: 37KB - Virtual size: 37KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 266B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 984B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dimaps.inf
dinput.dll
.dll regsvr32 windows:5 windows x86 arch:x86

cdcbbe5700e5939b98dbad5bf6ec9b91

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

msvcrt

_except_handler3
_ftol

kernel32

DeleteCriticalSection
ResetEvent
GetCurrentProcessId
IsBadReadPtr
IsBadWritePtr
WideCharToMultiByte
FreeLibraryAndExitThread
FreeLibrary
GetLastError
WaitForMultipleObjects
SetThreadPriority
CreateThread
CreateEventW
LoadLibraryW
GetTickCount
lstrcmpiW
ReadFileEx
DuplicateHandle
GetCurrentProcess
GetVersion
lstrcpynW
Sleep
ReleaseMutex
WaitForSingleObject
MulDiv
SetEvent
LocalReAlloc
SleepEx
ResumeThread
OpenEventW
GetProcAddress
DisableThreadLibraryCalls
UnmapViewOfFile
MultiByteToWideChar
lstrcmpW
GetPrivateProfileStringW
GetWindowsDirectoryW
lstrcmpiA
WriteFileEx
DeviceIoControl
SystemTimeToFileTime
GetLocalTime
MapViewOfFile
CreateFileMappingW
CreateMutexW
LoadResource
FindResourceW
CreateProcessW
InitializeCriticalSection
GetVersionExW
IsBadCodePtr
lstrlenA
LeaveCriticalSection
EnterCriticalSection
GetCurrentThreadId
GetSystemTimeAsFileTime
lstrlenW
CreateFileW
ReadFile
SetFilePointer
GetFileSize
lstrcpyW
CloseHandle
GetModuleHandleW
GetModuleFileNameW
GetFullPathNameW
InterlockedExchange
LocalFree
InterlockedDecrement
InterlockedIncrement
LocalAlloc

advapi32

RegOpenKeyExW
RegEnumValueW
SetEntriesInAclW
InitializeSecurityDescriptor
SetSecurityDescriptorDacl
FreeSid
GetSecurityInfo
RegCreateKeyExW
RegEnumKeyExW
RegQueryValueW
RegCreateKeyW
RegOpenKeyW
RegDeleteKeyW
RegQueryValueExW
RegDeleteValueW
RegQueryInfoKeyW
RegEnumKeyW
AllocateAndInitializeSid
RegSetValueExW
RegCloseKey
BuildTrusteeWithSidW

user32

mouse_event
IsWindow
CallWindowProcW
wsprintfW
CharUpperW
UnhookWindowsHookEx
GetWindowThreadProcessId
IsIconic
GetForegroundWindow
GetWindowLongW
CallNextHookEx
SetWindowsHookExW
PostThreadMessageW
MsgWaitForMultipleObjects
DispatchMessageW
TranslateMessage
PeekMessageW
SetTimer
GetInputState
SystemParametersInfoW
IntersectRect
GetWindowRect
GetDesktopWindow
MapWindowPoints
GetClientRect
ReleaseCapture
SetCursorPos
GetAsyncKeyState
SetCapture
ClipCursor
ShowCursor
GetMessageTime
SendNotifyMessageW
GetCursorPos
GetSystemMetrics
MapVirtualKeyW
LoadStringW
keybd_event
GetKeyboardType
IsRectEmpty
SubtractRect
SendMessageW
RegisterWindowMessageW
FindWindowW
PostMessageW
SetWindowLongW
DefWindowProcW
GetPropW
SetPropW
RemovePropW

winmm

mmioClose
mmioOpenA
mmioAscend
mmioDescend
mmioCreateChunk
mmioRead
mmioWrite

Exports

Exports

DirectInputCreateA
DirectInputCreateEx
DirectInputCreateW
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 107KB - Virtual size: 106KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 514KB - Virtual size: 516KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dinput.inf
dinput.xpg
.dll regsvr32 windows:5 windows x86 arch:x86

bbce740fef1666a6f7c543502180b356

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

msvcrt

_except_handler3
malloc
free
_ftol

kernel32

LeaveCriticalSection
SetEvent
DeleteCriticalSection
ResetEvent
GetCurrentProcessId
IsBadReadPtr
IsBadWritePtr
WideCharToMultiByte
FreeLibraryAndExitThread
WaitForSingleObject
FreeLibrary
GetLastError
WaitForMultipleObjects
SetThreadPriority
CreateThread
CreateEventW
LoadLibraryW
GetTickCount
lstrcmpiW
ReadFileEx
DuplicateHandle
GetCurrentProcess
GetVersion
lstrcpynW
Sleep
ReleaseMutex
MulDiv
LocalAlloc
LocalReAlloc
SleepEx
ResumeThread
OpenEventW
GetProcAddress
DisableThreadLibraryCalls
UnmapViewOfFile
MultiByteToWideChar
lstrcmpW
GetPrivateProfileStringW
GetWindowsDirectoryW
lstrcmpiA
WriteFileEx
DeviceIoControl
SystemTimeToFileTime
GetLocalTime
MapViewOfFile
CreateFileMappingW
CreateMutexW
LoadResource
FindResourceW
CreateProcessW
InitializeCriticalSection
GetVersionExW
IsBadCodePtr
lstrlenA
EnterCriticalSection
GetCurrentThreadId
GetSystemTimeAsFileTime
lstrlenW
CreateFileW
InterlockedIncrement
ReadFile
SetFilePointer
GetFileSize
lstrcpyW
CloseHandle
GetModuleHandleW
GetModuleFileNameW
GetFullPathNameW
InterlockedExchange
LocalFree
InterlockedDecrement

advapi32

RegDeleteValueW
RegEnumValueW
AllocateAndInitializeSid
BuildTrusteeWithSidW
SetEntriesInAclW
InitializeSecurityDescriptor
SetSecurityDescriptorDacl
FreeSid
GetSecurityInfo
RegCreateKeyExW
RegEnumKeyExW
RegQueryValueW
RegCreateKeyW
RegOpenKeyW
RegDeleteKeyW
RegQueryValueExW
RegQueryInfoKeyW
RegEnumKeyW
RegOpenKeyExW
RegSetValueExW
RegCloseKey

user32

MapWindowPoints
GetRawInputDeviceList
GetRawInputDeviceInfoW
GetKeyboardType
IsWindow
wsprintfW
CharUpperW
UnhookWindowsHookEx
GetWindowThreadProcessId
IsIconic
GetForegroundWindow
GetWindowLongW
CallNextHookEx
SetWindowsHookExW
PostThreadMessageW
MsgWaitForMultipleObjects
DefWindowProcW
CreateWindowExW
RegisterClassW
LoadIconW
LoadCursorW
DestroyWindow
DispatchMessageW
TranslateMessage
PeekMessageW
SetTimer
GetInputState
SystemParametersInfoW
IntersectRect
GetWindowRect
GetDesktopWindow
GetClientRect
ReleaseCapture
SetCursorPos
mouse_event
GetAsyncKeyState
SetCapture
ClipCursor
ShowCursor
GetMessageTime
SendNotifyMessageW
GetCursorPos
GetSystemMetrics
MapVirtualKeyW
LoadStringW
keybd_event
IsRectEmpty
SubtractRect
SendMessageW
RegisterWindowMessageW
FindWindowW
PostMessageW
SetWindowLongW
GetPropW
SetPropW
RemovePropW
CallWindowProcW

winmm

mmioClose
mmioWrite
mmioRead
mmioOpenA
mmioAscend
mmioDescend
mmioCreateChunk

Exports

Exports

DirectInputCreateA
DirectInputCreateEx
DirectInputCreateW
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 109KB - Virtual size: 108KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 516KB - Virtual size: 515KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dinput8.dll
.dll regsvr32 windows:5 windows x86 arch:x86

20264582df85180f5b29d7280a7ac0ee

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

msvcrt

_except_handler3
strchr
iswctype
towupper
_ftol

kernel32

IsBadReadPtr
IsBadWritePtr
lstrcpyW
lstrcmpW
FreeLibraryAndExitThread
FreeLibrary
GetLastError
WaitForMultipleObjects
SetThreadPriority
CreateThread
CreateEventW
LoadLibraryW
GetTickCount
lstrcmpiW
ReadFileEx
DuplicateHandle
GetCurrentProcess
ReleaseMutex
WaitForSingleObject
MulDiv
GetVersion
LocalAlloc
LocalReAlloc
GetCurrentProcessId
ResumeThread
GetProcAddress
DisableThreadLibraryCalls
UnmapViewOfFile
MultiByteToWideChar
lstrlenA
IsBadCodePtr
CompareFileTime
lstrcpynW
GetPrivateProfileStringW
GetWindowsDirectoryW
WriteFileEx
Sleep
DeviceIoControl
SystemTimeToFileTime
GetLocalTime
HeapFree
HeapAlloc
GetProcessHeap
MapViewOfFile
CreateFileMappingW
CreateMutexW
LoadResource
FindResourceW
CreateProcessW
InitializeCriticalSection
GetVersionExW
CreateFileA
GetFullPathNameA
WideCharToMultiByte
ResetEvent
DeleteCriticalSection
SetEvent
LeaveCriticalSection
EnterCriticalSection
GetCurrentThreadId
lstrlenW
GetSystemTimeAsFileTime
CreateFileW
ReadFile
SetFilePointer
GetFileSize
CloseHandle
GetModuleHandleW
GetModuleFileNameW
GetFullPathNameW
InterlockedExchange
LocalFree
InterlockedDecrement
InterlockedIncrement
SleepEx

advapi32

RegEnumValueW
BuildTrusteeWithSidW
SetEntriesInAclW
GetSecurityInfo
RegDeleteKeyW
AllocateAndInitializeSid
GetLengthSid
InitializeAcl
AddAccessAllowedAceEx
InitializeSecurityDescriptor
SetSecurityDescriptorDacl
SetSecurityDescriptorControl
FreeSid
RegEnumKeyExW
RegSetKeySecurity
RegCreateKeyW
RegOpenKeyW
RegQueryValueW
RegDeleteValueW
RegQueryInfoKeyW
RegEnumKeyW
RegQueryValueExW
RegOpenKeyExW
RegSetValueExW
RegCloseKey
GetUserNameW
RegCreateKeyExW

user32

MapVirtualKeyExW
GetKeyboardLayout
GetActiveWindow
GetKeyNameTextW
ToUnicodeEx
PostMessageW
wsprintfW
CharUpperW
UnhookWindowsHookEx
GetWindowThreadProcessId
IsIconic
GetForegroundWindow
GetWindowLongW
CallNextHookEx
SetWindowsHookExW
PostThreadMessageW
MsgWaitForMultipleObjects
DispatchMessageW
TranslateMessage
PeekMessageW
SetTimer
GetInputState
SystemParametersInfoW
IntersectRect
GetWindowRect
GetDesktopWindow
MapWindowPoints
GetClientRect
ReleaseCapture
SetCursorPos
mouse_event
GetAsyncKeyState
SetCapture
ClipCursor
ShowCursor
GetMessageTime
SendNotifyMessageW
GetCursorPos
GetSystemMetrics
MapVirtualKeyW
LoadStringW
keybd_event
GetKeyboardType
IsRectEmpty
SubtractRect
RegisterWindowMessageW
SetWindowLongW
DefWindowProcW
GetPropW
SetPropW
RemovePropW
CallWindowProcW
IsWindow

Exports

Exports

DirectInput8Create
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 123KB - Virtual size: 123KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 37KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 517KB - Virtual size: 520KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dinput8.xpg
.dll regsvr32 windows:5 windows x86 arch:x86

2d552e50787a48e41699730d07d32036

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

msvcrt

_except_handler3
malloc
free
strchr
iswctype
towupper
_ftol

kernel32

WideCharToMultiByte
GetCurrentProcessId
IsBadReadPtr
IsBadWritePtr
lstrcpyW
lstrcmpW
FreeLibraryAndExitThread
WaitForSingleObject
FreeLibrary
GetLastError
WaitForMultipleObjects
SetThreadPriority
CreateThread
CreateEventW
LoadLibraryW
GetTickCount
lstrcmpiW
ReadFileEx
DuplicateHandle
GetCurrentProcess
ReleaseMutex
MulDiv
GetVersion
LocalAlloc
LocalReAlloc
SleepEx
ResumeThread
ResetEvent
DisableThreadLibraryCalls
UnmapViewOfFile
MultiByteToWideChar
lstrlenA
IsBadCodePtr
CompareFileTime
lstrcpynW
GetPrivateProfileStringW
GetWindowsDirectoryW
WriteFileEx
Sleep
DeviceIoControl
SystemTimeToFileTime
GetLocalTime
HeapFree
HeapAlloc
GetProcessHeap
MapViewOfFile
CreateFileMappingW
CreateMutexW
LoadResource
FindResourceW
CreateProcessW
InitializeCriticalSection
GetVersionExW
CreateFileA
GetFullPathNameA
DeleteCriticalSection
SetEvent
InterlockedIncrement
LeaveCriticalSection
EnterCriticalSection
GetCurrentThreadId
lstrlenW
GetSystemTimeAsFileTime
CreateFileW
ReadFile
SetFilePointer
GetFileSize
CloseHandle
GetModuleHandleW
GetModuleFileNameW
GetFullPathNameW
InterlockedExchange
LocalFree
InterlockedDecrement
GetProcAddress

advapi32

RegOpenKeyExW
RegEnumValueW
BuildTrusteeWithSidW
SetEntriesInAclW
GetSecurityInfo
RegDeleteKeyW
GetUserNameW
RegCreateKeyExW
AllocateAndInitializeSid
GetLengthSid
InitializeAcl
AddAccessAllowedAceEx
InitializeSecurityDescriptor
SetSecurityDescriptorDacl
SetSecurityDescriptorControl
FreeSid
RegEnumKeyExW
RegSetKeySecurity
RegCreateKeyW
RegOpenKeyW
RegQueryValueW
RegDeleteValueW
RegQueryInfoKeyW
RegEnumKeyW
RegQueryValueExW
RegSetValueExW
RegCloseKey

user32

MapVirtualKeyExW
GetKeyboardLayout
GetActiveWindow
GetKeyNameTextW
GetKeyboardType
GetRawInputDeviceInfoW
GetRawInputDeviceList
PostMessageW
wsprintfW
CharUpperW
UnhookWindowsHookEx
GetWindowThreadProcessId
IsIconic
GetForegroundWindow
GetWindowLongW
CallNextHookEx
SetWindowsHookExW
PostThreadMessageW
MsgWaitForMultipleObjects
DefWindowProcW
CreateWindowExW
RegisterClassW
LoadIconW
LoadCursorW
DestroyWindow
DispatchMessageW
TranslateMessage
PeekMessageW
SetTimer
GetInputState
SystemParametersInfoW
IntersectRect
GetWindowRect
GetDesktopWindow
MapWindowPoints
GetClientRect
ReleaseCapture
SetCursorPos
mouse_event
GetAsyncKeyState
SetCapture
ClipCursor
ShowCursor
GetMessageTime
SendNotifyMessageW
GetCursorPos
GetSystemMetrics
MapVirtualKeyW
LoadStringW
keybd_event
IsRectEmpty
SubtractRect
RegisterWindowMessageW
SetWindowLongW
GetPropW
SetPropW
RemovePropW
CallWindowProcW
IsWindow
ToUnicodeEx

Exports

Exports

DirectInput8Create
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 125KB - Virtual size: 125KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 38KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 518KB - Virtual size: 517KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dmband.dll
.dll regsvr32 windows:5 windows x86 arch:x86

2dd98eee91901e42aced29ca5eefb08b

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

DeleteCriticalSection
MultiByteToWideChar
lstrcpynA
DisableThreadLibraryCalls
lstrlenA
lstrcatA
lstrcpyA
GetModuleFileNameA
QueryPerformanceCounter
InterlockedDecrement
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
GetProcAddress
GetModuleHandleA
TerminateProcess
GetCurrentProcess
InitializeCriticalSection
Sleep
IsBadCodePtr
EnterCriticalSection
LeaveCriticalSection
InterlockedIncrement
IsBadWritePtr
GetTickCount
IsBadReadPtr

msvcrt

_adjust_fdiv
_initterm
free
malloc
wcstombs
__CxxFrameHandler
wcsncpy
_purecall

advapi32

RegCloseKey
RegCreateKeyExA
RegDeleteKeyA
RegEnumKeyA
RegOpenKeyExA
RegSetValueExA

ole32

StringFromCLSID
CoTaskMemFree
CoCreateInstance

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 22KB - Virtual size: 21KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 288B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dmcompos.dll
.dll regsvr32 windows:5 windows x86 arch:x86

968421b7ed4e42ca13de160c864b4ae6

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

DeleteCriticalSection
IsBadCodePtr
lstrlenA
lstrcatA
lstrcpyA
GetModuleFileNameA
EnterCriticalSection
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
GetProcAddress
GetModuleHandleA
TerminateProcess
GetCurrentProcess
LeaveCriticalSection
InitializeCriticalSection
Sleep
DisableThreadLibraryCalls
InterlockedDecrement
InterlockedIncrement
IsBadWritePtr
MultiByteToWideChar
IsBadReadPtr

msvcrt

wcslen
malloc
free
_initterm
_adjust_fdiv
wcstombs
wcscpy
time
srand
wcsncpy
_purecall
__CxxFrameHandler
rand

advapi32

RegCloseKey
RegCreateKeyExA
RegDeleteKeyA
RegEnumKeyA
RegOpenKeyExA
RegSetValueExA

ole32

CoTaskMemFree
StringFromCLSID
CoCreateInstance
CreateStreamOnHGlobal

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 51KB - Virtual size: 50KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 736B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dmime.dll
.dll regsvr32 windows:5 windows x86 arch:x86

78a383d71e6608d446c8c82b2ebbecc0

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

dmime.pdb

Imports

kernel32

WaitForSingleObject
SetEvent
GetCurrentThreadId
Sleep
SetThreadPriority
CreateEventA
CreateThread
DisableThreadLibraryCalls
lstrlenA
lstrcatA
lstrcpyA
CloseHandle
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
DeleteCriticalSection
InterlockedDecrement
InitializeCriticalSection
IsBadCodePtr
EnterCriticalSection
LeaveCriticalSection
InterlockedIncrement
IsBadReadPtr
IsBadWritePtr
GetModuleFileNameA

msvcrt

__dllonexit
_onexit
_adjust_fdiv
_initterm
rand
_CIpow
malloc
wcscpy
__CxxFrameHandler
wcscmp
time
srand
_ftol
_purecall
wcslen
free
wcstombs

winmm

timeBeginPeriod
timeEndPeriod
timeGetTime

advapi32

RegQueryValueExA
RegOpenKeyExA
RegSetValueExA
RegCreateKeyExA
RegDeleteKeyA
RegEnumKeyA
RegCloseKey

ole32

CoTaskMemFree
CreateStreamOnHGlobal
CoInitialize
CoUninitialize
CoCreateInstance
StringFromCLSID

user32

GetForegroundWindow
IsWindow
GetDesktopWindow

dsound

ord11

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 163KB - Virtual size: 163KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dmloader.dll
.dll regsvr32 windows:5 windows x86 arch:x86

8332206d5778356b1110b44f2e3cfdef

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

IsBadCodePtr
GetFileAttributesA
GetFileAttributesW
DeleteCriticalSection
InitializeCriticalSection
FindClose
FindNextFileA
FindNextFileW
FindFirstFileA
FindFirstFileW
lstrlenA
lstrcatA
IsBadWritePtr
GetModuleFileNameA
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
GetProcAddress
GetModuleHandleA
TerminateProcess
GetCurrentProcess
IsBadReadPtr
ExpandEnvironmentStringsA
ExpandEnvironmentStringsW
LeaveCriticalSection
EnterCriticalSection
Sleep
DisableThreadLibraryCalls
GetVersionExA
InterlockedIncrement
lstrcpyA
InterlockedDecrement

msvcrt

fclose
fread
fwrite
ftell
fseek
_strerror
_fsopen
_wfsopen
malloc
free
_initterm
_adjust_fdiv
wcsncat
wcsrchr
_wcsicmp
mbstowcs
wcslen
wcstombs
wcsncpy
_purecall
wcscpy
__CxxFrameHandler
wcscat

advapi32

RegCloseKey
RegOpenKeyExW
RegQueryValueExA
RegOpenKeyExA
RegSetValueExA
RegCreateKeyExA
RegDeleteKeyA
RegEnumKeyA
RegQueryValueExW

ole32

StringFromCLSID
CoTaskMemFree
CoCreateInstance

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 260B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dmscript.dll
.dll regsvr32 windows:5 windows x86 arch:x86

903e24e172a63cf62c8720d3d4074255

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSection
DeleteCriticalSection
GetProcAddress
LoadLibraryA
GetModuleFileNameA
WideCharToMultiByte
MultiByteToWideChar
DisableThreadLibraryCalls
WaitForSingleObject
SetEvent
CreateEventA
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
GetModuleHandleA
TerminateProcess
GetCurrentProcess
GetTickCount
InterlockedDecrement
GetCurrentThreadId
IsBadCodePtr
InterlockedIncrement
IsBadWritePtr
CloseHandle
IsBadReadPtr
Sleep

msvcrt

_CIpow
_ftol
wcsncpy
tolower
_stricmp
wcstombs
wcsstr
_ultow
wcstoul
_endthreadex
_beginthreadex
free
_initterm
_adjust_fdiv
__dllonexit
_onexit
_except_handler3
malloc
wcslen
wcscpy
wcscat
_wcsicmp
wcscmp
_purecall
??3@YAXPAX@Z
??2@YAPAXI@Z
__CxxFrameHandler

advapi32

RegCloseKey
RegOpenKeyExA
RegSetValueExA
RegDeleteKeyA
RegEnumKeyA
RegCreateKeyExA

ole32

CLSIDFromProgID
CoTaskMemFree
StringFromCLSID
CoUninitialize
CoInitialize
CoCreateInstance

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 67KB - Virtual size: 66KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dmstyle.dll
.dll regsvr32 windows:5 windows x86 arch:x86

9b9b56669a52debf1b2dccbc03819e5c

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

DeleteCriticalSection
DisableThreadLibraryCalls
lstrlenA
lstrcatA
lstrcpyA
GetModuleFileNameA
InterlockedDecrement
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
GetProcAddress
GetModuleHandleA
TerminateProcess
GetCurrentProcess
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
Sleep
IsBadCodePtr
InterlockedIncrement
IsBadReadPtr
MultiByteToWideChar
IsBadWritePtr

msvcrt

wcstombs
wcscat
malloc
free
_initterm
_adjust_fdiv
time
srand
rand
wcslen
wcsncpy
wcscpy
_purecall
__CxxFrameHandler
_wcsicmp

advapi32

RegCloseKey
RegCreateKeyExA
RegDeleteKeyA
RegEnumKeyA
RegOpenKeyExA
RegSetValueExA

ole32

CoTaskMemFree
StringFromCLSID
CoCreateInstance
CreateStreamOnHGlobal

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 88KB - Virtual size: 88KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dmsynth.dll
.dll regsvr32 windows:5 windows x86 arch:x86

7bc002e7c5147c1079569ca2d742d33d

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

lstrlenA
lstrcatA
lstrcpyA
DisableThreadLibraryCalls
IsBadCodePtr
SetEvent
WaitForSingleObject
SetThreadPriority
CreateThread
CreateEventA
CloseHandle
InterlockedIncrement
GetModuleFileNameA
QueryPerformanceCounter
QueryPerformanceFrequency
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
GetProcAddress
GetModuleHandleA
TerminateProcess
GetCurrentProcess
InterlockedDecrement
IsBadWritePtr
IsBadReadPtr
MulDiv
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
Sleep
InitializeCriticalSection

msvcrt

_adjust_fdiv
_initterm
wcscpy
wcstombs
free
malloc
__CxxFrameHandler
_CIpow
_ftol

winmm

timeGetTime

advapi32

RegCloseKey
RegCreateKeyA
RegCreateKeyExA
RegDeleteKeyA
RegEnumKeyA
RegOpenKeyExA
RegQueryValueExA
RegSetValueExA

ole32

StringFromCLSID
CoTaskMemFree

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 74KB - Virtual size: 73KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 19KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dmusic.dll
.dll regsvr32 windows:5 windows x86 arch:x86

72adb79ddfe89a6b6e0b579d2803f895

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

dmusic.pdb

Imports

kernel32

LeaveCriticalSection
EnterCriticalSection
InitializeCriticalSection
DeleteCriticalSection
LoadLibraryA
GetVersionExA
DisableThreadLibraryCalls
IsBadCodePtr
FreeLibrary
lstrlenA
lstrcatA
lstrcpyA
GetModuleFileNameA
ResetEvent
SetEvent
PulseEvent
WaitForMultipleObjects
CreateThread
CreateEventA
MultiByteToWideChar
InterlockedExchange
CreateFileA
LocalFree
LocalAlloc
GetProcAddress
GetOverlappedResult
SetLastError
GetCurrentProcessId
DuplicateHandle
GetCurrentProcess
OpenProcess
Sleep
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetSystemTimeAsFileTime
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
CreateFileMappingA
GetLastError
MapViewOfFile
CreateMutexA
WaitForSingleObject
ReleaseMutex
CloseHandle
UnmapViewOfFile
InterlockedDecrement
InterlockedIncrement
IsBadReadPtr
DeviceIoControl
IsBadWritePtr

msvcrt

wcscmp
mbstowcs
_wcsicmp
wcstombs
wcscpy
wcslen
_purecall
__CxxFrameHandler
_stricmp
malloc
memmove
wcsncpy
_adjust_fdiv
_initterm
_except_handler3
free
wcscat

winmm

midiOutUnprepareHeader
midiOutLongMsg
midiOutShortMsg
midiOutClose
midiOutOpen
midiOutPrepareHeader
midiInClose
midiInReset
midiInAddBuffer
midiInPrepareHeader
midiInUnprepareHeader
midiInStart
midiInOpen
timeSetEvent
timeKillEvent
midiOutGetNumDevs
timeEndPeriod
midiOutGetDevCapsA
midiInGetNumDevs
midiInGetDevCapsA
waveOutMessage
timeGetTime
timeBeginPeriod

user32

wsprintfA
wsprintfW
GetForegroundWindow
IsWindow
LoadStringA
GetDesktopWindow

advapi32

RegCloseKey
RegQueryValueExA
RegOpenKeyA
RegOpenKeyExA
RegSetValueExA
RegCreateKeyW
RegCreateKeyA
RegEnumKeyA
RegCreateKeyExA
RegDeleteKeyA

rpcrt4

UuidCreate

ole32

StringFromCLSID
CoTaskMemFree
CoCreateInstance
CLSIDFromString

msacm32

acmStreamPrepareHeader
acmStreamConvert
acmStreamUnprepareHeader
acmStreamClose
acmStreamOpen
acmStreamSize
acmFormatSuggest

dsound

ord11

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 94KB - Virtual size: 93KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 19KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dmusic.inf
dplay.inf
dplaysvr.exe
.exe windows:5 windows x86 arch:x86

0e2d56d5ee03e5e670b2f35982dccb42

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

HeapFree
DeleteCriticalSection
UnmapViewOfFile
GetCurrentProcessId
MapViewOfFile
SetEvent
InitializeCriticalSection
CreateMutexA
CreateFileMappingA
CreateEventA
GetLastError
GetCurrentProcess
SetCurrentDirectoryA
GetSystemDirectoryA
HeapReAlloc
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetSystemTimeAsFileTime
GetModuleHandleA
TerminateProcess
GetProcessHeap
HeapAlloc
LoadLibraryA
GetProcAddress
FreeLibrary
CreateThread
OpenProcess
WaitForSingleObject
ExitThread
EnterCriticalSection
LeaveCriticalSection
CloseHandle
GetVersionExA
GetSystemInfo
VirtualProtect
GetLocaleInfoA
RtlUnwind
GetStringTypeW
GetStringTypeA
LCMapStringW
MultiByteToWideChar
LCMapStringA
GetCommandLineA
GetStartupInfoA
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameA
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetFileType
HeapDestroy
HeapCreate
VirtualFree
GetACP
GetOEMCP
GetCPInfo
Sleep
VirtualAlloc
VirtualQuery

advapi32

RegEnumKeyExA
FreeSid
RegOpenKeyExA
RegQueryValueExA
RegCloseKey
InitializeSecurityDescriptor
AllocateAndInitializeSid
GetLengthSid
InitializeAcl
AddAccessAllowedAce
SetSecurityDescriptorDacl

gdi32

GetStockObject

user32

DefWindowProcA
RegisterClassA
CreateWindowExA
GetMessageA
TranslateMessage
DispatchMessageA

winmm

timeGetTime

Sections

.text
Size: 24KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 1024B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
dplayx.dll
.dll regsvr32 windows:5 windows x86 arch:x86

8a1753e7c2481e9b41fc79ea4adfce90

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

dplayx.pdb

Imports

kernel32

ReleaseMutex
SetEvent
WaitForSingleObject
GetTickCount
CreateThread
ResetEvent
lstrlenA
Sleep
FreeLibrary
GetVersionExA
DuplicateHandle
GetCurrentProcess
LoadLibraryW
LoadLibraryA
GetProcAddress
CreateEventW
CreateMutexW
CreateFileMappingW
OpenFileMappingW
OpenFileMappingA
CreateProcessW
CreateProcessA
GetCurrentDirectoryW
GetCurrentDirectoryA
CreateFileMappingA
CompareStringA
GetProfileIntA
InterlockedIncrement
InterlockedExchange
DisableThreadLibraryCalls
LocalFree
DebugBreak
WaitForMultipleObjects
HeapAlloc
HeapFree
HeapReAlloc
GetProcessHeap
WideCharToMultiByte
MultiByteToWideChar
QueryPerformanceCounter
GetCurrentThreadId
GetSystemTimeAsFileTime
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetStringTypeA
GetSystemInfo
VirtualProtect
GetCPInfo
GetLocaleInfoA
LCMapStringW
GetLastError
MapViewOfFile
CreateEventA
CreateMutexA
GetCurrentProcessId
UnmapViewOfFile
IsBadCodePtr
IsBadReadPtr
GetModuleHandleA
GetModuleFileNameA
CreateFileA
CloseHandle
SetFilePointer
ReadFile
InterlockedDecrement
IsBadWritePtr
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
CompareStringW
LeaveCriticalSection
LCMapStringA
VirtualAlloc
VirtualFree
GetCommandLineW
GetCommandLineA
ExitThread
OpenProcess
ResumeThread
GlobalFree
GlobalAlloc
ReleaseSemaphore
CreateSemaphoreA
VirtualQuery
GetStringTypeW

ntdll

RtlUnwind

rpcrt4

UuidCreate

user32

wsprintfW
wsprintfA

advapi32

RegDeleteKeyA
RegDeleteKeyW
RegCreateKeyExA
RegCreateKeyExW
RegDeleteValueA
RegDeleteValueW
RegEnumValueA
RegEnumValueW
RegSetValueExA
RegSetValueExW
RegEnumKeyExA
RegEnumKeyExW
RegQueryValueExW
RegOpenKeyExW
RegOpenKeyExA
RegEnumKeyA
RegQueryValueExA
RegOpenKeyA
RegCloseKey
RegQueryInfoKeyW

winmm

timeSetEvent
timeKillEvent
timeGetDevCaps
timeGetTime

Exports

Exports

DirectPlayCreate
DirectPlayEnumerate
DirectPlayEnumerateA
DirectPlayEnumerateW
DirectPlayLobbyCreateA
DirectPlayLobbyCreateW
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
gdwDPlaySPRefCount

Sections

.text
Size: 208KB - Virtual size: 208KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dpmodemx.dll
.dll windows:5 windows x86 arch:x86

11047f92afa1f1e11ff8e095545a3dd4

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

DisableThreadLibraryCalls
LeaveCriticalSection
EnterCriticalSection
PurgeComm
EscapeCommFunction
WaitForSingleObject
SetCommMask
SetEvent
CloseHandle
GetOverlappedResult
GetLastError
ReadFile
ClearCommError
WriteFile
GetCommState
ExitThread
WaitForMultipleObjects
WaitCommEvent
CreateEventA
ResumeThread
SetThreadPriority
CreateThread
InitializeCriticalSection
SetupComm
SetCommState
CreateFileA
lstrlenA
Sleep
GetTickCount
HeapAlloc
HeapFree
HeapReAlloc
GetProcessHeap
WideCharToMultiByte
MultiByteToWideChar
QueryPerformanceCounter
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
GetProcAddress
GetModuleHandleA
TerminateProcess
GetCurrentProcess
SetCommTimeouts
DeleteCriticalSection

user32

DispatchMessageA
KillTimer
PeekMessageA
SetDlgItemTextA
GetParent
wsprintfA
SetTimer
GetWindowRect
GetDesktopWindow
SetWindowPos
GetDlgItemTextA
EnableWindow
GetForegroundWindow
DialogBoxParamA
GetWindowLongA
EndDialog
SetWindowLongA
GetDlgItem
SetFocus
TranslateMessage
SendDlgItemMessageA
LoadStringA

tapi32

lineInitialize
lineShutdown
lineDeallocateCall
lineOpen
lineNegotiateAPIVersion
lineGetID
lineGetCallInfo
lineGetDevCaps
lineAnswer
lineDrop
lineMakeCall
lineClose
lineConfigDialog

dplayx

gdwDPlaySPRefCount

Exports

Exports

SPInit

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 59KB - Virtual size: 59KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dpnaddr.dll
.dll windows:5 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Exports

Exports

DirectPlay8AddressCreate

Sections

.text
Size: 512B - Virtual size: 271B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 1016B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 8B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dpnet.dll
.dll regsvr32 windows:5 windows x86 arch:x86

7cd8abafddca244dc1e8376ad8a2fc46

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetProcAddress
GetModuleHandleA
TerminateProcess
GetCurrentProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
DisableThreadLibraryCalls
CreateEventW
CloseHandle
IsBadReadPtr
IsBadWritePtr
Sleep
GetCurrentThreadId
ResetEvent
InterlockedDecrement
SetEvent
InterlockedIncrement
InitializeCriticalSectionAndSpinCount
IsBadStringPtrA
IsBadStringPtrW
GetLastError
GetModuleHandleW
GetVersionExW
FreeLibrary
LoadLibraryW
lstrcpyW
lstrlenW
LocalFree
TlsFree
CreateSemaphoreW
TlsAlloc
GetSystemInfo
TlsSetValue
WaitForSingleObject
TlsGetValue
LeaveCriticalSection
ReleaseSemaphore
InterlockedExchange
SignalObjectAndWait
SetThreadPriority
SetThreadAffinityMask
SetThreadIdealProcessor
GetCurrentThread
CreateThread
CancelIo
SetWaitableTimer
CreateWaitableTimerW
InterlockedExchangeAdd
InterlockedCompareExchange
GetModuleFileNameW
LoadLibraryA
GetSystemDirectoryA
SetLastError
OpenEventW
CreateProcessW
GetSystemDirectoryW
ReleaseMutex
UnmapViewOfFile
MapViewOfFile
CreateFileMappingW
CreateMutexW
GetCommandLineW
OpenProcess
GetExitCodeProcess
Process32NextW
Process32FirstW
CreateToolhelp32Snapshot
WideCharToMultiByte
MultiByteToWideChar
CreateFileW
WaitForSingleObjectEx
CreateIoCompletionPort
SleepEx
PostQueuedCompletionStatus
GetQueuedCompletionStatus
WaitForMultipleObjectsEx
SetCommMask
PurgeComm
SetCommTimeouts
SetCommState
ReadFile
FlushFileBuffers
WriteFile
lstrcpynW
FormatMessageW
GetStdHandle
DuplicateHandle
CreatePipe
EnterCriticalSection
DeleteCriticalSection
HeapFree
GetProcessHeap
WaitForMultipleObjects
HeapAlloc

winmm

timeGetTime
timeBeginPeriod
timeEndPeriod

ole32

CoCreateInstance
CoUninitialize
CoInitializeEx
CoCreateGuid
StringFromGUID2
CLSIDFromString

msvcrt

calloc
malloc
_adjust_fdiv
_initterm
free
wcscpy
wcslen
_stricmp
wcsrchr
_wcsnicmp
wcsstr
wcsncpy
memmove
strncpy
swprintf
srand
_ftol
wcscat
_wcsicmp
wcscmp
wcstoul
wcsncmp
_wsplitpath
strtoul
strchr
sprintf
strtol
_except_handler3

ws2_32

WSASetLastError
WSAIoctl
WSARecvFrom
WSAGetOverlappedResult
shutdown
WSASendTo
setsockopt
gethostname
bind
getsockname
getservbyport
gethostbyaddr
getservbyname
htonl
inet_ntoa
WSAGetLastError
socket
inet_addr
gethostbyname
htons
ntohs
WSAStartup
WSACleanup
getsockopt
closesocket

user32

wsprintfA
wsprintfW
CharNextW
PostMessageW
DialogBoxParamW
GetWindowLongW
EndDialog
SetWindowLongW
GetWindowTextW
GetDlgItem
SendMessageW
SetWindowTextW
LoadStringW

advapi32

CryptReleaseContext
FreeSid
AddAccessAllowedAce
InitializeAcl
GetLengthSid
SetSecurityDescriptorDacl
AllocateAndInitializeSid
InitializeSecurityDescriptor
CryptAcquireContextW
RegCloseKey
RegEnumKeyExW
RegEnumValueW
RegSetValueExW
RegQueryValueExW
RegQueryInfoKeyW
RegDeleteKeyW
RegDeleteValueW
RegOpenKeyExW
RegCreateKeyExW
CryptGenRandom

Exports

Exports

DirectPlay8Create
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 318KB - Virtual size: 317KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 14KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 359KB - Virtual size: 359KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dpnhpast.dll
.dll regsvr32 windows:5 windows x86 arch:x86

103a3a8f5867b82d4d9d14ed0aa51885

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

Sleep
GetVersionExW
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
GetModuleHandleA
TerminateProcess
GetProcessHeap
HeapFree
FreeLibrary
SetEvent
PostQueuedCompletionStatus
InterlockedDecrement
GetProcAddress
LoadLibraryW
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
DisableThreadLibraryCalls
InterlockedIncrement
IsBadReadPtr
GetCurrentThreadId
lstrcpyW
lstrlenW
GetLastError
InitializeCriticalSectionAndSpinCount
GetModuleHandleW
CreateIoCompletionPort
GetCurrentProcess
DuplicateHandle
CloseHandle
IsBadWritePtr
HeapAlloc

winmm

timeGetTime

advapi32

RegCreateKeyExW
RegOpenKeyExW
RegDeleteValueW
RegDeleteKeyW
RegQueryValueExW
RegSetValueExW
RegCloseKey
CryptAcquireContextW
CryptGenRandom
CryptReleaseContext

msvcrt

_adjust_fdiv
_initterm
free
malloc
srand
swprintf
_except_handler3

ole32

StringFromGUID2

Exports

Exports

DirectPlayNATHelpCreate
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 27KB - Virtual size: 27KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 504B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dpnhupnp.dll
.dll regsvr32 windows:5 windows x86 arch:x86

e1a61076ca8761b8ba640bb74494bcde

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

PostQueuedCompletionStatus
SetEvent
CreateEventW
FreeLibrary
GetVersionExW
QueryPerformanceCounter
InterlockedDecrement
GetCurrentProcessId
GetSystemTimeAsFileTime
GetModuleHandleA
TerminateProcess
Sleep
CreateIoCompletionPort
GetCurrentProcess
DuplicateHandle
IsBadWritePtr
GetLastError
OpenEventW
GetModuleFileNameW
ReleaseSemaphore
GetCurrentThreadId
WaitForSingleObject
CloseHandle
CreateSemaphoreW
IsBadReadPtr
InterlockedIncrement
HeapAlloc
DisableThreadLibraryCalls
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
LoadLibraryW
GetProcAddress
HeapFree
GetProcessHeap
GetTickCount
MultiByteToWideChar
WideCharToMultiByte
GetModuleHandleW
IsBadStringPtrW
InitializeCriticalSectionAndSpinCount
LocalFree
lstrlenW
lstrcpyW

user32

wsprintfW

winmm

timeGetTime

advapi32

InitializeAcl
RegEnumValueW
RegSetValueExW
RegQueryValueExW
AllocateAndInitializeSid
GetLengthSid
AddAccessAllowedAce
InitializeSecurityDescriptor
SetSecurityDescriptorDacl
FreeSid
OpenSCManagerW
OpenServiceW
QueryServiceConfigW
CloseServiceHandle
CryptAcquireContextW
CryptGenRandom
CryptReleaseContext
RegDeleteKeyW
RegDeleteValueW
RegOpenKeyExW
RegCreateKeyExW
RegCloseKey

ole32

CoCreateInstance
CoTaskMemFree
CoUninitialize
StringFromGUID2
CoInitializeEx
CoSetProxyBlanket

msvcrt

malloc
strtok
strstr
_adjust_fdiv
_wcsicmp
_stricmp
_strnicmp
atoi
_wsplitpath
wcslen
srand
swprintf
_initterm
free
strchr
wcscpy
_except_handler3

Exports

Exports

DirectPlayNATHelpCreate
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 60KB - Virtual size: 60KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 784B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dpnlobby.dll
.dll windows:5 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Exports

Exports

DirectPlay8LobbyCreate

Sections

.text
Size: 512B - Virtual size: 270B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 1024B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 8B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dpnsvr.exe
.exe windows:5 windows x86 arch:x86

14afd694d39937cccde81195f7378eb3

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateFileMappingW
InterlockedDecrement
QueryPerformanceCounter
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
GetProcAddress
GetModuleHandleA
TerminateProcess
GetCurrentProcess
GetProcessHeap
HeapFree
CompareStringW
MapViewOfFile
UnmapViewOfFile
WaitForSingleObject
ReleaseMutex
CreateEventW
CreateMutexW
DeleteCriticalSection
SetEvent
GetTickCount
LeaveCriticalSection
EnterCriticalSection
HeapAlloc
OpenProcess
GetLastError
CloseHandle
InterlockedIncrement
lstrlenW
GetStartupInfoW
InitializeCriticalSectionAndSpinCount
GetModuleHandleW
GetVersionExW
FreeLibrary
LoadLibraryW
lstrcpyW
OpenEventW
ReleaseSemaphore
CreateSemaphoreW

ole32

CoUninitialize
CoInitializeEx
CoCreateGuid
StringFromGUID2
CoCreateInstance

msvcrt

_except_handler3
_controlfp
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__wgetmainargs
_wcmdln
exit
_cexit
_XcptFilter
_exit
_c_exit
wcslen
__set_app_type
srand
wcscpy

advapi32

RegCreateKeyExW
FreeSid
SetSecurityDescriptorDacl
CryptReleaseContext
InitializeAcl
GetLengthSid
AllocateAndInitializeSid
InitializeSecurityDescriptor
CryptAcquireContextW
RegCloseKey
RegQueryValueExW
RegOpenKeyExW
AddAccessAllowedAce

user32

wsprintfW

winmm

timeGetTime

Sections

.text
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 592B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 1016B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
dpvacm.dll
.dll regsvr32 windows:5 windows x86 arch:x86

b17f510eadb77dc154e2cac23cbb4c04

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

TerminateProcess
GetCurrentProcess
lstrlenW
lstrcpyW
GetVersionExW
GetModuleHandleA
InitializeCriticalSectionAndSpinCount
LoadLibraryW
FreeLibrary
GetProcAddress
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
DeleteCriticalSection
GetLastError
IsBadWritePtr
EnterCriticalSection
HeapAlloc
LeaveCriticalSection
InterlockedDecrement
InterlockedIncrement
HeapFree
GetProcessHeap
GetModuleHandleW
Sleep

user32

LoadStringW

winmm

timeGetTime

msacm32

acmDriverDetailsW
acmStreamClose
acmDriverID
acmStreamOpen
acmStreamUnprepareHeader
acmStreamConvert
acmStreamPrepareHeader

advapi32

RegSetValueExW
RegOpenKeyExW
RegDeleteKeyW
RegQueryValueExW
RegCloseKey
RegCreateKeyExW

ole32

CoCreateInstance
StringFromGUID2

msvcrt

free
_initterm
_adjust_fdiv
__dllonexit
swprintf
malloc
wcslen
wcscpy
_purecall
srand
_except_handler3
_onexit

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dpvoice.dll
.dll regsvr32 windows:5 windows x86 arch:x86

9c767fdfde0fefa8d0dedc5ac9f6dbea

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

QueryPerformanceCounter
GetCurrentThreadId
GetSystemTimeAsFileTime
GetModuleHandleA
InterlockedCompareExchange
GetCurrentProcess
GetSystemInfo
CreateSemaphoreW
LoadLibraryW
GetProcAddress
FreeLibrary
GetCurrentProcessId
ProcessIdToSessionId
InterlockedExchange
ResetEvent
IsBadWritePtr
IsBadReadPtr
Sleep
TerminateProcess
GetProfileIntA
GetModuleFileNameW
lstrcpynW
GetWindowsDirectoryW
CreateEventW
CreateThread
SetThreadPriority
DeleteCriticalSection
GetTickCount
WaitForMultipleObjects
LeaveCriticalSection
EnterCriticalSection
InterlockedDecrement
InterlockedIncrement
ReleaseSemaphore
CloseHandle
SetEvent
WaitForSingleObject
HeapFree
GetProcessHeap
WideCharToMultiByte
HeapAlloc
SetLastError
ReleaseMutex
CreateFileMappingW
MapViewOfFile
InitializeCriticalSectionAndSpinCount
GetLastError
GetModuleHandleW
GetVersionExW
lstrcpyW
lstrlenW
CreateProcessW
GetExitCodeProcess
GetSystemDirectoryW
GetExitCodeThread
TerminateThread
CreateMutexW
LoadLibraryA
UnmapViewOfFile

msvcrt

swprintf
malloc
srand
_wcsnicmp
wcscpy
wcsncat
wcslen
wcsncpy
__CxxFrameHandler
_onexit
__dllonexit
_except_handler3
?terminate@@YAXXZ
_adjust_fdiv
_initterm
free
_beginthreadex
_endthreadex
sprintf
_purecall
wcscat
_CIpow
fclose
fflush
_vsnprintf
fputs
vfprintf
fopen
_ftol

user32

LoadStringW
MessageBoxW
IsWindow
LoadCursorW
GetSysColorBrush
RegisterClassW
InvalidateRgn
DefWindowProcW
GetClientRect
BeginPaint
EndPaint
UnregisterClassW
GetWindowLongW
EnableWindow
DialogBoxParamW
GetParent
GetDlgItem
EndDialog
LoadIconW
SetWindowPos
GetClassNameW
GetWindowThreadProcessId
SetForegroundWindow
GetSystemMetrics
GetWindowRect
EnumWindows
SendMessageW
ReleaseDC
GetDC
SystemParametersInfoW
SetWindowLongW
PostMessageW
SendDlgItemMessageW

winmm

mixerSetControlDetails
waveInGetDevCapsW
waveInGetDevCapsA
waveOutGetDevCapsA
PlaySoundW
waveOutGetDevCapsW
waveOutSetVolume
waveOutGetVolume
mixerGetID
mixerGetLineControlsW
mixerGetLineInfoW
mixerGetControlDetailsW
timeGetTime

advapi32

RegOpenKeyExW
RegDeleteKeyW
RegQueryValueExW
RegSetValueExW
RegEnumKeyExW
RegCloseKey
RegFlushKey
RegCreateKeyExW

ole32

CoInitializeEx
CLSIDFromString
StringFromGUID2
CoCreateInstance
CoUninitialize

gdi32

CreatePen
CreateFontIndirectW
GetDeviceCaps
CreateSolidBrush
GetStockObject
Rectangle
LineTo
MoveToEx
SelectObject
DeleteObject

Exports

Exports

DirectPlayVoiceCreate
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 125KB - Virtual size: 125KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 233KB - Virtual size: 233KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dpvoice.inf
dpvsetup.exe
.exe windows:5 windows x86 arch:x86

1405b97b615751afaa909eba25b4804d

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCurrentProcess
TerminateProcess
GetProcAddress
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
GetCommandLineW
GetStartupInfoA
lstrcpyW
GetLastError
LoadLibraryW
GetModuleHandleA
LeaveCriticalSection
EnterCriticalSection
InitializeCriticalSectionAndSpinCount
GetModuleHandleW
GetVersionExW
Sleep
CreateProcessW
CloseHandle
GetExitCodeProcess
GetSystemDirectoryW
GetExitCodeThread
TerminateThread
WaitForSingleObject
SetEvent
CreateMutexW
WaitForMultipleObjects
CreateThread
CreateEventW
UnmapViewOfFile
MapViewOfFile
CreateFileMappingW
ReleaseMutex
OpenFileMappingW
OpenEventW
SetLastError
FreeLibrary
LoadLibraryA
HeapFree
GetProcessHeap
HeapAlloc
DeleteCriticalSection

msvcrt

__set_app_type
_except_handler3
_controlfp
__dllonexit
_onexit
__p__fmode
__p__commode
wcsncpy
_XcptFilter
_adjust_fdiv
_c_exit
wcstok
_wcsicmp
swprintf
srand
_wcsnicmp
wcslen
fopen
vfprintf
fputs
_vsnprintf
fflush
fclose
__setusermatherr
_initterm
__getmainargs
_acmdln
_cexit
_exit
exit
wcsncat

user32

GetWindowRect
LoadStringW
LoadCursorW
GetSysColorBrush
RegisterClassW
InvalidateRgn
DefWindowProcW
GetClientRect
BeginPaint
EndPaint
UnregisterClassW
GetDesktopWindow
GetWindowLongW
EnableWindow
DialogBoxParamW
IsWindow
GetParent
GetDlgItem
EndDialog
LoadIconW
MessageBoxW
SendDlgItemMessageW
PostMessageW
SetWindowLongW
SystemParametersInfoW
GetDC
ReleaseDC
SendMessageW
EnumWindows
GetSystemMetrics
SetForegroundWindow
GetWindowThreadProcessId
GetClassNameW
SetWindowPos

winmm

waveInGetDevCapsA
PlaySoundW
waveOutGetDevCapsW
waveOutSetVolume
waveOutGetVolume
mixerGetID
waveOutGetDevCapsA
waveInGetDevCapsW
timeGetTime

ole32

CoInitializeEx
CoUninitialize
CoCreateInstance
StringFromGUID2

advapi32

RegOpenKeyExW
RegSetValueExW
RegQueryValueExW
RegCloseKey
RegCreateKeyExW
RegFlushKey

gdi32

LineTo
Rectangle
GetStockObject
CreateSolidBrush
MoveToEx
GetDeviceCaps
CreateFontIndirectW
DeleteObject
CreatePen
SelectObject

dsound

ord1

comctl32

PropertySheetW
ord17
CreatePropertySheetPageW

Sections

.text
Size: 47KB - Virtual size: 46KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 27KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
dpvvox.dll
.dll regsvr32 windows:5 windows x86 arch:x86

28936a80008711944b369d04d634270c

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

TerminateProcess
GetCurrentProcess
InitializeCriticalSection
lstrlenW
GetModuleHandleA
GetVersionExW
GetModuleHandleW
InitializeCriticalSectionAndSpinCount
LoadLibraryW
GetProcAddress
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
DeleteCriticalSection
GetLastError
IsBadWritePtr
EnterCriticalSection
LeaveCriticalSection
InterlockedDecrement
InterlockedIncrement
HeapAlloc
HeapFree
GetProcessHeap
lstrcpyW
FreeLibrary
Sleep

user32

LoadStringW

winmm

timeGetTime

msacm32

acmStreamUnprepareHeader
acmStreamConvert
acmStreamPrepareHeader
acmStreamClose
acmStreamOpen

advapi32

RegCreateKeyExW
RegOpenKeyExW
RegDeleteKeyW
RegQueryValueExW
RegSetValueExW
RegCloseKey

ole32

StringFromGUID2
CoCreateInstance

msvcrt

floor
_ftol
free
calloc
ceil
_except_handler3
swprintf
_CIpow
_CIacos
wcslen
_CIasin
_initterm
_adjust_fdiv
__dllonexit
_onexit
wcscpy
srand
_purecall
_CIexp
malloc

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 103KB - Virtual size: 102KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1000B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dpwsockx.dll
.dll windows:5 windows x86 arch:x86

a581b07542c0f50534597a0ac0051caf

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

dpwsockx.pdb

Imports

kernel32

InterlockedExchange
Sleep
ResetEvent
SetEvent
SetThreadPriority
CreateThread
WaitForSingleObject
GetVersionExA
DisableThreadLibraryCalls
HeapAlloc
GetProcessHeap
ReleaseMutex
UnmapViewOfFile
OpenMutexA
MapViewOfFile
CreateFileMappingA
HeapFree
CreateProcessA
GetSystemDirectoryA
OpenEventA
GetCurrentProcessId
HeapReAlloc
WideCharToMultiByte
MultiByteToWideChar
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetSystemTimeAsFileTime
TerminateProcess
GetCurrentProcess
LoadLibraryA
SetUnhandledExceptionFilter
VirtualProtect
GetLocaleInfoA
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
VirtualAlloc
GetCPInfo
GetOEMCP
GetACP
VirtualQuery
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
VirtualFree
GetSystemInfo
HeapCreate
HeapDestroy
GetModuleFileNameA
GetStartupInfoA
GetFileType
GetStdHandle
SetHandleCount
GetModuleHandleA
ExitProcess
GetCommandLineA
FreeLibrary
GetProcAddress
ExitThread
WaitForMultipleObjectsEx
InterlockedDecrement
GetLastError
InterlockedIncrement
InitializeCriticalSection
CreateEventA
CloseHandle
DeleteCriticalSection
EnterCriticalSection
UnhandledExceptionFilter
LeaveCriticalSection

ntdll

RtlUnwind

user32

SetWindowLongA
GetForegroundWindow
SendMessageA
SetFocus
GetDlgItem
GetWindowLongA
GetDlgItemTextA
EndDialog
DialogBoxParamA

wsock32

select
__WSAFDIsSet
getpeername
recvfrom
gethostname
gethostbyname
send
sendto
listen
recv
getsockname
connect
setsockopt
inet_ntoa
WSAGetLastError
closesocket
inet_addr
getsockopt
WSACleanup
WSAStartup
ntohs
bind
socket
ioctlsocket
htons
accept

winmm

timeGetTime

advapi32

RegQueryValueExA
RegEnumKeyExA
RegOpenKeyExA
SetSecurityDescriptorDacl
FreeSid
AddAccessAllowedAce
InitializeAcl
GetLengthSid
AllocateAndInitializeSid
InitializeSecurityDescriptor
RegCloseKey

dplayx

gdwDPlaySPRefCount

Exports

Exports

DPWS_BuildIPMessageHeader
DPWS_GetEnumPort
SPInit

Sections

.text
Size: 49KB - Virtual size: 49KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 23KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dsdmo.dll
.dll regsvr32 windows:5 windows x86 arch:x86

320f45a32628b35d761b69e505a2c544

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetVersionExA
DisableThreadLibraryCalls
CloseHandle
WaitForSingleObject
GetLastError
DeviceIoControl
CreateEventA
IsBadWritePtr
IsBadReadPtr
InterlockedDecrement
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
GetProcAddress
GetModuleHandleA
TerminateProcess
GetCurrentProcess
InterlockedIncrement
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
GetModuleFileNameA
Sleep
QueryPerformanceCounter
lstrlenA

msvcrt

_initterm
_adjust_fdiv
malloc
free
wcslen
_vsnwprintf
_vsnprintf
_CIsinh
ceil
modf
__CxxFrameHandler
??2@YAPAXI@Z
_purecall
??3@YAXPAX@Z
wcstombs
_CIpow
floor
_ftol

advapi32

RegDeleteKeyA
RegCreateKeyExA
RegSetValueExA
RegOpenKeyExA
RegEnumKeyA
RegCloseKey

ole32

StringFromCLSID
CoTaskMemFree
CoTaskMemAlloc

msdmo

DMORegister
DMOUnregister
MoInitMediaType
MoFreeMediaType
MoCopyMediaType

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 160KB - Virtual size: 160KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 1008B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dsdmoprp.dll
.dll regsvr32 windows:5 windows x86 arch:x86

44c532b5aea3995196546902607fa520

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

lstrcatA
GetModuleFileNameA
FreeLibrary
GetProcAddress
LoadLibraryA
DisableThreadLibraryCalls
SizeofResource
LoadResource
FindResourceA
GetLastError
LoadLibraryExA
GetShortPathNameA
lstrcpyA
MulDiv
GetCurrentThreadId
HeapAlloc
FlushInstructionCache
GetCurrentProcess
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
GetModuleHandleA
TerminateProcess
HeapDestroy
EnterCriticalSection
LeaveCriticalSection
lstrcpynA
IsDBCSLeadByte
lstrcmpiA
lstrlenA
InterlockedDecrement
InterlockedIncrement
DeleteCriticalSection
InitializeCriticalSection
Sleep
GetProcessHeap
HeapFree
lstrlenW
WideCharToMultiByte
LockResource
MultiByteToWideChar

msvcrt

_initterm
malloc
free
??3@YAXPAX@Z
realloc
??2@YAPAXI@Z
atoi
atof
_ftol
_vsnprintf
_purecall
_adjust_fdiv

gdi32

GetDeviceCaps
CreateFontIndirectA
SelectObject
GetTextMetricsA
GetTextExtentPointA
DeleteObject

oleaut32

SysFreeString
SysStringLen
SysAllocStringLen
RegisterTypeLi
LoadTypeLi
SysAllocString
VarUI4FromStr

user32

CheckDlgButton
IsDlgButtonChecked
GetDlgItem
GetDC
SendMessageA
CharNextA
ShowWindow
MoveWindow
IsDialogMessageA
SetWindowLongA
DestroyWindow
IsWindow
LoadStringA
GetDialogBaseUnits
ReleaseDC
CreateDialogParamA
WinHelpA

ole32

CoTaskMemRealloc
CoTaskMemAlloc
CoTaskMemFree
CoCreateInstance

advapi32

RegCloseKey
RegEnumKeyExA
RegEnumValueA
RegQueryInfoKeyA
RegSetValueExA
RegOpenKeyExA
RegDeleteKeyA
RegDeleteValueA
RegCreateKeyExA

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 34KB - Virtual size: 34KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 439KB - Virtual size: 439KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dsound.dll
.dll windows:5 windows x86 arch:x86

314065406b64859324abc4012d44875d

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

dsound.pdb

Imports

kernel32

FreeLibrary
GetProcAddress
LoadLibraryW
GetLastError
lstrlenA
lstrcpynA
MultiByteToWideChar
WideCharToMultiByte
lstrlenW
lstrcpynW
GetVersionExW
SetThreadPriority
SetPriorityClass
GetThreadPriority
GetPriorityClass
GetCurrentThread
lstrcatW
lstrcpyW
lstrcmpW
CreateMutexW
ReleaseMutex
DisableThreadLibraryCalls
GetCurrentThreadId
GetCurrentProcessId
SetEvent
lstrcpyA
Sleep
InterlockedExchange
InitializeCriticalSection
DeleteCriticalSection
LeaveCriticalSection
GetCurrentProcess
InterlockedIncrement
InterlockedDecrement
OpenEventW
CreateThread
CreateEventW
GetExitCodeThread
OpenProcess
GetSystemDirectoryW
GetOverlappedResult
DeviceIoControl
ResetEvent
GetTickCount
WaitForMultipleObjects
UnmapViewOfFile
MapViewOfFile
CreateFileMappingW
OpenFileMappingW
GetWindowsDirectoryW
SetLastError
GetPrivateProfileStringW
MulDiv
VerifyVersionInfoW
VerSetConditionMask
WaitForSingleObject
QueryPerformanceCounter
QueryPerformanceFrequency
GetSystemTimeAsFileTime
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
DuplicateHandle
HeapFree
HeapAlloc
HeapDestroy
HeapCreate
CreateFileW
ReadFile
SetFilePointer
GetFileSize
lstrcmpiW
GetModuleHandleW
GetModuleFileNameW
GetFullPathNameW
EnterCriticalSection
CloseHandle

msvcrt

_isnan
_ftol
_initterm
malloc
_adjust_fdiv
__dllonexit
_onexit
_CIpow
_wcsicmp
free
wcsrchr
__CxxFrameHandler

ntdll

NtQueryInformationProcess

user32

GetParent
GetForegroundWindow
GetWindowPlacement
IsWindow
GetWindowThreadProcessId
EnumWindows
LoadStringW
wsprintfW
CharUpperW
CharLowerBuffW

advapi32

RegCloseKey
QueryServiceConfigW
OpenServiceW
OpenSCManagerW
RegOpenKeyW
RegCreateKeyA
RegOpenKeyExA
RegCreateKeyW
RegOpenKeyExW
RegQueryValueExA
RegQueryValueExW
RegSetValueExA
RegSetValueExW
CloseServiceHandle

rpcrt4

UuidFromStringW

ole32

CoCreateInstance

winmm

waveInGetPosition
timeBeginPeriod
timeEndPeriod
mixerSetControlDetails
mixerOpen
mixerGetLineInfoW
mixerGetLineControlsW
mixerGetControlDetailsW
mixerClose
waveOutGetPosition
waveOutGetDevCapsW
waveInGetDevCapsW
waveOutGetVolume
waveOutSetVolume
waveOutMessage
waveInMessage
waveOutGetNumDevs
waveInGetNumDevs
waveOutOpen
waveOutClose
waveInOpen
waveInClose
timeGetTime
waveInUnprepareHeader
waveInStop
waveInReset
waveOutPrepareHeader
waveInAddBuffer
waveInPrepareHeader
waveInStart
waveOutUnprepareHeader
waveOutReset
waveOutRestart
waveOutPause
waveOutWrite

version

VerQueryValueW
GetFileVersionInfoW
GetFileVersionInfoSizeW

Exports

Exports

DirectSoundCaptureCreate
DirectSoundCaptureCreate8
DirectSoundCaptureEnumerateA
DirectSoundCaptureEnumerateW
DirectSoundCreate
DirectSoundCreate8
DirectSoundEnumerateA
DirectSoundEnumerateW
DirectSoundFullDuplexCreate
DllCanUnloadNow
DllGetClassObject
GetDeviceID

Sections

.text
Size: 333KB - Virtual size: 332KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 6KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 19KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dsound.inf
dsound.vxd
dsound3d.dll
.dll windows:5 windows x86 arch:x86

423fd2aec57d2beb55ba046748fc0345

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

msvcrt

_adjust_fdiv
_initterm
malloc
free

kernel32

Sleep
DisableThreadLibraryCalls

Exports

Exports

CafBiquadCoeffs

Sections

.text
Size: 1.2MB - Virtual size: 1.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 20B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 1008B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 456B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dswave.dll
.dll regsvr32 windows:5 windows x86 arch:x86

53dde5acafd181deae6d47482f150b5b

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GlobalUnlock
IsBadWritePtr
IsBadReadPtr
GlobalLock
GlobalAlloc
MultiByteToWideChar
LeaveCriticalSection
EnterCriticalSection
InitializeCriticalSection
GlobalFree
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
GetProcAddress
GetModuleHandleA
TerminateProcess
GetCurrentProcess
GlobalHandle
DeleteCriticalSection
GetModuleFileNameA
DisableThreadLibraryCalls
GetVersionExA
Sleep
InterlockedIncrement
QueryPerformanceCounter
InterlockedDecrement

msvcrt

free
memmove
_initterm
__CxxFrameHandler
??2@YAPAXI@Z
??3@YAXPAX@Z
malloc
wcstombs
_adjust_fdiv
_purecall

advapi32

RegCloseKey
RegCreateKeyExA
RegDeleteKeyA
RegEnumKeyA
RegOpenKeyExA
RegSetValueExA

msacm32

acmStreamPrepareHeader
acmStreamConvert
acmStreamSize
acmStreamUnprepareHeader
acmStreamClose
acmFormatSuggest
acmStreamOpen

ole32

StringFromCLSID
CoTaskMemFree

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 180B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 748B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dx7vb.dll
.dll regsvr32 windows:5 windows x86 arch:x86

1075cfd402ecf012fa24c5ee66bf0f31

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
QueryPerformanceCounter
LockResource
_lopen
_lread
_lclose
WriteFile
FindResourceW
OutputDebugStringA
GetModuleHandleA
CreateFileA
GetFileSize
CreateFileMappingA
MapViewOfFile
UnmapViewOfFile
FindResourceA
LoadResource
SizeofResource
GetModuleFileNameA
lstrcatA
lstrcpyA
HeapDestroy
GetCurrentProcess
GetLastError
lstrlenA
GetCurrentThreadId
WideCharToMultiByte
MultiByteToWideChar
LocalReAlloc
lstrcmpiA
LeaveCriticalSection
EnterCriticalSection
CreateEventA
CreateThread
ResumeThread
GetSystemDefaultLCID
WaitForSingleObject
CloseHandle
SetEvent
GetTickCount
GetProcAddress
lstrlenW
GetVersionExA
DisableThreadLibraryCalls
FreeLibrary
GetSystemDirectoryA
LoadLibraryA
LocalFree
LocalAlloc
InterlockedDecrement
InterlockedIncrement
DeleteCriticalSection
InitializeCriticalSection

msvcrt

_except_handler3
wcslen
_wcsicmp
wcsncmp
_wcsupr
wcscpy

advapi32

RegCloseKey
RegQueryValueExA
RegOpenKeyA
RegDeleteKeyA
RegCreateKeyExA
RegOpenKeyExA
RegEnumKeyExA
RegSetValueExA

ole32

CoCreateGuid
OleInitialize
CoGetInterfaceAndReleaseStream
OleUninitialize
CoCreateInstance
CoMarshalInterThreadInterfaceInStream
CoTaskMemFree
StringFromCLSID

gdi32

SetBkMode
SetBkColor
Polyline
CreateBrushIndirect
CreateSolidBrush
CreateHatchBrush
CreatePen
GetObjectA
CreateCompatibleDC
SelectObject
StretchBlt
DeleteObject
GetSystemPaletteEntries
CreateHalftonePalette
GetPaletteEntries
CreateICA
GetDeviceCaps
Rectangle
RoundRect
Ellipse
ExtTextOutW
SetTextColor
GetTextAlign
SetTextAlign
DeleteDC

msacm32

acmStreamSize
acmStreamUnprepareHeader
acmStreamConvert
acmStreamPrepareHeader
acmStreamOpen
acmStreamClose

user32

LoadStringA
CharNextA
GetWindowRect
GetDC
ReleaseDC
LoadImageA
wsprintfA

oleaut32

VariantChangeType
SysStringByteLen
VariantInit
VariantClear
SysFreeString
SysAllocString
RegisterTypeLi
LoadTypeLi
SysStringLen

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 196KB - Virtual size: 195KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 367KB - Virtual size: 366KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 21KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dx8vb.dll
.dll regsvr32 windows:5 windows x86 arch:x86

d7478ded6c8775462f2d7c0c8f58d1d9

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetSystemTimeAsFileTime
GetCurrentProcessId
QueryPerformanceCounter
SetFilePointer
ReadFile
SetThreadPriority
GetTickCount
Sleep
lstrcmpA
WriteFile
FindResourceW
OutputDebugStringA
GetModuleHandleA
HeapValidate
LockResource
CreateFileA
GetFileSize
CreateFileMappingA
MapViewOfFile
UnmapViewOfFile
FindResourceA
LoadResource
lstrlenA
SizeofResource
GetCurrentThread
GetModuleFileNameA
lstrcatA
lstrcpyA
HeapDestroy
GetCurrentProcess
GetLastError
GetCurrentThreadId
WideCharToMultiByte
MultiByteToWideChar
lstrcmpiA
CreateEventA
CreateThread
ResumeThread
GetSystemDefaultLCID
WaitForSingleObject
CloseHandle
SetEvent
GetProcAddress
EnterCriticalSection
LeaveCriticalSection
lstrlenW
DisableThreadLibraryCalls
FreeLibrary
LoadLibraryA
InterlockedDecrement
InterlockedIncrement
DeleteCriticalSection
GetProcessHeap
HeapFree
CreateFileW
IsProcessorFeaturePresent
GetVersionExA
IsDBCSLeadByte
GetTempPathA
GetTempFileNameA
DeleteFileA
InitializeCriticalSection
TerminateProcess

msvcrt

malloc
??3@YAXPAX@Z
??2@YAPAXI@Z
_purecall
realloc
free
_CIacos
_finite
_ftol
wcslen
sprintf
wcscpy
ceil
?terminate@@YAXXZ
exit
floor
_CIpow
_setjmp3
longjmp
sscanf
isspace
isalnum
_except_handler3
_snprintf
__CxxFrameHandler
qsort
_controlfp
_wcsicmp
_strdup
setlocale
calloc
_vsnprintf
atoi
isdigit
isalpha

advapi32

RegQueryValueExA
RegOpenKeyA
RegEnumKeyExA
RegOpenKeyExA
RegCreateKeyExA
RegDeleteKeyA
RegSetValueExA
RegCloseKey

ole32

CoGetInterfaceAndReleaseStream
OleInitialize
CoCreateGuid
CoCreateInstance
CoMarshalInterThreadInterfaceInStream
CoTaskMemFree
CoReleaseMarshalData
CoMarshalInterface
CreateStreamOnHGlobal
CoUnmarshalInterface
StringFromCLSID
CoUninitialize
CoInitializeEx
CoInitialize
OleUninitialize

gdi32

GetDeviceCaps
CreateICA
GetObjectA
SelectObject
CreateFontIndirectA
GetCurrentObject
GetOutlineTextMetricsA
DeleteObject
GetGlyphOutlineA
GetGlyphOutlineW
SetTextColor
SetBkColor
SetBkMode
CreateDIBSection
CreateCompatibleDC
DeleteDC

msacm32

acmStreamPrepareHeader
acmStreamOpen
acmStreamSize
acmStreamConvert
acmStreamUnprepareHeader
acmStreamClose

user32

DispatchMessageA
TranslateMessage
LoadStringA
CharNextA
wsprintfA
DrawTextA
DrawTextW
PeekMessageA

oleaut32

SafeArrayCreate
RegisterTypeLi
LoadTypeLi
SafeArrayDestroy
SysFreeString
SysAllocString

d3dxof

DirectXFileCreate

Exports

Exports

D3DIndexBuffer8GetData
D3DIndexBuffer8SetData
D3DVertexBuffer8GetData
D3DVertexBuffer8SetData
D3DXMeshIndexBuffer8GetData
D3DXMeshIndexBuffer8SetData
D3DXMeshVertexBuffer8GetData
D3DXMeshVertexBuffer8SetData
DXCopyMemory
DXLockArray8
DXUnlockArray8
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
VB_AddDataToBuffer
VB_AddStringToBuffer
VB_D3DColorARGB
VB_D3DColorMake
VB_D3DColorRGBA
VB_D3DColorXRGB
VB_D3DXColorAdd
VB_D3DXColorAdjustContrast
VB_D3DXColorAdjustSaturation
VB_D3DXColorLerp
VB_D3DXColorModulate
VB_D3DXColorNegative
VB_D3DXColorScale
VB_D3DXColorSubtract
VB_D3DXMatrixAffineTransformation
VB_D3DXMatrixIdentity
VB_D3DXMatrixInverse
VB_D3DXMatrixIsIdentity
VB_D3DXMatrixLookAtLH
VB_D3DXMatrixLookAtRH
VB_D3DXMatrixMultiply
VB_D3DXMatrixOrthoLH
VB_D3DXMatrixOrthoOffCenterLH
VB_D3DXMatrixOrthoOffCenterRH
VB_D3DXMatrixOrthoRH
VB_D3DXMatrixPerspectiveFovLH
VB_D3DXMatrixPerspectiveFovRH
VB_D3DXMatrixPerspectiveLH
VB_D3DXMatrixPerspectiveOffCenterLH
VB_D3DXMatrixPerspectiveOffCenterRH
VB_D3DXMatrixPerspectiveRH
VB_D3DXMatrixReflect
VB_D3DXMatrixRotationAxis
VB_D3DXMatrixRotationQuaternion
VB_D3DXMatrixRotationX
VB_D3DXMatrixRotationY
VB_D3DXMatrixRotationYawPitchRoll
VB_D3DXMatrixRotationZ
VB_D3DXMatrixScaling
VB_D3DXMatrixShadow
VB_D3DXMatrixTransformation
VB_D3DXMatrixTranslation
VB_D3DXMatrixTranspose
VB_D3DXMatrixfDeterminant
VB_D3DXPlaneDot
VB_D3DXPlaneDotCoord
VB_D3DXPlaneDotNormal
VB_D3DXPlaneFromPointNormal
VB_D3DXPlaneFromPoints
VB_D3DXPlaneIntersectLine
VB_D3DXPlaneNormalize
VB_D3DXPlaneTransform
VB_D3DXQuaternionBaryCentric
VB_D3DXQuaternionConjugate
VB_D3DXQuaternionDot
VB_D3DXQuaternionExp
VB_D3DXQuaternionIdentity
VB_D3DXQuaternionInverse
VB_D3DXQuaternionIsIdentity
VB_D3DXQuaternionLength
VB_D3DXQuaternionLengthSq
VB_D3DXQuaternionLn
VB_D3DXQuaternionMultiply
VB_D3DXQuaternionNormalize
VB_D3DXQuaternionRotationAxis
VB_D3DXQuaternionRotationMatrix
VB_D3DXQuaternionRotationYawPitchRoll
VB_D3DXQuaternionSlerp
VB_D3DXQuaternionSquad
VB_D3DXQuaternionToAxisAngle
VB_D3DXVec2Add
VB_D3DXVec2BaryCentric
VB_D3DXVec2CCW
VB_D3DXVec2CatmullRom
VB_D3DXVec2Dot
VB_D3DXVec2Hermite
VB_D3DXVec2Length
VB_D3DXVec2LengthSq
VB_D3DXVec2Lerp
VB_D3DXVec2Maximize
VB_D3DXVec2Minimize
VB_D3DXVec2Normalize
VB_D3DXVec2Scale
VB_D3DXVec2Subtract
VB_D3DXVec2Transform
VB_D3DXVec2TransformCoord
VB_D3DXVec2TransformNormal
VB_D3DXVec3Add
VB_D3DXVec3BaryCentric
VB_D3DXVec3CatmullRom
VB_D3DXVec3Cross
VB_D3DXVec3Dot
VB_D3DXVec3Hermite
VB_D3DXVec3Length
VB_D3DXVec3LengthSq
VB_D3DXVec3Lerp
VB_D3DXVec3Maximize
VB_D3DXVec3Minimize
VB_D3DXVec3Normalize
VB_D3DXVec3Project
VB_D3DXVec3Scale
VB_D3DXVec3Subtract
VB_D3DXVec3Transform
VB_D3DXVec3TransformCoord
VB_D3DXVec3TransformNormal
VB_D3DXVec3Unproject
VB_D3DXVec4Add
VB_D3DXVec4BaryCentric
VB_D3DXVec4CatmullRom
VB_D3DXVec4Cross
VB_D3DXVec4Dot
VB_D3DXVec4Hermite
VB_D3DXVec4Length
VB_D3DXVec4LengthSq
VB_D3DXVec4Lerp
VB_D3DXVec4Maximize
VB_D3DXVec4Minimize
VB_D3DXVec4Normalize
VB_D3DXVec4Scale
VB_D3DXVec4Subtract
VB_D3DXVec4Transform
VB_GetDataFromBuffer
VB_GetStringFromBuffer
VB_NewBuffer

Sections

.text
Size: 605KB - Virtual size: 605KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 63KB - Virtual size: 66KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data1
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 462KB - Virtual size: 461KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 27KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dx9w2k.cat
dxapi.sys
.sys windows:5 windows x86 arch:x86

451e7ae3e889975f362e0be68fb23162

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

ntoskrnl.exe

KefReleaseSpinLockFromDpcLevel
KeInsertQueueDpc
KeSetEvent
ExAllocatePoolWithTag
KefAcquireSpinLockAtDpcLevel
_allmul
ExFreePool
_aulldiv

hal

KeQueryPerformanceCounter
KfAcquireSpinLock
KfReleaseSpinLock

videoprt.sys

VideoPortSynchronizeExecution

Exports

Exports

_DxApi@20
_DxApiGetVersion@0
_DxApiInitialize@32
_DxAutoflipUpdate@20
_DxEnableIRQ@8
_DxLoseObject@8
_DxUpdateCapture@12

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 192B - Virtual size: 176B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 288B - Virtual size: 276B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

PAGE
Size: 704B - Virtual size: 694B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.edata
Size: 256B - Virtual size: 241B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

INIT
Size: 448B - Virtual size: 436B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 960B - Virtual size: 944B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 224B - Virtual size: 202B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dxapi.xpg
.sys windows:5 windows x86 arch:x86

6a7f14fd633aa42f777a1ec1fa7bb386

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

dxapi.pdb

Imports

ntoskrnl.exe

_allmul
_aulldiv
KefAcquireSpinLockAtDpcLevel
KeAttachProcess
KeIsAttachedProcess
KefReleaseSpinLockFromDpcLevel
KeInsertQueueDpc
KeSetEvent
ExAllocatePoolWithTag
KeDetachProcess
ExFreePoolWithTag

hal

KeQueryPerformanceCounter
KfAcquireSpinLock
KfReleaseSpinLock

videoprt.sys

VideoPortSynchronizeExecution

Exports

Exports

_DxApi@20
_DxApiGetVersion@0
_DxApiInitialize@32
_DxAutoflipUpdate@20
_DxEnableIRQ@8
_DxLoseObject@8
_DxUpdateCapture@12

Sections

.text
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 256B - Virtual size: 142B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 384B - Virtual size: 364B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

PAGE
Size: 640B - Virtual size: 638B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.edata
Size: 256B - Virtual size: 241B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

INIT
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 984B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 256B - Virtual size: 256B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dxdiabrz.chm
.chm
dxdiachs.chm
.chm
dxdiacht.chm
.chm
dxdiacze.chm
.chm
dxdiadut.chm
.chm
dxdiafrn.chm
.chm
dxdiag.chm
.chm
dxdiag.exe
.exe windows:5 windows x86 arch:x86

c9c8ce365d77d4caaeb52ecc1c89fe8f

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

dxdiag.pdb

Imports

kernel32

WaitForMultipleObjects
WaitForSingleObject
SetEvent
GetCommandLineW
GetCurrentThreadId
FreeLibrary
LoadLibraryW
Sleep
CreateEventW
GetProcAddress
GetSystemInfo
GetFullPathNameW
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetVersionExW
lstrlenA
CompareFileTime
GetWindowsDirectoryW
lstrcmpW
lstrcpyW
GetProcessHeap
HeapAlloc
HeapFree
CloseHandle
DeleteCriticalSection
GetModuleFileNameW
GetFileAttributesW
InitializeCriticalSection
GetCurrentDirectoryW
GetSystemDirectoryW
ReadFile
SetEndOfFile
CreateFileW
FlushFileBuffers
SetStdHandle
GetLocaleInfoA
LCMapStringW
LCMapStringA
SetFilePointer
IsBadCodePtr
IsBadReadPtr
MultiByteToWideChar
VirtualProtect
GetStringTypeW
GetStringTypeA
VirtualQuery
InterlockedExchange
GetCPInfo
GetOEMCP
GetACP
LoadLibraryA
HeapSize
IsBadWritePtr
VirtualAlloc
VirtualFree
HeapCreate
HeapDestroy
TlsAlloc
SetLastError
TlsFree
GetFileType
SetHandleCount
GetEnvironmentStringsW
WideCharToMultiByte
FreeEnvironmentStringsW
InterlockedDecrement
LeaveCriticalSection
InterlockedIncrement
EnterCriticalSection
lstrlenW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetModuleFileNameA
GetStdHandle
WriteFile
GetModuleHandleA
ExitProcess
CreateThread
GetLastError
TlsGetValue
TlsSetValue
ExitThread
RtlUnwind
HeapReAlloc
GetStartupInfoA
GetCommandLineA
GetVersionExA

advapi32

RegFlushKey
RegSetValueExW
RegCreateKeyExW
RegEnumValueW
RegQueryInfoKeyW
RegOpenKeyExW
RegQueryValueExW
RegNotifyChangeKeyValue
RegDeleteValueW
RegCloseKey
RegDeleteKeyW
RegEnumKeyExW
RegEnumKeyW

gdi32

GetTextExtentPointW

user32

MessageBoxW
LoadStringW
EnableWindow
SendMessageW
GetDlgItem
wsprintfW
EndDialog
GetDesktopWindow
MsgWaitForMultipleObjects
PeekMessageW
IsDialogMessageW
TranslateMessage
DispatchMessageW
SetWindowsHookExW
UnhookWindowsHookEx
PostQuitMessage
GetClientRect
CreateDialogParamW
GetWindowRect
AdjustWindowRectEx
SetWindowPos
GetFocus
SetFocus
SetTimer
KillTimer
SetForegroundWindow
LoadIconW
CheckRadioButton
GetDlgItemTextW
GetDlgItemInt
SetDlgItemInt
GetDC
ReleaseDC
SetWindowTextW
CheckDlgButton
ShowWindow
SetDlgItemTextW
LoadStringA
wsprintfA
MessageBoxA
DestroyWindow
GetKeyState
IsWindowEnabled
PostMessageW
CallNextHookEx
GetWindowLongW
DialogBoxParamW
UpdateWindow

comctl32

ord17
ImageList_Destroy
ImageList_ReplaceIcon
ImageList_Create

comdlg32

GetSaveFileNameW

shell32

ShellExecuteW

ole32

CoCreateInstance
CoUninitialize
CoInitialize
CoInitializeSecurity

oleaut32

SysAllocString
SysFreeString
VariantInit
VariantClear

Sections

.text
Size: 216KB - Virtual size: 213KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 728KB - Virtual size: 727KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
dxdiager.chm
.chm
dxdiagn.dll
.dll regsvr32 windows:5 windows x86 arch:x86

48c7d55b953a7194952f230853c4b03b

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

dxdiagn.pdb

Imports

kernel32

FindFirstFileW
GetFullPathNameW
ExpandEnvironmentStringsW
lstrcmpiW
HeapFree
HeapAlloc
GetProcessHeap
GetPrivateProfileStringW
GetSystemInfo
Sleep
SetPriorityClass
GetPriorityClass
GetCurrentProcess
GetProfileIntW
OpenProcess
GlobalMemoryStatus
GetSystemDefaultLCID
GetLocalTime
WriteFile
LockResource
LoadResource
SizeofResource
FindResourceW
GetTempPathW
DeleteFileW
LeaveCriticalSection
EnterCriticalSection
SetEvent
ResetEvent
WaitForSingleObject
DeleteCriticalSection
CreateEventW
InitializeCriticalSection
CreateFileA
WideCharToMultiByte
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
TerminateProcess
FindClose
SetUnhandledExceptionFilter
FileTimeToLocalFileTime
FileTimeToSystemTime
GetDateFormatW
SystemTimeToFileTime
CreateFileW
CloseHandle
GetVersionExW
GetLocaleInfoW
GetCurrentDirectoryW
GetWindowsDirectoryW
OutputDebugStringW
GetModuleFileNameW
GetFileAttributesW
InterlockedIncrement
InterlockedDecrement
lstrlenA
FindResourceA
OutputDebugStringA
IsProcessorFeaturePresent
ReadFile
FlushFileBuffers
SetStdHandle
RaiseException
SetFilePointer
IsBadCodePtr
IsBadReadPtr
IsValidCodePage
IsValidLocale
EnumSystemLocalesA
GetUserDefaultLCID
GetStringTypeW
GetStringTypeA
GetLocaleInfoA
VirtualProtect
SetEndOfFile
LoadLibraryA
GetCPInfo
GetOEMCP
GetACP
VirtualQuery
InterlockedExchange
HeapSize
IsBadWritePtr
VirtualAlloc
LCMapStringW
LCMapStringA
VirtualFree
GetSystemDirectoryW
MultiByteToWideChar
GetModuleHandleW
GetVersionExA
lstrcmpW
CompareStringW
GetLastError
lstrlenW
FreeLibrary
LoadLibraryW
UnhandledExceptionFilter
GetProcAddress
HeapCreate
HeapDestroy
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetModuleFileNameA
GetStartupInfoA
GetFileType
GetStdHandle
SetHandleCount
TlsAlloc
TlsGetValue
SetLastError
TlsFree
GetModuleHandleA
ExitProcess
RtlUnwind
HeapReAlloc
GetCommandLineA
TlsSetValue

advapi32

RegOpenKeyExW
RegQueryValueExW
RegSetValueExW
RegDeleteValueW
RegEnumKeyW
RegCreateKeyExW
RegDeleteKeyW
CloseServiceHandle
QueryServiceConfigW
OpenServiceW
RegQueryValueExA
RegOpenKeyA
RegCloseKey
RegOpenKeyW
OpenSCManagerW

user32

CharNextW
GetSystemMetrics
GetWindowRect
SystemParametersInfoA
IntersectRect
OffsetRect
EnumDisplaySettingsW
ReleaseDC
GetDC
CharLowerBuffW
LoadStringW
FindWindowW
GetKeyboardType
LoadImageW
ShowWindow
CreateWindowExW
DialogBoxParamW
SetForegroundWindow
PostMessageW
KillTimer
SetTimer
EndDialog
IsDlgButtonChecked
GetWindowTextW
GetDlgItemTextW
SetWindowTextW
CheckRadioButton
EnableWindow
GetDlgItem
InvalidateRect
SetWindowPos
GetCursorPos
SetCursorPos
ShowCursor
SendMessageW
MessageBoxW
SetRect
PeekMessageW
GetWindowLongW
DefWindowProcW
RegisterClassW
InflateRect

gdi32

GetDCOrgEx
GetClipBox
DeleteDC
CreateDCW
GetDeviceCaps
DeleteObject
BitBlt
SelectObject
CreateCompatibleDC
GetObjectW
GetStockObject

winmm

waveOutMessage
timeGetTime
waveOutGetDevCapsW
mmioOpenW
mmioDescend
mmioRead
mmioClose

version

GetFileVersionInfoSizeW
GetFileVersionInfoW
VerQueryValueW

ole32

CoInitialize
CoTaskMemFree
CLSIDFromString
CoUninitialize
CoCreateInstance

oleaut32

SysFreeString
SafeArrayAccessData
SysAllocString
VariantClear
VariantInit
VariantCopy
SafeArrayUnaccessData

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 748KB - Virtual size: 745KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 48KB - Virtual size: 67KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 888KB - Virtual size: 884KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 40KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dxdiaitn.chm
.chm
dxdiajpn.chm
.chm
dxdiakor.chm
.chm
dxdiapol.chm
.chm
dxdiarus.chm
.chm
dxdiaspa.chm
.chm
dxdiaswe.chm
.chm
dxdllreg.exe
.exe windows:5 windows x86 arch:x86

0c44b544bf09f2c523b928d57df20251

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

dxdllreg.pdb

Imports

kernel32

GetLastError
FindClose
FindFirstFileA
lstrcpyA
lstrlenA
GetPrivateProfileSectionA
FreeLibrary
GetProcAddress
LoadLibraryExA
GetPrivateProfileStringA
GetSystemDirectoryA
lstrcmpiA
CreateMutexA
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetVersionExA
GetWindowsDirectoryA
OutputDebugStringA
lstrcmpA
lstrcpynA
GetSystemInfo
VirtualProtect
ReadFile
GetProcessHeap
SetEndOfFile
GetStartupInfoA
GetCommandLineA
GetLocalTime
HeapFree
HeapReAlloc
HeapAlloc
ExitProcess
GetModuleHandleA
WriteFile
GetStdHandle
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetFileType
DeleteCriticalSection
TlsFree
SetLastError
TlsSetValue
TlsGetValue
TlsAlloc
HeapDestroy
HeapCreate
VirtualFree
CloseHandle
EnterCriticalSection
LeaveCriticalSection
VirtualAlloc
LoadLibraryA
GetACP
GetOEMCP
GetCPInfo
InitializeCriticalSection
RtlUnwind
InterlockedExchange
VirtualQuery
SetStdHandle
FlushFileBuffers
CreateFileA
SetFilePointer
LCMapStringA
MultiByteToWideChar
LCMapStringW
GetStringTypeA
GetStringTypeW
GetLocaleInfoA

advapi32

RegQueryValueExA
RegDeleteValueA
RegCloseKey
RegOpenKeyExA

setupapi

SetupCloseInfFile
SetupFindNextLine
SetupGetLineTextA
SetupFindFirstLineA
SetupOpenInfFileA

version

GetFileVersionInfoSizeA
VerQueryValueA
GetFileVersionInfoA

ole32

CoInitialize

Sections

.text
Size: 39KB - Virtual size: 39KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
dxdllreg.inf
dxnetsrv.cat
dxnetsrv.inf
dxnt.inf
dxntunp.inf
dxver.inf
dxxp.cat
dxxp.inf
encapi.dll
.dll regsvr32 windows:5 windows x86 arch:x86

7ef4eb075baf0539b4fc0bbc0e5355d6

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetLastError
CreateEventA
WaitForSingleObject
WaitForMultipleObjects
ResetEvent
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
DisableThreadLibraryCalls
DeviceIoControl
GetModuleHandleA
TerminateProcess
GetCurrentProcess
GetModuleFileNameA
lstrlenA
MultiByteToWideChar
GetOverlappedResult
CloseHandle
SetEvent
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
GetProcAddress
InitializeCriticalSection
CreateThread
InterlockedExchange
lstrlenW
GetModuleHandleW
CreateEventW
InterlockedDecrement
FreeLibrary
InterlockedIncrement
GetVersionExW

msvcrt

_purecall
??2@YAPAXI@Z
??3@YAXPAX@Z

advapi32

RegSetValueW
RegSetValueExW
RegOpenKeyExW
RegEnumKeyExW
RegCloseKey
RegDeleteKeyW
RegCreateKeyW

user32

wsprintfW

ole32

CoFreeUnusedLibraries
CoInitialize
CoUninitialize
CoTaskMemAlloc
CoTaskMemFree
IIDFromString
CoCreateInstance
StringFromGUID2

oleaut32

SysStringLen
SysStringByteLen
SysFreeString
SysAllocString

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 392B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 984B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
gcdef.dll
.dll windows:5 windows x86 arch:x86

3fc52270ad7ee22032b21464fecb39f8

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_AGGRESIVE_WS_TRIM
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

mfc42u

ord2971
ord3076
ord2980
ord3257
ord2854
ord4459
ord3254
ord3142
ord6238
ord823
ord4270
ord765
ord567
ord3693
ord4418
ord4621
ord4075
ord3074
ord3820
ord3826
ord3825
ord3131
ord2977
ord5273
ord2116
ord2438
ord6051
ord5257
ord1720
ord5059
ord3744
ord6372
ord2047
ord2640
ord4435
ord4831
ord3793
ord5286
ord4347
ord6370
ord5157
ord2377
ord5237
ord4401
ord1768
ord4073
ord825

msvcrt

??1type_info@@UAE@XZ
wcslen
__CxxFrameHandler
_ftol
?terminate@@YAXXZ
_except_handler3

dinput

DirectInputCreateW

user32

DestroyIcon
ChildWindowFromPoint
IsWindowVisible
GetMessageTime
GetCursorPos
CreateWindowExW
RegisterDeviceNotificationW
IsWindow
ScreenToClient
LoadImageW
MapWindowPoints
InvalidateRect
SetRect
GetSysColor
EnableWindow
RedrawWindow
GetWindowRect
GetSystemMetrics
MessageBoxW
WinHelpW
UnregisterClassW
DestroyWindow
SendMessageW
GetWindowDC
SetTimer
GetClientRect
LoadStringW
wsprintfW
GetParent
PostMessageW
GetDC
ReleaseDC
UnregisterDeviceNotification
KillTimer
SendDlgItemMessageW
SetWindowPos
GetDlgItem
SetWindowLongW
RegisterClassExW
DefWindowProcW
BeginPaint
GetWindowLongW
DrawIconEx
GetWindowTextW
DrawTextW
EndPaint
GetDlgCtrlID

gdi32

CreatePolygonRgn
DeleteDC
BitBlt
DPtoLP
SetMapMode
GetMapMode
SelectObject
CreateCompatibleDC
GetRgnBox
GetStockObject
SetBkColor
Ellipse
SetDCPenColor
SetViewportOrgEx
SetViewportExtEx
SetWindowExtEx
LineTo
MoveToEx
CreatePenIndirect
GetDeviceCaps
CreateFontW
CreateSolidBrush
ExtTextOutW
DeleteObject
SetBkMode
PaintRgn
SetTextColor

kernel32

InitializeCriticalSection
LocalFree
GetLastError
MulDiv
DeleteCriticalSection
DisableThreadLibraryCalls
InterlockedDecrement
InterlockedIncrement
LocalAlloc
LeaveCriticalSection
IsBadWritePtr
IsBadReadPtr
EnterCriticalSection
Sleep
lstrlenW

advapi32

RegQueryValueExW
RegCloseKey

comctl32

PropertySheetW
CreatePropertySheetPageW

shlwapi

StrCpyNW
StrDupW
StrNCatW

Exports

Exports

DllCanUnloadNow
DllGetClassObject

Sections

.text
Size: 28KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 796B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 168KB - Virtual size: 172KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
gcdef.xpg
.dll windows:5 windows x86 arch:x86

3fc52270ad7ee22032b21464fecb39f8

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_AGGRESIVE_WS_TRIM
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

mfc42u

ord2971
ord3076
ord2980
ord3257
ord2854
ord4459
ord3254
ord3142
ord6238
ord823
ord4270
ord765
ord567
ord3693
ord4418
ord4621
ord4075
ord3074
ord3820
ord3826
ord3825
ord3131
ord2977
ord5273
ord2116
ord2438
ord6051
ord5257
ord1720
ord5059
ord3744
ord6372
ord2047
ord2640
ord4435
ord4831
ord3793
ord5286
ord4347
ord6370
ord5157
ord2377
ord5237
ord4401
ord1768
ord4073
ord825

msvcrt

??1type_info@@UAE@XZ
wcslen
__CxxFrameHandler
_ftol
?terminate@@YAXXZ
_except_handler3

dinput

DirectInputCreateW

user32

DestroyIcon
ChildWindowFromPoint
IsWindowVisible
GetMessageTime
GetCursorPos
CreateWindowExW
RegisterDeviceNotificationW
IsWindow
ScreenToClient
LoadImageW
MapWindowPoints
InvalidateRect
SetRect
GetSysColor
EnableWindow
RedrawWindow
GetWindowRect
GetSystemMetrics
MessageBoxW
WinHelpW
UnregisterClassW
DestroyWindow
SendMessageW
GetWindowDC
SetTimer
GetClientRect
LoadStringW
wsprintfW
GetParent
PostMessageW
GetDC
ReleaseDC
UnregisterDeviceNotification
KillTimer
SendDlgItemMessageW
SetWindowPos
GetDlgItem
SetWindowLongW
RegisterClassExW
DefWindowProcW
BeginPaint
GetWindowLongW
DrawIconEx
GetWindowTextW
DrawTextW
EndPaint
GetDlgCtrlID

gdi32

CreatePolygonRgn
DeleteDC
BitBlt
DPtoLP
SetMapMode
GetMapMode
SelectObject
CreateCompatibleDC
GetRgnBox
GetStockObject
SetBkColor
Ellipse
SetDCPenColor
SetViewportOrgEx
SetViewportExtEx
SetWindowExtEx
LineTo
MoveToEx
CreatePenIndirect
GetDeviceCaps
CreateFontW
CreateSolidBrush
ExtTextOutW
DeleteObject
SetBkMode
PaintRgn
SetTextColor

kernel32

InitializeCriticalSection
LocalFree
GetLastError
MulDiv
DeleteCriticalSection
DisableThreadLibraryCalls
InterlockedDecrement
InterlockedIncrement
LocalAlloc
LeaveCriticalSection
IsBadWritePtr
IsBadReadPtr
EnterCriticalSection
Sleep
lstrlenW

advapi32

RegQueryValueExW
RegCloseKey

comctl32

PropertySheetW
CreatePropertySheetPageW

shlwapi

StrCpyNW
StrDupW
StrNCatW

Exports

Exports

DllCanUnloadNow
DllGetClassObject

Sections

.text
Size: 28KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 796B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 185KB - Virtual size: 184KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
joy.w2k
.dll windows:5 windows x86 arch:x86

d81675a4e5011c9ef7681b0dce9a2174

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

mfc42u

ord2980
ord3076
ord2971
ord3825
ord3826
ord3820
ord3074
ord3257
ord4621
ord4418
ord3605
ord656
ord4270
ord3084
ord5977
ord3131
ord4459
ord3254
ord3142
ord2977
ord5273
ord2116
ord2438
ord5257
ord1720
ord5059
ord3744
ord6372
ord2047
ord2640
ord4435
ord4831
ord3793
ord5286
ord4347
ord6370
ord5157
ord2377
ord5237
ord4401
ord1768
ord4073
ord6051
ord2371
ord2859
ord2854
ord3133
ord4294
ord1165
ord825
ord567
ord1644
ord2081
ord2455
ord823
ord4075

msvcrt

wcscat
__CxxFrameHandler
malloc
??1type_info@@UAE@XZ
?terminate@@YAXXZ
_except_handler3
_wcsdup
wcsncpy
free
wcslen
wcscmp
_wcsnicmp
wcschr
wcscpy
wcsncat
wcsncmp

ole32

CoFreeUnusedLibraries
CoUninitialize
CoGetClassObject
CoInitialize
CoCreateInstance

advapi32

RegSetValueExW
RegOpenKeyExW
RegEnumKeyExA
RegEnumKeyExW
RegSetValueExA
RegCloseKey
RegQueryValueExW
RegCreateKeyExW
RegCreateKeyExA
RegOpenKeyExA
RegQueryValueExA
RegOpenKeyW

dinput

DirectInputCreateW

kernel32

CreateMutexW
FreeLibrary
GetProcAddress
LoadLibraryA
GetLastError
WideCharToMultiByte
MultiByteToWideChar
lstrcpyW
GetVersion
Sleep
DisableThreadLibraryCalls
GetVersionExW
lstrlenW
FindClose
CloseHandle
CreateProcessW
FindFirstFileW
ReleaseMutex
GetWindowsDirectoryW

user32

SetDlgItemTextW
LoadIconW
GetWindowTextW
EnableWindow
GetDC
ScreenToClient
SetForegroundWindow
MessageBeep
GetKeyState
UpdateWindow
RegisterWindowMessageW
KillTimer
MessageBoxW
wsprintfW
LoadStringW
SetCursor
LoadCursorW
SendMessageW
GetDlgItem
SendDlgItemMessageW
PostMessageW
IsWindow
RedrawWindow
SetWindowLongW
GetWindowLongW
ReleaseDC
GetWindowDC
DestroyIcon
EndDialog
LoadImageW
SetFocus
GetDlgItemTextW
SetWindowPos
CheckRadioButton
InvalidateRect
DestroyWindow
IsWindowVisible
DialogBoxParamW
GetParent
WinHelpW
DestroyMenu
TrackPopupMenu
ClientToScreen
GetClientRect
AppendMenuW
CreatePopupMenu
CallWindowProcW
GetWindowRect
GetSystemMetrics
IsDlgButtonChecked
UnregisterDeviceNotification
MapWindowPoints
RegisterDeviceNotificationW
ExitWindowsEx
IsWindowEnabled
GetFocus
SetTimer

gdi32

GetTextMetricsW
GetTextExtentPointW
GetTextExtentPoint32W

comctl32

CreatePropertySheetPageW
ImageList_Destroy
ImageList_ReplaceIcon
ImageList_Create
PropertySheetW

shell32

ExtractIconExW

Exports

Exports

CPlApplet
ShowJoyCPL

Sections

.text
Size: 38KB - Virtual size: 37KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 275KB - Virtual size: 276KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
joy.xpg
.dll windows:5 windows x86 arch:x86

94221c7beb4a4be2e07d617b424cb6b5

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

msvcrt

wcsncpy
_snwprintf
_wcsnicmp
wcscmp
wcsncmp
wcschr
wcslen
??2@YAPAXI@Z
??3@YAXPAX@Z
__CxxFrameHandler
_CxxThrowException
??0exception@@QAE@ABV0@@Z
??1exception@@UAE@XZ
?_set_new_handler@@YAP6AHI@ZP6AHI@Z@Z
??1type_info@@UAE@XZ
?terminate@@YAXXZ
_except_handler3
??0exception@@QAE@XZ
?what@exception@@UBEPBDXZ

msvcp60

??1?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@XZ
??0?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@PBGABV?$allocator@G@1@@Z
??0?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@ABV01@@Z
??8std@@YA_NPBGABV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@0@@Z
??4?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV01@PBG@Z
??4?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV01@ABV01@@Z
??Y?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV01@PBG@Z
??Hstd@@YA?AV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@0@ABV10@0@Z
??Hstd@@YA?AV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@0@ABV10@PBG@Z
??Hstd@@YA?AV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@0@PBGABV10@@Z
??Y?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV01@G@Z
??A?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAGI@Z
??0?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@ABV?$allocator@G@1@@Z
??8std@@YA_NABV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@0@PBG@Z
?_C@?1??_Nullstr@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@CAPBGXZ@4GB

ole32

CoFreeUnusedLibraries
CoInitialize
CoGetClassObject
CoUninitialize

advapi32

RegCloseKey

dinput8

DirectInput8Create

kernel32

LoadLibraryW
GetModuleFileNameW
GetProcAddress
CreateMutexW
GetWindowsDirectoryW
CreateProcessW
CloseHandle
GetModuleHandleW
SetLastError
IsBadReadPtr
lstrlenW
GetLastError
ReleaseMutex
DisableThreadLibraryCalls

user32

SetWindowPos
DialogBoxParamW
SetForegroundWindow
ExitWindowsEx
GetClientRect
KillTimer
SetTimer
GetDlgItem
LoadStringW
wsprintfW
MessageBoxW
GetWindowLongW
SendMessageW
WinHelpW
EndDialog
SetWindowLongW
InvalidateRect
EnableWindow
ShowWindow
GetDlgItemTextW
SetFocus

shlwapi

StrCatW

Exports

Exports

CPlApplet
ShowJoyCPL

Sections

.text
Size: 24KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 648B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 174KB - Virtual size: 174KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
ks.inf
ks.sys
.dll windows:5 windows x86 arch:x86

799c7065e0973a0f7a80b1e4089df3f8

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

ks.pdb

Imports

ntoskrnl.exe

ExDeletePagedLookasideList
ExFreeToPagedLookasideList
ExAllocateFromPagedLookasideList
ExInitializePagedLookasideList
KeInitializeSpinLock
ProbeForRead
IofCallDriver
IoBuildSynchronousFsdRequest
ZwClose
ExFreePoolWithTag
ZwQueryValueKey
ZwOpenKey
RtlInitUnicodeString
RtlFreeUnicodeString
wcscat
wcscpy
RtlStringFromGUID
SeReleaseSubjectContext
SeAssignSecurity
IoGetFileObjectGenericMapping
SeCaptureSubjectContext
IoGetRelatedDeviceObject
ObfReferenceObject
IoBuildDeviceIoControlRequest
ExGetPreviousMode
ZwEnumerateValueKey
ZwSetValueKey
RtlCompareMemory
RtlIntegerToUnicodeString
RtlAppendUnicodeStringToString
ZwCreateKey
RtlAppendUnicodeToString
RtlCopyUnicodeString
ExQueueWorkItem
swprintf
wcslen
KeLeaveCriticalRegion
ExReleaseFastMutexUnsafe
ExAcquireFastMutexUnsafe
KeEnterCriticalRegion
IoSetDeviceInterfaceState
KeSetTimer
IoInvalidateDeviceRelations
ExAllocatePoolWithQuotaTag
ProbeForWrite
IoGetDeviceProperty
KeBugCheckEx
ZwEnumerateKey
ZwQueryKey
IoRegisterDeviceInterface
RtlGUIDFromString
_wcsicmp
IoDeleteDevice
IoCreateDevice
ZwDeleteKey
IoDetachDevice
IoAttachDeviceToDeviceStack
KeInitializeDpc
KeInitializeTimer
_wcsnicmp
SeSinglePrivilegeCheck
KeCancelTimer
KeSetTimerEx
ExInterlockedCompareExchange64
KefReleaseSpinLockFromDpcLevel
KefAcquireSpinLockAtDpcLevel
ExInitializeNPagedLookasideList
KeInitializeTimerEx
KeReleaseMutex
KeSynchronizeExecution
ExReleaseResourceLite
ExAcquireResourceExclusiveLite
KeSetImportanceDpc
ObfDereferenceObject
KeRemoveQueueDpc
KeReleaseSemaphore
KeInsertQueueDpc
ExEventObjectType
ObReferenceObjectByHandle
ExSemaphoreObjectType
ExAcquireResourceSharedLite
PoCallDriver
PoStartNextPowerIrp
KeGetCurrentThread
ExInitializeResourceLite
ExDeleteResourceLite
RtlCompareUnicodeString
IoCreateFile
RtlMapGenericMask
SeUnlockSubjectContext
SeOpenObjectAuditAlarm
SeFreePrivileges
SeAppendPrivileges
SeAccessCheck
SeLockSubjectContext
SeQuerySecurityDescriptorInfo
SeSetSecurityDescriptorInfo
MmMapLockedPages
KeClearEvent
ExRaiseStatus
IoFreeMdl
MmUnlockPages
MmProbeAndLockPages
IoAllocateMdl
IoReleaseCancelSpinLock
IoAcquireCancelSpinLock
ExfInterlockedRemoveHeadList
ExfInterlockedInsertTailList
LdrAccessResource
LdrFindResource_U
IoOpenDeviceRegistryKey
KeInitializeMutex
IoFileObjectType
IoGetDeviceInterfaces
IoAllocateDriverObjectExtension
IoGetDriverObjectExtension
IoFreeIrp
IoAllocateIrp
_snwprintf
IoAllocateAdapterChannel
PoUnregisterSystemState
PoRegisterSystemState
IoIsWdmVersionAvailable
PoRequestPowerIrp
PoSetPowerState
IoOpenDeviceInterfaceRegistryKey
memmove
KeReadStateMutex
KeResetEvent
KeQuerySystemTime
MmMapLockedPagesSpecifyCache
_except_handler3
KeTickCount
ExDeleteNPagedLookasideList
KeInitializeEvent
KeSetEvent
KeWaitForSingleObject
IofCompleteRequest
InterlockedIncrement
InterlockedDecrement
ExFreePool
ExAllocatePoolWithTag
ExInterlockedPushEntrySList
KeQueryTimeIncrement
ExInterlockedPopEntrySList

hal

KfLowerIrql
IoFlushAdapterBuffers
IoFreeMapRegisters
IoMapTransfer
KeGetCurrentIrql
ExAcquireFastMutex
ExReleaseFastMutex
KfAcquireSpinLock
KfReleaseSpinLock
KeQueryPerformanceCounter
KfRaiseIrql

Exports

Exports

??0CBaseUnknown@@QAE@ABU_GUID@@PAUIUnknown@@@Z
??0CBaseUnknown@@QAE@PAUIUnknown@@@Z
??1CBaseUnknown@@UAE@XZ
??_FCBaseUnknown@@QAEXXZ
?IndirectedAddRef@CBaseUnknown@@UAGKXZ
?IndirectedQueryInterface@CBaseUnknown@@UAGJABU_GUID@@PAPAX@Z
?IndirectedRelease@CBaseUnknown@@UAGKXZ
?NonDelegatedAddRef@CBaseUnknown@@UAGKXZ
?NonDelegatedQueryInterface@CBaseUnknown@@UAGJABU_GUID@@PAPAX@Z
?NonDelegatedRelease@CBaseUnknown@@UAGKXZ
DllInitialize
KoCreateInstance
KoDeviceInitialize
KoDriverInitialize
KoRelease
KsAcquireControl
KsAcquireDevice
KsAcquireDeviceSecurityLock
KsAcquireResetValue
KsAddDevice
KsAddEvent
KsAddIrpToCancelableQueue
KsAddItemToObjectBag
KsAddObjectCreateItemToDeviceHeader
KsAddObjectCreateItemToObjectHeader
KsAllocateDefaultClock
KsAllocateDefaultClockEx
KsAllocateDeviceHeader
KsAllocateExtraData
KsAllocateObjectBag
KsAllocateObjectCreateItem
KsAllocateObjectHeader
KsCacheMedium
KsCancelIo
KsCancelRoutine
KsCompletePendingRequest
KsCopyObjectBagItems
KsCreateAllocator
KsCreateBusEnumObject
KsCreateClock
KsCreateDefaultAllocator
KsCreateDefaultAllocatorEx
KsCreateDefaultClock
KsCreateDefaultSecurity
KsCreateDevice
KsCreateFilterFactory
KsCreatePin
KsCreateTopologyNode
KsDecrementCountedWorker
KsDefaultAddEventHandler
KsDefaultDeviceIoCompletion
KsDefaultDispatchPnp
KsDefaultDispatchPower
KsDefaultForwardIrp
KsDereferenceBusObject
KsDereferenceSoftwareBusObject
KsDeviceGetBusData
KsDeviceRegisterAdapterObject
KsDeviceSetBusData
KsDisableEvent
KsDiscardEvent
KsDispatchFastIoDeviceControlFailure
KsDispatchFastReadFailure
KsDispatchInvalidDeviceRequest
KsDispatchIrp
KsDispatchQuerySecurity
KsDispatchSetSecurity
KsDispatchSpecificMethod
KsDispatchSpecificProperty
KsEnableEvent
KsEnableEventWithAllocator
KsFastMethodHandler
KsFastPropertyHandler
KsFilterAcquireProcessingMutex
KsFilterAddTopologyConnections
KsFilterAttemptProcessing
KsFilterCreateNode
KsFilterCreatePinFactory
KsFilterFactoryAddCreateItem
KsFilterFactoryGetSymbolicLink
KsFilterFactorySetDeviceClassesState
KsFilterFactoryUpdateCacheData
KsFilterGetAndGate
KsFilterGetChildPinCount
KsFilterGetFirstChildPin
KsFilterRegisterPowerCallbacks
KsFilterReleaseProcessingMutex
KsForwardAndCatchIrp
KsForwardIrp
KsFreeDefaultClock
KsFreeDeviceHeader
KsFreeEventList
KsFreeObjectBag
KsFreeObjectCreateItem
KsFreeObjectCreateItemsByContext
KsFreeObjectHeader
KsGenerateDataEvent
KsGenerateEvent
KsGenerateEventList
KsGenerateEvents
KsGetBusEnumIdentifier
KsGetBusEnumParentFDOFromChildPDO
KsGetBusEnumPnpDeviceObject
KsGetDefaultClockState
KsGetDefaultClockTime
KsGetDevice
KsGetDeviceForDeviceObject
KsGetFilterFromIrp
KsGetFirstChild
KsGetImageNameAndResourceId
KsGetNextSibling
KsGetNodeIdFromIrp
KsGetObjectFromFileObject
KsGetObjectTypeFromFileObject
KsGetObjectTypeFromIrp
KsGetOuterUnknown
KsGetParent
KsGetPinFromIrp
KsHandleSizedListQuery
KsIncrementCountedWorker
KsInitializeDevice
KsInitializeDriver
KsInstallBusEnumInterface
KsIsBusEnumChildDevice
KsLoadResource
KsMapModuleName
KsMergeAutomationTables
KsMethodHandler
KsMethodHandlerWithAllocator
KsMoveIrpsOnCancelableQueue
KsNullDriverUnload
KsPinAcquireProcessingMutex
KsPinAttachAndGate
KsPinAttachOrGate
KsPinAttemptProcessing
KsPinDataIntersection
KsPinGetAndGate
KsPinGetAvailableByteCount
KsPinGetConnectedFilterInterface
KsPinGetConnectedPinDeviceObject
KsPinGetConnectedPinFileObject
KsPinGetConnectedPinInterface
KsPinGetCopyRelationships
KsPinGetFirstCloneStreamPointer
KsPinGetLeadingEdgeStreamPointer
KsPinGetNextSiblingPin
KsPinGetParentFilter
KsPinGetReferenceClockInterface
KsPinGetTrailingEdgeStreamPointer
KsPinPropertyHandler
KsPinRegisterFrameReturnCallback
KsPinRegisterHandshakeCallback
KsPinRegisterIrpCompletionCallback
KsPinRegisterPowerCallbacks
KsPinReleaseProcessingMutex
KsPinSetPinClockTime
KsPinSubmitFrame
KsPinSubmitFrameMdl
KsProbeStreamIrp
KsProcessPinUpdate
KsPropertyHandler
KsPropertyHandlerWithAllocator
KsQueryDevicePnpObject
KsQueryInformationFile
KsQueryObjectAccessMask
KsQueryObjectCreateItem
KsQueueWorkItem
KsReadFile
KsRecalculateStackDepth
KsReferenceBusObject
KsReferenceSoftwareBusObject
KsRegisterAggregatedClientUnknown
KsRegisterCountedWorker
KsRegisterFilterWithNoKSPins
KsRegisterWorker
KsReleaseControl
KsReleaseDevice
KsReleaseDeviceSecurityLock
KsReleaseIrpOnCancelableQueue
KsRemoveBusEnumInterface
KsRemoveIrpFromCancelableQueue
KsRemoveItemFromObjectBag
KsRemoveSpecificIrpFromCancelableQueue
KsServiceBusEnumCreateRequest
KsServiceBusEnumPnpRequest
KsSetDefaultClockState
KsSetDefaultClockTime
KsSetDevicePnpAndBaseObject
KsSetInformationFile
KsSetMajorFunctionHandler
KsSetPowerDispatch
KsSetTargetDeviceObject
KsSetTargetState
KsStreamIo
KsStreamPointerAdvance
KsStreamPointerAdvanceOffsets
KsStreamPointerAdvanceOffsetsAndUnlock
KsStreamPointerCancelTimeout
KsStreamPointerClone
KsStreamPointerDelete
KsStreamPointerGetIrp
KsStreamPointerGetMdl
KsStreamPointerGetNextClone
KsStreamPointerLock
KsStreamPointerScheduleTimeout
KsStreamPointerSetStatusCode
KsStreamPointerUnlock
KsSynchronousIoControlDevice
KsTerminateDevice
KsTopologyPropertyHandler
KsUnregisterWorker
KsUnserializeObjectPropertiesFromRegistry
KsValidateAllocatorCreateRequest
KsValidateAllocatorFramingEx
KsValidateClockCreateRequest
KsValidateConnectRequest
KsValidateTopologyNodeCreateRequest
KsWriteFile
KsiDefaultClockAddMarkEvent
KsiPropertyDefaultClockGetCorrelatedPhysicalTime
KsiPropertyDefaultClockGetCorrelatedTime
KsiPropertyDefaultClockGetFunctionTable
KsiPropertyDefaultClockGetPhysicalTime
KsiPropertyDefaultClockGetResolution
KsiPropertyDefaultClockGetState
KsiPropertyDefaultClockGetTime
KsiQueryObjectCreateItemsPresent
_KsEdit

Sections

.text
Size: 28KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 128B - Virtual size: 64B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

PAGE
Size: 77KB - Virtual size: 77KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.edata
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

INIT
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 984B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
kscaptur.inf
ksfilter.inf
ksolay.ax
.dll regsvr32 windows:5 windows x86 arch:x86

a3fd6dc1b0adee45584d8de85cd8c504

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetCurrentProcess
TerminateProcess
GetModuleHandleA
GetProcAddress
DisableThreadLibraryCalls
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetModuleFileNameA
lstrlenA
MultiByteToWideChar
lstrlenW
InterlockedDecrement
FreeLibrary
InterlockedIncrement
GetVersionExW
GetTickCount
QueryPerformanceCounter
GetLastError

ksproxy.ax

KsSynchronousDeviceControl

msvcrt

??3@YAXPAX@Z
??2@YAPAXI@Z
wcscpy
wcslen
wcscmp

advapi32

RegSetValueW
RegCloseKey
RegEnumKeyExW
RegCreateKeyW
RegDeleteKeyW
RegSetValueExW
RegOpenKeyExW

user32

BeginPaint
ShowCursor
GetDC
GetClientRect
UnregisterClassW
DefWindowProcW
ReleaseDC
EndPaint
wsprintfW
GetMonitorInfoW
EnumDisplaySettingsW
EnumDisplayDevicesW
SendMessageW
DestroyWindow
RegisterClassExW
CreateWindowExW

gdi32

ExtTextOutW
SetBkColor

ole32

CoInitialize
StringFromGUID2
CoUninitialize
CoFreeUnusedLibraries
CoCreateInstance

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 360B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
ksproxy.ax
.dll regsvr32 windows:5 windows x86 arch:x86

29fd22e5424a4c4f251c5cc8a8b9d534

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

msvcrt

wcscpy
??3@YAXPAX@Z
memmove
swscanf
swprintf
_ftol
_purecall
_except_handler3
_CIpow
wcslen
??2@YAPAXI@Z

kernel32

InterlockedCompareExchange
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
SetEvent
GetLastError
CreateEventW
CloseHandle
WaitForMultipleObjectsEx
WaitForSingleObjectEx
CreateThread
CreateFileW
ReleaseSemaphore
InterlockedExchange
CreateSemaphoreW
InterlockedDecrement
DeviceIoControl
InterlockedIncrement
ResetEvent
GetOverlappedResult
CreateMutexW
ReleaseMutex
GetHandleInformation
GetVersionExW
DisableThreadLibraryCalls
FreeLibrary
LoadLibraryW
lstrlenW
MultiByteToWideChar
lstrlenA
GetModuleFileNameA
lstrcpynW
WaitForMultipleObjects
WaitForSingleObject
GetSystemInfo
VirtualFree
VirtualAlloc
GetProcAddress
ResumeThread
SetThreadPriority

advapi32

RegEnumKeyExW
RegQueryValueExW
RegCreateKeyW
RegSetValueW
RegSetValueExW
RegCloseKey
RegDeleteKeyW
RegOpenKeyExW
RegEnumKeyW

user32

wsprintfW

ole32

StringFromGUID2
IIDFromString
CoCreateInstance
CoTaskMemAlloc
CoFreeUnusedLibraries
CoInitialize
CoTaskMemFree
CoUninitialize

oleaut32

SysFreeString

setupapi

SetupDiOpenDeviceInterfaceW
SetupDiGetDeviceInterfaceDetailW
SetupDiGetDeviceInterfaceAlias
SetupDiDestroyDeviceInfoList
SetupDiEnumDeviceInterfaces
SetupDiOpenDeviceInterfaceRegKey
SetupDiCreateDeviceInfoListExW
SetupDiGetClassDevsW

ksuser

KsCreateAllocator
KsCreateClock
KsCreateTopologyNode
KsCreatePin

ntdll

RtlNtStatusToDosError

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
KsGetMediaType
KsGetMediaTypeCount
KsGetMultiplePinFactoryItems
KsOpenDefaultDevice
KsResolveRequiredAttributes
KsSynchronousDeviceControl

Sections

.text
Size: 106KB - Virtual size: 106KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 492B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 1024B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
ksreg.inf
ksuser.dll
.dll windows:5 windows x86 arch:x86

407f14f3ab3229ce994109fc31901c00

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

HeapAlloc
GetProcessHeap
HeapFree

ntdll

NtCreateFile
RtlNtStatusToDosError

Exports

Exports

KsCreateAllocator
KsCreateClock
KsCreatePin
KsCreateTopologyNode

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 992B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 50B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
l3codecx.ax
.dll regsvr32 windows:4 windows x86 arch:x86

d7e8a0cc68dc418d56e7942bed824e2d

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

msvcrt

_CIpow
??2@YAPAXI@Z
??3@YAXPAX@Z
_purecall

kernel32

InitializeCriticalSection
DeleteCriticalSection
DisableThreadLibraryCalls
GetVersionExA
FreeLibrary
InterlockedDecrement
GetLastError
MulDiv
EnterCriticalSection
LeaveCriticalSection
InterlockedIncrement
MultiByteToWideChar
lstrlenA
GetModuleFileNameA

advapi32

RegEnumKeyExA
RegSetValueA
RegSetValueExA
RegDeleteKeyA
RegCloseKey
RegCreateKeyA
RegOpenKeyExA

user32

SetDlgItemTextA
wsprintfA
GetSysColor
KillTimer
SetTimer
SetDlgItemInt
GetWindowLongA
SetWindowLongA
CreateDialogParamA
MoveWindow
InvalidateRect
DestroyWindow
DefWindowProcA
CheckRadioButton
LoadStringA
LoadStringW
GetWindowRect
GetDesktopWindow
GetDlgItem
ShowWindow
EnableWindow

gdi32

DeleteObject
SetTextColor
CreateSolidBrush
SetBkColor

ole32

CoCreateInstance
CoUninitialize
CoTaskMemAlloc
CoFreeUnusedLibraries
CoInitialize
CoTaskMemFree
StringFromGUID2

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 46KB - Virtual size: 45KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 24KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
mciqtz32.dll
.dll windows:5 windows x86 arch:x86

a6a29e19932abf7e264745f7249bd231

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

LocalAlloc
lstrlenW
lstrcpynW
GetProcAddress
MulDiv
MultiByteToWideChar
lstrlenA
lstrcpyW
DisableThreadLibraryCalls
GetModuleHandleA
TerminateProcess
GetCurrentProcess
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
LocalFree
CreateEventW
CreateThread
WaitForMultipleObjects
CloseHandle
SetEvent
ResetEvent
GetModuleHandleW
WaitForSingleObject

user32

ScreenToClient
GetSystemMetrics
SetWindowTextW
SetForegroundWindow
UnregisterClassW
DestroyWindow
WindowFromDC
EndPaint
BeginPaint
DefWindowProcW
SetWindowLongW
RegisterClassW
LoadCursorW
GetWindowLongW
PostMessageW
LoadStringW
InSendMessage
GetWindowTextW
PostQuitMessage
DispatchMessageW
TranslateMessage
GetMessageW
GetClientRect
CreateWindowExW
GetWindowRect
AdjustWindowRect
IsWindow
IsIconic
IsZoomed
ShowWindow
IsWindowVisible
SetWindowPos
SendMessageW
SetRectEmpty

winmm

mciFreeCommandResource
GetDriverModuleHandle
DefDriverProc
mciGetDriverData
mciLoadCommandResource
mciSetDriverData
mciDriverYield

ole32

CoInitialize
CoUninitialize
CoTaskMemFree
CoCreateInstance

gdi32

CreatePalette
GetObjectType
SetStretchBltMode
SelectPalette
RealizePalette
StretchDIBits
GetStockObject
DeleteObject

quartz

DBToAmpFactor
AmpFactorToDB

Exports

Exports

DriverProc
MCIEntry32

Sections

.text
Size: 18KB - Virtual size: 18KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 68B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 920B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
mpg2splt.ax
.dll regsvr32 windows:5 windows x86 arch:x86

5d049fe11c3e4153abd49378531fbbd9

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

QueryPerformanceFrequency
HeapAlloc
HeapReAlloc
HeapFree
GetProcessHeap
CreateFileMappingW
MapViewOfFile
UnmapViewOfFile
MulDiv
CreateThread
SetThreadPriority
InterlockedExchange
lstrcpyW
VirtualAlloc
CreateSemaphoreW
lstrcmpW
VirtualFree
GetSystemInfo
ReleaseSemaphore
WaitForSingleObject
GetCurrentProcess
TerminateProcess
GetModuleHandleA
GetProcAddress
DisableThreadLibraryCalls
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
WaitForMultipleObjects
ResetEvent
SetEvent
CreateEventW
CloseHandle
lstrcpynW
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSection
InterlockedDecrement
FreeLibrary
InterlockedIncrement
GetModuleHandleW
GetVersionExW
lstrlenW
MultiByteToWideChar
lstrlenA
GetLastError
GetModuleFileNameA

msvcrt

_purecall
_wcsicmp
??2@YAPAXI@Z
??3@YAXPAX@Z
wcslen
wcscpy
_except_handler3
_itow
malloc
free
_ftol
qsort
memmove

user32

wsprintfW

advapi32

RegCreateKeyExW
RegQueryValueExW
RegCreateKeyW
RegSetValueW
RegSetValueExW
RegOpenKeyExW
RegEnumKeyExW
RegCloseKey
RegDeleteKeyW

ole32

CoTaskMemFree
CoTaskMemAlloc
CoInitialize
CoCreateInstance
StringFromGUID2
CoUninitialize
CoFreeUnusedLibraries

winmm

timeBeginPeriod
timeGetTime
timeGetDevCaps

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 122KB - Virtual size: 122KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
msdmo.dll
.dll windows:5 windows x86 arch:x86

19b6ba09daee0b1fa5b47610e9903183

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

TerminateProcess
GetModuleHandleA
GetProcAddress
DisableThreadLibraryCalls
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
WideCharToMultiByte
InterlockedDecrement
InterlockedIncrement
Sleep
GetCurrentProcess
lstrlenW

msvcrt

wcscat
??3@YAXPAX@Z
_adjust_fdiv
_initterm
swprintf
sprintf
wcslen
wcscpy
realloc
free
malloc
??2@YAPAXI@Z
sscanf

ole32

CoTaskMemFree
CoTaskMemAlloc
CoTaskMemRealloc

advapi32

RegDeleteKeyW
RegEnumKeyW
RegQueryInfoKeyW
RegOpenKeyW
RegCreateKeyExW
RegOpenKeyExW
RegQueryValueExW
RegSetValueExW
RegSetValueW
RegQueryValueW
RegCloseKey

user32

wsprintfW

Exports

Exports

DMOEnum
DMOGetName
DMOGetTypes
DMOGuidToStrA
DMOGuidToStrW
DMORegister
DMOStrToGuidA
DMOStrToGuidW
DMOUnregister
MoCopyMediaType
MoCreateMediaType
MoDeleteMediaType
MoDuplicateMediaType
MoFreeMediaType
MoInitMediaType

Sections

.text
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 52B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 904B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 562B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
mskssrv.sys
.sys windows:5 windows x86 arch:x86

ae7af65c91def368b78cf6daaa295831

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_WDM_DRIVER

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

mskssrv.pdb

Imports

ntoskrnl.exe

IoDeleteDevice
IoAttachDeviceToDeviceStack
IoCreateDevice
ExFreePool
ExAllocatePoolWithTag
memmove
RtlCompareMemory
ObfDereferenceObject
ZwSetValueKey
ZwClose
ObReferenceObjectByHandle
IoFileObjectType
IoCreateFile
ZwQueryValueKey
IoOpenDeviceInterfaceRegistryKey
RtlInitUnicodeString
IofCompleteRequest
KeTickCount
KeBugCheckEx

ks.sys

KsQueryDevicePnpObject
KsSetDevicePnpAndBaseObject
KsAllocateDeviceHeader
KsSynchronousIoControlDevice
KsCacheMedium
KsDereferenceSoftwareBusObject
KsAllocateObjectHeader
KsReferenceSoftwareBusObject
KsFreeObjectHeader
KsPropertyHandler
KsNullDriverUnload
KsSetMajorFunctionHandler
KsDefaultForwardIrp
KsDefaultDispatchPower
KsDefaultDispatchPnp

Sections

.text
Size: 384B - Virtual size: 316B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 128B - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

PAGE
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

INIT
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 984B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 384B - Virtual size: 272B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
mspclock.sys
.sys windows:5 windows x86 arch:x86

80ceafa87487c2a1e5e0a913df0055d1

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_WDM_DRIVER

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

mspclock.pdb

Imports

ntoskrnl.exe

IoDeleteDevice
IoAttachDeviceToDeviceStack
IoCreateDevice
KeLeaveCriticalRegion
ExReleaseFastMutexUnsafe
ExAcquireFastMutexUnsafe
KeEnterCriticalRegion
IofCompleteRequest
ExFreePool
KeInitializeEvent
ExAllocatePoolWithTag
KeTickCount

ks.sys

KsiDefaultClockAddMarkEvent
KsiPropertyDefaultClockGetFunctionTable
KsiPropertyDefaultClockGetState
KsiPropertyDefaultClockGetResolution
KsiPropertyDefaultClockGetCorrelatedPhysicalTime
KsiPropertyDefaultClockGetCorrelatedTime
KsiPropertyDefaultClockGetPhysicalTime
KsiPropertyDefaultClockGetTime
KsSetDevicePnpAndBaseObject
KsAllocateDeviceHeader
KsSetDefaultClockTime
KsSetDefaultClockState
KsDereferenceSoftwareBusObject
KsAllocateObjectHeader
KsAllocateDefaultClock
KsReferenceSoftwareBusObject
KsFreeObjectHeader
KsFreeDefaultClock
KsFreeEventList
KsPropertyHandler
KsEnableEvent
KsDisableEvent
KsNullDriverUnload
KsSetMajorFunctionHandler
KsDefaultForwardIrp
KsDefaultDispatchPower
KsDefaultDispatchPnp

Sections

.text
Size: 128B - Virtual size: 48B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 128B - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

PAGE
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

INIT
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 256B - Virtual size: 232B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
mspqm.sys
.sys windows:5 windows x86 arch:x86

379ad7346b38b027988675ecb0316f3c

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_WDM_DRIVER

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

mspqm.pdb

Imports

ntoskrnl.exe

IoDeleteDevice
IoAttachDeviceToDeviceStack
IoCreateDevice
IofCompleteRequest
ExAllocatePoolWithTag
KeLeaveCriticalRegion
ExReleaseFastMutexUnsafe
ExAcquireFastMutexUnsafe
KeEnterCriticalRegion
ExFreePool
KeInitializeEvent
KeInitializeSpinLock

ks.sys

KsSetDevicePnpAndBaseObject
KsAllocateDeviceHeader
KsDispatchSpecificProperty
KsRemoveIrpFromCancelableQueue
KsAddIrpToCancelableQueue
KsDereferenceSoftwareBusObject
KsAllocateObjectHeader
KsReferenceSoftwareBusObject
KsFreeObjectHeader
KsCancelIo
KsPropertyHandler
KsNullDriverUnload
KsSetMajorFunctionHandler
KsDefaultForwardIrp
KsDefaultDispatchPower
KsDefaultDispatchPnp

Sections

PAGE
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

INIT
Size: 1024B - Virtual size: 982B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 992B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 256B - Virtual size: 200B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
mstee.sys
.sys windows:5 windows x86 arch:x86

ba17250f7c9c0536bc777562ff599d7c

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_WDM_DRIVER

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

mstee.pdb

Imports

ntoskrnl.exe

ExAllocatePoolWithTag
RtlCompareMemory
KeTickCount
ExFreePool

ks.sys

KsInitializeDriver
KsFilterGetFirstChildPin
_KsEdit
KsPinGetConnectedPinInterface
KsPinGetNextSiblingPin
KsPinGetParentFilter
KsFilterGetChildPinCount

Sections

.rdata
Size: 256B - Virtual size: 180B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 128B - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

PAGE
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

INIT
Size: 512B - Virtual size: 420B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 256B - Virtual size: 190B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
mswebdvd.dll
.dll regsvr32 windows:5 windows x86 arch:x86

92e5618f232053bc39b696e31857d9b5

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
GetProcAddress
TerminateProcess
FreeLibrary
GetVersionExA
GetUserDefaultLangID
IsValidLocale
GetCurrentThreadId
SetEvent
ResetEvent
GetTickCount
WideCharToMultiByte
WaitForSingleObject
lstrcpynW
GetDriveTypeW
CloseHandle
lstrcpyW
InterlockedDecrement
GetLocaleInfoW
InterlockedIncrement
HeapAlloc
GetProcessHeap
HeapFree
GetShortPathNameW
LoadLibraryExW
GetLastError
FindResourceW
LoadResource
SizeofResource
lstrlenA
DisableThreadLibraryCalls
GlobalAlloc
GlobalLock
GlobalUnlock
GetModuleFileNameW
lstrcatW
HeapDestroy
lstrcmpiW
DeleteCriticalSection
InitializeCriticalSection
MultiByteToWideChar
CreateEventW
EnterCriticalSection
LeaveCriticalSection
Sleep
GetVersionExW
lstrlenW
GetSystemDirectoryW
GetModuleHandleW
LoadLibraryW
GetCurrentProcess
FlushInstructionCache
GetModuleHandleA

msvcrt

_except_handler3
??1type_info@@UAE@XZ
?terminate@@YAXXZ
_vsnwprintf
fwrite
fclose
_ui64tow
malloc
realloc
??3@YAXPAX@Z
??2@YAPAXI@Z
_CxxThrowException
wcslen
_ftol
__CxxFrameHandler
free
fopen
_purecall

gdi32

GetClipBox
GetDCOrgEx
CreateMetaFileW
SetWindowExtEx
CloseMetaFile
DeleteMetaFile
CreateDCW
LPtoDP
SaveDC
SetMapMode
SetWindowOrgEx
SetTextColor
DeleteDC
RestoreDC
CreateSolidBrush
SelectObject
Rectangle
DeleteObject
GetNearestColor
GetDeviceCaps
GetSystemPaletteEntries
CreateRectRgnIndirect
SetBkColor
SetViewportOrgEx

user32

GetWindowRect
SetTimer
CharNextW
GetDC
PtInRect
UnionRect
GetKeyState
DestroyAcceleratorTable
SetWindowLongW
CallWindowProcW
EndPaint
BeginPaint
IsChild
GetFocus
RegisterClassExW
wsprintfW
GetClassInfoExW
SetFocus
ShowWindow
GetParent
SystemParametersInfoW
SetRect
GetSystemMetrics
IsIconic
DefWindowProcW
DrawTextW
InvalidateRgn
RegisterClassW
GetClassInfoW
PostMessageW
GetWindowDC
ReleaseDC
KillTimer
DestroyCursor
DestroyWindow
LoadStringW
InvalidateRect
ShowCursor
GetCursorInfo
GetWindow
SetCursor
GetClientRect
IsWindow
GetDesktopWindow
MapWindowPoints
ClipCursor
LoadCursorW
IntersectRect
EqualRect
CreateWindowExW
IsWindowVisible
GetWindowLongW
SendMessageW
SetWindowPos
SetWindowRgn
OffsetRect

advapi32

RegDeleteKeyW
CryptAcquireContextW
CryptGenRandom
CryptReleaseContext
CryptCreateHash
CryptDestroyHash
CryptHashData
CryptGetHashParam
RegCreateKeyW
RegQueryValueExW
RegEnumKeyExW
RegEnumValueW
RegQueryInfoKeyW
RegSetValueExW
RegOpenKeyExW
RegCreateKeyExW
RegCloseKey
RegDeleteValueW

ole32

ProgIDFromCLSID
CoCreateInstance
CoTaskMemAlloc
CoTaskMemRealloc
OleRegEnumVerbs
OleRegGetUserType
CreateOleAdviseHolder
OleSaveToStream
WriteClassStm
OleLoadFromStream
CreateDataAdviseHolder
OleRegGetMiscStatus
CoTaskMemFree

oleaut32

SysAllocString
SysFreeString
SysAllocStringLen
SysStringLen
VariantClear
VariantCopy
VariantInit
SetErrorInfo
CreateErrorInfo
OleTranslateColor
VariantChangeTypeEx
SysAllocStringByteLen
LoadRegTypeLi
VarUI4FromStr
LoadTypeLi
RegisterTypeLi
VariantChangeType
SysStringByteLen
OleCreatePropertyFrame

comctl32

ord17

comdlg32

GetSaveFileNameW

shell32

SHGetSpecialFolderPathW

winmm

mixerSetControlDetails
mixerGetLineControlsW
mixerGetLineInfoW
mciSendCommandW
mixerGetControlDetailsW
mixerGetNumDevs
mixerOpen
mixerClose

ddraw

DirectDrawCreate

quartz

AMGetErrorTextW

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 134KB - Virtual size: 134KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 167KB - Virtual size: 167KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
pid.dll
.dll windows:5 windows x86 arch:x86

c104ac93b4854145491d5be96d5f7be7

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

ntdll

RtlUnwind

kernel32

FreeLibrary
LoadLibraryW
CreateThread
CreateEventW
GetModuleFileNameW
CreateFileW
WaitForSingleObject
GetVersionExW
GetVersion
IsBadReadPtr
WriteFileEx
ReadFileEx
FreeLibraryAndExitThread
ReleaseMutex
MulDiv
WaitForMultipleObjects
ResetEvent
SetEvent
WriteFile
GetLastError
UnmapViewOfFile
DeleteCriticalSection
GetModuleHandleW
GetProcAddress
DisableThreadLibraryCalls
InitializeCriticalSection
CreateMutexW
CreateFileMappingW
CloseHandle
MapViewOfFile
LeaveCriticalSection
EnterCriticalSection
InterlockedDecrement
InterlockedIncrement
lstrlenW
lstrcpyW
LocalReAlloc
LocalAlloc
LocalFree
Sleep

advapi32

FreeSid
SetSecurityDescriptorDacl
InitializeSecurityDescriptor
SetEntriesInAclW
BuildTrusteeWithSidW
AllocateAndInitializeSid
RegOpenKeyExW
RegCloseKey
RegSetValueExW
RegQueryValueExW
RegCreateKeyExW

user32

MsgWaitForMultipleObjectsEx
PeekMessageW
TranslateMessage
DispatchMessageW
PostThreadMessageW
wsprintfW

hid

HidP_GetLinkCollectionNodes
HidP_GetUsages
HidD_GetPreparsedData
HidD_GetAttributes
HidP_SetUsageValueArray
HidP_SetUsages
HidP_GetSpecificButtonCaps
HidP_GetSpecificValueCaps
HidP_SetUsageValue
HidP_SetScaledUsageValue
HidD_SetFeature
HidP_GetScaledUsageValue
HidD_GetFeature
HidD_FreePreparsedData
HidP_GetCaps
HidP_InitializeReportForID

Exports

Exports

DllCanUnloadNow
DllGetClassObject

Sections

.text
Size: 27KB - Virtual size: 27KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 220B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 1024B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 986B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
pid.xpg
.dll windows:5 windows x86 arch:x86

c104ac93b4854145491d5be96d5f7be7

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

ntdll

RtlUnwind

kernel32

FreeLibrary
LoadLibraryW
CreateThread
CreateEventW
GetModuleFileNameW
CreateFileW
WaitForSingleObject
GetVersionExW
GetVersion
IsBadReadPtr
WriteFileEx
ReadFileEx
FreeLibraryAndExitThread
ReleaseMutex
MulDiv
WaitForMultipleObjects
ResetEvent
SetEvent
WriteFile
GetLastError
UnmapViewOfFile
DeleteCriticalSection
GetModuleHandleW
GetProcAddress
DisableThreadLibraryCalls
InitializeCriticalSection
CreateMutexW
CreateFileMappingW
CloseHandle
MapViewOfFile
LeaveCriticalSection
EnterCriticalSection
InterlockedDecrement
InterlockedIncrement
lstrlenW
lstrcpyW
LocalReAlloc
LocalAlloc
LocalFree
Sleep

advapi32

FreeSid
SetSecurityDescriptorDacl
InitializeSecurityDescriptor
SetEntriesInAclW
BuildTrusteeWithSidW
AllocateAndInitializeSid
RegOpenKeyExW
RegCloseKey
RegSetValueExW
RegQueryValueExW
RegCreateKeyExW

user32

MsgWaitForMultipleObjectsEx
PeekMessageW
TranslateMessage
DispatchMessageW
PostThreadMessageW
wsprintfW

hid

HidP_GetLinkCollectionNodes
HidP_GetUsages
HidD_GetPreparsedData
HidD_GetAttributes
HidP_SetUsageValueArray
HidP_SetUsages
HidP_GetSpecificButtonCaps
HidP_GetSpecificValueCaps
HidP_SetUsageValue
HidP_SetScaledUsageValue
HidD_SetFeature
HidP_GetScaledUsageValue
HidD_GetFeature
HidD_FreePreparsedData
HidP_GetCaps
HidP_InitializeReportForID

Exports

Exports

DllCanUnloadNow
DllGetClassObject

Sections

.text
Size: 27KB - Virtual size: 27KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 220B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 992B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 988B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
qasf.dll
.dll regsvr32 windows:5 windows x86 arch:x86

34b0e65d4741d54395cac26e108e8246

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetComputerNameA
GetDiskFreeSpaceA
GlobalMemoryStatus
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
QueryPerformanceCounter
GetLocalTime
DeviceIoControl
GetModuleHandleA
LoadLibraryA
GetVersionExA
LocalAlloc
LocalFree
DisableThreadLibraryCalls
CreateThread
GetTickCount
SetThreadPriority
InterlockedExchange
lstrcpyW
GetModuleHandleW
GetProcAddress
VirtualAlloc
CreateSemaphoreW
GetCurrentThreadId
GetCurrentProcess
lstrcmpW
VirtualFree
GetSystemInfo
ReleaseSemaphore
WaitForSingleObject
ResetEvent
SetEvent
CreateEventW
CloseHandle
lstrcpynW
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSection
LoadLibraryW
InterlockedDecrement
FreeLibrary
GetVersionExW
lstrlenW
MultiByteToWideChar
lstrlenA
GetLastError
GetModuleFileNameA
InterlockedIncrement
RaiseException

msvcrt

swprintf
_ftol
_except_handler3
_wtoi
??3@YAXPAX@Z
??2@YAPAXI@Z
_purecall
wcscat
wcslen
wcscpy

gdi32

GetTextExtentPointW

user32

wsprintfW
LoadStringW
GetDesktopWindow
GetWindowRect
DefWindowProcW
DestroyWindow
ShowWindow
InvalidateRect
MoveWindow
CreateDialogParamW
SetWindowLongW
GetDlgItem
GetDC
ReleaseDC
SendMessageW
GetWindowLongW

advapi32

RegQueryValueExA
RegCreateKeyW
RegSetValueW
RegSetValueExW
RegOpenKeyExW
RegEnumKeyExW
RegCloseKey
RegDeleteKeyW
GetUserNameA
RegSetValueExA
RegCreateKeyExA

ole32

CoTaskMemFree
CoTaskMemAlloc
CoInitialize
CoCreateInstance
CoFreeUnusedLibraries
CoUninitialize
StringFromGUID2

oleaut32

SysAllocStringLen

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 135KB - Virtual size: 135KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
qcap.dll
.dll regsvr32 windows:5 windows x86 arch:x86

5b434342bca065771fb82248c16cfe2f

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetSystemTimeAsFileTime
DisableThreadLibraryCalls
GetProcAddress
GetModuleHandleA
TerminateProcess
GetCurrentProcessId
lstrcpyA
CreateIoCompletionPort
GetDiskFreeSpaceW
GetTickCount
QueryPerformanceCounter
lstrcmpiW
GetModuleHandleW
GetCurrentProcess
ReadFile
GetFileSize
DeleteFileW
DeleteCriticalSection
PostQueuedCompletionStatus
GetQueuedCompletionStatus
CreateFileW
SetFilePointer
WriteFile
SetEndOfFile
GetACP
IsBadCodePtr
IsBadHugeReadPtr
GetFileAttributesW
IsBadWritePtr
HeapFree
GetProcessHeap
HeapAlloc
GetPrivateProfileStringW
IsBadReadPtr
GlobalMemoryStatus
GetProfileIntA
GlobalAlloc
GlobalLock
GlobalHandle
GlobalFree
GlobalUnlock
MulDiv
CreateThread
InitializeCriticalSection
WaitForSingleObject
GetCurrentThreadId
EnterCriticalSection
LeaveCriticalSection
lstrlenA
WideCharToMultiByte
MultiByteToWideChar
lstrcpyW
GetFullPathNameW
lstrlenW
GetCurrentThread
GetThreadPriority
SetThreadPriority
InterlockedExchange
VirtualAlloc
CreateSemaphoreW
lstrcmpW
VirtualFree
GetSystemInfo
ReleaseSemaphore
WaitForMultipleObjects
ResetEvent
SetEvent
CreateEventW
CloseHandle
lstrcpynW
InterlockedDecrement
FreeLibrary
InterlockedIncrement
GetModuleFileNameA
GetLastError
GetVersionExW

msvcrt

_except_handler3
wcslen
_ftol
??2@YAPAXI@Z
_purecall
??3@YAXPAX@Z

gdi32

GetObjectW
GetPaletteEntries
GetStockObject
SelectObject
PatBlt
GetTextExtentPoint32W

user32

CheckDlgButton
GetDesktopWindow
IsRectEmpty
SetDlgItemTextW
EnableWindow
GetDlgItem
SetDlgItemInt
ReleaseDC
ClientToScreen
GetClientRect
GetDC
IsWindowVisible
IsWindow
SetCursor
LoadCursorW
GetAsyncKeyState
CheckRadioButton
GetDlgItemInt
SendMessageW
wsprintfW
GetWindowRect
DefWindowProcW
DestroyWindow
ShowWindow
InvalidateRect
MoveWindow
CreateDialogParamW
SetWindowLongW
GetWindowLongW
PeekMessageW
DispatchMessageW
TranslateMessage
LoadStringW

advapi32

RegOpenKeyW
RegCreateKeyW
RegSetValueW
RegEnumKeyExW
RegSetValueExW
RegQueryValueExW
RegOpenKeyExW
RegCloseKey
RegDeleteKeyW
RegEnumKeyW

ole32

CoCreateInstance
StringFromGUID2
CoUninitialize
CoFreeUnusedLibraries
CoInitialize
CoTaskMemAlloc
CoTaskMemFree

oleaut32

SafeArrayUnaccessData
SafeArrayAccessData
SysAllocString
SysFreeString
SysStringLen
VariantClear

msvfw32

ICCompress
ICDecompress
ICGetInfo
ICOpen
ICClose
ICSendMessage
ICLocate

version

GetFileVersionInfoW
GetFileVersionInfoSizeW
VerQueryValueW

winmm

SendDriverMessage
mixerOpen
mixerClose
waveInStop
waveInStart
waveInAddBuffer
waveInPrepareHeader
mixerGetControlDetailsW
mixerSetControlDetails
mixerGetID
mixerGetLineInfoW
mixerGetLineControlsW
waveInGetDevCapsW
waveInReset
waveInClose
waveInOpen
CloseDriver
OpenDriver
waveInUnprepareHeader

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 155KB - Virtual size: 154KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 83KB - Virtual size: 83KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
qdv.dll
.dll regsvr32 windows:5 windows x86 arch:x86

d8e659dcef3ec37b8240d1cb9fd8227b

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

qdv.pdb

Imports

msvcrt

??2@YAPAXI@Z
_purecall
_except_handler3
_ftol
??3@YAXPAX@Z

user32

GetDesktopWindow
GetWindowLongW
LoadStringW
IsRectEmpty
IsDlgButtonChecked
SendDlgItemMessageW
CheckRadioButton
wsprintfW
SetWindowLongW
CreateDialogParamW
MoveWindow
InvalidateRect
ShowWindow
DestroyWindow
DefWindowProcW
GetWindowRect

advapi32

RegEnumKeyExW
RegQueryValueExW
RegCreateKeyExW
RegCreateKeyW
RegSetValueW
RegSetValueExW
RegOpenKeyExW
RegCloseKey
RegDeleteKeyW

ole32

CoInitialize
CoFreeUnusedLibraries
CoUninitialize
StringFromGUID2
CoCreateInstance
CoTaskMemFree
CoTaskMemAlloc

msvfw32

StretchDIB

winmm

timeGetTime

kernel32

lstrcpyW
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
GetSystemTimeAsFileTime
GetVersionExW
DisableThreadLibraryCalls
lstrlenW
MultiByteToWideChar
lstrlenA
GetLastError
GetModuleFileNameA
InterlockedIncrement
FreeLibrary
InterlockedDecrement
LoadLibraryW
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
lstrcpynW
CloseHandle
CreateEventW
SetEvent
ResetEvent
WaitForSingleObject
ReleaseSemaphore
lstrcmpW
GetCurrentProcess
GetCurrentThreadId
CreateSemaphoreW
GetProcAddress
GetModuleHandleW
InterlockedExchange
SetThreadPriority
GetTickCount
CreateThread
MulDiv
QueryPerformanceCounter
GetCurrentProcessId

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 234KB - Virtual size: 233KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 22KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 42KB - Virtual size: 42KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
qdvd.dll
.dll regsvr32 windows:5 windows x86 arch:x86

40b59568cbe5797d273628f3285e9f97

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

qdvd.pdb

Imports

kernel32

ReadFile
FindCloseChangeNotification
GetLocaleInfoA
IsValidLocale
FindNextFileW
DeviceIoControl
GetOverlappedResult
GlobalFree
HeapFree
GetProcessHeap
HeapAlloc
SetUnhandledExceptionFilter
UnhandledExceptionFilter
SetFilePointer
CreateWaitableTimerW
SetWaitableTimer
GetVolumeInformationW
FindFirstFileW
FindClose
GetDriveTypeW
GetFileAttributesW
GetUserDefaultLCID
GetComputerNameW
CreateThread
GetThreadPriority
SetThreadPriority
InterlockedExchange
lstrcmpiA
VirtualAlloc
CreateSemaphoreW
VirtualFree
GetSystemInfo
ReleaseSemaphore
GetModuleFileNameA
DisableThreadLibraryCalls
GetVersionExW
IsBadReadPtr
IsBadWritePtr
SetLastError
lstrcpynA
lstrcpyA
WaitForMultipleObjects
ResetEvent
CreateEventW
lstrcmpW
SetEvent
Sleep
GetFullPathNameW
SetErrorMode
LoadLibraryW
GetProcAddress
MulDiv
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
GetModuleHandleW
CreateFileW
GetFileSize
CreateFileMappingW
LoadLibraryExW
FindResourceW
LoadResource
SizeofResource
FreeLibrary
GlobalAlloc
GlobalLock
GlobalUnlock
GetCurrentThread
lstrcpynW
LoadLibraryA
GetModuleFileNameW
lstrcatW
HeapDestroy
WaitForSingleObject
CloseHandle
GetCurrentThreadId
lstrlenA
WideCharToMultiByte
MultiByteToWideChar
lstrcmpiW
GetCurrentProcess
FlushInstructionCache
InterlockedDecrement
InterlockedIncrement
DeleteCriticalSection
InitializeCriticalSection
LeaveCriticalSection
EnterCriticalSection
GetLastError
lstrcpyW
lstrlenW

msvcrt

malloc
realloc
??2@YAPAXI@Z
free
_purecall
_ftol
_except_handler3
qsort
??3@YAXPAX@Z

gdi32

CreateCompatibleBitmap
GetDIBits
CreateDCA
SetBkMode
ExtTextOutW
CreateFontIndirectW
GetTextMetricsW
CreateRectRgnIndirect
GetDeviceCaps
CreateDCW
DeleteMetaFile
CloseMetaFile
RestoreDC
SetWindowExtEx
SetWindowOrgEx
SaveDC
CreateMetaFileW
DeleteDC
SetViewportOrgEx
SetMapMode
LPtoDP
SetPixel
GetPixel
GetStockObject
GetObjectW
CreateDIBSection
DeleteObject
StretchBlt
BitBlt
SelectObject
StretchDIBits
SetDIBitsToDevice
GetRegionData
FillRgn
OffsetRgn
CreateSolidBrush
CombineRgn
GdiFlush
SetStretchBltMode
CreateCompatibleDC
CreateRectRgn
SetTextColor
SetBkColor
GetSystemPaletteEntries
EnumFontFamiliesExW

user32

SetDlgItemInt
SetDlgItemTextW
CheckRadioButton
EnumDisplayMonitors
DrawTextW
ChangeDisplaySettingsExW
IsIconic
GetSystemMetrics
GetMonitorInfoW
GetQueueStatus
PostThreadMessageW
MonitorFromWindow
SetRectEmpty
RegisterWindowMessageW
PostMessageW
ScreenToClient
FillRect
SetRect
ClientToScreen
IsWindowVisible
IsRectEmpty
InvalidateRect
IsWindow
DestroyWindow
CharNextW
CheckDlgButton
CallWindowProcW
PeekMessageW
DispatchMessageW
TranslateMessage
MsgWaitForMultipleObjects
SetWindowPos
SetWindowRgn
OffsetRect
EqualRect
IntersectRect
EndPaint
GetClientRect
BeginPaint
ReleaseDC
GetDC
GetDlgItem
SendMessageW
MapWindowPoints
GetWindowRect
GetParent
SetWindowLongW
GetDlgItemInt
IsDlgButtonChecked
KillTimer
SetTimer
GetWindowThreadProcessId
UnregisterClassW
SendMessageTimeoutW
RegisterClassW
GetClassInfoW
wvsprintfW
CreateDialogParamW
MoveWindow
GetDesktopWindow
GetWindowLongW
RegisterClassExW
wsprintfW
LoadCursorW
GetClassInfoExW
CreateWindowExW
DefWindowProcW
PtInRect
ShowWindow
SetFocus
LoadStringW
UnionRect
EnableWindow

advapi32

RegDeleteKeyW
RegQueryInfoKeyW
RegQueryValueExW
RegCloseKey
RegCreateKeyExW
RegOpenKeyExW
RegSetValueExW
RegEnumKeyExW
RegDeleteValueW
RegCreateKeyW
RegSetValueW
GetUserNameW
RegOpenKeyW

ole32

CoCreateInstance
WriteClassStm
CreateOleAdviseHolder
OleLoadFromStream
CoTaskMemRealloc
CoTaskMemAlloc
CoTaskMemFree
OleRegEnumVerbs
OleRegGetUserType
OleRegGetMiscStatus
CreateDataAdviseHolder
StringFromCLSID
IIDFromString
StringFromGUID2
CoUninitialize
CoFreeUnusedLibraries
CoInitialize
OleSaveToStream

oleaut32

SysAllocString
GetActiveObject
VarI4FromStr
SetErrorInfo
LoadRegTypeLi
VariantChangeType
SysStringByteLen
SysAllocStringByteLen
VariantClear
VariantInit
SysFreeString

version

GetFileVersionInfoW
GetFileVersionInfoSizeW
VerQueryValueW

winmm

timeEndPeriod
timeBeginPeriod
timeSetEvent
timeKillEvent
timeGetTime

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 351KB - Virtual size: 350KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 91KB - Virtual size: 91KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
qedit.dll
.dll regsvr32 windows:5 windows x86 arch:x86

dc535e1caa50b23b0200f8cc949d7f8b

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetCurrentDirectoryW
LocalAlloc
LoadLibraryA
RaiseException
TerminateProcess
GetModuleHandleA
GetProcAddress
GetSystemTimeAsFileTime
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
MulDiv
LockResource
GetModuleFileNameA
GetModuleHandleW
CreateFileW
GetFileSize
GetFileType
GetFileTime
GetSystemDirectoryW
DeleteFileW
GetFullPathNameW
WriteFile
lstrcpynA
GlobalFree
SetFilePointer
ReadFile
Sleep
CompareStringW
CreateThread
GetThreadPriority
SetThreadPriority
InterlockedExchange
VirtualAlloc
CreateSemaphoreW
lstrcmpW
VirtualFree
GetSystemInfo
ReleaseSemaphore
WaitForMultipleObjects
ResetEvent
SetEvent
LoadLibraryW
GetVersionExW
LoadLibraryExW
FindResourceW
LoadResource
SizeofResource
FreeLibrary
CreateMutexW
DisableThreadLibraryCalls
CreateEventW
GlobalAlloc
GlobalLock
GlobalUnlock
GetCurrentThread
lstrcpynW
ReleaseMutex
GetModuleFileNameW
lstrcatW
HeapDestroy
WaitForSingleObject
CloseHandle
GetLastError
GetCurrentThreadId
lstrlenA
WideCharToMultiByte
MultiByteToWideChar
lstrcmpiW
HeapAlloc
GetProcessHeap
HeapFree
GetCurrentProcess
FlushInstructionCache
IsBadCodePtr
IsBadWritePtr
IsBadReadPtr
InterlockedDecrement
InterlockedIncrement
DeleteCriticalSection
InitializeCriticalSection
LeaveCriticalSection
EnterCriticalSection
lstrcpyW
lstrlenW

msvcrt

free
_purecall
??3@YAXPAX@Z
malloc
realloc
??2@YAPAXI@Z
wcspbrk
wcstoul
wcsncmp
wcscat
srand
rand
_vsnwprintf
_wsplitpath
wcscmp
sprintf
_iob
fprintf
exit
fread
_setjmp3
wcscpy
atof
_ftol
wcslen
longjmp
fclose
_wfopen
_wtoi

gdi32

DeleteObject
CreateCompatibleDC
SetStretchBltMode
StretchBlt
CreateDIBSection
GetObjectW
CreateFontIndirectW
SelectObject
GetTextMetricsW
GetTextExtentPointW
DeleteDC
GetDeviceCaps

user32

LoadStringW
EndDialog
DefWindowProcW
GetWindowTextLengthW
GetWindowTextW
GetDesktopWindow
CharNextW
wsprintfW
GetWindowLongW
PeekMessageW
DispatchMessageW
ShowWindow
MsgWaitForMultipleObjects
SetWindowPos
ReleaseDC
GetDC
GetDlgItem
DestroyWindow
IsWindow
InvalidateRect
MoveWindow
WinHelpW
IsDialogMessageW
CreateDialogParamW
GetDialogBaseUnits
wvsprintfW
PostThreadMessageW
RegisterWindowMessageW
GetQueueStatus
MessageBoxW
GetDlgItemTextA
SetDlgItemTextW
SetDlgItemInt
GetDlgItemInt
CheckRadioButton
IsDlgButtonChecked
IsRectEmpty
CharPrevW
GetWindowRect
SetWindowLongW

advapi32

RegCloseKey
RegSetValueExW
RegOpenKeyExW
RegCreateKeyExW
RegQueryValueExW
RegQueryInfoKeyW
RegDeleteKeyW
RegEnumKeyExW
RegDeleteValueW
RegSetValueW
RegCreateKeyW
RegQueryValueW
RegOpenKeyW
RegEnumValueW

ole32

CreateBindCtx
StringFromGUID2
CoTaskMemFree
CoTaskMemAlloc
CoTaskMemRealloc
OleLoadFromStream
CreateStreamOnHGlobal
StringFromCLSID
CoUninitialize
CoFreeUnusedLibraries
CoInitialize
CLSIDFromString
StgCreateDocfile
CoCreateFreeThreadedMarshaler
StgOpenStorage
CoCreateInstance

oleaut32

VariantChangeTypeEx
VarI4FromStr
LoadTypeLi
RegisterTypeLi
SetErrorInfo
LoadRegTypeLi
SysAllocString
VariantCopy
VariantClear
VariantInit
SysAllocStringLen
SysFreeString

msvfw32

DrawDibOpen
DrawDibDraw
DrawDibClose

winmm

timeEndPeriod
timeSetEvent
timeGetTime
timeBeginPeriod
timeKillEvent

comdlg32

GetOpenFileNameW

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 407KB - Virtual size: 406KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1.3MB - Virtual size: 1.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 23KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
qedwipes.dll
.dll windows:5 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.rsrc
Size: 715KB - Virtual size: 714KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 8B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
quartz.dll
.dll regsvr32 windows:5 windows x86 arch:x86

ad5ba4fab893c1bbbbb3ec299e041eb7

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetProfileIntW
MulDiv
GetShortPathNameA
GetACP
lstrcmpiA
CreateFileMappingW
MapViewOfFile
UnmapViewOfFile
GetProfileStringA
GetExitCodeProcess
lstrcpyA
GetFullPathNameW
WriteFile
QueryPerformanceFrequency
ReleaseMutex
CreateMutexW
HeapDestroy
WideCharToMultiByte
FreeLibraryAndExitThread
Sleep
GetPrivateProfileStringA
lstrcatW
SetFilePointer
ReadFile
FormatMessageA
FormatMessageW
CreateThread
GetCurrentThread
GetThreadPriority
SetThreadPriority
InterlockedExchange
lstrcpyW
LoadLibraryW
GetLastError
lstrlenA
GetModuleHandleW
GetModuleFileNameW
GetVersionExW
VirtualAlloc
CreateSemaphoreW
lstrcmpW
VirtualFree
GetSystemInfo
ReleaseSemaphore
WaitForSingleObject
WaitForMultipleObjects
ResetEvent
SetEvent
CreateEventW
CloseHandle
InterlockedDecrement
InterlockedIncrement
lstrlenW
lstrcpynW
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSection
DelayLoadFailureHook
MapViewOfFileEx
GlobalFree
GlobalUnlock
GlobalHandle
GlobalLock
GlobalAlloc
LocalAlloc
LocalFree
RaiseException
HeapAlloc
GetProcessHeap
HeapFree
WriteProfileStringW
SetErrorMode
GetDriveTypeW
GetFileSize
LocalUnlock
LocalLock
LocalReAlloc
CompareStringA
lstrcmpA
lstrcpynA
IsBadWritePtr
IsBadReadPtr
GetDiskFreeSpaceW
CreateFileW
DeviceIoControl
GetCurrentProcess
TerminateProcess
GetModuleHandleA
DisableThreadLibraryCalls
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
LoadLibraryA
InterlockedCompareExchange
FreeLibrary
GetProcAddress
GetModuleFileNameA
MultiByteToWideChar
OpenProcess
lstrcmpiW

msvcrt

??3@YAXPAX@Z
_ltow
towupper
atoi
memmove
??2@YAPAXI@Z
getenv
sscanf
_except_handler3
sprintf
wcscpy
_strdup
_wtoi
wcslen
_ftol
free
_initterm
_adjust_fdiv
malloc
_onexit
__dllonexit

gdi32

CreateCompatibleDC
CreateDCA
GetClipBox
GdiFlush
SetPixel
GetPixel
ExtTextOutW
SetBkColor
SelectPalette
FillRgn
CombineRgn
CreateRectRgnIndirect
CreatePalette
GetStockObject
GetTextExtentPoint32W
SetTextColor
SetBkMode
BitBlt
CreateDIBSection
StretchBlt
SetStretchBltMode
CreateDCW
GetObjectW
StretchDIBits
SetDIBitsToDevice
EnumFontFamiliesExW
SetTextCharacterExtra
SetDIBColorTable
GetDeviceCaps
DeleteObject
GetDCOrgEx
EqualRgn
ExtCreateRegion
CreateRectRgn
CreateFontIndirectW
GetSystemPaletteEntries
GetDIBits
PatBlt
CreateSolidBrush
SelectObject
DeleteDC
RealizePalette
CreateCompatibleBitmap

user32

SetTimer
SendMessageW
GetWindowThreadProcessId
LoadStringW
GetDC
ReleaseDC
GetMessageW
TranslateMessage
PostMessageW
KillTimer
IsWindow
ReplyMessage
GetMonitorInfoW
MonitorFromWindow
wsprintfA
SetRect
EqualRect
GetSystemMetrics
IsWindowVisible
IsRectEmpty
SendDlgItemMessageW
EndDialog
DialogBoxParamW
GetDlgItem
MessageBoxW
SystemParametersInfoW
GetDlgItemInt
EnableWindow
GetWindowRect
UnhookWindowsHookEx
InvalidateRect
SetWindowsHookExW
EnumDisplayDevicesW
EnumDisplayMonitors
ClientToScreen
GetClientRect
SetRectEmpty
MapWindowPoints
ScreenToClient
IntersectRect
ChangeDisplaySettingsExA
MonitorFromRect
GetWindowPlacement
IsIconic
GetParent
GetWindowLongW
CharNextW
DispatchMessageW
GetQueueStatus
RegisterWindowMessageW
SetWindowLongW
PostThreadMessageW
wvsprintfW
MsgWaitForMultipleObjects
PeekMessageW
wsprintfW
AdjustWindowRectEx
DefWindowProcW
CreateWindowExW
RegisterClassW
LoadCursorW
GetClassInfoW
IsZoomed
SetParent
SetDlgItemTextW
CreateDialogParamW
DestroyWindow
InSendMessage
FillRect
OffsetRect
ChangeDisplaySettingsExW
GetWindowTextW
SetWindowTextW
MoveWindow
SetForegroundWindow
ShowWindow
GetForegroundWindow
SetWindowPos
UpdateWindow
GetKeyboardState
SetKeyboardState
LoadImageW
DestroyCursor
SetCursor
BeginPaint
EndPaint
GetDesktopWindow

advapi32

RegCreateKeyExW
RegQueryInfoKeyW
RegCreateKeyW
RegSetValueW
RegSetValueExW
RegOpenKeyExW
RegDeleteValueW
RegEnumValueW
RegEnumKeyExW
RegDeleteKeyW
RegOpenKeyW
RegQueryValueExW
RegCloseKey
RegQueryValueW
RegFlushKey

ole32

CLSIDFromString
CreateBindCtx
CoCreateFreeThreadedMarshaler
MkParseDisplayName
CreateStreamOnHGlobal
StringFromCLSID
StgOpenStorage
StgIsStorageFile
IIDFromString
CoTaskMemRealloc
CoTaskMemFree
StringFromGUID2
CoTaskMemAlloc
CoInitialize
CoFreeUnusedLibraries
CoUninitialize
CoCreateInstance

oleaut32

SysAllocStringLen
SysStringLen
SafeArrayCreate
SafeArrayDestroy
SafeArrayAccessData
SafeArrayUnaccessData
VariantClear
VARIANT_UserSize
VARIANT_UserMarshal
VARIANT_UserUnmarshal
VARIANT_UserFree
SysFreeString
SysAllocString
LoadTypeLi
RegisterTypeLi
VariantCopy
VariantChangeType
LoadRegTypeLi
SetErrorInfo
SysReAllocString
VariantInit

winmm

waveOutGetVolume
waveOutSetVolume
waveOutWrite
waveOutUnprepareHeader
waveOutRestart
waveOutReset
waveOutPrepareHeader
waveOutPause
waveOutOpen
waveOutGetPosition
waveOutGetErrorTextW
waveOutGetDevCapsW
waveOutClose
waveOutGetNumDevs
midiOutReset
midiStreamOpen
midiStreamProperty
midiOutGetNumDevs
mixerGetNumDevs
mixerGetLineInfoW
mixerGetDevCapsW
mixerGetLineControlsW
mixerSetControlDetails
mixerGetControlDetailsW
midiStreamOut
midiOutUnprepareHeader
midiStreamRestart
midiOutPrepareHeader
midiStreamPause
midiStreamPosition
midiOutGetErrorTextW
midiStreamClose
timeKillEvent
timeGetDevCaps
timeBeginPeriod
timeEndPeriod
timeSetEvent
timeGetTime

rpcrt4

NdrDllGetClassObject
NdrDllCanUnloadNow
NdrCStdStubBuffer_Release
NdrCStdStubBuffer2_Release
NdrDllRegisterProxy
NdrDllUnregisterProxy
NdrStubCall2
NdrStubForwardingFunction
CStdStubBuffer_DebugServerRelease
CStdStubBuffer_DebugServerQueryInterface
CStdStubBuffer_CountRefs
CStdStubBuffer_IsIIDSupported
CStdStubBuffer_Invoke
CStdStubBuffer_Disconnect
CStdStubBuffer_Connect
CStdStubBuffer_AddRef
CStdStubBuffer_QueryInterface
IUnknown_Release_Proxy
IUnknown_QueryInterface_Proxy
NdrOleFree
NdrOleAllocate
NdrClientCall2
IUnknown_AddRef_Proxy

Exports

Exports

AMGetErrorTextA
AMGetErrorTextW
AmpFactorToDB
DBToAmpFactor
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
GetProxyDllInfo

Sections

.text
Size: 1012KB - Virtual size: 1011KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.orpc
Size: 512B - Virtual size: 503B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 74KB - Virtual size: 221KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 772KB - Virtual size: 772KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 56KB - Virtual size: 56KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
quartz.w2k
.dll regsvr32 windows:5 windows x86 arch:x86

ad5ba4fab893c1bbbbb3ec299e041eb7

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetProfileIntW
MulDiv
GetShortPathNameA
GetACP
lstrcmpiA
CreateFileMappingW
MapViewOfFile
UnmapViewOfFile
GetProfileStringA
GetExitCodeProcess
lstrcpyA
GetFullPathNameW
WriteFile
QueryPerformanceFrequency
ReleaseMutex
CreateMutexW
HeapDestroy
WideCharToMultiByte
FreeLibraryAndExitThread
Sleep
GetPrivateProfileStringA
lstrcatW
SetFilePointer
ReadFile
FormatMessageA
FormatMessageW
CreateThread
GetCurrentThread
GetThreadPriority
SetThreadPriority
InterlockedExchange
lstrcpyW
LoadLibraryW
GetLastError
lstrlenA
GetModuleHandleW
GetModuleFileNameW
GetVersionExW
VirtualAlloc
CreateSemaphoreW
lstrcmpW
VirtualFree
GetSystemInfo
ReleaseSemaphore
WaitForSingleObject
WaitForMultipleObjects
ResetEvent
SetEvent
CreateEventW
CloseHandle
InterlockedDecrement
InterlockedIncrement
lstrlenW
lstrcpynW
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSection
DelayLoadFailureHook
MapViewOfFileEx
GlobalFree
GlobalUnlock
GlobalHandle
GlobalLock
GlobalAlloc
LocalAlloc
LocalFree
RaiseException
HeapAlloc
GetProcessHeap
HeapFree
WriteProfileStringW
SetErrorMode
GetDriveTypeW
GetFileSize
LocalUnlock
LocalLock
LocalReAlloc
CompareStringA
lstrcmpA
lstrcpynA
IsBadWritePtr
IsBadReadPtr
GetDiskFreeSpaceW
CreateFileW
DeviceIoControl
GetCurrentProcess
TerminateProcess
GetModuleHandleA
DisableThreadLibraryCalls
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
LoadLibraryA
InterlockedCompareExchange
FreeLibrary
GetProcAddress
GetModuleFileNameA
MultiByteToWideChar
OpenProcess
lstrcmpiW

msvcrt

??3@YAXPAX@Z
_ltow
towupper
atoi
memmove
??2@YAPAXI@Z
getenv
sscanf
_except_handler3
sprintf
wcscpy
_strdup
_wtoi
wcslen
_ftol
free
_initterm
_adjust_fdiv
malloc
_onexit
__dllonexit

gdi32

CreateCompatibleDC
CreateDCA
GetClipBox
GdiFlush
SetPixel
GetPixel
ExtTextOutW
SetBkColor
SelectPalette
FillRgn
CombineRgn
CreateRectRgnIndirect
CreatePalette
GetStockObject
GetTextExtentPoint32W
SetTextColor
SetBkMode
BitBlt
CreateDIBSection
StretchBlt
SetStretchBltMode
CreateDCW
GetObjectW
StretchDIBits
SetDIBitsToDevice
EnumFontFamiliesExW
SetTextCharacterExtra
SetDIBColorTable
GetDeviceCaps
DeleteObject
GetDCOrgEx
EqualRgn
ExtCreateRegion
CreateRectRgn
CreateFontIndirectW
GetSystemPaletteEntries
GetDIBits
PatBlt
CreateSolidBrush
SelectObject
DeleteDC
RealizePalette
CreateCompatibleBitmap

user32

SetTimer
SendMessageW
GetWindowThreadProcessId
LoadStringW
GetDC
ReleaseDC
GetMessageW
TranslateMessage
PostMessageW
KillTimer
IsWindow
ReplyMessage
GetMonitorInfoW
MonitorFromWindow
wsprintfA
SetRect
EqualRect
GetSystemMetrics
IsWindowVisible
IsRectEmpty
SendDlgItemMessageW
EndDialog
DialogBoxParamW
GetDlgItem
MessageBoxW
SystemParametersInfoW
GetDlgItemInt
EnableWindow
GetWindowRect
UnhookWindowsHookEx
InvalidateRect
SetWindowsHookExW
EnumDisplayDevicesW
EnumDisplayMonitors
ClientToScreen
GetClientRect
SetRectEmpty
MapWindowPoints
ScreenToClient
IntersectRect
ChangeDisplaySettingsExA
MonitorFromRect
GetWindowPlacement
IsIconic
GetParent
GetWindowLongW
CharNextW
DispatchMessageW
GetQueueStatus
RegisterWindowMessageW
SetWindowLongW
PostThreadMessageW
wvsprintfW
MsgWaitForMultipleObjects
PeekMessageW
wsprintfW
AdjustWindowRectEx
DefWindowProcW
CreateWindowExW
RegisterClassW
LoadCursorW
GetClassInfoW
IsZoomed
SetParent
SetDlgItemTextW
CreateDialogParamW
DestroyWindow
InSendMessage
FillRect
OffsetRect
ChangeDisplaySettingsExW
GetWindowTextW
SetWindowTextW
MoveWindow
SetForegroundWindow
ShowWindow
GetForegroundWindow
SetWindowPos
UpdateWindow
GetKeyboardState
SetKeyboardState
LoadImageW
DestroyCursor
SetCursor
BeginPaint
EndPaint
GetDesktopWindow

advapi32

RegCreateKeyExW
RegQueryInfoKeyW
RegCreateKeyW
RegSetValueW
RegSetValueExW
RegOpenKeyExW
RegDeleteValueW
RegEnumValueW
RegEnumKeyExW
RegDeleteKeyW
RegOpenKeyW
RegQueryValueExW
RegCloseKey
RegQueryValueW
RegFlushKey

ole32

CLSIDFromString
CreateBindCtx
CoCreateFreeThreadedMarshaler
MkParseDisplayName
CreateStreamOnHGlobal
StringFromCLSID
StgOpenStorage
StgIsStorageFile
IIDFromString
CoTaskMemRealloc
CoTaskMemFree
StringFromGUID2
CoTaskMemAlloc
CoInitialize
CoFreeUnusedLibraries
CoUninitialize
CoCreateInstance

oleaut32

SysAllocStringLen
SysStringLen
SafeArrayCreate
SafeArrayDestroy
SafeArrayAccessData
SafeArrayUnaccessData
VariantClear
VARIANT_UserSize
VARIANT_UserMarshal
VARIANT_UserUnmarshal
VARIANT_UserFree
SysFreeString
SysAllocString
LoadTypeLi
RegisterTypeLi
VariantCopy
VariantChangeType
LoadRegTypeLi
SetErrorInfo
SysReAllocString
VariantInit

winmm

waveOutGetVolume
waveOutSetVolume
waveOutWrite
waveOutUnprepareHeader
waveOutRestart
waveOutReset
waveOutPrepareHeader
waveOutPause
waveOutOpen
waveOutGetPosition
waveOutGetErrorTextW
waveOutGetDevCapsW
waveOutClose
waveOutGetNumDevs
midiOutReset
midiStreamOpen
midiStreamProperty
midiOutGetNumDevs
mixerGetNumDevs
mixerGetLineInfoW
mixerGetDevCapsW
mixerGetLineControlsW
mixerSetControlDetails
mixerGetControlDetailsW
midiStreamOut
midiOutUnprepareHeader
midiStreamRestart
midiOutPrepareHeader
midiStreamPause
midiStreamPosition
midiOutGetErrorTextW
midiStreamClose
timeKillEvent
timeGetDevCaps
timeBeginPeriod
timeEndPeriod
timeSetEvent
timeGetTime

rpcrt4

NdrDllGetClassObject
NdrDllCanUnloadNow
NdrCStdStubBuffer_Release
NdrCStdStubBuffer2_Release
NdrDllRegisterProxy
NdrDllUnregisterProxy
NdrStubCall2
NdrStubForwardingFunction
CStdStubBuffer_DebugServerRelease
CStdStubBuffer_DebugServerQueryInterface
CStdStubBuffer_CountRefs
CStdStubBuffer_IsIIDSupported
CStdStubBuffer_Invoke
CStdStubBuffer_Disconnect
CStdStubBuffer_Connect
CStdStubBuffer_AddRef
CStdStubBuffer_QueryInterface
IUnknown_Release_Proxy
IUnknown_QueryInterface_Proxy
NdrOleFree
NdrOleAllocate
NdrClientCall2
IUnknown_AddRef_Proxy

Exports

Exports

AMGetErrorTextA
AMGetErrorTextW
AmpFactorToDB
DBToAmpFactor
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
GetProxyDllInfo

Sections

.text
Size: 1012KB - Virtual size: 1011KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.orpc
Size: 512B - Virtual size: 503B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 74KB - Virtual size: 221KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 772KB - Virtual size: 772KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 56KB - Virtual size: 56KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
stream.sys
.dll windows:5 windows x86 arch:x86

ca22d950bf7e98a5e31b693039cad74b

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_WDM_DRIVER

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

stream.pdb

Imports

ntoskrnl.exe

IoFreeMdl
KefAcquireSpinLockAtDpcLevel
MmMapLockedPagesSpecifyCache
IoWriteErrorLogEntry
IoAllocateErrorLogEntry
KeSetEvent
InterlockedDecrement
IoFreeIrp
IofCompleteRequest
IoCancelIrp
ZwQueryValueKey
RtlInitUnicodeString
KeWaitForSingleObject
IofCallDriver
ExAllocatePoolWithTag
KeInitializeEvent
MmResetDriverPaging
KeSetTimer
KeCancelTimer
ExQueueWorkItem
PoRequestPowerIrp
InterlockedIncrement
PoCallDriver
MmMapIoSpace
ZwClose
RtlFreeUnicodeString
RtlAnsiStringToUnicodeString
RtlInitAnsiString
sprintf
IoOpenDeviceRegistryKey
IoAllocateIrp
IoAllocateMdl
IoAcquireCancelSpinLock
ExFreePool
MmBuildMdlForNonPagedPool
InterlockedExchange
IoBuildSynchronousFsdRequest
MmPageEntireDriver
IoGetDriverObjectExtension
IoBuildDeviceIoControlRequest
KeResetEvent
PoStartNextPowerIrp
ZwSetValueKey
IoOpenDeviceInterfaceRegistryKey
IoSetDeviceInterfaceState
IoRegisterDeviceInterface
IoStopTimer
MmUnmapIoSpace
IoDisconnectInterrupt
wcscpy
wcslen
IoCreateDevice
ObfReferenceObject
ZwEnumerateKey
ZwOpenKey
_snwprintf
swprintf
IoGetDeviceProperty
RtlIntegerToUnicodeString
IoStartTimer
IoConnectInterrupt
KeSynchronizeExecution
IoGetDmaAdapter
KeInitializeTimer
KeInitializeDpc
KeInitializeSpinLock
IoDetachDevice
IoDeleteDevice
IoInitializeTimer
IoAttachDeviceToDeviceStack
IoAllocateDriverObjectExtension
DbgBreakPoint
IoGetDeviceInterfaces
KeDelayExecutionThread
ObfDereferenceObject
ProbeForRead
KeInsertQueueDpc
IoReleaseCancelSpinLock
memmove
ObReferenceObjectByHandle
IoFileObjectType
ExGetPreviousMode
IoGetRelatedDeviceObject
KeTickCount
KeBugCheckEx
KefReleaseSpinLockFromDpcLevel
RtlUnwind

hal

KfRaiseIrql
KfLowerIrql
ExReleaseFastMutex
KeQueryPerformanceCounter
ExAcquireFastMutex
KfAcquireSpinLock
KfReleaseSpinLock

ks.sys

KsUnserializeObjectPropertiesFromRegistry
KsDiscardEvent
KsAllocateExtraData
KsProbeStreamIrp
KsFreeObjectHeader
KsAllocateObjectHeader
KsUnregisterWorker
KsRegisterWorker
KsDispatchIrp
KsAddIrpToCancelableQueue
KsRemoveIrpFromCancelableQueue
KsFreeDeviceHeader
KsAllocateDeviceHeader
KsSetMajorFunctionHandler
KsNullDriverUnload
KsGenerateEventList
KsGenerateEvent
KsCacheMedium
KsDispatchFastReadFailure
KsDispatchFastIoDeviceControlFailure
KsDispatchInvalidDeviceRequest
KsPropertyHandler
KsEnableEvent
KsDisableEvent
KsMethodHandler
KsPinPropertyHandler
KsCreateDefaultAllocator
KsSynchronousIoControlDevice
KsTopologyPropertyHandler
KsStreamIo
KsQueueWorkItem
KsSetTargetDeviceObject
KsFreeEventList
KsValidateClockCreateRequest
KsValidateConnectRequest
KsPinDataIntersection

Exports

Exports

DllInitialize
DllUnload
StreamClassAbortOutstandingRequests
StreamClassCallAtNewPriority
StreamClassCompleteRequestAndMarkQueueReady
StreamClassDebugAssert
StreamClassDebugPrint
StreamClassDeviceNotification
StreamClassFilterReenumerateStreams
StreamClassGetDmaBuffer
StreamClassGetNextEvent
StreamClassGetPhysicalAddress
StreamClassLogError
StreamClassPnPAddDeviceWorker
StreamClassQueryMasterClock
StreamClassQueryMasterClockSync
StreamClassReadWriteConfig
StreamClassReenumerateStreams
StreamClassRegisterAdapter
StreamClassRegisterFilterWithNoKSPins
StreamClassScheduleTimer
StreamClassStreamNotification

Sections

.text
Size: 17KB - Virtual size: 17KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 768B - Virtual size: 728B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 128B - Virtual size: 32B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

PAGE
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.edata
Size: 896B - Virtual size: 880B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

INIT
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
swenum.sys
.sys windows:5 windows x86 arch:x86

2b29cc5a8e62f78b659fb1c44e574507

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_WDM_DRIVER

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

swenum.pdb

Imports

ntoskrnl.exe

IofCompleteRequest
IoDeleteDevice
IoCreateDevice
IofCallDriver
PoCallDriver
PoStartNextPowerIrp
KeTickCount

ks.sys

KsCreateBusEnumObject
KsGetBusEnumPnpDeviceObject
KsServiceBusEnumPnpRequest
KsIsBusEnumChildDevice
KsServiceBusEnumCreateRequest
KsInstallBusEnumInterface
KsRemoveBusEnumInterface
KsGetBusEnumIdentifier

Sections

.text
Size: 384B - Virtual size: 298B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 256B - Virtual size: 198B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 128B - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

PAGE
Size: 640B - Virtual size: 556B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

INIT
Size: 640B - Virtual size: 600B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 128B - Virtual size: 124B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
DirectX/DirectX9/dxsetup.exe
.exe windows:5 windows x86 arch:x86

4450b53726ee9c67ff8c34237d39a8b1

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

DXSETUP.pdb

Imports

kernel32

GetSystemDirectoryA
GetModuleHandleA
CreateThread
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
lstrcatA
CreateMutexA
SetErrorMode
GetModuleFileNameA
GetCurrentDirectoryA
GetCurrentProcess
CreateFileA
GetFileSize
ReadFile
CloseHandle
lstrlenA
lstrcpyA
FindFirstFileA
FindClose
GetLastError
lstrcmpiA
GetVersionExA
LoadLibraryA
GetProcAddress
GetProcessHeap
SetEndOfFile
GetLocaleInfoA
GetStringTypeW
GetStringTypeA
SetFilePointer
FlushFileBuffers
SetStdHandle
InterlockedExchange
RtlUnwind
HeapReAlloc
VirtualAlloc
InitializeCriticalSection
GetCPInfo
GetOEMCP
GetACP
LCMapStringW
MultiByteToWideChar
LCMapStringA
VirtualQuery
GetSystemInfo
VirtualProtect
FreeLibrary
GetWindowsDirectoryA
OutputDebugStringA
lstrcpynA
GetStartupInfoA
GetCommandLineA
GetLocalTime
ExitProcess
WriteFile
GetStdHandle
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetFileType
DeleteCriticalSection
TlsFree
SetLastError
TlsSetValue
TlsGetValue
TlsAlloc
HeapDestroy
HeapCreate
VirtualFree
HeapFree
EnterCriticalSection
LeaveCriticalSection
HeapAlloc

advapi32

RegCloseKey
OpenProcessToken
LookupPrivilegeValueA
RegDeleteValueA
RegSetValueExA
RegCreateKeyExA
RegOpenKeyExA
AdjustTokenPrivileges

gdi32

GetDeviceCaps
CreateFontIndirectA
SelectObject
CreateCompatibleDC
DeleteDC
StretchBlt
GetObjectA
DeleteObject

user32

MessageBoxA
LoadStringA
LoadImageA
wsprintfA
SystemParametersInfoA
SendDlgItemMessageA
SetWindowTextA
GetWindowLongA
PostMessageA
GetParent
SetDlgItemTextA
GetDlgItem
SendMessageA
ShowWindow
SetWindowLongA
GetAsyncKeyState
ExitWindowsEx
EnumWindows
GetWindowTextA
GetClassNameA
SetForegroundWindow
SetFocus
CharLowerA
GetDC
ReleaseDC

version

GetFileVersionInfoSizeA
VerQueryValueA
GetFileVersionInfoA

comctl32

CreatePropertySheetPageA
PropertySheetA
ord17

Sections

.text
Size: 49KB - Virtual size: 49KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 407KB - Virtual size: 407KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
PopCDRun.exe
.exe windows:4 windows x86 arch:x86

c0c20e80ff1a426c56c9adbdf81e1937

Code Sign

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

15/06/2007, 00:00

Not After

14/06/2012, 23:59

Subject

CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04/12/2003, 00:00

Not After

03/12/2013, 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

41:91:a1:5a:39:78:df:cf:49:65:66:38:1d:4c:75:c2
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

16/07/2004, 00:00

Not After

15/07/2014, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

3c:61:df:38:d5:bb:38:36:a8:b4:4b:98:5c:50:44:79
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US

Not Before

01/09/2006, 00:00

Not After

21/09/2009, 23:59

Subject

CN=PopCap Games,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=PopCap Games,L=Seattle,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

Signer

Actual PE Digest

Digest Algorithm

PE Digest Matches

false

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

c:\p4_source\tools\PopCDRun\Release\PopCDRun.pdb

Imports

version

GetFileVersionInfoA
GetFileVersionInfoSizeA
VerQueryValueA

kernel32

MoveFileA
SetEndOfFile
CreateFileW
GetLocaleInfoW
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
SetStdHandle
IsValidLocale
EnumSystemLocalesA
GetUserDefaultLCID
GetStringTypeW
GetStringTypeA
GetLocaleInfoA
MoveFileExA
GetSystemTimeAsFileTime
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
ReadFile
FlushFileBuffers
GetConsoleMode
GetConsoleCP
WriteFile
VirtualAlloc
VirtualFree
HeapCreate
FindFirstFileA
FindClose
GetVolumeInformationA
LoadLibraryA
GetProcAddress
FreeLibrary
GetWindowsDirectoryA
GetVersionExA
GetModuleFileNameA
MulDiv
GetExitCodeProcess
CreateFileA
GetFileTime
GetSystemDirectoryA
CloseHandle
WideCharToMultiByte
GetModuleHandleA
HeapDestroy
IsValidCodePage
GetOEMCP
GetACP
GetFileType
GetStdHandle
SetHandleCount
SetFilePointer
HeapSize
InterlockedIncrement
InterlockedDecrement
Sleep
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RaiseException
RtlUnwind
GetLastError
HeapFree
CreateDirectoryA
GetCommandLineA
HeapAlloc
GetProcessHeap
GetStartupInfoA
HeapReAlloc
LCMapStringA
MultiByteToWideChar
LCMapStringW
GetCPInfo
ExitProcess
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
GetCurrentThreadId

user32

GetWindowRect
SetCursor
LoadCursorA
MoveWindow
RegisterClassA
GetDesktopWindow
CreateWindowExA
ShowWindow
GetDC
ReleaseDC
SetTimer
GetMessageA
TranslateMessage
DispatchMessageA
LoadImageA
BeginPaint
DrawTextW
EndPaint
GetClientRect
ClientToScreen
GetCursorPos
WindowFromPoint
DefWindowProcA
PostQuitMessage
DialogBoxParamA
EndDialog
GetDlgItem
GetFocus
SetFocus
GetWindowTextA
MessageBoxW
SendMessageA
InvalidateRect
SystemParametersInfoA

gdi32

GetDeviceCaps
CreateFontA
GetObjectA
CreateCompatibleDC
SelectObject
SetBkMode
BitBlt
SetTextColor
CreateSolidBrush
CreatePen
Rectangle
DeleteObject
DeleteDC
CreateCompatibleBitmap

advapi32

RegSetValueExA
RegCloseKey
RegOpenKeyExA
RegQueryValueExA
RegCreateKeyA

shell32

ShellExecuteExA

ole32

CoInitialize
CoCreateInstance
CoUninitialize

oleaut32

VariantInit
VariantClear

Sections

.text
Size: 216KB - Virtual size: 213KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 32KB - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 28KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
images/background.bmp
images/btn_install_RO.bmp
images/btn_play.bmp
images/btn_play_RO.bmp
images/btn_quit_RO.bmp
images/popcapurl_RO.bmp
images/trial01_RO.bmp
images/trial02_RO.bmp
images/trial03_RO.bmp
images/trial04_RO.bmp
installers/Bejeweled2TrialSetup.exe
.exe windows:4 windows x86 arch:x86

8d9abeb48c63383c5e688c3edf84514e

Code Sign

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

15/06/2007, 00:00

Not After

14/06/2012, 23:59

Subject

CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04/12/2003, 00:00

Not After

03/12/2013, 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

41:91:a1:5a:39:78:df:cf:49:65:66:38:1d:4c:75:c2
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

16/07/2004, 00:00

Not After

15/07/2014, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

3c:61:df:38:d5:bb:38:36:a8:b4:4b:98:5c:50:44:79
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US

Not Before

01/09/2006, 00:00

Not After

21/09/2009, 23:59

Subject

CN=PopCap Games,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=PopCap Games,L=Seattle,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

Signer

Actual PE Digest

Digest Algorithm

PE Digest Matches

false

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

comctl32

ord17

version

GetFileVersionInfoSizeA
GetFileVersionInfoA
VerQueryValueA

kernel32

LoadLibraryA
GetDiskFreeSpaceA
GetModuleFileNameA
GetModuleHandleA
GetVersionExA
LocalFree
DeleteFileA
InterlockedDecrement
FindFirstFileW
LoadLibraryExW
FindClose
FindNextFileW
ExpandEnvironmentStringsW
CompareStringW
CompareStringA
GetLocaleInfoW
SetEndOfFile
IsValidCodePage
IsValidLocale
EnumSystemLocalesA
GetLocaleInfoA
GetUserDefaultLCID
CloseHandle
ResetEvent
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetFileAttributesA
GetOEMCP
GetACP
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
SetStdHandle
SetHandleCount
HeapSize
GetCurrentThreadId
SetLastError
TlsFree
TlsSetValue
TlsAlloc
TlsGetValue
GetStdHandle
GetFileType
VirtualAlloc
CopyFileA
GetProcAddress
GetLastError
MultiByteToWideChar
MulDiv
GetExitCodeProcess
CreateEventA
Sleep
GetWindowsDirectoryA
SetEvent
WaitForSingleObject
FreeLibrary
GetSystemDirectoryA
WideCharToMultiByte
GetSystemTimeAsFileTime
LocalFileTimeToFileTime
SetFileAttributesA
SetFileTime
CreateFileA
DosDateTimeToFileTime
SetEnvironmentVariableA
lstrlenA
CreateDirectoryA
FlushFileBuffers
VirtualFree
HeapCreate
HeapDestroy
GetStringTypeW
RemoveDirectoryA
GetStringTypeA
LCMapStringW
LCMapStringA
GetCPInfo
HeapReAlloc
RtlUnwind
RaiseException
GetStartupInfoA
GetProcessHeap
GetCommandLineA
ExitProcess
FindFirstFileA
FindNextFileA
InterlockedIncrement
InterlockedCompareExchange
InterlockedExchange
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
HeapFree
HeapAlloc
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
ReadFile
SetFilePointer
WriteFile
GetConsoleCP
GetConsoleMode
ExitThread
ResumeThread
CreateThread

user32

SetWindowPos
EndDeferWindowPos
LoadStringW
EndPaint
SetTimer
SendDlgItemMessageA
FillRect
KillTimer
DrawTextA
DrawIconEx
DialogBoxParamW
GetClientRect
SendMessageA
BeginPaint
GetDC
DrawFocusRect
GetWindowTextA
DestroyIcon
GetWindowTextW
CreateWindowExA
ReleaseDC
IsWindowUnicode
GetDlgItem
EndDialog
GetDesktopWindow
GetSysColor
GetWindowLongA
EnumChildWindows
GetSysColorBrush
IsDlgButtonChecked
AdjustWindowRectEx
DeferWindowPos
MessageBoxW
BeginDeferWindowPos
GetSystemMetrics
SetWindowTextA
LoadImageA
SendMessageW
MapWindowPoints
EnableWindow
DialogBoxParamA
SetWindowTextW

gdi32

GetTextExtentPoint32W
SetTextColor
DeleteDC
CreateFontA
GetDeviceCaps
SetBkColor
SetBkMode
DeleteObject
SelectObject
CreateCompatibleDC
GetTextMetricsA
GetObjectA
GetStockObject
CreateSolidBrush
BitBlt

advapi32

RegQueryValueExA
RegDeleteKeyA
RegCloseKey
RegOpenKeyA
RegOpenKeyExA
RegCreateKeyExA
RegCreateKeyA
RegSetValueExA

shell32

SHGetPathFromIDListA
SHBrowseForFolderA
ShellExecuteA
SHGetPathFromIDListW
SHGetMalloc
ShellExecuteExA
SHBrowseForFolderW

ole32

CoUninitialize
StringFromGUID2
CoInitializeSecurity
CoCreateGuid
CoInitialize
CoCreateInstance

oleaut32

SysFreeString
SysAllocString
VariantInit
VariantClear

Sections

.text
Size: 264KB - Virtual size: 263KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 52KB - Virtual size: 49KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 32KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
installers/BookwormTrialSetup.exe
.exe windows:4 windows x86 arch:x86

8d9abeb48c63383c5e688c3edf84514e

Code Sign

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

15/06/2007, 00:00

Not After

14/06/2012, 23:59

Subject

CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04/12/2003, 00:00

Not After

03/12/2013, 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

41:91:a1:5a:39:78:df:cf:49:65:66:38:1d:4c:75:c2
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

16/07/2004, 00:00

Not After

15/07/2014, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

3c:61:df:38:d5:bb:38:36:a8:b4:4b:98:5c:50:44:79
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US

Not Before

01/09/2006, 00:00

Not After

21/09/2009, 23:59

Subject

CN=PopCap Games,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=PopCap Games,L=Seattle,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

Signer

Actual PE Digest

Digest Algorithm

PE Digest Matches

false

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

comctl32

ord17

version

GetFileVersionInfoSizeA
GetFileVersionInfoA
VerQueryValueA

kernel32

LoadLibraryA
GetDiskFreeSpaceA
GetModuleFileNameA
GetModuleHandleA
GetVersionExA
LocalFree
DeleteFileA
InterlockedDecrement
FindFirstFileW
LoadLibraryExW
FindClose
FindNextFileW
ExpandEnvironmentStringsW
CompareStringW
CompareStringA
GetLocaleInfoW
SetEndOfFile
IsValidCodePage
IsValidLocale
EnumSystemLocalesA
GetLocaleInfoA
GetUserDefaultLCID
CloseHandle
ResetEvent
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetFileAttributesA
GetOEMCP
GetACP
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
SetStdHandle
SetHandleCount
HeapSize
GetCurrentThreadId
SetLastError
TlsFree
TlsSetValue
TlsAlloc
TlsGetValue
GetStdHandle
GetFileType
VirtualAlloc
CopyFileA
GetProcAddress
GetLastError
MultiByteToWideChar
MulDiv
GetExitCodeProcess
CreateEventA
Sleep
GetWindowsDirectoryA
SetEvent
WaitForSingleObject
FreeLibrary
GetSystemDirectoryA
WideCharToMultiByte
GetSystemTimeAsFileTime
LocalFileTimeToFileTime
SetFileAttributesA
SetFileTime
CreateFileA
DosDateTimeToFileTime
SetEnvironmentVariableA
lstrlenA
CreateDirectoryA
FlushFileBuffers
VirtualFree
HeapCreate
HeapDestroy
GetStringTypeW
RemoveDirectoryA
GetStringTypeA
LCMapStringW
LCMapStringA
GetCPInfo
HeapReAlloc
RtlUnwind
RaiseException
GetStartupInfoA
GetProcessHeap
GetCommandLineA
ExitProcess
FindFirstFileA
FindNextFileA
InterlockedIncrement
InterlockedCompareExchange
InterlockedExchange
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
HeapFree
HeapAlloc
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
ReadFile
SetFilePointer
WriteFile
GetConsoleCP
GetConsoleMode
ExitThread
ResumeThread
CreateThread

user32

SetWindowPos
EndDeferWindowPos
LoadStringW
EndPaint
SetTimer
SendDlgItemMessageA
FillRect
KillTimer
DrawTextA
DrawIconEx
DialogBoxParamW
GetClientRect
SendMessageA
BeginPaint
GetDC
DrawFocusRect
GetWindowTextA
DestroyIcon
GetWindowTextW
CreateWindowExA
ReleaseDC
IsWindowUnicode
GetDlgItem
EndDialog
GetDesktopWindow
GetSysColor
GetWindowLongA
EnumChildWindows
GetSysColorBrush
IsDlgButtonChecked
AdjustWindowRectEx
DeferWindowPos
MessageBoxW
BeginDeferWindowPos
GetSystemMetrics
SetWindowTextA
LoadImageA
SendMessageW
MapWindowPoints
EnableWindow
DialogBoxParamA
SetWindowTextW

gdi32

GetTextExtentPoint32W
SetTextColor
DeleteDC
CreateFontA
GetDeviceCaps
SetBkColor
SetBkMode
DeleteObject
SelectObject
CreateCompatibleDC
GetTextMetricsA
GetObjectA
GetStockObject
CreateSolidBrush
BitBlt

advapi32

RegQueryValueExA
RegDeleteKeyA
RegCloseKey
RegOpenKeyA
RegOpenKeyExA
RegCreateKeyExA
RegCreateKeyA
RegSetValueExA

shell32

SHGetPathFromIDListA
SHBrowseForFolderA
ShellExecuteA
SHGetPathFromIDListW
SHGetMalloc
ShellExecuteExA
SHBrowseForFolderW

ole32

CoUninitialize
StringFromGUID2
CoInitializeSecurity
CoCreateGuid
CoInitialize
CoCreateInstance

oleaut32

SysFreeString
SysAllocString
VariantInit
VariantClear

Sections

.text
Size: 264KB - Virtual size: 263KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 52KB - Virtual size: 49KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 32KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
installers/CDProtect.exe
.exe windows:4 windows x86 arch:x86

675ddea07fe7506aaf146b0741e35457

Code Sign

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

15/06/2007, 00:00

Not After

14/06/2012, 23:59

Subject

CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04/12/2003, 00:00

Not After

03/12/2013, 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

41:91:a1:5a:39:78:df:cf:49:65:66:38:1d:4c:75:c2
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

16/07/2004, 00:00

Not After

15/07/2014, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

3c:61:df:38:d5:bb:38:36:a8:b4:4b:98:5c:50:44:79
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US

Not Before

01/09/2006, 00:00

Not After

21/09/2009, 23:59

Subject

CN=PopCap Games,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=PopCap Games,L=Seattle,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

Signer

Actual PE Digest

Digest Algorithm

PE Digest Matches

false

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

c:\p4_source\tools\CDProtect\Release\CDProtect.pdb

Imports

kernel32

GetVersionExA
FreeLibrary
GetProcAddress
LoadLibraryA
GetVolumeInformationA
GetTickCount
CloseHandle
CreateFileA
GetModuleFileNameA
GetModuleHandleA
SetEnvironmentVariableA
GetSystemTimeAsFileTime
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RaiseException
RtlUnwind
GetLastError
HeapFree
HeapReAlloc
HeapAlloc
WideCharToMultiByte
GetCommandLineA
GetProcessHeap
GetStartupInfoA
MultiByteToWideChar
ReadFile
EnterCriticalSection
LeaveCriticalSection
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
SetHandleCount
GetStdHandle
GetFileType
DeleteCriticalSection
SetFilePointer
WriteFile
GetConsoleCP
GetConsoleMode
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
LCMapStringA
LCMapStringW
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
HeapSize
FlushFileBuffers
GetCurrentDirectoryA
SetCurrentDirectoryA
Sleep
ExitProcess
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetCurrentProcessId
SetStdHandle
InitializeCriticalSection
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
SetEndOfFile
CreateDirectoryA

user32

MessageBoxW

Sections

.text
Size: 132KB - Virtual size: 129KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 20KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 176B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
installers/InsaniquariumTrialSetup.exe
.exe windows:4 windows x86 arch:x86

8d9abeb48c63383c5e688c3edf84514e

Code Sign

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

15/06/2007, 00:00

Not After

14/06/2012, 23:59

Subject

CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04/12/2003, 00:00

Not After

03/12/2013, 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

41:91:a1:5a:39:78:df:cf:49:65:66:38:1d:4c:75:c2
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

16/07/2004, 00:00

Not After

15/07/2014, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

3c:61:df:38:d5:bb:38:36:a8:b4:4b:98:5c:50:44:79
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US

Not Before

01/09/2006, 00:00

Not After

21/09/2009, 23:59

Subject

CN=PopCap Games,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=PopCap Games,L=Seattle,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

Signer

Actual PE Digest

Digest Algorithm

PE Digest Matches

false

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

comctl32

ord17

version

GetFileVersionInfoSizeA
GetFileVersionInfoA
VerQueryValueA

kernel32

LoadLibraryA
GetDiskFreeSpaceA
GetModuleFileNameA
GetModuleHandleA
GetVersionExA
LocalFree
DeleteFileA
InterlockedDecrement
FindFirstFileW
LoadLibraryExW
FindClose
FindNextFileW
ExpandEnvironmentStringsW
CompareStringW
CompareStringA
GetLocaleInfoW
SetEndOfFile
IsValidCodePage
IsValidLocale
EnumSystemLocalesA
GetLocaleInfoA
GetUserDefaultLCID
CloseHandle
ResetEvent
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetFileAttributesA
GetOEMCP
GetACP
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
SetStdHandle
SetHandleCount
HeapSize
GetCurrentThreadId
SetLastError
TlsFree
TlsSetValue
TlsAlloc
TlsGetValue
GetStdHandle
GetFileType
VirtualAlloc
CopyFileA
GetProcAddress
GetLastError
MultiByteToWideChar
MulDiv
GetExitCodeProcess
CreateEventA
Sleep
GetWindowsDirectoryA
SetEvent
WaitForSingleObject
FreeLibrary
GetSystemDirectoryA
WideCharToMultiByte
GetSystemTimeAsFileTime
LocalFileTimeToFileTime
SetFileAttributesA
SetFileTime
CreateFileA
DosDateTimeToFileTime
SetEnvironmentVariableA
lstrlenA
CreateDirectoryA
FlushFileBuffers
VirtualFree
HeapCreate
HeapDestroy
GetStringTypeW
RemoveDirectoryA
GetStringTypeA
LCMapStringW
LCMapStringA
GetCPInfo
HeapReAlloc
RtlUnwind
RaiseException
GetStartupInfoA
GetProcessHeap
GetCommandLineA
ExitProcess
FindFirstFileA
FindNextFileA
InterlockedIncrement
InterlockedCompareExchange
InterlockedExchange
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
HeapFree
HeapAlloc
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
ReadFile
SetFilePointer
WriteFile
GetConsoleCP
GetConsoleMode
ExitThread
ResumeThread
CreateThread

user32

SetWindowPos
EndDeferWindowPos
LoadStringW
EndPaint
SetTimer
SendDlgItemMessageA
FillRect
KillTimer
DrawTextA
DrawIconEx
DialogBoxParamW
GetClientRect
SendMessageA
BeginPaint
GetDC
DrawFocusRect
GetWindowTextA
DestroyIcon
GetWindowTextW
CreateWindowExA
ReleaseDC
IsWindowUnicode
GetDlgItem
EndDialog
GetDesktopWindow
GetSysColor
GetWindowLongA
EnumChildWindows
GetSysColorBrush
IsDlgButtonChecked
AdjustWindowRectEx
DeferWindowPos
MessageBoxW
BeginDeferWindowPos
GetSystemMetrics
SetWindowTextA
LoadImageA
SendMessageW
MapWindowPoints
EnableWindow
DialogBoxParamA
SetWindowTextW

gdi32

GetTextExtentPoint32W
SetTextColor
DeleteDC
CreateFontA
GetDeviceCaps
SetBkColor
SetBkMode
DeleteObject
SelectObject
CreateCompatibleDC
GetTextMetricsA
GetObjectA
GetStockObject
CreateSolidBrush
BitBlt

advapi32

RegQueryValueExA
RegDeleteKeyA
RegCloseKey
RegOpenKeyA
RegOpenKeyExA
RegCreateKeyExA
RegCreateKeyA
RegSetValueExA

shell32

SHGetPathFromIDListA
SHBrowseForFolderA
ShellExecuteA
SHGetPathFromIDListW
SHGetMalloc
ShellExecuteExA
SHBrowseForFolderW

ole32

CoUninitialize
StringFromGUID2
CoInitializeSecurity
CoCreateGuid
CoInitialize
CoCreateInstance

oleaut32

SysFreeString
SysAllocString
VariantInit
VariantClear

Sections

.text
Size: 264KB - Virtual size: 263KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 52KB - Virtual size: 49KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 32KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
installers/PeggleSetup.exe
.exe windows:4 windows x86 arch:x86

8d9abeb48c63383c5e688c3edf84514e

Code Sign

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

15/06/2007, 00:00

Not After

14/06/2012, 23:59

Subject

CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04/12/2003, 00:00

Not After

03/12/2013, 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

41:91:a1:5a:39:78:df:cf:49:65:66:38:1d:4c:75:c2
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

16/07/2004, 00:00

Not After

15/07/2014, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

3c:61:df:38:d5:bb:38:36:a8:b4:4b:98:5c:50:44:79
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US

Not Before

01/09/2006, 00:00

Not After

21/09/2009, 23:59

Subject

CN=PopCap Games,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=PopCap Games,L=Seattle,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

Signer

Actual PE Digest

Digest Algorithm

PE Digest Matches

false

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

comctl32

ord17

version

GetFileVersionInfoSizeA
GetFileVersionInfoA
VerQueryValueA

kernel32

LoadLibraryA
GetDiskFreeSpaceA
GetModuleFileNameA
GetModuleHandleA
GetVersionExA
LocalFree
DeleteFileA
InterlockedDecrement
FindFirstFileW
LoadLibraryExW
FindClose
FindNextFileW
ExpandEnvironmentStringsW
CompareStringW
CompareStringA
GetLocaleInfoW
SetEndOfFile
IsValidCodePage
IsValidLocale
EnumSystemLocalesA
GetLocaleInfoA
GetUserDefaultLCID
CloseHandle
ResetEvent
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetFileAttributesA
GetOEMCP
GetACP
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
SetStdHandle
SetHandleCount
HeapSize
GetCurrentThreadId
SetLastError
TlsFree
TlsSetValue
TlsAlloc
TlsGetValue
GetStdHandle
GetFileType
VirtualAlloc
CopyFileA
GetProcAddress
GetLastError
MultiByteToWideChar
MulDiv
GetExitCodeProcess
CreateEventA
Sleep
GetWindowsDirectoryA
SetEvent
WaitForSingleObject
FreeLibrary
GetSystemDirectoryA
WideCharToMultiByte
GetSystemTimeAsFileTime
LocalFileTimeToFileTime
SetFileAttributesA
SetFileTime
CreateFileA
DosDateTimeToFileTime
SetEnvironmentVariableA
lstrlenA
CreateDirectoryA
FlushFileBuffers
VirtualFree
HeapCreate
HeapDestroy
GetStringTypeW
RemoveDirectoryA
GetStringTypeA
LCMapStringW
LCMapStringA
GetCPInfo
HeapReAlloc
RtlUnwind
RaiseException
GetStartupInfoA
GetProcessHeap
GetCommandLineA
ExitProcess
FindFirstFileA
FindNextFileA
InterlockedIncrement
InterlockedCompareExchange
InterlockedExchange
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
HeapFree
HeapAlloc
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
ReadFile
SetFilePointer
WriteFile
GetConsoleCP
GetConsoleMode
ExitThread
ResumeThread
CreateThread

user32

SetWindowPos
EndDeferWindowPos
LoadStringW
EndPaint
SetTimer
SendDlgItemMessageA
FillRect
KillTimer
DrawTextA
DrawIconEx
DialogBoxParamW
GetClientRect
SendMessageA
BeginPaint
GetDC
DrawFocusRect
GetWindowTextA
DestroyIcon
GetWindowTextW
CreateWindowExA
ReleaseDC
IsWindowUnicode
GetDlgItem
EndDialog
GetDesktopWindow
GetSysColor
GetWindowLongA
EnumChildWindows
GetSysColorBrush
IsDlgButtonChecked
AdjustWindowRectEx
DeferWindowPos
MessageBoxW
BeginDeferWindowPos
GetSystemMetrics
SetWindowTextA
LoadImageA
SendMessageW
MapWindowPoints
EnableWindow
DialogBoxParamA
SetWindowTextW

gdi32

GetTextExtentPoint32W
SetTextColor
DeleteDC
CreateFontA
GetDeviceCaps
SetBkColor
SetBkMode
DeleteObject
SelectObject
CreateCompatibleDC
GetTextMetricsA
GetObjectA
GetStockObject
CreateSolidBrush
BitBlt

advapi32

RegQueryValueExA
RegDeleteKeyA
RegCloseKey
RegOpenKeyA
RegOpenKeyExA
RegCreateKeyExA
RegCreateKeyA
RegSetValueExA

shell32

SHGetPathFromIDListA
SHBrowseForFolderA
ShellExecuteA
SHGetPathFromIDListW
SHGetMalloc
ShellExecuteExA
SHBrowseForFolderW

ole32

CoUninitialize
StringFromGUID2
CoInitializeSecurity
CoCreateGuid
CoInitialize
CoCreateInstance

oleaut32

SysFreeString
SysAllocString
VariantInit
VariantClear

Sections

.text
Size: 264KB - Virtual size: 263KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 52KB - Virtual size: 49KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 32KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
installers/ZumaTrialSetup.exe
.exe windows:4 windows x86 arch:x86

8d9abeb48c63383c5e688c3edf84514e

Code Sign

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

15/06/2007, 00:00

Not After

14/06/2012, 23:59

Subject

CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04/12/2003, 00:00

Not After

03/12/2013, 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

41:91:a1:5a:39:78:df:cf:49:65:66:38:1d:4c:75:c2
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

16/07/2004, 00:00

Not After

15/07/2014, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

3c:61:df:38:d5:bb:38:36:a8:b4:4b:98:5c:50:44:79
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US

Not Before

01/09/2006, 00:00

Not After

21/09/2009, 23:59

Subject

CN=PopCap Games,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=PopCap Games,L=Seattle,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

Signer

Actual PE Digest

Digest Algorithm

PE Digest Matches

false

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

comctl32

ord17

version

GetFileVersionInfoSizeA
GetFileVersionInfoA
VerQueryValueA

kernel32

LoadLibraryA
GetDiskFreeSpaceA
GetModuleFileNameA
GetModuleHandleA
GetVersionExA
LocalFree
DeleteFileA
InterlockedDecrement
FindFirstFileW
LoadLibraryExW
FindClose
FindNextFileW
ExpandEnvironmentStringsW
CompareStringW
CompareStringA
GetLocaleInfoW
SetEndOfFile
IsValidCodePage
IsValidLocale
EnumSystemLocalesA
GetLocaleInfoA
GetUserDefaultLCID
CloseHandle
ResetEvent
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetFileAttributesA
GetOEMCP
GetACP
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
SetStdHandle
SetHandleCount
HeapSize
GetCurrentThreadId
SetLastError
TlsFree
TlsSetValue
TlsAlloc
TlsGetValue
GetStdHandle
GetFileType
VirtualAlloc
CopyFileA
GetProcAddress
GetLastError
MultiByteToWideChar
MulDiv
GetExitCodeProcess
CreateEventA
Sleep
GetWindowsDirectoryA
SetEvent
WaitForSingleObject
FreeLibrary
GetSystemDirectoryA
WideCharToMultiByte
GetSystemTimeAsFileTime
LocalFileTimeToFileTime
SetFileAttributesA
SetFileTime
CreateFileA
DosDateTimeToFileTime
SetEnvironmentVariableA
lstrlenA
CreateDirectoryA
FlushFileBuffers
VirtualFree
HeapCreate
HeapDestroy
GetStringTypeW
RemoveDirectoryA
GetStringTypeA
LCMapStringW
LCMapStringA
GetCPInfo
HeapReAlloc
RtlUnwind
RaiseException
GetStartupInfoA
GetProcessHeap
GetCommandLineA
ExitProcess
FindFirstFileA
FindNextFileA
InterlockedIncrement
InterlockedCompareExchange
InterlockedExchange
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
HeapFree
HeapAlloc
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
ReadFile
SetFilePointer
WriteFile
GetConsoleCP
GetConsoleMode
ExitThread
ResumeThread
CreateThread

user32

SetWindowPos
EndDeferWindowPos
LoadStringW
EndPaint
SetTimer
SendDlgItemMessageA
FillRect
KillTimer
DrawTextA
DrawIconEx
DialogBoxParamW
GetClientRect
SendMessageA
BeginPaint
GetDC
DrawFocusRect
GetWindowTextA
DestroyIcon
GetWindowTextW
CreateWindowExA
ReleaseDC
IsWindowUnicode
GetDlgItem
EndDialog
GetDesktopWindow
GetSysColor
GetWindowLongA
EnumChildWindows
GetSysColorBrush
IsDlgButtonChecked
AdjustWindowRectEx
DeferWindowPos
MessageBoxW
BeginDeferWindowPos
GetSystemMetrics
SetWindowTextA
LoadImageA
SendMessageW
MapWindowPoints
EnableWindow
DialogBoxParamA
SetWindowTextW

gdi32

GetTextExtentPoint32W
SetTextColor
DeleteDC
CreateFontA
GetDeviceCaps
SetBkColor
SetBkMode
DeleteObject
SelectObject
CreateCompatibleDC
GetTextMetricsA
GetObjectA
GetStockObject
CreateSolidBrush
BitBlt

advapi32

RegQueryValueExA
RegDeleteKeyA
RegCloseKey
RegOpenKeyA
RegOpenKeyExA
RegCreateKeyExA
RegCreateKeyA
RegSetValueExA

shell32

SHGetPathFromIDListA
SHBrowseForFolderA
ShellExecuteA
SHGetPathFromIDListW
SHGetMalloc
ShellExecuteExA
SHBrowseForFolderW

ole32

CoUninitialize
StringFromGUID2
CoInitializeSecurity
CoCreateGuid
CoInitialize
CoCreateInstance

oleaut32

SysFreeString
SysAllocString
VariantInit
VariantClear

Sections

.text
Size: 264KB - Virtual size: 263KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 52KB - Virtual size: 49KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 32KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
installers/cdinstallsm.dat
installers/cdprops.xml
popcdrun.txt
popcdrun_props.xml

Sharing

General

Malware Config

Signatures

Files

bd61e5a03c0af93c60b30cf39184a4a7

Headers

File Characteristics

Imports

kernel32

msvcrt

advapi32

user32

ole32

oleaut32

Exports

Exports

Sections

.text Size: 43KB - Virtual size: 43KB

.data Size: 2KB - Virtual size: 2KB

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 3KB - Virtual size: 2KB

4cab68af3a9d463423ff5188da351b39

Headers

File Characteristics

Imports

kernel32

ntdll

ole32

oleaut32

user32

advapi32

rpcrt4

Exports

Exports

Sections

.text Size: 241KB - Virtual size: 240KB

.orpc Size: 512B - Virtual size: 297B

.data Size: 18KB - Virtual size: 20KB

.rsrc Size: 183KB - Virtual size: 182KB

.reloc Size: 27KB - Virtual size: 26KB

244f9b8f61fbb054334418ba678d871c

Headers

File Characteristics

Imports

kernel32

msvcrt

winmm

advapi32

user32

ole32

Exports

Exports

Sections

.text Size: 49KB - Virtual size: 48KB

.data Size: 512B - Virtual size: 308B

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 3KB - Virtual size: 3KB

1dbce2677ed0e9df3b7a82b88863a3d4

Headers

File Characteristics

Imports

kernel32

msvcrt

advapi32

user32

ole32

ksproxy.ax

Exports

Exports

Sections

.text Size: 11KB - Virtual size: 11KB

.data Size: 512B - Virtual size: 248B

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 2KB - Virtual size: 1KB

6b2b65bafa0dd0cf733b55e44cdea375

Headers

DLL Characteristics

File Characteristics

PDB Paths

.text
Size: 43KB - Virtual size: 43KB

.data
Size: 2KB - Virtual size: 2KB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 3KB - Virtual size: 2KB

.text
Size: 241KB - Virtual size: 240KB

.orpc
Size: 512B - Virtual size: 297B

.data
Size: 18KB - Virtual size: 20KB

.rsrc
Size: 183KB - Virtual size: 182KB

.reloc
Size: 27KB - Virtual size: 26KB

.text
Size: 49KB - Virtual size: 48KB

.data
Size: 512B - Virtual size: 308B

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 3KB - Virtual size: 3KB

.text
Size: 11KB - Virtual size: 11KB

.data
Size: 512B - Virtual size: 248B

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 2KB - Virtual size: 1KB

.text
Size: 6KB - Virtual size: 5KB

.rdata
Size: 256B - Virtual size: 211B

.data
Size: 128B - Virtual size: 52B

.edata
Size: 896B - Virtual size: 834B

PAGECONS
Size: 768B - Virtual size: 652B

INIT
Size: 768B - Virtual size: 674B

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 384B - Virtual size: 278B

.text
Size: 11KB - Virtual size: 11KB

.rdata
Size: 768B - Virtual size: 761B

.data
Size: 1024B - Virtual size: 980B

PAGECONS
Size: 256B - Virtual size: 144B

INIT
Size: 640B - Virtual size: 554B

.rsrc
Size: 1024B - Virtual size: 1024B

.reloc
Size: 512B - Virtual size: 436B

.text
Size: 10KB - Virtual size: 9KB

.data
Size: 512B - Virtual size: 232B

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 1KB - Virtual size: 1KB

.text
Size: 36KB - Virtual size: 35KB

.data
Size: 512B - Virtual size: 256B